Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

0
votes
0answers
64 views

Looking for a program to run perl scripts and collect/report results

One of the technologies we manage is rather difficult to monitor due to lack of hooks into the running state and configuration. A teammate and I are working on a script/series of perl scripts that ...
2
votes
4answers
574 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
1
vote
2answers
628 views

Deploying Office 2013 Home and Business via System Center Configuration Manager 2012 R2

It's beginning to seem like I am chasing my tail on this one so I am going to ask the question here to see if anyone else has an answer to this. I have been trying to get SCCM 2012 setup and my ...
0
votes
2answers
87 views

What is the easiest way to deploy the same desktop & software across 35 workstations for several hundred users? [closed]

Currently we have 35 workstations with WIN XP SP3 on it. Currently they logon to Server 2012 Standard (we do have ability for RDS Session Based desktops), and the users files (my documents are stored ...
0
votes
1answer
118 views

Manage workstations with Puppet and TheForeman

I'm building an IT infrastructure for managing all the workstations in my company. I am interested in Puppet and a external node classifier as The Foreman, but I see all the time that Puppet and The ...
0
votes
1answer
229 views

What are the pros and cons of using S3 as a data access server? [closed]

I need to manage some configuration files. The files can be stored on AWS S3 and retrieved via the URL. The alternative is to use an application server and store the JSON content to a database and ...
4
votes
1answer
91 views

A testing framework for Linux server configuration management

We are a medium sized shop that uses Puppet for Linux configuration management. Since we are a small shop, it's difficult to deploy and maintain DTAP environment. We normally perform manual testing ...
0
votes
2answers
70 views

Tracking the linux config with git: how?

I'd like to track my linux configurations with git. My idea is to have a branch for each server. /etc is not the only one directory to be tracked (I won't git init in '/etc' ) As far as I could ...
1
vote
1answer
1k views

SCCM 2012 Clients no longer detecting

Here is the scenario I had a fully functioning SCCM 2012 site server with the DP, MP, SUP, Application catalog, etc. roles configured and working. There is only one server on this site. Everything ...
0
votes
0answers
420 views

Configuration Manager (SCCM) Clients not updating their status

I have issues where the configuration manager CAS server is showing the clients as "Pending System Restart". When you look at the client it's referring to, it shows the status as having been sent, and ...
-2
votes
1answer
620 views

Is Docker production ready? [closed]

I will set up a new server for a client. I have done this 100 times and I need a new system to make it. My old system is a big lib with self made scripts so I need 20 minutes for a server. I checked ...
1
vote
1answer
1k views

hostname of minion in salt command

I'm fairly new to salt so it's possible that I just missed something, but I can't figure this out. I am using salt as a command execution tool (no config management so far). I couldn't find a way to ...
6
votes
6answers
811 views

Version Controlling Foreman & Puppet

I have just setup Foreman for the first time & am not sure how to go about putting all of my configurations under version control. I know I can use Git for each module I install on my Puppet ...
1
vote
1answer
391 views

How to automate cleanup of config files from past pkgs as reported by “dpkg -l | grep ^rc”

There are a number of pkgs that weren't removed with "apt-get purge" and I would like to automate cleaning them up. You can't apt-get purge apache2.2-common because the pkg is already removed. You ...
2
votes
1answer
418 views

How to initialize known_hosts/authorized_keys/public/private key pairs with ansible

I am using ansible to configure and deploy my app on several machines. The only problem I have now is that I am not sure how to properly initialize/automate the very first connection to this machines? ...
6
votes
2answers
590 views

Managing many entries in Route53

We use Amazon Route53 as my company's primary DNS. As we grow into using multiple services from different providers, each of them requested some kind of DNS entry to verify our domain and/or use their ...
1
vote
0answers
357 views

Need a PHP version manager to deploy multiple versions of PHP on production servers [closed]

I'm currently running a few LAMP stacks, where I've setup PHP 5.2, 5.3 and 5.4 by hand. All servers are running Ubuntu 12.04 LTS. 5.3 is currently installed via apt-get but all other PHP versions are ...
0
votes
2answers
1k views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
0
votes
1answer
37 views

Group Policy: How to comment on each setting?

I am looking for a way to comment on each and every setting that can be made within a GPO. Unfortunately things like user logon scripts and security settings and some more can not be commented. Is ...
1
vote
0answers
248 views

SCCM 2012 R2: Email / Alert on component status errors

I know that as of SCCM SP1 we are now able to monitor and alert on a few more things in SCCM. We can now alert if there are problems with not only AV / malware alerts but also client and database ...
6
votes
1answer
2k views

Puppet package “ensure => latest” doesn't always work

I have a unique situation where the Puppet package ensure => latest directive only worked on some of my systems. Out of 30 servers, the packages updated properly on all but 4. I'm trying to get ...
9
votes
3answers
2k views

What tool can I use to manage the configuration of my Windows Server environments

I help manage environments for an application that uses cloud-based Windows server VMs. The application stack consists of Windows Server 2008 and Windows Server 2012, SQL Server 2008, IIS, and ...
0
votes
0answers
27 views

Which configuration management tool has the best Windows support? [duplicate]

Of the major configuration management tools such as puppet, chef, salt, ansible, etc... which package has the best support for Windows server operating system?
5
votes
2answers
612 views

Is there a way to script the installation of System Center Configuration Manager updates listed in Software Center?

We have a very tight outage window and for many of our systems, the servers must be rebooted in the correct order. Because of this, I would like to script our updates. I have attempted to use this ...
1
vote
1answer
209 views

Best practices for software configuration?

I'm configuring my AWS EC2 instances with Ansible, but I don't know what's the best way of storing my app configuration. Now I'm just sending a "app.properties" file to the server, using Ansible, but ...
2
votes
0answers
44 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
13
votes
2answers
5k views

Configuration management: push versus pull based topology

The more established configuration management (CM) systems like Puppet and Chef use a pull-based approach: clients poll a centralized master periodically for updates. Some of them offer a masterless ...
2
votes
2answers
2k views

Ansible : using different sudo user for different hosts

Recently started using ansible. We have servers where the application is setup under different users, like in server xyz.com, unix user is xyz_user and so on. So in case of xyz.com, ansible xyz.com ...
1
vote
1answer
135 views

Puppet node ordering

Can someone help me with puppet node ordering, I know how to control sequence inside classes using require, before, subscribe etc but I need to be 100% sure that my node2 will be executed only after ...
2
votes
1answer
140 views

Can we get git-like functionality with a tool like puppet?

I'm thinking about a convenient way to track my vps configurations and to deploy them in one click (or more or less one). I have been reading up and looking into different config deployment tools of ...
0
votes
1answer
43 views

separate code and configuration in Jenkins

I was using home build deployment system, but want to move to Jenkins. One problem is that I do not keep app configuration in revision control system for security reasons. What could be a solution to ...
4
votes
1answer
958 views

How to update grub with puppet?

I would like to change a line in /etc/default/grub with puppet to this: GRUB_CMDLINE_LINUX="cgroup_enable=memory" I've tried to used augeas which seems to do this magic: exec { "update_grub": ...
1
vote
1answer
100 views

Cfengine Perform action based on variable value

In cfengine, I have a variable that is set to the output of a command. Let say variable myoutput is set to "hi world". How can I execute a command based on the contents of myoutput. I would like ...
15
votes
2answers
5k views

How to handle SSH port changes with Ansible?

I'm trying to use Ansible for automating the setup process of new server instances. One of the setup tasks changes the default SSH port, therefore requiring me to update the hosts list. Is it ...
2
votes
4answers
2k views

Command or Shell task hangs when using ssh to create a tunnel

I am using Ansible to push configuration. I have a task inside a playbook that I want to start an ssh tunnel in the background for MongoDB. The task command that i'm using is - name: Start tunnel ...
1
vote
1answer
571 views

Chef 11 node attributes available and ordering

In Chef 10 I have a number of roles which set custom node attributes like "appname": "my_rails_app" The attribute is then used to load app specific variables in a wrapper cookbook. There are ...
29
votes
5answers
3k views

How can a Linux Administrator improve their shell scripting and automation skills?

In my organization, I work with a group of NOC staff, budding junior engineers and a handful of senior engineers; all with a focus on Linux. One interesting step in the way the company grows talent is ...
7
votes
2answers
7k views

How do I enable additional debugging output from Ansible and Vagrant?

I'm investigating Ansible for server and application provisioning. My application is currently provisioned with shell scripts in Vagrant. Rather than rewrite my scripts I've taken a sample and ...
24
votes
2answers
2k views

How can I manage hundreds of IPMI BMCs?

I have over 200 computers which can provide IPMI services. The servers are manufactured by several different companies (SuperMicro, Dell, etc.), and there are 6-7 BMC models from about 5 different ...
2
votes
1answer
2k views

System Center Configuration Manager: Endpoint Protection client install error

EP 4.2.223.1 is installed, version is higher than expected installer version 4.1.522.0 Has anyone see that in the EndpointProtectionAgent.log on a system they have been trying to push the SCCM client ...
0
votes
1answer
3k views

How to use Salt Stack with minions all behind NAT (not publicly accessible, default salt ports not open)?

Can Salt Stack minions communicate with the salt master from behind NAT/Firewalls, etc., using standard ports that would be open be default in all consumer NAT routers (and without the minions having ...
3
votes
1answer
240 views

Is it worth it to do revision control/puppet/etc. on a single-server-setup?

After reading Using revision control for server configuration files?, I decided to install etckeeper on my server. However, it's a one-server setup, so I only have one physical machine and no load ...
0
votes
2answers
140 views

Mac OS X Profile Manager

I am wondering if when I set settings in profile manager if they should take place immediately. They currently only take effect after a restart or log out/in. I expected to send a push notification of ...
0
votes
1answer
55 views

Centralising IPTables rules?

When our collection of virtual servers got to a certain size, we moved from hosts files to a DNS server. However, we still have to update the firewall rules on every machine each time a new server is ...
-1
votes
1answer
230 views

How do I easily manage 22 almost identical Debian servers at once? [duplicate]

So I have 22 servers, all running the same OS, the same user accounts, the same software and so on and so forth. The only actual differences are the IP address and the hostname. When programming, most ...
56
votes
6answers
17k views

Why use Chef/Puppet over shell scripts?

New to Puppet and Chef tools. Seems like the job that they are doing can be done with shell scripting. Maybe it was done in shell scripts until these came along. I would agree they are more readable. ...
4
votes
3answers
316 views

What are your recommendations on storing passwords for configuration management?

I've seen many recommendations to versionize configuration management system. How do you suggest one deals with passwords that are needed for application security? Versionize them, too?
1
vote
1answer
175 views

How auto configure or mirror my dev Ubuntu installation onto other dev machines?

I have a lot of packages and configurations done to setup my dev machine. I have other developers in my team and want them to have the same setup to start with to ensure compatibility and availability ...
3
votes
1answer
59 views

Managing patches to configuration files

I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
1
vote
1answer
59 views

Structure for Version Control system - configuration and scripts

We are planning to introduce version control for our servers team so we can keep our config files and code neat. The server base are mostly Windows with some Linux and spread across several ...