push a few config files to dozen or so servers

Chris Nehren cnehren+freebsd-stable at pobox.com
Thu Feb 5 12:41:12 UTC 2015


On Thu, Feb 05, 2015 at 13:32:53 +0100, Schaich, Alonso wrote:
> On Thu, 5 Feb 2015 13:02:34 +0100
> Marko Cupa? <marko.cupac at mimar.rs> wrote:
> 
> > Hi,
> > 
> > thanks to virtualization, my fleet of FreeBSD hosts have grown to more
> > than dozen, and it still grows. There are some files that need to be
> > identical on all of them (aliases, sudoers, root crontab, pkg repo
> > files etc.).
> > 
> > I was looking at puppet and cfengine but learning and implementing those
> > seem like an overkill for my purpose.
> > 
> > Are there any other elegant solutions which can help me achieve my goal?
> 
> If they really need to be identical all the time, I'd put them on a
> network share mounted at boot and symlink on them from etc, var/mail,
> and so on. repositories can be mount points themselves, so clearly
> candidates for a network share, too.

Putting critical files like sudoers and other files in /etc on a
network share makes me quite uncomfortable, especially in the
case of means to authenticate users or escalate privileges. When
(not if) the network or the file share are unavailable, it
becomes far harder than it needs to be to troubleshoot the
problem. Network filesystems are great, until they break, and
then they're far, far worse than all the alternatives.

-- 
Chris Nehren
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 904 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20150205/8e33fb4e/attachment.sig>


More information about the freebsd-stable mailing list