138 results for “debops”
@debops This release brings a new Credits page in the documentation, among other things. Over 13 years of development, 300+ contributors, 14000+ git commits. The credits are generated on new tagged releases and included in the documentation and various packages for posterity.
I'd like to thank everyone involved in the project, especially the people that did improvements in documentation, and adding a credits page seemed a long overdue thing to do. I hope that you'll like it. :-)
New `stable-x.y` releases of the DebOps project: v3.4.0, v3.3.3, v3.2.9, v3.1.10 (final).
#DebOps is available through its #GitHub repository, a #Python package on #PyPI and #Ansible Galaxy collection.
The new v3.4.0 release includes many improvements in DebOps scripts, per-project Python virtual environments, new Ansible roles and improvements in existing ones. Check the Changelog for details.
📢 New #updates · 6 Nov #1.1
· ZenNotes viewer-2.83.0-viewer.hb1264235676d483d — Immutable boundary artifacts added
· LMS v3.82.0 — Filters now match multiple values or none
· DebOps v3.4.0 — New roles, Python virtual environments, and LLM-assisted development
· ever-teams v0.151.0 — Admins can now edit member pay rates
Full changelogs → https://selfhost.directory?utm_source=mastodon&utm_medium=social
Leaving for Kubecon tomorrow! Overwhelmed by the schedule, but super excited to attend!
#DevOps #k8s #learnk8s #cncf #100DaysOfCode #100DaysOfDevOps #kubernetes #technology #homelab
J'ai imaginé un petit hack pour faire échouer un job s'il trouve une vulnérabilité critique dans une image Docker en utilisant le modèle "Container scanning" fourni par GitLab. 😎
Histoire de se tenir un peu à jour lors des tempêtes de CVE. ⛈️
Mid-afternoon, waiting on a queue of merge requests, I sent a session off to look at GitLab's new rate limits. It came back with two security findings I hadn't asked for. One said my release token, the one that can push tags and cut releases on every repo I own, had been used that day from four AWS London machines I didn't recognise.
So the next hour went on changing the locks: tokens rotated, CI variables deleted and recreated as hidden, five AWS accounts swept. Nothing running, nothing tampered with, and still the sentence I least wanted to read that day: none of those addresses is ours.
Then, around half five, the session corrected itself. GitLab's token record lists up to five addresses with no dates beside them, so it's a visitors' book rather than a log. The machines were my own runner fleet from early September.
A false alarm, but it showed me something real: every job in the estate was running as me, sharing one identity's rate limit and one identity's blast radius. The fix was job tokens, seven service accounts, hidden variables and 2FA, all on the free tier.
Миграция ещё не выполнилась, а SELECT уже ждёт: очередь блокировок PostgreSQL
При создании кейса на в моем тренажере, который я рассказывал ранее , возникло следующее: добавление пустой колонки выглядит безобидной миграцией: переписывать данные не нужно. Но такой ALTER TABLE может остановить новые чтения таблицы ещё до изменения её структуры. Достаточно старой транзакции, которую забыли завершить. Поясню эту цепочку на отдельном PostgreSQL 17.11 с таблицей orders из одной строки. Сначала первая сессия выполняет BEGIN и SELECT id FROM orders, после чего остаётся открытой. Сам запрос уже завершён, но транзакция продолжает держать AccessShareLock. Это не мешает другому обычному SELECT: такие блокировки совместимы. Проверка до запуска миграции возвращает строку без ожидания старой транзакции. Затем вторая сессия запускает ALTER TABLE orders ADD COLUMN note text. Для этого изменения нужна AccessExclusiveLock, несовместимая с блокировкой первой сессии. Миграция встаёт в очередь. Если теперь третья сессия выполнит SELECT id FROM orders, она тоже будет ждать. Её AccessShareLock совместима с уже выданной блокировкой первой сессии, однако впереди стоит запрос миграции на исключительный доступ. На снимке консоли видна вся цепочка. Сессия old_tx находится в состоянии idle in transaction и держит выданную блокировку: granted = t. У migration блокировка ещё не выдана, а blocked_by указывает на old_tx. Новый запрос api также имеет granted = f, но его blocked_by указывает уже на migration. Таким образом, источник ожидания и непосредственный блокировщик запроса — разные сессии. После ROLLBACK в old_tx миграция завершается, а новый SELECT получает результат.
Juggling an AI editor, terminal agents, and custom scripts works fine until more than a couple of people depend on them.
The tools themselves are doing their jobs, but the gaps quickly show up in review load, costs, and shared workflow knowledge.
Upsun Dispatch™ provides the connective workflow layer between your existing tools without forcing you to replace them.
👉 https://upsun.com/blog/cursor-claude-code-scripts-datadog-what-breaks/
#DevOps #DeveloperTools #AIWorkflows #PlatformEngineering
Most of what people mean when asking how system automation actually works comes down to understanding three precise words.
Think of a workflow as your template recipe, a run as one specific meal you cook, and a gate as an explicit stop where a human steps in to decide what happens next.
By governing execution at the workflow level, Upsun Dispatch ensures every run has its own immutable record and clearly tracked costs.
