Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Ask HN: What's your favorite config management tool these days and why?
2 points by igetspam on Aug 28, 2021 | hide | past | favorite | 2 comments
After reading a HN thread about Ansible tricks and the expected debate about whether or not Ansible is actually good, I felt like a discussion around that specific topic was useful. Here's my current case:

I have a field deployed appliance that needs to be able to update automatically. Today, since we're still in an early phase, the fee I have deployed are accessible over SSH. This won't be the future case though. While in the current mode, I use Ansible over SSH to push changes. It works well enough but we're doing a bit of a pivot and now feels like the right time to do the rearch and move to a pull based model.

I've used Puppet, Chef and Ansible over the years and I could make this work with any one of them. I have not use Salt and my experience with cfengine is about 20 years ago. I'm curious to see if there's some compelling reason to get away from the devil I know right now (Ansible) that I'm missing. Salt gets brought up a lot but I rarely see arguments for or against and many of the articles I've read make it all seem like a coin toss.

Anyone have strong feelings backed by data?



Look into Ansible pull. You will run into silent failures if you can't monitor whats going on. If installing k3s is an option on your device maybe you can install argocd or fluxv2 on it an turn it into a gitops style pull mechanism.


My plan has been to use AWX but my curiosity is if there's something people like better lately. There seems to be a decent amount of hate for Ansible in this community and I'm not married to any specific tool here. My past experiences with chef in a pull model exploded in spectacular fashion (most pre Erlang rewrite), so I'm unlikely to traverse that path again but it's been while and I like to stay open.

Running a k8s derivative has been considered but the value proposition was bad. I like and use k3s but it doesn't solve for much in our use case.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: