CommPulse

Altho I’m an active lurker here, I’ve recently started using X to try and connect with people working in infra, platform engineering, and devops, but I’m finding it surprisingly difficult to discover that side of the community. But my feed is still mostly AI hype and general tech content, while I’m more interested in more informal discussions around k8s, ai & cloud infra, observability, networking, platform engineering, etc. For those of you who are active outside of Reddit, where do you usually discover good infra content or interact with other engineers? submitted by /u/sayori_hunter [link] [comments]

Was trying to better understand how state works in Terraform and OpenTofu, so I put together this short post on idempotency in IaC. I would love to hear your opinions submitted by /u/ogathrow [link] [comments]

I work across several Windows and Linux machines and often leave long-running CLI tools or coding agents active while away from the desk. I built PhoneCMD as a mobile control layer for this workflow. It connects to the terminals running on the machines themselves rather than creating a separate cloud environment. Current capabilities: View and control persistent terminal sessions Reconnect to sessions already running on a machine Run PowerShell, CMD, Bash, SSH and other CLI tools Control Claude Code, Codex, Gemini CLI and similar terminal agents Switch between multiple computers Send commands and view live output Browse and edit files Connect over LAN or encrypted remote access Continue after the phone disconnects or changes networks The desktop machine remains responsible for execution, permissions and CLI configuration. PhoneCMD acts only as the remote interface. I currently use it instead of remote desktop when I only need terminal access, because typing and reading output is much easier on a phone than navigating a full desktop UI. Disclosure: I built the application. PhoneCMD website PhoneCMD App For those managing several machines, what do you currently use for persistent remote terminal access: SSH with tmux, VPN, remote desktop, or something else? submitted by /u/vscoderCopilot [link] [comments]

I've been spending too much time manually comparing AWS, Azure, GCP, OVHcloud and Hetzner for different client projects before even starting the Terraform. So I built something to speed that up. It scores 13 providers against your actual constraints (budget, region, Kubernetes, GDPR, availability) and generates a Terraform/OpenTofu scaffold. A few things that might be interesting to this community: \- Cost breakdown per component (GKE, Cloud SQL, Redis, WAF, etc.) not just a total \- Lock-in score + exit strategy per provider with concrete migration steps \- Cost projection at 1x / 5x / 10x traffic \- Works without an account if you just want to see the output For a typical EU Kubernetes SaaS at €1,500/month, Hetzner comes out cheapest (614€) with the lowest lock-in, Scaleway scores highest overall (77/100), AWS comes last on cost and lock-in. The Terraform output is still a scaffold (terraform\_data placeholders for now, not full provider resources yet) — being transparent about that since someone called it out last time I posted. Happy to hear what's wrong with the scoring logic or the approach. submitted by /u/Character-Ring5785 [link] [comments]

im using a student subscription this is my Allowed resource deployment regions : ["polandcentral","switzerlandnorth","spaincentral","austriaeast","swedencentral"] when trying to create a VM non of these regions appear in regions list except the north switzerland and even if i chose north switzerland all the sizes are not available as shown in image any solutions ? https://preview.redd.it/p8usvmk2oxgh1.png?width=1873&format=png&auto=webp&s=f90fa11a3bd9091c1077312524ab9b336718fe66 submitted by /u/ArgumentTechnical401 [link] [comments]

Hi all, I contacted AWS support over a week ago regarding this issue, but unfortunately, have not received a reply or remediation at this stage. Essentially, I'm unable to transfer an .au domain to Route 53. The domain is already registered to me as an individual Australian citizen/resident (which is permissible by the .au registration policies, as it's not restricted to businesses/companies) via another registrar (PorkBun), yet the Route 53 transfer form only allows ABN, ACN, or Trademark as the AU ID type and AU ID number, and I am unable to leave these blank due to the form validation. Any ideas how I could proceed? Does AWS only allow .au domain registration for businesses/companies? submitted by /u/EntryLevelDeveloper [link] [comments]

