Recherche, sujets (tags des flux RSS), favoris et filtres de contenu.
Sujets les plus fréquents des 3 derniers jours. Un article doit porter tous les sujets choisis.
130 articles conservés pour « devops »
GPU capacity is tight, scattered and expensive to reach. The next constraint is not silicon. It is selling, routing and recovering compute by the hour. The squeeze Moody's forecasts that six companies, Microsoft, Amazon, Meta, Alphabet, Oracle and CoreWeave, will spend about…
Most of us spend ages polishing the perfect user journey. But in blockchain apps, transactions go sideways more often than we'd like. A wallet rejects the request. The network gets clogged. A tx sits on "pending" way longer than anyone expected. None of this is rare enough to…
Four of the most-used stacks on the internet got hit in the same week . PHP, Node.js, GitLab and LiteLLM all shipped critical fixes or suffered a serious incident between Oct 12 and Oct 22, 2026 . If you run a PHP site, a Node.js backend, a self-hosted GitLab or anything that…
Your CI failed. Was it a flake or a real break? Last week I watched a team re-run a red CI job three times, merge on the third green run, and ship the bug anyway. The test was not flaky. The retry just hid it for one run. The opposite happens just as often: a genuinely flaky…
Key takeaways Set a non-root numeric USER; container root is one bug from host root. Deleting a secret in a later layer doesn't remove it; use BuildKit secret mounts. Pin base images by version and digest, and install from lockfiles. Never pipe curl into a shell; verify…
5 Practical Lessons from Scanning GitHub Actions Workflows Ahead of the ubuntu-latest Migration Between October 19 and November 19, 2026, GitHub is rolling out the ubuntu-latest transition from Ubuntu 24.04 LTS to Ubuntu 26.04 LTS. If your CI workflows rely on floating labels or…
There is a very Docker Compose moment: Postgres is running, the API is running, the logs look reasonable, and the API still says it can't connect to localhost:5432 . You check docker compose ps . Postgres is Up . You check the docker-compose.yml . The port is there. You stare at…
Cuando llevas años escribiendo SQL, lo primero que haces frente a una base de datos nueva es buscar dónde está el JOIN . En Apache Cassandra no está, y ese hueco no es una carencia: es la decisión de diseño de la que cuelga todo lo demás. Para entenderlo de verdad construí algo…
When a clean continuous integration environment crashes with an unexpected platform error during dependency installation, developers need a methodical way to inspect their package trees without guessing. If you encounter a platform mismatch during a deployment pipeline, you can…
โดย Nokka (นก-กา) | ตอนที่ 7 จาก 7 ของชุด "สร้างซอฟต์แวร์ด้วย AI" | ตรวจสอบข้อมูล ณ 23 ต.ค. 2026 บทความนี้เขียนโดย AI (deepseek-v4.1-flash · ผู้ให้บริการโมเดล: ollama-cloud) ผ่าน Hermes Agent ภายใต้การควบคุมและตรวจสอบคุณภาพโดยมนุษย์ - Nokka (นก-กา)…
A software release works when the change actually helps users and does not create big security or performance problems. Without a steady process teams run into failed deployments and unclear responsibilities. The GitLab report mentioned that most companies now push code to…
Laravel queues feel easy in development. You set QUEUE_CONNECTION , run php artisan queue:work in a terminal, and emails send, PDFs generate and webhooks fire in the background. Then you deploy, close the terminal, and a week later a customer asks why their order confirmation…
An expired SSL certificate is one of the most avoidable outages on the web. The site is fine, the server is fine, but every visitor gets a full-page browser warning and most of them leave. Less dramatic certificate problems, like a missing intermediate certificate, are worse in…
Autonomous DevOps is an operating model in which agents continuously observe cloud and pipeline telemetry, decide what needs changing, and act inside declared boundaries without a human approving each instance, while the system stays observable, auditable and reversible. Humans…
Most advice on alert fatigue stops at "make alerts actionable". This guide is the working version for teams on Prometheus and Alertmanager: how to count the alerts that actually reach a person, which config changes cut them (grouping, inhibition, routing, for: durations), which…
A canary credential, or AWS honeytoken, is a real AWS access key that can do nothing and that nobody legitimate will ever use. You plant it where an attacker looks for credentials. When someone uses it, CloudTrail records the call and you get an alert that carries very little…
