Skip to content

Tag: kubernetes

All the articles with the tag "kubernetes".

Garden vs Tilt vs Skaffold

Garden vs Tilt vs Skaffold

Three inner-loop dev tools for Kubernetes, Garden, Tilt, and Skaffold. Which one actually makes K8s development bearable? Honest comparison, no fluff.

Container Escape: How to Stop It

Container Escape: How to Stop It

Containers are not VMs. Here are the real escape vectors, privileged mode, mounted sockets, kernel CVEs, and the runtime hardening that actually helps.

cri-o vs containerd

cri-o vs containerd

The CRI runtime under your Kubernetes cluster, cri-o vs containerd compared on footprint, distros, performance, and day-2 operability.

Sysbox vs gVisor vs Kata

Sysbox vs gVisor vs Kata

Containers aren't security boundaries, Sysbox, gVisor, and Kata fix that. Here's which isolation runtime fits your actual threat model.

Distroless Images: When Minimal Goes Too Far

Distroless Images: When Minimal Goes Too Far

Distroless containers are tiny, secure, and loved by security teams, until you need to debug one at 2 AM. Here's when Google distroless actually pays off vs when it's just container hipster points.