OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed via Backstage, CLI, API, or MCP.

Check out the video podcast version here: https://youtu.be/AqGWjxEfj2g

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• OpenChoreo on CNCF
• OpenChoreo on GitHub
• OpenChoreo website
• SRE Day walkthrough

Creators & Guests

• Cristi Cotovan - Editor
• Bret Fisher - Host
• Beth Fisher - Producer
• Sameera Jayasoma - Guest
• Lakmal Warusawithana - Guest

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - MAIN - Video Podcast
• (00:00) - Introduction
• (08:29) - What Makes OpenChoreo Different
• (16:41) - Agents as First-Class Citizens
• (24:50) - The Future of Agentic DevOps
• (32:55) - Deploying with Agents: Live Demo
• (39:26) - Sandboxing & SRE Auto-Remediation
• (47:03) - Getting Started & Wrap-Up

Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks.

Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• Docker Hardened Images for Every Developer
• Docker Hardened System Packages
• Hardened Images Catalog
• Gordon AI Just Got an Update
• Docker Sandboxes
• NanoClaw and Docker Sandboxes
• Docker Model Runner VLLM Metal on macOS
• OpenWebUI + Docker Model Runner
• MCP Catalog and Toolkit
• Dynamic MCP
• Cagent Action
• PR Review Workflow of Cagent
• Nightly Docs Scan Workflow

Creators & Guests

• Cristi Cotovan - Editor
• Bret Fisher - Host
• Beth Fisher - Producer
• Michael Irwin 🇺🇦 🕊 - Guest

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction
• (11:15) - Docker Hardened Images
• (23:02) - Gordon AI
• (33:23) - Docker Sandboxes
• (37:38) - Sandbox Demo & Network Security
• (55:10) - Model Runner, OpenWebUI & MCP Tools
• (01:06:31) - Cagent, Open Source & The Future of AI in DevOps

Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration.

Check out the video podcast version here: https://youtu.be/OPRK5osKQHI

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• Plakar website
• Plakar Github Repo
• Plakar demo
• Plakar on X

Creators & Guests

• Cristi Cotovan - Editor
• Bret Fisher - Host
• Beth Fisher - Producer
• Julien Mangeard - Guest
• Gilles Chehade - Guest

You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news!

Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction
• (02:25) - Backup Engineering
• (04:50) - Restore First Mindset
• (06:56) - Plakar's Elevator Pitch
• (18:24) - Docker and Volume Backups
• (24:10) - Docker Image Deployment Challenges
• (26:53) - Backing Up the System
• (27:56) - Encryption and Architecture Modes
• (31:57) - Enterprise Scaling and Solo DevOps
• (33:48) - Ransomware And Encryption
• (34:27) - Source Side Dedup Demo
• (37:17) - Chainless Snapshots
• (39:07) - Sync And Multi Store Copies
• (41:39) - Crypto Audits And Repair
• (43:48) - Backup Stress Horror Stories
• (47:50) - Make Backups Usable
• (50:00) - Ransomware Detection Heuristics
• (56:06) - Cloud Native Positioning
• (59:56) - Kubernetes and Integrations