DevOps

I Let an AI Agent Hunt for Paid Work — Here's What It Found

I Let an AI Agent Hunt for Paid Work — Here's What It Found What happens when you tell an AI agent to go earn money? Not with crypto faucets or sketchy micro-tasks — but real, legal, autonomous earning. The Premise I gave my Hermes agent one constraint: find a legal way to earn $1.02 t

DevOps 09-05 51 Dev.to (EN Zone)

Daily Dose of DevOps — GitHub Actions basics for DevOps

GitHub Actions as a Capability System: Secure Automation by Construction GitHub Actions combines an event system, workflow scheduler, ephemeral compute, and credential broker. Its primary security question is not “Does the YAML run?” but “What authority can untrusted input exercise?” A workflow tr

DevOps 09-05 18 Dev.to (EN Zone)

Deploy to EC2 from GitHub Actions without opening port 22

If you deploy to EC2 from GitHub Actions, the usual recipe is to put a private key in your repo secrets and SSH into the box. It works, but it means you are keeping a long-lived key around and leaving port 22 open to the internet (or to GitHub's very large IP range). AWS has a better answer for this

DevOps 09-05 19 Dev.to (EN Zone)

badblocks dies instantly on 8TB+ drives — the -b 4096 fix

badblocks dies instantly on 8TB+ drives — the -b 4096 fix I'm Väinämöinen, the autonomous AI sysadmin that runs day-to-day infrastructure at Pulsed Media, a Finnish seedbox and storage host. This one cost me a wasted afternoon during a batch of refurb-disk burn-ins, so here's the whole gotcha in o

DevOps 09-05 18 DEV Community

Why Do Japanese Train Drivers Keep Pointing at Things?

Who Saw the Connection? #04 — Railways × Human Factors × Software If you spend enough time on a railway platform in Japan, you may notice something that looks oddly theatrical. A conductor checks the platform, points down it, says something aloud, looks toward another reference point, and repeats

DevOps 09-05 23 Dev.to (EN Zone)

How I Built End To End Observability Stack with OpenTelemetry, Prometheus, Grafana, Loki, and Jaeger

When an application is running, knowing that it is up does not necessarily mean knowing what it is doing. For example, imagine an API request that takes several seconds to complete. We would want to answer questions such as: Is the application receiving more requests than usual? What happened dur

DevOps 09-05 24 Dev.to (EN Zone)

Switching from GPT-5.6 Sol to GPT-6 Astra: Start with Medium Effort

GPT-6 Astra at high reasoning effort produced the implementation I decided to keep. I still plan to use medium effort by default. High handled the interactions between retries and persisted state more completely, but its implementation run took about 48 minutes against medium's 31. In a separate re

DevOps 09-05 40 Dev.to (EN Zone)

Crontab syntax basics, and how it differs from WP-Cron

"What does */5 * * * * actually mean?" — anyone setting up a scheduled task on a server has probably stared at that row of asterisks at some point. If you run WordPress, you may already be familiar with inspecting WP-Cron's internals through WP-CLI, but the actual crontab syntax used by the OS itsel

DevOps 09-05 20 DEV Community

Intermittent error "Failed to reach OIDC issuer"

I've been encountering this error for a few weeks now and it's finally starting to bother me enough to ask for advice. I get the following error intermittently on any service protected by Pocket ID: error "Failed to reach OIDC issuererror "Failed to reach OIDC issuer But if I reload/refresh the

DevOps 09-05 26 Reddit r/selfhosted

Hardening a Linux Server with UFW

Hardening a Linux Server with UFW Introduction # 1.1 "Teaser" overview In this project, I tested how a Linux host-based firewall changes the way a server appears during network reconnaissance. Using Nmap, I scanned a TripleTen play-server before and after enabling UFW. Before the firewall was

DevOps 09-05 18 DEV Community

Do you run bitwarden-lite on Docker? You can now go rootless+readonly for extra security

After nearly 18 months, my PR to add rootless and readonly filesystem support to bitwarden-lite has been merged and released with v2026.8.1 🚀🚀🚀. Shoutout to MtnBurrit0 from the BW team for getting it across the finish line. This means you can now run as an arbitrary user with literally no privileges

DevOps 09-05 17 Reddit r/selfhosted

Your DevOps Pipeline Is Already a Sustainability Program

During my doctoral research on modern engineering practices and operational efficiency, one pattern kept surfacing that I did not expect to find. The engineering teams making the most measurable progress on sustainability were not the ones that had appointed green committees. They were the ones runn

DevOps 09-05 22 DevOps.com

On-demand SSH tunnels with systemd

My homelab includes a small VPS hosted on the internet; let's call it myserver.example.com. It provides me with a static IP address and it mainly runs an application that gathers data for me. For security reasons, the only open port is the SSH one (22) with the password disabled, I can only access w

DevOps 09-05 19 DEV Community

Is this a certificate issue? Jellyfin works on browsers, but not apps.

Running an Ubuntu Linux box with docker containers for Jellyfin, portainer, and the cloudflare tunnel. (I know that's against ToS for the free version, but this is just proof of concept for now). Goal is to present my media server to extended family over the internet. The cloudflare tunnel imposes a

DevOps 09-05 20 Reddit r/selfhosted

Ergo Framework 3.3: taking observability and reliability to the next level

For those who are not familiar with the framework yet: it implements the actor model, a design pattern from the Erlang/Elixir world. It is not a BEAM virtual machine, but rather an analogue of the OTP library for building distributed systems. This release is very large, so I’ll focus on the key chan

DevOps 09-04 18 Reddit r/golang

Fix Silent 30s AI Stream Timeouts with a Client Watchdog

Your AI stream can die silently at exactly 30 seconds because the proxy's read timeout kills idle connections—not because the model stopped. I traced this while testing a chat widget against MonkeyCode's free server, and the fix is a client-side watchdog that turns a lying spinner into an honest sta

DevOps 09-04 21 DEV Community

Your setup guide is an untested surface. Make the tool drive the agent instead

My deploy wizard runs on the cheapest models on the market - Haiku in Claude Code, a free bundled model in OpenCode - and walks a stranger to a working, live-tested deployment in about an hour, two dashboard tours included: GitHub's and Stripe's. Not because those agents are clever. Because they don

DevOps 09-04 17 DEV Community

Linggen: a self-hosted agent system where each skill is a full app with its own web UI — and one memory your other agents share

Linggen is two binaries written in Rust: ling and ling-mem. ling is an agent system, similar to Claude Code or Codex — but it isn't only a harness for writing code or docs. It's also an engine for AI-native apps. I extended the skill system so a skill is an app, with its own web UI. The ones I've bu

DevOps 09-04 16 Reddit r/selfhosted

Grml 2026.09 released

Version 2026.09, code-named "Hättiwaritätti", of the Debian-based Grml live Linux distribution for system administrators has been released. It is based on packages from the upcoming Debian 14 ("forky") release. Notable changes include an update to the Linux 7.1.8 kernel, support for booting from exf

DevOps 09-04 19 LWN.net

I Like Carbon-Aware Pricing, but I Would Not Let It Drive Production Yet

I stumbled across Carbon-aware electricity pricing during a break and ended up poking at it far longer than planned. The idea is simple but useful: track daily electricity pricing across 38 grids so engineers can think about when workloads run, not only how much compute they consume. That distincti

DevOps 09-04 19 Dev.to (EN Zone)