<?xml version="1.0" encoding="UTF-8"?> <rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
><channel><title>MDLog:/sysadmin &#187; Configuration management</title> <atom:link href="http://www.ducea.com/category/configuration-management/feed/" rel="self" type="application/rss+xml" /><link>http://www.ducea.com</link> <description>The Journal Of A Linux Sysadmin</description> <lastBuildDate>Tue, 07 Feb 2012 19:40:06 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.3</generator> <item><title>First Chef Cookbook Contest Announced!</title><link>http://www.ducea.com/2011/08/23/first-chef-cookbook-contest-announced/</link> <comments>http://www.ducea.com/2011/08/23/first-chef-cookbook-contest-announced/#comments</comments> <pubDate>Tue, 23 Aug 2011 18:18:14 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[News from Outside]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[cookbooks]]></category> <category><![CDATA[opschef]]></category> <category><![CDATA[opscode]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=1363</guid> <description><![CDATA[Yesterday Opscode, the company behind Chef, announced the first ever chef cookbook contest. In order to participate in the contest you will need to write a new cookbook and submit it by the end of September; this is going to be a little tricky as there are many cookbooks already available on the community site. [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>Yesterday <strong><a
href="http://www.opscode.com/" target="_blank">Opscode</a></strong>, the company behind <strong><a
href="http://www.opscode.com/chef/" target="_blank">Chef</a></strong>, <a
href="http://www.opscode.com/blog/2011/08/22/cookbook-contest/" target="_blank">announced</a> the first ever <strong>chef cookbook contest</strong>. In order to participate in the contest you will need to write a new cookbook and submit it by the <em>end of September;</em> this is going to be a little tricky as there are many cookbooks already available on the <a
href="http://community.opscode.com/cookbooks" target="_blank">community site</a>. So this is a great idea and it will take care of the few applications that don&#8217;t already have chef cookbooks. The cookbooks which shows off the awesome Chef features will have better chances to win. The prizes are also interesting: iPad, gift cards, etc. Here are the full details and rules of the contest: <a
href="http://www.opscode.com/blog/2011/08/22/cookbook-contest/" target="_blank">http://www.opscode.com/blog/2011/08/22/cookbook-contest/</a></p><p>So if you have an <strong>idea</strong> for a chef cookbook, <strong>now</strong> it&#8217;s the time to start working on it. I&#8217;m offering my <strong>help for free</strong> for all my blog readers: I will help you write a cookbook by implementing your ideas; help reviewing it or suggest improvements, or whatever else you might need help with. Use the <a
href="http://www.ducea.com/contact/">contact</a> form to email me (or DM me on <a
href="http://twitter.com/mariusducea">twitter</a>) and let me know how I can help.</p><p>If you don&#8217;t have time to write a new cookbook but you have a great idea for a cookbook that is missing from the opscode community site, please post it bellow in the <strong>comments section</strong> and I&#8217;m sure some of my blog readers will help create it.</p><p>Again this is a brilliant idea from Opscode and it creates a win-win situation for everyone. I&#8217;m just curious, is this the first idea from their new community manager? If this is the case, great job Jesse <img
src='http://www.ducea.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> .</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2011/08/23/first-chef-cookbook-contest-announced/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> <item><title>Building Vagrant boxes with veewee</title><link>http://www.ducea.com/2011/08/15/building-vagrant-boxes-with-veewee/</link> <comments>http://www.ducea.com/2011/08/15/building-vagrant-boxes-with-veewee/#comments</comments> <pubDate>Tue, 16 Aug 2011 01:49:23 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[Linux]]></category> <category><![CDATA[MacOSX]]></category> <category><![CDATA[Tools]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[puppet]]></category> <category><![CDATA[vagrant]]></category> <category><![CDATA[veewee]]></category> <category><![CDATA[virtualbox]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=1350</guid> <description><![CDATA[If you used vagrant (great tool, right?) you have probably downloaded a basebox from some remote location to get you started. This is a great quick start, and there are many good boxes out there that you can use; vagrantbox.es does a great job in listing various public vagrant boxes. But if you are like [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>If you used <strong><a
