Best of DevOps — December 2025

1
Video
CodeHead·21w
Why It Sucks To Be A Fullstack Dev Now
Full stack development has evolved from a valuable versatile skill into an overwhelming expectation to master an ever-expanding technology landscape. The modern stack spans frontend frameworks, backend infrastructure, cloud deployments, and DevOps, forcing developers into shallow knowledge across all areas rather than deep expertise. This creates constant context switching, impostor syndrome, and unrealistic job expectations where companies seek multiple specialized roles under one title. Specialization with T-shaped skills is proving more effective than attempting to master everything, suggesting developers should choose depth in one area while maintaining collaborative breadth.
213
32
2
Article
Lobsters·22w
Use Python for Scripting!
Python 3 offers significant advantages over shell scripts for automation tasks, particularly for cross-platform compatibility. While Bash scripts often fail between Linux and Mac due to GNU vs BSD tool differences, Python's standardized library works consistently across systems. Python provides better readability with human-readable method names, a comprehensive standard library covering JSON, HTTP, and data structures, and is pre-installed on most machines. The article demonstrates practical examples comparing Bash's cryptic syntax with Python's clearer alternatives, recommending Python for scripts that grow beyond 10-20 lines or become difficult to maintain.
131
21
3
Article
The Register·23w
Zig quits GitHub, gripes about Microsoft's AI obsession
The Zig Software Foundation is migrating from GitHub to Codeberg, citing declining engineering quality and neglected critical bugs in GitHub Actions. A CPU-spinning bug in GitHub's safe_sleep script went unaddressed for years despite being reported multiple times, causing CI runners to hang indefinitely. Zig's president criticized Microsoft's AI focus as distracting from core platform maintenance, pointing to what he calls 'vibe-scheduling' where jobs run seemingly at random. The move reflects broader developer concerns about GitHub's priorities, with Codeberg doubling its membership since January as other projects also consider leaving.
119
29
4
Video
ThePrimeTime·21w
Github continues to Downfall
GitHub Actions has suffered from critical bugs for years, including a poorly implemented sleep function that causes infinite loops, consuming entire CPUs and costing users thousands of dollars. A simple fix submitted in 2024 took over a year to merge despite the bug causing CI jobs to hang indefinitely. The codebase shows questionable engineering decisions, from using ping commands as sleep alternatives to busy-wait loops that waste compute resources. These neglected issues have led projects like Zig to abandon GitHub entirely for alternative platforms.
77
11
5
Article
Lobsters·20w
Go ahead, self-host Postgres
Self-hosting Postgres is more practical than cloud providers suggest. The author shares two years of experience running self-hosted Postgres serving millions of daily queries with minimal operational overhead (30 minutes monthly). Managed services like AWS RDS run standard Postgres with operational tooling, but at significant markup. Self-hosting offers better performance tunability, lower costs (dedicated servers cost less than equivalent RDS instances), and comparable reliability. The article provides specific configuration guidance for memory, connections, storage, and WAL settings, plus realistic time estimates for maintenance tasks. Self-hosting makes sense for most teams between complete beginners and enterprise-scale operations requiring dedicated database engineers.
76
5
6
Article
Product Hunt·21w
Console.text(): SMS alerts for your code just like console.log()
Console.text() is a lightweight monitoring tool that sends SMS alerts when specific code paths execute. It requires just one line of code (npm package installation) and offers a simpler alternative to enterprise solutions like Sentry or PagerDuty. The service provides 50 free messages for testing with rate limiting of 10 unique messages per 5-minute window, targeting solo developers and small projects that need basic production alerts without complex setup.
73
12
7
Article
selfh.st·21w
dockcheck: A CLI Tool for Updating Container Images
dockcheck is a CLI tool that checks for Docker container image updates without pulling images first. It supports parallel processing, automatic updates, exclusion filters, and notifications via multiple channels (Matrix, Telegram). Configuration is handled through flags or a config file, with Docker Compose labels for fine-grained control. The tool can be scheduled via cron for automated update workflows, with options to delay updates until releases stabilize. Community contributions have added integrations for Prometheus, Zabbix, Unraid, and Synology DSM.
70
2
8
Video
Theo - t3․gg·20w
The Github Tax (I can't believe they actually did this...)
GitHub announced a new fee structure charging 0.008 cents per minute for using self-hosted runners with GitHub Actions, even when compute runs on third-party platforms like Blacksmith or Depot. This pricing change affects all self-hosted runners and has sparked widespread criticism from developers who view it as penalizing users for choosing alternatives to GitHub's infrastructure. The fee applies regardless of whether jobs run for seconds or minutes, and critics argue GitHub is extracting revenue from an ecosystem while failing to invest in improving Actions' performance, reliability, and observability. The change has intensified concerns about GitHub's direction under Microsoft ownership and lack of clear leadership.
67
14
9
Article
Crunchy Data·21w
Postgres 18 New Default for Data Checksums and...
Postgres 18 now enables data checksums by default during database initialization, providing automatic protection against silent data corruption. Data checksums work by calculating and storing a digital fingerprint for each 8KB data page, then verifying it on read to detect corruption. While this improves data integrity out-of-the-box, it creates a compatibility challenge for pg_upgrade users: both old and new clusters must have matching checksum settings. Existing databases without checksums can either use the new --no-data-checksums flag during upgrade initialization, or preferably enable checksums beforehand using the pg_checksums utility (though this requires downtime).
47
1
10
Video
TechWorld with Nana·19w
From Non IT to Lead DevOps Engineer | The Exact Roadmap
A civil engineer from Nigeria transitioned to a Lead DevOps Engineer role in the UK within 9 months through structured learning, strategic career planning, and hands-on practice. Starting with zero IT experience while working retail night shifts and facing visa pressure, he chose DevOps for its high salary threshold enabling visa sponsorship. After scattered learning attempts, he enrolled in a structured DevOps bootcamp, passed the CKA certification, and built comprehensive projects demonstrating integrated tool knowledge. His deep conceptual understanding of CI/CD optimization, Docker layer caching, and Kubernetes fundamentals helped him excel in technical interviews. He negotiated between two offers, choosing the role with modern tech stack (Kubernetes, Terraform, Ansible) over legacy tools, resulting in 25% higher salary. On the job, he immediately added value by building production Kubernetes clusters from scratch and implementing security scanning pipelines, earning a 10% raise within his first year.
32
5
11
Article
FREEK.DEV·21w
A Production-Ready Laravel Architecture with Traefik and FrankenPHP
A guide demonstrates how to deploy a high-performance Laravel application using Laravel Octane with FrankenPHP as the application server, Traefik as a reverse proxy, and Docker Compose for orchestration. The architecture focuses on production readiness with automated workflows and optimized performance for PHP applications.
32
9
12
Article
freeCodeCamp·22w
Git & GitHub Crash Course for Beginners
A comprehensive 1-hour video course covering Git and GitHub fundamentals, including core commands (add, commit, status, log, reset, restore), branching and merging strategies, handling merge conflicts, remote repository operations (push, pull), advanced workflows with stash and rebase, and collaborative development through pull requests. Designed to build strong foundational knowledge for developers new to version control.
31
13
Article
swizec.com·22w
How good engineering unlocks fast scaling
Manual processes that work early on become bottlenecks as companies grow. A four-step framework helps engineers automate repetitive work: do the task manually first, document it as a standard operating procedure, convert stable procedures into scripts, and finally build self-service tools for non-engineers. This progression removes engineering as a blocker, empowers other teams to self-serve, and frees up time for high-value work. Real examples include building a CMS for appointment types that saved a month of engineering work annually.
30
14
Article
Noted·19w
Dockhand - The Ultimate Self-Hosted Docker Management Tool
Dockhand is a self-hosted Docker management platform offering comprehensive container lifecycle control, compose stack deployment, real-time monitoring, and vulnerability scanning. Features include Git integration for automated deployments, remote host connectivity via HTTP/HTTPS or the Hawser agent (supporting NAT traversal), file browsing, terminal access, and flexible notifications. Supports both SQLite and PostgreSQL databases. The free edition includes local authentication, SSO/OIDC, and MFA, while the enterprise edition adds RBAC, LDAP, and audit logging. Released under Business Source License 1.1 with full source code available on GitHub.
27
1
15
Article
Netflix TechBlog·20w
How Temporal Powers Reliable Cloud Operations at Netflix
Netflix reduced transient deployment failures from 4% to 0.0001% by migrating cloud operation orchestration from Spinnaker's homegrown system to Temporal's durable execution platform. The original Clouddriver service suffered from complex internal orchestration, instance-local state, and unreliable retry logic. By implementing cloud operations as Temporal workflows with activities, Netflix eliminated tight coupling between services, removed thousands of lines of custom orchestration code, and gained automatic retries, state persistence, and better observability. The migration used abstraction layers and dynamic configuration to transparently onboard all applications within two quarters.
26
16
Video
Dreams of Code·20w
Doppler is without a doubt my favorite secrets management platform
Doppler is a secrets management platform that provides a centralized solution for storing, managing, and syncing secrets across local development, multiple environments, CI/CD pipelines, and production deployments. It eliminates the limitations of .env files by offering features like automatic synchronization with cloud platforms (Vercel, Railway, Netlify), Kubernetes operator support, audit logging, automatic rotation, and webhook integrations. The platform supports both CLI and web UI workflows, allows personal environment overrides, and works offline with encrypted cached secrets. It integrates with deployment platforms natively or through custom webhooks for platforms like Dockploy.
