Author: Alan Shimel

  • Amplifying Docker with AMP and Brooklyn

    Amplifying Docker with AMP and Brooklyn

    Here is the second video in our series of DevOps talks from Gluecon 2014. Again thanks much to our friends at CloudSoft for providing the video services and providing them to us to post here.

    In this session CloudSoft CTO Alex Heneveld talks about how to amplify Docker using the open source Brooklyn Project (now an Apache incubation project) or the commercial version of Brooklyn, AMP by CloudSoft.  Docker is certainly one of the hottest technologies in the cloud/PaaS/development space right now.  Using Brooklyn or AMP makes Docker easier.  Alex did a really nice job in this presentation. Hope you enjoy the video

  • 6 things you didn’t know about SaltStack

    6 things you didn’t know about SaltStack

    I recently had the pleasure of moderating the first day of the DevOps track at Gluecon 2014.  As I wrote about in a previous post, the good folks at CloudSoft were kind enough to have the days sessions video taped (OK I don’t know if they actually use tape anymore, but you know what I mean). They have made these videos available to us here at devopsy.kinsta.cloud. We have uploaded them to YouTube and will be posting them here through the week.

    The DevOps sessions got started with Thomas Hatch of SaltStack presenting, 6 things you don’t know about SaltStack. Kudos to Thomas who due to a technical glitch had to start off without his slides up on the screen. But Thomas did not miss a beat and gave the audience some insight into SaltStack and what makes it best for certain tasks.

    Below is the video

  • Master Meetup Calendar is up and running!

    meetup-logoSince we were first planning devopsy.kinsta.cloud part of the vision was to have a master Meetup calendar of all of the DevOps Meetup groups. My thought was you could go to one master calendar and see where and when local DevOps groups were meeting and on what topics. Doing this has proved easier said then done. But finally we are launching in a “beta” our Meetup Group calendar. You can reach it by clicking the link in the previous sentence or by clicking the meetup menu button above.

    The master calendar is still a work in progress. It is pretty bare bones white and black right now.  Over time we will embellish the design, but right now it is about the functionality.  If you click on a particular meeting it takes you to a page with a complete description of the particular meeting and a link to the actual Meetup page. Many thanks to Nuance Media for their work in developing this plugin.

    If we do not have your Meetup group listed please email editor@DevOps.com with your meetup group URL and we will try to add it to the calendar. Right now we are showing 3 months worth of the calendar but will see what works best.  We hope you find it useful.

    Going forward one thing we would like to do is build up a list of sponsors who can provide a place to meet, speakers and refreshments for Meetup groups in need of these things.

    Let us know if you have any other ideas on how we can make this calendar more useful.

    [meetup-calendar future=”2″]

  • What’s new @DevOps.com

    What’s new @DevOps.com

    All of us here at devopsy.kinsta.cloud have been very busy. In addition to adding some new writers and great new content, we have been working “outside the 4 walls of the website”.  Here is an update on what’s new:

    CampDevOps-logo-align_left1. Camp DevOps – We held our first Camp DevOps event last week in beautiful Boulder, Colorado at the University of Colorado, Boulder Campus.  It was a great event featuring a lot of great sessions.  Sanjeev Sharma of IBM, author of DevOps for Dummies (and a devopsy.kinsta.cloud contributor) kicked things off with a great keynote. Andi Mann of CA had a great talk on implanting DevOps from the top down. Rajat Bhargava and Topher Marie of JumpCloud also had some great insights in their sessions. Rich Mogull’s “KickaaS Security” session was a great look at the top things you need in terms of security.  Another very popular track was Craftsy VP of engineering, Matthew Boeckman’s using S3 and Glacier for backup. There were some other great sessions but I can mention them all here. You can check out the Camp DevOps website for the full agenda.

    We will be conducting more Camp DevOps in the near future in cities throughout the US.  Some will be in conjunction with larger events or conferences within conferences, others will stand alone events. Stay tuned for more details.

    I was asked the question of whether Camp DevOps competes with DevOps Days. Short answer, no. We support DevOps Days and the culture they represent. Camp DevOps shares with DevOps Days the desire to advance DevOps, but takes a slightly different tack.  We will have both highly technical, as well as business orientated tracks. Camp DevOps will feature both learning on DevOps culture, as well as tools. We will also be adding more exclusive Camp DevOps activities to the events in the future.

    gluelogo

    2. Gluecon 2014 – Camp DevOps Boulder was held in conjunction with Gluecon in nearby Broomfield.  Gluecon was fantastic this year and also featured a full DevOps lineup. I was the moderator of the DevOps tracks on day one. Again some real quality presentations on Ansible, Saltstack and more. We will be posting video here soon.

