Docker Registry in production

Would you use the Docker registry container in production? Why or why not?

Edit: to clarify, would you choose docker registry over other private registry options

https://redd.it/rly8pq
@r_devops

Use ansible to provision VM's or containers

I've been using ansible to provision everything including a large server running lots of services. It's working pretty well but I like the idea of separating it into different VM's.

What are my options for doing this? I'm not sure if docker is the right solution for me since it limits to 1 command running per container unlike a VM.

And I don't need the caching capabilities of docker. Anytime I run ansible it should change whatever on the server has changed from the ansible script, like it does when you run ansible on a real server.

And there's no simple way to point an ansible playbook at a container, like you can point it to a server or VM through SSH. I'd have to copy my entire ansible playbook to the docker directory and then run the ansible command within the Dockerfile.

The system I use now where I'm provisioning the large server using lots of ansible roles works well. I just wanted to see if there's any simple way to reuse my existing ansible roles (and not have to change them much) to provision isolated VM's or containers which could bring some benefits.

https://redd.it/rm2apr
@r_devops

Anyone can help me ?

I'm developing a website and I need to deploy it in AWS with Kubernetes maybe. I'm still sure about all the technology I will use but if you know Kubernetes it is possible that you can handle other tools.

https://redd.it/rm2nx1
@r_devops

India Salary check 🇮🇳

Folks how much are Devops engineers getting in India? What's the max salary you have heard. Also mention the skillset

https://redd.it/rm3cd1
@r_devops

Introduction to DevOps on Coursera

I've mentioned here before about the graduate course that I teach on DevOps and Agile Methodologies at New York University (NYU) Courant Institute and Stern School of Business and some of you have expressed that you wish you could take it and I said I was brining parts of it to Coursera. Well... this is my second course in the series: Introduction to DevOps that you can audit for free. (the first being Introduction to Agile Development and Scrum)

The focus of the course is on the cultural and technological transformation that is required to be successful at DevOps. It is appropriate for anyone, including non-technical practitioners and managers, who want to understand the new mindset that is required to transform their organization into the DevOps culture. In order to change your culture, you need to learn new ways of thinking, working, organizing, and measuring and so the course is broken down into these four focus areas to ensure that your DevOps journey is successful (because DevOps a continuous journey, not a destination).

In the interest of fast feedback and continuous improvement, I welcome any comments about the approach or content. You can view the introductory video here: https://www.coursera.org/lecture/intro-to-devops/course-introduction-KhZRS

https://redd.it/rm6b0c
@r_devops

Load tester with custom scripting

Hey there,

I have an environment we are trying to load test, but my usual load testing software is failing me, so I was hoping to get some alternative suggestions.

There is a portion of the test where we make a call and get a JSON request back, then need to use that JSON data for our next call. Easy, right? Most any modern load tester can handle that.

The problem is the way the JSON I am getting is formatted. For some reason the JSON data is quoted, like this:
{d:"{v:200,a:"apple"}"}

So, the JSON has to be ran through the parser twice. First time you get D : (string with everything else) then run it a second time on the string to get the 'Real' data. My current load tester cannot handle this.

I doubt any load tester is going to handle this natively, so I guess I need to find a load tester that will take the response, let me hand it off to some custom code where I fix the JSON issue and let it hand back variables back to the load tester.

... I've already suggested that the JSON response we are receiving get fixed, but unfortunately, we have no control over how that comes apparently.

Anyone have any suggestions as to a replacement load tester that can handle this situation?

https://redd.it/rm6p9v
@r_devops

Recommend me an on-prem build server running on Windows?

I've been managing a Jenkins build server for a while, but I'm getting a bit fed up with stuff not working as smoothly as I want it to.

Can anyone recommend me an alternative (Preferably but not necessarily free)?

* It needs to be able to run MSBuild to build Windows desktop software using .NET and .NET Framework.
* It should be able to run on an on-prem Windows server, without external cloud dependencies.
* It needs to handle access permissions in a reasonable way (Individual permissions for Windows groups, running with restrictive non-administrative account permissions, etc).
* I would prefer it could be configured without learning yet another custom scripting language.
* It must be able to send emails to users who caused builds to fail (duh).

In an age where it seems everything has moved to managed cloud services, building websites, using Linux servers or docker images, finding on-prem tools for Windows infrastructure seems to be rare.

https://redd.it/rm8t1k
@r_devops

SWE or Observability?

Hi everyone, I’m looking to gain a little bit of insight from those who are more experience than me. This week I’ve received two internship offers from medium-sized companies, an SWE internship, and an Observability internship, for a few months. I’m currently not sure what’s the best option, what are your thoughts? Which one is more beneficial long term when looking into applying at larger companies?

Also, just to clarify, is Observability the same as DevOps? A different branch from DevOps? Does Observability include the same amount of coding an SWE would? I’m quite new to Observability, so any insight is appreciated.

https://redd.it/rm8nb3
@r_devops

Mono-repo vs. multi-repo

I know that there is a debate about storing all source code in a mono-repo vs multiple repos.

I am thinking about it from a security perspective:

A separation to multiple repos reduces the risk of source code exposure/leakage.
More granular access control can be applied on distinct repos.

However, maybe this isn't a high risk as having an insider threat or an account takeover that may inject a malicious code, so setting up codeowners will do the work even in a mono-repo.

What are your thoughts?

https://redd.it/rmadw8
@r_devops

Controlling GitHub Organization Repository Creation

Hi All,

For any of you that use or are a part of a GitHub Enterprise organization, how does your organization manage the creation of new repositories? Do you allow any member to create new ones, or do you have a process/control mechanism for their creation?

My organization has been exploring the idea of setting up a review process for the creation of new organization repositories (not forks or branches), but it doesn't seem like there's a straight forward way to do this aside from either only allowing the organization owner to create the repositories, or having a written policy without any technical controls.

Thanks in advance for your input.

https://redd.it/rm7bgy
@r_devops

Open Winter School on Software Engineering

We invite students and professionals in software engineering and related areas to participate in the first International Winter School on Software Engineering. The School is organised by HSE University’s Faculty of Computer Science and will take place online on February 14-18, 2022.

Participation is free, and everyone's invited: undergraduate and postgraduate students, young specialists, researchers, etc. You just need to register.

The School aims at spreading and sharing knowledge of state-of-the-art software engineering tools and techniques. Major topics include software process mining, architectures, software development methodology, coding and code management, teams management, testing, DevOps, CI/CD, empirical software engineering, and software engineering for researchers.

Among the School’s partners are JetBrains, Innopolis University, and Schaffhausen Institute of Technology. The speakers come from both industry and academia, including ones from the Max Planck Institute of Molecular Cell Biology and Genetics, IT University of Copenhagen, the University of Toulouse, etc.

Application deadline is January 28, 2022: https://cs.hse.ru/wsse

https://redd.it/rmd0ch
@r_devops

Starting my first DevOps Engineer position

Coming from the classic corporate IT world working as a Sys Admin, I‘ll enter the world of DevOps in February.

My programming skills are subpar to be bluntly honest and I have no idea how developers work.
I‘m also a little nervous since it‘s a complete switch from a Windows environment to Linux and Apple only.

It‘s a local web development agency and the technologies used in DevOps are Docker, Kubernetes, nginx, Ansible (among other stuff like Python scripting).
I got access to a cloud hoster‘s page and already created an Ubuntu server to screw around with.
Also got some documentation for Linux basics and some of the mentioned technologies but trying to work through that stuff I feel like an idiot who doesn‘t understand anything.


Could anyone provide me with resources to study and/or do some exercises?
Mainly DNS in Linux and Docker would be helpful.


Thanks a lot and y‘all have wonderful holidays!

https://redd.it/rmdxxe
@r_devops

Linux Foundation 35% off certifications - is this a good chance or a repeated campaign?

I want to get the CKAD certification. Linux foundation currently (until 12am tonight) has a 35% sale. Is this really a special deal and a unique opportunity or is this a recurring thing and I can expect such a sale soon again?

https://redd.it/rmfgca
@r_devops

AWS CodeDeploy multiple artifacts to same EC2 target.

I've encountered a problem with CodeDeploy pipeline that is driving me nuts. I'm new to AWS (come from Azure DevOps, where what I'm trying to do was trivially easy), so please bear with me.

In CodeDeploy, I'm trying to build a pipeline that deploys two artifacts from separate repositories to the same target EC2 machine.

In my pipeline, there are two source triggers from two separate CodeCommit repositories, one for each artifact I want to build. These triggers create two CodeBuild artifacts, each stored in S3.

Once the Deploy stage of the pipeline begins, the idea is to deploy both artifacts onto the same target server into two separate folders. For example, one artifact should be in "/home/user/artifact1", while the second would be in "/home/user/artifact2".

This "works"... it deploys the first artifact successfully to "/home/user/artifact1".

When it begins to deploy the second artifact, the first artifact is completely removed from the EC2 instance. "/home/user/artifact1" is now an empty folder. The pipeline then successfully deploys the second artifact. This leaves me with a successfully completed pipeline execution, but the final state of the EC2 instance has only the last artifact deployed.

