DevOps and Docker Talk: Cloud Native Interviews and Tooling

Bret and Matt welcome Jake Warner back to the show to talk about LowOps. What does LowOps mean? What can Cycle offer us as an alternative to Swarm and Kubernetes?

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Jake Warner is the CEO and founder of Cycle.io. And I had him on the show a few years ago when I first heard about Cycle and I wanted to get an update on their platform offering. On this show we generally talk about Docker and Kubernetes but I'm also interested in any container tooling that can help us deploy and manage container based applications. Cycles' platform is an alternative container orchestrator as a service. In fact, they go beyond what you would provide normally with a container orchestrator and they provide OS updates, networking, the container runtime, and the orchestrator all in a single offering as a way to reduce the complexity that we're typically faced with when we're deploying Kubernetes.

While I'm a fan of Docker swarm due to its simplicity, it still requires you to manage the OS underneath, to configure networking sometimes, and the feature releases have slowed down in recent years.

But I still have a soft spot for those solutions that are removing the grunt work of OS and update management and helping smaller teams get more work done. I think Cycle has the potential to do that for a lot of teams that aren't all in on the Kubernetes way, but still value the container abstraction as the way to deploy software to servers.

Live recording of the complete show from May 18, 2023 is on YouTube (Ep. #217). Includes demos.

★Topics★
Cycle.io website
@cycleplatform on YouTube

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret and Matt are joined by Corey Quinn to talk about AWS and containers.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Corey Quinn is the Chief Cloud Economist at the Duckbill Group. You may have seen or heard some of his in-depth AWS content, including his Last Week in AWS newsletter and blog, Corey's podcast Screaming in the Cloud and the AWS Morning Brief, or his highly produced YouTube videos on the Last Week in AWS channel.

Corey runs the Duckbill Group, a company of people focused on helping clients understand and manage their cloud spend. If I had to describe Corey in a sentence, he's a quick thinking AWS expert who is one part cloud strategist, and one part sarcasm.

The inspiration for this show came from his blog series, focused on all the ways to run containers on AWS, which is to say there's a lot. Dozens of ways, in fact, which I took as a testament to how containers have won the cloud as the primary way to package and deploy software to servers. Now, the hard part for us is to figure out which method we're going to choose for running those containers.

We go on lots of tangents, but overall it was a fun conversation and I hope you enjoy this episode.

Live recording of the complete show from May 4, 2023 is on YouTube (Ep. #214).

★Topics★
The Cloud Resume Challenge
Last Week in AWS
17 ways to run containers on AWS
17 MORE ways to run containers on AWS

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret and Matt are joined by Brent Baude and Dan Walsh from Red Hat to talk about the latest with Podman, Quadlet, Podman Desktop and Podman machine, and how it all works with Kubernetes.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Dan Walsh, a Senior Distinguished Engineer at Red Hat, has been working with containers since the beginning. He's a contributor to Docker, Project Atomic, SELinux, and a lot more. He literally wrote the book on Podman.

Brent Baude, is a Senior Principal Software Engineer at Red Hat and an architect and a primary maintainer of Podman, and contributes to many of its associated technologies like CRI-O, Buildah, and Skopeo.

We go through a lot of tooling in this episode because Red Hat has taken a different stance than Docker in how it delivers its container tooling. You might say they take the approach of the Unix philosophy of every program does one thing well. Most of us know Docker and how it bundles many things related to containers into a single command line and daemon, yet some would prefer to isolate pieces of container management functionality into discreet, smaller programs - one for building images, one for running containers, one for communicating with registries, one for adding a GUI to your container manager, and one for managing the container VM. It's just sort of how I would break down the Podman ecosystem.

And while that may seem like a lot of things, it's basically what Docker does for you in a single tool, yet the isolation of these tools is what can make them purpose-fit when you only need a fraction of the functionality of Docker. For example, one of Podman's core tenants is that it tells systemd to run your pods, which is the initialization process on most Linux distributions. In this way, your containers become more like standard system processes, rather than the Docker way of running all containers under the Docker Daemon process itself.

Now many of us have heard of the other two original Red Hat container projects, Skopeo and Buildah, but there's now an increasing number of things the Podman ecosystem can do. So I'm grateful to Dan and Brent for coming on to break down the new parts of this toolkit and how we might use them.

Live recording of the complete show from April 20, 2023 is on YouTube (Ep. #212).

★Topics★
Podman Website
Podman Desktop Website
Dan Walsh's book, Podman in Action
Podman Machine reference
Quadlet Blog Post
Podman and Quadlet Blog Post

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret and his co-host, Matt, are joined by Jason Dellaluce and Luca Guerra from Sysdig to talk about Falco, a tool I recommend for production clusters and knowing about any bad behavior on your servers.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Falco is a security tool I've mentioned multiple times on this show, because I mostly think that a low level security focused logging product is something that every production server needs. The ability to log unexpected events and behaviors on your Linux host is powerful and necessary to be able to audit what's really happening on your infrastructure outside of your app itself.

Falco has been a CNCF incubating project for over four years, and I was immediately drawn to it in its early days, because it was container and Kubernetes aware and it could log and alert with default rules for everything, from someone starting a shell inside a container, to a bash history file being deleted, to a container trying to talk to the Kubernetes API.

This episode will be useful for those of you new to tools like Falco and for those familiar with its basics, but also wanting to learn about newer features and use cases, which I did some learning on myself in this episode.

Live recording of the complete show from April 6, 2023 is on YouTube (Ep. #210).

★Topics★
Falco website
Falco on CNCF

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret is joined by Lukas Gentele and Rich Burroughs from Loft Labs to look at a new project called DevPod, that supports dev containers and VMs. It works with local Docker instances and AWS, GCP, Azure, and several other cloud providers. The project is compatible with Microsoft's DevContainer standard, which means it works with the VC Code standalone app and VS Code in the browser.

Lukas and Rich were on this show last year, showing off vcluster, which allows you to run a full Kubernetes cluster inside an existing Kubernetes namespace. In this episode, we announce the release of DevPod and also go through some demos. I'm already thinking of how I might use it in my own developer workflow.

Live recording of the complete show from May 16, 2023 is on YouTube (Ep. #216). Includes demos.

★Topics★
DevPod website
DevPod on Twitter

Creators & Guests

• (00:00) - Intro

Bret and Matt are joined by two engineers in Docker's leadership - Chief Technology Officer Justin Cormack and Senior Manager of Developer Relations Michael Irwin, to talk about recent Docker Hub changes, as well as their latest product releases.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

We touch on Docker's latest updates and announcements, focusing on the early releases of Docker Scout, Docker plus WebAssembly, and the Telepresence extension for Docker Desktop. We also look at Docker's version 23 release, its first major update in three years, with key changes including BuildKit becoming the default builder, the ability to run alternate containerd shims, and a return to semantic versioning.

Other updates include new Swarm features and deprecation of older features, specifically older storage drivers.

In the show we also cover Docker's recent announcement and subsequent retraction of a plan to require free Docker Hub organizations to move to different plans.

Live recording of the complete show from March 23, 2023 is on YouTube (Ep. #208).

★Topics★
Docker v23 release
Docker Hub org changes
Docker Scout
Technical preview of Docker+Wasm
Telepresence for Docker announcement

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret and Matt are joined by Chad Crowell of KubeSkills to walk through how you can contribute to Kubernetes open source.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Chad started the kubeskills.com community and podcast to focus on learning Kubernetes by doing and in this episode, he's taking us through a detailed guide on how to get involved in the Kubernetes community.

Although Kubernetes and other CNCF projects may seem big and complex with tons of activity, Chad helps us understand how the maturity of the projects and the community make it a much more pleasant onboarding experience for first-time contributors. We go through a wide range of resources and steps to help your first issue or pull request go smoothly.

Live recording of this show from March 9, 2023 is on YouTube (Ep. #206).

★Topics★
Learning K8s by Open Source PDF slides
First Timers Only website
K8s Contributor Community Homepage
List of K8s SIGs
K8s Slack
Open Sauced website
K8s Contributors onboarding course
Kube Cuddle podcast with Joe Beda
Learning K8s Skills
 

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret is joined by fellow Docker Captain Nuno do Carmo to talk about desktop container solutions and the best Docker setup for Windows 11.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Nuno's a Docker Captain, Civo Ambassador, Microsoft MVP, and a big fan of Windows and Cloud Native. I've had him on the show before, because the more you use the Windows Subsystem for Linux and Docker Desktop, the more you'll want to use WSL.

Nuno helps answer many questions such as where are the Linux files stored, managing the CPU and memory resources, backing up files in WSL, getting the host Windows Explorer into the Linux filesystem, getting back to the Windows file system from the Linux shell and more!

Live recording of this show from February 23, 2023 on YouTube (Ep. #204). Includes demos.

★Topics★
Nuno's WSL blog
Bret's Docker Desktop alternatives list
Rancher Desktop website
Podman Desktop website

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro

Bret is joined by Project Calico's Tomas Hruby from Tigera to dig into Calico CNI features for Kubernetes and beyond.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Calico can be used in a lot of places, including Linux, Windows, containers, bare metal, eBPF or iptables. Many of us learned about it as a CNI option for Kubernetes network and networking policy.

Streamed live on YouTube on February 9, 2023.

Unedited live recording of this show on YouTube (Ep. #202). Includes demos.

★Topics★
Project Calico
Tigera Website
Project Calico on Tigera's Website

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Homepage bretfisher.com

• (00:00) - Intro

THIS EPISODE IS OUT OF DATE. Docker reverses course and cancels plans for Docker Hub Free Org changes.  
❤️❤️❤️
https://www.docker.com/blog/no-longer-sunsetting-the-free-team-plan/

Original Show Notes
===============
On the 14th of March, 2023, about 2% of Docker accounts received an email that our Docker Hub organizations were no longer eligible for the Free Plan, and that after April 14th, 2023, those orgs and all their repositories and images would be unavailable. That is, unless we upgraded to a paid plan for each organization, which would be a minimum of $300/year. To a lot of us in the open-source community, this was alarming.

Much of that communication was misleading, but the good news is Docker released a better FAQ. Because it took 48 hours to release it, many people were (and still are) confused about if they are affected but, now, the FAQ is available.

This podcast is a quick attempt at distilling all that down into the essentials, the gist of what you need to care about. If I'm incorrect on anything here, I will either edit this podcast or just add the update/change to the show notes so you'll see any edits in your podcast player. But if it's a big change, I will probably edit this podcast. So the theory is that if you're listening to this weeks, days, months later, this podcast actually should have the most up-to-date information.

So let's dig in.

Creators & Guests

Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!

Homepage bretfisher.com