Automating System Administration using CFEngine 3
Aleksey Tsalolikhin, Vertical Sysadmin, Inc., authorized CFEngine trainer
Who should attend this course:
Anyone with at least a basic knowledge of system administration interested in increasing operational efficiency and sysadmin happiness.
Why do you need to know about Automated System Administration?
Automation of system administration is the key to scalability. It helps not only in change management but also in knowledge management (documenting the intended state of your system and the reasons why it is configured that way). Automating your system administration is key to career progression from system administration to more interesting system engineering work.
Why Cfengine 3?
Cfengine is the granddaddy of policy-based configuration management systems, and Cfengine version 3 increases the power and flexibility of managing network-attached computers. Cfengine can operate in the widest variety of environments, from embedded sensors to supercomputers, from underwater to outer space. It can run on the widest range of operating systems and has the smallest resource footprint. Cfengine is a very powerful tool.
What you will take back to work:
A thorough grounding in automating system administration using Cfengine 3 and the ability to implement configuration policies on your systems. You will be able to automatedly handle and control files, processes, packages, and commands, all resulting in Correct and Known Configuration on your servers. You will know how to set up Cfengine client-server, so that you can use it at scale.
What this course covers:
- The history, design principles, and philosophy of Cfengine:
- Cfengine 1: A configuration management language to handle different Unix systems
- Cfengine 2: Computer Immunology and Convergence to Desired State
- Cfengine 3: The Promise Model
- The importance of abstraction for knowledge management
- The Basic Grammar of Cfengine 3:
- Promises of desired system state
- Promise atributes
- Collections of promises
- Collections of promise attributes
- The Cfengine 3 Data Types and How to Use Them:
- Scalar variables: Strings, integers, and real numbers
- Lists of Scalars
- How to use Patterns in Promises to Describe Configuration Efficiently:
- Classifying servers to control when and where configuration promises apply using Cfengine "classes"
- Leveraging the power of regular expressions
- Using lists to drive action: add or remove users, install or delete packages, and so on.
- Re-using code by abstracting promise attributes into parameterizable promise bodies
- Re-using code by abstracting promise bundles into parameterizable methods
- Advanced Cfengine Topics
- Selecting files using simple and compound filters
- Selecting processes using simple and compound filters
- Configuring a Cfengine client-server system
- Generating reports; how Cfengine can help you audit and report compliance.
- Many practical examples and exercises to help seed your policy set.
The course balances theory and practical. See the complete course plan.
Requirements: Attendees are expected to be familiar with command-line Linux/UNIX utilities and basic system administration tasks (installation software, setting up networking, etc). Each attendee will be asked to bring a laptop with VMWare Player as this class includes exercises that will be performed using a provided VM.
About the Instructor
Aleksey Tsalolikhin has been administering UNIX systems for over 12 years. At EarthLink, which grew to over 5,000,000 users, Aleksey, wrangling hundreds of servers by hand, developed an abiding interest in automating configuration management. Aleksey has been using Cfengine for 5 years. Aleksey is a member of LOPSA, USENIX, ACM and IEEE Computer Society. He's a full-time system administrator. Aleksey writes and teaches about distributed system configuration management tools in general and Cfengine in particular. Aleksey was trained by Mark Burgess, the author of CFEngine.
When & Where
Vertical Sysadmin delivers high quality hands-on training on excellent technologies.
Our target audience is new and experienced system administrators and software engineers.
Our product is full conceptual understanding and ability to apply the material.
Our training model is simple and effective:
- in-person training
- by a recognized expert in the field
- in a small class (never more than 12 students)
- with personal attention to every student's progress
- using material carefully laid out in logical sequence from basic to advanced
- with every technical term meticulously defined
- hands-on: 1/3 to 1/2 of each class is practical exercises
- highly interactive: students are encouraged to participate in the class.
Our results speak for themselves:
"Aleksey (trainer) was one of the best hands-on teachers I've experienced in a long time. He is very knowledgeable about the subject, patient and keeps the class focused. His course materials including documentation, examples and exercises were very comprehensive."
-- Paul Connally, IT Systems Administrator, PDX, Inc.
"All concepts were presented clearly with working examples of each. Pacing was excellent as well as personal attention paid to each student."
-- Charles Farinella, Systems Administrator, Appropriate Solutions, Inc.
"I asked to bring Aleksey back because of his personal attention to each student and his tenacity in ensuring that all students understand the material before moving on."
-- Danny from a Fortune 50 Financial Company
"It was more in-depth and intensive than most of the vendor training things I've gone to. Good attention to detail and making sure all points were understood."
-- Michael Stevens
"Very personal approach to teaching. We are bored to death with power point slides. Most of the class was hands on."
-- Prakash Rudraraju
"The balance between theoretical and practical knowledge is just perfect. No bullshit."
-- Bernard Brandl
"Thank you for such a great class. Been to lots of technical training and you are the best instructor I've had."
-- Thomas Nicholson, Sr. Systems Management Engineer
We provide public and private training.