Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

63
votes
5answers
3k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
3
votes
3answers
101 views

possible solutions for deploying and keeping ubuntu computers up to date (and the same)

I have access to a small linux pool of around 20 computers. I'd like to come up with a simple and easy to configure solution that allows me to deploy the same configuration to new computers ...
6
votes
1answer
93 views

Easily recreate a server's “state” [closed]

I want the ability to setup new servers for dev/testing/prod very easily. The reasons for being able to setup a new dev VM is obvious, but for prod my concern is adding a new production ...
5
votes
1answer
138 views

How to configure rudder-agent?

When configuring rudder-agent, the doc says to fill policy_server.dat with the rudder-server hostname: echo 'rudder-server' > /var/rudder/cfengine-community/policy_server.dat Should i use ...
-1
votes
1answer
291 views

how do i read php5-fpm configuration and how do i optimize my configuration? [closed]

This is my current php5-fpm configuration [www] listen = 127.0.0.1:9000 listen.allowed_clients = 127.0.0.1 user = www-data group = www-data pm = dynamic pm.max_children = 50 pm.start_servers = 25 ...
2
votes
1answer
385 views

Managing multiple linux\freebsd server? [closed]

I currently have 5 FreeBSD servers that I'm handling on my own. I just bought 10 more servers and I want to start using some centralized configuration system like Puppet. I was wondering if there ...
3
votes
3answers
3k views

How to generate customized sudoers files in puppet depending on the environment they're deployed to?

the sysadmins are present in the sudoers files of all environments, but other sudoers are not. Different environments all have slightly different sudoers. Most of the time, 90% of users are the same, ...
3
votes
1answer
105 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
4
votes
7answers
19k views

ConfigMgr 2012 - How to automatically make updates available to computers without forcing them to be installed?

I'm using System Center Configuration Manager 2012 with the Software Update Point feature; however, in this environment patching has to be strictly manual, because server reboots need to be approved ...
2
votes
1answer
40 views

Image of configurations, processes, and so on [closed]

I have configured my local (Ubuntu) Server in which I have all my services with their own configurations and files, now I want to copy all that to another machine. What's the right method to do it? ...
52
votes
2answers
10k views

Why is it so difficult to upgrade between major versions of Red Hat and CentOS?

"Can we upgrade our existing production EL5 servers to EL6?" A simple-sounding request from two customers with completely different environments prompted my usual best-practices answer of "yes, but ...
5
votes
3answers
526 views

“Shutdown” in a show running configuration

When you see the word 'shutdown' in the output of a 'show running-config' command on a Cisco router... what does that exactly indicate? My basic assumption would be that it means that interface is ...
2
votes
1answer
2k views

Puppet Enterprise vs. Open Source

I'm interested in learning to use Puppet. One example I see over and over again is user management. According the the Puppet website, "Configuration management – User accounts" is a feature that only ...
1
vote
1answer
2k views

Why is Configuration Manager 2012 creating a SMSPKG folder on my C: drive?

I'm testing System Center Configuration Manager 2012, and I installed it on a server with two disks (using a SQL Server instance on a second server). Before installing, I created a file called ...
2
votes
3answers
70 views

Managing several PCs

I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date. My ideal solution would be to partition ...
3
votes
1answer
141 views

Is cf-serverd necessary?

Since a cfengine client can run autonomously based upon the files in its 'inputs' directory, why is it necessary to have a policy server running cf-serverd? Would some other file distribution ...
2
votes
2answers
682 views

How to put freebsd configuration under Revision Control?

I heard once that in linux it's possible to put whole /etc/ directory into repository. In fact i already done too much crap on server and I quite disoriented what exactly is setup in there at all. ...
2
votes
2answers
175 views

Is there a standard method for assigning nameservers to servers in a Windows domain?

