270
Reddit DevOps. #devops Thanks @reddit2telegram and @r_channels
What APM tool does your team actually rely on, and why?
We build a patch management product. Right now it uses Dynatrace to pull health signals from managed assets (things like whether a service or host is healthy before and after a patch is applied).
Before we commit further, I'd like to hear from people who use these tools every day. Which APM or monitoring tool does your team use (Dynatrace, Datadog, New Relic, AppDynamics, Elastic, Grafana/Prometheus, something else)?
I'm most curious about:
\- How reliable the health and alerting data is in practice (false positives, gaps, lag)
\- How comfortable your team is using it day to day
\- How easy it was to integrate with other tools through its API
\- Anything you regret or wish you'd known before choosing it
I'm not selling anything. I just want to understand what teams trust so we can support the right tools. Thanks in advance!
https://redd.it/1xgo0k0
@r_devops
Anyone interested for DevOps discussions/sessions?
As i always wanted to help and teach people, I wanted to do my part by teaching, by the way I'm working as a devops enginner.
FYI without money , for the first time I'm gonna do what I wanted to , let me know which topic has to be picked and interested people ping the comments.
I want to start the basics on kubernetes cuz I like kubernetes I want to start with this. Thank you. Not sure if this post will be retained or delayed.
https://redd.it/1xgl5vw
@r_devops
Devops job switch guidance
Need advice from experienced Azure DevOps engineers
I’m currently working as a Cloud Administrator with 4.4 years of IT experience and am trying to transition into an Azure DevOps Engineer role.
I’ve been learning Azure, Terraform, Azure DevOps CI/CD, Docker, Kubernetes, and related tools. However, I’m struggling to explain real-world projects confidently, understand day-to-day DevOps responsibilities, and get interview calls due to my 90-day notice period. For those who have successfully made this transition, how did you bridge the gap between theoretical knowledge and practical experience? What should I focus on over the next two months to improve my resume, project explanations, hands-on skills, and interview opportunities?
I’d appreciate practical advice based on your real-world experience.
https://redd.it/1xgig73
@r_devops
Is it difficult to switch from Desktop Support to DevOps?
I’m from Ahmedabad, India, and I’m starting my corporate career with my first internship in IT support, mainly desktop support and Windows troubleshooting.
I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications. However, I couldn’t find opportunities in System Administration or Cloud Support, so I accepted this internship.
Can I switch to a Junior DevOps/Cloud Engineer role after gaining some corporate experience in desktop support, or will it be difficult to make the transition?
I’d appreciate advice from people who have made a similar career switch.
https://redd.it/1xfu1cz
@r_devops
Making attacking agents pay with Context Bombs
https://agentic.tracebit.com/factory/
https://redd.it/1xfsq7l
@r_devops
DevOps its a good entry job?
For the past 10 months, I've been working as a DevOps Intern. I've focused heavily on filling the gaps left by my university curriculum—mastering tools like Docker, Terraform, scripting, and cloud infrastructure—and I recently earned my AWS Solutions Architect certification. However, during this time, I haven't written much traditional code. My day-to-day is strictly DevOps, which feels very different from standard software engineering.
I am currently 21 and in my 7th semester of a Software Engineering degree. Lately, I've noticed that the most lucrative internship and new-grad opportunities are in pure software engineering. I feel like I wouldn't pass the technical interviews for these roles because my recent focus has been entirely away from coding.
What should I do? Should I get back into coding and grind LeetCode to aim for these SWE roles, or stick to my current DevOps path?
https://redd.it/1xfm70g
@r_devops
Open Source Contribution Recommendations for projects related to DevOps and Platform Engineering
I'm interested in Open Source Contribution and looking for recommendations for projects that are related to DevOps and Platform Engineering.
I'd like my contribution to be relevant to my everyday work.
I'm good with python, go, nodejs and typescript.
This will be my first contribution so, I'm also looking for something that's not so difficult to work on.
I'd appreciate any advice or recommendations
https://redd.it/1xfg9xz
@r_devops
Failing CI when a vendor silently changes their API response (open source)
Vendors change APIs without telling anyone: a field gets renamed, a number becomes a string, a 200 starts returning an HTML error page. Contract testing doesn't help because the vendor won't run your contracts, and OpenAPI diffs only see what they bother to document.
