HashiCorp vs Ubuntu

AI/Infra/VC News Roundup: AI Investments, Funding, Security

This newsletter from 'What's Hot in Enterprise IT/VC' compiles recent AI, infrastructure, and venture capital news. It highlights trends in AI funding, including Gimlet Labs' $300M Series B at a $3B valuation with multiple tranches, and Clay's $115M Series D at $7.1B. It also covers the decline in AI spending among top enterprises, the increasing demand for AI compute, and the emergence of cybersecurity threats using AI, such as Anthropic's report on Iran's misuse of Claude. The roundup includes commentary on the AI infrastructure buildout, the acquisition of Miro for $1.355B, and the rise of physical AI deployments like Skild AI's $100M ARR. Overall, it reflects the dynamic and rapidly evolving landscape of AI technology, infrastructure, and investment.

• Gimlet Labs raised $300M Series B at $3B valuation, led by a16z, with money in at $2.5B, $3B and higher tranches.
• Clay raised $115M Series D at $7.1B valuation, with clients including Anthropic, Google, OpenAI, Stripe, Visa, and UPS.
• AI spend among top 1% of businesses declined 10% in August to $7.2K per employee per month.

AI Projects Close PRs, Deploy Agent 'Software Factories'

AI-native open source projects are increasingly shutting down external pull requests and using agent-based 'software factories' to manage contributions. Vercel deployed such a system for its AI SDK project, which now authors 25–35% of merged PRs and closes 70–80% of issues. The Astro web framework adopted agent-driven triage and regained control of its backlog. Flue and tldraw now automatically close external PRs, converting them into issues or discussions, partly to prevent 'drive-by AI slop PRs.' Maintainers say they trust internally optimized agents more than community-generated code, though they acknowledge risks for community onboarding. Mitchell Hashimoto predicts large open source projects will eventually close contributions completely, while projects still invite reporting, discussion, and perspective from outside contributors.

• Vercel's agent-based 'software factory' for AI SDK authors 25–35% of merged PRs and closes 70–80% of issues within four weeks.
• Flue and tldraw automatically close external pull requests and convert them into issues or discussions.
• The Astro web framework adopted agent-based triage to reestablish control over its GitHub issue backlog.

Container Security Checklist for SREs

A technical how-to and checklist for site reliability engineers (SREs) covering container security best practices. The article recommends using minimal multi-stage base images to reduce attack surface, scanning container images (example with Trivy in a GitHub Actions workflow), running containers as non-root with Kubernetes securityContext settings, applying network policies and pod security standards, managing secrets via external vaults (e.g., HashiCorp Vault), enforcing resource limits, and automating weekly audits (using kubectl, skopeo, jq). The author is Dr. Samson Tanimawo, Founder & CEO of Nova AI Ops.

• Article provides a container security checklist aimed at SREs including image scanning, non-root containers, network policies, secrets management, resource limits, and pod security standards.
• Recommends image scanning in CI (example uses aquasecurity/trivy-action in a GitHub Actions workflow) and failing builds on HIGH/CRITICAL vulnerabilities.
• Advises using multi-stage builds and slim base images to minimize image size and attack surface, and running processes as non-root (Kubernetes securityContext examples provided).

Arduino® VENTUNO™ Q is available for pre-order with Ubuntu pre-installed

Canonical and Arduino (a subsidiary of Qualcomm Technologies) announce that the Arduino VENTUNO Q is available for pre-order with Ubuntu pre-installed, following their initial collaboration announcement in March 2026.

Install Apache Kafka 4.2 on Ubuntu WSL2 (KRaft)

This technical guide explains how to install and run Apache Kafka 4.2 in KRaft (Kafka Raft Metadata) mode on Ubuntu 24.04 running under WSL2. It covers prerequisites (Java 11+), downloading and extracting Kafka, configuring server.properties for a single-node broker+controller, initializing KRaft metadata (generating a Cluster ID and running kafka-storage.sh format), starting the broker, creating/listing/describing topics, producing and consuming messages, and common administrative commands and troubleshooting. The author highlights the removal of ZooKeeper in favor of KRaft, the importance of the controller.quorum.voters setting, and the two-listener port model (9092 for clients, 9093 for internal controller communication).

• The guide installs Apache Kafka 4.2 on Ubuntu 24.04.4 LTS running in WSL2 using KRaft mode (no ZooKeeper).
• KRaft mode uses an internal Raft-based Controller to manage metadata; a unique Cluster ID must be generated and kafka-storage.sh format must be run once before starting the broker.
• Example server.properties for a single-node KRaft deployment includes process.roles=broker,controller; node.id=1; controller.quorum.voters=1@localhost:9093; and listeners for PLAINTEXT on 9092 and CONTROLLER on 9093.