Writing my report (College) and getting lost/confused between Devops is a methodology and Devops is a culture.

I am writing my report for Programming "POE" and, upon my research, i am getting conflicted between Devops is a methodology or Devops is a culture. Is it both, one or the other?

https://redd.it/oev4ob
@r_devops

Someone please save me from GCP's god awful billing

I've been an AWS fan for obvious reasons but their granular billing flies under the radar. You can see what service used how much and the relevant amount that you were charged for it.

Google on the other hand, wants me to export the damned billing data to BigQuery and analyze it there. Why?! Why can't I see how long I ran the type of VMs for? Or how much Cloud storage I'm using?

Why can't I just see what you've so graciously tracked and slapped onto the credit card?

https://redd.it/oexmis
@r_devops

ICYMI: Phabricator is no longer actively maintained

Phabricator is no longer actively maintained as of June 2021. The company that back this product (Phacility) is winding down operations.

https://redd.it/oexmvu
@r_devops

Rundeck on K8s - has the industry moved on?

My team is working on upgrading our Rundeck deployment on EKS. We have an older helm chart and were considering just moving to the latest maintained one, but when we went to search for one, we noticed that most helm charts for Rundeck were depricated around early 2020. Did Rundeck lose it's niche while we weren't looking? If so, what are people who operate in K8s and AWS environments tending to move toward? If not, can anyone point me at a well maintained Rundeck helm chart? Thanks!

https://redd.it/oexde3
@r_devops

Angular vs React: Which js framework to pick for your project in 2021!

https://arohi-adhyaru.medium.com/angular-vs-react-which-js-framework-to-pick-for-your-project-6f57ef8cda39

https://redd.it/of1wl5
@r_devops

Transitioning to DevOps - what do I need to know?

I'll cut to the chase. I've had a fantastic opportunity arise for an internal role change. Going from IT Guy to DevOps. My intended career path was to end up doing DevOps/ SRE in come capacity, so not completely blind to the field. Somewhat pooing myself though, as I have a elementary knowledge of Unix, and can only write basic scripts in Posh. Rest of my exp. is desktop supp. & MS365 w/ some server work.

Oh, and I need to be up to speed in about 3 months. Well, at least able to produce work of some value. I know I won't be an expert.

In terms of tools and languages, my main priorities are Unix command line, Python and GCP (what we use). I've had some exposure to GCP, so that's not so scary. The role is in the biotech sphere so also need to learn more about computational biology some time.

All very exciting and an opportunity I absolutely need to crush.

So, what's next?

I need to learn:

DevOps Methodology
Python - have a live Pluralsight membership so going to get started there.
Unix/ Bash - as above
GCP - Get stuck in with their CI/CD tools, adding Docker and Kubernetes under this learning umbrella

My questions:

Any recommended reading or learning sources you have found useful in your journey?
I plan to read the Phoenix Project but have also started reading the Linux SysAd Handbook
Any useful Python libraries you wish you had known about or find useful day-to-day?
Any encouraging stories from people who have made a similar jump (please god)?

Of course, I will be checking in with the team as to what they think I need to know and in what order as soon as I can, to avoid wasting any time.

https://redd.it/of11cw
@r_devops

what is your advice for a student that want to break into devops after graduate?

All my classes for the past one year are online. Didn't really get much chances to talk to peers or tutor. Just want to get some advice from here:

How do you demonstrate your skills to employer when you apply for a jobs? All i have now is just building a web app that using the tools i learnt such as

1. Jenkins
2. AWS (ec2, route53, cloudformation)
3. Ansible
4. Docker
5. Ubuntu
6. Apache
7. Django

I wasn't sure if this is suffice. Appreciate for any advice.

Thank you.

https://redd.it/oetyfb
@r_devops

Images as a docker layers in Nexus3 OSS

Greetings!

Our community also stores our helm, docker, maven, etc. images on Nexus3 OSS. However, after some time, our number of images has reached a maximum, which creates a problem for us in terms of space.

We want to change the format of our docker images a bit.

Let all the images appear on an empty busybox, and the layer needed in each new build should simply be added as a layer on top of this busybox image.

For example, I don't want to write FROM section a "From tomcat, openjdk: 11.0.3-jdk-slim-stretch, etc.". take java 11 image template from somewhere and add it as a layer in busybox. For example, do you need java 8 version? At this point, download the java 8 version image template from somewhere and add it to busybox as just a layer.

Do you think this is possible?

https://redd.it/oeyqgi
@r_devops

Technical Interview Questions

I have my first Technical Interview on Thursday. The position is DevOps Engineer with focus on Terraform, Containers, K8s, and AWS.

I am just curious what can be expected as far as this hour and a half technical interview. What kind of experiences have you had with this part of the job search process? Any advice?

