Join us

ContentUpdates and recent posts about IncusOS..
 Activity
@ishanupadhyay started using tool SonarQube , 3 weeks, 1 day ago.
 Activity
@ishanupadhyay started using tool Snyk , 3 weeks, 1 day ago.
 Activity
@ishanupadhyay started using tool Red Hat OpenShift , 3 weeks, 1 day ago.
 Activity
@ishanupadhyay started using tool Python , 3 weeks, 1 day ago.
News FAUN.dev() Team Trending
@kala shared an update, 3 weeks, 1 day ago
FAUN.dev()

NanoClaw + Docker Sandboxes: Secure Agent Execution Without the Overhead

NanoClaw Claude Code Docker

NanoClaw integrates with Docker Sandboxes to enhance AI agent security through strong isolation and transparency. This collaboration focuses on enabling secure and autonomous operations for AI agents within enterprise environments.

Link
@varbear shared a link, 3 weeks, 1 day ago
FAUN.dev()

Interview with Thomas Wouters - release Manager for Python

The interview traces Python's core evolution. It starts with addingaugmented assignment(+=) and thePEP 203debates. Arguments followed. Nested scopeslanded viafuture imports. Maintainers repackagedelementtree/xmlplususingpath. asynciorose and supplantedTwisted. Python moved toyearly releases... read more  

Link
@varbear shared a link, 3 weeks, 1 day ago
FAUN.dev()

The real cost of random I/O

Therandom_page_costwas introduced ~25 years ago, and its default value has remained at 4.0 since then. Recent experiments suggest that the actual cost of reading a random page may be significantly higher than the default value, especially on SSDs. Lowering therandom_page_costmay not always be the be.. read more  

The real cost of random I/O
Link
@varbear shared a link, 3 weeks, 1 day ago
FAUN.dev()

Things I miss about Spring Boot after switching to Go

The author migrated fromJava/Spring BoottoGolang. Spring bundlesSecurity,Data,Actuator, and auto-wiring. Go prefers minimalist libraries and explicit wiring. It produces static binaries, instant startup, lower memory use, and nativegoroutineconcurrency. Spring needs JVM startup and GC tuning... read more  

Things I miss about Spring Boot after switching to Go
Link
@varbear shared a link, 3 weeks, 1 day ago
FAUN.dev()

Why is WebAssembly a second-class language on the web?

The post catalogs recentWebAssemblyextensions:shared memory,SIMD,exceptions,tail calls,64-bit memory,GC,bulk memory,multiple returns, andreference types. It arguesWebAssemblyremains a second-class web language. MessyJS glueand arcane loading keep it there. The post pushes theWebAssembly Component Mo.. read more  

Link
@varbear shared a link, 3 weeks, 1 day ago
FAUN.dev()

How to steal npm publish tokens by opening GitHub issues

Attackers pushed a poisonedcline@2.3.0to npm using a stolen publish token. ItspostinstallinstalledOpenClawglobally. An AI triage bot let a malicious issue title trickClaudeinto running commands on a GitHub Actions runner. It wrote a poisonedactions/cacheentry. The nightly release restored the poison.. read more  

IncusOS, released is a lightweight Linux distribution built on Debian 13 with a focus on security, reliability, and reproducibility. It implements atomic A/B updates for safe rollbacks, UEFI Secure Boot, TPM 2.0 integration, and full-disk encryption to ensure a trusted boot process and data protection.

The system departs from traditional management models by eliminating shell access entirely. Administration occurs exclusively through authenticated APIs using TLS client certificates or OIDC. This design enforces consistency and limits attack surfaces across server fleets and virtualized environments.

IncusOS supports an online image customizer and a fully automated installation process, applying configuration at first boot. Hardware requirements align with modern systems such as Windows 11. Future updates will deliver new kernel versions, expanded configuration options, and integrations with tools like Linstor and Netbird.

By standardizing deployment and management through uniform images, IncusOS simplifies auditing, maintenance, and support for organizations operating large or distributed infrastructures.