3 ms·
While I agree these practices seem pretty safe/standard, it's still enough manual work that many people will just skip half of it out of laziness for small proj
by philfreo 14y ago
While I agree these practices seem pretty safe/standard, it's still enough manual work that many people will just skip half of it out of laziness for small projects.
Does anyone have good reusable Puppet (or bash scripts) published that they use on all new servers?
- vahe 14y agoHere's something I wrote very quickly (bash script): https://github.com/vahek/vSetup https://github.com/vahek/vSetup It does most of the stuff mentioned in the post, however doesn't setup automatic updates or Logwatch.
- harshreality 14y ago(to both corin and vahe): That kind of shell scripting is the horrorshow that motivated configuration management tools* in the first place. Shell scripts require a lot of added complexity to manage multiple heterogeneous servers, or to be idempotent. * Puppet, Chef, Ansible, Salt, CFEngine, etc.
- vahe 14y agoI agree. However, there is no learning curve to get started using this script and was put together in a few minutes.
- corin_ 14y agoA personal script, focuses more on getting a server ready for my preferences than it does on security: http://pastie.org/pastes/6376503/text http://pastie.org/pastes/6376503/text