Thank you all for getting me this far!

https://redd.it/of6onm
@r_devops

Running Terraform scripts WITHOUT a Terraform environment in Direktiv

G'day DevOps,

Something more technical and definitely something we considered more "fun and challenging" to implement!

You can now run Terraform scripts as part of a Direktiv workflow. The workflow will pull the Terraform container, pass it the main.tf (or similar file) and execute it using the latest Terraform. It will also store the state output for use in other workflows as internal Direktiv variables.

We wrote a blog post on it here:

https://blog.direktiv.io/direktiv-building-a-machine-on-aws-using-terraform-without-a-terraform-environment-def24fe3221d

And the plugin for Direktiv is available here:

https://github.com/vorteil/direktiv-apps/tree/master/terraform

As always - let us know what you think about it!

https://redd.it/of8huh
@r_devops

I feel like I'm struggling to make the transition into DevOps

I'm currently in the process of trying to learn DevOps and I feel like I'm struggling. I feel like I have the 10,000 foot view of what everything does.

The issue is when I try to apply what I learn, I have some difficulties.

I also feel like I'm dealing with some burnout as well.

Does anyone have any tips/suggestions on what I can use as a learning resource? I'm trying to learn AWS/Docker/Kubernetes/Terraform.

Do you have any suggestions on a learning approach? maybe I have a bad learning approach.

https://redd.it/ofb1yf
@r_devops

Kubernetes Chaos Engineering Meetup

Hello people! 

This last Saturday of July, the LitmusChaos community is glad to invite you to the Kubernetes Chaos Engineering meeting where our community members discuss everything about Kubernetes, LitmusChaos as a project & Chaos Engineering. The updates, the use-cases, suggestions & queries! Mark your calendars for:

31st July 2021, 11 AM IST

To get your calendar invite, please fill in the Google form: https://forms.gle/FX9WLhGdhyaeNGFa9

RSVP here to join the meetup: https://www.meetup.com/Kubernetes-Chaos-Engineering-Meetup-Group/events/277895650/

To join our Slack community: https://slack.litmuschaos.io/

#kubernetes #chaosengineering #cloudnative #meetup

https://redd.it/ofihg1
@r_devops

Which online training platform is better

After Linux Academy taken over by A cloud guru and now news floating around that Pluralsight will take over Cloud Guru, can someone suggest based on their personal experience which platform is good to learn Cloud and DevOps tools.
There are many options like Cloud Guru, Udemy, Pluralsight, Cloud Academy, CBT Nuggets, INE, Coursera and many others but which one is up to date as per market standards.

https://redd.it/ofi9rv
@r_devops

Can anyone help me with how to set the correlation protocol as W3C default using powershell and also disable log client ip in Azure apim

Can anyone help me with how to set the correlation protocol as W3C default using powershell and also disable log client ip in Azure apim

https://redd.it/ofjlcn
@r_devops

Jenkins Username and Password

I installed Jenkins few days back on Amazon Linux virtual box. But now o forgot my Jenkins password or username. Is there any way, so i can get it back?

https://redd.it/ofcci4
@r_devops

Azure Linux VM, how to auto-shutdown when idling?

Hi guys,
I hope this is the subreddit where is reasonable to ask this question.

Let's suppose I'm hosting RH linux VMs on Azure, to be used as a developer environment.
I need it to shutdown if is idling for x minutes/hours and after a certain hour of the day.

What is currently the "state of the art" and less custom way to obtain this behavior?

Many thanks!

https://redd.it/ofoy1a
@r_devops

I'm confused about what DevOps means

When I first heard the term DevOps it was around the books called The Phoenix Project and The DevOps Handbook.

In those books, it seems the definition is basically: "Sys admins learning to do their work like developers; ie agile, release control, infrastructure as code, etc."

But in practice it seems to basically mean: "Sys admins dedicated to supporting developers by administering docker and doing nothing else that normal sys admins would do for IT Ops"

Did the definition change over time? Was it always the latter and I got the wrong message from the books?

https://redd.it/ofrf2y
@r_devops

Frame of Reference for DevOps Project Rates

Have a friend that's absolutely brilliant when it comes to what he can do. But he's one of these raw self-taught types (very driven types). However, he had no clue what his knowledge qualified him to do (which is crazy).

He has a extremely strong (comprehensive) set of programming, sysadmin, server preparation and maintenance, security, cybersecurity, hardware configuration + setup, network management, cybersecurity, and blockchain skills along with superb communication abilities. But he somehow had never even heard of "DevOps" before.

After I spoke to my friend, he got fired up to pursue some contracting opportunities. He's managed to get a client to sit down & negotiate. However, he has no frame of reference for what's considered a fair rate for the services requested.

