DevOps Daily Newsletter - Week 19, 2026
Big security week. CVE-2026-31431 (Copy Fail) dropped on May 1, hitting most Linux containers in production with a clean container escape. We have a deep write-up below plus the rest of this week's drops.
Featured Posts
CVE-2026-31431 Copy Fail: A 4-Byte Kernel Write That Escapes Containers
A new Linux kernel bug lets any unprivileged process flip 4 bytes in the page cache and break out of a container. runtime-default seccomp does not block it. Inside: how the exploit works, how to check exposure, and the seccomp profile that mitigates while you patch.
Kubernetes 1.36 Ships User Namespaces GA and Pod-Level In-Place Resize
The release notes hit hard: user namespaces went GA, pod-level resource resize without restarts is in beta, and the gitRepo volume plugin is permanently disabled. What changes for production, what to migrate, and the upgrade checklist.
GitOps with Argo CD: Structuring Your Repository for Multi-Environment Deployments
The three Argo CD repo layouts most teams end up with, and the failure modes each one hides. If your dev/staging/prod folders are drifting, this is the practical fix-up.
Comparisons
GitHub vs GitLab
The two-horse race in 2026: where each one still has the edge on CI, code review, packaging, and self-hosted ops.
ELK Stack vs Loki + Grafana
When the cost curve flips. Honest trade-offs on storage cost, query power, retention, and the ops overhead of each stack.
Checklists
Distributed Tracing with OpenTelemetry: From Instrumentation to Visualization
A complete walkthrough of instrumenting applications, collecting traces with the Collector, and getting them into something you can actually debug from at 3am.
Istio Traffic Management Checklist
Step-by-step setup for weighted routing, automatic retries, and circuit breakers in Istio.
Guides
Security Gates
The pipeline-side practices for shifting security left without turning your CI into a 40-minute waiting game.
Quizzes & Flashcards
DevOps Interview Questions Quiz
Mixed-difficulty questions across containers, IaC, observability, and security. Good fast self-check before a phone screen.
Chaos Engineering with Litmus
Cards to lock in the Litmus vocabulary plus the experiment-design fundamentals every chaos session needs.
Games
SSL/TLS Handshake Simulator
Walk the handshake step by step. Cipher suite negotiation, certificate validation, key exchange. Built for the engineers who can read openssl s_client output but want a clearer picture of what is happening.
Microservices Architecture Simulator
Compose a small microservices stack, watch latency and error rates propagate, and learn why "just add a queue" is rarely the fix.
Weekly Digest
DevOps Weekly Digest - Week 18, 2026
The roundup of last week's most interesting DevOps news from 250+ sources.
Happy learning, The DevOps Daily Team