    Look for more announcements regarding Gluecon and Camp DevOps soon.

     Webinars:

    Compuware APM – I was invited as a guest on a webinar by CompuwareAPM in an intro to DevOps. The webinar was hosted by Steve Wilson. It was a good conversation about several interesting areas of DevOps.  The recorded version of the webinar will be available shortly and we will post a link on our events page.

    cloudpassageSecDevOps – I am joining Andrew Storms of CloudPassage to discuss SecDevOps, the new black. You can register for this here. Andrew is a really bright fellow that is very well known in the security space and this promises to be a great webinar!

    devopsy.kinsta.cloud Media Sponsored events

    devopsy.kinsta.cloud is working with several organizations to promote events for DevOps learning. If you would like to have devopsy.kinsta.cloud media sponsor your event contact sponsor@devops.com

    devops summit

    velocity

     

     

     

     

    mongodbworld

  • AppDynamics announces AppSphere 2014

    AppDynamics, the application intelligence leader for software-defined businesses has announced its first every user conference, AppSphere 2014. The conference will take place November 3-5 at the Cosmopolitan Hotel in Las Vegas, Nevada.

    Featuring speakers from companies like Google, Lithium, and Microsoft, and a keynote by Bill Platt, GM of Amazon Web Services, AppSphere will be a thought-provoking symposium into how technology and applications are transforming today’s business world and beyond.

    To learn more about the conference and register, visit: appdynamics.com/conference.

    According to AppDynamics, AppSphere attendees will:

    • ENGAGE with speakers and sponsors who are discussing the most up-to-date information and trends that are affecting technology now and in the future
    • CONNECT with other attendees struggling to solve the same problems and discuss best practices
    • DISCOVER how to increase efficiency, decrease time to value, and maximize ROI through tactics learned in breakouts and workshops
    • DEEPEN your proficiency of AppDynamics through technical training and product roadmaps

    Who should attend?

    AppSphere attendees include application and operations decision makers, architects, engineers, business execs, and other industry heavyweights.

    What Topics Will Be Covered?

    The theme of AppSphere is  “Transform,” and the agenda will  discuss transformation across three tracks: Culture, Technology, and Business.  Keep an eye on the agenda as they will be  filling in keynote and breakout speakers as they’re confirmed.

    To view the full program and secure your spot, please visit:appdynamics.com/conference

  • Automating code helps businesses adapt to customer demand quickly

    Automating code helps businesses adapt to customer demand quickly

    This is the first article in a series of pieces on digital innovation, accelerating change and the rise of the coded business from innovators in the Chef (click here) community.

    How does the need for speed and scale affect businesses today?

    Let’s start with scale. As a technology company grows, its infrastructure grows – more machines (or machine images), more networking, more data storage needs, more code, more developers, and more users. The only way to scale with growth is with automation. And, as more and more of the world’s interactions happen online (be it commercial transactions, email, social networking, video streaming, etc.), that scale of infrastructure is breaking records all the time. With these new levels of scale come ever-increasing automation requirements.

    On the speed side, first-to-market has always been an important part of business – but what that means has evolved. It’s no longer simply about producing that new cool item before the other guys. Now it also means you must be able to iterate quickly, adjust quickly for changing user tastes, and adapt quickly to the ever-increasing pace of new technologies. To be able to do this effectively, instead of just developing fast, you need to be able to deploy quickly, react quickly, troubleshoot quickly, and update quickly. For many companies, this is no longer icing on the cake, but instead, the structure underpinning their business – in the same way that having an e-commerce site was 10 years ago.

    Speed is becoming ever more critical for business in the digital age. With the rise of social media, a lot of customer feedback is public or semi-public, allowing people to unite behind specific complaints or desires and provide more clear and unified messages to companies. This helps companies get more feedback of higher quality and – hopefully – to react to it more quickly. This is also dramatically accelerating the cycle of getting features/products/releases to users, and, perhaps more significantly, prompting users to provide more useful feedback faster. As I mentioned, the scale and speed of business operations in every industry are growing daily, and, because of that, automation has gone from being beneficial to critical. In the technology world, this automation comes in the form of code.

    Pushing your code faster and faster means you have to be able to update and deploy infrastructure faster, which in turn means infrastructure/systems teams must also be able to deploy, react, troubleshoot and fix faster.

