CIQ Blog: What's New in Enterprise Linux & AI Infrastructure
We're a team of scientists, Linux geeks, technologists, pilots, designers and more with a mission to make infrastructure something you never have to think about.
Connecting Warewulf Managed Compute Nodes to Active Directory
Connect Warewulf Pro compute nodes to LDAP with SSSD, and keep the directory password out of the node image that every node downloads
How CIQ got PHP2Shell fixes from upstream to RLC Pro
CIQ shipped PHP2Shell fixes for RLC Pro LTS 9.6 and 9.2 about 3.5 hours after upstream, built from PHP's source-only 8.0 fix.
OpenAI generated 948 Linux kernel patches, but CVEs aren’t solved
Last week, OpenAI announced it had discovered 948 Linux kernel vulnerabilities and generated patches it offered to the upstream Kernel.org project. It’s a real milestone for AI in security, and it’s…
Parameter count won't pick your local LLM for hard questions
Across 11 local models on GPQA Diamond, active parameter count correlated negatively with score. Sparsity and release date failed too
How CIQ shipped CVE-2026-98432 fixes in three days
Our kernel team spent the last weekend of October shipping patched kernels for a critical Linux CVE. On Tuesday, October 27, Anthropic reported a working proof-of-concept exploit for CVE-2026-98432.…
Cost of CVE remediation is paid in roadmap time
A complex CVE like PHP2Shell pulls engineers off roadmap work. See what that work involves, and decide whose engineers should do it every day.
Tokens per second won't tell you what an answer costs on a Strix Halo
On a Strix Halo, a model 13x worse per token can be cheaper per answer. Per-answer cost, speed and active parameters across 27 local models
Monthly newsletter
No spam. Just the latest releases and tips, interesting articles, and exclusive interviews in your inbox every month.
Read about our privacy policy.
CIQ Stratum Kubernetes Engine: Kubernetes for the AI Era
CIQ Stratum Kubernetes Engine (SKE) installs, joins, and upgrades Kubernetes from one signed file on Enterprise Linux 9 or later. CIQ Stratum Pro adds fleet management.
AI-found CVEs: what PHP2Shell means for your triage
AI turned a parked 2024 PHP bug into remote code execution. Here is what AI-found CVEs change in triage, and why the fix is now the work that counts
One flag took Gemma 4 from 52% to 100% on a Strix Halo
Reasoning off took Gemma 4 from 52% to 100% on short tasks at one-eighth the cost. Plus a prompt change worth 41 points, and models that ignore both
From Samba to post-quantum cryptography: Jeremy Allison’s open source journey
Meet CIQ Distinguished Engineer Jeremy Allison and explore his journey from Samba to FIPS compliance, open source security, and post-quantum cryptography.