OffNet Newsroom

Daily topic roundup

Automation / DevOps / IaC

Sunday, September 27, 2026 · 7 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
InfoQ generaldevops

Docker Cloud Sandboxes Offer Consistent AI Agent Execution Across Local and Cloud

Docker has introduced Cloud Sandboxes to provide secure, hosted execution environments specifically for AI coding agents. Leveraging hardware-enforced microVM isolation, the platform ensures a consistent runtime regardless of whether workloads run on local machines or in the cloud. This architecture supports unified CLI workflows, enabling developers to seamlessly shift execution contexts without environment drift.

  • Enables consistent execution environments for AI coding agents across laptop and cloud deployments.
  • Uses hardware-enforced microVM isolation to ensure security and isolation for hosted workloads.
  • Provides unified CLI workflows to simplify the transition of workloads between local and remote environments.
  • Reduces environment drift by standardizing the sandbox abstraction for AI agent execution.
Read at source →
InfoQ generaldevops

Grafana Converts Cypress Test Results Into Persistent Prometheus Metrics

Grafana Labs has introduced a method to transform Cypress end-to-end test outcomes into Prometheus metrics, enabling long-term observability. These metrics are sent to Grafana Cloud, allowing teams to track test stability and flakiness over time rather than losing data after each run. This approach bridges the gap between CI/CD test execution and continuous system monitoring.

  • Cypress results become persistent metrics in Prometheus for historical trend analysis.
  • Test flakiness and stability can be monitored alongside application performance.
  • Data is shipped to Grafana Cloud for unified dashboards and alerting.
  • Enables correlation between test failures and real-world system behavior.
Read at source →
AWS What's New awsdatabase ↺ since 09-23

AWS GAs CloudWatch Omni: AI-first observability for agents and apps

Amazon CloudWatch Omni is now generally available as an AI-powered evolution of CloudWatch, designed to centralize observability for teams, applications, and agents. It merges OpenTelemetry interoperability with CloudWatch’s scale, offering a unified view across AWS, Azure, and multi-account environments. The platform provides both a standalone web interface with SSO and a local IDE extension for direct agent troubleshooting.

  • Centralizes telemetry across AWS, Azure, and multi-account setups into unified 'spaces'.
  • Supports AI agents natively with automatic service discovery and dependency mapping.
  • Offers a local IDE extension for hands-on agent debugging alongside the web dashboard.
  • Combines OpenTelemetry interoperability with CloudWatch’s underlying reliability and scale.
TRADE-OFFCloudWatch Omni vs LegacyTraditional CloudWatchFragmented across multiple toolsManual agent debuggingLimited cross-cloud viewCloudWatch OmniUnified AI-first observabilityNative agent supportMulti-cloud integrationvs
Read at source →
Planet PostgreSQL database ↺ since 09-24

pgBackRest standby backups fail when archive_mode is off

A user attempted to run pgBackRest on a standby after promotion with archive_mode disabled, expecting the tool to handle the state. Even with archive-mode-check=n, the backup failed because the underlying PostgreSQL server enforces archive_mode for WAL archiving operations. Modifying pgBackRest source code bypassed the error, but the resulting backup lacks the necessary WAL segments for point-in-time recovery. The author concludes that relying on unsupported workarounds is risky and recommends restoring a valid configuration via restart or switchover.

  • pgBackRest cannot reliably back up a standby that lacks active WAL archiving.
  • archive-mode-check=n only bypasses the tool's validation, not PostgreSQL's enforcement.
  • Bypassing checks creates backups that may be incomplete or unrecoverable.
  • Always ensure archive_mode=on before attempting pgBackRest operations on standbys.
  • Use controlled switchover or restart to restore supported backup configurations.
TRADE-OFFpgBackRest Standby Backup PitfallsBypassing ChecksIgnores PostgreSQL WAL enforcementCreates incomplete backupsBreaks point-in-time recoverySafe ApproachEnsure archive_mode is onRestore valid configurationPrevent unrecoverable data lossvs
Read at source →
AWS What's New awsdatabase ↺ since 09-26

AWS relaunches EventBridge custom buses with strict ordering and retention

Amazon EventBridge has relaunched its Custom event bus to support enterprise-scale event-driven architectures. The updated serverless broker now supports strict message ordering, built-in event retention, and open event formats to better decouple teams. Publishers can share these buses across multiple accounts via AWS Resource Access Manager for centralized routing.

  • New Custom event bus supports strict ordering for critical event sequences
  • Built-in retention eliminates need for external storage for event history
  • Share buses cross-account via Resource Access Manager for centralization
  • Supports advanced event transformations and open event formats
CHECKLISTEventBridge Custom Bus FeaturesEnforce strict message orderingEnable built-in event retentionShare buses cross-accountSupport open event formats
Read at source →
The Register general ↺ since 09-26

New dependency validation cuts overhead 99.7%, boosting speed 54x

A new software dependency validation process has been introduced that drastically reduces computational overhead. The optimization achieves a 99.7% reduction in overhead and increases processing speeds by a factor of 54. This improvement targets the bottlenecks commonly found in modern build and dependency resolution workflows.

  • Validation overhead is reduced by up to 99.7%, significantly lowering resource consumption.
  • Processing speeds increase by 54x, accelerating dependency resolution and build times.
  • Optimization targets dependency validation, a common bottleneck in CI/CD pipelines.
  • Practitioners can expect faster feedback loops for dependency management tasks.
Read at source →
GitHub Trending (daily) githubrepos ↺ since 09-26 ⚠ unverified date/source

OpenBao: OSS Vault Alternative for Secrets and Certificates Management

OpenBao is an open-source software solution designed to manage, store, and distribute sensitive data such as secrets, certificates, and keys. It serves as a community-driven alternative to HashiCorp Vault, operating under the OpenSSF. The project emphasizes security and user trust, providing dedicated channels for responsible disclosure of vulnerabilities.

  • OpenBao provides a transparent, open-source path for secrets management without licensing restrictions.
  • Supports core use cases: secret storage, certificate issuance, and key distribution.
  • Security issues must be reported responsibly to the OpenSSF mailing list.
  • Active working groups focus on scalability, PKCS#11, UI, and supply chain.
  • Direct replacement for Vault for teams requiring open-source compliance.
CHECKLISTOpenBao Implementation ChecklistAdopt as open-source Vault alternativeManage secrets and certificatesReport vulns via OpenSSFJoin working groupsEnsure compliance
Read at source →
↑