any zero to hero course recommendations

Hi! I'm a Junior frontend developer, but I'm thinking about shift my career to DevOps engineering. I'm a self-taught developer and I need a full course which covers very basics to advance-intermediate levels. Any Udemy course recommendations would be great.

https://redd.it/10zrvm8
@r_devops

Preferred browser/search engines

This isn't really a DevOps question, per se... but I'm curious about some preferred tech choices for DevOps folks out there.

What are your preferred browser and search engine? I'm curious if I'm too paranoid about tracking and online browsing privacy. So what are all of you doing?

I'm all in on Brave and Duck Duck Go.

View Poll

https://redd.it/10wy516
@r_devops

Feeling like my career has stalled out, could use some advice

First, some background. I live in an area where the dominant industry is government/consulting (take a wild guess where). Unfortunately most of my professional experience is in this industry, though I have at least attempted to keep my skills relevant. Quick rundown of my experience:

* 5 years in support: Nuff said.
* 4 years in linux/web admin: This is where I got the bulk of my experience in \*nix, networking, config management, bash/python scripting, and cloud basics. However most of the work was supporting open source or commercial off the shelf apps, and I really wanted experience being on a product team. So I made a lateral move to devops.
* 3 years in devops/cloud infra: This is where I really started learning AWS, CI/CD, git, terraform, etc. But remember, still government: no containerization, mostly monolith app frameworks (rails, django, spring boot). Helped the company win a major multimillion dollar contract, got promoted twice, and ended up as a defacto team lead. I was not unhappy but somewhat bored, and I had the chance to work under a very talented ex-coworker at a bay area startup.

Currently I have been at this startup for 1 year as an "SRE". When I came onboard the release + deployment process was a nightmare (a majority of the prod deploy process still happened locally on developer laptops!), so I spent the better part of last year fixing it. Getting terraform into its own CI/CD system (spacelift), DRYing up the terraform and circle code, migrating lambdas to docker so we could have a unified build system (and stop hitting the zip file limit due to node\_modules), allowing for individual "service" deploys instead of a single monolith release, automating release notes, etc. While I wouldn't say things are perfect, things are MUCH better than they used to be.

Let me bring you to recently. My boss decided to leave the company a few months ago so I now report directly to the CTO. He's a good guy but he is a developer at heart and doesn't really know what to do with me and a more junior "SRE" coworker now that infrastructure, CI/CD, and security automation are in a reasonably good place. I use "SRE" with a heavy dose of sarcasm because reliability doesn't matter here. We have a few VIP clients who prop up the whole company but outside of them no one uses the product. The product itself is a data platform so as long as some VIP can log in and see reasonably accurate data, nothing else matters. Data issues are understandably handled by the data eng/sci team, which is an area I'm highly inexperienced in. Speaking of "services", the product is just a front end, API, and a bunch of highly coupled loosely tethered batch data processing tasks that are kicked off on schedule. Oh and to top it off we lost one of those VIP clients, did a 25% RIF, and lost our one IT guy, so now my jr coworker and I have to pick up random IT tasks.

After the RIF I decided to start applying for jobs again. My resume is senior enough to get some attention, but almost everywhere I have applied has rejected me after a first round technical screen with the hiring manager. I'm trying to get feedback but I think it boils down to not having enough general SWE experience for startups who dont need someone doing IaC 100% of the time. And not having any k8s or "microservices at scale" experience is cutting me out of mid to large orgs. So I'm now faced with the terrifying reality of a golden handcuffs situation with my current employer and I'm not sure what to do.

1. Go back to government? The bar is lower, the money is good, but I assume you've all read this post: [https://www.reddit.com/r/devops/comments/10yw7sm/question\_for\_any\_of\_you\_that\_work\_in\_the\_fedgov/](https://www.reddit.com/r/devops/comments/10yw7sm/question_for_any_of_you_that_work_in_the_fedgov/)
2. Take a pay cut to get a more junior/mid SRE position to gain k8s experience? That would hurt like hell as my wife has health issues and can't work full time, I'm the breadwinner.
3. Move into a lateral position

in solutions architecture or security engineering? This is what I'm considering most as there seems to be less competition for these types of jobs.

https://redd.it/10zv95a
@r_devops

Application portal?

