Reddit DevOps
269 subscribers
4 photos
31K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
How do I push a specific image to a specific repository on Docker hub?

I’m a relative docker noob. I have several images on my machine, which I have seen when I run docker images. In particular, the first two lines of the output are as follows:

​

|REPOSITORY|TAG|IMAGE ID|CREATED|SIZE|
|:-|:-|:-|:-|:-|
|flask-app|v1.1|8aadfefa0b2d|28 minutes ago|118MB|

I also have several repositories on Docker hub.

So, the question is: how do I push the image flask-app to a repository named flask-repo? What is the exact syntax to use for this? I’m really confused by all the slashes and colons required when I read the docs. The docs also seem to assume there’s only one image on my machine, but like I said, I have several: how would docker know which one to push?
Another bonus question, isn't "flask-app" the name of my image? I didn't create any repositories on my machine, they're on Docker hub. What's the difference between an image's name and it's tag? Which is more important?

https://redd.it/110ds77
@r_devops
A self hosting app to create one-time shareable secrets.

https://github.com/rpgeeganage/ots-share-app

I created this in last couple of days. I was let go from my software engineering job 2 weeks ago, I started building this last week while preparing for interviews.

1. Creates shareable links which valid for a maximum of 24 hours.
2. The contents are encrypted with AES in CBC mode, with a 256-bit key. (Using Crypto-js)
3. Passwords are NOT sent to the backend server.
4. The app periodically deletes encrypted content after it expires, and the encrypted content gets deleted once the web UI fetches it.

https://redd.it/110csxv
@r_devops
How do you request and manage certificates on the application gateway level?

Long story short: We use cert-manager to generate TLS certitifates. Works perfectly. The problem is that I need the certificate at the Azure Application Gateway (TLS/SSL termination past the gateway) level, which in turn requires the certificate to be present at the Azure Key Vault.

Right now we are manually logging in with a service principal and push the certificates into Azure Key Vault. The entire process includes > 100 lines of code to just copy a certificate into the key store. Isn't there an easier way?

Seems like there should be an easy solution to this, but I can't seem to find any...

https://redd.it/110bi53
@r_devops
EBay watcher/ view bot


Hi, is there a view bot that increases your views on your listing, in order to boost it and reach more people? I don’t know much about coding and any help is greatly so appreciated. Please guide me if this is not the appropriate sub for this question.

https://redd.it/110cm3p
@r_devops
How to build a release from a fork on GitHub using Actions?

I am trying to build a fork of Deno on GitHub using Actions. Specifically I have commented lines in Cargo.toml to not include features that will not be used in the resulting deno executable. This is my first edit excluding certain features

[workspace]
resolver = "2"
members = [
# "bench_util",
"cli",
# "cli/napi/sym",
"core",
"ops",
"runtime",
"serde_v8",
# "test_ffi",
# "test_napi",
# "test_util",
# "ext/broadcast_channel",
# "ext/cache",
"ext/console",
"ext/crypto",
"ext/fetch",
# "ext/flash",
# "ext/ffi",
"ext/http",
"ext/net",
"ext/node",
"ext/url",
"ext/web",
# "ext/webgpu",
"ext/webidl",
"ext/websocket",
# "ext/webstorage",
# "ext/napi",
"lockfile",
]
# ...


and so forth.

I have essentially no experience using Rust or GitHub actions. Is this possible? What do I need to do to build a release that I can download locally to test? Thanks.

https://redd.it/110m71x
@r_devops
Kubernetes: converting terraform deployments and resources to something better, like helm?

Hello /r/DevOps :)

Our predecessors have used terraform for everything. its not bad, but we do have to keep messing with the "state" of application deployments, configurations and associated settings inside kubernetes. It's not really a nice way to handle these things.

What I'm after is a useful tool that would help us convert these deployments to a helm chart.

The way we see it is that helm would suit us better should we decide to use something like flux or argo in future, but it seems like a lot of work to manually roll our own helm charts with values etc.

https://redd.it/110o1ka
@r_devops
Will working on one cloud platform pigeonhole me?

I've got experience with AWS and Azure, more on the Azure side. I've just accepted a new role which is Azure with a bit of on-prem. Do you think working more on Azure for a couple of years will make it harder for me to get a job that's AWS in the future?

https://redd.it/110p0hr
@r_devops
Is there anything you would improve?

FROM node:14-alpine

WORKDIR /app

COPY package*.json ./

RUN npm install

COPY . .

EXPOSE 1337

CMD [ "npm", "start" ]

What can I add to this simple node container? Could you provide a list of things I could add to this to make it more usable or improve performance?

https://redd.it/110w1ft
@r_devops
Question about Docker Compose for a project on remote machine

Hello! I have a project with a docker-compose.yml file and it runs locally without any problems since the code is located on a local machine but I want to run it on a remote host, preferably without placing there the whole source codebase.

