Are there DevOp Stacks like LAMP and MEAN in software engineering?

I know of Kubernetes, Docker, Jenkins, etc., but are there fully defined stacks?

https://redd.it/f742j2
@r_devops

onsite interview for junior devops position..nervous..



In highschool I went to a vocational school for software development and had a internship as a web developer. Then I spent about 3 years working in infrastructure positions for a decent size company. A few months ago I was able to get into doing software engineering after picking up a IT support role and a manufacturing company.

It's only a contract role so I've been on the lookout for more work. I then got a phone interview for a junior devops role. I think i did pretty well despite falling short on aws and docker skills. I have the linux, infrastructure and software development experience so I feel like I'm a great candidate. They ended up offering me an onsite interview! :)

So I've been obsessing over AWS and docker the past few days to get ready. I'm extremely anxious because honestly after they described the role to me and the fact that it uses so much of what I learned in development/infrastructure/and linux.. It seems like my dream job..

I'm anxious mostly because I only have vocational school and no degree. Most of my side projects have been lost through distro hopping... I'm afraid I'll fail at a code screen if it's whiteboard, because I've used so many different languages the IDE is what keeps me from mixing up syntax sometime..

Indeed said they had tons of applicants and i'm not sure how many I'm competing with in the onsite interview. I'm extremely nervous because this is my dream role....I don't think there'll be a single candidate that wants it as much as me..

How do I not completely fail? :(

https://redd.it/f6tnts
@r_devops

Help with monitoring solution on EKS environment .

I started working with an organisation which is using EKS to manage there microservice infrastructure . I had implemented a Prometheus stack but it's not that much mature and I am not able to get all the insights or monitor the infra properly and being a single devops guy this is also consuming too much time of mine . So I talked to the CEO and they are ok with a paid solution till we get all our shit together .
I have done my research and inclined towards datadog and sysdig . I haven't implemented it on any test environment yet . Can someone please provide more insights on both of these and which one is better . Also does they provide log monitoring ?

https://redd.it/f6wsvi
@r_devops

I need to make sure I’m not crazy (or stupid)



I’ll be upfront that I’m not a DevOps expert or am able to communicate the correct technical terminology (I’m more on the business side of things).

However, I feel like I have hit a brick wall when talking to our DevOps team about a deployment branching/pipeline strategy for continuous integration. And what I need from all the smart people on this sub is to (1) help educate me on what I might have wrong, and (2) help give me pointers on how to get my company DevOps team pointed in the right direction.

Current “Deployment” Process: (WHICH I THINK IS WRONG!!!)

1) Developers create scripted files or make changes

2) The developers ALL add their updated/new files to a network folder

3) They update an excel spreadsheet documenting what needs to be moved to the remote repository

4) Someone on our DevOps team then reviews this excel spreadsheet and moves the files over to another local repository (another network folder) manually updating the excel spreadsheet

5) They then ‘stage’ and ready the files for a commit, then does a GIT ‘commits’ them into the DevOps Repo “Sprint” branch, this triggers a build/release into our other environments (QA>PROD)

6) Then the DevOps person goes back and OPENS/EDIT’s the files in this staging folder, and does another push into the “Master” branch

7) (Optional) since the repo now has files that QA is still testing, this means the developers must sometimes rescript/remove items to prevent it being deployed into PROD environments

I have lots of issues with this process. With a mix of possible points for human error, rework and how the files that QA hasn’t even tested yet are mixed in with all the other files

What I want:

1) Developers create scripted files or make changes

2) Each developer should be able to do there own ‘commits’/’pushes’ into a “Sprint” branch

3) This would automatically trigger a build/release of items from the “Sprint” branch into the QA environment

4) QA tests and confirms changes

5) Only the items that are part of the QA passed ‘commit’ are merged from the “Sprint” branch over to the “Master” branch for a build/release into PROD environments (when triggered by DevOps team)

https://redd.it/f6ulcq
@r_devops

What are the benefits of Multicloud for y'all?

I've implemented a couple of multi cloud Strats/automations and deployments and I've seen this trend grow more and more (IMHO one of the biggest trends in 2020).