Tiltmeter learns the response shape from real calls and gives you an exit code that knows what broke:
0 no drift
1 warning (new enum value, latency 3x the baseline)
2 breaking (removed field, type change, new nulls)
3 the check couldn't run
4 config error
The GitHub Action keeps the baseline in the Actions cache and writes the changes to the job summary; GitLab CI and cron work too. Slack or webhook alerts take one line of config. Credentials stay as ${VAR} placeholders and are never written to disk, and it stores shapes, not response bodies, in one SQLite file.
MIT: pip install tiltmeter
https://tiltmeter.dev
How do you cath third-party API changes today? Synthetic checks with hand-written assertions, or waiting for the incident?
https://redd.it/1xf6c8g
@r_devops
Hegel, GitOps and an agent in production
https://picaportelabs.com/blog/hegel-gitops-agent-in-production/
https://redd.it/1xeeoy2
@r_devops
Seems someone is interested in AWS Golden Jacket 🧥
https://redd.it/1xe5mbl
@r_devops
AWS Administrators of Reddit, How are you securing yourself against AI?
# With Black October happening and all.
https://redd.it/1xdzjnr
@r_devops
Railway's Connected GitHub Accounts Were Compromised
Got this email from them this morning. My understanding is you can't fully audit GitHub access through the API, which is how accounts were connected, so it's best to assume the worst. Most connected accounts gave full read and write access, so if true, this constitutes serious IP theft concerns.
I personally don't feel like they have been fully transparent with the breach. This was essentially a footnote and buried under a misleading statement "Review provider activity and audit logs; especially AI keys". It should be flashing and unambiguous "GitHub code is possibly compromised".
Furthmore, a simple, nonchalant "we're sorry" and that's it!? Not "we're deeply sorry that we messed up and we take full responsibility, it won't happen again and we are doing x, y, z for our customers..."
I'm switching away permanently. I highly recommend Fly instead, took 30 mins to migrate. Not sure what to do about to do about the IP theft though? I would expect legal action to come of this, possibly a Class Action Lawsuit regarding IP theft.
https://preview.redd.it/m5o9n1kcn9xh1.png?width=1068&format=png&auto=webp&s=5164781bf4751a0dd7511893360b230427d2f1b6
https://redd.it/1xdnaf8
@r_devops
I built and deployed a full platform in 7 hours without touching my keyboard once
Last week I gave myself a stupid challenge. It changed how I think about AI ruining the DevOps job market.
The rules were simple. No keyboard, only mouse and voice. No paid tools, only free AI tools. 8 hours to build and deploy a real project, not a demo.
I picked LearnStack, a full learning platform. Courses, quizzes, uploads, progress tracking, admin portal, certificates. I connected a few AI tools so the output of one fed the next, and the flow ran on its own. Code written, checked, deployed, tested. It automated everything except the thinking.
The AI wrote the code. My job was the architecture, ECS on EC2 with 2 replicas, RDS Multi-AZ behind a load balancer, CI/CD with rollback. When it got things wrong I caught it, because I knew the right shape. The typing was never the skill.
5 hours building and deploying, 2 hours testing and fixing. Done in 7.
My take: AI is ruining the DevOps job market, just not for everyone. It is ruining it for engineers whose value was typing commands by hand. That part is automated now. For the ones who design the system and catch the mistakes, it is the biggest speed jump we have had. It replaced no decision. It removed the slow parts between them.
https://redd.it/1xdik4p
@r_devops
Suggest me any project in AWS with Terraform!
Guys help me i have totally 2.8 years of exprience in Cloud and Devops Engineer now i am working as a SRE but still i am not full fill with my current company now i am thinking to change for that i need to take pratices. for that give me suggession and Projects that will helpfull for me to cover every topics with infra creating with terraform.
Give me Realtime project which currently company standards. And also suggest me some services which is very usefull to learn. Thanks
https://redd.it/1xdfrgt
@r_devops
16 years old, looking into cloud security
Hello, im 16 years old from czech republic, and im starting to care/worry :) about where should i go for university, i was thinking about getting into cloud security in Germany/Austria or Nederlands, as im studying this language in school right now (B1 level) and I know these 3 countries are one of the biggest EU IT powerhouses.
But my main reason im writing this, is because I wanted to ask people in this, or similar field about how the job feels to you today, if its a good job, offers you good pay/free time ratio etc. etc. and especially what do you think the job could be like in 7-10 years (i know this is an hard to answer/ unrealistic question, but i still wonder if you think about anything regarding the future of this field).
