[nycbug-talk] SaltStack and Ansible experience?

Charles Sprickman spork at bway.net
Fri Jul 26 04:35:53 EDT 2013


On Jul 25, 2013, at 7:03 PM, Bob Ippolito wrote:

> I started playing around with Ansible yesterday. I like it so far (compared to prior experience with Puppet). Haven't tried to do BSD-centric things with it, but seems easy enough to extend if you need to. I looked at SaltStack as well, but the fact that they decided to build a broken cryptosystem themselves worries me. I have heard good things about it otherwise.

Can you elaborate on that last part?

Is it this issue?

https://github.com/saltstack/salt/issues/2239

In my use case, that's not a likely threat, but for those using it to manage multiple locations over a public network or to manage things in "the cloud" I imagine it's more problematic.

Charles

> 
> 
> On Thu, Jul 25, 2013 at 3:55 PM, Bill Totman <billtotman at billtotman.com> wrote:
> On 7/25/13 6:49 PM, "Pete Wright" <pete at nomadlogic.org> wrote:
> 
> 
> >On 07/25/13 15:43, Charles Sprickman wrote:
> >> While looking through the wikipedia list of configuration management
> >>software[1], I noticed a few new entrants that appear to have some
> >>momentum, Ansible[2] and SaltStack[3].  Both appear to have a fair
> >>amount of support for the *BSDs.  Both are python based.
> >>
> >> For example, looking at SaltStack's list of modules[4], I see support
> >>for lots of FreeBSD features: using pkgng (like full support - upgrading
> >>a package, fetching current package options, making a backup of an
> >>installed package), poudriere (trigger a bulk build, list/create jails
> >>and ports trees), and jails.
> >>
> >> Anyone here use either of these?  Ideally I'd like something a bit
> >>lighter, but SaltStack is intriguing so far.  I also need to see what
> >>Puppet currently looks like, but the few BSD-centric reviews I've seen
> >>of SaltStack and Ansible both note that support for at least FreeBSD is
> >>better than in Puppet-land and that both projects are happy to take
> >>patches.
> >>
> >
> >I am a pretty big fan of Ansible - and the primary dev behind it was
> >also they guy responsible for cobbler and func (and worked at puppetlabs
> >in a key position for a while as well).
> >
> >i've been a long time user of cobbler and func in small and *very* large
> >environments and have been quite happy with the quality of code and its
> >extensibility.  ansible seems to have the same DNA and community that
> >was built around cobbler, so i strongly suggest giving it a serious look.
> >
> >-p
> >
> >
> >--
> >Pete Wright
> >pete at nomadlogic.org
> >twitter => @nomadlogicLA
> >
> >_______________________________________________
> >talk mailing list
> >talk at lists.nycbug.org
> >http://lists.nycbug.org/mailman/listinfo/talk
> 
> 
> The May NYC*BUG was about Ansible (it was very good by way):
> 
> http://www.nycbug.org/?action=home&id=10335
> 
> 
> 
> -bt
> 
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk
> 
> _______________________________________________
> talk mailing list
> talk at lists.nycbug.org
> http://lists.nycbug.org/mailman/listinfo/talk

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nycbug.org:8443/pipermail/talk/attachments/20130726/364a89e6/attachment.htm>


More information about the talk mailing list