Line 1: |
Line 1: |
− | | + | salt, or [http://www.saltstack.com/ saltstack], is a provisioning system like puppet or chef. It's the provisions system PS:One Systems Group uses to manage and maintain the servers. |
| | | |
| == Adding a new box == | | == Adding a new box == |
Line 9: |
Line 9: |
| sudo salt-key -a foobox | | sudo salt-key -a foobox |
| sudo salt 'foobox' state.highstate | | sudo salt 'foobox' state.highstate |
| + | |
| + | == Changeing salt config == |
| + | |
| + | * Make your changes in /srv/salt/ |
| + | |
| + | === Test your changes === |
| + | Test your changes. Testing against a single box is wiser than testing against the entire network |
| + | |
| + | sudo salt 'sally.ad.pumpingstationone.org' state.highstate test=True |
| + | |
| + | |
| + | If you are satisfied, run the command for real |
| + | |
| + | sudo salt 'sally.ad.pumpingstationone.org' state.highstate |
| + | |
| + | |
| + | reboot the box and make sure it still comes back up and works correctly. |
| + | |
| + | === Deploying changes === |
| + | |
| + | sudo salt --state-output=mixed '*' state.highstate test=True |
| + | |
| + | sudo salt '*' state.highstate |
| + | |
| + | == Upgrading Everything == |
| + | |
| + | test the upgrade against a single box |
| + | |
| + | <syntaxHighlight lang=bash> |
| + | sudo salt 'sally.ad.pumpingstationone.org' pkg.upgrade |
| + | sudo salt 'sally.ad.pumpingstationone.org' cmd.run 'reboot' |
| + | </syntaxHighlight> |
| + | |
| + | After rebooting the test box, log back in and make sure everything appears to work correctly. |
| + | Once you are satisfied you are not going to have a long night repairing the network, deploy upgrades everywhere. |
| + | |
| + | <syntaxHighlight lang=bash> |
| + | sudo salt '*' pkg.upgrade |
| + | </syntaxHighlight> |
| + | |
| + | == Adding someone's SSH key to root access == |
| + | |
| + | 1. Get an SSH key. Here are some simple instructions: |
| + | *[https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys--2 Linux] |
| + | *[https://www.ssh.com/ssh/putty/windows/puttygen Windows] |
| + | |
| + | |
| + | It would be nice if this was better documented. |