Containers — Docker, Podman, LXC, containerd

Docker Blog (10 articles)

From Security Blocked to Prod Ready: ClickHouse on Docker Hardened Images

De la sécurité bloquée à Prod Ready: ClickHouse sur les images durcies Docker

30/04/2026 15:55

In November 2025, a team self-hosting Langfuse, an open-source LLM observability platform, on Kubernetes uploaded their ClickHouse image to AWS ECR as part of their production preparation. They found that the pipeline scanner had returned three critical vulnerabilities - not in ClickHouse, but in...

Trivy, KICS, and the shape of supply chain attacks so far in 2026

Trivy, KICS, et la forme des attaques de la chaîne d'approvisionnement jusqu'à présent en 2026

23/04/2026 15:32

Catching the KICS push: what happened, and the case for open, fast collaboration In the past few weeks we've worked through two supply chain compromises on Docker Hub with a similar shape: first Trivy, now Checkmarx KICS. In both cases, stolen publisher credentials were used to push malicious ima...

Why MicroVMs: The Architecture Behind Docker Sandboxes

Pourquoi MicroVM : l'architecture derrière les boîtes à sable Docker

16/04/2026 17:14

Last week, we launched Docker Sandboxes with a bold goal: to deliver the strongest agent isolation in the market. This post unpacks that claim, how microVMs enable it, and some of the architectural choices we made in this approach. The Problem With Every Other Approach Every sandboxing model asks...

Why We Chose the Harder Path: Docker Hardened Images, One Year Later

Pourquoi nous choisissons le chemin le plus dur: Docker Images durcies, un an plus tard

14/04/2026 21:48

We're coming up on a year since launching Docker Hardened Images (DHI) last May, and crossing a milestone earlier this month made me stop and reflect on what we've actually been building. Earlier this month, we crossed over 500k daily pulls of DHIs, and over 25k continuously patched OS level arti...

How to Analyze Hugging Face for Arm64 Readiness

Comment analyser visage hugging pour Arm64 préparation

13/04/2026 15:59

This post is a collaboration between Docker and Arm, demonstrating how Docker MCP Toolkit and the Arm MCP Server work together to scan Hugging Face Spaces for Arm64 Readiness. In our previous post, we walked through migrating a legacy C++ application with AVX2 intrinsics to Arm64 using Docker MCP...

Reclaim Developer Hours through Smarter Vulnerability Prioritization with Docker and Mend.io

Reclaim Developer Hours grâce à une vulnérabilité plus intelligente Priorité avec Docker et Mend.io

08/04/2026 18:23

We recently announced the integration between Mend.io and Docker Hardened Images (DHI) provides a seamless framework for managing container security. By automatically distinguishing between base image vulnerabilities and application-layer risks, it uses VEX statements to differentiate between exp...

Defending Your Software Supply Chain: What Every Engineering Team Should Do Now

Défendre votre chaîne d'approvisionnement logiciel : ce que chaque équipe d'ingénierie devrait faire maintenant

02/04/2026 18:14

The software supply chain is under sustained attack. Not from a single threat actor or a single incident, but from an ecosystem-wide campaign that has been escalating for months and shows no signs of slowing down. This week, axios, the HTTP client library downloaded 83 million times per week and ...

Gemma 4 is Here: Now Available on Docker Hub

Gemma 4 est ici: maintenant disponible sur Docker Hub

02/04/2026 16:16

Docker Hub is quickly becoming the home for AI models, serving millions of developers and bringing together a curated lineup that spans lightweight edge models to high-performance LLMs, all packaged as OCI artifacts. Today, we’re excited to welcome Gemma 4, the latest generation of lightweight, s...

Docker Offload now Generally Available: The Full Power of Docker, for Every Developer, Everywhere.

Docker Offload maintenant Généralement disponible: La pleine puissance de Docker, pour chaque développeur, partout.

02/04/2026 13:00

Docker Desktop is one of the most widely used developer tools in the world, yet for millions of enterprise developers, running it simply hasn’t been an option. The environments they rely on, such as virtual desktop infrastructure (VDI) platforms and managed desktops, often lack the resources or c...

Run and Iterate on LLMs Faster with Docker Model Runner on DGX Station

Exécuter et itérer sur LLMs plus rapidement avec Docker Model Runner sur DGX Station

31/03/2026 17:57

Back in October, we showed how Docker Model Runner on the NVIDIA DGX Spark makes it remarkably easy to run large AI models locally with the same familiar Docker experience developers already trust. That post struck a chord: hundreds of developers discovered that a compact desktop system paired wi...

Docker Compose Releases (10 articles)

v5.1.3

15/04/2026 14:31

What's Changed 🐛 Fixes fix: provider output handling and watch rebuild re-invocation by @glours in #13732 🔧 Internal Add Docker Desktop Logs view hints and navigation shortcut by @glours in #13721 Build and push Docker Desktop module image on release by @glours in #13726 Fix typo in SECURITY....

v5.1.2

09/04/2026 09:21

What's Changed 🐛 Fixes Fix TTY timer rendering when duration length changes by @MaybeSam05 in #13634 Fix up attach filtering by @false200 in #13664 Preserve ssh:// URL scheme when resolving Dockerfile path by @ssam18 in #13669 Initialize and pass envFiles map in processExtends by @Mohamed-Moumni...

v5.1.1

20/03/2026 05:34

What's Changed 🐛 Fixes Only pass ConsoleSize to ExecAttach when TTY is enabled by @mikesir87 in #13616 Fix deadlock in ttyWriter.Done() by @maks2134 in #13640 ⚙️ Dependencies update to go1.25.8 by @thaJeztah in #13622 bump github.com/moby/moby/api from 1.53.0 to 1.54.0 by @dependabot[bot] in #...

v5.1.0

24/02/2026 16:42

What's Changed 🐛 Fixes emit container status events after network reconnection (fixes #13524) by @MaheshThakur9152 in #13529 Fix potential nil pointer dereference in container event monitoring by @Nepomuk5665 in #13551 compose: recreate container when mounted image digest changes by @ibrahimypr ...

v5.0.2

21/01/2026 07:42

What's Changed 🐛 Fixes Fixed progress UI to adapt to terminal width by @ndeloof in #13519 Removed warning when no explicit build has been requested. by @ndeloof in #13493 Restored runtime_flags support in models by @ilopezluna in #13460 Added service name completion to down command by @bmo-at in...

v5.0.1

18/12/2025 14:22

What's Changed 🐛 Fixes Restored support for COMPOSE_COMPATIBILITY by @ndeloof in #13424 Fixed grammatical errors and improve clarity in code. by @xiaolinny in #13429 Fixed broken run --quiet. by @ndeloof in #13430 Fixed SDK example by @ndeloof in #13416 Added a check buildx version is set before...

