Reddit DevOps
268 subscribers
30.9K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
How should I explain my job to friends and family? Or what do I use as a simpler, easy-to-grasp job title to use for non-techies?

Sorry if this has been posted before, but I’d like to see your interesting/clever/funny responses to this.

I had a conversation like this two days ago with someone who is relatively tech-oriented (PC Master Race kind of guy):

Him: What do you do?

Me: Well I build and ship software.

Him: Oh cool, a software engineer then?

Me: Well... sorta... almost, but mainly automating the deployment of software and monitoring it and stuff, I don’t develop new features.

Him: Oh, so a system administrator? Can you fix my printer? It’s got this weird noi-

Me: NO! I mean, no, no, I don’t know anything about printers. Again, I build and ship software on a large scale for many different teams.

Him: Oh cool, like a software engineer?

Me: Yes. Sure. Yes.


Not that it matters because titles are mainly irrelevant and I know people get up in arms about what DevOps truly means... but I also don’t want to spend more than 10 seconds going into the land before time where developers and operations used to be on separate sides of a wall and then one day the fire nation attacked.... snooze

Again, just looking for quick one-liners like “tech pipeline builder” and funny stuff like that where there won’t be any follow up questions, but I also don’t give a false sense of what I know and can do.

https://redd.it/likpbt
@r_devops
Alternatives to Fluentd for an IoT Environment?

I am looking for a logging solution for: log enrichment, aggregation, buffering, routing, and forwarding to support an IoT system with constrained hardware resources that is often in disconnected/offline state. The log sources vary from OS and orchestration level to various custom services. Fluentd seems to be the most robust system I can find so far. Just wondering if anyone can recommend any similar systems/frameworks I should evaluate, both open source and commercial suggestions are fine. Thanks!

https://redd.it/li58yr
@r_devops
Health checking services without web server (queue only)

Hi all,

We have bunch of microservices build in NodeJS, running in docker that we need to health check.
That is easy thing to do with services that already have a REST API by simply adding endpoint for health, however we do have some services which only work with queues (RabbitMQ) and do not have a web server.

​

I talked with lead dev and he doesn't like the idea of adding web server to these services just for purpose of health check, though that should be quite easy thing to do.
Our current idea is to have a "health checking" service which will publish to health queues of individual services, and extend services to consume these messages and publish a response - basically a heart beat with some metadata.


I am not 100% sold on the idea for obvious reasons - increasing complexity, introducing single point of failure for health checks and i am not sure how it's easier to develop new service that needs to be built, deployed and monitored vs just adding web server and health endpoint to existing services.

​

Does anyone have a better alternative to this or have done similar in the past?

https://redd.it/li8qeh
@r_devops
Telegraph vs Metricbeat

Hi All,

Anyone experience working either of these ? I like to understand these tools push model , how to configure them to push metrics to different outputs ?

I am working on a use case, where i have to push metrics from the Kubernetes cluster to some storage service but not any time series database.

Interest to know your thoughts on this ?

Thanks

https://redd.it/li5n43
@r_devops
Can DevOps engineers handle some security or should AppSec handle 100% of it?

If we are to consider DevOps people the utility players that they are, they should be able to handle some security matters without specialist support. But some schools of software philosophy seem to push for dedicated AppSec teams in all situations. What kind of config would justify each type?

I'll get the ball rolling with my understanding.

DevOps can do security if:

1. Security can be ensured due to a smaller scope of software
2. App security is not mission-critical i.e. no financial or medical data
3. They have adequate planning ability to distribute security planning across their people

AppSec teams should be added on top if the converse of any of the above 3 exists.

https://redd.it/lixloa
@r_devops
How can I run my scripts like a cronjob without a server?

I have a virtual machine with some scripts. I would love to run these scripts outside of manually git pulling, configuring the passwords in the files, and using a cronjob to run the scripts.

