Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

0
votes
0answers
35 views

Finding appropriate service for PC management [closed]

I am looking for a management system similar to Active Directory for a small company (< 20 employees) without the requirement of setting up a server on premises, and preferably with less ...
3
votes
2answers
24 views

SCCM App Catalog won't install applications if started as user other than the one logged in

We have been playing around with SCCM's Application Catalog and have come across an interesting quirk. My manager has directed me to implement the catalog so that software that falls somewhere between ...
0
votes
1answer
28 views

Recommended approach for configuration management of the small but vital changes on Linux servers [closed]

Folks - what is the recommended approach for controlling and recording small but vital changes on the Linux servers - creation of the group, adding users to a sudo, etc.? We use Salt for the major ...
0
votes
1answer
26 views

Managing application configuration in aws using puppet

I have a web application with .net backend ( RESTful Services) and angular js frontend. The application is hosted on IIS Web Server. I am going to deploy the application on AWS such that I will have ...
3
votes
1answer
34 views

SCCM software deployment - does user need to be logged in, or only on the network?

I have a couple of questions of using SCCM to deploy software for a user on a Windows laptop: Does user need to be logged in to the target laptop, or is it sufficient that it is on the corporate ...
3
votes
1answer
65 views

rudder-agent 3.1 : different output between nodes

I'm using rudder-agent 3.1 (rudder server 3.0.6), when I'm forcing inventory with "rudder agent inventory" I don't have the same output size between node, it's like the verbose was different (see ...
1
vote
0answers
7 views

Is there a way to change the cfengine policy server IP without re-bootstrapping all the clients?

We need to change the IP address of our cfengine policy server. It will be the same machine, and nothing else will change, it's just going to have a different ip. Is there some way to avoid ...
3
votes
1answer
32 views

rudder 3.0 : EVP_DecryptFinal_ex

I'm using rudder 3.0.x on Raspbian (RPi v2) and I get some strange errors sometime. I'm trying to understand this error message: "EVP_DecryptFinal_ex: error:0606506D:digital envelope ...
1
vote
1answer
43 views

Is there a reason to store a SSH private key in a Salt Pillar instead of a file as part of a State?

I have a set of systems (in AWS) that all need passwordless SSH access to one another. I've written a Salt state that copies a keypair (public/private SSH-RSA keys that I previously generated) and ...
1
vote
1answer
38 views

Is there a more idiomatic way to switch Salt state based on host OS?

At the top of my State file, I have: {% if grains['os'] == 'Ubuntu' %} {% set ubuntu = True %} {% set arch = False %} {% elif grains['os'] == 'Arch' %} {% set ubuntu = False %} {% set arch = ...
0
votes
1answer
45 views

Saltstack: different versions for Master and Minion

I've a little-big problem. I've an architecture with dozens of servers, everyone having a different OS. My Master is on an Ubuntu Server 14.04 and its version is 0.17.5. My Minions are of different ...
-1
votes
1answer
35 views

Have distributed hosts auto-connect to central jump box for reverse ssh and vnc sessions [closed]

We're going to deploy info screens in various places. They have a browser running and pull the info via HTTP. To reconfigure them, it would be useful if they connected to a central host from where we ...
-5
votes
1answer
50 views

init system vs configuration management [closed]

Best practice: What tasks would you give to an init system like systemd vs a configuration management system like ansible? What I like about starting up services with a CM is portability across ...
4
votes
1answer
76 views

any sense in having multiple, distinct puppet masters?

I am wondering is whether it makes sense to have a single machine connect to multiple, distinct Puppetmaster instances. My use case is that i have different privilege level I want to grant to server ...
0
votes
1answer
223 views

Saltstack - Error - No Top file or external nodes data matches found

I'm trying to configure my Saltstack Architecture. I followed all the steps, but It seems not working and I'm not able to find the problem. /etc/salt/master file_roots: base: - /srv/salt dev: - ...
1
vote
1answer
153 views

SCCM Report: Update Compliance per Device in a collection

I'm trying my hand at building a custom SCCM report and could use some help from those who have more experience with the database structure than I do. What I would like is to list: Device ...
2
votes
1answer
175 views

How to test for file absence with serverspec?