v5.0.0 "Mont Blanc"

03/12/2025 16:00

Major changes in this release: Compose can now officially be used as a SDK to be integrated into third-party softwares Internal builder has been removed, build is delegated to Docker Bake (same as docker build command) Why "v5" ? We decided to skip 3.0.0 for next major release after docker Com...

v5.0.0-rc.2

13/11/2025 08:52

What's Changed Next release will be major version v5.x by @ndeloof in #13375 images command should display image Created time or N/A if not available by @ndeloof in #13376 Full Changelog: v5.0.0-rc.1...v5.0.0-rc.2

v5.0.0-rc.1

12/11/2025 16:34

What's Changed This is the first (candidate) release for next major Docker Compose release. To avoid confusion with the "v2" and "v3" legacy compose file formats, we decided to directly jump to version 5.x Major changes in this release: Compose can now officially be used as a SDK to be integrate...

v2.40.3

30/10/2025 09:35

What's Changed 🐛 Fixes Fix OCI compose override support by @ndeloof #13311 Fix help output for "exec --no-tty" option by @tonyo #13314 Prompt default implementation to prevent a panic by @ndeloof #13317 Run hooks on restart by @ndeloof #13321 Fix(run): Ensure images exist only for the target ser...

Podman Blog (10 articles)

Closing the Performance Gap: Automating Podman Benchmarks Across Linux, macOS, and Windows

Combler l'écart de performance : Automatiser les repères Podman à travers Linux, macOS et Windows

27/04/2026 18:23

“It works on my machine” is a dangerous phrase in our line of work. While Podman runs natively on Linux, utilizing the kernel directly, the experience on macOS and Windows is different. These platforms require a virtual machine to provide the necessary Linux environment. This virtuali...

Podman, Buildah, and Skopeo import paths

Pistes d'importation Podman, Buildah et Skopeo

17/04/2026 15:24

Several of the containers projects are going to change their go import paths.  Some of this work had been when we made the monorepo container-libs; where we moved storage, common, and image into a singular repository.  The moves that are taking place now are not nearly as extreme and th...

Faster Podman Workloads on macOS and Windows

Charges de travail Podman plus rapides sur macOS et Windows

18/12/2025 16:24

If you are a developer using Podman on macOS or Windows, you might have noticed that certain operations, specifically building images with large contexts or loading large image tarballs, can sometimes feel slower compared to native Linux or Docker. I’ve spent some time investigating this pe...

Wrestling with Netlink: Adding Conntrack Support to Podman as an LFX Mentee

Lutte avec Netlink: Ajout du support Conntrack à Podman en tant que LFX Mentee

12/12/2025 17:39

In this post, I am going to share my journey as an LFX Mentee. I worked with the Podman Container Tools organization to solve a specific networking issue in Netavark using Rust. What is LFX Mentorship? It is a remote program organized by the Linux Foundation. It is designed to help people start c...

BoltDB Database Migration

Migration de la base de données BoltDB

10/12/2025 20:58

Starting with Podman 5.7, some of our users have noticed warning messages being printed by Podman when they run commands, looking a little like this: The deprecated BoltDB database driver is in use. This driver will be removed in the upcoming Podman 6.0 release in mid 2026. It is advised that you...

Accelerating Parallel Layer Creation

Accélérer la création de couches parallèles

05/12/2025 16:00

Earlier this year, my colleague Jan Rodak worked on Accelerating Parallel Layer Removal. It worked out so well that we wanted to tackle the other side of the problem: Layer Creation. Layer creation is even slower than removal as we must write all data to disk and not just just unlink files so the...

Those pesky system connections

Ces connexions système

05/11/2025 21:00

Development of Podman 6 is heating up! I have another usability improvement to share with you that some people see when running the Podman CLI. This case usually came up when people had created multiple machines. It was also more prevalent on Macs where people were using both libkrun and applehv ...

Podman 6: machine usability improvements

Podman 6: amélioration de la facilité d'utilisation de la machine

31/10/2025 18:10

I wanted to introduce a significant change we are making in Podman 6 for our machine function. To understand the problem and change, we first need to establish that Podman machine is based on a concept of providers.  The provider is a generic term that describes how Podman runs the Linux vir...

Disturbances in the force …

Perturbations dans la force ...

28/10/2025 19:15

Podman 6 development is under way. Last week, we began the release process for Podman 5.7. At the same time, we switched our main branch over to version `6.0.0-dev`. We anticipate delivering Podman 6 in early 2026. Learn more by following our upstream development for the exciting changes and expe...

Migration to the Container-Libs Monorepo is Complete

Migration vers le Container-Libs Monorepo est complet

27/08/2025 13:50

We’re happy to share that the migration of our core container libraries to a single monorepo is now complete! What Changed As announced earlier this month, we consolidated three repositories (containers/common, containers/storage and containers/image) into a single monorepo: All active developmen...

Podman Releases (10 articles)

v5.8.2

14/04/2026 17:56

Security This release addresses CVE-2026-33414, where the podman machine init --image command when run on Windows using the Hyper-V backend can run Powershell-escaped commands from the user-specified image path on in a Powershell session on the host (GHSA-hc8w-h2mf-hp59). Bugfixes Fixed a bug ...

v5.8.1

11/03/2026 20:03

Bugfixes Fixed a critical bug where automatic migration from BoltDB to SQLite after a reboot could perform a partial migration, with some containers in SQLite and some remaining in BoltDB, when Quadlets were in use (#28215). For those who encountered this bug with 5.8.0 there is no way to automa...

v5.8.0

v5,8.0

12/02/2026 18:58

Features The podman quadlet install command can now install files which contain multiple separate Quadlet files. The files must be separated with a --- delimeter on a new line, and each section must begin with a # FileName=<name> line to name the new Quadlet (#27384). Quadlet .container fi...

v5.8.0-RC1

10/02/2026 20:34

Features The podman quadlet install command can now install files which contain multiple separate Quadlet files. The files must be separated with a --- delimeter on a new line, and each section must begin with a # FileName=<name> line to name the new Quadlet (#27384). Quadlet .container fi...

v5.7.1

10/12/2025 16:38

Bugfixes Fixed a bug where adding devices to emulated Linux containers on FreeBSD did not work. Fixed a bug where the podman system migrate command could panic under certain circumstances when run rootless. Fixed a bug where Podman would sometimes not correctly recreate the rootless user namespa...

v5.7.0

11/11/2025 19:04

Security This release addresses CVE-2025-52881, where arbitrary write gadgets and procfs write redirects allowed runc container escape and denial of service. Features The remote Podman client and podman system service API server now support encrypting connections with TLS and mTLS, including c...

v5.7.0-RC3

05/11/2025 16:45

Features The remote Podman client and podman system service API server now support encrypting connections with TLS and mTLS, including client authentication by certificate (#24583). The podman system connection add command can now create connections to TCP sockets with TLS and mTLS encryption. T...

v5.7.0-RC2

30/10/2025 14:34

Features The remote Podman client and podman system service API server now support encrypting connections with TLS and mTLS, including client authentication by certificate (#24583). The podman system connection add command can now create connections to TCP sockets with TLS and mTLS encryption. T...

v5.7.0-rc1

24/10/2025 17:47

v5.7.0-rc1

v5.6.2

30/09/2025 19:42

Bugfixes Fixed a bug where stopping the podman machine start command with SIGPIPE could result in machine state being stuck as "Starting" (#26949). Fixed a bug where podman build would fail with a permissions error when building Containerfiles using a non-root user and cache mounts (#27044). Mi...

