Re: [gentoo-user] Ansible, puppet and chef

["J. Roeleveld" <joost@antarean.org>]

On Wednesday, September 17, 2014 12:19:37 PM Eray Aslan wrote:
> On Tue, Sep 16, 2014 at 10:43:18PM +0200, Alan McKinnon wrote:
> > Puppet seems to me a good product for a large site with 1000 hosts.
> > Not so much for ~20 or so.
> 
> I find that for a few machines, puppet is overkill.  For a lot of
> machines, puppet can become unmanageable - with puppet master and
> security being the culprit.
> 
> We have used puppet a lot but recently settled on salt (strictly
> speaking not my decision so cannot really compare it with ansible) and
> we are happy with the outcome.  You might want to consider
> app-admin/salt as well.

Looks good (had a really quick look).
From what I read (and please correct me if I'm wrong), a difference between 
salt and ansible is:

Salt Requires a daemon to be installed and running on all machines
and the versions need to be (mostly) in sync

For Alan, this might work, but for my situation it wouldn't, as I'd need to 
keep various VMs in sync with the rest where I'd prefer to simply clone them 
and then enforce changes. Relying on SSH and powershell makes that simpler.

But, it does mean that all nodes need to have incoming ports open. With Salt, 
all nodes connect back to the master. This allows a tighter security.

--
Joost