Archive | sysadmin

18 May 2010 ~ Comments Off

Monitoring, another way

Some friends told me for a while about collectd, why I should look at it, why munin is so painful and so on. If you’ve been reading my posts you know I have tweaked a little my $WORK munin install to make it faster and lighter. But I finally took time to explore collectd, and [...]

Continue Reading

14 April 2010 ~ Comments Off

Mcollective & Xen : naughty things

I already blogged about my experiments with mcollective & xen but I had something a little bigger in my mind. A friend had sent me a video showing some vmware neat features (DRS mainly) with VMs migrating through hypervisors automatically.
So I wrote a “proof of concept” of what you can do with an awesome tool [...]

Continue Reading

06 April 2010 ~ Comments Off

Meet the marionette

Another cool project I keep an eye on for some weeks is “the marionette collective“, aka mcollective. This project is leaded & develloped by R.I. Pienaar, one of the most active people in the puppet world too.
Mcollective is an framework for distributed sysadmin. It relies on a messaging framework and has many features included : [...]

Continue Reading

02 March 2010 ~ Comments Off

In the network space no one can hear your puppet scream

I’ve been lazy at maintaining my servers recently and decided to start playing with puppet reports. First I started with something simple that helps me to find on which machines my manifests have some failure.
So here’s a quick and dirty code that goes through Puppet’s reportdir and points out neglected machines.

#!/usr/bin/env ruby
 
require ‘puppet’
require ‘find’
require ‘yaml’
require [...]

Continue Reading

26 February 2010 ~ Comments Off

A pkgin provider for puppet

On my Solaris machines at $WORK I use iMil’s pkgin to install additional software. But until today, I add to do it by hand, on every machine… Not really what I like to do after a little more than a year using puppet. So I wrote a provider to manage packages with pkgin. It was [...]

Continue Reading

22 February 2010 ~ Comments Off

When puppet meets nginx

At $WORK I started using Nginx a while ago, first as a front end to my mongrel instances for puppet. Recently I began to use it for one of its most know features : reverse proxy (and caching too). Of course this work had to be puppetized !
This is a summary of what I’ve done [...]

Continue Reading

27 January 2010 ~ Comments Off

Put your ruby in my ERB

Today I started installing a reverse proxy at $WORK. I choose to follow this way, and all my DNS data is stored in my CMDB. Once again, the solution came from #puppet ! You can embed some “pure” ruby code in ERB templates. And, yes, you can query your database !

<%
dbh = DBI.connect("DBI:Mysql:yourbase:mysql.mycorp.com", "you", [...]

Continue Reading

12 January 2010 ~ Comments Off

Spreadsheets Vs Post-It Notes

I’m a fan of documentation, over the years I’ve ended up supporting more
than one business critical system that has less documentation than you get
from a cat /dev/null.

The only downside, and I’ve been bitten by a couple of things like this
over the…

Continue Reading

12 January 2010 ~ Comments Off

Count of denied connections with iptables

In my iptables configurations, I generally allow all traffic I am interested in and deny the rest, logging anything that is denied. I found that this can get a bit noisy with loads of connections to udp:137 and udp:500, etc. so I decided to deny the more common ports without logging. But which are the [...]

Continue Reading

16 December 2009 ~ Comments Off

Solaris fnu

à $WORK je réinstalle des Solaris 10, et il y a des petits trucs qui font que l’environnement n’est pas directement convivial, surtout quand on a l’habitude d’une debian où il y a mass wrappers. Heureusement, le dernier né de tonton iMil est dispo et fonctionne du tonnerre. De même, il n’y a pas de [...]

Continue Reading