From nobody Sun Oct 10 22:26:42 2021 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 0EB5D17F2CC0 for ; Sun, 10 Oct 2021 22:26:50 +0000 (UTC) (envelope-from rcarter@pinyon.org) Received: from h2.pinyon.org (h2.pinyon.org [65.101.20.170]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4HSGkJ6XYBz3H6C for ; Sun, 10 Oct 2021 22:26:48 +0000 (UTC) (envelope-from rcarter@pinyon.org) Received: from [10.0.10.15] (unknown [10.0.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by h2.pinyon.org (Postfix) with ESMTPSA id 7DF7D9D01 for ; Sun, 10 Oct 2021 15:26:42 -0700 (MST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pinyon.org; s=dkim; t=1633904802; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FGZPhdYNDA8edi2WtYgEhK3WPj415okz5NgjvYEE6Rc=; b=er6tA0VjA0bFPDi5CNhA2hdAZ3Djkh3Zn71bSD0m+wfRrC6K2I9GLfzYkmXqtvwmjhLuxC z3JuB2F1x45j3l5ISq10hhm8PosH3iP+yIT7uU/ESoJ2hdKT35r1/bij4l0iqI3tTEj41O aXlfhvkKGCH4WiO1Uog36PXyBhkCia4= Message-ID: <31ee138b-243f-ad88-aa46-9cbf5204aa03@pinyon.org> Date: Sun, 10 Oct 2021 15:26:42 -0700 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:91.0) Gecko/20100101 Firefox/91.0 Thunderbird/91.2.0 Subject: Re: best software for managing multiple freebsd & linux machines ? Content-Language: en-US To: questions@freebsd.org References: From: "Russell L. Carter" In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=0.90 X-Rspamd-Server: h2 X-Rspamd-Queue-Id: 4HSGkJ6XYBz3H6C X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=pinyon.org header.s=dkim header.b=er6tA0Vj; dmarc=none; spf=pass (mx1.freebsd.org: domain of rcarter@pinyon.org designates 65.101.20.170 as permitted sender) smtp.mailfrom=rcarter@pinyon.org X-Spamd-Result: default: False [-2.48 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[pinyon.org:s=dkim]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; DMARC_NA(0.00)[pinyon.org]; DKIM_TRACE(0.00)[pinyon.org:+]; NEURAL_HAM_SHORT(-0.98)[-0.980]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:209, ipnet:65.101.0.0/18, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-ThisMailContainsUnwantedMimeParts: N On 10/10/21 13:40, tech-lists wrote: > On Sun, Oct 10, 2021 at 12:20:29PM -0700, David Christensen wrote: > >> I have a SOHO network that I administer using SSH, Vim, CVS, various >> userland tools, and homebrew scripts (Bourne, Bash, and Perl).  The most >> important element is a networked version control system. >> >> If and when I need to administer many machines, I will learn a >> configuration management tool (most likely Ansible, because it is >> recommended by MWL). > > Thanks for this. After looking at puppet for an hr or so, it's looking > to me like it's a tad too complex for my needs right now. But it might > be useful in eg having to restart a load of servers without logging into > each one via ssh. > > I'm looking at sshfs atm - could make a dir for each machine and sshfs > into each from the host using keys. At least the sshfs way is not having > to run servers that would not otherwise be run. I can't restart services > this way though. After 25+ years of multiple FreeBSD + Linux boxes, never more than ten, I use the following maximally stupid configuration management. I use a single machine to keep host specific files git vc'd, and then I just write scripts for tasks and rsync them over and execute them from the config box via ssh. The basic idea I got from saltstack, aka sysutils/py-salt. py-salt I had running like a dream, until I ran afoul of a 2.7->3 python problem, and then I was uh, stuck. No more language dependencies for my configuration control. I have been expecting to need some simple templating that I would probably do with awk, but I haven't needed to yet. It also took me a couple of months off and on to fully grok py-salt. I suspect that investment in time needs to be paid for just about any enterprise ready configuration system. As it happens the time I put into py-salt wasn't wasted, since I needed to understand how to organize remote artifacts and actions anyway. And then I applied those same techniques to building a borg-backup configuration that backs all of my systems up to a single account, so I don't want to discourage learning a robust CMS. Russell