The serverspec guide on resource types doesn't explain how to test for the absence of a file, rather than its presence. This is the best I could come up with: describe command('/bin/bash -c "[[ ! -e ...
1
vote
2answers
68 views

Managing thousands of machines with approval controls [closed]

We are a startup that is just getting up to speed and running into the problem of managing hundreds of machines, and having to do nightly and weekly releases to all of them as well as managing their ...
17
votes
5answers
1k views

When is it appropriate to use a configuration manager (eg Puppet / Chef / Ansible)?

At my current workplace, I look after two VMware host machines, an OpenBSD physical machine, three Debian VM's, and six Windows Server VM's (2008/2012). I'm considering implementing a configuration ...
0
votes
0answers
41 views

Securing SSL Keys (for production web application) with Puppet and Hiera

I'd like to know what is the best way to secure SSL keys and certificates for web applications. I am using the roles/profiles pattern. Here is the scenario: I have a web application. There is a ...
1
vote
0answers
146 views

Ansible using role template vs copying static configuration file [closed]

I have been using ansible to manage the haproxy configurations for a few servers and I really like the tool. It makes deploying new servers and keeping the configurations in sync a breeze. One ...
0
votes
3answers
83 views

What is Most Reliable/Sustainable Way to Distribute a File to a Group of Windows Servers

In managing one of my applications, I need to distribute a small text file to a specific directory on a number of application servers and restart the service when a new version is pushed out. I have a ...
1
vote
0answers
52 views

Using Management classes with cobbler

So, I've been working on creating a standardized install image, and worked out all the kinks, now I need to deliver it. What I decided to do is to use cobbler to create templated kickstart installs, ...
0
votes
1answer
93 views

Sharing simple tasks across roles in ansible?

I have a couple of different machine types that all need to have the official postgres APT repo defined for them in order to be able to apt-get install the right version of tools. These different ...
0
votes
0answers
40 views

Where can I find the DRAC bulk configuration tool?

I need to reconfigure and reset the DRAC configuration on hundreds of servers. This document indicates the tool I need is called "RACT" or "AD with the Dell RAC Tool" The hyperlink in the document ...
0
votes
0answers
34 views

how to have one role deploy different files per hosts in ansible [duplicate]

I have a role in ansible but and want to use the copy module in ansible to copy the specific files for specific hosts. Not exactly but pretty same scenario .../roles/serverfiles/tasks/main.yml # ...
0
votes
1answer
241 views

How do i print the current hostname of a host in ansible

I wrote a role to edit the motd when user log into the machine, but i want to personalize the motd to print the hostname of the machine What vriable do i use? or how do i do this? template? how? I ...
0
votes
2answers
55 views

Replicating My Production Environment

I have a CentOS production server that I am currently doing my development on (I know this is awful) I'm bringing on some new developers and I want to set up appropriate development, staging and ...
1
vote
1answer
3k views

How to do a git pull/push using ansible

I am trying to do a git pull/push using ansible. I am running ansible on one server and want to automate or orchestrate a git pull/push on a remote host. Now since i didn't find a mmodule to do this ...
-3
votes
1answer
173 views

Increasing server upload speed tricks [closed]

Server : IBM X3630 CPU : 2x Intel Quad Core E5620 (8265 point) RAM : 16GB DDR3 Hard Disk : 4x300GB SAS 15k Bandwidth : 10 TB Uplink Port Speed : 1 x 1000Mbps Full-Duplex With above features my ...
2
votes
2answers
2k views

Using ansible to add users' public keys to one user's authorized_keys file

Trying to add two people's Github public keys to a user's authorized users file. I am able to successfully retrieve the SSH keys: --- - hosts: 127.0.0.1 connection: local vars: my_users: ...
0
votes
1answer
98 views

Report on Changes to IIS configuration

We are currently looking for a method of verifying what changes have been made over a period of time to our IIS 8.5 sites. We have reviewed the IIS auditing event log which can be useful for ...
1
vote
1answer
117 views

ansible cannot download git repo on centos 7

I have this in my drupal roles to download drupal git --- - name: Install git yum: name=git state=latest - name: Clone Drupal git: repo=http://git.drupal.org/project/drupal.git ...
1
vote
0answers
275 views

error creating database using ansible on centos 7

I am trying to install mysql AND setup database using ANSIBLE on CentOS7(i have no idea why every documention in the world now ONLY talks about Ubuntu and NO CentOS anymore...really SAD!) here is my ...
0
votes
1answer
27 views

Static Analyzer for Configuration files

I'm currently planning to analyze csv-reports from our ActiveDirectory and configuration files from our switches with Python. I'm thinking of having seperate modules for each type of data (csv, txt). ...
0
votes
1answer
96 views

How to read/ modify freetds.conf (for ODBC) using augtool or similar in bash script?

How can I get augtool (augeas) or a similarly common tool to work with freetds.conf, so I can automate some configuration in a bash install script? This doesn't seem to work: augtool print ...
1
vote
1answer
168 views

Puppet for Patch Management

I am thinking of using Puppet for massive patch management. The way to go with this, based on some research, is to create a class and apply it wherever you need, like in the following case: class ...
0
votes
1answer
225 views

Best practices for puppet module management with software development life cycle approach?

How do people organize their Puppet manifests and modules in your source code repository? I am not seeing any obvious way to implement changes in Puppet in a phased manner on a single Puppet master. ...
1
vote
1answer
314 views

Ansible/Capistrano with fixed sudo command (“sudo su -”)

I have to administer some half-managed servers (monstly CentOS 6), where we are only allowed to login as a regular user, then do "sudo su -" and type the regular user password, and then run the ...
0
votes
0answers
22 views

Using yum-builddep instead of yum install in Puppet

Is there a simple way to change the default behaviour of yum when installing packages to for instance instead of doing a yum install instead use yum-builddep to install only the dependencies of a ...
0
votes
0answers
31 views

What is a sane way to deal with changed configuration files and/or ABI breakages after package updates while using a CM software?

First of all: Full disclosure, I asked the same thing on the Salt ML but thus far the response rate has been zero. Also, gathering a broader spectrum of opinions and experiences never hurts. So I hope ...
0
votes
0answers
53 views

How can I use chef to configure a basic system starting from a template?

I am working on the setup of a new virtual infrastructure that will eventually become the production one. I am at the very beginning and I want to use Chef as automation tool. I've already worked with ...
0
votes
1answer
89 views

Looking for a central console management software that utilitizes my RDP credentials for access [closed]

All our managed Windows Server 03+ machines are enabled for and connect fine via RDP. However, I would like a less heavy central management (command line based?) to mass manage and maintain the ...
2
votes
2answers
623 views

2 computers with same Previous ConfigMgr UUID

I have cloned a computer using CloneZilla and the two computers has the same "Previous ConfigMgr UUID" but all other UUIDs SIDs and so on are different. Will this be an issue with updates and talking ...
1
vote
1answer
161 views

Why my Rudder server restart every 5 minutes?

My Rudder server is working great, but every 5 minutes or so, I'm kicked-out of my HTML session, and a ""Rudder is loading, please wait" screen appears. After some time, I can use it again normally. ...
2
votes
1answer
102 views

Having puppet use yum --installroot for certain nodes

I have a case where we are throwing together diskless node images that get thrown out to nodes via PXE and then mounted via a ramdisk. To build these previously we have just installed packages with ...
0
votes
1answer
275 views

What does r10k provide since Puppet natively supports directory environments?

I'm just starting to read about r10k because I love the fact that it can create dynamic environments based on Git branches. Now, I just read that Puppet can do this without r10k. What does r10k ...
0
votes
1answer
41 views

Looking for tool to create server configuration [closed]

I'm looking for a tool that will help me to define some configuration for example in JSON file or something containing what to install and how to setup the whole environment like install nginx, ruby, ...
1
vote
2answers
45 views

How can we ensure that a user who is not realized does not exist in that puppet node?

We declare all our users as virtual resources. E.g.: @user { 'belmin': uid => 2001 comment => 'Belmin Fernandez', groups => ['sysadmins'], } Sometimes we temporarily realize a ...
1
vote
1answer
92 views

How can I have puppet use a local (on the master) password hash for users?

We define users as such: user { 'belmin': ensure => present, uid => 308, comment => 'Belmin Fernandez', managehome => true, password ...