The biggest concern that has moved my clients to multi cloud is to be free of vendor lock-in, some even mention a lower cost even though, in reality, the operational costs can EASILY skyrocket,

Im super aware of the drawbacks multi cloud, as I've suffered them myself, however besides reducing vendor lock-in and EXTREME needs in availability and disaster recovery, I don't really see any other benefits out of being multi-cloud, what other benefits do you guys see on it?

https://redd.it/f6vw64
@r_devops

Get an EKS Cluster up and running with its Terraform code in minutes

How to get an EKS cluster up and running AND its Terraform code in minutes with a CI/CD for Infrastructure as Code?
[https://www.cloudskiff.com/how-to-launch-eks-cluster-terraform](https://www.cloudskiff.com/how-to-launch-eks-cluster-terraform)

https://redd.it/f6sr2g
@r_devops

Alternatives to whisper database

I am using graphite + whisper for monitoring the system metrics but since the number of metrics are increasing , it is becoming difficult to use whisper as a storage as it is not an optimal solution because of inode table bottleneck and also it is not scalable.

Anyone has suggestions which database will be good in place of whisper which can solve inode table bottleneck problem and is also scalable and fast.

PS : i am thinking to go for M3DB which is developed by Uber.

https://redd.it/f6rzcg
@r_devops

Architecting Kubernetes clusters — how many should you have?

We just published an article discussing various Kubernetes cluster strategies from "few large" to "many small" clusters.

[https://learnk8s.io/how-many-clusters](https://learnk8s.io/how-many-clusters)

https://redd.it/f6rnab
@r_devops

Building & deploying a versioned documentation site with werf

Online documentation for our tool, werf, is updated with each release and we use a semantic versioning approach with 5 stability channels. It brings some special requirements in building a regular static site for this docs: we use a dynamic number of artifacts during the process of building Docker images (that are deployed to Kubernetes afterwards). [Here](https://medium.com/flant-com/dynamic-building-deploying-with-werf-5c65bb5c29cb?source=friends_link&sk=2cd5ec5c7ddbd3f7d4d3a5acd5cf9b58) we share how we're dogfooding with werf itself to implement the whole CI/CD process for the tool's website.

https://redd.it/f7c646
@r_devops

Solutions for hosting web app

I created a web application and hosted it in a standard way on a single VPS (2vCPU, 4GB RAM). Node.js backend and PostgreSQL are running as a process and React.js artifact is served through nginx. I am looking for a ways to make it more professional and efficient.
I started thinking about using Docker but my knowledge about it is quite poor. Could you recommend my directions/solutions which I should follow? Is using Docker can help me?

https://redd.it/f7c9sb
@r_devops

How to expand the use of Devops tools and practices in my current job?

I was hired as a Devops Engineer at my company. We are a SQL and Windows shop that doesn't actually have an application, rather we clean data that gets put onto a server that other companies then use. The most I have been able to do so far is get everyone on GIT for version control of their code and setup Jenkins to deploy a few of our file cleaner programs. My current work exists of managing and creating Jenkins deploys, managing GIT, creating PowerShell scripts to do sysAdmin and DBadmin jobs, and a few other odds and ends. This seems like a unique situation that there is not a lot of material on. I've looked into tools like Puppet, but I do not have control over deploying new servers (that comes from corporate). What more could I do for automation/ DevOps style approach?

https://redd.it/f7c7rn
@r_devops

Build and push your Docker images using Github Actions

I was working on a CI (continuous integration) portion for a project that lives in a mono-repo and hosts multiple, independently deployable services. Each service in the repository is versioned separately and there is a VERSION file with the version number inside each service folder.

```text
src
├── service1
│ ├── Dockerfile
│ └── VERSION
└── service2
├── Dockerfile
└── VERSION
```

The whole application is currently deployed as a monolith - a single, versioned Helm chart with sub-charts for each of the services. Theoretically, we are in the spot where we could be deploying all these services separately by replacing one helm install/upgrade command with a Helm command for each service.

However, the first step was to get each image built and pushed to the registry each time the version number changes and only on the master branch. I documented how I did this using Github Actions [here](https://www.learncloudnative.com/blog/2020-02-20-github-action-build-push-docker-images/) - hope it helps someone.

The whole thing wasn't too complex, however, I spent more time than I'd like to admit figuring out why I couldn't run git diff-tree. (Spoiler: it was due to the fetch-depth - by default the Github checkout action only fetches the last commit).

