home.social

#infrastructure-as-code — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #infrastructure-as-code, aggregated by home.social.

fetched live
  1. 🚀 𝗤𝘂𝗶𝗰𝗸 𝗴𝘂𝗶𝗱𝗲 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲

    Deploy 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗 𝗟𝗼𝗮𝗱 𝗕𝗮𝗹𝗮𝗻𝗰𝗲𝗿 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝘃𝟴 on 𝗔𝗪𝗦 with 𝗧𝗲𝗿𝗿𝗮𝗳𝗼𝗿𝗺 easily using the official module.

    ✔️ Ready-to-use infrastructure (VPC, subnet, security groups)

    ✔️ EC2 instance with RELIANOID AMI

    ✔️ SSH and Web GUI access

    ✔️ Clean teardown with terraform destroy

    👉 relianoid.com/resources/knowle

  2. “Migrations fail when visibility is stale, drift grows, and cutovers go manual.”

    Migrating Puppet environments doesn’t have to be painful.

    Tony Green shares hard‑won lessons from real-world migrations and how to stay in control when things get messy.

    If you’re planning a Puppet migration (or already in the middle of one), this is well worth a read:

    puppet.com/blog/puppet-mirgrat

  3. Setting up a self-hosted Mattermost Team Edition server does not have to be a complex infrastructure puzzle. ☁️

    You can deploy to Upsun with PostgreSQL 16 and OpenSearch 2, configured automatically from a single infrastructure-as-code file. ⚡

    Read our guide to see how this simple configuration works and get your deployment started today.

    👉 developer.upsun.com/posts/tuto

    #Mattermost #DevOps #CloudNative #InfrastructureAsCode

  4. I just added #Fedora 44 to our Integration Test Target (ITT) lineup:
    👉 github.com/orgs/foundata/repos

    🔍 Looking for #Linux #Containers for your CI/CD pipeline? We’ve built a collection of OCI images:

    ✅ fully functional systemd (not just a shim!)
    ✅ unprivileged execution support, perfect for tools like #Podman.
    ✅ ideal for #Ansible #Molecule testing, see them in action with a collection: github.com/foundata/ansible-co

    #Automation #DevOps #OpenSource #InfrastructureAsCode #foundata

    @fedora
    @ansible

  5. A lot of teams are being told to “use AI in ops” right now. The harder part is figuring out *where it actually helps* day to day without adding risk, noise, or another thing to babysit.

    If you’re curious (or skeptical 👀) about AI in ops, join Robin Tatam and Jason St-Cyr as they share their thoughts on where AI can realistically fit into infrastructure operations today. No magic, just using good tools to do better.

    👉 puppet.com/resources/events/we

  6. 📢 Puppet Continuous Delivery 5.15.0 available with improvements for stability, security, integrations, and usability.

    Highlights include:
    - New external_webhook_url support for proxy-based deployments
    - Impact Analysis updates for Pipelines as Code
    - Clearer GitLab commit status reporting
    - Amazon Linux 2023 support for Docker-based installs
    - Security and dependency updates addressing reported CVEs

    Full release notes:
    help.puppet.com/cdpe/current/C

  7. Puppet Security Compliance Management 3.7.0 is out!

    This release focuses on keeping compliance stable as environments scale:
    - New CIS benchmarks for modern Linux, macOS, and Windows 11
    - More predictable scan performance with tunable JVM memory
    - Stronger session and GraphQL API controls
    - Security fixes and dependency updates (CVE items in the release notes!)

    👇Check out the Release notes:
    help.puppet.com/scm/current/Co

  8. Follow-up to getnix.io/guides/nixos-auto-up — here's how I handle upstream tracking for packages like Netbird:

    1. Internal mirror syncs release tags from upstream source repository
    2. CI detects new tags, updates the Nix flake (version + related hashes), builds & commits
    3. Consumer repos pick up the change, open PRs with nvd diffs
    4. Human reviews & merges
    5. Hosts auto-deploy

    Full pipeline runs unattended — you only step in to review the PR.

