From nobody Mon Oct 11 12:30:35 2021 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4C18C13433F3 for ; Mon, 11 Oct 2021 12:30:41 +0000 (UTC) (envelope-from freebsd@boosten.org) Received: from smtpq1.tb.mail.iss.as9143.net (smtpq1.tb.mail.iss.as9143.net [212.54.42.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HSdS03jjLz4cZY for ; Mon, 11 Oct 2021 12:30:40 +0000 (UTC) (envelope-from freebsd@boosten.org) Received: from [212.54.42.107] (helo=smtp3.tb.mail.iss.as9143.net) by smtpq1.tb.mail.iss.as9143.net with esmtp (Exim 4.90_1) (envelope-from ) id 1mZuRz-0005kp-DM for questions@freebsd.org; Mon, 11 Oct 2021 14:30:39 +0200 Received: from smtp.boosten.org ([84.25.247.31]) by smtp3.tb.mail.iss.as9143.net with ESMTP id ZuRymP65zAZvPZuRzm7I5R; Mon, 11 Oct 2021 14:30:39 +0200 X-Env-Mailfrom: freebsd@boosten.org X-Env-Rcptto: questions@freebsd.org X-SourceIP: 84.25.247.31 X-CNFS-Analysis: v=2.4 cv=HImgqqhv c=1 sm=1 tr=0 ts=61642e6f cx=a_exe a=JWBJsaPp29SgP5DpYRBqZw==:117 a=JWBJsaPp29SgP5DpYRBqZw==:17 a=IkcTkHD0fZMA:10 a=8gfv0ekSlNoA:10 a=YjiD98OGAAAA:8 a=xU7MZGYv1Ot6KqZZyt8A:9 a=QEXdDO2ut3YA:10 a=N9aKFZEN-faBtzwTh5B5:22 Received: from mailserver.boosten.org (localhost [127.0.0.1]) by smtp.boosten.org (Postfix) with ESMTP id B844D27D82 for ; Mon, 11 Oct 2021 14:30:38 +0200 (CEST) X-Virus-Scanned: amavisd-new at boosten.org Received: from [192.168.13.209] (guest-209.boosten.org [192.168.13.209]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by smtp.boosten.org (Postfix) with ESMTPSA id 3F77E27D35 for ; Mon, 11 Oct 2021 14:30:34 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.10.3 smtp.boosten.org 3F77E27D35 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=boosten.org; s=myselector; t=1633955434; bh=/DWrkpv2hHaPDqgUkmHbF8dIoqsYgkLU1es5lo3A/mE=; h=From:Subject:To:References:Date:In-Reply-To:From; b=MYhAWCXWKvHg3gUIeGmrCb5D86qJJa0zUB1JuLW/H+6vaCicBIDiM44UFtdANGdsD Rg5CaNlxood+nJHhaqU2EYPvIc7x97G3bx6czS4Imtlcxs8QiW/2E5NaAzcwO/R2qY p92kf42eGHQEUWpeHo7HRg+U624Vi2aSovPIlefkKHV6rY8MbDXqnEwLgiSSv0RLzg TdeRaoqgXre7Gik8L1xxlu4MwmP21Uz4AOQ77QTa2Xg5DQpSgtsy8Dgqq78+171EGj VSciV35TRuotFPxiW7qdDi6Ca4FdN2mrROFqAOB1Wq9ogpG0+S7ipAKf8XeDHq3pA9 90KVapeI4DoEQ== Subject: Re: best software for managing multiple freebsd & linux machines ? To: questions@freebsd.org References: <4df3c511-c549-55af-8045-86b1f8e1613f@boosten.org> Message-ID: Date: Mon, 11 Oct 2021 14:30:35 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: nl Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfB9d/4pFdR49NDZIn+mHm10k65RpXMdSR+D4atBEneCS4k2Xk7aLv1uz9m0qRu9iof6ASiJAJrkH7cR04naI5mNl3zCBQqji907gLXUnHNquBzs1MJSP Ee+6YkZKBk4B8aeLoE+rCgkbSw4i6O+znDuMzgCCVcgg8TtnA+xEN7Q1xk2n/aXVvy910i4aQFGqKQ== X-Rspamd-Queue-Id: 4HSdS03jjLz4cZY X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=boosten.org header.s=myselector header.b=MYhAWCXW; dmarc=pass (policy=reject) header.from=boosten.org; spf=pass (mx1.freebsd.org: domain of freebsd@boosten.org designates 212.54.42.164 as permitted sender) smtp.mailfrom=freebsd@boosten.org X-Spamd-Result: default: False [-3.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:212.54.32.0/19:c]; TO_DN_NONE(0.00)[]; HAS_WP_URI(0.00)[]; DKIM_TRACE(0.00)[boosten.org:+]; DMARC_POLICY_ALLOW(-0.50)[boosten.org,reject]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RECEIVED_SPAMHAUS_PBL(0.00)[84.25.247.31:received]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:33915, ipnet:212.54.32.0/20, country:NL]; SUBJECT_ENDS_QUESTION(1.00)[]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[boosten.org:s=myselector]; RCVD_COUNT_FIVE(0.00)[5]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[212.54.42.107:received,212.54.42.164:from]; RWL_MAILSPIKE_POSSIBLE(0.00)[212.54.42.164:from] Reply-To: freebsd@boosten.org From: Peter Boosten via questions X-Original-From: Peter Boosten X-ThisMailContainsUnwantedMimeParts: N Op 11-10-2021 om 09:22 schreef Andrea Venturoli: > On 10/11/21 7:29 AM, Peter Boosten via questions wrote: > >> I use saltstack to do exactly this: > > Hello. > > Since I've choosen Salt too (after trying Ansible and ditching it) and > I'm (slowly) starting with it, can I ask which documentation you used > or would reccomend? > > I think I like Salt, but when I try reading the official manuals, I > always get the feeling the were written "the other way round" (e.g. > providing a lot of nit-picky detail, but failing to give the big > picture). > > There's an ebook called 'Learning SaltStack Second Edition' which can be downloaded freely (not sure if legal, btw): https://www.programmer-books.com/wp-content/uploads/2019/05/Learning-SaltStack-Second-Edition.pdf Using this knowledge I tried to figure out how Security Onion does its stuff (SO is completely configured with SaltStack, creates docker images, keeps track of their states, and configures them) and then you'll experience the real power of it. And it helps when you have a walking SaltStack encyclopedia/nerd as your colleague :) But I would recommend starting with the book. -- Met vriendelijke groet/Kind regards Peter Boosten -- Peter It never hurts to help