mise
https://github.com/jdx/mise
mise is a polyglot tool version manager. It replaces tools like asdf, nvm, pyenv, rbenv, etc.
mise allows you to switch sets of env vars in different project directories. It can replace direnv.
mise is a task runner that can replace make, or npm noscripts.
https://github.com/jdx/mise
Migrating billions of records: moving our active DNS database while it’s in use
https://blog.cloudflare.com/migrating-billions-of-records-moving-our-active-dns-database-while-in-use
According to a survey done by W3Techs, as of October 2024, Cloudflare is used as an authoritative DNS provider by 14.5% of all websites. As an authoritative DNS provider, we are responsible for managing and serving all the DNS records for our clients’ domains. This means we have an enormous responsibility to provide the best service possible, starting at the data plane. As such, we are constantly investing in our infrastructure to ensure the reliability and performance of our systems.
https://blog.cloudflare.com/migrating-billions-of-records-moving-our-active-dns-database-while-in-use
Against Incident Severities and in Favor of Incident Types
https://www.honeycomb.io/blog/against-incident-severities-favor-incident-types
About a year ago, Honeycomb kicked off an internal experiment to structure how we do incident response. We looked at the usual severity-based approach (usually using a SEV scale), but decided to adopt an approach based on types, aiming to better play the role of quick definitions for multiple departments put together. This post is a short report on our experience doing it.
https://www.honeycomb.io/blog/against-incident-severities-favor-incident-types
Way too many ways to wait on a child process with a timeout
https://gaultier.github.io/blog/way_too_many_ways_to_wait_for_a_child_process_with_a_timeout.html
https://gaultier.github.io/blog/way_too_many_ways_to_wait_for_a_child_process_with_a_timeout.html
How to Build Smaller Container Images: Docker Multi-Stage Builds
https://labs.iximiuz.com/tutorials/docker-multi-stage-builds
https://labs.iximiuz.com/tutorials/docker-multi-stage-builds
slackdump
https://github.com/rusq/slackdump
Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.
https://github.com/rusq/slackdump
automatisch
https://github.com/automatisch/automatisch
The open source Zapier alternative. Build workflow automation without spending time and money.
https://github.com/automatisch/automatisch
pglite-fusion
https://github.com/frectonz/pglite-fusion
Embed an SQLite database in your PostgreSQL table. AKA multitenancy has been solved.
https://github.com/frectonz/pglite-fusion
There’s No Such Thing as a Free Lunch!
https://slack.engineering/theres-no-such-thing-as-a-free-lunch
How Slack trains engineers in incident response by ordering lunch together.
https://slack.engineering/theres-no-such-thing-as-a-free-lunch
lla
https://github.com/triyanox/lla
lla is a high-performance, extensible alternative to the traditional ls command, written in Rust. It offers enhanced functionality, customizable output, and a plugin system for extended capabilities.
https://github.com/triyanox/lla
wesql
https://github.com/wesql/wesql
WeSQL is an innovative MySQL distribution that adopts a compute-storage separation architecture, with storage backed by S3 (and S3-compatible systems). It can run on any cloud, ensuring no vendor lock-in.
WeSQL has completely replaced MySQL’s traditional disk storage with S3. All MySQL data—binlogs, schemas, storage engine metadata, WAL, and data files—are entirely (not partially!) stored as objects in S3. The 11 nines of durability provided by S3 significantly enhances data reliability. Additionally, WeSQL can start from a clean, empty instance, connect to S3, load the data, and begin serving immediately with no additional setup required.
It is ideal for users who need an easy-to-manage, cost-effective, and developer-friendly MySQL database solution, especially for those needing support for both Serverless and BYOC (Bring Your Own Cloud).
https://github.com/wesql/wesql
10 Essential AWS Security Steps for Your AWS Account
https://cloudnature.net/blog/10-essential-aws-security-steps-for-your-aws-account
After spending years helping teams set up their AWS infrastructure, I've noticed something interesting: many of us face the same security challenges when starting out. You know what I mean if you've ever wondered "Wait, is my S3 bucket actually secure?" or "Should I really be using the root account for this?" (Spoiler: probably not!)
The good news? I've put together this guide to help you build a rock-solid AWS security foundation from day one. We'll cover 10 essential security measures that I've seen make a real difference in protecting AWS environments. While absolute security is a journey rather than a destination, implementing these steps will put you way ahead of the game in defending against common attack vectors.
And I've also created a Terraform project that you can use as baseline for your securing your AWS account!
The best part? It's all under the AWS free tier! 😉
Essentially, I got tired or reading the same posts regarding people (or organizations) getting their account hacked, here's my solution for that!
https://cloudnature.net/blog/10-essential-aws-security-steps-for-your-aws-account
terrateam
https://github.com/terrateamio/terrateam
Terrateam is an open-source GitOps CI/CD platform for automating infrastructure workflows. It integrates with GitHub to orchestrate Terraform, OpenTofu, CDKTF, and Terragrunt operations via pull requests. Use our hosted service or run on-premise.
https://github.com/terrateamio/terrateam
How I came to build a cheap server cluster for VDI
https://medium.com/@mnl_584/how-i-came-to-build-a-cheap-server-cluster-for-vdi-ca2ed6028eb2
https://medium.com/@mnl_584/how-i-came-to-build-a-cheap-server-cluster-for-vdi-ca2ed6028eb2
DevOps&SRE Library
Service Meshes Decoded Part One: A performance comparison of Istio vs Linkerd vs Cilium A service mesh is a dedicated infrastructure layer that facilitates service-to-service communications between services or microservices using a proxy. https://livewy…
Service Meshes Decoded Part Two: Is Istio Ambient worth it?
https://livewyer.io/blog/2024/06/06/comparison-of-service-meshes-part-two
https://livewyer.io/blog/2024/06/06/comparison-of-service-meshes-part-two
Using Sealed Secrets with Your Kubernetes Applications
https://devoriales.com/post/351/using-sealed-secrets-with-your-kubernetes-applications
This blog post walks you through working with Sealed Secrets by Bitnami.
https://devoriales.com/post/351/using-sealed-secrets-with-your-kubernetes-applications
FRR-k8s as a BGP backend for MetalLB
https://www.redhat.com/en/blog/frr-k8s-bgp-backend-metallb
The FRR-k8s API provides important Border Gateway Protocol (BGP) features required by the MetalLB load balancer with the ability to selectively accept routes and to inject raw FRR configuration options. It's built on FRRouting (FRR), a free and open source internet routing protocol suite for Linux and Unix platforms that implements Border Gateway Protocol (BGP) and Bidirectional Forwarding Detection (BFD).
https://www.redhat.com/en/blog/frr-k8s-bgp-backend-metallb
Monitoring, troubleshooting, and query analytics for PostgreSQL on Kubernetes
https://dev.to/dbazhenov/monitoring-troubleshooting-and-query-analytics-for-postgresql-on-kubernetes-2onj
https://dev.to/dbazhenov/monitoring-troubleshooting-and-query-analytics-for-postgresql-on-kubernetes-2onj
kubeblocks
https://github.com/apecloud/kubeblocks
KubeBlocks is an open-source control plane software that runs and manages databases, message queues and other stateful applications on K8s.
https://github.com/apecloud/kubeblocks
Kuzco
https://github.com/RoseSecurity/Kuzco
Kuzco reviews your Terraform and OpenTofu resources, compares them to the provider schema to detect unused parameters, and uses AI to suggest improvements and fixes
https://github.com/RoseSecurity/Kuzco
Load testing Kubernetes clients without breaking the bank
https://itnext.io/load-testing-kubernetes-clients-without-breaking-the-bank-f43332faa6ce
What if I told you can do performance tests on Kubernetes Clients without spending too much money, and much faster than conventional methods?
https://itnext.io/load-testing-kubernetes-clients-without-breaking-the-bank-f43332faa6ce