We have ssh as a fail safe system.. Again, all ssh root keys are managed
via a package (ima-ssh-rootkeys) and are auto updated on every machine
on the network nightly. Apt roxxors my soxxors.


Chad Walstrom wrote:
> "Eric Peterson" <srcfoo at gmail.com>  wrote:
>   
>> I was wondering if anyone uses software to perform mass software
>> installations. So that you can install a package on multiple
>> machines with a single command.
>>     
>
> cfengine 2.  Actually, I'm just starting to work on this.  I'm tired
> of sshing things around.  It worked so nicely when I worked at the
> IMA, and I've missed it ever since.  The number of boxes we need to
> manage keeps rising, ssh pub/priv keys need to be managed, X.509 ssl
> certs and keys need to be pushed.  Etc.
>
> cfengine is one of the most effective ways to manage your network.
> There's a bit of overhead and learning curve, but once it's in place,
> you'll never understand why you tried to manage a network without it.
>
>   
>> I have serveral Xen guests and I'm hoping their is a good way to do
>> this. The guests are all CentOS.
>>     
>
> Create a Xen guest that acts as the cfengine master and the other
> guests as clients.
>
>   


-- 
==============================================
Nate Sanders                  nate at ima.umn.edu
Associate Systems Manager     (612) 624 - 4353
           http://www.ima.umn.edu/
==============================================
Institute for Mathematics and its Applications
University of Minnesota
400 Lind Hall, 207 Church St. SE
Minneapolis, MN 55455-0463
==============================================