11 11 ToolsTools for your for your devops stackdevops stack

Kris Buytaert

@krisbuytaert

Kris BuytaertKris Buytaert

• I used to be a Dev,I used to be a Dev,• Then Became an OpThen Became an Op• Chief Trolling Officer and Open Source Chief Trolling Officer and Open Source

Consultant @inuits.euConsultant @inuits.eu• Everything is an effing DNS ProblemEverything is an effing DNS Problem

What's this devops thing What's this devops thing anyhow ? anyhow ?

World , 200X-2009World , 200X-2009

Patrick Debois, Gildas Le Nadan, Andrew Clay Shafer, Kris Buytaert, Jezz Patrick Debois, Gildas Le Nadan, Andrew Clay Shafer, Kris Buytaert, Jezz Humble, Lindsay Holmwood, John Willis, Chris Read, Julian Simpson, Luke Humble, Lindsay Holmwood, John Willis, Chris Read, Julian Simpson, Luke

Kanies, John Allspaw and lots of others ..Kanies, John Allspaw and lots of others ..

Gent , October 2009Gent , October 2009

Mountain View , June 2010Mountain View , June 2010

Hamburg , October 2010Hamburg , October 2010

Boston, March 2011Boston, March 2011

Mountain View, June 2011Mountain View, June 2011

Bangalore, Melbourne, Bangalore, Melbourne,

Goteborg , October 2011Goteborg , October 2011

........

8 Events being planned for 2013.8 Events being planned for 2013.

● Devops is a growing professional and cultural Devops is a growing professional and cultural movementmovement

● We don't have all the answers yetWe don't have all the answers yet

● We are reaching out to different communities We are reaching out to different communities

● We will point out problems we see..We will point out problems we see..

● Only the name is new Only the name is new

While we are still working out the solutionsWhile we are still working out the solutions

devops, a definition:devops, a definition:

● Adopt the new philosophy. We are in a new economic age. Western management Adopt the new philosophy. We are in a new economic age. Western management must awaken to the challenge, must learn their responsibilities, and take on must awaken to the challenge, must learn their responsibilities, and take on leadership for change.leadership for change.

● Cease dependence on inspection to achieve quality. Eliminate the need for massive Cease dependence on inspection to achieve quality. Eliminate the need for massive inspection by building quality into the product in the first place.inspection by building quality into the product in the first place.

● Improve constantly and forever the system of production and service, to improve Improve constantly and forever the system of production and service, to improve quality and productivity, and thus constantly decrease costs.quality and productivity, and thus constantly decrease costs.

● Institute training on the job.Institute training on the job.● Institute leadership The aim of supervision should be to help people and machines Institute leadership The aim of supervision should be to help people and machines

and gadgets do a better job. and gadgets do a better job. ● Drive out fear, so that everyone may work effectively for the company. Drive out fear, so that everyone may work effectively for the company. ● Break down barriers between departments. People in research, design, sales, and Break down barriers between departments. People in research, design, sales, and

production must work as a team, in order to foresee problems of production and production must work as a team, in order to foresee problems of production and usage that may be encountered with the product or service.usage that may be encountered with the product or service.

● Eliminate slogans, exhortations, and targets for the work force asking for zero defects Eliminate slogans, exhortations, and targets for the work force asking for zero defects and new levels of productivity. Such exhortations only create adversarial and new levels of productivity. Such exhortations only create adversarial relationships, as the bulk of the causes of low quality and low productivity belong to relationships, as the bulk of the causes of low quality and low productivity belong to the system and thus lie beyond the power of the work force.the system and thus lie beyond the power of the work force.

● Eliminate management by objective. Eliminate management by numbers Eliminate management by objective. Eliminate management by numbers and numerical goals. Instead substitute with leadership.and numerical goals. Instead substitute with leadership.

● Remove barriers that rob the hourly worker of his right to pride of Remove barriers that rob the hourly worker of his right to pride of workmanship. The responsibility of supervisors must be changed from workmanship. The responsibility of supervisors must be changed from sheer numbers to quality.sheer numbers to quality.

● Remove barriers that rob people in management and in engineering of Remove barriers that rob people in management and in engineering of their right to pride of workmanship. their right to pride of workmanship.

● Institute a vigorous program of education and self-improvement.Institute a vigorous program of education and self-improvement.● Put everybody in the company to work to accomplish the transformation. The Put everybody in the company to work to accomplish the transformation. The

transformation is everybody's job.transformation is everybody's job.