    But code, in and of itself, isn’t necessarily sufficient to meet the challenge of escalating speed and scale. How quickly you deliver that code is what’s important. Continuous Delivery is one technique used to address this need.

    Continuous Delivery (CD)

    People talk a lot about CD and it’s important to remember that this phrase refers to a methodology that has pros and cons.

    For most technology companies, especially those whose product is primarily Web-based, CD is often the best choice to enable speed of delivery. The main benefit is that the closer to “continuous” your release-cycle gets, the easier it is to have an iterative process. Faster feedback from users means you can more rapidly deliver updates based on that feedback. As you approach CD, you approach near-real-time feedback, which allows you to hone your product or feature far faster than if it were sitting in long dev/qa cycles. Another benefit is best described with a comparison. In troubleshooting, a key rule is make one change at a time, so you know which change fixed the problem – or made it worse. CD is an extension of this idea, although it comes earlier in the lifecycle. If you are pushing/delivering a codebase more often, there are less changes per push, and so breakages are easier to track down – and it’s easier to push fixes.

    A common misconception is that an organization either achieves CD or it does not. CD is a spectrum with frequent releases on one end and less frequent on the other. A CD solution for a bank may mean something very different than a CD solution for a gaming Web site. The idea of the CD methodology is continuing to push toward faster deployments, in order to reap the benefits that come from doing so.

    In the end, no matter what part of the CD spectrum a company aims to achieve, they must be willing to adapt and change.

    From an internal IT perspective, this means realizing that this isn’t the old world, where businesses lock users into small boxes to make things simpler. We’re in a world where everyone has the power of the Internet in his or her pocket and there’s enough information out there for anyone to break out of his or her box. Businesses need to provide engineers, designers, assistants, VPs, etc. the flexibility and freedom to work and think in ways they do best, so they can take the business to the next level.

    From an external (production) IT perspective, companies must be able to quickly adapt to new growth and new technology. It took the Internet a (relatively) long time to start adapting to the small displays on mobile devices, and it adapted only slightly faster to tablets. But new form-factors are just the beginning. Broadband is becoming ubiquitous in first-world countries, and companies are just starting to rely on that fact. Yet there are still many users the Web isn’t taking into account very well. Mobile is becoming the default interface for a variety of locales and ages, and many countries have limited bandwidth and/or high latency. Further, it seems likely that we will see drastically different user input mechanisms, as well as display mechanisms, in the near future.

    Technologists need to be agile and readily adapt to technology and infrastructure changes, as well as speed and approach changes, such as CD, which will be required for the next generation of user and technology demands.

    About the author

    philPhil Dibowitz has been working in systems engineering for 12 years and is currently a production engineer at Facebook. Initially, he worked on the traffic infrastructure team, automating load balancer configuration management, as well as designing and building the production IPv6 infrastructure. He now leads the team responsible for rebuilding the configuration management system from the ground up. Prior to Facebook, he worked at Google, where he managed the large Gmail environment, and at Ticketmaster, where he co-authored and open sourced a configuration management tool called Spine. He also contributes to, and maintains, various open source projects and has spoken at conferences and LUG’s on a variety of topics from Path MTU Discovery to X509.

  • Bridget Kromhout’s “DevOps Against Humanity” goes viral

    Bridget Kromhout’s “DevOps Against Humanity” goes viral

    Many of you reading this have probably seen the tweet or one of the thousand or so retweets of Minneapolis based Bridget Kromhout’s “DevOps Against Humanity” twitter post. The tweet and attached pic are below:

    For those not familiar, DevOps against Humanity is a take off on “Cards Against Humanity” a group party game with black and white cards. The game is really simple. One player picks a black card that has a fill in the blank question. The other players than pick from their white cards  with what they think is the funniest answer. One of the white card answers is picked as the winner and the person submitting that white card gets a point.  There are some other options, but that is the basic game.

    The game and cards for Cards Against Humanity are released under a creative commons license, so you can print your own copies. You could support the creators by buying pre-printed sets as well. Also players are encouraged to create their own cards with new questions and answers.

    The DevOps Against Humanity variant as championed by Kromhout is a version with DevOps related questions and answers but still retaining the wicked sharp potential that the original game is known for. Bridget has set up a github site where you can download the pdf and images of what she has created, along with instructions on getting them printed.  There is also a link to a Google Doc with ideas for questions and answers. You can add your own to the list. Over time it would be great to see the list really expand.