I feel like I'm missing something simple... but coming from a heavy Azure background, learning AWS has just not been intuitive for me. Compared to deployment pipelines in Azure DevOps, the AWS CodeDeploy tool feels extremely limited. It seems like this should be trivial to do, so I'm obviously missing something... Any help would be great, because AWS documentation hasn't been very enlightening.

Thanks.

https://redd.it/rmenaj
@r_devops

Automate git push with Ansible

Hi everyone,

I’m trying to automate deploys. I have two repositories. First I am cloning the repository (called DEV) to my PC, then push from my PC to the repository called PROD.

Here my first yaml, this way I am cloning the external repository (DEV) on my local PC

--- -
hosts: localhost
gather_facts: false
tasks:
- name: clone repo test
git: repo: https://github.com/test/test-repo.git
dest: /home/user/git-test/
clone: yes
update: yes

How do I push the repository located in */home/user/git-test* (local) to PROD repository using Ansible?

Any examples?

https://redd.it/rmghv1
@r_devops

I created an Outlook add-in sample with python for the community

Hello everyone,

I just finished creating an Outlook apps addin template for python!

https://github.com/Masterjx9/Outlook-Addin-TaskPane-python

Its basically a modified version of the office addin taskpane JS repository from here: https://github.com/OfficeDev/Office-Addin-TaskPane-JS combined with a modified version of the azure webapp sample from here: https://github.com/Azure-Samples/python-docs-hello-world

Why is this good? - This allows you to use Python as the backend for your Outlook addin instead of using node.js. So you can use flask, and any other python modules with your outlook addin. Microsoft ONLY has examples from asp.net or node.js for there office addin samples, so I am hoping this will help others who want to make an addin for outlook or office in general but with using something like python.

https://redd.it/rmeri4
@r_devops

6 DevOps Trends for 2022

Wrote my view of DevOps trends for 2022. Would be interested in opinions or suggestions what else you think is trending.

Here is my list:

1. SBOMs are Getting Traction
2. Race to Replace Docker is On
3. Cattle Clusters and Inter-Cluster Ingress
4. Wider Adoption of Blue-Green and Canary Deployments
5. Bridging the Gap Between Internal Platforms and Production
6. Establishing DevOps Baseline (This means focus on education as too much legacy technologies are mingled with what is considered best practices).

Full text with more details per each trend: https://worklifenotes.com/2021/12/22/6-devops-trends-for-2022/

https://redd.it/rmlsei
@r_devops

Which enterprise VPN do you use?

We have internal services hosted in AWS that our employees must access. Does anyone have a VPN service you recommend that can scale, and automate (things like user creation and initial setup)?

Currently we use OpenVPN AS, but we cannot continue using that for two reasons:
- It gets very expensive when you reach 100+ users.
- You cannot automate the deployment or creation of users.

https://redd.it/rm9epf
@r_devops

I just wanted to say thank you. Thanks for being kind and supportive. Wishing you all Merry Christmas and Happy New Year.

As a programmer & DevOps engineer, I was committed to share my knowledge with community on DevOps, Docker, Kubernetes, Ansible, Cloud, Terraform, GitLab CI, Jenkins,Splunk, Prometheus and More!. Where I (We together) have reached now, I couldn't have done it with out your support.

When I started my YouTube journey didn't received much support, but it was my friends and you are in forefront of those who motivated me to kept going. I wanted to develop a set of free DevOps courses that will allow people with minimal coding experience, and take them step by step with clear plan to reach their goals. Whatever your background, as long as you are willing to put in the work you can find an entry into this field.This is completely free, there's no stealth upsell (really, there's nothing to sell, there's literally no way to pay me).

You gave me a safe place to be and encouraged my interests. Everyone went above and beyond to make sure I didn't fall through the cracks. And I wanted to let you know: I remember and you all will be in my heart. The work I did is not in vain.

You are loved, and appreciated, and make a literal lifetime of difference to a YouTuber like me. As I'm not a professional YouTuber, I'd love to hear your feedback and support

Thank you.

Admin: I just want to say thanks to all of the DevOps community.

https://redd.it/rmngsw
@r_devops

Building an Edge API Gateway with Fauna and Securing It with Auth0

In this tutorial, we’ll explore architecting REST APIs in a fully serverless manner by leveraging Fastly’s Compute@Edge, Fauna, and Auth0.

Read more…

https://redd.it/rmd7eh
@r_devops

CI for services that send email?

I have a service that must leverage SMTP (AWS SES or Office 365 APIs) to send invite codes to new members. So far it seems like this singular integration breaks any hope of E2E testing. Has anyone circumvented this, such as to implement CI?

https://redd.it/rmc0d0
@r_devops