This article introduces debugwand, a tool for debugging Python applications in Kubernetes and Docker without the usual setup hassles. It leverages the new sys.remote_exec() feature in Python 3.14 to inject a debug server into a running process, allowing for real-time debugging with minimal configuration.

Three serious vulnerabilities in the runC container runtime could allow attackers to bypass isolation and gain root access to the host system. The flaws affect multiple versions of runC, with potential exploits requiring the ability to configure custom mounts. While no active exploitation has been reported, developers recommend using mitigations like user namespaces and rootless containers.

Thorium is a scalable file analysis and data generation platform that enables users to orchestrate various tools at scale, offering features like static and dynamic analysis sandboxes, a user-friendly interface, and a RESTful API. It supports multi-tenant permissions, full-text search, and the import of numerous analysis tools, making it suitable for both development and analytical purposes. Thorium is designed for deployment in Kubernetes clusters but can also run on a local machine with limited production capabilities.

Lakekeeper is an Apache-Licensed implementation of the Apache Iceberg REST Catalog specification, designed for secure and efficient data management. It offers features like multi-table commits, Kubernetes integration, and customizable access management while supporting various cloud providers and on-premise deployments. The project includes a Docker container and a minimal setup guide for demonstration purposes.

Docker Desktop 4.43 introduces significant updates aimed at enhancing the development and management of AI models and MCP tools, including improved model management features, expanded OpenAI API support, and enhanced integration with GitHub and VS Code. The release also includes new functionalities for the MCP Catalog, allowing users to submit their own servers and utilize secure OAuth authentication, alongside performance upgrades for Docker's AI agent, Gordon, which now supports multi-threaded conversations. Additionally, the Compose Bridge feature facilitates easy conversion of local configurations to Kubernetes setups.

Canine is a user-friendly deployment platform that combines the power of Kubernetes with the simplicity of Heroku, allowing for easy deployment and management of applications. It includes features like GitHub integration, team collaboration, and real-time monitoring, making it suitable for small teams. Users can quickly set it up using Docker and customize settings as needed.

Portainer offers specialized solutions for managing Kubernetes, Docker, and Podman, catering to both enterprise IT and industrial IoT environments. It enables teams to streamline operations, enforce policies, and manage software deployments effectively, even in low-resource or disconnected settings.