How to configure servers with cdist¶

Introduction¶

We are using cdist to manage our system configurations. This software has originally been developped by ungleich-folk, but now has a much broader community.

The ungleich cdist environment¶

Our environment is composed of 4 repositories:

• ungleich-intern/cdist-workdir: meta-repository used as convenience helper to run access types across our 3 type repositories.
• ungleich-intern/dot-cdist: internal (= private) and historic cdist repository. Contains our manifests.
• ungleich-public/cdist-ungleich: public (infrastructure transparency, sharing with the community) ungleich types that are too specific to be upstream to core cdist or cdist-contrib.
• ungleich-public/cdist-contrib: community-managed repository for types that do not fit into core-cdist.

Applying changes to servers¶

Initial setup:

• Clone ungleich-intern/cdist-workdir
• Install myrepos and - within cdist-workdir - run mr update.
• Set your CDIST_PATH, using - for example - the cdist.cfg file in cdist-workdir.

Day-to-day workflow, within cdist-workdir:

• Make sure you have the latest configuration/types with mr update.
• Configure the target host with cdist config -vv <hostname>.

Using the control node¶

You can use the control node to run cdist when you're using an unreliable connection (in a train, far away in Korea, etc.). Note that you will have to forward your SSH agent with the -A ssh flag.

# Login to configuration server
ssh -A ungleich@control.ungleich.ch

# Ensure cdist configuration is up-to-date
cd cdist-workdir
mr update

# Configure
cdist config -vv <hostname>