Sorry if this sounds like a dumb question, but I'd love to hear from an IT admin's point of view to help understand the differences. My employer now requires all employees to register their personal phones so they can be managed, if they want to use it for checking emails/calendar/chats/etc. The employees with Android (including myself), had it super easy. It automatically prompted to setup Work Profile in order to continue using the work email app, and it finished setting up in less than 2 minutes. And any work apps now have a little blue briefcase on their icon, and I love how in the command center, you can easily toggle on/off the Work Profile to pause all work-related apps (for example on the weekend or when you go on vacation or just when you want to not deal with work anymore). And the employer can't see the personal apps or data since it's stored separately. However, I noticed for my colleagues with iPhones, it was a lot more tedious. Those employees had to follow this whole document of steps to manually install some certificate to set up MDM. And then if they were lucky to get it working, there's still no app separation so the employer can still see all their personal apps and data? I already knew that iOS doesn't have a user-friendly Work Profile like Android, but is that normal to get employees to do it like that? I would have assumed with how popular iPhone is, there would be a more simpler/automatic way for setting up personal iPhones for work. I've always heard on this sub that iOS is easier to manage, but from an employee's point of view, it doesn't seem that way (at least not the way my employer is doing it) and maybe I'm not understanding how iOS does data separation, but it just feels like there's not enough employee protections from employer seeing personal data compared to Android? Would love to learn how that works, because Apple's website is kinda vague. submitted by /u/thaman05 [link] [comments]

🔥 I'm excited to publish this new video! Azure Virtual Desktop Session Host Configuration introduces a modern way to deploy and manage session hosts by defining their configuration directly within the Host Pool. Instead of manually provisioning and configuring virtual machines, you can automate the entire deployment while ensuring every session host is deployed with consistent image, networking, identity, and security settings. In this step by step tutorial, I'll show you how to deploy Azure Virtual Desktop using Azure Bicep and the new Session Host Configuration feature. You'll learn the core Azure Virtual Desktop components, how they work together, and how Infrastructure as Code enables repeatable, scalable, and production ready deployments. https://www.youtube.com/watch?v=dBIoiAZWGf8 submitted by /u/brianveldman [link] [comments]

I’ve been working as a ssr cloud sysadmin for about a year and a month at my current company as a remote contractor. I make around $2.5k USD/month before taxes and deductions. In my country, that’s roughly 4x the minimum wage , so financially it’s a very good job. The problem is that this job is slowly killing my motivation. There are barely any projects assigned to me. During daily standups, I mostly just try to survive by saying something because I don’t really have anything to report. Everyone on my team is busy with their own work, so asking for mentorship or guidance isn’t really an option either. Because I’m a contractor outside the US, I have very limited access to systems and very few opportunities to contribute. Even when I want to help, I’m restricted by permissions. Honestly, I don’t even know why I haven’t been let go yet. I just feel empty and useless. Next month I’m planning to visit my family in Spain, and it made me wonder if I should start looking for a job there instead, even if the salary is only around the Spanish minimum wage. Context: 25-year-old male. Currently working as an SSR Cloud SysAdmin with about 4 to 5 years of IT experience overall, including Systems Administration, Cloud, Server Administration, IT Support, and IT Specialist roles. Has anyone been in a similar situation? Would you prioritize career growth over a comfortable salary? submitted by /u/xXNeGaTiVisMXx [link] [comments]

hi there I'm a student from India and I want to participate in the Google Arcade 2026 (For the Swags and Goodies by Google Cloud) I have 0 points though Still want to know if it is possible for me to reach Arcade Legend ⭐⭐⭐⭐ if I start from August I have registered for Google Arcade Facilitator program but I didn't complete any games what should I do in this situation? Pls give me your honest opinion submitted by /u/Glum_Inspection_8255 [link] [comments]

I have a task to research an alternative plan to Microsoft Intune, and we are particularly interested in open source solutions. We currently have the free version of Intune, but can you guide me on whether it would be possible to move completely away from Intune and use an open-source alternative, or if it would be better to keep the free version of Intune and combine it with an open-source solution to cover the remaining features? Ideally, we want the open source solution to at least be able to: Create compliance policies Configure Windows Update rings Deploy security baselines Configure BitLocker or an alternative to BitLocker Configure Microsoft Defender/AV policies Create configuration profiles Deploy applications Has anyone implemented something similar? Any experience or advice would be appreciated! submitted by /u/Xpl0it01 [link] [comments]

I know it's the weekend, but any news if Azure is going to update Luna costs in line with OpenAI? submitted by /u/Plane_Garbage [link] [comments]

