Concourse Fly CLI Cheat Sheet

Concourse is a pipelined-based continuous integration system created specifically for Cloud Foundry. Easy to scale and run, Concourse is built on a few components, all written in Go.

Providing a command-line interface to Concourse, the Fly tool allows for resolving a number of tasks. For instance, one is able to connect to a shell in the build’s container or upload a new pipeline configuration into a running Concourse.

Download >> [https://www.altoros.com/visuals/concourse-fly-cli-cheat-sheet/?utm\_source=quora&utm\_medium=smm&utm\_campaign=Dikusar](https://www.altoros.com/visuals/concourse-fly-cli-cheat-sheet/?utm_source=quora&utm_medium=smm&utm_campaign=Dikusar)

https://redd.it/dinfj3
@r_devops

Terraform workflow and governance?

What is your terraform workflow, more importantly how do you handle governance/access for a team using terraform?

I have used terraform myself for testing and personal stuff, but interested in best practices in an org/team.

https://redd.it/dk96yq
@r_devops

automatically update website on server when i push a new updated version on github ? possible use of containers ?

I have a server online ( running windows ) - and i have a little webproject running here that are currently being updated frequently, and what i do there is ive had to set up a FTP server on the windows machine, where i manually transfer the code ive pushed to github.

Sometimes i need to go through RDP as its running IIS if i want to do some extra managment - 9 out 10 times its okay just to overwrite the webfolder with the new files.

But its a very manual process and am annoyed by it.

Am looking for a simpler model - i was thinking 2 things :

1) create every latest version as a container that runs a webserver, and then i just have to RDP and run the container again

2) create a script serverside that automatically fetches the github repository - and manually copies the files if theres a new version on top.

Around no 1 i might do some additional programming and setup a service i could instruct to reload the container.

​

Am new to devops - ive looked into Jenkins ( and it seems like massive overkill to the point that i actually dont understand it and how it would be able to do the above task ) - abit the same with CI pipelines where ive been looking for a totourial to guide me through exactly the above.

​

Anyone have some inputs ( for dummies ) how to achieve the above the most simple way ? or the dream situation, anyone knows of a docker container that does exactly that ?

https://redd.it/dimkee
@r_devops

MacOS 10.15 no longer supports 32-bit apps. What can you do?

On October 7, 2019, Apple released a new version of its Mac operating system, macOS Catalina. Version 10.15 contains many changes and improvements. One of the significant is the complete phasing out of 32-bit applications. As a developer of such macOS apps, what can you do? You can learn more [here](https://medium.com/pvs-studio/macos-10-15-no-longer-supports-32-bit-apps-what-can-you-do-e9547e27847c)

https://redd.it/dipmjy
@r_devops

JFrog Artifactory - allocating permissions automatically

We're using Artifactory to manage build artefacts, and promoting artefacts from one repository to another based on maturity level. Our naming convention is a bit like that suggested in [JFrog's whitepaper](https://jfrog.com/whitepaper/best-practices-structuring-naming-artifactory-repositories/), so the maturity level is part of the repository name. I need to allocate permissions by group, based on the maturity level for the repository. At the moment, I'm doing this manually each time I create a new repository, but it's error prone and boring, so I'm hoping to find a way of setting Artifactory up to do this automatically.

I see the include/exclude patterns you can configure when setting up a permission, but these seem to be for specifically excluding/excluding things *within* the repository. I want to set up an include pattern for the repositories to target with the permission. E.g. have a 'RC read only' permission that allocated read permission to all repositories with '\_rc\_' in the repository name.

Any ideas?

https://redd.it/di94k6
@r_devops

Automation to end users

Hello everyone.
My boss asked me to create a portal for the end users to run repetitive tasks and after some research I found the sma ( azure pack automation) that could solve this question.
What are your opinions about that?

https://redd.it/di8zs6
@r_devops

[GCP] VPN Gateway shared with other projects

Hey, I've already posted on stackoverflow but you know how it goes over there more often than not...

I'm in the process of starting the design of the networks (VPC, subnetworks and such) as part of the process of moving a rather complex organization on-premise structure, on the cloud.

The chosen provider is GCP and I read and taken the courses to be associate engineer. However, the courses don't go into details of the technical aspects of doing something like this, just present you with the possible options.