Linux Containers News (0 articles)

Flux indisponible.

LXC Releases (10 articles)

LXC 7.0 LTS

30/04/2026 01:30

Announcement https://discuss.linuxcontainers.org/t/lxc-7-0-lts-has-been-released/26612 What's Changed meson: fix build on NixOS by @mihalicyn in #4428 Don't fail veth creation if ipv6 is disabled by @mihalicyn in #4432 Update lxc-attach.sgml.in by @MMFuba in #4442 Update lxc-execute.sgml.in by @...

LXC 6.0.6 LTS

LXC 6,0.6 LTS

27/02/2026 05:48

Announcement: https://discuss.linuxcontainers.org/t/lxc-6-0-6-lts-has-been-released/26294 Full Changelog: v6.0.5...v6.0.6

LXC 6.0.5 LTS

LXC 6,0.5 LTS

16/08/2025 16:07

Announcement: https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438 Full Changelog: v6.0.4...v6.0.5

LXC 6.0.4 LTS

04/04/2025 14:35

Announcement: https://discuss.linuxcontainers.org/t/lxc-6-0-4-lts-has-been-released/23390 Full Changelog: v6.0.3...v6.0.4

LXC 6.0.3 LTS

20/12/2024 19:29

Full Changelog: v6.0.2...v6.0.3

LXC 6.0.2 LTS

20/12/2024 19:28

Full Changelog: v6.0.1...v6.0.2

LXC 6.0.1 LTS

27/06/2024 04:46

No content.

LXC 6.0.0 LTS

27/06/2024 04:45

https://discuss.linuxcontainers.org/t/lxc-6-0-lts-has-been-released/19567

lxc-5.0.3

Lxc-5.0.3

25/07/2023 22:00

LXC 5.0.3

lxc-5.0.2

16/01/2023 21:08

LXC 5.0.2

LXD Releases (10 articles)

LXD 6.8

23/04/2026 12:19

Announcement Announcement: https://discourse.ubuntu.com/t/lxd-6-8-has-been-released/80650 Release notes: https://documentation.ubuntu.com/lxd/latest/reference/release-notes/release-notes-6.8/ What's Changed Less negative grep by @simondeziel in #17751 Use source file size when recreating volum...

LXD 6.7

26/02/2026 13:15

Announcement Announcement: https://discourse.ubuntu.com/t/lxd-6-7-has-been-released/77656 Release notes: https://documentation.ubuntu.com/lxd/latest/reference/release-notes/release-notes-6.7/ What's Changed tests: Wait for raft roles to update by @kadinsayani in #17049 github: add PR template ...

LXD 5.0.6 LTS

20/02/2026 19:21

Announcement https://discourse.ubuntu.com/t/lxd-5-0-6-lts-has-been-released/77113 What's Changed Full Changelog: lxd-5.0.5...lxd-5.0.6

LXD 6.6

26/02/2026 13:15

Announcement Announcement: https://discourse.ubuntu.com/t/lxd-6-6-has-been-released/72476 Release notes: https://documentation.ubuntu.com/lxd/latest/reference/release-notes/release-notes-6.6/ Release notes https://documentation.ubuntu.com/lxd/latest/reference/release-notes/release-notes-6.6/ Wh...

LXD 5.0.5 LTS

18/09/2025 08:42

Announcement https://discourse.ubuntu.com/t/lxd-5-0-5-lts-has-been-released/67598 What's Changed Full Changelog: lxd-5.0.4...lxd-5.0.5

LXD 5.21.4 LTS

04/09/2025 14:18

Announcement https://discourse.ubuntu.com/t/lxd-5-21-4-lts-has-been-released/66602 What's Changed Full Changelog: lxd-5.21.3...lxd-5.21.4

LXD 6.5

LXD 6,5

01/08/2025 13:27

Announcement https://discourse.ubuntu.com/t/lxd-6-5-has-been-released/64873 What's Changed feat(csp) harden content security policy for the ui serving to include only an allowed list of domains by @edlerd in #15675 Linter: Fix remaining musttag issues across the entire codebase by @roosterfish i...

LXD 6.4

28/05/2025 09:22

Announcement https://discourse.ubuntu.com/t/lxd-6-4-has-been-released/61433 What's Changed github: Wait for microovn to be ready before bootstrapping the cluster by @simondeziel in #15174 tests/suites/network.sh: Add test for fetching bridge info by @ghadi-rahme in #15170 Storage: Newtype for Da...

LXD 6.3

13/03/2025 16:37

Announcement https://discourse.ubuntu.com/t/lxd-6-3-has-been-released/56974 What's Changed LXC: Create config paths when no local daemons (from Incus) by @kadinsayani in #14550 lxd/instance: Lock image access (from Incus) by @MusicDin in #14546 Add workflow to run e2e tests from lxd-ui by @edler...

