launching my new side project pipedash today - a desktop app for managing ci/cd pipelines from multiple providers

ideally we'd just use one ci/cd platform for everything and this wouldn't need to exist. but most of us deal with multiple platforms and i kept forgetting which pipeline was where. got tired of it so i built this.

it's new and still rough around the edges, so bugs will happen... if you run into any, just open an issue. drop a star if it helps :D

https://github.com/hcavarsan/pipedash

https://redd.it/1olc3q4
@r_devops

LDAP Injection: The Forgotten Injection Attack on Enterprise Authentication 🏢

https://instatunnel.my/blog/ldap-injection-the-forgotten-injection-attack-on-enterprise-authentication

https://redd.it/1olfb06
@r_devops

I need your advice/feedback on "webhooks as a service" platforms

Hello everyone,

About a year ago, I started a side project to create a "Webhook as a Service" platform. Essentially, it lets you create a proxy between services that send webhooks to your API-like Stripe, GitHub, Shopify, and redirects them to multiple destinations (your API, Slack, …).

All of this with automatic retries, filters, payload transformation with JavaScript, monitoring, and alerts.

Additionally, I built a webhook inspector, a tool to simply debug webhooks and visualise the headers, body, etc.

The problem is that the vast majority of users are only using the webhook inspector.

I know there are already some competitors in this sector, but, as developers or infrastructure engineers, do you see this as something useful? Or should I pivot Hooklistener to something else?

Thanks to everyone for the feedback.

https://redd.it/1olk3s4
@r_devops

The plane that crashed because of a light bulb - and what it teaches about DevOps focus

In December 1972, Eastern Air Lines Flight 401 was on final approach to Miami when a small green light failed to illuminate. That tiny bulb indicated whether the nose landing gear was locked. The crew couldn’t confirm if the landing gear was down, so they climbed to 2,000 feet to troubleshoot.

All three flight crew members became fixated on that light. While they pulled apart the panel to check the bulb, the captain accidentally nudged the control yoke, which disengaged the autopilot’s altitude hold. Slowly, silently, the aircraft began to descend. Nobody noticed. The warning chime sounded, the altimeter unwound-but everyone’s attention was still on the light. Minutes later, the wide-body jet slammed into the Everglades, killing more than 100 people 1.

The landing gear was fine. It was just the bulb. The crash happened because nobody was “flying the plane.”

For DevOps and SRE teams, this is a hauntingly familiar pattern. During incidents, we sometimes fixate on one metric, one alert, one suspicious log line-while the real problem is unfolding elsewhere. Flight 401’s lesson is simple but deep: when pressure mounts, someone must always keep an eye on the system’s overall health. In aviation, they call it “Aviate, Navigate, Communicate.” In operations, it’s “Stabilize, Observe, Diagnose.”

Have clear roles. Designate an incident commander whose job is to maintain situational awareness. Don’t let a small mystery consume all attention while the system degrades unnoticed. Above all, remember to fly the plane.

I’ve explored more incidents like this-and what software teams can learn from aviation’s culture of safety-in my book Code from the Cockpit link below. But even if you never read it, I hope Flight 401’s story stays with you next time an alert goes off.

Sources:
1 National Transportation Safety Board, Aircraft Accident Report NTSB/AAR-73-14, “Eastern Air Lines L-1011, N310EA, Miami, Florida, December 29, 1972” (Official Investigation Report)

Book reference: Code from the Cockpit – What Software Engineering Can Learn from Aviation Disasters (https://www.amazon.com/dp/B0FKTV3NX2)

https://redd.it/1oll8zb
@r_devops

Tooling price rises

Hey,

Who here runs a lab environment to practice coding/DevOps techs?

I have an environment with TeamCity, Octopus Deploy, Prometheus, k3s, etc.

However, has anyone noticed the constant price rises in tooling?

Octopus Deploy went up (there's threads here from a year or two ago).

TeamCity renewal licensing has changed.

And for a lot of system admin tooling, likewise, eg Veeam and VMWare.

It makes running a lab environment difficult.

https://redd.it/1olmixw
@r_devops

API Gateway horror stories?

Recently came over a post mentioning that if API endpoint gets discovered by a mischievous bot - it may drain lots of funds off your account. Could somebody explain please?

And maybe stories from own experience? Thanks all!

https://redd.it/1oljk5m
@r_devops

I created an Open Source tool to fork Kubernetes environments it is like "Git Fork" but for k8s.

