How do you organize your IaC with shared infrastructure and app infrastructure?

What are some of your practices for how IaC is organized and who is responsible for it? For example, shared/base infrastructure and infrastructure that is specific to an app. Is your app infrastructure in the same pipeline as the app or is it updated separately? Do devs have ownership over certain aspects of their application infrastructure or is that a separate team?

https://redd.it/115lxut
@r_devops

Is there any major benefit to having dev/stage deployments of Artifactory?

We're currently looking to self-host Artifactory in our AWS cloud using the AWS Partners solution: https://aws.amazon.com/solutions/partners/jfrog-artifactory-amazon-ec2/

JFrog is highly encouraging us to buy licenses for dev & stage in addition to prod deployments, and for high availability, this means 3 nodes per env, 9 licenses total...

I'm very curious how beneficial dev/stage deployments of Artifactory actually are? I definitely feel like I'm being upsold, but no one in my company has significant administration experience w/ Artifactory to know exactly how important these envs are? Opinions welcome :)

https://redd.it/115jg8w
@r_devops

What is the math behind networking?

I'm not a networking professional, but for no reason whatsoever, half of the reddit communities I try and ask (like Networking) won't let me post and instantaneously say I'm violating their rules even though it's physically impossible for anyone to have read them in the time it said I violated anything, so sorry that this doesn't directly relate to this community.

I know very little about queueing systems for operations research and network communications, but I have some experience in math the concepts, linear algebra, abstract algebra, calculus, statistics, etc which seems relevant to networking and building simulations.

Can anyone bridge the gap and explain some basic elements of how queuing systems relate to math, like calculus and linear algebra and how one might apply those mathematical areas to the study of optimal queueing systems and probability in networking?

https://redd.it/115wwds
@r_devops

What mathematical principles of devops are most closely related to theoretical math?

I'm not a huge fan of programming, but I have a knack for math and I enjoy working at it. What mathematical principles, in classical algebra, abstract algebra, linear algebra, calculus, or combinatorics, statistics or real and complex analysis, do you encounter most frequently in your study and/or application of dev-ops?

https://redd.it/11608dw
@r_devops

Need Advice Going from Sr Cloud Engineer to Manager

I'm looking for advice on how I can best demonstrate my ability to move up to a Cloud Manager role.

I've been at this company for 2 years now and I'm currently the only Sr Cloud Engineer on the team.
I want to stand out and demonstrate my ability to lead and deliver on projects but also molding my mind around what being a manger entails.

Here are some examples of current scope of duties:
\-Lead architecture, deployment and planning of new projects with key stakeholders/vendors
\-Build relationships with developers and other teams, continuing to promote DevOps culture and build platforms for their code
\-Build automation and Tooling
\-Migrated all projects to IaC and standardized CI/CD process
\-Train and mentor cross-functional teams on Cloud/DevOps terminology and best practices

I also have Professional and Associate level certifications in our cloud stack and always studying and looking to get more.

https://redd.it/1162okx
@r_devops

Any one freelancing ?

Hows it like compared to company role?
Do you make more money?
Do you trade sleep \ family time for money?
Is it possible to maintain such lifestyle over time ?
Do you get work from any of the online platforms ?

https://redd.it/1162kte
@r_devops

Best cloud solution for company wide upgrade to SAP/4Hana?

Our backend is made up of SAP Netweaver (some on premise, some already on the cloud). This year we are having a 10 month process of upgrading to SAP/4HAN in a general "cloudization" of the company.

IT admin wants to know which hosting solution is better, OpenSUSE or Redhat. However our company's core competency is not development. We do not have dedicated DevOps personnel, so I thought that maybe we should deploy our SAP infrastructure in a PaaS platform like Vercel or Netlify (obviously their equivalents to SAP. I am a web dev).

My reasoning is that while PaaS are much more expensive than IaaS, our lack of DevOps means we will be reliant on expensive consultants (which we already are with regards to Netweaver and SAP Basis) which will probably be far more expensive.

