We help IT Professionals succeed at work.

Managing Large RH Estate

Effin_Ell asked
Any experienced Engineer who can suggest the best way to manage OS Patches and Packages across hundreds of Red Hat virtual and physical servers?
The best way to build an inventory of RH environments along with system parameters and installed packages?
The best way to determine how a particular RH environment was built. E.g. Kickstart, manual?
Watch Question

A Q ChoudaryJunior Linux Engineer
we have same kind of environment. we are using kwok information server .It is open source,capable with windows and linux,it have many futures.so you should try kwok information server
Fractional CTO
Distinguished Expert 2018
I run a private hosting company for high speed WordPress sites + use this approach.

1) At machine level run a common version of Ubuntu (Zesty right now, as Artful changes to netplan) + LXD.

2) Each LXD container may contain a single site or several/many sites.

3) One machine only runs an LXD DNS instance (container) + many low traffic dev sites, so if this machine goes down, not big problems.

4) I apply all machine updates to dev machine + if all goes well, stream machine updates to other machines. I use custom tools + likely I'll change over to using http://manpages.ubuntu.com/manpages/artful/man1/parallel.1.html shortly.

5) Then I go through the same process on a container basis. Update one container running a full LAMP Stack + if all goes well, stream updates to all containers.

6) For machine level, full OS updates, I take a slightly different approach.

I migrate all dev containers to another machine.

Then do a fresh install on my dev machine, then move one live machine's containers to the dev site + to a fresh install on this machine + move all containers back. The repeat this for all machines.

I do fresh installs, rather than updates, as updates can occasionally Brick a machine. Taking this approach means I never have to worry about an OS upgrade taking down production sites.
Have you seen this product?


I dont think is cheap. i remember looking at it awhile ago.  for inventory,  patch management and OS deployments
A Q ChoudaryJunior Linux Engineer