href="http://vagrantup.com/" target="_blank">vagrant</a></strong> (great tool, right?) you have probably downloaded a basebox from some remote location to get you started. This is a great quick start, and there are many good boxes out there that you can use; <a
href="http://www.vagrantbox.es/" target="_blank">vagrantbox.es</a> does a great job in listing various public vagrant boxes. But if you are like me, you probably will want to customize the boxes you are using; you might want to install them from scratch based on your own little/or/big customizations. Well if you are like that, then you will be happy to hear that <strong><a
href="http://www.jedi.be/blog" target="_blank">Patrick Debois</a></strong> had exactly the same problem when he decided to write <strong><a
href="https://github.com/jedi4ever/veewee" target="_blank">veewee</a></strong>. And veewee is exactly that missing part of vagrant that allows you to easily build your own vagrant boxes from scratch.</p><p>So let&#8217;s see how we can use veewee. I&#8217;m assuming you already have vagrant installed (and <a
href="http://download.virtualbox.org/virtualbox/" target="_blank">virtualbox</a>), but if you don&#8217;t please install them first. To install <strong>veewee</strong> we just have to install the veewee gem:<br
/> <code>gem install veewee</code><br
/> once you installed veewee you can see a new task added to vagrant: <strong>basebox</strong>.</p><p><span
id="more-1350"></span>Here is the list of the <strong>templates</strong> we get out of the box once we install veewee:<br
/> <code><strong>vagrant basebox templates</strong><br
/> The following templates are available:<br
/> vagrant basebox define '' 'archlinux-i686'<br
/> vagrant basebox define '' 'CentOS-4.8-i386'<br
/> vagrant basebox define '' 'CentOS-5.6-i386'<br
/> vagrant basebox define '' 'CentOS-5.6-i386-netboot'<br
/> vagrant basebox define '' 'Debian-6.0.1a-amd64-netboot'<br
/> vagrant basebox define '' 'Debian-6.0.1a-i386-netboot'<br
/> vagrant basebox define '' 'Fedora-14-amd64'<br
/> vagrant basebox define '' 'Fedora-14-amd64-netboot'<br
/> vagrant basebox define '' 'Fedora-14-i386'<br
/> vagrant basebox define '' 'Fedora-14-i386-netboot'<br
/> vagrant basebox define '' 'freebsd-8.2-experimental'<br
/> vagrant basebox define '' 'freebsd-8.2-pcbsd-i386'<br
/> vagrant basebox define '' 'freebsd-8.2-pcbsd-i386-netboot'<br
/> vagrant basebox define '' 'gentoo-latest-i386-experimental'<br
/> vagrant basebox define '' 'opensuse-11.4-i386-experimental'<br
/> vagrant basebox define '' 'solaris-11-express-i386'<br
/> vagrant basebox define '' 'Sysrescuecd-2.0.0-experimental'<br
/> vagrant basebox define '' 'ubuntu-10.04.2-amd64-netboot'<br
/> vagrant basebox define '' 'ubuntu-10.04.2-server-amd64'<br
/> vagrant basebox define '' 'ubuntu-10.04.2-server-i386'<br
/> vagrant basebox define '' 'ubuntu-10.04.2-server-i386-netboot'<br
/> vagrant basebox define '' 'ubuntu-10.10-server-amd64'<br
/> vagrant basebox define '' 'ubuntu-10.10-server-amd64-netboot'<br
/> vagrant basebox define '' 'ubuntu-10.10-server-i386'<br
/> vagrant basebox define '' 'ubuntu-10.10-server-i386-netboot'<br
/> vagrant basebox define '' 'ubuntu-11.04-server-amd64'<br
/> vagrant basebox define '' 'ubuntu-11.04-server-i386'<br
/> vagrant basebox define '' 'windows-2008R2-amd64-experimental'</code></p><p>This means that we can build a box based on <strong>any</strong> of the above templates. <em>That&#8217;s awesome!</em> Let&#8217;s say we want to build a debian squeeze box using veewee; we would have to run:<br
/> <code>vagrant basebox define 'debian-60' 'Debian-6.0.1a-amd64-netboot'</code><br
/> and this will create a folder definitions/debian-60 with the following files (the content of the veewee template):<br
/> <code>definition.rb<br
/> postinstall.sh<br
/> preseed.cfg</code><br
