tag: devops
2026-06-15
llm-d — Kubernetes-Native Distributed LLM Inference (v0.7, CNCF Sandbox)
2026-06-12
Zero-downtime modernization — Norwegian Labour and Welfare Administration's path to open-source observability with OpenSearch
2026-06-09
Xpipe
2026-06-04
I Put a Datacenter GPU in My Gaming PC for £200
For £200, the author bought a secondhand Tesla V100 SXM2 with an SXM2-to-PCIe adapter and ran a 27B parameter LLM locally with 32GB VRAM across two GPUs, achieving ~32 tok/s with Qwen3.6-27B-MTP.Tekton — Cloud Native CI/CD Framework
CNCF incubating project providing a powerful, flexible open-source framework for creating CI/CD systems, allowing developers to build, test, and deploy across cloud providers and on-premise.You Don't Love systemd Timers Enough
A case for systemd timers over traditional cron — persistent scheduling, calendar expressions, wake-on-timer, randomized delays, and built-in journal logging solve cron's pain points.acme.sh
A pure ISO shell script implementing the ACME protocol — a lightweight, pure-shell alternative to Certbot for obtaining SSL/TLS certificates from Let's Encrypt.2026-05-28
ClusterControl Getting Started
Documentation for ClusterControl, an all-in-one database management platform for deploying, monitoring, and automating high-availability clusters across MySQL, PostgreSQL, MongoDB, Redis, and more.2026-05-15
SigNoz — Open-Source Observability Platform (Logs, Metrics, Traces)
Single tool for logs, metrics, and traces native to OpenTelemetry. Uses ClickHouse as datastore. Open-source alternative to DataDog and New Relic with APM, distributed tracing, LLM observability, and alerts. 26.9k starsNanoTDB — Tiny Embedded Time-Series Database for Edge/IoT
Go time-series DB for Raspberry Pi and edge nodes. Append-only, WAL-based, S2 compression, VictoriaMetrics-compatible API, no external runtime dependencies. Supports rollups and metric ingestion via line protocol2026-05-12
The Foreman
Open-source lifecycle management platform for physical and virtual servers. Provisioning, configuration management, monitoring. Puppet, Ansible, Salt, Chef integration. REST API, plugins, web UIPostmortem: TanStack npm supply-chain compromise
Comprehensive incident postmortem on the June 11, 2026 compromise of @tanstack/* packages. Attack used pull_request_target pattern, GitHub Actions cache poisoning, and OIDC token extraction. 84 malicious versions, 2.3MB obfuscated router_init.js, self-propagating malware, credential harvesting from AWS/GCP/K8s/Vault/GitHub/SSHSemaphore UI
Semaphore UI — modern UI and API for Ansible, Terraform, OpenTofu, Bash, PowerShell. Pure Go, Docker/K8s support, MySQL/Postgres/SQLite. RBAC, HA, runners, 13K+ GitHub starsrustinel
Rust implementation of INI file parser and validator. Zero dependencies, no unsafe code, no unsafe Rust. Supports INI4 and INI5 formats, includes CLI tool for validation, streaming parsing, error recovery, comments and whitespace handling, documentation and examplesPuppet Labs
Puppet Labs — configuration management, automation, and infrastructure-as-code. Puppet Enterprise, Open Source, R10k, Hiera, Facter, PuppetDB, Bolt. Ruby-based DSL, declarative approach to system administrationpgrwl
Cloud-native continuous backup for PostgreSQL in a single binary — WAL streaming, scheduled base backups, optional S3/SFTP storage backend, compression, encryption, retention, restore command. Implements streaming replication protocol directly, no external schedulers or extra servicesosquery
osquery — SQL-powered operating system instrumentation, monitoring, and analytics. Facebook OSS. Query Linux, macOS, Windows processes, files, network, registry. Fleet, Osqueryd, Osqueryctl, REST API, PKG/DEB/RPM packagesosctrl
osctrl — management server for osquery. Centralized configuration, tags, environments, and live queries. Go-based, Docker support, PostgreSQL/MySQL, web dashboard for endpoint management and monitoringOpenVox
OpenVox — Puppet module framework by VoxPupuli. Simplifies module development, testing, and publishing. Supports Puppet 4+, structured data, Hiera integration, CI/CD pipelines, community-drivenNetDisco
Network device discovery, port scanner, and mapping tool for IP, MAC, and VLAN tracking. Lightweight, agentless, no downtime, no custom database. Written in Perl with modern tools (nmap, scapy). Supports Junos, NCM, OpenWRT, and moreKurier
Kurier — end-to-end encrypted messaging app with self-destructing messages. Open source, cross-platform, open protocol, self-hostable, metadata harvesting resistant. Written in Rust, uses X25519, AEAD encryption, and the libsignal protocolFleet
Fleet — lightweight VM management. Run Linux and Windows on bare metal, VMs, cloud, edge. Fleetctl CLI, REST API, Terraform provider. Containerized, PostgreSQL, no external dependenciesexample42
Open-source configuration management, monitoring, and automation tools. Puppet, Ansible, SaltStack modules. Monitoring (Munin, Prometheus), log management, IT automation. Core42, UAA, Smart42 productsCrossplane
Open-source Kubernetes control plane for building, publishing and using APIs. Use your own API providers, extend to match your infrastructure, CRDs, no vendor lock-inCrafty
Crafty — configuration management tool by VoxPupuli. Puppet-based, declarative infrastructure, module-driven, CLI and API. Simplifies Puppet module development and deploymentchezmoi
chezmoi — manage your dotfiles, directories, and files securely. Git-backed, encrypted, cross-platform. CLI tool for version control and synchronization of your development environmentChef Infra
Chef Infra — configuration management platform for automating cloud infrastructure. Policy-driven, idempotent, Ruby-based DSL. Chef Infra Server, Workstation, InSpec for compliance, Chef Automate for analyticsCapistrano
