× Want to read this newsletter every week?! × 👋  Join FAUN
 
Last week's must-read news and stories from the DevOps communityDevOps Weekly Newsletter, DevOpsLinks, a FAUN Newsletter.
 
🔗 View in your browser.   |  ✍️ Publish on FAUN   |  🦄 Become a sponsor
 
Last week's must-read news and stories from the DevOps community
DevOpsLinks
 
Curated DevOps news, tutorials, tools and more!
 
 
 
 
A wild mix this week: Debian questions AI ethics, AWS accidentally builds a security hole, and senior devs admit they still Google basic syntax (because brains aren't hard drives). Meanwhile, SREs are handing off their fire extinguishers to LLMs, and DeepSeek’s filesystem might be too fast for its own good. Let's dig in.

🧠 Debian Developers debate whether AI models violate open-source ethics
🔐 AWS security tool ironically introduces privilege risk
📈 SFTP vs. FTPS benchmarks: small files vs. big downloads
🧪 LLMs for SREs: scaling without burnout
💻 Why senior devs Google syntax (and why that’s a feature, not a bug)
☁️ New GCP privilege escalation via IAM tagBindings
🔍 Kubernetes threats & trends from Microsoft
🧰 Top 5 Git Tips you’ll actually use
🧪 Anatomy of a Postgres operation, explained with Peppa Pig 🐷
🔍 Docker base images demystified: Alpine, Distroless, and best practices

Smart minds debug faster. Keep learning, keep questioning.
 
 
⭐ Patrons
 
bytevibe.co bytevibe.co
 
🚀 Fuel Your Dev Flow – One Sip at a Time ☕
 
 
Fuel your coding sessions with the Kubernetes Mug — a sleek, durable 11oz ceramic essential for any developer or DevOps pro. Dishwasher and microwave safe with a sharp, double-sided design, it’s the perfect blend of style and function.

✔️ Ships fast.
♥️ Built to last.
 
 
faun.dev faun.dev
 
✍️ Share What You Know on FAUN.dev
 
 
Are you building cool stuff in DevOps, AI, or Kubernetes? Publish on FAUN.dev and get your content in front of thousands of developers and engineers.
📢 Write and get discovered!
👉 Start posting here.
 
 

👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.

 
ℹ️ News, Updates & Announcements
 
www.phoronix.com www.phoronix.com
 
Debian Developers Pursuing A General Resolution Around AI Models
 
 

Debian's plotting a General Resolution to untangle the knotty question: Do AI models, birthed from open-source code yet fed on a diet of non-free data, jibe with their high-minded free software ethos?

 
 
github.blog github.blog
 
Persistent commit signature verification is generally available
 
 

Reviewers unlock a new superpower: commenting on push protection requests. Adds clarity. Offers context. Secret scanning just got a little less cryptic.

 
 
 
🐾 From FAUNers
 
faun.pub faun.pub
 
SFTP vs. FTPS Benchmarks: Transfer Protocol Speed Comparison 2025   ✅
 
 

SFTP zipped past FTPS in small file uploads like a nimble dancer, but when it came to large file transfers, FTPS strutted with style, clocking in up to 5x faster for downloads. Big files? Fewer headaches. Advantage: FTPS.

 
 
faun.pub faun.pub
 
Why Senior Developers Google Basic Syntax
 
 

Senior devs wield a mighty skill: problem-solving. They don't just hoard library knowledge like a digital hoarder. Instead, they've mastered how to learn—because brains are for thinking, not storage.

 
 
faun.dev faun.dev
 
Top 5 Git Tips & Tricks
 
 

"git commit --amend": Because sometimes you need a do-over. It revises your last commit, sprucing up history without leaving awkward trails. "git add -p" is your precision tool—stage code snippets like a gourmet chef, avoiding those bottomless pit commits. "git reset" takes you back to calmer seas. Use --soft to keep changes in the queue, or --hard to wipe the slate clean, no regrets. Merge madness averted with "--base"; it reveals context like a seasoned detective, helping you make smarter calls. Oh, and Git's autocorrect? Keeps your typos from running the show, course-correcting to the nearest command unless you hit the brakes.

 
 
faun.pub faun.pub
 
Answer These 5 Ansible Questions — I Hire You As DevOps
 
 

Ansible's push-based model turns configurations on a dime. But beware—a single rogue playbook can blitz your entire fleet. And if you aren't diving into Jinja2 templating for dynamic, flexible playbooks? Well, let’s just say, someone else will be landing that gig.

 
 

👉 Create your FAUN Page if it's not done yet and start sharing your blog posts, news, and tools on FAUN Developer Community, collect badges and more!
 

 
🔗 Stories, Tutorials & Articles
 
www.cncf.io www.cncf.io
 
What LLMs can do for SREs in Cloud Native Infrastructure
 
 

Kubernetes pushing beyond 100 nodes turns SREs into exhausted jugglers—five people just to keep it all running smoothly. Enter LLMs. They now do the heavy lifting, with tools like Autopilot and Smart Sizing that scale without breaking a sweat. No, they're not here to steal jobs. They're here to empower SREs, so they can build castles of architecture instead of stamping out fires.

 
 
www.token.security www.token.security
 
AWS Built a Security Tool. It Introduced a Security Risk.   ✅
 
 

AWS's Account Assessment for AWS Organizations tool managed to crank up privilege escalation risks. Its deployment instructions? About as safe as skydiving with a bedsheet. They urged the "hub role" to chill in less-secure accounts, opening a treasure trove of dicey trust paths. AWS rushed to bandage the wound with updated docs. But if you set this up before 2025-01-28 and ignored those stricter security whispers, chaos might still lurk in your backyard.

 
 
www.mitiga.io www.mitiga.io
 
Tag Your Way In: New Privilege Escalation Technique in GCP
 
 

GCP's IAM tagBindings open a stealthy admin shortcut: A low-key user can wrangle their way into full admin rights just by smartly slapping on the right tags. Conditional access beware, this one's a slippery trick. Lapses in tag permissions let this gambit slip under the radar, making airtight tag management a must. Better lock it down before someone finds the skeleton key.

 
 
www.evalapply.org www.evalapply.org
 
Systematically Terraforming a Brownfield of Cloud Infrastructure
 
 

Terraform stepped into a fintech frenzy and wrangled that infrastructure beast into submission. With its wizardry, the once-chaotic tax gateway evolved into a slick IaC setup. As changes came in hot and fast, the system scaled gracefully instead of exploding into chaos. Terraform sidestepped those third-party shackles and let custom scripts play the hero's role—flexible, nimble, and entirely their own.

 
 
thenewstack.io thenewstack.io
 
How Thoughtworks Bridges the Platform Engineering Gap
 
 

Platform engineering started out as a sysadmin's sidekick, but now it's a boardroom darling. CEOs and CTOs can't stop yammering about its magic touch. With over 50 engineers? Platform engineering turns a DevOps calamity into calm, claims Thomas Squeo. Thoughtworks gives a nod to its clients: go ahead and buy, mix, or concoct something new with pals like Humanitec and Mia-Platform. But hold your horses—don't expect miracles overnight. Real wins? They’re brewing around sprints four to six.

 
 
karenjex.blogspot.com karenjex.blogspot.com
 
Anatomy of a Database Operation   ✅
 
 

Ever wonder about the backstage chaos when you whisper SELECT or INSERT in Postgres? Picture the Postgres server process like "Happy Mrs Chicken" from Peppa Pig—perched on port 5432, ready for action. Crave speed? Dive into PgBouncer. This little trickster pools connections, dodging the traffic jam of endless server connections.

 
 
medium.com medium.com
 
Battle of the AI Code Assistants: Who Writes the Best Python Integration Code?
 