    #nixos #nix #infrastructureascode #gitops

  9. Puppet Core 8.18.0 is out with macOS 15 support and security updates.

    This release includes CVE fixes across core dependencies:
    - libxml2 updated to 2.15.2
    - zlib gem updated to 3.0.1
    - curl updated to 8.19.0

    If you’re managing macOS fleets or operating with tight patch windows, this is a solid release to plan into your next upgrade cycle.

    Release notes:
    help.puppet.com/core/current/C

  10. ⚡ Deploy RELIANOID Load Balancer Community Edition v7 on AWS in minutes with Terraform.

    From zero to a fully functional load balancer — automated, reproducible, and ready to go.

    👉 Follow the step-by-step guide and get started fast.

    relianoid.com/resources/knowle

  11. March 2026 brought 4 Puppetlabs module releases in the Forge catalog.

    Across the month, the clearest themes were compatibility updates across Puppet Enterprise (PE), supported platforms, and operational hardening and troubleshooting improvements.

    Read along to see what changed this month! 👇

    dev.to/puppet/puppetlabs-modul

  12. Stop the Stash-Pop Panic! Why Git Worktree is my IaaS Game Changer.

    Have you ever been deep into a complex feature branch, and suddenly… BOOM. A critical bug in main or production needs your immediate attention.

    You reach for git stash. You pray you won't forget where you were. You switch. You fix. You stash pop… and then the anxiety hits. Wait, which stash was that? Did I just overwrite my local terraform state?

    For me, this was the ultimate flow-killer. Until I integrated Git Worktree into my workflow.

    The Problem with the "Standard" Way:
    As an IaaS specialist, my changes aren't just code, they represent infrastructure states. Standard branching meant:
    * git stash my complex IaaS changes.
    * git checkout main and wait for the local environment to sync.
    * Fix the bug, deploy, and verify.
    * git checkout feature and wait again.
    * git stash pop and spend 15 minutes regaining focus.

    The Solution: Git Worktree
    Git Worktree allows you to have multiple checkouts of the same repository in different directories simultaneously. It’s a game manager.
    Instead of switching branches in one folder, I simply add a new worktree:
    git worktree add ../hotfix-folder main
    * Zero Context Switching: My feature branch remains open and untouched in its own folder.
    * Instant Parallelism: I can run a long Terraform plan in one worktree while fixing a bug in another.
    * No Stash Chaos: No more "which stash is which?" or accidental data loss.

    The PyCharm Factor:
    I’m a dedicated PyCharm fan. I love its built-in Shelf tools for quick code shifts. But for IaaS, where context is everything, Worktree takes it to the next level. It’s not about replacing PyCharm’s tools, it’s about giving your IDE multiple entry points into the same project state.

    The Takeaway:
    A worktree is essentially a branch that lives in its own directory. It’s the fastest way to handle "urgent" tasks without losing your "deep work" momentum. If you’re tired of the stash/pop dance, this is your sign to switch.

    #git #gitworktree #iaas #infrastructureascode #pycharm #devops #productivity #workflow #softwareengineering #cloudinfrastructure

  13. Puppet Enterprise 2025.9 and 2023.8.9 are out!

    🔧 PE 2025.9:
    - Real-time visibility into Advanced Patching runs
    - Clearer errors and retry support for patch group creation
    - Edit or stop workflows from the console or API
    - Agent support for Debian 13 (amd64, aarch64)
    - Multiple CVEs addressed

    🔐 PE 2023.8.9 adds Debian 13 agent support and security fixes.

