GoKawiil
Tech News
Strata is a semantic layer server that runs locally via Docker with a bundled database and a preloaded TPC-DS retail sample dataset. Users install it with a single shell command or Docker run command, then use a separate CLI tool to create git-tracked YAML projects and connect warehouses like Snowflake, Databricks, PostgreSQL, Redshift, MySQL, or SQL Server. A free trial activates automatically on first setup.
Microsoft has released WSL Containers to general availability, letting Windows 11 developers build, run and deploy Linux containers natively through Windows Subsystem for Linux. The update adds a wslc.exe management tool, GPU support, networking improvements, health checks, storage mounts, and integration with Microsoft Defender for Endpoint and Intune. Microsoft says file access from Linux environments to Windows storage can now run up to twice as fast, though Compose support is still missing and listed as a priority.
ThreatDown researchers identified a botnet called Carbonato that targets Docker servers with exposed, unauthenticated daemons on port 2375. After gaining access, attackers launch a privileged container, install a persistent SSH backdoor, and embed an AI agent built on the open-source Hermes Agent framework that receives commands via Telegram and harvests stolen credentials. The infrastructure, exposed since May, was also linked to a separate operation distributing trojanized cryptocurrency wallet apps.
Malwarebytes' ThreatDown researchers identified a new botnet, Carbonato, that scans for Docker hosts with unauthenticated APIs on port 2375 and hijacks them via privileged containers. The malware installs SSH backdoors, sets up multiple persistence mechanisms, and deploys the Hermes Agent AI framework under an agent named GH0ST to execute operator commands and exfiltrate credentials and API keys via Telegram. The findings came from an unauthenticated Docker registry containing nearly 60 repositories and 4.3GB of data spanning operations from October 2024 to August 2026.
A developer has published an open-source manufacturing platform combining ERP, MES and QMS functions in a single codebase. The system is designed to run identically whether deployed on a single laptop, a Docker host, or scaled across a multi-region cloud cluster, without relying on any proprietary runtime.
A developer evaluated SeaweedFS version 4.06 as an alternative to MinIO for running a single-node local S3-compatible storage setup, swapping out Docker images while keeping the MinIO client tool mc in place for testing. The switch required minimal changes, though SeaweedFS needed a separate auth configuration file, which the author inlined directly into the Docker Compose setup.
A developer outlines a workflow for running local large language models on an Apple MacBook Pro M5 with 48GB RAM, combining Ollama for model management, OpenCode as the development harness, and Docker's sbx sandbox tool for isolation. The setup uses models like Qwen 3.8 27B and Gemma 4 31B, pulled via Ollama and configured through a custom sbx kit for each project.
A security researcher highlights how Docker's default client-server architecture runs its daemon as root, meaning any user with access to the Docker socket can escalate privileges to full root access without a password. The piece demonstrates this with a simple command that mounts the host filesystem inside a container and bypasses normal permission checks, tying the issue to a recent vulnerability disclosed in an unnamed Linux distribution whose installer enabled an insecure Docker configuration by default.
A developer documented how to revive phpBB 1.4.4, the last pre-fame version of the classic forum software from 2001, so it runs on modern PHP5 and MySQL 4 inside Docker containers. The project required patching a handful of bugs, including a rejected database seeding command, a broken login cookie function, and a crash on empty post timestamps, plus old-school php.ini settings like register_globals. A ready-made docker-compose file and install instructions let anyone spin up the 25-year-old board software locally in minutes.
Advances in AI tools like Cursor and Claude Code have automated much of the routine work of writing code, allowing agents to generate pipelines, tests, and API integrations from plain-language prompts. As a result, the role of software engineers is shifting away from producing logic themselves and toward defining the guardrails, intent, and system constraints that keep AI-generated work coherent and correct.
Researchers found that Omarchy's default configuration added users to the Linux docker group, which lets any process communicate with the root-owned Docker daemon without needing sudo or a password prompt. This effectively gave every application running in a user's desktop session the ability to mount host files and execute commands as root. The issue was reported through responsible disclosure and fixed in Omarchy version 4.0.1.
A software commentary piece challenges the common framing that AI coding tools are either useless or set to replace programmers, arguing both views misplace the focus on authorship rather than understanding. The author points out that developers have always relied on external sources—documentation, Stack Overflow, colleagues' code—rather than memorized syntax, so AI-generated code isn't fundamentally different. The piece contends that true code ownership has never been about who typed the lines, but about comprehending how a system works.