Skip to main content
42 votes
Accepted

Is Configuration Management useable for a small number of servers?

Nope, it's not defeating the purpose. I, in fact, use Ansible to set up single servers for hobby/side-project use quite frequently. It allows me to keep a version-controlled, repeatable, self-...
ceejayoz's user avatar
  • 33.3k
10 votes

Is Configuration Management useable for a small number of servers?

I have to disagree with the current consensus. In no way can it be reasonable to learn any CM system for a pool of 2 servers, unless you simply want an excuse to learn that CM system. The amount of ...
Jim B's user avatar
  • 24.2k
10 votes
Accepted

How to split out Prometheus config files?

The Prometheus config file (and other config files in the ecosystem) explicitly do not support any form of templating. Instead this is left up to your configuration management system to handle. ...
brian-brazil's user avatar
  • 3,972
10 votes

Kubernetes, Docker and vm.max_map_count

The setting for vm.max_map_count can be changed on the host level. Your can read the current value like this: sysctl vm.max_map_count. To change it run: sudo sysctl -w vm.max_map_count=262144. This ...
webwurst's user avatar
  • 412
8 votes
Accepted

Is there any way to see the group_vars, host_vars, etc. available to a host in ansible?

Found an answer, from here. ansible all -m debug -a "var=hostvars[inventory_hostname]"
Luis F Hernandez's user avatar
8 votes

How to do a git pull/push using ansible

It should be like:- tasks: - name: pull from git git: repo: [email protected]:xyz.git dest: /root/Development/abc update: yes version: master Note: Here the ...
Souvik Haldar's user avatar
6 votes
Accepted

How do I stop my PC's `LongPathsEnabled` registry setting from being reset to zero?

If the registry key is changed, it must be done by some process or thread. I would suggest tracing the key with Process Monitor and see if you can find out what changes it. So before you can stop it ...
Turdie's user avatar
  • 2,830
5 votes

From pet to cattle: compare /etc/rsyslog.d/local.conf 100 times

Look at your old question Compare 20 files with diff, not 2. Your solution together with parts of mine will easily show you the number of files for each unique version: md5sum tmp/crontab-* | cut -d ...
Sven's user avatar
  • 100k
5 votes

Using Ansible ini_file with nested dict?

I don't know of a way to do this with ansible by default other than using your "flattened" version. Fortunately you can have the best of both worlds and write your own filter plugin for ...
Vasi Márk's user avatar
5 votes

How to do docker-compose down without the config file that made the up?

AFAIK you cannot just use docker-compose down without a corresponding docker-compose.yml. However, your idea with the tagging is not so far from reality either: When invoking docker-compose up, ...
linux-fan's user avatar
  • 336
4 votes
Accepted

ansible dynamic inventory not working properly

The ec2.py dynamic inventory uses boto to make API calls to AWS. So you might want to check if boto can connect to AWS by running: python >>> import boto >>> s3 = boto.connect_s3() ...
Henrik Pingel's user avatar
4 votes
Accepted

How to make Rudder set different config for each node?

There is several ways to do that - and you are right that building a rule for each node is not the correct one :) Depending of the more general context, follows a list of possibilities: Node ...
fanf42's user avatar
  • 251
4 votes
Accepted

Ansible: how to manage hosts if they are not always online?

if they are available for an update, it's always a hassle to determine which tweaks I still have to deploy on that machine... That is not the way to use Ansible. Your playbooks should be written in a ...
Sven's user avatar
  • 100k
3 votes
Accepted

Is there a way to manage QLogic fiber switches on Windows 10 using a GUI?

You should probably update your QLogic SANBox 5800v firmware. Check your firmware version: From the GUI, namely QuickTools: Switch Data Window > Firmware group > Firmware Version. From CLI: SANbox #&...
Esa Jokinen's user avatar
  • 51.7k
3 votes
Accepted

How to upgrade all nodes packages with Rudder

I think the best way to achieve this is to create a technique with the technique editor and with a "command execution result" with "/usr/bin/apt-get update && /usr/bin/apt-get upgrade -y" with ...
Vincent Membré's user avatar
3 votes

Ansible: how to manage hosts if they are not always online?

