Iterate faster with Immutable Infrastructure Basil Brunner (@myniva) | Extron Electronics, Zurich 

About me Basil Brunner Software & Operations Engineer with strong DevOps mindset Basil Brunner (@myniva) | Extron Electronics, Zurich 

State of DevOps Report 20161 In comparison to Low Performers, High Performers do: 1 https:/ /puppet.com/resources/whitepaper/state-of-devops-report Basil Brunner (@myniva) | Extron Electronics, Zurich 

Compare 2016 to 2017 Do not only optimize for throughput! Basil Brunner (@myniva) | Extron Electronics, Zurich 

Manual work Basil Brunner (@myniva) | Extron Electronics, Zurich 

2014 in a small start-up... • Jumped on the DevOps train • Automate deployments with Ansible • Local testing with Vagrant (VM) • Super proud to get it done Basil Brunner (@myniva) | Extron Electronics, Zurich 

2015: Failed Executions • Connectivity issues • External dependency not available • Version incompatibility (changed packages on system) • Deployments took too long • ... Basil Brunner (@myniva) | Extron Electronics, Zurich 

... which results in: • Downtime • Unknown system state • !!! Fire drills !!! Basil Brunner (@myniva) | Extron Electronics, Zurich 

2016 Configuration as Code is not good enough! Basil Brunner (@myniva) | Extron Electronics, Zurich 

What could be the reason? Basil Brunner (@myniva) | Extron Electronics, Zurich 

Vision Basil Brunner (@myniva) | Extron Electronics, Zurich 

Immutable Infrastructure • Apply patterns well known from programming • Do not change once instantiated • Replace to make change • Data centers have got an API, too Stop server hugging! 2 2 Werner Vogels, CTO Amazon Basil Brunner (@myniva) | Extron Electronics, Zurich 

Virtual Machines are instantiated based on Machine Images OK, but how does my application get in there? Basil Brunner (@myniva) | Extron Electronics, Zurich 

• Machine Image builder • Open Source • Simple concepts, steep learning curve • Easy to integrate with other tools like Jenkins Basil Brunner (@myniva) | Extron Electronics, Zurich 

Packer Builder • Amazon Web Services (AMI) • Microsoft Azure (VHD) • Google Cloud Platform • VMware • Hyper-V • VirtualBox • Parallels Basil Brunner (@myniva) | Extron Electronics, Zurich 

{ "builders": [ { "type": "amazon-ebs", "region": "us-east-1", "source_ami": "ami-788362984", "instance_type": "t2.micro", "ami_name": "packer-demo-{{timestamp}}" } ] } Basil Brunner (@myniva) | Extron Electronics, Zurich 

Packer Provisioners • Ansible • Chef • Puppet • Shell • PowerShell Basil Brunner (@myniva) | Extron Electronics, Zurich 

{ "builders": [...], "provisioners": [ { "type": "ansible-local", "playbook_file": "../ansible/site.yml" } ] } Basil Brunner (@myniva) | Extron Electronics, Zurich 

Build $ packer build example.json ==> amazon-ebs: amazon-ebs output will be in this color. ==> amazon-ebs: Launching a source AWS instance... ==> amazon-ebs: Connecting to the instance via SSH... ==> Provisioning ==> amazon-ebs: Stopping the source instance... ==> amazon-ebs: Creating the AMI: packer-demo-1371856345 --> amazon-ebs: AMIs were created: us-east-1: ami-19601070 Basil Brunner (@myniva) | Extron Electronics, Zurich 

Benefits of using Packer • Most existing configuration code (Ansible, Puppet, Chef) can be reused • Painless and repeatable Machine Images build • Build failed? Implement fix and run again! Basil Brunner (@myniva) | Extron Electronics, Zurich 

Pipeline • Do it more often! (we recommend: daily) Basil Brunner (@myniva) | Extron Electronics, Zurich 

Unit test your infrastructure • Test for expected system state • Find issues before they leak into production • Tools • InSpec3 • Serverspec 4 4 https:/ /serverspec.org 3 https:/ /www.inspec.io Basil Brunner (@myniva) | Extron Electronics, Zurich 

Replacing instead of Maintaining • Instances always close to target state • Faster lead times, but also shorter MTTR • Reduced error rates and threats • Cloud readiness • automated scaling • replacement of underlaying hardware Basil Brunner (@myniva) | Extron Electronics, Zurich 

Become High Performers • Automate A-Z, not just parts! • Replacement of servers should be just on click away • Use safe deployment strategies • Blue-Green • Canary Basil Brunner (@myniva) | Extron Electronics, Zurich 

Who? • US company, software engineering branch in Zurich • Interdisciplinary DevOps team • Looking for like-minded colleagues Basil Brunner (@myniva) | Extron Electronics, Zurich 

Contact • Twitter: @myniva • LinkedIn: basilbrunner • www.extron.com / @extron Basil Brunner (@myniva) | Extron Electronics, Zurich