Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

learn more… | top users | synonyms

69
votes
6answers
11k views

How can the little guys effectively learn and use Puppet?

Six months ago, in our not-for-profit project we decided to start migrating our system management to a Puppet-controlled environment because we are expecting our number of servers to grow ...
50
votes
6answers
13k views

Puppet vs Chef, pro and contra from users and use cases [closed]

I already googled and read the "to-puppet-or-to-chef-that-is-the-question" article. I'm interested in use cases, real world implementations in which people had choosen one or the other on real ...
48
votes
2answers
7k views

Why is it so difficult to upgrade between major versions of Red Hat and CentOS?

"Can we upgrade our existing production EL5 servers to EL6?" A simple-sounding request from two customers with completely different environments prompted my usual best-practices answer of "yes, but ...
47
votes
6answers
5k views

What should NOT be managed by puppet?

I'm learning my way through configuration management in general and using puppet to implement it in particular, and I'm wondering what aspects of a system, if any, should not be managed with puppet? ...
44
votes
6answers
10k views

Why use Chef/Puppet over shell scripts?

New to Puppet and Chef tools. Seems like the job that they are doing can be done with shell scripting. Maybe it was done in shell scripts until these came along. I would agree they are more readable. ...
33
votes
1answer
10k views

Chef best Practices/Questions

I use and love Puppet. I moved to a new company and they are adopting Chef. So I'm trying to learn Chef but am having a hard time piecing it all together because I still think in Puppet =) These ...
33
votes
0answers
5k views

What advantages/features does Puppet or Chef offer over Salt (or vice versa)? [closed]

I am looking at rolling out a new configuration management tool to replace our home-grown solution. The defacto standards are Chef and Puppet, both of which are Ruby-centric (though can be used to ...
29
votes
11answers
8k views

How to record server changes?

So we've all probably had this situation: you debug some problem, only to realize it was caused by a config change you made six months ago, and you can't remember why you did it. So you undo it and ...
28
votes
5answers
2k views

How can a Linux Administrator improve their shell scripting and automation skills?

In my organization, I work with a group of NOC staff, budding junior engineers and a handful of senior engineers; all with a focus on Linux. One interesting step in the way the company grows talent is ...
24
votes
9answers
10k views

Are configuration management tools (Puppet, Chef) capable of keeping installed packages up to date?

This is probably a simple question for those of you already running configuration management tools. Are configuration management tools such as Puppet or Chef the right approach for keeping installed ...
18
votes
2answers
754 views

How can I manage hundreds of IPMI BMCs?

I have over 200 computers which can provide IPMI services. The servers are manufactured by several different companies (SuperMicro, Dell, etc.), and there are 6-7 BMC models from about 5 different ...
17
votes
3answers
22k views

puppet: force service restart after configuration file was modified

how can i ensure that if new version of configuration file is downloaded via puppet from master repository to one of managed servers relevant service is restarted. typical scenario - let's say there ...
16
votes
7answers
2k views

What are the right questions to ask when deciding whether to use Chef or Puppet?

I am about to start a new project which will, in part, require deploying many identical nodes of approximately three different classes: Data nodes, which will run sharded instances of MongoDB. ...
15
votes
4answers
4k views

Best practice for testing chef recipes?

My team has created a large number of chef cookbooks. I was wondering what methods and frameworks I should look into so we can start creating tests to assure that our nodes are configured properly?
14
votes
5answers
3k views

What's the strengths and weaknesses of existing configuration management systems? [closed]

I was looking up here for some comparisons between CFEngine, Puppet, Chef, bcfg2, AutomateIt and whatever other configuration management systems might be out there, and was very surprised I could find ...
11
votes
5answers
2k views

How do you keep up with Nagios/Capistrano configs when using EC2?

I use Amazon EC2 for my mobile app. Depending on load of the application at a given time, I might spawn new instances and then take them down when load is lower to save costs. How does one keep up ...
9
votes
2answers
715 views

Configuration Management overkill for 3 node clusters?

