Dear Tenable: Please get your shit together

The amount of time I have to spend talking to our internal compliance team and fixing your shitty audit files is too damned high. The bash noscript provided for a STIG audit check going out of it's way to look for port numbers to verify that a config file contains "\^Banner /etc issue.net" ... I'm sorry... Were you paying the person who wrote that by the character? Cause they shit out a turd that just makes my life miserable. Don't over complicate your damned checks.


Also whoever came up with the idea of putting bash noscripts in XML... please just... fire them. They're a horrible person. Or if it was a team effort, shit-can the lot of them. That whole idea is damn near a war-crime committed on the entirety of the infosec community.


Signed by a person who just wants his pipelines to stop failing because of Tenable being ass.

https://redd.it/1pudn1w
@r_devops

Why is sms so hard now

We’re trying to fix tier 0 alerts because slack is too noisy at 3am, but the carrier red tape for sms is insane. our "low volume" 10dlc campaigns keep getting stuck in manual review for weeks.

I’m testing an api that handles the compliance on its end so we can just pipe alerts through instantly.

How are you guys routing priority alerts to your team in 2026? are you fighting carriers or looking for a way to outsource the compliance?

https://redd.it/1puffay
@r_devops

My learning path stopped being linear

I'm currently at a stage where my DevOps learning is no longer a "pick a tool → master it → move on" pattern. Early in my career, progress was obvious. Learn Docker. Learn Terraform. Improve CI/CD skills. Handle on-call duties confidently. Each step had clear signals that you were "leveling up." But the longer I've been in this industry, the weaker those signals have become.

Most of my growth now comes from ambiguous situations. Design reviews with unclear requirements. Stakeholders changing priorities mid-quarter. Post-mortems where no individual mistakes yet the system still crashed. These moments force you to articulate the reasons behind your choices.

This is also where AI is starting to appear in my workflow; I use it to help me with reviews.Because more and more situations aren't simply solved by mastering a skill. It ultimately comes down to soft skills. I'm becoming the kind of manager I used to dislike, haha. I interact with more people than I use tools every day. I'm currently preparing for a job change, and I've noticed my preparation process is different this time. While I still use resources like Indeed or IQB interview question banks and GPT or Beyz coding assistant for mock interviews, the goal this time is to slow down and make my reasoning process clearer. AI can speed up execution, but I feel that senior engineers need slower, clearer thinking for growth. This isn't something that can be easily quantified by how many problems you've solved or how many projects you've led. Even the feedback is much more ambiguous than learning a new tool.

I'm still unsure what the "correct" learning path looks like at this stage. It feels like becoming a sponge absorbing and disseminating information. The influencing factors and things to balance have become much more numerous than before. Where are the boundaries of this career development/promotion noscript? I recently saw an interesting analogy: we are a collection of cells constantly controlling the influx and efflux of new and old matter. So how do we determine "new" and "old" in our growth?

https://redd.it/1puffao
@r_devops

Help with OS Orchestration

I’m interested in building a malware analysis sandbox. For each analysis run, I need to automatically provision a fresh virtual machine, execute a malware sample, collect results, and then fully destroy the environment. The sandbox should support multiple operating systems such as Windows, Linux, macOS, and Android.

My main focus is on the orchestration layer, specifically, which technologies or tech stacks can be used to automate the deployment, execution, isolation, and teardown of these environments efficiently and securely.

https://redd.it/1pugxh0
@r_devops

Finally solved my "which port is this app on" problem with a simple Caddy trick

If you work on multiple projects (or a monorepo), you know the pain:
- "Was the API on 4323 or 4321?"
- "Is the marketing site 5400 or 5450?"
- opens 5 browser tabs with different ports
- checks package.json for the 10th time

I finally got tired of this and set up Caddy with wildcard localhost routing. Now I just type my-app.dev.localhost and I'm there. No ports. Real HTTPS. Green padlock.

The key insight that took me a few failed attempts: \*.localhost doesn't work (browsers reject the wildcard cert), but \*.dev.localhost does. Adding one subdomain level makes it work.



Basic setup:

    *.dev.localhost {
          tls internal
    
           host my-api.dev.localhost
          handle  {
              reverse_proxy localhost:4323
          }
    
           host my-app.dev.localhost
          handle  {
              reverse_proxy localhost:5400
          }
    
          handle {
              respond "Not configured" 404
          }
      }

Run caddy trust once, then sudo caddy start --config Caddyfile. Done.

Bonus: also solves OAuth callback URL issues since your local URLs look like production (https://my-app.dev.localhost/auth/callback).



I wrote up the full thing with gotchas and a dev dashboard if anyone wants: https://thesashka.com/blog/posts/technical/taming-localhost-ports-with-caddy/

https://redd.it/1puid36
@r_devops

Feeling Like an Outsider a Few Months into Job

Hey everyone!

I'm a relatively new to my job, just a few months full time. I did intern with my team before, so I knew what to expect going in.

During my internship, I felt so incredibly confused the entire time. During the time between my internship and starting full time, I did some personal projects and filled in some gaps with containerization and other things.
Now that I am full time, I feel like I somewhat know what I'm doing, but I think what gets me is that my team is able to come up with new things to automate, find gaps in things that I don't see, and come up with better solutions with new technologies. I work for a good company, and my team is really smart, so I know if they are willing to have me, I must be okay.

I think what gets me sometimes is the vast amount of knowledge about tons of different things being in DevOps, and not having much of a background in anything else. There is so much to learn - and only over the past few months have I REALLY worked with RHEL, containerization, CI/CD, AWS, and of course our systems we have created. This, and sometimes I get so invested in the tasks themselves, that I can look over small details in PRs, or forgetting to keep up with putting in progress/closing out my Jira stories.

My team is also extremely organized, and although I find myself to be a very organized person, I feel like I make so many small mistakes during my work. I know I'm only a few months in, but things still take me time and even then, there are so many comments on my PRs. I want to be really good at this, and I really do enjoy it.

If anyone has any tips as far as organization, dealing with imposter syndrome in this field, and/or gaining confidence in my skills and knowledge, I would love to hear it.

Thank you!



https://redd.it/1puc8te
@r_devops

How do you prevent PowerShell noscripts from turning into a maintenance nightmare?

In many DevOps teams, PowerShell noscripts start as quick fixes for specific issues, but over time more noscripts get added, patched, or duplicated until they become hard to maintain and reason about. I’m curious how teams handle this at scale: how do you keep PowerShell noscripts organized, maintainable, and clean as they pile up? Do you eventually turn them into proper modules or tools, enforce standards through CI/automation, or replace them with something else altogether? Interested in hearing what’s actually worked in real-world environments.


https://redd.it/1puabzv
@r_devops

Help resolving connection refused between two sites cert manager

I have 3 nodes in one site and one on another it has only private ips and 3nodes is under same VIP i have done kubeadm init with vip and connected 3 node as control plane one in other location has worker

Worker to this 3 node has icmp and tcp connection all port open between this two

I deployed cert manager in worker 3
When i try applying an yaml it says https://svc:443 connection refused

I have all port opens i did upto my knowledge

Can you help me resolve this issue
Im stuck with this issue past 3 days

https://redd.it/1pugpce
@r_devops

EnvX-UI: Local, Encrypted & Editable .env

EnvX-UI was built to manage and edit .env files across multiple projects, including encrypted ones. A clean, intuitive interface for developers who need secure and centralized environment variable management.


https://github.com/litepacks/envx-ui

https://redd.it/1pulboq
@r_devops

Got actions/flows you swear by ?

Just wondering what people have defaults when they start a repo ?

We have linters and code stylers on production code repos
Just wondering is there others out there that may be handy ?

https://redd.it/1punbp6
@r_devops

State backend on AWS

How do you deal with the “chicken and egg” situation when creating backend for your infra on AWS? I’ve seen people do a bootstrap directory that deploys s3 and dynamodb table, and I have grown accustomed to it as well. I’m wondering how others approach it especially with dynamodb being depreciated for statelocking.

https://redd.it/1pum2l9
@r_devops

About stack in 2026

i have 4 years of experience job with full stack development in php,node,python,mysql,mongodb,redist and vue and react frontend framework.

i have knowledge in linux, nginx, apache, aws, docker, terraform, ansible, github and gitlab pipelines, a little bit about prometheus and grafana.

I have done some infra deploy in aws and digital ocean, but i feel im not enough yet.

Next month i will have a interview by a devops engineer mid/senior job, but i really want to this do right.

What stack do you guys recommend me to learn or revise to do well in the interview?

i really love do devops engineer much more than do code, and i really want migrate to this job, but feel very insecure because its a mid/senior job, i are have indicate to this job by a friend, that friend which taught me a lot about devops.

https://redd.it/1pult38
@r_devops

Zero-trust inside an early LLM platform: did you implement it from day one?

