Reddit DevOps
274 subscribers
64 photos
32K links
Reddit DevOps. #devops
Thanks @reddit2telegram and @r_channels
Download Telegram
What are some (SAAS) products that are worth using?

Title, basically. In other words, which products do you or your team use on a daily basis to help abstract away some of the more annoying parts of DevOps?

https://redd.it/n1bl13
@r_devops
Struggling with installations on Linux machine.

I feel that i am able to figure may way out of most stuff. Be it scripting, cloud, terraform, kubernetes. I have always struggled with installations and upgrades. I know few years back i to upgrade Jira on a server and totally struggled with it.

How to get good with installations and upgrades of sofware on linux machine?

https://redd.it/n1a8k0
@r_devops
Can I keep content private with a url pathname like "mysite.com/my-secret-string/my-content"?

I want to host my own Pi 4 ubuntu nginx web server for my portfolio and a few other things, but dont want to dox myself when playing any multiplayer video game. Is there a way to make it so that nothing loads when merely going to my ip, and hide the actual content behind a parameter in the path like mysite.com/some-string-code/mycontent"? Or will bots have a way to see all the path routes somehow? I can limit number of requests to prevent brute-forcing every string path possible (if bots are even doing that).

https://redd.it/n1gzc2
@r_devops
Is it fine to learn DevOps with less coding knowledge?

I’m looking to change job fields, is DevOps good field for someone who is coming from sales field ?

I’m little aware of python.

Help me make my decision.

Thanks

https://redd.it/n1lj32
@r_devops
Good package and machine image management strategy?

I'm working at a start up and I noticed we've been having long application build times. When I dig into it, I see that that machine images are being build in the CI/CD pipeline. So it makes sense to me that we should pre-bake the machine image ahead of time and keep in Artifactory.

This image has a handful of apt packages installed on it, those packages are also built every time the machine image is created.

Ideally -- it seems to me -- that each night all the packages would be rebuilt with updates and so too would the machine images so that in the morning an updated image would be available to use and this would drastically cut down build times.

My first thought would be to split all the packages into their own repositories, configure Jenkins to rebuild all the packages on a cron timer, and also rebuild on commit. Same thing with the machine images. My question is: what is a good way to manage downstream dependencies?

For instance: If machine image I depends on package P1, P2, and P3, how do I rebuild I automatically when one of the packages are updated?

I know Jenkins has a build trigger for when another job is completed. But something about this feels.... fragile?

Has anyone done something similar? What was your approach?

https://redd.it/mzt8xg
@r_devops
suggestion for Master course



Hi All,

I just my bachelor in BS Electrical Engineering and i also done certifications in ccna and Azure cloud (104) .Now, i want transition from Electrical Engineering to Networking,cloud and Devops so which field is best for me to do master in usa.

Thanks for your time !!

https://redd.it/mzsvs9
@r_devops
Does putting smtp server behind CDN hide the origin IP?

With a smtp server like postfix behind a CDN like cloudflare, will the outgoing mail appear to come from cloudflare or from the origin IP of the smtp server?

Or have I misunderstood how CDN works and it doesn't hide IP addresses on any outgoing connections only incoming ones?

https://redd.it/mzsoq5
@r_devops
Which AIOps tool is the best fit for each context?

So I was wondering which of the following AIOps tools would be best to use in a small startup, lone developer/startup and big enterprise corporation such as Facebook:

Instana, Dynatrace, AppDynamics, New Relic and Datadog.

​

Thanks!

https://redd.it/n1w8db
@r_devops
Monitoring-as-Code with Terraform Cloud and Checkly

The HashiCorp blog recently published an article showing how Germany’s Schwarz Group, (Lidl, Kaufland and other grocery stores - one of the top retail groups worldwide) uses Terraform for both infrastructure provisioning and monitoring:

https://www.hashicorp.com/blog/monitoring-as-code-with-terraform-cloud-and-checkly

Does anyone here have any experience using Terraform to provision monitoring resources (especially synthetics)?

https://redd.it/n1tpk2
@r_devops
Gitlab to Jfrog : Extremely slow downloads of Maven artifacts

Hi,
From yesterday we see some extremely slow download speeds from SaaS Jfrog.
Basically, it take like an hour to download what was done before in 1-2 minutes

Same for shared and own ec2 gitlab runners
Anyone having same issues?

https://redd.it/n1pto8
@r_devops
What risk remains with hosting a home web server with port 80 if you limit login to a local network device with an ssh key?