LXD 5.21.3

23/01/2025 14:49

Announcement https://discourse.ubuntu.com/t/lxd-5-21-3-lts-has-been-released/53768 What's Changed Full Changelog: lxd-5.21.2...lxd-5.21.3

containerd Releases (10 articles)

containerd 2.3.0

conteneurd 2.3.0

30/04/2026 19:35

Welcome to the v2.3.0 release of containerd! The third minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the third time-based release for containerd. Starting with containerd 2.3, the project has moved to release cadence aligned with t...

containerd API 1.11.0

API conteneurisée 1.11.0

30/04/2026 03:58

Welcome to the api/v1.11.0 release of containerd! The 12th release for the containerd 1.x API aligns with the containerd 2.3 release. Highlights Add transfer types for container filesystem copy (#13165) Update sandbox API to include spec field (#12840) Image Distribution Add os.features suppor...

containerd 2.3.0-rc.1

conteneurd 2.3.0-rc.1

29/04/2026 07:23

Welcome to the v2.3.0-rc.1 release of containerd! This is a pre-release of containerd The third minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the third time-based release for containerd. Starting with containerd 2.3, the project ha...

containerd API 1.11.0-rc.0

API conteneurisée 1.11.0-rc.0

29/04/2026 00:22

Welcome to the api/v1.11.0-rc.0 release of containerd! This is a pre-release of containerd The 12th release for the containerd 1.x API aligns with the containerd 2.3 release. Highlights Add transfer types for container filesystem copy (#13165) Introduce shim bootstrap protocol (#12786) Update sa...

containerd 2.3.0-rc.0

conteneur 2.3.0-rc.0

28/04/2026 05:09

Welcome to the v2.3.0-rc.0 release of containerd! This is a pre-release of containerd The third minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the third time-based release for containerd. Starting with containerd 2.3, the project ha...

containerd 2.3.0-beta.2

contenant 2,3.0-bêta.2

17/04/2026 18:15

Welcome to the v2.3.0-beta.2 release of containerd! This is a pre-release of containerd The third minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the third time-based release for containerd. Starting with containerd 2.3, the project ...

containerd API 1.11.0-beta.2

API conteneurisée 1.11.0-beta.2

15/04/2026 14:30

Welcome to the api/v1.11.0-beta.2 release of containerd! This is a pre-release of containerd The 12th release for the containerd 1.x API aligns with the containerd 2.3 release. Highlights Add transfer types for container filesystem copy (#13165) Introduce shim bootstrap protocol (#12786) Update ...

containerd 2.2.3

conteneurd 2.2.3

14/04/2026 17:38

Welcome to the v2.2.3 release of containerd! The third patch release for containerd 2.2 contains various fixes and updates including a security patch. Security Updates spdystream CVE-2026-35469 Highlights Container Runtime Interface (CRI) Preserve cgroup mount options for privileged contain...

containerd 2.1.7

conteneurd 2.1.7

14/04/2026 17:10

Welcome to the v2.1.7 release of containerd! The seventh patch release for containerd 2.1 contains various fixes and updates including a security patch. Security Updates spdystream CVE-2026-35469 Highlights Container Runtime Interface (CRI) Preserve host cgroup mount options for privileged ...

containerd 2.0.8

conteneurd 2.0.8

14/04/2026 17:20

Welcome to the v2.0.8 release of containerd! The eighth patch release for containerd 2.0 includes various bug fixes and updates, including a security fix. Security Updates spdystream CVE-2026-35469 Highlights Container Runtime Interface (CRI) Sanitize error before gRPC return to prevent pos...

runc Releases (10 articles)

runc v1.5.0-rc.2 -- "いざやいざや、見に行かん"

runc v1.5.0-rc.2 -- ""

03/04/2026 05:21

This is the second release candidate of the runc 1.5.0 release. It mostly contains build fixes and improvements, but also includes a new minor feature and some deprecations. runc v1.5.0-rc.2 includes all of the patches backported to runc v1.4.2. Users are strongly encouraged to test our release c...

runc v1.4.2 -- "Я — Земля! Я своих провожаю питомцев"

ruc v1.4.2 -- ".. C'est pas vrai.

03/04/2026 00:18

This is the second patch release of the 1.4.z release series of runc. Fixed A regression in runc v1.3.0 which can result in a stuck runc exec or runc run when the container process runs for a short time. (#5208, #5210, #5216) Mount sources that need to be open on the host are now closed earli...

runc v1.3.5 -- "Lo viejo funciona!"

ruc v1.3.5 -- "Lo viejo funciona!"

17/03/2026 16:59

This is the fifth patch release of the 1.3.z release series of runc, and primarily contains a few fixes for issues found in 1.3.4. Fixed Recursive atime-related mount flags (rrelatime et al.) are now applied properly. (#5115, #5098) PR #4757 caused a regression that resulted in spurious cannot s...

runc v1.5.0-rc.1 -- "憎しみを束ねてもそれは脆い！"

runc v1.5.0-rc.1 -- ""

14/03/2026 14:21

This is the first release candidate of the runc 1.5.0 release. It contains a couple of new features, but is mostly made up of various cleanups (such as the removal of many deprecated APIs) and improvements. runc v1.5.0-rc.1 includes all of the patches backported to runc v1.4.1. Users are strongly...

runc v1.4.1 -- "La guerre n'est pas une aventure. La guerre est une maladie. Comme le typhus."

ruc v1.4.1 -- "La guerre n'est pas une aventure. La guerre est une maladie. Comme le typhus."

13/03/2026 05:06

This is the first patch release of the 1.4.z release series of runc. It primarily includes some fixes for issues found in 1.4.0. Deprecated libcontainer/configs.MPOL_* constants added in runc 1.4.0. (#5110, #5055) Added Preliminary loong64 support. (#5062, #4938) Fixed libct: fix panic in in...

runc v1.4.0 -- "路漫漫其修远兮，吾将上下而求索！"

runc v1.4.0 -- ""

28/11/2025 00:38

This is the first release of the 1.4.z release branch of runc. It contains a few fixes for issues found in 1.4.0-rc.3. This version of runc supports runtime-spec v1.3 (see docs/spec-conformance.md for the few features that are still missing). This is the second release of runc following our new r...

runc v1.3.4 -- "Take me to your heart, take me to your soul."

runc v1.3.4 -- "Prends-moi à ton cœur, prends-moi à ton âme."

27/11/2025 23:35

This is the fourth patch release of the 1.3.z release series of runc, and primarily contains a few fixes for some regressions introduced in 1.3.3. Fixed libct: fix mips compilation. (#4962, #4966) When configuring a tmpfs mount, only set the mode= argument if the target path already existed. Thi...

runc v1.2.9 -- "Stars hide your fires, let me rest tonight."

Runc v1.2.9 -- "Les étoiles cachent vos feux, laissez-moi me reposer ce soir."

27/11/2025 23:35

This is the ninth patch release of the 1.2.z release series of runc, and primarily contains a few fixes for some regressions introduced in 1.2.8. Fixed libct: fix mips compilation. (#4962, #4965) When configuring a tmpfs mount, only set the mode= argument if the target path already existed. This...

runc v1.4.0-rc.3 -- "その日、人類は思い出した。"

runc v1.4.0-rc.3 -- ""

05/11/2025 09:20

NoteSome vendors were given patches corresponding to this release in advance. This public release includes two extra patches to fix regressions discovered very late during the embargo period and were thus not included in the pre-release versions. Please update to this version. Security This rele...

runc v1.3.3 -- "奴らに支配されていた恐怖を"

ruc v1.3.3 -- ""

05/11/2025 09:18

NoteSome vendors were given a pre-release version of this release. This public release includes two extra patches to fix regressions discovered very late during the embargo period and were thus not included in the pre-release versions. Please update to this version. This release contains fixes f...

crun Releases (10 articles)

1.27.1

127.1

21/04/2026 07:55

linux: fix bind mount propagation regression. Mounts hot-plugged after container start (e.g. USB drives) were invisible or owned by nobody inside the container because propagation peer groups were destroyed. utils: fix AppArmor profile inside a user namespace. cgroup: fix recursive cgroup clean...

