MaruOps · Infrastructure and AI notes
Linux, Kubernetes
and local AI.
Linux, networking, Kubernetes and local LLMs.
Configuration choices and troubleshooting, explained step by step.
Series guides
Kubernetes Lab
Prepare three VMs, build a cluster, then work through deployment, networking and recovery.
Local LLM
Run a first model, then explore APIs, document retrieval, tools and operations.
Git and GitOps
Follow repositories and commits through CI, deployment and GitOps recovery.
Latest articles
Browse the topics to find the guide you need.
-
Docker Hub PAT Reassignment Flaw: Separate the Fix Date from the Impact
Docker disclosed CVE-2026-105445 in account-to-organization conversion. Review the fixed incident’s registry scope and targeted notifications rather than assuming universal account takeover.
-
Microsoft Expands Local AI Agent Discovery: Inventory Is Only the Start
Microsoft announced broader discovery, agent identity, and dynamic permission capabilities. Connect the agent inventory to owners, runtime accounts, and enforceable access boundaries.
-
ConnectWise App Identity Abuse: Review Microsoft 365 Service Principals
Microsoft analyzed Storm-0940 abuse of ConnectWise OAuth identities. Distinguish installed apps from proven data exposure and review service-principal sign-ins and credential changes.
-
Cloudflare Origin Range Requests Improves Partial-File Caching
Cloudflare announced self-service Origin Range Requests across plans. Evaluate partial downloads using origin bytes, response correctness, and user latency rather than cache hits alone.
-
Project Tessera: Understand the Scope of Open Integrated HSMs
Microsoft announced Project Tessera with Marvell, Oracle, and OCP participation. Separate published designs and firmware from future silicon work and review operational key boundaries.
-
Amazon ECS Gateway Separates Ingress Management from Application Services
AWS introduced ECS Gateway for managed service ingress. Review shared ALBs, platform responsibilities, underlying charges, and a gradual migration from existing ingress.
-
Amazon S3 Comes to Vercel: Check Permissions Before Provisioning
S3 is integrated into Vercel Marketplace and v0. Review storage type, temporary credentials, and access boundaries across preview and production projects.
-
Ubuntu Myna Speech-to-Text Preview: Test Local Processing and Language Quality
Canonical opened the Myna technology preview for local dictation. Check the supported desktop session and test language accuracy, microphones, and hardware behavior.
-
Agent Compute Engine Announced: The Customer Preview Is Still Ahead
Google announced Agent Compute Engine for agent execution, with a preview expected in coming months. Review microVM isolation, session lifecycle, and credential requirements.
About these notes
Configuration
and troubleshooting.
From first configuration to operational issues.
Find what to inspect, why it matters, and how to proceed.