3 ms·
I have a lot of different machines performing different tasks, but very few machines running the same tasks as another one, so it's definitely a case of pets ra
by iso1631 6y ago
I have a lot of different machines performing different tasks, but very few machines running the same tasks as another one, so it's definitely a case of pets rather than cattle for the bulk of work. For the rare occasions a task needs to be done on a variety of machines, clusterssh does perfectly well.
Automation is a preseed, a script to do user management, and a phone home package which sends information about the machine back to a central server.
My main bugbear about ansible is it leaves very little trace -- it runs by copying a file to the remote server in /tmp, executing the file (sometimes under sudo), and then deleting it. I get the notification on syslog that ansible has logged in and done something, but I don't know what, so I rely on the ansible
Compared to when someone manually goes in and does something like "sudo vi /etc/resolv.conf" - even if doing it en-mass, I get notification that joebloggs logged in at 14:53 on Wednesday and edited resolv.conf. If I see something broke about 3pm on Wednesday, that's a great start to working out why it's broken. Ansible means I need to look at the ansible logs, but even then I don't know exactly what was actually executed on the box.
Then of course there's "to foul thing up is ssh, to really foul things up requires ansible" angle too. Automation massively increases the amount of