CommPulse

So I came across aws:GetBatchImage - I was using claude to clean my older images apparently when I pulled I saw some image which are 300 days old and it was in good amount but next day when I decided to pull again the lastpulltime got updated and apparently it was because i was pulling manifest and not the image and there is apparently a different way to disable it by adding exclusion. Updating these detail on last pull actually lets them get you to keep fairly older images and keep on paying for the storage https://github.com/aws/containers-roadmap/issues/2390 https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-time-update-exclusions-manage.html PS: heading is little incorrect just updating the manifest - its just pulling the manifest submitted by /u/hello-world012 [link] [comments]

We had a major production incident a few weeks ago that really exposed how manual our root cause analysis process still is. Incident was pretty standard on paper: error rate spike across a couple of microservices, latency blowup on one critical api, customers hitting timeouts. We have the usual observability stack, distributed tracing, logs, metrics, dashboards, plus tickets and slack channels but getting to "what broke first, and why" was mostly humans correlating tabs manually. The incident response workflow looked like this: jump into the oncall war room, pull up dashboards, zoom in on the time window and pivot between error logs, traces, deploy history, feature flag changes and infra events. someone manually builds an incident timeline, a deploy goes out, error rate spikes shortly after, latency climbs, autoscaling kicks in, db connections start flapping. then another person tries to connect that narrative back to the specific service, function, or config change that caused it, which is the actual root cause analysis part nobody's automated yet. We do have some ai-powered anomaly detection and basic rca signals turned on but in practice they mostly narrow the blast radius instead of giving a confident, explainable root cause. it still feels like humans doing the hard work, with the tooling just providing hints rather than a real diagnosis. Looking for automated root cause analysis tools that can take telemetry, logs, metrics, traces, infra events, together with deploy and feature flag changes and output a credible "this change in this service is most likely the cause, here's why." also interested in platforms where the rca output is good enough to drop straight into a postmortem instead of needing another hour of digging and anything beyond the usual big observability platforms, especially newer ai-native rca tools that sit on top of existing observability instead of trying to replace it, that's noticeably reduced incident triage time or mttr without just adding another noisy dashboard. if you're running any of these in production, what do you still consider "top" for automated root cause analysis today? submitted by /u/Potential_Force_4136 [link] [comments]

Fiber went down, uplink to core.. No activity on link light both sides pull SC connectors, laser, so i know it's not the cable fail over to other uplink is working so I SSH and do a no shut, still off "try replacing the sfps" That was it, an SFP malfunctioned. Thank god it's friday submitted by /u/Anonymous1Ninja [link] [comments]

Cloud platforms have made it much easier for teams to build and deploy applications quickly, but I feel the security review process has become more challenging as release cycles get faster. Azure provides a lot of tools for infrastructure security, monitoring, identity management, and compliance, but application-level issues can still be difficult to catch before they reach production. For teams running applications on Azure, what security checks are part of your deployment process before going live? Do you focus more on code reviews, automated testing, manual assessments, vulnerability scanning, or a combination of different approaches? I'm interested in hearing how different teams balance shipping quickly while still maintaining confidence in the security of their applications. submitted by /u/Minute-Vegetable-773 [link] [comments]

We are hardening our security policies and want to implement some password rotations. One account that came up with our security guy was our AD account that we have in the Microsoft Entra Connect Sync app. I understand that this account is for the app and the account syncing to the cloud is different. If we change the password in AD to the Entra sync account, is it as simple as just updating it in Entra Connect sync tool and then running a delta sync to see if it works? I have a small environment I plan on testing this with before we change the password to Azure connect for the larger wide org. submitted by /u/Available_Pack_2499 [link] [comments]

Hello fellow Admins, As budget season approaches, we are reconsidering Udemy as a company platform for additional learning. Personally, I find Udemy quite adequate, but wanting to hear what other people like for their help desks, admins, and others within your department. submitted by /u/Ironfox2151 [link] [comments]

