2026-05-01
27 feeds · 88 articles traités · 20 sélectionnés · gemma4:e2b · 2026-05-01T09:12:31.632Z
r/devops (Tier 1) · Publié : 2026-04-30 · 69.6/10
I could really use some honest advice from people already working in DevOps. I’m not a fresher I have around 7 months of experience in a service-based company, but my current role is not related to DevOps. Over the past few months, I’ve been actively trying to switch into DevOps by learning on my own. So far, I have: Learned basics of Linux, Git, and scripting Started working with tools like Docker, kubernetes, Ansible, Github Action, Gitlab CI/CD (still improving) Built a project (hands-on, not
r/devops (Tier 1) · Publié : 2026-04-30 · 53.9/10
Feels like Docker is still the default, but more people seem to be moving away from it depending on their setup. Some are switching to Podman or nerdctl for a more lightweight, daemonless approach. Others are using Kaniko or Buildah for builds, especially in Kubernetes environments. Then you’ve got alternatives like Nomad instead of k8s, or even things like LXC or FreeBSD Jails if you’re not tied to Linux containers. On macOS, I keep seeing OrbStack and Colima come up as Docker Desktop replaceme
DZone DevOps (Tier 1) · Publié : 2026-04-30 · 46.9/10
In a real Kubernetes cluster, incidents rarely appear as a single, clean alert. They arrive as waves of Kubernetes events, latency spikes, pod restarts, rollout failures, and unpredictable autoscaling behavior all at once. The hard part is usually not “Can we fix it?” but “Can we understand what’s happening fast enough to make a safe decision?” AI agents for DevOps can help here — but only when they sit on solid engineering foundations. They should compress the early correlation and triage phase
Korben (Tier 1) · Publié : 2026-04-30 · 44.5/10
732 octets, c'est tout ce qu'il faut pour passer de simple utilisateur à root sur n'importe quel Linux non patché compilé depuis 2017, soit la quasi-totalité des kernels. Cette faille béante s'appelle Copy Fail (CVE-2026-31431), elle a été dénichée par Taeyang Lee de chez Theori avec leur outil d'audit IA Xint Code. Et comme elle vient d'être divulguée hier sur la liste oss-security et qu'en plus, ils ont fait un joli petit site qui explique tout comme ça fonctionne, je vais essayer de tout vous
Korben (Tier 1) · Publié : 2026-05-01 · 42.8/10
Ouais, je sais, on est le 1er mai, et je suis pas censé bosser mais que voulez-vous on ne se refait pas ^^. Et si j'ai ouvert l'ordi ce matin, c'est pour vous parler de KULA ! KULA est un binaire tout simple qui permet de monitorer très facilement votre serveur Linux en temps réel, sans aucune dépendance. c0m4r , le dev derrière le projet, l'a codé en Go avec une obsession claire : Que ça marche partout sans rien installer à côté !
DevOps.com (Tier 1) · Publié : 2026-05-01 · 39.2/10
Anthropic's Claude Security is now in public beta for Enterprise customers, offering AI-powered codebase scanning and patch generation for security teams.
r/devops (Tier 1) · Publié : 2026-04-30 · 37.2/10
Hey guys, I have been working as devops engineer for past 4 years and one thing that always annoyed me is managing SSH access just so someone can check logs or restart a crashed docker or systemd service. So I build a web based dashboard called portsentinel. It's entirely build on rust and open-source. The main features are auto log tailing and you can start, restart, stop and check the services without touching terminal. The fun part for me is it uses barely 10MB of ram. I actually develope
r/devops (Tier 1) · Publié : 2026-05-01 · 37.2/10
We're a mid-size startup running most of our workloads on AWS ECS with EC2 instances. Over the last few months we've been trying to get proper observability set up host metrics, container logs, and some distributed tracing across our services. The problem is we keep ending up with very different collector configurations for each environment and it's becoming hard to manage. Our engineers are not deeply experienced with OpenTelemetry config yet, so anything that requires heavy YAML tu
r/devops (Tier 1) · Publié : 2026-04-30 · 34.3/10
Hey r/devops , Not here to sell anything. Building something, want to know if it's stupid before we go further. The problem we're trying to solve: Every team I've talked to goes through the same painful 2-3 month stretch — set up a GKE cluster, wire up Istio, figure out TLS with cert-manager, set up logging, metrics, traces, configure autoscaling, pray it all works together. Then maintain it forever. What we're building: Inframan — a BYOC PaaS that runs entirely inside your own c
Kubernetes Blog (Tier 1) · Publié : 2026-04-30 · 33.0/10
Following the graduation of Pod-Level Resources to Beta in v1.34 and the General Availability (GA) of In-Place Pod Vertical Scaling in v1.35, the Kubernetes community is thrilled to announce that In-Place Pod-Level Resources Vertical Scaling has graduated to Beta in v1.36! This feature is now enabled by default via the InPlacePodLevelResourcesVerticalScaling feature gate. It allows users to update the aggregate Pod resource budget ( .spec.resources ) for a running Pod, often without requiring a
The New Stack (Tier 1) · Publié : 2026-04-30 · 31.6/10
On Thursday, Anthropic took Claude Security, a defensive security tool in Claude Code on the web that scans codebases for The post Anthropic’s Claude Security emerges from closed preview to scan your codebases for vulnerabilities appeared first on The New Stack .
