DEVOPS WEEKLY ISSUE #602 - 10th July 2022

A bit of a theme this week of developer experience, with posts, talks and tools focused on developers as users, including for internal tools common in operations.

StackHawk sponsors Devops Weekly

Want to add security testing to your pipeline? Attend the StackHawk Daily Demo every weekday at 9 am PT for a technical walk-through of the platform and a live Q&A session.
https://sthwk.com/DevOps-Daily-Demo

News

An inside look at one organisation’s move to a remote development environment. Some interesting observations and data on changing developer behaviour.
https://slack.engineering/remote-development-at-slack/

When building developer tools, whether as a software vendor, open source project or for internal teams, building trust in those tools and your ability to deliver is equality important. A great post on the subject.
https://janairis.medium.com/are-you-building-developer-trust-87d428dd4a0d

A talk on the importance of building developer platforms for the people who will need to use them, rather than being led by the collection of tools that comprise the platform.
https://www.youtube.com/watch?v=lDSMDJXmOps

A reminder and introduction to the fallacies of distributed systems, which are increasingly important in popular modern architectures.
https://architecturenotes.co/fallacies-of-distributed-systems/

A post on information gathered from publicly exposed Kubernetes clusters, and some tips on better securing clusters.
https://raesene.github.io/blog/2022/07/03/lets-talk-about-kubernetes-on-the-internet/

Good tips for mistakes to avoid in the very first stages of dealing with an incident.
https://firehydrant.com/blog/3-mistakes-ive-made-at-the-beginning-of-an-incident-and-how-not-to-make-them/

A look at approaches to minimising ransomware attack surface when using Amazon S3.
https://blog.symops.com/2022/07/07/prevent-ransomware-s3-object-lock

A good introduction ebpf, with quick examples to help learn how it works to capture traffic.
https://www.seekret.io/blog/a-practical-guide-to-capturing-production-traffic-with-ebpf/

Tools

Choria Application Builder looks an interesting tool for ops teams buried in ad hoc shell scripts and automation. It provides a way of building consistent user interfaces and abstractions over ever-changing tooling.
https://choria-io.github.io/appbuilder/
https://www.youtube.com/watch?v=-IUwoXEJK0c

Bun is a new JavaScript runtime designed to be much faster than existing options. It also includes a built-in bundler, transpiler and package manager.
https://bun.sh/
https://github.com/Jarred-Sumner/bun