1.27

25/03/2026 20:03

CVE-2026-30892: fix parsing in crun exec -u that could lead to the process running with the wrong user. linux: use open_tree+mount_setattr and open_tree+move_mount for device mounts, masked paths, and readonly paths. linux: use mount_setattr for readonly remounts in finalize_mounts. linux: skip ...

1.26

22/12/2025 16:05

criu: enable setting of RPC config file via annotation org.criu.config. crun also reads /etc/criu/crun.conf or /etc/criu/runc.conf for CRIU configuration. linux: run createContainer hooks before making root read-only. utils: handle NULL container passed to libcrun_open_proc_file(). container: f...

1.25.1

25/11/2025 14:49

linux: harden opens under /proc. Use fsopen, when available, to get a trusted reference to the proc file system and use it for all subsequent accesses instead of relying on the /proc path directly.

1.25

07/11/2025 14:05

cgroup: enable all accounting properties to ensure stats are readable. intelrdt: honor default closID. src: fix some double allocations on errors.

1.24

09/09/2025 20:19

linux: add support for NUMA set_mempolicy. intelrdt: add support for EnableMonitoring. linux: optimize masked paths with shared empty directory. cgroup, systemd: validate the specified ebpf program is loaded by systemd. krun: avoid failing if sev/nitro are not available. linux: limit tmpfs memor...

1.23.1

31/07/2025 20:30

exec: fix a bug where the terminal could lose some bytes when reading from the exec'ed process. utils: add bounds checking for Unix domain socket paths.

1.23

24/07/2025 20:39

krun: enable virtio-gpu. Enable and configure a virtio-gpu device if /dev/dri and /usr/libexec/virgl_render_server are present within the container. krun: add support for nitro enclaves. criu: Add support for tcp-close. linux: fix issue when RestrictAddressFamilies="AF_UNIX AF_NETLINK" is in p...

1.22

27/06/2025 13:01

crun: add a new command crun mounts to dynamically add or remove mounts from a running container. linux: add support for moving existing network devices into the container namespace as defined in the OCI specification. linux: add src-nofollow and dest-nofollow mount options for more precise cont...

1.21

28/03/2025 08:37

criu: when running under systemd, use a proxy process to initialize the cgroup so that all the container processes are restored in the correct cgroup. set HOME to "/" if the specified user is not present in the /etc/passwd file. do not fail if any of stdin/stdout/stderr is closed. cgroup: fix ha...

CNCF Blog (10 articles)

AI sandboxing is having its Kubernetes moment

AI sandboxing a son moment Kubernetes

30/04/2026 19:37

Recently, Anthropic announced that its new model, Mythos, had autonomously found and exploited zero-day vulnerabilities in every major operating system and web browser – including a 27-year-old bug that had survived decades of human review and...

The state of AI in CNCF projects: A first look at the data

L'état de l'IA dans les projets du CNCF: Un premier regard sur les données

29/04/2026 11:00

At CNCF TAG Developer Experience, we recently set out to understand how Artificial Intelligence is shaping open-source development. The response from the community has been impressive in its scale, with nearly half of our initial responses...

Kubernetes for platform teams: Leveraging k0s and k0rdent

Kubernetes pour les équipes de plate-forme: Leveraging k0s et k0rdent

27/04/2026 11:00

In our previous blog, we explored a GitOps use case for on-premises infrastructure, managing multiple clusters hosted on the k3s Kubernetes distribution using k0rdent.  But the platform engineering ecosystem is vast, and one blog barely scratches...

From Ingress NGINX to Higress: migrating 60+ resources in 30 minutes with AI

De l'Ingress NGINX à l'Higress : migration de plus de 60 ressources en 30 minutes avec AI

23/04/2026 13:37

With the official retirement of Ingress NGINX that took place in March 2026, enterprise platform teams are facing an urgent security and compliance mandate. Remaining on a retired controller leaves critical infrastructure vulnerable to unpatched security...

Auto-diagnosing Kubernetes alerts with HolmesGPT and CNCF tools

Auto-diagnostic des alertes Kubernetes avec les outils HolmesGPT et CNCF

21/04/2026 15:06

What a two-person SRE team learned building an AI investigation pipeline. Spoiler: the runbooks mattered more than the model. Why we built this At STCLab, our SRE team supports multiple Amazon EKS clusters running high-traffic production...

From public static void main to Golden Kubestronaut: The Art of unlearning

Du vide statique public principal à Golden Kubestronaut: L'Art du désapprentissage

20/04/2026 10:50

Ten years ago, my entire world fit inside a public static void main. I was a Java developer. Infrastructure? That was someone else’s problem a black box where my JAR files went to live, or quietly...

K3s on On-Prem Infrastructures the GitOps Way: Writing a Custom k0rdent Template from Scratch

K3s on-Prem Infrastructures the GitOps Way: Writing a Custom k0rdent Template from Scratch

17/04/2026 11:59

Kubernetes turns 12 this year. In that time, it’s gone from a Google side project to the operating system of modern infrastructure  running everywhere from mainframes to GPUs, across multi-cloud, hybrid, on-prem, and edge environments. The...

The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know

Le changement d'IA dans la découverte de vulnérabilité : ce que les responsables et les chercheurs de bogues doivent savoir

16/04/2026 22:29

AI models have recently drastically changed the sophistication, speed and scale of software vulnerability discovery. It is now trivial for non-experts to find real vulnerabilities in software with minimal effort and expertise. It is also now...

How To Measure the ROI of Developer Tools

Comment mesurer le ROI des outils de développement

16/04/2026 05:28

There’s been a growing emphasis in the cloud native community on investing in tools that improve developer experience. Platform engineering, accompanied with the rise of projects like Backstage, is all about making developers more productive by...

ingress-nginx to Envoy Gateway migration on CNCF internal services cluster

la migration d'Envoy Gateway sur le groupe de services internes du CNCF

13/04/2026 14:01

CNCF hosts a Kubernetes cluster to run some services for internal purposes (namely; codimd, GUAC, kcp). The Kubernetes Project announced the ingress-nginx retirement (not to be confused with NGINX or NGINX Ingress Controller), which also affects the above mentioned Cluster. So...

