Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

5
votes
2answers
1k views

Is there a way to script the installation of System Center Configuration Manager updates listed in Software Center?

We have a very tight outage window and for many of our systems, the servers must be rebooted in the correct order. Because of this, I would like to script our updates. I have attempted to use this ...
1
vote
1answer
297 views

Best practices for software configuration?

I'm configuring my AWS EC2 instances with Ansible, but I don't know what's the best way of storing my app configuration. Now I'm just sending a "app.properties" file to the server, using Ansible, but ...
2
votes
0answers
61 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
15
votes
2answers
8k views

Configuration management: push versus pull based topology

The more established configuration management (CM) systems like Puppet and Chef use a pull-based approach: clients poll a centralized master periodically for updates. Some of them offer a masterless ...
4
votes
2answers
4k views

Ansible : using different sudo user for different hosts

Recently started using ansible. We have servers where the application is setup under different users, like in server xyz.com, unix user is xyz_user and so on. So in case of xyz.com, ansible xyz.com -...
1
vote
1answer
171 views

Puppet node ordering

Can someone help me with puppet node ordering, I know how to control sequence inside classes using require, before, subscribe etc but I need to be 100% sure that my node2 will be executed only after ...
2
votes
1answer
167 views

Can we get git-like functionality with a tool like puppet?

I'm thinking about a convenient way to track my vps configurations and to deploy them in one click (or more or less one). I have been reading up and looking into different config deployment tools of ...
0
votes
1answer
55 views

separate code and configuration in Jenkins

I was using home build deployment system, but want to move to Jenkins. One problem is that I do not keep app configuration in revision control system for security reasons. What could be a solution to ...
4
votes
2answers
2k views

How to update grub with puppet?

I would like to change a line in /etc/default/grub with puppet to this: GRUB_CMDLINE_LINUX="cgroup_enable=memory" I've tried to used augeas which seems to do this magic: exec { "update_grub": ...
1
vote
1answer
137 views

Cfengine Perform action based on variable value

In cfengine, I have a variable that is set to the output of a command. Let say variable myoutput is set to "hi world". How can I execute a command based on the contents of myoutput. I would like ...
20
votes
5answers
9k views

How to handle SSH port changes with Ansible?

I'm trying to use Ansible for automating the setup process of new server instances. One of the setup tasks changes the default SSH port, therefore requiring me to update the hosts list. Is it ...
2
votes
4answers
2k views

Command or Shell task hangs when using ssh to create a tunnel

I am using Ansible to push configuration. I have a task inside a playbook that I want to start an ssh tunnel in the background for MongoDB. The task command that i'm using is - name: Start tunnel ...
1
vote
1answer
783 views

Chef 11 node attributes available and ordering

In Chef 10 I have a number of roles which set custom node attributes like "appname": "my_rails_app" The attribute is then used to load app specific variables in a wrapper cookbook. There are ...
30
votes
5answers
3k views

How can a Linux Administrator improve their shell scripting and automation skills?

In my organization, I work with a group of NOC staff, budding junior engineers and a handful of senior engineers; all with a focus on Linux. One interesting step in the way the company grows talent is ...
20
votes
2answers
18k views

How do I enable additional debugging output from Ansible and Vagrant?

I'm investigating Ansible for server and application provisioning. My application is currently provisioned with shell scripts in Vagrant. Rather than rewrite my scripts I've taken a sample and ...
25
votes
2answers
3k views

How can I manage hundreds of IPMI BMCs?

I have over 200 computers which can provide IPMI services. The servers are manufactured by several different companies (SuperMicro, Dell, etc.), and there are 6-7 BMC models from about 5 different ...
2
votes
1answer
3k views

System Center Configuration Manager: Endpoint Protection client install error

EP 4.2.223.1 is installed, version is higher than expected installer version 4.1.522.0 Has anyone see that in the EndpointProtectionAgent.log on a system they have been trying to push the SCCM client ...
1
vote
1answer
4k views

How to use Salt Stack with minions all behind NAT (not publicly accessible, default salt ports not open)?

Can Salt Stack minions communicate with the salt master from behind NAT/Firewalls, etc., using standard ports that would be open be default in all consumer NAT routers (and without the minions having ...
3
votes
1answer
293 views

Is it worth it to do revision control/puppet/etc. on a single-server-setup?

After reading Using revision control for server configuration files?, I decided to install etckeeper on my server. However, it's a one-server setup, so I only have one physical machine and no load ...
0
votes
2answers
161 views

Mac OS X Profile Manager

I am wondering if when I set settings in profile manager if they should take place immediately. They currently only take effect after a restart or log out/in. I expected to send a push notification of ...
0
votes
1answer
58 views

Centralising IPTables rules?

When our collection of virtual servers got to a certain size, we moved from hosts files to a DNS server. However, we still have to update the firewall rules on every machine each time a new server is ...
-1
votes
1answer
323 views

How do I easily manage 22 almost identical Debian servers at once? [duplicate]

So I have 22 servers, all running the same OS, the same user accounts, the same software and so on and so forth. The only actual differences are the IP address and the hostname. When programming, most ...
62
votes
6answers
23k views

Why use Chef/Puppet over shell scripts?

New to Puppet and Chef tools. Seems like the job that they are doing can be done with shell scripting. Maybe it was done in shell scripts until these came along. I would agree they are more readable. ...
4
votes
3answers
546 views

What are your recommendations on storing passwords for configuration management?

I've seen many recommendations to versionize configuration management system. How do you suggest one deals with passwords that are needed for application security? Versionize them, too?
1
vote
1answer
176 views

How auto configure or mirror my dev Ubuntu installation onto other dev machines?

