DevOps and Docker Talk: Cloud Native Interviews and Tooling

Bret and Nirmal are joined by friend of the show, Matt Williams, to learn how to run your own local ChatGPT clone and GitHub Copilot clone with Ollama and Docker's "GenAI Stack," to build apps on top of open source LLMs.

We've designed this conversation for tech people like myself, who are no strangers to using LLMs in web products like chat GPT, but are curious about running open source generative AI models locally and how they might set up their Docker environment to develop things on top of these open source LLMs.

Matt Williams is walking us through all the parts of this solution, and with detailed explanations, shows us how Ollama can make it easier on Mac, Windows, and Linux to set up LLM stacks.

Be sure to check out the video version of this episode for any demos.

This episode is from our YouTube Live show on April 18, 2024 (Stream 262).

★Topics★

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Matt Williams - Host
• Nirmal Mehta - Host

• (00:00) - Intro
• (01:32) - Understanding LLMs and Ollama
• (03:16) - Ollama's Elevator Pitch
• (08:40) - Installing and Extending Ollama
• (17:17) - HuggingFace and Other Libraries
• (19:24) - Which Model Should You Use?
• (26:28) - Ollama and Its Applications
• (28:57) - Retrieval Augmented Generation (RAG)
• (36:44) - Deploying Models and API Endpoints
• (40:38) - DockerCon Keynote and LLM Demo
• (47:44) - Getting Started with Ollama

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Jasper Paul and Vinoth Kanagaraj, observability experts and Site24x7 Product Managers, to discuss achieving end-to-end visibility for applications on Kubernetes infrastructure. We answer questions on all things monitoring, OpenTelemetry, and KPIs for DevOps and SREs.

We talk about the industry's evolution from monitoring to full observability platforms, as well as adjacent topics for helping you with your own Kubernetes and application monitoring, including going through some of the most useful metrics in Kubernetes and AI's role in metric analysis and alerting humans.

Be sure to check out the live recording of the complete show from April 25, 2024 on YouTube (Ep. 263). Includes demos.

★Topics★
Site24x7 Full stack observability
Site24x7 Kubernetes monitoring
Voting App

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• J.P. Jasper - Guest

• (00:00) - Intro
• (02:01) - Observability vs Monitoring
• (08:32) - The New App Health Layer
• (14:39) - Attributes Collected
• (17:47) - Unified Observability
• (19:00) - AI-Powered Insights: The Role of AIOps
• (21:51) - OpenTelemetry and Multi-Cluster Monitoring
• (25:45) - Windows Support
• (26:06) - Correlating Requests Between Microservices
• (28:14) - Synthetic vs Real-Time Monitoring
• (30:25) - Dashboards, Tracing and Metrics
• (37:17) - Getting Started

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Neil Cresswell and Steven Kang from Portainer to look at K2D, a new project that enables us to leverage Kubernetes tooling to manage Docker containers on tiny devices at the far edge.

K2D stands for Kubernetes to Docker, which is a bit of a crazy idea -- it's a partial Kubernetes API running on top of Docker Engine without needing a full Kubernetes control plane. If you work with very small devices, including older Raspberry PIs, 32-bit machines, maybe industry sensors and the infrastructure we now call 'edge', the container hardware is often hard for you to make simple, reliable, and automated all at the same time.

So this project uses less resources than a single node K3S and still allows you to use Kubernetes tools to deploy and manage your containers, which are in fact just running on a Docker Engine with no full-fledged Kubernetes distribution going on there.

We get into far more detail on the architecture, the Portainer team's motivations for this new open source project and what its limitations are, because it's not real Kubernetes, so it can't do everything.

Watch the video version on YouTube for any demos.

This episode is from our YouTube Live show on March 28, 2024 (Stream 260).

★Topics★
K2D website
K2D Docs

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Neil Cresswell - Guest
• Nirmal Mehta - Host
• Steven Kang - Guest

• (00:00) - Intro
• (02:40) - Introducing the guests
• (03:56) - Why K2D? Architecture and Motivations
• (05:55) - How Efficient is K2D?
• (10:25) - K2D Architecture Explained: Components and Operations
• (20:42) - What Happens When Resources are Exhausted?
• (23:18) - K2D for Edge Deployment with Portainer or Argo CD
• (28:22) - K2D Future Roadmap
• (30:36) - Getting Started with K2D

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Dan Lorenc from Chainguard to walk them through Chainguard's approach to building secure, minimal container images for popular open source software.

They discuss why it is important to have secure and minimal container images. Dan explains how Chainguard helps remove the pain of CVEs, laggy software updates and patches and much more. Chainguard is now available also on Docker Hub.

They spend the first part of the show talking about the week's big news: the XZ supply chain attack, and Dan was the best man to explain it. They also touch on CVEs, things you can do to reduce the attack surface, SLSA, and more during this jam-packed show.

There's a video version you can watch on YouTube

★Topics★
Chainguard Website
Vulnerability Management Certification course
True Cost of Vulnerability Management
Chainguard Images
Chainguard on Docker Hub Announcement

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Dan Lorenc - Guest

• (00:00) - Intro
• (05:14) - Dan's Take on the XZ Hack
• (14:59) - Chainguard Distro Creation
• (21:21) - Chainguard in Docker Hub Announcement
• (24:26) - Free Images vs Private Images
• (26:27) - Zero CVE Approach
• (28:33) - Ways to Reduce Attack Surfaces
• (39:56) - Chainguard Academy
• (41:08) - Real Time Antivirus Malware Scanner
• (43:52) - Google Distro Lists Worth Using
• (45:56) - Chainguard for Buildpacks
• (46:20) - SLSA
• (56:08) - What's Next for Chainguard?
• (56:52) - Getting Started with Chainguard

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Phil Estes of AWS to show us the Finch project, which bundles the best open source tools for building and running containers locally. Now it runs on macOS and Windows WSL2.

We've been talking with Phil about this show for months, and now that Finch has come to Windows, we thought it was the best time to clue you in as to why AWS created the Finch project and what it does.

You've probably heard of containerd, the most popular container runtime on the planet and BuildKit, the best way, in my opinion, to build container images. Those two work hand in hand in Docker and many other container tools. But you might not have heard of nerdctl or Lima, which are also open source tools that work with containerd and BuildKit to help you run containers locally in a virtual machine. Well, AWS had the idea of making an easy installer for these four tools. That's how Finch was born.

Finch is not meant to be a replacement of your existing way to run containers. The tools it installs are a bit of a minimum feature set, if you will, and more focused on providing people the exact tools AWS uses in its container platforms, mainly containerd and BuildKit, which are everywhere in AWS. Rather than building something that's feature equivalent to other local container solutions like Docker Desktop and Rancher Desktop, Finch keeps it simple and does the bare minimum. 

If you just want an easily installable and minimal way to build and run local containers at the command line with no goofy, high-end fancy features, pure open source and just on Mac and Windows, at least at this point, you should give Finch a try.

Be sure to check out the live recording of the complete show from February 22, 2024 on YouTube (Ep. 255).

★Topics★
Finch Website
Bret's local container runtime spreadsheet

Creators & Guests

• Phil Estes - Guest
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host

• (00:00) - Intro
• (00:35) - What is Finch?
• (03:53) - Phil's History with Docker and Finch
• (07:59) - Deep Dive into AWS Finch Project
• (11:41) - How do the Components Tie Together
• (25:31) - Finch's Position in the Container Ecosystem
• (26:47) - Finch's Capabilities and Comparisons
• (27:45) - VM Management and Lima Integration
• (37:51) - Finch's Roadmap and Community Engagement
• (41:49) - How Does Finch Connect to Lima?
• (42:45) - Potential Lima Conflicts with Finch
• (46:38) - Getting Started wtih Finch

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Neil Cresswell, CEO and co-founder of Portainer, to show us new features in Portainer and how it can manage, deploy, and orchestrate all your container workloads from a single Docker Engine, all the way to multi-cluster and IoT Kubernetes deployments.

Portainer is much more comprehensive than you might think. Docker on the Edge, Podman, Kubernetes, in the cloud, in hybrid, you name it; it seems that Portainer supports it. In the show, we also get some updates on new things that have happened in the last couple of years, including adding GitOps support to Portainer, the ability to deploy Kubernetes nodes, and infrastructure.

Be sure to check out the live recording of the complete show with demos from February 29, 2024 on YouTube (Ep. 256).

★Topics★
Portainer Website
Portainer on YouTube
Portainer on X
Portainer on LinkedIn
Portainer Demo: Kubernetes the "easy" way

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Neil Cresswell - Guest

• (00:00) - Intro
• (02:50) - How Portainer Started
• (05:38) - Portainer's Strongest Use Cases
• (08:56) - Portainer's Cluster Provisioning
• (12:42) - Docker Desktop and Portainer
• (15:22) - GitOps with Portainer
• (18:43) - K2D Teaser
• (21:34) - Portainer Across Different Environment Types
• (25:21) - Portainer's Focus on IoT and Edge
• (29:01) - Portainer's Evolution and Future Developments
• (35:03) - Passwords and Secrets Capabilities in Portainer
• (40:15) - AI Capabilities in Portainer
• (42:06) - Portainer Editions, Licenses and Pricing
• (43:09) - Using Traefik for Ingress
• (44:53) - What's Next for Portainer?

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Ivan Burazin and Chad Metcalf to debut Daytona, an open source "codespaces equivalent."

Daytona is a development environment manager designed to automate all the tedious steps a developer needs to perform to set up their development environment. "Essentially, it transforms any machine into a codespaces equivalent."

Where Daytona is actually starting in the enterprise is focusing on large dev environment solutions and management of those, and then trickling down to individual developers. So there are two very similar solutions to a problem of many developers and their varying ways that they set up their environments for development, but they're coming at it from two ends of the spectrum.

Watch the video version on YouTube.

★Topics★
Daytona website
Daytona on GitHub
Why Daytona OSS'd
DIY Guide

Creators & Guests

• Ivan Burazin - Guest
• Chad Metcalf - Guest
• Bret Fisher - Host
• Nirmal Mehta - Host
• Beth Fisher - Producer
• Cristi Cotovan - Editor

• (00:00) - Intro
• (06:33) - CodeAnywhere
• (07:50) - Introducing Daytona: Revolutionizing Dev Environments
• (13:54) - Demo
• (21:07) - Daytona's Automation Magic
• (22:49) - Comparing Daytona with DevPod
• (25:15) - Daytona's Roadmap and Beyond
• (27:01) - Dev Environments and IDEs
• (39:52) - AI with Daytona
• (44:05) - Getting Started with Daytona
• (44:35) - Getting Involved in Daytona
• (47:00) - Features About to Ship in Daytona

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Lukas Fittl of pganalyze to dive into Postgres in containers, in production, and in CI.

Lukas is an expert and founder of pganalyze, and I invited him on the show to explain a lot of this to us and catch us up with what's going on in the Postgres community, particularly when it comes to containers and production.

We dive into everything around containers with Postgres, some of the new stuff going on in Postgres Land, including tuning and stuff I didn't even know about Postgres, including storing NoSQL data, vector databases for AI and more.

Be sure to check out the live recording of the complete show from February 15, 2024 on YouTube (Ep. #254).

★Topics★
pganalyze website
pganalyze YouTube channel
pgvector
cloudnative-pg
Crunch Postgres for Kubernetes
CockroachDB

Creators & Guests

• Bret Fisher - Host
• Lukas Fittl - Guest
• Nirmal Mehta - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer

• (00:00) - Intro
• (01:59) - Is Postgres Underrated?
• (04:18) - What is pgAnalyze?
• (05:02) - Database Performance Tuning
• (11:11) - Postgres in Containers
• (19:44) - Opinion on kubegres and other operators in managing HA
• (25:03) - The role of Database Administrators and Data Engineers
• (31:54) - Running Postgres HA across multi-cluster
• (39:23) - What does pgnalyze do?
• (44:45) - The hardest operational problem running Postgres in containers

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Melissa McKay, Developer Advocate at JFrog and Docker Captain, to discuss the best and worst of 2023.

