The Luca Berton Blog
1931+ expert articles on AI, Kubernetes,Ansible, Platform Engineering, and cloud infrastructure — practical, hands-on guides and industry insights fromLuca Berton, AI & Cloud Advisor. Explore tutorials, deep dives, and the latest fromevery topic.

Securing AI Agents in Four Layers: Lessons from AGNTCon
Identity, policy, observability and containment: how WSO2, Arcade.dev, Airia, Diagrid, AgentCat, Mezmo and Akamai secure AI agents, from AGNTCon San Jose.
Conferences
Techorama Netherlands 2026: Five Conversations in Utrecht
Techorama's medieval edition in Utrecht: Luise Freese on the proof-of-concept prison, Avalonia UI, school schedules at scale, AI pentesting, and 1,300 people.
6 min read AI
Apsara Conference Amsterdam 2026: Qwen, Routing and NVIDIA
Alibaba Cloud's first Apsara Conference in Europe: a new Amsterdam cloud region, one Qwen API that routes between models, and NVIDIA on agent runtimes.
14 min read AI
AGNTCon North America 2026: Every Takeaway
Every takeaway from AGNTCon + MCPCon North America 2026 in San Jose: the week's three, then each of my 25 conversations for Udienza, guest by guest.
28 min read AI
Diagrid Brings Durable Execution to goose, LangChainGo and Mastra
Diagrid's AGNTCon news: a Catalyst integration lets goose agents survive crashes and resume at the last committed step, plus LangChainGo and Mastra.
3 min read AI
AGNTCon North America 2026 Day 1: MCP Tasks and Skills
My day one at AGNTCon + MCPCon North America in San Jose: MCP Tasks in Claude Code, Skills over MCP, elicitation, and an AAIF of 305 members and 10 projects.
13 min read AI
AGNTCon North America 2026 Day 2: Small Models, Swap Drills
Day two of AGNTCon + MCPCon North America: Tim O'Reilly on MCP, small specialist models beat a frontier one, the swap drill, MCP at 16x, and 14 interviews.
10 min read AI
Building an AI-Native Startup with Band Desktop, Cognee, Flexprice and Snyk
Build an AI-native startup with agent collaboration, persistent memory, usage-based billing and automated security.
7 min read Conferences
TalosCon 2026 Day 1: Talos 1.14, Hypervisor, Talos Cupar
From Hotel Okura: Talos 1.14 with 44 features and no reboots, Talos Containers, the Hypervisor alpha, Talos Director, Talos for AI, and Yardi on stage.
14 min read Conferences
Nordic APIs 2026 Day 2: A Valid JWT Is Not Trust
Shared Signals and CAEP for revoking JWTs in flight, Arazzo workflows for agents, and my own talk: my notes from day 2 of Nordic APIs Summit in Stockholm.
11 min read AI
Prove GPUDirect Storage Works on NFS over RDMA
How to prove GDS is really moving data over NFS over RDMA instead of silently falling back, and why Run:ai pods still showed NFS as unsupported.
8 min read Conferences
Nordic APIs 2026 Day 1: Your Next Customer Is an Agent
UnConference sticky wall, Curity, Axway and Nordic APIs keynotes, agent identity, MCP and fuzzing: my notes from day 1 of Nordic APIs Summit in Stockholm.
16 min read AI
40 AI Web Design Tools, UI Libraries, and Inspiration Websites for 2026
Explore 40 AI web design tools, prompt libraries, UI components, animation resources and inspiration sites for building standout websites in 2026.
7 min read AI
Agent-Friendly Docs: llms.txt and Markdown with Hugo
How to make documentation readable by AI agents: the llms.txt format, Markdown versions of pages, and a working Hugo setup, inspired by Docsy's keynote.
5 min read AI
Agent Harness Fundamentals: Building Reliable AI Agents with Claude Code
Join Luca Berton and Youssef Hosni for a free Claude Code webinar on agent harnesses, hooks, subagents, automated tests, guardrails, and human review.
5 min read Platform Engineering
Flatcar Container Linux: Immutable Kubernetes Nodes Guide
Why the host OS still matters in Kubernetes, and how Flatcar Container Linux delivers immutable, auto-updating nodes with Ignition, A/B updates and sysexts.
5 min read Conferences
Greg Kroah-Hartman on AI Bug Finders, the CRA and Linux at 35
My Udienza interview with Greg Kroah-Hartman in Prague: AI tools finding kernel bugs, kernel size per device, RISC-V, the CRA as an ingredients list, careers.
7 min read Conferences
Konstantin Ryabitsev on Email, b4 and the AI Patch Flood
My Udienza interview with Konstantin Ryabitsev in Prague: why Linux still runs on email, b4 and patch attestation, and the AI-generated patch flood.
7 min read Conferences
Linux Kernel CVEs in 2026: Why You Should Run Stable Kernels
The kernel is now the world's largest CVE issuer, with 5,681 CVEs in 2025. What that means for production teams, LTS end-of-life dates, and what to do.
5 min read DevOps
Migrating from HashiCorp Vault to OpenBao in 2026
A practical guide to moving from HashiCorp Vault to OpenBao: the in-place path for Vault CE, the export path for Enterprise, and what breaks on cutover.
5 min read DevOps
OpenBao 2.7: Post-Quantum TLS, HSM Keys and Postgres Scale
What's new in OpenBao 2.7, from the OpenBao team in Prague: external keys for HSMs, post-quantum TLS, read scaling on PostgreSQL, and secrets for AI agents.
4 min read Conferences
Prague Hallway Track: Framework, Ethereum and a Linux Phone
Three booth conversations from Open Source Summit Europe 2026: Framework's repairable laptops, the Ethereum Foundation, and a phone running mainline Linux.
5 min read Conferences
Percona's Alastair Turner: Relational Databases Aren't Going Away
My Udienza interview with Percona's Alastair Turner in Prague: 20 years of Percona, Valkey and licence-change forks, and why vectors belong in Postgres.
5 min read Conferences
Who Owns the Stack? The Sovereignty Panel at OSS Europe 2026
Thierry Carrez, Paula Grzegorzewska, Jonathan Bryce and CRob on digital sovereignty in Prague: choice, the CRA, Europe's missing link, and why not to isolate.
11 min read