Clair is an open-source container vulnerability scanner recently released by CoreOs. The tool cross-checks if a Docker image's operating system and any of its installed packages match any known insecure package versions. The vulnerabilities are fetched from OS-specific common vulnerabilities and exposures databases. Currently supported are Red Hat, Ubuntu, and Debian.
InfoQ recently sat down with Steve Smith and discussed the ideas behind his recent blog post “End-to-End Testing Considered Harmful”. Smith talked about release testing being a form of ‘risk management theatre’, discussed the benefit of unit and acceptance testing, and stressed the value of monitoring at runtime versus the typically fragile and slow-running implementation of end-to-end testing.
An interview with Nicole Forsgren about why organizations are starting to embrace DevOps methods, how being able to deploy fast can also increase IT stability, what to focus upon when changing the organizational culture to improve performance, how lean management can help to increase the performance, and asked her for advice when organizations want to apply DevOps to increase their performance.
At DockerCon EU 2015, Laura Frank presented “Stop Being Lazy, and Test Your Software”. Frank proposed that testing software is necessary, no matter the size or status of your company, and introducing Docker to the development workflow can assist with writing and running testing frameworks more efficiently, and ultimately facilitate the delivery of high quality software products to customers.
Docker Inc. has unveiled Docker Universal Control Plane at DockerCon EU celebrated this month in Barcelona. DUCP is a commercial solution for deploying and managing Dockerized distributed applications in production delivering Containers as a Service (CaaS).
Patrick Debois, leading light of the DevOps movement, has been working on the "mobile continuous delivery" space for the past year and recently shared what he has been learning at the Velocity conference. His talk mentioned dozens of tools, scripts, and applications that cover the full mobile software development lifecycle. InfoQ took the opportunity to talk to Debois on the subject.
InfoQ had the opportunity to interview Daniel Jacobson about ephemeral APIs, their link to experience-based APIs and when to consider them. He also explains why generic resource-based API architectures can run into problems at scale and why he doesn’t use an API descriptor language. Finally, he describes the various tools they built to deliver those APIs including Falcor, Scryer or Nicobar.
Gojko Adzic presented a keynote on "how to turn continuous delivery into competitive business advantage" at the Agile Tour London 2015. InfoQ interviewed Adzic about getting benefits from continuous delivery, Gojko's three rules of continuous delivery, possible problems and risks, and using multi versioning with continuous delivery.
At Flight 2015, its developer conference, Twitter announced that fastlane, has been included into Fabric, Twitter’s mobile development platform. As part of this announcement, Twitter is also making Fastlane, originally developed by Felix Krause for iOS, available for Android.
Development and collaboration software vendor Atlassian released version 7 of its project tracking application JIRA as three new standalone products: JIRA Core, JIRA Software and JIRA Service Desk. All three products are build atop a common platform to better serve non-technical business teams, development teams as well as IT and other service teams with an edition tailored to each team’s needs.
Technology leaders are moving towards Continuous Delivery and Agile to accelerate business innovation.This post talks about the importance of cultural shift in successful Continuous Delivery implementation in the organizations.
Puppet Labs’ latest version of Puppet Enterprise - version 2015.2 - includes new features like node graph visualization, inventory filtering, and a VMware vSphere module. It provides users with major enhancements of the Puppet Language and an updated web UI. InfoQ spoke with Michael Olson, Senior Product Marketing Manager at Puppet Labs .
At the fifth ‘Agile on the Beach’ conference, held in Cornwall, UK, several leading practitioners of agile software delivery presented the state-of-the-art and emerging trends within this domain. Key messages included the need for the more rigorous use of the scientific method throughout the software delivery lifecycle, and the benefits provided by applying agile principles to product development.
At QCon San Francisco, we offer two days of workshops (Nov 19-20). Workshops focus on developing the technical skills that leverage technologies you heard about from our expert practitioners during the conference sessions. Here is a glimpse at some of the experts you can learn from QCon SF ‘15 workshops.
The Puppet Labs: State of DevOps Report 2015 shows the current DevOps trends in IT, comparing the high and low performers in terms of deployment success and stability, and observing the link between architecture and developer productivity.