Don't forget tools to manage the workstations. In a LANLess design, you can treat the workstations like they're on a public network and crank the firewall up, and that means you don't rely on the LAN to manage/access workstations.
I'd say you're most of the way there with just Office 365 or GSuite only if you've gone all the way in (which for GSuite requires Chromebooks unless you're all BYOD)
@scottalanmiller said in Salt grain to retrieve users present on minion (Windows):
@flaxking said in Salt grain to retrieve users present on minion (Windows):
@scottalanmiller said in Salt grain to retrieve users present on minion (Windows):
Salt seems like the obvious tool for desktop administration to me!
And the thing is that automating desktop configuration has been the norm for longer than automating server configuration (at least in the Windows word), just with crappier tools.
Yeah, very weird that people don't see this. @QuixoticJeremy actually presented on using tools like Salt to manage desktops at MangoCon 2017 a few months ago.
No MangoCon 2017 videos up yet?
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
@flaxking said in Install NextCloud 11 on Fedora 25 with SaltStack:
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
@flaxking said in Install NextCloud 11 on Fedora 25 with SaltStack:
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos
Why stay on Ubuntu?
Because I'm addicted to LXD. While I've heard you can install it on other OSes, I'm pretty sure I would run into some hiccups with things like the Salt LXD formula. So there would be some extra work ahead of me. Alternatively, I could try straight-up LXC or Docker, but that creates some learning prerequisites. Not that I don't like learning, it's just I have other things on the top of my learning priority list.
That doesn't explain it, though. You just install Fedora in your container.
That's a good point, there's no reason why most of my containers couldn't be running Fedora. Mostly I was thinking about switching from Ubuntu to Fedora on my personal laptop first (since there's will be no reason for me to run Ubuntu Desktop without HUD), but it should be pretty simple to switch to fedora containers for my projects and production servers. Thanks for clearing my mind-block!
@scottalanmiller said in Salt grain to retrieve users present on minion (Windows):
Salt seems like the obvious tool for desktop administration to me!
And the thing is that automating desktop configuration has been the norm for longer than automating server configuration (at least in the Windows world), just with crappier tools.
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
@flaxking said in Install NextCloud 11 on Fedora 25 with SaltStack:
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos
Why stay on Ubuntu?
Because I'm addicted to LXD. While I've heard you can install it on other OSes, I'm pretty sure I would run into some hiccups with things like the Salt LXD formula. So there would be some extra work ahead of me. Alternatively, I could try straight-up LXC or Docker, but that creates some learning prerequisites. Not that I don't like learning, it's just I have other things on the top of my learning priority list.
I've seen some doubts around about how useful Salt would be for desktop administration, so I thought I would share my Salt grain that makes things easier for me. It gives you a list of users that have profiles on that minion. So the end result is that you can do this in your states:
{% for usr in grains['present_users'] %}
C:\Users\{{ usr }}\AppData\Local\Something:
file.directory:
- makedirs: True
{% endfor %}
This has only been tested on Salt 2017.7.1, and it will definitely break with the next major release because they are changing some things that it relies on.
To use this custom grain, create a _grains folder within your salt states folder/repo, then save this as a file there:
import socket
import salt.utils
if salt.utils.is_windows():
import salt.utils.winapi
import wmi
def presentusers():
if salt.utils.is_windows():
with salt.utils.winapi.Com():
wmi_c = wmi.WMI()
userprofiles = [x.LocalPath.split('\\')
for x in wmi_c.Win32_UserProfile()]
sysprof = ['systemprofile', 'ServiceProfiles']
userlist = [x[-1] for x in userprofiles
if not any(word in x for word in sysprof)]
return {'present_users': userlist}
return {'present_users': 'n/a'}
Then run salt '*' saltutil.sync_grains to sync the custom grain to your minions. Now run salt '*' grains.items to see your new grain
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions 
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos