Deploying Windows 10 images

I was wondering what the best way to create custom windows 10 images for client would be? The idea is we create a customized image and then deploy them to client machines. The trick is, we have a bunch of different clients and the images all need to be tweaked for the different deployments.

Is there a easy way to accomplish this?

https://redd.it/ey8uze
@r_devops

Docker/Kubernetes

Hello Guys/Girls. I am starting startup with small team. We are building complex web application. I don't have big experience with deployment, I thought I could learn docker/kubernetes to use on current project. I need suggestions where to start, what ressources can I use etc.

https://redd.it/ey8t22
@r_devops

Similarity of Staging and Production Environment

Hi all,

I'm reading about the Staging Environment and some things are not clear to me. If it's supposed to be similar to the Production Environment, then:

1. Is the same amount of machines (VPS) used as in the Production Environment?

2. Is it usually placed in some subdomain? If so, how is its access normally limited? Through firewall?

3. Assuming Let's Encrypt Certificate is used for the Production Environment. What kind of Certificate is usually used for the Staging Environment? Same Certificate in the same domain? Separate Certificate in another domain or maybe a self-signed certificate?

https://redd.it/ey8a11
@r_devops

Which status page do you use? Anyone use cachet.io?

Hey folks, which status page do you use integrated with Pagerduty/Grafana/Prometheus, etc.? Things like statuspage.io, status.io, and has anyone integrated the open source cachet.io with PagerDuty?

Obviously not interested in things folks have for manually updating status :P

https://redd.it/ey54mu
@r_devops

29% of highest security integration orgs endure friction when collaborating

A watermark of traditional security activities within organizations is the high tension between security teams, the operations or IT, and the core R&D engineering. When all of these teams are siloed with their activities and overall goals unaligned, they create tension and friction that manifests in mis-executive security activities.

However, when security practices are integrated throughout the SDLC, then the overall confidence level of security practices levels up for the entire organization. Furthermore, the Puppet report shows that, when security activities take place very early in the SDLC, they are more impactful.

From the Puppet & Snyk DevSecOps Insights study at [https://snyk.io/blog/29-percent-of-highest-security-integration-orgs-endure-friction-when-collaborating/](https://snyk.io/blog/29-percent-of-highest-security-integration-orgs-endure-friction-when-collaborating/)

https://redd.it/eyrzpz
@r_devops

GUI Alternative to Chef

Hi

The automation engine I am working on can be used as an alternative to Chef to some extent. I am reaching out to see if you guys could provide some advice and viewpoint.

[https://staging-totalcloud.webflow.io/alternative-to-chef-totalcloud](https://staging-totalcloud.webflow.io/alternative-to-chef-totalcloud)

TIA

https://redd.it/ey6ocy
@r_devops

Terraform vs Roll-Your-Own Cloud Infrastructure Code

Just curious if anyone has actually run through the pros and cons of using Terraform to manage cloud infrastructure, vs writing your own using the provided APIs of whatever cloud providers you use. Assume we've all read [Terraform's own opinion](https://www.terraform.io/intro/vs/boto.html) and have a general understanding of [NotInventedHere Syndrome](https://en.wikipedia.org/wiki/Reinventing_the_wheel). How does Terraform beat writing your own Infrastructure-As-Code using the APIs directly, in specific cases?

It seems to me that Terrform looks solid and well-designed, but still doesn't quite align with what I'd envision to be an ideal declarative infrastructure specification. There's the added complexity of a generic "resource" abstraction, which all the syntax is designed around. But you still need to know (a) the provider-specific cloud resources you want to provision as well as (b) how to declare those resources in Terraform. As with most HashiCorp tools, it looks robust with a solid user experience, with features like `terraform plan`. But I still wonder if it's really worth it.

If I am going to have to think about the resource details anyway, I might as well spend the time to learn use the API, without the need to filter it through Terraform's abstraction layer first. That way, I know I'll be able to implement anything I want and won't ever be limited by 3rd party design decisions. I can design my own infrastructure specification format and base it on what I actually need, rather than be tied to a general language that has to be suitable for everyone. It might not be as robust and generally applicable as Terraform but that won't matter if it covers everything I need it to cover.

What are *good* reasons not to do this?

https://redd.it/eywqi8
@r_devops

How to stop Terraform from running all resources at the same time?

Hey all, I am new to Terraform and I am trying to write out some terraform files, and I am running into an issue. Some of my resources depend on "previous" modules to finish running and I am hitting a snag. I would like to run each resource in succession rather than simultaneously. Is there a way to do this?

Some things I tried:

Splitting them up into modules

Splitting them up into separate files and manually calling them when the resource is finished spinning up (best thing that worked so far but cumbersome)

Putting timeouts in place as a wait (this just ran the timeouts at the same time as well).

https://redd.it/eyt4xs
@r_devops

Monitoring solutions for remote research data acquisition systems

I work in academic research and operate a few remote research data acquisition systems (CentOS). I need to be notified when there is a failure in the data acquisition hardware or software, as well as things like failing hard drives or UPS battery. Thus far I've tried to make-do with emailing myself via a dedicated GMail address and try to set up stuff to send me emails if something goes wrong. The problem is that I end up spamming myself(e.g. if a data acquisition program runs once every two minutes but there's a hardware failure I get 720 emails/day over the weekend with the same error message!), especially if it's something that I can't really fix \*right now\*. Also I wish I could somehow aggregate stuff that's the same type of message from the same system, possibly silence certain errors, etc.

I'm sure there are products out there that can help with this kind of thing, but I don't really know what direction to go in at the moment. We could probably spend a little on a 3rd party service if it was worth it, and/or I could possibly convince our university IT to get us to self-host something.

Any advice? TIA.

https://redd.it/eyx71j
@r_devops

Blog Post: How to Build an Azure DevOps Pipeline for a PowerShell Module

Hey guys, I just wrote a shiny new blog post you may enjoy.

Summary: Learn how to take your PowerShell scripts to the next level by building an automated Azure DevOps pipeline around it!

https://adamtheautomator.com/azure-devops-powershell-module-pipeline/

https://redd.it/eyuliu
@r_devops

Splitting tests by timing in circleci

Hi all,

I'm trying to work out how to split tests by timing in circle. I have the following in my config:

`- run: gotestsum --junitfile /tmp/test-results/go-test/$(echo $RANDOM).xml $(go list ./... | circleci tests split --split-by=timings)`

`- store_test_results:`
`path: /tmp/test-results/`

The thought with the $RANDOM was that since we are splitting the tests and each container writes a new file, that it would read in all the files and combine them when it read the test results on run. That clearly isn't happening. Does anyone have a good example on how to properly split go tests by timing in circleci?

https://redd.it/eyxxnr
@r_devops

Terraform creating EC2 with AWS launch template

Hi all,

Asked my coworker about wanting to use Terraform to create a new EC2 instance and have it consume an existing launch template... but it didn't look like Terraform cloud could consume an existing launch template. So when I asked if that was the case, I was asked to define what a launch config was for, and the next response I get is "define what terraform is, and then smack yourself in the back of the head". And I don't know why it was a dumb question.

We have user data in the launch template that bootstraps the ec2 to our chef server and then assigns the node a role, which has a runlist assinged to that role.

I wanted to have Terraform create the new ec2, and use the launch template since it has the existing user data needed for the chef bootstrapping, role, runlist, etc.

I guess that wasn't a feasible or logical thing to suggest. Anyone have the patience to explain to me why?

Thanks!

https://redd.it/ez0r5i
@r_devops

Just laid off. What should my next steps be?

I've been working at a small company for 5 years as its sole IT/DEVOPS person until it was acquired last summer. Things were looking good, was moved to an SRE team based out of the new parent company and promoted, the works. We spent 6 months on refactoring the old app to make way for directives from the top, and boom, this morning they called me in to lay me off.

I could use advice on what to do to shop myself around to other local tech companies, and how to represent my experience. I'm self taught, my skills are python, SaltStack, AWS cloud, and process architecture. I'd like to be making a move to something similar to my current, erm, former role, but I got there by starting as a junior programmer and moving up as opportunity came. Any thoughts would be appreciated.

https://redd.it/eytrr0
@r_devops

Getting ready for first DevOps job

Hello fellow redditors,

I am turning here for your help to get ready for my first, ever, DevOps job interview. I've found articles here and there talking about general DevOps culture, some differencies between Dev, Ops and so. However - I would need some help from you - experts and get some advices on specific topics.

