DEVOPS WEEKLY ISSUE #614 - 2nd October 2022
Logging formats, operations culture, private cloud and the latest Accelerate State of Devops report, plus tools for supply chain management, managing Git hooks and more.
StackHawk sponsors Devops Weekly
Heading to Houston for DevOpsDays this week? Stop by the StackHawk booth to grab some legendary swag and enter the raffle for a pair of Apple AirPods Max!
News
Are logs for humans or machines? Or both? A post on creating human and machine friendly log, with a proposed JSON-based log format.
https://medium.com/@JaouherK/creating-a-human-and-machine-freindly-logging-format-bb6d4bb01dca
A post on distroless container images, what they are and why they are useful. I see lots of folks get surprised by this, so it’s useful to have a detailed blog post to reference.
https://iximiuz.com/en/posts/containers-distroless-images/
A discussion of the need for more people-centric operations, with some observations from a recent survey and some concrete suggestions.
https://medium.com/pareture/people-centric-software-operations-culture-933059481af1
There are all sorts of difficulties in building a private cloud. This post discusses some of the reasons you might need to, and problems you’ll need to consider.
https://adambenshmuel.medium.com/what-is-private-cloud-really-supposed-to-look-like-148810a63c8e
Some interesting findings from the 2022 Accelerate State of DevOps Report, in particular around the adoption of security practices.
https://cloud.google.com/blog/products/devops-sre/dora-2022-accelerate-state-of-devops-report-now-out
A look at building an ebpf based profiler, for static and dynamic languages. Details on performance overhead. Start of an interesting series.
https://www.containiq.com/post/building-an-ebpf-based-profiler
Tools
Hookz is a handy tool for managing client-side git hooks using a configuration file.
https://github.com/devops-kung-fu/hookz
A Kubernetes operator that automatically tracks software packages in the container images running in the cluster, and saves it to a variety of targets, including DependencyTrack, Git and OCI registries.
https://github.com/ckotzbauer/sbom-operator
A very new low level container build tool focused on ubuntu packages.
https://github.com/canonical/chisel