DevOps Hunter Security Automation

Here I'm starting this post with famous ARISTOTLE quote. "We are what we repeatedly do. Excellence, then is not an act, but a Habit" Welcome back Ansible Automations and who are habituated as Ansible automation specialists this post for them to give boosted walk through, In this post, I would like to share my experiments with Jinja2 templates usage on the Ansible playbook. Of-course Jinja is from Japan it is world famous for templatization capabilities badvanced Ansible templating techniquesy integrating with multiple languages such as Python, Ruby, Salt talk etc. In this post we will be cover the following topics: What is Jinja2 template do in Ansible? Template with filters Template with Lists and sets Template module in Ansible Template with Flow Control Template using Looping Template inheritance** What is Jinja2 template do in Ansible? Jinja2 is another Python library created for Flask web framework, that comes part of Ansible installation. It is special ability as i...

Hello DevSecOps enthusiasts! Container security has become a critical component of modern software delivery. With organizations increasingly adopting Docker and Kubernetes, identifying vulnerabilities in container images before deployment is essential to reduce security risks. In this post, we will explore how to perform container vulnerability scanning using Snyk CLI , one of the most popular DevSecOps security tools available today. Why Container Security Matters Container images often contain operating system packages, libraries, and application dependencies. If any of these components contain known vulnerabilities, attackers may exploit them to compromise your applications and infrastructure. Security scanning helps identify: Critical vulnerabilities (CVEs) Outdated packages Dependency risks Security misconfigurations License compliance issues Performing security scans early in the CI/CD pipeline is a key DevSecOps practice that helps prevent vulnerable images from reaching product...

  Docker container command Tips & Tricks Here my idea is to use the Unix/Linux 'alias' command for most those common docker container,   network, volume sub- commands to form as shorten to give you more productivity while working on developing the docker images and playing around the newly constructing containers. This trick work on bash, zsh shells. Improve Productivity with smart work alias for Docker commands   First examine the docker container listing with the powerful option '--format' docker container ps -s \ --format "table {{.Names}}\t{{.Image}}\t{{.Status}}\t{{.Size}}" docker ps command To get the logs of any applications that runs in containers we can use the following: alias dkrlogs='docker logs' alias dkrlogsf='docker logs -f ' docker logs with alias trick List of the images alias dkri='docker image ls' docker image list alias trick The container list alias dkrcs='docker container ls' d...

Hello DevOps, DevSecOps Engineers, SREs, and Automation Enthusiasts! Over the years of building automation solutions using Ansible, AWX, and Red Hat Ansible Automation Platform , I have learned that successful automation is not only about writing playbooks. The real challenge lies in designing maintainable, scalable, and production-ready automation that multiple teams can safely execute. This article consolidates practical lessons, architecture patterns, performance improvements, and operational best practices that I have successfully applied in enterprise environments. Whether you are building your first automation workflow or managing thousands of servers through AWX, these recommendations can help improve reliability, maintainability, and execution performance. A Successful Automation Strategy Why Automation Projects Fail Many automation initiatives start with enthusiasm but gradually become difficult to maintain because of: Poor documentation Hardcoded values Lack of te...

What is GitGaurdian and ggsheild? The ggsheild is a security CLI tool developed by GitGuardian that helps developers and organizations prevent the exposure of sensitive information, such as API keys, credentials, and secrets, in their Git repositories. What are key features of ggsheild? Pre-Commit and Pre-Push Scanning: Scans code before it is committed or pushed to detect secrets. Prevents accidental leaks of sensitive data in version control. CI/CD Pipeline Integration: Works with GitHub Actions, GitLab CI/CD, Jenkins, and other CI tools. Ensures security checks are part of automated workflows. Real-Time Monitoring and Alerts: Detects exposed secrets in public or private repositories. Sends alerts and suggests remediation steps. Custom Rules & Policies: Allows defining custom regex patterns to detect organization-specific secrets. Supports allowlists to prevent false positives. How to install ggshield on Ubuntu 24.04? To install the ggshi...

Hey, hello, dear DevOps, DevSecOps, and SRE team heroes!! Here I came across a new challenge to solve the common problem on Git. You may be using GitHub or GitLab or even Bitbucket for source code management. Now, a few projects, websites, or mobile apps require storing images, audio files, or video files that are larger in size. During the transfer to the client systems, they are facing the following issues: Slowness in git clone and fetch operations: files taking too long to upload or download, leading to delays in deployment and user experience Sluggish commits and status checks: some clients are encountering errors related to file size limitations, causing frustration and hindering workflow efficiency Repository size bloat Complexity in managing multiple branches It's crucial for us to explore solutions that can streamline this process and ensure smooth handling of large sized media files. Git LFS installation on Ubuntu Using the package manager command we can ...

Git installation on Ubuntu is pretty simple. If you are looking for git instatlling on the RHEL or Rocky or Oracle Linux you can use this link . Now most of the software projects are using Git. So let's do installation on Ubuntu wit the following steps: Check for Git exists Install Git Confirm Git Installation Pre-requisites: Pick an instance on Cloud or online terminal of Ubuntu 20+ version to this experiment. Here I'm using the KillerCoda provided Ubuntu. Check for Git exists This is a common requirement when you join a new project and on the Linux machine you would like to know git installed or not. We have couple of options to check it. Let's do it here: dpkg -l git #or dpkg --list git In the output first 'ii' in the list means (if there are packages installed, you should see this mark) that the package is correctly installed and available. alternatively you can also try other option to check git installation on Ubuntu. apt list g...