Originally published on PkLavc . Confirmed facts AWS Continuum for code vulnerabilities is now generally available as of October 22, 2026. The service discovers, validates, prioritizes, and remediates code vulnerabilities at machine speed. It constructs a context graph from the…
Hetzner's CPX22, a cloud server with 2 vCPUs and 4 GB of RAM, cost €6.49 a month with its IPv4 address at the start of 2026. On 23 October 2026 it costs €19.99 on the same basis. We set it against the cheapest self-managed 2 vCPU / 4 GB server at 24 other providers, and 20 of…
Most programming languages were written for human programmers, but that's about to change. University of Michigan professor Jason Mars has developed an academically ambitious language called Jac, and a runtime called Jaseci, that treats AI and AI agents as first-class entities.…
Building Outage Memory for AI Agents: Better Stack Connector for Cognee High availability is the bedrock of any software system. Monitoring tools like Better Stack (Better Uptime) track endpoint heartbeats, SSL validity, API responsiveness, and on-call paging around the clock.…
Modern contact centers are rapidly transitioning away from heavy, license-bound legacy PBX infrastructure to cloud-native contact center platforms like Amazon Connect. However, simply migrating to the cloud is only half the battle. The real operational value lies in bridging…
Workflow write access is secret read access whenever the workflow you can write executes with access to those secrets. That condition is the whole argument, and it is narrower than the headline. Someone who can change a workflow file does not automatically hold every repository,…
Suggested tags: ai, llm, devops, python Most LLMOps advice is about the model: pick a snapshot, set a temperature, watch the latency. That framing is comfortable because the model is the one thing you can't debug. The failures I've been pulled into were rarely the model. They…
Few people who work with computers have just one. There's the work machine, the PC at home, maybe a small server or a cloud VM, and a parent's laptop in another city that only gets attention when it breaks. Each of them is a separate trip. Open a remote session, SSH in, walk to…
Sooner or later almost every web project needs something to happen on a schedule: send the newsletter at 8, clean up old sessions every night, import a price feed every 15 minutes, run wp-cron.php reliably. On a VPS you open crontab -e and you're done. But many projects don't…
I run a nightly pipeline of more than 20 AI agents: research, architecture, security audit, build, QA. Every morning there's a report of what passed. For months, everything passed. Then I found out why. The final verification job was checking out the wrong branch. It re-tested a…
The real MCP server security risks are prompt injection hidden in the data a tool returns, over-broad tool scopes, credential exposure when a server hands raw keys to the model, and unbounded actions with no human approval. The fixes are architectural, not a better prompt. The…
VoIP Call Quality Troubleshooting: Smokeping & RTCP Analysis Diagnose packet loss, jitter, and latency causing one-way audio and dropped calls using Smokeping graphs and RTCP statistics parsed from Asterisk logs. VoIP call quality degrades when latency exceeds 150ms, jitter…
What idle hardware actually pays: three machines, measured There's a specific kind of afternoon I keep having: I look at a machine that is already running, already powered, already paid for, and I think — that thing is wasting money by doing nothing. So I went and checked three…
This is article 2 of 10 in Beyond Kubernetes Defaults . Read article 1: When Kubernetes Primitives Aren’t Enough first. This article is cross-published from Zen Mesh . Kubernetes already garbage-collects resources. That makes “we built a Kubernetes garbage collector” sound…
Why free model tiers look dead when they aren't I keep a small probe script that walks a list of OpenAI-compatible endpoints and asks each one the same two questions: what do you have, and will you answer a chat right now. For months I only looked at the first answer. That was…
On October 21 and 22, I spent two long days patching our own servers. PHP had announced an emergency release for two critical remote code execution bugs, now known as "PHP2Shell". We run seven RunCloud servers with about 30 WordPress sites, and several of them are on PHP…
For most small teams, hosted Sentry is the right default, and the thing that decides whether it stays affordable is not the vendor but how many duplicate events your app emits. GlitchTip is a credible cheaper alternative if you only need error tracking and are happy with the…
Pipeline & Prompts | Byte size guides on DevOps, Cloud and AI DevOps from Zero #12 ⚡ Byte Size Summary Tell the difference between authentication (who is this?) and authorization (what can it do?) on AWS, Azure and GCP Map the same idea to each cloud's vocabulary: IAM roles,…
The ubuntu-latest migration window opened on October 19, 2026 and runs to November 19. Inside that window, ubuntu-latest moves from Ubuntu 24.04 to Ubuntu 26.04 in stages, so any single run may land on either image. Day 4 covered cadence: a Thursday-scheduled workflow had its…
You know the basics: ${var:-default} gives you a fallback. ${var:=default} assigns it. Fine. But there are a handful of forms that show up in real scripts and save you from writing extra conditionals. The Ones Worth Remembering ${var@Q} — shell-quote the value This is the one I…
Most small-business websites don't go down because of a clever attack. They go down because of something boring that nobody was watching: a certificate that expired on a Sunday, a domain renewal that failed because the card on file changed, or invoices that land in spam for…
The hardest part of a small-business website isn’t always the design. Sometimes it’s making sure the right website actually appears when someone visits the domain. I’ve been building a website for Din Borlänge Taxi AB, a local taxi company. The goal was straightforward: help…
On October 21, 2026 the PHP project shipped emergency releases for two critical remote-code-execution bugs in the language runtime itself. The headline most outlets chose is "AI found it". The more useful part is what the PHP Foundation says about why it took so long to fix.…
Here is the question I try to ask before I commit to a design: if I'm still on call for this in three years, and I have to explain it to a new hire on their first week, is this still the right choice? It's a surprisingly strict filter. Clever tricks tend to fail it. The thing…
The comments on this blog are watched by a five-minute read-only scan. It is the only thing that tells me whether a reader has written in, so when it stops, I stop knowing. On 2026-10-22 it stopped, and my own working surface kept saying it was fine. Two lines that disagree For…
Tout le monde appelle ça « la page blanche ». Le terme est resté des années 2010, quand un plugin cassé laissait effectivement un écran vide. Aujourd'hui, dans l'immense majorité des cas, votre écran n'est pas blanc : il porte une phrase. Et cette différence décide de l'endroit…
A coding agent will edit a Dockerfile the way a helpful intern edits a wiki: confidently, locally, and with no memory of the last time someone did the same thing three services over. That is fine in a three-service repo. It is a slow accident in a landscape. Flisk makes the…
"We have microservices" is not a sizing input. Twelve services in one Compose file is a different job from twelve services that each own a manifest, a route, and a health check. Flisk is opinionated about which of those jobs it wants. This is the decision table I wish every…
People keep asking the wrong size question about flisk.sh . Is it a platform? A Kubernetes replacement? A new way to build companies? No. It is a CLI. You write a service.json , you run flisk up (the GitHub README still says tdk up for the same package), and it generates the…
Cloud infrastructure makes it easier for engineering teams to build, deploy, and scale applications. However, as systems grow, cloud spending can become difficult to predict. Development environments remain active overnight, storage accumulates unused data, workloads run on…
When an AI coding agent hits an error, the easiest move is to get past it: retry, reset, reprocess. That makes today's run green and guarantees the same failure next week. The self-annealing loop is a short rule that changes what the agent does after something breaks, so the…
Introduction Mainframes continue to support mission-critical business operations across banking, insurance, healthcare, manufacturing, and retail. They process large transaction volumes, manage sensitive data, and support business applications that organizations rely on every…
A GitHub Actions security gate for Node.js is a single workflow that runs on every pull request. It scans the new commits for leaked API keys, checks new dependencies for known vulnerabilities and confirms the lockfile is honest. If any of those checks finds something real, it…
Day 17: AWS Secrets Manager Secrets Manager charges $0.40/secret/month but gives you something Parameter Store does not: automatic credential rotation with pre-built Lambda functions for RDS, Redshift, and DocumentDB. Retrieving Secrets in Go package main import ( "context"…