Questions tagged [configuration-management]

Configuration Management refers to establishing and maintaining standardized system configurations within an organization. This tag encompasses the process of defining the configuration profiles, and the software used to manage and deploy it.

58 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
2answers
353 views

How can I provide services to an internal air-gapped extranet

Background - "Extranet" We have about a dozen users that are on what I would call an Extranet. It is an air-gapped LAN that is physically in the same location as our primary LAN. We share ...
4
votes
1answer
5k views

SCCM Report: Update Compliance per Device in a collection

I'm trying my hand at building a custom SCCM report and could use some help from those who have more experience with the database structure than I do. What I would like is to list: Device Collection ...
3
votes
1answer
46 views

Best deployment and configuration tool for servers with limited internet connection

I am looking for the best available option for a Linux server deployment and configuration management. Unfortunately this is not a typical scenario with servers placed in a data center. Instead we ...
3
votes
1answer
95 views

IT helpdesk - remote management of user profiles

I have a question. I wonder what is the best approach for managing user profile enviroment on their computers? For example if there is an task for administrator to solve a problem on users profile on ...
3
votes
0answers
1k views

Why is my IIS configuration changing?

We host a customer site (the hardware is at a third party data center, but we administer the software). On several different occasions, the customer has reported a problem with the site, and when I ...
3
votes
1answer
343 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
3
votes
0answers
1k views

Using conrep - Capturing and duplicating the BIOS settings

I got an HP ProLiant DL160SE G6, I need to capture the entire BIOS settings of one server and duplicate them to same model servers. This will save us lots of time and eliminate human errors. I ...
2
votes
1answer
656 views

How to do docker-compose down without the config file that made the up?

When you do docker-compose up, it's based on a docker-compose.yml file. This usually brings up a network, builds and runs multiple services. If you do the up with the -d flag, the docker-compose ...
2
votes
0answers
46 views

How to specify chef-client settings on bootstrap?

I'm trying to bootstrap nodes via knife. Executing: knife bootstrap user@server-1 -P XXX --sudo -N java-server-1 I found a bunch of properties in client.rb on the node side that I would like to ...
2
votes
1answer
103 views

How to secure configuration management server

There are many configuration management software options nowadays (Chef, Puppet, CFEngine, Ansible...) which offer an architecture with their repository on a central server and clients communicating ...
2
votes
0answers
650 views

Problems with a script uninstall (SCCM 2012) and its causing the detection method to fail

We use the Powershell Application Deployment Toolkit for deploying applications in SCCM. I'm currently working on uninstalling Sophos VPN from machines in a certain collection in our environment. ...
2
votes
0answers
160 views

Is there a way to change the cfengine policy server IP without re-bootstrapping all the clients?

We need to change the IP address of our cfengine policy server. It will be the same machine, and nothing else will change, it's just going to have a different ip. Is there some way to avoid re-...
2
votes
1answer
1k views

Ansible/Capistrano with fixed sudo command (“sudo su -”)

I have to administer some half-managed servers (monstly CentOS 6), where we are only allowed to login as a regular user, then do "sudo su -" and type the regular user password, and then run the ...
2
votes
0answers
99 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
1
vote
1answer
18 views

CouchDB deleted database shards

Currently running clustered CouchDB v3.1.1 on an AWS EC2 Instance q=2 n=3 Number of Nodes: 1 I have moved the database directory to another drive on my VM. But can't find any on the documents ...
1
vote
0answers
22 views

How to handle and avoid unmanaged system state with configuration management?

When managing the state of a server using a configuration management tool (e.g. salt, puppet, ansible), one can quite easily develop 'unmanaged' state through application of successive versions of the ...
1
vote
2answers
245 views

Breaking down one prometheus.yml file?

I am using Prometheus for our monitoring and I have a lot of configs (our prometheus.yml main config file is 8000+ lines long). I would like to divide this out into logical groupings so that it ...
1
vote
1answer
260 views

System Center Configuration Manager using 'Run Script' feature on devices with AllSigned Execution Policy

We have System Center Configuration Manager version 1902 managing our devices. I would like to use the nice feature "Run Script", which runs PowerShell scripts on an entire collection of devices, but ...
1
vote
0answers
117 views

Can't find jetty config file on Fedora 28

I installed jetty8 on fedora 28, but I do not know where is the configuration file for the server. In Ubuntu the jetty8 configuration file is /etc/default/jetty8. To install jetty I've used: dnf ...
1
vote
2answers
820 views

Ansible ini_file module does not create sections when no options specified

I use Ansible to build configuration files in ini format. When I use the ini_file module with option and value pair it works as expected, for example: - name: Create configuration file ini_file: ...
1
vote
0answers
2k views

Nginx service is running successfully but returns apache default page?

i installed nginx on server(ubuntu 16.04) which already had apache2 and, done this following configuration, ->changed apache port 80 to 8888 so nginx would listen to 80 ->restarted apache and ...
1
vote
0answers
651 views

How do I keep 6 Hyper-V machines in sync?

Our build server setup looks like this: 6 x Windows Server 2012 R2, physical machines, each running: one Hyper-V Windows 7 VM each basically using all the resources of the host When we need to add ...
1
vote
1answer
39 views

Configure management tool to auto-configure by reading config file

The use-case is as given below: The user has a Flat File in his Linux system. This file is a human readable/editable file which contains the configurations for all the needed components of his ...
1
vote
0answers
111 views

How can I WSUS and AV update and manage compliance reporting on air-gapped Windows boxen?

A.k.a "WSUS via Sneakernet?" (Similar question asked in 2013 here, but some key differences and no strong answers to that one.) Most of my environment consists of AD-joined Windows 7 workstations; I'...
1
vote
1answer
93 views

Bacula configuration management in git, without passwords

I'd like to to use git to start managing our Bacula configuration files, but want to keep out (or mask) the passwords in these files. I've considered: looked for a setting within Bacula that allows ...
1
vote
0answers
284 views

Using Management classes with cobbler

So, I've been working on creating a standardized install image, and worked out all the kinks, now I need to deliver it. What I decided to do is to use cobbler to create templated kickstart installs, ...
1
vote
0answers
531 views

SCCM 2012 R2: Email / Alert on component status errors

I know that as of SCCM SP1 we are now able to monitor and alert on a few more things in SCCM. We can now alert if there are problems with not only AV / malware alerts but also client and database ...
1
vote
0answers
608 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
1
vote
1answer
164 views

Create Mobile Device Management Server for iPhone Management on Windows Server

I need to create Mobile Device Management server to manage my enterprise's iPhone devices. I need to configuration it on Windows 2008 server. What are the steps to configure Mobile Device Management ...
0
votes
1answer
42 views

Back up arbitrary config files on linux servers in RANCID

I use RANCID to back up router and switch configurations. I'd also like to be able to have it take automatic backups of configuration files on my servers so I can easily see when changes occur and if ...
0
votes
0answers
33 views

Which Type to use for creating Storage Transfer jobs via Deployment Manager

I'm trying to create and manage a TransferJob for Google Storage Transfer service via Google Deployment Manager. The aim is to copy objects from one Cloud Storage bucket to another daily. Since I can'...
0
votes
0answers
639 views

ansible set static IP centos 7

I am new to ansible and I am trying to execute a very simple playbook : assign a static IP address to a centos7 machine I just cloned in Virtualbox. I am starting from scratch as I surprisingly haven'...
0
votes
0answers
45 views

Preventative config settings to ensure long-running PHP scripts don’t create hanging MySQL transactions and failure

I’d like to know if there is a PHP/MySQL configuration option (or combination of options) that can prevent long-running PHP scripts in a small number of places from creating hanging and sleeping MySQL ...
0
votes
1answer
776 views

Can't Access CIMC

I have a Cisco UCS C220 M3, and it has the Flash/Java-based CIMC interface. When getting Flash, the only versions are for Chromium-based browsers and Mozilla-based browsers. However, neither of those ...
0
votes
1answer
123 views

Salt Pillar: How to use different values for prod / dev?