This might be a good use-case for ansible-pull. Hosts which are not permanent online could be configured to run ansible-pull when connected to the office network. However that doesn't change the need ...
Henrik Pingel's user avatar
2 votes

Ansible/Capistrano with fixed sudo command ("sudo su -")

Change privilage escalation in ansible.cfg: [privilege_escalation] become_exe='sudo su -' Documentation here
Josh Zhang's user avatar
  • 169
2 votes

Configuration Manager (SCCM) Clients not updating their status

To build on Mark's answer, you can this: Invoke-Command -ComputerName $ComputerName -AsJob {(New-Object -ComObject Microsoft.CCM.UpdatesStore).RefreshServerComplianceState()}
CircaLucid's user avatar
2 votes

Configuration management: push versus pull based topology

This is an old post, but interestingly enough history repeats itself. Now embedded IoT devices need configuration management and the infrastructure / network topology seems to be even more complex ...
Carsten's user avatar
  • 21
2 votes
Accepted

Salt top.sls does not update on `salt-run fileserver.update` with gitfs

The reason for the error is that salt considers all branches, then merges all (!) branches to compile the final top.sls. I had an old branch which was a couple commits behind master, and so still ...
Groomblecom's user avatar
2 votes

Nginx service is running successfully but returns apache default page?

Its because nginx may have same DocumentRoot as apache and It's index.html is still in /var/www/html. I had the same problem.
kyle's user avatar
  • 21
2 votes

Unable to locate switch on network

Alternatively: The 2530 series have a USB console port - connect a terminal, log in and run show ip. On a computer connected directly to the switch, run a packet capture and look for LLDP packets. ...
Zac67's user avatar
  • 13.2k
2 votes
Accepted

Pushing my configuration files to VMs. What’s a good tool to bring this under source control?

Use Ansible for pushing out to many servers. It's agentless, you only need sshd and python. Any system besides RHEL5 basically works out of the box. Make your top Ansible directory (/etc/ansible) a ...
kubanczyk's user avatar
  • 14.2k
2 votes
Accepted

Microsoft Intune conflict resolution

It depends on which policy types you are referring to. In regards to Device Compliance polices, they always win vs Configuration policies and the most restrictive setting wins. In regards to ...
Ralms's user avatar
  • 196
2 votes
Accepted

AWS auto-scale shared Wordpress web server - AMI vs user scripts

I'm planning to use EFS to share all Wordpress files and likely Redis for shared session management, however this is not the topic of this question. Hmm, that's a pity. I was just about to suggest ...
MLu's user avatar
  • 26k
2 votes

Rudder plugins compilation

Compiling plugins on a machine without an internet connection, espicially without some fluency with maven build tool and local repository, can be hard. Maven is doing a lot of verification/download, ...
fanf42's user avatar
  • 251
2 votes

How to fingerprint (euclidian distance) a filesystem on linux?

You want to describe the ancestry of hundreds of disk images, identify arbitrary fuzzy changes, and are bandwidth limited? Tricky. Previously on Server Fault, comparison of disk images brought up cmp ...
John Mahowald's user avatar
2 votes

Set sysfs network option before interface is up

You can try setting echo Y > /sys/class/net/wwan0/qmi/raw_ip inside your rc.local. A more convenient solution is to add the above line to the qmi shell script and finally call this during your ...
Berazu's user avatar
  • 21
2 votes

dividing line between developer and sysadmin for server patch management

Should my developers be doing OS patching for security purposes? No. This should be handed off to sysadmins. Separation of concerns. Should the IT/Sec team be doing scans and notifying the ...
Greg Askew's user avatar
  • 38.2k
2 votes

Using Configuration management tools to synchronize large files

A configuration management tool is in the wrong category for this kind of task. While all/most tools in that domain will be able to manage file synchronization it is not worth the effort to implement ...
Henrik Pingel's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible