Reddit DevOps
266 subscribers
30.9K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
Confused a bit

Hello guys! I’ve a question obviously regarding devops engineering. Currently I’m talking a Data science Degree im on my second year and honestly I like so much however, my friend does a devops and he got a great job he used to study for less than a year. Because I already know and don’t have to start from the scratch i think to start learning devops along with my university. What do u think guys?

https://redd.it/1e9bmo8
@r_devops
Need some career advice

Hi all,

I have 3 years of experience in DevOps at the same organization based in India. I have worked with various common DevOps tools but haven’t had the chance to work with Kubernetes. My current organization doesn’t use Kubernetes much. I recently cleared the CKA by studying Kubernetes for about 3-4 months.

Now, the issue is that I don’t have any hands-on experience with Kubernetes, and I am finding it difficult to switch to a new job because every interview includes Kubernetes questions, mostly scenario-based, which I find challenging to answer. Could you suggest how I should approach this situation? How can I gain some hands-on experience, such as by creating my own projects? Any input is appreciated.

Thank you in advance.

https://redd.it/1e9csyz
@r_devops
OWASP Zap SAST on Azure Dev Ops

Hi !
Is there any sample projects with preconfigured pipelines, I want to try running SAST on a sample Azure DevOps project using Owasp Zap tool.
Can you guide me for any good resource ?

https://redd.it/1e9garq
@r_devops
overlay2 docker

Hello everyone,

I have three Docker images (with three running containers for each one). When running df, I get this output. I want to understand why I am seeing "overlay" as a filesystem. Also, I know that the values shown in the last three lines are not the actual consumption, but I want to understand that output. If anyone has good resources or can help me understand this, I would appreciate it.

Thanks!


root@vps-b9722401:\~# df

Filesystem 1K-blocks Used Available Use% Mounted on

udev 7985704 0 7985704 0% /dev

tmpfs 1600636 2088 1598548 1% /run

/dev/sda1 162406320 113882840 48507096 71% /

tmpfs 8003176 1564 8001612 1% /dev/shm

tmpfs 5120 0 5120 0% /run/lock

tmpfs 8003176 0 8003176 0% /sys/fs/cgroup

/dev/sda15 106858 6165 100693 6% /boot/efi

/dev/loop4 94080 94080 0 100% /snap/lxd/23991

/dev/loop5 94080 94080 0 100% /snap/lxd/24061

tmpfs 1600632 0 1600632 0% /run/user/0

/dev/loop9 65536 65536 0 100% /snap/core20/2264

/dev/loop0 39680 39680 0 100% /snap/snapd/21465

/dev/loop1 57088 57088 0 100% /snap/core18/2823

/dev/loop6 65536 65536 0 100% /snap/core20/2318

/dev/loop2 39808 39808 0 100% /snap/snapd/21759

/dev/loop10 57088 57088 0 100% /snap/core18/2829

overlay 162406320 113882840 48507096 71% /var/lib/docker/overlay2/8ebc68cf46b422fe00520449fa3a6f73b3b24f809a876ce593d51d655cee4df3/merged

overlay 162406320 113882840 48507096 71% /var/lib/docker/overlay2/f9e8a5d328c6d634d8d9ef163c426f3f0e8ab765f021f538eaeabaed1580c0ec/merged

overlay 162406320 113882840 48507096 71% /var/lib/docker/overlay2/b7bde037021c93ab7127b83d513288488a118c9cf19b2929df112d75a386cbf0/merged

https://redd.it/1e9hsl7
@r_devops
Optimizing Docker Images for Python Production Services

"Optimizing Docker Images for Python Production Services" article delves into techniques for crafting efficient Docker images for Python-based production services. It examines the impact of these optimization strategies on reducing final image sizes and accelerating build speeds.

https://redd.it/1e9imni
@r_devops
Preventing a Crowdstrike Level Issue: How CI/CD on Hardware Can Save Your System

Hi there, I'm Andrew, I specialise in DevOps for embedded systems. The firmware level bug that occurred with CrowdStrike reminded me of similar bugs I have faced in the past (although normally Linux based) and I wanted to share my opinion. Let me know if you have any questions about the video?


https://youtu.be/gTM8ALApd9w

https://redd.it/1e9li0e
@r_devops
Apache solr basic full text search

I'm new in Solr, I have a single node version running on docker, I have a document with a description field witch I use to search in all documents, the problem comes when I try to search for a prhase on reserve sense, for example,

Document description field: "white house".

If I search "white house" it works perfect, but if I search "house white" if does not return any document, do you know what is going on here?

regards.

https://redd.it/1e9mr0t
@r_devops
Help need to land a job at Qualcomm

I work as a Cloud DevOps engineer with five years of experience and have developed an interest in SRE/DevOps roles. Somehow, my resume landed at Qualcomm, and I have an interview in two days.

