Preach! I got onboarded to a team with 31 other SRES and 2 weeks in I realized that I was doing all their jobs in Linux solo. The things got helped my team before I got there: octopus deploy’s “run script on host” it’s not too different from invoke command -computername “”, but Active directory :vomit: and security locked down most of the useful tools, so they used octo runbooks instead (also vomit but you do get tools back in the remote UI) but it’s setup with tentacles w/ identifiable ssh keys so it skips ad. It also lets you set env variable libraries.

Move configs to dev repos and make them set/read their own yaml/json, for some reason windows shops didn’t get that memo. Royal TSX is a decent rdp client that you can script host lists and store prod/dev credentials, ours is basically just knife node list | sort windirstat is a GUI replacement for du - *. The light at the end of the tunnel is when you drop the codebase in a windows container and just remove all of the iis mess/instability for container management.

Right now we are trying to figure out bootstrapping. In order to provision a new host we need to reboot the box 2x for ad and one for the app stack. We think we can remove the hostname assignment, but AD shakes fist… it’s kinda pointless targeting an automated step, when it needs manual intervention later anyways.