devsummit:201208:lssysadmin

Large Scale Sysadmin stuff

Birth → Death

  • PXE
  • Scripted Install http://planet.freebsd.org/brd/2012/05/08/scripted-install-of-freebsd-9/ (This link is broken)
  • Management (puppet, Chef, CFEngine, Perl)
  • Central auth (kerberos)
  • Upgrades
  • Packages / Bulk builds (pgkng/poudriere)
  • Never do anything only once, everything should be a repeatable process
  • bsdinstall not there yet for scripted install; just using a 100lines shell script
  • puppet, interest at PC-BSD side
  • pkgng to update the base system (binary patches, whatever, ..)
  • a bit of security on jail updating
  • puppet self-update → no
  • puppet patches → port → upstream (github pull requests)
  • kerberos (TODO: docs missing, sparse, needs updated, …) vs. puppet users setup
  • freebsd-udpate works fairly well; scripting freebsd-update; see ezjail-admin; PC-BSD as well; should fix freebsd-update; des: forks for sha256, .., simon: maybe just optimize; maybe just optimize parts and work; etcmerge; error handling is missing; Someone other than Colin should touch it
  • build packages in jails for sets of machines; poudriere needs ZFS; rebuilds everything; the pkg upgrade; pkg update
  • Need sub-packages for pkg options; PC-BSD builds from source; need a way to build more options; split things up into lots of individual parts instead of all of it in one package
  • How to manage PXE environments? Have different versions set; PC-BSD 9 has a utility to setup the pxe server, pc-sysinstall config, options to setup, setups NFS, etc.; UoOslo provisioning infos
  • pxeboot hangs on nfs_root; timeouts?; no sophisticated error handling; permission denied for example;
  • uEFI and IPv6? Not yet an issue with either; pxe still works fine
  • PC-BSD what other requests: puppet (see above), truenas, AD/nss_ldap, ZFS boot environments (snapshots in ports tree)/in PC-BSD 9 special boot environments, pc-sysinstall supports it, now supports installing linux into jails
  • TrueOS, targeting linux users, meet them half-way, ..
  • Cambridge: Xen, kerb for auth is fine, krb5 for amd is missing
  • iX working on NFS v4 things, XinLi maybe doing it, coordinate!
  • devsummit/201208/lssysadmin.txt
  • Last modified: 2021/04/25 07:13
  • by JethroNederhof