For all self-taught developers - what would you say is most difficult about building apps?

If you're building an app on your own, what do you think is a difficult thing about making an app on your own from scratch? I would assume that, being self-taught and solo, it would be difficult to properly understand, plan, and stick-to, one thing. An app must be planned out thoroughly, its timeline and scope and what not, and one must stick to developing it for multiple weeks or, more likely, months on end. And that, coupled with the fact that full stack is hard to build since you have to always understand how everything interacts between the backend and frontend. I'm doing some research to understand self-taught solo developers' experiences, any words would be appreciated. Thanks.

https://redd.it/1i59msb
@r_devops

DevOps Certification

Hello guys,

What are the top certifications for each category:
1. Automation and CI/CD
2. Containerization and Orchestration
3. Infrastructure as Code (IaC)
4. Cloud Platforms
5. Security (DevSecOps)

https://redd.it/1i5b3nr
@r_devops

Adding Macs to on-prem build agent pools

We have a few build jobs that build on arm64. So far I used buildx with the qemu bin tools and while it works it is slow, and even worse, some of our build jobs now fail. I am not quite sure what happens, but cargo stops to make any progress.

As we have our build servers on-premise, I was wondering how I could add native arm64 machines. I thought that maybe using Macs would be ideal, as it allows us to support building for Mac and Linux-arm64, but I am not so sure about OpSec for Mac Server.

Does anyone have experience with Macs as build agent for azure devops?

https://redd.it/1i59wgc
@r_devops

How do people have a good devops portfolio?

What kind of projects can you have that will show your skills in devops? I'm curious how you show your skills around deployment, monitoring and other stuff, especially when talking about a project with a cloud provider...

Any help would be greatly appreciated!

https://redd.it/1i5dnwd
@r_devops

Portfolio needed for FAANG devops role?

Hi everyone, I’m currently in my 3 YOE as a platform engineer at my company and prior to that have 3 YOE in network security. I want to start looking into getting a devops/devsecops role with a FAANG and I’m curious if I’d need some sort of portfolio with projects to even be considered at these companies. I’ve done a decent amount of work surrounding AWS services, proficient in Terraform, have written a large majority of our Sentinel policies (security policies for terraform runs), worked with automation, know the ins and outs of standard CI/CD pipeline implementation w/ Concourse and GH Actions, but it doesnt seem like it would be remotely enough to be considered.

Does anyone have any insight on if Im being unrealistic with my goal of joining a FAANG in the next 1-2 years? Should I be focusing more on other aspects? Would the portfolio/project route be a waste of time? Any information would be helpful!

https://redd.it/1i5g1cg
@r_devops

Hashicorp Vault - Transit Secret Engine - Decrypt Mechanism

While using decrypt action in the Transit Secret Engine, we do not have the option to choose which version of a particular key we can use to decrypt a Ciphertext.

Is it because the Decrypt action is done using only the corresponding version which was used to encrypt initially? We don't have a flag to mention which version to use for decrypt action for a key.

For example: when we do the below action, does it automatically use the version 2 of the "test" key to decrypt the ciphertext?

vault write -f transit/decrypt/test ciphertext="vault:v2:fRds/te23Ra2KnsL+Jomk6ZYA4PS8uv/bbyjM0LDiNKfWOdk61vi4rvFMcClANUPvOc="

Can we decrypt a ciphertext produced by version 2 of a key, using version 3 of the same key?(without rewrapping)

https://redd.it/1i5mj47
@r_devops

Pipelines with ArgoCD

I have to use Argo now and was used to push based gitops before. Before e.g. I used Gitlab Pipelines to install on Dev, then execute Tests and if Tests are successful, I have a button to manually promote to the next environment. Release to prod was then a manual pipeline.


So how do you handle processes like this with ArgoCD? I see there are tools like Kargo or Keptn or commercial tools Codefresh. So its seems I'm not the only person missing that on ArgoCD :-)

Can you guys tell how you handle such things and hint what to look out for?

Greetings

https://redd.it/1i5nfjh
@r_devops

How good is this for a person with some Devops experience

I have some prior Devops experience and want to further enhance my skills. I wanted to know how good of a resource is https://devopsroadmap.io if I want to get better at Devops?

https://redd.it/1i5nxbr
@r_devops

Is this too restrictive company policy?

Hi, I'm DevOps Engineer in local branch of big global corporation. My team is developing internal applications and I was hired to automate and simplify that process mostly by containerization. However every time I want to deploy some new infrastructure or tools I encounter multiple obstacles on every possible level.

On our work laptops we don't have classic admin rights but some pseudo-admin so changing any configuration, installing or uninstalling is almost impossible (for example I can't install Podman Desktop because wsl version is not supported and I can't update version because this is blocked by company).

Same goes to cloud infrastructure. We have many cloud service on Azure but we don't own any of that because it was outsourced to indian company. So can't change anything and have to create tickets to this company asking for that. We don't even see most of our resources in Azure Portal, so configuration like corresponding vnets or so are pretty unknown for us. For most services we have very limited rights to install or change anything. So anything deployed there is very fragile and needs constant monitoring, trouble shooting and work arounds.

