Managing Windows with Puppet

Transcript

1. Managing Windows with Puppet Experiences from the trenches
2. @liamjbennett
7. Your turn
8. Not talking about
9. The puppet tool chain
10. Powershell
11. Puppet for all the things
12. This talk
13. The basic puppet types for windows The Good … and some of the new ones
14. Gotchas for Windows The Bad
15. Testing on Windows The Ugly
16. file { 'c:/mysql/my.ini': ensure => 'file', mode => '0660', owner => 'mysql', group => 'Administrators', source => 'N:/software/mysql/my.ini', } The Types I Like package { 'Git version 1.8.4': ensure => installed, source => 'N:/software/git-1.8.4.exe', install_options => '0660', } service { 'mysql': ensure => 'running', enable => true, }
17. exec { 'random script': command =>'cmd.exe /c type c:\path\to\file.txt', } The Types I Don’t Like user { 'bob': ensure => present, groups => ['Users','Administrators'], password => 'ouch', } schedule_task { 'another task': enable => true, command =>'cmd.exe /c type c:\path\to\file.txt’, trigger => { schedule => daily, } }
18. windowsfeature { 'Web-WebServer': installsubfeatures => true, } Other useful stuff registry_key { 'HKLM\System\CurrentControlSet\Services\Puppet': ensure => present, } exec { 'rename-guest': command => '$(SOME_POWERSHELL)', provider => powershell } reboot { 'after': subscribe => Package['SomePackage'] }
19. Other useful stuff iis::manage_app_pool { 'my_application_pool': enable_32_bit => true, managed_runtime_version => 'v4.0' } iis::manage_site { 'www.mysite.com': site_path => 'C:\inetpub\wwwroot\mysite', port => '80', ip_address => '*', host_header => 'www.mysite.com', app_pool => 'my_application_pool', } iis::manage_virtual_application { 'application1': site_name => 'www.mysite.com', site_path => 'C:\inetpub\wwwroot\application1', app_pool => 'my_application_pool', }
20. The Gotchas
21. File Paths file { 'c:/path/to/file.txt': } file { 'c:\path\to\file.txt': } file { "c:\\path\\to\\file.txt": }
22. file/acl file { 'c:/mysql/my.ini': ensure => 'file', mode => '0660', owner => 'mysql', group => 'Administrators', source => 'N:/software/mysql/my.ini', } acl { 'c:/mysql/my.ini': permissions => [ { identity => 'Administrator', rights => ['full'] }, { identity => 'Users', rights => ['read','execute'] } ], }
23. puppetlabs/acl
24. WOW3264 re-direction C:\Windows\System32\ C:\Windows\SysWOW64\
25. UAC Manually running puppet in a non- admin context -> Don’t do this.
26. WinRM Quotas winrm set winrm/config @{MaxTimeoutms="1800000"} winrm set winrm/config/winrs @{MaxMemoryPerShellMB=""}
27. Reboots Can’t install a package because of “waiting for reboot” state
28. puppetlabs/reboot
29. WTF Bugs KB2773898 - access denied installing msu KB2918614 - windows update that broke msi installs KB2842230 - ignores MaxMemoryPerShellMB
30. Testing
31. • rspec-puppet • beaker (with winrm) • serverspec • vagrant/packer • booting 4GB images
32. Questions? And thanks for listening
33. @liamjbennett liamjbennett@gmail.com liamjbennett.me @OpenTableTechUK tech.opentable.co.uk