Hi All
Can I ask for a sanity check please?
I have built a Linux Appliance. It is delivered via CI/CD as an ISO or AMI, and autoinstalls with a simple guided menu-driven workflow and then does "security type stuff". It runs a few services on network traffic and sends results elsewhere. Consider it a "data collector" used for security investigation.
It's pretty dumb: It does one thing only. It's an appliance. The end-user has no access to the console or shell.
The menu system allows the end-user to change certain key parameters (interface related, ntp server etc), stop and start services and get stats on what's going on. All of this is done in bash - for example changing /etc/network/interfaces files and restarting internal services to change IP details.
However, the menu system is a bit of a mess. It's written in shell.
If you wanted to re-factor this, what would your approach be?
I would like to:
- Rewrite the menu system in a more appropriate language (Python or Go)
- The menu should output a config file (which would therefore allow appliance cloning, back-up and restore etc).
- That simple config file should be parsed and applied to the system by an additional service.
So:
- Python for the menu system
- This writes a YAML based config
- A separate Python service converts the simple appliance config into appropriate config for an automation framework
- Let the automation framework do the heavy lifting - Salt or Ansible.
This way I can use automation framework to do the difficult and fiddly parts of Linux configuration and only need to worry about the commands.
Does this make sense?
Can I ask for a sanity check please?
I have built a Linux Appliance. It is delivered via CI/CD as an ISO or AMI, and autoinstalls with a simple guided menu-driven workflow and then does "security type stuff". It runs a few services on network traffic and sends results elsewhere. Consider it a "data collector" used for security investigation.
It's pretty dumb: It does one thing only. It's an appliance. The end-user has no access to the console or shell.
The menu system allows the end-user to change certain key parameters (interface related, ntp server etc), stop and start services and get stats on what's going on. All of this is done in bash - for example changing /etc/network/interfaces files and restarting internal services to change IP details.
However, the menu system is a bit of a mess. It's written in shell.
If you wanted to re-factor this, what would your approach be?
I would like to:
So: This way I can use automation framework to do the difficult and fiddly parts of Linux configuration and only need to worry about the commands.Does this make sense?