Apptainer
Apptainer's CDI support needed a privilege-escalation fix four months after it shipped.
A side-by-side editorial comparison of Cobbler and Inspektor Gadget — release velocity, themes, recent moves, and the top alternatives to consider.
Cobbler's 3.3 branch adds Kerberos single sign-on to the web UI.
Cobbler's public releases are all 3.3-branch backports. 3.3.10 adds Kerberos/GSSAPI single sign-on for the web UI through an Apache-terminated bridge and hardens the passthru authentication module against timing attacks. It follows the 3.3.8/3.3.9 pair, which brought openSUSE Leap 16 and Agama installer support, XCP-ng network installs and Python 3.13 support, and had to be re-cut after a CI publishing failure.
Inspektor Gadget keeps cutting the privileges an eBPF tool has to ask for.
Inspektor Gadget v0.57.0 lets gadgets run rootless with cap_bpf, cap_perfmon and cap_sys_ptrace, and adds a flag that drops CAP_SYS_ADMIN on Kubernetes deployments. v0.56.0 introduced experimental multi-tenancy through TokenReview and RBAC. The v0.56.1 and v0.56.2 patches backported USDT parsing fixes, so crafted binaries cannot crash the process or exhaust memory, and bounded owner reference enrichment.
Cobbler's public releases are all 3.3-branch backports. 3.3.10 adds Kerberos/GSSAPI single sign-on for the web UI through an Apache-terminated bridge and hardens the passthru authentication module against timing attacks. It follows the 3.3.8/3.3.9 pair, which brought openSUSE Leap 16 and Agama installer support, XCP-ng network installs and Python 3.13 support, and had to be re-cut after a CI publishing failure.
The branch is still gaining features aimed at enterprise data centres rather than winding down: new installer ecosystems in August, directory-backed single sign-on now. Authentication has been a recurring concern since the CVE-2024-47533 admin-API bypass. Releases continue to arrive as rollups from main.
Expect further 3.3.x rollups; whether the main line cuts a 3.4 is not visible from these entries.
Inspektor Gadget v0.57.0 lets gadgets run rootless with cap_bpf, cap_perfmon and cap_sys_ptrace, and adds a flag that drops CAP_SYS_ADMIN on Kubernetes deployments. v0.56.0 introduced experimental multi-tenancy through TokenReview and RBAC. The v0.56.1 and v0.56.2 patches backported USDT parsing fixes, so crafted binaries cannot crash the process or exhaust memory, and bounded owner reference enrichment.
The direction is lower trust: fewer privileges for the tool and less trust in the binaries it inspects. Multi-tenancy, rootless runs and hardened ELF parsing all remove reasons a security team would refuse to deploy it. GPU telemetry from v0.55 has no follow-up in the recent notes.
Multi-tenancy graduating from experimental remains the likely next milestone as it pairs with reduced-privilege deployments. Whether GPU telemetry gets gadget consumers soon is unclear from these entries.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Cobbler or Inspektor Gadget.
Apptainer's CDI support needed a privilege-escalation fix four months after it shipped.
Coder now patches three release lines at once, and the fixes keep landing on agent access.
Oh Dear's weekly changelogs have carried a security section five weeks running.
ShenYu's AI gateway plugins are back in motion, with 2.7.2 candidate tags in October.
TestingBot's autumn work is plumbing: a rebuilt tunnel and another bug-tracker link.
KubeArmor ships fixes as release-candidate tags, and its feed misses the finals.
See all Cobbler alternatives → · See all Inspektor Gadget alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Inspektor Gadget is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Inspektor Gadget is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Cobbler alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Cobbler alternatives" section above for the current picks, or visit /alternatives/cobbler for the full list with editorial commentary on each.
Top Inspektor Gadget alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Inspektor Gadget alternatives" section above for the current picks, or visit /alternatives/inspektor-gadget for the full list with editorial commentary on each.