Game developing

If you’re working on a game but don’t have the skills to make it yet is it better to focus on writing down all your ideas for now?


https://redd.it/1oqajrx
@r_devops

Alternate to Chainguard libraries for Python

I recently came across this blog by Chainguard: Chainguard Libraries for Python Overview.

As both a developer and security professional I really appreciate artifact repositories that provide fully secured libraries with proper attestations, provenance and SBOMs. This significantly reduces the burden on security teams to remediate critical-to-low severity vulnerabilities in every library in every sprint or audit or maybe regularly

I've experienced this pain firsthand tbh so right now, I pull dependencies from PyPI and whenever a supply chain attack occurs and then I have to comb through entire SBOMs to identify affected packages and determine appropriate remediations. I need to assess whether the vulnerable dependencies actually pose a risk to my environment or if they just require minor upgrades for low-severity CVEs or version bumps. This becomes incredibly frustrating for both developers and security professionals.

Also i have observed a very very common pattern i.e., developers pull dependencies from global repositories like NPM and PyPI then either forget to upgrade them or face situations where packages are so tightly coupled that upgrading requires massive codebase changes often because newer versions introduce breaking changes or cause build failures.

Chainguard Libraries for Python address these issues by shipping packages securely with proper attestations and provenance. Their Python images are CVE-free, and their patching process is streamlined. My Question is I'm looking for less expensive or open-source alternatives to Chainguard Libraries for Python that I can implement for my team (especially python developers) and use to benchmark our current SCA process.

Does anyone have recommendations or resources for open-source alternatives that provide similar security guarantees?

https://redd.it/1oqcomb
@r_devops

Any warp alternative?

I have been using warp for a year now and and for $20 a month I used to get 2500 AI credits that used to be enough for me but now they decide to go goblin mode and for $20 a month they give 1500 credits and extra 1000 credits cost extra $20. And I fell the credits burn faster too, so can you guys suggest me a good alternative?

https://redd.it/1oqedgk
@r_devops

Does anyone integrate real exploit intelligence into their container security strategy?

We're drowning in CVE noise across our container fleet. Getting alerts on thousands of vulns but most aren't actively exploited in the wild.

Looking for approaches that prioritize based on actual exploit activity rather than just CVSS scores. Are teams using threat intel feeds, CISA KEV, or other sources to filter what actually needs immediate attention?

Our security team wants everything patched yesterday but engineering bandwidth is finite. Need to focus on what's actually being weaponized.

What's worked for you?



https://redd.it/1oqbsfz
@r_devops

System design interviews for SRE prep help

Hi All,


I have an upcoming system design interview which is based on SRE and I'm really struggling to prepare on it. There are so many resources out there that I have used like hello interview previously but they have absolutely zero on SRE. I've been informed this is a system design prompt on cloud agnostic architecture and I have no idea if that means I will not only do the traditional system design along with doing the cloud infra e.g. no more of that whiteboarding an API Gateway/Load Balancer in the same box, now they absolutely must be separated with the flow clearly explained - or if now I basically put the actual service in a similar little box whilst drafting the cloud architecture around it.

Has anyone had anything similar? Any resources for this?

https://redd.it/1oqgilr
@r_devops

SRE SE Interview at Google - Help Appreciated

# I got a phone screen in few weeks time, and it is a practical coding/noscripting round. Anyone here interviewed for this role?

Prep guide does mention it’s not algorithmically complex, but I’ll need familiarity with basic DSA like hash tables, trees, recursion and linked lists

If anyone interviewed for SE SRE, can you share how you prepped for this round? Is there any problem-set that i can look at online to practice such questions? I tried looking online, but very limited info for SE role.

https://redd.it/1oqfod1
@r_devops

Experimenting with AI for sprint management?

