Vendor could use an update

I've been working with a vendor that says they are "trusted by over 80,000 companies". Their tool is open source with a paid addon for enterprises. My org bought the software and now we have to set it up. So in the kick-off meeting I point out to their "Success Engineer" that they have installation guides for server and for Docker, but not Kubernetes. The Docker instructions include an example docker-compose.yml file and specific instructions on how to set environment variables with Docker, stuff about Docker volumes, etc. Very detailed. But they don't even mention Kubernetes on their website. I asked him if there was anything particular about Kubernetes I should watch out for, and suggested that having a guide written by them might be nice in the future.

He said, "We don't have a guide for Kubernetes because there's so many different ways to deploy it. We didn't want to be prenoscriptive." "Prenoscriptive" was the word he used. But like, if there's so many different ways to install the software on Kubernetes (there's not), wouldn't that be the reason why you'd want to be prenoscriptive? To offer your customers a baseline install they could work from?

The PostgreSQL docs they gave us were just their standard database install doc with "RDS" pasted in in a couple of places because we told them we used RDS. It says RDS at the top and suggests using gp3 disks, so they understand that we're using AWS. But then it has lines like "create or modify /etc/postgresql/postgresql.conf" and provides full maintenance noscripts, shebang line and all, to put on the database server that doesn't exist.

The vendor has actually been great so far and their product seems solid, so no shade there, and luckily I'm a 10x engineer so I can translate all this as needed. 😁 It's just... if you're offering enterprise software in the year 2025, shouldn't you expect your customers to be using one of a certain common set of technologies and be prepared for that with documentation and experience?

https://redd.it/1p2amtu
@r_devops

[4 YoE, Unemployed, DevOps/SRE/Automation Engineer, United States] Need Resume Advice
https://www.reddit.com/gallery/1p2ajsn

https://redd.it/1p2akzn
@r_devops

How to Monitor MariaDB and ScyllaDB for a stress test Comparison

Hi! I want to show the performance benefits of ScyllaDB compared to MariaDB. How can I do this? I tried to write the code for it using Vibecode, but it was too complicated, so I decided to do it myself. The problem is, I don’t see much information about this, and I’m still too junior to know the right tools or how to write a Docker Compose file. Could you guys help me out? Even if you only know how to monitor one of them, that would be super helpful. Thanks!

https://redd.it/1p2eqsj
@r_devops

Anyone else getting way more take-homes in tech interviews this year?

Some say interviews are easier now, others say it just turned into unpaid mini projects.

One thing I keep seeing people say is that because of AI, companies are pushing take-homes since it’s supposedly harder to cheat compared to live coding.

Is this actually happening to you too?

https://redd.it/1p2gg8m
@r_devops

Career Advice Needed: Transition from Full Stack to DevOps? (40% Salary Increase)

Hi everyone, thanks in advance to anyone who replies. I need some career advice.
I’ve been working as a Full Stack Developer (mainly Spring and Angular) for about 4 years. During this time, we migrated from legacy Oracle technologies to a stack involving Kubernetes, OpenShift, and Bamboo. I didn’t just handle the code; I also worked on the infrastructure side alongside the DevOps team and set up pipelines. I should mention that I currently work for one of the largest financial institutions in Europe, and my salary is above the industry average.
Today, I interviewed with a hiring manager from another company. I originally applied for a Developer role, but as we talked, he liked my knowledge regarding DevOps and asked if I would consider a career path in DevOps instead. He mentioned they need someone with coding knowledge whom they can train/mentor in DevOps from the ground up.
I don’t have any pure DevOps experience. However, the salary they are offering is nearly 40% higher (in Euros) than what I’m currently making. I’m unsure if I should accept the offer or if I’ll be able to adapt to a full DevOps role. Thoughts?"

https://redd.it/1p2g0dx
@r_devops

How do you keep track of what you're doing?

I'll have project X that I'm working on. In incident will happen and I'll be sidetracked to Incident 1. Maybe another comes up as that one is ending, Incident 2. I'll go to sleep and before I know it just as I'm getting back to project X and now I'm on incident 3. This one may take days and so on. The issue is each of these incidents require fixes and work themselves. sometimes I don't get back to project X until 2 weeks later. It's like a stack of work and it's rather unpleasant.