I want to host my own web server on my Pi 4 with linux and nginx. Its not for heavy traffic (will host my portfolio which links from my resume, and will host websites I am working on to show clients current progress). With that said, I see a lot of people saying "dont open port 80! Instead, pay 5 bucks a month for eternity!", but they dont really explain why it is a risk. Also, I dont mean "hypothetical in a lab risks" like "a mac can hypothetically get a virus" or "hypothetically, you can get your data stolen even if you dont open any port at all". I mean, an actual real-world increase in risk.In short, if I have port 80 on my router forwarded to my web server on my Pi 4, and my pi 4 is only listening on port 80 and the ssh port, and the ssh port only allows logins from a specific local ip of my laptop using an ssh key, and password login is disabled, and only my account is allowed to login, and root login is disabled, and linux is set up to ban someone after 5 failed logins, and my Pi doesnt have any important data:

1. how is this a risk to my data located on my PC?
2. how is this even a risk to my pi 4, barring a hypothetical where someone drives by my house, brute-force logs into my wifi, takes my macbook's local ip somehow, and then tries to brute force ssh-keys and luckily gets it within 5 tries to avoid a ban. Even in THIS scenario, what is the risk?
3. Can someone even log in through port 80?The idea of "just pay for ever" doesnt sound rational, and just sounds like those people that think your computer will die if you install RAM without a special static electricity discharge wristband.

https://redd.it/n1ptnq
@r_devops
interview question: single jenkins master for bigger number of teams or multiple jenkins?

Recently interviewed at a position where interviewer asked somewhat abstract question:

lets say you have 5 teams each with different CI/CD needs and what to you use jenkins - you are the architect. you go single jenkins or multiple jenkins master?

I first answered 5-10 is good enough to be organized via folder and then have auth strategy to map each team AD group permissions to that folder.

Next i was asked what if teams are increased 50-100 or 150 , would i still stick with single jenkins?

​

I honestly dont know so here i am ..what do you guys is right answer to these tricky questions?

https://redd.it/n1kjca
@r_devops
Monthly 'Getting into DevOps' thread - 2021/05

What is DevOps?

[AWS has a great article](https://aws.amazon.com/devops/what-is-devops/) that outlines DevOps as a work environment where development and operations teams are no longer "siloed", but instead work together across the entire application lifecycle -- from development and test to deployment to operations -- and automate processes that historically have been manual and slow.

Books to Read

The Phoenix Project - one of the original books to delve into DevOps culture, explained through the story of a fictional company on the brink of failure.
[The DevOps Handbook](https://www.amazon.com/dp/1942788002) - a practical "sequel" to The Phoenix Project.
Google's Site Reliability Engineering - Google engineers explain how they build, deploy, monitor, and maintain their systems.
[The Site Reliability Workbook](https://landing.google.com/sre/workbook/toc/) - The practical companion to the Google's Site Reliability Engineering Book
The Unicorn Project - the "sequel" to The Phoenix Project.
[DevOps for Dummies](https://www.amazon.com/DevOps-Dummies-Computer-Tech-ebook/dp/B07VXMLK3J/) - don't let the name fool you.

What Should I Learn?

Emily Wood's essay - why infrastructure as code is so important into today's world.
[2019 DevOps Roadmap](https://github.com/kamranahmedse/developer-roadmap#devops-roadmap) - one developer's ideas for which skills are needed in the DevOps world. This roadmap is controversial, as it may be too use-case specific, but serves as a good starting point for what tools are currently in use by companies.
This comment by /u/mdaffin - just remember, DevOps is a mindset to solving problems. It's less about the specific tools you know or the certificates you have, as it is the way you approach problem solving.
[This comment by /u/jpswade](https://gist.github.com/jpswade/4135841363e72ece8086146bd7bb5d91) - what is DevOps and associated terminology.
Roadmap.sh - Step by step guide for DevOps or any other Operations Role

Remember: DevOps as a term and as a practice is still in flux, and is more about culture change than it is specific tooling. As such, specific skills and tool-sets are not universal, and recommendations for them should be taken only as suggestions.