I also wanted to ask about education, is it better getting into a theoretical university (like Universitaet) or more of a practical uni (like Fachhochschule)
Could you also please give me some tips, on what to do now so i have a (even if slight) advantage later in life, and even some other tips? Thanks a lot for any useful answers.
https://redd.it/1xddryi
@r_devops
Traffic Authenticity Index API is live now !
SERPSpur launched the API to grab the TAI score (Traffic authenticity Index) so we can get the data of bot inflated traffic and artificial traffic to any domain.
https://github.com/rashidmanhas/SERPSpur
https://redd.it/1xgmedt
@r_devops
First-year DevOps student, 5 months to finish an individual project, feeling overwhelmed. Any advice?
Hi everyone,
I’m a student in the early stages of a DevOps degree, and I have to complete an individual project within 5 months. My lecturer asked for a unique, new topic that is purely DevOps, not system engineering. I searched for a long time without luck, then used Perplexity to explore ideas and found one that my lecturer approved. He told me to start with a literature review and continue from there.
The topic is: I don't want to reveal it here, but I'll let you know when you are willing to help me.
Now that I’m starting, I’m honestly panicking. DevOps is new to me; the degree has only just begun, and many of the tools and terms are unfamiliar. I’m comfortable with practical work, but I’m worried about how much I need to learn in such a short time and whether I can finish on schedule.
I’d really appreciate help with:
1. How should I approach the literature review when I don’t know the terminology yet?
2. What core DevOps concepts and tools should I learn first (CI/CD, containers, IaC, etc.)?
3. Any tips for planning a 5-month project as a beginner?
4. Good free resources, communities, or books you’d recommend?
If you’ve been through something similar, I’d love to hear how you handled it. Thanks so much in advance!
https://redd.it/1xgjty5
@r_devops
Can I switch from Desktop Support to DevOps?
I’m from Ahmedabad, India, and currently working in IT support, mainly desktop support and Windows troubleshooting.
I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications.
Can I switch directly from desktop support to a Junior DevOps/Cloud Engineer role with these skills and certifications? Or will desktop support experience make it difficult to get a DevOps job?
I’d appreciate advice from people who have made a similar career transition.
https://redd.it/1xfq488
@r_devops
Diffinery: Open-source GitHub and GitHub Actions alternative that runs entirely on Cloudflare
https://redd.it/1xftjg1
@r_devops
Weekly Self Promotion Thread
Hey r/devops, welcome to our weekly self-promotion thread!
Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!
https://redd.it/1xfq7qc
@r_devops
Two widely used npm packages had their security advisories withdrawn. How should we handle false positives in dependency audits?
Both the braces and sprintf-js security advisories have been withdrawn, despite previously being marked as GitHub Reviewed.
braces: CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm
sprintf-js: CVE-2026-97058 / GHSA-hp3w-g68c-fv3c
I understand that third-party security risks are a pressing concern. Last week was particularly rough, with incidents and critical vulnerabilities involving LiteLLM, PHP, intermediate CAs, Brotli, and more. Security teams everywhere have been scrambling to assess their exposure and mitigate potential risks.
However, these two widely used npm packages, commonly pulled in through linters, test frameworks, and other development tools, have once again caused unnecessary alarm across the ecosystem.
Both advisories have now been withdrawn, but not before triggering security alerts and forcing developers to investigate issues that turned out not to be practically exploitable.
How much can we trust automated dependency audits when even reviewed security advisories can turn out to be false positives?
More importantly, what should change in how vulnerability reports are vetted, published, and propagated to downstream security tools?
https://redd.it/1xfikfb
@r_devops
HA AI Clusters - SRE Engineer - General questions
Hey guys, quick question for anyone in the AI or infrastructure space.
I was never really interested in running AI models on my homelab cluster, but this job offer looked too good to pass up.
I have a technical interview coming up soon for an SRE role on High Availability AI clusters, and honestly I have zero clue what to expect or what kind of questions they might throw at me.
The position is completely remote, focusing on monitoring, troubleshooting, and keeping things running via SSH without any hands-on access to physical hardware.
Core stack is mostly standard Linux, Docker, Kubernetes, and networking.
If anyone here works with HA AI infrastructure or went through a similar interview process, what do they actually ask about?
Do they stick to standard Linux and networking troubleshooting, or do they push hard on AI-specific tech like GPU drivers, Infiniband, NCCL, or CUDA failures?
