DEV Community

Gene Liverman
Gene Liverman

Posted on • Originally published at beanbag.technicalissues.us on

Puppet Camping in place: East meets West

#puppet

Puppet Camp Tent

I pitched a tent at Puppet Camp a couple of times before joining the company and have to say that last week’s event was superb, and it more than lived up to the standards set in ye olden times. It was great to hang out (virtually) with so many community members! There were some faces, or should I say Slack handles, that I knew, but many more I got to meet and chat with for the first time. The work these gurus are doing in their day jobs is just amazing! The best part is that a lot of what was demoed and talked about is directly applicable to the work that I and the other attendees do. Below are some of my takeaways from the event along with a boatload of reference material from the presenters and people in Slack.

The day’s focus

The schedule for last week’s camp can loosely be translated to:

  1. Keynote from Yvonne Wassenaar, our CEO
  2. Making Microsoft GPOs suck less with Puppet
  3. Use the best tool for the job, be it Terraform, Puppet, or both
  4. A walk through Puppet’s history
  5. Ensuring compliance with one or more standards using SIMP
  6. Replacing even more GPOs with Puppet
  7. A rocking, virtual scavenger hunt

The keynote

Yvonne kicked things off by talking about what we are doing to help our community navigate the “new normal” such as offering free Bolt workshops, “ask an expert” office hours in Slack, and free access to our Open Source Support Portal through June 2020. She went on to talk about ways we are helping our customers during this time of social distancing and remote-only work. It was pretty cool to see some of the quotes about how we’re making a tangible difference for organizations on the front lines.

She also shared what can be expected from Puppet, including some of the new things coming down the pipe. There was a good bit of excitement in Slack around “Estate Reporting” and our upcoming integrations with ServiceNow. The other topics that caught lots of attention were security, compliance, and patch management. We have a product in alpha today that focuses on CIS compliance, and we’re bringing the great work that Tony Green has done on the os_patching module into Puppet Enterprise. She touched on how Puppet Remediate can help IT Operations close the “find it, fix it” loop that gets kicked off by security scans so many of us have come to love over the years. All of this really boiled down to ways we help reduce the time to value for our users.

Puppet > GPOs

Sometimes it’s amazing just how many people are trying to slay the same beast. This is exactly what I saw during the camp with two talks: one from John Rogers, engineer at SwissRe, and Shane Smith, senior site reliability engineer at athenahealth. They are both approaching the problem from different angles but share a common foe: Microsoft Group Policy. In both cases there was a measure of parsing Microsoft’s ADMX files, .pot files, and a few other things. Once each file is parsed, Puppet manifests are generated and can then be used to ensure the desired state on a given box.

Both companies have created some pretty awesome tooling around this. Even sweeter is that our community members were clambering not only to get their hands on what’s already been made, but to help these teams that have extremely limited resources improve them! Some brainstorming started up before we even finished the event about how to combine these efforts with the work that Camptocamp, Matt Stone, and Michael Lombardi are individually doing. The end result of this collaboration seems likely to produce some extremely useful stuff. I can’t wait!

Using the right tool for the job

Ranjit gave a pretty cool overview of automating the deployment of PE and a multi node application stack configured by PE using Terraform. It was a superb example of how combining Puppet, Terraform, and Terraform Cloud can make for an extremely sustainable, and scalable, workflow. After his talk he shared this link to the code used in his presentation so others could try it out in their own environments.

SIMP has been evolving right along with Puppet since 0.24

Kendall from OnyxPoint took us down memory lane as a means of helping us understand how and why the SIMP project packs all of the data from a zillion standards and policies into Puppet modules. This facilitates their SIMP Compliance Engine, which is basically a Hiera backend, and makes sure things are up to snuff from a NIST 800-53 and/or a DISA STIG point of view… and that’s just in the FOSS version! SIMP Enterprise also helps you comply with CIS, HIPPA, SOX, PCI-DSS, GLBA, and CIP. Additionally, it comes with a sweet GUI that gives you the exact line to add to Hiera to resolve something when a scanner such as OpenSCAP says you are out of compliance.

Let’s hunt!

As if all this wasn’t enough, Ben Ford sent everyone on a virtual scavenger hunt. Each person had the option of doing their hunt in either a Windows or a Linux VM, and the first few to complete the game got some pretty rocking rewards.

Slide decks

Tools

Several tools were mentioned by presenters and/or community members in Slack. This is a list of the ones I could scrape together from going back over conversations:

From the keynote

Windows-related links

European Windows / DevOps events

General Puppet-related tools

Wrapping up

Again, it was great getting to hang out with everyone and I look forward to doing it again soon! You can find me in the Community Slack as @genebean most any time. You may also find me at one of the other upcoming camps. Be sure to check out the Puppet Camp page for information on where we will pitch our virtual tent next.

Gene Liverman is a senior site reliability engineer at Puppet.

Learn more

Top comments (0)

Read next

harshm03 profile image

Ansible Collections: Complete Guide for Beginners

Harsh Mishra -

kentaro0919 profile image

install guile to mac

Kentaro0919 -

harshm03 profile image

Ansible Jinja2: Complete Guide for Beginners

Harsh Mishra -

akdevcraft profile image

Supercharge Your E2E Tests with Playwright and Cucumber Integration

AK DevCraft -