Opinions: Ansible vs. SaltStack
-
tbh I think that speed really matters only after you scale a bit. having to administer a few tens of VM is not so influenced by speed. having to manage few hundreds is a different thing.
I've choosed ansible in the past because you have less stuff to learn at first and I prefer the no-agent approach (and usually I have an ssh connection open anyway). but my needs are really limited.
btw, zeromq is the fastest thing you can have in the python world, so if speed really matters, there is no other solution than salt.
-
I have different separate networks but each has a little less than 100 machines (physical and virtual) and they are all managed with Ansible. Even with full changes the playbooks take less than a minute.
Pipelining also drastically improves speed. You have to disable requiretty (which is arguable in its adding security anyway).
One thing that would be nice is central reporting for ansible-pull logs.
-
@stacksofplates Doesn't the use of tags allow for writing tasks that are not idempotent and this is not recommended?
-
@Romo said in Opinions: Ansible vs. Salt:
@stacksofplates Doesn't the use of tags allow for writing tasks that are not idempotent and this is not recommended?
They're still idempotent. But you just don't include the installation of the application if it's just configuration. You don't have to do that, and it might not save that much time.
However, its really nice for dev machines to make sure something is running properly.
-
learned a new English word today.
-
I found a more up to date (march of 2017) article doing a good SaltStack vs Ansible comparison.
https://www.upguard.com/articles/saltstack-vs-ansible-revisited
-
I think SS works better under Windows, especially the ready modules for RDP/local group policy, and the installer, so they are targeting that better.
-
@tim_g said in Opinions: Ansible vs. SaltStack:
I found a more up to date (march of 2017) article doing a good SaltStack vs Ansible comparison.
https://www.upguard.com/articles/saltstack-vs-ansible-revisited
I didn't find this article particularly useful.
-
I do realize this is an OLD post (relatively speaking) but I appreciate(d) finding it, as I'm currently revisiting "Salt vs. Ansible," and while I thought I was leaning towards Salt, perhaps it might be Ansible instead at this point. Not yet settled.
Nothing needs to be used, anything that is used will be primarily to ease my job of administering - primarily - client machines. (Currently not rolling out enough Linux (or Windows for that matter) servers to be considering a/ny config mgmt system - at this time).
Most sites have or can have a linux vm that I setup and maintain.
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.Security is also (especially, as we all know) not at all a non-factor.
I do like that as of now - with the current build of Windows 10, ssh(d) is included.
And I hope to use a setup that will work over ssh, with client-nodes limiting connections (from source IP) by firewall, and ssh config limiting connections to/by key only.
I know that the default config of OpenSSH in Windows uses
"C: \ProgramData\ssh\administrators_authorized_keys"for said config, I have yet to verify if the MS-included (Apps > Optional Features) sshd uses the same.
-
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
-
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
Probie!
https://media.giphy.com/media/zD3YoUZsTlgGc/giphy.gif -
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
If it's mostly Windows, I find SaltStack much easier to use with Windows. Lots more functionality, at least the last time I was deep into it. If it was mac/Linux clients only, then I'd choose Ansible likely, of course depending on things.
-
@David_CSG so what's your plan for ssh into laptops that are out and about?
-
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
If it's mostly Windows, I find SaltStack much easier to use with Windows. Lots more functionality, at least the last time I was deep into it. If it was mac/Linux clients only, then I'd choose Ansible likely, of course depending on things.
We're mostly mac.
-
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
If it's mostly Windows, I find SaltStack much easier to use with Windows. Lots more functionality, at least the last time I was deep into it. If it was mac/Linux clients only, then I'd choose Ansible likely, of course depending on things.
We're mostly mac.
Sorry to hear that.
-
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
If it's mostly Windows, I find SaltStack much easier to use with Windows. Lots more functionality, at least the last time I was deep into it. If it was mac/Linux clients only, then I'd choose Ansible likely, of course depending on things.
We're mostly mac.
Sorry to hear that.
This^^^
-
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@Obsolesce said in Opinions: Ansible vs. SaltStack:
@DustinB3403 said in Opinions: Ansible vs. SaltStack:
@David_CSG said in Opinions: Ansible vs. SaltStack:
My need is for one mgmt tool that is: Viable for Windows and Mac OS endpoint management, and for simple basic (check for and) application of system updates, both fit the bill.
This is exactly why I am heavily testing out Ansible with @stacksofplates and @IRJ slapping me in the back of my head continuously.
If it's mostly Windows, I find SaltStack much easier to use with Windows. Lots more functionality, at least the last time I was deep into it. If it was mac/Linux clients only, then I'd choose Ansible likely, of course depending on things.
We're mostly mac.
Sorry to hear that.
It's not so bad when you start forcing them to do what you want with the cli.
-
It still a Unix-esk OS, so things I can do with Fedora I can more or less force to be done in OSX.
Just takes some finagling.
-
Most client laptops are reliably in-house on set days.
For real road-warriors, I’ll leverage our RMM (Solarwinds), which is ok (I have to overcome shortcomings for the Mac with custom shell scripts, and shortcomings for Windows with custom powershell).But I’d much rather leverage Ansible where possible.
Other tools are DEP & MDM (Mosyle.com for macOS & does iOS), and Munki.
-
@flaxking said in Opinions: Ansible vs. SaltStack:
@David_CSG so what's your plan for ssh into laptops that are out and about?
It's pretty easily done with an SD-WAN.