We’re building an internal LLM platform and compared two access models:

Option A - strict zero-trust between microservices (mTLS/JWT per call, sidecars, IdP).
Option B - a trusted boundary at the Docker network level (no per-request auth inside, strong boundary controls)

Current choice: Option B for the MVP. Context: single operator domain, no external system callers to the LLM service.

Why now
• Lower inference latency, faster delivery, lower integration cost

Main risk
• Lateral movement if a node inside the boundary is compromised

Compensators we use
• Network isolation/firewall, minimal images, read-only secrets with rotation, CI dependency scans, centralized logs/alerts, audit of outbound calls to external LLM APIs, isolated job containers without internal network

What we actually measure
• LLM service latency under load
• Secret rotation cadence
• Vulnerability scan score/drift
• Anomaly rate on outbound calls

Switch criteria to zero-trust later
• External integrations, multi-tenant mode, third-party operators/contractors, regulatory pressure

Questions to the community

1. On small teams: which mTLS/JWT pattern kept ops simple enough (service mesh vs per-service libs)?
2. What was the real latency/complexity tax you observed when going zero-trust inside the boundary?
3. Any “gotchas” with token management between short-lived jobs/containers?

https://redd.it/1puloxu
@r_devops

Where do you start when automating things for a series-A/B startup, low headcount?

Hey all

I’m curious how others approach this:

I’m working with a startup, they’re 2 years in and have some solid customers, and a dev team of about 8.

Software assets

\- spring boot/react typical web app for a UI, a bunch of LLM interactions, and data management

\- admin app where prompt engineers work with poorly/manual git versioned workflow

Testing

\- no unit

\- no integration

\- limited selenium coming online now

\- thousands of manual test cases, regression takes 5 days (!)

Deploy:

\- everything is non-CI, some shell noscripts

\- liquibase rolls into schema JARs

Infra:

\- stale terraform, likely significant config drift

Envs:

\- AWS

\- dev/qa/preprod/prod, but also a handful of “prod v1.x” instances where customers are being migrated from

Git:

\- trunk based, release branches, feature branches

Your reply could be from any experience, I’m just setting a little bit of level here so that we’re on the same page in terms of where they are in dev maturity. I have my thoughts, too, and a plan, and im curious how other folks see it, always something to learn.

Cheers!

https://redd.it/1pus3sb
@r_devops

Google Cloud CDN vs Cloudfront help me decide?

Hey guys
I'm building a video heavy app with long form stuff like 30 mins each and trying to figure out which CDN to use as a backup.
​I use Cloudflare as my main right now but after the recent outages I really need a solid secondary. I'm torn between Google Cloud CDN and AWS Cloudfront.
​GCP seems faster because of their private fiber network but AWS is just everywhere. For anyone who actually used both for video streaming or large files which one was less of a headache to set up? And how is the caching for long videos?
​Not really looking for marketing fluff just want to know from someone who’s been in the trenches which one is more reliable when things go south?
​Cheers

https://redd.it/1puutzv
@r_devops

what does a DevOps engineer actually do day-to-day?

Hi everyone,

I’m currently getting into DevOps and had a few beginner questions that I’ve been thinking about.

From a real-world perspective, what does a DevOps engineer usually do on a daily basis?
Do you mostly write noscripts and automation, or do you also write application code?

Another thing I’m curious about is command usage. As a beginner, it feels overwhelming to remember so many commands and configurations. In real jobs, do engineers memorize most commands, or is it normal to rely on documentation, notes, and previously written noscripts?

Also, how different is interview expectation compared to actual on-the-job work?
I’m asking this genuinely to understand what I should focus on while learning.

https://redd.it/1puwcya
@r_devops

A little cookiecutter noscript to add logging and redirect to circusd

I've recently set up a home server slash IoT hub (router with three wifi access points, zigbee server, file server, a bunch of little web servre apps) and ended up using circusd. Mostly to keep services nicely separate from one another and systemd. It lets me look at the pstree for an entire service, watch for restarts and look at all the logs together.

I have a pattern where each service gets its own user with files for running circus, rsyslog etc. I've done this enough times that I've set up a little cookiecutter noscript to set up the user and I thought I might as well share this here. It's very much tuned for the "home network" setting (e.g. I am publishing services on mdns using avahi etc). Also people probably want autoscaling container magic for things used in anger, but works pretty well for single user stuff.