Hi Folks,

I created an open-source tool that lets you create, fork, and hibernate entire Kubernetes environments.

With Forkspacer, you can fork your deployments while also migrating your data.. not just the manifests, but the entire data plane as well. We support different modes of forking: by default, every fork spins up a managed, dedicated virtual cluster, but you can also point the destination of your fork to a self-managed cluster. You can even set up multi-cloud environments and fork an environment from one provider (e.g., AWS) to another (e.g., GKE, AKE, or on-prem).

You can clone full setups, test changes in isolation, and automatically hibernate idle workspaces to save resources all declaratively, with GitOps-style reproducibility.

It’s especially useful for spinning up dev, test, pre-prod, and prod environments, and for teams where each developer needs a personal, forked environment from a shared baseline.

License is Apace 2.0 and it is written in Go using Kubebuilder SDK

***https://github.com/forkspacer/forkspacer*** \- source code

Please give it a try let me know, thank you

https://redd.it/1olo2l4
@r_devops

Understanding Docker Multi-platform Builds with QEMU

https://cefboud.com/posts/qemu-virtualzation-docker-multi-build/


https://redd.it/1olod4p
@r_devops

VS Code extension for dependency CVE scanning

VulScan-MCP scans project manifests for security vulnerabilities.



Queries NVD and OSV APIs for CVE data. Integrates with GitHub Copilot via Model Context Protocol.



Supports npm, pip, Maven, Go modules, Cargo, and more.



Open source: https://github.com/abhishekrai43/VulScan-MCP



Try it if you want CVE scanning in your editor.

https://redd.it/1olpe9t
@r_devops

A simple shell noscript that creates rootless podman containers to automate any task, building of github projects, kernels, applications etc

Denoscription: A simple shell noscript that uses buildah to create customized OCI/docker images and podman to deploy rootless containers designed to automate compilation/building of github projects, applications and kernels, including any other conainerized task or service. Pre-defined environment variables, various command options, native integration of all containers with apt-cacher-ng, live log monitoring with neovim and the use of tmux to consolidate container access, ensures maximum flexibility and efficiency during container use.

Url: https://github.com/tabletseeker/pod-buildah

https://redd.it/1olzbox
@r_devops

A simple shell noscript that creates rootless podman containers to automate any task, building of github projects, kernels, applications etc.

Denoscription: A simple shell noscript that uses buildah to create customized OCI/docker images and podman to deploy rootless containers designed to automate compilation/building of github projects, applications and kernels, including any other conainerized task or service. Pre-defined environment variables, various command options, native integration of all containers with apt-cacher-ng, live log monitoring with neovim and the use of tmux to consolidate container access, ensures maximum flexibility and efficiency during container use.

Url: https://github.com/tabletseeker/pod-buildah

https://redd.it/1olz4ug
@r_devops

Exploring low latency audio AI agents for live communication 🎧

I’ve been messing with some real-time audio based AI Agents to handle latency, reasoning, and synchronization when assisting during live human interviews, meetings and conferences etc.

The best examples I’ve found so far are Cogniear, LockedIn and Parakeet AI agents, all focused on real-time live spoken coaches rather than text.

-Cogniear.com works as an end-to-end reasoning loop: listens to and understands to whisper a full, spoken response in under 2 seconds.

-LockedInAI acts as a contextual tone coach, analyzing your confidence and phrasing during meetings.

-ParakeetAI focuses on improving clarity, cadence, and emotional delivery in real time.

It feels like early-stage “symbiotic audio reasoning” where human speech and AI processing overlap instead of alternating turns.

Questions for devs:

\-What’s the most efficient way to reduce inference lag in real-time voice reasoning systems?

\-How can multi-agent voice models maintain coherent dialogue flow without desyncing?

\-Anyone try prototyping something similar using streaming inference or hybrid STT/TTS pipelines?

Has anyone here tried something like   that?Would love to hear your experiences with any real-time audio based AI Agents

https://redd.it/1om2cxh
@r_devops

Hosting my CI/CD setup on a smaller EU cloud turned out smoother than I expected

I’ve been testing a few European clouds for my CI/CD setup, mainly Xelon.ch, Hetzner, and Scaleway. All of them did fine tbh , but I really liked how smooth and minimal the Xelon dashboard feels.

Setup took maybe 15 mins total, Jenkins + containers + auto backups. Everything runs from ISO-certified Swiss data centers, which adds a nice layer of trust.

Hetzner’s pricing is great, Scaleway’s UI is clean, but Xelon felt like the right mix of speed, compliance, and stability.

Anyone else here using EU-based clouds for pipelines or container work?

https://redd.it/1om5tqo
@r_devops

GraphQL Batching Attacks: How 100 Queries Become 10,000 Database Calls 📊

https://instatunnel.my/blog/graphql-batching-attacks-how-100-queries-become-10000-database-calls

https://redd.it/1om7jq7
@r_devops

Feeling stuck in DevOps tutorial hell for 5+ years — need guidance, structure, mentor, or cohort. How do I escape this cycle and make the switch?

Hi everyone. I’m a Senior Software Developer in Test (SDET) from India. For years I’ve been trying to transition into DevOps/SRE… but I feel completely stuck and lost.

My background:
I’ve been working professionally with Selenium, Maven, Jenkins, GitHub Actions, and automation frameworks. I also have some scattered hands-on touch-points with Docker, Kubernetes, Terraform, Ansible, Linux, Cloud… but NOTHING fully end-to-end production level. Only small experiments, tutorial-based setups and minor infra work for automation.

For the past 5-6 years, I’ve been trying to learn DevOps solo — watching endless Udemy courses, YouTube channels, reading various books, taking notes, doing bits and pieces here and there… but there is NO real direction or structure. It feels like I know a little of EVERYTHING, but I’m not DEEP in anything. I’m basically a “Jack of all tools, master of none.”

# The real problem:

DevOps is extremely broad.
Looking at AWS alone feels like a 2 year study.
Linux itself could take 1 year deeply.
Kubernetes is practically its own universe.
Every roadmap online looks endless — like a 10 year journey.

So what happens is:

I jump tool → to tool → to tool → to resource → to another course
without ever completing a structured path.

This has led me into a **never ending tutorial hell** for YEARS.

And this is starting to affect me mentally/emotionally.
I feel depressed because I do so much effort, consume so much content, but I still don’t feel confident enough to call myself a real DevOps engineer.

# What I need:

I don’t want another random list of videos/courses to watch.

I need:

* STRUCTURE
* ACTIONABLE sequence
* A clearly defined set of sub-skills
* EXACT things to learn in each major area (Linux → Docker → K8s → IaC → Cloud → CI/CD etc.)
* REAL capstone projects end to end that simulate real production DevOps architecture
* Guidance on how to network / get referrals / find DevOps jobs in this AI dominated environment

Example of what I mean by direction:

* “Here is the exact problem statement.”
* “Design this workload on AWS with these components.”
* “Configure DNS this way.”
* “Implement load balancers like this.”
* “Use Ansible here.”
* “Deploy this app with Kubernetes here.”
* “Document it into a portfolio.”
* “Do 3-4 such major capstones — that is enough to confidently apply for Senior DevOps roles.”

This is the kind of clarity I am desperately missing.

# What I’m searching for now:

* Someone who has successfully transitioned — and can mentor me (even paid mentor is fine)
* Or a cohort / group of people preparing for DevOps roles together
* Or a structured learning community with consistency and direction
* Or experienced DevOps engineers who can tell me the minimum essential path (without drowning me in infinite tool lists)

I’m NOT asking for hand-holding where someone does everything for me.

I just need a guiding force who says:

* “Do THIS next.”
* “Focus on THIS area.”
* “Complete THIS project.”

I can work extremely hard if I know I’m working in the right direction.

Right now I feel like I’m digging myself deeper into knowledge without outcomes. It feels like a hole that I cannot climb out of alone.

If anyone here has gone through this transition:
How did you break out?
How did you find the right direction?
How did you filter out noise vs essentials?
Where did you find the right mentor/community/cohort?

Any guidance here would genuinely help me get unstuck.

https://redd.it/1om8kb1
@r_devops

How do you track your cloud spend? Per instance daily, or monthly totals across all servers?

Hey folks,
I’m curious how other teams handle cloud cost tracking and reconciliation in day-to-day operations.

In our setup, we run about 10 instances with mixed workloads (compute, storage, and network). I’m wondering how you usually keep an eye on costs. Do you track daily usage per instance like CPU hours, storage, and bandwidth? Or do you mostly review monthly totals across all servers?
What’s been your best practice for keeping visibility without spending half your week digging through usage reports?

https://redd.it/1omacjj
@r_devops

What tech stack or setup do you use that gives you similar capabilities to a full-featured PaaS?

