Kyle Quest (the DockerSlim guy)
@kcqon.bsky.social
AI-native software security maintenance (AutonomousPlane) * CTO/Founded (Slim dot AI) * Created DockerSlim / SlimToolkit / MinToolkit * 50 Shades of Golang * Big & Small Data * Security * eBPF * Containers * Cloud Native
Pretty nice video about React2Shell from Theo, the big Next.js vulnerability that's making its rounds: www.youtube.com/watch?v=UiCE... It also show the fundamentally different approach from developers vs security people to the security vulnerabilities.
Watch this if you use React
YouTube video by Theo - t3․gg
www.youtube.com
December 8, 2025 at 10:31 PM
Pretty nice video about React2Shell from Theo, the big Next.js vulnerability that's making its rounds: www.youtube.com/watch?v=UiCE... It also show the fundamentally different approach from developers vs security people to the security vulnerabilities.
Is there anything interesting going on with Next.js ;)
December 7, 2025 at 4:11 AM
Is there anything interesting going on with Next.js ;)
Reposted by Kyle Quest (the DockerSlim guy)
MinIO's community edition is now in maintenance mode.
Silent license changes.
$96K paywalls.
Locked GitHub threads.
Abandoned Docker images during a critical CVE.
A masterclass in how NOT to sunset an open source project.
SeaweedFS, your time is now.
Silent license changes.
$96K paywalls.
Locked GitHub threads.
Abandoned Docker images during a critical CVE.
A masterclass in how NOT to sunset an open source project.
SeaweedFS, your time is now.
MinIO, we won't miss you.
YouTube video by Rawkode Academy
www.youtube.com
December 4, 2025 at 5:00 PM
MinIO's community edition is now in maintenance mode.
Silent license changes.
$96K paywalls.
Locked GitHub threads.
Abandoned Docker images during a critical CVE.
A masterclass in how NOT to sunset an open source project.
SeaweedFS, your time is now.
Silent license changes.
$96K paywalls.
Locked GitHub threads.
Abandoned Docker images during a critical CVE.
A masterclass in how NOT to sunset an open source project.
SeaweedFS, your time is now.
Funny that there are more vendors trying to sell you stuff around MCP than the actual MCP Server users :-)
December 3, 2025 at 1:38 AM
Funny that there are more vendors trying to sell you stuff around MCP than the actual MCP Server users :-)
The #KubeCon / #CloudNativeCon in Atlanta was super exciting! Demo'ed the new Podman container runtime support minifying container images with #DockerSlim (now #PodmanSlim :-)) Here's a short demo version:
November 27, 2025 at 6:51 AM
The #KubeCon / #CloudNativeCon in Atlanta was super exciting! Demo'ed the new Podman container runtime support minifying container images with #DockerSlim (now #PodmanSlim :-)) Here's a short demo version:
Reposted by Kyle Quest (the DockerSlim guy)
SCaLE is the most family friendly conference I've ever been to
I regularly bring my kids (Saturday night is game night) and there are parents in the audiences with strollers.
SCaLE is a community, and we do our best to make sure everyone is welcome
I regularly bring my kids (Saturday night is game night) and there are parents in the audiences with strollers.
SCaLE is a community, and we do our best to make sure everyone is welcome
November 18, 2025 at 4:48 AM
SCaLE is the most family friendly conference I've ever been to
I regularly bring my kids (Saturday night is game night) and there are parents in the audiences with strollers.
SCaLE is a community, and we do our best to make sure everyone is welcome
I regularly bring my kids (Saturday night is game night) and there are parents in the audiences with strollers.
SCaLE is a community, and we do our best to make sure everyone is welcome
Reposted by Kyle Quest (the DockerSlim guy)
FYI: most of the #kubecon #cloudnativecon NA videos are up on youtube, should hopefully be all there by end of next week! www.youtube.com/@cncf/videos
CNCF [Cloud Native Computing Foundation]
To provide educational and informative content on cloud native computing, which uses an open source software stack to deploy applications as microservices, packaging each part into its own container, ...
www.youtube.com
November 14, 2025 at 8:17 PM
FYI: most of the #kubecon #cloudnativecon NA videos are up on youtube, should hopefully be all there by end of next week! www.youtube.com/@cncf/videos
I wish the ContribFest sessions at KubeCon were longer... Not enough time to do anything significant. And this year in Atlana they were super short or, at least, it felt like it 🙂
November 14, 2025 at 11:54 PM
I wish the ContribFest sessions at KubeCon were longer... Not enough time to do anything significant. And this year in Atlana they were super short or, at least, it felt like it 🙂
Reposted by Kyle Quest (the DockerSlim guy)
Come hear me talk about building modular platforms tomorrow at 3! sched.co/27Faa
KubeCon + CloudNativeCon North America 2025: Capabilities, APIs, and Experiences: Blu...