Suggestions or thoughts?

https://redd.it/1165us2
@r_devops

Does serverless Vercel/Netlify/Deno hosting support listening for message broker (e.g. Kafka) events?

I am investigating some serverless hosting options, and these three in the title look amazing, especially Vercel. I have already deployed a basic Svelte front end application in just 5 minutes. I found that I can even host a python application with it.

However, I wonder about appropriateness of these serverless platforms for hosting microservices. Let’s say my microservice needs to listen for Kafka events and then execute some code that processes them. Is it possible?

I have this question because these serverless hosting platforms appear to advertise being on-demand, which as I understand runs the code when there is an HTTP request incoming (not sure if accurate). However, if I want to listen for message broker events, I need the code running all the time. Unless I make event consumption through REST endpoint and have a 3rd party connector listening for events and making REST queries, but not considering such approach now.

https://redd.it/1165pq6
@r_devops

Where to find ARM buildpacks for Node.js?

I use Oracle Ampere arm instance to run Dokku inside Docker container.

I installed pack on the host:

(curl -sSL "https://github.com/buildpacks/pack/releases/download/v0.28.0/pack-v0.28.0-linux-arm64.tgz" | sudo tar -C /usr/local/bin/ --no-same-owner -xzv pack)

ubuntu@arm1:~$ pack --version
0.28.0+git-b10e41f.build-3729

I had to bind mount pack binary inside the Dokku container so it can see it:

services:
  dokku:
    image: dokku/dokku:0.29.0
    container_name: dokku
    ports:
      - "3022:22"
      # - "8443:443"
      # - "8080:80"
    environment:
      - DOKKU_HOSTNAME=dokku.${DOMAIN}
      - DOKKU_HOST_ROOT=/var/lib/dokku/home/dokku
    volumes:
      - ./dokku-data:/mnt/dokku
      - /var/run/docker.sock:/var/run/docker.sock
      # mount pack binary
      - /usr/local/bin/pack:/usr/local/bin/pack

But when I push and build Next.js app I get this:

fc251a6e7981: Download complete
e79f28f8f2a6: Verifying Checksum
e79f28f8f2a6: Download complete
fc251a6e7981: Pull complete
e79f28f8f2a6: Pull complete
Digest: sha256:f75a04887fced3ae0504a37edb2c0d29d366511cd9ede34dbb90c5282b106e79
Status: Downloaded newer image for buildpacksio/lifecycle:0.16.0
===> ANALYZING
remote: [analyzer] exec /cnb/lifecycle/analyzer: exec format error
remote: ERROR: failed to build: executing lifecycle. This may be the result of using an untrusted builder: failed with status code: 1
remote:  !     Removing invalid image tag dokku/nextjs-blank-dokku:latest
remote:  !     App build failed
To dokku.arm1.localhost3002.live:nextjs-blank-dokku
 ! [remote rejected] main -> main (pre-receive hook declined)
error: failed to push some refs to 'dokku.arm1.localhost3002.live:nextjs-blank-dokku'

I assume I need to pass url to custom BUILDPACK_URL that will work on arm, where can I search such buildpacks and do you already know some that will work?

https://dokku.com/docs/deployment/builders/herokuish-buildpacks/#detection

https://redd.it/1167klu
@r_devops

Having root directory inside location block in Nginx

Hi, I've got to know that we can have the root directory specified inside the location block of a nginx configuration instead server block. So I tried and when I redirect to that location, Nginx returns 401 Unauthorized.

Below is my server block.

server{
listen 80;
server_name plex.hylon.com;

location / {
proxy_pass https://127.0.0.1:32400;
}

set $weekend 'NO';

#check if weekend

if ( $date_local ~ 'Monday|Friday' ){
set $weekend 'Yes';
}
location /demo {
root /sites/demo;
return 307 /index.html;
}

}

When I pass [`plex.hylon.com/demo`](https://plex.hylon.com/demo) I got the 401 Unauthorized. Any reason why I can't do this? TIA

https://redd.it/1168kvs
@r_devops

Are any of you worried about AI affecting DevOps Engineering jobs?

