270
Reddit DevOps. #devops Thanks @reddit2telegram and @r_channels
Best Masters Program
Got my undergrad in EE, doing CI/CD and DevOps work now that I love and want to grow in. ideal graduate programs would be:
1. Takes job experience as waivers for prerequisites I may not have (EE math transfers but I lack CS classic education)
2. 8 week courses (give or take)
3. If CS isn’t the best MS to pursue I’d love to hear alternatives
Thanks to all in advance!
https://redd.it/1xhl6i4
@r_devops
At what point does monitoring become so noisy that engineers stop trusting it?
You add alerts because you want to catch problems early.
CPU spikes. Memory usage. Failed requests. Slow queries. Queue delays.
Eventually, the team starts receiving notifications throughout the day.
Some are important. Most aren't.
And that's when a dangerous habit develops: people start assuming the next alert probably doesn't matter either.
I'm curious how teams deal with this.
Have you ever deliberately removed a large number of alerts to make monitoring more useful?
How do you decide which alerts deserve to interrupt an engineer and which should just be visible on a dashboard?
https://redd.it/1xhevkl
@r_devops
Any beginner-friendly DevOps Discord servers or Slack communities?
Hey Everybody!
Does anyone know of any active Discord servers, Slack channels or study groups where beginners can connect, share resources, ask questions and support each other along the way?
https://redd.it/1xgw5xd
@r_devops
I got tired of having three cloud consoles plus an SSH session open during every incident, so I built one live topology for all of them. Lessons from six months of doing it.
Disclosure: I build Control Cloud, the tool mentioned halfway down. Everything else here is what I learned building it.
Context: I run infrastructure that is split across two public clouds and an on-prem rack, the way most mid-size shops end up after a couple of vendor decisions nobody wants to revisit.
Every cross-cloud incident was the same dance: provider A's console in tab 1, provider B's portal in tab 2 (after the conditional-access prompt), an SSH session into the on-prem box, and the monitoring tool to guess where the traffic went. The consoles don't see each other. A subnet that exists on one side but is routed to nothing on the other is invisible until production traffic hits it.
So over the last six months I built Control Cloud: a single live topology that polls every provider over its API and renders resources, networks and dependencies as one graph, with live status and cross-provider edges, and start/stop/reboot from the same surface.
Lessons that cost me the most:
1. Polling cadence has to follow how the cloud answers, not a round number. A full inventory crawl on one provider takes far longer than a UI should wait. We split it: the backend polls each region in its own goroutine behind a semaphore (unbounded concurrency = rate limits and context deadline exceeded), every region is published the moment it lands instead of waiting for all of them, and a file cache serves the last known state at startup so a restart isn't a blank screen. The UI refreshes every 10 s.
2. Dragged nodes must stay where the user put them. Auto-layout from scratch on every poll looks great in demos and is unusable in practice: people move nodes to match their mental model. A refresh updates status, not positions.
3. Provider parity is the whole point. If one provider shows nested scopes with subnets, every other provider has to show the same shape, even when its own model is flat. "The same concept renders differently per provider" is exactly what people are trying to escape. We keep a rules file derived from the code (the shared state helpers, the per-provider collectors, the navigator) and diff every change against it.
4. Status colors have to be honest. Every provider has its own vocabulary for "healthy" (RUNNING, AVAILABLE, Succeeded, Ready, Attached…). Inlining a regex per call site is how we shipped a red edge on a healthy cluster. One shared helper, one vocabulary per provider, and anything unconfirmed renders as unknown, never as a made-up warning.
5. Validation against live state paid back more than the canvas. Once everything is in one graph you can check a planned change against what is running: credentials with reach over the right scope, network (missing network or subnet = error; no NAT, no internet egress, no firewall = warning), on-prem hosts reachable, the dependencies of the template you picked. Anything it can't confirm comes back as informational, not as a green tick.
Stack: Go backend polling each provider SDK in parallel, React + Vite frontend, file-based cache, Postgres (Supabase) for orgs, audit log and schedules. Read-only API access with credentials you grant, encrypted with a managed KMS; no agents in your VMs. The Terraform it generates is committed to your repo and runs under your pipeline.
Live at https://controlcloud.dev/en if you want to poke around (free plan: 1 operator + 1 provider). Docs at /en/docs.
