this post was submitted on 03 Oct 2024
64 points (98.5% liked)

Ask Lemmy

26504 readers
918 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected]. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 1 week ago

Preach! I got onboarded to a team with 31 other SRES and 2 weeks in I realized that I was doing all their jobs in Linux solo. The things got helped my team before I got there: octopus deploy's "run script on host" it's not too different from invoke command -computername "", but Active directory :vomit: and security locked down most of the useful tools, so they used octo runbooks instead (also vomit but you do get tools back in the remote UI) but it's setup with tentacles w/ identifiable ssh keys so it skips ad. It also lets you set env variable libraries.

Move configs to dev repos and make them set/read their own yaml/json, for some reason windows shops didn't get that memo. Royal TSX is a decent rdp client that you can script host lists and store prod/dev credentials, ours is basically just knife node list | sort windirstat is a GUI replacement for du - *. The light at the end of the tunnel is when you drop the codebase in a windows container and just remove all of the iis mess/instability for container management.

Right now we are trying to figure out bootstrapping. In order to provision a new host we need to reboot the box 2x for ad and one for the app stack. We think we can remove the hostname assignment, but AD shakes fist... it's kinda pointless targeting an automated step, when it needs manual intervention later anyways.