sudo-rs vs run0 in 2026: Memory-Safe sudo Replacements for Linux Compared
Compare sudo-rs and run0 in 2026: install steps, polkit rules, the sudoers features sudo-rs drops, Ubuntu 25.10 defaults, and a CI-ready migration playbook.
Articles by Raj Patel
Cilium Network Policies and Hubble on Linux: eBPF Zero-Trust Networking in 2026
A pipeline-first guide to Cilium 1.17 on Linux: writing CiliumNetworkPolicy resources with L7 HTTP/DNS/Kafka rules, wiring Hubble for flow observability, and validating every policy in CI before it reaches production.
Wolfi vs Distroless vs Alpine in 2026: Choosing Secure Container Base Images
Wolfi vs Distroless vs Alpine base images for 2026 Linux workloads, with CVE benchmarks, apko and cosign pipeline snippets, and real migration examples for Node.js and Python services.
OpenVEX and CSAF VEX on Linux: Cutting Trivy & Grype False Positives in 2026
VEX is the layer between your SBOM and your scanner that says this CVE doesn't apply to us, and here's why. Walks through OpenVEX, CSAF VEX, vexctl, Trivy --vex, Grype match exclusions, and the CI pipeline pattern I run on every Linux build.
Structured Outputs vs Function Calling: A 2026 LLM Guide
Compare structured outputs and function calling across OpenAI, Anthropic, and Gemini in 2026. Includes Python code, vendor matrix, and eval metrics that catch the failures schema validation misses.