We recorded this episode in December of 2023 where we talked through our favorite tools. Whether a DevOps oriented tool or not, it just might be the things we like to use on containers and in Cloud Native DevOps. This is a fun episode of three friends talking about what they love. And I sometimes I think these are the best shows because we didn't plan them out. I hope you enjoy listening to it as much as we did recording it. 

The live recording of the complete show from December 14, 2023 is on YouTube (Ep. #245)

★Topics★
Dive Website
SlimToolkit Website
OpenTelemetry Website
eBPF Website
eBPF Documentary
Continuous Delivery Foundation
CDEvents Website
ML Ops Website
Ollama Website
Docker + Ollama
Neo4j Website
Inspektor Gadget Website
Arc Browser
k6 Load testing

Creators & Guests

• Beth Fisher - Producer
• Bret Fisher - Host
• Melissa McKay - Guest
• Cristi Cotovan - Editor

• (00:00) - DDT MAIN
• (04:13) - A Little Tool Called Dive
• (09:49) - SlimTooklit from Slim.AI
• (12:11) - OpenTelemetry
• (14:57) - eBPF
• (18:44) - Chainguard Images
• (21:48) - Digestabot
• (25:03) - Looking Forward to 2024
• (27:29) - CDEvents
• (31:32) - MLOps
• (34:58) - Ollama
• (37:30) - WebAssembly
• (38:26) - Inspektor Gadget
• (39:33) - Arc Browser

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Matan Mishan & Roy Razon of Livecycle to discuss developer platforms and how to improve developer collaboration and speeding up feedback and previews.

We talk about the various delays encountered in pull requests due to feedback processes, and how Lifecycle's tools aim to shorten this feedback loop in Docker Desktop, local CLI with Preevy, and automated CI workflows. I like how Lifecycle provides multiple locations and ways to get access to people in the preview environments that really lets you just fit the different parts of the tool into your workflow, as opposed to one way to do everything. It's great for getting feedback quickly during the PR process, rather than making people set up their own environments to test their changes. I also liked their ideas around how the feedback loops can be improved.

This episode contains great demos so be sure to also check out the live recording of the complete show from December 21, 2023 on YouTube (Ep. #246).

★Topics★
Livecycle's Website
Preevy Repository
Livecycle Docker Extension

Creators & Guests

• Bret Fisher - Host
• Matan Mishan - Guest
• Roy Razon - Guest
• Beth Fisher - Producer
• Cristi Cotovan - Editor

• (00:00) - Intro
• (01:57) - Internal Developer Platform: a self-service solution
• (06:38) - Lifecycle and the Docker Extension
• (24:10) - Using GitHub Environments
• (27:46) - First Steps and What's Next

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Michael Irwin, DevRel at Docker, to talk about all the products and features Docker shipped in 2023, and what's coming in early 2024.

Michael has been on this show many times as a Docker Captain and now as a Docker employee, and it's always great to dig into the details of the products with someone who's been using them for so many years as an end-user and now staff at Docker.

Docker did some big things in 2023, but they also shipped some smaller features that we will help you catch up on in this episode.

The live recording of the complete show from December 28, 2023 is on YouTube (Ep. #247)

★Topics★
Docker 2023 Milestones
Docker Build Cloud
Docker Engine release notes
Docker Compose Watch
DockerCon Playlist
DockerCon Announcements
Compose includes
Docker Scout
Docker GenAI stack
Getting started with GenAI on Docker
Docker acquires Mutagen

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Michael Irwin 🇺🇦 🕊 - Guest

• (00:00) - Introduction
• (02:11) - The Docker Engine
• (04:43) - Performance improvements
• (08:16) - Docker Extensions
• (09:12) - Dashboard and GUI updates
• (12:46) - Docker init
• (17:43) - What's new in Compose?
• (24:33) - Docker Scout
• (36:43) - Docker and AI/Machine Learning
• (43:55) - What's Coming Up in 2024?
• (47:07) - Docker Debug

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Alex Kretzschmar to talk about Tailscale, a universal VPN that connects teams, devices, and development environments for easy access to remote resources.

Alex and I talk about projects he's worked on in containers over the years and then we quickly get into Tailscale and talking about why he joined the team there.

Tailscale is one of those tools that's hard to put down. I've used it for years to connect my personal devices to my home server lab when I'm traveling or servers I might have on the internet that I run temporarily. It connects them all together in a seamless VPN. The product itself comes up a lot in our Discord server when people are talking about needing some secure remote access to something anywhere in the world.

Tailscale keeps adding more and more features, I can't really keep up, so we had Alex on the show to talk about all the new stuff, including a client for Apple TV, which at first, I didn't quite understand why, but now it totally makes sense; and a Kubernetes operator that does some slick things around connecting engineers on their local machines to clusters. I found Alex at the Tailscale booth at KubeCon this year and invited him on the show to talk about this relatively new yet ubiquitous-feeling product. 

The live recording of the complete show from November 30, 2023 is on YouTube (Ep. #243)

★Topics★
Tailscale website
Headscale website
Tailscale Community
Tailscale Docker Mod Blog Post
ID Headers Demo
Devrel Demo

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Alex Kretzschmar - Guest

• (00:00) - Tailscale Everything
• (19:37) - Tailscale Licensing
• (28:24) - Tailscale vs Other Networking Products
• (32:33) - Server and Key Exchange
• (33:50) - Does Tailscale Support 'Trunking'?
• (39:20) - Client for Mikrotik
• (40:06) - Docker Integration
• (43:46) - Tailscale Server on Your Own Hardware
• (46:57) - Apple TV Client
• (48:54) - Performance Breakthroughs
• (50:52) - Key Exchange Mechanism

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

I break down why Dockerfile frontends exist and how Docker's build engine "BuildKit" is giving us updated Dockerfile features.

The TL;DR of this podcast is to add this to your Dockerfiles as the first line, always and forever.

It'll ensure your Dockerfile will have access to the latest v1.x features of the "Dockerfile frontend" feature of BuildKit.

★Topics★
My newsletter on Dockerfile frontends (including links and references)

Creators & Guests

• Beth Fisher - Producer
• Bret Fisher - Host

• (00:00) -
• (00:36) - Understanding Docker Files
• (00:47) - The Evolution of Docker Files
• (01:05) - The Importance of Docker File Versions
• (02:20) - The Impact of Dockerfile Standards
• (03:41) - The Benefits of Using the Latest Dockerf ile Parser
• (04:16) - The Challenges of Docker Engine Versions
• (05:18) - The Advantages of Docker Front Ends
• (07:56) - The Role of OCI in Dockerfiles
• (10:18) - Exploring New Features in Docker File Front Ends
• (15:27) - Conclusion: The Future of Docker Files

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Application delivery doesn’t have to suck. Bret and Nirmal are joined by Solomon Hykes, the founder or Docker, to talk about Dagger and their application delivery-as-code that runs anywhere.

💥 This episode is brought to you by our valued sponsor and friends at CAST AI! 💥
CAST AI is an all-in-one Kubernetes cost optimization and automation platform that achieves over 60% average compute cost savings without months of onboarding. You get lightning fast autoscaling, downscaling, spot VM support and more with no hit to performance.

Use the link below and optimize your first cluster for FREE.

cast.ai/bretfisher

Solomon started Dagger after he left Docker in 2018 with a few other Docker VPs, including Sam Alba and Andrea Lusardi.

Dagger is an innovative startup aimed at simplifying and revolutionizing DevOps automation and software delivery. Created to address Docker's unattended gaps, Dagger streamlines software building, testing, and deployment, exhibiting immense growth potential and wide applications in fostering software ecosystems.

For a few years now, they've been publicly iterating on the idea of a programmable and portable automation system for software building, testing, and deploying.

In this episode, they cover many topics around Docker and Dagger. I've been convinced that I need to start trying out Dagger in my projects.

The live recording of the complete show from November 16, 2023 is on YouTube (Ep. #241)

★Topics★
Dagger website

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Solomon Hykes - Guest

• (00:00) - Intro
• (01:44) - Introducing Solomon Hykes and His Journey
• (02:25) - Solomon's Life Post-Docker
• (04:00) - The Genesis of Dagger
• (09:10) - The Vision Behind Dagger
• (25:44) - Modules and Declarative Model in Dagger
• (35:11) - Integration of Dagger with Other Tools
• (37:04) - Docker Slim and Dagger
• (38:28) - Question: Dagger, Framework or Library?
• (39:09) - Question: Dagger's with BuildKit
• (39:33) - Question: Predictions for Dagger's Adoption
• (40:59) - Demonstration of Dagger's Functionality
• (41:15) - Dagger's Compatibility with Other CI Platforms
• (51:14) - Getting Started with Dagger

The OCI specifications for registry and image are getting a minor version number update to 1.1 soon, and this could be a big deal for anyone storing artifacts other than images somewhere in their infrastructure. This episode digs into the problem with artifacts today, and how the OCI and CNCF are planning to fix it with the "one registry to serve them all (artifacts)" in 2023/2024.

💥 This episode is brought to you by our valued sponsor and friends at CAST AI! 💥
CAST AI is an all-in-one Kubernetes cost optimization and automation platform that achieves over 60% average compute cost savings without months of onboarding. You get lightning fast autoscaling, downscaling, spot VM support and more with no hit to performance.

Use the link below and optimize your first cluster for FREE.

cast.ai/bretfisher

★Topics★
OCI image and runtime specifications
Helms's new OCI artifact support
Brandon Mitchell's recent OCI Distribution 1.1 RC talk on how registries relate data objects today
Here are the Helm docs on how to use your existing registries to store charts
ORAS project
Great talk on ORAS
OCI has a great, short post summarizing technical changes in OCI Image 1.1 and Distribution 1.1 specifications.
My original newsletter with more links and screenshots, Part 1, Part 2, Part 3

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host

• (00:00) -
• (00:43) - Introduction to Docker and OCI Registries
• (03:08) - The Challenges of Artifact Storage in Enterprises
• (03:52) - The Role of Artifactory and Other Commercial Solutions
• (04:15) - The Problem with Artifact-Specific Storage Systems
• (04:31) - The Need for a Single Artifact Storage Standard
• (05:56) - The Future of OCI or Docker Registry
• (06:07) - The OCI Registry and its Main Data Objects
• (06:36) - The Use of Registries to Store Non-Container Image Data
• (07:42) - The Evolution of Container Registries
• (13:20) - The Vision of the OCI and CNCF Teams
• (14:11) - How to Use OCI Artifacts Today
• (15:39) - The Two Types of Artifacts and How to Use Them
• (17:13) - The Use of OCI Artifacts in Various Tools
• (19:42) - Conclusion: The Future of Artifact Storage

Bret is joined by Nirmal and a host of friends from the floor of KubeCon, to talk about the latest news and goings-on.

We wanted to get some of our friends and people we haven't seen in a while that are making great stuff out there on the show for just a few minutes and it's sort of a rapid panel of rotating guests. If you actually watched the video version of this, there's literally people walking in and out of the camera throughout the show.

The live recording of the complete show from November 9, 2023 is on YouTube (Ep. #240)

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host

• (00:00) - Intro
• (02:04) - Welcome from KubeCon North America
• (02:24) - Phil Estes on ContainerD
• (03:22) - Exploring the Sandbox Service
• (05:08) - What is Finch?
• (09:00) - James Buren on CNCF Projects
• (21:48) - Mike Coleman on Falco
• (24:43) - Chad Cole on Kubernetes Certification
• (30:57) - Nigel Poulton's Insights on KubeCon
• (42:17) - Mauricio Salatino
• (43:45) - Derek Morgan

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

In this short episode, I tell the tale of my registrar DNS name hosting for the last 25 years and what I prefer for a cheap and reliable name registrar.

★Topics★

• bret.lol: for anyone to use as a localhost wildcard solution for local dev with friendly names and TLS. 
• Cloudflare, a service I was already using for many things, started offering registrar services at no markup.
• Pragmatic Engineer newsletter about the Google Domains shutdown and our favorite registrars.
• Porkbun.
• step into The Buniverse.

Creators & Guests

• Beth Fisher - Producer
• Bret Fisher - Host

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Chris Townsend, the engineering manager for Canonical's Multipass team, to discuss how to use Multipass as the easiest local virtual machine for Docker, Kubernetes and more!