William Edwards William Edwards Deming Deming

1986, Out of the Crisis. 1986, Out of the Crisis.

http://en.wikipedia.org/wiki/W._Edwards_Deminghttp://en.wikipedia.org/wiki/W._Edwards_Deming

C(L)AMSC(L)AMS● CultureCulture

● (Lean)(Lean)

● AutomationAutomation

● MeasurementMeasurement

● SharingSharing

Damon Edwards and John WillisDamon Edwards and John Willis

Gene KimGene Kim

Culture,Culture,automation, automation,

Measturement,Measturement,

sharingsharing

Devs vs OpsDevs vs Ops

Breaking the SilosBreaking the Silos

Getting AlongGetting AlongOpsOpsDevs Devs

What tool?What tool?

Culture, Culture,

Automation,Automation,Measurement,Measurement,

SharingSharing

““Solved problems”Solved problems”● Deployment automation :Deployment automation :

● Fai , kickstart, preseed, cobbler,Fai , kickstart, preseed, cobbler,

● Configuration ManagementConfiguration Management

● Puppet, chef, cfengine,Puppet, chef, cfengine,

● .... ....

““challenges”challenges”

• Build & Release ManagementBuild & Release Management

• Package & Repository managementPackage & Repository management

• OrchestrationOrchestration

JenkinsJenkins● Open Source Continuous Integration ServerOpen Source Continuous Integration Server

● A zillion plugins (400)A zillion plugins (400)

• http://jenkins-php.org/http://jenkins-php.org/

• ......

● Have developers build stable and deployable Have developers build stable and deployable codecode

● Test Infra code Test Infra code

JenkinsJenkins

Why ops like to package Why ops like to package ● Packages give you featuresPackages give you features

•Consistency, security, dependenciesConsistency, security, dependencies

● Uniquely identify where files come fromUniquely identify where files come from

•Package or cfg-mgmt Package or cfg-mgmt

● Source repo not always availableSource repo not always available

•Firewall / Cloud etc .. Firewall / Cloud etc ..

● Weird deployment locations , no easy accessWeird deployment locations , no easy access

● Little overhead when you automateLittle overhead when you automate

● CONFIG does not belong in a packageCONFIG does not belong in a package

fpmfpm#packagingsucks#packagingsucks

● Missing upstreamMissing upstream

● Ancient upstreamAncient upstream

● Unneeded dependenciesUnneeded dependencies

● Broken upstreamBroken upstream

● Distro PoliciesDistro Policies

● ““Maximum RPM” ?Maximum RPM” ?

● Packaging is needed Packaging is needed

● Dependencies, tooling, repositoriesDependencies, tooling, repositories

● Anger driven developmentAnger driven development

fpmfpm

fpmfpmfpm -t rpm -s dir -n hornetq -v 2.2.5 hornetq Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.nNkVwh+ umask 022+ cd /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ exit 0Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.yUd4MV+ umask 022+ cd /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ cd /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ tar -zxf /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/data.tar.gz+ exit 0Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.jkpqeA+ umask 022+ cd /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ /usr/lib/rpm/brp-compress+ /usr/lib/rpm/brp-strip+ /usr/lib/rpm/brp-strip-static-archive+ /usr/lib/rpm/brp-strip-comment-noteProcessing files: hornetq-2.2.5-1.x86_64Checking for unpackaged file(s): /usr/lib/rpm/check-files /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILDWrote: /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/SRPMS/hornetq-2.2.5-1.src.rpmWrote: /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/RPMS/x86_64/hornetq-2.2.5-1.x86_64.rpmExecuting(%clean): /bin/sh -e /var/tmp/rpm-tmp.z2UL3B+ umask 022+ cd /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ rm -rf /usr/local/build-rpm-hornetq-2.2.5.x86_64.rpm/BUILD+ exit 0Created /usr/local/hornetq-2.2.5.x86_64.rpm

fpm in actionfpm in action● https://github.com/Inuits/build-gemshttps://github.com/Inuits/build-gems

● Fork, pull Fork, pull

● Jenkins pulls , builds , pushes to repoJenkins pulls , builds , pushes to repo

● (variants for Nagios Plugins / Jenkins Plugins (variants for Nagios Plugins / Jenkins Plugins available) available)

The Marionette CollectiveThe Marionette Collective● Distributed ssh ++Distributed ssh ++

● What version of ssh do I have installed on my What version of ssh do I have installed on my servers ? servers ?

● On what servers is XYZ running ? On what servers is XYZ running ?

● Clean al my ssl certs ? Clean al my ssl certs ?

