When a certificate expires, it can take down a production system, and teams usually only find out after something goes wrong. These issues are hard to catch because they rarely trigger alerts. Expired certificates often remain unnoticed in a config file or an old key until they cause trouble.Enterprise apps are no longer single, self-contained programs. Today, a typical app includes many services, APIs, mobile clients, and new cloud workloads are added all the time. Instead of asking, “Are we secure enough?” it is better to ask whether security was built in from the beginning or added later. Most teams…
Author: drweb
TL;DR — Key TakeawaysHarness is bringing CI/CD to AI agents. Teams can now build, test, deploy and govern agents through familiar DevOps workflows.Traditional testing is not enough. Agents can behave differently on identical inputs, making regressions harder to catch and failures harder to reproduce.AgentTrace exposes the decision path. Teams can see which tools an agent used, what actions it took and where a run went wrong.Harness today extended the reach of its core continuous integration/continuous delivery (CI/CD) platform to enable DevOps teams to build and deploy artificial intelligence (AI) agents.At the core of that capability are five additions to the…
Prometheus stores every metric it collects in its own time-series database (TSDB). Over time, this database grows, and if your disk fills up or the server goes down, you’ll need to know how to manage and recover it. You might install Prometheus, configure a few targets, and let it run for months without any issues. Then one day, /var/lib/prometheus becomes full, Prometheus refuses to start, and you find a directory full of numbered folders without knowing what they are or whether it’s safe to remove them. In this chapter, you’ll learn where Prometheus stores its data, how to configure data…
TL;DR — Key TakeawaysHashiCorp has launched tfpolicy in public beta, allowing teams to write Terraform governance policies directly in HCL.tfpolicy can evaluate resource relationships, external data, provider and module usage, and live infrastructure after deployment.The framework reduces reliance on separate policy languages and tools while bringing governance closer to existing Terraform workflows.HashiCorp has introduced Terraform policy (tfpolicy), a new policy-as-code framework built directly into Terraform. Now available in public beta on HCP Terraform, tfpolicy lets platform teams write governance rules in HCL, the same language they already use to define infrastructure, rather than reaching for a separate policy tool and…
TL;DR — Key TakeawaysxAI released Grok Build under an Apache 2.0 license shortly after researchers discovered undocumented repository uploads.The uploads reportedly included unused files, SSH keys, environment files and other sensitive developer data.Open sourcing improves transparency, but teams should still audit network traffic, restrict agent permissions and rotate potentially exposed credentials.xAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed the tool quietly shipping entire developer repositories — SSH keys and password databases included — to a Google…
A gentleman joined my call looking like he had not slept in a month. His website checkout had been slow for six months. Six months! He threw money at it. A bigger server. More memory. He even rewrote the same code twice. The slowness said thank you and stayed. Then, about seventy five minutes into our database performance health check, we found the troublemaker sitting right there on the screen. By the time our tea went cold, the fix was already live. So please, do not call me a genius. I just looked in the right place. That is the whole…
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience.Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers.Of course, the pool of available DevOps talent is still relatively constrained, so when one DevOps professional takes on a new role, it tends to create opportunities for others.The ten job postings shared this week are selected based on the company looking to hire, the vertical industry segment and naturally, the pay…
In the previous post, we’ve built a SQL Server 2025 sandbox in an OrbStack container in a Macbook. If you are like me who switched from a Windows laptop to MacBook, you are probably missing your SQL Server. Sometimes it’s just nice to have a sandbox that is separate from your all other instances for testing and learning. This is exactly what we’re trying to do here.Download the BackupFor this exercise we want to download the full backup of Wide World Importers. Go ahead and download it from the github repo which you can find it here. And of course,…
In Part 1, we walked through six categories of AI coding agent failures and why they keep happening. The agent runs as you, with your filesystem permissions and your credentials, and nothing sits between the model’s decision and the shell’s execution. In Part 2, we looked at one specific version of that failure in detail, the rm -rf ~/ incident that wiped a developer’s entire Mac in a single command. Part 3 moves the same problem up the stack, into a production AWS environment where the blast radius is no longer one laptop but a regional cloud service. What can…
This walks through what a Claude Code Skill actually is, how to install pre-built skills from Anthropic’s marketplace, how to drop a custom SKILL.md file into place by hand, and how to write your own skill from scratch on Linux. Most people assume Claude Code figures out every task the same way, by reading your prompt and guessing at the best approach on the spot. It doesn’t. For anything you do repeatedly, it can reach into a folder on disk, pull out instructions you or Anthropic already wrote for that exact situation, and follow them instead of reinventing the process…