Devops

Guides· DeploySmith ·

pgBadger 13.3 on a VPS: PostgreSQL Log Analysis

Intermediate · 11 min read

pgBadger 13.3 landed on November 3, 2026,[1] and it is one of those quiet maintenance releases that is worth paying attention to if you run PostgreSQL on your own VPS. Why now, specifically? PostgreSQL 19 general availability is planned for November 19, 2026,[4] which gives you a two-week window to do something most people skip before a major upgrade: look at what your current instance is actually doing. The logs PostgreSQL already writes are the highest-signal dataset on your box - no agents, no extra daemon, just the truth about slow queries, errors and disk spills. pgBadger turns that raw log stream into a single self-contained HTML report you can open in a browser. This guide covers the full loop on Debian or Ubuntu: what is new in 13.3, installing it, configuring PostgreSQL to log what pgBadger needs, running reports by hand and by cron, and reading the sections that matter. …

Read more →
Guides· DeploySmith ·

CVE-2026-98432: VPS Still Vulnerable to Remote Root

Intermediate · 9 min read

CVE-2026-98432 is a remote, unauthenticated use-after-free in the Linux IPv4 TCP stack (CVSS 9.8). The upstream fix is in stable kernels from 5.10.272 through 7.3, but as of 1 November Ubuntu 22.04–26.10 and RHEL 8/9/10 have not shipped a patched kernel. A fresh uname -r does not mean you are safe - you must check the kernel against your distribution’s CVE status, apply Red Hat’s documented nftables filter in the meantime, and reboot after the update.…

Read more →
Guides· DeploySmith ·

GitLab CVE-2026-97229: RCE via CI Regexes

Intermediate · 11 min read

GitLab CVE-2026-97229 is a CVSS 10.0 pre-auth RCE triggered by a crafted regular expression in a CI/CD config. The fix shipped in GitLab 19.4.2/19.3.5/19.2.8, but the real patch is in Ruby’s Onigmo regex engine - which GitLab applies only to its official packages. Upgrading GitLab on a custom Ruby build or image leaves you vulnerable, exactly as Alpine discovered on its own instance.…

Read more →
Guides· DeploySmith ·

Node.js 26 Is Active LTS: 24/22 Migration Plan

Intermediate · 11 min read

On 28 October 2026 Node.js 26 becomes Active LTS. It is the last LTS promotion under the old even/odd release model, and the first window where the new annual cadence (v27 Alpha starts the same day) shapes your version choice. v24 moved to Maintenance on 20 October; v22 reaches end-of-life in April 2027. Worst of all, the version to move to - 26.12.1 - is also the one that carries the October HIGH security fixes, including the Node2Shell Brotli RCE. Here’s how to plan the move on a self-hosted VPS, what breaks when you jump from 24/22, and the exact check-install-verify commands.…

Read more →
Guides· DeploySmith ·

Node.js Oct 2026 Security: 26.12.1 and Node 26 LTS

Intermediate · 11 min read

On 21 Oct 2026 the Node.js project released security versions across all three supported lines - 26.12.1 (Current), 24.22.1 and 22.23.4 (LTS) - closing four HIGH CVEs, three of them remotely reachable by default, plus six more medium/low issues. Node 26 becomes Active LTS on 28 Oct. How to check your version and upgrade on a self-hosted VPS with nvm or a direct tarball, then restart cleanly under pm2.…

Read more →
Hosting· DeploySmith ·

Microsoft Execution Containers for AI Agents

Intermediate · 10 min read

Microsoft Execution Containers (MXC) hit 1.0.0 and general availability on October 7, 2026 - an OS-enforced, policy-driven sandbox for AI agents, with Rust, .NET and Node SDKs. We break down what MXC is (and isn’t), then compare the three ways to host agents in 2026: MXC on Windows, DigitalOcean’s managed bundles, and a self-hosted VPS.…

Read more →
Hosting· DeploySmith ·

DigitalOcean Agent Droplets: Worth the Flat Price?

Intermediate · 9 min read

Agent Droplets bundle compute, inference, storage and 16,000+ tools into one flat monthly price - $50 Pro with 15% off, $200 Team with 20% off. We break down exactly what’s discounted, what isn’t, and whether the flat price is justified for a small/mid deployment stack versus running agents on a plain Droplet.…

Read more →