Multipass is my go-to solution for quickly creating local virtual machines of Ubuntu. I teach it in my courses, I've used it for many years, and I was excited to have Chris on to talk about the ways to automate the creation of a VM in Multipass, and dig into the various virtualization, backends and networking options. 

We also talk about Multipass blueprints where in a demo, he shows off how to create a VM with Docker installed in a single command. It actually reminds me of Docker Machine, if you've been around a while. That also mounts your code directly into the VM and sets a host alias so that the Docker commands will pass through to Docker in the VM transparently.

If you can imagine that it basically means that you can run Docker in the VM and use it from the host as if it isn't in a VM. And then we had some great audience questions about various features of Multipass and how to use it for multi-node clustering and exposing VMs to your local network.

Live recording of the complete show from September 21, 2023 is on YouTube (Ep. #235). Includes demos.

★Topics★
Multipass website

Creators & Guests

• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Bret Fisher - Host
• Nirmal Mehta - Host
• Christopher Townsend - Guest

• (00:00) - Intro
• (01:42) - Introducing Chris Townsend
• (02:43) - Multipass Elevator Pitch
• (07:10) - Getting Started with Multipass
• (16:11) - Interacting with an Instance
• (18:21) - Changing Image Storage Location
• (19:32) - Does Multipass work with Hyper-V Cluster?
• (22:29) - Expose the Internal Bridge Network via Multipass
• (29:14) - The Future of Multipass

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

After returning from DockerCon earlier this month (Oct 2023), Bret recorded this podcast where he breaks down all the product announcements and details from the event. We hope you enjoy it and share it with your friends and colleagues.

You can read all about it and get updates and Links to all the tools, betas, and info in our newsletter post.

Enjoy the YouTube version here.

★Topics★
Docker Scout goes GA
Next-gen Docker Cloud Builder
Docker Debug CLI
WebGPU for macOS
Docker AI
OpenPubKey
Compose new features
Udemy partnership

Creators & Guests

• Bret Fisher - Host
• Beth Fisher - Producer

• (00:00) - DockerCon 2023 Announcements
• (01:02) - Back at DockerCon IRL
• (02:12) - Docker Scout goes GA
• (05:34) - Next-gen Docker Cloud Builder
• (07:08) - Docker Debug CLI
• (10:19) - WebGPU for macOS
• (11:39) - Docker AI
• (13:43) - OpenPubKey
• (15:11) - Compose new features
• (15:49) - Udemy partnership
• (16:11) - Wrap-up

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Demetrius Malbrough and Joseph D'angelo from Veritas, the company that makes NetBackup amongst many other data protection tools.

NetBackup has been around at least 25 years and I've been using it over 20 years, although not recently. So we had the two gentlemen from Veritas on the show to break down the evolution of NetBackup to a Kubernetes native backup solution.

We also talked about additional products that make sense in a backup context, like their InfoScale storage management solution, and we tried to break down some of the technicals. What are we talking about when we mean deploying NetBackup on Kubernetes?  How does InfoScale fit into that? And generally, just helping me catch up with the last few years as NetBackup 10.0 has been released.

I asked lots of questions and we got some interesting questions from the audience.

The Live recording of the complete show from October 19, 2023 is on YouTube (Ep. #238).

★Topics★
Veritas Kubernetes solutions
InfoScale Free Developer Edition
60 day–trial of Veritas InfoScale for Kubernetes

Creators & Guests

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Demetrius Malbrough - Guest
• Joseph D'Angelo - Guest

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Intro
• (01:15) - Introducing the guests
• (03:38) - The Evolution of NetBackup
• (07:45) - The NetBackup Pitch
• (10:52) - How is NetBackup Deployed?
• (13:28) - NetBackup From Before Containers
• (16:42) - High Level Features and InfoScale
• (21:33) - Backup Managed Services in Kubernetes
• (45:29) - Getting Started with InfoScale

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Ken Collins, AWS Serverless Hero and Principal Engineer at Custom Ink to discuss all things Lambda and to dig into the details of running containers in serverless.

Ken and I have known each other for probably 15 years in the local tech scene here in coastal Virginia. And I've always respected him for being a leader in that community, always wanting to talk at a meetup or help in some way.

So when he reached out wanting to talk about his company using containers on AWS Lambda, it was an easy sell for me because I knew it would be a great show. And then I learned some of the updates Lambda has had over the years, particularly when it comes to container workflows.

We had some great audience questions and no shortage of topics around using modern Lambda and serverless.

Live recording of the complete show from September 7, 2023 is on YouTube (Ep. #233).

★Topics★
Custom Ink tech blog
Rails and Lambda
Lambda Web Adapter
Lambda sidecar pattern in Kubernetes
The case for Rails on Lambda
Lambda RAG OpenAI
Learn Serverless

Creators & Guests

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Ken Collins - Guest
• Nirmal Mehta - Host

• (00:00) - Intro
• (01:27) - What Does Lambda Have to Do with Containers?
• (10:14) - Is There ARM Available in Lambda?
• (13:44) - What is Web Adapter?
• (19:54) - Cold Starts in Kubernetes vs Lambda
• (31:32) - Patterns for Lambda Communicating with Other Services
• (40:24) - Using Lambda Simultaneously for HTTP and Sockets
• (43:30) - What is Lamby?
• (45:05) - Hiding Function URLs Behind Custom Domain
• (45:53) - Are There Sample Lambda Project Re pos?

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret and Nirmal are joined by Grayson Adkins and Josh Thurman on the show. They are co-founders of Uffizzi, an environments-as-a-service company for Docker Compose and Kubernetes.

We talk about ephemeral environments in all their forms. You might call them preview environments, developer environments, or pull release environments, which is my favorite way to use these environments-as-a-service.

But regardless of the many ways to use ephemeral environments,  it's great to see a growing set of tools in the cloud native community for automating the spinning up of fresh environments with Kubernetes manifests, helm charts, or even Docker Compose YAML.

Uffizzi is using the open core model, meaning that the core part of their product is open source.

Live recording of the complete show from August 24, 2023 is on YouTube (Ep. #231). Includes demos.

★Topics★
Uffizzi website
Uffizzi Quick Start
Uffizzi on LinkedIn
Uffizzi's YouTube Channel

Creators & Guests

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Nirmal Mehta - Host
• Grayson Adkins - Guest
• Josh Thurman - Guest

• (00:00) - Intro
• (01:58) - Uffizzi Elevator Pitch
• (08:00) - Uffizzi's Typical Customer Workflow
• (30:11) - Is the preview environment open to the world?
• (36:18) - When not everything is in Kubernetes
• (38:52) - Getting started with Uffizzi today
• (40:45) - Previewing projects that are co-dependent

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Dan Garfield of CodeFresh to talk about growth of GitOps as a standard, growth of Argo, and more.

Dan is the Co-founder and Chief Open Source Officer of Codefresh, a CI/CD platform powered by GitOps and Argo. He helped launch the GitOps Working Group and helped lead the creation of the Open GitOps principles. As an Argo Maintainer, Kubernaut, Google Developer Expert, he helps companies and individuals adopt Argo with GitOps and streamline their CI/CD.

We take some great questions about how GitOps is different than just triggering deployments and other automation platforms. And we also dig into the four principles of GitOps and how Codefresh uses Argo CD as a part of their CI/CD offering.

Live recording of the complete show from July 27, 2023 is on YouTube (Ep. #227). Includes demos.

★Topics★
Codefresh
GitOps Certification
OpenGitOps
Argo CD
Argo CD Autopilot

Creators & Guests

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Dan Garfield - Guest

• (00:00) - Intro
• (08:39) - GitOps Guide and Principles
• (15:17) - What if you don't have Kubernetes?
• (22:31) - Reusability and Modern Automation
• (26:54) - ArgoCD Portability
• (32:27) - Why use GitOps?
• (41:07) - GitOps Certification with Focus on Argo
• (43:30) - GitHub Flow or Trunk-based Development
• (56:23) - Combining Dagger with Argo
• (58:19) - Deploying Argo CD
• (58:51) - Argo with local Git repo branch

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

In this episode, Bret and Nirmal talk with Brian Douglas of OpenSauced.

Brian Douglas, of GitHub fame, has founded OpenSauced, a cool web app and community of open source developers finding their next contribution and maybe their next job. Brian has so many stories of working with open source projects and having conversations with leading open source contributors, while previously being a lead developer advocate at GitHub. So we definitely spend time talking through some of those stories and learning some of that we didn't know about GitHub and open source being run on it. We then dig into how to use the OpenSauced platform he's creating to find your next open source project and get noticed by employers. 

Live recording of the complete show from July 13, 2023 is on YouTube (Ep. #225).

★Topics★
OpenSauced website
Blog article: Good first issues don’t exist

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Nirmal Mehta - Host
• Brian Douglas - Guest

• (00:00) -
• (00:52) - Introducing Brian Douglas
• (00:56) - What is OpenSauced?
• (02:41) - First steps in contributing to open source
• (22:24) - Starting a relationship with the maintainers and building trust
• (28:38) - Finding projects to be passionate about
• (37:37) - Why contribute to open source?

Bret and Nirmal welcome Idit Levine, Founder/CEO Solo.io. Idit focuses on Service Mesh, API-GW and Multi-Cloud networking, and security.

Idit has been involved in the Containers/DevOps community for 10+ years, building products from Docker to Envoy to Kubernetes, and now Istio and Cilium. We talk about Istio, Ambient Mesh, Envoy, Zero-Trust Security, Cilium, eBPF, Multi-Cloud and more.

This is not the first time we've talked about Solo or Service Mesh. Ambient Mesh is Solo's new product that simplifies the install and infrastructure costs of essentially running Istio.

I'm really hopeful that this is going to help a lot more people implement Istio because traditionally, it does have a lot of parts and a lot of costs with the sidecar approach, but this new approach reduces the number of essentially proxies and parts that you're running on each node of your Kubernetes cluster.

Live recording of the complete show from June 29, 2023 is on YouTube (Ep. #223).

★Topics★
Solo.io
Istio Ambient Mesh
Solo Academy (free courses)
Istio Ambient Mesh ebook
Gloo Fabric

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Nirmal Mehta - Host
• Idit Levine - Guest

• (00:00) - Intro
• (03:59) - How did Solo.io start?
• (21:03) - The difference between service mesh and API gateway
• (30:55) - Where is service mesh going?
• (41:53) - Is Ambient Mesh as secure as the sidecar model?
• (48:11) - Opportunities after adopting Ambient Mesh
• (53:41) - Phipps compliance
• (55:46) - Unikernel vs WebAssembly

Bret and Matt welcome special guest Brendan Burns, CVP Azure Cloud Native & Resource Management, and also a founding member of the Kubernetes project.

Because Brendan is one of the three original co-founders of the Kubernetes project back in 2013 at Google, he's a little bit internet famous in open source and Cloud Native. So I was a little nervous going into this because I had so many questions.

We took some live questions as we always do from YouTube live, and I thought it was a really great episode of a little mix of talking about Azure and some of the things you can do with containers, some of the things they're working on, some of the things that he's focused on that we haven't seen yet. We talk about AI and how that relates to some of these things.

We even talk about WASM or WebAssembly, one of my favorite topics of the last year, because that's important so it was great to get his perspective.

And I think my favorite part of the show is where we really talk about the next layers of abstraction, or maybe even the ways that we can deploy to Kubernetes or make it simpler to manage and deploy to. And that's been a real challenge for the community ever since Kubernetes was created in making it more accessible to more people, without it being so complex to manage and deal with underneath. And Brendan has some really great views on what it's going to take it to get us there.

Live recording of the complete show from June 15, 2023 is on YouTube (Ep. #221).

★Topics★
Ways to run containers on Azure
Dapr
WebAssembly on Azure Kubernetes
Wasmtime
Twelve-Factor App

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Brendan Burns - Guest

• (00:00) - Intro
• (03:10) - Introducing Brendan
• (08:47) - Advice for starting to run containers
• (30:30) - Reducing complexity with AI
• (34:41) - Addressing DevOps fatigue
• (42:38) - Running WebAssembly on Kubernetes
• (54:23) - LTS Linux Distributions
• (59:28) - What's next after containers and orchestration?