So I'm having a battle with Gemini here and trying to work something out. I decided, since SMS MFA is soon to be done, I tried the new Windows passkey feature until I realized this has to target a phishing-resistant policy to work ideally. This worked great for our regular users that don't have our apps on personal device nor corporate phones (no MS Authenticator). Until the desk phone kicked out in my test. Now I can't sign in, of course. It looks like the Teams admin provision option uses device code flow, which is blocked as a recommended practice. Is there a way to slightly loosen that? Ideally, I would like the best of both worlds but I'm not figuring out the best path here. submitted by /u/scratchduffer [link] [comments]

This is probably one of the biggest issues I see when taking over from other MSPs both big and small. Why is it that when I join the public Wi-Fi I can ping every computer and server in the building lol? See normally I encounter businesses with one Wi-Fi and I understand how that doesn't translate to guests or customers being separate from the main network. Still not configured properly and still an issue, but I get it. But today for example. Did a network assessment for a healthcare office. They literally had 2 separate ssids. One labeled private one labeled public. They both connect you to the same subnet. And I can ping every computer and server in the building from the public. Like you went out of your way to make a separate public Wi-Fi but didn't actually make it separate. My guess is they either had issues with the VLAN so they said screw it and put it on the main. But even then, this is a unifi system, you could literally just check the box for isolation of devices and leave them on the LAN but at least they wouldn't be able to talk to other LAN devices. It's really sad that I see this so often. It's one of the first things I check when I walk in the door, I join the public or guest posted wifi and start pinging. What's even worse is I looked up this MSP. They are up and down the entire East coast USA. They also were billing them for advanced antivirus and security on all the machines but sentinel one was only installed on two of them. Smh. submitted by /u/Sea_Information6125 [link] [comments]

EIXO was created to address a common operational challenge: critical business areas working in isolation, with fragmented data and limited visibility across the organization. Built around the real operational needs of Jardim Espaço de Educação, the platform connects multiple domains within a single operating ecosystem: • School administration • People management • Finance • Supplies and inventory • Nutrition and kitchen operations • Operational intelligence and performance indicators EIXO is not designed as just another traditional ERP. Its architecture follows a distributed operating model in which each module preserves its specialization while sharing data and operational context across the organization. The goal is to reduce manual work, improve traceability, strengthen coordination, and turn operational data into faster and more consistent decisions. The project is being developed and documented publicly on GitHub: github.com/maykonlincolnusa/Eixo-jardim-ERP #SoftwareEngineering #SystemArchitecture #ERP #DigitalTransformation #DataEngineering #OperationalIntelligence #EducationTechnology #OpenSource submitted by /u/MaykonLincoln [link] [comments]

Been running some training jobs on TPU v5e and every time I tweak sequence length or batch size mid-experiment, I eat this huge AOT compile penalty before anything actually runs. Feels like the "cold start" tax is way worse than people talk about online. Is this just a TPU/XLA thing, or does anyone see similar pain on GPU with torch.compile when shapes aren't static? Curious what workarounds people use — bucketing sequence lengths, padding to fixed sizes, warm pools, anything. How many seconds/minutes are you losing per shape change in your actual workflows? submitted by /u/Comfortable_Nail6076 [link] [comments]

From a lot of discussions here, it seems that many production incidents eventually trace back to some kind of change—a deployment, configuration update, infrastructure modification, scaling event, etc. What I'm curious about is what happens after you've identified a likely change. What's usually the hardest part of confirming that it was actually responsible for the incident? For example: Do you rely mostly on logs, metrics, traces, or dashboards? Do you try to reproduce the issue? How do you separate correlation from actual causation? Have you ever spent hours investigating the "obvious" change only to discover the real cause was something else? I'm interested in how experienced AWS teams approach this in practice rather than any specific tools. Thanks! I'm trying to understand what the investigation process looks like in real production environments. submitted by /u/Narrow_Power [link] [comments]

https://preview.redd.it/9l7i8ay9flgh1.png?width=2032&format=png&auto=webp&s=4a4121044b80b22c3286cbfb10f1bc69eb4ea1ce submitted by /u/Upset_Hippo_5304 [link] [comments]