/> we can modify/tune any of those files based on our custom needs. The file <strong>definition.rb</strong> is the main definition of the template. Here you would define the memory size, disk size, iso file, etc. The content is very easy to understand, but you would normally not have to change many things here. <strong>preseed.cfg</strong> is just a standard preseed file where you would customize the actual install process (you could change here the partitions or their type, timezone setup, etc). And finally <strong>postinstall.sh</strong> that is a bash script that will run at the end of the installation process and it will install ruby, gems , chef and puppet and also the virtualbox guest additions (needed for shared folders).</p><p>If you have the iso already place it in <strong>&#8216;currentdir&#8217;/iso</strong>. If not, veewee will download it and place it in the appropriate folder before starting the install process:<br
/> <code>vagrant basebox build 'debian-60'</code><br
/> this will start the installation and you can see all the steps it takes (the keystrokes as they are entered, etc.). This can take a while… Once it is done you can validate the build with:<br
/> <code>vagrant basebox validate 'debian-60'</code><br
/> (this will run a few basic tests to see if it can connect to the vm as user vagrant, if chef and puppet were installed, if the shared folders are accessible, etc).</p><p>And finally you can export it as a vagrant box with:<br
/> <code>vagrant basebox export 'debian-60'</code><br
/> and add it to vagrant:<br
/> <code>vagrant box add 'debian-60' debian-60.box</code><br
/> and now you can use it in vagrant with:<br
/> <code>vagrant init 'debian-60'</code></p><p>That&#8217;s it. Very simple and now we have our own box built from scratch. As a side note, I found this very useful to test and troubleshoot preseed configurations <img
src='http://www.ducea.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> . As you can see there are plenty of templates available in veewee but if you create a new one please consider to share it with others and send it to Patrick on <a
href="https://github.com/jedi4ever/veewee" target="_blank">github</a>. I&#8217;m sure he will be happy to include it in newer versions of veewee. And if you found this useful don&#8217;t forget to thank <a
href="https://twitter.com/#!/patrickdebois" target="_blank">Patrick</a> for his great work on this awesome tool.</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2011/08/15/building-vagrant-boxes-with-veewee/feed/</wfw:commentRss> <slash:comments>6</slash:comments> </item> <item><title>HowTo upgrade Chef from 0.10 to 0.10.2 &#8211; rubygems install</title><link>http://www.ducea.com/2011/07/01/howto-upgrade-chef-from-0-10-to-0-10-2-rubygems-install/</link> <comments>http://www.ducea.com/2011/07/01/howto-upgrade-chef-from-0-10-to-0-10-2-rubygems-install/#comments</comments> <pubDate>Fri, 01 Jul 2011 19:30:48 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[Linux]]></category> <category><![CDATA[Tips & Tricks]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[opschef]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=1327</guid> <description><![CDATA[A few days ago Opscode released a security fix for chef server 0.10.0 and 0.9.16 and this post will show how upgrade to chef-server 0.10.2. First start by backing up your data. Seriously. In the past I&#8217;ve had serious problems when performing similar upgrades (even a minor one like this that looks harmless), and even if [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>A few days ago <strong><a
href="http://www.opscode.com/" target="_blank">Opscode</a></strong> released a <a
href="http://www.opscode.com/blog/2011/06/29/chef-0-10-2-and-0-9-18-released/" target="_blank">security fix</a> for <strong>chef server 0.10.0</strong> and 0.9.16 and this post will show how upgrade to chef-server <strong>0.10.2</strong>. First start by backing up your data. Seriously. In the past I&#8217;ve had serious problems when performing similar upgrades (even a minor one like this that looks harmless), and even if now opscode are much better with this process it never hurts to be precautions. Since I use a <strong>rubygem</strong> install the next steps will focus on this type of installation; if you are using distribution or opscode packages this will not be very helpful as probably packages are not yet available for this upgrade; once they will replace the gem upgrade part with the deb/rpm upgrade and you should be set.</p><h3>1. Stop all the chef related services</h3><p>Here is a handy command that will stop all the possible chef server related services:<br
