Trying to decide between KodeKloud to Cloud Guru.

I have 15 years of IT experience is software dev cycle and QA but I decided to change path and go devops.

Out of the two I mentioned above, who can please recommend from experience which one is better?

I'm looking for courses with hands-on lab and good up to date content.

https://redd.it/re6p2b
@r_devops

Scan your jars - log4j is everywhere

Trust me, you have more copies of it than you realize. You will find bundled into other jars. You will find it in that application you didn’t even realize includes its own jre.

And because of the nature of this vulnerability, many of them can actually be exploitable.

So scan all jars for JndiLookup.class. And when you find it, just remove it with zip -d or the jar utility.

In many cases upgrading is not a realistic mitigation strategy. Remove this class from jars.

If you want a suspenders-and-belt approach, also add LOG4JFORMATMSGNOLOOKUPS=1 to the environment. Put it in /etc/environment and also add DefaultEnv=LOG4JFORMATMSGNOLOOKUPS=1 to /etc/systemd/system.conf.d/log4j.conf

https://redd.it/re7nc2
@r_devops

Automated Deployments using GitHub Actions, AWS ECR, and Webhooks

I'm trying to spread a little bit of love in the form of knowledge. I thought this could be interesting to you folks. I wrote it a couple of months ago but I recently published it.

https://www.overflowedminds.net/writings/continuous-deployment-with-github-actions-and-webhook

https://redd.it/rdzij3
@r_devops

Survey about configuration management.

Hello guys, right now I'm studying for my bachelors degree in IT and my current assignment is about configuration tools. I am doing a survey about the popularity of configuration tools that are on the market right now. So I was wondering which tools you guys use primarily at your current jobs/companies. I already did some research as to which tools are popular which will be listed in this poll. If you use any other tools it would be appreciated if you mentioned them in the comments! Also whether the open-source or enterprise version is used isn't relevant for my research at the moment. If you could take a moment to fill in the poll it would be greatly appreciated :)

View Poll

https://redd.it/rdy3l5
@r_devops

Short Q & A

Hi,

I'm looking to get into devops by following the roadmap on well...roadmap.sh (Do you guys have any other suggestions? I was a Business Analyst for 2 years and now I just started as a System Integration Analyst so I don't really have any devops guy to ask for guidance for now)

One of the questions that I'm fighting with is what hardware/software combination do I need? Should I go for a Macbook or should I just get a ThinkPad and drop Linux (LTS?) on it?

If you learn GCP, can you transition afterwards to AWS for example or are they just super different niche options?

Should I go for Python? GO? Is there another good option and how long of a beard (read this as experienced with the language) do I need to grow in order to land a junior position?

Are there any specific certifications I should look into that you also help me learn?

https://redd.it/ream4h
@r_devops

Recommendations for sast, sca, static analysis services (SAAS only)

I've been fiddling with Snyk for a bit and it is clunky as all get out. Also, there's a big price jump if you want to user the SAST product.

I do not want to manage/host my own tool, I would prefer to use a SaaS product. Any and all recommendations are appreciated.

https://redd.it/redyp0
@r_devops

Azure 900

Any advice for azure 900 i have tbh 0 knowledge about clouds and my paper is on 26 dec still aroumd 14 days left for azure 900 certification im new to this. Any advice will be really helpful

https://redd.it/refm5a
@r_devops

OneDev 6.0 - self-hosted git service with CI/CD and issue board

OneDev is an open source self-hosted git service with built-in CI/CD and issue board.

The 6.0 release comes with some major improvements:

### Hierarchically organized projects

Projects can now be organized hierarchically to facilitate permission and setting inheritance, as well as cross-project issue list and board

### Issue burndown chart

For milestones with start date and due date specified, OneDev will display burndown chart for associated issues

### In-place edit of issue states and fields

Issue states and fields can now be edited in place in issue list and board, which makes issue editing much more convenient

### Issue link

Issue link to set up relationships between issues, such as parent-child, blocking/blocked by etc. Issue state transition can also leverage the link information to make the workflow smoother, for instance, to auto-close an issue if all its sub tasks are finished, or prevent an issue from being closed if any issue blocking it is still open. For details, please check this tutorial

### Helm chart to deploy into Kubernetes cluster

Helm chart now available in case you want to deploy OneDev into Kubernetes cluster

### Ingress and LetsEncrypt integration

When deployed into Kubernetes cluster, now it is trivial to set up ingress rules to expose OneDev web service, protected with LetsEncrypt certificate. For details, please check this tutorial

For details, please check https://github.com/theonedev/onedev/wiki/6.0

https://redd.it/renwzk
@r_devops

GCP execute api call based on alert

Hi, I want to configure some automation when memory usage on my GCE instance is above some threshold, basically I want the alert to trigger some Cloud Function to call an API or maybe there's a better way to do it....please share if you have previous experience.


Thanks!

https://redd.it/reoxt4
@r_devops

Why Linux is needed for DevOps in 2021?