If your company is anything like my place of work, you probably have a zillion different applications integrated with SSO and it get hard to keep track of all the login URLs, especially if the tool/application is used every now and then. Okta and OneLogin have what i'm going to call "application portals" where you have a grid of icons for all the applications that are used as the company. Do you host or use something like this? What do you use and what's your experience with it been like?

https://redd.it/10zwz1o
@r_devops

been learning webdev , and then got an offer to a free scholarship in either Devops or data analysis. should i stop webdev for now and learn python to prepare?

i've finished HTML and CSS, and started JS 1 month ago, should i learn python for the time being in order to prepare for one of these subjects? keep in mind that i really love Webdev and waiting for a webdev scholarship might take months or maybe never. but might as well take advantage of the free bootcamp

https://redd.it/10zuol3
@r_devops

Google Domains Dynamic DNS question

Probably a dumb question but I can't find the credentials info / options on google domains. This doc says I can generate credentials to update my dns records but I'm just not seeing it anywhere and searching for "View Credentials" doesn't turn up anything on the domain admin page.

Did they move this and I'm just not finding it? Am I staring at it and not seeing it?

https://support.google.com/domains/answer/6147083?authuser=0&hl=en

https://redd.it/10zueoy
@r_devops

Hashicorp Products

What is the general notion in the market regarding Hashicorp products? No doubt the orgs have adapted Terraform much faster, but what about Consul and Vault. Mostly which companies use this on a day to day basis and at scale?

Also is it worth learning and getting certified in these when you are not having projects where we can utilise this?
Or is it treated like a need basis certification?

https://redd.it/10zoojd
@r_devops

access control | database

As a part of daily activities, i need to give production db access to devopers and test engineers...

How is your organization doing access control ?

We are using Amazon rds

I do by creating user manually, give them the access and revoke on the date specified over the ticket..its consuming too much of my bandwidth

Any solution or idea to automate this ?

https://redd.it/10zncu3
@r_devops

Is “The Cloud Bootcamp” worth it?

Hey guys, so I saw an ad for a Multicloud Bootcamp ran by Jean Rodrigues. He promises to provide a hands-on experience with 4 cloud providers: AWS, Azure, Oracle, & Google. There will be projects based on Real World Scenarios implemented through this bootcamp. Has anyone enrolled in this and if so was it worth it? I already have a CS degree so I rather find another way to do hands on cloud projects for free if possible.

https://redd.it/1102w8u
@r_devops

Terraform Module Registry vs GitHub

I'm wondering what the benefits of a private Terraform module registry are over just sourcing your modules from a private GitHub repo?

The main consumers of the modules are going to be technical/developers, can't they just find the module they want/need in GitHub?

You can also version modules in GitHub with tags.

What other use cases/reasons are there for a private registry?

https://redd.it/1103z0l
@r_devops

windows 2022 EC2 Userdata powershell script isnt running

Im new to all of this but trying to get the userdata to automatically install WSL1 ansible jenkins I can run every command individually when i start a new instance but isnt running upon start up if theres any gurus that can spot an issue please help!

<powershell>

Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linu

[Net.ServicePointManager\]::SecurityProtocol = [Net.SecurityProtocolType\]::Tls12

$fileToCheck = "Ubuntu1804.appx"

if (Test-Path $fileToCheck -PathType leaf)

{"File does Exist"}

else

{Invoke-WebRequest -Uri https://aka.ms/wsl-ubuntu-1804 \-OutFile Ubuntu1804.appx -UseBasicParsing}

Add-AppxPackage .\\Ubuntu1804.appx

Write-Output "Installed the ubuntu18.04"

invoke-expression -Command "Add-AppxPackage .\\Ubuntu1804.appx"

Write-Output "Installed the ubuntu with backup attempt"

$str1="/Users/"

$str2="/AppData/Local/Microsoft/WindowsApps/ubuntu1804"

$hdd_name=(Get-WmiObject Win32_OperatingSystem).SystemDrive

$username=$env:UserName

[String\] $ubuntu1804_path=$hdd_name+$str1+$username+$str2

dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart

dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart

wsl --set-default-version 1

wsl --update

$str1=" install --root"

$set_user=$ubuntu1804_path+$str1

invoke-expression -Command $set_user

wsl sudo apt-get install -qq -o=Dpkg::Use-Pty=0

wsl sudo apt update -qq -o=Dpkg::Use-Pty=0

wsl sudo apt install -y

wsl sudo apt install ansible -y -qq -o=Dpkg::Use-Pty=0

wsl sudo apt-add-repository ppa:ansible/ansible -y

wsl sudo apt-get install -y python3-pip libssl-dev

</powershell>

https://redd.it/10yw441
@r_devops

Refreshing knowledge on web app deployment (CDN, load balancers, DDoS protection, etc)

I've worked at big co's for 10+ years where all of this stuff was taken care of by separate team(s). Now I find myself at a seed stage startup and we're gearing up to launch our product.

I haven't done this in years (no time for side projects anymore, kids etc) so I'm keen to brush up on the latest best practices and so on.

We're on GCP, and deploying a typical react FE (with SSR) and a BE API. Everything is currently on some canned Cloud Run domain behind an auth wall. So the upcoming work is to productionise the public-facing infrastructure.

https://redd.it/1106hu5
@r_devops

Dynamic Version number in a pipeline

Hi!
So a developer recently updated a project to python 3.10 from 3.7 - obviously that made the pipeline fail because the python docker image was based on 3.7. For our python projects we use poetry and define our dependencies and python version in a toml file.
My idea was to parse this toml and fetch the python version needed and store this as a variable and pass this to the docker image tag.
Do you think this is a future-proof approach or would you solve it in a different way?

https://redd.it/10yjtxl
@r_devops

A convenient way for backing up and restoring your installed packages

Do you ever change your laptop/computer and wish that there was an easier way to reinstall all your packages from popular package managers such as Homebrew, etc. As a developer, it's redundant to always reinstall my Homebrew packages.

PRP CLI tool: https://github.com/Liopun/prp

This tool is a solution for automating restoring/reinstalling your Homebrew packages. All you have to do is run the tool on your current system and that gives you full portability of your Homebrew packages.

It saved my day!!!

https://redd.it/10y7bzv
@r_devops

Food Order App and Eks

Should i use spot instances or on demand for a eks cluster im deploying an food order app .

https://redd.it/110an97
@r_devops

USING CI/CD to test multiple layered applications

So far, I’ve used CI/CD to build and deploy simple web projects, like Flask with its own web server, or SSG. Testing is pretty straightforward: you spin up a container, run unit tests and if you’re happy go ahead and deploy it.

What if you have a more complex stack, like Java+NodeJS? Do you build a single container with everything (doesn’t sound good to me), do you spin up multiple containers (or even clusters) on the fly for unit testing, or what?

Sorry if my question is too basic, haven’t found much on the Internet.

https://redd.it/110bfsg
@r_devops

Deployment scripts vs individual CD steps

Which do you prefer to use in your CD pipelines?

View Poll

https://redd.it/110cp32
@r_devops

Suggest container Linux distro go to deploy Kubernetes on a Bare Metal Server

Understand that bare metal isn’t always the best deployment approach for Kubernetes, the highest reason is simply that we need to spend lowest cost, our team cannot afford GKE or AWS EKS. I'm not biggest head here, but I have permission to choose solution, and I willing to deal with headache. We used to run Docker on Debian hosting, then now moving to container distribution option. I searched then get too much option to consider.

Now I'm still wondering with Alpine or Fedora CoreOS. And sad that I don't have any compare matrix with clear criteria. We're just heading to a stable option with less critical bug, as least as not crash frequently also easy to automate process in the future. What's your suggestion option for production workload? And is there any special note when we pick this option at all?

https://redd.it/110bts6
@r_devops

How do I push a specific image to a specific repository on Docker hub?

I’m a relative docker noob. I have several images on my machine, which I have seen when I run docker images. In particular, the first two lines of the output are as follows:

&#x200B;

|REPOSITORY|TAG|IMAGE ID|CREATED|SIZE|
|:-|:-|:-|:-|:-|
|flask-app|v1.1|8aadfefa0b2d|28 minutes ago|118MB|

I also have several repositories on Docker hub.

So, the question is: how do I push the image flask-app to a repository named flask-repo? What is the exact syntax to use for this? I’m really confused by all the slashes and colons required when I read the docs. The docs also seem to assume there’s only one image on my machine, but like I said, I have several: how would docker know which one to push?
Another bonus question, isn't "flask-app" the name of my image? I didn't create any repositories on my machine, they're on Docker hub. What's the difference between an image's name and it's tag? Which is more important?

https://redd.it/110ds77
@r_devops

A self hosting app to create one-time shareable secrets.

https://github.com/rpgeeganage/ots-share-app

I created this in last couple of days. I was let go from my software engineering job 2 weeks ago, I started building this last week while preparing for interviews.

1. Creates shareable links which valid for a maximum of 24 hours.
2. The contents are encrypted with AES in CBC mode, with a 256-bit key. (Using Crypto-js)
3. Passwords are NOT sent to the backend server.
4. The app periodically deletes encrypted content after it expires, and the encrypted content gets deleted once the web UI fetches it.

https://redd.it/110csxv
@r_devops