I have a situation where the developers of an application I support have a line that truncates their command history upon login. This is in .bash_profile and the /etc/skel directory across hundreds of systems. I would like to remove that line/function for users of a certain Unix group (70+ people) across every system. Doable in Puppet? @DennisKaarsemaker @freiheit @MichaelHampton
Also, @MikeyB, I'm really getting pissed off at MailFoundry. I told them about the AAAA queries being made and showed the packet capture, and here's the response I just got: "The Mailfoundry does not have any ability to query for that. It simply queries the DNS servers for updates.mailfoundry.net. The telnet command that we are running is a straight forward telnet command from 2004."
@freheit In CFEngine, it would be a case of commenting out the line. I need this to take care of the /etc/skel file (easy) and the individual users' .bash_profile without impacting other aliases/settings that may be in place.
@MikeyB What they're saying is that nothing on the box asks for AAAA. They are implying that a request for a AAAA is not coming from the hardware at all, but it's magically being inserted into the wire by the Travelocity Gnome or something.
@DennisKaarsemaker For real magic, you pull the group info into puppet some way or another and use create resources or define tricks to create individual versions of that.
@MikeyB "The Mailfoundry does not have any ability to query for that." sounds to me like they're not even allowing for the possibility that the host OS knows how to query for a AAAA.
Also I have even less trust for this vendor since they're obviously incapable of accurate communication at best and completely clueless about their own product at worst.
@ewwhite You'd... write a fucking custom fact to return a list of all the users (or at least their homedirs) and then manipulate that fact into an array that you pass to a custom define that's just a wrapper around file_line with ${name} used heavily and... yeah, stick with the shell pattern thing
@ewwhite No i am not married to it. but we need 4 disks in raid 10 with at least 600G on that server, and we wanted to try to use 2 pcie drives with HP smart cache.
Apparently the NAS hates me. Hit "install update", gives me an unauthorized message and boots me out. Can't log in via LDAP anymore. This is gonna be fun..
LSI offers their CacheCade storage tiering technology, which allows SSD devices to be used as read and write caches to augment traditional RAID arrays.
Other vendors have adopted similar technologies; HP SmartArray controllers have their SmartCache. Adaptec has MaxCache... Not to mention a numbe...
@ewwhite I was under assumption you can tell HP Smart Cache to use for caching the fastest disks you have in the system regardless of them being on raid controller, i guess i was wrong.
@BigHomie I honestly don't care that much. I've seen large systems based on Ubuntu that can be sane. I just think Debian is a saner distro if you must have apt. I simply don't trust Ubuntu's repos and don't trust their package defaults.
Really, I'm personally convinced that there's only two distros that are drop-in ready for enterprise stuff in the Linux landscape: RedHat and Debian. Not sure about SUSE, but I think it can be done if you have a support contract and people that are SUSE specific. Unbreakable if you're into getting taken to pound town in a leather bar.
@DanilaLadner I should qualify that, I guess. A quarter mil a year, here. Not in like SanFran where that'll get you a 1200 square foot, 2 bedroom apartment, surrounded by an assortment of hipsters and hobos.
This is a Canonical Question about IPv6 and NAT
Related:
How does IPv6 subnetting work and how does it differ from IPv4 subnetting?
How can I 'dip my toes' into dynamic IPv6 network addressing?
IPv6 without nat but what about an isp change?
So our ISP has set up IPv6 rece...
Anyone in here has used PuPHPet and knows a bit about puppet? Would need some basic explanation as the docs are quite ... horrific. I have half a question finished, but not sure if such basic stuff would get any attention.
@MichaelHampton I searched already, that's why I have half a question finished. I so far don't get the whole picture. Missing piece now is where to add a new module.
I configured everything on the PuPHPet app/website and downloaded the configuration. It gives me a .vagrant and a puppet folder. Now I need to add some wordpress-puppet module and some other modules. Therefore I cloned them into ~/puphpet/puppet/modules/wp.
I can read how I configure it (in code), but I don't get around how puppet is structured, what gets loaded when, etc. So I'm stuck and "dunno where to put da codez!".
@MichaelHampton Ok, I've read the answers and I think I better understand. So right now, v4 requires NAT, which grants a default slightly-better-than-nothing firewall (stateful, someone called it). v6 has more addresses, and obviously will eventually be the only accepted protocol on the internet. Until then, though, unless v4 doesn't have enough addresses for the network, there's no gain except NAT elimination from going to v6?
Our office NAT router (an old Linksys
BEFSR41) does not support IPv6. Nor
does any newer router
IPv6 is supported by many routers. Just not that many of the cheap ones aimed at consumers and SOHO. Worst case, just use a Linux box or re-flash your router with dd-wrt or something to get ...
@Basil NAT fundamentally is meant to give access to hosts that wouldn't otherwise have it. It is not an access control mechanism. Thats what you use a firewall to do.
"The only protection you get from RFC1918 addresses is that allows people to get away with errors/laziness in your firewall config and still not be all that vulnerable."
@MichaelHampton What would getting rid of NAT gain me?
@kaiser Those are two things that seem very strange combined. Vagrant is generally frowned on here as a "not serious" developer tool. Though we love puppet...
This is another point that warrants repetition: the belief that
administrators can predict which machines will need Internet access
is quite simply wrong. We need to reduce or eliminate the penalties
associated with that error, in order to encourage as much Internet
connectivity as operational policies and technical security permit.
@kaiser And yes, it's large now because it has a lot of features. But for the most part they all make sense and have a place. Back then... let's just say I had to fork WordPress once because of some bad code.
There are two types of views for all list table views: List and Excerpt
I tried adding a third one "Calendar" by extending WP_List_Table. Endless hooks/callback hell massacre just to intercept the global(!) that holds the instance of that table singleton(!).
@MichaelHampton I wrote a patch to separate login and admin four years ago. rewrote with each new version until I gave up.
@MichaelHampton No, they never accepted my patches. I ranted too much about WP :D Seems like it's getting better since some versions. Nacin (lead dev) fixed Trac some month ago so people can see my avatar now and they started digging some patches up and discussing it. But I'm already too fed up.
Yeah, static site builders aren't all that bad (and maintenance heavy) and Ghost (the new Node thingy) has quite a nice writing experience if you need just a blog.
Eh, just an actual website for me (my own little side business) ...nothing special. If I thought about it more before springing a year's worth of hosting i'd just use S3 and a static site lol
multisite isn't bad per se. actually it can be nice if used right. you could break one site up into multiple mini apps, etc. etc. and at the end of the day you don't have to use it and most plugins and themes out there anyway aren't network ready.
I couldn't set up an easy rewrite so I didn't have WP files scattered in the web root...I asked the host and they said "install it on your root folder"
since somehow the documented way was impossible >_>
this doesn't really look easily extend-able. You might be able to add a new module to the Puppetfile and then declare it in the manifest.pp. But really, this is a mess to start with.