`https://github.com/talwrii/cookiecutter-circus`

https://redd.it/1puyj6m
@r_devops

Why am i getting rejected from internships?

Hi there DevOps community
This year am looking for an internship, so i apply as a student should do, there r actually a lot of offres, and i know where am applying there aren't that many DevOps students, so i was expecting to get responses quickly, but for some reason i get rejected right away
There is a pattern that i noticed tho, big companies take a looong time and than they rejected me, but smaller companies take medium time and they accept Moving to the next stage
My resume is strong, and the few other DevOps students are also facing the same issues
Does anyone have an idea on what's happening?

https://redd.it/1puyjs2
@r_devops

How are you handling CI/CD for AI Agents?

I’m a dev working on a tool to help audit and deploy AI agents. I realized that standard CI/CD breaks down with agents because a code rollback doesn't necessarily fix a "behavior" regression caused by a prompt drift or model update. If you are deploying LLMs in production: Do you treat prompts as config files (Helm charts/Env vars) or code? If an agent starts hallucinating in prod, does your current pipeline allow you to "hot swap" the prompt version without a full redeploy?

https://redd.it/1pv11x0
@r_devops

Which AWS consulting partners in Europe are actually worth it? Top 10

Let’s be honest, browsing the AWS Partner Network directory feels like trying to find a needle in a haystack where every needle claims to be Premier. Everyone has badges, everyone promises seamless digital transformation, but how many actually deliver when production is on fire? Finding top AWS consultants who don't just bill you for hours but actually fix your cloud infrastructure is harder than it looks.

I’ve dealt with enough agencies to know that a shiny sales deck doesn't equal clean code. So this isn't a ranked leaderboard, but rather a curated list of companies that actually bring value to the table, depending on whether you need AWS managed services or deep engineering muscle:

1. Nordcloud: They are essentially the IBM of the cloud world in Europe now. If you are a massive enterprise needing standardized compliance and have the budget to match, they are a solid bet.
2. Beetroot: A strong choice if you need AWS certified developers but want them embedded in your team rather than just consulting from the outside. They specialize in building dedicated teams and handling complex DevOps pipelines. Their focus is big on the "human" side of tech, which helps when retention matters.
3. DoiT International: Go to them if your bill is bleeding you dry. They are absolute wizards at cost optimization and reselling, though less focused on building custom apps from scratch.
4. The Scale Factory: Great for SaaS businesses. They understand scalability and don't just throw hardware at problems.
5. Storm Reply: Very strong on the technical execution side, particularly in Germany and Italy. They handle heavy IoT and industrial cloud projects well.
6. AllCloud: If you are stuck between Salesforce and AWS, these guys bridge that gap better than most.
7. tecRacer: Another heavy hitter in the DACH region. Their training is top-tier, which usually translates to competent consultants.
8. SoftwareOne: Good for licensing and general management, though sometimes feels a bit corporate for agile startups.
9. Contino: Excellent for the transformation culture. They focus heavily on cloud-native adoption rather than just "lift and shift."
10. Caylent: While they have a heavy US presence, their European operations are growing and they are deep into AWS Lambda and serverless architectures.

When you interview these firms, ask about their DevOps culture. Do they automate security checks? Do they use Terraform or CloudFormation? If they stare blankly, run. You want partners who push for serverless where it saves money and containers where it makes sense, not just whatever is easiest for them to bill. If you just need hands, standard outsourcing works. But for architecture, you need top AWS consultants who will challenge your bad ideas. The best cloud migration services often involve telling the client that their legacy app shouldn't be migrated as-is. It makes a massive difference in the long run.

https://redd.it/1puy3t4
@r_devops

Vagrant SSH CTRL C Bug Workaround - Decoding DevOps

Hi everyone!

I'm new in my DevOps journey, following a Udemy course named Decoding DevOps, and for now I'm liking it a lot, the only thing that was quite annoying is that the vagrant ssh command would exit the ssh client whenever you sent a CTRL+C, I couldn't find a way around it apart from using the normal SSH client through your Git BASH, so I just made a simple tidy noscript that automatically gets all the info needed from the VM and creates an alias for simple ssh connecting. Here is my repo, it's the first time I'm doing something like this, I know its really simple but tbh having it work on my end made me very happy and I want to just share this somewhere.

https://github.com/jovanjungic/vssh-sync

https://redd.it/1puxrzo
@r_devops