The New Stack — Containers (20 articles)

Microsoft wants to make service mesh invisible

Microsoft veut rendre le mesh de service invisible

08/04/2026 17:11

At KubeCon EU 2026 in Amsterdam, I sat down with Mitch Connors, a principal software engineer at Microsoft and Istio The post Microsoft wants to make service mesh invisible appeared first on The New Stack.

Edera spent years calling KVM less secure. Here’s why it changed its mind.

Edera a passé des années à appeler KVM moins en sécurité. Voilà pourquoi il a changé d'avis.

25/03/2026 21:22

Edera, a top Xen hypervisor company, is shifting gears and will start supporting KVM as well this summer. If you The post Edera spent years calling KVM less secure. Here’s why it changed its mind. appeared first on The New Stack.

Minimus aims to solve one of open-source’s long-festering problems

Minimus vise à résoudre l'un des problèmes d'open-source

24/03/2026 10:00

Container security company Minimus has outlined a new initiative to help open-source project maintainers strengthen the security and integrity of The post Minimus aims to solve one of open-source’s long-festering problems appeared first on The New Stack.

How to deploy Pi-Hole with Docker and stop ads on every device on your LAN

Comment déployer Pi-Hole avec Docker et arrêter les annonces sur chaque appareil de votre réseau local

23/03/2026 14:44

How do you block ads? Most people install various and sundry ad-blocking software on their computers or add browser extensions The post How to deploy Pi-Hole with Docker and stop ads on every device on your LAN appeared first on The New Stack.

Chainguard has a fix for the open source packages your AI agents keep grabbing

Chainguard a un correctif pour les paquets open source vos agents d'IA continuent à saisir

18/03/2026 16:24

As AI coding assistants and autonomous agents dramatically accelerate software development, they’re introducing a security problem that most organizations aren’t The post Chainguard has a fix for the open source packages your AI agents keep grabbing appeared first on The New Stack.

Chainguard thinks most DevOps teams are solving container security the hard way

Chainguard pense que la plupart des équipes DevOps résolvent la sécurité des conteneurs de la manière dure

17/03/2026 20:04

Chainguard OS is great, but what if you want to customize your own Linux? Now, with the Chainguard OS Package, The post Chainguard thinks most DevOps teams are solving container security the hard way appeared first on The New Stack.

How to deploy an AI server on your Debian/Ubuntu server

Comment déployer un serveur AI sur votre serveur Debian/Ubuntu

10/03/2026 18:00

Whenever I use AI, I always opt to go with a locally installed instance. The reason for that is twofold. The post How to deploy an AI server on your Debian/Ubuntu server appeared first on The New Stack.

NanoClaw can stuff each AI agent into its own Docker container to deal with OpenClaw’s security mess

NanoClaw peut empiler chaque agent d'IA dans son propre conteneur Docker pour traiter avec OpenClaw.

07/03/2026 18:00

On the one hand, I feel a bit conflicted pointing out the recognised security issues with OpenClaw, even as serious The post NanoClaw can stuff each AI agent into its own Docker container to deal with OpenClaw’s security mess appeared first on The New Stack.

IT-Tools brings many useful developer tools into one convenient location

IT-Tools apporte de nombreux outils de développement utiles dans un emplacement pratique

06/03/2026 20:00

How many tools do you use as a developer? I’m guessing that the answer is “many.” There are token generators, The post IT-Tools brings many useful developer tools into one convenient location appeared first on The New Stack.

How WebAssembly plugins simplify Kubernetes extensibility

Comment WebAssembly plugins simplifier Kubernetes extensibilité

03/03/2026 22:00

The integration of WebAssembly (Wasm) into the Helm ecosystem streamlines the orchestration of WASI-compliant binaries across disparate environments, including OCI The post How WebAssembly plugins simplify Kubernetes extensibility appeared first on The New Stack.

Netdata is a seriously impressive server monitoring tool

Netdata est un outil de surveillance du serveur très impressionnant

26/02/2026 18:00

Every once in a while, I come across a tool that makes me lean back and go, “Wooo, that’s cool!” The post Netdata is a seriously impressive server monitoring tool appeared first on The New Stack.

Red Hat takes on Docker Desktop with its enterprise Podman Desktop build

Red Hat prend Docker Desktop avec son entreprise Podman Desktop construire

20/02/2026 21:00

Red Hat is perhaps the biggest name in enterprise Linux, but it’s also a major cloud-native player thanks to its The post Red Hat takes on Docker Desktop with its enterprise Podman Desktop build appeared first on The New Stack.

Want an easy way to manage Podman containers? Here it is.

Vous voulez un moyen facile de gérer les conteneurs Podman? Voilà.

19/02/2026 23:00

You’ve heard of Docker Desktop, right? Of course you have. Docker Desktop is a user-friendly GUI app that simplifies managing The post Want an easy way to manage Podman containers? Here it is. appeared first on The New Stack.

Simplify managing your Docker compose files with this handy tool

Simplifiez la gestion de vos fichiers Docker composer avec cet outil pratique

17/02/2026 23:00

The Docker run command is a great introduction to running containers. It’s simple, it’s quick, and it’s fairly easy to The post Simplify managing your Docker compose files with this handy tool appeared first on The New Stack.

Python virtual environments: isolation without the chaos

Environnements virtuels Python : isolement sans chaos

16/02/2026 15:00

Installing packages globally isn’t always a good idea. Different tools inside an application can require specific versions of features, functions, The post Python virtual environments: isolation without the chaos appeared first on The New Stack.

Bluefin Linux: ChromeOS simplicity meets Linux power

Bluefin Linux : la simplicité ChromeOS rencontre la puissance Linux

11/02/2026 20:00

Imagine you could use an operating system that’s as easy as ChromeOS, while also being as powerful as Linux. What The post Bluefin Linux: ChromeOS simplicity meets Linux power appeared first on The New Stack.

The hunt for truly zero-CVE container images

La recherche d'images de conteneurs vraiment zéro-CVE

10/02/2026 19:30

Vendors chasing “zero-CVE” container images on top of traditional Linux distributions are running into structural limits in upstream release models. The post The hunt for truly zero-CVE container images appeared first on The New Stack.

Chainguard’s AI-powered factory hits 500 million builds

Chainguard est une usine alimentée par l'IA atteint 500 millions de constructions

09/02/2026 15:19

Just a week after announced Chainguard Factory 2.0, the company has hit a major milestone that demonstrates the scale of The post Chainguard’s AI-powered factory hits 500 million builds appeared first on The New Stack.

