4 ms·

This is great! I was thinking exactly along those lines, and started looking for puppet/chef scripts that are readily available. It seems that using puppet has

by tucosan 14y ago

This is great! I was thinking exactly along those lines, and started looking for puppet/chef scripts that are readily available. It seems that using puppet has a pretty steep learning curve, at least from what I could gather skimming the docs. Actually what I would really like to see is an interactive script, which then guides me through the process of hardening a fresh ubuntu server install, offering sane suggestions along the way. I am pretty sure such scripts do exist, but having them maintained and regualarly updated somewhere would be quite neat.

ajdecon 14y ago
It hasn't been updated too much recently, but I've used Bastille for this in the past, and it's in the Ubuntu repos. http://bastille-linux.sourceforge.net/ http://bastille-linux.sourceforge.net/
- tucosan 14y ago
  Yeah, I forgot about bastille. On their news page they claim that development has been restarted recently. Lets hope that it gains enough momentum again.
  - npsimons 14y ago
    Last I checked, Bastille was broken enough that you could fix it easily (I made a few small patches myself), if you knew what you were doing. Which kind of defeats a lot of the power of Bastille, but at least it was still kind of a handy automated checklist for seasoned sysadmins.
MikeKusold 14y ago
I'm in the process of automating the configuration of my VPS using Ansible. This tutorial is an excellent introduction http://lextoumbourou.com/blog/posts/getting-started-with-ansible/ http://lextoumbourou.com/blog/posts/getting-started-with-ans...
- tucosan 14y ago
  ansible looks pretty good. thx for the link.
  - crucialfelix 14y ago
    About a year ago I spent several days trying to get a full puppet system. It was a real headache to be honest and many of the modules have no or very vague docs. Coming back to my setup it's very hard to read or trace what my setup is or how to do one off deployments. Today I have started with ansible and have already gotten a huge amount done and deployed. Very happy with it. It's all in a small git repo and its very readable and concise.
- elbear 14y ago
  Nice, I'm on the same road. I'm also looking at Ansible, it's just that I haven't got around to it yet.

by tucosan 14y ago

ajdecon 14y ago

It hasn't been updated too much recently, but I've used Bastille for this in the past, and it's in the Ubuntu repos. http://bastille-linux.sourceforge.net/ http://bastille-linux.sourceforge.net/

tucosan 14y ago
Yeah, I forgot about bastille. On their news page they claim that development has been restarted recently. Lets hope that it gains enough momentum again.
- npsimons 14y ago
  Last I checked, Bastille was broken enough that you could fix it easily (I made a few small patches myself), if you knew what you were doing. Which kind of defeats a lot of the power of Bastille, but at least it was still kind of a handy automated checklist for seasoned sysadmins.

MikeKusold 14y ago

I'm in the process of automating the configuration of my VPS using Ansible. This tutorial is an excellent introduction http://lextoumbourou.com/blog/posts/getting-started-with-ansible/ http://lextoumbourou.com/blog/posts/getting-started-with-ans...

tucosan 14y ago
ansible looks pretty good. thx for the link.
- crucialfelix 14y ago
  About a year ago I spent several days trying to get a full puppet system. It was a real headache to be honest and many of the modules have no or very vague docs. Coming back to my setup it's very hard to read or trace what my setup is or how to do one off deployments. Today I have started with ansible and have already gotten a huge amount done and deployed. Very happy with it. It's all in a small git repo and its very readable and concise.
elbear 14y ago
Nice, I'm on the same road. I'm also looking at Ansible, it's just that I haven't got around to it yet.