DrupalCamp NJ 2016 - 008 (lower level)

Don’t Build “Death Star” Security - Maintaining Agility and Security in Clustered Deployments

David Strauss — Fri, 18 Dec 2015 21:34:52 +0000

“Death Star” security happens whenever a system relies entirely on an outermost security layer — and fails catastrophically when breached. Especially as stack layers multiply, they shouldn’t all run in a single, trusted virtual private cloud (or similar isolation in a traditional data center). Sharing secrets doesn’t scale, either, as systems multiply and external services integrate with your site and user base.

Instead, we’ll be exploring methods strong enough to cross the public Internet, flexible enough to allow new services without reconfiguring existing systems, and robust enough to avoid single points of failure. Specifically, those methods are public key infrastructure (and where that's possible), federated identity (for infrastructure and websites), and capability-based security (rather than traditional role-based access control).

This talk is a Drupal-focused preview of the talk I'm developing for the O'Reilly Software Architecture Conference. If you find yourself wiring together everything from Varnish to Apache to MySQL to Solr to backup storage (and especially if you're looking for answers better than just throwing it all behind a main firewall), this talk is for you.

Audience:

Advanced (sysadmin, module developer)

Track:

Development

Version:

Drupal 8

Drupal 7

Room:

008 (lower level)

Recording:

Your browser does not support the audio element.

Apache Solr - Learning new tricks from an old dog

John Grubb — Thu, 17 Dec 2015 15:22:35 +0000

Almost everyone in the Drupal community knows what Apache Solr is. It's the most venerable full text search engine in the open source world, and it's integration with Drupal is very full featured. Just set it up and it runs.

Fewer developers know about the other cool things you can do with it using features that are built in to Solr and supported by the contrib module community.

The first part of this session will be a quick setup tutorial followed by a very high level overview of how Solr works in a Drupal context. This will help you to understand how to think like Solr so that you can more easily see how it fits into the toolkit you can offer to your employers and clients.

The second part will be a few real world applications of this new found knowledge, including --

Building a recommendation engine with "More Like This", a built in feature of Solr
Building blazing fast content listings with the Apachesolr Views module

Audience:

Intermediate (install and configure modules/themes)

Track:

Development

Version:

Drupal 7

Room:

008 (lower level)

Recording:

Your browser does not support the audio element.

How to do a Site Audit

Jody Hamilton — Tue, 08 Dec 2015 22:48:39 +0000

A technical site audit is often the first step when a development team takes on an existing build. It can also be a stand-alone project to get expert advice for re-orienting technical efforts.

A good audit looks everywhere and sees everything. A bad audit is mostly just a report using a template from a previous audit or relies primarily on only automated methods.

Auditing is not just an explicit exercise, but a frame of mind you can use throughout projects to keep standards high and focus on the longterm quality of work.

In this session I'll walk you through how I do an audit, covering themes of performance, security, maintainability, and usability, and looking at everything from server, code, configuration, workflow, and IA.

Even if you're not planning to do a site audit, developers and site builders will find this talk to be chock full of tips that improve your game.

Slides for this session: https://sway.com/s-NAoZvUbRAITMcu

Audience:

Advanced (sysadmin, module developer)

Track:

Site Building

Version:

Drupal 8

Drupal 7

Room:

008 (lower level)

Recording:

Your browser does not support the audio element.

Drupal and Continuous Delivery

Howard Tyson — Thu, 19 Nov 2015 14:41:28 +0000

Continuous Delivery (CD) is a software engineering approach in which teams keep producing valuable software in short cycles and ensure that the software can be reliably released at any time [1]. The critical thing in continuous delivery is that the main branch is in a deployable state at all times enabling regular releases. I have spent a lot of time working to achieve this goal in Drupal and I can say that implementing CD in Drupal 7 can be tricky but it can also be insanely powerful.

In this session we will explore some of the benefits and advantages you get from implementing CD, along with sample workflows and tools, such as Git, Jenkins, and the Drupal 7 Features and Strongarm modules and Drupal 8 Configuration Management. As well as various testing and code quality tools, such as Behat, PHP CodeSniffer, etc.

After working for the past several years on this problem I came to the conclusion that none of the existing tools were giving my team quite what we needed and so we worked to develop and open source the solution that we wanted for Continuous Delivery for Drupal (and similar web apps). In this session I'll also speak a bit about Probo.CI and how you can use either the hosted or open source version to get up and running eadily and to really up your CD game.

[1] https://en.wikipedia.org/wiki/Continuous_delivery

Audience:

Advanced (sysadmin, module developer)

Track:

Development

Version:

Drupal 8

Drupal 7

Drupal 6

Drupal Continuous Deployment.pdf

Room:

008 (lower level)

Recording:

Your browser does not support the audio element.

Deliver Mobile-Ready Images with the Media, Picture, and Focal Point modules

Byron Veale — Mon, 09 Nov 2015 18:15:15 +0000

We'll discuss using the 2.x version of the Media module, in concert with the Drupal 8-ready Picture module, mobile-friendly Breakpoints module, and the easy-to-use Focal Point module.

With this combo, your users can have an easier time managing their image assets, optimizing images, and presenting them in a mobile-ready format.

Watch the video here.

Audience:

Intermediate (install and configure modules/themes)

Track:

Site Building

Version:

Drupal 7

using_media_picture_and_focal_point_2016.pdf

Room:

008 (lower level)

Recording:

Your browser does not support the audio element.