So I wanted to ask everyone here what their rates would be for some (or all) of the following tasks:

1. Setting up and hardening a server on a VPS. So picking a server on one of the popular providers, installing one adequate for subsequent tasks, then hardening the server (comprehensively) to the greatest extent possible. Rotating SSH port, tarpits, creating keys (secure ones, of course), replacing kernel if necessary, firewall setup, threat detection, hardening ssh, etc.

2. Instantiating multiple applications (and tweaking them as necessary). All open source preferred, of course. All apps need to be containerized using Docker and isolated from one another. Hefty understanding of user & container permissions is a must. Orchestration skills needed too. They will also need to create Docker images in certain case, while altering other images. Some portion of the file system for running instances must be immutable (read-only). Should be reflected in the Docker file.

3. Extremely strong network security skills are necessary. NGINX proxy needs to be setup on the server. However, that's to reverse proxy each containerized instance, where most of them are using apache (some 'supervisor' controls exerted on containers using NGINX. Reverse proxy must be configured to only allow connections via TLS 1.3 ; http/3 must be stamped too, so perhaps using the 'NGINX Quiche' repo from Cloudflare will be needed (either way, must be done). Certificates should be of the greatest strength. All secure directives one can point to for NGINX file config., used, if possible. Additionally, having the ability to set up Tor within a container (v3 onion) that utilizes Apache in port 80 over said container then allows the reverse proxy (server) facing said container to relay an .onion domain. Also, DNSSEC setup required as well but not via any 3rd-party options, must be open source (using Bind). ed448 preferred as the dnssec algo (which may preclude the use of OpenBSD). DNS queries made by apps should use a pipelined setup that includes PiHole + FTLDNS + Unbound (DNS over TLS where possible w/o fail).

4. Cryptography knowledge is needed as well. The ability to create private keys (w strength). Use or create stateless pgp keys (ed448 in accordance with gnupg 2.3.1). Ability to generate a cert. from Let's Encrypt w ec-384 strength.

5. High familiarity with user authentication & setup. LDAP server instantiation mandated. Must be over TLS. Handshake must use SCRAM as well (of the highest caliber; SCRAM+). Password hashing algo must utilize argon2+ & utilization of JSON web keys (where appropriate) is necessary as well.

6. A strong understanding of Linux and UNIX computers is necessary. Some tasks / application setups may require one to affect code that will subsequently make various calls to the kernel of the container. Locking memory to stop info from swapping to page is a must. Knowledge of other API calls one can make (pkey, plock, mlock, etc.), and documentation of their uses + cache & process memory maneuverability required as well.

7. Ability to set up applications that functionally use protocols. So this would involve e-mail (imap, mta, sieve filters, web client, etc.; all must be secured accordingly w latest standards

like SMIMEA/MTASTS-TLSRPT/tls1.3/etc.), XMPP & Matrix (among others).

There are a few other things that I'm missing, but that's probably the main gist.

Thank you in advance for your feedback.

https://redd.it/ofs46w
@r_devops

is TechOps a thing?

I used to work in a role for a public sector entity who had a devops team and they also had a team of technicians who monitored the various applications who were known as techops.

​

I've since moved on from that role to another country but whenever I went to interviews I would mention Techops and would receive blank stares, so I just wanted to check if that's a real thing or if they made it up to make us sound special?

https://redd.it/oftpf6
@r_devops

Multiple Docker Containers Hosted In Nginx With URL Instead Of Subdomain



Hello, I'm a noob to docker, Nginx, and devops, so go easy on me.

I've followed a few tutorials that show me how to host multiple web apps through docker containers using Nginx and subdomains. I cannot create a new A Record for this domain, so I can't use subdomains, it has to be a url. If I could create a new A Record, I found a million tutorials that show me how to host it on ProjectA.example.com but since I don't have access to create a new A Record for the domain, I need to find a way to host it on something like example.com/ProjectA. Another obstacle is only port 80 is open to the outside, so all traffic must come through port 80 and be reverse proxied to whatever port the docker container is forwarding from.

So far I have an Nginx configuration that looks something like this

server {  
   root /var/www/html;  
   index index.html index.htm index.nginx-debian.html;  
   listen 80;  
   server\_name \_;  
   location / {  
      try\_files $uri $uri/ =404;  
   }  
   location /projectA {  
      proxy\_pass https://127.0.0.1:9001/;  
   }  
   location /projectB {  
      proxy\_pass https://127.0.0.1:9002/;  
   }  
}  

This works getting me to the homepage of the project. But the CSS of the website doesn't load, and whenever I click a link, it sends me to something like example.com/signup instead of example.com/projectA/signup. I tried making a wildcard location (location \~ /projectA.*) but Nginx didn't like that. I was thinking there's probably a way I could get something like if the referring uri contains projectA, send them to example.com/projectA$uri but I couldn't find the documentation on the syntax.

Basically the question is, is this a good way to tackle the problem, and does anyone have a link to a tutorial or some documentation on how to do this?

https://redd.it/ofvmlw
@r_devops