Any heads up or real-world examples would be awesome. Thanks in advance!
https://redd.it/1xffaoh
@r_devops
Apache DevLake Lightweight Alternative
Hi everyone! I’m exploring the idea of building a lightweight alternative to DevLake and would love to hear about the pain points you’ve experienced while using it. What do you find frustrating, missing or unnecessarily complex? I’d really appreciate your thoughts and suggestions
https://redd.it/1xek2ty
@r_devops
CKA exam stress
Hello community,
I am really stressed about my cka exam. I have bought it but have not prepared yet. My goal is to give exam in december. I have udemy monthly subscription and thrive subscription for this year. I am watching mumshad course on udemy.
I have 4 years of experience as a devops engineer. Done ccna training and comptia security plus. I have a very good command on linux(ubuntu) because my career started with it.
But the uncertain and pressure of work is giving me hard time. I am also works as a consultant so have to give time on that as well. I get exhausted after work. I consumed half of the course with labs on udemy and kodekloud but having no experience of production kubernetes. I understand the concepts but still thinks something is missing. The last topic of admission controllers gave me hard time to consume.
Do you guys know anything like tips and tricks to pass this exam. Anyone studying or prepping for the same can also collaborate. Because it is better to clear the concepts.
Dont ignore this post.
Regards
Worried and stressed person
https://redd.it/1xe7yad
@r_devops
What are some use cases for an internal system monitoring bot?
​
Hey everyone! I’m exploring ways to extend an existing internal production health-check bot that monitors systems checks whether the important pages loads or not and sends status updates to Microsoft Teams.
I’m looking for ideas beyond basic health checks, such as proactive alerts, log analysis, incident detection, automated troubleshooting, or AI-powered features.
What useful automations have you built around monitoring bots? Which ones have made the biggest difference in real-world scenarios?
Would love to hear your suggestions and experiences!
https://redd.it/1xe1ti6
@r_devops
¿PHP 5.4 en producción en pleno 2026? Decime que no sos el único 💀
Con las últimas alertas de seguridad sobre PHP, me dio curiosidad saber cómo están llevando esto en sus empresas.
¿Ya están migrando o siguen con el clásico “si funciona, no lo toques”?
Me pregunto cuántos todavía tienen servidores con PHP 5.4, 7.x o alguna reliquia que nadie se atreve a actualizar porque la aplicación depende de una librería que dejó de existir cuando todavía usábamos MSN Messenger.
Y lo mejor: ¿la empresa entendió la urgencia de actualizar o todavía estás explicándole al jefe por qué tener software sin soporte es una mala idea?
Tengo curiosidad por saber cómo está la situación en otras empresas:
¿Ya tienen un plan de migración?
¿Están peleando con aplicaciones legacy y dependencias imposibles?
¿Seguridad está presionando o nadie se ha enterado?
¿O eres el único que está preocupado mientras todo el mundo dice que no pasa nada?
Cuéntame tu experiencia. ¿Qué versión de PHP tienes en producción y qué tan complicado está siendo convencer a la empresa de actualizar?
Necesito saber si estamos todos en el mismo barco o si el mío ya tiene PHP 5.4 y está haciendo agua. 😂
https://redd.it/1xdks3n
@r_devops
DepGate – an open-source "repository firewall" that blocks malicious packages at install time, across 8 ecosystems
I’ve spent a while working in product/application security, and one thing always bugged me: most supply-chain tools scan dependencies after npm install or pip install has already run — by which point the install scripts have executed. The decision happens too late.
So I built DepGate, an open-source dependency gateway. It’s a single proxy + policy engine that sits in front of npm, PyPI, Maven, Go modules, NuGet, Cargo, Composer and RubyGems. Your devs and CI point their package managers at DepGate instead of the public registry. It fetches the package, checks it against a malware feed and your policies, and either serves it or returns a 403 naming the exact policy and reason.
What it does:
Known malware never downloads — every request is checked against a synced feed of 200k+ malicious packages before any policy runs.
Readable policies — block by CVSS/EPSS, license, release age, release type, OpenSSF Scorecard, or package name. One rule per policy, stated in a sentence.
Monitor mode — run a new policy against real traffic first and see exactly what it would break before you enforce it.
Dependency-confusion protection — internal names are served only from internal registries, never a public look-alike.
Decision Ledger — every block is recorded with the reason and who asked, down to the CI job.
Self-hosted, one Docker image (Postgres + Redis), runs air-gapped, and can sit in front of or behind Artifactory/Nexus.