    Sounds like a cool game to play at your next DevOps conference or gathering of like minded DevsOps folks. I guess you could play with non-DevOps folks, but what is funny to one group may not be as funny to the other.

    Just a reminder that Cards Against Humanity and by extension the DevOps Against Humanity are issued under a Creative Commons license so you cannot resell these.

  • Some changes to devopsy.kinsta.cloud

    Some changes to devopsy.kinsta.cloud

    Well if you are reading this you are one of almost 40,000 unique visitors to devopsy.kinsta.cloud in the last 6 or so weeks. In this relatively short time we have learned a few things. Based upon these we are making a few changes to devopsy.kinsta.cloud. Some you will see right away, some you will see phased in over the coming days and weeks.

    Here are some of the changes we are making and why we are doing it:

    A. Blog Neighborhoods – From the beginning my vision of our many bloggers and blogs was to organize them into “neighborhoods” that would allow people to hone in on what is important to them.  Unfortunately the neighborhood aspect was not well implemented and all of the blogs were lumped together. Going forward you will see our bloggers and blogs grouped into the following areas:

    1. Enterprise DevOps – This is for DevOps in the large enterprise. Organizations doing DevOps by choice.  This neighborhood will feature stories, tips and tricks on adopting DevOps in a large organization and how to make it work. We have some excellent bloggers in this section and will be adding more.

    2. Doin’ DevOps – Formally the DevOps Life section, this is a neighborhood of DevOps practitioners. Not vendors, people who practice DevOps and work and are sharing their experiences. If you are looking for more technical content, this is a good place to find it.

    3. SecOps – This is for DevOps and Security related content.  Again we have some excellent writers in this section and the security tips range from very technical to how to integrate security into the Dev and Ops process.

    4. DevOps in the Cloud – This is primarily startups and companies using the cloud almost exclusively for their infrastructure. Sort of the opposite of the Enterprise DevOps neighborhood.

    5. DevOps Toolbox – This is going to be primarily vendors writing about their DevOps tools here. Yes, you can take what they say with a grain of salt. But to discount them because they are vendors would be a mistake. No one knows their products and use cases better than the vendors themselves. Not to mention that they have experts in the field who will be contributing. There will be much to be learned here!

    6. The Business of DevOps – like it or not, DevOps is on its way to being a genuine commercial business process. There are companies, executives, investors and managers who are exploring the business of DevOps. Sort of the Yin to Doin’ DevOps Yang.

    We hope by calling the neighborhoods out like this it will make it easier for you to zero in on exactly the type of content you enjoy. We recognize that many of our readers are very technical engineers. There are also many others coming to DevOps who are not. We will continue to strive to make devopsy.kinsta.cloud the best it can be, pitching a tent big enough for all.

    B. Newsletter

    Thanks to so many of you who have signed up for our newsletter. Try as we may, we have just not been able to get our RSS generated newsletter to look the way we want it to. Instead if you receive our newsletter you are getting a fire hose of posts. There are too many of them and they are too long. So instead we are going to move to a hand curated newsletter that will only be sent 2 to 3 times a week depending on how much content is on the site.

    C. Building out community features – The business directory is up with some listings.  I encourage vendors to take ownership of their listings and make them better. The pages are actually getting lots of views every day. It wouldn’t hurt. Our jobs board beta is up, but we need more listings. If anyone knows of job listings in the field, this is a good time to put a free listing up there. We will add more community features shortly, so stay tuned.

    We are also adding more content and writers. If you would like to contribute to devopsy.kinsta.cloud, write to me ashimmy@devops.com and we can see if you have what it takes.  Thanks for taking the time to read to the bottom and supporting devopsy.kinsta.cloud

  • Security and DevOps showdown

    Security and DevOps showdown

    caution

    George Hulme’s article on proceeding with caution on DevOps implementation offers some advice from a few well known security experts. Article here

     

     

    vs.

    helpmeobiwankenobi Alan Shimel says today’s speed of business isn’t compatible with :go slow”. Security people have to understand that DevOps is our last best hope. But in order to have DevOps help us to security nirvana we need to change how we interact with the rest of our IT teams. Article here

  • DevOps: Security’s last best hope

    DevOps: Security’s last best hope

    Help us Obi Wan! The fact is that DevOps is security’s last best hope. The sooner the security industry realizes it the better it will be for everyone.

