DevOps'ish 234: Giving up on reopen dates, containers everywhere, Epic v. Apple, OWASP Top 10 changes, Kubernetes troubleshooting, Podman, and more

People

Microsoft gives up predicting when its US offices will fully reopen
And every other company should too. We just don’t know when they’ll reopen and constantly re-picking dates just to change them later seems silly.

A Non-Tech Explanation of Containers and Kubernetes
Through this simple analogy by 451 Research, get a better understanding of virtualization, containers, and Kubernetes. Learn the differences between these big topics and the role of each in a multicloud future. SPONSORED

What is an SRE?
“A comprehensive definition of SREs and Site Reliability Engineering, including what SREs do and what makes SREs different from other roles.”

The Epic v. Apple verdict is out
“The Epic v. Apple lawsuit has concluded. The verdict sees Apple come out largely unscathed — but with one of its central App store policies deemed illegal.”

Meet the Little-Known Genius Who Helped Make Pixar Possible
Alvy Ray Smith helped invent computer animation as we know it—then got royally shafted by Steve Jobs. Now he’s got a vision for where the pixel will take us next.

Process

OWASP shakes up web app threat categories with release of draft Top 10
“The Open Web Application Security Project (OWASP) has published its draft Top 10 2021 list revealing a shake-up of how modern threats are categorized.”

Management platform for Infrastructure as Code Automation and Collaboration
See how env0 automates and simplifies the provisioning of cloud deployments for Terraform, Terragrunt and GitOps workflows. Variables and Secrets granularity, Full CLI support, integration with OPA, Dynamic RBAC and quality of life features. Free Demo. SPONSORED

WhatsApp “end-to-end encrypted” messages aren’t that private after all
“Millions of WhatsApp messages are reviewed by both AI and human moderators.”

Researchers Bake Malware Protection Directly Into SSDs
While good, it’s only a matter of time until a vulnerability is found.

New ChaChi malware variant designed to target Linux systems
“A newly discovered Linux version of the ChaChi remote-access trojan virus has been found in the wild in a rare example of Windows-based malware being adapted for the operating system.”

Grafana Is Not Worried About AWS Commercialization
It’s actually not all bad for Grafana.

This Seemingly Normal Lightning Cable Will Leak Everything You Type
“A new version of the OMG Cable is a USB-C to Lightning Cable that hackers can use to steal your passwords or other data.”

Tools

Are Dockerfiles good enough?
“However many of the benefits to containers aren’t being used by organizations correctly, resulting in a worse situation than before. While it is possible to use containers in a stable and easy-to-replicate workflow across a fleet of servers, most businesses don’t.”

Securing Your PostgreSQL Database
A comprehensive overview of the best practices for securing access to PostgreSQL databases. SPONSORED

OpenSSL 3.0 Has Been Released!
A lot of great achievements in this release. “From OpenSSL 3.0 we have transitioned to the Apache License 2.0.”

Kubernetes Troubleshooting - The Complete Guide
Complete, eh? Oh…

Download Kubernetes
“An easier way to get the binaries you need (or a link to them)”

Podman remote clients for macOS and Windows
Podman on the Mac. There’s now multiple alternatives to Docker Desktop.

Automating quality checks for Kubernetes YAMLs
“If you have ever wondered how to make sure that your YAML Kubernetes objects are defined correctly and are following industry best practices, this blog post is for you. In a few paragraphs, I’ll show you how to create a GitHub Actions workflow that will first analyze K8s object definitions using Datree, then deploy it on a cluster and run some tests.”

Release 🎉 CNI v1.0.1 🎉

heyvito/podman-macos
📦 Podman frontend for macOS

forest/pow-captcha
“A proof of work based captcha similar to friendly captcha, but lightweight, self-hosted and GPLv3 licensed.”

mgdm/htmlq
Like jq, but for HTML.

Join in on the conversation on /r/devopsish for a stream of news, content, and commentary throughout the week.

Want more? Be sure to check out the notes from ​​this week’s issue to see what didn’t make it to the newsletter.

Have feedback? Hit Reply.