Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

0
votes
0answers
9 views

Managing environment-based configs for microservices

How should I handle runtime configuration of microservices? For example, let's say I'm building a set of e-commerce services that use a payment processing API (e.g. Stripe). In dev/test, I need to ...
0
votes
1answer
31 views

Compare 20 files with diff, not 2

Background We are moving from managing hosts by hand to configuration management. 20 files I want to compare 20 times a config file from 20 hosts. For example /etc/crontab Use case I guess about ...
1
vote
1answer
20 views

Configure management tool to auto-configure by reading config file

The use-case is as given below: The user has a Flat File in his Linux system. This file is a human readable/editable file which contains the configurations for all the needed components of his ...
0
votes
1answer
40 views

How do I handle a IP change affecting many servers?

Due to a location change, we have to move a number of servers to new IP addresses (from 10.X.*.* to 10.Y.*.*). We're taking the opportunity to clean up our IP allocations from a haphazard setup to a ...
0
votes
1answer
34 views

Immutable Infrastructure

I'm working on a cloud based solution architecture at the moment and want to take the approach of using an immutable server infrastructure (creating and then deploying new AMIs when updating software, ...
2
votes
1answer
40 views

How to secure configuration management server

There are many configuration management software options nowadays (Chef, Puppet, CFEngine, Ansible...) which offer an architecture with their repository on a central server and clients communicating ...
1
vote
0answers
34 views

Ansible variable precedence

I'm trying to understand variable precedence in Ansible - more exactly the part about host_vars and group_vars in inventory or playbook. My layout looks like this: production/ ├── inventory (alfa, ...
0
votes
0answers
18 views

Unable to use config.pp in puppetserver 2.3.1(master) and puppet 4.x(client)

1 I am following this guide. So bascially in my manifests directory I have everything in here. When I run puppet agent -t in the client. I got the following error. error: Could not retrieve catalog ...
2
votes
0answers
39 views

Problems with a script uninstall (SCCM 2012) and its causing the detection method to fail

We use the Powershell Application Deployment Toolkit for deploying applications in SCCM. I'm currently working on uninstalling Sophos VPN from machines in a certain collection in our environment. ...
1
vote
0answers
18 views

Ansible work with large variables locally

I am trying to develop a local configuration management application working with ansible(2.0.1) under the hood. I have large selection of variables (about 1000 entries per var file) to be used which ...
0
votes
0answers
24 views

System Center extend hardware inventory no database view

I'm trying to create a system center report on local administrator accounts. I followed the steps as explained here: ...
1
vote
0answers
21 views

What do you use to monitor and deploy linux config files? [duplicate]

I'm working in an environment where multiple groups share servers. I was wondering what tools are used to check if configurations files were modified, maybe able to say who modified them, and revert ...
3
votes
0answers
57 views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
0
votes
3answers
76 views

Auto-Retry Config Push with Ansible or Saltstack?

I'm trying to choose a configuration management system for 500-2000 very-geographically-distributed hosts. Due to varying network reliability, it's possible that a number of hosts may be temporarily ...
1
vote
0answers
29 views

How can I WSUS and AV update and manage compliance reporting on air-gapped Windows boxen?

A.k.a "WSUS via Sneakernet?" (Similar question asked in 2013 here, but some key differences and no strong answers to that one.) Most of my environment consists of AD-joined Windows 7 workstations; ...
1
vote
1answer
160 views

How to remember/cache or specify private key passphrase for Ansible

Just starting out with Ansible, I have set up an Asible user on the client machine and created a set of keys from OpenSSL. I am running Ansible under my own account. I have specified the user and ...
0
votes
1answer
57 views

How to handle a private key SSL certificate with Ansible

I'd like to deploy my webserver config with copy. Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started? The reason is that I want to to use ...
1
vote
1answer
47 views

Ansible - use host IP as a variable for file copies

I am looking for a way for config management with Ansible. I have the structure repo/1.2.3.4/file.conf. Can Ansible get the IP 1.2.3.4 per host and deploy the file to the host? Using a variable ...
0
votes
0answers
58 views

“clientless” rdp session to windows 7 professional

I am currently automating the installation of a legacy windows 7 application, that requires a desktop session on the target machine. We are currently setting up automated testing system (using ...
0
votes
0answers
8 views

use of remote procedure call in NETCONF

I was reading RFC6241 about netconf, where it's said about RPC as a messaging mechanism of the protocol. However, the spec defines XML for transmitting RPC messages, so I don't quite understand why ...
1
vote
1answer
51 views

// , In Puppet, what is the accepted way to use different Puppet modules in different Puppet environments?

Some people I work with actually give each Puppet environment its own $modulepath, but also have the common $modulepath. Please find an example of this below: [redis] modulepath = ...
0
votes
0answers
36 views

How to manage server systems so that service consumers are notified before changes are made?

Our IT department has around 90 people. We manage systems and create applications. The systems are of varying size from SAP to Lotus Notes to Tivoli Access Manager (TAM). Increasingly, the ...
1
vote
1answer
42 views

How to keep a reproducible server admin log?

So here is something I am always wondering about when setting up a new Linux machine, be it desktop or server: How can I keep a reproducible log of what administration tasks I did on the machine, so ...
4
votes
2answers
97 views

What's the right way to switch from CFEngine to Rudder?

We have an existing cfengine3-community installation with lots of custom promises and it runs on about 50 machines. I'm interested in switching to Rudder, and I'm wondering about the best way to ...
4
votes
0answers
55 views

How can I provide services to an internal air-gapped extranet

Background - "Extranet" We have about a dozen users that are on what I would call an Extranet. It is an air-gapped LAN that is physically in the same location as our primary LAN. We share the ...
2
votes
2answers
111 views

How to use Ansible to manage multi-server with multi-website configuration?

I have researched Ansible to provision new servers and this works great. My play installs MySQL, Nginx and all the rest. Now I wonder what is the best way to use it as configuration management tool as ...
1
vote
0answers
28 views

Bacula configuration management in git, without passwords

I'd like to to use git to start managing our Bacula configuration files, but want to keep out (or mask) the passwords in these files. I've considered: looked for a setting within Bacula that allows ...
0
votes
0answers
48 views

Clojure production server restart

I have a Clojure/pedestal web server. I run it locally via lein, and now I would like to deploy it. I could use lein again, or use an uberjar, but I am worried about future updates. I want to avoid ...
3
votes
2answers
1k views

SCCM App Catalog won't install applications if started as user other than the one logged in

We have been playing around with SCCM's Application Catalog and have come across an interesting quirk. My manager has directed me to implement the catalog so that software that falls somewhere between ...
0
votes
1answer
33 views

Recommended approach for configuration management of the small but vital changes on Linux servers [closed]

Folks - what is the recommended approach for controlling and recording small but vital changes on the Linux servers - creation of the group, adding users to a sudo, etc.? We use Salt for the major ...
0
votes
1answer
63 views

Managing application configuration in aws using puppet

I have a web application with .net backend ( RESTful Services) and angular js frontend. The application is hosted on IIS Web Server. I am going to deploy the application on AWS such that I will have ...
3
votes
1answer
94 views

SCCM software deployment - does user need to be logged in, or only on the network?

I have a couple of questions of using SCCM to deploy software for a user on a Windows laptop: Does user need to be logged in to the target laptop, or is it sufficient that it is on the corporate ...
3
votes
1answer
102 views

rudder-agent 3.1 : different output between nodes

I'm using rudder-agent 3.1 (rudder server 3.0.6), when I'm forcing inventory with "rudder agent inventory" I don't have the same output size between node, it's like the verbose was different (see ...
1
vote
0answers
48 views

Is there a way to change the cfengine policy server IP without re-bootstrapping all the clients?

We need to change the IP address of our cfengine policy server. It will be the same machine, and nothing else will change, it's just going to have a different ip. Is there some way to avoid ...
3
votes
1answer
79 views

rudder 3.0 : EVP_DecryptFinal_ex

I'm using rudder 3.0.x on Raspbian (RPi v2) and I get some strange errors sometime. I'm trying to understand this error message: "EVP_DecryptFinal_ex: error:0606506D:digital envelope ...
1
vote
1answer
141 views

Is there a reason to store a SSH private key in a Salt Pillar instead of a file as part of a State?

I have a set of systems (in AWS) that all need passwordless SSH access to one another. I've written a Salt state that copies a keypair (public/private SSH-RSA keys that I previously generated) and ...
1
vote
1answer
85 views

Is there a more idiomatic way to switch Salt state based on host OS?

At the top of my State file, I have: {% if grains['os'] == 'Ubuntu' %} {% set ubuntu = True %} {% set arch = False %} {% elif grains['os'] == 'Arch' %} {% set ubuntu = False %} {% set arch = ...
0
votes
1answer
185 views

Saltstack: different versions for Master and Minion

I've a little-big problem. I've an architecture with dozens of servers, everyone having a different OS. My Master is on an Ubuntu Server 14.04 and its version is 0.17.5. My Minions are of different ...
-1
votes
1answer
91 views

Have distributed hosts auto-connect to central jump box for reverse ssh and vnc sessions [closed]

We're going to deploy info screens in various places. They have a browser running and pull the info via HTTP. To reconfigure them, it would be useful if they connected to a central host from where we ...
-5
votes
1answer
64 views

init system vs configuration management [closed]

Best practice: What tasks would you give to an init system like systemd vs a configuration management system like ansible? What I like about starting up services with a CM is portability across ...
4
votes
1answer
122 views

any sense in having multiple, distinct puppet masters?

I am wondering is whether it makes sense to have a single machine connect to multiple, distinct Puppetmaster instances. My use case is that i have different privilege level I want to grant to server ...
0
votes
1answer
850 views

Saltstack - Error - No Top file or external nodes data matches found

I'm trying to configure my Saltstack Architecture. I followed all the steps, but It seems not working and I'm not able to find the problem. /etc/salt/master file_roots: base: - /srv/salt dev: - ...
3
votes
1answer
2k views

SCCM Report: Update Compliance per Device in a collection

I'm trying my hand at building a custom SCCM report and could use some help from those who have more experience with the database structure than I do. What I would like is to list: Device ...
5
votes
1answer
793 views

How to test for file absence with serverspec?

The serverspec guide on resource types doesn't explain how to test for the absence of a file, rather than its presence. This is the best I could come up with: describe command('/bin/bash -c "[[ ! -e ...
1
vote
2answers
81 views

Managing thousands of machines with approval controls [closed]

We are a startup that is just getting up to speed and running into the problem of managing hundreds of machines, and having to do nightly and weekly releases to all of them as well as managing their ...
17
votes
5answers
1k views

When is it appropriate to use a configuration manager (eg Puppet / Chef / Ansible)?

At my current workplace, I look after two VMware host machines, an OpenBSD physical machine, three Debian VM's, and six Windows Server VM's (2008/2012). I'm considering implementing a configuration ...
1
vote
0answers
362 views

Ansible using role template vs copying static configuration file [closed]

I have been using ansible to manage the haproxy configurations for a few servers and I really like the tool. It makes deploying new servers and keeping the configurations in sync a breeze. One ...
0
votes
3answers
88 views

What is Most Reliable/Sustainable Way to Distribute a File to a Group of Windows Servers

In managing one of my applications, I need to distribute a small text file to a specific directory on a number of application servers and restart the service when a new version is pushed out. I have a ...
1
vote
0answers
99 views

Using Management classes with cobbler

So, I've been working on creating a standardized install image, and worked out all the kinks, now I need to deliver it. What I decided to do is to use cobbler to create templated kickstart installs, ...
0
votes
1answer
149 views

Sharing simple tasks across roles in ansible?

I have a couple of different machine types that all need to have the official postgres APT repo defined for them in order to be able to apt-get install the right version of tools. These different ...