Docker versus Nix: The quest for true reproducibility

Docker versus Nix: La recherche d'une véritable reproductibilité

07/02/2026 18:00

When conducting performance benchmarks, the ultimate goal is an apples-to-apples comparison. Docker, widely recognized as one of the most brilliant The post Docker versus Nix: The quest for true reproducibility appeared first on The New Stack.

How Homepage simplifies monitoring your self-hosted services

Comment Homepage simplifie la surveillance de vos services auto-organisés

06/02/2026 16:00

Slowly but surely, I’ve been migrating over to self-hosted services so I can finally cut the cord to third parties. The post How Homepage simplifies monitoring your self-hosted services appeared first on The New Stack.

Container Journal (10 articles)

OWASP Has Adopted DockSec and the Cloud Security Community Is Taking Notice

OWASP a adopté DockSec et la communauté de la sécurité en nuage prend note

30/04/2026 13:24

With more than 13,000 downloads across more than 40 countries, DockSec has earned its place as an OWASP Incubator Project by doing something most container security tools have not managed: closing the gap between what a scanner finds and what a developer can actually act on. The Open Worldwide ...

Cloud Sustainability at Scale: Why Open Source Will Define the Next Era of Green Computing

Nuage durable à l'échelle : pourquoi Open Source définira la prochaine ère de l'informatique verte

29/04/2026 09:11

Cloud sustainability is becoming critical as AI drives energy demand. Open source tools and carbon accounting help teams measure and reduce impact. The post Cloud Sustainability at Scale: Why Open Source Will Define the Next Era of Green Computing appeared first on Cloud Native Now.

Argo CD’s Rise and the Future of AI-Driven Deployments

Argo CD=L'ascension et l'avenir des déploiements pilotés par l'IA

27/04/2026 15:17

GitOps went from an emerging practice to a production standard faster than most infrastructure trends. With roughly two-thirds of organizations now running Argo CD in production, the question has shifted from whether GitOps works to what comes after basic adoption. Mike Vizard and Hong Wang, co...

Configuring NVIDIA NeMo Agent Toolkit With Docker Model Runner

Configuration de NVIDIA NeMo Agent Toolkit avec Docker Model Runner

24/04/2026 08:50

Enhancing AI Agent reliability through advanced observability using NVIDIA NeMo and Docker Model Runner (DMR). The post Configuring NVIDIA NeMo Agent Toolkit With Docker Model Runner appeared first on Cloud Native Now.

Kubernetes v1.36 Promotes Stability, Compatibility & Reproducibility

Kubernetes v1.36 Promouvoir la stabilité, la compatibilité et la reproductibilité

22/04/2026 19:00

Kubernetes v1.36 (Spring 2026) introduces 70 enhancements, including major security hardening for the Kubelet API and the debut of Workload-Aware Scheduling (WAS) for AI/ML. This release focuses on fine-grained resource health, stable volume group snapshots, and advanced node-level diagnostics ...

Dockerfile Practices are a DevOps Tax Before They are a Security Concern

Dockerfile Pratiques sont une taxe DevOps avant Ils sont une préoccupation pour la sécurité

22/04/2026 10:02

Learn how poor Dockerfile discipline creates silent technical debt and how tools like DockSec use AI and static analysis to optimize build times, reduce image sizes, and standardize DevOps workflows. The post Dockerfile Practices are a DevOps Tax Before They are a Security Concern appeared fir...

Report: Utilization of Kubernetes Infrastructure Remains Abysmal

Rapport: L'utilisation des infrastructures de Kubernetes reste abysmal

21/04/2026 13:00

An analysis of tens of thousands of Kubernetes clusters deployed on cloud services published today by CAST AI finds average CPU utilization stood at just 8% in 2025, while memory utilization was 20%. More troubling still, utilization rates of expensive graphical processor units (GPUs) stood at ...

AI-driven Kubernetes in Action: Exploring AI-Assisted Kubernetes Operations

Kubernetes en action : explorer les opérations de Kubernetes assistées par l'IA

20/04/2026 10:42

Discover how AI is transforming Kubernetes from reactive troubleshooting to proactive, intelligent automation. Learn about essential AIOps tools, resource optimization strategies, and the challenges of managing AI-enabled container orchestration at scale. The post AI-driven Kubernetes in Action...

Bring Your Own CNI: Inside VMware’s Open Kubernetes Strategy

Apportez votre propre CNI: à l'intérieur de VMwares Open Kubernetes Stratégie

16/04/2026 19:17

Kubernetes networking has always involved trade-offs, and one of the most persistent frustrations for platform teams has been getting locked into a default CNI that does not fit their specific requirements. With VKS 3.6, that constraint is going away. Teams can now bring their own CNI, whether ...

Intruder Adds Container Image Scanning to Cloud Security Platform

Intrus ajoute le scanner d'image de conteneur à la plate-forme de sécurité Cloud

14/04/2026 12:41

Intruder expands its cloud security portfolio with intuitive, agentless container image scanning. Simplify vulnerability detection across AWS, Google Cloud, and Azure registries without complex DevSecOps tools. The post Intruder Adds Container Image Scanning to Cloud Security Platform appeared ...

Phoronix (20 articles)

Linux 7.2 To Set Default DRM Scheduler Priority To "Fair", New AIE4 Hardware In AMDXDNA

Linux 7.2 Pour définir la priorité par défaut DRM Scheduler à "Fair", nouveau matériel AIE4 dans AMDXDNA

01/05/2026 00:26

Even while the Linux 7.1 merge window was still ongoing this month, the initial "drm-misc-next" pull request to DRM-Next was sent out for beginning to queue new feature material toward the Linux 7.2 kernel coming this summer...

Shotcut 26.4 Released With Timeline Improvements, Vulkan Accelerated Speech-To-Text

Shotcut 26.4 Relâché avec des améliorations du calendrier, Vulkan accéléré discours au texte

30/04/2026 21:29

Shotcut 26.4.30 shipped today as the latest and greatest version of this open-source, cross-platform video editor...

Linux Mint To Begin Publishing HWE ISOs For Better Hardware Support

Linux Monnaie pour commencer la publication des ISO HWE pour un meilleur support matériel

30/04/2026 16:53

Due to Linux Mint moving to a longer development cycle with their next release not due until December, Linux Mint developers have decided to begin regularly publishing hardware enablement "HWE" ISOs with newer Linux kernel versions to provide better support for new hardware...

CachyOS Linux Performance Leading Over Ubuntu 26.04 LTS, Fedora Workstation 44

CachyOS Linux Performance menant sur Ubuntu 26.04 LTS, Fedora Workstation 44

30/04/2026 15:45

It's not too entirely surprising given the aggressive stance that the CachyOS Linux distribution has taken on out-of-the-box performance, but for those curious, it continues largely leading over the newly-released Ubuntu 26.04 LTS and Fedora Workstation 44 distributions for the leading performanc...

