# What servers/services do we need to bootstrap ourselves **URL:** \ **Category:** Infrastructure\ **Created:** [December 9, 2020, 4:45pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65 "2020-12-09T16:45:55Z")\ **Posts on this page:** 20\ **Page:** 3
**Author:** ![morsik](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/morsik/32/54_2.png) [@morsik](https://forums.rockylinux.org/u/morsik)\ **Post date:** [December 9, 2020, 11:33pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/41 "2020-12-09T23:33:40Z")
As always: depends on your needs and usage šŸ˜‰ But remember, weā€™re just random people here so far with multiple ideas and different experiences. For me Jenkins wins only about flexibility. But loses with simplicity and resource usage. ---
**Author:** ![Conan\_Kudo](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/conan_kudo/32/55_2.png) [@Conan\_Kudo](https://forums.rockylinux.org/u/Conan_Kudo)\ **Post date:** [December 9, 2020, 11:35pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/42 "2020-12-09T23:35:23Z")
I would strongly suggest using [Pagure](https://pagure.io/pagure) and [Koji](http://koji.build/) for the sources and package build tool. Especially in order to ensure everything will build and release as expected, and itā€™d be trivial to reuse the existing integrations built in Fedora and CentOS for this. ---
**Author:** ![ToniFeric](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/toniferic/32/170_2.png) [@ToniFeric](https://forums.rockylinux.org/u/ToniFeric)\ **Post date:** [December 9, 2020, 11:36pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/43 "2020-12-09T23:36:39Z")
Just wondering about the yum/dnf repositories. And the installation ISOā€™s and VM images. Isnā€™t that the biggest problem due to the large amount of data? ---
**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\ **Post date:** [December 9, 2020, 11:44pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/44 "2020-12-09T23:44:51Z")
We will be using Koji. We may not use Pagure as development for it has slowed. But I donā€™t know if that decision is final yet. ---
**Author:** ![morsik](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/morsik/32/54_2.png) [@morsik](https://forums.rockylinux.org/u/morsik)\ **Post date:** [December 9, 2020, 11:54pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/45 "2020-12-09T23:54:40Z")
Does Koji finally allows to login using username/password or some oAuth2? Or still only SSL Certs? ---
**Author:** ![gary-kim](https://avatars.discourse-cdn.com/v4/letter/g/94ad74/32.png) [@gary-kim](https://forums.rockylinux.org/u/gary-kim)\ **Post date:** [December 9, 2020, 11:56pm UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/46 "2020-12-09T23:56:57Z")
Iā€™m gonna bump Gitea as a git forge as Iā€™m a maintainer of it. I can help implement any features that we may need. ---
**Author:** ![dpavlos](https://avatars.discourse-cdn.com/v4/letter/d/d6d6ee/32.png) [@dpavlos](https://forums.rockylinux.org/u/dpavlos)\ **Post date:** [December 10, 2020, 12:02am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/47 "2020-12-10T00:02:49Z")
According to docs, still Kerberos and ssl certs [https://docs.pagure.org/koji/server\_howto/#koji-authentication-selection](https://docs.pagure.org/koji/server_howto/#koji-authentication-selection) ---
**Author:** ![Conan\_Kudo](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/conan_kudo/32/55_2.png) [@Conan\_Kudo](https://forums.rockylinux.org/u/Conan_Kudo)\ **Post date:** [December 10, 2020, 12:19am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/48 "2020-12-10T00:19:02Z")
It hasnā€™t _stopped_, and people are actively contributing and working on releases: [https://pagure.io/pagure/commits/master](https://pagure.io/pagure/commits/master) There are a number of projects running Pagure instances now, and some of those folks are contributing to Pagure to support it. ---
**Author:** ![Meltro](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/meltro/32/65_2.png) [@Meltro](https://forums.rockylinux.org/u/Meltro)\ **Post date:** [December 10, 2020, 12:31am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/49 "2020-12-10T00:31:23Z")
Zabbixā€™ biggest failure imo is automatic host enrollment in a secure way. If that isnā€™t necessary it should be able to most of the actual monitoring with the right hooks in. Agent-based is better from a security standpoint imo as well. Icinga has a much higher curve for getting things running initially but if youā€™re willing to put in the effort and have some people who are intimately familiar with it it might be better in the long run. I wouldnā€™t attempt to use it without director though, which is another hump on the learning curve. If you want pretty dashboards youā€™re going to need something else on top of these but Iā€™ve never found them necessary except when the C-levels wanted to show someone our amazing system _shrug_ If it matters, would vote for Zabbix as quickest up and running option. ---
**Author:** ![Meltro](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/meltro/32/65_2.png) [@Meltro](https://forums.rockylinux.org/u/Meltro)\ **Post date:** [December 10, 2020, 12:42am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/50 "2020-12-10T00:42:30Z")
Iā€™ll also add to the bandwagon against OpenStack. Like everyone else here said, itā€™s an absolute monster. If youā€™re just looking for ā€˜self-hosted cloudā€™ KVM with a gluster backing and freeipa-based GSSAPI authentication can be setup on cheap used hardware inside of a day. Thereā€™s some trickiness to migration without third party helpers (I really REALLY want a few weeks to be able to dive into oVirt) but Iā€™ve been running a company on that exact setup for three years now (with a low five-figure hardware budget!) and it is rock solid. ---