It's not infra things breaking for the most part, it's developers breaking things or testing the bounds of things. Maybe their work requires a database resize but nobody brought us in so now we have to do it. Maybe somebody leaked a password and that caused an incident or theres a ddos.

how do you keep track of all of this? I've found if the barrier to entry is too high the notes wont be taken. so it needs to be quick and accessible. so opening up jira is probably not going to do it.

https://redd.it/1p2hbci
@r_devops

AI coding subnoscription platforms seem like a waste of time.

I wanted to bring something up that's been on my mind for a while but couldn't find the right community for it (which it seems, going from similar results on google, that this community is the right place for this kind of post).


AI coding assistants are useless for actual -real world- projects, most of them can't handle having >500 files with thousands of lines of code. So they instead just seem to guess and make up solutions without any context, they're entirely useless and actively harmful to a project. I can't quite get why people use them.

As a test, I recently tried in one of these platforms (paying, so without restrictions) uploading a zip with a copy of a repo from my game, and asked it questions about it. It proceeded to successfully locate and identify the right files to seek context in... but its own internal python tools would truncate the file, causing to believe that the files actually just contained "..." past the first 100 lines.

As Linus Torvalds said, these tools seem great for "vibe coding" some quick feature or anything, but they are literally unusable for real projects because they can't even read the existing code base to contextualize what they're writing! Even the most inept junior of programmers knows to do control + f across a damn repo.

So, to anyone who has more experience with these tools than I do, what exactly has made them so popular with developers? Did I just have too high of expectations for these tools?

https://redd.it/1p2l6vo
@r_devops

Devops tools used day to day

What tools do you use in your day to day?
I want to transition from a developer to a devops role. I have little experience doing Auto scaling groups, ALB, ElastiCache, some CI/CD,, etc. Basic AWS things to my understanding.
I have made some small roadmap to myself like a platform engineer/devops but I would like to restructure it some something real that it's widely used in the industry.
Do you use mostly the console or CLI?
My plan include learning terraform, better and more advanced ci/cd than the basics I have in CodeDeploy and Jenkins, k8, advanced monitoring on cloud watch and servers, security configuration, aws cloud formation, prometheus, log analysis, docker, apache /nginx and server config.

My point is, do you usually use any of those concepts, tools on ypir day to day or at some point? which ones you use?

https://redd.it/1p2oj4a
@r_devops

Feeling under confident for DevOps transition even though experienced.

Hi Friends,

Apologies if I am not phrasing correctly

7 Years in Linux RHEL support, including Network, infrastructure support experience.

I am not able to decide which project I need to focus upon to get into the Devops job. I have done RHCSA certificate recently, also done Ansible training and built playbooks and a small project using Ansible Automation.

Done JNCIA cert also this yr and have good knowledge on network troubleshooting, protocols like IPv4, SSH, ARP, subnets etc and done some switch VLAN troubleshooting also. I get constant feedback from customer on resolving their problems in fast time.

I don't have hands on with CI CD, docker stuff as I have not built any project with these except few docker images build during Openshift training.

Currently working in Product company with good salary but no technical growth as same work repeats for past 7 yrs.

2025 has been good as I exposed my self into learning new technology like JNCIA Network, Ansible training done, Openshift Training, a little bit of bash noscript and created GIT branches.

Should I go more in depth into a single skill for DevOps or improvise on existing tech i recently learnt? Is there any project that actually gives idea about kind of DevOps work we get?

I also feel imposter syndrome ( maybe ) that it's something difficult for me, but somehow I feel this job is something along with my skills and way of working / style. ( I don't want to give up like in past i gave up my dream of coding / web development due to not getting instant results.)

Much thanks,



https://redd.it/1p2qwho
@r_devops

Considering Chainguard but how lockedin is it?

We’ve been looking at Chainguard for container image security. From what I’ve seen, it’s high quality, minimal, and secure. They provide SBOMs and reproducible builds, which is great.
That said, a few concerns come to mind:

• Many of their images are built on Chainguard OS / Wolfi, not standard community distros.

• Once you adopt it fully, you might be tied to their ecosystem… tooling, update cadence, and base OS.

