Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

4
votes
8answers
19k views

ConfigMgr 2012 - How to automatically make updates available to computers without forcing them to be installed?

I'm using System Center Configuration Manager 2012 with the Software Update Point feature; however, in this environment patching has to be strictly manual, because server reboots need to be approved ...
3
votes
2answers
693 views

How to put FreeBSD configuration under Revision Control?

I heard once that in Linux it's possible to put whole /etc/ directory into repository. In fact i already done too much crap on server and I quite disoriented what exactly is setup in there at all. ...
-2
votes
0answers
26 views

Best practices: OS deploy menthod for enterprise IT management [closed]

In our company, we have different models of DELL desktops/laptops, and they will need different OS on them. Every time there are people coming and going, we need to reformat the OS, install drivers, ...
2
votes
4answers
5k views

How to fix Puppet fully-qualified parameter path error?

I regularly but randomly get the following error message when I run the puppet client on machines (non-daemonized): err: Could not create : Parameter path failed: File paths must be fully qualified ...
-1
votes
1answer
293 views

how do i read php5-fpm configuration and how do i optimize my configuration? [closed]

This is my current php5-fpm configuration [www] listen = 127.0.0.1:9000 listen.allowed_clients = 127.0.0.1 user = www-data group = www-data pm = dynamic pm.max_children = 50 pm.start_servers = 25 ...
0
votes
1answer
58 views

Report on Changes to IIS configuration

We are currently looking for a method of verifying what changes have been made over a period of time to our IIS 8.5 sites. We have reviewed the IIS auditing event log which can be useful for ...
0
votes
3answers
69 views

What is Most Reliable/Sustainable Way to Distribute a File to a Group of Windows Servers

In managing one of my applications, I need to distribute a small text file to a specific directory on a number of application servers and restart the service when a new version is pushed out. I have a ...
9
votes
3answers
2k views

What tool can I use to manage the configuration of my Windows Server environments

I help manage environments for an application that uses cloud-based Windows server VMs. The application stack consists of Windows Server 2008 and Windows Server 2012, SQL Server 2008, IIS, and ...
8
votes
2answers
3k views

HP ProLiant system preparation/deployment techniques (Array, BIOS, firmware, etc.)

I spend a lot of my time with HP ProLiant systems and Linux installations. Due to the nature of the business I work in, I don't have the luxury of being able to deploy large numbers of identical ...
2
votes
1answer
48 views

How to test for file absence with serverspec?

The serverspec guide on resource types doesn't explain how to test for the absence of a file. This is the best I could come up with: describe command('/bin/bash -c "[[ ! -e /var/foo ]]"') do ...
1
vote
2answers
444 views

Using ansible to add users' public keys to one user's authorized_keys file

Trying to add two people's Github public keys to a user's authorized users file. I am able to successfully retrieve the SSH keys: --- - hosts: 127.0.0.1 connection: local vars: my_users: ...
0
votes
2answers
57 views

Managing thousands of machines with approval controls [closed]

We are a startup that is just getting up to speed and running into the problem of managing hundreds of machines, and having to do nightly and weekly releases to all of them as well as managing their ...
17
votes
5answers
940 views

When is it appropriate to use a configuration manager (eg Puppet / Chef / Ansible)?

At my current workplace, I look after two VMware host machines, an OpenBSD physical machine, three Debian VM's, and six Windows Server VM's (2008/2012). I'm considering implementing a configuration ...
0
votes
1answer
932 views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
0
votes
0answers
25 views

Securing SSL Keys (for production web application) with Puppet and Hiera

I'd like to know what is the best way to secure SSL keys and certificates for web applications. I am using the roles/profiles pattern. Here is the scenario: I have a web application. There is a ...
1
vote
0answers
39 views

Ansible using role template vs copying static configuration file [closed]

I have been using ansible to manage the haproxy configurations for a few servers and I really like the tool. It makes deploying new servers and keeping the configurations in sync a breeze. One ...
1
vote
0answers
18 views

Using Management classes with cobbler

So, I've been working on creating a standardized install image, and worked out all the kinks, now I need to deliver it. What I decided to do is to use cobbler to create templated kickstart installs, ...
6
votes
2answers
520 views

Managing many entries in Route53

We use Amazon Route53 as my company's primary DNS. As we grow into using multiple services from different providers, each of them requested some kind of DNS entry to verify our domain and/or use their ...
0
votes
1answer
34 views

Sharing simple tasks across roles in ansible?

