Most Popular

1500 questions
8
votes
2 answers

Why not use configuration management tool instead of Dockerfile?

I'm pretty new to Docker and configuration management tools. At first I started writing bash scripts to provision my Vagrant boxes for my development machines, but now I've switched to using Chef for that so that I can use the same source to…
8
votes
2 answers

What's the impact of the General Data Protection Regulation (GDPR) on DevOps?

The General Data Protection Regulation (GDPR) is a set of rules to improve the protection of data about European citizens. Quote from this link: The EU General Data Protection Regulation (GDPR) is the most important change in data privacy…
Pierre.Vriens
  • 7,205
  • 14
  • 37
  • 84
8
votes
2 answers

Service backend/frontend in one or two containers?

Imagine in your stack you have RESTful services which also provide some rudimentary frontends, mostly for admin/other tech user use. Do you include the UI inside the container or are these two containers? Why?
Ta Mu
  • 6,772
  • 5
  • 39
  • 82
8
votes
2 answers

How to run database migrations in an auto-scaled group

We are just about to move from a monolithic architecture to an auto-scaled group and I'm not sure how I should be running my database migrations (Laravel). I am thinking that a script will run when a new box comes online, this will git pull my…
Mick
  • 221
  • 1
  • 4
8
votes
1 answer

Vagrantfile change with Ansible playbook to control file permission on Vagrant synced folder for Trellis

I use Trellis for my WordPress development. It works great, except I'm finding it hard to change file (or directory) permission within the synced folder. Generally I'm OK with the default permission setup. However, sometimes I need to give write…
Scott
  • 183
  • 7
8
votes
2 answers

Multiple paths with different expiry time in gitlab-ci runners

I'm having issues with parsing a build directory between stages using Gitlab-CI. Gitlab-CI wipes the created build artifacts between stages which seems weird. I'm trying to store the build artifacts between the build and the test stage, however the…
Rekovni
  • 933
  • 10
  • 24
8
votes
1 answer

How to ensure that git subtrees are kept up to date?

Problem: We use Data Transfer Objects (DTO) to ensure consistent interfaces across multiple services using TypeScript. We're currently using a git subtree in order to make sure that each repository has its DTO dependencies up to date. These DTOs…
Jack Murphy
  • 333
  • 2
  • 7
8
votes
1 answer

Running the docker daemon without root

Inspired by What are best and comprehensive practices to consider when running docker in production? , I stumbled over Why we don't let non-root users run Docker... They came up with docker run -ti --privileged -v /:/host fedora chroot /host ,…
AnoE
  • 4,876
  • 13
  • 25
8
votes
2 answers

Encrypting docker images (end to end); transporting over offline channels

We are developing and building docker images in our intranet, and need to deploy them to several hosts belonging to us (developers, internal testing, external testing and so on). Some of these are in our intranet, some are accessible for 3rd parties…
AnoE
  • 4,876
  • 13
  • 25
8
votes
1 answer

How to manage Consul and its quorum in auto-scaling environments?

We have auto-scaling Docker environments in which we use Consul for service discovery. These environments can add or remove one instance every few minutes. Our early Consul testing showed that it was very easy for Consul to loose its quorum. Perhaps…
Alexandre
  • 1,965
  • 14
  • 24
8
votes
2 answers

Jenkins job using VPN?

Is there a way to connect to a VPN for the duration of a Jenkins job? (freestyle or pipeline, I can work with either). I scoured the plugin list figuring someone might have developed something, but the only page found was this OpenConnect page with…
Alex
  • 4,512
  • 6
  • 27
  • 47
8
votes
2 answers

Artifactory vs Git for Infrastructure Version Control / Configuration Management

I'm trying to understand the difference between managing configuration files for the purposes of simplifying automated deployment. We have 5 environments to build. So far 2 have been built with no versioning at all. Right now we're using Artifactory…
8
votes
1 answer

New Kubernetes Cluster: remote error: tls: bad certificate

This is my first attempt at setting up a Kubernetes cluster in my test environment. In preperation, I created 3 instances running Fedora Atomic: 10.11.184.8: master/etcd 10.11.184.5: node01 10.11.184.6: node02 Then using contrib/ansible playbooks…
azurepancake
  • 181
  • 1
  • 1
  • 2
8
votes
2 answers

How to check out GitHub repo after specifying skipDefaultCheckout in Jenkins declarative pipeline?

I have a Jenkins pipeline in which I build in one stage and test in another. I'd like them to be different machines since they have different capabilities. I have something like the following so far: pipeline { agent none stages { …
Roxy
  • 181
  • 1
  • 3
8
votes
5 answers

How to provide a user to access only a particular bucket in AWS S3?

I have a list of buckets in AWS S3. I have created an IAM user. I have an option to provide S3 full or read only access for a user using groups. Is there any options to provide access only to a particular bucket?