👉 https://upsun.com/blog/upsun-dispatch-primitives-runs-gates-workflows/
#DevOps #SoftwareEngineering #Automation
Senior DevOps Engineer at the BBC
- "collaborate across the BBC to shape our future observability roadmap, engineering critical high-scale services using AWS"
- up to £74,338 salary
- London and UK Wide, hybrid
- applications due Nov 10
https://careers.bbc.co.uk/job/Senior-Software-Engineer-DevOps/55489-en_GB/
#getFediHired #fediHire #jobs
Ariana DeBose claps back at bigots following historic blue wave: 'Please grow up'
https://fed.brid.gy/r/https://www.advocate.com/news/people/ariana-debose-audible
Nobody noticed a pipeline silently failing for three days, then a hotfix couldn't ship. Instrument CI/CD with DORA metrics and own your raw event data. #dora #cicd #devops https://www.valtersit.com/guides/gitlab/ci-cd_observability-stop_guessing_and_start_measuring_with_dora/
Catch broken depends_on refs, missing healthchecks and circular chains in your compose files before deploy. 235 lines of Python, beginner level. #docker #python #devops https://www.valtersit.com/python/docker-compose-service-dependency-validator/
Appian is hiring Senior DevOps Engineer
🔧 #java #javascript #python #ruby #aws #azure #kubernetes #mysql #postgresql #sql #seniorengineer
🌎 McLean, Virginia
⏰ Full-time
🏢 Appian
Job details https://jobsfordevelopers.com/jobs/senior-devops-engineer-at-appian-com-sep-9-2026-eb0813?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring
Meanwhile in DevOps No.98
HPAs are often misconfigured. This 327-line Python script load-tests your Kubernetes HPA and shows how it actually scales under target RPS. Intermediate level. #kubernetes #python #devops https://www.valtersit.com/python/kubernetes-hpa-scaler-load-tester/
276 lines of Python that catch dangerous ALTER TABLE locks before they hit prod. Dry-run against your DSN, parse with sqlparse, flag risky migration statements. Built for DevOps, intermediate level. #python #postgresql #devops https://www.valtersit.com/python/database-migration-safety-checker/
241 lines of Python that audits node taints and tolerations in multi-tenant clusters for unschedulable pods. Intermediate level, outputs a JSON report. #kubernetes #python #devops https://www.valtersit.com/python/kubernetes-node-taint-and-toleration-auditor/
252 lines of Python that register a service with Consul and keep health checks in sync, so dynamic IPs don't break discovery. Intermediate level. #python #infra #devops https://www.valtersit.com/python/consul-service-registration-and-health-check/
Mastering Containers by Nigel Poulton is the featured bundle of ebooks 📚 on Leanpub!
Docker and Kubernetes are taking the world by storm! These books will get you up-to-speed fast!
what #alternativeTo public cloud offerings like AWS, Azure, and GCP, that at least hit the #devOps basics like instantiation of an image with an API call, block storage, equivalent of cloud functions and everything such necessitates, do you (or would you think I should) use?
#hostingprovider
iX-Workshop: GitOps mit ArgoCD – Kubernetes-Deployments effizient automatisieren
Lernen Sie, wie Sie Anwendungen in Kubernetes mit ArgoCD deklarativ verwalten und automatisiert bereitstellen.
#ContinuousDelivery #DevOps #Git #IT #iXWorkshops #Kubernetes #Systemverwaltung #news
DockTail: Docker-Container per Label als Tailscale Services veröffentlichen
Das Open-Source-Tool DockTail registriert Docker-Container automatisch im Mesh-VPN Tailscale. Ports muss man dafür nicht öffentlich machen.
#Containerisierung #DevOps #Docker #IT #Linux #Microservices #OpenSource #news
CRITICAL ADVISORY: Node.js October 2026 Security Release fixes Brotli CVE-2026-111497 & 9 other flaws.
Brotli is compiled directly into the binary; npm updates won't fix it. You must patch the runtime.
Our production SRE guide covers:
🔍 Vectors: Express 4 vs 5 & outbound fetch()
⚠️ PM2 & Systemd: Avoid hardcoded path traps
🐳 Playbook: Docker rebuilds & /proc auditing
https://www.servermo.com/howto/nodejs-brotli-rce-cve-2026-111497/
This morning I counted what can change my coding agents' config, after a Postman issue about auto-installed Codex/Claude plugins reached the top of Hacker News.
Claude Code: 20 plugins, 10 enabled, 5 hook sets running as my user. Codex: 36 plugins, 16 MCP servers. 18 API keys in plain-text files that any of those hooks could read.
I haven't changed anything yet.
How do you keep agent tooling away from your keys?
#InfoSec #DevOps #LLM
We're hiring a Junior Engineer to join our Engineering team at Jumping Rivers!
You'll help deploy and maintain data science environments for our clients, working with cloud platforms, Linux, infrastructure automation, and tools like Posit.
If you have experience in infrastructure or systems engineering, we'd love to hear from you.
📍 UK based, remote working available (Newcastle preferred)
Apply: https://jumping-rivers.welcomekit.co/jobs/junior-engineer_newcastle-upon-tyne
🚀 New #release · Mailcow 2026-11
Caution
Please create a backup before updating.
Important
Important security update. We strongly recommend updating as soon as possible.
Among other issues, this release fixes a remote code execution (RCE) vulnerability that can be exploited by authenticated admins and domain admins.
Self-host it yourself → https://selfhost.directory/project/mailcow?utm_source=mastodon&utm_medium=social#update-25423962
Seu servidor Linux pode estar vulnerável ao MCTCP
🚨 Se você é DevOps ou administra servidores Linux, isso é urgente!
Existe uma vulnerabilidade antiga — o MCTCP — que pode afetar servidores Linux, principalmente desde a versão 4.4 do kernel. E muita gente nem sabe que está exposta.
🔍 Como verificar:
• Mapeie as portas abertas do seu servidor.
• Rode o probe do MCTCP nas portas abertas.
• Se a porta estiver comunicando com o kernel ou com o MCTCP,...
https://www.europesays.com/be-fr/311959/ Christophe Deborsu monte sur scène… avec sa femme ! #BE #BEFr #Belgique #Belgium #ChristopheDeborsu #Couple #Divertissement #Entertainment #JeVousDérange #POLITIQUE #relation #RTLTvi #scène #Spectacle #Television