First - to line up topics that were mentioned:
\- coding/scripting
\- infrastructure
\- scaling
\- running applications

Also they mentioned, they are in process of migrating services to containers, so Docker and k8s might be in question.

Second - I was told to bring my laptop with working coding env.


So I would like to get help from all of you experts in here, to line up some questions that might apear in regards of topics above and also, some of the scripting/coding excercisses they might be asking.

Third - any general advice for technical interview, feel free to share your knowledge with me (pretty please).

https://redd.it/eyz80e
@r_devops

Technical Interview with a seemingly Non-Technical person?

I have a 1 hour long technical tomorrow with a big company for a DevOps Intern role. I looked up the person who will be interviewing me according to the email I received and it appears that they don't really have any technical experience, not even a STEM degree from college. Anyone know what kind of questions I could expect, considering it is a "technical"? Also if anyone has any advice for prepping for a devops role, please share I could use it! I've just been brushing up on the things they asked in the HackerRank and learning about what DevOps actually is lol. I appreciate any insight y'all have, I'm super nervous, thanks!

https://redd.it/eyx8as
@r_devops

Any suggestions how to establish the devops for my application?

Hi reddit!

I've recently worked on a product that manages orders of a Café company from their supplier.

I need help understanding how to run the devops side of it. I'm using a standard MERN setup (MongoDB, Express, React, Nodejs).

Currently, I'm using Heroku (which is amazing but a bit expensive for the current state of the product), Mongo ATLAS (Not having any issue with the free tier at the moment)

My product is quite simple. There are 3 types of roles:

**Location:** Viewing, creating orders (Usually 1 order per day)

**Supplier:** Viewing orders, marking them as "shipped" (Usually entering every day)

**Owner:** The one with the "bird's-eye view", can't do anything (Entering just few times a month)

In total, I have 8 users but not all of them enter the app every day.

​

I don't have any experience with AWS but I'm up for learning whatever is needed.

I'm doing any aspect of the app (design, product, front and back end)

If anything is unclear feel free to ask me anything.

Thanks in advance!

https://redd.it/eyx3fe
@r_devops

Opinions on Jenkins X?

I'm going to be working on a Jenkins X project and was interested in people's opinions on it.

https://redd.it/eyptuy
@r_devops

Anyone familiar with github actions? I can't figure out how to install a github action to my repository.

I am trying to install this action to my repo, but I don't know yaml or actions enough to figure it out.
https://github.com/paambaati/codeclimate-action

https://redd.it/eywj6f
@r_devops

with more powerful ultrabooks, whats stopping most people from working with different VMs aside from software licence cost?

For example:

win10 host machine running vmware WKS with 3 guests:

1. one guest for office apps like email
2. one guest for development tools
3. one guest for browsing

leaving the main host to just be a transit area and VM backup storage.

the benefit I see are:

1. you can easily backup each VM and if something goes wrong or you get a virus through email or some sort; just delete the vmdk and paste a backup.
1. break one guest; and the others are isolated and unaffected.

cons:

1. battery
1. overhead of 4 OS running on the same hw
1. price of multiple software licenses that could have only been one.

thoughts?

https://redd.it/eyw0sg
@r_devops

Infrastructure as Code: Best Practices

Not sure if this is for here however I have been looking in to some IAC concepts and I was looking in to scripting the provisioning of development environments.

Currently I am using azure stack. We have environments that need spinning up weekly for our development team and this means a lot of time spent provisioning. I was looking to use the Azure ARM templates to provision the servers then PowerShell DSC to configure SQL and the Web Server. I was wondering if anyone has any tips of experience they can share on this.

What I want to provision is:

1 - SQL Server, SQL 2019 with our custom configuration

1- Web Sever, IIS/NODE/Custom Fonts

1- CRM Server

I'm looking at ways I can spin all of this up with a new naming convention and IP config for each environment and VM.

example:

WEB1TEST

SQL1TEST

CRM1TEST

​

WEB2TEST

SQL2TEST

CRM2TEST

​

WEB3TEST

SQL3TEST

CRM3TEST

​

Is there any best practices I should follow or anything to watch out for as someone doing this and planning this for the first time?

(side note, would it be good to use GIT to store and update these scripts and templates?)

https://redd.it/eyozia
@r_devops