Capistrano — remote server automation and deployment tool. Ruby-based, SSH-driven, multi-stage deployments, rollback, hooks, scripting. Originally for Ruby/Rails, now supports any language/framework2026-05-11
CLR
Checker for Lifetimes and other Refinement types for Zig. Transpiles AIR to Zig source performing static compile-time analysis — checks use-before-assign, use-after-free, double-free, stack pointer escapes, non-nullness assertions, tagged union violations, fieldParentPtr misuse. MIT license2026-05-08
nine — European Internet Exchange Point & Ethernet Fabric
European-wide IXP and L2 fabric covering UK, France, Germany, Italy, Netherlands, Switzerland with n×400G backbone. Unmetered bandwidth, unlimited Ethernet circuits, SR-MPLS platform. 10G port from €250/month MRC2026-05-07
Tilde.run — Transactional Agent Sandboxes
Agent sandbox with a versioned filesystem — compose GitHub, S3, and Drive into a single ~/sandbox, run agents in isolated transactions with audit trails, built by the lakeFS teamKubernetes The Hard Way
Kelsey Hightower's classic tutorial for bootstrapping Kubernetes manually — no scripts, no automation. Learn etcd, control plane, worker nodes, TLS certs, and pod networking by walking the long routeDays Without GitHub Incident
A live counter tracking consecutive days since the last GitHub outage — community-maintained tracking of GitHub status history2026-05-04
Ghostty Leaving GitHub
Mitchell Hashimoto announces that the Ghostty terminal emulator is leaving GitHub — discussing the reasons behind the migration and what it means for the project's future2026-04-29
GitHub Copilot is moving to usage-based billing
GitHub announces changes to Copilot pricing model, moving from flat-rate to usage-based billing.An update on GitHub availability
GitHub's official update on recent service availability incidents and improvements.2026-04-27
eBPF, Networking, Cilium
LinkedIn post on using eBPF with Cilium for cloud-native networking and observability.2026-04-24
Canonical releases Ubuntu 26.04 LTS, Resolute Raccoon
Canonical announces Ubuntu 26.04 LTS, Resolute Raccoon, covering the new long-term support release and its platform updates.2026-04-21
Network Observability Lab
Network Observability Lab provides a hands-on environment for the Modern Network Observability book, with scripts and lab scenarios for Prometheus, Grafana, Loki, Telegraf, Logstash, and related tooling.infra-ansible
infra-ansible is an Ansible repository for provisioning and automating infrastructure components such as DNS, DHCP, OpenStack, storage, bastions, and identity-managed hosts.2026-04-16
Passbolt
Passbolt is an open source password and secret management platform for teams, with end-to-end encryption, audit trails, and self-hosting options.Galaxy User Guide
Ansible Galaxy is a free site for finding, downloading, and sharing community-developed roles and collections for automation projects.2026-04-10
We’ve raised $17M to build what comes after Git
GitButler announces a $17M Series A to build version-control infrastructure for modern collaboration, stacked branches, and agent-aware software workflows.2026-04-03
GitHub reached 89.91% uptime
Social post claiming GitHub reached 89.91% uptime, framed as commentary on platform reliability and operational impact.2026-04-02
aquasecurity/trivy
Trivy — open-source vulnerability and misconfiguration scanner for containers, IaC, repositories and runtime environments. Repository with code, documentation, and integrations for CI/CD security scanning.SonarQube — static analysis & code quality platform
Official SonarQube repository (SonarSource) — platform for continuous code quality, security and SAST analysis with CI/CD integrations, language analyzers, and developer tooling for maintaining healthy codebases.2026-03-26
ntop — ntopng, nDPI and network visibility tooling
ntop provides a suite of open-source and commercial tools (ntopng, nDPI, nProbe, n2disk) for real‑time network traffic monitoring, flow analytics, deep packet inspection and threat detection across large-scale and distributed environments.2026-03-20
Announcing Pabawi, a web frontend for classic infrastructures
Pabawi is a new open-source web frontend for managing classic server infrastructures, with integrations for Bolt, Hiera, PuppetDB, and PuppetServer.2026-03-16
TrueNAS Moves Build System Internal
iXsystems is moving the TrueNAS build system from public infrastructure to internal systems, raising questions about the project's open-source transparency and community access.Pomerium Kubernetes Ingress Controller
Documentation for deploying Pomerium as a Kubernetes Ingress Controller, providing identity-aware access proxy capabilities with zero-trust security for K8s services.2026-03-12
hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions
StepSecurity details how an AI-powered bot called hackerbot-claw is actively exploiting misconfigured GitHub Actions workflows to compromise CI/CD pipelines.2026-03-11
"After outages, Amazon to make senior engineers sign off on AI-assisted changes"
Following production incidents linked to AI-generated code, Amazon is requiring senior engineers to approve any changes produced with AI assistance — a move to add human accountability to AI-assisted development workflows.2026-03-10
Google Workspace CLI (gws)
One CLI for all of Google Workspace — Drive, Gmail, Calendar, Sheets, and more. Dynamically built from Google's own Discovery Service at runtime, with structured JSON output and 100+ bundled AI agent skills.DungBeetle
Lightweight distributed job server for queuing and asynchronously executing heavy SQL read jobs — supports MySQL, PostgreSQL, and ClickHouse as sources, writes results to ephemeral result databases, and exposes an HTTP API for job and group management.2026-03-09