 

Plandex AI just snagged gold with a Python integration that isn't just rich in features—it's a fortress of security, exhaustive in testing, and glued to best practices. Over in the design corner, Claude Code stands tall, armed with killer documentation and resource management that could charm a library. Meanwhile, OpenAI Codex is hanging out in the back, happy to keep it simple for those still wearing coding training wheels.

 
 
medium.com medium.com
 
Docker Base Images Demystified: A Practical Guide
 
 

Choosing the right base image for Docker? Transformative. Alpine's tiny ~5MB footprint is practically ethereal. Distroless offers fortress-like security. Better performance all around. Nailing the balance among size, security, and compatibility is a delicate dance. Automation and relentless watchfulness keep security tight and performance slick.

 
 
blog.jetbrains.com blog.jetbrains.com
 
Is Golang Still Growing? Go Language Popularity Trends in 2024
 
 

Go's on fire. By 2024, it's got 5.8 million developers in its corner. It's a hot favorite for cloud-native projects, and those coding in Go? They're pocketing hefty paychecks. Rust might be stealing some headlines, but Go's charm lies in its easy pick-up-and-play style. It dominates microservices and APIs and even tiptoes into AI model serving.

 
 
maknee.github.io maknee.github.io
 
An Intro to DeepSeek's Distributed File System   ✅
 
 

3FS from DeepSeek dazzles with slick tricks, including CRAQ for ironclad consistency and a clever ChunkEngine built in Rust. It sprints through scalable reads, but gets tripped up by write latency. In Zipfian workloads, that bottleneck might just drive you bananas.

 
 
github.blog github.blog
 
The AI-powered DevOps revolution: Redefining developer collaboration
 
 

April steers GitHub's leap from legacy systems to serverless wonders, turning code-first DevOps into more than a buzzword. On the flip side? She tackles triathlons and communes with nature like it's nobody's business.

 
 
 
💬 Discussions, Q&A & Forums
 
reddit.com reddit.com
 
Burned by cloud (100k), looking at self hosting
 
 
 
 
 
⚙️ Tools, Apps & Software
 
github.com github.com
 
waj/shell-secrets
 
 

Encrypted environment variables

 
 
github.com github.com
 
Jacksaur/Gorgeous-GRUB
 
 

Collection of decent Community-made GRUB themes.

 
 
github.com github.com
 
a13xp0p0v/linux-kernel-defence-map
 
 

Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies

 
 
github.com github.com
 
ravikiranvm/aws-finops-dashboard
 
 

 A terminal-based AWS cost and resource dashboard built with Python and the Rich library. It provides an overview of AWS spend by account, service-level breakdowns, budget tracking, and EC2 instance summaries.

 
 
github.com github.com
 
coollabsio/coolify
 
 

An open-source & self-hostable Heroku / Netlify / Vercel alternative.

 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
Did you know that Instagram started as a monolithic Django (Python) app—and it still largely is? Despite handling over a billion users, Instagram has managed to scale its core architecture without fully switching to microservices. Instead, the team optimizes the monolith with powerful caching layers (like Memcached), sharded databases, and asynchronous task queues powered by Celery and RabbitMQ. This proves that with the right engineering, even a well-structured monolith can support hyper-scale platforms.
 
 
😂 Meme of the week
 
 
 
 
🗣️ Quote of the week
 
 
"Maintenance programmer coming after us is likely to suffer the consequences of any surprising change pattern we’ve left in the design. Software bugs thrive on surprises." ~ from " Software Design X-Rays " by Adam Tornhill
 
 
❤️ Thanks for reading
 
 
👉 Never miss an issue
Join FAUN Developer Community and subscribe to our newsletter here.

👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could share it with your friends! You can also donate to help us keep this newsletter going.

ℹ️ Have a question or feedback?
Feel free to reach out to us at community@faun.dev. We'd love to hear from you!

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.