In the dynamic sphere of cloud-native development, constructing robust, secure, and efficient CI/CD systems is not just desirable but essential. This talk will take you on a journey through the modernization of our build pipeline and CI/CD systems, specifically focusing on our project, Parca - a performance analysis tool that operates at the kernel level using eBPF technology. We will explore the challenges of ensuring security and compatibility across various kernel versions, a critical requirement for kernel-level operations like Parca. Our solution is a fully open-source, cross-platform CI/CD pipeline, uniquely tailored to meet Parca's intricate needs. This pipeline exemplifies the power of modern tooling, stepping beyond the limitations of traditional makefiles. Critical aspects of our discussion will include: Byte-by-Byte Reproducible Builds: Delving into how we achieve exact replicability in our builds to enhance security and fortify the supply chain against vulnerabilities. Locally Reproducible CI/CD: Demonstrating the methodologies that ensure what is run and tested locally can be precisely reproduced on remote CI servers, bridging the gap between local development and production environments. Modern Tooling for CI/CD Pipelines: Showcasing how tools like Jetpack Devbox (easy way to use NixOs), Dagger, Mage, GitHub Actions, and Zig's build system have revolutionized our approach to building CI/CD pipelines. Collaborative Efforts and Open-Source Innovations: Highlighting the cooperative nature of our project and how open-source tools and community contributions have been instrumental in our success. Attendees will gain valuable insights into creating a secure, adaptable, and efficient pipeline in an open-source environment. This talk will detail our journey and solutions and provide practical lessons for those looking to modernize their CI/CD systems in the cloud-native ecosystem. Join us to explore the frontiers of CI/CD modernization and learn how your projects can benefit from these cutting-edge practices and tools.
talk-data.com
Activities tracked
2
Details Join us at the spacious Trade Republic offices for yet another delightful DevOps meet-up, hosted by Trade Republic!
Agenda 18:30 Open Doors
18:55 Trade Republic Introduction
19:00 Talk 1 - Trade Republic's Journey to Open Source Observability - How we migrated from DataDog to Grafana LGTM: Christian Beneke
19:45 Fishbowl discussion: Diversity in DevOps
20:00 Food and Beer
20:30 Talk 2 - Modernizing CI/CD Pipelines: A Case Study on Building a Robust, Secure, and Efficient System for Cloud-Native Development: Kemal Akkoyun, Ali Akça
21:00 Networking & Drinks
22:00 Close
➡️ Interested in speaking at an upcoming event? Fill out our [Call for Speakers](https://forms.gle/51NCoVixa3Us4Crz7) and we'll be in touch 😊 ➡️ Interested in hosting a event? Fill out our [Call for Hosts](https://docs.google.com/forms/d/e/1FAIpQLScBpga8Yp-QAQt2lGskZWOThaKyQ_MbMbZaNcklgeXxqr5Vrg/viewform?usp=sf_link) and lets setup a meeting.
Christian Beneke Trade Republic's Journey to Open Source Observability - How we migrated from DataDog to Grafana LGTM. In the current environment, cost awareness on top of a great developer experience is more relevant than ever. As an answer to that, at Trade Republic, we have decided to re-evaluate the cost-to-use of our observability offering and ruled against continuing the path forward with Datadog. In this talk I will provide an overview of our mission to migrate to an alternative stack, which outcome we have so far and what we have learned.
Kemal Akkoyun & Ali Akça Modernizing CI/CD Pipelines: A Case Study on Building a Robust, Secure, and Efficient System for Cloud-Native Development In the dynamic sphere of cloud-native development, constructing robust, secure, and efficient CI/CD systems is not just desirable but essential. This talk will take you on a journey through the modernization of our build pipeline and CI/CD systems, specifically focusing on our project, Parca - a performance analysis tool that operates at the kernel level using eBPF technology. We will explore the challenges of ensuring security and compatibility across various kernel versions, a critical requirement for kernel-level operations like those used by Parca. Our solution is a fully open-source, cross-platform CI/CD pipeline, uniquely tailored to meet Parca's intricate needs. This pipeline exemplifies the power of modern tooling, stepping beyond the limitations of traditional makefiles. Critical aspects of our discussion will include:
- Byte-by-Byte Reproducible Builds: Delving into how we achieve exact replicability in our builds to enhance security and fortify the supply chain against vulnerabilities.
- Locally Reproducible CI/CD: Demonstrating the methodologies that ensure what is run and tested locally can be precisely reproduced on remote CI servers, bridging the gap between local development and production environments.
- Modern Tooling for CI/CD Pipelines: Showcasing how tools like Jetpack Devbox (easy way to use NixOs), Dagger, Mage, GitHub Actions, and Zig's build system have revolutionized our approach to building CI/CD pipelines.
- Collaborative Efforts and Open-Source Innovations: Highlighting the cooperative nature of our project and how open-source tools and community contributions have been instrumental in our success.
Attendees will gain valuable insights into creating a secure, adaptable, and efficient pipeline in an open-source environment. This talk will detail our journey and solutions and provide practical lessons for those looking to modernize their CI/CD systems in the cloud-native ecosystem. Join us to explore the frontiers of CI/CD modernization and learn how your projects can benefit from these cutting-edge practices and tools.
Sessions & talks
Showing 1–2 of 2 · Newest first
Trade Republic's Journey to Open Source Observability - How we migrated from DataDog to Grafana LGTM.
In the current environment, cost awareness on top of a great developer experience is more relevant than ever. As an answer to that, at Trade Republic, we have decided to re-evaluate the cost-to-use of our observability offering and ruled against continuing the path forward with Datadog. In this talk I will provide an overview of our mission to migrate to an alternative stack, which outcome we have so far and what we have learned.