/> <code>for svc in server server-webui solr expander<br
/> do<br
/> sudo /etc/init.d/chef-${svc} stop<br
/> done</code></p><h3><span
id="more-1327"></span>2. Upgrade the chef-server gems</h3><p>Simply run:<br
/> <code>sudo gem update chef chef-server --no-ri --no-rdoc</code><br
/> and this should upgrade all the other gems it needs to. A sample output will look like this:<br
/> <code>gem update chef chef-server --no-ri --no-rdoc<br
/> Updating installed gems<br
/> Updating chef<br
/> Successfully installed chef-0.10.2<br
/> Updating chef-expander<br
/> Successfully installed chef-expander-0.10.2<br
/> Updating chef-server<br
/> Successfully installed chef-server-api-0.10.2<br
/> Successfully installed chef-server-webui-0.10.2<br
/> Successfully installed chef-solr-0.10.2<br
/> Successfully installed chef-server-0.10.2<br
/> Gems updated: chef, chef-expander, chef-server-api, chef-server-webui, chef-solr, chef-server</code></p><p>Optional: if you want you can cleanup the system from old, unused gems with:<br
/> <code>sudo gem cleanup</code></p><h3>3. Start back the chef server services</h3><p>Again in a single command, now to start them:<br
/> <code>for svc in server server-webui solr expander<br
/> do<br
/> sudo /etc/init.d/chef-${svc} start<br
/> done</code></p><p>That&#8217;s it, now you should be running the latest and greatest chef server version 0.10.2.</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2011/07/01/howto-upgrade-chef-from-0-10-to-0-10-2-rubygems-install/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Chef Intro @ SF Bay Area LSPE meetup</title><link>http://www.ducea.com/2010/09/27/chef-intro-sf-bay-area-lspe-meetup/</link> <comments>http://www.ducea.com/2010/09/27/chef-intro-sf-bay-area-lspe-meetup/#comments</comments> <pubDate>Tue, 28 Sep 2010 01:39:31 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Conferences]]></category> <category><![CDATA[Configuration management]]></category> <category><![CDATA[General]]></category> <category><![CDATA[bay area]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[meetups]]></category> <category><![CDATA[opschef]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=1178</guid> <description><![CDATA[Here are the slides from my presentation about Chef at the SF Bay Area Large-Scale Production Engineering meetup group. Accordingly to the organizers from Yahoo, there were 90 people present. If you are in the San Francisco Bay Area and passionate about infrastructure you should definitely join this group. Highly recommended! Chef Intro @ SF [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>Here are the slides from my presentation about <strong>Chef</strong> at the <strong>SF Bay Area Large-Scale Production Engineering meetup group</strong>. Accordingly to the organizers from Yahoo, there were 90 people present. If you are in the San Francisco Bay Area and passionate about infrastructure you should definitely join this <a
href="http://www.meetup.com/SF-Bay-Area-Large-Scale-Production-Engineering/" target="_blank">group</a>. Highly recommended!</p><div
id="__ss_5270913" style="width: 560px;"><strong><a
title="Chef Intro @ SF Bay Area LSPE meetup" href="http://www.slideshare.net/mdxp/chef-intro-sf-bay-area-lspe-meetup-5270913">Chef Intro @ SF Bay Area LSPE meetup</a></strong><object
id="__sse5270913" classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="355" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param
name="allowFullScreen" value="true" /><param
name="allowScriptAccess" value="always" /><param
name="src" value="http://static.slidesharecdn.com/swf/ssplayer2.swf?doc=chefintrosfbayarealspemeetup-100923141827-phpapp01&amp;rel=0&amp;stripped_title=chef-intro-sf-bay-area-lspe-meetup-5270913&amp;userName=mdxp" /><param
name="name" value="__sse5270913" /><param
name="allowfullscreen" value="true" /><embed
id="__sse5270913" type="application/x-shockwave-flash" width="560" height="418" src="http://static.slidesharecdn.com/swf/ssplayer2.swf?doc=chefintrosfbayarealspemeetup-100923141827-phpapp01&amp;rel=0&amp;stripped_title=chef-intro-sf-bay-area-lspe-meetup-5270913&amp;userName=mdxp" name="__sse5270913" allowscriptaccess="always" allowfullscreen="true"></embed></object></div><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2010/09/27/chef-intro-sf-bay-area-lspe-meetup/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>NodeJS chef cookbook released</title><link>http://www.ducea.com/2010/09/01/nodejs-chef-cookbook-released/</link> <comments>http://www.ducea.com/2010/09/01/nodejs-chef-cookbook-released/#comments</comments> <pubDate>Wed, 01 Sep 2010 00:21:05 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[nodejs]]></category> <category><![CDATA[opschef]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=1130</guid> <description><![CDATA[I&#8217;ve just released a simple chef cookbook that will install nodejs from source. You can check it out directly from github or download it from the opscode cookbook site. Let me know what you think if you find it useful.<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>I&#8217;ve just released a simple <strong>chef cookbook</strong> that will install <strong><a
href="http://nodejs.org/" target="_blank">nodejs</a></strong> from source. You can check it out directly from <a
href="http://github.com/mdxp/cookbooks" target="_blank">github</a> or download it from the opscode <a
href="http://cookbooks.opscode.com/cookbooks/nodejs" target="_blank">cookbook site.</a> Let me know what you think if you find it useful.</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2010/09/01/nodejs-chef-cookbook-released/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>OSBridge: Configuration Management Panel</title><link>http://www.ducea.com/2009/06/30/osbridge-configuration-management-panel/</link> <comments>http://www.ducea.com/2009/06/30/osbridge-configuration-management-panel/#comments</comments> <pubDate>Tue, 30 Jun 2009 13:40:26 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[News from Outside]]></category> <category><![CDATA[automateit]]></category> <category><![CDATA[bcfg2]]></category> <category><![CDATA[cfengine]]></category> <category><![CDATA[chef]]></category> <category><![CDATA[puppet]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=923</guid> <description><![CDATA[The moment I heard about the Open Source Bridge Configuration Management panel session on FLOSS Weekly a while ago, I was hoping that I will be able to see the recording of this session (as for obvious reasons I was not able to attend and see this live in Portland, Oregon). They managed to bring [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>The moment I heard about the<strong> Open Source Bridge <a
href="http://opensourcebridge.org/sessions/49" target="_blank">Configuration Management panel session</a></strong> on <a
href="http://twit.tv/FLOSS" target="_blank"><strong>FLOSS Weekly</strong></a> a while ago, I was hoping that I will be able to see the recording of this session (as for obvious reasons I was not able to attend and see this live in Portland, Oregon). They managed to bring together (for the first time to my knowledge) the creators (or maintainers) of *all* the major configuration management tools to date was very impressive; and obviously someone as myself that has been working with many of these tools (I haven&#8217;t tried/used automateit yet) would definitely see this as a great session.</p><p>Here are the members of the configuration management panel (from left to right):</p><ul><li> Igal Koshevoy of <a
href="http://automateit.org/">AutomateIt</a></li><li> Brendan Strejcek of <a
href="http://www.cfengine.org/">Cfengine</a></li><li> Luke Kanies from Reductive Labs for <a
href="http://reductivelabs.com/products/puppet/">Puppet</a></li><li> Narayan Desai of <a
href="http://trac.mcs.anl.gov/projects/bcfg2">bcfg2</a></li><li> Adam Jacob from Opscode for <a
href="http://wiki.opscode.com/display/chef/Home">Chef</a></li></ul><p><span
id="more-923"></span>Luckily the <a
href="http://osbridge.blip.tv/file/2278426/" target="_blank">video of the session</a> (among <a
href="http://osbridge.blip.tv/" target="_blank">other videos</a> from Open Source Bridge) was published and anyone can see this great event:<br
/> <object
width="480" height="300" data="http://blip.tv/play/g9pogYvuG5e7Zw" type="application/x-shockwave-flash"><param
name="src" value="http://blip.tv/play/g9pogYvuG5e7Zw" /><param
name="allowfullscreen" value="true" /></object></p><p>Now, after I sow this I must admit that I was hoping for a little more engagement and controversy. Instead we sow a friendly debate where everyone presented his own tool, without trying to go over the line and tell why it is better than the one of someone else (we have definitely seen several such blog posts from them in the past <img
