Is anyone here working in a full remote position as DevOps/SRE ? I have a few questions for you .


* what did you look for before joining like stacks , teams etc . ?
* can you list some of the cons ?
* Is your team international, or the market you work for is in different Timezone?

Anything else you want to share ?

https://redd.it/e3a087
@r_devops

Dockerifying a Flask App for ECS -> Nginx+Gunicorn+Flask in 1 container?

Long story short, I'm looking to verify my approach is correct/decent.

Since you don't deploy Flask with their deployment server that Flask ships with, you use nginx as a web server because of ('slow clients', 'better security', and a ton of other features). Behind that you have something that implements the WSGI spec, aka Gunicorn to feed a request through your Flask app.


I realize you can pull Nginx out and people run it on its own server, but I'm not looking to do that. I want to ask about bundling these all into a single docker image for use on ECS.


Am I perfectly fine in throwing together a shell script which includes the necessary commands+config to set these both up. Then RUN that on the Dockerfile and I'm off to the races? The only weird thing here is that kind of means checking that into source control because I was planning on updating my artifact story with the newest docker image if tests pass.

https://redd.it/e3riwk
@r_devops

How do you maintain consistency between your local development and

production/staging environments?

Currently having issues with getting consistency between our developers developing locally andproduction/staging envs. We want it so whatever they do locally, their changes can be replicated on staging/prd. How do you manage this issue? What are some of the workflows your org uses to enable consistency between envs?

https://redd.it/e306fz
@r_devops

Anyone here use IaC to rebuild their laptop e.g. once per week?

Just curious. I remember seeing years ago an internet cafe that rebuilt its machines on every single reboot via PXE.

With the age of cattle rather than pets, I'm wondering if anyone here rebuilds their personal system on a regular basis. Of course it would necessitate reinstalling apps and keeping data somewhere else and mounting it (in house or cloud) but would have many benefits.

https://redd.it/e2zh1y
@r_devops

SAST and DAST

Can we achieve sast and dast both using Checkmarx tool? I've found a lot for SAST using Checkmarx but not DAST.

https://redd.it/e2yw67
@r_devops

Understand Private Docker Registry with this video 🙌🏻

After watching this video ([https://youtu.be/vWSRWpOPHws](https://youtu.be/vWSRWpOPHws)) you will be able and understand:

⭐️ How to create a Private Repository on AWS ECR, login and push to it

⭐️ Differences of Public Docker Hub and Private Repository

⭐️ Image Naming Concept in Docker Registries

​

Check it out and let me know what you think 🤓

I appreciate any feedback and suggestions for what I should cover next. 🙏

​

Btw this video is part of a **complete Docker & Kubernetes video series**, which you can find here: [https://www.youtube.com/playlist?list=PLy7NrYWoggjwPggqtFsI\_zMAwvG0SqYCb](https://www.youtube.com/playlist?list=PLy7NrYWoggjwPggqtFsI_zMAwvG0SqYCb)

https://redd.it/e3xgx1
@r_devops

Switching to devops

Hello guys, in the past year and a half I've been learning microservices, docker, kubernetes, aws, and linux. I've been working as a QA engineer for the past 5 years and I want to switch to devops. The company i work for hesitates to move me to devops as there's nobody there to keep me in his shadow for a few months to ramp up. Other companies wouldn't take me because i don't have experience in production/development environment.

What should I do? Thank you

https://redd.it/e3zqzt
@r_devops

Best open-source/free Artifactory

I'm looking for some recommendations on how you guys are storing your artifacts for your environments. We're looking to implement a more modern "DevOpsy" solution in our stack.

Current method is storing release artifacts in a external HDD, so literally any suggestions are better.

Had a look at Apache Archiva but the website alone makes me think twice.

https://redd.it/e2w9if
@r_devops

How to replicate the workflow of Platform.sh

As an agency, our team has been using [Platform.sh](https://Platform.sh) as our dev/ staging environments (and sometimes production) but due to performance issues we're considering rolling our own solution instead. Basically with as few headaches as possible.

Our current setup connects our Bitbucket repos to platform, so when we push to a branch it will build (composer and npm etc.) based on a platform.yaml file, and create an environment for any activated branch with a url to preview it.

What would be the easiest way to set this up if doing it ourselves? Since we're using Bitbucket I've already used BB Pipelines to build, but the deployment/hosting part is where I get a bit stuck. Every article I read about Docker/Kubernetes hosting kinda blows my mind with jargon - is there a super easy and simple setup guide anywhere?

Keeping costs low is also a consideration, although as we will be hosting many apps/sites we don't expect it to be cheap.

As far as urls for previewing our apps - I've read that Traefik would be able to do this with a DNS wildcard pointing to Docker containers based on their label.

Any input on this would be highly appreciated!

https://redd.it/e2qx4l
@r_devops

Anybody know of a really good tool for documentation?

