GitLab has just announced a fix for a number of important security fixes, including a critical privilege escalation, and strongly recommends that all GitLab installations from version 8.2 onwards be upgraded immediately. InfoQ has spoken with GitLab’s Stan Hu, VP of Engineering.
At the OpenStack Summit, held in Austin, USA, CoreOS released ‘Stackanetes’, a framework that deploys standard OpenStack services into containers and uses Kubernetes’ application lifecycle management capabilities to allow organisations to run OpenStack Infrastructure as a Service (IaaS) and containers side-by-side.
"Continuous Delivery with Windows and .Net" is a short book by Matthew Skelton and Chris O'Dell that should be seen as a very useful complement to Jez Humble and Dave Farley's "Continuous Delivery" book for those that work in a Windows and .Net environment. InfoQ talked with the authors to learn more about the state of Continuous Delivery on Windows and .Net.
Last week saw the first DevOps Days conference catering specifically to the enterprise world, in London. Talks ranged from re-thinking (traditional) management processes in a technology-disrupted world to facts and drivers of DevOps adoption by early adopters. The idea of bi-modal IT was also discussed throughout the conference, as well as need for better security and opinionated platforms.
In order to implement DevOps, individuals and organizations must prepare for the culture shift, new tools, and automation. This consensus has evolved during years of debate concerning what exactly DevOps means and how to use it. There are many voices in the discussion, and even with some areas of consensus, many points are far from agreement.
Instagram's continuous deployment pipeline lets them push code faster to production, identify bad commits easily and always be release ready. Put together in an iterative manner over a period of time, the key principles behind it include a high quality test suite, quick identification of bad commits, visibility at each stage to improve buy-in from stakeholders and a working rollback plan.
In July 2013 Security Explorations discovered a vulnerability in Java by which attackers could elevate their access privileges. Oracle released a patch, but a simple modification was discovered that still makes the attack effective. Once known, Oracle released a patch as part of 8u77. In this article we investigate the little understood class loading process at the heart of the problem.
Operational Data Stream and Batch Processing at Netflix with Mantis
Concourse, an open source CI pipeline tool that uses yaml files for configuring pipelines and configuration-free setup, has recently bumped its major release and is currently available in version 1.1.0. Major conceptual benefits of Concourse are explicit and first-class support of pipelines, running isolated builds in containers, avoidance of snowflake build servers and easy access to build logs.
Datawire have released their open source Datawire Connect framework, which allows developers to ‘resiliently connect microservices’ using automatically generated RPC-style client libraries for Java, Python or NodeJS services. The client libraries generated provide service registration and discovery, dynamic load balancing and routing, automated timeouts and circuit breakers.
Microsoft has recently announced the intention to integrate Linux Bash with Windows 10, making it possible to run native Linux ELF64 binaries on their operating system. To avoid incorrect speculation on how this is possible, Deepu Thomas, the Leader of the Windows Subsystem for Linux team, has provided details on how Linux runs on Windows.
Atlassian, makers of development tools such as JIRA and Confluence, have just released version 5.11 of their continuous delivery tool Bamboo with a host of new features to help teams scale and collaborate. The key feature in this new release is the ability to scale from 100 to 250 elastic build agents.
Jare.io, touted as a free Content Delivery Network (CDN), is essentially a wrapper over Amazon’s CloudFront.
GitLab, maker of the homonymous Git-based code management and continuous integration platform, and Y Combinator cloud platform provider DigitalOcean have partnered to provide free hosting to the open source community to move their continuous integration to the cloud.
At this month's Build conference, Microsoft announced a preview of Azure Functions, a service that runs code on-demand. Azure Functions is Microsoft's entry into the increasingly-popular space of event-driven, serverless computing occupied by Amazon, Google, IBM, and others.