Git hooks are an incredible and incredibly simple way of fixing loose ends before you commit and/or push your code without installing additional software.
Unfortunately, like most of the Git CLI, they can appear difficult and un-approachable at first glance. For one, they assume that you’re storing your scripts within the hidden and un-tracked .git directory! I hope you like symlinks!
Lots of projects use tools like Husky as an easier-to-use alternative that’s easy to scale across teams and very friendly within CI. … »
Here’s a quick post about something that I don’t do often but is typically a pain when I do: debugging OAuth tokens super quickly.
An Example Scenario You’ve just provisioned a shiny new Keycloak instance and want to make it the upstream identity provider (IdP) to your company’s Okta tenant because you were volun-told to do so.
You’re also using an app that is configured to do single sign-on through Keycloak and will only log in users if they have admin in their access token’s groups claim. … »
So you’re managing an AWS VPC with Terraform or something like that, but some other pesky thing decided to add Route53 records that Terraform doesn’t know about.
As a result, when you try to delete the zone with Terraform, you’re no longer able to because of this:
│ Error: deleting Route53 Hosted Zone (REDACTED): HostedZoneNotEmpty: The specified hosted zone contains non-required resource record sets and so cannot be deleted. │ status code: 400, request id: REDACTED Ughh. … »
Usually, deleting Kubernetes namespaces is easy:
kubectl delete ns delete-me Sometimes, however, deleting them takes way longer than expected…
kubectl delete ns delete-me # still deleting, two months later... This quick “way longer than I acutally ever thought possible” post shows you a few troubleshooting tricks for dealing with this.
Forget everything you know about the word “all” kubectl delete --all -n delete-me is a lie.
While the kubectl delete man page suggests that “–all” means “all”: … »
Situation You’re writing a Go program that renders arbitrary Go templates that users can write. Since they are arbitrary, you want to prevent users from accidentally DDoSing your program by using long-running template functions. Something like this:
import ( "os" "template" ) // Perhaps this is exposed through an interface that a // third-party API implements, for example. func LongRunningFunction(s string) { time.Sleep(100000000) // This takes forever return s } func main() { tmpl := `Hello, {{ . … »
This is so easy to do, I think I can describe it in less than 150 words!
Problem: You want to run Docker images from Docker images that target ARM, or you want to build images for ARM platforms.
Solution: Add this to .github/workflows/main.yml (or whichever YAML file you’d like to enable ARM support for):
jobs: your-job-name: steps: # Add this to the top of your `steps` - name: Set up QEMU - arm if: ${{ runner. … »
UPDATE: 2022-01-17 16:33 CST Forget the below. Just do this instead!
UPDATE: 2022-01-15 16:43 CST It appears that Docker as configured within the runners provided by GitHub Actions do not native support building ARM images. However, you can use qemu-user-static to emulate instructions for other CPU architectures to get around this. This image uses binfmt_misc to tell the host’s Linux kernel to tell a third-party application (in this case, qemu) to execute binaries in formats that it doesn’t recognize. … »
UPDATE 2021-12-28 16:54:00 CST If you’re getting weird networking or security errors from your Docker containers, your VM’s time might need to be updated. You can fix this by running this command:
docker run --rm --privileged alpine hwclock -s
You’re probably not going to want to run this manually every time your time goes out of sync. Run this automatically by adding this command to your computer’s crontab:
echo '0 * * * * docker run --rm --privileged alpine hwclock -s` > \ /etc/crontabs/root In August, Docker/Mirantis has changed their licensing model to require businesses with more than 250 employees and $10M in revenue to pay for Docker Desktop. … »
I am not a JavaScript developer. However, I was given a task at work recently that forced me to enter the abyss and get good at keeping my Promises.
I was asked to create a webinar on helping developers become better SREs through observability and instrumentation. The objective was to take a broken web app and add enough monitoring and logging to it to make troubleshooting its brokenness easier. (I’ll update this post with a link when we broadcast it on April 22nd! … »
There is no doubt that the worldwide COVID-19 crisis has been a wet blanket for digital transformation across the enterprise. However, I don’t know about you, but I’m super fortunate that this is happening in 2020’s technological landscape instead of, say, 2010’s. With video conferencing solutions that work with even the slowest and least reliable internet connections and real-time collaboration tools that scale to hundreds of people per session, many of today’s key activities that required an office only five years ago can be done from the comfort of our own homes or apartments. … »
