Container on Onur Baydaşhttps://onurbaydas.com/en/tags/container/Recent content in Container on Onur BaydaşHugoen-usSat, 17 Oct 2026 12:15:22 +0300Kubernetes v1.37: Enhancing Container Storage Securityhttps://onurbaydas.com/en/news/2026-10-17-kubernetes-v137-storage-security/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-kubernetes-v137-storage-security/Kubernetes v1.37 introduces significant enhancements for storage security. These include permission modes for emptyDir volumes and new bind mount options.Kubernetes v1.37: Memory QoS Graduates to Betahttps://onurbaydas.com/en/news/2026-10-17-kubernetes-memory-qos-beta/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-kubernetes-memory-qos-beta/In Kubernetes v1.37, the Memory QoS feature has graduated to Beta and is now enabled by default. This feature provides the kernel with better guidance on container memory management on Linux nodes running cgroup v2.Transition to cgroup v2 in Kuberneteshttps://onurbaydas.com/en/news/2026-10-17-kubernetes-cgroup-v2-shift/Sat, 17 Oct 2026 12:15:22 +0300https://onurbaydas.com/en/news/2026-10-17-kubernetes-cgroup-v2-shift/cgroups (control groups) in Linux are a kernel feature used for managing system resources, and Kubernetes utilizes cgroups to allocate resources like CPU and memory to containers. Kubernetes's transition to cgroup v2 aims to offer significant improvements in resource management and more consistent behavior.AI Security and Kubernetes Relationshiphttps://onurbaydas.com/en/news/2026-10-16-ai-kubernetes-security-gpu/Fri, 16 Oct 2026 19:56:22 +0300https://onurbaydas.com/en/news/2026-10-16-ai-kubernetes-security-gpu/Andrew Martin discusses why AI security is fundamentally tied to Kubernetes security. This connection becomes even more critical in environments where GPUs are utilized.Intel LLM-Scaler-vLLM PV 1.5 Updatehttps://onurbaydas.com/en/news/2026-10-16-intel-llm-scaler-vllm-update/Fri, 16 Oct 2026 19:56:22 +0300https://onurbaydas.com/en/news/2026-10-16-intel-llm-scaler-vllm-update/Intel released LLM-Scaler-vLLM PV 1.5, a containerized Docker stack for AI/LLM experiences on Intel Arc Graphics hardware. This version, developed under Project Battlematrix, brings significant improvements.FootprintAI/Containarium: Open-Source Agent Runtime with SSH-Native Isolation, eBPF Egress Policyhttps://onurbaydas.com/en/news/2026-10-16-containarium-agent-runtime-ebpf/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-containarium-agent-runtime-ebpf/Containarium is an open-source agent runtime offering SSH-native isolation, eBPF egress policy, and Kubernetes with LXC backends. It also features GPU passthrough and an MCP-native CLI.ThreatsDay: Adobe RCE, DNS Wallet Theft, and Morehttps://onurbaydas.com/en/news/2026-10-16-threatsday-security-roundup/Fri, 16 Oct 2026 00:17:33 +0300https://onurbaydas.com/en/news/2026-10-16-threatsday-security-roundup/This week, various security threats emerged, including Adobe RCE vulnerabilities, DNS-based wallet theft, and NVIDIA container escape. A data theft tool with a victim-scaring feature also stands out among this week's security stories.