Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

0
votes
0answers
21 views

“clientless” rdp session to windows 7 professional

I am currently automating the installation of a legacy windows 7 application, that requires a desktop session on the target machine. We are currently setting up automated testing system (using ...
0
votes
0answers
5 views

use of remote procedure call in NETCONF

I was reading RFC6241 about netconf, where it's said about RPC as a messaging mechanism of the protocol. However, the spec defines XML for transmitting RPC messages, so I don't quite understand why ...
1
vote
1answer
49 views

// , In Puppet, what is the accepted way to use different Puppet modules in different Puppet environments?

Some people I work with actually give each Puppet environment its own $modulepath, but also have the common $modulepath. Please find an example of this below: [redis] modulepath = ...
0
votes
0answers
34 views

How to manage server systems so that service consumers are notified before changes are made?

Our IT department has around 90 people. We manage systems and create applications. The systems are of varying size from SAP to Lotus Notes to Tivoli Access Manager (TAM). Increasingly, the ...
1
vote
1answer
37 views

How to keep a reproducible server admin log?

So here is something I am always wondering about when setting up a new Linux machine, be it desktop or server: How can I keep a reproducible log of what administration tasks I did on the machine, so ...
4
votes
2answers
69 views

What's the right way to switch from CFEngine to Rudder?

We have an existing cfengine3-community installation with lots of custom promises and it runs on about 50 machines. I'm interested in switching to Rudder, and I'm wondering about the best way to ...
3
votes
0answers
38 views

How can I provide services to an internal air-gapped extranet

Background - "Extranet" We have about a dozen users that are on what I would call an Extranet. It is an air-gapped LAN that is physically in the same location as our primary LAN. We share the ...
2
votes
2answers
55 views

How to use Ansible to manage multi-server with multi-website configuration?

I have researched Ansible to provision new servers and this works great. My play installs MySQL, Nginx and all the rest. Now I wonder what is the best way to use it as configuration management tool as ...
1
vote
0answers
24 views

Bacula configuration management in git, without passwords

I'd like to to use git to start managing our Bacula configuration files, but want to keep out (or mask) the passwords in these files. I've considered: looked for a setting within Bacula that allows ...
0
votes
0answers
36 views

Clojure production server restart

I have a Clojure/pedestal web server. I run it locally via lein, and now I would like to deploy it. I could use lein again, or use an uberjar, but I am worried about future updates. I want to avoid ...
3
votes
2answers
596 views

SCCM App Catalog won't install applications if started as user other than the one logged in

We have been playing around with SCCM's Application Catalog and have come across an interesting quirk. My manager has directed me to implement the catalog so that software that falls somewhere between ...
0
votes
1answer
32 views

Recommended approach for configuration management of the small but vital changes on Linux servers [closed]

Folks - what is the recommended approach for controlling and recording small but vital changes on the Linux servers - creation of the group, adding users to a sudo, etc.? We use Salt for the major ...
0
votes
1answer
56 views

Managing application configuration in aws using puppet

I have a web application with .net backend ( RESTful Services) and angular js frontend. The application is hosted on IIS Web Server. I am going to deploy the application on AWS such that I will have ...
3
votes
1answer
68 views

SCCM software deployment - does user need to be logged in, or only on the network?

I have a couple of questions of using SCCM to deploy software for a user on a Windows laptop: Does user need to be logged in to the target laptop, or is it sufficient that it is on the corporate ...
3
votes
1answer
91 views

rudder-agent 3.1 : different output between nodes

I'm using rudder-agent 3.1 (rudder server 3.0.6), when I'm forcing inventory with "rudder agent inventory" I don't have the same output size between node, it's like the verbose was different (see ...
1
vote
0answers
35 views

Is there a way to change the cfengine policy server IP without re-bootstrapping all the clients?

We need to change the IP address of our cfengine policy server. It will be the same machine, and nothing else will change, it's just going to have a different ip. Is there some way to avoid ...
3
votes
1answer
66 views

rudder 3.0 : EVP_DecryptFinal_ex

I'm using rudder 3.0.x on Raspbian (RPi v2) and I get some strange errors sometime. I'm trying to understand this error message: "EVP_DecryptFinal_ex: error:0606506D:digital envelope ...
1
vote
1answer
94 views

Is there a reason to store a SSH private key in a Salt Pillar instead of a file as part of a State?

I have a set of systems (in AWS) that all need passwordless SSH access to one another. I've written a Salt state that copies a keypair (public/private SSH-RSA keys that I previously generated) and ...
1
vote
1answer
66 views

Is there a more idiomatic way to switch Salt state based on host OS?

At the top of my State file, I have: {% if grains['os'] == 'Ubuntu' %} {% set ubuntu = True %} {% set arch = False %} {% elif grains['os'] == 'Arch' %} {% set ubuntu = False %} {% set arch = ...
0
votes
1answer
134 views

Saltstack: different versions for Master and Minion

I've a little-big problem. I've an architecture with dozens of servers, everyone having a different OS. My Master is on an Ubuntu Server 14.04 and its version is 0.17.5. My Minions are of different ...
-1
votes
1answer
72 views

Have distributed hosts auto-connect to central jump box for reverse ssh and vnc sessions [closed]

We're going to deploy info screens in various places. They have a browser running and pull the info via HTTP. To reconfigure them, it would be useful if they connected to a central host from where we ...
-5
votes
1answer
58 views

init system vs configuration management [closed]

Best practice: What tasks would you give to an init system like systemd vs a configuration management system like ansible? What I like about starting up services with a CM is portability across ...
4
votes
1answer
106 views

any sense in having multiple, distinct puppet masters?

I am wondering is whether it makes sense to have a single machine connect to multiple, distinct Puppetmaster instances. My use case is that i have different privilege level I want to grant to server ...
0
votes
1answer
750 views

Saltstack - Error - No Top file or external nodes data matches found

I'm trying to configure my Saltstack Architecture. I followed all the steps, but It seems not working and I'm not able to find the problem. /etc/salt/master file_roots: base: - /srv/salt dev: - ...
1
vote
1answer
1k views

SCCM Report: Update Compliance per Device in a collection

I'm trying my hand at building a custom SCCM report and could use some help from those who have more experience with the database structure than I do. What I would like is to list: Device ...
4
votes
1answer
472 views

How to test for file absence with serverspec?

The serverspec guide on resource types doesn't explain how to test for the absence of a file, rather than its presence. This is the best I could come up with: describe command('/bin/bash -c "[[ ! -e ...
1
vote
2answers
77 views

Managing thousands of machines with approval controls [closed]

We are a startup that is just getting up to speed and running into the problem of managing hundreds of machines, and having to do nightly and weekly releases to all of them as well as managing their ...
17
votes
5answers
1k views

When is it appropriate to use a configuration manager (eg Puppet / Chef / Ansible)?

At my current workplace, I look after two VMware host machines, an OpenBSD physical machine, three Debian VM's, and six Windows Server VM's (2008/2012). I'm considering implementing a configuration ...
0
votes
0answers
51 views

Securing SSL Keys (for production web application) with Puppet and Hiera

I'd like to know what is the best way to secure SSL keys and certificates for web applications. I am using the roles/profiles pattern. Here is the scenario: I have a web application. There is a ...
1
vote
0answers
280 views

Ansible using role template vs copying static configuration file [closed]

I have been using ansible to manage the haproxy configurations for a few servers and I really like the tool. It makes deploying new servers and keeping the configurations in sync a breeze. One ...
0
votes
3answers
87 views

What is Most Reliable/Sustainable Way to Distribute a File to a Group of Windows Servers

In managing one of my applications, I need to distribute a small text file to a specific directory on a number of application servers and restart the service when a new version is pushed out. I have a ...
1
vote
0answers
78 views

Using Management classes with cobbler

So, I've been working on creating a standardized install image, and worked out all the kinks, now I need to deliver it. What I decided to do is to use cobbler to create templated kickstart installs, ...
0
votes
1answer
144 views

Sharing simple tasks across roles in ansible?

I have a couple of different machine types that all need to have the official postgres APT repo defined for them in order to be able to apt-get install the right version of tools. These different ...
0
votes
0answers
63 views

Where can I find the DRAC bulk configuration tool?

