What’s new at CIQ?
We’re a team of scientists, Linux geeks, technologists, pilots, designers and more with a mission to make infrastructure something you never have to think about.

Another local privilege escalation exploit. And, here's what CIQ did... again.
As the Head of Linux Engineering, yesterday was tough. My organization had done an amazing job resolving Copy Fail and pushing fixes out for all our kernel variants. I was catching up on Slack and saw…

Run Fuzzball HPC workflows natively on Oracle Cloud
Fuzzball now deploys natively on Oracle Cloud Infrastructure (OCI), joining AWS, GCP, and on-prem bare metal as a first-class deployment target. A computational chemist can move a GROMACS simulation…

Copy Fail is a local privilege escalation exploit. Here is what CIQ did about it.
CVE-2026-31431 affects kernels built since 2017 and has a working public exploit in circulation. Patched kernels are available now for every CIQ-supported Rocky Linux variant. The vulnerability: CVE…

From default to defended. Taking command of your Linux security stack.
Your cloud provider's OS responsibility ends at image delivery. Everything above that belongs to your team. Server hacking (direct server compromise incidents) accounted for 45% to 56% of all reported…

Why Rocky Linux? Enterprise Linux, built to last
Enterprise Linux is the backbone of the modern internet. It powers the servers that run your cloud workloads, your AI training jobs, your financial transactions, and your telecom networks. It is…
Monthly newsletter
No spam. Just the latest releases and tips, interesting articles, and exclusive interviews in your inbox every month.
Read about our privacy policy.

The infrastructure AI actually requires
Spoiler alert: we've been doing it for decades! Every era of technological revolution follows a single, predictable pattern: the tools outpace the infrastructure. A critical gap appears, often…

How to run your own LLM on Fuzzball in minutes
Running your own language model can be a complex and imposing prospect: compute provisioning, GPU allocation, model downloads, service wiring, storage configuration, and authentication, with no…

LinuxFest Northwest 2026 trip report
LinuxFest Northwest has been earning its reputation consistently for 27 years now, and this year was no exception. Bellingham delivered: beautiful spring weather, a walkable waterfront, and a…

When the infrastructure matches the science
In CIQ’s recent blog post marking ten years of Apptainer, CIQ traced how Singularity gave research scientists something they had never had before: a software environment that kept pace with the…

The AI engineer era has an infrastructure problem. Here is what solves it.
In 2023, a newsletter called Latent Space published a piece that named something real. The post was called "The Rise of the AI Engineer," and its central argument was that a new class of engineer had…

Ansible audit trails don't belong in your SIEM
Ansible audit data ends up in the SIEM because that is where compliance infrastructure already lives. The SIEM did not earn the job. It was the only available option. Ansible logs serve two distinct…