Preferably Linux, and simple to use.

https://redd.it/e410yb
@r_devops

Trying to create a structured learning path, need suggestions about Linux Academy

If my main goal is to become a really good “DevOps” / SRE, which would be more beneficial of a learning path on LA (taking into account the industry is headed towards the cloud):

1) Junior Linux System Administrator -> Junior DevOps Entry Level -> Linux System Administrator Mid Level - Linux System Admin Senior Level

2) Get RHCSA -> Junior DevOps Entry Level -> ???

Would love suggestions. I would also be doing this combined with trying to get a job for experience / side projects. I currently know Python at an intermediate level as well.

https://redd.it/e3yq3j
@r_devops

I want to teach someone DevOps principles and tools

Following from a lovely post on r/learnprogramming [here](https://www.reddit.com/r/learnprogramming/comments/dq9isz/i_want_to_teach_someone_programming/), and looking at the threads on this sub, I thought it might be a good idea to do something similar here.

Thanks to u/fakehillbillyaccent for the original post. I've borrowed generously from it.

**Why?**

I enjoy teaching, it gives me a lot of fulfillment. Following from the above thread, I have been working with one person to help them learn programming and it has been a blast.

**Who am I?**

I have been around the block and found myself gravitating towards programming in general, and DevOps in particular. I've designed oilfield equipment, managed LEAN processes for manufacturing, full stack development, DevOps, and now I run the tech team for a small start up. I've worked professionally and full time with Java, javascript, Python, AWS, Google Cloud, Kubernetes, Terraform, Gitlab CI, and others.

**What can I offer?**

I would like to take on one person to help you through any challenges you may be having. I would prefer to work with someone trying to get a foothold as a DevOps engineer (or anything else you want to call it). We can start with Kubernetes operators or with `bash` scripting or anything in between.

If you are interested, please send me a message or comment and we can talk more.

from u/fakehillbillyaccent

>Again, this is completely free, no strings attached. You want to stop? Stop. Want to keep going? Cool. This is not an ad for a paid service or a trial for a paid service. I just like doing it and don't have enough opportunities to express myself through teaching.

If there are more people on this sub like me who are willing and able to help, please comment.

https://redd.it/e45hft
@r_devops

Custom FrontEnd app to Chef Open Source server

Hi all

We use Chef 14.x for config management across 1000+ nodes with the Open Source server.

We use environment files to pin cookbooks and manage versions, but am considering Policyfiles.

The nodes come in many different flavours which means we have to maintain different environment files for groups of nodes. Each release has a time stamp env.json file so it’s getting messy to manage manually.

Also about 400 of the nodes have a unique value for one particular app configuration so at the moment have to create separate environment file for each of those nodes to specify attribute value.

Problem we have is no dB or UI to centrally manage workflows.
So I am thinking of writing a centralised custom app which would provide workflows for use cases to configure different flavours of nodes for the different teams involved. This way all the node’s custom attribute could be represented as UIs the users understand and all the environment files hidden behind the scenes.

Does Automate provide all this?
Anyone have any suggestions?

Regards

https://redd.it/e3t0xz
@r_devops

How to automate installing an ISO in a VM?

We're trying to develop CI/CD processes to automate testing and installing our builds. Ya know, as one does in DevOps.

The end result of our build process are ISOs that use Red Hat Kickstart to install RHEL + our software. Today we burn the ISOs to DVD and install them on bare metal hardware. I would like to some how install and test these ISOs on virtual machines as part of our CI process. Something like:

1. Push commit to GitLab.
2. GitLab CI process runs.
3. Generates an ISO.
4. Creates a half dozen VMs via Ansible/Vagrant/something else??
5. Installs ISO in each VM.
6. Runs a smoke test on each VM to verify that it boots and our software runs.

I'm not really sure how to do 4, 5, and 6. What tools should we be using? Welcome any tips or advice... even just names of automation tools to look into.

https://redd.it/e2isxt
@r_devops

What makes a good runbook?

Thought that this article I wrote about the attributes of a good runbook might be of interest:

[https://www.transposit.com/blog/2019.11.14-what-makes-a-good-runbook/](https://www.transposit.com/blog/2019.11.14-what-makes-a-good-runbook/)

In particular, I'd love to hear feedback on what I missed. I also want to acknowledge up front the tension between runbooks and automation--the more you automate, runbooks seem to get:

* more high level (becoming more of a guide)
* more esoteric (for dealing with edge cases)
* lower value (for dealing with situations that are not worth automating)

https://redd.it/e2np4q
@r_devops

Any resources to learn about more practical, technical stuff?

Anyone have any resources to learn things like: deployment, etc from the ground up to an employable level?

https://redd.it/e4bqn7
@r_devops

Confirm (health check) kubernetes deploy

Hello lads! We are using Jenkins for building images and deploing microservices to kubernetes on rancher 2 running in our own cluster not cloud.

Which is the best way to check after successfull job(deployment) that our pods and containers run in the desired state without throwing errors and without unexpected restarts right after deployment ? The reasons behind are that I have to production ready sign the docker images before pushing them to our repo.


I am thinking to write scripts and ask the k8 api. But what are the right metrics that I have to receive to test my case? What kind of logic I have to implement to achieve my desired goals ? Is there any more elegant way to achieve this ?

Thank you in advance. Whish you save environment s. 😀

https://redd.it/e2lpjc
@r_devops

As a first time Terraform user, What should my expectations be to deploy a 10 node HA cluster in AWS?

I need to deploy OpenShift and all its glory to AWS using Terraform.

How long should the lift take for a first time terraform user to deploy something like the diagram below? A week? two weeks? How can I set expectations and do you guys have any advice to how I should approach this problem? Thanks.

The architecture looks something like this.

[https://aws.amazon.com/quickstart/architecture/openshift/](https://aws.amazon.com/quickstart/architecture/openshift/)

https://redd.it/e2jesv
@r_devops

How to set up CloudWatch rule from an effective Date ?

I have a AWS CloudWatch Rule.

Its a Cron expression 30 12 * * ? *

I can set up this rule in CloudWatch > Rule...... But I want to set this from a effective day ( 30/NOV/2019).

How you do this ?

https://redd.it/e2j7m5
@r_devops

Shower Thought: You can't have high uptime without quality monitoring.



https://redd.it/e2j15u
@r_devops

Monthly 'Getting into DevOps' thread - 2019/12

**What is DevOps?**

* [AWS has a great article](https://aws.amazon.com/devops/what-is-devops/) that outlines DevOps as a work environment where development and operations teams are no longer "siloed", but instead work together across the entire application lifecycle -- from development and test to deployment to operations -- and automate processes that historically have been manual and slow.

**Books to Read**

* [The Phoenix Project](https://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/1942788290) - one of the original books to delve into DevOps culture, explained through the story of a fictional company on the brink of failure.
* [The DevOps Handbook](https://www.amazon.com/dp/1942788002) - a practical "sequel" to The Phoenix Project.
* [Google's Site Reliability Engineering](https://landing.google.com/sre/books/) - Google engineers explain how they build, deploy, monitor, and maintain their systems.
* [The Site Reliability Workbook](https://landing.google.com/sre/workbook/toc/) - The practical companion to the Google's Site Reliability Engineering Book
* [The Unicorn Project](https://www.amazon.com/Unicorn-Project-Developers-Disruption-Thriving-ebook/dp/B07QT9QR41) - the "sequel" to The Phoenix Project.
* [DevOps for Dummies](https://www.amazon.com/DevOps-Dummies-Computer-Tech-ebook/dp/B07VXMLK3J/) - don't let the name fool you.

**What Should I Learn?**

* [Emily Wood's essay](https://crate.io/a/infrastructure-as-code-part-one/) - why infrastructure as code is so important into today's world.
* [2019 DevOps Roadmap](https://github.com/kamranahmedse/developer-roadmap#devops-roadmap) - one developer's ideas for which skills are needed in the DevOps world. This roadmap is controversial, as it may be too use-case specific, but serves as a good starting point for what tools are currently in use by companies.
* [This comment by /u/mdaffin](https://www.reddit.com/r/devops/comments/abcyl2/sorry_having_a_midlife_tech_crisis/eczhsu1/) - just remember, DevOps is a mindset to solving problems. It's less about the specific tools you know or the certificates you have, as it is the way you approach problem solving.
* [This comment by /u/jpswade](https://gist.github.com/jpswade/4135841363e72ece8086146bd7bb5d91) - what is DevOps and associated terminology.

Remember: DevOps as a term and as a practice is still in flux, and is more about culture change than it is specific tooling. As such, specific skills and tool-sets are not universal, and recommendations for them should be taken only as suggestions.

**Previous Threads**

https://www.reddit.com/r/devops/comments/dq6nrc/monthly_getting_into_devops_thread_201911/

https://www.reddit.com/r/devops/comments/dbusbr/monthly_getting_into_devops_thread_201910/

https://www.reddit.com/r/devops/comments/cydrpv/monthly_getting_into_devops_thread_201909/

https://www.reddit.com/r/devops/comments/ckqdpv/monthly_getting_into_devops_thread_201908/

https://www.reddit.com/r/devops/comments/c7ti5p/monthly_getting_into_devops_thread_201907/

https://www.reddit.com/r/devops/comments/bvqyrw/monthly_getting_into_devops_thread_201906/

https://www.reddit.com/r/devops/comments/blu4oh/monthly_getting_into_devops_thread_201905/

https://www.reddit.com/r/devops/comments/b7yj4m/monthly_getting_into_devops_thread_201904/

https://www.reddit.com/r/devops/comments/axcebk/monthly_getting_into_devops_thread/

**Please keep this on topic (as a reference for those new to devops).**

https://redd.it/e4pt90
@r_devops