Intro to Foreman 2017 (cfgmgmtcamp Gent)

Intro to Foreman 2017 (cfgmgmtcamp Gent)

Fe4dc5ea02ac73b9981bcc549a7a288c?s=128

Daniel Lobato García

January 25, 2017
Tweet

Transcript

  1. Introduction to Foreman (2017 edition!) cfgmgmtcamp Gent ‘17 Daniel Lobato

    García (@dLobatog)
  2. FOREMAN AT PUPPETNYC - 07/30/15 2 Lifecycle management tool for

    physical and virtual servers FOREMAN 101
  3. FOREMAN AT PUPPETNYC - 07/30/15 3 Provisioning Configuration Monitoring FOREMAN

    101 Lifecycle
  4. FOREMAN AT PUPPETNYC - 07/30/15 4 BARE METAL VIRTUAL MACHINE

    PXE (vmlinuz + initrd) Optional: discovery (micro image) Image based Optional: Cloud-init FOREMAN 101 Provisioning
  5. FOREMAN AT PUPPETNYC - 07/30/15 5 FOREMAN 101 Provisioning •

    DNS • DHCP • AD/IPA realms • PuppetCA autosign
  6. FOREMAN AT PUPPETNYC - 07/30/15 6 FOREMAN 101 Configuration Network

    B Network A Smart Proxy Ansible Smart Proxy Puppet master
  7. FOREMAN AT PUPPETNYC - 07/30/15 7 FOREMAN 101 Configuration Daemon

    to integrate with existing services • Puppet masters / CA • Salt master • Chef server • AD DNS • Etc... Main tool to make Foreman work in segmented networks Smart Proxy
  8. FOREMAN AT PUPPETNYC - 07/30/15 8 FOREMAN 101 Configuration -

    ENC classes: docker: puppetdb::server parameters: puppetmaster: puppetmaster.mylan foreman_env: production foreman_subnets: [] foreman_interfaces: - mac: e6:1f:13:7e:4e:47 ip: 10.16.76.82 type: Interface name: attrs: {} virtual: false link: true identifier: enp0s26u2 managed: true subnet: environment: production
  9. FOREMAN AT PUPPETNYC - 07/30/15 9 FOREMAN 101 Monitoring Configuration/system

    inventory • Puppet facts • Puppet reports storage • Salt highstate • Chef reports • ABRT • OpenSCAP
  10. SAME AS ANY OTHER YEAR?

  11. CONFERENCIA RAILS 2016 11 INSTALLATION OF A RACK SERVER

  12. CONFERENCIA RAILS 2016 12 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup
  13. CONFERENCIA RAILS 2016 13 INSTALLATION OF A RACK SERVER

  14. CONFERENCIA RAILS 2016 14 INSTALLATION OF A RACK SERVER

  15. CONFERENCIA RAILS 2016 15 INSTALLATION OF A RACK SERVER

  16. CONFERENCIA RAILS 2016 16 INSTALLATION OF A RACK SERVER

  17. CONFERENCIA RAILS 2016 17 INSTALLATION OF A RACK SERVER

  18. CONFERENCIA RAILS 2016 18 INSTALLATION OF A RACK SERVER

  19. CONFERENCIA RAILS 2016 19 INSTALLATION OF A RACK SERVER

  20. CONFERENCIA RAILS 2016 20 INSTALLATION OF A RACK SERVER

  21. CONFERENCIA RAILS 2016 21 INSTALLATION OF A RACK SERVER

  22. CONFERENCIA RAILS 2016 22 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically
  23. CONFERENCIA RAILS 2016 23 INSTALLATION OF A RACK SERVER

  24. CONFERENCIA RAILS 2016 24 INSTALLATION OF A RACK SERVER

  25. CONFERENCIA RAILS 2016 25 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible runs automatically to enforce its roles
  26. CONFERENCIA RAILS 2016 26 INSTALLATION OF A RACK SERVER

  27. CONFERENCIA RAILS 2016 27 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible is ran automatically to enforce its role 4) Foreman Remote Execution scheduled jobs keep the host updated. Errata and OpenSCAP policies are checked every night.
  28. CONFERENCIA RAILS 2016 28 INSTALLATION OF A RACK SERVER

  29. CONFERENCIA RAILS 2016 29

  30. CONFERENCIA RAILS 2016 30 INSTALLATION OF A RACK SERVER 1)

    Upon first connection, Foreman Discovery PXE boots the hosts and provisions them with the right OS and host group and DHCP/DNS setup 2) Foreman sets up the right SSH keys for remote execution and Ansible automatically 3) After the host is created, Ansible is ran automatically to enforce its role 4) Foreman Remote Execution scheduled jobs keep the host updated. Errata and OpenSCAP policies are checked every night. 5) Decommissioning of all host “facts.rack_location = C932” • Foreman auto removes DNS entries, DHCP lease, and Puppet CA autosigns.
  31. 31 FOREMAN AT PUPPETNYC - 07/30/1 5 THEFOREMAN.ORG Foreman-users #theforeman

    on Freenode IRC @ForemanProject