Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Open Container Initiative (OCI) Support in Cloudsmith

Kubernetes has become the de facto platform for orchestrating containers. Open standards complement Kubernetes by defining best practices for its implementation. These standards are developed by the open-source Kubernetes community (not a single vendor), ensuring vendor neutrality, easier integration with other tools, and overall system efficiency.

Multiple Malicious Packages Discovered on PyPI, npm, and RubyGems

Evidence of broad and sustained attacks using several npm, Python, and Ruby packages continues to emerge. A series of malicious packages have been added to the npm, PyPI, and RubyGems package repositories. The attacks have been ongoing for some time, with some seeded years ago. Their aims are manifold, including stealing funds from crypto wallets, deleting codebases, and obtaining Telegram messaging data.

Reliable Dedicated Servers as the Foundation of Scalable DevOps Architecture

Imagine launching a product update at peak traffic time. Your development team pushes the changes, expecting everything to run smoothly. But instead of seamless deployment, the infrastructure buckles-delays spike, user complaints pour in, and error logs flood your screen. Sound familiar? In the world of DevOps, where agility and uptime are non-negotiable, the strength of your backend setup determines how fast-and how safely-you can move. At the heart of this digital engine lies a crucial but often underestimated component: the server. More specifically-reliable dedicated servers.

Reimagining the Data Centre: Respect, Resources, and the Path to a Sustainable Digital Future

When most people picture a data centre, they might think of a bland industrial shell—cold, humming, and forgettable. But look closer, and you’ll find something far more profound. A data centre is a heavy, complex, and finely tuned space where an immense volume of information flows, transforms, and creates the digital world we rely on. In many ways, it feels like magic. And yet, so does nature. Both deserve respect.

Deploy Istio at Scale With Rancher

Managing and deploying applications across multiple Kubernetes clusters presents significant challenges, especially as the number of clusters grows. Traditional methods, like manually applying Helm charts or manifests per cluster, become cumbersome, error-prone, and difficult to scale or maintain consistency for Day 2 operations. While Rancher allows managing Helm chart repositories and apps, this is done on a per-cluster basis via the UI.

Community Vigilance, Enterprise Response: Addressing CVE-2024-21626 in Rancher

In backend engineering, many days follow a familiar rhythm: coffee, code reviews, maybe deploying a new feature. But occasionally, the routine is interrupted by a message that signals a different kind of challenge, like a Slack notification from the security team: “Hey, we’ve identified a potential issue. Need to sync up.” This post details one such instance—our journey addressing CVE-2024-21626, a privilege escalation vulnerability reported in Rancher.

Fleet management with Landscape for Ubuntu Core

Shipping your Ubuntu Core IoT device is just the beginning, managing it at scale is where the real challenge begins. In this session, Michael Croft-White (Engineering Director at Canonical) walks through how Landscape, Canonical’s fleet management tool, helps you keep devices updated, secure, and properly configured throughout their lifecycle.

Docker Hardened Images for tightened security and strong provenance

Docker's VP of Product, Michael Donovan, gives a quick overview of Docker Hardened Images and how they make open source software available in a hardened image container. They're minimal images with less attack surface and SLSA level 3 artifact compliance. They carry extensive provenance data, including SBOMs, CVEs, and VEX. Be confident that your software is safer from attack using Docker Hardened Images and Cloudsmith.

How to Log Into a Docker Container

When your Docker container isn't behaving the way you expect, you need to get inside and see what's going on. Maybe your app is throwing errors, a service won't start, or you just need to check some configuration files. Getting into a running Docker container is simpler than you might think, but there are several ways to do it depending on your situation. This guide shows you exactly how to log into Docker containers, troubleshoot common issues, and debug your applications effectively.