I have much experience with Linux and virtual machines, but I'd love to have a new pipeline solution that just runs some code, fetches my secrets (passwords), and runs some Python code.

Simplicity is also important. I think AWS Lambda is already too complex. I'd prefer to see the output of the script in a CI/CD GUI (web page).

https://redd.it/lj9cmr
@r_devops
I'm new and need help, sorry

Sorry everyone, I'm a newbie.

I coded my own static site generator in python. I know how to use Github pages to host static content. My hope is to use webhooks to know when a Youtube video is uploaded so my script can scrape the video, and then publish the newly generated .html file to Github pages. I think Github actions can help me but I have no knowledge of devops I'm just so confused.

​

Is there a way for me to:

1) Make that webhook trigger a Github action that runs the python script.

2) Update and commit the files with the newly scraped content to a Github repository.

3) And then finally build/deploy/publish those newly generated .html files to Github pages.

​

I've heard Travis CI can help with steps 2 and 3.

I know my problem overall is very specific but any help would be greatly appreciated. Sorry for the noobness, I'm not a comp sci student, just really passionate about coding and building things.

https://redd.it/lj6rnd
@r_devops
Why is it so hard to find a long term part-time job?

I've been on various job listing sites looking for Dev/ops and have had trouble finding any positions that were 20 or less hours a week, remote, and potentially long-term. It's like I have to pick 2 of the 3 things I want out of a job, and that's not really worth it to me. Why is this type of work so hard to come by?

https://redd.it/lj66aw
@r_devops
Nginx Container Benchmarks

Hi All,

We have setup the Kubernetes cluster to execute performance benchmarks for a front-end and back-end (nginx and mariadb) pods for benchmarking ? I am using sysbench to perform benchmarks on the MySQL pod, however looking for recommended tool which is relatively close to real world load to benchmark nginx web server container ?

Thanks

https://redd.it/ljdo35
@r_devops
How can I minimize multiple layers COPY in Dockerfile?

Hello,
I have something came up in my mind. As I have “COPY --from=builder ...” for more than 3 lines, can I minimize it to be only one line to make it faster to build?


Ps. Why others try not to COPY them all to destination file?

https://redd.it/lj1m5s
@r_devops
Simple and easy CI to be triggered via Webhook

I'm looking for a lightweight, simple and easy CI solution to be used with Gitea.

Don't need to be with fancy gui and stuff.

The idea is to have a simple service that is triggered by a WebHook and then executing a build script (shell-script?). Reporting then via log file or mail.

Is such a tool available?

Otherwise i would consider to develop one.

Any thoughts?

https://redd.it/liyovy
@r_devops
Main Role of DevOps Engineer

Just curious on what is the main role and task of a DevOps Engineer?

https://redd.it/liphuf
@r_devops
New to DevOps

Hi, just want to know what's the difference between a Software Developer and a DevOps Engineer? What are the differences on their role and tasks?

https://redd.it/lip9l7
@r_devops
What exploit is trying to be leveraged here? (Apache access.log)

I've just deployed a barebones Apache server on Digital Ocean, only hosting static files. No PHP et al.

I'm not too bothered to see random exploit attempts, but 99% of the requests are of this similar format and I'd like to know what they are trying to do.

The source IP is always changing, but the GET resource request is the same, as well as the user-agent. My server is under a constant 30kB/s public inbound (sometimes peaking at around 80kB/s) from this type of request.

I have written a .htaccess and I regex the user-agent for 'wget', and direct the request to a 403. Very noob at this but I feel like that was possibly redundant.

180.190.118.26 - - 14/Feb/2021:09:10:07 +1100] "GET /index.php?c=update&a=patchsum&product=BTFLY-A&ver=1.3.0 HTTP/1.1" 403 407 "-" "Wget/BTFLY/\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff

There is no index.php on my server, but I'm still curious nonetheless about how concerned I should be.

