Automate your open-source dependency scanning with Advanced Security.

https://devblogs.microsoft.com/devops/automate-your-open-source-dependency-scanning-with-advanced-security/

Dew Drop – August 5, 2025 (#4473)

https://www.alvinashcraft.com/2025/08/05/dew-drop-august-5-2025-4473/

"On July 23, 2025, AWS deleted my 10-year-old account and every byte of data I had stored with them. No warning. No grace period. No recovery options. "

https://www.seuros.com/blog/aws-deleted-my-10-year-account-without-warning/

Missed one of my past conference talks? Let’s fix that.

I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.

“Incident Response for Devs” - And #DevOps folks too!
https://twp.ai/4ioL7f

Ever wondered which SSH keys are lurking on your servers?

Just published a comprehensive Ansible playbook in my gists that audits your entire infrastructure for SSH keys and finds dangerous unprotected private keys!

- Detects unprotected private keys
- Lists all Pubkeys for root and users
- Comprehensive reporting (TXT + CSV)

https://codeberg.org/Larvitz/gists/src/branch/main/2025/20250804-SSHKeyAuditPlaybook.md

When working in IT-Ops it is often important to know what it means to go to "the cloud". From time to time there are still managers waveing around the potential 9's you can buy at AWS. In such a case it is good to have a historic list of SaaS incidents. Sadly so far I found no simple overview anywhere on the web.

This is why I'm tracking major SaaS outages at my repo https://github.com/lwindolf/cloud-outages/

Combining two ideas from my feed.

First, there is the account of @pluralistic on how AI are the perfect bullshit machines and spit out hard code bugs. This is especially true when forced upon people (the reverse-centaurs).

https://pluralistic.net/2025/08/04/bad-vibe-coding/#maximally-codelike-bugs

Second, an old account on how improper use of image compression algorithms in Xerox scans lied about numbers, at scale.

https://www.dkriesel.com/en/blog/2013/0802_xerox-workcentres_are_switching_written_numbers_when_scanning

These two things are related, and someone will take the fall for failure.

The TechBash 2025 schedule is now available - Get 10% off registration thru Labor Day!

https://vlqh-zgph.campaign-view.com/ua/SharedView?od=3z5b1449310f71294fafc3d35955582e56a7fc9cec01fb440bc3cc8ba398aa18db&cno=129de782e65d7a&cd=1e7349b9856bf60c&m=0

First release:

I wrote an Ansible connection-plugin to automate FreeBSD Jails via their host, by utilizing jls and jexec to run automation via a SSH connection to the FreeBSD host.

I released that on GitHub https://github.com/chofstede/ansible_jailexec
And on my Codeberg: https://codeberg.org/Larvitz/ansible_jailexec

Released under a BSD license.

This enables seamless automation of FreeBSD jails without needing a SSH connection to the Jails themselves.

Dew Drop Weekly Newsletter 443 - Week Ending August 1, 2025.

https://zc.vg/MRsTH?m=0

I've already pushed to production twice today! Who's rocking it with me?

Come on board the "Friday I'm in LIVE" club (a tribute to one of my beloved bands).

If you're still not sure about deploying on Friday, I'll drop more information in the comments.

@allanjude @jimsalter @joeress are hosting an amazingly awesome Podcast: @25admins; definitely look them up if you wanna keep up with the pros out there

https://2.5admins.com/about/

and ofc support them if you find the podcast awesome! Doffing my hat to you guys

The #techbash 2025 schedule is now available! Plan your week and register today.

https://zc.vg/aQHnZ?m=0

HTTP security headers are server response headers that help strengthen web security by instructing browsers to enforce protections against common attacks

Here is a list of key security-related HTTP headers #infosec #devops

Find high-res pdf books with all my #cybersecurity related infographics at https://study-notes.org

Project reveal:

For the past couple of weeks, I was working on a modern Ansible connection plugin for FreeBSD Jails: jailexec.py

It utilizes the SSH connection to the host-system and jexec to execute Ansible automation within FreeBSD jails.

Makes it even possible to automate jails, that aren't reachable via SSH themselves (or even have no IP address).

Bonus features:

- Connection pooling and persistence for improved performance

- Efficient file transfer with proper permission handling

- Jail command execution via jexec with privilege escalation (doas/sudo)

- Comprehensive error handling and logging with multiple log-levels (-v -vv and -vvv)

After some polishing and testing, I will publish that under a BSD 2-Clause license on my Codeberg repositories and GitHub (Likely during the weekend)

#freebsd #bsd #ansible #automation #python #devops @vermaden

#Drupal Devs! Don't let your data be an Achilles' heel! My latest post unpacks a robust bash script for automated nightly Drupal database backups. It runs outside Drupal for max reliability & performance, and I'll show you how to skip cache data for super lean backups.

Secure your site, streamline your workflow. Get the script & full breakdown here: https://drupalodyssey.com/blog/devops/bulletproof-your-drupal-data-automated-nightly-backups

Dew Drop – July 30, 2025 (#4469)

https://www.alvinashcraft.com/2025/07/30/dew-drop-july-30-2025-4469/

So, my fellow #devops peoples...

Keycloak?

Dew Drop – July 29, 2025 (#4468)

https://www.alvinashcraft.com/2025/07/29/dew-drop-july-29-2025-4468/