I have 2-3 node clusters for our load balancers and various web applications. I'm having to make the change in QA first, then in staging (on 2-3 servers), then in production (on 2-3) servers. Is a ...
9
votes
3answers
6k views

Set sysctl.conf parameters with Puppet

This was a breeze in CFEngine... But I'm in a Puppet environment now, and need to be able to assign/ensure/check certain sysctl.conf variables. In the CFEngine world, I could simply check for specific ...
8
votes
1answer
869 views

Configuration management: push versus pull based topology

The more established configuration management (CM) systems like Puppet and Chef use a pull-based approach: clients poll a centralized master periodically for updates. Some of them offer a masterless ...
7
votes
3answers
589 views

What tool can I use to manage the configuration of my Windows Server environments

I help manage environments for an application that uses cloud-based Windows server VMs. The application stack consists of Windows Server 2008 and Windows Server 2012, SQL Server 2008, IIS, and ...
7
votes
2answers
603 views

How can I use the output of a command in cfengine3

I want to list a directory content and use the result somewhere else: bundle agent test { commands: "ls /tmp/test/"; reports: ubuntu:: "print output here for example"; # ...
7
votes
2answers
356 views

Is there a recommended automated production environment setup for Microsoft stack?

We are looking at rebuilding our small production running redundant servers with IIS, .Net 4, MSSqlServer 2003 setup. The previous tri-server configuration evolved organically and has a lot of ...
7
votes
2answers
2k views

HP ProLiant system preparation/deployment techniques (Array, BIOS, firmware, etc.)

I spend a lot of my time with HP ProLiant systems and Linux installations. Due to the nature of the business I work in, I don't have the luxury of being able to deploy large numbers of identical ...
7
votes
1answer
2k views

Puppet: managing (lots of) Apache VirtualHosts

I'm learning my way through configuration management in general and using puppet to implement it in particular. I have already done some generic research (also on SF) and right now I'm considering ...
6
votes
8answers
3k views

What configuration items do you track for proper configuration management?

As a professional system administrator, what configuration items do you consider it essential to track to perform proper configuration or change management? For example, in Windows, do you track ...
6
votes
2answers
1k views

How to handle SSH port changes with Ansible?

I'm trying to use Ansible for automating the setup process of new server instances. One of the setup tasks changes the default SSH port, therefore requiring me to update the hosts list. Is it ...
6
votes
1answer
83 views

Easily recreate a server's “state” [closed]

I want the ability to setup new servers for dev/testing/prod very easily. The reasons for being able to setup a new dev VM is obvious, but for prod my concern is adding a new production ...
6
votes
1answer
554 views

Puppet package “ensure => latest” doesn't always work

I have a unique situation where the Puppet package ensure => latest directive only worked on some of my systems. Out of 30 servers, the packages updated properly on all but 4. I'm trying to get ...
5
votes
3answers
292 views

“Shutdown” in a show running configuration

When you see the word 'shutdown' in the output of a 'show running-config' command on a Cisco router... what does that exactly indicate? My basic assumption would be that it means that interface is ...
5
votes
1answer
446 views

Automatic management of SSL certificate on multiple servers…good or bad

We're using puppet to manage a group of Ubuntu boxes and will shortly require each of these servers to share a common SSL certificate, in order to serve a site over HTTPS. Naturally, we'd like to use ...
5
votes
2answers
2k views

Tips for optimizing RHEL/CentOS kickstart workflow

I'm working in an environment that consists of CentOS systems located in multiple data centers and office locations. I've been using a reasonable kickstart with a solid post-install script, but want ...
5
votes
3answers
2k views

Is there any strong, well tested and general purpose puppet recipes-base to be used as starting point for customization?

I have configured a working cobbler system that successfully handles my bare metal server deployment and I'm going to start the configuration management issues using puppet (integrating it as much as ...
5
votes
2answers
2k views

Patching with Puppet

I am new to Puppet, and I am wondering if it is an effective solution for patch/pkg management on Solaris as well as Linux. I am more interested on the Solaris side. So far am unable to locate any ...
5
votes
3answers
923 views

How to manage linux workstations with policies

I am going to be administering a small network of linux based workstations for a charity institution (not all have the same distro- some are ubuntu and some are fedora). Is there something in Linux ...
5
votes
3answers
560 views

How to manage configuration & automatic rollout of 20 virtual machines

I have a TeamCity build server, with about 20 "build agents", both Windows and MacOS machines. Often, I need to install a newer version of XCode or VisualStudio or some other tool. Having to do this ...
5
votes
2answers
6k views

How to comment out / uncomment a line in a configuration file with Augeas?

Assumming that I have the following in the /etc/syslog.conf file: # Log all kernel messages to the console. # Logging much else clutters up the screen. #kern.* /dev/console ...
5
votes
4answers
6k views

Puppet : How to override / redefine outside child class (usecase and example detailled)

The use case i try to illustrate is when to declare some item (eq mysqld service) with a default configuration that could be included on every node (class stripdown in the example, for basenode), and ...
5
votes
3answers
281 views

What configuration management solutions exist in a non-networked environment?

My servers exist in an environment without outside network connectivity (this is a requirement), so when I deploy updates all packages, binaries, config files, etc. must be included on the delivered ...
5
votes
2answers
289 views

Generating/managing config files for hosted application

Edit - I'm starting to look into Perl's Template-Toolkit. It seems to fit the bill nicely for the problem described below. Has anyone played with it? Any (detailed) advice? I asked a question about ...
5
votes
5answers
165 views

Version Controlling Foreman & Puppet

I have just setup Foreman for the first time & am not sure how to go about putting all of my configurations under version control. I know I can use Git for each module I install on my Puppet ...
4
votes
3answers
135 views

versioning system with less duplication of data

We have a homegrown config management system and we'd like to add config file versioning to it in a simple way. My first thought was svn (or similiar), but I'm concerned with creating a repo in one ...
4
votes
4answers
328 views

Configuration Deployment to Linux Systems [closed]

I'm looking for a nice way to add / remote ips (and possibly interact with an asset inventory system to track where ips are), start / stop processes, download logs, and all around genearal system ...
4
votes
3answers
686 views

Manage config files using hardlinks and subversion?

I'm considering hardlinking config files into a working copy of my SVN config repository. Is there any reason why not to manage config files this way? Assume /home/user/confmgr/confs is a working ...
4
votes
3answers
251 views

Is it an unsafe practice to symlink /etc conf files?

To manage the configuration of a server, I keep some configuration flies (located in /etc) under version control (in the home folder) and then symlink to them from their /etc locations: ...
4
votes
6answers
372 views

Site System Configuration Management — what's there to help me?

I have just started a gig and have inherited a large collection of heterogeneous UNIX systems of the following flavors all running: hpux (11.11, 11.31), aix, mpras, sun solaris (sun 8 9 10), redhat ...
4
votes
1answer
1k views

Which way is the most 'elegant' way of installing packages with Chef?

I have 3 different ways to install said package, and I prefer option #1 the most, but I wanted to see if there was a reason to use option #2 or 3 or any other options? (My goal of this question is to ...
4
votes
2answers
243 views

Managing many entries in Route53

We use Amazon Route53 as my company's primary DNS. As we grow into using multiple services from different providers, each of them requested some kind of DNS entry to verify our domain and/or use their ...
4
votes
2answers
2k views

Suggestions for making sysfs parameters persist across reboots

I'm experimenting with large changes to Linux system runtime parameters exposed through the sysfs virtual file system. What is the most efficient way to maintain these parameters so that they persist ...
4
votes
3answers
155 views

What are your recommendations on storing passwords for configuration management?

I've seen many recommendations to versionize configuration management system. How do you suggest one deals with passwords that are needed for application security? Versionize them, too?
4
votes
2answers
345 views

Server configuration automation for windows server on ec2, how much can be done?

I believe stackexchange runs on IIS and windows server. I understand windows server doesn't have anything similiar to chef/puppet, but it does have powershell and probably other things I am not aware ...