Hey! Quick background on me — graduated in 2020 from a tier 2 college, landed a third-party role at a Tier1 investment bank as an SRE, and ended up staying 5 years (got converted to full-time after the first 2). Got laid off in May 2025, honestly wasn’t mad about it since I wanted out anyway. Most of the work i did was on there in house tools and i felt there was no learning curve there That same month I interviewed for a “DevOps Engineer - Migration Specialist” role and got it. Felt good, got comfortable again. But once I actually joined, I realized it’s basically an L2 support role. Pay was decent though, so I told myself I’d stick around a year, upskill on the side, then jump ship. Except… I didn’t. The role’s been so low on mental engagement that I just coasted. Now it’s actually time to switch, and I’m stuck in this weird spot — feels like I need to relearn everything from scratch, but every time I try, it’s like “wait, I already know this?” Hard to tell if I’m actually behind or just psyching myself out. So — what’s a realistic (and ideally not soul-crushing) way to get back on track? Please give me suggestions for fast-track courses and small projects to build production skills again. Ps:- Used Ai to fix my crude version of this post submitted by /u/CuriousKiwi669 [link] [comments]

I was wondering if anyone has ever come across an issue on a windows server, for printing, where print jobs produce 0kb spl files and are then deleted. The server is 2019, with paper cut also installed, but tried a test queue without paper cut and it still produced 0kb files. Defender isn't showing anything suspicious, remove attack surface rules, issue persists. Tried rebuilding the print server and issue continues. Tried printing from edge, word, notepad from endpoint and stil 0kb. Tried different Kinolta Minolta drivers but didn't make a difference e.g. pcl3 pcl4 Postscript. I asked networking if any packet filtering was on the firewalls and they said it was all off. Any ideas anyone? submitted by /u/chronos_malkeri [link] [comments]

My subordinate is a Jr Sys Admin and I want to get him out to some good IT based conferences this year. We're a microsoft shop, no plans on changing our antivirus (sentinel one), and am avoiding cyber security based conferences since that's what his degree is in (wants to expand his knowledge on other subjects). Does anyone have any good recommendations please? submitted by /u/Swimming_Ad2923 [link] [comments]

Happy SYSADMIN day! deploy updates today to celebrate! submitted by /u/Resident-War8004 [link] [comments]

Little behind the scenes for all you IT newbies on this wonderful Friday. This is likely why your IT budget makes absolutely no sense and has nothing to do with the company's financial status, although the RAM shortage affects this heavily. But the story is from 2024. My last company was making record profits, over $20M more than the previous year (so about 40%) with $100M in the sales funnel for sold jobs. But the IT dept was approaching over-budget because our useless dumbass CIO filled out the budget wrong and forgot about a $9000 license renewal. So everything was on a spending freeze in IT solely and exclusively to make the numbers look good. After absolutely going off on everyone about how this makes no sense, is losing us productivity, delaying jobs, costing us income, causing outages, etc and we're single person owned and not publicly traded so who the fuck are making the numbers look pretty for, someone finally leaked me the truth. This was solely because the rich, retiree asshole board members got performance bonuses based on benchmarks and this was one of them. So if our dept went over budget, they lost part of their bonuses. They cared more about their income than the company's health. This is the owner, the former CEO, some of their friends, and some external 3rd party entities that I knew nothing about. I have an idea - revise the fucking budget at the Q1 mark. Budgets are a guess. You don't "go over budget" if shit got more expensive so you adjust your guess to spend more on the shit that got more expensive! That's just business. Adjust prices and margins accordingly. This was not a 10,000 person bloated company spread all over. It was about 290 people. So they added some emergency special budget special condition whatever spending, outside the budget, make the numbers look pretty thing and dropped some serious cash on all those laptops. Those laptops were $810 a piece btw in 2024 and are now like $1500+. So you're welcome, asshole who fired me 2 weeks after I asked for a raise then said this is unacceptable and I'll be looking for a new position until they reconsider because me rent went up 18% two years in a row. Btw them firing me without a replacement when I did all the server and VM host maintenance, security audits, hires and fires, backup management, all level 3 tickets, some networking, and basically maintained ALL systems (for $24/hr), the remaining staff member told me it ended up costing them around $800,000 in damages and losses and outages and delayed jobs when everything I maintained the the other staff refuses to cross train on all broke. Probably should have given me a raise and replaced the CIO since he was shit at his job (but was there for 30 years). Cheap, illogical, shitty companies run by greedy self-serving assholes are a trap and you need to get out as soon as possible because you'll run into stuff like this. And it goes 10x if you're publicly traded because then you REALLY need the numbers to look pretty or else. submitted by /u/CeC-P [link] [comments]

