|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Linux automated deployment of MQ rpms |
« View previous topic :: View next topic » |
Author |
Message
|
crashdog |
Posted: Tue Jan 22, 2019 5:54 am Post subject: Linux automated deployment of MQ rpms |
|
|
 Voyager
Joined: 02 Apr 2017 Posts: 77
|
Hello,
I'm currently looking into the topic of automated MQ deployment on Linux. I recognized that the IBM MQ RPMs are not signed. This leads to the situation of having to call yum install and other commands with the parameter --gpg-nocheck. Does anyone have any insight why IBM does not sign the packages ? (this is true for the developer and the productive rpms).
What would you suggest for the post install items on mq servers ? I usually make a wrapper rpm that has dependecies to IBM's packages. My rpm then executes pre and post install scripts to change the kernel parameters and other needed modifications.
I am aware that this could also be done using puppet, ansible or chef scripts. But I always found the wrapper rpm better to maintain. But I was wondering if somebody here has experiance doing it the puppet, ansible etc.. way ? If so why would you rather do it that way ?
Cheers,
Gerhard _________________ You win again gravity ! |
|
Back to top |
|
 |
Vitor |
Posted: Tue Jan 22, 2019 6:27 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
We use Ansible for all Linux installs (including MQ & IIB/ACE/whatever-IBM-calls-it-next) because it's straightforward to administer and someone way above my pay grade decided we were going to!
But moving aside from my distate of senior management, platform administration teams and the other grab bag of people who make my life more irritating than it needs to be, it's been a surprisingly solid decision. After some initial resistance from elderly British staff who spent a lot of time muttering about rpms and security, it's enabled a lot of centralization and automation.
Several decades of experience still make me nervous when developers get more control (I'm not that happy they're allowed to code without adult supervision) but we've circled the wagons round the higher environments and let them build sandcastles in Dev. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|