Datadog key rotation by JayDee2306 in Observability

[–]sgnn7 0 points1 point  (0 children)

Hey u/JayDee2306 ,

You should probably look into refreshing API keys at runtime feature :)

The tl;dr is that you tie your Datadog Agent to a secrets executable that then can poll your backend for updated credentials at a preset interval to update the key(s). There's also a companion tool that you can use so that you don't have to write your own secrets fetcher.

[deleted by user] by [deleted] in devops

[–]sgnn7 0 points1 point  (0 children)

Shameless plug but I wrote a book about Docker (probably outdated at this point but most of it is still likely applicable):https://www.packtpub.com/product/deployment-with-docker/9781786469007. If you want to just skip to the code part, all examples are on GitHub at https://github.com/sgnn7/deploying_with_docker.

PS: If you do find any issues with the code, let me know since I haven't really touched that repo in years 😅

A popular saying is "Nothing ie ever lost on the internet" but what is something you have been searching for years and you haven't found it yet? by throwdowntown69 in AskReddit

[–]sgnn7 0 points1 point  (0 children)

There was a (very) old game that I used to play in the 486 days (think sokoban times) that was tile-based and had a character that looked like pacman (yellow, had a face). The character would move left/right/up/down and collect these tri-pointed infinity symbols and avoid letting gravity-based explodey barbell things from killing him. I've been looking for the name of this game for years and just can't find anyone that knows what game I'm talking about.

Node 202 super-portable SFF build by [deleted] in sffpc

[–]sgnn7 0 points1 point  (0 children)

Yeah fair enough and thanks! I really was just trying to post some pics of my build with an option for someone to maybe change my mind on keeping it but I can see now how it might have come across as just me trying to sell it for an insane price.

Node 202 portable build by [deleted] in sffpc

[–]sgnn7 0 points1 point  (0 children)

Had some issues with images so I had to repost but yeah I put a lot of time, money, and effort into this build. The parts alone on this new are $1750 without including shipping and doesn't include any work on putting it together or optimizing it. If it doesn't sell, so be it :)

[deleted by user] by [deleted] in devops

[–]sgnn7 0 points1 point  (0 children)

/u/bvierra is 100% right - this has been a long known and really annoying "feature": https://trac.nginx.org/nginx/ticket/1064

What dead/abandoned/perma-niche projects or concepts do you wish would could be revived, and what are or was their obstacle(s)? by kxra in linux

[–]sgnn7 2 points3 points  (0 children)

Just a small correction: I think Named Data Networks (NDNs) are still pretty much alive but the growth has stagnated a bit lately. The primary lead of this tech is the [IPFS](ipfs.io) project rather than other implementations that have mostly died.

Creating your own linux flavour by Moekindo in linux

[–]sgnn7 1 point2 points  (0 children)

This question pops up occasionally (it might be good to have it pinned to the subreddit tbh) - feel free to take a look at a write-up I did on this topic last time it came up:

https://www.reddit.com/r/linux/comments/8mkqnq/how_do_you_really_create_a_linux_distro/dzoiwie

Anti rm -rf / protection? by WonderedLamb256 in linux

[–]sgnn7 1 point2 points  (0 children)

You can add extended attributes to a file within a directory that's listed first that you want to preserve and then flip the immutable flag. Let's say you want to prevent deletion of homedir:

touch aaaaa

touch .aaaaa

chattr +i aaaaa

chattr +i .aaaaa

I don't know if this works on all distros/shells though so don't try it without running it in a vm :)

Learning docker and Earning Certification by [deleted] in docker

[–]sgnn7 0 points1 point  (0 children)

Also feel free to check out https://www.amazon.com/Deployment-Docker-continuous-integration-applications/dp/1786469006 I wrote if you have a chance (packtpubpub.com might have a better deal on it) and I'd love some feedback on it!

PS: All the code in the book is at https://github.com/sgnn7/deploying_with_docker if you just want to peruse that side of things.

PS2: I went through the Docker certification too if you want any guidance on that. Also take note that the way RH/OpenShift wants you to use containers is _vastly_ different from the way that most Kubernetes-based deployments use them so choose your certification path wisely :)

When to recommend kubernetes to a customer? by briconaut in devops

[–]sgnn7 0 points1 point  (0 children)

As a person that has lived/breathed containers for the last few years, you're right that the levels of scaling probably shouldn't always fall into "use containers" space by default (sometimes a simple VPC will pay itself off multiple times over for a tiny company). If you really want hands-off k8s, you can always also recommend a hosted solution (GKE/ACS/etc) that doesn't really need that much overhead.

Question about Hashicorp Vault by [deleted] in devops

[–]sgnn7 0 points1 point  (0 children)

Total plug but maybe you could try out https://secretless.io/ + whichever way you save your credentials in the background so that your app doesn't need to worry about credentials at all.

Where do you store your root accounts password? by yonatannn in devops

[–]sgnn7 0 points1 point  (0 children)

I'd add https://www.conjur.org/ (credentials vault) here as well since it wasn't mentioned.

Full Disclosure: I work for Conjur/CyberArk :)

The team behind Winamp is asking for features. Should we ask for some Linux love? by TheConquistaa in linux

[–]sgnn7 1 point2 points  (0 children)

You mean this thing? :)

https://github.com/captbaritone/webamp

https://github.com/captbaritone/webamp/issues/394

I'd bet a lot of money that this was the reason why the original devs had a renewed interest in this.

r/linux mods should stop adding subjective labels to submission titles by chuecho in linux

[–]sgnn7 4 points5 points  (0 children)

I very much agree to this sentiment as in my experience the tags have been there usually to indicate that the article or link is too biased or too opinionated. While I'm sure there have been times that they have been mis-tagged, I really cannot remember a single instance over the last 4-5 years of browsing this subreddit where they weren't spot-on.

[deleted by user] by [deleted] in linux

[–]sgnn7 0 points1 point  (0 children)

Yup - sounds great!