Hello, I'm a third-year IT student in New Zealand focusing on network engineering, ops, cybersecurity, and cloud computing. I'm approaching graduation and starting to think seriously about where I want to point these skills. I'd love for my work to actually help people. I've seen groups doing digital protection work for at-risk communities (e.g supporting Afghan women activists staying safe online) and infrastructure/connectivity work in disaster response, and both of these (and everything in between) really appeal to me. Aside from my formal study, I have an interest in Homelabbing, Embedded systems, and web. A few questions for anyone who's made this move: - Did you go straight from study into humanitarian/NGO tech work, or build up a few years in a "normal" IT job first? - Which orgs are actually good to volunteer with or apply to as an early-career person (I've come across NetHope, Access Now)? - Any certs or experience you'd say actually matters vs ones that looked good on paper but were not worth it. - Any general tips for what I should focus on to be able to genuinely help with groups and orgs like this. Thanks! submitted by /u/Radiator-Pants [link] [comments]

I’m a data scientist who don't have much cloud pipeline experience. Recently, I've been asked to built a local PoC for extracting scenes, characters, and objects from video using a mix of computer vision(FFMpeg/face detection/scene detection) and Gemini (LLM) . The pipeline is modular: a pipeline.py orchestrates several Python modules that each represent a stage. To keep things idempotent, every stage writes name-coded artifacts to disk so already-processed items get skipped on re-run. I also added retry loops for flaky Gemini calls, stage-level retries, and per-stage logging that captures tokens and timing into the artifacts. Now management wants this on GCP so downstream projects (dashboards, chatbots) can consume the output. For now, the ask is simply to land the final text results in BigQuery. The source videos will arrive in a GCS bucket from a third party. My confusion is around architecture. Throwing everything into a single monolithic Cloud Run function feels wrong, especially with the stateful/idempotent requirements. When I asked Claude, it suggested rolling my own database-backed queue and state machine, but I would assume GCP already has managed services that handle this kind of workflow natively. I’m struggling to find clear, up-to-date information. Google searches mostly turn up generic AI-generated posts or outdated articles. What’s the right GCP-native approach here? I’m trying to understand whether I should be looking at Cloud Workflows, Cloud Composer (Airflow), Dataflow, or maybe a combination of Cloud Run jobs and Pub/Sub. Asking AI(Claude) seems to hate Cloud Workflows and suggest custom baking a state queue in database. How do people typically preserve per-stage artifact-based idempotency and retries without building a custom state engine from scratch? How to control re-runs/pause/resume of the workflow? Would something like Firestore for state + GCS for artifacts + Cloud Run jobs triggered by Pub/Sub be a reasonable pattern, or am I missing a more purpose-built service? Any pointers from folks who’ve done similar video or document processing pipelines on GCP would be appreciated. submitted by /u/MobileOk3170 [link] [comments]

OpenAI recently reduced GPT-5.6 Luna pricing, and DeepSeek also lowered its direct API pricing. However, Azure AI Foundry still seems to show the previous pricing (or it's not clear). Has anyone seen the new pricing reflected in Azure billing or the pricing page yet? If yes, which region/subscription are you using? submitted by /u/maa____z [link] [comments]

I recently got pulled into my bosses office for clicking on too many phishing emails. I'm not perfect I know that I can make mistakes but they showed me the emails and they were the most blatant spam emails ever. Then it occured to me that those were emails that I reported as phishing. They didn't know what I was talking about and they said that they tag any emails that were interacted with as security alerts. Literally all that I did was report as phishing. The email that he showed me even says that he got a security alert. Everything that I have found online says that if you report an email as phishing it sends the security team an alert just like the one that he showed me. Can someone tell me what this looks like for the admin side and also confirm that that is what you are supposed to do with phishing emails? submitted by /u/Gess97 [link] [comments]

I built a mobile first, vtt, terminal app. I do a lot of work from my phone and ttyd wasn't cutting it. Termius is nice but no voice so I had to do my own thing. It's an open source project (still in development) but I thought others might get some use out of it. Sovereign Terminal anyway, cheers. P.s. I read the rules and I didn't think this would be considered advertisement, but if it is just take it down. submitted by /u/magealexstra [link] [comments]