Bret and Matt welcome Michael Cade, the field CTO at Kasten by Veeam.

If you've been around servers for a while, you probably have heard of Veeam. It made its debut back in the late 2000's when virtual machines and implementations of VMs were big. I first found out about them back in those days, because it was a great free product for small virtual machine environments and data centers.

They've made tons of additional backup and recovery products over those years, and now they have Kasten K10, which is a Kubernetes backup and restore/recovery product. Michael discussed with us the origins of K10 and some of the major features.

We get into some demos, which you can check out in the original YouTube live show.

Live recording of the complete show from June 1, 2023 is on YouTube (Ep. #219). Includes demos.

★Topics★
Kasten K10 website
K10 free for 5 nodes
Kanister
Kasten K10 Walkthough Project on GitHub
Kasten K10 install config
KastenByVeeam YouTube channel

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Michael Cade - Guest

• (00:00) - Intro
• (02:23) - Introducing Michael Cade
• (03:30) - Veeam: then and now
• (07:38) - How Kasten came to be
• (14:11) - Complexity and Recovery
• (19:04) - Backup litmus test
• (23:02) - Demo
• (24:26) - Navig8: an open source visualizer for Helm Chart
• (28:44) - Kanister: an open source project for data management on Kubernetes
• (31:39) - Incremental backups
• (36:44) - Label-based backup policies
• (41:39) - Location profiles
• (43:56) - Infrastructure profiles
• (49:52) - Integrate your backup into you GitOps pipeline
• (51:43) - What about security?
• (54:57) - Getting started
• (01:02:13) - Miami conference

Bret and Matt welcome Jake Warner back to the show to talk about LowOps. What does LowOps mean? What can Cycle offer us as an alternative to Swarm and Kubernetes?

Jake Warner is the CEO and founder of Cycle.io. And I had him on the show a few years ago when I first heard about Cycle and I wanted to get an update on their platform offering. On this show we generally talk about Docker and Kubernetes but I'm also interested in any container tooling that can help us deploy and manage container based applications. Cycles' platform is an alternative container orchestrator as a service. In fact, they go beyond what you would provide normally with a container orchestrator and they provide OS updates, networking, the container runtime, and the orchestrator all in a single offering as a way to reduce the complexity that we're typically faced with when we're deploying Kubernetes.

While I'm a fan of Docker swarm due to its simplicity, it still requires you to manage the OS underneath, to configure networking sometimes, and the feature releases have slowed down in recent years.

But I still have a soft spot for those solutions that are removing the grunt work of OS and update management and helping smaller teams get more work done. I think Cycle has the potential to do that for a lot of teams that aren't all in on the Kubernetes way, but still value the container abstraction as the way to deploy software to servers.

Live recording of the complete show from May 18, 2023 is on YouTube (Ep. #217). Includes demos.

★Topics★
Cycle.io website
@cycleplatform on YouTube

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Jake Warner @ Cycle.io - Guest

• (00:00) - Intro
• (02:25) - Introducing the guests
• (03:17) - What is Cycle?
• (12:33) - Deploying and staying up to date with Cycle
• (14:21) - Cycle's own OS and updates
• (17:12) - Core OS vs Cycle
• (22:10) - Use multiple providers with Cycle
• (22:52) - Run Cycle anywhere with infrastructure abstraction layer
• (24:33) - No latency requirement for the nodes
• (28:28) - DNS for container-to-container resolution
• (29:54) - Migration from one cloud provider to another?
• (31:17) - Roll back and telemetry
• (32:48) - Full-featured API
• (37:12) - Cycle data volumes
• (38:35) - Backups
• (40:24) - Autoscaling
• (43:00) - Getting started
• (44:40) - Control plane and self-hosting
• (44:58) - Question about moving to Reno
• (45:59) - Built from revenue and angels; no VC funding

Bret and Matt are joined by Corey Quinn to talk about AWS and containers.

Corey Quinn is the Chief Cloud Economist at the Duckbill Group. You may have seen or heard some of his in-depth AWS content, including his Last Week in AWS newsletter and blog, Corey's podcast Screaming in the Cloud and the AWS Morning Brief, or his highly produced YouTube videos on the Last Week in AWS channel.

Corey runs the Duckbill Group, a company of people focused on helping clients understand and manage their cloud spend. If I had to describe Corey in a sentence, he's a quick thinking AWS expert who is one part cloud strategist, and one part sarcasm.

The inspiration for this show came from his blog series, focused on all the ways to run containers on AWS, which is to say there's a lot. Dozens of ways, in fact, which I took as a testament to how containers have won the cloud as the primary way to package and deploy software to servers. Now, the hard part for us is to figure out which method we're going to choose for running those containers.

We go on lots of tangents, but overall it was a fun conversation and I hope you enjoy this episode.

Live recording of the complete show from May 4, 2023 is on YouTube (Ep. #214).

★Topics★
The Cloud Resume Challenge
Last Week in AWS
17 ways to run containers on AWS
17 MORE ways to run containers on AWS

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Corey Quinn - Guest

• (00:00) - Intro
• (07:19) - 17 Ways to Run Containers on AWS
• (09:57) - If you're using the cloud, use the cloud!
• (13:32) - Data loss and it's only on the internet forever
• (17:58) - Recommended ways to run containers on AWS
• (22:49) - Biggest burn on people's AWS bills
• (29:33) - Docker Desktop on top of AWS EC2 in Windows and do you need bare metal?
• (30:13) - Bare metal required for Hyper-V
• (32:39) - AWS App Runner
• (40:26) - Services AWS has dropped
• (41:39) - Workloads inside the container; where the container should run
• (44:13) - Building experience...hands-on projects vs getting certifications
• (55:31) - Migrating. Leaving Kubernetes.
• (01:00:57) - Chat GPT Star Wars jokes

Bret and Matt are joined by Brent Baude and Dan Walsh from Red Hat to talk about the latest with Podman, Quadlet, Podman Desktop and Podman machine, and how it all works with Kubernetes.

Dan Walsh, a Senior Distinguished Engineer at Red Hat, has been working with containers since the beginning. He's a contributor to Docker, Project Atomic, SELinux, and a lot more. He literally wrote the book on Podman.

Brent Baude, is a Senior Principal Software Engineer at Red Hat and an architect and a primary maintainer of Podman, and contributes to many of its associated technologies like CRI-O, Buildah, and Skopeo.

We go through a lot of tooling in this episode because Red Hat has taken a different stance than Docker in how it delivers its container tooling. You might say they take the approach of the Unix philosophy of every program does one thing well. Most of us know Docker and how it bundles many things related to containers into a single command line and daemon, yet some would prefer to isolate pieces of container management functionality into discreet, smaller programs - one for building images, one for running containers, one for communicating with registries, one for adding a GUI to your container manager, and one for managing the container VM. It's just sort of how I would break down the Podman ecosystem.

And while that may seem like a lot of things, it's basically what Docker does for you in a single tool, yet the isolation of these tools is what can make them purpose-fit when you only need a fraction of the functionality of Docker. For example, one of Podman's core tenants is that it tells systemd to run your pods, which is the initialization process on most Linux distributions. In this way, your containers become more like standard system processes, rather than the Docker way of running all containers under the Docker Daemon process itself.

Now many of us have heard of the other two original Red Hat container projects, Skopeo and Buildah, but there's now an increasing number of things the Podman ecosystem can do. So I'm grateful to Dan and Brent for coming on to break down the new parts of this toolkit and how we might use them.

Live recording of the complete show from April 20, 2023 is on YouTube (Ep. #212).

★Topics★
Podman Website
Podman Desktop Website
Dan Walsh's book, Podman in Action
Podman Machine reference
Quadlet Blog Post
Podman and Quadlet Blog Post

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Brent Baude - Guest
• Dan Walsh - Guest

• (00:00) - Intro
• (04:26) - Dan's history with containers
• (10:52) - The recommended way to get Podman
• (11:55) - Podman Machine
• (13:27) - How is Podman Machine installed
• (16:43) - How is Podman organised
• (19:22) - Podman Compose explained
• (25:21) - Podman Desktop
• (28:52) - Podman and Docker extensions
• (30:16) - Support for Kubernetes YAML
• (36:54) - Podman and systemd workloads
• (42:44) - How to get started with Podman
• (51:38) - Overlaying networks with Podman

Bret and his co-host, Matt, are joined by Jason Dellaluce and Luca Guerra from Sysdig to talk about Falco, a tool I recommend for production clusters and knowing about any bad behavior on your servers.

Falco is a security tool I've mentioned multiple times on this show, because I mostly think that a low level security focused logging product is something that every production server needs. The ability to log unexpected events and behaviors on your Linux host is powerful and necessary to be able to audit what's really happening on your infrastructure outside of your app itself.

Falco has been a CNCF incubating project for over four years, and I was immediately drawn to it in its early days, because it was container and Kubernetes aware and it could log and alert with default rules for everything, from someone starting a shell inside a container, to a bash history file being deleted, to a container trying to talk to the Kubernetes API.

This episode will be useful for those of you new to tools like Falco and for those familiar with its basics, but also wanting to learn about newer features and use cases, which I did some learning on myself in this episode.

Live recording of the complete show from April 6, 2023 is on YouTube (Ep. #210).

★Topics★
Falco website
Falco on CNCF

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Jason Dellaluce - Guest
• Luca Guerra - Guest

• (00:00) - Intro
• (02:24) - Introducing the guests
• (05:25) - What is Falco? Why do we need it?
• (08:00) - What can Falco monitor?
• (17:11) - How are events logged?
• (30:59) - Does Falco classify alerts by severity?

Bret is joined by Lukas Gentele and Rich Burroughs from Loft Labs to look at a new project called DevPod, that supports dev containers and VMs. It works with local Docker instances and AWS, GCP, Azure, and several other cloud providers. The project is compatible with Microsoft's DevContainer standard, which means it works with the VC Code standalone app and VS Code in the browser.

Lukas and Rich were on this show last year, showing off vcluster, which allows you to run a full Kubernetes cluster inside an existing Kubernetes namespace. In this episode, we announce the release of DevPod and also go through some demos. I'm already thinking of how I might use it in my own developer workflow.

Live recording of the complete show from May 16, 2023 is on YouTube (Ep. #216). Includes demos.

★Topics★
DevPod website
DevPod on Twitter

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Beth Fisher - Producer
• Lukas Gentele - Guest
• Ruch Burroughs - Guest
• Cristi Cotovan - Editor

• (00:00) - Intro
• (02:49) - Introducing the guests
• (03:39) - Loft Labs and VCluster
• (05:46) - Introducing DevPod
• (10:39) - Why CLI plus GUI?
• (13:16) - DevPod use case
• (15:30) - Options for IDEs and port forwarding
• (18:20) - Using the Microsoft VS Code dev containers features
• (21:14) - Create dev environments locally or remotely
• (27:47) - Turning it on and off without having to go to the infrastructure
• (49:13) - How to get DevPod
• (50:00) - What's next? Share feedback.
• (57:12) - This is not a production deployment tool
• (01:01:27) - Wrap-up

Bret and Matt are joined by two engineers in Docker's leadership - Chief Technology Officer Justin Cormack and Senior Manager of Developer Relations Michael Irwin, to talk about recent Docker Hub changes, as well as their latest product releases.

We touch on Docker's latest updates and announcements, focusing on the early releases of Docker Scout, Docker plus WebAssembly, and the Telepresence extension for Docker Desktop. We also look at Docker's version 23 release, its first major update in three years, with key changes including BuildKit becoming the default builder, the ability to run alternate containerd shims, and a return to semantic versioning.

Other updates include new Swarm features and deprecation of older features, specifically older storage drivers.

In the show we also cover Docker's recent announcement and subsequent retraction of a plan to require free Docker Hub organizations to move to different plans.

Live recording of the complete show from March 23, 2023 is on YouTube (Ep. #208).

★Topics★
Docker v23 release
Docker Hub org changes
Docker Scout
Technical preview of Docker+Wasm
Telepresence for Docker announcement

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Justin Cormack - Guest
• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Michael Irwin 🇺🇦 🕊 - Guest
• Matt Williams - Host

• (00:00) - Intro
• (02:56) - Docker version 23 release
• (05:37) - Docker's Hub Announcement and Retraction
• (07:40) - What does telepresence mean with Docker
• (10:18) - Should I switch to Kubernetes for development?
• (12:35) - Telepresence elevator pitch
• (20:30) - Telepresence connection scenarios
• (23:30) - How to connect with Telepresence?
• (31:05) - Bret's Jekyll Story
• (33:12) - What is available free in Scout?
• (35:15) - Scout is not a point-in-time scan
• (39:45) - James Buren's Scout Video
• (40:03) - Anyone can make an extension
• (42:04) - Favorite extensions
• (43:19) - Wasm technical preview
• (45:33) - Bret's interview with Nigel Poulton
• (48:27) - Question
• (52:31) - Docker 23 defaults to BuildKit
• (53:27) - Happy Birthday Docker
• (55:06) - Wrapping up

Bret and Matt are joined by Chad Crowell of KubeSkills to walk through how you can contribute to Kubernetes open source.

Chad started the kubeskills.com community and podcast to focus on learning Kubernetes by doing and in this episode, he's taking us through a detailed guide on how to get involved in the Kubernetes community.

Although Kubernetes and other CNCF projects may seem big and complex with tons of activity, Chad helps us understand how the maturity of the projects and the community make it a much more pleasant onboarding experience for first-time contributors. We go through a wide range of resources and steps to help your first issue or pull request go smoothly.

Live recording of this show from March 9, 2023 is on YouTube (Ep. #206).

★Topics★
Learning K8s by Open Source PDF slides
First Timers Only website
K8s Contributor Community Homepage
List of K8s SIGs
K8s Slack
Open Sauced website
K8s Contributors onboarding course
Kube Cuddle podcast with Joe Beda
Learning K8s Skills
 

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Cristi Cotovan - Editor
• Beth Fisher - Producer
• Matt Williams - Host
• Chad M. Crowell - Guest

• (00:00) - Intro
• (02:45) - Chad's Book
• (05:11) - Learning platforms
• (05:37) - Another way to learn
• (06:44) - SIGs
• (07:47) - Community or Contributor Experience SIG
• (10:06) - Volunteers
• (11:27) - For those who want to start contributing
• (13:50) - The different tags
• (14:48) - Good first issues
• (16:01) - Bret's first Docker fix
• (16:50) - Who determines the first issues?
• (18:37) - OpenSauced
• (19:16) - Finding the next steps after learning
• (19:59) - Dashboard to track contributions
• (20:42) - A very friendly community
• (22:30) - Who's paying for OpenSauced?
• (23:06) - How to build your rep on the internet
• (24:57) - Github Flow, Breaking it down
• (27:24) - Eddie Hub
• (28:10) - Assign yourself to the issue
• (28:50) - Compile Kubernetes
• (30:14) - Tracking the pull request lifecycle
• (31:44) - Changing the k8s reference issue
• (35:17) - Kubernetes Slack Channels
• (35:59) - SIG mailing lists
• (36:44) - Getting feedback before you do the work
• (38:18) - How do you give up and issue?
• (39:53) - Correlating issues with Slack
• (40:28) - Start with an issue first
• (41:24) - Random PRs don't go well
• (43:00) - Onboarding course
• (44:11) - Cheat sheet
• (44:26) - What Chad has learned from contributing
• (46:09) - Online resources
• (48:48) - Certifications and exams
• (50:46) - Matt's comment about a podcast
• (52:48) - Wrap up

Bret is joined by fellow Docker Captain Nuno do Carmo to talk about desktop container solutions and the best Docker setup for Windows 11.

Nuno's a Docker Captain, Civo Ambassador, Microsoft MVP, and a big fan of Windows and Cloud Native. I've had him on the show before, because the more you use the Windows Subsystem for Linux and Docker Desktop, the more you'll want to use WSL.

Nuno helps answer many questions such as where are the Linux files stored, managing the CPU and memory resources, backing up files in WSL, getting the host Windows Explorer into the Linux filesystem, getting back to the Windows file system from the Linux shell and more!

Live recording of this show from February 23, 2023 on YouTube (Ep. #204). Includes demos.

★Topics★
Nuno's WSL blog
Bret's Docker Desktop alternatives list
Rancher Desktop website
Podman Desktop website

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• Bret Fisher - Host
• Beth Fisher - Producer
• Cristi Cotovan - Editor
• Nuno do Carmo - Guest

• (00:00) - Intro
• (00:52) - Episode intro
• (02:27) - Main show
• (02:39) - Reflecting on the Docker birthday
• (03:25) - Bret's Maven Course
• (03:27) - Introducing Nuno
• (04:34) - All starts with WSL
• (05:13) - Mac vs Windows
• (05:33) - WSL1 and WSL2
• (08:28) - Question Linux in VM vs WSL
• (12:51) - Filesystems and performance
• (14:34) - Setting yourself up for success with WSL
• (15:37) - WSL not installed by default with Windows
• (17:16) - Demo start
• (18:20) - Line endings issue in the past
• (18:56) - The tooling is WSL-aware
• (20:00) - VHDx
• (21:01) - Demo
• (24:22) - Bret re-explains it
• (27:01) - Question SSH into WSL
• (29:12) - Question How do you make a fresh WSL VM?
• (31:25) - Question What does mount show in Linux
• (32:37) - Question
• (33:28) - Taking snapshots with Raft WSL
• (34:08) - Question distros and VHDx files
• (35:45) - Deleting or losing your distros
• (37:17) - Question
• (39:45) - Ecosystem and options - the spreadsheet
• (42:11) - Demos
• (42:18) - Podman desktop
• (45:00) - Comment on Red Hat on Windows
• (46:13) - Rancher Desktop
• (53:19) - Demo
• (53:50) - Process isolation on Windows

Bret is joined by Project Calico's Tomas Hruby from Tigera to dig into Calico CNI features for Kubernetes and beyond.

Calico can be used in a lot of places, including Linux, Windows, containers, bare metal, eBPF or iptables. Many of us learned about it as a CNI option for Kubernetes network and networking policy.

Streamed live on YouTube on February 9, 2023.

Unedited live recording of this show on YouTube (Ep. #202). Includes demos.

★Topics★
Project Calico
Tigera Website
Project Calico on Tigera's Website

Creators & Guests

• Bret Fisher - Host
• Beth Fisher - Producer
• Cristi Cotovan - Editor
• Tomas Hruby - Guest

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Homepage bretfisher.com

• (00:00) - Intro
• (00:52) - About this episode
• (01:31) - Main show
• (01:36) - In today's episode
• (03:00) - How did Tomas get started with Calico?
• (03:28) - Projects are typically open source and SaaS
• (04:07) - Project Calico elevator pitch
• (05:26) - What can Calico do?
• (06:33) - The origins of Calico
• (07:13) - Docker got Kubernetes started
• (08:25) - Project Calico on Github
• (08:50) - Open source version is command-line driven
• (09:04) - Calico and the company behind it
• (09:28) - What makes Calico unique?
• (10:54) - EBPF
• (12:28) - EBPF and Calico
• (14:28) - Question
• (18:02) - Demo intro
• (18:33) - Question
• (19:18) - Question
• (20:25) - Question
• (21:15) - Vulnerabilities and threats
• (23:28) - Question
• (27:05) - Calico as service mesh
• (30:33) - What is Tomas excited about?
• (31:53) - EBPF real-time tooling

Bret is joined by Kyle Galbraith and Jacob Gillespie, co-founders of Depot, to discuss their new solution to slow Docker builds.
 
If you've never dug into some of the details of Dockers BuildKit, that's the engine behind your Docker build command, then this episode is for you. I'm fairly confident that everyone who uses Docker will eventually come upon the problems that Kyle and Jacob were trying to solve with Depot. Their focus is on speeding up your Docker builds by doing them remotely, in a transparent way.

They avoid you needing to rethink your workflows and CI automations and provide a CLI tool that's a drop-in replacement for the Docker build command. In this episode, we walked through the problems they can solve today with what I would call a unified shared build cache for your whole team, including your CI and automation tools.

The way they are going about speeding up the Docker builds is something I wished Docker had done for us all along. I think it's still early days for the Depot product, but if you're suffering with long build image times it's already mature enough to be something I would consider as a replacement for the traditional Docker engine builds that we're all used to.

Streamed live on YouTube on January 12, 2023.

Unedited live recording of this show on YouTube (Ep. #198). Includes demos.

★Topic Links★
Depot website
Depot on Twitter

Creators & Guests

• Bret Fisher - Host
• Beth Fisher - Producer
• Cristi Cotovan - Editor
• Kyle Galbraith - Guest
• Jacob Gillespie - Guest

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Bret's intro
• (02:24) - Main show
• (02:33) - Introducing the guests
• (02:53) - Today's topic
• (03:07) - Where did the idea for Depot come from?
• (04:26) - How it started
• (06:37) - Describing the problems
• (07:59) - The caching problem
• (09:49) - Docker caching default and in CI
• (12:45) - What is cache busting?
• (14:23) - Being deliberate about your CI environment
• (15:23) - What problems is Depot trying to solve?
• (17:27) - Replacing the Docker CLI with Depot
• (22:13) - Building for multi-platform
• (26:53) - Question
• (30:13) - Question
• (32:14) - Demo intro
• (32:45) - Modes of hosting
• (33:29) - Question
• (34:33) - What else does the UI offer?
• (38:21) - Getting started with Depot
• (39:28) - What's on the horizon?
• (40:30) - Outro

Bret is joined by Natan Yellin, the co-founder of Robusta.dev to talk Kubernetes and Prometheus monitoring, alerting, and maybe some CPU limit ranting.

Robusta tries to fill the gap left by Kubernetes' own AlertManager which has a very specific and not so helpful way of describing events in your cluster. This makes it hard to diagnose the cause of the event and you're left with Google, StackOverflow and an awful lot of head-scratching. Robusta acts as a proxy between AlertManager and your notification platform of choice.

In the show we talk about what Robusta is, how to deploy it in your clusters, and Natan also details some of the enhancements in their cloud offering that you can layer on top of that, which has a generous free tier.

Streamed live on YouTube on January 5, 2023.

Unedited live recording of this show on YouTube (Ep. #197). Includes demos.

★Topics★
Robusta Website
Robusta on GitHub
KubeCon - Building a Runbook Automation System for Prometheus and Kubernetes
Stop using K8s CPU limits
Recommended Pod Spec
Send Push notifications to your phone
Prometheus AlertManager
Grafana Labs
Kubewatch

★Natan Yellin★
Natan on Twitter
Natan on LinkedIn

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - In today's episode
• (02:59) - Main show
• (03:27) - Introducing Natan
• (03:53) - Alert fatigue
• (04:29) - Where did the idea for Robusta come from?
• (08:16) - Someone has to do the job
• (09:17) - What does Robusta offer?
• (10:25) - Proxying the alerts and providing context
• (11:30) - Saving 10 to 30 minutes
• (13:48) - The open source Robusta repo
• (14:10) - The need to de-aggregate event data
• (15:09) - Example or demo
• (15:39) - Question about observability for microservices
• (18:38) - Tip 1 Consider using silences
• (19:49) - Tip 2 Monitor outcomes
• (20:23) - Don't ignore alerts because of fatigue
• (23:13) - Sending to different channels based on priority
• (24:42) - Question about sending messages to destinations
• (26:17) - Question
• (26:49) - Installing Robusta
• (27:42) - Demo set up commands
• (27:54) - Questions
• (28:11) - Demo Kubernetes-specific
• (29:05) - Multi-cluster question
• (31:32) - What does the SaaS platform do?
• (32:44) - Demo with SaaS
• (33:37) - kubectl not recommended
• (35:03) - Breaking the glass
• (38:15) - Question about notifications
• (40:14) - Getting started
• (41:24) - CPU limiting
• (42:15) - Soft limits on CPU in Kubernetes
• (44:35) - Bret's pod spec
• (49:22) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by two pros from the NGINX team, Robert Haynes and Brian Ehlert to break down the various use cases of NGINX on Kubernetes, and help you decide when and where you'll be using it.

