DEVOPS WEEKLY ISSUE #327 - 2nd April 2017
Whether you consider yourself to work in IT, Digital, software development, security or some other job flavour, the variety of organisations interested in and apply devops practices is only increasing. A few of the posts this week touch on differences within those roles and organisations which I find particularly interesting for the future of devops.
Sponsor
Are your incident management skills sharp, or are you continuously fighting fires? Take the free, online incident management assessment from VictorOps and compare your practices against leading DevOps methodologies.
http://try.victorops.com/ima/devopsweekly
Sponsored
A Tale of Two Pipelines: To DevOps or Not to DevOps
Trying to improve your current DevOps methods? Need to increase innovation and the speed of your software delivery pipeline? Brett Hofer, Global DevOps Practice Lead at Dynatrace, will show you how through a tour of two pipelines. You’ll get insights on key pipeline factors that plague traditional delivery pipelines and how to overcome them with practices that establish a true DevOps.
http://ow.ly/a3Av302XEHK
News
Some interesting survey results from a survey asking about Java EE and microservices. Interesting because it shines a light on existing enterprise needs vs more recent practices.
http://blog.rahmannet.net/2017/03/dzonejava-ee-guardians-survey-results_24.html
An excellent talk on the potential of devops to help build bridges between different groups in your organisation. Some great practical tips.
https://speakerdeck.com/kdaniels/building-bridges-with-effective-devops-1
A good introduction to opentracing, how it aims to solve the difficulties with implementing tracing in a real-world microservices environment.
https://docs.google.com/presentation/d/1Q2WtyB2Kf4SEIC2Y5yHkd3iotVCKYQ0Tsj06hzzxp3M/mobilepresent?slide=id.g1876875e06_0_228
An interesting blog post about upcoming changes to Docker’s build tools which allow for multi-stage builds from a single Dockerfile.
http://blog.alexellis.io/mutli-stage-docker-builds/
A detailed look at monitoring a Docker Swarm installation on AWS using Prometheus. Covers metrics and alerting of the various moving parts.
https://airtame.engineering/practical-services-monitoring-with-prometheus-and-docker-30abd3cf9603
Relying on the container toolchain means relying on a number of linux kernel features like cgroups and namespaces. The Container Hardening project aims to bring people together to focus on ensuring those primitives are secure.
https://containerhardening.org/
Most people write little bits of bash at various points, but few people master it. This post covers some of the interesting quirks that should at least allow you to write slightly better and more maintainable scripts.
https://jvns.ca/blog/2017/03/26/bash-quirks/
A good argument that automated testing is an important, but often missed, part of adopting infrastructure as code.
https://opencredo.com/programmable-infrastructure-needs-testing/
Quick blog post about using PhotonOS to support running Test Kitchen, a nice idea for those in a VMware environment with typical enterprise restrictions.
https://jjasghar.github.io/blog/2017/03/29/photonos-as-your-backend-for-kitchen-docker/
Jobs
Thousands of Jobs, One Application. Get Hired
http://hrd.cm/2jHrf1B
Events
The first Devopsdays Switzerland is coming up on Wednesday, May 3rd and 4th in
Zürich.
https://www.devopsdays.org/events/2017-zurich/welcome/
Tools
Dockerscan is another security scanning tool for use with Docker images, but one focused on gathering information useful for an attacker. Useful for defence in better understanding your exposure.
https://github.com/cr0hn/dockerscan
Related to the opentracing presentation above, Loki is a new opentracing compatible tracing application with similar design sensibilities to the prometheus monitoring system.
https://github.com/weaveworks-experiments/loki
Are your incident management skills sharp, or are you continuously fighting fires? Take the free, online incident management assessment from VictorOps and compare your practices against leading DevOps methodologies.
http://try.victorops.com/ima/devopsweekly