Recherche, sujets (tags des flux RSS), favoris et filtres de contenu.
Sujets les plus fréquents des 3 derniers jours. Un article doit porter tous les sujets choisis.
131 articles conservés pour « devops »
Day 17: AWS Secrets Manager Secrets Manager charges $0.40/secret/month but gives you something Parameter Store does not: automatic credential rotation with pre-built Lambda functions for RDS, Redshift, and DocumentDB. Retrieving Secrets in Go package main import ( "context"…
Day 17: Network commands for security This topic matters because it deals with network exposure and service reachability that people assume instead of proving using Bash and the native Linux tooling already on the box. The pattern #!/usr/bin/env bash set -euo pipefail dig +short…
Once an agent can run for hours, deploy things and spend money, the interesting question stops being "is the model smart enough?" and becomes "who is allowed to stop it, and how?" I've been collecting posts from the Redreamality blog that treat that as an engineering problem…
On Azure Repos, an AI reviewer can only stop a merge if a branch policy requires a status check whose genre and name match a status that reviewer posts. Review comments and votes leave the Complete button where it was. The mechanism is the PR Status API plus a required status…
If your installer ships as a shallow git clone and updates itself, deleting one flag from the fetch keeps it updating release after release, small and shallow. Below: why --depth 1 on the fetch breaks every update after install, how to repair clones already in the field, and a…
SSH Connection Multiplexing: The Config That Saves You From "Too Many Authentication Failures" You've been there. You're SSH'ing through a jump host to reach a fleet of servers, and suddenly every connection starts failing with "Too many authentication failures." You check the…
⚡ TL;DR: OpenTelemetry is the vendor-neutral way to instrument services across all three signals. Learn the API, SDK, and Collector, get context propagation right, and you can swap backends without re-instrumenting or being locked to one vendor. Contents Every vendor wanted…
On Tuesday morning a Google Cloud outage hit London. A power event took out one zone of the europe-west2 region, europe-west2-b , and for a few hours UK banking apps, a delivery firm and the courts' remote-hearing video links reported problems. If you run anything on a public…
On October 13, before the migration window opened, I froze a baseline: three of my own workflow files, scanned with RunnerDriftAudit v0.3.2, every row written down. The agreement — made in the open, in a comment thread with a reader who ran the same checklist on his own machine…
TL;DR On September 10, 2026, Anthropic published "Detecting and countering misuse of AI: September 2026," its fourth threat-intelligence report, covering operations its team disrupted between December 2025 and August 2026 across seven harm areas, with a downloadable IOC set. The…
Beyond Deployment: What's Next for CrescoDB, Plus a Clearer Path to Getting Started Building a backend is only part of the work. You define your data, build your API, connect your application, test it, and eventually deploy it. Your application is live. Your users can access it.…
14:32 UTC. PagerDuty fires on the checkout service's error-rate alarm. Datadog shows the 502 rate on POST /checkout jumping from a baseline of 0.02% to 4.8%, right in the middle of a rolling deploy that had shipped a dozen times before without anyone noticing it. By 14:36 the…
A Residency Lease for Agent Runs: Expiring Placement Decisions Instead of Static Config Reproducing the failure takes about a minute on any laptop: start an agent turn against a remote model endpoint, then drop the network with nmcli networking off halfway through. The run…
When I first started learning AWS, I thought deploying a backend meant creating an EC2 instance, installing Node.js, configuring a web server, and keeping everything running. That approach works. But what if you could build an API without managing the underlying servers…
I run Job Opportunities API (JOA), a jobs API that only reads employers' own career sites and applicant-tracking systems. The hard part is not finding jobs. It is knowing when a job is gone. Why closing jobs matters A job board full of dead listings wastes everyone's time. So…
Query Millions of VoIP CDRs with DuckDB on Budget VPS Extract and analyze call records from Asterisk and ViciDial in seconds on 1GB RAM by switching from SQL to column-oriented format. DuckDB queries raw CDR data 10 to 100 times faster than MySQL because it operates on…
This one is embarrassing, which is exactly why it's worth writing. My portfolio is hosted on Vercel. For roughly two weeks, from about September 10 to September 24 , every deploy failed, and the live site just kept serving an older version. I kept pushing changes. I kept…
How an unsuspected GUI daemon, zero swap, and unrotated Docker logs pushed our cloud node into kernel panics (and how we reclaimed 500MB of free RAM). The incident report pinged my phone at 02:40 AM. Our smallest cloud node, a 1-vCPU virtual machine with 1GB of RAM hosting two…
Software teams move quickly, and many organizations lean on outside agencies, contractors, and boutique dev shops to spin up proofs-of-concept, preview builds, and testing environments. Those environments typically live on subdomains such as staging.clientdomain.com ,…
Is your snoring just a loud nuisance, or is it a sign of something more serious? Obstructive Sleep Apnea (OSA) affects millions worldwide, yet remains undiagnosed in nearly 80% of cases. In this tutorial, we are building DeepSnore , an intelligent audio analysis pipeline that…
Originally published at trustboundarystudio.com . The video version, with diagrams, is on YouTube . Key facts When: Between August and early September 2025, according to Anthropic's post-mortem of 17 September 2025. The first bug was introduced on 5 August, and two more arose…
Whether you're a vibe coder or a software engineer, you may have run into the same problem: your app starts getting users, and the monthly bills become a headache. I've had to work through that with anaplirotis.gr. anaplirotis.gr has grown from zero to more than 17,000…
If something you depend on is generated by your own code but served from inside another vendor's application, a four-clause contract check flags the swap on its next run after an upgrade. A format check will not. Ours was a format check, and when it did fail, I read the evidence…
The man pages for tcpdump and dig are thorough. They are also useless when you are staring at a broken TLS handshake at 2 AM and need the exact filter syntax now . Julia Evans put together the practical examples the man pages leave out. Here are the ones that have earned a…
In my last post , I showed how OPA and Conftest block over-privileged IAM roles before anything gets deployed. I ended with a warning: there's a case where the check passes when it shouldn't. This is that case. It's worse than a missed wildcard, because nothing tells you it…
TL;DR Ivanti Connect Secure is a VPN and remote-access appliance that a company runs at its own network edge, and CVE-2026-104935 is the identifier Ivanti assigned to an authentication bypass and a code-execution flaw in it. An attacker chained that bypass with a file write and…
"Dagster vs Airflow" sounds like a feature contest. It mostly isn't. Both schedule Python, both retry failures, both have a UI, both are free to self-host. The real difference is what each one thinks it is scheduling. Airflow schedules tasks . Dagster schedules the things those…
CircleCI's Postgres disk space exhaustion on October 9, 2026 stopped all pipeline and workflow processing for roughly 12 hours, and the trigger was a scheduled cleanup job, not an unexpected load spike. According to CircleCI's own October 12 incident report, the fix the team…
termique v0.7.0 is a big one. The whole workspace is rebuilt around one content panel, the investigation page is redesigned, and underneath that sits a long list of reliability, privacy and accessibility fixes. Update from the in-app updater when the prompt appears, or grab a…
What the CLI does @json-translate/check compares translated JSON locale files against a source locale. It is designed for the last step after translation: the point where a developer wants to know whether a translated file can safely enter a build. It fails when a target file…
In my previous article , I explored operational conformance: how to evaluate whether observed evidence satisfies an operational specification. That gives us a useful point-in-time question: Does the system satisfy the specification right now? But production systems don't stay…