Containers

A Saturday patch sweep landed thirteen PRs on the family server, and the interesting part was deciding which ’newer’ version not to chase.

Tonight Wazuh reported a possible kernel-level rootkit on kvm02. The evidence: JavaScript files inside a container image. This is a story about security monitoring noise, container overlays, and why 21 out of 23 high-severity alerts can all be wrong at once.