I'm reaching out for guidance on how to secure the job at Qualcomm. Any tips or advice would be greatly appreciated.
I can meet with you by any means. If you prefer, I can visit you. By any means, I need to secure this job. Virtual help is also appreciated!

https://careers.qualcomm.com/careers/job?domain=qualcomm.com&pid=446700194811&query=Azure&location=Hyderabad%2C%20Telangana%2C%20India&domain=qualcomm.com&sortby=relevance&triggerGoButton=false&jobindex=0

Thank you!!

https://redd.it/1e9naqy
@r_devops
You teach me English I teach you DevOps

Hello everyone,

This might sound weird, but I decided to give it a try and see if I can find someone with whom we can be mutually beneficial.
I'm an experienced DevOps professional and former developer looking to exchange knowledge. I want to improve my English skills, particularly in speaking and writing, and I'm happy to help others in return.

What I'm looking for:
- Native English speakers who can help with pronunciation and accent.
- Individuals with strong grammar skills who can assist with writing and conversation.
- I'm open to communicating via chat or calls to improve both my writing and speaking skills.

What I can offer in return:
- Teaching and guidance in Linux, programming, cloud technologies, Terraform, Ansible, Kubernetes, and overall good DevOps practices.
- Assistance for experienced professionals or complete beginners looking to get into the field.

If you're interested in a mutually beneficial learning experience, please reach out! Let's help each other grow.


https://redd.it/1e9y4nd
@r_devops
Review my resume for a 3 months experience

I have been working in this small service based company for about 7 months now but the first 4.5 months were just training/self learning . I've only really worked since mid May . I don't see myself growing much here and therefore I want to switch asap before the end of this year. I feel like my company doesn't focus much on Iaac and I miss out on a lot of good practices too. Please suggest what I can add/remove from my resume and what kind of personal projects related to devops i can add.
https://drive.google.com/file/d/1aK5ZCTxR4NJ94IXnRzAP6zw9_eJSY5-n/view?usp=drivesdk


https://redd.it/1e9zsmo
@r_devops
Multiple deployment channels Octo/DEVOPS

Our Octo setup has multiple deployment channels (Feature 1, Feature 2, ,Main etc) that each go through all the different environments, currently when a PR is merged in on TFS we can choose which feature branch to build to – but only ever use this for testing. Main being the only branch/package that goes all the way through to production

I currently only have 1 pipeline in devops, which will act as main and as far as I understand this will be set up as a continuous deploy, how do I cater for all the other channels in devops?


Hope I'm being clear, this is my first time doing something like this



https://redd.it/1ea1ow9
@r_devops
Prometheus as receiver

Hello all,

I am relatively new to Prometheus and have a quick question. We want to use our Prometheus as a receiver and get metrics from a remote write Prometheus. As I have read we need to use --enable-feature=remote-write-receiver. The Prometheus installation was installed locally on a Linux Ubuntu server.

Where in which file do I have to enter --enable-feature=remote-write-receiver?

Is the endpoint that I have to pass on the remote write prometheus the following? LocalServerIP/api/v1/write ? Can I find the URL in a file? Which port is used for this?

Many thanks in advance!

https://redd.it/1ea2gtn
@r_devops
⚠️ Need Help Migrating MySQL DB from 8.0 to 8.0.23 in Docker

I'm in need of some assistance regarding the migration of my MySQL database.

Current Setup:

- I have a slave MySQL database running on MySQL 8.0 in a Docker container.
- I've mounted custom folders as follows:
  -v /opt/mysql/data:/var/lib/mysql \
-v /opt/mysql/my.cnf:/etc/mysql/my.cnf \
-v /opt/mysql/log:/var/lib/mysql/log \

- The database size is 73G.

Goal:

- I want to upgrade to MySQL 8.0.23.

Issue:

- When I mount the same directories to the new MySQL 8.0.23 image, I encounter the following error:

 16:24:07+00:00 [Note] [Entrypoint]: Switching to dedicated user 'mysql'
2024-07-19 16:24:07+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 8.0.23-1debian10 started.
2024-07-19 16:24:32+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 8.0.23-1debian10 started.
2024-07-19 16:24:32+00:00 [Note] [Entrypoint]: Switching to dedicated user 'mysql'
2024-07-19 16:24:32+00:00 [Note] [Entrypoint]: Entrypoint script for MySQL Server 8.0.23-1debian10 started.


- The container keeps restarting in loops.

Request:

- Can anyone guide me on how to properly migrate from MySQL 8.0 to 8.0.23? What steps should I take to ensure a smooth transition and avoid the errors mentioned above?


Thank you in advance for your help!

https://redd.it/1ea3d52
@r_devops
GitFlow question, my senior is on vacation, did I fuck up?

My senior, who usually adresses all the deployment process is on vacation this week. During this time, I have to deploy several of the features he finished and some of the features I am working on. After executing the git flow workflow, my develop and my main branch are in different states, exactly main branch is 8 commits in front of develop and 14 commits behind, which does not seem fine. Taking at the difference in the commits apparently the feature branch in develop has commits that the main branch has not. Honestly i did not know how this happen as I pulled the latest version of main and develop, merged both feature branches into develop from the github webapp and then proceeded to pull develop, git flow release start (branch_name), blablabla command for code formatting & tests, git flow release finish.