    📄 Release notes:
    2025.9: help.puppet.com/pe/current/top
    2023.8.9: help.puppet.com/pe/2023.8/topi

  14. Wrote a short blog post about moving some personal infrastructure over to Nix/NixOS, so far having a good time with it 🙂

    jb3.dev/posts/infrastructure-a

    #NixOS #Nix #DevOps #SelfHosting #Linux #InfrastructureAsCode

  15. Přihlásíš se vzdáleně na server. Měníš nastavení, spouštíš příkazy. Klikáš. Hrabeš se v souborech. Hotovo, jede to! Nebo ne?

    Pokud server funguje, ale vdechli jsme mu život „ručně“, čeká nás hned několik problémů:

    ⌛️ Trvá to ddlloouuhhoo, dělá se to ppoommaalluu.
    🤔 Nikdo neví, jak jsme to udělali. Po týdnu to nevíme už ani my.
    👯 Nedá se to snadno zopakovat, pokud nastavujeme další server.
    🔄 Když se něco pokazí, nedá se to snadno zahodit a znova nahodit.
    🔬 Ruční postup se špatně audituje, nedají se v něm sledovat změny.

    Řešení? Infrastructure as Code. Zapíšeš postup do souboru v podobě kódu a chováš se k němu stejně jako ke kódu.

    Ve středu 18.3.2026 v 18:00 bude přesně o tomhle v našem online klubu pro juniory přednášet Štěpán Bechynský.

    Jestli chceš dorazit živě a pokládat Štěpánovi vlastní otázky, připoj se zítra večer k nám na Discord!

    junior.guru/events/60/

    #juniorguru #iac #infrastructureascode

  16. The @nixos_org integration tests have always been a fantastic tool - We just made them even faster and much simpler to run! 🚀 By adding a new lightweight container backend to the test driver, you can now run your suites on standard, non-KVM VMs. 👇

    Here is what the new container backend brings to your NixOS workflow:

    ⚡ Blazing Fast Execution: How fast? Booting two machines, letting them ping each other, and tearing them down now takes ~3 seconds!
    💸 Run Anywhere (Cheaper!): You no longer need bare-metal KVM-enabled hosts. Your tests can now run seamlessly on cheap, standard VMs.
    🎮 GPU Testing Support: Hardware acceleration is now accessible. You can finally test GPU-dependent workloads directly inside your integration tests!

    Curious how it works under the hood and how to enable it in your projects? Dive into our latest article and try it out for yourself!

    🔗 Read the full breakdown here: nixcademy.com/posts/faster-che

    #NixOS #DevOps #Testing #Linux #Nix #InfrastructureAsCode #CI #Containers

  17. New in Talos Linux:

    Out-of-memory handling can proactively identify and evict the relevant, resource-heavy application before it destabilizes the host. This reduces avoidable downtime and ensures the control plane and critical services remain operational.

    siderolabs.com/blog/talos-omni

    #TalosLinux #Kubernetes #K8s #BareMetal #PlatformEngineering #DevOps #InfrastructureAsCode #GitOps #SRE #EdgeComputing #CloudNative #BareMetalK8s

  18. New update for Ramble, my open-source registry for HashiCorp Nomad job files and Nomad Packs.

    🍺 Homebrew Tap — now available

    The Ramble CLI can now be installed on macOS via Homebrew, making it simple to get started:

    brew tap open-wander/tap

    brew install ramble

    Full getting started guide: ramble.openwander.org/docs/get

    Contributions and feedback are always appreciated.

    #Nomad #HashiCorp #Golang #OpenSource #DevTools #Temporal #Homebrew #Ramble #CloudNative #InfrastructureAsCode

  19. 👟 Adidas evolved their #InfrastructureAsCode model: from centralized one ⇨ a decentralized approach.

    The impact was immediate:
    In just 2 months, 5 teams deployed 81+ new infrastructure stacks by leveraging:
    🔹 Layered IaC modules
    🔹 Automated pipelines
    🔹 Shared frameworks

    Learn more: bit.ly/3OHOQCf

    #InfoQ #PlatformEngineering #DevOps #IaC #SoftwareArchitecture