Can a 10+ years experienced Support Engineer switch to Devops ?

Hi Guys,

I have total experience of 10+ years in IT industry (4 years in developement and reminaing in Support). I recently lost job due to layoffs. My doubt is whether I can switch Devops in this situation. I have started learning Devops but have this doubt in my mind. So, please help me clear my doubt.


https://redd.it/1ip21wc
@r_devops

Does Debian tend to patch their vulnerability slower than Alpine?

I have two teams using Debian and Alpine. The one that uses Debian as base image often have critical issues that are unmatched for months. The alpine ones are close to 0

https://redd.it/1ip2hy1
@r_devops

Suggest me a good workstation, i am willing to spend around 5-6k

Hello all, i am tired of using multiple devices , setting up env every time there is new project. Can anyone suggest me a good workstation so that i can create my home lab. I already have one but the home lab is assembled using multiple laptop and one optiplex. I would like to have my own server from now on. Please do suggest me a good one i can couple of k more.

https://redd.it/1ip25wc
@r_devops

Building a new environment from scratch - tooling advice needed!

Hi all,

I'm joining a team of about 12 people who will be building an application within the AWS infrastructure.

I will be the primary/only engineer in charge of 'SRE/pipeline/devops' and I have only basic experience on this front right now (my background is QA).

I will likely need to have some basic infrastructure available for the team within a few months after I join.

It's likely that after a year or so, we will be able to bring in more people to take over the SRE side of things from me so I can focus on the QA angle.

The current infrastructure we have is very complex, was built by a team of about six people over around six years, so I don't want to have the exact same as my goal (impossible for one person in a few months).

What we will need:

* multiple namespaces running at the same time each with a set of microservices likely docker/kubernetes based
* our microservices will need to talk to each other within a namespace and will likely need access to their own or a chunk of a database and message bus at least, and writing logs into opensearch
* git source control with the usual branches and code reviews etc
* automatic pipelines triggered on merge requests to run unit tests and component tests
* package the various microservices into docker containers
* push new builds to a staging ns (long term I'd like to avoid this step once we have a good handle on quality within the MR pipelines - can push straight to prod)
* ability to create or delete a kubernetes namespace and all running containers and linked message bus queues, db tables etc created/deleted as needed
* ability to deploy a specific version of a built microservice into a namespace for test purposes
* on demand or timer or after a pipeline, deploy all latest versions of services to all namespaces (push to prod)

I know the usual tools for this are gitlab/github, jenkins, eks/kubernetes, ambassador, jfrog, cloudflare, opensearch, etc but that feels like quite a lot to get production ready for one person in a few months?

Given my current lack of knowledge, what would be my best approach here? I've read that AWS CodeCatalyst might make sense - lets me compile, test, store artifacts, deploy to eks etc all within AWS and it all autoscales. Any opinions on this?

Or are there other tools like ArgoCD which are latest and greatest/best in class which might be worth looking at? Could gitlab + amazon eks literally be enough for example?

And maybe I can just use AWS managed versions of opensearch, kafka, etc for the services my microservices talk to?

Appreciate any help to direct my learning over the upcoming months!



https://redd.it/1ip6zrq
@r_devops

Jenkins on LXC?

I know I can run jenkins on a VM. Recently I saw some company says they started running jenkins on Linux Containers. So, I was wondering can I do the same on my proxmox. When tried to install on a ubuntu LXC, it got installed but failed to run stating "Failed to start jenkins Continuous Integration Server" Status Code : 1/FAILURE. No other error messages on journalctl. Any ideas? Has Anyone tried this?

Note: Some of you may ask why not run on a VM, I can and I am already running. But want to lower my resource since I am not doing much with it.

https://redd.it/1ip81tx
@r_devops

Is there a more secure way to setup a CI pipeline for a FUSE Project That Does Not Involve Enabling Privileged Flag for Docker or Gitlab Runner?

I'm playing around with setting up a CI pipeline that runs e2e testing for work. This project involves having a FUSE mount and e2e testing for this project is done manually, which frankly sucks. I'm developing a script to automate this, but I'm thinking if I can do one step further and make this run in a CI pipeline on gitlab.

I tested that mounting fuse only works if the runner is priveleged, but my question is if there is a more secure way of doing this. It would be greatly appreciated if there are similar open source pipeline examples of doing this.

Thank you!

https://redd.it/1ip93ec
@r_devops

Looking for advice on understanding developer experience

Hey everyone,

Lately, there's been a lot of talk about how developer experience impacts productivity. Research shows that productivity isn’t just about metrics, it’s also about how developers feel about, think about, and value their work. In our team, we’ve been relying on developer feedback to uncover inefficiencies in our processes.

