Sorry to hear that, it originally sounded like I might be able to help with some scripts but cleaning up the org is definitely going to be work. Stay strong
it originally sounded like I might be able to help with some scripts
Thanks man, I still appreciate it a lot
I feel like I just need to clarify some things. In my initial comment, I was bashing Microsoft, not because it’s their fault that my company has such a messy environment and workflows, but because the way Windows Server works is just stupid. Since there’s no proper shell (PowerShell is absolute garbage), everyone on the Windows team uses fucking RDP to log in to the server… Most of the stuff can’t be reasonably done through a CLI, and requires using the stupid GUI wizards. Configurations can’t be replicated as easily, since I can’t just use scp to copy a config file, I actually need to go through the stupid GUI wizard again. Active Directory is a huge mess that’s been held together by hopes and prayers over the past few decades, and I hope it dies sooner rather than later. Also fuck my company’s stupid decisions from 20 years ago… Integrating some stupid Windows/Microsoft specific stuff into all of our products was not the best idea, and they realized this a few years ago. Now we have a huge amount of technical debt though, and it will take decades to get everything ported over.
Preach! I got onboarded to a team with 31 other SRES and 2 weeks in I realized that I was doing all their jobs in Linux solo. The things got helped my team before I got there: octopus deploy’s “run script on host” it’s not too different from invoke command -computername “”, but Active directory :vomit: and security locked down most of the useful tools, so they used octo runbooks instead (also vomit but you do get tools back in the remote UI) but it’s setup with tentacles w/ identifiable ssh keys so it skips ad. It also lets you set env variable libraries.
Move configs to dev repos and make them set/read their own yaml/json, for some reason windows shops didn’t get that memo. Royal TSX is a decent rdp client that you can script host lists and store prod/dev credentials, ours is basically just knife nodelist | sort windirstat is a GUI replacement for du - *. The light at the end of the tunnel is when you drop the codebase in a windows container and just remove all of the iis mess/instability for container management.
Right now we are trying to figure out bootstrapping. In order to provision a new host we need to reboot the box 2x for ad and one for the app stack. We think we can remove the hostname assignment, but AD shakes fist… it’s kinda pointless targeting an automated step, when it needs manual intervention later anyways.
Sorry to hear that, it originally sounded like I might be able to help with some scripts but cleaning up the org is definitely going to be work. Stay strong
Thanks man, I still appreciate it a lot
I feel like I just need to clarify some things. In my initial comment, I was bashing Microsoft, not because it’s their fault that my company has such a messy environment and workflows, but because the way Windows Server works is just stupid. Since there’s no proper shell (PowerShell is absolute garbage), everyone on the Windows team uses fucking RDP to log in to the server… Most of the stuff can’t be reasonably done through a CLI, and requires using the stupid GUI wizards. Configurations can’t be replicated as easily, since I can’t just use scp to copy a config file, I actually need to go through the stupid GUI wizard again. Active Directory is a huge mess that’s been held together by hopes and prayers over the past few decades, and I hope it dies sooner rather than later. Also fuck my company’s stupid decisions from 20 years ago… Integrating some stupid Windows/Microsoft specific stuff into all of our products was not the best idea, and they realized this a few years ago. Now we have a huge amount of technical debt though, and it will take decades to get everything ported over.
Preach! I got onboarded to a team with 31 other SRES and 2 weeks in I realized that I was doing all their jobs in Linux solo. The things got helped my team before I got there: octopus deploy’s “run script on host” it’s not too different from invoke command -computername “”, but Active directory :vomit: and security locked down most of the useful tools, so they used octo runbooks instead (also vomit but you do get tools back in the remote UI) but it’s setup with tentacles w/ identifiable ssh keys so it skips ad. It also lets you set env variable libraries.
Move configs to dev repos and make them set/read their own yaml/json, for some reason windows shops didn’t get that memo. Royal TSX is a decent rdp client that you can script host lists and store prod/dev credentials, ours is basically just
knife node list | sortwindirstat is a GUI replacement fordu - *. The light at the end of the tunnel is when you drop the codebase in a windows container and just remove all of the iis mess/instability for container management.Right now we are trying to figure out bootstrapping. In order to provision a new host we need to reboot the box 2x for ad and one for the app stack. We think we can remove the hostname assignment, but AD shakes fist… it’s kinda pointless targeting an automated step, when it needs manual intervention later anyways.