There's a lot going on around NGINX and I wanted to focus this conversation around NGINX on Kubernetes, and specifically the two ways you can run it for cluster ingress. We also get into some of the advanced scenarios of using NGINX, like caching and web application firewalls (WAF).

Many of us are using NGINX somewhere in our clusters. I found it very interesting how Robert, Brian, and the team at F5 spend a lot of time showing customers how they can use it in many ways to avoid deploying additional products on their clusters. I'm a big fan of reducing complexity.

Streamed live on YouTube on December 15, 2022.

Unedited live recording of this show on YouTube (Ep. #195).

★Topics★
Intro to K8s networking
K8s + NGINX
The basic Kubernetes Ingress provider of NGINX
The official NGINX team Ingress CRD (more features)
Gateway API for K8s
Monitoring NGINX
Monitoring NGINX with Prometheus

★Brian Ehlert★
Brian Ehlert on Twitter

★Robert Haynes★
Robert Haynes on Twitter

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Custom intro
• (02:41) - Main show
• (02:46) - Introductions
• (03:05) - Today's topic
• (03:40) - Question: Common NGINX use cases
• (05:21) - NGINX's web server capabilities
• (06:11) - Common NGINX on Kubernetes considerations
• (09:28) - API gateway vs ingress
• (14:12) - Ingress configurations and policies
• (16:35) - CRD with ingress project
• (19:52) - When people adopt Kubernetes
• (22:33) - Free vs Paid version
• (27:17) - Question
• (27:27) - Last-minute risky annotations
• (31:52) - Validating NGINX configs
• (34:44) - Avoiding NGINX config manipulation
• (39:46) - Questions
• (41:00) - Monitoring in NGINX
• (42:32) - Prometheus exporter
• (43:59) - Question about caching
• (49:39) - Question
• (51:21) - Wrapping up
• (54:05) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC and auth to Kubernetes and more.

Infra is a new company taking on simplifying centralized infrastructure, user authentication and permissions. Their open source tool by the same name is quite easy to start with. In this episode, Matt does a great job of explaining the pain points of Kubernetes user management, certificate distribution and revocation, and more pain points that Infra is bringing simplicity to.

Streamed live on YouTube on November 10, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #191).

★Topics★
Infra Website
Infra on GitHub
All Day DevOps free conference

Matt Williams
===========
Matt on Twitter
Matt's YouTube Channel

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:54) - Bret intro
• (01:53) - Main show
• (02:08) - Introducing Matt
• (02:40) - Today on the podcast
• (03:06) - Infra HQ and Company History
• (03:52) - How Infra came to be
• (06:40) - Datadog
• (08:34) - Infra and open source
• (09:59) - How Infra can help
• (10:24) - Core Infra functionality
• (11:56) - Bad idea
• (12:48) - Can't revoke certificates
• (16:11) - Painful Certificate Redistribution
• (17:11) - Why you need Infra
• (18:41) - Question
• (19:38) - Service accounts
• (20:22) - kubectl and pronunciations
• (21:57) - Question about OIDC
• (23:45) - Not just a Kubernetes tool
• (25:27) - Dealing with Keys is Hard
• (26:08) - Offboarding can be harder than Onboarding
• (28:24) - Workflow
• (29:21) - Demo intro
• (29:51) - End demo
• (30:02) - Cloud hosted and self-hosted
• (30:35) - Providers, Okta
• (32:02) - Is Infra GIOps Compatible?
• (34:53) - Quick summary of the demo for audio listeners
• (36:44) - Dumbed down roles?
• (38:08) - Question
• (38:52) - A tool to add to your toolbox
• (40:38) - Getting started and contributing
• (41:25) - Question
• (41:51) - Auditing in the future
• (42:49) - A Safe and Secure Model
• (43:52) - Wrapping up
• (45:42) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Anaïs Urlichs of Aqua Security to talk container and Kubernetes security tools like trivy, kube-bench, tracee, and kube-hunter. I've been using trivy for over four years to scan for known vulnerabilities in my own container images and my clients.

We also look at tracee, a new tool that is part of a new generation of tools that use the Linux kernel eBPF feature to investigate what's happening in real time on your servers. Anaïs is great as an explainer of Kubernetes and all cloud native things, and she's the creator of the 100 days of Kubernetes tutorials on her YouTube channel where she breaks down various cloud native topics for beginners. Based on what I've learned in this show from Anaïs, I plan to change how I use trivy so that it's scanning more things and more often in my CI automation pipelines.

Streamed live on YouTube on November 3, 2022.

Unedited live recording of this show on YouTube (Ep #190)

★Topics★
Aqua Security Tools
Aqua Security on YouTube
Trivy
Trivy-Operator
kube-bench
tracee
kube-hunter

★Anaïs Urlichs★
Anaïs on Twitter
Anaïs' Newsletter
Anaïs on YouTube
100 Days of Kubernetes

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Grab some merch at Bret's Loot Box

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Custom intro
• (02:28) - Main show
• (02:32) - Introducing Anais
• (04:30) - Security Tools
• (04:56) - What is Aqua Security
• (06:12) - Not all security scanners are made equal
• (07:22) - What is Trivy?
• (08:01) - Misconfiguration scanning with Trivy
• (12:12) - Security vs Disruption
• (13:06) - Address vulnerabilities in the base image
• (14:11) - Question: Operator for Trivy
• (17:51) - Automating the tool
• (19:45) - Vulnerability fatigue
• (20:32) - Question: Go and No-go Criteria
• (24:13) - Tip Toe, Start Small
• (25:19) - Kube Bench
• (26:08) - Kube Hunter
• (28:09) - What is Tracee?
• (33:39) - What is the roadmap for implementing these tools?
• (39:57) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by two Chainguard co-founders, CEO Dan Lorenc and Head of Product, Kim Lewandowski, to break down the ins and outs of supply chain security and talk about Chainguard's approach to securing it. We dive into tools, including their new Wolfi Linux distro.

We first talk about what that even is, because it's a buzzword right now, and not everyone's on the same page on what securing your supply chain even means in the world of software. Then we jump into base images for containers, and their project Wolfi. We talk a lot about Wolfi in this episode, because it has the potential to change how we build our containers.

Streamed live on YouTube on October 13, 2022.

Unedited live recording of this show on YouTube (Ep #188)

★Topics★
Chainguard Website
Chainguard Twitter
Chainguard Academy
Wolfi
Wolfi-based images
Sigstore

★Dan Lorenc★
Dan Lorenc on Twitter
Dan Lorenc on Linkedin

★Kim Lewandowski★
Kim Lewandowski on Twitter
Kim Lewandowski on Linkedin

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:54) - Custom intro
• (02:51) - Main show
• (03:04) - Introductions
• (03:24) - How did Chainguard get started?
• (04:23) - What is a supply chain?
• (06:30) - First Security Things
• (08:55) - The article and the base image
• (12:02) - Wolfi elevator pitch
• (14:49) - How do packages get into Wolfi?
• (18:49) - How do Wolfi packages work
• (21:57) - Chainguard Enforce
• (26:43) - Question about in-toto
• (29:08) - Preventing unsigned images in production
• (30:44) - Blocking vulnerable dependencies with policies
• (31:39) - Scanning on servers
• (34:02) - Question
• (35:53) - Question
• (37:50) - Getting started with Wolfi
• (39:57) - Where are they on Github (demo?)
• (40:50) - Question about vex
• (43:13) - What else?
• (43:40) - Chainguard Academy
• (45:24) - Professional services
• (49:32) - Wrapping up
• (49:56) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Nirmal Mehta of AWS and engineering consultant Laura Tacho, for the annual Best of DevOps.

We've started this trend of going through the year's best (and worst) of DevOps every December, everyone brings their topics, we mix them all up and try to get through all of it. This year, we came pretty close.

We cover many topics in this year's episode, things like desktop GUIs for containers, the return of real-life conferences, Docker reaching a significant milestone, AI, ML, data platforms and much, much more.

Streamed live on YouTube on December 8, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #194)

★Topics★
Full doc of topics (more than we could cover)
Year of Desktop GUI’s for Container Dev and Cloud Native Mgmt
Docker Extensions List
Rancher Desktop
Podman Desktop
Lens commercial
OpenLens
k9s website
Kui website

DevOps Survey Trends
OpenTelemetry Articles
- Transforming IT Departments
- Properly Explained and Demoed
- Getting Started

Karpenter website
eBPF and Profiling
- Pixie
- Parca

★Laura Tacho★
Laura's website
Laura's Course
Laura on Twitter

★Nirmal Mehta★
Nirmal on Linkedin
Nirmal on Mastodon
Nirmal on Twitter

★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Template intro
• (00:53) - Custom intro
• (04:25) - Main show
• (04:45) - Introducing the guests
• (05:20) - In today's episode
• (05:52) - The year of desktop GUIs
• (12:14) - In real life conferences
• (12:46) - Boom and Bust
• (13:30) - Will Jenkins go away?
• (14:39) - GitHub Actions
• (16:14) - Laura's Rubber-band Theory
• (19:09) - Revenue and Docker's comeback
• (21:02) - Other trends
• (21:11) - DORA report
• (22:21) - Increased security requirements
• (24:31) - Jumping on the security bandwagon
• (25:43) - Security by default
• (27:04) - Rapid fire Kubernetes happenings
• (28:06) - Bret's Maven Course
• (28:15) - Laura's teaching
• (29:04) - WASM+ Docker
• (29:38) - Slim.ai
• (30:29) - Open telemetry
• (35:37) - Carpenter
• (37:04) - Lack of staff
• (37:50) - AI
• (40:38) - Boosting productivity
• (44:38) - ML models developed and running in containers
• (46:14) - Wrapping up
• (46:40) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Michael Irwin, Sr. Manager for DevRel at Docker, to review and demo our top 2022 new features and announcements from Docker Inc. We run through the very long list in this episode and sadly, had to skip over the smaller, nuance features or subtle changes and focused on the bigger things - a major one being Docker extensions - as well as Docker Hub support for OCI artifacts, like the Helm charts, volume, WASM, Hardened Docker Desktop, tilt.dev and much more.

Streamed live on YouTube on December 1,  2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #193)

★Topics★
Docker Blog, "Products" category (most of our topics came from here)
Recapping the last year of Docker Desktop (YouTube, September 2022)
What's new in Docker Desktop (YouTube, DockerCon 2022, May 2022)
What's new in Docker build (YouTube, DockerCon 2022, May 2022)

★Michael Irwin★
Michael on Twitter
Michael's Website

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Template intro
• (00:53) - Custom intro
• (03:49) - Main show
• (04:00) - Welcome to Michael
• (05:24) - Keeping up with updates to our tools
• (08:03) - OCI artifacts
• (09:13) - What are OCI artifacts?
• (12:46) - WASM
• (16:35) - DEMO of WASM
• (23:16) - Question
• (23:43) - Question
• (25:42) - Question
• (27:29) - Question
• (31:31) - Extensions
• (34:40) - Question
• (36:41) - Question
• (39:37) - Dev Environments
• (42:51) - Compose v2
• (44:54) - Hardened Desktop
• (49:46) - Tilt
• (51:17) - Docker Desktop for Linux
• (53:01) - DSO Website
• (55:48) - More vulnerabilities every year
• (58:51) - Moving Dockerd image management to containerd
• (01:02:29) - Buildkit improvements
• (01:05:50) - Buildkit's link feature
• (01:09:59) - Stuff not covered
• (01:11:50) - Winding down
• (01:12:23) - Question
• (01:17:51) - Show and guest calendar
• (01:18:20) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Brian Christner, a Docker Captain and Chief, Online Gaming for Grand Casino Baden (jackpots.ch), who returns to the show to discuss his top recommended skills for improving your DevOps expertise.

Both Bret and Brian have been consultants on and off throughout their careers and also in positions where they needed to hire other engineers - often other DevOps engineers. They share their perspectives on the different types of DevOps roles and the various jobs they need to fill.

In this episode, we thought it would be helpful to bring our experience on DevOps jobs and look at the most essential and in-demand skills throughout the industry.