I have a lot of packages and configurations done to setup my dev machine. I have other developers in my team and want them to have the same setup to start with to ensure compatibility and availability ...
3
votes
1answer
65 views

Managing patches to configuration files

I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
1
vote
1answer
69 views

Structure for Version Control system - configuration and scripts

We are planning to introduce version control for our servers team so we can keep our config files and code neat. The server base are mostly Windows with some Linux and spread across several continents....
4
votes
2answers
1k views

puppet fileserver serve non-module file

I'd like to server file which is located in /etc/puppet/files/key.pgp file { "/var/www/key.gpg": ensure => present, source => 'puppet:///files/key.gpg', } I'm getting this error:...
4
votes
2answers
992 views

How can I automate a new linux server's initial setup?

Every time I setup a new server, I follow a series of steps on each server in order to get updates, set passwd, remove login via root user, customize a familiar environment (bashrc) and secure the ...
0
votes
2answers
483 views

Any good yum repository management dashboards?

I'm currently managing hundreds of CentOS/Amazon Linux servers, and our homegrown tools for managing the myriad package versions seems inadequate and unnecessary. What I'm looking for is a tool that ...
1
vote
1answer
653 views

Is there a method of viewing/exporting the current running config of Apache as a single file?

I'm running Apache2 on Ubuntu and the configuration is spread over several files. Is there a command to export all configuration data in use to a single file? I would like to compare it to another ...
1
vote
1answer
800 views

How to grant in Puppet a global permissions to PostgreSQL?

Official postgresql module from puppetlabs allow granting privileges on specific database. postgresql::database_grant{'grant to myuser': privilege => 'CREATE', db => '...
1
vote
1answer
1k views

How to install packages from source code with Puppet?

I'd like to install source code packages which doesn't have binary packages (deb, rpm) yet. How do I stop execution of a module in case that the module is already install on that machine? I'm using: ...
1
vote
3answers
806 views

Need puppet server sizing and scale limits [duplicate]

My company is considering adopting Puppet to manage our infrastructure. We've heard that Puppet is not as efficient as other solutions such as CFEngine. Does anyone have any hard data about how many ...
6
votes
2answers
4k views

Why Puppet can require each package just once?

When defining dependencies in a class each Package can be globally defined just once. I have hierarchy of configuration and some packages should be installed on all machines (that goes to default ...
5
votes
2answers
2k views

how can I call ruby function basename in puppet

I'd like to call function File.basename which is available in Ruby. Is it possible in puppet? Something like: $filename = basename($download_url)
4
votes
3answers
12k views

how to pass parameters to puppet modules?

What is the best practice for configuration of puppet modules? I have puppet 2.7.11. I find this way quite messy, it looks like using global variables. node default { $always_apt_update = true ...
1
vote
0answers
416 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
1
vote
1answer
768 views

puppet environment variable $PATH is not set

I'm trying to install a module with puppet 2.7 on Debian 6.0 and I keep getting this error: returns: change from notrun to 0 failed: Could not find command 'tar' this is the relevant code: file {"...
68
votes
5answers
5k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames (mysqlmaster01.....
3
votes
3answers
101 views

possible solutions for deploying and keeping ubuntu computers up to date (and the same)

I have access to a small linux pool of around 20 computers. I'd like to come up with a simple and easy to configure solution that allows me to deploy the same configuration to new computers ...
6
votes
1answer
110 views

Easily recreate a server's “state” [closed]

I want the ability to setup new servers for dev/testing/prod very easily. The reasons for being able to setup a new dev VM is obvious, but for prod my concern is adding a new production server/...
5
votes
2answers
249 views

How to configure rudder-agent?

When configuring rudder-agent, the doc says to fill policy_server.dat with the rudder-server hostname: echo 'rudder-server' > /var/rudder/cfengine-community/policy_server.dat Should i use ...
-1
votes
1answer
417 views

how do i read php5-fpm configuration and how do i optimize my configuration? [closed]

This is my current php5-fpm configuration [www] listen = 127.0.0.1:9000 listen.allowed_clients = 127.0.0.1 user = www-data group = www-data pm = dynamic pm.max_children = 50 pm.start_servers = 25 pm....
2
votes
1answer
446 views

Managing multiple linux\freebsd server? [closed]

I currently have 5 FreeBSD servers that I'm handling on my own. I just bought 10 more servers and I want to start using some centralized configuration system like Puppet. I was wondering if there ...
3
votes
3answers
4k views

How to generate customized sudoers files in puppet depending on the environment they're deployed to?

the sysadmins are present in the sudoers files of all environments, but other sudoers are not. Different environments all have slightly different sudoers. Most of the time, 90% of users are the same, ...
3
votes
1answer
187 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
6
votes
9answers
35k views

ConfigMgr 2012 - How to automatically make updates available to computers without forcing them to be installed?

I'm using System Center Configuration Manager 2012 with the Software Update Point feature; however, in this environment patching has to be strictly manual, because server reboots need to be approved ...
2
votes
1answer
40 views

Image of configurations, processes, and so on [closed]

I have configured my local (Ubuntu) Server in which I have all my services with their own configurations and files, now I want to copy all that to another machine. What's the right method to do it? ...
63
votes
2answers
17k views

Why is it so difficult to upgrade between major versions of Red Hat and CentOS?

"Can we upgrade our existing production EL5 servers to EL6?" A simple-sounding request from two customers with completely different environments prompted my usual best-practices answer of "yes, but ...