[ale] Linux configuration management (validation)?

[Vernard Martin]

On 10/14/2014 6:56 AM, Raj Wurttemberg wrote:
>
> Our Linux server environment has grown from 10 RHEL servers to over 
> 150 RHEL systems in a few short months. I need an easy way to confirm 
> that they all have the same settings (sshd, time zone, routes, 
> selinux, etc...) for security purposes.   At the moment I have a 
> simple bash script (lots of sed and awk!) that prepares a server for 
> use but I would like something that would be easier to manage and to 
> be able to turn over to someone else to manage eventually.
>
> Any suggestions?
>
> Kind regards,
>
> Raj Wurttemberg
>
> rajaw at c64.us
>
>
Configuration management to the rescue.

If you are fluent in python then I recommend either puppet or saltstack. 
Puppet will get you there faster but saltstack lets you build it all 
from scratch if that is more your way of doing things.

Chef is another system that has a big following and tons of support.

CFengine is the grandaddy of them all and uses a pull model instead of a 
push model.

And there there are the more esoteric ones such as bcfg2, etc. which 
have very specific design goals past general configuration management.

Been getting a lot of experience with saltstack lately but I have to say 
that I still prefer prefer CFengine3 overall.

V
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20141014/36643535/attachment.html>