Skip to content
Register

What do you use for configuration drift detection?

General Discussion by tomhider 22 replies 2.5K views
tomhider

Member OP

Manchester

#1

Teh honest truth is I tryed ansible and puppet and chef and all tehse tools and they all suck for my use casee. I run like 8 small sites on RackNerd and GreenCloudVPS boxes and I just want to know when somethign changed not fix it automaticcaly. My current workflow is diff against git, cry, fix manually. Anyone else doin this or am I just a caveman

sarahjey

Member

#2

What is configuration drift exactly? I have two VPS from Vultr and I just ssh in and change things when something breaks, I dont use git at all 😬 should I be worried?

learning on $5 VPS and prayers
Doug

Member

New Jersey

#3

Same. Diff against git and cry is my whole workflow too

grabs popcorn, checks /r/drama
LI

Member

#4

sarahjey said:
Should I be worried?
Not if you enjoy surprises at 3am. Seriously though, for two Vultr boxes just track your changes in git at minimum. Doesn't have to be fancy.

SwapJones

Member

OOM killer's friend

9 #5

tomhider said:
Diff against git, cry, fix manually
This but unironically. I run 512MB GreenCloudVPS boxes in their Vietnam location and I just keep a local notes.txt of what I changed and when. Git feels like overkill for a box that costs less than my coffee.

RAM is just fast disk, right?
sarahjey

Member

#6

linux43 said:
Track your changes in git at minimum
Okay but what do I track? Just /etc/nginx and my application files? I don't even know what half these config files do, I just followed tutorials.

learning on $5 VPS and prayers
tomhider

Member OP

Manchester

9 #7

linux43 said:
Track your changes in git at minimum
Yeha this is basically what I do but I want to KNOW when it drifted not find out when somethign breaks. I tried a cron job running git status and emailing me but my inbox died.

ben20

Member

#8

I use etckeeper on my Dublin box. It's in the repos, wraps git, auto-commits daily and on apt runs. Not perfect but it solves the "when did this change" problem without the email spam.

Doug

Member

New Jersey

#9

SwapJones said:
Notes.txt
I did this for years. Then I had a drive fail and lost the notes. Now I use a private git repo on Codeberg for the configs and my notes are just the commit messages.

grabs popcorn, checks /r/drama
MeritBudi

Member

3 #10

7 VPS across 4 providers and I use Ansible pull with a local git repo. Not for drift detection though, just so I can rebuild fast. For drift I run ansible --check --diff weekly and review the output. It's ugly but it works.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft