Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.
-1
votes
1answer
39 views
How do I easily manage 22 almost identical Debian servers at once? [duplicate]
So I have 22 servers, all running the same OS, the same user accounts, the same software and so on and so forth. The only actual differences are the IP address and the hostname.
When programming, most ...
-2
votes
0answers
31 views
“Lite Touch” Switch Network Deployment Options [closed]
While this is question is not for a typical corporate IT setting, I believe it can be inspired by IT best practices.
OVERVIEW
I am working on a product where every unit we deliver does integrate a ...
20
votes
6answers
1k views
Why use Chef/Puppet over shell scripts?
New to Puppet and Chef tools. Seems like the job that they are doing can be done with shell scripting. Maybe it was done in shell scripts until these came along.
I would agree they are more readable. ...
2
votes
3answers
64 views
What are your recommendations on storing passwords for configuration management?
I've seen many recommendations to versionize configuration management system. How do you suggest one deals with passwords that are needed for application security? Versionize them, too?
0
votes
1answer
54 views
How auto configure or mirror my dev Ubuntu installation onto other dev machines?
I have a lot of packages and configurations done to setup my dev machine. I have other developers in my team and want them to have the same setup to start with to ensure compatibility and availability ...
0
votes
0answers
19 views
How to perform a cleanup on Chef resource removing?
I need to perform certain actions (e.g remove a link) when a resource gets removed from a Chef-controlled node. It looks like Chef itself performs cleanup actions because I can see entries like ...
1
vote
1answer
30 views
Managing patches to configuration files
I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
0
votes
1answer
29 views
Structure for Version Control system - configuration and scripts
We are planning to introduce version control for our servers team so we can keep our config files and code neat.
The server base are mostly Windows with some Linux and spread across several ...
0
votes
0answers
25 views
SNMP: Calculating max. number of agents for polling [closed]
I'm doing some reading on SNMP and have Stallings' book "SNMP, SNMPv2 and RMON" (1996).
He shows how by using some basic math you are able to "determine the maximum number of stations that the ...
2
votes
0answers
42 views
puppet fileserver serve non-module file
I'd like to server file which is located in /etc/puppet/files/key.pgp
file { "key.gpg":
ensure => present,
source => 'puppet:///files/key.gpg',
}
I'm getting this error:
Not ...
2
votes
2answers
151 views
How can I automate a new linux server's initial setup?
Every time I setup a new server, I follow a series of steps on each server in order to get updates, set passwd, remove login via root user, customize a familiar environment (bashrc) and secure the ...
0
votes
0answers
42 views
Options for MS DHCP servers configuration management [closed]
I am trying to find out what are the options for managing DHCP servers in MS environment. Coming from Linux MSP where all but few things were managed by Puppet, it is hard to see to what extent I can ...
0
votes
1answer
46 views
Any good yum repository management dashboards?
I'm currently managing hundreds of CentOS/Amazon Linux servers, and our homegrown tools for managing the myriad package versions seems inadequate and unnecessary. What I'm looking for is a tool that ...
1
vote
1answer
28 views
Is there a method of viewing/exporting the current running config of Apache as a single file?
I'm running Apache2 on Ubuntu and the configuration is spread over several files.
Is there a command to export all configuration data in use to a single file?
I would like to compare it to another ...
1
vote
0answers
44 views
How to grant in Puppet a global permissions to PostgreSQL?
Official postgresql module from puppetlabs allow granting privileges on specific database.
postgresql::database_grant{'grant to myuser':
privilege => 'CREATE',
db => ...
1
vote
1answer
89 views
How to install packages from source code with Puppet?
I'd like to install source code packages which doesn't have binary packages (deb, rpm) yet.
How do I stop execution of a module in case that the module is already install on that machine?
I'm using:
...
1
vote
3answers
107 views
Need puppet server sizing and scale limits [duplicate]
My company is considering adopting Puppet to manage our infrastructure. We've heard that Puppet is not as efficient as other solutions such as CFEngine. Does anyone have any hard data about how many ...
0
votes
1answer
125 views
Why Puppet can require each package just once?
When defining dependencies in a class each Package can be globally defined just once. I have hierarchy of configuration and some packages should be installed on all machines (that goes to default ...
0
votes
2answers
50 views
how can I call ruby function basename in puppet
I'd like to call function File.basename which is available in Ruby. Is it possible in puppet?
Something like:
$filename = basename($download_url)
2
votes
2answers
125 views
how to pass parameters to puppet modules?
What is the best practice for configuration of puppet modules? I have puppet 2.7.11. I find this way quite messy, it looks like using global variables.
node default {
$always_apt_update = true
...
1
vote
0answers
56 views
Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly
I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
0
votes
1answer
122 views
puppet environment variable $PATH is not set
I'm trying to install a module with puppet 2.7 on Debian 6.0 and I keep getting this error:
returns: change from notrun to 0 failed: Could not find command 'tar'
this is the relevant code:
file ...
3
votes
3answers
82 views
possible solutions for deploying and keeping ubuntu computers up to date (and the same)
I have access to a small linux pool of around 20 computers. I'd like to come up with a simple and easy to configure solution that allows me to
deploy the same configuration to new computers
...
0
votes
0answers
113 views
manage more pfsense instalation in same time [closed]
Is there any tool that can easily manage more pfsense instalation at once.
I have network with around 30 pfSense instlations.
All of them are caling OpenVPN to oone central pfSense vpncontrator.
I ...
0
votes
0answers
69 views
Plesk Backup Strategy + Backup own configs for installed Programs
I'm administering a server which is managed by plesk. Also there are additional programs installed, like ldap for example. And there has been a ton of changes to configurations around apache, like ...