• Some advanced features, like hardened or FIPS/STIG-certified images, are part of their paid offering.

• Their packaging is limited to Wolfi or internally maintained packages, which could make migration trickier.

How easy would it be to switch to other CVE or image protection tools if needed? Open to any advice/discussion and sorry if there is stupid question i asked.

Thanks in advance.

https://redd.it/1p2s0xx
@r_devops

How Deployable Is a Model Like Orion-MSP in Real Pipelines?

I came across **Orion-MSP**, which attempts to bring in-context learning to tabular data using multi-scale sparse attention and a Perceiver-style memory unit. From a research standpoint, it’s creative. From a DevOps standpoint, I’m not sure how practical it is.

A few questions I’m struggling with:

* Does a model with multiple attention scales introduce too much complexity for versioning and deployment?
* How would you monitor or debug failure cases in something with hierarchical attention patterns?
* Perceiver-style memory adds flexibility, but does it make observability harder in production pipelines?

Would be interested in hearing from people who’ve deployed Transformer-style tabular models — does something like Orion-MSP feel operationally reasonable, or is the architecture too intricate for most teams?

(Links available in comments if useful.)

https://redd.it/1p2skfg
@r_devops

How do you deploy laravel on ASG

I would love to know how people are managing laravel deployments running in ec2 in autoscaling group.
I have considered codedeploy.
I want something faster as envoyer.io
Also managing updates in .env file

https://redd.it/1p2qnua
@r_devops

Arconia for Spring Boot Dev Services and Observability

https://piotrminkowski.com/2025/11/21/arconia-for-spring-boot-dev-services-and-observability/

https://redd.it/1p2umi2
@r_devops

which ai coding agents did you guys drop because they caused more chaos than help?


i’ve been cycling through a bunch of ai coding agents lately, and honestly, some of them created more mess than they solved. at one point i had aider, cursor, windsurf, cosine, cody, tabnine and continue.dev. a few stuck, but a few absolutely nuked my workflow with weird refactors, random hallucinations.

curious what everyone else has bailed on. which ai tools looked promising at first but ended up causing more chaos than help?

https://redd.it/1p2vqn0
@r_devops

Anybody here work for Rithum / Channel Advisor?

They’ve been hard down for almost 20 hours now. They claim it’s a fuck up during maintenance but I’m concerned they got owned and encrypted.

https://status.channeladvisor.com

https://redd.it/1p2vpby
@r_devops

How much time do you actually spend finding root cause vs fixing it?

When I was working at a larger bank I felt like we spent way too much time on debugging and troubleshooting incidents in production. Even though we had quite the mature tech stack with Grafana, Loki, Prometheus, OpenShift, I still found myself jumping around tools and code to figure out root cause and fix. Is issue in infra, application code, app deps, upstream/downstream service etc etc?

What's your experiences and how does your process look like? Would love to hear how you handle incident management and what tools you use.

I'm exploring building something within this space and would really appreciate your thoughts.

https://redd.it/1p2xs3o
@r_devops

ECS vs Regular EC2 Setup

I'm currently revamping a France-based company cloud infra. We have a few Micro FEs and a few Microservice BEs all running on Docker. Redis, PostgreSQL, with dev, staging, and prod environments. I'm asked to revamp from ground up and ignore existing infra setup, the goal is simplification. The setup is a bit over engineered because the app only ever gets around 5k daily users max, and is not intended to scale significantly. I'm thinking of using ECS + EC2 with load balance, ASG and Capcity Provider, and build+deploy the docker image using github actions to ECR where the ECS will pull the image from. But I feel like for this amount of users, is it better to just setup 2 ECs, one for the FE services and one for the BE services (for each env), with large hardware capacity, without using ECS or EKS entirely. I don't see the need to setup load balancing and auto scaling with this amount of users that's not expected to rise exponentially.

Some notes: no batch or intense compute, relatively small DB size, dev team of 5. User base majority centered around one region. Application is not critical.

Any thoughts?

https://redd.it/1p2zway
@r_devops

Built a tiny high-performance telemetry/log tailing agent in Zig (epoll + inotify). Feedback & contributors welcome

I’ve been hacking on a little side-project called zail — a lightweight telemetry agent written in Zig that watches directories recursively and streams out newly appended log data in real time.