View more about this event at KubeCon + CloudNativeCon North America 2025
sched.co
November 11, 2025 at 10:14 PM
Come hear me talk about building modular platforms tomorrow at 3! sched.co/27Faa
Today at #KubeCon we demystified building AI-assisted DevOps tools. The LLM prompts don't need to be uber fancy. Don't need a lot of tools. It can be kubectl CLI wrapped in a tool object. MCP servers have their place, but they can't be thin API wrappers because LLMs will struggle to use those.
November 11, 2025 at 10:14 PM
Today at #KubeCon we demystified building AI-assisted DevOps tools. The LLM prompts don't need to be uber fancy. Don't need a lot of tools. It can be kubectl CLI wrapped in a tool object. MCP servers have their place, but they can't be thin API wrappers because LLMs will struggle to use those.
"Where’s My Pod? End-to-End Tracing for Kubernetes With OpenTelemetry - Artem Tkachuk & JP Phillips, Netflix" - one of the select few talks I hope to attend during #KubeCon in Atlanta - kccncna2025.sched.com/event/27FaO
KubeCon + CloudNativeCon North America 2025: Where’s My Pod? End-to-End Tracing for K...
View more about this event at KubeCon + CloudNativeCon North America 2025
kccncna2025.sched.com
November 11, 2025 at 12:52 AM
"Where’s My Pod? End-to-End Tracing for Kubernetes With OpenTelemetry - Artem Tkachuk & JP Phillips, Netflix" - one of the select few talks I hope to attend during #KubeCon in Atlanta - kccncna2025.sched.com/event/27FaO
Reposted by Kyle Quest (the DockerSlim guy)
AWS Deprecates Two Dozen Services (Most of Which You've Never Heard Of) #devopsish
AWS Deprecates Two Dozen Services (Most of Which You've Never Heard Of)
AWS has done its quarterly housecleaning / "Googling" of its services, and deprecated what appears at first glance to be a startlingly long list. However, going through them put my mind at ease, and I'm hoping this post can do the same for you.
www.lastweekinaws.com
October 15, 2025 at 2:03 PM
AWS Deprecates Two Dozen Services (Most of Which You've Never Heard Of) #devopsish
If you don't know about Iximiuz Labs, you are missing out. You get lots of playgrounds with different Cloud-Native tools, challenges & more. We'll be using the Labs to accelerate building the new capabilities for #DockerSlim, so we can Mint awesome containers the easy way labs.iximiuz.com
iximiuz Labs - Indie Learning Platform to Master Server Side Craft
Skill up in Linux, Networking, Containers, and Kubernetes by taking courses, following interactive tutorials, and solving fun DevOps challenges.
labs.iximiuz.com
October 15, 2025 at 5:38 PM
If you don't know about Iximiuz Labs, you are missing out. You get lots of playgrounds with different Cloud-Native tools, challenges & more. We'll be using the Labs to accelerate building the new capabilities for #DockerSlim, so we can Mint awesome containers the easy way labs.iximiuz.com
Reposted by Kyle Quest (the DockerSlim guy)
📣Call for Volunteers: If you'd like to help with setup or be a friendly face welcoming folks at #Rejekts2025 Atlanta on Nov 8, please sign up here & we'll be in touch👉🏽 forms.gle/R1sSnytKmMXB...
🗒️Please note that tasks will be assigned based on the event's needs and may vary from your preferences.
🗒️Please note that tasks will be assigned based on the event's needs and may vary from your preferences.
Cloud Native Rejekts Atlanta | November 8, 2025 | Volunteer Sign Up Form
Cloud Native Rejekts is the b-side conference giving a second chance to the many wonderful, but rejected talks leading to KubeCon + CloudNativeCon.
Cloud Native Rejekts will be an in-person conferenc...
forms.gle
October 15, 2025 at 10:13 AM
📣Call for Volunteers: If you'd like to help with setup or be a friendly face welcoming folks at #Rejekts2025 Atlanta on Nov 8, please sign up here & we'll be in touch👉🏽 forms.gle/R1sSnytKmMXB...
🗒️Please note that tasks will be assigned based on the event's needs and may vary from your preferences.
🗒️Please note that tasks will be assigned based on the event's needs and may vary from your preferences.
Reposted by Kyle Quest (the DockerSlim guy)
📣VENUE ANNOUNCEMENT: #Rejekts2025 Atlanta will be held at The Historic Academy of Medicine located within Georgia Institute of Technology.🎓
We're looking forward to the academic atmosphere, full length & lightning talks + fantastic exchange of ideas on Nov 8!
