Blog
News and updates
Partnership announcements, platform news, and perspectives on enterprise open source from Ametnes.
Security
October 25, 2026
PHP2Shell: Patch Nextcloud and Matomo for CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution in PHP. Nextcloud and Matomo services in the Ametnes catalogue are affected. Fixed service versions are available.
Open Source
October 10, 2026
Open source software in your own cloud, without all the ops overhead
Running open source in production is mostly operations work - upgrades, TLS, backups, patching - not installation. Ametnes deploys and manages hundreds of open-source data and AI services inside infrastructure you control, with a console, an API and a Terraform provider. Here is the motivation, what developers get, and a free tier that is actually free - no credit card, no trial clock.
Resilience
October 05, 2026
Disaster recovery is where open source gets left out
Open-source databases and brokers arrive with high availability, so teams assume disaster recovery is covered. It usually is not. This post covers the DR gap for RabbitMQ and PostgreSQL, the runbook that removes guesswork, why DR must be tested quarterly, and a manual, approval-gated GitLab pipeline for failover and failback.
Data platform
October 01, 2026
Building a private data lake with Dremio and Trino
Dremio and Trino are complementary open-source engines for a private data lake. This post covers the architecture, where each engine fits, and how to provision both with the Ametnes Terraform provider - and why sovereignty mandates and recurring ingestion costs make the private lake the better default.
Regulatory
September 23, 2026
Nigeria's CBN data localisation mandate is a warning for every global enterprise
Nigeria's Central Bank has given financial institutions until January 1, 2027 to process, store and manage payment transaction data generated in the country inside Nigeria. It is the clearest signal yet that data residency is becoming a condition of doing business - not a regional edge case.
Regulatory
September 18, 2026
AI regulation and self-hosting: why private deployment is an advantage, not a loophole
AI rules are fragmented, extraterritorial and risk-based - and none of them exempt you because your models run on your own hardware. Self-hosting is not a compliance loophole, but it is what makes residency, provenance, auditability and continuity achievable instead of aspirational.
Platform
September 14, 2026
Introducing membership management on the Ametnes platform
Invite teammates into your Ametnes workspace, grant scoped access to projects, resources and locations, and manage every membership from one place - with pending invitations, expiry, deny-by-default access and an audit trail.
AI Infrastructure
August 23, 2026
DeepSeek raises prices: the hidden cost of renting your AI
DeepSeek - the low-cost leader that reset the market's expectations of what AI should cost - has raised its prices. It is clear, public AI pricing is a decision you do not get to make.
Security
August 15, 2026
The Metabase breach: why your analytics layer doesn't belong in a shared environment
Metabase disclosed a 0-day attack on its cloud and patched a vulnerability affecting self-hosted instances from version 58 up. For Ametnes customers, the fix is a version bump - in the UI or one line in Terraform.
AI Infrastructure
August 2, 2026
AI OSS spotlight: Headroom AI, and how to self-host it on Ametnes
Headroom AI is an Apache-2.0 context compression layer that strips 20-95% of the tokens your coding agents send - tool output, logs, files, RAG chunks and conversation history - without changing the answers. It wraps the developer tools your teams already use, and Ametnes runs it in your own environment on the free tier.
AI Infrastructure
July 21, 2026
Open-weight models are commoditizing reasoning - and that changes everything
Chinese open-weight models - DeepSeek, Qwen, Kimi K3 - now match or beat the most expensive US frontier models on reasoning benchmarks. The premium for thinking is collapsing. For private AI infrastructure, this is the most important trend of 2026.
AI Infrastructure
July 13, 2026
The Leapfrog Moment: Why AI Changes the Math for Emerging Economies
When the UK built GOV.UK it replaced 1,900 government websites and saved billions. AI makes that kind of leapfrog accessible to countries that would never have had that budget before.
AI Infrastructure
June 23, 2026
LiteLLM is moving to Rust
LiteLLM is moving its AI gateway to Rust - welcome news for teams who have been frustrated by its performance under load. Memory spikes, OOM kills, and gateway overhead have made scaling painful.
Security
June 10, 2026
Private secrets management with Vault: a practical guide
This guide covers the private secrets management patterns teams adopt first - dynamic database credentials, KV v2 API key rotation, short-lived PKI certificates, and CI integration - with GitLab as one worked example.
Security
May 19, 2026
Vercel's breach: why production secrets don't belong in shared platforms
A compromised third-party AI tool and a broad Google Workspace OAuth grant gave attackers a path from corporate identity to Vercel deployment secrets. The incident is a reminder that where you store credentials is a core architecture and compliance decision.
Partnership
May 17, 2026
Ametnes partners with SUSE
Ametnes and SUSE align around Rancher so enterprises can run Ametnes-managed open-source solutions on a managed Kubernetes platform in private environments-with full day-2 operations and enterprise support.
Partnership
November 15, 2025
Ametnes partners with Dremio
Ametnes is a Dremio Authorized Partner, helping teams run a privately hosted open data lakehouse with governed access to sensitive data and predictable cost-without pushing production datasets into public cloud SaaS.