ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Solved SaltStack execution question

    IT Discussion
    salt saltstack state
    6
    13
    1.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller @Emad R
      last edited by

      @emad-r said in SaltStack execution question:

      Eventually I can catch them all, but it would be more efficient to not redo the installation on clients that are already up-to-date.

      That's where Chocolatey comes in. I would make a standard job that checks this on log in or something like that so that it catches everyone, every time but doesn't use constant network resources for hourly verification. Updates are like twice a year, it's not a common thing. And you can audit that centrally with Salt.

      I think checking every hour to see if a six month update has happened, hitting the network and waiting for a response, is going to be quite a bit less than ideal.

      1 Reply Last reply Reply Quote 1
      • DashrenderD
        Dashrender
        last edited by

        Hey can use Salt to run the Chocolately update, right?

        Emad RE 1 Reply Last reply Reply Quote 1
        • Emad RE
          Emad R @Dashrender
          last edited by

          @dashrender

          Hmm, and is choco update smart enough to not update already updated machines ?

          gjacobseG scottalanmillerS 2 Replies Last reply Reply Quote 0
          • gjacobseG
            gjacobse @Emad R
            last edited by

            @emad-r said in SaltStack execution question:

            @dashrender

            Hmm, and is choco update smart enough to not update already updated machines ?

            Yes,.. It will only update what is needed / installed.

            DashrenderD 1 Reply Last reply Reply Quote 2
            • DashrenderD
              Dashrender @gjacobse
              last edited by

              @gjacobse said in SaltStack execution question:

              @emad-r said in SaltStack execution question:

              @dashrender

              Hmm, and is choco update smart enough to not update already updated machines ?

              Yes,.. It will only update what is needed / installed.

              yup, what he said.

              1 Reply Last reply Reply Quote 1
              • gjacobseG
                gjacobse
                last edited by gjacobse

                Microsoft Windows [Version 10.0.15063]
                (c) 2017 Microsoft Corporation. All rights reserved.
                
                C:\WINDOWS\system32>choco upgrade all -y
                Chocolatey v0.10.7
                [Pending] Removing incomplete install for 'ccleaner'
                Upgrading the following packages:
                all
                By upgrading you accept licenses for the packages.
                7zip v16.4.0.20170506 is the latest version available based on your source(s).
                7zip.install v16.4.0.20170506 is the latest version available based on your source(s).
                calibre v3.6.0 is the latest version available based on your source(s).
                chocolatey v0.10.7 is the latest version available based on your source(s).
                chocolatey-core.extension v1.3.1 is the latest version available based on your source(s).
                
                You have chromium v58.0.2990.0 installed. Version 62.0.3195.0 is available based on your source(s).
                Progress: Downloading chromium 62.0.3195.0... 100%
                
                chromium v62.0.3195.0 [Approved]
                chromium package files upgrade completed. Performing other installation steps.
                Downloading chromium 64 bit
                  from 'https://storage.googleapis.com/chromium-browser-snapshots/Win_x64/496584/mini_installer.exe'
                Progress: 100% - Completed download of C:\Users\NTG-Gene\AppData\Local\Temp\chocolatey\chromium\62.0.3195.0\mini_installer.exe (43.14 MB).
                Download of mini_installer.exe (43.14 MB) completed.
                Hashes match.
                Installing chromium...
                chromium has been installed.
                  chromium may be able to be automatically uninstalled.
                 The upgrade of chromium was successful.
                  Software installed to 'C:\Program Files (x86)\Chromium\Application'
                
                You have Firefox v54.0.1 installed. Version 55.0.2 is available based on your source(s).
                Progress: Downloading Firefox 55.0.2... 100%
                
                Firefox v55.0.2 [Approved]
                firefox package files upgrade completed. Performing other installation steps.
                Firefox is already installed. No need to download an re-install again.
                 The upgrade of firefox was successful.
                  Software install location not explicitly set, could be in package or
                  default install location if installer.
                
                You have GoogleChrome v60.0.3112.90 installed. Version 60.0.3112.101 is available based on your source(s).
                Progress: Downloading GoogleChrome 60.0.3112.101... 100%
                
                GoogleChrome v60.0.3112.101 [Approved]
                googlechrome package files upgrade completed. Performing other installation steps.
                Google Chrome 60.0.3112.101 is already installed.
                 The upgrade of googlechrome was successful.
                  Software install location not explicitly set, could be in package or
                  default install location if installer.
                greenshot v1.2.9.129 is the latest version available based on your source(s).
                keepass v2.36 is the latest version available based on your source(s).
                keepass-classic v1.33 is the latest version available based on your source(s).
                keepass.install v2.36 is the latest version available based on your source(s).
                PDFCreator v2.5.3 is the latest version available based on your source(s).
                putty v0.70 is the latest version available based on your source(s).
                putty.portable v0.70 is the latest version available based on your source(s).
                
                You have saltminion v2017.7.0 installed. Version 2017.7.1 is available based on your source(s).
                Progress: Downloading saltminion 2017.7.1... 100%
                
                saltminion v2017.7.1 [Approved]
                saltminion package files upgrade completed. Performing other installation steps.
                