Studying for certs taught me facts. My first helpdesk job taught me judgment — the hard way. The five things no exam tested me on: Triage: which of these 6 tickets do you touch first, and can you defend why? Diagnose before you fix. "It's probably DNS" is a guess, not a diagnosis. Escalate without shame. Stuck 30+ min on a P1? Escalating IS the correct move. Communicate during incidents. Users are more likely forgive downtime, not silence. Cost awareness. Assigning an E3 license when F3 would do is also a mistake. Curious how others here practiced this stuff before their first job — homelab? Shadowing? Just getting yelled at until it stuck? submitted by /u/Osama2k [link] [comments]

Hi everyone, I'm hoping someone here has experienced something similar. A few days ago, my Google Cloud/Firebase project was suddenly suspended with the following message: "Immediate action required: Suspension of your Google Cloud Platform/API project because it was engaged in abusive activity consistent with hijacked resources." This project is a production application that has been running for about one year without any issues. The last release was around three months ago, and there were no recent deployments or major configuration changes before the suspension. After the suspension: -Google Cloud Console redirects me directly to the Request an Appeal page. -I can't access Cloud Logging, IAM, API usage, or any Google Cloud services. -Firebase now shows "Create Firestore Database" and "Create Storage" instead of my existing Firestore database and Storage bucket. -My application is completely offline because it cannot access Firestore. Something suspicious I found Before the suspension, I reviewed Firebase Users & Permissions and discovered an Editor account that my team never added. [email protected] We removed that account immediately after discovering it. Unexpected billing I also noticed something strange in Firebase Billing. There is approximately $25 charged for Agent Platform, but I have never intentionally used Agent Platform, never integrated it into my application, and never expected any billing for that service. I'm not sure whether this is related to the suspension or whether it could indicate unauthorized activity. Backup Fortunately, I have Firestore Disaster Recovery backups enabled, but because the project is suspended I can't access them either. Appeal I submitted my appeal today (Friday) and I'm currently waiting for Google's response. Questions -Has anyone had a project restored after receiving this exact "hijacked resources" suspension? -After restoration, did your Firestore database come back normally? -Were your Firestore Disaster Recovery backups still available? -Has anyone seen unexpected Agent Platform charges even though they never intentionally used it? -Once the project was restored, what were the first things you checked (IAM, Audit Logs, API keys, service accounts, billing, etc.)? -Is there anything else I should do while waiting for Google's response? This project contains production data, so I'm mainly worried about recovering access to Firestore and making sure the project is secure if Google restores it. Any advice or shared experiences would be greatly appreciated. submitted by /u/dasun_doloswala [link] [comments]

Hey all, My AI-200 exam is next week. Since it's a new certification, prep material is thin. Looking for help with: Study guides, courses, or practice questions that actually helped Exam tips, time management, question style, anything you wish you knew going in If you've taken it already: how close was it to the published skills outline Which domains felt heavier than expected (containers, vector databases, RAG patterns, etc.) Any input is appreciated, thanks. submitted by /u/sural_mk [link] [comments]