24
2
17
Article
Cloudflare·20w
Code Orange: Fail Small — Our resilience plan following recent incidents
Cloudflare declared "Code Orange: Fail Small" following two major outages in November and December 2025. Both incidents were caused by instantaneous global deployment of configuration changes that broke the network. The resilience plan focuses on three areas: implementing controlled rollouts for configuration changes (similar to existing software deployment processes), reviewing and improving failure modes across all systems to handle errors gracefully, and fixing break glass procedures to remove circular dependencies. The goal is to ensure configuration changes pass through testing gates before global deployment, preventing single changes from taking down the entire network.
24
1
18
Article
Halodoc·21w
Kubernetes OptimizationInPlace Pod Resizing,ZoneAware Routin
Halodoc reduced Kubernetes infrastructure costs by implementing two optimization strategies: in-place pod resizing to dynamically adjust resources during low-traffic periods without restarts (achieving ~15% CPU and ~10% memory reduction), and zone-aware routing to minimize cross-AZ traffic (reducing data transfer costs by ~25% and latency by ~5%). The approach uses a custom scheduler for periodic resource patching and Kubernetes' trafficDistribution: PreferClose feature combined with topology spread constraints to keep traffic within availability zones.
24
19
Article
DevBlogs·20w
Azure Boards integration with GitHub Copilot
Azure Boards now integrates with GitHub Copilot in general availability, allowing teams to send work items directly to Copilot's coding agent. The agent reads work item descriptions and comments, generates code changes, creates a branch and draft pull request, and links everything back for traceability. New features include branch selection and Copilot status visibility on Kanban cards. Requirements include GitHub-hosted repos, Azure Boards-GitHub integration, and enabled Copilot coding agent. Future enhancements will support custom agents, model selection, and REST API automation.
22
20
Article
Code Like A Girl·23w
CKAD Certified! A Guide to Passing the Exam
A personal account of preparing for and passing the Certified Kubernetes Application Developer (CKAD) exam. Covers a structured 45-day preparation timeline using KodeKloud's Udemy course, mock tests from killer.sh, and hands-on practice exercises. Emphasizes the practical, hands-on nature of the exam with 17 questions in 2 hours, importance of mastering Kubernetes documentation, time management strategies, and exam day logistics. Includes specific tips like using copy-paste to avoid errors, flagging difficult questions, and understanding partial scoring.
22
21
Article
elastic·22w
Elastic Stack 9.1.8 released
Elastic Stack version 9.1.8 has been released with bug fixes and updates. The release is recommended as an upgrade over version 9.1.7, with full details available in the official release notes.
20
22
Article
Hacker News·21w
Goodbye Microservices
Twilio Segment migrated from 140+ microservices back to a monolithic architecture after microservices created unsustainable operational overhead. The team consolidated separate repos and queues into a single service with a unified test suite using Traffic Recorder. This transition dramatically improved developer productivity (46% more library improvements), reduced deployment complexity from 140+ services to one, and simplified scaling. While accepting trade-offs like reduced fault isolation and less effective in-memory caching, the monolith proved more suitable for their server-side destinations pipeline.
19
4
23
Video
Continuous Delivery·21w
We Tried Trunk-Based Development... The Results Were Shocking.
A real-world case study from MFT Energy demonstrates how a team successfully adopted trunk-based development by committing directly to main with no branches. The team made ~2,500 commits (90% under 200 lines) while building a power trading bidding service under tight deadlines. Results showed main remained deployable (9/10 score), high quality (8.5/10), excellent DORA metrics, and strong team preference (8.5/10 would continue). Success came from small batches, fast feedback, and low transaction costs. However, non-blocking code reviews scored poorly (6/10, -7 NPS) due to lack of prioritization and unclear purpose. The team found trunk-based development worked well even without mandatory TDD or pair programming, proving that small increments with fast feedback create quality and stability.
19
12
24
Video
Anthony Sistilli·22w
CEO: Cloudflare is down again? lets buy it
A satirical dialogue depicting non-technical executives misunderstanding the scale and importance of Cloudflare after experiencing downtime. The humor centers on their naive belief that Cloudflare is a small company that could be easily acquired or replicated, despite it serving half the internet's infrastructure needs.
19
8
25
Article
Ayende @ Rahien·21w
RavenDB Kubernetes Operator
RavenDB has released an official Kubernetes Operator that simplifies deploying and managing RavenDB clusters in Kubernetes environments. The Operator automates certificate management, handles safe rolling upgrades with health checks, provides flexible external access options for major cloud providers and ingress controllers, and offers declarative storage orchestration. It eliminates the manual complexity of configuring StatefulSets, Services, and TLS certificates by using a single RavenDBCluster custom resource. The Operator is available via Helm and supports EKS, AKS, Kind, Minikube, and Kubeadm clusters.
16

See all DevOps archives