Sponsored Content
The Lounge What is on Your Mind? Proper configuration management Post 302966623 by solaris_user on Sunday 14th of February 2016 06:02:00 PM
Old 02-14-2016
Proper configuration management

Recently i started to work in new company. I will replace old admin who is going into retirement and he has been showing me his procedures for server, database and network administration.

From first point of view: there is absolutely no configuration management involved how they deploy software or patches. Yes there is test, development and production systems but I think this is not enough.

For example: I need to make a change. Log into production server, do what do you need to do and log out. Every admin has root access and so on.

My ex. employer had a strict policy how to apply changes in production environment. Every change involved creating system package (RPM, SYSVR4 or IPS), push that package into repository. From there I installed package to test server and if everything was good package would be installed into production. No admin could ever log into production environment.

I know there are tool like Puppet and Chef where I can specify a recipe what to do but I never used them for any serious work.

So my questions are:

1. Is it good to have only three environments (test, development, production) and no other configuration policy in medium-size enterprise?
2. Is it better to stick with ex. employer policy to bring all changes as system packages or is better to learn some tool like Chef?
3. How do you perform configuration management?
 

7 More Discussions You Might Find Interesting

1. Post Here to Contact Site Administrators and Moderators

Proper Forum Etiquette

I'm a frequent visitor to these forums. I generally enjoy topics that are posted as well as the responses. I really pickup a lot of new things to learn. However, there is one thing that does bother me here. (I dont mean to start a flame war, or any problems at all, just expressing some... (8 Replies)
Discussion started by: tarballed
8 Replies

2. UNIX for Dummies Questions & Answers

Configuration management tool in SCO UNIXWARE 7.1.3

Hi all, :confused: I want to know about the configuration management tool that is used in SCO UNIXWARE 7.1.3. Please refer some sites where i could get the details. Thanks in advance kavitha (2 Replies)
Discussion started by: kavithadass
2 Replies

3. What is on Your Mind?

Configuration Management

Not sure where to post this so I placed it here. Anyone have any experience with cccHarvest 5.1 or AllFusion Harvest Change Manager 5.1? I have to put together a plan to move from PVCS to Harvest/AllFusion and I dont know much at all about the latter. Any help, information, or links would be... (3 Replies)
Discussion started by: google
3 Replies

4. IP Networking

Proper routing

I have a series of new machines that are internet facing (have IP's that are accessible via the 'net) and it has internal facing interfaces. I need to be able to communicate back to the internal network to a specific server which processes monitoring and e-mail traffic. I've been told that I should... (3 Replies)
Discussion started by: BOFH
3 Replies

5. UNIX for Dummies Questions & Answers

Proper use of prune...

My goal was to find any directories inside of any directory called "09_Client Original" not modified in the last 30 days. $ find /Volumes/Jobs_Volume/ -type d -name "09_Client Original" -exec find {} -mtime +30 -type d -maxdepth 1 \; The results of this find are passed along in a perl script... (1 Reply)
Discussion started by: guriboy
1 Replies

6. UNIX for Dummies Questions & Answers

Proper syntax

I'm new to Unix, and just had a quick question. I'm writing a bash script, and I was wondering what proper programming etiquette was for piping. How many pipes is too many pipes? OLDEST=$(find . -maxdepth 1 -type d -newermt 2012-07-01 ! -newermt 2012-07-30 | xargs ls -1td | tail -2) echo... (1 Reply)
Discussion started by: jrymer
1 Replies

7. What is on Your Mind?

Individual Risk Management (Personal IT Security) and Browser Cache Management

Original post from this thread on browser caching. To add to this, it is an effective security measure to clear absolutely all cached data (cookies, web content, ....) when closing the browser - i.e. in case of a shutdown. It takes a bit of work to re-login to all the sites but websites will not... (7 Replies)
Discussion started by: bakunin
7 Replies
KNIFE-ENVIRONMENT(1)						    Chef Manual 					      KNIFE-ENVIRONMENT(1)

NAME
knife-environment - Define cookbook policies for the environments in your infrastructure SYNOPSIS
knife environment sub-command (options) SUBCOMMANDS
Environment subcommands follow a basic create, read, update, delete (CRUD) pattern. The following subcommands are available: CREATE
knife environment create environment (options) -d, --description DESCRIPTION The value of the description field. Create a new environment object on the Chef Server. The envrionment will be opened in the text editor for editing prior to creation if the -n option is not present. DELETE
knife environment delete environment (options) Destroy an environment on the Chef Server. A prompt for confirmation will be displayed if the -y options is not given. EDIT
knife environment edit environment (options) Fetch environment and display it in the text editor for editing. The environment will be saved to the Chef Server when the editing session exits. FROM FILE
knife environment from file file (options) Create or update an environment from the JSON or Ruby format file. See format for the proper format of this file. LIST
knife environment list (options) * -w, --with-uri: Show the resource URI for each environment SHOW
knife environment show environment (options) DESCRIPTION
Environments provide a means to apply policies to hosts in your infrastructure based on business function. For example, you may have a sep- arate copy of your infrastructure called "dev" that runs the latest version of your application and should use the newest versions of your cookbooks when configuring systems, and a production instance of your infrastructure where you wish to update code and cookbooks in a more controlled fashion. In Chef, this function is implemented with environments. Environments contain two major components: a set of cookbook version constraints and environment attributes. SYNTAX
A cookbook version constraint is comprised of a cookbook name and a version constraint. The cookbook name is the name of a cookbook in your system, and the version constraint is a String describing the version(s) of that cookbook allowed in the environment. Only one version con- straint is supported for a given cookbook name. The exact syntax used to define a cookbook version constraint varies depending on whether you use the JSON format or the Ruby format. In the JSON format, the cookbook version constraints for an environment are represented as a single JSON object, like this: {"apache2": ">= 1.5.0"} In the Ruby format, the cookbook version contraints for an environment are represented as a Ruby Hash, like this: {"apache2" => ">= 1.5.0"} A version number is a String comprised of two or three digits separated by a dot (.) character, or in other words, strings of the form "major.minor" or "major.minor.patch". "1.2" and "1.2.3" are examples of valid version numbers. Version numbers containing more than three digits or alphabetic characters are not supported. A version constraint String is composed of an operator and a version number. The following operators are available: = VERSION Equality. Only the exact version specified may be used. > VERSION Greater than. Only versions greater than VERSION may be used. >= VERSION Greater than or equal to. Only versions equal to VERSION or greater may be used. < VERSION Less than. Only versions less than VERSION may be used. <= VERSION Less than or equal to. Only versions lesser or equal to VERSION may be used. ~> VERSION Pessimistic greater than. Depending on the number of components in the given VERSION, the constraint will be optimistic about future minor or patch revisions only. For example, ~> 1.1 will match any version less than 2.0 and greater than or equal to 1.1.0, whereas ~> 2.0.5 will match any version less than 2.1.0 and greater than or equal to 2.0.5. FORMAT
The JSON format of an envioronment is as follows: { "name": "dev", "description": "The development environment", "cookbook_versions": { "couchdb": "= 11.0.0" }, "json_class": "Chef::Environment", "chef_type": "environment", "default_attributes": { "apache2": { "listen_ports": [ "80", "443" ] } }, "override_attributes": { "aws_s3_bucket": "production" } } The Ruby format of an environment is as follows: name "dev" description "The development environment" cookbook_versions "couchdb" => "= 11.0.0" default_attributes "apache2" => { "listen_ports" => [ "80", "443" ] } override_attributes "aws_s3_bucket" => "production" SEE ALSO
knife-node(1) knife-cookbook(1) knife-role(1) http://wiki.opscode.com/display/chef/Environments http://wiki.opscode.com/display/chef/Ver- sion+Constraints AUTHOR
Chef was written by Adam Jacob adam@opscode.com with many contributions from the community. DOCUMENTATION
This manual page was written by Daniel DeLeo dan@opscode.com. Permission is granted to copy, distribute and / or modify this document under the terms of the Apache 2.0 License. CHEF
Knife is distributed with Chef. http://wiki.opscode.com/display/chef/Home Chef 10.12.0 June 2012 KNIFE-ENVIRONMENT(1)
All times are GMT -4. The time now is 06:14 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy