Kubernetes Scales to Zero, 1Password’s Controversy, and a BGP Hijack

Homelab Highlights for 2026-09-02: self-hosting and homelab notes worth knowing.

[Audio embed placeholder]

News Roundup

Building Reproducible AI Evaluation Workflows with Docker Sandboxes

Docker introduces an open-source SBX AI Evaluation Kit, a Docker Sandboxes Mixin Kit designed to make AI evaluation workflows more reproducible by separating execution from definition and capturing structured runtime evidence.

Why it matters: For homelab users experimenting with local AI models, this provides a lightweight, consistent way to track experiments and compare results over time without environment drift.

Source: Docker

1Password wades into a right-wing mess after funding a Linux project

1Password faces significant customer and internal employee backlash after becoming a corporate patron of the Omacom Foundation, which oversees the Omarchy Linux distribution created by the controversial figure David Heinemeier Hansson (DHH).

Why it matters: The story highlights how corporate funding decisions can alienate users and force a community to reevaluate their tool choices based on ethical associations.

Source: The Verge

Homey just made the smart home controller I hoped Apple would

Homey, owned by LG, launches the Homey Portal, a $249 touchscreen smart home controller with a tactile dial designed to simplify controlling lights, climate, and music across a complex smart home setup.

Why it matters: For homelab enthusiasts integrating smart home tech, this represents a new, dedicated hardware controller aiming to reduce complexity in managing multi-vendor ecosystems.

Source: The Verge

Tado’s new thermostat is designed as a Nest killer

Tado launches its second-generation Smart Thermostat X in Europe, positioning it as a replacement for Nest users after Google’s exit from the European thermostat market.

Why it matters: This marks a shift in the smart home landscape, offering a Matter-over-Thread alternative for users whose existing ecosystem is being deprecated, a common concern in long-term homelab planning.

Source: The Verge

Tool & Software Highlight: Kubernetes v1.37: Scale Workloads to Zero with HorizontalPodAutoscaler

Kubernetes v1.37 includes Beta support, enabled by default, for the HorizontalPodAutoscaler to scale workloads down to zero replicas and back up based on object or external metrics like queue length.

Why it matters: This core feature allows for significant cost savings on idle workloads that reserve expensive resources like GPUs, making it highly relevant for homelabs and production environments with intermittent processing jobs.

Source: Kubernetes Blog

One Thing to Try

Sources

Transcript

Host A: Welcome to Homelab Highlights, the show that surfaces practical homelab wins and useful self-hosted tools.

Host A: Kubernetes v1.37 is out, and the big news is that scaling workloads down to zero replicas with the HorizontalPodAutoscaler is now in Beta and enabled by default. According to the Kubernetes blog, this means an HPA using an object or external metric can now scale a deployment all the way to zero pods and bring it back when the metric changes. Before this, you needed an add-on or had to enable an Alpha feature gate. It’s now part of core Kubernetes.

Host B: The practical win here is for workloads like queue consumers or batch processors. If each pod reserves expensive resources—think dedicated CPUs or GPUs—scaling to zero when the queue is empty can save real money. The trade-off is cold-start time. The HPA has to see the metric change, schedule a pod, and start the app. That works fine when work can wait in a durable queue, but it’s not for request-driven HTTP workloads because Kubernetes Services don’t buffer requests while no pods are ready.

Host A: [thoughtful] The key detail is which metrics you can use. You can’t scale to zero using CPU or memory because those metrics come from running pods. Once you hit zero, there’s nothing left to measure. So you need an object or external metric—like a queue length from Prometheus—which exists independently of the workers. That means you need a metrics adapter like the Prometheus Adapter set up and working before you configure the HPA with a minReplicas of zero.

Host B: The controller also introduces a ScaledToZero status condition to distinguish between an HPA that scaled something down and an operator who manually paused a deployment. For anyone running a homelab with spotty workloads, this is a feature worth checking the upgrade notes for, especially around version-skewed upgrades. The blog notes that the feature is now considered stable for production use.

Host B: Over on the Docker blog, there’s a new open-source project called the SBX AI Evaluation Kit. It’s a Docker Sandboxes Mixin Kit focused on making AI evaluation workflows more reproducible. The idea is to separate the evaluation definition from where it runs, so you can execute the same YAML-defined workflow locally or inside a sandbox, and it captures structured evidence of what actually happened—stdout, stderr, exit codes.

Host A: That looks genuinely useful for anyone trying to compare model outputs or benchmark performance over time. The source code is on GitHub.

Host B: The Verge reports that 1Password is facing significant backlash after becoming a corporate patron of the Omacom Foundation, which oversees the Omarchy Linux distribution. Omarchy is an opinionated Arch-based distro created by David Heinemeier Hansson, or DHH. The controversy stems from DHH’s history of publishing what the article describes as overtly racist blog posts. 1Password’s CEO stated the donation was to the foundation, not an endorsement of DHH’s personal views.

Host A: [conversational] That’s a messy situation. The article says the donation has caused internal employee pushback and customers are asking for alternative password managers.

Host B: In smart home news, Homey launched the Homey Portal, a touchscreen controller for preorder at $249, and Tado released its second-generation Smart Thermostat X in Europe.

Host A: Finally, a serious security story from Ars Technica. Attackers executed a BGP hijack—that’s the protocol that routes traffic across the internet—to take control of IP addresses used by Softaculous, which makes the Virtualizor cloud management platform. They used that control to push malware masquerading as software updates. The article calls it a ‘comedy of errors,’ citing lax RPKI configuration, a failure to cryptographically sign updates, and poor monitoring.

Host A: If you’ve tried to rerun an AI evaluation weeks later and gotten different results, the SBX AI Evaluation Kit from Docker is worth a look. The core problem it tackles is that even if you keep your prompt, model, and scoring method fixed, your AI evaluation might not be reproducible because the execution environment drifted. Python dependencies change, local tools get updated.

Host B: This kit lets you define an evaluation in a YAML file that specifies the command to run. You choose an executor—‘local’ or ‘sbx’ for a Docker Sandbox. The runner executes it and produces a structured JSON artifact with the command, stdout, stderr, exit code, and duration. That artifact is the evidence of what actually ran.

Host A: For a homelab operator tinkering with local LLMs, that’s a lightweight way to start tracking experiments without a heavy-duty MLOps platform. You can version the YAML files, and the kit can group multiple evaluations into a suite. The tradeoff is that it doesn’t execute the models or provide judgment—it just runs your configured command consistently and records the results.

Host B: The 1Password story is really a community dynamics story. According to The Verge, the backlash was immediate after the company announced a pledge to the Omacom Foundation. One viral blog post headline declared ‘1Password Supports the Ethnic Cleansing of Europe’ because of the donation’s association with DHH. On social media, users started asking for alternative password manager recommendations.

Host A: The internal reaction seems significant too. The article says it obtained internal Slack messages showing employee disappointment. The CEO tried to distance the company from DHH’s views, saying the donation was to the foundation, while also noting Omarchy’s growth among their user base.

Host B: [with emphasis] It’s a tough spot. The article points out that DHH’s controversial comments aren’t new. So the backlash was predictable. For homelab users who are also 1Password customers, this forces a decision about who you’re indirectly funding with your subscription. The community response shows that for many, the association alone is a dealbreaker.

Host A: That’s Homelab Highlights for Wednesday. Until next time, happy hosting!