Self-Host Weekly (24 April 2026)

Weekly Highlights

Microsoft's Xbox division earned a ton of goodwill with the community this week after its new CEO brought a slew of changes to the platform, including a rebrand from 'Microsoft Gaming' back to 'Xbox', Game Pass price decreases, a new logo, and an upcoming partnership with Discord (ew, David).

What does this have to do with self-hosting? Nothing, but it's been a fantastic distraction from a few other shady things they're up to that will quietly impact many of us, like:

• Automatically opting GitHub CLI users into telemetry collection
• Trying to make 'vibe working' a thing with a new Copilot mode in its Office suite
• Large-scale voluntary staff reductions amid increased AI productivity

But before you pat yourself on the back with the smug sense of superiority so many of us feel as we look down on our SaaS-ridden counterparts, the grass wasn't necessarily greener on the other side this week:

• Bitwarden CLI was compromised in an upstream supply chain attack
• The KitchenOwl (grocery lists, recipes) GitHub repo went down after the developer's account was mistakenly flagged for malicious activity (although it seems to be back up now)
• Mastodon's flagship server was hit by a major DDoS attack
• Nextcloud, Euro-Office, LibreOffice, Collabora, and others are still bickering over what I've now dubbed The Office Wars (read my 4/3 and 4/10 intros for additional context)

But, hey – somebody developed a customizable remote control card for Home Assistant that I'm looking forward to configuring this weekend, so that's something.

Happy selfh.st/ing!

Newswire

Ubuntu 26.04 LTS Now Available & Powered By Linux 7.0

The official release ISOs of Ubuntu 26.04 LTS, Ubuntu Server 26.04 LTS, and the various other Ubuntu flavors are now available for download.

PhoronixMichael Larabel

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious npm code

The Hacker NewsThe Hacker News

Renovate + Komodo - Updating at Scale in a Large Homelab

Renovate rules and Komodo actions for managing updates in a 50+ stack homelab

FoxxMD BlogFoxxMD

Anthropic tested removing Claude Code from the Pro plan

Untenable demand has Anthropic exploring new approaches to rationing its service.

Ars TechnicaSamuel Axon

Euro-Office: License compliance and what open source means - Nextcloud

Euro-Office reviewed the terms in the ONLYOFFICE codebase and found contradictions. We explain the legal basis, what we removed, and why.

NextcloudJos Poortvliet

Inside GitHub’s Fake Star Economy

Six million fake stars, $0.06 per click, and a VC funding pipeline that treats GitHub popularity as proof of traction. We ran our own analysis on 20 repos and found the fingerprints.

Awesome AgentsElena Marchetti

Feedback

Content Spotlight

Meet Anchor, an offline-first self-hosted note-taking platform. A relative newcomer in the space, Anchor places an emphasis on simplicity with a sticky note-like interface for organizing and managing thoughts and ideas. Features includes a rich text editor, color-based tags, sharing, attachments, backgrounds, pinning, archives, trash, and single sign-on via OIDC.

Anchor can be easily deployed via Docker and doesn't require additional containers to get up-and-running.

Links: Source Code

Videos and Podcasts

• The US Router Ban Has a Dark Question Nobody Is Asking | DB Tech
• Everything's Getting Worse | FUTO
• Audiobookshelf - A Free, OpenSource Way to Listen to Audiobooks | Jim's Garage
• One Script to Build an AI Coding Workstation in Proxmox | Servers@Home
• The Operating Systems I Actually Use in My Home Lab in 2026 (And Why) | VirtualizationHowTo
• Caddy: Everyone Says It’s the EASIEST… I Tested It | Christian Lempa
• Your Unraid Appdata is a Mess… Here’s How to Fix It | AlienTech42

Command Line Corner

Append the -p flag (--parents) to the mkdir command to create entire directory trees at once rather than using multiple mkdir commands to create nested folders:

$ mkdir -p appdata/wiki/bookstack

Executive Sponsors

Thanks to following executive sponsors, whose continued support makes this newsletter possible:

• 1Panel
• AFFiNE
• Atria
• Postiz
• Servers@Home
• tirreno
• Uncloud
• Uruky
• Vigilant

Submit Content

I'm always looking for new and existing self-hosted content to share in Self-Host Weekly. Submit the form below if you'd like to have your own content featured or have a suggestion for content types you'd like to see featured in future newsletters.