    I read George Hulme’s story today about proceeding with caution and going slow with DevOps. Of course it was no surprise to me that those cautioning to go slow were my fellow security industry professionals. What else do you expect, after all we are the “people who say no”.  At least the three folks George interviewed didn’t flat out say no to DevOps. They just advised caution.  The fact is that DevOps is security’s last best hope. The sooner the security industry realizes it,  the better it will be for everyone.

    Let’s be honest. The security industry for the most part has not been a stunning success in keeping our data, apps and infrastructure safe and secure. Some may even say it has been an abject failure. What do you expect though? The game is stacked against us. Almost by definition the entire security industry is by definition a reactive model. We are always one step behind, reacting to the newest moves of the bad guys.  To be a security professional is to know failure.

    What is worse, we are generally ignored until we fail and then the harsh, bright light of a security breach shines brightly in our eyes. Is it any wonder that so many security folks feel that they are not successful? Our budgets are never enough, we never have enough resources, no one ever does what we ask and not enough people take security seriously enough until after the doo doo hits the fan. Yes it takes a special kind of masochist to be a security person.

    It is not by happenstance that in Gene Kim’s book, The Phoenix Project, the poor bastard of the security guy goes out on a bender and comes back at the end having fallen off the wagon?

    For all of the aggravation of fighting an impossible to win fight how are security people viewed by the rest of the IT folks and others in the organization. I am sorry to say that all too often we are though of as the crazy person in the back of the room yelling no. Again as in Gene’s book, it gets so bad that people stop inviting us to their meetings. They know what we are going to say, NO, so what’s the point.

    There are more enlightened or maybe smarter security folks who don’t say no any longer. Now they say yes do it, but let’s go slow and make sure we understand it.  When asked why, these security folks have a built in scape goat. They blame compliance. Yes, f**king compliance. Yeah, that’s the ticket. We have to go slow because our compliance obligations require it.  I laughed out loud when I saw this raggedy old flag being hoisted in George’s article.

    Compliance is always the fallback of the security guys who say no.  I have seen many examples of this over the years. Two of my favorites are:

    1. The security guy who asks the IT manager or C-level guy “how do you look in stripes”, because if you do this without going slow and making sure we are compliant, we could all wind up in the slammer.

    Hell we didn’t send anyone to jail for bringing this country to the brink of economic ruin. Do you really think we are going to send someone to jail because by adopting DevOps we might blow a PCI requirement? Can we really do any worse than  Target?

    2. Walking around a US Army base talking to the security officer I asked him how he was dealing with the compliance issues around securing wireless networks on base. He replied that was easy, he forbid wireless networks on base, so they were in full compliance. Of course as he said this I was watching people unplug their WAPs and throw them under their desks as we walked by.

    Yes, security folk can fall back on compliance as the reason for our no, but it is tired and old. The same for the security person who are always promising the next magic bullet. If only they had the latest shiny, new budget busting trinket they could finally sleep well at night. Even if they get their new toy, it only turns up that the bad guys have found a new vector and we need the next silver bullet.

    No, I am afraid being the guys who says no or even the people who say OK, but let’s go slow is just not going to cut it.  The speed of business today at the enterprise or the startup is anathema to the “go slow” mantra.

    On the other hand, DevOps offers a new way. A way to change the way the game is played.  For so long I have heard security folk wax poetic about the possibility that security could be built in to the process.  Instead of being bolted on after the fact, wouldn’t it be great if it were built in by design? Wow, what a great thing that could be.

    DevOps has the potential to deliver on the built in dream. DevOps can make the developer more aware of security and even compliance issues while the code is being written. It can give the security team insight and input into the development planning and process.

    DevOps has the potential to break down the silo that separates security from the rest of IT. Just as it brings Dev and Ops together, DevOps can give security a seat at the table. Security can move from being the crazy madman in the back to a respectable member of the team.

    This security transformation won’t be easy though. It will demand a change in security’s attitude.  First and foremost, we have to change from being the people who say no or go slow, to the people who say “yes we can”.  We need to understand that many of these projects and initiatives are going to move forward with or without us. Better to get on the bus than to get run over by the bus.

    Next we have to do a better job of communicating our concerns or issues. Falling back on FUD or compliance is not cutting it. We need to communicate the risks involved, how we can mitigate the risk and understand that a business decision will be made as to what level of risk is acceptable and how that risk is going to be managed.  At that point we have given enough information for the business people to make a business decision. They make the decision, we get behind it, we don’t bitch bite and we move forward.

    Security can’t be the people who say no or go slow. When security starts to say yes we can and this is how we do it, security will be given the seat at the IT table that we deserve.