I need to reconfigure and reset the DRAC configuration on hundreds of servers. This document indicates the tool I need is called "RACT" or "AD with the Dell RAC Tool" The hyperlink in the document ...
0
votes
0answers
37 views

how to have one role deploy different files per hosts in ansible [duplicate]

I have a role in ansible but and want to use the copy module in ansible to copy the specific files for specific hosts. Not exactly but pretty same scenario .../roles/serverfiles/tasks/main.yml # ...
1
vote
1answer
2k views

How do i print the current hostname of a host in ansible

I wrote a role to edit the motd when user log into the machine, but i want to personalize the motd to print the hostname of the machine What vriable do i use? or how do i do this? template? how? I ...
0
votes
2answers
89 views

Replicating My Production Environment

I have a CentOS production server that I am currently doing my development on (I know this is awful) I'm bringing on some new developers and I want to set up appropriate development, staging and ...
2
votes
1answer
7k views

How to do a git pull/push using ansible

I am trying to do a git pull/push using ansible. I am running ansible on one server and want to automate or orchestrate a git pull/push on a remote host. Now since i didn't find a mmodule to do this ...
-3
votes
1answer
362 views

Increasing server upload speed tricks [closed]

Server : IBM X3630 CPU : 2x Intel Quad Core E5620 (8265 point) RAM : 16GB DDR3 Hard Disk : 4x300GB SAS 15k Bandwidth : 10 TB Uplink Port Speed : 1 x 1000Mbps Full-Duplex With above features my ...
3
votes
2answers
4k views

Using ansible to add users' public keys to one user's authorized_keys file

Trying to add two people's Github public keys to a user's authorized users file. I am able to successfully retrieve the SSH keys: --- - hosts: 127.0.0.1 connection: local vars: my_users: ...
0
votes
1answer
134 views

Report on Changes to IIS configuration

We are currently looking for a method of verifying what changes have been made over a period of time to our IIS 8.5 sites. We have reviewed the IIS auditing event log which can be useful for ...
1
vote
1answer
138 views

ansible cannot download git repo on centos 7

I have this in my drupal roles to download drupal git --- - name: Install git yum: name=git state=latest - name: Clone Drupal git: repo=http://git.drupal.org/project/drupal.git ...
1
vote
1answer
376 views

error creating database using ansible on centos 7

I am trying to install mysql AND setup database using ANSIBLE on CentOS7(i have no idea why every documention in the world now ONLY talks about Ubuntu and NO CentOS anymore...really SAD!) here is my ...
0
votes
1answer
30 views

Static Analyzer for Configuration files

I'm currently planning to analyze csv-reports from our ActiveDirectory and configuration files from our switches with Python. I'm thinking of having seperate modules for each type of data (csv, txt). ...
0
votes
1answer
121 views

How to read/ modify freetds.conf (for ODBC) using augtool or similar in bash script?

How can I get augtool (augeas) or a similarly common tool to work with freetds.conf, so I can automate some configuration in a bash install script? This doesn't seem to work: augtool print ...
1
vote
1answer
233 views

Puppet for Patch Management

I am thinking of using Puppet for massive patch management. The way to go with this, based on some research, is to create a class and apply it wherever you need, like in the following case: class ...
0
votes
1answer
369 views

Best practices for puppet module management with software development life cycle approach?

How do people organize their Puppet manifests and modules in your source code repository? I am not seeing any obvious way to implement changes in Puppet in a phased manner on a single Puppet master. ...
2
votes
1answer
461 views

Ansible/Capistrano with fixed sudo command (“sudo su -”)

I have to administer some half-managed servers (monstly CentOS 6), where we are only allowed to login as a regular user, then do "sudo su -" and type the regular user password, and then run the ...
0
votes
1answer
110 views

Looking for a central console management software that utilitizes my RDP credentials for access [closed]

All our managed Windows Server 03+ machines are enabled for and connect fine via RDP. However, I would like a less heavy central management (command line based?) to mass manage and maintain the ...
2
votes
2answers
930 views

2 computers with same Previous ConfigMgr UUID

I have cloned a computer using CloneZilla and the two computers has the same "Previous ConfigMgr UUID" but all other UUIDs SIDs and so on are different. Will this be an issue with updates and talking ...