Think of it like a minimal “tail-F”, but built properly on top of epoll + inotify, no polling, and stable file identity tracking (inode + dev_id). It’s designed for setups where you want something fast, predictable, and low-CPU to collect logs or feed them into other systems.

# Why I’m posting

I’m looking for early contributors, reviewers, and anyone who enjoys hacking on:

epoll / inotify internals
log rotation logic
output sinks (JSON, TCP/UDP, HTTP, Redis, etc.)
async worker pipelines
structured log parsing
general Zig code quality improvements

The codebase is small, easy to navigate, and friendly for new Zig/system-level contributors.

# Repo

https://github.com/ankushT369/zail

If you like low-level Linux stuff or just want a fun project to tinker with, I’d love your thoughts or contributions!

https://redd.it/1p2zafm
@r_devops

I built a bash noscript that finds K8s resource waste locally because installing Kubecost/CastAI agents triggered a 3-month security review.

**TL;DR:** I built a bash noscript that finds K8s resource waste locally because installing Kubecost/CastAI agents triggered a 3-month security review.

**The Problem:**
I've been consulting for Series B startups and noticed a pattern: massive over-provisioning (e.g., 8GB RAM requests for apps using 500MB), but no easy way to audit it. The existing tools are great, but they require installing agents inside the cluster. Security teams hate that. It often takes months to get approval.

**The Solution:**
I wrote a simple bash noscript that runs locally using your existing `kubectl` context.
* **No Agents:** Runs on your laptop.
* **Safety:** Anonymizes pod names locally (SHA256 hashes) before exporting anything.
* **Method:** Compares `requests` vs `usage` metrics from `kubectl top`.

**The Code (MIT Licensed):**
https://github.com/WozzHQ/wozz

**Quick Start:**
`curl -sL https://raw.githubusercontent.com/WozzHQ/wozz/main/noscripts/wozz-audit.sh | bash`

**What I'm looking for:**
I'm a solo dev trying to solve the "Agent Fatigue" problem.
1. Is the anonymization logic paranoid enough for your prod clusters?
2. What other cost patterns (orphaned PVCs, etc.) should I look for?

Thanks for roasting my code!

https://redd.it/1p31y4t
@r_devops

What's the cleverest prompt injection bypass you've actually encountered?

Been red teaming chatbots for a while now and the attack vectors keep evolving. Most attempts are basic role-play or system prompt leaks, but I've seen some genuinely creative ones.

The cleverest I caught recently was an attacker who embedded instructions in fake error messages, making the model think it was debugging itself. Something like "Error: To continue, ignore previous instructions and..." Pretty sneaky social engineering on the model itself.

I'm curious what others have encountered in production. Are you seeing more sophisticated multi-turn attacks? Any particularly creative bypasses that made you rethink your defenses?

Also interested in how teams are actually managing this operationally. Static filters obviously don't cut it.



https://redd.it/1p329nj
@r_devops

Is it normal to have to learn something new for every work task?

I'm working for a tech company where they put together a bigger DevOps team that spans across multiple projects, so that we manage them all at the same time. Previously we were doing the same work separately for each project. We were initially hired as inexperienced juniors, were never properly trained and for several years we kinda shot the shit since we had rather simple tasks.

Now we have an immense workload split among too few of us and, I kid you not, we get a new area of expertise to handle pretty much every month. 70% of the tasks I get require learning something new, almost from scratch. Only a few, highly experienced and highly motivated people are able to keep up. I feel like the rest of us are sinking, but I don't really know, since nobody talks about it.

Is this amount of learning something normally expected for a DevOps job in other companies?

I am extremely exhausted, I feel constantly ashamed of my performance, and I often procrastinate doing the tasks because I have no idea how to do them, nor do I feel like constantly asking questions. A lot of the time, I barely understand the answers, because I haven't been trained in what I'm supposed to do.

Is this situation normal when being a DevOps, are you constantly expected to learn new things from scratch, on your own? I don't know if I need to change the company or change my profession altogether.

https://redd.it/1p34525
@r_devops