debian meetup nantes 2015 : salt pour gérer de nombreux serveurs debian

DEBIAN MEETUP NANTES 2015

INTRODUCTION2nd Debian Meetup Nantes - october 2015

Thanks Debian and Arthur Lutz ( )

#debianmeetuphttps://france.debian.net/

@arthurlutz @logilabhttps://www.logilab.fr/id/arthur.lutzhttp://slides.logilab.fr/2015/debian_meetup_salt_2015/

SALT INTRODUCTIONremote executionconfiguration management systempython (very flexible and extensible)event bus with ZMQyoung project, very active communitydebian packaged from the start (official packages and

)http://repo.saltstack.com/

SALT OVERVIEWCLIWeb

SSH

agent-less servers

salt-master

salt-minions

returners

salt-syndic

salt-minions

user

salt-masterless

INSTALL WITH DEBIANa p t - g e t i n s t a l l a p a c h e 2v i m / e t c / a p a c h e 2 / a p a c h e 2 . c o n fv i m / e t c / a p a c h e 2 / s i t e s - e n a b l e d / d e f a u l t - s s l . c o n fs e r v i c e a p a c h e 2 r e s t a r t

INSTALL AT INFRASTRUCTURE LEVEL

UPGRADE / CHECKRESTARTa p t - g e t u p d a t e ; a p t - g e t u p g r a d ea p t - g e t i n s t a l l d e b i a n - g o o d i e sc h e c k r e s t a r ts e r v i c e a p a c h e 2 r e s t a r t

UPGRADE / CHECKRESTART ATINFRASTRUCTURE LEVEL

s a l t ' * ' c m d . r u n ' c h e c k r e s t a r t 's a l t - I ' r o l e : w e b s e r v e r ' s e r v i c e . r e s t a r t a p a c h e 2s a l t - I ' r o l e : d b ' s e r v i c e . r e s t a r t p o s t g r e s q l

CRONc r o n t a b - lc r o n t a b - ec r o n t a b - e - u u s e rc a t " * * * * * / b i n / e c h o ' h e l l o ' " > / e t c / c r o n . d / h e l l o _ w o r l d

CRON AT INFRASTRUCTURE LEVELScheduler

s c h e d u l e : j o b 1 : f u n c t i o n : c m d . r u n s e c o n d s : 3 0 a r g s : - e c h o ' h e l l o ' s p l a y : 1 5

SUDOs u d o e d i tv i m / e t c / s u d o e r s . d / a l l o w _ t h i s

SUDO AT INFRASTRUCTURE LEVELAccess Control System

c l i e n t _ a c l : a l i c e : - w e b \ * : - p k g . l i s t _ p k g s - a p a c h e . * b o b : - d b \ * : - p o s t g r e s . *

ORCHESTRATIONs s h r o o t @ m a c h i n e 1. . .s s h r o o t @ m a c h i n e 2. . .s s h r o o t @ m a c h i n e 3. . .

ORCHESTRATION AT INFRASTRUCTURE LEVELOrchestration

REACTOR AT INFRASTRUCTURE LEVEL

THE ENDQuestions ?Arthur Lutz ( )@arthurlutz @logilabhttps://www.logilab.fr/id/arthur.lutzhttp://slides.logilab.fr/2015/debian_meetup_salt_2015/