As the title asks, I'm wondering if there's any standard or "best practice" for how to actually assign nameservers (DNS) and manage the nameserver configuration for client servers on a Windows domain. ...
1
vote
1answer
29 views

configuration mangement on third party devices

Can anyone point me in the direction of configuration management software used for access and distribution level equipment? (i.e. DSLAM, GPON Equipment, Proprietary IP PBX Systems) These devices ...
1
vote
1answer
493 views

Puppet: array in parameterized classes VS using resources

I have some use cases where I want to define multiple similar resources that should end up in a single file (via a template). As an example I'm trying to write a puppet module that will let me ...
3
votes
2answers
856 views

How to organize deployment process in Chef-controlled environment?

I have a web Linux-based infrastructure which consists of 15 virtual machines and over 50 various services. It is fully controlled by Chef. Most of the services are developed internally. Basically ...
8
votes
1answer
3k views

Puppet: managing (lots of) Apache VirtualHosts

I'm learning my way through configuration management in general and using puppet to implement it in particular. I have already done some generic research (also on SF) and right now I'm considering ...
35
votes
0answers
5k views

What advantages/features does Puppet or Chef offer over Salt (or vice versa)? [closed]

I am looking at rolling out a new configuration management tool to replace our home-grown solution. The defacto standards are Chef and Puppet, both of which are Ruby-centric (though can be used to ...
51
votes
6answers
6k views

What should NOT be managed by puppet?

I'm learning my way through configuration management in general and using puppet to implement it in particular, and I'm wondering what aspects of a system, if any, should not be managed with puppet? ...
0
votes
1answer
199 views

Arbitrary software configuration management with Puppet?

I am evaluating Puppet as a potential replacement for an in-house software configuration and distribution system. I am looking for advice on whether Puppet can satisfy certain requirements for ...
7
votes
2answers
775 views

How can I use the output of a command in cfengine3

I want to list a directory content and use the result somewhere else: bundle agent test { commands: "ls /tmp/test/"; reports: ubuntu:: "print output here for example"; # ...
1
vote
2answers
1k views

Return from Chef recipe without rising an exception

Is there a way to return from Chef recipe without rising an exception? Say I have a long recipe. I want to add a ruby block to it's beginning which will check some condition (for example directory ...
2
votes
0answers
32 views

Does there exist a solution for full filesystem revision control where the revision db/repository is remote? [closed]

Question: Is there a good solution out there for revision control on an entire file system? This includes the question "would any of the typical revision control systems out there work for this (git, ...
80
votes
7answers
16k views

How can the little guys effectively learn and use Puppet?

Six months ago, in our not-for-profit project we decided to start migrating our system management to a Puppet-controlled environment because we are expecting our number of servers to grow ...
3
votes
2answers
196 views

how to remove a node in rudder 2.3

I'm using Rudder 2.3 (v.2.3.7~rc2~git201205021042 ) since some months now and I have added some VM which have been deleted now. So I search a step by step howto to remove its from my rudder node ...
2
votes
2answers
724 views

Packaging a Custom Chef Server (via Chef solo) installation for RHEL 6 / CentOS

I am currently installing a Chef server according to http://wiki.opscode.com/display/chef/Installing+Chef+Server+using+Chef+Solo for CentOS 6.2. I want to package everything up into my own custom RPM ...
3
votes
1answer
3k views

Generating Puppet resources from array of hashes

I'm new to Puppet and to start using it I want to learn how to manage system users. I have several users, which share common properties, so I thought I should factor things out. After some struggle, ...
-3
votes
1answer
1k views

Is Chef/Puppet too complicated? [closed]

I know both of them are amazing tools, and have great feature sets. But maybe, just maybe, they are like Word/Excel, which I probably only use < 10% feature in my lifetime. To me, a bash-based ...
0
votes
1answer
562 views

storing nagios configuration data in oneCMDB

I want to store my nagios configuration data into oneCMDB(configuration management database). What i trying to achieve is i will be developing a GUI app in which one can edit the configurations and ...
1
vote
1answer
1k views

Using Augeas to modify Squid configuration

I'm running squid-deb-proxy and I want to alter the configuration using Puppet/Augeas. When I try this: augeas {'squid-deb-proxy.conf': lens => 'Squid.lns', incl => ...
11
votes
5answers
2k views

How do you keep up with Nagios/Capistrano configs when using EC2?

