2,477 reputation
613
bio website
location
age
visits member for 5 years, 1 month
seen yesterday

Sys Admin, DevOps etc in San Francisco Bay Area


Feb
27
comment unable to set up an instance on GCE with foreman
You will have more luck in the #thforeman channel on Freenode.
Sep
18
comment Puppet Enterprise vs. Open Source
Your first paragraphs link clearly states that the "support" for AD/LDAP is for allowing LDAP users to login to the web interface, and not for managing users in AD/LDAP. Quote: "Now, users of Puppet Enterprise can be managed and authenticated leveraging their existing authentication solution. - " You other paragraphs and links are accurate.
Jul
25
comment Solaris as a server OS - why?
@unixhacker2010 There are reasons why Solaris 11 has not had traction since release. The biggest being Oracle. This discussion is about reasons why one should use Solaris. I think any relation to Oracle is by default a reason not to use it. One might have better luck with Illumos: wiki.illumos.org/display/illumos/illumos+Home
May
17
comment Is Puppet or Chef suitable for managing very basic server config in a multi tenant environment?
Well, yes, Puppet can make multiple backups too. But how would you know which backup to restore? You would have to write some Chef/Puppet code, or external script to actually perform that action? What about non-file resources like reverting to a previous package with a specific version? What about services? If you had code that said "ensure running", and wanted to change it, you would have to change the code to "ensure stopped".
Apr
10
comment installing Nagios 3.5.0 on CentOS 6
You should add the Epel yum repo and install nagios like shown here: sharadchhetri.com/2012/08/05/installing-nagios-3-4-centos-6-3
Feb
8
comment Best way to get list of nodes inside of Puppet template
Cool. I lean towards Hiera these days, but YMMV. Also exported resources were a little slow, for large number of hosts. This has probably changed, but if you have many hosts (few hundred+) then you may want to investigate.
Dec
9
comment How to revert a configuration with puppet
@daff indeed. Edited my answer.
Dec
1
comment vagrant and puppet security for ssl certificates
@platforms Doesn't Chef push all available recipes to the client, regardless of weather the client actually uses all recipes or not? Doesn't this make it less secure?
Nov
30
comment vagrant and puppet security for ssl certificates
I am not sure I understand your question completely. But it seems you use one puppet server for both Dev and Prod? Why not use separate, network isolated servers for Prod and Dev? The Dev server can have the same puppet manifest code(perhaps rsyned or git'ed over), but the certs will be signed by a completely different CA. Also, there are few ways to mitigate, but not completely avoid the autosign problem. theforeman.org for example can insert a single hostname in autosign.conf when you provision, and remove it when the cert is signed. This reduces the window which an attacker can use.
Nov
30
comment puppet agent doesn't retrieve files from master
You don't have any classes defined? I'm not sure this works. What are the client side contents of /var/lib/puppet/state/classes.txt /var/lib/puppet/state/resources.txt ? I would suggest just having one line like node default { include myclass } Use puppet module generate myclass to create the class directory structure. Then move the file section in the init.pp file which the generate command just created. Alternatively, you can have one line in the node section like above, but create the class inside site.pp, like shown here: debian-administration.org/articles/526
Nov
27
comment How to update an EBS AMI's snapshot?
@AnApprentice What I meant by my comment was, that you don't have to update an existing ami+ebs, even if it were possible. If all you do is run nginx+rails, you can simply create a new ami with your new settings, or use a Cfg management tool to apply the new settings. Since you use rails, I imagined you might be familiar with Ruby and hence suggested a gem. There are multiple options to achieve your end goal, which seems to be updating Nginx for a Rails app.
Oct
2
comment How do I automate OS installation on 500+ machines?
@Igor Both can do DNS, DHCP, PXE and Kickstart. Foreman also has deeper integration with Puppet. It can show puppet reports, let you assign 'Roles' and act as a 'External Node Classifier' for puppet. In a diverse Network, both tools take some effort to install and properly configure. But after that, some may find Foreman easier to use. If you use puppet, there are many benefits, and you may not need to keep re-imaging all servers. If you don't use puppet, there is not much advantage either way, as both are great tools.
Sep
29
comment Simple Windows+Linux server provisioning? Chef/Puppet/Ansible etc
You might want to research Foreman(theforeman.org) if you want to go the puppet route. It answers most of your questions, but you will need to spend a few days getting things to work.
Sep
12
comment In a large Linux only network how would you handle Authentication and User management?
@ItsGC It is Redhat only on the IPA/Ldap server side.
Sep
12
comment In a large Linux only network how would you handle Authentication and User management?
I think you're saying Ubuntu FreeIPA server would be hard work? Setting up a Ubuntu client should not be as difficult.
Aug
17
comment Logs reporting in a human way
Heres a nice blog post with a Logstash+Graylog2 architecture diagram: jpmens.net/2012/08/06/my-logstash-and-graylog2-notes
Aug
13
comment Store Cron Jobs into a database
@eldblz Like MDMarra says, if you want to store jobs in a database, then it is not a "native cron" system. Many job schedulers can use mysql to store jobs.
Aug
13
comment Store Cron Jobs into a database
Your solution probably lies with a "Job Scheduler". There are several commercial and open source solutions, for example this one: sourceforge.net/projects/phpjobscheduler and this sos-berlin.com/modules/cjaycontent/…
May
11
comment How do you approach centralised patch management for Linux?
@leftcase All pulp does is install an agent which can add/modify yum config files. I've used it on CentOS and RHEL, and I'm sure Oracle linux will work the same. Additionally, the agent reports activities back to a central server, and polls the server for package related commands to execute.
Mar
28
comment CentOS 6 - YUM Local Repo - Ensure consistent package distribution
Ideally, you should also manage the yum repo configs on the servers with puppet or chef.