I have a couple of different machine types that all need to have the official postgres APT repo defined for them in order to be able to apt-get install the right version of tools. These different ...
1
vote
1answer
124 views

How would you get a list of all the applications in use at your company? [closed]

I'm responsible for maintaining a list of all the applications in my company (about 250). The range is from HR systems that track 80k employees, to manufacturing-type systems responsible for hundreds ...
0
votes
0answers
18 views

Where can I find the DRAC bulk configuration tool?

I need to reconfigure and reset the DRAC configuration on hundreds of servers. This document indicates the tool I need is called "RACT" or "AD with the Dell RAC Tool" The hyperlink in the document ...
20
votes
8answers
5k views

automated linux deployment and config management at small scale - is it worth it?

I'm about to deploy ~25 servers running Debian. The machines will have different roles - web servers, Java appservers, proxies, MySQL boxes. The environment will probably not grow much in the future - ...
14
votes
15answers
2k views

What features would you add to Firefox to get it into the enterprise?

Firefox adoption in the home/personal user base seems to be growing fine, but adoption in the enterprise is not going anywhere quickly. My view on this is because SysAdmins are not promoting it ...
1
vote
0answers
212 views

SCCM 2012 R2: Email / Alert on component status errors

I know that as of SCCM SP1 we are now able to monitor and alert on a few more things in SCCM. We can now alert if there are problems with not only AV / malware alerts but also client and database ...
0
votes
0answers
31 views

how to have one role deploy different files per hosts in ansible [duplicate]

I have a role in ansible but and want to use the copy module in ansible to copy the specific files for specific hosts. Not exactly but pretty same scenario .../roles/serverfiles/tasks/main.yml # ...
2
votes
4answers
2k views

Command or Shell task hangs when using ssh to create a tunnel

I am using Ansible to push configuration. I have a task inside a playbook that I want to start an ssh tunnel in the background for MongoDB. The task command that i'm using is - name: Start tunnel ...
63
votes
5answers
3k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
23
votes
2answers
1k views

How can I manage hundreds of IPMI BMCs?

I have over 200 computers which can provide IPMI services. The servers are manufactured by several different companies (SuperMicro, Dell, etc.), and there are 6-7 BMC models from about 5 different ...
0
votes
1answer
76 views

How do i print the current hostname of a host in ansible

I wrote a role to edit the motd when user log into the machine, but i want to personalize the motd to print the hostname of the machine What vriable do i use? or how do i do this? template? how? I ...
0
votes
2answers
87 views

What is the easiest way to deploy the same desktop & software across 35 workstations for several hundred users? [closed]

Currently we have 35 workstations with WIN XP SP3 on it. Currently they logon to Server 2012 Standard (we do have ability for RDS Session Based desktops), and the users files (my documents are stored ...
0
votes
2answers
20 views

Replicating My Production Environment

I have a CentOS production server that I am currently doing my development on (I know this is awful) I'm bringing on some new developers and I want to set up appropriate development, staging and ...
80
votes
7answers
16k views

How can the little guys effectively learn and use Puppet?