I’ve been comparing hosting options and noticed that services like Linode or DigitalOcean, ... don’t really offer much in terms of DevOps automation or collaboration tools. Some PaaS platforms, on the other hand, provide pretty advanced features, like full, application-aware cluster snapshots (flushing MySQL/Redis/Solr before taking them), instant Copy-on-Write environment clones per Git branch, and seamless Git-based deployments.

You can debug live environments, integrate easily with GitHub/GitLab/Bitbucket, and even host multiple apps (frontends, WordPress, microservices, etc.) within a single project. It’s incredibly convenient for team-based development, though obviously, it’s not cheap.

I know it’s difficult to fully replicate what modern PaaS platforms offer with, but I’d love to know what kind of tech stack and methodologies people are using to get close.

I’m not a DevOps engineer, just a developer who wants to experiment with this kind of setup for PHP CMS projects like WordPress and Drupal, mostly for learning and training purposes and personal projects.

https://redd.it/1ombw30
@r_devops

Lost in the journey

I'm working as a programmer since 1 year and a half, but lately the more i try to understand the more i get confused by the load of things there are and i question myself "why all of these? How can i improve knowing i'll never use these things on my own projects?".

In this 1,5 year i worked in two companies:
-one used old school programming: html+css+js+php all in the same file, no versioning, programming in production, no IDE and the client was at european level
-the second was hyper modern: python django+vue+hg+ide+ci/cd+super abstraction+proprietary models+docker+staging/prod and different servers


The first one was hard because it was difficult to find what to do and where, lost in 3/4k rows of files with everything mixed together.

But the second one is even harder because the abstraction level is so high that there is a model that does what you must do, but it's hidden somewhere in a combination of hundreds of imports and files everywhere and if you don't know these proprietary models you'll never understand what they do.

And this means zero creativity, everything is so abstract that even the smallest fix requires many steps of integration and you may miss something in the process..

So i'm here spending hours or even days to try to understand the flow, knowing that outside the work i cannot study these things and while i'm at work these things may be upgraded.. so everytime i program i feel like i'm moving super slowly, even the smallest fix requires hours and hours and without the certainity to do that right..

What should i do?
Thanks

https://redd.it/1omc654
@r_devops

How do you think working in ops has changed you as a person?

I am pondering this question myself and have no firm ideas yet, and thought the community might find it an interesting question

https://redd.it/1omdt9f
@r_devops

Need Advice !

Hi Folks,

Please take 2–3 minutes to read this — your advice would be truly appreciated.

I’m a 26-year-old professional seeking guidance. Please find my background below:

Experience: 3.9 years (MNC)
Certifications: 3x AWS
Skills: Kubernetes, Terraform, AWS, GitHub Actions, EKS, Docker, CI/CD

What I do in my Homelab:
I regularly practice deploying Flask applications on Docker and EKS containers, create Terraform modules, build GitHub Actions workflows, and work on Python automation projects. I also develop Terraform and EKS projects in my free time.

What I do in my current organization:

1. Handling repetitive ServiceNow tickets
2. Server patching (simple 2–3 step process)
3. Performing vulnerability remediation (manually installing updated software like 7-Zip, Notepad, etc.)
4. No exposure to Terraform, EKS management, or major incident handling (P1/P2). I’m in a comfort zone that doesn’t challenge me or contribute to my growth.


Looking for Devops Opportunities

I’m considering resigning from my current organization without having another offer in hand, as the current work environment feels stagnant and offers minimal learning opportunities.

From your perspective, would it be wise to take this step now? I’d appreciate your honest opinions and suggestions.

My financial situation is good 👍, but the only thing holding me back is the fear of not finding a job after resigning.

https://redd.it/1omfntj
@r_devops

Good source for DevOps fundamentals and terms?

Hello everyone,

I got a job as Machine Learning Engineer but have a background in Mechatronics/ Robotics. I did my practical thesis in ML development for industrial implementation.

Therefore I know how to build and train ML models, but I am not an software engineer.

Does someone have good resources for me? Or good roadmap to learn software engineering/devops fundamentals and terminology?
By the way I like structured sources 👌🏽

https://redd.it/1omf0ax
@r_devops