src='http://www.ducea.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> ). Anyway this was a great event and a great opportunity to have all the major people in this field come together and share their story. I&#8217;m sure that after this they will get back to work, we will see new features and improvements in their tools.</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2009/06/30/osbridge-configuration-management-panel/feed/</wfw:commentRss> <slash:comments>4</slash:comments> </item> <item><title>Bcfg2 0.9.6 debian package for etch</title><link>http://www.ducea.com/2009/02/12/bcfg2-096-debian-package-for-etch/</link> <comments>http://www.ducea.com/2009/02/12/bcfg2-096-debian-package-for-etch/#comments</comments> <pubDate>Thu, 12 Feb 2009 09:31:37 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[Debian]]></category> <category><![CDATA[Ubuntu]]></category> <category><![CDATA[apt]]></category> <category><![CDATA[bcfg2]]></category> <category><![CDATA[deb]]></category> <category><![CDATA[debian-etch]]></category> <category><![CDATA[debian_packages]]></category> <category><![CDATA[debuild]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=570</guid> <description><![CDATA[The Bcfg2 version available in debian etch is quite old (v0.8.6), while the one in lenny is newer v0.9.5.7, it still isn&#8217;t the latest stable version 0.9.6 that was released in November last year. Since this version fixes many bugs it is the version that is recommended to use in production at this time (unfortunately [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p>The <a
href="http://trac.mcs.anl.gov/projects/bcfg2" target="_blank"><strong>Bcfg2</strong></a> version available in <strong>debian etch</strong> is quite old (<a
href="http://packages.debian.org/etch/bcfg2" target="_blank">v0.8.6</a>), while the one in <strong>lenny </strong>is newer <a
href="http://packages.debian.org/lenny/bcfg2" target="_blank">v0.9.5.7</a>, it still isn&#8217;t the latest stable version <strong>0.9.6</strong> that was released in November last year. Since this version fixes many bugs it is the version that is recommended to use in production at this time (<em>unfortunately it breaks the reporting system, that will not be fixed until the release 1.0 planed for the next months)</em>. This post will show how we can <a
href="http://www.ducea.com/2008/03/06/howto-recompile-debian-packages/">rebuild a debian package</a> for the latest stable bcfg2 release so we can easily deploy it on several machines.</p><p><strong>Bcfg2 </strong>is a <em>debian friendly project</em>, meaning they provide inside the source package all what is needed to build a debian package very easy. We will use for this a debian etch system, but this should work on any debian based system.<span
id="more-570"></span></p><h3>1. Download</h3><p>First we need to <a
href="http://trac.mcs.anl.gov/projects/bcfg2/wiki/Download" target="_blank">download</a> the source package:<br
/> <code>wget ftp://ftp.mcs.anl.gov/pub/bcfg/bcfg2-0.9.6.tar.gz<br
/> tar -zxvf bcfg2-0.9.6.tar.gz<br
/> cd bcfg2-0.9.6</code></p><h3>2. Install dependencies</h3><p>Next we need to install the dependencies necessary to build the package. Depending on the state of your system this might look different from the output bellow. You will need to have basic debian building tools; in case you don&#8217;t have them already install them now:<br
/> <code>apt-get install devscripts build-essential fakeroot cdbs pbuilder</code></p><p>Since the package is prepared for multiple distributions types and versions of python, we will have to select that we want to use it for <strong>debian etch pycentral</strong>:<br
/> <code>cd debian<br
/> ./buildsys-select.sh pycentral</code><br
/> (the available choices are <em>2.3, 2.4 and pycentral</em>)</p><p>Now we can move on and install the rest of the dependencies (python-dev, etc.):<br
/> <code>cd ..<br
/> /usr/lib/pbuilder/pbuilder-satisfydepends</code></p><h3>3. Build and deploy the package</h3><p>Finally we can now rebuild the package:<br
/> <code><strong>debuild -us -uc</strong><br
/> cd ..<br
/> ls *.deb<br
/> <em>bcfg2-server_0.9.6-0.1_all.deb<br
/> bcfg2_0.9.6-0.1_all.deb</em></code><br
/> Probably you will want to put the resulted packages in a local debian repository to perform the upgrade easily on several systems, maybe even using bcfg2 itself <img