Has anyone tried using AI tools to help with sprint planning, retrospectives, or other agile ceremonies? Most tools just seem like glorified assistants but wondering if anyone's found something actually useful.

https://redd.it/1oqdvqy
@r_devops

Struggling to connect AWS App Runner to RDS in multi-environment CDK setup (dev/prod isolation, VPC connector, Parameter Store confusion)

I’m trying to build a clean AWS setup with FastAPI on App Runner and Postgres on RDS, both provisioned via CDK.

It all works locally, and even deploys fine to App Runner.

I’ve got:

* `CoolStartupInfra-dev` → RDS + VPC
* `CoolStartupInfra-prod` → RDS + VPC
* `coolstartup-api-core-dev` and `coolstartup-api-core-prod` App Runner services

I get that it needs a VPC connector, but I’m confused about how this should work long-term with multiple environments.

What’s the right pattern here?


Should App Runner import the VPC and DB directly from the core stack, or read everything from Parameter Store?


Do I make a connector per environment?


And how do people normally guarantee “dev talks only to dev DB” in practice?

Would really appreciate if someone could share how they structure this properly - I feel like I’m missing the mental model for how "App Runner ↔ RDS" isolation is meant to fit together.

https://redd.it/1oqjrq7
@r_devops

Email Header Injection: Turning Contact Forms into Spam Cannons 📧

https://instatunnel.my/blog/email-header-injection-turning-contact-forms-into-spam-cannons

https://redd.it/1oqlody
@r_devops

Azure pipeline limitations DockerCompose@1

Folks, I was trying to build image for a specific service of my compose file but I unable to do with pipeline. I found only below from azure doc, why it is there for only run? not for build?

serviceName \- Service Name
string. Required when action = Run a specific service.

https://redd.it/1oqniv9
@r_devops

How do you track if code quality is actually improving?

We’ve been fixing a lot of tech debt but it’s hard to tell if things are getting better. We use a few linters, but there’s no clear trend line or score.
Would love a way to visualize progress over time, not just see today’s issues.

https://redd.it/1oqqcsv
@r_devops

How to Post CodeQL Analysis Results (High/Critical Counts + Details) as a Comment on a GitHub Pull Request?


I'm working with a custom-built CodeQL GitHub Actions workflow, and I want to automatically push the analysis results directly into a comment on the pull request. Specifically, I'd like to include things like the count of high and critical severity issues, along with some details about them (e.g., denoscriptions, locations, etc.).

I need them visible in the PR for easier review. Has anyone done something similar? Maybe by parsing the SARIF file and using the GitHub API to post a comment?

Any step-by-step guidance, workflow YAML snippets, or recommended actions/tools would be awesome. Thanks in advance!

https://redd.it/1oqshfj
@r_devops

Machine learning research internship

For my career and for future internships as a CS/math student at a top 20 University, how competitive is a machine learning research internship at a good European University? I have an opportunity to spend 3 months at this University (different continent) and work on implementing cutting edge information retrieval and NLP models/methods. Would this experience make me competitive for future internships or is it pretty standard? I am just trying to get this jist of its significance seeing that I’ll be spending a substantial amount of time there next year.

https://redd.it/1oqtbmo
@r_devops

Do you use containers for local development or still stick to VMs?

I’ve been moving my workflow toward Docker and Podman for local dev, and it’s been great lightweight, fast, and easy to replicate environments.
But I’ve seen people say VMs are still better for full OS-level isolation and reproducibility.
If you’re doing Linux development, what’s your current setup containers, VMs, or bare metal?

https://redd.it/1oqw1cq
@r_devops

Cutting down on TAC tickets

Looking for opinions on a topic of TAC support.

Having been on the both sides of the issue (both as tech support and admin) - I am a bit aware know how slow and sometimes unprofessional it can get.

Not really because TAC or admins are not knowledgeable - there is not enough time to be knowledgeable due to repetitiveness and constantly growing amount of information that has to be expedited to customers/users.

Sprinkle into it the fact, that even internally - you don’t have enough info. Or it’s structured in a way that makes you question how this all been holding up in the first place.

