Docker

Docker Engine 29.9.3: Full Security Line

Docker Engine 29.9.3 went stable on 3 November 2026, and it carries the largest security batch of the 29.9.x line: four Engine and SwarmKit CVEs plus two BuildKit advisories.[1][2] If you have been tracking the 29.x security story you know by now that this line has been shipping steady fixes since 29.9.0 on 8 October - and this release is the one to land on today.[1] This article reworks our earlier 29.9.0 write-up into the full history of the line and gives you a practical upgrade path from 29.9.0 to 29.9.3 on a self-hosted Debian/Ubuntu VPS, with the two spots that deserve special attention: firewalld plus encrypted Swarm overlays, and worker/manager TLS certificate rotation.[2] If you are still choosing where the host lives, the digitalocean vs linode vs vultr comparison covers the entry-tier cloud choice. This upgrade is version-driven, so the distro matters more than the provider. …

Read more →

eMudhra CA Compromise: Check Your TLS Chains

Eight eMudhra intermediate CAs had their private keys compromised (CVE-2026-111943). Docker 29.9.2, Go 1.26.10/1.27.3 and the ca-certificates updates from Ubuntu, Red Hat and Debian now reject those certificate chains. This guide shows how to check that your VPS’s git, curl, Docker and Go clients actually stop trusting them - and what the check has to look at before you can call it done.…

Read more →

Coolify vs Dokploy on a VPS

Two open-source, self-hosted PaaS platforms for your VPS, head to head: architecture, install, builds, scaling, pricing and licensing. The decision axis is not features - it’s how each one thinks about a cluster.…

Read more →

Docker 29.8.2 Security Patch: 13 Fixes

If you run any Docker deployment on a VPS you control, the release from 30 September 2026 is not a routine version bump. Docker Engine 29.8.2 ships 13 security fixes - three in the engine itself and ten in the bundled BuildKit - including one high-severity issue that can hand a remote attacker your registry credentials or swap the image you pull, and two that bite exactly the setup most self-hosters use. This is the hosting upgrade to do this week, not next month. Why this release matters Docker Engine 29.8.2 was released on 30 September 2026 as a dedicated security release.[1] It fixes three Docker Engine vulnerabilities plus a batch of ten BuildKit vulnerabilities, and it bundles updated containerd (v2.3.6), BuildKit (v0.33.1) and runc (v1.5.2).[1][2] …

Read more →

Docker vs VPS (2026)

Containers look like the obvious answer - until they cost you more CPU and RAM than they save. Here’s a framework for deciding, and how to self-host lean either way.…

Read more →