Is anyone else using Github Actions for their pipelines? Any interesting scenarios you ran into?

https://redd.it/f7eg85
@r_devops

Help with DevOps operations

Hello everyone. I am now entering the area of ​​infrastructure as a code, after more than five years in the area of ​​IT Infrastructure. I completed several courses in the area that instructed how to operate git, vagrant, docker, jenkins, grafana, aws and bash script. I am going to enter my first job as DevOps. I would like to know from you veterans, how it works within the work environment, since in class everything seems very simple and easy. If someone can describe to me things that happen from commit to production.

Something like a step by step of how it occurs from the beginning to the end of the life cycle of the operation. From commit to deployment in Cloud Computing.

Sorry for the long text, I would be grateful for the help.

https://redd.it/f7c3hk
@r_devops

[noob] OpenBalena with AWS vs Docker with Watchtower? For embedded linux devices

Let me start with stating I am totally new to the world of embedded electronics, and as a startup I have no choice but to learn. If this is the wrong place to ask this, please point me in the right direction :) (I'll be cross posting this to r/docker)

I am building a device that runs off of a raspberry pi compute module and the BalenaFin board (temporarily, while testing is done on our custom carrier board). the device will be used in medical offices, and will need to be able to receive program updates OTA through the customer's wifi. So far I have narrowed myself down to 2 main options:

First: I could run Balena's OpenBalena OS in combination with an AWS server (already HIPAA compliant, and the best pricing for our business model according to my current knowledge) . I see that balena has a ton of really nice features, but it really just feels like an expensive GUI/CLI suite for Docker.

Second: I could run the RPi compute module off of Raspbian, install WatchTower and Docker, and accomplish the same updating method.

As far as I can see from this point, all I need this system to do is run a few different C++ programs, control GPIO, and have the ability to be updated remotely by pushing. And of course to be scalable. I have a feeling that in the future if our device is widely adopted, Balena Cloud will be used rather than either of these methods, just because they'd most likely offer better support/bang for my buck than a small in-house team of engineers.

Am I right in my understanding of Balena OS in regards to my use case? Is there something I'm missing?

https://redd.it/f7gvz7
@r_devops

stackstorm - ability to run manual 'jobs' similar to rundeck?

We are a bit frustrated with rundeck (for a number of reasons) and I've been looking for alternatives. Stormstack docs don't give me a hint of this, and I did an install and also couldn't figure it out on my own. Does Stormstack have a way of doing manual 'self serve' job executions, in addition to its auto-remediation IFTT style tasks?

https://redd.it/f7b3eh
@r_devops

Import XML to SonarQube

Hello, does anyone know if you can import an xml file generated by a functional test of LeanFT / ALM with reports of success or failure of it to SonarQube? If so, how can I do this?

https://redd.it/f79x4z
@r_devops

Deploy to production based on git tags?

What is a good branching strategy for CI/CD? Would the master branch matching with the staging environment with promotions to production via git tags and good idea?

https://redd.it/f7j0xb
@r_devops

Am i good to go for devops

Started my career as linux admin a year back in a startup, now this is what I've learnt so fat,

Setup test servers in GCP with Oracle DB, Weblogic, Tomcat, redis, postgresql and few basic tasks on them


Deploying jar files along with UI files in Weblogic

Deploments in Solaris

Setup flexcube test environment from scratch on a Centos server.

Create fresh database and schemas. Export and import DB dmp files,

Very little mikrotik router firewall configurations

Setup mysql-innodb cluster and mysql database from scratch.

Basix linux admin chores

Logic behind yaml files and edit

Cloning from a UAT to production env, except db and weblogic configurations

Once migrated Windows server to Centos - mysql, oracle, postgresql database migration, tomcat applications,


All on CentOS, and im 0 in any programming languages.

https://redd.it/f78zq2
@r_devops

[Response Policy Zone] How to setup a DNS Bind with Docker, with 2 different zones that can be access by 3 different clients in the same server?


I need to create a DNS Bind in Docker with 2 different zones for 3 DNS clients from the same server, where:

- **1 client has access to one zone** and **the other 2 access to the other zone**

I need to use Bind9 and Docker for this.

How can i do this?

#Bind9 #DNSResponsePolicyZones #DNS #docker

https://redd.it/f78ffz
@r_devops

Confused by AWS ECR Security Vulnerability Scan

We have container images in ECR and its vulnerability scan reported there are critical issues in the images. The thing is that all the critical vulnerabilities are related to kernel. As far as I know, docker container images don't have their own kernel because containers run on its host machine's kernel. Should I ignore these vulnerability issues or am I confused about how docker containers work?

https://redd.it/f7404l
@r_devops