Most Popular
1500 questions
8
votes
2 answers
Why not use configuration management tool instead of Dockerfile?
I'm pretty new to Docker and configuration management tools.
At first I started writing bash scripts to provision my Vagrant boxes for my development machines, but now I've switched to using Chef for that so that I can use the same source to…
David Eugene Pratt
- 113
- 1
- 3
8
votes
2 answers
What's the impact of the General Data Protection Regulation (GDPR) on DevOps?
The General Data Protection Regulation (GDPR) is a set of rules to improve the protection of data about European citizens. Quote from this link:
The EU General Data Protection Regulation (GDPR) is the most important change in data privacy…
Pierre.Vriens
- 7,205
- 14
- 37
- 84
8
votes
2 answers
Service backend/frontend in one or two containers?
Imagine in your stack you have RESTful services which also provide some rudimentary frontends, mostly for admin/other tech user use.
Do you include the UI inside the container or are these two containers? Why?
Ta Mu
- 6,772
- 5
- 39
- 82
8
votes
2 answers
How to run database migrations in an auto-scaled group
We are just about to move from a monolithic architecture to an auto-scaled group and I'm not sure how I should be running my database migrations (Laravel).
I am thinking that a script will run when a new box comes online, this will git pull my…
Mick
- 221
- 1
- 4
8
votes
1 answer
Vagrantfile change with Ansible playbook to control file permission on Vagrant synced folder for Trellis
I use Trellis for my WordPress development. It works great, except I'm finding it hard to change file (or directory) permission within the synced folder.
Generally I'm OK with the default permission setup. However, sometimes I need to give write…
Scott
- 183
- 7
8
votes
2 answers
Multiple paths with different expiry time in gitlab-ci runners
I'm having issues with parsing a build directory between stages using Gitlab-CI.
Gitlab-CI wipes the created build artifacts between stages which seems weird. I'm trying to store the build artifacts between the build and the test stage, however the…
Rekovni
- 933
- 10
- 24
8
votes
1 answer
How to ensure that git subtrees are kept up to date?
Problem:
We use Data Transfer Objects (DTO) to ensure consistent interfaces across multiple services using TypeScript.
We're currently using a git subtree in order to make sure that each repository has its DTO dependencies up to date. These DTOs…
Jack Murphy
- 333
- 2
- 7
8
votes
1 answer
Running the docker daemon without root
Inspired by What are best and comprehensive practices to consider when running docker in production? , I stumbled over Why we don't let non-root users run Docker...
They came up with docker run -ti --privileged -v /:/host fedora chroot /host ,…
AnoE
- 4,876
- 13
- 25
8
votes
2 answers
Encrypting docker images (end to end); transporting over offline channels
We are developing and building docker images in our intranet, and need to deploy them to several hosts belonging to us (developers, internal testing, external testing and so on). Some of these are in our intranet, some are accessible for 3rd parties…
AnoE
- 4,876
- 13
- 25
8
votes
1 answer
How to manage Consul and its quorum in auto-scaling environments?
We have auto-scaling Docker environments in which we use Consul for service discovery. These environments can add or remove one instance every few minutes.
Our early Consul testing showed that it was very easy for Consul to loose its quorum. Perhaps…
Alexandre
- 1,965
- 14
- 24
8
votes
2 answers
Jenkins job using VPN?
Is there a way to connect to a VPN for the duration of a Jenkins job? (freestyle or pipeline, I can work with either).
I scoured the plugin list figuring someone might have developed something, but the only page found was this OpenConnect page with…
Alex
- 4,512
- 6
- 27
- 47
8
votes
2 answers
Artifactory vs Git for Infrastructure Version Control / Configuration Management
I'm trying to understand the difference between managing configuration files for the purposes of simplifying automated deployment.
We have 5 environments to build. So far 2 have been built with no versioning at all. Right now we're using Artifactory…
Khadijah Celestine
- 183
- 1
- 5
8
votes
1 answer
New Kubernetes Cluster: remote error: tls: bad certificate
This is my first attempt at setting up a Kubernetes cluster in my test environment. In preperation, I created 3 instances running Fedora Atomic:
10.11.184.8: master/etcd
10.11.184.5: node01
10.11.184.6: node02
Then using contrib/ansible playbooks…
azurepancake
- 181
- 1
- 1
- 2
8
votes
2 answers
How to check out GitHub repo after specifying skipDefaultCheckout in Jenkins declarative pipeline?
I have a Jenkins pipeline in which I build in one stage and test in another. I'd like them to be different machines since they have different capabilities. I have something like the following so far:
pipeline {
agent none
stages {
…
Roxy
- 181
- 1
- 3
8
votes
5 answers
How to provide a user to access only a particular bucket in AWS S3?
I have a list of buckets in AWS S3. I have created an IAM user. I have an option to provide S3 full or read only access for a user using groups. Is there any options to provide access only to a particular bucket?
Sathishkumar Jayaraj
- 183
- 2
- 6