-1
votes
1answer
98 views
how do i read php5-fpm configuration and how do i optimize my configuration? [closed]
This is my current php5-fpm configuration
[www]
listen = 127.0.0.1:9000
listen.allowed_clients = 127.0.0.1
user = www-data
group = www-data
pm = dynamic
pm.max_children = 50
pm.start_servers = 25
...
2
votes
1answer
88 views
Patch Management in computer lab environment
Backgound
I work at a university as an administrator over all of the public computer labs. Our labs are composed of hundreds of dual-boot iMacs(Mountain Lion + Windows 7) as well as hundreds Windows ...
2
votes
1answer
149 views
Managing multiple linux\freebsd server? [closed]
I currently have 5 FreeBSD servers that I'm handling on my own.
I just bought 10 more servers and I want to start using some centralized configuration system like Puppet.
I was wondering if there ...
3
votes
3answers
381 views
How to generate customized sudoers files in puppet depending on the environment they're deployed to?
the sysadmins are present in the sudoers files of all environments, but other sudoers are not. Different environments all have slightly different sudoers. Most of the time, 90% of users are the same, ...
3
votes
1answer
62 views
Good way to store domain CSR and KEY files
For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains.
What is a good way to store the basic KEY and CSR files generated? I was ...
2
votes
1answer
36 views
Image of configurations, processes, and so on [closed]
I have configured my local (Ubuntu) Server in which I have all my services with their own configurations and files, now I want to copy all that to another machine.
What's the right method to do it? ...
35
votes
2answers
2k views
Why is it so difficult to upgrade between major versions of Red Hat and CentOS?
"Can we upgrade our existing production EL5 servers to EL6?"
A simple-sounding request from two customers with completely different environments prompted my usual best-practices answer of "yes, but ...
5
votes
3answers
137 views
“Shutdown” in a show running configuration
When you see the word 'shutdown' in the output of a 'show running-config' command on a Cisco router... what does that exactly indicate?
My basic assumption would be that it means that interface is ...
2
votes
3answers
65 views
Managing several PCs
I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date.
My ideal solution would be to partition ...
2
votes
1answer
75 views
Is cf-serverd necessary?
Since a cfengine client can run autonomously based upon the files in its 'inputs' directory, why is it necessary to have a policy server running cf-serverd?
Would some other file distribution ...
2
votes
1answer
222 views
How to put freebsd configuration under Revision Control?
I heard once that in linux it's possible to put whole /etc/ directory into repository. In fact i already done too much crap on server and I quite disoriented what exactly is setup in there at all.
...
2
votes
2answers
133 views
Is there a standard method for assigning nameservers to servers in a Windows domain?
As the title asks, I'm wondering if there's any standard or "best practice" for how to actually assign nameservers (DNS) and manage the nameserver configuration for client servers on a Windows domain.
...
-1
votes
1answer
67 views
Server config management tool [closed]
I am building an n-tier architecture on AWS.
We have different accounts for multiple dev accounts, multiple test accounts, and staging prod. Dev/test use smaller instance sizes and application memory ...
1
vote
1answer
28 views
configuration mangement on third party devices
Can anyone point me in the direction of configuration management software used for access and distribution level equipment? (i.e. DSLAM, GPON Equipment, Proprietary IP PBX Systems) These devices ...
1
vote
1answer
157 views
Puppet: array in parameterized classes VS using resources
I have some use cases where I want to define multiple similar resources that should end up in a single file (via a template).
As an example I'm trying to write a puppet module that will let me ...
3
votes
2answers
679 views
How to organize deployment process in Chef-controlled environment?
I have a web Linux-based infrastructure which consists of 15 virtual machines and over 50 various services. It is fully controlled by Chef. Most of the services are developed internally.
Basically ...
6
votes
1answer
697 views
Puppet: managing (lots of) Apache VirtualHosts
I'm learning my way through configuration management in general and using puppet to implement it in particular. I have already done some generic research (also on SF) and right now I'm considering ...
12
votes
0answers
2k views
What advantages/features does Puppet or Chef offer over Salt (or vice versa)? [closed]
I am looking at rolling out a new configuration management tool to replace our home-grown solution. The defacto standards are Chef and Puppet, both of which are Ruby-centric (though can be used to ...
37
votes
6answers
2k views
What should NOT be managed by puppet?
I'm learning my way through configuration management in general and using puppet to implement it in particular, and I'm wondering what aspects of a system, if any, should not be managed with puppet?
...
0
votes
0answers
101 views
Web-based configuration service for distributed LAMP-stack
I have a set of virtual linux hosts, each will perform a specific part in a LAMP stack (a database host, static frontend, apache backend etc.) Is there any web-based administration panel that would ...
3
votes
2answers
54 views
Managing servers, applications, configuration and their contacts
Currently we are using a wiki (Confluence) to track this information like:
servers
applications
configuration (IP addressees, domains used
owners (contacts)
The problem is that a wiki does not ...
0
votes
1answer
136 views
Arbitrary software configuration management with Puppet?
I am evaluating Puppet as a potential replacement for an in-house software configuration and distribution system. I am looking for advice on whether Puppet can satisfy certain requirements for ...
5
votes
2answers
220 views
How can I use the output of a command in cfengine3
I want to list a directory content and use the result somewhere else:
bundle agent test
{
commands:
"ls /tmp/test/";
reports:
ubuntu::
"print output here for example";
# ...
1
vote
1answer
431 views
Return from Chef recipe without rising an exception
Is there a way to return from Chef recipe without rising an exception?
Say I have a long recipe. I want to add a ruby block to it's beginning which will check some condition (for example directory ...
2
votes
0answers
29 views
Does there exist a solution for full filesystem revision control where the revision db/repository is remote? [closed]
Question:
Is there a good solution out there for revision control on an entire file system? This includes the question "would any of the typical revision control systems out there work for this (git, ...