Previous Threads
https://www.reddit.com/r/devops/comments/mhx15t/monthlygettingintodevopsthread202104/

https://www.reddit.com/r/devops/comments/lvet1r/monthlygettingintodevopsthread202103/

https://www.reddit.com/r/devops/comments/la7j8w/monthlygettingintodevopsthread202102/

https://www.reddit.com/r/devops/comments/koijyu/monthlygettingintodevopsthread202101/

https://www.reddit.com/r/devops/comments/k4v7s0/monthlygettingintodevopsthread202012/

https://www.reddit.com/r/devops/comments/jmdce9/monthlygettingintodevopsthread202011/

https://www.reddit.com/r/devops/comments/j3i2p5/monthlygettingintodevopsthread202010/

https://www.reddit.com/r/devops/comments/ikf91l/monthlygettingintodevopsthread202009/

https://www.reddit.com/r/devops/comments/i1n8rz/monthlygettingintodevopsthread202008/

https://www.reddit.com/r/devops/comments/hjehb7/monthlygettingintodevopsthread202007/

https://www.reddit.com/r/devops/comments/gulrm9/monthlygettingintodevopsthread202006/

https://www.reddit.com/r/devops/comments/gbkqz9/monthlygettingintodevopsthread202005/


https://www.reddit.com/r/devops/comments/axcebk/monthlygettingintodevopsthread/

Please keep this on topic (as a reference for those new to devops).

https://redd.it/n2n1jk
@r_devops
Monthly 'Shameless Self Promotion' thread - 2021/05

Feel free to post your personal projects here. Just keep it to one project per comment thread.

https://redd.it/n2n21n
@r_devops
Reason for Bicep to exist?

Hey everyone. I would like to have the opinion (yes, no reference needed ;-)) of the community here on Bicep. When I was looking at Azure resource manager, which is the equivalent of AWS CloudFormation, I encountered that they have created their own configuration language in addition to JSON, namely Bicep... Is there a good reason for that? I get why Terraform needed their own language, being a cross-cloud tool... But a language that doesn't even seem to make things really easier just for Azure?

When I encounter something like that, I am usually missing something... So please, let me know if I am.

https://redd.it/n2pvoq
@r_devops
How do I become good at self-learning?

Pretty self explanatory title.

I've been in this industry for about a year and a half now and it seems that the most important skill by far is being a good self-learner.

I say that because I always thought I'd have someone show me the ropes but in my experience people usually don't care about you enough to explain concepts in-depth and everyone pretty much expects you to learn things on your own.

I'm currently a DevOps intern and I'm finding it extremely difficult to learn the job on my own, feels like I'm moving at the pace of a turtle while people around me that somehow mastered this hability are moving at the pace of a cheetah.

Can someone clarify their thoughts about this and give some advice on how to be a good self-learner?

https://redd.it/n2ii6j
@r_devops
Tool for automate bootstrap project ??

Hello, I'm looking for a tool to automate repetitive task we usually have in the first sprint of the projects like, create slack channel, create folders for Drive, create folder and give access for developers to the password management tool and many others common stuff.

Any tools before reinventing the wheel?

The idea if non tool is to create a slack bot, or maybe Zapier.

Thank you in advance!!

https://redd.it/n2mrb4
@r_devops
Custom machine scaling option from a cluster orchestrator

It seems like every docker or machine orchestration tool I've seen either tries to provide it's own machine scaling mechanisms, or outsources it to a cloud provider. This makes it very hard to compose unconventional compute-providing options like PXE network boot-up, or utilize scaling on a smaller provider like the Hetzner cloud.

What I'd like is an option (from a cluster orchestration service that can determine if a scale event needs to occur), which gives you the option to define your own mechanism of providing a machine and adding it to the cluster.

Typical examples or use-cases:

* A hobbiest service from a raspberry pi or closet machine needs to scale out into a cloud in case it ends up on hacker news
* Taking advantage of hetzner's costs, but with autoscaling
* Scriptable booting and provisioning of old home machines via PXE to fulfill requests.

Note that this is a hobbyist objective, and not scaling for an important service... yet :)

https://redd.it/n2l1bc
@r_devops