Book Image

Hands-On Enterprise Automation on Linux

By : James Freeman
Book Image

Hands-On Enterprise Automation on Linux

By: James Freeman

Overview of this book

Automation is paramount if you want to run Linux in your enterprise effectively. It helps you minimize costs by reducing manual operations, ensuring compliance across data centers, and accelerating deployments for your cloud infrastructures. Complete with detailed explanations, practical examples, and self-assessment questions, this book will teach you how to manage your Linux estate and leverage Ansible to achieve effective levels of automation. You'll learn important concepts on standard operating environments that lend themselves to automation, and then build on this knowledge by applying Ansible to achieve standardization throughout your Linux environments. By the end of this Linux automation book, you'll be able to build, deploy, and manage an entire estate of Linux servers with higher reliability and lower overheads than ever before.
Table of Contents (23 chapters)
1
Section 1: Core Concepts
5
Section 2: Standardizing Your Linux Servers
10
Section 3: Day-to-Day Management
16
Section 4: Securing Your Linux Servers

Automating routine tasks with AWX

Although there are many facets to AWX that would require much more space than we have in this book, one particular one stands outthe automation of routine tasks. Routine tasks that Ansible could handle might include patching of servers, running some kind of compliance check or audit, or enforcing a security policy.

For example, you could write an Ansible playbook to ensure that the SSH daemon does not allow remote root logins as this is considered a good security practice. It is, of course, easy for any system administrator with root privileges to log in and turn this back on; however, running an Ansible playbook regularly to turn this off enforces it and ensures no-one (well-meaning or otherwise) turns it back on. The idempotent nature of Ansible changes means that where the configuration is already in place, Ansible will not make any...