Streamed live on YouTube on October 6, 2022.

Unedited live recording of this show on YouTube (Ep #187)

★Topics★
DevOps Foundations Course
Engineering Management Training from Laura Tacho
Awesome Docker resources
Awesome Everything Lists on GitHub
Kubernetes This Month with Nigel Poulton
AWS Cloud Training
Container Automation Examples by Bret
Docker Observability by Brain

★Brian Christner★
Brian on Twitter
Brian on LinkedIn
Brian's Courses Promo Code TRAEFIK50 for 50% off
Brian's GitHub
Brian's Blog

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Intro 2
• (01:47) - Main show
• (01:53) - Welcome
• (03:01) - Brian's corner of the internet
• (05:37) - Impact of certifications in the hiring process
• (06:01) - What's your pet project?
• (06:58) - What lights you up?
• (08:27) - Sharers rather than Knowers
• (09:51) - About clouds
• (16:35) - DevOps are enablers
• (17:49) - Be replaceable
• (19:58) - Soft Skills
• (20:20) - The many hats of Senior DevOps
• (20:23) - Encouragers
• (20:36) - Protectors
• (20:44) - Realistic
• (21:01) - Protect your team
• (21:27) - Say no
• (21:55) - Problem solvers
• (21:58) - Listeners
• (23:49) - Question
• (24:48) - Awesome Docker List
• (27:46) - DevOps is vast and wide
• (29:57) - Observability
• (31:48) - Choose what to measure
• (32:50) - Junior and Senior DevOps Skillsets
• (34:53) - Being proactive in measuring
• (37:03) - Question
• (38:07) - Use the built-in tools first
• (41:41) - Quick way to get your hands dirty
• (47:44) - Security
• (50:50) - Infrastructure-as-Code
• (54:51) - Being a generalist or a specialist
• (56:32) - Enable others to work without needing you
• (58:13) - Question
• (58:16) - Getting started with a cloud
• (01:01:11) - Nigel Poulton
• (01:01:58) - You can't be responsible for everything
• (01:03:53) - Are certifications mandatory?
• (01:06:34) - Deployment checklist question
• (01:07:22) - Question
• (01:12:14) - Question
• (01:13:00) - Announcements
• (01:15:12) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Rosemary Wang from HashiCorp to show off Vault for Kubernetes, an an open source secrets provider.

Rosemary is a return guest and does her usual fantastic job at explaining the complex topics around storing secrets, who needs Vault and why, running Vault on Kubernetes, the Vault storage backend and so much more.

Streamed live on YouTube on September 29, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #186)

★Topics★
Vault website
HashiCorp Cloud
Raft storage for Vault, how Raft works
Example repo: HashiCorp Vault for Development Teams

★Rosemary Wang★
Rosemary on Twitter
Rosemary on Linkedin

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:54) - Bret intro
• (01:36) - Main show
• (01:52) - Course updates
• (02:12) - Introductions
• (03:15) - Today's Topic
• (04:24) - Anyone who doesn't need secret management?
• (07:13) - Elevator pitch for Vault
• (09:22) - Handling Rotation and Exit Strategies
• (11:49) - When do I need Vault?
• (14:35) - Question about Aquilas
• (14:54) - Vault is open source
• (16:50) - We ain't got time for that
• (17:41) - Can I run Vault on Kubernetes?
• (18:39) - Question: Where are Secrets Stored?
• (19:59) - Raft all the things
• (21:19) - Question: Vault and SSL Certificates
• (22:31) - Question and Demo
• (22:56) - Demo intro
• (23:26) - Demo
• (23:27) - Question about HSMs
• (23:50) - Question
• (24:44) - Question about Unsealed Tokens
• (27:18) - Question
• (29:42) - Bret's First Question about Toil
• (36:33) - Question: Password Managers and Vault
• (39:44) - Question
• (41:05) - Question
• (43:38) - Notes about Vault Agent Sidecar and Authentication
• (45:15) - Bret's Summary
• (48:48) - Question about Getting Started
• (49:44) - Starting with Sealed Secrets
• (52:30) - Wrap up
• (53:06) - Getting in touch with Rosemary
• (53:43) - What's next for Rosemary?
• (54:31) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Lee Calcote and Nic Jackson, co-authors of the Service Mesh Patterns book, to discuss service mesh for Docker Desktop and Compose apps with the new Meshery extension for Docker desktop.

They talk about what service mesh is and go into the new Measure extension for Docker Desktop, which is a CNCF sandbox project. One of its bigger features is to help you try out different service meshes and test them with only a few clicks. They also cover other features of their tools, such as the beta of MeshMap which helps you visualize your clusters and apply better practices to your service mesh.

Streamed live on YouTube on September 22, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #185)

★Topics★
Learn Service Mesh
Meshery Docker Extension
MeshMap
Service Mesh Patterns Book

★Nic Jackson, Principal Developer Advocate, HashiCorp★
Nic on Twitter
Nic on Linkedin
Nic Jackson on YouTube
Shipyard website

★Lee Calcote, Founder and CEO, Layer5★
Lee on Twitter
Lee on Linkedin

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Template intro
• (00:52) - Bret intro
• (01:53) - Main show
• (01:58) - The guests
• (02:39) - Lee and Layer5
• (03:55) - Nick and Hashicorp
• (05:51) - Lee and Nick
• (06:54) - Challenges of writing a book
• (07:37) - Layer5 and Meshery
• (08:38) - Meshery elevator pitch
• (10:46) - Service Mesh 101
• (11:16) - Retry
• (12:20) - Observability
• (13:29) - Question Docker Swarm Supports Docker Extensions?
• (15:39) - What does service mesh seem like?
• (16:38) - Platform engineering
• (23:54) - Distributed systems concerns
• (25:39) - preparation
• (26:16) - What would you use Meshery locally for?
• (27:50) - Mesh map
• (28:48) - Demo but mostly theoretical
• (32:45) - Visual designer
• (33:11) - Catalog of extensions
• (33:49) - Performance management
• (37:03) - Installing the extension
• (37:52) - Close to the end
• (38:12) - A lot going on online
• (38:54) - Shipyard
• (42:26) - Starship
• (42:44) - Wrapping up
• (42:55) - Status of the book
• (49:45) - Closing
• (50:01) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Liz Rice, Chief Open Source Officer at Isovalent, the makers of Cilium, to discuss Cilium and eBPF.

Liz Rice is back to give us more insight into eBPF and the Cilium project. Isovalent is the company that created and manages the Cilium Project, which does an increasing number of things for Kubernetes, including networking, CNI support, security, advanced networking stuff, and observability, as well as other things like load balancing. Liz is one of my go-to experts on how low-level Linux internals work. She's been speaking about container internals since the early days of Docker.

Streamed live on YouTube on September 8, 2022.

Unedited live recording of this show on YouTube (Ep #183)

★Topics★
Cilium website
Isovalent website
eBPF
Network Policy Editor

★Liz Rice★
Liz Rice on Twitter
Liz Rice's website
Books on Containers, eBPF, Kubernetes and Go

★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Bret intro
• (01:41) - Main interview
• (01:44) - The merch store
• (02:39) - More merch talk
• (04:19) - Introductions
• (05:16) - What else Liz does
• (05:26) - Liz's books
• (06:22) - Brief history of EBPF
• (07:41) - Kernel modules before EBPF
• (08:46) - EBPF vs Kernel Modules
• (09:57) - EBFP is dynamically loaded
• (11:23) - Performance and Data Transfer
• (12:35) - Isovalent and Cilium
• (14:12) - How Cilium started
• (16:18) - Specific versions of the kernel?
• (17:32) - Where do we use EBPF in Kubernetes?
• (18:12) - CNI
• (20:02) - Question: Where can you start learning EBPF?
• (23:04) - Question
• (30:22) - All open source?
• (31:08) - Question Cilium as a service mesh
• (32:32) - Enabling certain features
• (33:39) - Question
• (34:11) - Question
• (35:20) - Question
• (37:21) - Wrapping up Cilium in cloud
• (38:22) - Offloading programs XDP
• (40:16) - Question about GUI
• (42:41) - Question
• (49:29) - Question
• (52:10) - EBPF on Windows?
• (53:13) - How is it implemented?
• (54:02) - Wrapping up

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Shauli Rozen, CEO and Co-Founder of ARMO, creators of Kubescape. Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer, and image vulnerability scanning.

I'm a fan of tools like this and specifically of Kubescape, which I use and recommend to my clients. The scanner can scan your YAML manifests of your Kubernetes resources. It can scan your live Kubernetes clusters. And it can scan the YAML in your Git repos, as well as the images themselves that you're deploying to Kubernetes. As ARMO calls it, it's a single pane of glass into your Kubernetes security.

 
Streamed live on YouTube on September 1, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #182)

★Topics★
Kubescape's GitHub
K8s Security Dashboard
ARMO website

★Shauli Rozen★
Shauli on Twitter

★Join my Community★

Best coupons for my Docker and Kubernetes courses

Chat with us and fellow students on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Main intro
• (00:53) - Custom intro
• (02:45) - Main show
• (02:49) - Introductions
• (03:43) - The Kubescape project
• (04:25) - Go to the developers
• (05:26) - Security low-handing fruit
• (06:19) - I just want to be a user
• (09:32) - Kubescape elevator pitch
• (12:00) - Good learning tool
• (12:48) - Linting
• (13:20) - Remediation
• (14:45) - The SaaS Version
• (16:19) - Does DevOps not care about security?
• (18:24) - A gap in terminology
• (20:31) - Security compliance and guidance
• (25:58) - GitOps Approach
• (27:38) - Asking about demo
• (28:19) - Question
• (29:21) - Become a contributor
• (30:55) - Demo intro
• (31:21) - Demo end part
• (31:26) - Question
• (31:56) - Visualizer
• (33:23) - Question
• (34:41) - Question
• (38:55) - Mindset differences
• (39:49) - Question
• (42:06) - Question
• (42:33) - Winding down
• (43:26) - How to get started
• (44:26) - Template outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.

Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects.
 

Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.

Streamed live on YouTube on July 28, 2022. Includes demos.

Unedited live recording of this show on YouTube (Ep #180)

★Topics★
Docker Slim
Slim.ai

★Martin Wimpress★
Martin Wimpress on Twitter

★Pieter van Noordennen★
Pieter van Noordennen on Twitter

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server DevOps Fans

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:53) - Custom intro
• (04:32) - Main show
• (04:51) - How Slim.ai started
• (07:07) - Complexities of shipping images
• (08:53) - DockerSlim
• (10:27) - Setting the stage for demo
• (13:02) - Demo intro
• (13:28) - Demo
• (13:33) - Bret's Question
• (22:20) - Different container composition options
• (23:36) - Demo intro 2
• (23:42) - Bret loves Docker Desktop and Extensions
• (27:28) - Pausing Docker
• (27:54) - The extension is the same as the SaaS
• (28:30) - It's free
• (29:03) - Demo?
• (29:03) - Distroless and optimized starting points
• (34:47) - Build engineering nightmare
• (36:15) - Not just security considerations
• (39:03) - Understanding dependency differences
• (40:34) - Question
• (42:03) - Slim cli
• (46:08) - Getting started
• (47:38) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Dmitriy Kalinin and John Ryan, software engineers at VMWare, to show off the many Carvel project tools.

Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. The Carvel project includes tools for templating, image building and tracking, secrets management, app deploying and more. The tool list includes ytt, kapp, kapp-controller, kbld, imgpkg, vendir, and kwt.

Streamed live on YouTube on July 14, 2022.

