oarmstrong

no profile record

comments

oarmstrong

8 ay öncediscuss

I share your disdain for buzzwords but SRE is definitely a different role.

oarmstrong

geçen yıldiscuss

Ah got it, thanks. I thought you were testing the image somehow, a bit like inspec.

Still cool though, nice.

oarmstrong

geçen yıldiscuss

Could you tell me more about the playwright tests? From what I can see it's a web testing framework, I don't see how that fits in here.

oarmstrong

2 yıl öncediscuss

> My CI server uses Firecracker VM's to isolate OCI containers

Is this something you built yourself? I've been looking for a CI tool that uses Firecracker but never found anything, I started building something myself but it never really got finished. Would love to drop that project and use something off the shelf.

oarmstrong

2 yıl öncediscuss

Consul is built upon the Serf library. https://www.serf.io/intro/vs-consul.html

oarmstrong

2 yıl öncediscuss

Yes, the article did.

oarmstrong

2 yıl öncediscuss

Framework has open sourced the EC firmware, not the boot firmware. The UEFI implementation is still closed source proprietary InsydeH2O software.

oarmstrong

3 yıl öncediscuss

Hashicorp's Vault works quite nicely. Teleport is another tool I believe handles this but haven't used it personally.

oarmstrong

3 yıl öncediscuss

Right, running ECS on EC2, not Fargate on EC2. When ECS launched it only had the EC2 launch type (where as you said you must manage your machines). Fargate then came along for both ECS and EKS where Amazon managed the machines for you.

oarmstrong

3 yıl öncediscuss

Fargate on EC2? Sorry you’ve lost me, I understood Fargate to be a layer of AWS managed compute for ECS or EKS deliberately instead of EC2.

oarmstrong

3 yıl öncediscuss

I would imagine so the default behaviour could be identical across platforms.

oarmstrong

3 yıl öncediscuss

I agree that it’s boring and works well. It’s also what I’m most worried about finding a reasonable alternative, we can’t just not update Vault.

Sadly Secrets Manager doesn’t hit all the features I need. Really hoping for an OpenTF-style fork of Vault.

oarmstrong

3 yıl öncediscuss

What are you looking at for a Vault replacement?

oarmstrong

3 yıl öncediscuss

Obviously it’s a different OS and possibly isn’t relevant to you but I’ve found solace in OpenBSD (and other BSDs) in the search of “simplicity” of “the old days”.