My background is of a senior backend, then fullstack, developer. So I lack some of the very interesting and useful knowledge of a sysadmin unfortunately (on that topic, if you have some "for dummies" resources to use, i'd appreciate as well)

My situation is as follows:

* On premise VMs on several racks, reachable only inside a VPN - I've no control over this, an external company manage them
* Several projects on the GCP Cloud
* Two of them need to connect to the on-premise VPN but there could be more going on
* Some projects see each other resources (VMs, SQL, etc) using VPC Peering
* Gradually we will abandon the on-premise, unless we find some legacy application that really is messed up

Now, I could just create a new VPN connection for every project from `Hybrid Connectivity -> VPN` but I'd rather create a project dedicated to having the VPN gateway set up and allow other projects to use that resources.

Is this a possible configuration? Is it a valid design? As far as I explored the VPN creation, it seems that I'll have to create a VM that will expose an IP acting as gateway, if that's the case I was thinking to be using the VPC peering to allow other projects to exit into the on premise VPN.

No idea if I'm talking gibberish here. I'm still waiting for some information (IKE shared key, etc) before attempting anything, so I'm rather lost at this point.

https://redd.it/di5qlq
@r_devops

Stats on "you build it, you run it"

Does anyone if any studies have been done on the adoption of "you build it, you run it" vs. a more traditional IT setup? I'm curious about two figures:

1. What percentage of large companies are working at least partly on a "you build it, you run it" model these days?
2. Any stats on whether those companies are more/less successful

https://redd.it/di4gkz
@r_devops

ansible + jenkins role

Can someone recommend a good Jenkins configuration role? I would like to see how its downloaded but more important configuration (plugins, security, etc..)

https://redd.it/dkjrga
@r_devops

Continuous Integration with IAR Embedded Workbench

https://sakurautio.github.io/2019/10/18/Continuous-Integration-with-IAR-EW/

Hey everyone!

Working with the IAR tools, I didn't really find any verbose community guides on how to set up a proper CI pipeline with the IAR tools (mainly automated builds, static analysis and unit_tests).
So I decided to write a blog post about it which could hopefully help people in working with the tools.

Now the blog post is pretty "bare-bones" and just showcases how to get started really. It doesn't go over the CI system configuration (like how to set up Jenkins or so...) because it was not the point - the point was to show how to integrate the IAR tools to a CI environment.

If you have anything to add or to critisize, feel free to speak your mind. If you have any questions, I will try to answer to them.

I hope this blog post will be of help for someone.

https://redd.it/dkkm6f
@r_devops

The friendly socket and TCP handshake (E04)

Fourth video in the series explaining sockets and TCP 3 way handshake! All sorts of feedback is welcome.

Video link: [https://www.youtube.com/watch?v=L6tePc9Pqxw](https://www.youtube.com/watch?v=L6tePc9Pqxw)

https://redd.it/dkjmh3
@r_devops

Zipkin or Jaeger? The Best Open Source Tools for Distributed Tracing

[https://epsagon.com/blog/zipkin-or-jaeger-the-best-open-source-tools-for-distributed-tracing/](https://epsagon.com/blog/zipkin-or-jaeger-the-best-open-source-tools-for-distributed-tracing/)

The article talks about the two popular open-source projects and compares them.

Do you use Zipkin or Jaeger? Why one over the other?

https://redd.it/di3s1l
@r_devops

Symbolic links in Virtual File System for Git

Hi!
I'm have merged 2 repos together as one monorepo. Getting files through Virtual File System for Git ( [https://vfsforgit.org/](https://vfsforgit.org/) ) works very well. It's really fast and easy to use. But when I try to get symlink from that repo it doesn't get resolved as link and just file with address to target is downloaded. When I try using plane git symlinks get downloaded as symlinks. So I guess the problem is in GVFS.
Has anyone had the same problem or could someone give hints what to research?

https://redd.it/di4j7e
@r_devops

Building Tiny Python Docker Images

I've been building docker images and optimizing dockerfiles for a while now.

However, until just recently, I hadn't found a way to cleanly build my python dependencies in one docker stage, and install them in another.

I found myself chasing down numerous modern tools, like poetry, hatch, and pipenv.

In the end, it was the familiar setuptools and wheel that worked for me.

I'd like to share my experience optimizing a docker project using this strategy.

https://medium.com/@ethan.edwards/building-tiny-python-docker-images-b029b194171d

*Note: I am not selling anything. All views and opinions expressed in the above article are those of my own, and do not necessarily reflect those of any past or present employer or organization.*

https://redd.it/dkqlm5
@r_devops

Help me understand DevOps and how better I can organize the complete process

So I work in a small team where we manage roll out of specific tools for different user.

We have same application being installed on multiple servers with different DB in the back end. This is mainly for multiple sub organizations we have.