● Restart apache on all servers with fact X Restart apache on all servers with fact X

mc-servicemc-servicemc-service httpd status -W /uat/

* [ ============================================================> ] 80 / 80

bleh.poc.com status=stopped xs03.ta.google.com status=stopped elasticsearch02.uat.com status=stopped dbs01-.poc.com status=stopped dino.uat.com status=stopped dsp01.uat.com status=stopped webserver01.uat.com status=running dbs01-old.uat.com status=stopped alexdb02-hdp.poc.com status=stopped postfix.uat.com status=stopped ns01.uat.com status=stopped devtools03.uat.com status=running

mc-packagemc-packagemc-package -W /dev/ status jdk * [ ============================================================> ] 33 / 33

servicesdb01.dev.com version = -absent services.dev.google.com version = jdk-1.6.0_13-fcs drbdtest02.dev.google.com version = -absent services3.dev.google.com version = jdk-1.6.0_20-fcs um.dev.google.com version = jdk-1.5.0_19-fcs devtools03.uat.com version = jdk-1.6.0_29-fcs alexandria02.dev.google.com version = -absent weblink01.dev.com version = -absent wikitest.dev.google.com version = jdk-1.6.0_24-fcs payment.dev.google.com version = jdk-1.5.0_17-fcs tiff2pdf01.dev.com version = -absent devdoos.dev.com version = jdk-1.6.0_30-fcs wiki.dev.google.com version = jdk-1.6.0_24-fcs reporting01.dev.com version = -absent devtools01-dev.uat.com version = jdk-1.6.0_23-fcs devtools02.uat.com version = jdk-1.6.0_29-fcs drbdtest01.dev.google.com version = -absent

---- package agent summary ---- Nodes: 33/33 Versions: 1 * 1.5.0_17-fcs, 1 * 1.5.0_19-fcs, 1 * 1.6.0_13-fcs, 1 * 1.6.0_20-fcs, 1 * 1.6.0_23-fcs, 2 * 1.6.0_24-fcs, 2 * 1.6.0_29-fcs, 1 * 1.6.0_30-fcs, 1 * 1.6.0_31-fcs, 22 * absent Elapsed Time: 1.73 s

Culture, Culture,

Automation,Automation,

Measurement,Measurement,SharingSharing

#monitoringsucks#monitoringsucks

Monitoring is AWESOME. Metrics are AWESOME. I love it. Here's what I don't love: Monitoring is AWESOME. Metrics are AWESOME. I love it. Here's what I don't love:

● Having my hands tied with the model of host and service bindings. Having my hands tied with the model of host and service bindings.

● Having to set up "fake" hosts just to group arbitrary metrics together Having to set up "fake" hosts just to group arbitrary metrics together

● Having to either collect metrics twice - once for alerting and another for trending Having to either collect metrics twice - once for alerting and another for trending

● Only being able to see my metrics in 5 minute intervals Only being able to see my metrics in 5 minute intervals

● Having to chose between shitty interface but great monitoring or shitty monitoring Having to chose between shitty interface but great monitoring or shitty monitoring but great interface but great interface

● Dealing with a monitoring system that thinks IT is the system of truth for my Dealing with a monitoring system that thinks IT is the system of truth for my environment environment

● Not actually having any real choicesNot actually having any real choices

John Vincent (@lusis) on his blog http://lusislog.blogspot.com/2011/06/why-John Vincent (@lusis) on his blog http://lusislog.blogspot.com/2011/06/why-monitoring-sucks.htmlmonitoring-sucks.html

A sub movementA sub movement● #monitoringsucks trending#monitoringsucks trending

● https://github.com/monitoringsucks/https://github.com/monitoringsucks/

● 2008 Study :Nagios + Friends2008 Study :Nagios + Friends

● 2011 Conclusion : Nagios/Icinga are the only 2011 Conclusion : Nagios/Icinga are the only automatable alternatives automatable alternatives

● Monitoring and trending at scale , new kids Monitoring and trending at scale , new kids Graphite, Icinga, flapjack, etc Graphite, Icinga, flapjack, etc

● Old Cool Kids, Ganglia Old Cool Kids, Ganglia

LogstashLogstash● Not your average centralized logging toolNot your average centralized logging tool

● Elasticsearch backedElasticsearch backed

● ShipperShipper

● IndexerIndexer

● WebWeb

LogstashLogstash

● Collect from anywhereCollect from anywhere

● FilterFilter

● Send anywhereSend anywhere

● Queuing supportQueuing support

Logstash in ActionLogstash in Action

Kibana in ActionKibana in Action

Puppet and LogstashPuppet and Logstash● https://github.com/KrisBuytaert/vagrant-https://github.com/KrisBuytaert/vagrant-

puppet-logstashpuppet-logstash

● Includes Logstash / Kibana / Grok / ES modules Includes Logstash / Kibana / Grok / ES modules as submodules ! as submodules !

