2026-05-15
27 feeds · 83 articles traités · 20 sélectionnés · gemma4:e2b · 2026-05-15T09:11:44.080Z
r/devops (Tier 1) · Publié : 2026-05-15 · 85.5/10
Hi everyone, I’m a beginner DevOps engineer working with Bitbucket Pipelines, AWS ECR, and an EC2 Ubuntu instance. This pipeline builds my Flask backend Docker image, pushes to ECR, then SSH to EC2 to restart the container. It's working, but I know env management can be better Could you guys please review it and suggest improvements image: atlassian/default-image:3 pipelines: branches: main: - step: name: Build and Push to ECR services: - docker script: # Login to ECR - aws ecr get-login-pas
r/devops (Tier 1) · Publié : 2026-05-14 · 65.7/10
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source below 1.30.1 and 1.31.0. Advisory: https://nginx.org/en/security_advisories.html CVE-2026-42945 (NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-42945 NGINX labels it medium, but NVD lists CVSS v4.0 9.2 / v3.1 8.1. Trigger condition: a rewrite directive that uses unnamed PCRE capture
Kubernetes Blog (Tier 1) · Publié : 2026-05-14 · 65.0/10
The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554 . Since Kubernetes 1.21, the Kubernetes project has recommended that all users disable .spec.externalIPs . To make that easier, Kubernetes also added an admission contr
r/devops (Tier 1) · Publié : 2026-05-14 · 60.1/10
Hi everyone, I have recently taken over the administration of an Azure DevOps Server 2020 (on-premises) environment. The previous administrator is no longer with the company, and unfortunately, there is no existing documentation regarding the backup strategy. It appears that no automated backups have been configured via the Administration Console so far. Environment Details: Version: Azure DevOps Server 2020. Scope: Single server instance containing one Collection with two active projects.
r/devops (Tier 1) · Publié : 2026-05-14 · 55.0/10
After sharing an earlier version of this project a few days ago, I got some really useful feedback (especially around comparisons with Grafana/Netdata and the perception of it being “just another monitoring tool”). That helped me rethink how I’m framing it. I’m building ServerOps Monitor, a self-hosted system focused on operational visibility, not just dashboards or metrics. The goal is not to replace observability stacks, but to reduce the time between “something is going wrong” and actually kn
Korben (Tier 1) · Publié : 2026-05-15 · 54.9/10
Bon, accrochez vous les amis, car ça enchaine sec sur le kernel Linux en ce moment... Le chercheur William Bowling de l'équipe V12 security vient de lâcher Fragnesia (CVE-2026-46300, CVSS 7.8), un nouvel exploit kernel Linux qui permet d'obtenir un accès root sur toutes les distros majeures, et ce, 8 jours seulement après le patch de Dirty Frag . Et la mauvaise nouvelle, en fait, c'est que Fragnesia tape dans la même surface d'attaque que Dirty Frag , mais via un bug logique différent qui n'est
r/devops (Tier 1) · Publié : 2026-05-14 · 51.3/10
DevOps courses to start in 2026: KodeKloud- best for hands-on labs + Kubernetes Udemy DevOps Courses - cheap + beginner-friendly Coursera DevOps Courses - structured + certifications Intellipaat DevOps Course - live classes + projects + placement support TechWorld with Nana YouTube - free practical DevOps learning submitted by /u/Ashishthakur56 [link] [comments]
OpenTelemetry Blog (Tier 1) · Publié : 2026-05-14 · 44.3/10
Your AI agent just took 45 seconds to answer a simple question. Was it the model? A slow tool call? A retry loop? Every time an application calls an LLM, a chain of model calls, tool invocations, and token exchanges happens behind the scenes — and without observability, you are guessing. The OpenTelemetry Semantic Conventions for Generative AI give you that visibility. They standardize how GenAI operations are recorded — the model being called, input and output token counts, and when opted in, t
DevOps.com (Tier 1) · Publié : 2026-05-14 · 34.4/10
Security teams have long relied on static analysis tools to catch vulnerabilities before code ships. Those tools are useful, but they have a fundamental limitation: they match code against known patterns. They don’t understand your application. AWS is taking a different approach with its latest addition to AWS Security Agent. The company recently released full […]
DZone DevOps (Tier 1) · Publié : 2026-05-14 · 32.4/10
The era of the ‘Developer’ who manages everything from CSS to Kubernetes is ending. For more than a decade, DevOps has been one of the most influential movements in software engineering. It reshaped how teams build, deploy, and operate software by breaking down the traditional wall between development and operations. Automation, continuous delivery, infrastructure as code (IAC), and collaboration became the industry standard. Yet, as we move through 2026, a provocative phrase is dominating the h
r/devops (Tier 1) · Publié : 2026-05-14 · 30.1/10
I work as a DevOps engineer at an AI startup, and we are running into a new problem. With tools like Cursor and Claude Code, more people across the company are building small internal apps on their own — not just developers, but also folks from marketing, product, and sales. These apps often get deployed quickly on platforms like Vercel, Cloudflare Pages, or Netlify. The concern is that this can become a security and governance mess very fast. Right now, I am trying to figure out a practical way
DevOps.com (Tier 1) · Publié : 2026-05-15 · 29.1/10
Traditional operational observability focuses on latency, errors, throughput and saturation. Migration observability needs a different category: Semantic drift.
