Puppet and the Model-Driven Infrastructure

Puppet and our Model- driven future Luke Kanies luke@reductivelabs.com Founder, Reductive Labs Portland, Oregon USA

A bit about Puppet

You pull the strings, Puppet does the work

“...at Google we're currently using Puppet to manage close to 6,000 Macs, and it's likely our deployment will expand dramatically beyond that....”

Written in Ruby

Why does Puppet exist?

Embarrassment

Somebody has to do something, and it's just incredibly pathetic that it has to be us. -- Jerry Garcia

Why didn’t someone else make it?

Sysadmins do too much Image from http://ﬂickr.com/photos/shirleytwofeathers/2068713495/

Speciation Image from http://ﬂickr.com/photos/kenskritters/2128853769/

Sysadmins know too much

An Analogy Programming SysAdmin Low-level, commands Assembly non-portable and ﬁles Abstract, C* Resources portable * For small values of abstract

Virtualization and the cloud

Hardware Provisioning Deployment Old Days Cloud Days 0H 100H 200H 300H 400H

Dell Hardware Provisioning Deployment Old Days Cloud Days 0H 100H 200H 300H 400H

Dell Hardware Provisioning Deployment Old Days Cloud Days 0H 100H 200H 300H 400H You

“We’re here for your sysadmins”

Would your boss pick:

Would your boss pick: • The current service quality at a lower price?

Would your boss pick: • The current service quality at a lower price? • A higher service quality at the current price?

Let’s talk about you

Some questions

Some questions • How many of you have written software to manage computers?

Some questions • How many of you have written software to manage computers? • How many have published this software?

Developer Sysadmin

Three people Developer Sysadmin

Puppet allows you to bridge that gap Image from http://www.ﬂickr.com/photos/patrick-smith-photography/2969769911/sizes/o/

Either you can manage many machines with little effort

Either you can manage many machines with little effort Or you can’t

Puppet and model- driven administration

Resource Abstraction Layer (RAL)

Do you really care how rpm works?

Resource Providers 23 package types Users in NetInfo, useradd, pw Builtin support for RHEL, OS X, Solaris, Debian, Ubuntu, Gentoo, SuSE, FreeBSD, and more

Resources are speciﬁed in code

Code is compiled into a catalog

The client gets a catalog, not code

Least Privilege is in the house

If it’s not in the catalog, it’s not managed

If it’s not in the catalog, it can’t affect the system

"Exec[createrepo-PM-RHEL5-noarch]" Compiled Catalogs "Yumrepo[PM-RHEL5-x86_64]" are a DAG "Package[postgresql-server]" "Postgres::Role[puppet]" "Package[thttpd]" "File[/var/www/thttpd/html/yum-PM-RHEL5-x86_64]" "File[/var/www/thttpd/html/yum-PM-RHEL5-noarch]" "Exec[rsync-rpmdir-PM-RHEL5-x86_64]" "Exec[rsync-rpmdir-PM-RHEL5-noarch]" "Exec[createrepo-PM-RHEL5-x86_64]" "Yumrepo[PM-RHEL5-noarch]"

Is this ﬁle being managed by Puppet?

Which services will I need to restart if I edit this ﬁle?

Who requires this package?

Classes are modeled

Code or Data?

Perspective Shift

Functional Areas • Speciﬁcation and validation system • Auditing and application engine

Code Catalog Compiler Transaction Report

Data and Artifacts • Conﬁgurations and code • Compiled Catalogs • Transaction Reports • etc.

Compile Apply Code Catalog Report

Caching

Integration

Actual Future

Simple Tools

Which resources are being managed

Validation prior to shipping

Compile Apply Code Catalog Report

CMDB Compile Apply Code Catalog Report

CMDB Compile Apply Code Catalog Report LDAP

Policy CMDB Compliance Compile Apply Code Catalog Report LDAP

Policy CMDB Compliance Compile Apply Code Catalog Report LDAP CMDB

Policy CMDB Remedy Compliance Compile Apply Code Catalog Report LDAP CMDB

Policy CMDB Remedy Compliance Compile Apply Code Catalog Report LDAP CMDB Nagios

Resource/Event Correlation

Questio

http://puppetlabs.com	2960
http://engineering.slideshare.com	1532
http://www.puppetlabs.com	874
http://engineering.slideshare.net	753
http://blog.slideshare.net	689
http://feeds.feedburner.com	85
http://barcamp.org	78
http://www.barcamp.org	57
http://www.slideshare.net	28
http://translate.googleusercontent.com	21
http://puppetlabs.iron-point.com	17
http://207.46.192.232	6
http://blog.slideshare.com	3
http://twitter.com	2
http://suramya.blogspot.com	2
http://static.slidesharecdn.com	1
http://fanyi.youdao.com	1
http://66.39.50.149	1
http://puppetdev.iron-point.com	1
http://192.168.1.100	1

Puppet and the Model-Driven Infrastructure

by lkanies on Mar 12, 2010

Accessibility

Categories

Tags

Upload Details

Usage Rights

20 Embeds 7,112

Statistics

Puppet and the Model-Driven Infrastructure — Presentation Transcript