Logging formats, operations culture, private cloud and the latest Accelerate State of Devops report, plus tools for supply chain management, managing Git hooks and more.

StackHawk sponsors Devops Weekly

Heading to Houston for DevOpsDays this week? Stop by the StackHawk booth to grab some legendary swag and enter the raffle for a pair of Apple AirPods Max!

News

Are logs for humans or machines? Or both? A post on creating human and machine friendly log, with a proposed JSON-based log format.
https://medium.com/@JaouherK/creating-a-human-and-machine-freindly-logging-format-bb6d4bb01dca

A post on distroless container images, what they are and why they are useful. I see lots of folks get surprised by this, so it’s useful to have a detailed blog post to reference.
https://iximiuz.com/en/posts/containers-distroless-images/

A discussion of the need for more people-centric operations, with some observations from a recent survey and some concrete suggestions.
https://medium.com/pareture/people-centric-software-operations-culture-933059481af1

There are all sorts of difficulties in building a private cloud. This post discusses some of the reasons you might need to, and problems you’ll need to consider.
https://adambenshmuel.medium.com/what-is-private-cloud-really-supposed-to-look-like-148810a63c8e

Some interesting findings from the 2022 Accelerate State of DevOps Report, in particular around the adoption of security practices.
https://cloud.google.com/blog/products/devops-sre/dora-2022-accelerate-state-of-devops-report-now-out

A look at building an ebpf based profiler, for static and dynamic languages. Details on performance overhead. Start of an interesting series.
https://www.containiq.com/post/building-an-ebpf-based-profiler

Tools

Hookz is a handy tool for managing client-side git hooks using a configuration file.
https://github.com/devops-kung-fu/hookz

A Kubernetes operator that automatically tracks software packages in the container images running in the cluster, and saves it to a variety of targets, including DependencyTrack, Git and OCI registries.
https://github.com/ckotzbauer/sbom-operator

A very new low level container build tool focused on ubuntu packages.
https://github.com/canonical/chisel