Michael Hausenblas - Böcker

If you use Linux in development or operations and need a structured approach to help you dive deeper, this book is for you. Author Michael Hausenblas also provides tips and tricks for improving your workflow with this open source operating system. Whether you're a developer, software architect, or site reliability engineer, this hands-on guide focuses on ways to use Linux for your everyday needs, from development to office-related tasks.Along the way, you'll gain hands-on experience with modern Linux terminals and shells, and learn how to manage your workloads. You'll understand how to run Linux applications by using containers, systemd, modern filesystems, and immutable distros such as Flatcar and Bottlerocket.Use Linux as a modern work environment, rather than just from an admin perspectiveLearn critical components such as the Linux kernel, terminal multiplexer, human-friendly shells, and portable shell scriptingBecome familiar with access control, from file permissions to capabilities, and understand the role of filesystems as a fundamental building blockLearn about application dependency management and containersGain hands-on experience with the Linux networking stack and tooling, including DNSApply modern operating system observability to manage your workloadsBecome familiar with interprocess communication, virtual machines, and selected security topics

If you’re looking to develop native applications in Kubernetes, this is your guide. Developers and AppOps administrators will learn how to build Kubernetes-native applications that interact directly with the API server to query or update the state of resources. AWS developer advocate Michael Hausenblas and Red Hat principal software engineer Stefan Schimanski explain the characteristics of these apps and show you how to program Kubernetes to build them. You’ll explore the basic building blocks of Kubernetes, including the client-go API library and custom resources. All you need to get started is a rudimentary understanding of development and system administration tools and practices, such as package management, the Go programming language, and Git. Walk through Kubernetes API basics and dive into the server’s inner structure Explore Kubernetes’s programming interface in Go, including Kubernetes API objects Learn about custom resources—the central extension tools used in the Kubernetes ecosystem Use tags to control Kubernetes code generators for custom resources Write custom controllers and operators and make them production ready Extend the Kubernetes API surface by implementing a custom API server

Want to run your Kubernetes workloads safely and securely? This practical book provides a threat-based guide to Kubernetes security. Each chapter examines a particular component's architecture and potential default settings and then reviews existing high-profile attacks and historical Common Vulnerabilities and Exposures (CVEs). Authors Andrew Martin and Michael Hausenblas share best-practice configuration to help you harden clusters from possible angles of attack.This book begins with a vanilla Kubernetes installation with built-in defaults. You'll examine an abstract threat model of a distributed system running arbitrary workloads, and then progress to a detailed assessment of each component of a secure Kubernetes system.Understand where your Kubernetes system is vulnerable with threat modelling techniquesFocus on pods, from configurations to attacks and defensesSecure your cluster and workload trafficDefine and enforce policy with RBAC, OPA, and KyvernoDive deep into sandboxing and isolation techniquesLearn how to detect and mitigate supply chain attacksExplore filesystems, volumes, and sensitive information at restDiscover what can go wrong when running multitenant workloads in a clusterLearn what you can do if someone breaks in despite you having controls in place

Generate actionable insights about your cloud-native systems.

For developers and SREs who have worked with cloud-native applications. This book is suitable for any public cloud.

In Cloud Observability in Action, you will learn how to set up an observability system that learns from a cloud application's signals, logging, and monitoring using free and open-source tools.

You will learn, among others, how to:

Apply observability in cloud native systems Understand observability signals, including their costs and benefits Apply good practices around instrumentation and signal collection Deliver dashboarding, alerting, and SLOs/SLIs at scale Choose the correct signal types for given roles or tasks Pick the right observability tool for any given function Communicate the benefits of observability to management

Cloud-native, serverless, and containerised applications are made of hundreds of moving parts. When something goes wrong, it's not enough to just know there is a problem—you need to know where it is, what it is, and even how to fix it. Cloud Observability in Action shows you how to go beyond traditional monitoring and build observability systems that turn application telemetry into actionable insight.

About the technology

A well-designed observability system provides insight into bugs and performance issues in cloud-native applications. Often, observability is the difference between an error message and an explanation! You know exactly which service is affected, who's responsible for its repair, and even how it can be optimised in the future. Best of all, observability allows you to easily automate your error handling with machine users applying fixes without any human help.