Title. Jw was the DevOps community is thinking about this topic.

https://redd.it/1168rak
@r_devops

Devops' intense focus on fast code releases inevitably compromises security. While development cycles have become agile, security processes have remained stuck in the past.

Good article. Source.

On one hand, the agile development cycle demands rapid code changes, which often exclude security as a hurdle to quick development. On the other hand, traditional security processes tend to be slow and disconnected from the development cycle, causing production delays. Additionally, containerization and the rise of attack vectors, as well as cloud architecture, can further complicate security efforts.

What are your thoughts on these challenges, and how do you approach DevOps security in your own organization?

https://redd.it/116an8l
@r_devops

Coding challenges for a senior role?

I ended an interview process early because I had completed 3 coding challenges on codility and now they want me to do two pair programming exercises on a project they're working on. That's where I ended it. Just wondering how common it is among y'all to have coding or programming interview questions? This was for a principal devops position.

https://redd.it/116bjgj
@r_devops

Bad experience of Udacity's "Cloud DevOps Engineer"

I just went through a frustrating experience with this program. I was disappointed there was so little on EKS but decided to go ahead and finish the thing since I had paid for it. Before I started the final project I requested to use gh actions to the CI/CD part of the project instead of Jenkins or Circle CI (I am not sure why Jenkins is a choice here as it is not even covered at all in the course). I was told I could very clearly my a mentor in the forums. A month later I finally finished it and after quite much work it was rejected for, that's right, using gh actions. The total of my feedback was a red line under this requirement. I was told I would have to start again and the original permission I was given was a mistake. This would of course mean I would have to pay quite a bit for another month and this decision obviously had absolutely nothing to do with pedagogy or the my learning. I don't really need the paper, so I just said "no more". All in all, I was left feeling the whole thing was a bit of a sham.

https://redd.it/116d43s
@r_devops

Hiring challenges - looking for some feedback

Hi,

My company has implemented some new tech challenges recently. Our hiring process involves the candidates attempting these challenges (offline) in advance (they get given them around a week before their interviews), and they then walk through their solutions in our "tech interview" (while getting questioned by a couple of lead/principal engineers). This comes after a half an hour screening (basically done to get a sense of the candidate's background, motivations, etc).

After the tech interview, if they pass, they'd have a behavioural/managerial interview later in the day. If they pass that, they'll be given a verbal offer by the end of the day.

We send the same tech test out to all levels of candidate, with the expected quality of answers increasing depending on the position they've applied to, etc. I'll be rewriting the wording of the challenges, but the basic gist will be there. We have a variety of roles, some leaning towards SRE, some towards Cloud Engineering, some being more Platform Engineering, and we like to use these challenges to work out strengths/weaknesses/where new hires will fit in best. I work for a very large engineering organization, and we run basically any type of software project that you could think of.

Challenge One

"Automate the deployment of a single web app on the cloud provider of your choice. Bonus points if the app is running."

The idea behind this is for the candidate to write some terraforn/pulumi etc that will deploy... something. During the interview, we'll get them to explain what they've built, and ask them how they'd "productionize" it. We'd love it if there's pipelines etc (both to deploy the IAC, and to deploy the app), but it's not strictly required (as long as the candidate mentions in the tech call that pipelines would be required to get it into production). We'll also look for red flags like hardcoded credentials, local state (and them not thinking this is bad, etc). This also aims to verify candidates' tech experience - questions will be asked if they say they're an expert on Serverless, but they then deploy this "app" onto bare EC2 instances using userdata.

Challenge Two

"Programatically list out the top 15 articles from a famous website."

The idea here is to test the candidates' scripting skills. The website in question has an API with no authentication - we'd like people to find it (instead of using web scraping), and write some code that calls it. The applicant would get bonus points for testing, etc, but again this isn't required (we'll ask about this during the call anyway). The very best answers that I've seen combine this with the first challenge, and deploy a basic app that displays the top articles by calling the aforementioned API.

