The quick fix is raising ulimit. The real question is what is holding thousands of descriptors open and never closing them.
| Ceiling | Scope | Where it lives |
|---|---|---|
| Soft limit | Per process, adjustable at runtime | ulimit -n, LimitNOFILE |
| Hard limit | Per process, only root raises it | ulimit -Hn |
fs.file-max |
Whole system | sysctl fs.file-max |
Published on debugly.dev by Rohit Bhadani | Founder of Krova Cloud
A viral debate argues AI is not replacing SREs but deskilling them. Black-box tooling is eroding the debugging judgment that on-call needs.
Phorion found a backdoor in Claude Code 2.1.312 and 2.1.313 on Cursor Marketplace. It adds an SSH key and tries a reverse tunnel to 134.209.82.225.
OpenAI agents put two tasks in separate microVMs with no network and still traded secrets via CPU cache timing.
Kata Containers through 3.26.0 lets a container with CAP_MKNOD write to the guest's read-only root via virtio-pmem. 3.27.0 fixes it by moving to virtio-block.