Disclosure first: I wrote the tool I mention here. It is free, there is no signup, and I am posting because the testing method is the interesting part. Mods, delete it if this is not welcome. I got tired of IaC tools that validate templates and call it a day. A template can be perfectly valid and still blow up on deploy. So I did it the slow way: 20 scenarios per cloud, each one deployed for real, exercised at runtime, then destroyed. CRUD APIs, queue workers, private databases, Redis, WAF, websockets, fan-out, secrets, containers behind load balancers. It took months and burned a lot of free tier. Some of what I hit: A brand new GCP project gives you a compute service account with no roles at all. Your first deploy dies inside Cloud Build with an error that tells you nothing. Took me a while to figure that one out. Cloud SQL with private IP is fine until you destroy it. The service networking peering can hold for half an hour after the instance is gone. And if your app created tables, the default postgres user cannot be dropped, so the destroy hangs there too. Cosmos DB speaks the Mongo protocol but rejects sort() on any field without an index. Real MongoDB just sorts. If you port a handler over, your list endpoint breaks and the error message talks about order-by item paths. Azure Functions on the consumption plan will happily deploy a Service Bus worker that never runs. The zip lands, the function exists, messages pile up in the queue. You have to sync the function triggers explicitly or the scale controller never looks at the queue. Memorystore Redis with TLS needs the CA cert handed to the client or the handshake fails. Every one of those turned into a fix in the tool, so a fresh project starts with them already handled. That is the whole point of doing it this way instead of trusting a linter. Repo if you want to look: https://github.com/Claudio-Fontes/iacmp It is Fair Source (FSL-1.1, same license Sentry uses). Free for any use including at work, you just cannot resell the tool itself, and each release turns into Apache-2.0 after two years. Happy to talk about the e2e battery itself. If you have run something similar, I want to hear which scenarios you would add. submitted by /u/iacmp [link] [comments]

Has anyone found a real escalation path past AWS billing support? AWS’s own AI told me: “I’ve confirmed that your account is eligible for a refund.” It instructed me to apply after June 4. I followed those instructions and opened a case on June 9. Now AWS says the AI’s statement means nothing. The dispute is over $527.04 for Fast Snapshot Restore. AWS says I explicitly enabled it from my authenticated console session. Fine. But to this day, I still could not tell you where the FSR control is. I did not even know what FSR was until this bill appeared. I deleted the gaming instance and all three experiment volumes on May 4. FSR somehow survived that teardown and kept billing until May 31. About $474 accumulated after I had already deleted the experiment. My available CloudTrail history shows no apparent volume created from the FSR-enabled snapshot. AWS has not identified one. Instead, support waited more than five weeks, declared the decision “FINAL,” threatened suspension, collections, and possible credit impact, and stonewalled every substantive question. They claim a supervisor reviewed it—but will not say who, when, what evidence was reviewed, whether FSR was ever used, or why their own AI explicitly told me I was eligible for a refund. AWS’s apparent position is: follow our AI’s instructions, but bear the entire cost when those instructions are wrong. Has anyone reached an actual independent billing reviewer? What exact route worked? submitted by /u/kevinh456 [link] [comments]

$85,000. That’s the cost of a fraud incident that hit us as a long term partner and reseller for Google Cloud this month. A customer who was a lead through the partner directory did reach out for invoice billing, signed a contract, had his data and info submitted and got assigned a billing account. As per our normal procedures for new clients, a 200$ budget alert is set until a customer builds up history. The customer was apparently one of those crypto miner fraud cases where they spun up 10+ different projects with 10s of VMs for crypto mining in the matter of hours racking up almost 85K$ of consumption before we were able to shut it down when we got the alerts. When you’re a Google Cloud reseller, you aren’t just a vendor; you’re the first line of defense. But we are currently operating in a system that lacks basic structural safeguards for partners. We were hit by an account abuse incident that went from 0 to $85k in roughly 24 hours. The most frustrating part? It wasn't for a lack of our diligence. It was a failure of the platform's tools to keep up with reality. No Hard Spending Caps: There is no "stop" button that prevents a reseller’s account from being leveraged into bankruptcy by bad actors. Delayed Alerts: Budget alerts are a great concept for predictable monthly usage, but they are utterly ineffective against high-intensity, automated fraud. By the time the alert hits, the damage is already locked into the billing cycle. This wasnt the first case, we had customer cases of API Keys being leaked and abused racking up tens of thousands for customers in damages, which always cited as customer's responsibility. It doesnt make sense when the customer and the partner has no control to cap spending! Spending Caps feature was only introduced this month ( https://docs.cloud.google.com/billing/docs/how-to/budgets-spend-caps ) We are working through the recovery process, and I expect better from a partnership that values the "Partner Network" label. If we are expected to bring customers to the cloud, Google Cloud needs to provide the hard limits that keep partners safe from catastrophic, automated fraud. It’s time to move past "best practices" and start implementing "hard protections." Until now we havent been able to resolve the case as we keep being bounced between billing support and account managers, each claims the other has jurisdiction but its extremely frustrating that we get to be the party paying up for such issues with the margins we do on reseller with almost zero protection! submitted by /u/BigKozman [link] [comments]