Our network firewall is also very strict. Almost everything from open internet is blocked. Opening some port/ip even for well known sites, repositories (even jit for installing tools) is pain in the ass and almost impossible to get approval from info sec. And talking about infosec, they don't communicate with us, don't try to work with us. They just say no for almost everything. And when we ask for some rules, guidlines how we should work to met their demands and to ensure we can have tools and processes we want, they won't share anything. I have a feeling that the best for them would be if we worked in disconnected from outside world basement, so they won't do anything.

Is this normal? Or is this just my company?

https://redd.it/1i5pc9r
@r_devops

Newbie To Devops

Hi all,

I've been a 3rd line/sysadmin for 7 years now and we are moving to azure (NHS don't ask).

I've got myself a pluralsight sub and doing the azure labs and terraform and managed to work out the basics of deploying vm's using visual studio and even adding some extra modules in to some of the labs to further understand things. Even separating modules into the own files rather than using a flat main.tf.

My question to you gurus is, what is the main thing companies want these days?. Now i have also dabbled with ansible spinning up som vm's at home and doing some basic playbooks.

The problem is i see jobs advertised with puppet, chef, ansible, terraform ad infinitum. Seems overkill to me.

It's confusing as to what is widely used, and too be fair i have a partner and kids and i don't have the time to learn it all.

Thank you for your time and advice, It's much appreciated

https://redd.it/1i5nfjn
@r_devops

What do you recommend I should use for making my first CI/CD pipeline?

I was thinking about using jenkins? Is that still widely used?

https://redd.it/1i5sk7r
@r_devops

Made an app for Anime, Manga and Novel lovers written in flutter

Named AzyX https://github.com/reyyuuki/Azyx/releases

https://redd.it/1i5tynl
@r_devops

Cluster API to production: from Cluster API to GitOps with Argo CD and Kyverno

Hi everyone!
I just finished writing the second part of my Cluster API to production series: an article about configuring Argo CD to deploy applications on Cluster API tenant clusters with Kyverno.
The series bridges the gap between the Cluster API documentation and deploying production clusters.
The next part will be about configuring RBAC and service accounts for tenant clusters.

Even if you already have Argo CD set up, you might find the linked cluster Helm chart interesting.
The chart includes Argo CD applications configuring a telemetry exporter with OpenTelemetry Collector and FluentBit, centralized secret management and more.

https://redd.it/1i5ubjq
@r_devops

How to go from IT Support to Dev Ops (or even developer in general)

I have a portfolio. I have been coding in java for years and I feel i'm well versed. 4 years in IT, and my two related jobs are coding adjacent but not full on coding.

Problem is, all positions I see are Senior Java positions. I can't get junior experience, so how can I even land a Senior position. I'm working in a programming adjacent IT role(implementation and review of code whilst supporting IT tickets)

I have the desire and the knowledge to move forward, I have worked in a lot of different frameworks. I know the basics(Spring Boot, Docker, Git, Jenkins) and my ability to grasp new tools is almost instantaneous. BUT i need a direction of where to even go. Resources are so limited too after college.

Everyone seems to pretentious to help as well, they think it should just fall into your hands or that you should already know what to do. I don't know what to do. I straight up cannot land a new job at all so I want to develop my skills a bit to give me an edge

https://redd.it/1i5whgy
@r_devops

Building NixOS 24 Snapshots on Hetzner Cloud with Packer - My Learning Journey

Hey fellow DevOps engineers!

I've been wanting to try out NixOS for a while and finally took the plunge by setting up a proper build pipeline using Packer on Hetzner Cloud. I documented my experience in a blog post, hoping it might help others who are curious about the same stack.

What you'll find:
- Complete Packer configuration for building NixOS 24 snapshots
- The entire setup script including disk partitioning and NixOS configuration
- Real challenges I faced
- Bonus OpenTofu code for deploying servers from the snapshot

I'm definitely not a NixOS expert, and there might be better ways to do this. The configs are working but probably not optimal - I tried to document my thought process and include necessary explanations for each step.

If you've implemented something similar or have suggestions for improvements, I'd love to hear your approach. The main goal is to learn and share experiences with the community.

Link to blog post: https://developer-friendly.blog/blog/2025/01/20/packer-how-to-build-nixos-24-snapshot-on-hetzner-cloud/

https://redd.it/1i5v0ew
@r_devops

How much "Go" is needed to learn?

Im going through KodeKloud's devops path and I was surprised to find the "Go" language as one of the languages to learn. Im experienced with C++/JS so I was able to mostly "skim" through it. That being said how much (or I guess how deep) is go actually used in devops?

I know Kubernetes/Docker are written in it, but I'm not sure what all a devops would write in actual Go?

https://redd.it/1i60qso
@r_devops

Is Jenkins still popular enough to learn?