                Downloading saltminion 64 bit
                  from 'https://repo.saltstack.com/windows/Salt-Minion-2017.7.1-Py2-AMD64-Setup.exe'
                Progress: 100% - Completed download of C:\Users\NTG-Gene\AppData\Local\Temp\chocolatey\saltminion\2017.7.1\Salt-Minion-2017.7.1-Py2-AMD64-Setup.exe (35.81 MB).
                Download of Salt-Minion-2017.7.1-Py2-AMD64-Setup.exe (35.81 MB) completed.
                Hashes match.
                Installing saltminion...
                saltminion has been installed.
                  saltminion may be able to be automatically uninstalled.
                 The upgrade of saltminion was successful.
                  Software installed as 'exe', install location is likely default.
                skype v7.37.0.103 is the latest version available based on your source(s).
                
                You have teamviewer v12.0.81460 installed. Version 12.0.82216 is available based on your source(s).
                Progress: Downloading teamviewer 12.0.82216... 100%
                
                teamviewer v12.0.82216 [Approved]
                teamviewer package files upgrade completed. Performing other installation steps.
                Downloading teamviewer 64 bit
                  from 'https://download.teamviewer.com/download/version_12x/TeamViewer_Setup.exe'
                Progress: 100% - Completed download of C:\Users\NTG-Gene\AppData\Local\Temp\chocolatey\teamviewer\12.0.82216\TeamViewer_Setup.exe (15.03 MB).
                Download of TeamViewer_Setup.exe (15.03 MB) completed.
                Hashes match.
                Installing teamviewer...
                teamviewer has been installed.
                  teamviewer may be able to be automatically uninstalled.
                 The upgrade of teamviewer was successful.
                  Software installed to 'C:\Program Files (x86)\TeamViewer'
                tightvnc v2.8.8 is the latest version available based on your source(s).
                vcredist2008 v9.0.30729.6161 is the latest version available based on your source(s).
                virtualbox v5.1.26 is the latest version available based on your source(s).
                x2go v4.1.0.0 is the latest version available based on your source(s).
                
                Chocolatey upgraded 5/22 packages.
                 See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
                
                Upgraded:
                 - teamviewer v12.0.82216
                 - googlechrome v60.0.3112.101
                 - chromium v62.0.3195.0
                 - saltminion v2017.7.1
                 - firefox v55.0.2
                
                1 Reply Last reply Reply Quote 1
                • scottalanmillerS
                  scottalanmiller @Emad R
                  last edited by

                  @emad-r said in SaltStack execution question:

                  @dashrender

                  Hmm, and is choco update smart enough to not update already updated machines ?

                  Of course. Does any package mnagement system make that mistake? Package Management 101 there. Chocolatey works just like YUM or APT.

                  Emad RE JaredBuschJ 2 Replies Last reply Reply Quote 3
                  • Emad RE
                    Emad R @scottalanmiller
                    last edited by

                    @scottalanmiller said in SaltStack execution question:

                    @emad-r said in SaltStack execution question:

                    @dashrender

                    Hmm, and is choco update smart enough to not update already updated machines ?

                    Of course. Does any package mnagement system make that mistake? Package Management 101 there. Chocolatey works just like YUM or APT.

                    Tmam, thanks will look into this.

                    1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @scottalanmiller
                      last edited by

                      @scottalanmiller said in SaltStack execution question:

                      @emad-r said in SaltStack execution question:

                      @dashrender

                      Hmm, and is choco update smart enough to not update already updated machines ?

                      Of course. Does any package mnagement system make that mistake? Package Management 101 there. Chocolatey works just like YUM or APT.

                      Yeah, I use a powershell script executed on a schedule by Atera to update chocolately daily on all client systems.

                      1 Reply Last reply Reply Quote 3
                      • RomoR
                        Romo @Emad R
                        last edited by

                        @emad-r One of the main points of using configuration management tools is that when using them properly you create idempotent operations (getting the same result no matter the number of times the operation is executed).

                        Instead of using cmd.run to execute the install, you could as others have mentioned the chocolatey module, or if you don't want to install chocolatey on your computers you could use the win_pkg which requries a repo created on the salt-master. Both of those modules are idempotent, so once you reach the desired state no matter how many times you run them they will not make any more changes.

                        https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_pkg.html
                        https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html

                        The software available in the official windows git repo.
                        https://github.com/saltstack/salt-winrepo-ng

                        Creating a windows software repository:
                        On your salt master run

                        salt-run winrepo.update_git_repos
                        

                        Sync the repo on your Windows minions

                        salt -G 'os:windows' pkg.refresh_db
                        

                        Now you can use the pkg module in your states, or adhoc commands.

                        //Example adhoc command (remote execution)
                        salt -G 'os:Windows' pkg.install salt-minion
                        

                        That last command will always install the latest version of the salt-minion you could add the version parameter to specify the one you require.

                        1 Reply Last reply Reply Quote 3
                        • 1 / 1
                        • First post
                          Last post