Now i am a bit affraid of doing something on main outside of the common workflow, main and develop can be merged and i guess i can just go to main, merge develop and push it but I dont know if someone is going to kill me on monday. I was wondering if someone could give me any hint on how this happened and wether it can be fixed on a safe way

https://redd.it/1ea3lzr
@r_devops
Add Users to SQL Database (Azure SQL Managed) In CI/CD Pipeline - Permissions Question

Hello,

I originally posted this in the terraform sub but it hasn't gained any traction so trying here.

I have a CI/CD pipeline in AzDevops that runs on a self-hosted agent with a user-assigned Identity. I provision a new SQL Database with terraform and want to add a user to it in the pipeline.

The only solution I've seen so far is to add the identity of the agent as an admin to the SQL server via an Entra Group. This feels bad security wise as a breach of the CI/CD agent would expose every database we have. Am I overthinking this?

Any better solutions?

https://redd.it/1ea272u
@r_devops
CI with JENKINS

I am a QA and all companies I have been at QA's don't even use Maven, let alone Jenkins, but I am trying to understand the CI process. Here is the way I see it. Correct me where I am wrong. Firstly, I think that CI is only used, if you have automation testing, since with manual testing there is nothing to integrate dev code with. Also, you can have dev without qa (though your app will be riddled with defects), but you can't have qa without dev. That is the reason Jenkins connects with dev branch on GIT. After packaging, it sends JAR to docker container. Which then destributes the code to various environments. IT goes to PROD environment only when you do release. Build is any update in the code and one release is comprised of multiple builds. Still some unanswered questions, but is all that correct?

https://redd.it/1ea7fj2
@r_devops
Running a Sidecar container as a cron job

Googling this topic shows a few methods of achieving this but I'm not sure which way would be best for my needs.

In my current setup I'm spinning up a pod with 2 containers:

- Main container (Thanos Ruler)
- Sidecar container (just my Python script)

This is the Helm values file:

ruler:
enabled: true
logLevel: debug
clusterName: local-ruler
alertmanagers:
- https://prometheus-kube-prometheus-alertmanager.prometheus.svc.cluster.local:9093
extraFlags:
- --rule-file=/synced-rules/*.yml
sidecars:
- name: rule-syncer
image: python:3.12-alpine
imagePullPolicy: IfNotPresent
command: ["/bin/sh"]
args:
- -c
- |
echo "Starting rule-syncer sidecar"
pip install requests pyyaml --quiet
echo "Running script"
python /scripts/ruler_syncer.py
volumeMounts:
- name: synced-rules
mountPath: /synced-rules
- name: rule-syncer-script
mountPath: /scripts
extraVolumes:
- name: synced-rules
emptyDir: {}
- name: rule-syncer-script
configMap:
name: rule-syncer-script
defaultMode: 0755
extraVolumeMounts:
- name: synced-rules
mountPath: /synced-rules

Instead of running my script in a `while True` loop, I'd rather just run it as a cron job. My script needs to be mounted with the volume used in the main container.

What would be the ideal way to achieve this? I'm planning to build an image for the script/sidecar, but once that's done, how would I run it periodically?

Any help would be appreciated. Kind of new to Kubernetes.

https://redd.it/1ea8z43
@r_devops
Which Sheet should I follow for my Intern Preparation?

I am unsure about which sheet should I follow? Striver's A2Z or SDE. I have been suggested to A2Z as it is more beginner friendly and I should use SDE for my revision. But I do not have much time. Companies have already started approaching in my campus. I want to know opinion of you guys.

https://redd.it/1eaa7xg
@r_devops
Networking for DevOps

Hey there,

I'm a junior backend engineer with experience in both Python and Go. I'm interested in gradually transitioning into the DevOps field and was wondering how much networking knowledge is required for an entry-level DevOps position. Are the study materials for Network+ (or A+) sufficient, or do they contain too many unnecessary details, or should I aim for higher-level certifications? Also, do you have any course recommendations?

https://redd.it/1eabyne
@r_devops
DOCKERS in JENKINS

Trying to study up on Dockers and few things I don't understand so far. Firstly, why when you instantiate a docker, you need a DB connection with your data base. If you are using Java project, you may have zipped libraries in your JAR file to connect with DB, but DB itself is never even on GIT repo of a Java project to begin with. Secondly, am I right that for a pipeline, you need only one Docker image. It will then determine where to send your code

https://redd.it/1eac89g
@r_devops
What should I know when going from a bigger team to a team where I'm the only DevOps engineer?

I'm in talks with some potential employers and all of them have a small number of DevOps engineers (1-3 people) or they need only one DevOps engineer for the position.

At the moment I'm in a team of around 10-15 DevOps engineers (it's mostly DevOps with a mix of SecOps Engineers, DBAs) If I'm stuck with something I have the option to ask someone else on the team for help.

What should I know if I switch to a mixed team that has developers/QAs and I'm the only DevOps engineer?

https://redd.it/1ea4c1y
@r_devops