ClouDNS
ClouDNS widens its SSL catalog and adds maintenance windows to monitoring
A side-by-side editorial comparison of nfs-ganesha and runc — release velocity, themes, recent moves, and the top alternatives to consider.
NFS-Ganesha's 15.x line turns to weekly fixes, input checks and dropping 9P.
NFS-Ganesha is a userspace NFS server used with Ceph, GPFS and clustered storage. Since 15.3 in early September it has shipped 15.4 through 15.9 roughly weekly. The releases harden XDR decoding against empty handles, owners and strings, fix a session use-after-free and an integer overflow in offset checks, add gRPC QoS APIs for per-client bandwidth and IOPS, and in 15.9 remove the unmaintained 9P protocol code.
runc 1.6.0-rc.1 lifts the 1024-CPU limit and refuses settings it used to quietly ignore
The 1.6.0 cycle opened on October 6 with a first release candidate that is mostly cleanup: deprecated libcontainer APIs removed, Go 1.26 now required, urfave/cli moved from v1 to v3, and the binary about 15% smaller on amd64. The changes with operational weight are that cpuAffinity and NUMA memoryPolicy no longer stop at 1024 CPUs or nodes, and that a container asking for a read-only rootfs without its own mount namespace is now refused. Eleven days earlier 1.5.2 worked around a kernel bug, present since v6.17, that corrupted memory inside runc and caused random crashes on cgroup v2. It also stopped runc exec --cgroup from escaping into a sibling cgroup.
NFS-Ganesha is a userspace NFS server used with Ceph, GPFS and clustered storage. Since 15.3 in early September it has shipped 15.4 through 15.9 roughly weekly. The releases harden XDR decoding against empty handles, owners and strings, fix a session use-after-free and an integer overflow in offset checks, add gRPC QoS APIs for per-client bandwidth and IOPS, and in 15.9 remove the unmaintained 9P protocol code.
The fast feature run of 15.0 to 15.3 (gRPC management, dynamic config, monitoring) has given way to stabilisation: input validation, Ceph ACL and multi-client fixes, GPFS performance. gRPC continues to grow, with QoS management added in 15.5.
Expect more 15.x patch releases on the same cadence. The 9P removal shows a willingness to prune unused code, but the entries do not name other candidates.
The 1.6.0 cycle opened on October 6 with a first release candidate that is mostly cleanup: deprecated libcontainer APIs removed, Go 1.26 now required, urfave/cli moved from v1 to v3, and the binary about 15% smaller on amd64. The changes with operational weight are that cpuAffinity and NUMA memoryPolicy no longer stop at 1024 CPUs or nodes, and that a container asking for a read-only rootfs without its own mount namespace is now refused. Eleven days earlier 1.5.2 worked around a kernel bug, present since v6.17, that corrupted memory inside runc and caused random crashes on cgroup v2. It also stopped runc exec --cgroup from escaping into a sibling cgroup.
The project keeps converting silent behaviour into explicit behaviour. Read-only requests that were ignored now fail, a umask that was dropped is now honoured, and poststart hooks moved to conform to the runtime spec. The same maintainers are shrinking the surface underneath, dropping the deprecated API and the high-level cilium/ebpf path, which took roughly 7.5% off the 1.5.2 binary. Stricter behaviour plus a smaller dependency set is what a component under every container host would be expected to do between majors.
1.5.0's notes pointed to a 1.6.0 in late October 2026, and the feed so far shows only rc.1, so further release candidates or the final are the next entries to expect. The refused read-only configurations are the change most likely to surface as user reports during testing.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either nfs-ganesha or runc.
ClouDNS widens its SSL catalog and adds maintenance windows to monitoring
fossa-cli's feed jumps from 3.17 to 3.20, with clearer container scan errors.
Gloo Gateway's October batch fixes proxies that silently kept stale endpoints.
Traefik v3.8 rc.1 is a Gateway API release; v2.11 keeps getting security patches.
Render's autumn changelog is plan tuning and runtime defaults while Workflows fills out.
Home Assistant keeps pulling hidden power-user features into the UI, now trigger IDs.
See all nfs-ganesha alternatives → · See all runc alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. nfs-ganesha is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. nfs-ganesha is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top nfs-ganesha alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "nfs-ganesha alternatives" section above for the current picks, or visit /alternatives/nfs-ganesha for the full list with editorial commentary on each.
Top runc alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "runc alternatives" section above for the current picks, or visit /alternatives/runc for the full list with editorial commentary on each.