src='http://www.ducea.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> .</p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2009/02/12/bcfg2-096-debian-package-for-etch/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item><title>Using the Bcfg2 SSHbase plugin</title><link>http://www.ducea.com/2008/08/24/using-the-bcfg2-sshbase-plugin/</link> <comments>http://www.ducea.com/2008/08/24/using-the-bcfg2-sshbase-plugin/#comments</comments> <pubDate>Sun, 24 Aug 2008 22:20:48 +0000</pubDate> <dc:creator>- Marius -</dc:creator> <category><![CDATA[Configuration management]]></category> <category><![CDATA[bcfg2]]></category> <category><![CDATA[ssh]]></category><guid
isPermaLink="false">http://www.ducea.com/?p=337</guid> <description><![CDATA[SSHbase is a bcfg2 plugin for managing ssh host keys. It is responsible for making ssh keys persist beyond a client rebuild and building a consistent ssh_known_hosts file including all the ssh keys and deploying it across all the systems bcfg2 manages. SSHbase has two basic functions: to generate ssh host keys; if a system [...]<p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p> ]]></description> <content:encoded><![CDATA[<p><strong>SSHbase </strong>is a <strong><a
href="http://trac.mcs.anl.gov/projects/bcfg2" target="_blank">bcfg2</a> plugin</strong> for managing ssh host keys. It is responsible for making <em>ssh keys persist</em> beyond a client rebuild and building a <em>consistent ssh_known_hosts</em> file including all the ssh keys and deploying it across all the systems bcfg2 manages.</p><p><strong>SSHbase </strong>has two basic functions:</p><ul><li>to generate ssh host keys; if a system has not a key in the repository, it will be generated on its first check-in</li><li>to maintain a consistent ssh_known_hosts file, and deploy it to all systems. This will include all the public keys in the repository.</li></ul><p><span
id="more-337"></span>To enable SSHbase we have to <em>add it to the generators line</em> in the<em> bcfg2 server config</em>, like this:<br
/> <code>/etc/bcfg2.conf:<br
/> generators = <strong>SSHbase</strong>,TCheetah,Cfg,Pkgmgr,Rules</code>- the bcfg2 server will need to be <em>restarted </em>to see this change.</p><p>Next we need to add configurations entries for <em>/etc/ssh/ssh_known_hosts</em>, and <em>/etc/ssh/ssh_host_dsa_key</em> (or rsa, or both) and add them to a bundle or base.<br
/> We can put them in <strong>Base </strong>like this:<br
/> <code><span
style="text-decoration: underline;">Base/ssh_keys.xml</span><br
/> &lt;Base&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_known_hosts'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_dsa_key'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_dsa_key.pub'/&gt;<br
/> &lt;/Base&gt;</code><br
/> or include them in a <strong>bundle </strong>like this:<br
/> <code><span
style="text-decoration: underline;">Bundler/ssh_keys.xml</span><br
/> &lt;Bundle name='ssh_keys' version='2.0'&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_known_hosts'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_dsa_key'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_dsa_key.pub'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_rsa_key'/&gt;<br
/> &lt;ConfigFile name='/etc/ssh/ssh_host_rsa_key.pub'/&gt;<br
/> &lt;/Bundle&gt;</code> (where we added the rsa keys also). And include the ssh_keys bundle in a <strong>Group </strong>as needed.</p><p>After this any system that will checkin and don&#8217;t have its ssh keys in the bcfg2 repo, the bcfg2 server will generate them and put them inside <strong>bcfg2/SSHbase/ssh_host_dsa_key.H_&lt;HOST&gt;</strong> and <strong>ssh_host_dsa_key.pub.H_&lt;HOST&gt;</strong>, while the ssh_known_hosts file will be generated on the fly from all the existing keys in the repository.</p><p>Plugin documentation: <a
href="http://trac.mcs.anl.gov/projects/bcfg2/wiki/SSHbase" target="_blank">http://trac.mcs.anl.gov/projects/bcfg2/wiki/SSHbase</a></p><p><a
href="http://www.thycotic.com/zSS_Ducea.html?utm_source=ducea&utm_medium=banner&utm_content=iquit&utm_campaign=SSDucea"><img
src="http://www.ducea.com/images/SS468by60.jpg"></a></p>]]></content:encoded> <wfw:commentRss>http://www.ducea.com/2008/08/24/using-the-bcfg2-sshbase-plugin/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> </channel> </rss>
<!-- Served from: www.ducea.com @ 2012-02-08 14:46:15 by W3 Total Cache -->