Happy to go deeper on:
- Why not the observability platform you already pay for (great at its thing; this answers a different question)
- The parity work: every provider added meant refactoring the first one
- Where the polling still doesn't scale (many regions per provider gets hairy)
Anyone here running their own version of this? What did you try first?
https://redd.it/1xgtio4
@r_devops
Traffic Authenticity Index API is live now !
SERPSpur launched the API to grab the TAI score (Traffic authenticity Index) so we can get the data of bot inflated traffic and artificial traffic to any domain.
https://github.com/rashidmanhas/SERPSpur
https://redd.it/1xgmedt
@r_devops
First-year DevOps student, 5 months to finish an individual project, feeling overwhelmed. Any advice?
Hi everyone,
I’m a student in the early stages of a DevOps degree, and I have to complete an individual project within 5 months. My lecturer asked for a unique, new topic that is purely DevOps, not system engineering. I searched for a long time without luck, then used Perplexity to explore ideas and found one that my lecturer approved. He told me to start with a literature review and continue from there.
The topic is: I don't want to reveal it here, but I'll let you know when you are willing to help me.
Now that I’m starting, I’m honestly panicking. DevOps is new to me; the degree has only just begun, and many of the tools and terms are unfamiliar. I’m comfortable with practical work, but I’m worried about how much I need to learn in such a short time and whether I can finish on schedule.
I’d really appreciate help with:
1. How should I approach the literature review when I don’t know the terminology yet?
2. What core DevOps concepts and tools should I learn first (CI/CD, containers, IaC, etc.)?
3. Any tips for planning a 5-month project as a beginner?
4. Good free resources, communities, or books you’d recommend?
If you’ve been through something similar, I’d love to hear how you handled it. Thanks so much in advance!
https://redd.it/1xgjty5
@r_devops
Can I switch from Desktop Support to DevOps?
I’m from Ahmedabad, India, and currently working in IT support, mainly desktop support and Windows troubleshooting.
I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications.
Can I switch directly from desktop support to a Junior DevOps/Cloud Engineer role with these skills and certifications? Or will desktop support experience make it difficult to get a DevOps job?
I’d appreciate advice from people who have made a similar career transition.
https://redd.it/1xfq488
@r_devops
Diffinery: Open-source GitHub and GitHub Actions alternative that runs entirely on Cloudflare
https://redd.it/1xftjg1
@r_devops
Weekly Self Promotion Thread
Hey r/devops, welcome to our weekly self-promotion thread!
Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!
https://redd.it/1xfq7qc
@r_devops
Two widely used npm packages had their security advisories withdrawn. How should we handle false positives in dependency audits?
Both the braces and sprintf-js security advisories have been withdrawn, despite previously being marked as GitHub Reviewed.
braces: CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm
sprintf-js: CVE-2026-97058 / GHSA-hp3w-g68c-fv3c
I understand that third-party security risks are a pressing concern. Last week was particularly rough, with incidents and critical vulnerabilities involving LiteLLM, PHP, intermediate CAs, Brotli, and more. Security teams everywhere have been scrambling to assess their exposure and mitigate potential risks.
However, these two widely used npm packages, commonly pulled in through linters, test frameworks, and other development tools, have once again caused unnecessary alarm across the ecosystem.
Both advisories have now been withdrawn, but not before triggering security alerts and forcing developers to investigate issues that turned out not to be practically exploitable.
How much can we trust automated dependency audits when even reviewed security advisories can turn out to be false positives?
More importantly, what should change in how vulnerability reports are vetted, published, and propagated to downstream security tools?
https://redd.it/1xfikfb
@r_devops
HA AI Clusters - SRE Engineer - General questions
Hey guys, quick question for anyone in the AI or infrastructure space.
I was never really interested in running AI models on my homelab cluster, but this job offer looked too good to pass up.
I have a technical interview coming up soon for an SRE role on High Availability AI clusters, and honestly I have zero clue what to expect or what kind of questions they might throw at me.
The position is completely remote, focusing on monitoring, troubleshooting, and keeping things running via SSH without any hands-on access to physical hardware.
Core stack is mostly standard Linux, Docker, Kubernetes, and networking.
If anyone here works with HA AI infrastructure or went through a similar interview process, what do they actually ask about?
Do they stick to standard Linux and networking troubleshooting, or do they push hard on AI-specific tech like GPU drivers, Infiniband, NCCL, or CUDA failures?
Any heads up or real-world examples would be awesome. Thanks in advance!
https://redd.it/1xffaoh
@r_devops
Apache DevLake Lightweight Alternative
Hi everyone! I’m exploring the idea of building a lightweight alternative to DevLake and would love to hear about the pain points you’ve experienced while using it. What do you find frustrating, missing or unnecessarily complex? I’d really appreciate your thoughts and suggestions
https://redd.it/1xek2ty
@r_devops
CKA exam stress
Hello community,
I am really stressed about my cka exam. I have bought it but have not prepared yet. My goal is to give exam in december. I have udemy monthly subscription and thrive subscription for this year. I am watching mumshad course on udemy.
I have 4 years of experience as a devops engineer. Done ccna training and comptia security plus. I have a very good command on linux(ubuntu) because my career started with it.
But the uncertain and pressure of work is giving me hard time. I am also works as a consultant so have to give time on that as well. I get exhausted after work. I consumed half of the course with labs on udemy and kodekloud but having no experience of production kubernetes. I understand the concepts but still thinks something is missing. The last topic of admission controllers gave me hard time to consume.
Do you guys know anything like tips and tricks to pass this exam. Anyone studying or prepping for the same can also collaborate. Because it is better to clear the concepts.
Dont ignore this post.
Regards
Worried and stressed person
https://redd.it/1xe7yad
@r_devops
What are some use cases for an internal system monitoring bot?
​
Hey everyone! I’m exploring ways to extend an existing internal production health-check bot that monitors systems checks whether the important pages loads or not and sends status updates to Microsoft Teams.
I’m looking for ideas beyond basic health checks, such as proactive alerts, log analysis, incident detection, automated troubleshooting, or AI-powered features.
What useful automations have you built around monitoring bots? Which ones have made the biggest difference in real-world scenarios?
Would love to hear your suggestions and experiences!
https://redd.it/1xe1ti6
@r_devops
¿PHP 5.4 en producción en pleno 2026? Decime que no sos el único 💀
Con las últimas alertas de seguridad sobre PHP, me dio curiosidad saber cómo están llevando esto en sus empresas.
¿Ya están migrando o siguen con el clásico “si funciona, no lo toques”?
Me pregunto cuántos todavía tienen servidores con PHP 5.4, 7.x o alguna reliquia que nadie se atreve a actualizar porque la aplicación depende de una librería que dejó de existir cuando todavía usábamos MSN Messenger.
Y lo mejor: ¿la empresa entendió la urgencia de actualizar o todavía estás explicándole al jefe por qué tener software sin soporte es una mala idea?
Tengo curiosidad por saber cómo está la situación en otras empresas:
¿Ya tienen un plan de migración?
¿Están peleando con aplicaciones legacy y dependencias imposibles?
¿Seguridad está presionando o nadie se ha enterado?
¿O eres el único que está preocupado mientras todo el mundo dice que no pasa nada?
Cuéntame tu experiencia. ¿Qué versión de PHP tienes en producción y qué tan complicado está siendo convencer a la empresa de actualizar?
Necesito saber si estamos todos en el mismo barco o si el mío ya tiene PHP 5.4 y está haciendo agua. 😂
https://redd.it/1xdks3n
@r_devops
Don't hate the player, hate the game
https://preview.redd.it/pc09vwrur5yh1.png?width=1024&format=png&auto=webp&s=d2c85cafa5afef5aa28693dd9b74bc643a8029fb
my week in a meme
https://redd.it/1xhhbwh
@r_devops
How do small teams actually debug production issues without an SRE? (asking because I’m building something for this)
Genuine question for anyone on a small team (2–10 engineers) where the people shipping features are also the people getting paged.
What I kept running into: an alert fires, and the alert is the easy part. Then comes 45 minutes of jumping between logs, traces, the error tracker, and the code, trying to work out whether the checkout failure is the problem or just a symptom of a database timeout somewhere else. Then you push a fix, and honestly, half the time you’re not sure it worked. You just notice the errors stopped and hope.
That last part bugs me the most. “I deployed a fix” and “the issue is resolved” aren’t the same thing, but most workflows treat them that way.
Full disclosure: I’ve been building a tool around this called Relia. The idea is that it pulls the relevant evidence together, gives you a probable root cause (and says when it isn’t confident), suggests a fix plan, and then checks production after deploy to see whether the original error actually went away. It can also pass that context to AI coding assistants through MCP, so you’re not copy-pasting stack traces into chat.
I’m not linking it here because I’m more interested in whether my assumptions are right:
1. How long does it typically take you to go from “alert fired” to “I know the actual cause”?
2. Do you explicitly verify fixes after deploying, or just watch for it to recur?
3. If you’ve tried AI debugging tools, where did they fall short? My guess is they confidently make things up when they lack context, but I’d like to hear real experiences.
Happy to share what I’ve learned building it if anyone’s curious. Mostly I want to hear how other people handle this, because I suspect a lot of us are just winging it.
https://redd.it/1xhfl28
@r_devops
why is everyone still using cloud llms just to route tool calls? tested local cpu embeddings vs bm25 on 100k tools
honestly i dont get why current multi-agent setups are built like this.
if you connect 4 or 5 mcp servers (github, postgres, filesystem, slack etc) you easily end up with 40-50+ tool schemas. right now the standard pattern in langchain or claude code is dumping all 4,000+ tokens of json schemas into the prompt on every single turn just so the llm can pick which function to run.
you end up paying token costs and waiting \~2 seconds of network latency just for what is basically an L7 routing lookup.
i spent the last few weeks testing if we can just decouple tool discovery completely from the llm using a local cpu vector mesh (all-MiniLM-L6-v2 + chromadb hnsw index) and a split execution daemon.
instead of embedding just the function name (which fails on synonyms), i combined the tool name, description, schema keys, and tags into a single profile vector. when a prompt comes in, it embeds the query on cpu and pulls the top match before ever touching the llm.
ran a cold-cache benchmark across 100,000 synthetic tool endpoints on my local machine (standard cpu, no gpu):
method top-1 acc avg latency p95 latency
\---------------------------------------------------------------
naive keyword scan 38.1% 46.41 ms 57.60 ms
bm25 lexical index 40.4% 194.05 ms 247.25 ms
local vector mesh 70.7% 9.56 ms 11.44 ms
in-memory fast path n/a 0.082 ms 0.15 ms
https://redd.it/1xgsv6a
@r_devops
What APM tool does your team actually rely on, and why?
We build a patch management product. Right now it uses Dynatrace to pull health signals from managed assets (things like whether a service or host is healthy before and after a patch is applied).
Before we commit further, I'd like to hear from people who use these tools every day. Which APM or monitoring tool does your team use (Dynatrace, Datadog, New Relic, AppDynamics, Elastic, Grafana/Prometheus, something else)?
I'm most curious about:
\- How reliable the health and alerting data is in practice (false positives, gaps, lag)
\- How comfortable your team is using it day to day
\- How easy it was to integrate with other tools through its API
\- Anything you regret or wish you'd known before choosing it
I'm not selling anything. I just want to understand what teams trust so we can support the right tools. Thanks in advance!
https://redd.it/1xgo0k0
@r_devops
Anyone interested for DevOps discussions/sessions?
As i always wanted to help and teach people, I wanted to do my part by teaching, by the way I'm working as a devops enginner.
FYI without money , for the first time I'm gonna do what I wanted to , let me know which topic has to be picked and interested people ping the comments.
I want to start the basics on kubernetes cuz I like kubernetes I want to start with this. Thank you. Not sure if this post will be retained or delayed.
https://redd.it/1xgl5vw
@r_devops
Devops job switch guidance
Need advice from experienced Azure DevOps engineers
I’m currently working as a Cloud Administrator with 4.4 years of IT experience and am trying to transition into an Azure DevOps Engineer role.
I’ve been learning Azure, Terraform, Azure DevOps CI/CD, Docker, Kubernetes, and related tools. However, I’m struggling to explain real-world projects confidently, understand day-to-day DevOps responsibilities, and get interview calls due to my 90-day notice period. For those who have successfully made this transition, how did you bridge the gap between theoretical knowledge and practical experience? What should I focus on over the next two months to improve my resume, project explanations, hands-on skills, and interview opportunities?
I’d appreciate practical advice based on your real-world experience.
https://redd.it/1xgig73
@r_devops
Is it difficult to switch from Desktop Support to DevOps?
I’m from Ahmedabad, India, and I’m starting my corporate career with my first internship in IT support, mainly desktop support and Windows troubleshooting.
