Home Blog Page 540

Using Docker in Production

Right now, Docker is an excellent tool to manage distributed applications. This is the result of quite a bit of evolution; in its earlier stages, Docker focused mainly on managing containers themselves. Thinking back to two or three years ago, getting started with Docker was a bit of a pain because there weren’t very mature developer tools in the ecosystem. Instead you were left with documentation and really long “docker run” commands, and you really had to know what was happening at the container level. Now Docker has grown and evolved a bit to where the container is just an implementation detail, allowing you as an engineer to focus on what’s really important: the services themselves. 

Read more at O’Reilly

Security in Serverless: What Gets Better, What Gets Worse?

The emerging serverless computing architecture alleviates several server-oriented security risks, but it also requires new threat analysis and prevention, asserted Snyk CEO and co-founder Guy Podjarny said at the Serverlessconf conference in Austin recently.

In his presentation, Podjarny broke serverless security threats into three categories: Those threats diminished (but still present) in serverless environments, threats that remain the same, and new risks that come from not having to manage servers.

Read more at The New Stack

Top 32 Nmap Command Examples For Sys/Network Admins

Nmap is short for Network Mapper. It is an open source security tool for network exploration, security scanning and auditing. However, nmap command comes with lots of options that can make the utility more robust and difficult to follow for new Linux users.

The purpose of this post is to introduce a user to the nmap command line tool to scan a host and/or network, so to find out the possible vulnerable points in the hosts. You will also learn how to use Nmap for offensive and defensive purposes.

Read more at NixCraft

Keynote: Cloud Native Networking- Amin Vahdat, Fellow & Technical Lead For Networking, Google

https://www.youtube.com/watch?v=1xBZ5DGZZmQ?list=PLbzoR-pLrL6p01ZHHvEeSozpGeVFkFBQZ

Amin Vahdat, Fellow & Technical Lead For Networking at Google, talks about networking challenges we’ll face over the next decade at Open Networking Summit.

Voice-Controlled Home Automation from Scratch Using IBM Watson, Docker, IFTTT, and Serverless

https://www.youtube.com/watch?v=xM1b8Au4pa4?list=PLbzoR-pLrL6pSlkQDW7RpnNLuxPq6WVUR

At the recent Embedded Linux Conference, IBM IoT/Mobile software engineer Kalonji Bankole and IBM Cloud & Watson developer Prashant Khanal detailed Big Blue’s spin on serverless, called IBM Bluemix OpenWhisk

This Week in Open Source News: Google Fuchsia Pros & Cons, Microsoft’s Steady Linux Embrace & More

This week in OSS & Linux news, Jack Wallen shares a rundown of Google Fuchsia features and how they affect Android, Microsoft can no longer ignore Linux in the data center, & more! Read on to stay open-source-informed!

1) Jack Wallen shares pros and cons of Google Fuchsia

What Fuchsia Could Mean For Android– TechRepublic

2) “Microsoft is bridging the gap with Linux by baking it into its own products.”

How Microsoft is Becoming a Linux Vendor– CIO

3) Sprint’s CP30 “is designed to streamline mobile core architecture by collapsing multiple components into as few network nodes as possible.”

Sprint Debuts Open Source NFV/SDN Platform Developed with Intel Labs– Wireless Week

4) Move over, Siri! Open source Mycroft is here to assist us.

This Open-Source AI Voice Assistant Is Challenging Siri and Alexa for Market Superiority– Forbes

5) Heterogenous memory management is being added to the Linux kernel. Here’s what that will mean for machine learning hardware:

Faster Machine Learning is Coming to the Linux Kernel– InfoWorld

Product Development in the Age of Cloud Native

In a cloud native world, where workloads and infrastructure are all geared towards applications that spend their entire life cycle in a cloud environemnt, One of the first shifts was towards lightning fast release cycles. No longer would dev and ops negotiate 6 month chunks of time to ensure safe deployment in production of major application upgrades. No, in a cloud native world, you deploy incremental changes in production whenever needed. And because the dev and test environments have been automated to the extreme, the pipeline for application delivery in production is much shorter and can be triggered by the development team, without needing to wait for a team of ops specialists to clear away obstacles and build out infrastructure – that’s already done.

Read more at Open Source Entrepreneur Network

Google Reveals a Powerful New AI Chip and Supercomputer

At the company’s annual developer conference today, CEO Sundar Pichai announced a new computer processor designed to perform the kind of machine learning that has taken the industry by storm in recent years.

The announcement reflects how rapidly artificial intelligence is transforming Google itself, and it is the surest sign yet that the company plans to lead the development of every relevant aspect of software and hardware.

Perhaps most importantly, for those working in machine learning at least, the new processor not only executes at blistering speed, it can also be trained incredibly efficiently. Called the Cloud Tensor Processing Unit, the chip is named after Google’s open-source TensorFlow machine-learning framework.

Read more at Technology Review

Security Debt is an Engineer’s Problem

Just like organizations can build up technical debt, so too can they also build up something called “security debt,” if they don’t plan accordingly, attendees learned at the WomenWhoCode Connect event at Twitter headquarters in San Francisco last month.

Security has got to be integral to every step of the software development process, stressed Mary Ann Davidson, Oracle’s Chief Security Officer, in a keynote talk with about security for developers with Zassmin Montes de Oca of WomenWhoCode.

AirBnB’s Keziah Plattner echoed that sentiment in her breakout session. “Most developers don’t see security as their job,” she said, “but this has to change.” She shared four basic security principles for engineers. First, security debt is expensive. There’s a lot of talk about technical debt and she thinks security debt should be included in those conversations.

Read more at The New Stack

Functions as a Service – Deploying Functions to Docker Swarm via a CLI

Functions as a Service or FaaS (by Alex Ellis) is a really neat way of implementing serverless functions with Docker. You can build out functions in any programming language and then deploy them to your existing Docker Swarm.

In this post we’ll look at an experimental CLI for making this process even easier.

How it works

The diagram below gives an overview of how the FaaS function package, the Docker image, and the faas-cli deploy command fit together.

Read more at Dev.to