That’s why we’re considering a tool that could help teams better understand devex. The idea is to integrate surveys into Bitbucket with customizable templates and questions on the most common challenges developers face at work to gather their feedback on the whole working environment. You can find more details on the vision here: https://link.stiltsoft.com/dev-surveys

However, we're unsure if surveys are the best way to measure developer experience and would love to hear your thoughts:

Do you measure developer experience in your company?
What tools or methods do you use to track developer experience?

https://redd.it/1ip9r2q
@r_devops

I promise this will improve your chances of getting more interviews

I made a website that converts your cv to match the job description automatically without manually copying and pasting your CV. Visit https://cvconverter.replit.app/ to get started

https://redd.it/1ipbodj
@r_devops

SRE Interview Questions

I work at a startup as the first platform/infrastructure hire and after a year of nonstop growth, we are finally hiring a dedicated SRE person as I simply do not have the bandwidth to take all that on. We need to come up with a good interview process and am not sure what a good coding task would be. We have considered the following:

* Pure Terraform Exercise (ie writing an EKS/VPC deployment)
* Pure K8s Exercise (write manifests to deploy a service)
* A Python coding task (parsing a lot file)

What have been some of the best interview processes you have went through that have been the best signal? Something that can be completed within 40 minutes or so.

Also if you'd like to work for a startup in NYC, we are hiring! DM me and I will send details.

https://redd.it/1ipcn2i
@r_devops

Struggling with Docker Rate Limits – Considering a Private Registry with Kyverno

I've been running into issues with Docker rate limits, so I'm planning to use a private registry as a pull-through cache. The challenge is making sure all images in my Kubernetes cluster are pulled from the private registry instead of Docker Hub.

The biggest concern is modifying all image references across the cluster. Some Helm charts deploy init containers with hardcoded Docker images that I can’t modify directly. I thought about using Kyverno to rewrite image references automatically, but I’ve never used Kyverno before, so I’m unsure how it would work—especially with ArgoCD when it applies changes.

Some key challenges:

1. **Multiple Resource Types** – The policy would need to modify Pods, StatefulSets, Deployments, and DaemonSets.
2. **Image Reference Variations** – Docker images can be referenced in different ways:
* [`docker.io/distribution/distribution`](https://docker.io/distribution/distribution)
* `distribution/distribution`
* `alpine` (which actually maps to `library/alpine`, so I’d need to account for that).
3. **Policy Complexity** – Handling all these cases in a single Kyverno policy could get really complicated.

Has anyone tackled this before? How does Kyverno work in combination with ArgoCD when it modifies image references? Any tips on making this easier?

https://redd.it/1ipdwpo
@r_devops

Do you bump helm chart version manually?

So currently im bumping my helm chart versions manually, the version is the same as appVersion, and the appVersion is set also manually whenever i push to github; i have release-please creating a new PR and then i manually sync that version in my chart.

I feel like this can be automated but i don't know how? is there a tool that does this?

https://redd.it/1ipf8ca
@r_devops

Is yq available in Cka ?

So far, I’ve only used yq instead of jq or kubectl jsonpath, and it worked fine in KodeKloud labs, Killercoda, and Killer.sh.

I assumed it would be available in the exam as well, but after reviewing the guidelines, I noticed that only jq (and some other tools) are explicitly mentioned as configured—yq is not.

Can anyone who has taken the exam confirm whether yq is available?

Thanks!



https://redd.it/1ipgfeb
@r_devops

Deploying via GitHub code runner running on target server?

I'm taking over the lead on development of a node.js project at work and want to automate where I can to make things easier and less tedious for myself. The former lead had been manually updating the builds and restarting the pm2 service outside of work hours, and that is something I can't abide if there's any other way.

I was able to get automated deployment working on our demo server by making a batch script which runs as a cron job and does everything manually, but it's not very robust and I realize I probably shouldn't try to reinvent the wheel here. I've been looking into GitHub Actions, which until now I've only really used with GitHub's provided code runners, and I've seen some tutorials that say to have the code runner actually run on the deployment machine. I'm curious if this is an intended use case and good practice or if it's a hack, since these tutorials were all made by individuals and I didn't see any documentation on GitHub suggesting deployment this way.

I've also seen some tutorials that say to use ssh/scp actions to build via a runner from anywhere and then send the builds to the target server and have it run a script to restart services, but for my use case this would require sending about 1GB of dependency packages and also the target server does not have ssh access outside of a VPN so it wouldn't even be possible without having IT make some networking changes which they may not even approve.