Grafana Blog (Tier 1) · Publié : 2026-04-30 · 31.5/10
When an unexpected alert fires these days, most engineers' first move is to ask their AI assistant for help.You ask why your checkout service is slow and the assistant gets to work, but it can't get any meaningful insights—at least not quickly—without the proper guidance. So, the next thing you know you're sharing deals about your existing data sources, the services you have running, how they connect, which labels and metrics matter, and on and on. Every conversation starts from scratch, and tha
r/devops (Tier 1) · Publié : 2026-04-30 · 28.7/10
Genuine question from someone who works in AppSec and is trying to understand the engineering experience honestly rather than assuming. When a security finding lands in your team's backlog, what honestly actually happens to it? not what should happen. what actually happens? I've spoken to a lot of AppSec practitioners lately and one thing that seems to always pop up as a frustration is that even well-prioritised findings with decent context attached still don't reliably make it into
Korben (Tier 1) · Publié : 2026-05-01 · 25.6/10
Vous vous souvenez de l'époque où on s'écroulait comme des merdes dans notre canapé après une grosse journée de boulot et où on regardait juste ce que la télé nous balançait ? Pas de choix à faire sur Netflix, ni de recommandation sur l'Apple TV. On zappait juste en mode no-brain jusqu'à ce qu'on tombe sur une connerie qui réveille notre cerveau reptilien. Eh bah le dev Chris Benincasa a créé Tunarr , un soft open source qui ressuscite ce truc-là en transformant votre Plex ou Jellyfin en chaîne
DevOps.com (Tier 1) · Publié : 2026-04-30 · 25.1/10
Arm this week made available a free toolkit for analyzing agentic artificial intelligence (AI) workloads as they are being developed by DevOps and platform engineering teams. Earlier this year, Arm unveiled a 3nm processor based on its Neoverse V3 architecture that is specifically designed for AI workloads. The Arm Performix toolkit provides system-wide analysis across […]
HashiCorp Blog (Tier 1) · Publié : 2026-04-30 · 23.5/10
With native SPIFFE auth support, Vault Enterprise simplifies and extends authentication of non-human-identity (NHI) workloads such as AI agents.
OpenTelemetry Blog (Tier 1) · Publié : 2026-04-30 · 22.1/10
OpenTelemetry is vast. The Java agent alone includes over 240 different auto-instrumentations. The Collector has hundreds of components. Python, JavaScript, Go, and .NET each have their own ecosystems of instrumentation libraries, each with its own patterns and conventions. In our 2025 Developer Experience Survey , users said that “documentation is difficult to navigate, requiring users to switch between the OpenTelemetry website and GitHub repositories” and that they often have to &
r/devops (Tier 1) · Publié : 2026-04-30 · 21.8/10
Weve put a decent amount of work into observability over the past year. Better structured logs, some tracing in key services, and dashboards for the usual metrics. On paper it looks solid. But during real incidents, debugging still feels slower than it should. We can usualy see what is happening in each service, but figuring out how it all connects is still where time gets lost. It often turns into switching between tools and trying to reconstruct the sequence of events manually. Its not that we
Korben (Tier 1) · Publié : 2026-04-30 · 21.7/10
Vincent en avait parlé il y a peu : Firefox 149 embarque maintenant discrètement adblock-rust , le moteur Adblock de Brave, désactivé par défaut et contrôlé uniquement par deux prefs dans about:config . A l'origine, je vous avais parlé d'une extension mais après analyse plus approfondie, celle-ci n'est pas vraiment nécessaire. Y'a juste deux valeurs à coller dans about:config et le moteur tourne. Merci donc à François qui m'a indiqué cette méthode directe.
Hacker News (Tier 1) · Publié : 2026-04-30 · 21.5/10
Article URL: https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ Comments URL: https://news.ycombinator.com/item?id=47969288 Points: 100 # Comments: 36
Généré par veille-auto · Modèle : gemma4:e2b