I'm not sure if I am thinking about this the right way, but here is my Problem: I want to use the same Salt state and pillar configuration for production, development and test servers. The only ...
0
votes
2answers
2k views

Configuring a PHP Web Service Container at Build Time

I am building a PHP Web Service Container Prototype. The first and simplest way was to create a Container with the official Image published by WordPress with a simple Dockerfile like: FROM wordpress:...
0
votes
0answers
29 views

Consul handling dynamic IP address

If suppose I have a node-exporter for my project running on aws instance its IP:port is:- "10.0.0.1:9100". I used the agent service register to add it to the consul. Then used consul_sd to ...
0
votes
1answer
115 views

Set sysfs network option before interface is up

I want to set /sys/class/net/wwan0/qmi/raw_ip, and I don't want to do it by writing a shell script to take wwan0 down set it, then put wwan0 back up as a systemd unit. I'm trying this on Raspbian ...
0
votes
0answers
360 views

ansible Dynamic inventory Hosts value does not accept list of hosts

I am trying to create dynamic inventory for my setup. everywhere i see examples of IPs and hostname as list. but when i provide hosts value as list it error's out and says it has to be dict. Below ...
0
votes
0answers
143 views

Any downside to using `sudo git` to upload `/etc/nginx/sites-available/` and `/etc/nginx/ssl/` config files on github?

I'm contemplating uploading config files from /etc/nginx/sites-available/ and /etc/nginx/ssl to a private Github repository. Doing so would require me to use git with sudo (or from root user) for the ...
0
votes
1answer
33 views

Best practice for production server configuration changes?

Changing the configuration of a production server is dangerous. A safety measure might involve taking a full system image snapshot prior to the change, changing the configuration and then, in the ...
0
votes
1answer
49 views

How to edit .conf files from a script

On a new VPS I might want to ensure that certain config values are set, or amended if they already exist. For example in /etc/systemd/journald.conf I want to set SystemMaxUse=100M if it's not already ...
0
votes
1answer
121 views

Ansible cloud stack module nested loop for security groups and ports

I'm trying to set multiple security groups at once using the ansible cloud stack module. The yaml file currently looks like this: - name: add inbound tcp rules to security group web ...
0
votes
1answer
27 views

rudder / plugin datasources

After having successfully compiled, installed and tested the rudder data sources plugin, I deleted some datasources values in datasources plugin, but they are still present into node properties, is it ...
0
votes
0answers
27 views

How do you keep track of how a certain software installation impacts your system?

I would like to get some advice on how you approach a new software installation on Windows to be able to extract the impact that software makes on your system and attack surface. I need to know what ...
0
votes
0answers
38 views

Best way to keep the list of servers, OSs, Databases and so on

I have a Microsoft Visio file in which I list the list of sever my organization has, but not only that, also wich OS they have, Databases, and so on. The problem with the Visio file is that is ...
0
votes
1answer
2k views

ANSIBLE set tags per item in with_items loop

I have this playbook to create ec2 instances and will like to target each ec2 creation by tags but not working...when i run playbook i do not get any errors but notting gets created. --- - name: ...
0
votes
1answer
491 views

Environment specific configuration in puppet

I have a custom puppet module for setting up Apache web server and I use templates to copy the configurations. We have different environments like production, Quality Assurance, Integration testing. ...
0
votes
0answers
801 views

configuration mistake on direct zone in bind9 on ubuntu 16.04.2 LTS

I am trying to configure a server with bind9 on ubuntu 16.4.2 LTS. I configured the DNS direct zone like this: ; ; BIND data file for local loopback interface ; $TTL 604800 @ IN SOA ...
0
votes
1answer
273 views

Solaris Nags About “process.max-stack-size” while running “Java Processes”

I have a server running Solaris 10. It reports using 10% of total memory using prstat. I 've ran process using Java 1.7.0_80 in 64-bit mode. The problem is that System always nags about process.max-...