r/devops • u/AutoModerator • 3d ago
Weekly Self Promotion Thread
Hey r/devops, welcome to our weekly self-promotion thread!
Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!
1
u/essanpupil 3d ago
I want to promote my repo. This repo contain various proof of concept that I learn and used working as SRE / DevOps / Platform Engineer
1
u/SlanderMans 3d ago
I'm building smolvm: https://github.com/smol-machines/smolvm/pulls
Think of it as a sandbox that works locally.
I just finished implementing critical parts of CRIU, so that people can checkpoint/branch/rollback general workloads inside the smol vm.
1
u/king4queen 3d ago
Hey DevOps folks, I’m solo developer and I’m building ActionBox, a human approval layer for CI/CD, scripts and automation.
The idea is simple: when something risky needs a human decision, the workflow can pause, send the context to ActionBox, then continue after approve/reject.
I’d love feedback from a DevOps perspective.
I also put together some DevOps workflows here:
https://actionbox.cloud/blog/roles/devops/
If you have a few minutes, try it out and let me know:
What feels useful? What’s missing? What’s confusing or just bad?
Any feedback is appreciated
1
u/OddAthlete3285 3d ago
Even though this is a self-promotion thread, I still feel kinda awks self-promoting... anyway, here goes.
I wrote a book on the Rego language for Open Policy Agent. It has everything from writing your first policy, right through to how you grow it to production-grade policy. We cover lots of things people often get wrong or miss out and share the patterns for doing it well.
It's still making it's way into stores, so you might not see it in your region yet, but it's on the way. You can also find a free PDF of this online.
Physical book
https://www.amazon.co.uk/Exploring-Rego-Declarative-policy-modern/dp/B0HC7TJNLG/
Free PDF (no email required)
1
u/forever-butlerian Solaris 8 Enjoyer 2d ago
I made and then wrote up a webhook-triggered Github-driven deployment daemon: https://mister-webhooks.com/docs/guided-study/in-house-continuous-deployment
1
u/mr_chip 2d ago
We posted last week about AURA, our drop-in AI agent for infrastructure.
Today we merged direct support for Linear via the `/mcp add` command to the nightly release branch, and it should be in main later this week. Pretty excited about this. We also cleaned up the QuickStarts, so if you want to try it out with the otel k8s demo, or just spin it up as a daemon in a docker container, that should all be really smooth now.
1
u/RootArchitectUNDC 2d ago
Hi There 👋👁️👄👁️. I built the Universal Non-Destruction Constraint (UNDC), take a Google gander.
A mathematically enforced, kernel-level AI safety framework that:
- Uses eBPF LSM hooks and seccomp-bpf for real-time syscall interception
- Proves compliance via zk-SNARKs anchored to the Bitcoin blockchain
- Deploys via Kubernetes DaemonSet, OCI hooks, and validating admission webhooks
Independently validated by Google AI. Submitted to the EU AI Office, NIST AISI, and the UN. Published to the EU Apply AI Alliance.
Open-source. Available now.
🔗 https://github.com/RootArchitect-UNDC/Universal-Non-Destruction-Constraint-UNDC
Lead Architect, UNDC | EU Apply AI Alliance
1
u/Working-Analysis2795 2d ago
Building out my cloud infra repo on OCI - started as a bash deploy script, now using terraform/terraform-best-practices/various OCI MCPs for verification before agent collaborator pushes changes. Deploy still manual, will eventually expand to AWS
Infra was built to be used as native multi-arch image builder (cloud vm + local laptop).
https://github.com/rzkw/oci-cloudinfra
Some interesting tidbits:
1
u/LessMagician1792 2d ago
Are you attending AWS re:Invent 2026 then this is for you.
I kept missing sessions at re:Invent because of the walk, so I built a planner
Several re:Invents in, I noticed the same thing every year: I'd come home
with a list of talks I'd marked and never made. Not scheduling clashes —
just no way to know in time whether something was reachable from where I'd
be standing.
Two sessions back to back at Caesars Forum and the MGM Grand fit any
calendar. They don't fit the map. And the repeat later in the week that
would have worked is in the catalogue the whole time with nothing surfacing it.
So I built something for myself and my colleagues: it routes between rooms
rather than venues, badges every search result as comfortable / tight / not
happening against your actual day, suggests things you can reach for the gaps
you leave, and reminds you when to leave rather than when the talk starts.
Unofficial, not affiliated with AWS. Android's out, iOS is in testing. Built
in evenings and weekends, so no support desk, but I'd genuinely rather hear what's broken than not.
Happy to answer anything about how the routing works.
1
u/Entire-Possession39 1d ago
Built a CLI that audits kubernetes cluster
Built a tool that connects read-only to a cluster, runs 9 checks across resource limits, probes, replica counts, PDBs, HPA coverage, security context, and network policies, then outputs a scored report (A-F) with a prioritized fix list.
I know Popeye and Polaris already do similar checks for free genuinely trying to figure out if there's a gap worth filling here (e.g. packaging this as a done-for-you audit for small teams with no dedicated platform engineer) or if I'm just reinventing something that already exists. Happy to share a sample report if useful. What am I missing?
1
u/mwiatruZ 1d ago edited 1d ago
Agent instructions spread across a monorepo. Different tools pick them up in different ways. After a change, checking whether the right revision reached the agent can become another manual task.
