Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Configuration Management Anti-Patterns

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Sam Kottler Sam Kottler
June 20, 2013
Programming
2
1.2k

Configuration Management Anti-Patterns

Avatar for Sam Kottler

Sam Kottler

June 20, 2013
Tweet

More Decks by Sam Kottler

See All by Sam Kottler
This is your database on Linux
Avatar for Sam Kottler skottler
0
290
How to Debug Anything - DevOpsDay PGH
Avatar for Sam Kottler skottler
1
1.2k
Containerization primatives
Avatar for Sam Kottler skottler
0
150
Icinga at DigitalOcean
Avatar for Sam Kottler skottler
1
1k
PuppetConf '14
Avatar for Sam Kottler skottler
0
240

Other Decks in Programming

See All in Programming
『Kubernetes ☸️ で実践する Platform Engineering 』を最高速度で読み抜いたる！！👊🏻
Avatar for ⛵️ 長谷川 広樹 🐬 hiroki_hasegawa
0
100
それはエンジニアリングの糧である：AI開発のためにAIのOSSを開発する現場より / It serves as fuel for engineering: insights from the field of developing open-source AI for AI development.
Avatar for nrs nrslib
1
460
DevinとClaude Code、SREの現場で使い倒してみた件
Avatar for karia/Y.Hisamatsu karia
1
1.1k
生成 AI 時代のスナップショットテストってやつを見せてあげますよ（α版）
Avatar for ojun ojun9
0
290
maplibre-gl-layers - 地図に移動体たくさん表示したい
Avatar for Kouji Matsui kekyo
PRO
0
400
仕様漏れ実装漏れをなくすトレーサビリティAI基盤のご紹介
Avatar for Kuniwak orgachem
PRO
7
2.9k
Cyrius ーLinux非依存にコンテナをネイティブ実行する専用OSー
Avatar for n4mlz n4mlz
0
230
Nostalgia Meets Technology: Super Mario with TypeScript
Avatar for Manfred Steyer manfredsteyer
PRO
0
100
PHPのバージョンアップ時にも役立ったAST（2026年版）
Avatar for Atsushi Matsuo matsuo_atsushi
0
230
What Spring Developers Should Know About Jakarta EE
Avatar for ivargrimstad ivargrimstad
0
740
「接続」—パフォーマンスチューニングの最後の一手 〜点と点を結ぶ、その一瞬のために〜
Avatar for 武田 憲太郎 kentaroutakeda
3
1.7k
20260315 AWSなんもわからん🥲
Avatar for Chiaki Okamoto chiilog
2
170

Featured

See All Featured
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
230
Done Done
Avatar for chrislema chrislema
186
16k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
380
Have SEOs Ruined the Internet? - User Awareness of SEO in 2025
Avatar for Akash Hashmi akashhashmi
0
290
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
183
10k
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.4k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
666
130k
Leveraging Curiosity to Care for An Aging Population
Avatar for Cassini Nazir cassininazir
1
200
Pawsitive SEO: Lessons from My Dog (and Many Mistakes) on Thriving as a Consultant in the Age of AI
Avatar for David Carrasco davidcarrasco
0
92
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
92
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
220

Transcript

  1. Configuration Management Anti-Patterns Sam Kottler @samkottler Thursday, June 20, 13

  2. Hi, I’m Sam Thursday, June 20, 13

  3. Hi, I’m Sam Thursday, June 20, 13

  4. Configuration management is great. Thursday, June 20, 13

  5. I don’t really care which system you’re using. This talk

    will feature Puppet & Chef Thursday, June 20, 13

  6. Predictability Thursday, June 20, 13

  7. Scalability Thursday, June 20, 13

  8. Auditing Thursday, June 20, 13

  9. Opinions lie within Thursday, June 20, 13

  10. Thursday, June 20, 13

  11. Build packages. Seriously, it’s worth it. Thursday, June 20, 13

  12. /usr/bin/fpm -s gem -t rpm -n freight -v $VERSION -C

    $TMP_DIR \ -d "dpkg" usr/local Thursday, June 20, 13

  13. A quick diversion... Thursday, June 20, 13

  14. rpmbuild -ba foo.spec mock foo-3.4.0-1.src.rpm Thursday, June 20, 13

  15. dh_make git-buildpackage debuild-pbuilder Thursday, June 20, 13

  16. Thursday, June 20, 13

  17. And put them into repos. Thursday, June 20, 13

  18. Use PPA’s or COPR’s. Thursday, June 20, 13

  19. This is actually really easy to automate. Thursday, June 20,

    13

  20. Koji is your friend. Thursday, June 20, 13

  21. I’m working on an OS agnostic solution. Talk to me

    after if you want to help. Thursday, June 20, 13

  22. Inline logic that includes parameters Thursday, June 20, 13

  23. Thursday, June 20, 13

  24. Thursday, June 20, 13

  25. Thursday, June 20, 13

  26. Thursday, June 20, 13

  27. Lack of parameterization Thursday, June 20, 13

  28. “Why would I ever want to change this?” Thursday, June

    20, 13

  29. Parameterized classes, hiera, and attributes Thursday, June 20, 13

  30. Thursday, June 20, 13

  31. Thursday, June 20, 13

  32. Thursday, June 20, 13

  33. Just look at the Opscode cookbooks And give Joshua Timberman

    a hug. Thursday, June 20, 13

  34. Storing plain-text secrets in your config management repos. Thursday, June

    20, 13

  35. Encrypted databags Thursday, June 20, 13

  36. hiera-gpg Thursday, June 20, 13

  37. Role decisions based on inventory values Thursday, June 20, 13

  38. Thursday, June 20, 13

  39. Thursday, June 20, 13

  40. Thursday, June 20, 13

  41. Thursday, June 20, 13

  42. Thursday, June 20, 13

  43. $ FACTER_physicalprocesscount=2 puppet agent -t $ chef-client -j “{ processors:

    2 }” Thursday, June 20, 13

  44. Don’t fear wrapper cookbooks or modules. Thursday, June 20, 13

  45. Thursday, June 20, 13

  46. Remember all those awesome abstractions? Thursday, June 20, 13

  47. Stop putting upstream modules and cookbooks into your repos. Thursday,

    June 20, 13

  48. librarian-chef berkshelf Thursday, June 20, 13

  49. Thursday, June 20, 13

  50. Thursday, June 20, 13

  51. librarian-puppet Thursday, June 20, 13

  52. Don’t deploy with your configuration management tool Thursday, June 20,

    13

  53. Thursday, June 20, 13

  54. Rollbacks? Revision management? Thursday, June 20, 13

  55. Consistency? Phased rollouts? Thursday, June 20, 13

  56. Thursday, June 20, 13

  57. It’s a bug if you can’t run end-to-end provisioning in

    a single run. Thursday, June 20, 13

  58. Use a build system to run each type of machine

    in an isolated environment LXC or schroot are great for doing this Thursday, June 20, 13

  59. Deploy your configuration management tools just like production Thursday, June

    20, 13

  60. Questions? @samkottler [email protected] https://github.com/skottler Thursday, June 20, 13