I use Amazon EC2 for my mobile app. Depending on load of the application at a given time, I might spawn new instances and then take them down when load is lower to save costs. How does one keep up ...
1
vote
2answers
749 views

Amazon EC2, fastest way to get a node into an existing cluster

I'm new to Amazon AWS. A lot of the time I hear about people folks spawning instances and almost instantly putting them behind a load balancer and into an existing cluster. In the traditional world ...
2
votes
1answer
28 views

Formatting data from management database

I've got some data that goes like this: Config_Name Question Answer Cisco WAN Sensitivity: High Cisco WAN Authorized Users: Brent, Charles Cisco WAN Last Audited: n/a ...
5
votes
5answers
3k views

How do I (robustly) remotely execute tasks on Windows workstations in a domain?

I'm not even sure if "robustly" is a word. Anyway. Context: We have a few hundred Windows 7 workstations on a LAN. We use AD/GPO management pretty heavily, but there are a lot of periodic and/or ...
5
votes
3answers
3k views

Suggestions for making sysfs parameters persist across reboots

I'm experimenting with large changes to Linux system runtime parameters exposed through the sysfs virtual file system. What is the most efficient way to maintain these parameters so that they persist ...
10
votes
3answers
8k views

Set sysctl.conf parameters with Puppet

This was a breeze in CFEngine... But I'm in a Puppet environment now, and need to be able to assign/ensure/check certain sysctl.conf variables. In the CFEngine world, I could simply check for specific ...
5
votes
1answer
610 views

Automatic management of SSL certificate on multiple servers…good or bad

We're using puppet to manage a group of Ubuntu boxes and will shortly require each of these servers to share a common SSL certificate, in order to serve a site over HTTPS. Naturally, we'd like to use ...
1
vote
1answer
477 views

How do I restrict MediaWiki user groups from access to portions of my wiki by namespace?

In the release notes of Mediawiki 1.18 there is this line: $wgGroupPermissions now supports per namespace permissions. I cannot find the implementation within the documentation. The wiki page for ...
0
votes
1answer
72 views

How do you handle ad hoc configuration?

We use Puppet (or Chef) to script out commissioning of the new servers for different roles as well as configuration of the software that is deployed on those. However, how do you handle ad hoc ...
6
votes
2answers
8k views

How to comment out / uncomment a line in a configuration file with Augeas?

Assumming that I have the following in the /etc/syslog.conf file: # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console ...
2
votes
2answers
252 views

IIS-like UI for http.sys programs

Does anyone know if there is a open-source or built-in way to view ALL IIS and http.sys endpoints/sites via a GUI? The problem I have is that I'm a little wary of having no visibility for http.sys ...
4
votes
3answers
324 views

Is it an unsafe practice to symlink /etc conf files?

To manage the configuration of a server, I keep some configuration flies (located in /etc) under version control (in the home folder) and then symlink to them from their /etc locations: ...
5
votes
2answers
2k views

Patching with Puppet

I am new to Puppet, and I am wondering if it is an effective solution for patch/pkg management on Solaris as well as Linux. I am more interested on the Solaris side. So far am unable to locate any ...
1
vote
3answers
2k views

Specifying prerequisites for Puppet custom facts?

I have written a custom Puppet fact that requires the biosdevname tool to be installed. I'm not sure how to set things up correctly such that this tool will be installed before facter tries to ...
1
vote
2answers
96 views

How can I find which configurations I've modified?

I installed Debian on a computer three years ago. I've made changes to a variety of configurations (print, ssh, and so on). I'm now backing up in preparation for an upgrade. I would like to save ...