I am part of a team in which one person handles 1 or more sub-orga. We roll out the new versions, handle customization etc.

Roll out:

\- This is a bit more complex process due to the fact that there needs to be many pre and post manual steps involved.

\- These are handled in "excel".

\- It only gets more complex as 1 excel is being used for all (for better overview)

​

Customizing:

\- There are whole loads of customization that can be done to the apps and each orga wants it differently.

\- Documenting them is only getting difficult.

there are whole load of manual job which I think is a waste of time. Unfortunately I don't have an idea for documentation/automation.

​

my questions:

1) How can I co-relate this to a "DevOps" job?

2) What tool sets do you guys use in terms of handling such scenarios including rollback?

3) I am trying to understand more simpler yet robust processes for such scenarios, which I couldn't find any.

https://redd.it/di2gc1
@r_devops

DevOps Jobs That Pay > $200k TC

What are you seeing out there? If you have one of these jobs, what do you do, where do you live, and how much do you travel?


I'm looking for a new job and I'm seeing a lot of jobs that pay $120k-130k base. They are middle of the road (aka "competitive", average). I have seen a good number that pay $160k base plus bonus. I've seen a couple that pay $180k-200k base plus bonus. They are out there but they're rare. These jobs are in cities that aren't SF, NYC, DC, or Seattle. I have seen a good number of 100% remote job that pay $150k-170k base.

For those of you who make $200k+ in DevOps / SRE / cloud what are you doing? Job seekers, what are you seeing?

EDIT: This thread is for jobs that aren't in SF NYC Seattle DC London or other super high cost of living areas.

https://redd.it/dks3ah
@r_devops

InSpec vs. Ansible check mode?

I've seen some people speaking highly of InSpec here lately but looking at it, I'm not sure what use it would be in my environment.

My company currently uses Ansible to do all the configuration, including security configuration, of our hosts, e.g., setting our sshd config options to comply with our security standards. The security configuration is baked into the Ansible playbooks we always run against all our hosts (and that we run when we build our OS images).

To test whether a system's configuration has deviated from the expected configuration, we can run `ansible-playbook --check` and see if it would modify any security settings.

From reading its web site, it seems like InSpec is a framework for checking that system configuration settings match some expected state, which is the same thing Ansible check mode does. What would adding InSpec to our setup buy us that we don't already get from Ansible? Is InSpec mostly of value in environments where it's not practical to fully automate host configuration?

https://redd.it/dktq8r
@r_devops

CCNA before focusing on Cloud? Yay or Nay?

Want to learn networking fundamentals and still on the fence about getting the CCNA because of a few posts I’ve seen on here. Posts usually are about Cisco certs not really being optimal for the cloud because of how abstracted the networking is etc

https://redd.it/dkuk2t
@r_devops

A noob sys admin here, some insight please!

Hi all,
This is the first time that I am posting in this subreddit although I constantly go through the informative threads in here.

I am in my early twenties and from Sri Lanka which is a small south asian island located near India. I just graduated with an Engineering degree and signed up as a Sys admin in a local company. I do have few questions to ask.

1. I am hoping to hop in to Devops as soon as possible. In order to do that I hope to acquire certifications on AWS, Docker, RedHat, Kubernetes and Ansible. Are these important or are there any missing important exams?

2. I am blown away by the salaries people post here who work remotely. (In our countries local pay levels are much lower as the living cost is not much high as in other countries.) What are the pros and cons of working remotely?

3. Any other advise from the experienced giants are much appreciated as I need win through my life! Any thing!! (These questions feel cheesy but that is I being honest (Early twenties, lots of hopes, lots of dreams, stupid and naive I guess))

Thank you very much for bearing through the long post and looking for valuable insights!

https://redd.it/dkur30
@r_devops

AWS and IAM permissions, trial and error?

I've worked with AWS for about 3 or 4 years now, and I love everything about it, but for the love of sanity I just can't get over how difficult it is to define permissions when attempting to apply least privilege approach. Am I the only one out there who just does it 100 times by trial and error in incognito window until you get the permissions just right? Is there a better way?
,

https://redd.it/dktcts
@r_devops

Cargo culting...? [discussion]

It seems like the entire industry is following one "right" approach and whenever something shifts towards some "new" technology everyone just follows without actually thinking about it (ehem, Kubernetes). What is your opinion about cargo culting in the DevOps world and IT in general? Why does it happen - is it lack of education, time constraints... something else? Is it a cause of us reusing too much and trying not to reinvent the wheel?

https://redd.it/dktipc
@r_devops