Unix/Linux Go Back    


UNIX and Linux Applications Discuss UNIX and Linux software applications. This includes SQL, Databases, Middleware, MOM, SOA, EDA, CEP, BI, BPM and similar topics.

Cfengine or puppet?

UNIX and Linux Applications


Closed    
 
Thread Tools Search this Thread Display Modes
    #1  
Old Unix and Linux 11-03-2013   -   Original Discussion by theace18
theace18's Unix or Linux Image
theace18 theace18 is offline
Registered User
 
Join Date: May 2013
Last Activity: 6 November 2013, 6:05 PM EST
Posts: 2
Thanks: 3
Thanked 0 Times in 0 Posts
Cfengine or puppet?

I'm looking to deploy a configuration management system at my company and was wondering which config management was better: cfengine or Puppet? Pros/Cons? I'm looking to deploy the free version of each.

Any advice would be greatly appreciated. Thanks.
Sponsored Links
    #2  
Old Unix and Linux 11-03-2013   -   Original Discussion by theace18
theboogymaster's Unix or Linux Image
theboogymaster theboogymaster is offline
Registered User
 
Join Date: Sep 2009
Last Activity: 21 September 2017, 12:05 PM EDT
Posts: 56
Thanks: 7
Thanked 7 Times in 7 Posts
I used cfengine for 2 years. After switching to puppet I relised that I'll not chage it ever for something else

Puppet has a realy great community and support. So you'll find mode help about puppet or patches if needed than cfengine. This is my opinion. I know there are people out there how think cfengine is better, and if cfengine works well for them thats fine for me. But cfengine in my opinion does't have a bright future as puppet.

So my advice is to go with puppet.

Last edited by theboogymaster; 11-03-2013 at 12:53 PM..
The Following User Says Thank You to theboogymaster For This Useful Post:
theace18 (11-06-2013)
Sponsored Links
    #3  
Old Unix and Linux 11-03-2013   -   Original Discussion by theace18
theace18's Unix or Linux Image
theace18 theace18 is offline
Registered User
 
Join Date: May 2013
Last Activity: 6 November 2013, 6:05 PM EST
Posts: 2
Thanks: 3
Thanked 0 Times in 0 Posts
I'll give Puppet a shot.

I'm currently trying out CFEngine, and I am having a really hard time wrapping my head around the syntax.

Thanks for your input! Anymore input from anyone else would be greatly appreciated as well. Thanks!
    #4  
Old Unix and Linux 11-03-2013   -   Original Discussion by theace18
MadeInGermany's Unix or Linux Image
MadeInGermany MadeInGermany is offline Forum Staff  
Moderator
 
Join Date: May 2012
Last Activity: 22 June 2018, 6:48 PM EDT
Location: Simplicity
Posts: 4,124
Thanks: 359
Thanked 1,403 Times in 1,260 Posts
Puppet tries to ensure quality.
CFengine is a hack.
If you are not a genius, go for puppet. If you are a genius, you rather build your own distribution infrastructure.
Sponsored Links
    #5  
Old Unix and Linux 11-04-2013   -   Original Discussion by theace18
RaspberryFan's Unix or Linux Image
RaspberryFan RaspberryFan is offline
Registered User
 
Join Date: Nov 2013
Last Activity: 4 November 2013, 1:39 AM EST
Posts: 1
Thanks: 0
Thanked 2 Times in 1 Post
CFEngine is based on 20 years of research, and everything but a hack. CFEngine runs on more servers throughout the world than any other system, and is especially trusted among financial and telecom organizations.

Some find It harder to learn CFEngine than Puppet, because there is more to learn. CFEngine offers more granularity while Puppet offers abstractions (makes decision on behalf of the user)

If security is important to your organization, be careful with Puppet. According to NIST National Vulnerability Database, they have more than 20 incidents so far this year.
The Following 2 Users Say Thank You to RaspberryFan For This Useful Post:
Scrutinizer (11-04-2013), theace18 (11-06-2013)
Sponsored Links
    #6  
Old Unix and Linux 11-04-2013   -   Original Discussion by theace18
Scrutinizer's Unix or Linux Image
Scrutinizer Scrutinizer is offline Forum Staff  
Moderator
 
Join Date: Nov 2008
Last Activity: 22 June 2018, 10:09 PM EDT
Location: Amsterdam
Posts: 11,834
Thanks: 545
Thanked 3,455 Times in 3,045 Posts
Does anyone have experience with ansible ?
Sponsored Links
    #7  
Old Unix and Linux 11-04-2013   -   Original Discussion by theace18
maheshkumar's Unix or Linux Image
maheshkumar maheshkumar is offline
Registered User
 
Join Date: Nov 2013
Last Activity: 6 November 2013, 12:15 AM EST
Posts: 1
Thanks: 0
Thanked 2 Times in 1 Post
I tend to agree with Raspberry Fan. It is anything but a hack. In full transparency, I work for CFEngine, but would also go on to say I evaluated Puppet and other such recent technologies as part of my previous job at VMware.

The question to ask imho is not whether you should use Puppet or CFEngine or Ansible, but what it is you are trying to achieve.

CFEngine is robust technology, that is built on fundamentals of promise theory. Look it up and also look up autonomous automation.
On the practical side, its the most secure software in this category having no NIST vulnerabilities to date. Also it is much more scalable than the 200-300 servers/entities some of these other softwares can manage.
Lastly, if you are looking for a 'fire and forget' approach and believe system administration is about managing routine and mundane tasks day in and day out cfengine could do that very well. But then you must also believe systems are immutable as well a fallacy on which these fire and forget softwares are built.
But if you are looking for a truly autonomous sytem one that is lightweight, super scalabale (talking thousands of machines served by a policy master), secure, and has the capability to provide autonomic control in your infarastructure only CFEngine does it.
And lets dispel this myth. The power you get from spending some time with the CFEngine rewards you many times over. But if you want to take the easy approach there are enough useful abstractions in CFE as well to get you started.

So, there you go. It all depends on what you want to do and why you want to do so, before you choose how.

thanks
mahesh

---------- Post updated at 04:30 PM ---------- Previous update was at 04:20 PM ----------

you may also find some of these thoughts interesting as you make your decision would be great to know what you find independently as we value your opinions and reasons for choosing or not choosing to go with CFEngine

I cant post URL's here and dont want to spam either so here are some resources for you to do independent study:
1. look for marco's blog and reasoning for "why i gave up puppet and chose cfengine"
edit by Scott: added link to blog post

2. there are other neat use cases (both routine and extreme in terms of scale/leveraging ec2 spot rates etc) that have been presented by LinkedIn, percolate... etc. look on youtube or the cfengine website

3. and as pointed out some of the largest fin-serv orgs are users of cfengine. JPMC being one of them and having inducted CFEngine into the hall of fame. search for it and you can see why managing directors on at JPMC they feel CFEngine is solid technology bar none when it comes to automation software

I doubt a software that is a "hack" would get this kind of credibility!!
The Following 2 Users Say Thank You to maheshkumar For This Useful Post:
Scott (11-04-2013), theace18 (11-06-2013)
Sponsored Links
Closed

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Linux More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Help installling puppet samnyc UNIX for Dummies Questions & Answers 2 02-12-2013 03:56 PM
Cfengine vs OpenWRT sbrandi UNIX for Advanced & Expert Users 0 01-20-2011 01:53 PM
cfengine / puppet for rhel servers jaysunn Red Hat 1 06-21-2010 03:14 AM



All times are GMT -4. The time now is 11:50 AM.