Average engineer gets 10+ calls per day +a certain amount of tickets that are more or less proportionate to the amount of calls. Some of these calls are expectingly easy, some can take a crazy amount of time to figure out.

And sometimes you have to lab the setup, look for similar issues while having another customer waiting for you to reply. It literally takes days due to simple tasks just repeating.

So I started looking for a way to cut down on this repetitive bureaucratic idiocy and cut down on resolving tac tickets using AI.

For two reasons:

1. In critical scenario it’s almost impossible to get the right guy on the phone. I remember getting a call once from some sort of school or other educational facility - their certificate authentication was failing for everyone and system administrator was on vacation. As L1 - I was hella lucky to be familiar with setup (ms ca -> fortiauth as sub-ca -> 802.11x with certs).

Imagine some L1 who just got out of uni and gets on a call like that. No amount of theoretical knowledge will prepare them for the pressure of 10 people staring at their avatar in GoToMeeting, being at a complete loss and thinking your are their only chance to make it work. That leads us to reason 2.

2. It will free up time for engineers to actually learn the product. Enormous amounts of best practices depends on some person just knowing a certain combination of toggles which is not in the docs.

That would free up their time to get to know the product and be actual tech support. I might be missing a certain angle here so please feel free to critique.

That’s is how i came with question - how can an AI solve all that for folks who are in similar context?

Not like - “do stuff for me and we will see”. Use it for actual assistance - ask it questions, help inspect devices, configure them. So human would still be the one making decisions but AI doing all the grunt work?

I’m saying it because I refuse to believe that simple log analysis should take days to complete.

So what’s your experience guys? How long on average it takes to deal with TAC? Is it different per product/vendor?

Share your thoughts, let’s find a consensus!

https://redd.it/1or13mz
@r_devops

I built sbsh to keep my team’s terminal environments reproducible across Kubernetes, Terraform, and CI setups

I have been working on a small open-source tool called sbsh that makes terminal sessions persistent, reproducible, and shareable.

Repo: github.com/eminwux/sbsh

It started from a simple pain point: every engineer on a team ends up with slightly different local setups, environment variables, and shell aliases for things like Kubernetes clusters or Terraform workspaces.

With sbsh, you can define those environments declaratively in YAML, including variables, working directory, hooks, prompt color, and safeguards.

Then anyone can run the same terminal session safely and identically. No more “works on my laptop” when running terraform plan or kubectl apply.

Here is an example for Kubernetes: docs/profiles/k8s-default.yaml

apiVersion: sbsh/v1beta1
kind: TerminalProfile
metadata:
name: k8s-default
spec:
runTarget: local
restartPolicy: restart-on-error
shell:
cwd: "~/projects"
cmd: /bin/bash
cmdArgs:
env:
KUBECONF: "$HOME/.kube/config"
KUBECONTEXT: default
KUBENAMESPACE: default
HISTSIZE: "5000"
prompt: '"[\e1;31m\sbsh($SBSHTERMPROFILE/$SBSHTERMID) [\e1;32m\\u@\h[\e0m\:\w\$ "'
stages:
onInit:
- noscript: kubectl config use-context $KUBECONTEXT
- noscript: kubectl config get-contexts
postAttach:
- noscript: kubectl get ns
- noscript: kubectl -n $KUBENAMESPACE get pods

Here's a brief demo:

sbsh - kubernetes profile demo

You can also define profiles for Terraform, Docker, or even attach directly to Kubernetes pods.

Terminal sessions can be detached, reattached, listed, and logged, similar to tmux but focused on reproducible DevOps environments instead of window layouts.

Profile examples: docs/profiles

I would really appreciate any feedback, especially from people who manage multiple clusters or Terraform workspaces.

I am genuinely looking for feedback from people who deal with this kind of setup, and any thoughts or suggestions would be very much appreciated.

https://redd.it/1or36aw
@r_devops

If teams moved to “apps not VMs” for ML dev, what might actually change for ops?

Exploring a potential shift in how ML development environments are managed. Instead of giving each engineer a full VM or desktop, the idea is that every GUI tool (Jupyter, VS Code, labeling apps) would run as its own container and stream directly to the browser. No desktops, no VDI layer. Compute would be pooled, golden images would define standard environments, and the model would stay cloud-agnostic across Kubernetes clusters.

A few things I am trying to anticipate:

* Would environment drift and “works on my machine” actually decrease once each tool runs in isolation?
* Where might operational toil move next - image lifecycle management, stateful storage, or session orchestration?
* What policies would make sense to control costs, such as idle timeouts, per-user quotas, or scheduled teardown of inactive sessions?
* What metrics would be worth instrumenting on day one - cold start latency, cost per active user, GPU-hour distribution, or utilization of pooled nodes?
* If this model scales, what parts of CI/CD or access control might need to evolve?

Not pitching anything. Just thinking ahead about how this kind of setup could reshape the DevOps workflow in real teams.

https://redd.it/1or6lal
@r_devops

Retraining prompt injection classifiers for every new jailbreak is impossible

Our team is burning out retraining models every time a new jailbreak drops. We went from monthly retrains to weekly, now it's almost daily with all the creative bypasses hitting production. The eval pipeline alone takes 6 hours, then there's data labeling, hyperparameter tuning, and deployment testing.

Anyone found a better approach? We've tried ensemble methods and rule-based fallbacks but coverage gaps keep appearing. Thinking about switching to more dynamic detection but worried about latency.

https://redd.it/1orc5kb
@r_devops

A playlist on docker which will make your skilled enough to make your own container

I have created a docker internals playlist of 3 videos.

In the first video you will learn core concepts: like internals of docker, binaries, filesystems, what’s inside an image ? , what’s not inside an image ?, how image is executed in a separate environment in a host, linux namespaces and cgroups.

In the second one i have provided a walkthrough video where you can see and learn how you can implement your own custom container from scratch, a git link for code is also in the denoscription.

In the third and last video there are answers of some questions and some topics like mount, etc skipped in video 1 for not making it more complex for newcomers.

After this learning experience you will be able to understand and fix production level issues by thinking in terms of first principles because you will know docker is just linux managed to run separate binaries.
I was also able to understand and develop interest in docker internals after handling and deep diving into many of production issues in Kubernetes clusters. For a good backend engineer these learnings are must.

Docker INTERNALS
https://www.youtube.com/playlist?list=PLyAwYymvxZNhuiZ7F_BCjZbWvmDBtVGXa

https://redd.it/1orelme
@r_devops

Unicode Normalization Attacks: When "admin" ≠ "admin" 🔤

https://instatunnel.my/blog/unicode-normalization-attacks-when-admin-admin

https://redd.it/1orfljl
@r_devops

OpenSource work recommendations to get into devops?

Have 5YOE mostly as backend developer, with 3 years IAM team at big company (interviewers tend to ask mostly about this).

Recently got AWS Solutions Architect Professional which was super hard, though IAM was quite a bit easier since I've seen quite a few of the architectures while studying that portion of the exam. Before I got the SAP, I had SAA and many interviews I got were CI/CD roles which I bombed. When I got the SAP, I got a handful of interviews right away, none of which were related to AWS.

I don't really want to get the AWS DevOps Pro cert as I heard they use Cloudformation which most companies don't use. Also don't want to have to renew another cert in 3 years (SAP was the only one I wanted).

Anyways, I'm currently doing some open source work for aws-terraform-modules to get familiarized with IaC. Suprisingly, tf seems super simple. Maybe it's the act of deploying resources with no errors which is the key.

So basically, am I on the right track? Should I learn Ansible? Swagger? etc.
Did a few personal projects on Github, but I doubt that will wow employers unless I grind out something original.

Here's my resume btw: https://imgur.com/a/Iy2QNv6

https://redd.it/1org8l4
@r_devops