Pulling the Strings

When Sean Atkinson says that “We’re on a trajectory to have the most vulnerabilities ever identified in a single year, starting this year,” take note: As Chief Information Security Officer for the Center for Internet Security, he knows what he’s talking about.

He’s referring to the ever-increasing tide of weaknesses and flaws that undermine the security of software used every single day by teams around the world. Between a more acti...

It’s all good news, we promise! The Forge has always been the go-to spot for Puppet users to find, download, and update content and modules. On this episode, we're revealing a few of the exciting changes that are going to make the Forge even easier and more valuable for all Puppet users, like personalization, filters, and features to track module versions and updates against your Puppet file.

As of today, there are 7,508 modules on ...

The 2024 State of DevOps Report: The Evolution of Platform Engineering is live! In this episode, we’re taking you behind the scenes with the authors of the report and one of the people who helped run the survey.

Download the 2024 report for free here!

On this episode, join us as host Ben Ford, report authors Margaret Lee and David Sandilands, and project manager Stephanie Fairchild pull back the curtain on the 2024 State of DevOps Re...

Platform engineering is all about giving devs the tools they need to work independently. Work-from-home policies give people flexibility in where and how they work. It should be a match made in heaven, right? Well... it’s more complicated than that.

Research, feedback, and evangelizing are critical to building an internal developer platform (IDP). But WFH can make that communication tough. And that's before you’ve even considered co...

Politics is everywhere in your organization. No, not THAT kind of politics – the kind that happens when you need something and can’t get it, or when you get good at something and people start noticing. Actually, politics happens just about whenever decisions get made. Joshua Zimmerman says that kind of politics is rooted in people, and with the right mindset, you can use politics to make things better in your organization – for you...

Great things – tools, spaces, companies, brands – are supported by great communities. The Vox Pupuli are perhaps the most prominent, active group in the Puppet community. Here’s what they're up to lately, what it’s like being one of them, and what Puppet (the community) means to Puppet (the company).

The Vox Pupuli are 200+ strong; they maintain dozens of modules on the Forge; even executive leadership knows their name. On this epis...

Open source has always moved fast. Today, it moves faster than ever, driven by both community demand and corporate interest. On this episode, Perforce’s Javier Perez and OSI’s Stefano Maffulli discuss the impact of recent license changes and the historical push-and-pull between consumers and providers in the world of open source.

Highlights:

• Reflecting on 25 years of OSI and its widening scope
• The historical changes that set the s...

In the past few years, developer experience has become one of the biggest concerns at the C-level. Gartner found it’s the top value factor for adopting IDPs, performance engineering, CI/CD, and more core aspects of platform engineering. In 2021, McKinsey said it should be “the cornerstone of talent strategy” – and still, it’s a sticking point for a lot of software orgs. Turnover, burnout, skill gaps – symptoms abound that can often...

The opportunity to write a Puppet 8 book landed in David Sandilands’s lap when he had just started at Puppet and with a child on the way. About a year and a half later in mid-2023, “Puppet 8 for DevOps Engineers” launched via Packt. This is the story of everything that happened in the middle.

Speakers:

• Ben Ford, Community Lead at Puppet by Perforce
• David Sandilands, Senior Solutions Architect at Puppet by Perforce

Learn More ...

So your organization failed a compliance audit and got slapped with fines and penalties. Bummer! You pay the fine, spend a few days fixing your configurations, run a scan, and get ready to do it again come the next audit. But that approach doesn’t work anymore: The risks are too high, and fixing months of configuration drift at the drop of a hat (let alone hunting down all the paperwork for auditors) certainly isn’t your team’s fav...

Modules are the basic building blocks of Puppet. They're made to solve common challenges, extend functionality, and optimize your use of Puppet. They're also reusable and shareable – you can find thousands on the Puppet Forge – and best of all, anyone can make them. But what does that really mean?

On this episode of Pulling the Strings, Ben Ford sits down with Yeshua Hall to talk about Yeshua’s experience building the Puppet module ...

Supposedly, Albert Einstein once said, “If you can't explain it to a six-year-old, then you don't understand it yourself.” That might be a bit harsh, but it holds true for teaching just about anything: You’ve got to meet learners where they are. That’s why Puppet recently launched new on-demand training courses and more. There’s a new, engaging way to learn how to do things with Puppet without going down too many rabbit holes.

On th...

“It doesn't matter how small the contribution is – I think everyone benefits from the different environment, the different culture, of open source communities.” From ‘free software’ to the Mars Rover, the scope of open source is expansive, growing, and offering new challenges to organizations and practitioners alike. Now, Perforce Director of Product Management Javier Perez is excited to share the latest findings from the 2023 Stat...

In this episode, join special guests Nigel Kersten, KasparvonGrünberg, Fatih Degirmenci, and Ronan Keenan as they discuss the recent surge in popularity of platform engineering and how these teams are fast becoming vital to enterprise success. 

In this panel discussion they explore: 

• The history and advent of platform engineering
• What platform engineering looks like today
• Where to get started in platform teams
• 3 key fallacies to avo...

Creating and maintaining community is hard, especially when you don't bump into each other in the hallways on the regular. And community is vital, especially when it advocates for you and helps create a safe space to bring your whole self to work. Todd and Melissa share their experiences with Puppet's Pride ERG and how they're using it to work towards systemic change.

Learn More:

• Join our community at https://slack.puppet.com
• Find...

Managing the configuration of an entire ecosystem is not an easy thing to do, and bootstrapping the system that manages that configuration is even more challenging. Edwin from Puppet’s Solutions Architects team shows us a tool they've built that aims to simplify that task.

Learn more:

• Join our community at https://slack.puppet.com and chat with Edwin.
• Try out the module from its Forge page and file any issues on the linked source ...

CentOS has become the de facto standard operating system for many organizations since it’s basically the same thing as RHEL, rebranded and without commercial support.

CentOS was originally a community project, but over time Red Hat has become more influential in its direction and has shifted it to a "Stream" model, effectively moving CentOS 8 from being a downstream release (built after RHEL) to an upstream release (built before RHE...

Cortez worked his way up through the ranks as a cloud security and compliance engineer, managing hundreds of production applications. Now he's taking those grueling lessons and teaching the team at Relay how to automate away tedium and toil. Join us as Cortez shares stories from the field and some of the motivation behind Relay's cloud compliance enforcement capabilities.

Learn more: 

• Join our community at https://slack.puppet.co...

The recent log4j fiasco reminded us that not only is it important to stay updated and current with security news, but it's also critical to have safe ways to deploy configuration updates or orchestrate reporting/remediation scripts across your infrastructure as quickly as possible. Jeremy and Nick join us today to share best practices and automation suggestions.

Learn more:

• Join our community at https://slack.puppet.com
• Contribute...