I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications. However, I couldn’t find opportunities in System Administration or Cloud Support, so I accepted this internship.
Can I switch to a Junior DevOps/Cloud Engineer role after gaining some corporate experience in desktop support, or will it be difficult to make the transition?
I’d appreciate advice from people who have made a similar career switch.
https://redd.it/1xfu1cz
@r_devops
Making attacking agents pay with Context Bombs
https://agentic.tracebit.com/factory/
https://redd.it/1xfsq7l
@r_devops
DevOps its a good entry job?
For the past 10 months, I've been working as a DevOps Intern. I've focused heavily on filling the gaps left by my university curriculum—mastering tools like Docker, Terraform, scripting, and cloud infrastructure—and I recently earned my AWS Solutions Architect certification. However, during this time, I haven't written much traditional code. My day-to-day is strictly DevOps, which feels very different from standard software engineering.
I am currently 21 and in my 7th semester of a Software Engineering degree. Lately, I've noticed that the most lucrative internship and new-grad opportunities are in pure software engineering. I feel like I wouldn't pass the technical interviews for these roles because my recent focus has been entirely away from coding.
What should I do? Should I get back into coding and grind LeetCode to aim for these SWE roles, or stick to my current DevOps path?
https://redd.it/1xfm70g
@r_devops
Open Source Contribution Recommendations for projects related to DevOps and Platform Engineering
I'm interested in Open Source Contribution and looking for recommendations for projects that are related to DevOps and Platform Engineering.
I'd like my contribution to be relevant to my everyday work.
I'm good with python, go, nodejs and typescript.
This will be my first contribution so, I'm also looking for something that's not so difficult to work on.
I'd appreciate any advice or recommendations
https://redd.it/1xfg9xz
@r_devops
Failing CI when a vendor silently changes their API response (open source)
Vendors change APIs without telling anyone: a field gets renamed, a number becomes a string, a 200 starts returning an HTML error page. Contract testing doesn't help because the vendor won't run your contracts, and OpenAPI diffs only see what they bother to document.
Tiltmeter learns the response shape from real calls and gives you an exit code that knows what broke:
0 no drift
1 warning (new enum value, latency 3x the baseline)
2 breaking (removed field, type change, new nulls)
3 the check couldn't run
4 config error
The GitHub Action keeps the baseline in the Actions cache and writes the changes to the job summary; GitLab CI and cron work too. Slack or webhook alerts take one line of config. Credentials stay as ${VAR} placeholders and are never written to disk, and it stores shapes, not response bodies, in one SQLite file.
MIT: pip install tiltmeter
https://tiltmeter.dev
How do you cath third-party API changes today? Synthetic checks with hand-written assertions, or waiting for the incident?
https://redd.it/1xf6c8g
@r_devops
Hegel, GitOps and an agent in production
https://picaportelabs.com/blog/hegel-gitops-agent-in-production/
https://redd.it/1xeeoy2
@r_devops
Seems someone is interested in AWS Golden Jacket 🧥
https://redd.it/1xe5mbl
@r_devops
AWS Administrators of Reddit, How are you securing yourself against AI?
# With Black October happening and all.
https://redd.it/1xdzjnr
@r_devops
Railway's Connected GitHub Accounts Were Compromised
Got this email from them this morning. My understanding is you can't fully audit GitHub access through the API, which is how accounts were connected, so it's best to assume the worst. Most connected accounts gave full read and write access, so if true, this constitutes serious IP theft concerns.
I personally don't feel like they have been fully transparent with the breach. This was essentially a footnote and buried under a misleading statement "Review provider activity and audit logs; especially AI keys". It should be flashing and unambiguous "GitHub code is possibly compromised".
Furthmore, a simple, nonchalant "we're sorry" and that's it!? Not "we're deeply sorry that we messed up and we take full responsibility, it won't happen again and we are doing x, y, z for our customers..."
I'm switching away permanently. I highly recommend Fly instead, took 30 mins to migrate. Not sure what to do about to do about the IP theft though? I would expect legal action to come of this, possibly a Class Action Lawsuit regarding IP theft.
https://preview.redd.it/m5o9n1kcn9xh1.png?width=1068&format=png&auto=webp&s=5164781bf4751a0dd7511893360b230427d2f1b6
https://redd.it/1xdnaf8
@r_devops
