rune-ext-devops

Audit and generate Docker, CI/CD, Kubernetes, monitoring, and infrastructure-as-code configurations.

1|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/dangvu008/VietTruyen --skill rune-ext-devops-dangvu008
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rune-ext-devops
Source: https://github.com/dangvu008/VietTruyen/tree/main/.agents/skills/rune-ext-devops
Command: npx skills add https://github.com/dangvu008/VietTruyen --skill rune-ext-devops-dangvu008

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Infrastructure work done without patterns leads to snowflake configs: Dockerfiles that rebuild everything on each change, CI pipelines with no caching, servers without monitoring, expiring SSL certificates, and hand-provisioned infrastructure that cannot be reproduced. This Skill audits existing DevOps configurations against best practices and emits corrected, production-grade configs. ## Core Features & Use Cases - Container & Pipeline Audits: Detects and rewrites Dockerfiles (multi-stage builds, non-root users, layer caching) and CI/CD pipelines (GitHub Actions, GitLab CI) with caching, parallelization, and deployment gates. - Production Operations: Generates monitoring setups (Prometheus, Grafana, SLO alerting), server hardening (Nginx, SSH, firewall), SSL automation, and Kubernetes manifests with probes, HPA, and NetworkPolicies. - Serverless & IaC: Audits edge/serverless deployments (Cloudflare Workers, Vercel, Lambda) for anti-patterns like floating promises and unbounded buffering, and structures Terraform/Pulumi projects with remote state, locking, and plan/apply CI pipelines. - Use Case: Point it at a repository containing a Dockerfile and GitHub Actions workflow; it detects the configs, flags issues like missing cache keys or root-user containers with severity ratings, and emits fixed versions with validation commands. ## Quick Start Ask the agent to audit the Dockerfile and CI pipeline in this repository and emit optimized production-ready configurations.

Frequently Asked Questions about rune-ext-devops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I optimize a Dockerfile for production?

Use multi-stage builds separating dependency install, build, and production stages, run as a non-root user, pin base image versions, and add a HEALTHCHECK. Order layers so dependency installation happens before copying source code to preserve build cache.

How to speed up a slow GitHub Actions CI pipeline?

Enable dependency caching with the setup action's cache option, parallelize lint, typecheck, and test jobs using a matrix strategy, and persist build artifacts between jobs. Detect the actual lockfile before configuring cache keys to avoid misses.

What are common serverless deployment anti-patterns?

Common failures include buffering unbounded responses in memory, module-level mutable state leaking across requests, floating promises without await or waitUntil, and direct database connections exhausting connection pools. Use streaming, request-scoped state, and connection pooling proxies instead.

Does this support Terraform and Kubernetes configurations?

Yes, it audits Terraform projects for remote state, locking, secrets in tfvars, and missing prevent_destroy lifecycle blocks, and emits modular layouts. For Kubernetes it generates Deployments with resource limits, probes, HPA, PodDisruptionBudgets, and NetworkPolicies.

Why did SSH hardening lock me out of my server?

Lockouts happen when key-only authentication is enabled before the SSH key is installed on the server. Apply config changes and key setup in the correct order, and keep rollback instructions ready before disabling password authentication.

What causes Prometheus to run out of memory?

High-cardinality metric labels, such as using user IDs as label values, cause unbounded time-series growth and OOM crashes. Constrain labels to bounded sets like method, route, and status code.