Lobste.rs (Tier 1) · Publié : 2026-05-14 · 28.6/10
There've been endless discussions about whether we should ban LLM-generated text, or change the ai/vibecoding tags, or etc. The general consensus seems to be (???) flag low-effort/uninformative stories as spam and move on. My proposal here is that comments on these stories that just say "this is LLM slop" or something equivalent should be flagged as off-topic. Clearly everyone has different thresholds for what triggers their "slop-o-meter" but at least 80% of the reason I read lobsters is for th
DevOps.com (Tier 1) · Publié : 2026-05-14 · 28.2/10
Copado has added artificial intelligence (AI) agents to its DevOps platform for building and deploying custom applications for the software-as-a-service (SaaS) application platform from Salesforce. At launch, Copado is making available Agentia AI agents specifically that can be assigned plan, build and testing tasks via an orchestration agent that manages the overall workflow. Each Agentia […]
Korben (Tier 1) · Publié : 2026-05-14 · 27.2/10
La Mary Rose, c'était le navire de guerre préféré d'Henri VIII. Il a coulé en 1545 au large de Portsmouth, son épave a été retrouvée en 1971 puis remontée en 1982, et depuis, tout ce qu'elle contenait fascine les historiens. Parmi les objets sortis de la coque, il y avait des armes assez mystérieuses : d'énormes fléchettes qui semblaient conçues pour transporter une charge incendiaire. Personne ne savait vraiment comment elles fonctionnaient. Tod's Workshop, une chaîne YouTube spécialisée dans l
r/devops (Tier 1) · Publié : 2026-05-14 · 24.1/10
I work in IT as a DevOps Engineer. Currently unemployed and a little bit desperate to get a job, but there is no rush or pressure as I have the unemployment benefit and some savings on my bank account. I currently going through different interview processes, in this field interviews could takes months with at least 3 interview rounds and this makes things very difficult to have multiple offers at the same time so I can make a good decision with all of the options available. Last time I accepted
Korben (Tier 1) · Publié : 2026-05-15 · 23.5/10
Vous avez déjà essayé de dessiner une TUI (Interface utilisateur pour le Terminal) à la main dans votre IDE ? Genre, calculer les paddings d'une Box ANSI à la mano et compter les caractères Unicode pour aligner trois colonnes ? Pffff quelle galère !! Hé bien cette mauvaise expérience, Javier Alonso Gómez, Staff Design Technologist chez Docker, vient de la transformer en simple drag-and-drop avec son outil TUIStudio . En gros, c'est comme Figma mais pour vos applis terminal.
Korben (Tier 1) · Publié : 2026-05-15 · 23.4/10
Je me sors 5 min de mon weekend en amoureux les amis, pour avertir ceux parmi vous qui sont des utilisateurs de Mullvad, peu importe que vous soyez sur macOS, Windows ou un Linux Ubuntu/Debian... Si vous jonglez entre les serveurs en pensant brouiller votre piste, j'ai une mauvaise nouvelle pour vous. Tmctmt vient de publier une analyse qui montre que vos IPs de sortie sont beaucoup moins aléatoires qu'on ne l'imagine. En fait, votre clé WireGuard agit comme une empreinte qui survit aux changeme
r/devops (Tier 1) · Publié : 2026-05-14 · 23.3/10
Hi, I am currently a 3rd year in telecommunications engineering and im curious about getting into devops. I know some linux and some networking but not a whole lot of stuff. I know there are a lot of tools used, but what do i start with exactly? If anyone can help me with a roadmap and some direction and maybe recommend some courses I would be very grateful. submitted by /u/Actual_Deer_119 [link] [comments]
r/devops (Tier 1) · Publié : 2026-05-14 · 22.2/10
Hi Everyone, I'm working on an initiative to revamp our cloud infrastructure and address some of the challenges our dev teams are facing. One of the core issues I want to address is the lack of non-production database availability for testing/development in lower environment tiers. We do have Redgate available as a tool and I'm wondering how best to provide the non-prod database instances both to lower environment tiers within our primary ADDS domain as well as to off-domain sandbox inst
Généré par veille-auto · Modèle : gemma4:e2b