AerynOS Updated With Linux 7.0, Gaming Optimized Kernel Flavor

AerynOS mis à jour avec Linux 7.0, Gaming Optimised Kernel Flavor

30/04/2026 14:57

AerynOS, the Linux distribution formerly known as Serpent OS, is out with a new monthly ISO refresh and details on other recent improvements to this original, from-scratch Linux distribution...

Linux 7.1-rc1 Showing Off Some Wins On AMD Ryzen Threadripper

Linux 7.1-rc1 montrant des gains sur AMD Ryzen Threadripper

30/04/2026 12:23

My initial testing of the Linux 7.1 development kernel on various systems in the lab continues going well. Aside from one main regression in a synthetic micro-benchmark appearing on multiple systems, not seeing much in the way of Linux 7.1 performance concerns thus far and seeing some nice perfor...

GCC 16.1 Released With AMD Zen 6 Support, Algol 68 & Many C++ Improvements

GCC 16.1 sorti avec le support AMD Zen 6, Algol 68 et plusieurs C++ Améliorations

30/04/2026 10:37

GCC 16.1 is now available as the first stable release of GCC 16 as this year's major open-source GNU compiler feature release...

3mdeb Gets More Bits Of AMD openSIL & Coreboot Working On Ryzen AM5 Motherboard

3mdeb obtient plus de bits d'AMD openSIL & Coreboot travail sur Ryzen AM5 carte mère

30/04/2026 10:28

There are two exciting initiatives taking place simultaneously by the 3mdeb consulting firm: the open-source developers are working on an open-source firmware stack for a Gigabyte EPYC server motherboard and they are also working on a similar Coreboot + AMD openSIL port to a Ryzen AM5 consumer mo...

AMD Posts Newest Linux Patches To Accelerate Page Migration For Better Performance

AMD affiche les plus récents Patches Linux pour accélérer la migration des pages pour une meilleure performance

30/04/2026 10:12

Posted to the Linux kernel mailing list this week was the newest revision of a patch series originally started in early 2025 by a NVIDIA engineer for accelerating page migration. Now being worked on by AMD engineers, this accelerated page migration via batch copies and hardware offloading continu...

Servo Browser Engine Seeing Progress On FreeBSD Support

Servo Browser Engine Voir les progrès sur FreeBSD Support

30/04/2026 09:52

Following the recent Servo 0.1 release, the Servo project has published their latest monthly status report to highlight recent development efforts around this modern open-source browser engine...

CPPC v4 Support Being Worked On NVIDIA For The Linux ACPI Driver

CPPC v4 Support à travailler sur NVIDIA pour le pilote Linux ACPI

30/04/2026 09:45

Last year with the ACPI 6.6 specification release came revised Collaborative Processor Performance Control (CPPC) support for enhancing the capabilities around this standard for OS management of the performance of CPU cores using an abstract performance scale. That CPPC v4 support is now being wo...

The Intel Lunar Lake CPU Performance Gains On Linux Over The Past Year

La performance du processeur Intel Lunar Lake gagne sur Linux au cours de l'année écoulée

29/04/2026 17:30

Recently I ran benchmarks looking at the Xe2 graphics performance gains on Intel Lunar Lake over the past year with what's shipped by Ubuntu and comparing against our original tests of the Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition. With those Lunar Lake iGPU benchmarks out of the way, here is...

Linux's sched_ext Sees A Bunch Of Bug Fixes Following Increased AI Code Review

Linux sched ext voit un paquet de corrections de bugs suite à l'augmentation de la révision du code AI

29/04/2026 15:47

Just days after the Linux 7.1-rc1 kernel release, the Linux kernel's extensible scheduler class "sched_ext" is seeing a lot of bug fixes. Many of these bug fixes aren't just from the Linux 7.1 merge window but a number date back many kernel cycles. This uptick in bug fixes for sched_ext is coming...

OpenCL Introducing Cooperative Matrix Extensions For Machine Learning

OpenCL Introduction d'extensions de matrice coopérative pour l'apprentissage automatique

29/04/2026 15:13

Back in 2023 the Vulkan API introduced its initial Cooperative Matrix extension and necessary SPIR-V integration for helping with machine learning / AI inferencing use. Since then the cooperative matrix support has continued to be built upon for helping Vulkan in AI/ML areas. Now the OpenCL API i...

Rust-Written Zed 1.0 Code Editor Released

Rust-Written Zed 1.0 éditeur de code publié

29/04/2026 15:02

Zed, the cross platform, open-source text/code editor written by the developers behind the Atom editor, has finally reached version 1.0...

Hygon C86-4G CPU Support Added To The GCC 17 Compiler

Support du processeur Hygon C86-4G ajouté au compilateur GCC 17

29/04/2026 13:14

Merged today to the GCC Git compiler codebase, which will be for GCC 17 rather than the imminent GCC 16.1 stable release, is adding support for the Chinese-manufactured Hygon C86-4G-M4 / C86-4G-M6 / C86-4G-M7 series x86_64 processors...

Libcamera 0.7.1 Released With Improved Software ISP

Libcamera 0.7.1 Publié avec le logiciel amélioré ISP

29/04/2026 10:30

Libcamera 0.7.1 released on Tuesday as the newest feature release for this open-source library for camera image signal processors (ISPs) that has grown of importance for the likes of Raspberry Pi and Chrome OS and modern desktop Linux distributions with modern laptop hardware like recent Intel Co...

Wayland Developers Target June For Weston 16 Release

Wayland Developers cible juin pour Weston 16 version

29/04/2026 10:17

Weston 16.0 could ship by the end of June with good color management and HDR support along with other new features for this reference Wayland compositor...

Devuan Developer Working On Reviving GTK2 With Modern Fixes

Devuan Developer Working on Reviving GTK2 avec des correctifs modernes

29/04/2026 10:05

A Devuan developer, the Linux distribution that provides a Debian-based operating system without dependence on systemd, is working on "gtk2-ng" for providing modern fixes and improvements to the old GTK2 toolkit...

AMD Introducing New Linux Driver For Their Halo Box: For Its RGB LED Light Bar

AMD présente un nouveau pilote Linux pour leur boîte Halo : pour sa barre de lumière LED RGB

29/04/2026 00:49

AMD CEO Lisa Su back at CES 2026 showed off the Ryzen AI Halo box as a mini PC built around their excellent Strix Halo SoC. The Ryzen AI halo box is to serve as an AI development platform to compete with the likes of NVIDIA's DGX Spark and Dell GB10. This week is the first time I am seeing new Li...

📦 Containers Linux & BSD

🐳 Docker