CatOps
5.07K subscribers
94 photos
5 videos
19 files
2.73K links
DevOps and other issues by Yurii Rochniak (@grem1in) - SRE @ Preply && Maksym Vlasov (@MaxymVlasov) - Engineer @ Star. Opinions on our own.

We do not post ads including event announcements. Please, do not bother us with such requests!
Download Telegram
A nice visualization of Go dependencies.

It's interesting how you can instantly see packages that support hundreds, if not thousands, of others. I would have guessed that testify is popular, but I wouldn't have guessed that it's the most popular.

Also, I did not expect to see Viper and Cobra being so influential, even though I think they are cool.

#go #programming
​​Today, I’d like to remind you about the fundraiser a friend of mine is doing. The goal is to raise 70k UAH for a pickup truck for Zaporizhzhia direction.

You can donate on this Monobank jar:

https://send.monobank.ua/jar/8Mjotj4Uei

#donations #Ukraine
❤2
An interesting article on how to configure AI reviews for Terraform plans with GitHub Actions and AWS Bedrock.

I don’t necessarily like the style of this article, but the content is cool. Now, I need to check how to do something similar with Atlantis. I presume, I could just trigger a GHA on a comment.

P.S. This article was brought to you by weekly.tf. If you actively work with Terraform, you may find this newsletter helpful. So, make sure to subscribe!

#terraform #ai
👍5❤1👏1
I recall, back in the day, there was a popular interview question: "What would you not automate in your job?" I haven't heard it for a while, but with AI now, maybe it's still relevant. Perhaps it's even more relevant than back then.

What SREs Should Automate — and Never Automate — with AI is an article about that. I would argue that the point about security incidents contradicts a bit to what was said earlier: if AI can collect the data for a normal incident, why cannot it do the same for the security one? A human would still stay in charge of the remediation and the final decision.

#sre #ai
🔥4❤1
There will be no digest today because I haven't posted much this week.

So, instead here is an article from Anthropic on how to deal with the strain that AI development and reviews put on CI. This is a real problem in the AI-driven SDLC, or so-called "software factories", but unlike code reviews and harnesses, it's not been talked about so much, unfortunately.

#cicd #ai
👍2
​​A good friend of the channel raises funds for his new unit (a small air defense unit). They are raising funds for tools and materials for their positions.

You can donate to this Monobank jar:

https://send.monobank.ua/jar/4SB2PtGPzV

#donations #Ukraine
❤4
Shopify wrote an article on them moving from React Native to the native code for their mobile apps. They were already ridiculed for this on Reddit for the lack of in-house knowledge of the native languages. However, I think this is a great precedent for AI. Apparently, if you know the end goal and you have enough of guardrails, you can do that. The argument that AI won't be able to debug something in the future is as applicable to humans as to AI.

At the same time, Shopify's CEO calls out that people are throwing "slop grenades" at each other. Yet, two things can be true at the same time. You can successfully use AI for major refactorings and throw "slop grenades" in the form of useless documents.

#ai #programming
❤3
​​For today’s Donations Monday, I’d like to remind you about a fundraiser for a pickup truck for the Zaporizhzhia direction.

You can donate on this Monobank jar:

https://send.monobank.ua/jar/8Mjotj4Uei

#donations #Ukraine
❤1👍1
​​I traded my personal information for this report, so you don’t have to!

DataDog presents to you the State of AI Engineering

There are some not so surprising findings, but also some less obvious things.

#ai #report
👍6❤‍🔥1
A colleague of mine wrote an article about data migrations.

Handling data migrations without anyone noticing.

This one specifically is about a data migration that took several days and involved some external systems.

Hopefully, these learnings will help you to design similar migrations at your place!

#data #programming
👍2🔥1
I’m going on a vacation, which means that I likely won’t post at all or post something very occasionally for the next 2 weeks.

Here are 2 AI-related book bundles on Humble Bundle, so I don’t just leave an informational message here.

- AI in Production by Manning - only 4 days left.
- GenAI and Agentic AI by BPB - 20 days left.

See you in the end of October!
❤7
While I’m still enjoying my vacation, this CVE is too interesting to pass by.

PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999).

First of all, it has a neat number, but it is also has 9.3 severity score.

This CVE describes how the IPv4 checksum check mechanism in Linux can be used to gain access to the host machine from a sandbox or a virtual machine.

The former article explains how this CVE was identified. And yes, it was found with help of AI, and apparently it dates back to the 2.x kernel versions. Modern kernels such as 6.x and 7.x are affected as well, although there are already security patches available.

Patch your stuff, especially if you’re providing resources for untrusted guests.

#security
😱3👍1
CatOps
I’m still enjoying my vacation
This media is not supported in your browser
VIEW IN TELEGRAM
Are you sure that it is a vacation, and not just location/activity change? Why I still see you checking CVEs at vacation? Go outside, idk, read book not emails and reddit 😜

Btw, happy Friday, everyone!
😁15❤1