Unedited live recording of this show on YouTube (Ep #178)

★Topics★
Carvel website
Carvel on Twitter

★Dmitriy Kalinin★
Dmitriy Kalinin on Twitter

★John Ryan★
John Ryan on Twitter

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:51) - Custom intro
• (01:50) - Main Show
• (02:14) - A lot of tools
• (03:19) - How did Carvel begin?
• (06:02) - Use the tools differently across all stages
• (06:59) - Building from the ground up
• (08:43) - Are the tools independently used?
• (09:28) - The first Carvel tool
• (09:42) - ytt
• (10:57) - kapp
• (11:57) - What is YTT
• (15:03) - Creating more consistency?
• (17:43) - How to use with compose
• (18:47) - Question about Q
• (21:40) - Question
• (24:33) - Question
• (25:12) - Solve a real problem
• (26:09) - Don't overcomplicate yourself
• (28:04) - What problem does Kapp solve?
• (30:37) - Kapp and Kapp controller
• (36:39) - Question
• (37:16) - Rapid fire
• (37:22) - Kbuild
• (43:28) - How does image package help?
• (46:57) - The experimental tools
• (47:45) - Secret generation
• (52:47) - Vendor
• (56:33) - Getting involved
• (58:06) - Last thoughts
• (59:20) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.

This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.

Streamed live on YouTube on July 7, 2022.

Unedited live recording of this show on YouTube (Ep #177).

★Topics★
Bret's Container Security AMA
Docker Security Docs
Docker Buys Atomist
Slim.ai website: Auto-slimming images
Docker Slim tool
Kubescape website
Kubernetes Security Context
Seccomp by default
Lint all files with super-linter
Datree K8s file scan
Kubernetes Benchmark
My GitHub Actions examples: Automate your builds, CVE scans, and more
Video on building a more secure base image
Snyk security tools website
Trivy CVE and K8s scans
Falco for watching servers for bad behavior

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

• (00:00) - Intro
• (00:52) - Mid-Roll Intro
• (00:53) - Bret's Intro
• (01:46) - Main show
• (02:45) - What should I worry about first? The Basics!
• (03:47) - Start with images
• (04:28) - Bret.show/SecurityFirst
• (05:04) - CVE scanning
• (05:36) - Dependency scanning
• (06:28) - Bret's Github with Dependabot
• (07:25) - OS dependencies with Trivy and Snyk
• (09:23) - Bret's Talks
• (10:17) - Alpine is not always good
• (11:27) - All hands on automation
• (12:14) - Don't run as root inside the image
• (14:04) - Question
• (15:20) - Making slimmer images
• (15:52) - Atomist
• (17:19) - DockerSlim
• (20:48) - Question
• (22:21) - Question
• (24:09) - Question
• (24:36) - Question
• (24:45) - Question
• (25:15) - Securing Docker
• (25:47) - Docker host scanner
• (26:28) - Falco
• (26:55) - Just use Docker
• (28:28) - Question about Windows Containers
• (30:19) - Maintain your servers
• (31:12) - Docker in the cloud
• (32:29) - Always stay on the latest Kubernetes release
• (33:33) - Kube-bench
• (34:22) - Tree.io
• (35:04) - Pod specs
• (36:08) - Sec comp
• (37:33) - Security context
• (38:57) - Privilege escalation
• (39:50) - Superlinter
• (40:54) - Question about Fargate
• (42:35) - Network policies
• (44:38) - Kubernetes docs article on security context
• (45:16) - Question
• (47:43) - Third-party security monitoring
• (47:57) - Question about volumes
• (48:45) - Question about Docker subnets
• (49:30) - Question about secrets
• (50:17) - Question about subnets 2
• (50:48) - Question
• (53:03) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Marc Campbell of Replicated to discuss the challenges of deploying your software on other people's Kubernetes.

Following a discussion of the problems Replicated is solving, they go over all the great open source projects they are developing for deploying, managing, and troubleshooting Kubernetes.

Streamed live on YouTube on June 23, 2022.

Unedited live recording of this show on YouTube (Ep #175).

★Topics★
Replicated
Replicated OSS Projects
Kubernetes Troubleshooter
Schema Hero
Kubelist podcast, CNCF project leader interviews
Enterprise Ready assessment and podcast
kURL - Customize your Kubernetes Installer
KOTS - Manage COTS on K8s
Find Outdated Images
Unfork your custom Helm charts

★Marc Campbell★
Marc Campbell on Twitter

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:03) - Template intro
• (00:53) - Bret intro
• (03:02) - Main show
• (03:42) - How Mark Got to Replicated
• (04:28) - How Replicated Started
• (05:01) - All projects open source
• (06:04) - COTS
• (11:31) - Kubernetes: Limiter or Enabler?
• (13:06) - Kurl
• (16:57) - KOTS
• (20:15) - Not all users are going to be helm experts
• (21:13) - Unfork
• (25:08) - Troubleshooting Kubernetes
• (35:02) - Outdated
• (40:35) - Their podcasts
• (41:41) - Schemahero
• (50:19) - Other tools like kurl?
• (52:02) - Are teams adopting kots?
• (54:27) - Question
• (55:49) - What's next?
• (57:39) - Winding down
• (57:48) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Guillaume Tardif and Felipe Cruz of Docker Inc. for a deep dive into Docker extensions.

Docker Extensions are a favorite new feature. Guillaume and Felipe are both engineers at Docker and they walk us through how extensions came about, how to install them, and how to submit them to the marketplace.

By the time Docker released extensions at DockerCon in May 2022, there were already a dozen solid extensions, including a disk manager, log explorer, and other third-party tools like Portainer, Snyk, and Anchor. Docker extensions will be most helpful to people who use Docker Desktop.

Streamed live on YouTube on June 16, 2022.

Unedited live recording of this show on YouTube (Ep #174). Includes demos.

★Topics★
Docker Extensions homepage
Docker Extensions announcement at DockerCon 2022
Build your first Docker Extension
Submit your extension for the Marketplace
Vackup, an example custom extension
Extension SDK
Other Extension resources

★Guillaume and Felipe★
Guillaume Tardif on Twitter
Felipe Cruz on Twitter

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Template intro
• (00:52) - Bret custom intro
• (03:35) - Main show
• (03:37) - Main show
• (03:58) - Felipe intro
• (04:30) - Guillaume intro
• (05:32) - Today's topic
• (06:21) - What are Docker extensions?
• (08:47) - Question: Are extensions running in their own container?
• (10:24) - Question: Extensions are in Docker Desktop only?
• (11:00) - Where it is on the interface
• (11:27) - Submitting your own extensions to the marketplace
• (12:45) - Easy to install the extensions
• (13:16) - A couple extension examples
• (15:03) - Question: Extension versions and updates
• (15:34) - Question: Extensions dependent on Docker Desktop version?
• (16:38) - Sideloading extensions that are not in the marketplace
• (17:11) - Question: RAM and CPU usage
• (17:32) - Demos described
• (18:12) - Demo intro
• (18:38) - Demo
• (18:42) - Quick note about Portainer
• (19:16) - You don't have to remember commands
• (20:19) - Don't install all extensions at once
• (20:34) - Do extensions pause with Docker?
• (21:33) - Very little to learn
• (22:08) - Bret's backup tool extension isn't done
• (23:19) - Synchronising extensions across installations
• (23:55) - Docker roadmap and ideas
• (24:48) - Question: Security, where is the UI code running?
• (28:19) - Question: Multi-node Kubernetes clusters
• (30:26) - Question: Are all extensions open source?
• (32:01) - Expanding the SDK
• (32:43) - Bret's drop-down Kubernetes request
• (33:19) - Extension submission
• (34:06) - Wrapping up
• (35:15) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Nirmal Mehta, a Principal Specialist Solution Architect at AWS, and a Docker Captain, to discuss Karpenter, an autoscaling solution launched by AWS in 2021. Karpenter simplifies Kubernetes infrastructure by automating node scaling up and down, giving you "the right nodes at the right time."

Autoscaling, particularly for Kubernetes, can be quite a complex project when you first start. Bret and Nirmal discuss how Karpenter works, how it can help or complement your existing setup, and how autoscaling generally works.

Streamed live on YouTube on June 9, 2022.

Unedited live recording of this show on YouTube (Ep #173). Includes demos.

★Topics★
Starship Shell Prompt
Bret's favorite shell setup
Karpenter
Karpenter release blog
K8s Scheduling Concepts

Other types of autoscalers:
Horizontal Pod Autoscaler
Vertical Pod Autoscaler
Cluster Autoscaler

★Nirmal Mehta★
Nirmal on Twitter
Nirmal on LinkedIn

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

• (00:00) - DDT MAIN
• (00:04) - Intro
• (00:51) - Custom intro
• (02:08) - Main Show
• (02:12) - Introductions
• (03:12) - Nirmal's Jobs
• (03:58) - Talking about Kubernetes cluster scaling
• (05:04) - Who are we addressing?
• (06:29) - What is Karpenter not addressing?
• (06:52) - Auto-scaling at pod level
• (07:40) - Cluster auto-scaling
• (09:07) - Karpenter is alternate to cluser autoscaler
• (09:21) - Question
• (10:11) - Issues Karpenter was created to address
• (12:29) - What is Karpenter?
• (13:51) - Selective instance type provisioning
• (14:47) - Matching deployment definition to instance types
• (16:08) - Question: Is Karpenter designed only for AWS?
• (17:13) - Question: Can you auto-scale control plane nodes?
• (19:21) - The Kubernetes Scheduler
• (23:14) - Question: Does Karpenter auto-scale down?
• (25:05) - Question: EKS with Karpenter spot instances
• (25:58) - Question: Karpenter and AWS auto-scaling groups
• (26:10) - Question: Installation and provisioning
• (27:20) - Only affects unschedulable pods
• (28:49) - Demo intro
• (29:14) - Demo
• (29:19) - Scaling Down
• (30:27) - Keeping your nodes fresh
• (32:54) - If you want to learn more
• (33:23) - Goals for 2022
• (34:15) - Questions
• (34:21) - Question: Cost-effective instances
• (35:35) - Question: Instances to IoC and automatically destroyed?
• (38:25) - Question: Features being pushed upstream into Kubernetes
• (40:28) - Question: Rebalancing
• (44:28) - Scaling down is hard too
• (46:18) - Question: Horizontal pod auto-scaler trigger Karpenter
• (47:25) - Question: Specs and Documentation
• (48:01) - Question: How does it pick instance sizes?
• (48:55) - Question: Karpenter respects desire to spread workloads
• (49:29) - Question: EKSAnywhere support
• (49:50) - Question: How do you pick AMIs?
• (50:37) - Winding down
• (52:25) - Wrapping up
• (52:30) - Outro

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by Laura Tacho, an engineering leadership coach, to discuss measuring your team's performance with DevOps metrics (DORA) and the new SPACE framework. Team Performance is one of Bret's favorite topics, and it should be everyone's concern.

Laura and Bret discuss soft skills, how to implement DORA DevOps metrics, the new SPACE framework, as well as common pitfalls people make when attempting to implement those measurements.

Streamed live on YouTube on June 2, 2022.

Unedited live recording of this show on YouTube (Ep #172).

★Topics★
Laura's course on High-Performing Software Teams
DORA (DevOps Research and Assessment)
DORA Metrics
DORA DevOps Quick Check
SPACE framework
Goodhart's law
Developer Experience
DevOps Handbook
Accelerate Book

★Laura Tacho★
Laura's homepage and Newsletter
Laura on Twitter
Laura on the GitHub blog

★Join my Community★
Best coupons for my Docker and Kubernetes courses

Chat with us on our Discord Server Vital DevOps

Homepage bretfisher.com

You can also support my content by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

Bret is joined by the co-creators of the Argo project and co-founders of Akuity - Hong Wang and Jesse Suen - to discuss the state of Argo and their new Akuity offering for Argo CD in the Cloud.

Chances are, you've heard of one or more of the Argo projects. They include Argo Workflows, Argo CD, Argo Events, and Argo roll-outs. Argo is one of those Kubernetes projects that is so common for teams to choose that it's nearly an assumption that every team is using one of their tools in a cluster or two.

Hong Wang and Jessie Suen helped co-create the Argo project years back at Intuit and have now co-founded a growing startup called Akuity. The company is focusing on making the Argo products better and creating SaaS offerings for the Argo tools. In this episode, we get a perspective on where the Argo tools came from and what the team behind it is doing. Streamed live on YouTube on May 26, 2022.

Unedited live recording of this show on YouTube (Ep #171).

★Topics★
Argo CD homepage
Akuity homepage
Akuity news on more funding
Argo CD in the cloud
ArgoCon in September
Declarative setup of Argo CD