DevOps Bulletin

From AWS, Terraform, and Kubernetes to CI/CD pipelines, we've got you covered! 150k+ subscribers ❤️ Hand curated by @mlabouardy

[DevOps Bulletin @devopsbulletin]

Master modern CI/CD with "Pipeline as Code" 🚀! Uncover Jenkins at scale, cloud-native pipelines, seamless Docker/serverless deployments, and the soul of DevOps. 🔗 https://t.co/U0Inw8F29W

[DevOps Bulletin @devopsbulletin]

FinOps used to mean rightsizing EC2.

At FinOpsX this week: CFOs want ROI per model, per workload, per team.

Unit economics per inference. Cost attribution across LLM calls.

Still tagging and rightsizing? 2 years behind.

[DevOps Bulletin @devopsbulletin]

Giving an AI agent push access to prod isn't bold. It's an unreviewed trust model.

Three ways it fails silently:
- declares success based on HTTP 200, not the live commit
- writes audit logs to satisfy rules, not record facts
- stages stale changes from a prior session

[DevOps Bulletin @devopsbulletin]

Asked to finish the sentence. Delivered.

.window { border-radius: 6px; }

That's Windows 11.

[DevOps Bulletin @devopsbulletin]

Run AI models locally. No cloud. No API costs. Just llama.cpp + Docker on your own machine. Here's how:

[DevOps Bulletin @devopsbulletin]

Every open source project in 2026. One contributor. 92.5% TypeScript. You already know who wrote it.

[DevOps Bulletin @devopsbulletin]

Sysdig documented the first LLM-driven intrusion chain.

CVE → credentials → AWS API → internal DB.
4 pivots. Under an hour. No human at the keyboard.

[DevOps Bulletin @devopsbulletin]

An AI agent broke production. Then wrote its own post-mortem saying it fixed it.

340 files changed. 28,745 lines deleted. 33-min outage.

The audit logs it created? Self-generated reasoning blocks.

[DevOps Bulletin @devopsbulletin]

Genuinely the hardest challenge he's ever done.

[DevOps Bulletin @devopsbulletin]

What if your SRE never slept? AWS DevOps Agent can act as an end-to-end agentic SRE, detecting issues, investigating root causes, and taking action automatically. Here's how to build one from scratch.

[DevOps Bulletin @devopsbulletin]

TgNAS turns Telegram into a NAS. It's an S3-compatible, WebDAV-capable gateway that uses Telegram as the storage backend and SQLite for metadata. Free cloud storage with familiar protocols.

[DevOps Bulletin @devopsbulletin]

Started with a data pool. Somewhere along the way it became a waterpark.

[DevOps Bulletin @devopsbulletin]

Malicious versions of node-ipc were published to npm in what looks like a maintainer account compromise. node-ipc has 33M+ weekly downloads. If you depend on it, check your lockfile now.

[DevOps Bulletin @devopsbulletin]

Full breakdown from Krebs: https://t.co/ABHowJCrgn

[DevOps Bulletin @devopsbulletin]

The org responsible for securing US critical infrastructure:

→ Disabled secret scanning by default
→ Stored passwords in plain text CSV
→ Committed backups directly to git

No tooling failure. A deliberate choice to turn off the guardrails.

[DevOps Bulletin @devopsbulletin]

The real cost of AI in production. Welcome back to the team, Rohan.

[DevOps Bulletin @devopsbulletin]

GitHub is having a major incident affecting Pull Requests, Issues, Git Operations, and API Requests. If your pipelines are failing right now, it's not just you.

[DevOps Bulletin @devopsbulletin]

3 hours of debugging. Examined the logs. Found the bug.

[DevOps Bulletin @devopsbulletin]

Docs and setup: https://t.co/08WoyDhYzz

[DevOps Bulletin @devopsbulletin]

→ Tables become interfaces
→ Columns map to proper TS types
→ Initializers and mutators included
→ Zod, Kysely, Knex extensions available

One schema change, one command, types stay in sync.

[DevOps Bulletin @devopsbulletin]

Terraform, CloudFormation, and a pinch of humor make for the perfect recipe in our newsletter. Transform your infrastructure dreams into reality—subscribe at https://t.co/WoSHcEi4oO