Thank you.

https://redd.it/ljieir
@r_devops
I created a tool to generate diagrams for cloud architecture declaratively

Hi everyone!

​

The problem:

I often find myself drawing architecture diagrams using tools like draw.io or lucidchart.com but I always dislike the process of manual drawing, searching for icons and clicking around to edit labels. Also I wanted to make sharing the diagrams as easy as sending a link to a friend or colleague and they can start editing, poor man collaboration :-P.

​

The solution:

For this reason I created a tool to declaritively define your infrastructure diagram in the browser. It is similar to graphviz but it has tailored towards cloud infrastructure and it's entirely client side in the browser. The UI is not great and the layout is not as good as a manually crafted diagram (although you can drag around icons to make it look better and I have plans to improve the engine) but I hope it is useful for some for prototyping or creating diagrams for docs and proposals.

I know that with infrastructure-as-code there are other tools to do similar things but they all seemed to have a barrier of entry I wanted to avoid for most non experienced DevOps.

​

The details:

Simple client side JS app wrapping several libraries for parsing and rendering the graph. The DSL language is very similar to Graphviz so it's hopefully familiar.

​

Any feedback on bugs and missing features is welcome.

Link: https://cloudgram.dedalusone.com

https://redd.it/ljcl9b
@r_devops
Is my view of DevOps right?

I recently made a YouTube video (link: https://youtu.be/yczwWzkbFAQ) on what DevOps is in my opinion. I was hoping to make more videos on similar lines but wanted to confirm if my view of DevOps is correct.

In a nutshell, the video emphasizes on having a process (which can be done manually) before you can automate it. Then I've gone on to describe how you can automate a simple process of making a nodejs app live on a VM and how tools like, Docker, CI/CD, Kubernetes fit into the picture.

Really looking forward to your feedback. I'm new to making content so please go easy on me 🙈

Here's the link to the video: https://youtu.be/yczwWzkbFAQ

https://redd.it/ljdn1l
@r_devops
Blog Bash variables — Things that you probably don’t know about it

Hey,

Two days ago I wrote this blog exploring the scope of the Bash variables and the types. I'm explaining their differences, how and when to use each one of them. Feel free to give any feedback/suggestion/* :)

​

See on Medium: https://medium.com/unboxing-the-cloud/bash-variables-things-that-you-probably-dont-know-about-it-8a5470887331?sk=26693ca772a0c54c99d3712303560ed4

​

See on my Website: https://www.lozanomatheus.com/post/bash-variables-things-that-you-probably-don-t-know-about-it

​

Sorry, I'm pretty new on Reddit, I ~~accidentally~~ deleted the original post...

https://redd.it/linffa
@r_devops
Looking for a virtualize network testbed

Hello!

I am writing some distributed network software that I'd like to test. Instead of creating 20 VMs I was planning on using docker containers, but I'm not too sharp on docker networks. I want to be able to create NATs and other network features you'd see normally.

Does anyone know of some software that does this? I'm sure you could do it with docker containers I just don't know the docker networking feature well enough, and it seems like a great place for a product to step in

https://redd.it/lin8jk
@r_devops
DNS server over kubernetes

Hi everyone!
My team manages multiple k8s clusters and other components.

We have a management k8s cluster with several components and a single instance primary DNS server used by the clusters in our environment.

I am considering migration of our DNS server to our management cluster in order to simplify the different kinds of services we manage (concentrate on development on top of k8s).

We haven’t used a k8s cluster for services that aren’t web services (http). I was wondering what your thoughts are?

https://redd.it/limtu3
@r_devops
Telnet

I need step by step guide to install telnet on redhat

Note: i have installed redhat enterprise now and i don't know if i need packages for installation.

https://redd.it/limsq9
@r_devops
Hashi Boundary vs. Teleport vs. StrongDM

Is anyone using these tools to manage cloud application access? I am wondering what people like or dislike about these tools or if any of them are any good.

https://redd.it/lijoit
@r_devops