My Favorite Ultra-VNC setup:

Not all issues can fixed from command line alas, thus this recipe:

uvnc: file.recurse: - source: salt://uvnc - name: 'c:\salt\uvnc' - makedirs: True cmd.run: - name: 'c:\salt\uvnc\state.cmd' module.run: - name: firewall.disable

remeber to re-enable the firewall of the client when finished. (salt "client" firewall.enable)
you will need to create uvnc folder (get it from UltraVNC portable builds) folder in your Salt master, in /srv/salt

in it :

winvnc.exe

UltraVNC.ini

state.cmd

SecureVNCPlugin32.dsm (Optional Encryption plugin)

Server_ClientAuth.pubkey (Optional Encryption server SSL handshake check)

And in the state.cmd put the following:

taskkill /f /im winvnc.exe sc stop uvnc_service sc delete uvnc_service "c:\salt\uvnc\winvnc.exe" -install "c:\salt\uvnc\winvnc.exe" -startservice sc config uvnc_service start= demand ipconfig | findstr /i "ipv4"

And whenever you want to connect to client, run this in salt master:
salt '172' state.apply uvnc

And you will see the IP of the client, you will need to match the IP and if you made any custom setting like port number/encryption plugin with vnc viewer and connect to client.

Not having used salt yet myself, couldn't you set the contents of that file using the Salt Master?

I'll add a note for clarity given the title... SaltStack does not do authentication like AD does. AD does not do patching of any sort like Salt does. Salt is an alternative to common myths about AD functionality, but not to actual AD functionality. But you can use Salt to do distributed local authentication management, which does replace the need for AD, but is very different than what is being discussed here. In this case Salt is replacing GPO, not AD.

@msff-amman-Itofficer said in Beginner SaltStack Question: Can minions be placed in folders or groups ? (Coming from AD perspective):

@scottalanmiller

ohh shit, how did that get passed me...

Great, thanks again.

:)

@DustinB3403

check this:
https://mangolassi.it/topic/13786/how-to-patch-wannacry-using-saltstack-ad-alternative

This way you can share the config(s) under conf.d between multiple machines using the same roles (or whatever Salt calls them) and have different main NGINX server settings.

@aaronstuder said in Installing Varnish Cache to a LAMP Stack on Fedora 25 with SaltStack:

@scottalanmiller said in Installing Varnish Cache to a LAMP Stack on Fedora 25 with SaltStack:

Varnish Cache cannot handle TLS connections, so Apache will continue to server HTTPS on port 443, for now at least.

That's unfortunate :-/ I use Varnish on Cloudways, but everything is HTTPS... Does that mean Varnish is doing nothing?

It just means that an SSL layer has to be in front of it. Nginx is used on most platforms to handle SSL.

I've added an article on using NGinx to accelerate SSL in front of LAMP: https://mangolassi.it/topic/13177/deploying-an-nginx-reverse-proxy-with-ssl-on-a-lamp-server-with-saltstack/

@aaronstuder said in Automatically Add New Vultr Fedora Minion to Salt Master:

@scottalanmiller Is there a way to have to auto accepted by the master? Maybe there is a security concern with this?

You could, but you really don't want to in a case like this. It would mean that absolutely any machine on the Internet that figured out that you were out there could join your master.

@JaredBusch said in Install NextCloud 11 on Fedora 25 with SaltStack:

@wrx7m said in Install NextCloud 11 on Fedora 25 with SaltStack:

I am going to blow up my nextcloud vm and start with the Fedora netinstall.

If you are only after Nextcloud, here is my guide for that.
https://mangolassi.it/topic/13573/install-nextcloud-11-03-on-fedora-25-minimal

If you want to learn Salt, then continue with this post as you have been.

I will do both :) Thanks for this.

Just as a comparison, here's what it would look like with Ansible:

name: Recursively own html files file: path: /var/www/html owner: apache group: apache state: directory recurse: yes

learned a new English word today.

@dafyre said in Why Do We Get IP Local Hostnames for Salt Minion Keys:

@scottalanmiller said in Why Do We Get IP Local Hostnames for Salt Minion Keys:

Okay, finally got around to tracking this down. In your minion file, on Linux systems this would be /etc/salt/minion, you need to uncomment the id: field and put in the name that you want to use and restart your minion process. This will update the name as seen in the Salt Master.

Is this separate from the /etc/salt/minion_id file?

It's just in the minion file.

If you ran the Bootstrap script, this is what you would have gotten as the error:

Fetched 1,035 kB in 1s (959 kB/s) Reading package lists... Reading package lists... Building dependency tree... Reading state information... ca-certificates is already the newest version (20160104ubuntu1). apt-transport-https is already the newest version (1.3.2ubuntu0.1). apt-transport-https set to manually installed. 0 upgraded, 0 newly installed, 0 to remove and 10 not upgraded. Reading package lists... Building dependency tree... Reading state information... E: Unable to locate package gnupg-curl * ERROR: Failed to run install_ubuntu_stable_deps()!!!

@NashBrydges said in Installing Salt Master:

I'd love to see a category created for all of these how-tos. I'm seriously running an ever growing bookmarks list and would love to be able to just refer to a category to look for these.

All of mine have the how to tag on them.

http://blog.takipi.com/deployment-management-tools-chef-vs-puppet-vs-ansible-vs-saltstack-vs-fabric/