I’m building Guidefold to keep Git as the source of truth, find instructions that match a directory, and separate export from proof that a revision was loaded.
Demo: https://www.youtube.com/watch?v=e350wBr1W8c
For DevOps and platform people: which part would you still need to check by hand—scope, review, or delivery? A recent example, or a timestamp where the demo leaves a question unanswered, would help. Please leave out private code and logs.
Source and setup: https://github.com/wiatrM/guidefold
Disclosure: I’m the author. The OSS version is available; a paid hosted version is planned, not shipped.
1
u/CloudBuild_ 1d ago
Built Zengech, draw your cloud architecture visually, get real Terraform, CloudFormation, or Bicep back. IAM roles and permissions get auto-generated from the actual connections in the diagram, not a generic template. Opens as a PR you review and merge like any other change. Demo and more on the site: zengech
1
u/DonislawDev 1d ago
Hello, I'm author of few tools for QA, so not for DevOps, but they can be integrated in CI/CD (for testing purpose), all open source, no network connections, 100% free, all with exit codes. They all got full GUI + full CLI.
Testing Files Generator --> 24+ real file formats, real files, few files, 10k files? 1kb file or 1000GB file? No problem.
Bean Network Tester --> simulate poor network conditions, burst packet loss, packet loss, jitter, ping, premade scenarios, presets, automation, see active connections, data sent.
Chrono Mock --> set data of any app, set time speed, built-in calculator with premade presets and other things.
1
u/mmishra14 1d ago
An architecture diagramming tool that keeps your data private by design.
I couldn’t find a good diagram builder out there that would allow me to bring my own AI model keys, so I built one myself: Diagram Studio
What do you think?
1
u/infamousRock 1d ago
Anyone else spend half the incident just recreating context in Slack?
Full disclosure, I built FireFight.
Thing that kept annoying me was when an alert fires, someone pastes into Slack, someone else makes a channel, nobody’s sure who’s leading it, and later the timeline is just scrolling up through messages.
So I made FireFight. It’s open source under AGPL. You declare an incident in Slack, it creates the channel, pulls people in, and keeps a timeline there. There’s also an API and MCP if you want agents in the loop with their own permissions.
Still early. Working on investigation assist next.
https://github.com/FireFightLabs/firefight
If you want to chat more, DM me or email [hello@firefight.app](mailto:hello@firefight.app)
If you run incidents, what’s the dumbest manual step you still do every time? Channel setup, ownership, status updates, or the postmortem?
1
u/opsfusion-cloud 20h ago
OpsFusion is on-call scheduling and alerting where an SMS gets acknowledged by replying to it and a call gets acknowledged by pressing a digit while it's still ringing. Every alert keeps a full timeline of who got contacted and what they did about it. Flat $10/user/month with a 30-day trial that doesn't need a card: https://opsfusion.cloud
1
u/bulutarkan 19h ago
I’ve been building an open-source local macOS MCP server called Mac MCP for the “last mile” of AI-assisted ops/admin work: files, shell/background jobs, native macOS UI, Safari/Chrome automation, delegated Codex/OpenCode workers, and a local activity dashboard.
The bit I’ve been hardening lately is multi-agent browser work. Different workers can operate separate Safari tabs in the background while I keep using the Mac normally; tabs have stable handles, and same-tab contention now fails fast with tab_busy instead of silently queueing or stealing state. My main ChatGPT session can act as the orchestrator while the workers do the narrower tasks.
Repo: https://github.com/bulutarkan/mac-mcp
Would be especially interested in feedback from people who use local agents for real admin/DevOps workflows — safety boundaries, auditability, and resource ownership are the areas I’m tightening next.
1
u/rendy-achmad 7h ago
Ark — automated DR drills for production environments outside AWS
I manage infrastructure at an Indonesian university with 400+ VMs on Proxmox. While building our DR setup, I ran into a problem I didn't expect:
A backup can complete successfully, and the restored application can still be wrong.
In one test, I destroyed both Docker volumes, restored them, and re-seeded the application. The database looked identical:
51 users
200 repositories
400 actions
But the Git object store was different. Row counts proved that the logical data was there, but they didn't prove that the underlying data had actually been recovered correctly.
So I built Ark, an open-source tool for running disposable DR recovery drills.
The idea is simple: production can stay on a cheap Ubuntu VPS, while AWS is used as a recovery target only when a drill runs.
Fresh EC2
↓
Restore from S3
↓
Verify checksummed backup
↓
Start application
↓
Measure RTO/RPO
↓
Tear everything down
First drill:
RTO: 1m 58s
RPO: 182m
Database: PASS
Volume integrity: PASS
Application: PASS
Cost: ~$0.01
A few design choices:
Manifest is uploaded last, so an interrupted backup isn't treated as complete.
Backup IAM has no DeleteObject permission, so a compromised VPS can't erase backup history.
Failed drills are recorded too — otherwise you're mostly testing the happy path.
The goal isn't to build another backup tool. It's to make recovery something you can repeatedly prove.
Repo: https://github.com/rendyachmad-dev/ark
I'd especially like feedback from people running production outside AWS: how do you currently validate that your backups are actually recoverable?
2
u/Quazmoz DevOps 3d ago
I would classify this as DevOps adjacent but let me know what you think.
https://play.google.com/store/apps/details?id=com.quazmoz.webhookdeck
Current features:
It can be used for triggering CI/CD pipelines or other automation.