This question come of course from a total noob. Please, do not be harsh on me. I just could not find detailed answer and some people that I know, don't use linux at all and while they are not 100% time DevOps, they never needed a linux on their PC. Maybe this is true only if you are doing only some basic stuff and you are not full DevOps guy?


As far as I know, most stuff just works on Windows right now (docker, kubernetes, ansible etc). Do they works much better on Linux tho? Is there anything that just does not work on Windows and just require Linux?


I know that most of the cloud run on Linux but if you are working with AWS or Azure, you still work with everything by using either AWS or Azure portal or this looks different and for example you need to use console a lot and thus ssh to the server etc?

https://redd.it/repdyd
@r_devops

Networking Training

Where can i find online instructor led training for networking protocols like bgp,dhcp, tcp/ip and major networking protocols. I can find books and courses but i learn better with an instructor. Thanks.

https://redd.it/rersgp
@r_devops

Log4J file extensions

Does anyone know if the vulnerability is affecting all file extensions or only .jar?

Thanks in advance!

https://redd.it/rezy81
@r_devops

Log4j2 - Runtime attack paths and exploit mitigation

Open source tool visualises attack paths using network data and cve data.

https://github.com/deepfence/ThreatMapper

https://redd.it/rf1u2i
@r_devops

Need some suggestions from experienced in the DevOps or who are in the field.

Hello, I am actually in Electrical field and jow pursuing masters in Electrical and computer engineering. I want to switch my career towards IT Side. I am interested in DevOps but I am not sure whether it would be right choice as I am non-IT guy and devops isn’t small field. And how much time it might take to learn basics of it? Can you please share a comment or your suggestion on it?

https://redd.it/rf3wnh
@r_devops

Jenkins Installation and Agent Configuration | Jenkins Tutorial

https://www.youtube.com/watch?v=hsqznwKxyf0

https://redd.it/rf78e6
@r_devops

DevOps Bulletin Newsletter - Issue 29

DevOps Bulletin - Digest #29 is out, the following topics are covered:

* **Using ChatOps to help Actions On-call Engineers**
* **How to automate Kubernetes Deployments with Postman**
* **How to Work Asynchronously as a Remote-First SRE**
* **Collect logs at scale with Rsyslog on AWS**
* **Review of "The DevOps Handbook", 2nd edition**

Complete issue: [https://issues.devopsbulletin.com/issues/logging-at-scale-done-right.html](https://issues.devopsbulletin.com/issues/logging-at-scale-done-right.html)

Feedback is welcome :)

https://redd.it/rfb3d4
@r_devops

What Exactly is DevOps Automation?

DevOps Automation is continuously evolving to help organizations in the pursuit of continuous application development and delivery. However, to ensure this, teams need to put great efforts to eliminate bottlenecks, improve product features, fix issues, and swiftly respond to customer requirements. Here are some best practices related to devOps automation 2021.

https://redd.it/rfhyd3
@r_devops

Getting started with GitOps - Maybe for beginners

A nice blog on getting started with GitOps basics. If you are a newbie, this will help you to know more about gitops and its principles.

https://blog.shellkode.com/getting-started-with-gitops-principles-93ec32a1e3a5

https://redd.it/rfhaec
@r_devops

Recommended course to get into Python scripting & automation for AWS Cloud and DevOps? (as a Javacsript Dev)

I learned to code Javascript and Node.js from a Udemy course and made a couple webapps, but then found my real love in this field in cloud computing and networking. Got certified with AWS as a solutions architect. Found out many AWS jobs are asking for Python scripting skills with AWS. I was really interested in learning Golang, and I see some demand for it, but most jobs I'm applying to ask for Python scripting and automation specifically.

So that being said, I don't need to relearn programming basics like what a variable is or how to do a loop. I also don't want to make a web app or game with Python - I need to specifically learn the scripting, devOps and cloud automation side of it. Can you recommend any courses for this specifically (and as someone who already has programming fundamentals). Something that can get me hands on Python scripting training for SRE, Cloud, DevOps and SysAdmin work with Linux etc and fill the gap in my knowledge to prepare me for working on the job.

https://redd.it/rfjpdf
@r_devops

Is security through obsolescence a phrase?

Because Log4j shenanigans, had to check some services. This service is 5 major versions behind and has no CVE's - and has been on my hit list for "Why the hell haven't we updated this", but our application code can't handle the 5 major version changes.

Security through obsolescence FTW.

https://redd.it/rfjwg1
@r_devops

I started learning GoLang so that I can write Kubernetes Operators and API extensions but...

... will this knowledge and skills really help me with my career or any project that I work on?

Personally I think that if I have the ability to use GoLang:

\- Fix/Patch operator issues

\- Write custom solutions that are directly bound to k8s

\- Write my own operator and easily administer projects

\- Learn Test Driven Development with Go

\- Be closer as ever to developers and understand their needs while developing the apps

Is this right and should I stop and go to Kubernetes only specialization or this path is possible in companies as a normal DevOps or DevSecOps job?

https://redd.it/rfhguh
@r_devops