It’s basically meant to be the open-source answer to the commercial “repository firewall” products, with a lot fewer moving parts. TypeScript end to end, MIT licensed.
Repo (quick start + docs): https://github.com/secmods/depgate
Still early and I’m actively building — would genuinely appreciate feedback, criticism of the approach, or feature requests. Heuristic detection of never-before-seen malware is on the roadmap. Happy to answer anything in the comments.
https://redd.it/1xdkt8m
@r_devops
Terraform can't deploy multiple VMs
Hey guys,
I'm kinda new to world of devops and automation so I thought I'll start easy by creating VMs on Proxmox with Terraform via my CI/CD Gitea.
When I create 1 VM, everything works but when I create 2 or more I get this error :
Run terraform -chdir=terraform apply -input=false tfplan
proxmox_virtual_environment_vm.debian: Creating...
proxmox_virtual_environment_vm.debian: Still creating... [00m10s elapsed]
╷
│ Error: All attempts fail:
│ #1: received an HTTP 500 response - Reason: mkdir /mnt/pve/NFS/images/121: File exists at /usr/share/perl5/PVE/Storage/Plugin.pm line 1060.
│
│ with proxmox_virtual_environment_vm.debian,
│ on main.tf line 13, in resource "proxmox_virtual_environment_vm" "debian":
│ 13: resource "proxmox_virtual_environment_vm" "debian" {
│
╵
Error: Terraform exited with code 1.
Error: Process completed with exit code 1.
This is my [main.tf](http://main.tf) :
# ===== Paramètres à adapter =====
locals {
template_id = 7000
template_node = "pve02" # nœud qui héberge le template
datastore_id = "NFS"
bridge = "vmbr0"
ci_user = "deployment"
#ssh_public_key = file("~/.ssh/id_ed25519.pub")
}
# ===== VM =====
resource "proxmox_virtual_environment_vm" "debian" {
name = var.vm_name
node_name = var.node_name
keyboard_layout = "fr"
# Clone la template puis la transforme en VM
clone {
vm_id = local.template_id
node_name = local.template_node
full = true
}
agent {
enabled = true
}
cpu {
cores = var.vm_cores
type = "x86-64-v2-AES"
}
memory {
dedicated = var.vm_memory
floating = var.vm_memory
}
disk {
datastore_id = local.datastore_id
interface = "scsi0"
size = var.vm_disk_size
discard = "on"
iothread = true
ssd = true
}
network_device {
bridge = local.bridge
model = "virtio"
}
initialization {
datastore_id = local.datastore_id
ip_config {
ipv4 {
address = "dhcp"
# address = "192.168.1.50/24"
# gateway = "192.168.1.1"
}
}
# Compte qui sera créer dans la VM
user_account {
username = local.ci_user
password = "TOPSECRET"
#keys = [local.ssh_public_key]
}
}
lifecycle {
ignore_changes = [initialization] # évite de recréer la VM si cloud-init change
}
}
I don't understand why it wouldn't work when creating multiple VMs. Thanks for the help
https://redd.it/1xdigxy
@r_devops
What does AI-assisted incident investigation actually look like at your company right now?
Curious how this is going in practice, not how the vendor demos make it look.
When an alert fires, how much of the investigation does AI actually handle for you today (pulling the right logs and traces, correlating with deploys, narrowing down root cause)? Where does it fall over?
Also wondering if anyone's kept this inside their own environment, self-hosted models or anything private, rather than sending telemetry to a vendor's AI or a frontier API. Was that a requirement, or just not worth the effort?
I'm researching this space, not a pitch. It'd help if you mention your stack (Datadog, Grafana, other)
Thanks!
https://redd.it/1xdcnxa
@r_devops
How do cloud load testing tools compare to JMeter?
Our QA team has years of jmeters scripts for our core apps, but running our own load generation infra is turning into a huge operational and expensive headache.
Every time we do a high concurrency run or need traffic spread out across different geographic regions, half our sprint is spent provisioning EC2 boxes, setting up slave nodes and dealing with network timeouts.
My team lead wants us to explore managed cloud platforms to take that maintenance off our backs. But part of our team is hesitant about moving everything over. Has anyone moved from a self hosted JMeters to a cloud solution? Does the saving in infra justify the subscription cost? And most importantly, were you able to keep your existing .jmx test assets or you had to rewrite everything from scratch?
https://redd.it/1xdc6ge
@r_devops