So my question is, would it be an appropriate use of a code runner to have it run on the actual server the app runs on? Additionally, is there a way to have a workflow that is both triggered by a git push AND waits until a specified time to execute (our app is generally only used in our time zone and we want to update during a time where it is less likely to disrupt service), or if I go this route should I have the code runner instead run on a schedule and exit early if there are no new commits? Any feedback would be greatly appreciated!

https://redd.it/1ipim82
@r_devops

I am using GitHub actions to deploy Azure AppService for every PR that my dev team creates but can find a way to clean them up after the PR gets merged into main branch

Hi there…

I setup my GitHub actions to deploy appservice each time our dev ran creates a PR with their code and it is creating fine.

But after the pr gets merged those test appservices just stays there. I can’t find a way to automate the clean up.

Any takes on this one 🫡

https://redd.it/1ipsv2r
@r_devops

Terraform Certification

Hi, I am originally work as data scientist but I am leaning on DevOps recently, and is it worth to get terraform Certification these days?

https://redd.it/1ipxbxl
@r_devops

Best VPS hosting for Enterprise, more storage lower coat

Hello,

I have been using GCP for a while and never had any issues, however the pricing seems a bit extreme compared to other hosts.

What I'm looking for is a vps:
1gb ram
1-2 vcpus
300gb ssd or nvme

I see some hosts offering 100gb nvme for $4 monthly but with GCP, the price is 10 fold.

I need a stable connection, almost never goes down and redundancy in place.

This is for an application that just ping multiple endpoints and save massive data in a mysql database every minute. In one year, the dB size is 50gb

https://redd.it/1ipyjvq
@r_devops

Cloud sql - pay only for storage (db size)

Hello,

Is there any budget-friendly and reliable cloud sql providers that offer just cloud sql without requiring cpu or memory?

The only one I found was Azure with the DTU option but the pricing increases significantly above 100gb storage size.

I just need an online sql where I push data every minute, around 50gb worth per year.

Sometimes I can ping it from.another application to download 5k-10k rows.

https://redd.it/1ipzcy3
@r_devops

AWS SCP comparisons

Hello Experts, I have lot of SCPs attached to my OUs and accounts. I would like to find if my scps are not overlapping . Manual checks can be tedious , i would like to use some AI / automated way to find these repetative actions.
any advice ?

https://redd.it/1ipyzkw
@r_devops

CFG Degrees - Information Security Engineer (Full-Stack) or Software Engineering (Software)?

Has anyone completed the CFG Degree?

I just would like some clarification on the Degrees that CFG offers. I can see that for their most recent cohort they have the following available:

1. Software Engineer role with a Software stream for one company.
2. Information Security Engineer role with a Full-Stack stream for another company.

I aim to build my career as a DevSecOps Engineer but I’m unsure which route would be best.

From my understanding, the Information Security Engineer role may be a more direct path to DevSecOps, but the Full-Stack stream makes me question its security focus.

Meanwhile, the Software Engineer role might offer an easier pivot to DevSecOps than a typical Full-Stack role. However, it isn’t specifically a Full-Stack position.

Could anyone share their experience or advice on which path might better support my goal of becoming a DevSecOps Engineer?

https://redd.it/1iq3heh
@r_devops

Infrastructure as code with clever cloud: what are my options ?

Hi !

I'm not really used to DevOps, so I'm requiring some insight.

I need to deploy my stack on Clever Cloud, and deploy it several times as different environments. Though, terraform providers for Clever Cloud are very lacking and sometimes buggy.

What are my other choices when it comes to deploy a stack with most services needed to be run on Clever Cloud ?

https://redd.it/1iq542i
@r_devops

How much off-hours studying and skilling up do you do for yourself?

I mean this question specifically for people already hired in DevOps positions.

I got hired in a fairly junior DevOps-y role around 3 years ago (prior only had 1.5 yoe as a web developer since graduating) but I'm looking to move on to a new role sooner rather than later. However I think in that time I've fallen a little bit behind where I should be with my experience, mostly because I don't have any of the damn certs that every job ad asks for (yes I know certs are worthless except for HR, but they are the gatekeepers of job ads).

I'm preparing to start the studying process now, while also applying for jobs, but I fear the encroachment of professional development on my personal life. I've had a few handfuls of on-call weekends which are fine but generally I do prefer to have a hard line between personal and work, and I feel like studying to up-skill and get certified does kind of blur that line. To that end I seek the wisdom of the greybeards to ask, how much studying do you allot for yourself and how do you make sure you are solidly logged off when you're done?

https://redd.it/1iq7qzw
@r_devops