42
votes
Accepted
Is Configuration Management useable for a small number of servers?
Nope, it's not defeating the purpose. I, in fact, use Ansible to set up single servers for hobby/side-project use quite frequently. It allows me to keep a version-controlled, repeatable, self-...
10
votes
Is Configuration Management useable for a small number of servers?
I have to disagree with the current consensus. In no way can it be reasonable to learn any CM system for a pool of 2 servers, unless you simply want an excuse to learn that CM system. The amount of ...
10
votes
Accepted
How to split out Prometheus config files?
The Prometheus config file (and other config files in the ecosystem) explicitly do not support any form of templating. Instead this is left up to your configuration management system to handle.
...
10
votes
Kubernetes, Docker and vm.max_map_count
The setting for vm.max_map_count can be changed on the host level. Your can read the current value like this: sysctl vm.max_map_count. To change it run: sudo sysctl -w vm.max_map_count=262144. This ...
8
votes
Accepted
Is there any way to see the group_vars, host_vars, etc. available to a host in ansible?
Found an answer, from here.
ansible all -m debug -a "var=hostvars[inventory_hostname]"
8
votes
How to do a git pull/push using ansible
It should be like:-
tasks:
- name: pull from git
git:
repo: [email protected]:xyz.git
dest: /root/Development/abc
update: yes
version: master
Note: Here the ...
6
votes
Accepted
How do I stop my PC's `LongPathsEnabled` registry setting from being reset to zero?
If the registry key is changed, it must be done by some process or thread. I would suggest tracing the key with Process Monitor and see if you can find out what changes it. So before you can stop it ...
5
votes
From pet to cattle: compare /etc/rsyslog.d/local.conf 100 times
Look at your old question Compare 20 files with diff, not 2. Your solution together with parts of mine will easily show you the number of files for each unique version:
md5sum tmp/crontab-* | cut -d ...
5
votes
Using Ansible ini_file with nested dict?
I don't know of a way to do this with ansible by default other than using your "flattened" version. Fortunately you can have the best of both worlds and write your own filter plugin for ...
5
votes
How to do docker-compose down without the config file that made the up?
AFAIK you cannot just use docker-compose down without a corresponding docker-compose.yml.
However, your idea with the tagging is not so far from reality either: When invoking docker-compose up, ...
4
votes
Accepted
ansible dynamic inventory not working properly
The ec2.py dynamic inventory uses boto to make API calls to AWS.
So you might want to check if boto can connect to AWS by running:
python
>>> import boto
>>> s3 = boto.connect_s3()
...
4
votes
Accepted
How to make Rudder set different config for each node?
There is several ways to do that - and you are right that building a rule for each node is not the correct one :)
Depending of the more general context, follows a list of possibilities:
Node ...
4
votes
Accepted
Ansible: how to manage hosts if they are not always online?
if they are available for an update, it's always a hassle to determine which tweaks I still have to deploy on that machine...
That is not the way to use Ansible. Your playbooks should be written in a ...
3
votes
Accepted
Is there a way to manage QLogic fiber switches on Windows 10 using a GUI?
You should probably update your QLogic SANBox 5800v firmware. Check your firmware version:
From the GUI, namely QuickTools: Switch Data Window > Firmware group > Firmware Version.
From CLI: SANbox #&...
3
votes
Accepted
How to upgrade all nodes packages with Rudder
I think the best way to achieve this is to create a technique with the technique editor and with a "command execution result" with "/usr/bin/apt-get update && /usr/bin/apt-get upgrade -y" with ...
3
votes
Ansible: how to manage hosts if they are not always online?
This might be a good use-case for ansible-pull. Hosts which are not permanent online could be configured to run ansible-pull when connected to the office network.
However that doesn't change the need ...
2
votes
Ansible/Capistrano with fixed sudo command ("sudo su -")
Change privilage escalation in ansible.cfg:
[privilege_escalation]
become_exe='sudo su -'
Documentation here
2
votes
Configuration Manager (SCCM) Clients not updating their status
To build on Mark's answer, you can this:
Invoke-Command -ComputerName $ComputerName -AsJob {(New-Object -ComObject Microsoft.CCM.UpdatesStore).RefreshServerComplianceState()}
2
votes
Configuration management: push versus pull based topology
This is an old post, but interestingly enough history repeats itself.
Now embedded IoT devices need configuration management and the infrastructure / network topology seems to be even more complex ...
2
votes
Accepted
Salt top.sls does not update on `salt-run fileserver.update` with gitfs
The reason for the error is that salt considers all branches, then merges all (!) branches to compile the final top.sls. I had an old branch which was a couple commits behind master, and so still ...
2
votes
Nginx service is running successfully but returns apache default page?
Its because nginx may have same DocumentRoot as apache and It's index.html is still in /var/www/html. I had the same problem.
2
votes
Unable to locate switch on network
Alternatively:
The 2530 series have a USB console port - connect a terminal, log in and run show ip.
On a computer connected directly to the switch, run a packet capture and look for LLDP packets. ...
2
votes
Accepted
Pushing my configuration files to VMs. What’s a good tool to bring this under source control?
Use Ansible for pushing out to many servers. It's agentless, you only need sshd and python. Any system besides RHEL5 basically works out of the box.
Make your top Ansible directory (/etc/ansible) a ...
2
votes
Accepted
Microsoft Intune conflict resolution
It depends on which policy types you are referring to.
In regards to Device Compliance polices, they always win vs Configuration policies and the most restrictive setting wins.
In regards to ...
2
votes
Accepted
AWS auto-scale shared Wordpress web server - AMI vs user scripts
I'm planning to use EFS to share all Wordpress files and likely Redis
for shared session management, however this is not the topic of this question.
Hmm, that's a pity. I was just about to suggest ...
2
votes
Rudder plugins compilation
Compiling plugins on a machine without an internet connection, espicially without some fluency with maven build tool and local repository, can be hard. Maven is doing a lot of verification/download, ...
2
votes
How to fingerprint (euclidian distance) a filesystem on linux?
You want to describe the ancestry of hundreds of disk images, identify arbitrary fuzzy changes, and are bandwidth limited? Tricky.
Previously on Server Fault, comparison of disk images brought up cmp ...
2
votes
Set sysfs network option before interface is up
You can try setting echo Y > /sys/class/net/wwan0/qmi/raw_ip inside your rc.local.
A more convenient solution is to add the above line to the qmi shell script and finally call this during your ...
2
votes
dividing line between developer and sysadmin for server patch management
Should my developers be doing OS patching for security purposes?
No. This should be handed off to sysadmins. Separation of concerns.
Should the IT/Sec team be doing scans and notifying the ...
2
votes
Using Configuration management tools to synchronize large files
A configuration management tool is in the wrong category for this kind of task.
While all/most tools in that domain will be able to manage file synchronization it is not worth the effort to implement ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
configuration-management × 383puppet × 81
linux × 53
configuration × 46
ansible × 44
chef × 33
windows × 21
saltstack × 17
sccm × 16
deployment × 15
ubuntu × 13
git × 13
amazon-web-services × 12
automation × 12
cfengine × 11
rudder × 10
system-center × 8
nginx × 7
ssh × 7
amazon-ec2 × 7
apache-2.2 × 6
networking × 6
debian × 6
security × 6
windows-7 × 6