MCollective alternative?

Question

I really want to run MCollective on my fleet of servers however there are a large number of untrusted users on each machine which makes using MCollective not ideal in my eyes. I'm aware that there is some things you can do to take precaution but I'm not familiar enough with ActiveMQ / want something that's a bit more mindful of similar environments to mine outside the box.

I'm looking for a fact collection like tool essentially.

(Tagging under puppet / server since no mcollective tag and I don't have enough reputation to create a new one)

score 2 · Answer 1 · answered Jan 09 '11 at 03:56

2

Its perfectly possible to secure MCollective, you can assign each user their own MQ authentication details etc and theres various nice SSL plugins.

What problem exactly worries you with MCollective? What do you want out of an alternative? There's various similar applications but none which duplicate MCollective - all have various ins and outs depending on what you want.

Examples include Func, Fabric, perhaps Control Tier and Capistrano.

answered Jan 09 '11 at 03:56

Adam Gibbins

7,147
2
28
42

I suppose the wording was poor. My general concern is the machines are providing a shared service thus numerous users on any given machine.The default setup provides a simple shared key / password which isn't suitable for my environment. The SSL Plugins look interesting, thanks for the information. The modifying of the ActiveMQ stuff is what I'm shying away from as it adds a whole layer of complexity / stuff to learn and I'd like to avoid that. I was curious if there was a similar solution that considered that out of the box. – WinkyWolly Jan 09 '11 at 05:05

score 2 · Accepted Answer · answered Mar 06 '12 at 19:14

One compelling alternative is Salt. Parallel/distributed execution using ZeroMQ as the communications backend, so it maintains its own message queue instead of requiring ActiveMQ or RabbitMQ.

From the description:

Salt uses public keys for authentication with the master daemon, then uses faster AES encryption for payload communication, this means that authentication and encryption are also built into Salt.

MCollective alternative?

2 Answers2