Pretending someone is JUST getting into devops, do you think learning Jenkins is worth the time investment vs other CI/CD tools (Gitlab/Github/Azure). Assuming you aren't already in a job that uses it.

FWIW: Im asking because KodeKloud has Jenkins on their devops path. Our company uses Gitlab so I figure it makes more sense to swap it out for their gitlab course.

https://redd.it/1i613zc
@r_devops

I just worked on a project that optimized 95% of our package build time

So long story short, my director pointed out that other teams complained that our package build time was too long (1 hour). And those other teams were depending on this package to build. So it caused a huge bottleneck within the org.

So he asked me to look into it, and I was like, fine... First, i saw we were building two ruby versions sequentially, so I cut the time in half by just removing one release version since that one was deprecated (Ruby 2.5).

Then, I saw we were spending most of our time on running tests, so I was like, let me parallelize it. Then it cut build time to 15 minutes (from 30 minutes).

Finally, I kept thinking, can I do better? Then I realized our tests relied on a lot of I/O reads, and that can be cached into memory since it's fairly small (250MB). The in-memory cache I implemented ended up making the build time to be around 2 minutes.

I pushed the change out and wrote an email about it internally. All the other engineers went crazy because the efficiency improvement was so drastic (went from 60 minutes to 3 minutes).

This is crucial because now we can push code through the pipeline faster, and people can run local builds faster. It's a win-win situation across the board.

What are your success stories?

https://redd.it/1i63sak
@r_devops

Python for DevOps.

Hello Everyone,


I just a question thats been bugging me, i basically want to learn python i know some might not need it and some jobs dont need python knowledge to be exact i want to learn python for devops i dont want to go to a tutorial to learn python for web dev when its something im not interested in, can anyone please help me by suggesting or providing any resource to know just how can i learn python for DevOps?

https://redd.it/1i638ef
@r_devops

Thoughts on Unified Observability: One Vendor for Traces, Metrics, and Logs?

Lately been exploring the concept of unified observability, specifically the idea of having all traces, metrics, and logs under one vendor or tool. The promise of centralization sounds amazing—simplified troubleshooting, faster MTTR, data correlation and reduced complexity from managing multiple tools, agents vendor contracts etc.


However, I can’t help but wonder about some of the trade-offs:

Scalability and flexibility: Can a single tool handle the unique needs of different parts of an organization? Ex. Like some solution might be best at some but not others. Is the compromise here for some signals worth it bringing good developer experience since they not have to leave the tool?

Lock in: Though in context of data collection its technologies such as OTEL, Prometheus etc. But I am particularly fan of PromQL since this does not locks in the query language for metrics but with vendor such as Splunk, Dynatrace etc they have different language to query prometheus. Not speaking of logging, tracing here since I am not aware of any standard query language(Though I might be wrong and missing something).

SPOF(Single Point of Failure): If there is an outage with the vendor then your pipeline is halted.

Cost Savings: Big part is advertised as cost savings, does this really save cost?


I’d love to hear your experiences or thoughts.

https://redd.it/1i66sxy
@r_devops

Which cloud server would you recommend for my app setup?

I am working on a personal project which is a webapp. And I wonder what the best remote server solution is to deploy. My stack is:

* python backend, react frontend. containers are packaged separately and communicate to each other
* use github for code repository
* use github actions/workflows for auto deploy
* use JFrog for docker container registry
* the app uses an sql database to store user data and object storage to store images and videos.
* the app uses ML models
* conventional models such as XGBoost, trained locally
* Small-sized open-sourced LLM models
* atm I don't use kubernetes, but in the future i may use

Here's a link to the system design that I drew: [https://docs.google.com/drawings/d/1iYBULmQBgFhDz8e7JKSV7Kx0u1CBQYnhWG2Vj8OFK1E/edit?usp=sharing](https://docs.google.com/drawings/d/1iYBULmQBgFhDz8e7JKSV7Kx0u1CBQYnhWG2Vj8OFK1E/edit?usp=sharing)

I want the app to be available 24/7. I expect a few hundred requests to backend per day at max. My questions are:

1. any suggestions for my DevOps flow?
2. which cloud service should I use to host this app?
3. what are the recommended registry and host for ML models?

In the past, with the similar setup but without ML models, I have used AWS EC2, S3 and RDS. Back then all I knew was a few Docker commands so packaged an image locally, uploaded to my Docker Hub, and pulled a container to an EC2 and manually run \`docker run\` commands. And I created a PostgreSql on RDS(separated EC2 instance) and opened a communication port to talk to the app. But to be honest, it was complicated because I had to install a lot of stuff(docker, git, etc) on EC2 and the cost was also expensive as a start. Now, I know how to use GitHub actions, I know a bit of Terraform, I also know how to use kubernetes and how to write helm charts. So I'd like to ask an advice on what solutions are available and recommended for me.

My profile is a data scientist and i'm learning CI/CD and DevOps. Thank you :)

https://redd.it/1i66hdl
@r_devops