Challenge Three

"Our client suspects their systems are under attack. Analyse the attached log files to find the nature of the attack, and make recommendations that would improve their security."

This is my least favourite challenge. We attach a \~1000 line log file, that has logs which show ongoing SQL injections/DDOS attacks/API calls with no tokens, etc. The idea being that they'd identify the attack, recommend a WAF, recommended HTTPS/JWT tokens, etc etc. The very best candidates ingest the logs into something like Elasticsearch, worse candidates go through each line manually (and don't see that this would be hard to scale).

Would be great to get some feedback on these challenges (too strict, not strict enough, etc etc). I'm happy to answer any questions/clarify things in the replies :)

https://redd.it/116ijed
@r_devops

Stay up-to-date on the latest trends and insights in DevOps with our weekly dispatch!

Attention all tech enthusiasts! 🔥

Do you want to stay up-to-date on the latest trends and insights in Tech Acceleration & Resilience, Site Reliability Engineering, Enterprise DevOps, and Platform Engineering? Look no further - sign up for my newsletter and join the community of tech experts!

\--> https://techaccelerationandresilience.com/

As we enter a new era of technology, it's more important than ever to stay informed and connected with the latest developments in the field. With my newsletter, you'll receive news on the cutting edge of tech innovation, straight to your inbox.

From the latest in Site Reliability Engineering best practices to the emerging field of Platform Engineering, our newsletter is your one-stop-shop for everything you need to stay ahead of the curve. Join the community of tech enthusiasts and never miss a beat in the ever-evolving world of technology.

Sign up today and be a part of the conversation on the future of tech!

#devops #community #technology #engineering #sitereliabilityengineering #sre

https://redd.it/116j1qt
@r_devops

Devops becoming more common?

Recently I have been noticing many social media posts from Twitter LinkedIn that the college grads showing up their work creating a CICD app integrating of the docker and cloud I have been seeing this post many it it started to feel like these youngsters choosing devops as it has less programming and what is the outcome of their work do they actually succeed (get hired) ? If so devops will be more common job with less paid ?what is the next step for current experienced devops Engineer to get updated ? I don't see any away rather than switching to new domain

https://redd.it/116klyb
@r_devops

hi all , i signed up for a year and a half course of devops that starts in amonth.

hi all , looking for some advice. signed up for a year and a half course of devops that starts in amonth. what can i watch/read/practice in that month to help me in the course. no prior knowledge of this subject , worked as a 3d artist for the past 8 years🙏

https://redd.it/116lpmu
@r_devops

GitLab: Seeking Technical Suggestions for a Smoother GitOps Setup

Hey everyone,

I'm planning to migrate from a Jenkins-driven GitOps setup to a GitLab-driven GitOps setup soon, and I would love to hear your technical suggestions on this. Here are some details about my current setup:

-Infrastructure is on AWS and managed with Terraform.
-10 EC2 instances and RDS per environment.
-A ton of app configurations are written in Ansible.
-We dynamically provision a couple of environment instances from a single environment type, such as test1, test2, preprod1, preprod2.

Given the above, I'm looking for suggestions on how to best implement GitLab for our GitOps setup. I'm particularly interested in hearing about any practices that have worked well for others in similar situations. Any insights into potential pitfalls to avoid would also be greatly appreciated.

Thanks in advance for your help

https://redd.it/116kfql
@r_devops

Hello. Do different platform certifications worth it? Azure and AWS for example?

See title. Should I mention them in my CV?

https://redd.it/116obmp
@r_devops

OneUptime: Open Source StatusPage.io alternative that you can self-host.

I'm Simon, I'm the OSS contributor to OneUptime (https://github.com/oneuptime/oneuptime) . It's an open-source alternative to StausPage.io. We're working on adding APM functionalities to it to make it closer to an open-source alternative to data dog. It's 100% free and you can self-host it on your VM / server.

Let me know what you think! Happy to hear early feedback and make the tool better.

https://redd.it/116q7wm
@r_devops