● git clonegit clone

● git submodule init git submodule init

● git submodule update git submodule update

● vagrant up vagrant up

Graphite Graphite ● Graphing at ScaleGraphing at Scale

● Graphing at EaseGraphing at Ease

● Any metric is a graphAny metric is a graph

● echo "somestring $somevalue $timestamp" | echo "somestring $somevalue $timestamp" | nc <%= graphitehost %> 2003nc <%= graphitehost %> 2003

Graphite ComposerGraphite Composer

x

Graphite APIGraphite API

Friends of Graphite Friends of Graphite ● Collection : Collection :

● Statsd, Statsd,

● Collectd + CarbonpluginCollectd + Carbonplugin

● JmxtransJmxtrans

● LogsterLogster

● Dashboards Dashboards

● TattleTattle

● GdashGdash

● ......

Gdash In actionGdash In action

Puppet and GraphitePuppet and Graphite● https://github.com/KrisBuytaert/vagrant-https://github.com/KrisBuytaert/vagrant-

graphite/graphite/

● Includes Graphite / Gdash / Jmxtrans / Logster / Includes Graphite / Gdash / Jmxtrans / Logster / Collectd / Statsd / Tattle and more modules as Collectd / Statsd / Tattle and more modules as submodules ! submodules !

● git clonegit clone

● git submodule init git submodule init

● git submodule update git submodule update

● vagrant up vagrant up

Culture, Culture,

Automation, Automation,

Measurement,Measurement,

SharingSharing

● Open SourceOpen Source

● GithubGithub

● Talk about ExperiencesTalk about Experiences

● Open SpacesOpen Spaces

Sharing environmentsSharing environments

● Build identical environmentsBuild identical environments

● Share codeShare code

● Shared ownership of content , code and Shared ownership of content , code and configurationconfiguration

VagrantVagrant● Abstraction layer for VirtualBoxAbstraction layer for VirtualBox

● Integrates well with Puppet/ChefIntegrates well with Puppet/Chef

● Project = Project =

● VagrantfileVagrantfile

● Manifests / CookbooksManifests / Cookbooks

● Portable, Small , VersionablePortable, Small , Versionable

● Use veewee to build your boxenUse veewee to build your boxen

VagrantfileVagrantfileVagrant::Config.run do |config| # All Vagrant configuration is done here. The most common configuration # options are documented and commented below. For a complete reference, # please see the online documentation at vagrantup.com.

config.vm.define :mongo1 do |mongo1_config| mongo1_config.ssh.max_tries = 100 mongo1_config.vm.box = "MyCentOS2" mongo1_config.vm.network("192.168.99.101") mongo1_config.vm.host_name = "mongo1" mongo1_config.vm.provision :puppet do |mongo1_puppet| mongo1_puppet.pp_path = "/tmp/vagrant-puppet" mongo1_puppet.manifests_path = "manifests" mongo1_puppet.module_path = "modules" mongo1_puppet.manifest_file = "site.pp" end end config.vm.define :mongo2 do |mongo2_config| mongo2_config.ssh.max_tries = 100 mongo2_config.vm.box = "MyCentOS2" mongo2_config.vm.network("192.168.99.102") mongo2_config.vm.host_name = "mongo2" mongo2_config.vm.provision :puppet do |mongo2_puppet| mongo2_puppet.pp_path = "/tmp/vagrant-puppet" mongo2_puppet.manifests_path = "manifests" mongo2_puppet.module_path = "modules" mongo2_puppet.manifest_file = "site.pp" end end

Vagrant RocksVagrant Rocks● Vagrant init Vagrant init

● Vagrant up Vagrant up

● Vagrant provision Vagrant provision

● Vagrant down Vagrant down

● Vagrant destroyVagrant destroy

SushiSushi

Quiz Time : Quiz Time :

Which tool did I forget ?Which tool did I forget ?

YouYou

LinksLinkshttp://puppetlabs.com/mcollective/introduction/http://puppetlabs.com/mcollective/introduction/

https://github.com/jordansissel/fpmhttps://github.com/jordansissel/fpm

http://logstash.net/http://logstash.net/

https://github.com/rashidkpc/Kibanahttps://github.com/rashidkpc/Kibana

http://graphite.wikidot.com/http://graphite.wikidot.com/

https://github.com/wayfair/Graphite-Tattlehttps://github.com/wayfair/Graphite-Tattle

http://vagrantup.com/http://vagrantup.com/

https://github.com/KrisBuytaerthttps://github.com/KrisBuytaert

ContactContactKris.Buytaert@inuits.euKris.Buytaert@inuits.eu

Further ReadingFurther Reading@krisbuytaert @krisbuytaert http://www.krisbuytaert.be/blog/http://www.krisbuytaert.be/blog/http://www.inuits.eu/http://www.inuits.eu/

InuitsInuits

Duboistraat 50Duboistraat 502060 Antwerpen2060 AntwerpenBelgiumBelgium891.514.231891.514.231

+32 475 961221+32 475 961221