3 ms·
I think you could build a secure application environment with just bare metal. The only hip tool I would use is Ansible after paying my respects to cfengine.
by louwrentius 7y ago
I think you could build a secure application environment with just bare metal.
The only hip tool I would use is Ansible after paying my respects to cfengine.
No virtualisation
No containers
No overlay networks
A few VLANs perhaps. If I may.
It can be done.
Just a few dedicated people. The kind of people colonel Kurtz talked about...
- drybjed 7y agoI'm working on something like this with the DebOps[1] project. It's a set of Ansible playbooks and roles that lets you manage Debian environments. I aim for it to be agnostic - roles can be used effectively both in LXC containers, virtual machines or bare metal. You can start with a few machines with Debian netinst + SSH installed, and build them up with the services you want. Applications are installed either from Debian or upstream repositories (via APT), downloaded directly from upstream with proper signature verification, or compiled from git sources. There are no OS images, therefore no containers or VMs are strictly necessary. It seems that in the age of Kuberenetes projects like this are a niche, but if somebody is working with on-premises infrastructure, bare metal hosts, a good set of tested Ansible roles which you can use as a base for your own deployment might come in handy. I haven't found anything close to what I had in mind back then, so I started my own, going at it for 6 years now. Hopefully it will be useful to somebody else at some point. :-) [1]: https://github.com/debops/debops/ https://github.com/debops/debops/
- louwrentius 7y agoThank you for sharing this!
- barbecue_sauce 7y agoIs Ansible still hip or has it gone the way of MongoDB?
- demosito666 7y agoAnsible is still a practical tool for some of configuration management tasks, as opposed to mongo which I have hard time finding a niche for.