Tag: ci-cd

Kaniko & Buildah: Daemonless Container Builds

Daemonless OCI image builds in CI without Docker-in-Docker risks. Kaniko vs Buildah compared, when each fits, and which one suits your pipeline.

regclient: Container Image Lifecycle Without a Daemon

regctl, regbot, and regsync give you tag retention policies, registry replication, and manifest surgery, no Docker daemon required.

ArgoCD ApplicationSets: One Manifest, Many Clusters

ArgoCD ApplicationSets let one template generate dozens of GitOps Applications across clusters. Covers List, Cluster, Git, Matrix, and PR generators with real patterns.

Multi-Arch Docker Builds With QEMU & buildx

Build Docker images that run on amd64 and arm64 from one command. QEMU emulation, native multi-node builders, CI caching, and manifest lists explained.

OPA & Rego: Policy as Code Beyond Kubernetes

OPA and Rego aren't just Kubernetes gatekeepers. Block :latest tags in CI, enforce Terraform resource tags, and filter HTTP APIs.

Forgejo Actions: Self-Hosted GitHub-Style CI Without GitHub

Run GitHub Actions-compatible CI on your own Forgejo server with act_runner. Same YAML, your hardware, zero GitHub dependency.

Skopeo: Container Image Surgery Without a Daemon

Skopeo lets you copy, inspect, and sync container images between any registry without Docker. No daemon, no bloat, just clean image ops.

OpenTofu in 2026: Where the Terraform Fork Stands

Two years after HashiCorp's BUSL switch and IBM's acquisition, OpenTofu is the mature open-source Terraform fork. Here's the honest state of play.

Sigstore + Gitsign: Signed Commits Without GPG Pain

Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.

Renovate vs Dependabot: Self-Hosted Dependency Bots

Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.

Gitea Actions vs Woodpecker CI

Gitea Actions vs Woodpecker CI: two solid self-hosted CI options, one clear winner for your setup. Compare syntax, runners, footprint, and secrets handling.

Argo Rollouts vs Flagger Progressive Delivery

Argo Rollouts uses a Rollout CRD with a slick UI. Flagger watches your Deployment with a Canary CRD. Here's which progressive-delivery tool to pick.