Héja Péter (Vau)

Our microVMs launch in under a second, and assembling their block devices in parallel put LVM's roughly 100ms volume group-wide lock directly in the critical path. We kept the kernel's device-mapper, wrote our own control plane and gave up crash safety our ephemeral workloads never needed, making allocation roughly 100x faster.

Paranoid hardening has always been with us: aggressive kernel customizations for bug classes without a proven exploit, while Linux itself had a good-enough disclosure track record. Some of these hardenings became the default, some stayed controversial for a long time. AI-assisted vulnerability research made finding obscure vulnerabilities fast and cheap. So what does good enough even mean in this new era?

macOS 26 (Tahoe) is now available for Depot GitHub Actions runners. The `depot-macos-26` label runs on Apple M4 hardware with Xcode 26 and the macOS 26 SDKs preinstalled.