The CFEngine engineering team has recently discovered a severe security issue in the CFEngine Enterprise product. CFEngine is using some internal secrets for authentication to the Mission Portal API and the PostgreSQL database when running background maintenance tasks. These internal secrets are randomly generated during the installation process and stored in files which only the root user has access to.
Secure access to your own private registry helps control who has access to your images. Compared to usage-based services such as Docker Hub and Quay, a Cycle hosted private registry only consumes the resources you give it access to, yielding a more cost-effective deployment. Let’s take a look at how simple it is to deploy a private Docker registry on Cycle.
DevOps is a very data-driven practice. After the right cultural changes take place within an organization to adopt DevOps, teams often rely heavily on monitoring, measurement, and continuous improvement to keep their projects on track. The best teams use KPIs to benchmark their performance and report up to management. However, there’s one metric your DevOps team might not be tracking: The cloud cost of their engineering decisions.
The global data supply reached 4.4 zettabytes (ZB) in 2013 – or 4.4 trillion GB – but less than five percent of that data was actually analyzed, according to the seventh Digital Universe report by the IDC. Approximately 22 percent of all existing data would actually be useful if tagged and analyzed.
We recently removed webpacker from our Rails 5 application. While it was a great way to bootstrap a new Rails app with a significant amount of Javascript we encountered some serious performance problems that we felt really impacted our productivity. We build our application images after every git push and we’d like to be able to deploy them quickly.
When it comes to hosting applications, business and IT administrators often need to make tough decisions as to whether cloud hosting or retention of the software at their own data center is the preferred option. Public cloud hosting may have the edge in terms of scale and distribution, but there are certain instances where an onsite approach to application hosting is a better idea.
Recently, OpenTelemetry has been announced as a new CNCF sandbox project resulting from a merger of OpenTracing and OpenCensus [1], [2], [3], [4]. Several people have already asked me what OpenTelemetry means for the Jaeger project (incubating at CNCF), and whether it is going to replace Jaeger. I will attempt to answer these questions in this post.
