Rudder: A systems configuration management and auditing software

ruder

Rudder a solution free and open source oriented to configuration management and auditing to help automate system configuration in large IT infrastructures in a controlled and safe way.

Rudder has a server-side web interface is written in Scala and your lightweight local agent installed on each managed machine written in C. It has a configuration management database, along with continuous auditing capabilities.

About Rudder

La difference between a traditional configuration management tool and Rudder is that changes can be simulated individually before being validated, then check them after their application, finally graph them and maintain them over time.

Anything that doesn't fit the target state will revert to real-time alerts, create drift reports, or trigger automatic correction.

This makes it a particularly suitable tool. to meet the constraints of the production infrastructure.

From a practical point of view, Rudder allows:

  • Manage the system base (distribute SSH keys, configure DNS, manage users, manage service status, set permissions on folders and files, start tasks, manage certificates, etc.);
  • Install, update and configure applications
  • continuously apply and verify security policies, even for external standards (ISO 27001, PCI-DSS, ANSSI PSSI, etc.).

Rudder interface

  • Create inventories
  • It has a complete web interface
  • Standardized and reusable policies
  • Custom policy editor
  • Change request / Validation
  • REST API
  • git-backend

In summary, Rudder is:

A continuous configuration and audit management tool, existing since 2011;

Free (code under GPL v3, documentation under CC BY-SA 2.0, with some libraries under the Apache license);

Composed of a server that manages configuration and compliance reports (in Scala) and a configuration agent (in C), that manages Debian, Ubuntu, RHEL / CentOS, SLES, Slackware and AIX;

Used by major critical productions such as Caisse d'Epargne, BMW or Eutelsat;

Developed primarily by Normation, which offers various services around Rudder, such as a subscription that includes editorial support, training, and expertise, as well as payload plug-ins for specific needs (especially for machine support windows).

New version of Rudder 4.3

Some weeks ago Rudder was updated to its new version 4.3 After more than half a year of development we can find among the improvements and modifications made to this we can highlight.

Rudder 4.3 brings a decisive improvement to this editor by allowing the definition of parameters for these policies.

For example, It is possible to define an application configuration policy that takes into account the database to which to connect.

This allows complex configurations to be abstracted and made accessible with a simple and accessible custom interface.

A second important development is the introduction of an import and export configuration policy for this editor.

Makes it easy to share these policies between servers and users. This also opens up the possibility of a future platform for sharing configuration policies.

A new capability has been added to the predefined configuration policies that accept multiple instances on the same machine (presence of a software package, etc.): one configuration pass before the first instances and one after the last.

A typical use case is to restart a service once at the end of a checklist, for example.

However also allows you to perform atomic actions from several independent configurations- If you want to add three users to the sudoers file, the edit will be done last, at the same time.

How to install Rudder on Linux?

This application is oriented in the use of servers where a special configuration is required and it must also be installed on local machines (clients) which will be managed by Ruuder from the main server.

For this it is necessary that we visit the following link where we are given the necessary instructions to install and configure it on our computers.

They can also visit this link for an online trial of this software.


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: AB Internet Networks 2008 SL
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.