Googling I found some suggestions to that but I'm struggling to get which solution is what I should go with or maybe there is even a better approach:

1) just upload it to registry and then docker pull it on a remote machine. The drawbacks here apparently are that free hub is limited space-wise and that I will also have to modify docker-compose.yml for a remote machine (right now it specifies where to find Dockerfile for each service, for remote it seems I'd have to use image: myname\myimage instead)

2) use docker context, create remote context, docker context use remote, docker compose up -d and it will be uploaded to a remote machine. Nice but very slow for some reason...

3) save images locally \ load them on a remote machine after transferring them over scp. I can't explain why but I have that gut feeling it's not a good approach while technically it could work

4) git clone the entire project to remote and then docker compose up. Simple, will work, but I don't want to move codebase over there, it's not necessary to have all the code to serve an app

5) use known and esteemed tools for orchestration. Overkill for my goal so I think

https://redd.it/110wskq
@r_devops
Terraform scripts

Just wondering the good practice in other companies, do the dev needs to write the Terraform infra code for their own project or the DevOps guys takes care of that?

https://redd.it/110xb3p
@r_devops
SOS: Laid Off, Possible Internal Transfer to SWE/DevOps role

Hey everyone, I need some help deciding my future. I was laid off in mid Jan, but am in the company system until Mar 1st. I was working as a full stack developer. I have 8 years of experience. I also have SOME experience with DevOps, mainly setting up CI/CD pipelines (build, testing, deploy) for some smaller projects. I have minimal experience with setting up observability.

A manager from another team looked at my resume and submitted me for a role working as a senior software engineer with a focus on DevOps. I would be working on the core product (building CRUD APIs, AWS lambdas, etc…), but I would also be the go-to for setting up observability, alerts, and the design of SLO/SLI for the applications in our AWS environment as well as setting up the CI/CD pipelines.

With my limited experience in DevOps/SRE, is this a role I would crash and burn in? Or is it trivial enough to setup observability and get comfortable within a few months (1-2)? I’m horrified at the idea that I would be the go-to person for that. If the situation was reversed-an Ops person with limited development experience being thrown into a development-heavy role, I’d expect that person to struggle for about a year, especially as a go-to.

I’m going through many emotions with my layoff, but I’m pretty much looking for “DevOps is non trivial given your background, you should not be the go-to for that stuff, you will destroy your team” or “with your experience, it should be pretty simple and you’ll be flying in no time”. Thank you, everyone 🙏

https://redd.it/110xbma
@r_devops
Linux Skills

Hi. Can someone suggest some good resources to learn Linux for DevOps Engineers?

https://redd.it/110yeb6
@r_devops
Start a bat file remotely which never returns anything (jmeter-server.bat)

So we are doing distributed testing of our web-app using JMeter. For that you need to have the jmeter-server.bat file running in background as it acts as sort of a listener. The problem arises when one of the slave machine out of 4 restarts due to the load and the test is effectively stuck right there as the master machine expects some output from the 4th machine. Currently the automation is done via ansible-playbooks which are called in Jenkins. There are more or less 15 tests that are downstream to one another. So even if one test is stuck, the time is wasted until someone check on the machines.

Things I've tried so far:

1. I've tried using the Windows Task Scheduler and kept the jmeter-server.bat to run without any user loggin in, but it starts the bat file in background which in-turn spawns all the child processes in the background as well i.e. starts Selenium Chrome in headless mode.
2. I've tried adding the jmeter-server.bat in startup and configuring the system to AutoLogon without any password to trigger a session which will call the startup file. But unfortunately the idea was scrapped by IT for being insecure.
3. Tried using the ansible playbook by using the win_command but it again gets stuck as the batch file never returns anything.
4. Created a service as well for the bat file, but again the child processes started in background.

https://redd.it/110xtz8
@r_devops
Moving on from Opensearch. What do I do with the historical logs/data?

Started using a lot of ELK, AWS, Opensearch for my personal project. With the scale I have (not a lot), I have migrated my present sys to GCP.
I have a years worth of system log data in Opensearch. I would ideally love to keep the data but can’t figure out the best way.

I can S3 cold store it but I wanted to see if I can store that on some tools I already use - Loki or Google cloud tools?

What would the pros and cons be here?

https://redd.it/11122t8
@r_devops
Alternate solution for splunk

We are dropping splunk and now we are looking for some alternatives for log monitoring and alerting. Should not be too costly like splunk. We just want log monitoring and alerting with calling webhooks in case some event happens

https://redd.it/1111vap
@r_devops
100 GB Docker Container

We use a specific software in our build process that is quite large (95 GB). It feels like a really bad practice to build such large docker containers.
But mounting the software into the container on specific nodes doesn’t feel „cloud native“ either.
What would be the right approach for this?