Six months ago, in our not-for-profit project we decided to start migrating our system management to a Puppet-controlled environment because we are expecting our number of servers to grow ...
5
votes
2answers
200 views

Securing the primary Ansible user

It seems that there are only two reasonable approaches for the primary Ansible user: Using root Using another user (e.g., ansible) with NOPASSWD sudo access The first option is a no-go since I ...
0
votes
1answer
581 views

How to do a git pull/push using ansible

I am trying to do a git pull/push using ansible. I am running ansible on one server and want to automate or orchestrate a git pull/push on a remote host. Now since i didn't find a mmodule to do this ...
-3
votes
1answer
59 views

Increasing server upload speed tricks [closed]

Server : IBM X3630 CPU : 2x Intel Quad Core E5620 (8265 point) RAM : 16GB DDR3 Hard Disk : 4x300GB SAS 15k Bandwidth : 10 TB Uplink Port Speed : 1 x 1000Mbps Full-Duplex With above features my ...
1
vote
1answer
91 views

ansible cannot download git repo on centos 7

I have this in my drupal roles to download drupal git --- - name: Install git yum: name=git state=latest - name: Clone Drupal git: repo=http://git.drupal.org/project/drupal.git ...
1
vote
0answers
139 views

error creating database using ansible on centos 7

I am trying to install mysql AND setup database using ANSIBLE on CentOS7(i have no idea why every documention in the world now ONLY talks about Ubuntu and NO CentOS anymore...really SAD!) here is my ...
0
votes
1answer
23 views

Static Analyzer for Configuration files

I'm currently planning to analyze csv-reports from our ActiveDirectory and configuration files from our switches with Python. I'm thinking of having seperate modules for each type of data (csv, txt). ...
3
votes
1answer
227 views

Is it worth it to do revision control/puppet/etc. on a single-server-setup?

After reading Using revision control for server configuration files?, I decided to install etckeeper on my server. However, it's a one-server setup, so I only have one physical machine and no load ...
17
votes
4answers
6k views

Best practice for testing chef recipes?

My team has created a large number of chef cookbooks. I was wondering what methods and frameworks I should look into so we can start creating tests to assure that our nodes are configured properly?
0
votes
1answer
114 views

Best practices for puppet module management with software development life cycle approach?

How do people organize their Puppet manifests and modules in your source code repository? I am not seeing any obvious way to implement changes in Puppet in a phased manner on a single Puppet master. ...
0
votes
0answers
66 views

How to read/ modify freetds.conf (for ODBC) using augtool or similar in bash script?

How can I get augtool (augeas) or a similarly common tool to work with freetds.conf, so I can automate some configuration in a bash install script? This doesn't seem to work: augtool print ...
38
votes
1answer
13k views

Chef best Practices/Questions

I use and love Puppet. I moved to a new company and they are adopting Chef. So I'm trying to learn Chef but am having a hard time piecing it all together because I still think in Puppet =) These ...
1
vote
1answer
119 views

Puppet for Patch Management

I am thinking of using Puppet for massive patch management. The way to go with this, based on some research, is to create a class and apply it wherever you need, like in the following case: class ...
5
votes
2answers
397 views

Server configuration automation for windows server on ec2, how much can be done?

I believe stackexchange runs on IIS and windows server. I understand windows server doesn't have anything similiar to chef/puppet, but it does have powershell and probably other things I am not aware ...
0
votes
1answer
222 views

Ansible/Capistrano with fixed sudo command (“sudo su -”)

I have to administer some half-managed servers (monstly CentOS 6), where we are only allowed to login as a regular user, then do "sudo su -" and type the regular user password, and then run the ...
2
votes
4answers
382 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
0
votes
0answers
16 views

Using yum-builddep instead of yum install in Puppet

Is there a simple way to change the default behaviour of yum when installing packages to for instance instead of doing a yum install instead use yum-builddep to install only the dependencies of a ...
6
votes
6answers
618 views

Version Controlling Foreman & Puppet

I have just setup Foreman for the first time & am not sure how to go about putting all of my configurations under version control. I know I can use Git for each module I install on my Puppet ...
0
votes
0answers
27 views

What is a sane way to deal with changed configuration files and/or ABI breakages after package updates while using a CM software?

First of all: Full disclosure, I asked the same thing on the Salt ML but thus far the response rate has been zero. Also, gathering a broader spectrum of opinions and experiences never hurts. So I hope ...