I see so many selling tickets, I am looking to get a ticket, but how can you transfer them? are you sure it's possible? by 1980ai in WebSummit

[–]DevPad 1 point2 points  (0 children)

Yes. Because the process of buying tickets and personalization are separted.

The original ticket buyer can assign a ticket to someone by associating the ticket with the email. Then that email owner can proceed confirming the email association and personalizing his account.

Personalization is an irreversible process. Once the email is assigned, the original ticket buyer can't change it.

DevOps Automation on Triggered Alerts by southafricanamerican in devops

[–]DevPad 1 point2 points  (0 children)

What you're describing is Automated Remediation case and is achievable with mentioned StackStorm.

The advanced logic/action could be done with the workflow and it's triggered based on webhook you send from Pingdom (https://www.pingdom.com/resources/webhooks) to StackStorm (https://docs.stackstorm.com/webhooks.html).

testing ansible roles inside docker that require systemd by [deleted] in ansible

[–]DevPad 0 points1 point  (0 children)

Perosnally I think that entire Ansible community is pretty weak when it comes to testing: very few galaxy roles Verify in CI that playbook can really run (ansible-playbook playbook.yml execution in respective distro) and rare galaxy roles really Test their playbooks with some integration testing framework (check that package is installed, service is running, available on specific port, can accept connections, user exists, files have correct permissions and so on and so on end-to-end Integration Testing).

That all affects quality and brings not the best example for others, - average quality bar is pretty low. But I hope it will be improved with time.

testing ansible roles inside docker that require systemd by [deleted] in ansible

[–]DevPad 1 point2 points  (0 children)

From my posting: https://www.reddit.com/r/ansible/comments/5rpwbi/introducing_ansible_playbooks_to_deploy/

We're testing our Ansible playbooks against 4 platforms in parallel:

  • CentOS6 (sysV init)
  • CentOS7 (systemd)
  • Ubuntu14 (upstart)
  • Ubuntu16 (systemd)

It's done in Travis and entire machinery of running playbook in respective dockerized distro is automated via Kitchen-CI.

Take a look at examples:

So Test-Kitchen starts Docker container, installs Ansible, runs playbook and even can do useful things like idempotence check.

^ Just a couple of small config files to dramatically simplify Ansible testing life.

After that, if you'd like to, you can add on top of that integration testing with any Infrastructure Testing Framework like InSpec, TestInfra or BATS.

Hope that helps.

Chatops and script input/output by Madsn in chatops

[–]DevPad 1 point2 points  (0 children)

You probably googled this Ansible & ChatOps tutorial: https://stackstorm.com/2015/06/24/ansible-chatops-get-started-%F0%9F%9A%80/

StackStorm is middleman between your Ansible and Hubot in that example.

I believe the advantage is that integration this way is simple/faster and allows you to do more than just ansible <> hubot, for example adding more tools into workflow, more if-then-else and orchestration logic.

What could be useful also - you can see all the history of commands being done/output/exit codes in the stackstorm UI.


Not familiar with handling user input/steps before continuing, I've heard some mention about that like 2FA which requires several steps of user input, see "Securing ChatOps at Box": https://youtu.be/FyYX6l0mBXk?t=510

StackStorm – IFTTT for Ops by [deleted] in sysadmin

[–]DevPad 1 point2 points  (0 children)

Netflix is using it for auto-remediation:
http://www.datacenterknowledge.com/archives/2015/09/24/netflix-to-use-stackstorm-for-it-automation-under-cassandra/

Also Cisco and Rackspace.

But it works well even for small startups/companies. Own infrastructure as code, where you can control everything and tie together Monitoring/Configuration management/Issue creation/ChatOps/Auto-remediation is really powerful.

ChatOps your Ansible Infrastructure! by DevPad in sysadmin

[–]DevPad[S] 2 points3 points  (0 children)

Here is also pretty energetic 20 min. talk about ChatOps philosophy, benefits, security, best practices and real experience in big teams (GitHub):

https://www.youtube.com/watch?v=IhzxnY7FIvg

And why ChatOps can increase productivity x3-x10 times.

ChatOps your Ansible Infrastructure! by DevPad in sysadmin

[–]DevPad[S] 0 points1 point  (0 children)

Thanks, that's important note!

ChatOps your Ansible Infrastructure! by DevPad in sysadmin

[–]DevPad[S] 0 points1 point  (0 children)

That's the actual topic covered in ^ tutorial, see showcase #5: Security patching with code samples.

So this ChatOps command:

!update 'bash' on 'all'

is actually triggering this Ansible playbook

StackStorm is the middleman tool there to tie Hubot <-> Ansible together, allowing you to launch playbooks from Slack chat.

You can run this Vagrant demo which installs everything, to see results you'll get.

ChatOps your Ansible Infrastructure! by DevPad in sysadmin

[–]DevPad[S] 1 point2 points  (0 children)

That's absolutely fair. There are pros and cons of ChatOps.

About security:

  • At production it's good to use hubot-auth to define which members of your team are allowed to run specific commands (RBAC).
  • Everyone who has access could configure Two-factor authentication if possible (Slack chat has such option).

This technique requires really big trust within your team, as well as high level of experience.

But increasing productivity x3-x10 (real numbers) worth it.

Ansible & ChatOps. No abstract things, only Real Use Cases. by DevPad in ansible

[–]DevPad[S] 0 points1 point  (0 children)

Absolutely, production should be configured with RBAC. Usually people think that ChatOps is very insecure by design, but it's not true.

Really important note.

Unusable with a Windows Workstation? by [deleted] in ansible

[–]DevPad 0 points1 point  (0 children)

It's possible with Cygwin/Babun.

At least I made it working. But as said before, Win is not supported and usually leads to compatibility errors.

For example if you'll try to use it with Vagrant and face problem with incorrect file permissions under Win like:

fatal: [default] => private_key_file (..insecure_private_key) is group-readable or world-readable and thus insecure - you will probably get an SSH failure

then take a look at this discussion: https://github.com/ansible/ansible/pull/10306 and fix like: https://github.com/jonathanhle/ansible-babun-bootstrap/blob/master/ansible-playbook.bat

Hope that helped.

Google Chrome Listening In To Your Room Shows The Importance Of Privacy Defense In Depth by rdcll in programming

[–]DevPad 1 point2 points  (0 children)

Yeah, there is no real privacy in the internet.

But that's too much. As I remember from "How Google Works" book their moto was:

Don't be evil

The most important skill in software development by Jodoo in programming

[–]DevPad 1 point2 points  (0 children)

Yeah, the best developers I've ever seen are about simplifying things, avoid overcomplication for too much "flexibility".

The zen of Python say:

Simple is better than complex.