**Author:** ![rhousand](https://avatars.discourse-cdn.com/v4/letter/r/ec9cab/32.png) [@rhousand](https://forums.rockylinux.org/u/rhousand)\ **Post date:** [December 10, 2020, 3:48am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/51 "2020-12-10T03:48:11Z")
Iā€™d like to echo recommendations for the following stacks: Virtualization: oVirt Configuration Management: Ansible / AWX authentication / authorization: FreeIP/Keycloak DNS: FreeIPA Monitoring: Iā€™d say Prometheus/grafana over Zabbix Secret Management: Vault Container Orchestration (if required): Kubernetes clusters deployed using kubespray I am willing to help in the deployment of any of the above. ---
**Author:** ![kevinsumner](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/kevinsumner/32/9_2.png) [@kevinsumner](https://forums.rockylinux.org/u/kevinsumner)\ **Post date:** [December 10, 2020, 4:28am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/52 "2020-12-10T04:28:13Z")
+1 for Prometheus and FreeIPA. Having spent around a decade on Puppet infrastructure, I think Iā€™d rather see Ansible/AWX employed here. Iā€™m somewhat ambivalent about most of the other infrastructure. ---
**Author:** ![bluesoul](https://avatars.discourse-cdn.com/v4/letter/b/e19adc/32.png) [@bluesoul](https://forums.rockylinux.org/u/bluesoul)\ **Post date:** [December 10, 2020, 4:55am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/53 "2020-12-10T04:55:54Z")
I havenā€™t used Prometheus myself but have heard a lot of good. I found zabbix to ā€œjust workā€ for simple topologies but itā€™s been a number of years since Iā€™ve had occasion to stand it up. ---
**Author:** ![kevinsumner](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/kevinsumner/32/9_2.png) [@kevinsumner](https://forums.rockylinux.org/u/kevinsumner)\ **Post date:** [December 10, 2020, 5:06am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/54 "2020-12-10T05:06:01Z")
Prometheus is super simple to set up, definitely simpler than Zabbix last time I did it. Prometheusā€™ database is built in, rather than needing to run a separate instance of MySQL or another RDBMS. Itā€™s also written in Go and provides its own HTTP server, so no need to deal with setting up an HTTP proxy (although we probably would want to for HTTPS support, although that might have landed upstream). Prometheus also scales very well. With the plethora of prexisting ā€œexportersā€ (agents), thereā€™s support for basically every major open source software out there. When I was first learning Prometheus, understanding ā€œeverything as a timeseriesā€ was pretty mind bending, but it pays huge dividends. Prometheus alert manager also has a number of integrations, like PagerDuty. Iā€™m happy to talk at length about Prometheus. ---
**Author:** ![greg.hellings](https://avatars.discourse-cdn.com/v4/letter/g/4da419/32.png) [@greg.hellings](https://forums.rockylinux.org/u/greg.hellings)\ **Post date:** [December 10, 2020, 5:35am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/55 "2020-12-10T05:35:46Z")
Donā€™t deploy new Gluster. Itā€™s being put to pasture. Go with Ceph. ---
**Author:** ![jakereynolds](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@jakereynolds](https://forums.rockylinux.org/u/jakereynolds)\ **Post date:** [December 10, 2020, 9:29am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/56 "2020-12-10T09:29:07Z")
What is the alerting capability of Prometheus/Grafana? Iā€™ve typically had to support a system like Zabbix which is capable of doing more complex triggering, more in depth than ā€œmetric X over thresholdā€. Iā€™ve used the alerting in Grafana but it simply isnā€™t as powerful as more complex systems which can run arbitrary scripts etc. Of course, this only matters if you care about some level of SLA, idk if Centos has something like that? So, is a greater feature set than metric collection required, and if so does Prometheus provide that? ---
**Author:** ![RobVerduijn](https://avatars.discourse-cdn.com/v4/letter/r/47e85d/32.png) [@RobVerduijn](https://forums.rockylinux.org/u/RobVerduijn)\ **Post date:** [December 10, 2020, 10:27am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/57 "2020-12-10T10:27:31Z")
although I like gluster, you are right its being abandoned by rh the only reason rh still pouring money in it is due to support contracts. ceph is the way to go for distributed storage although you have to consider the fact that the upstream of ceph is seriously lagging behind the production version of rh. ---
**Author:** ![boyandin](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/boyandin/32/24_2.png) [@boyandin](https://forums.rockylinux.org/u/boyandin)\ **Post date:** [December 10, 2020, 10:33am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/58 "2020-12-10T10:33:00Z")
Grafana supports a list of [notifiers](https://grafana.com/docs/grafana/latest/alerting/notifications/). Since it lists email and Web hooks, basically it supports every known notification means. ---
**Author:** ![boothb](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@boothb](https://forums.rockylinux.org/u/boothb)\ **Post date:** [December 10, 2020, 10:39am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/59 "2020-12-10T10:39:39Z")
+1 for Ceph, but very dependent on requirements and infrastructure ---
**Author:** ![ezajko](https://avatars.discourse-cdn.com/v4/letter/e/dec6dc/32.png) [@ezajko](https://forums.rockylinux.org/u/ezajko)\ **Post date:** [December 10, 2020, 10:40am UTC](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65/60 "2020-12-10T10:40:33Z")
As for the FreeIPA stuff - maybe _we_ should go with noggin [1] (self-service portal for FreeIPA), it is planned to be used as core of the IDM infra for the Fedora, CentOS and OpenSuSE [1] [https://github.com/fedora-infra/noggin](https://github.com/fedora-infra/noggin) [Previous page](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65.md?page=2) [Next page](https://forums.rockylinux.org/t/what-servers-services-do-we-need-to-bootstrap-ourselves/65.md?page=4)