The software is mainly used to build components, not to run on a Webserver. The CICD Pipeline runs on Kubernetes.

https://redd.it/1113dwo
@r_devops
Technically a "new grad." I had to do mandatory military service which wasted a year of my life (had no access to a smartphone or internet). Parents are pressuring me to find a job. I don't know whether to start applying or continue learning?

When I graduated from uni I had to do 13 months of military service. I got "drafted" to use my IT skills to train police officials. They draft people based on their degrees in my country. I was working in a classified area hence I was prohibited from having any smartphone or internet access. I also had only a week of vacation every month where I could return back home.

For a while, I tried to study while off-duty. But I soon realized that it was practically unfeasible for me to remember and practice the things I was teaching myself because I was stuck with limited computer access the other 3 weeks of the month. So I decided to postpone the learning till after I was done with my service.

 

My plan going forward was to follow the "devops roadmap" often shared on IT subs. It involves getting foundational knowledge in Python, Linux, Networking, AWS, and IaaC. Currently I'm done with the python/programming bit. I want to go down the devops route as I find app configuration, deployment, and server administration interesting from the very little i've dabbled with it. Plus these seem to be very employable skills.

I live with my parents, who keep pressuring me to go look for jobs. I tried telling them it's not easy to find a job these days with my very limited skillset as everyone and their mom has programming listed on their resume. Here's my resume btw. Any feedback would be appreciated.


 


My question is where do I go from here?

1. Do I continue learning the rest of the stuff in the roadmap? (I estimate it'll take around 4 more months.)
2. Or do I just start applying to any job that takes me? What kind of jobs would I even apply for? I don't think I'm ready for a developer position. And yet, I don't have the necessary skills for a system administration one either.


I'm studying 6-7 hours a day, even going over leetcode problems in case they pop up in interviews. I'm grinding but I just need some clarification if it's the right thing to do in my situation. I think the most optimal time to study and learn these skills would be now, when I have no financial or family obligations. The big cost of this free time to study is that I'd have an "employment gap" on my resume.

https://redd.it/1114c0m
@r_devops
What you guys use to test lambda functions

Is there vm dockert that let me test my lambda fucntions on prem?

https://redd.it/110xrnc
@r_devops
How Much Coding in the Life of a DevOps?

I love hardware and spent my first few years in the industry in server admin (Linux/BSD) and networking (IOS certified). I like coding and have been in development ~8 yrs. My career goal now is to move to devops and also to work only remote + freelance. I just finished The Phoenix Project and The Unicorn Project and it was like a light bulb for me in terms of understanding what the discipline is about (and understanding better what people are talking about in this subreddit).

I like and fairly well understand the tech used in a modern devops stack (K8S, cloud platforms). But I would absolutely hate moving back to editing config files for a living. I want to code! I'm handy in a lot of languages, including Go.

Right now my experience is way too unfocused and all over the place to think I know what I'm doing in terms of applying for a devops job. I have another year or two in development to get some goals I had finished.

Are there spots for people in devops focused on development of tooling using Go (which seems like the dominant language in that realm), plus remote plus freelance? Any advice or other roles I should think about and consider working towards? TIA.

https://redd.it/1117xqw
@r_devops
Help with the architecture of ECS Clusters with Fargate in two availability zones (with AWS)

I'm always having trouble with creating the architecture for my projects. In the following I have listed what I need for my project, but I don't know how to make the architecture, so can anyone show me how it is done? I need a VPC with 2 Subnets and each Subnet is in another Availability Zone. It needs to have an Application Load Balancer. In each Subnet is an ECS Cluster and all that with using Fargate. I also need something to deploy 2 CI/ CD Pipelines in each Subnet which are connected to the ECS Cluster. Can I just use an EC2 instance, or is there something better? If it is possible, can you show me a diagram as an example?

https://redd.it/1119phc
@r_devops
Job description help - SQL developer, architect, engineer?

I need some help. I’ve been asked to design and develop a fairly important transactional database for my company, and I don’t have the requisite experience to do it. What are people who design and code SQL databases called? SQL developers? And if you personally were going to hire someone to develop a database that is subject to audit by federal agencies, what is the minimum amount of experience you would accept? I’m trying to advocate for getting qualified people to do this build rather than me as I have no formal training in database development and have only used SQL for reporting purposes (I.e. creating tables, views, and procedures for reports and not to track the official status and activities on an item).

https://redd.it/111acxt
@r_devops