DevOps has been around in tech for a while. DevSecOps builds on it by folding security into the process from the start of development, rather than bolting it on at the end. Here’s how Oracle Linux fits into each part of DevSecOps.
Consistent Across On-Premises and Cloud
Oracle Linux is the same OS on-premises and in the cloud, with all the same features and tools. That means developers can build applications without making any changes when moving between on-premises and cloud infrastructure. Oracle Linux supports development tools such as OpenJDK, Node.js, Python, Go, and Ruby, as well as the EPEL repository, which provides access to packages for widely used software. You can install these by enabling the right repositories for your Oracle Linux release. Python comes preinstalled with Oracle Linux images. Oracle Linux also supports Kubernetes for container management and popular container technologies like Docker, Podman, and Kata Containers. And it supports cloud-native application development through the Oracle Cloud Native Environment, a suite of open-source technologies.
Built-In Security
Oracle provides a feature called Ksplice, which allows zero-downtime patching of the kernel and critical user-space components like glibc and OpenSSL. Oracle Linux also offers a range of security validation services, along with tools to verify and implement security standards. One of these is a set of cryptographic libraries and applications validated under the Federal Information Processing Standards (FIPS). Oracle Linux follows Security Technical Implementation Guides (STIGs) and provides OpenSCAP to scan for vulnerabilities and implement standards like STIG.
Oracle Linux Automation Manager (OLAM)
One of the more recent Oracle Linux releases is Oracle Linux Automation Manager, built on the open source projects Ansible and AWX. It’s a leading end-to-end automation technology that integrates the development, security, and operations components of DevSecOps. OLAM provides a browser-based interface, a command-line interface, and an API for managing infrastructure. It helps you deploy, upgrade, and update software, and configure systems using playbooks. OLAM plays an important role in infrastructure management, whether your organization is small or large.
Oracle Linux Manager (OLM) and Oracle Enterprise Manager (OEM)
Oracle Linux Manager (OLM), formerly known as Spacewalk, is an open source tool for managing physical and virtual systems, from small organizations to large ones. It lets you manage system packages and errata across all your Linux systems and integrates with OpenSCAP to run security checks. It also helps automate kickstart installs, system configuration, and maintenance tasks for Oracle Linux systems.
Oracle Enterprise Manager (OEM) is a management platform with an intuitive GUI. It manages not just Oracle Linux deployments but all your Oracle deployments, and supports full lifecycle management for both on-premises and cloud environments. Oracle Linux is a core part of OCI and also runs on Oracle’s engineered systems, such as Exadata and PCA. It has a proven track record for strong database performance.
Where Mythics Come In
Oracle Linux plays an important role in the DevSecOps world as an open source operating system. Mythics offers Technical Account Manager (TAM) services for Oracle Linux. As a customer, you also have access to a tailored knowledge base covering topics such as Oracle Linux Automation Manager (OLAM), migrating to Oracle Linux, OpenSCAP, and Oracle Linux Manager (OLM).