To register👉🏽 pretix.eu/rejekts/reje...
We're looking forward to the academic atmosphere, full length & lightning talks + fantastic exchange of ideas on Nov 8!
To register👉🏽 pretix.eu/rejekts/reje...
October 9, 2025 at 1:27 PM
📣VENUE ANNOUNCEMENT: #Rejekts2025 Atlanta will be held at The Historic Academy of Medicine located within Georgia Institute of Technology.🎓
We're looking forward to the academic atmosphere, full length & lightning talks + fantastic exchange of ideas on Nov 8!
To register👉🏽 pretix.eu/rejekts/reje...
We're looking forward to the academic atmosphere, full length & lightning talks + fantastic exchange of ideas on Nov 8!
To register👉🏽 pretix.eu/rejekts/reje...
Looking forward to my hands on KubeCon session in Atlanta! Join me even if you don't care about #DockerSlim 🙂 We'll get to learn about building AI assistant & MCP server capabilities in #Golang applications. We'll turn Ivan's Iximiuz Labs into Mint Containers Labs for this session to start asap
October 15, 2025 at 2:02 AM
Looking forward to my hands on KubeCon session in Atlanta! Join me even if you don't care about #DockerSlim 🙂 We'll get to learn about building AI assistant & MCP server capabilities in #Golang applications. We'll turn Ivan's Iximiuz Labs into Mint Containers Labs for this session to start asap
The new remote code execution in Redis is fun (aka RediShell). Let's see what minifying the Redis container with DockerSlim and its auto-generates seccomp profile will do to mitigate the exploits 🙂
October 9, 2025 at 7:25 AM
The new remote code execution in Redis is fun (aka RediShell). Let's see what minifying the Redis container with DockerSlim and its auto-generates seccomp profile will do to mitigate the exploits 🙂
Should've been at #ContainerDays this year... Looks like slimming containers came up in the discussions there :)
October 7, 2025 at 8:03 PM
Should've been at #ContainerDays this year... Looks like slimming containers came up in the discussions there :)
Reposted by Kyle Quest (the DockerSlim guy)
We’re back again… with the new Go release 😎
October 3, 2025 at 3:30 AM
We’re back again… with the new Go release 😎
Running apps/code in a sandbox always requires you to run extra commands or write sandbox API glue code... What if you didn't have to... what if you could run an app in a sandbox without doing anything special simply by running the app the same way you normally do...
October 1, 2025 at 6:07 AM
Running apps/code in a sandbox always requires you to run extra commands or write sandbox API glue code... What if you didn't have to... what if you could run an app in a sandbox without doing anything special simply by running the app the same way you normally do...
Reposted by Kyle Quest (the DockerSlim guy)
📣PSA: Registration for #Rejekts2025 Atlanta is now open!🎉
Keep in mind this time Rejekts is a one-day event that will be held on Nov 8. As with previous events, registration is free😊
To register👉🏽 pretix.eu/rejekts/reje...
Keep in mind this time Rejekts is a one-day event that will be held on Nov 8. As with previous events, registration is free😊
To register👉🏽 pretix.eu/rejekts/reje...
Cloud Native Rejekts NA 2025
Sat, Nov. 8th, 2025
pretix.eu
September 29, 2025 at 8:39 AM
📣PSA: Registration for #Rejekts2025 Atlanta is now open!🎉
Keep in mind this time Rejekts is a one-day event that will be held on Nov 8. As with previous events, registration is free😊
To register👉🏽 pretix.eu/rejekts/reje...
Keep in mind this time Rejekts is a one-day event that will be held on Nov 8. As with previous events, registration is free😊
To register👉🏽 pretix.eu/rejekts/reje...
fun reverse engineering bun.js app binaries... it's not as bad as I thought it would be even manually without extra tools :-)
September 27, 2025 at 10:49 PM
fun reverse engineering bun.js app binaries... it's not as bad as I thought it would be even manually without extra tools :-)
It feels like sandboxing in AI is starting to approach the vector databases buzz at its peak... New options pop up every day, hard to keep up
September 26, 2025 at 6:49 PM
It feels like sandboxing in AI is starting to approach the vector databases buzz at its peak... New options pop up every day, hard to keep up
I keep bumping into more and more AI app/agent sandboxing, ephemeral deployment and observability use cases with an experimental version of DockerSlim/Mint that runs code in local or remote environments. What are good/popular cloud sandbox environments people use/like?
September 24, 2025 at 6:21 AM
I keep bumping into more and more AI app/agent sandboxing, ephemeral deployment and observability use cases with an experimental version of DockerSlim/Mint that runs code in local or remote environments. What are good/popular cloud sandbox environments people use/like?