Salt Stack SCCM

Salt Stack

install

salt master

installed on linux vm

check master
systemctl status salt-master
connect a minion with the name surface
sudo salt-key -L
sudo salt-key -a surface
sudo salt '*' test.ping

use salt

sample salt state file: config/manage-sample-salt-cnfg-yml.sls
C:/_data/projects/salt/sample.salt.cnfg.yml:
  file.managed:
    - source: salt://files/sample.salt.cnfg.yml
    - backup: minion  # Optional: keep a backup before replacing
run sample sls file on surface3 minion
sudo salt 'surface3.fritz.box' state.apply config.manage-sample-salt-cnfg-yml

install on synology

  • use container manager

  • https://hub.docker.com/r/cdalvaro/docker-salt-master/tags

    ports 4505 and 4506 open
    docker/salt-master/data/srv/:/home/salt/data/srv/
docker/salt-master/data/keys/:/home/salt/data/keys/
docker/salt-master/data/logs/:/home/salt/data/logs/

  • /volume1/docker/salt-master/srv/salt /srv/salt

other samples

update windows software
{% if grains['os_family'] == 'Windows' %}

bootstrap_chocolatey:
  chocolatey.bootstrapped

upgrade_keepass:
  chocolatey.upgraded:
    - name: keepass

upgrade_veracrpyt:
  chocolatey.upgraded:
    - name: veracrypt

{% else %}
not_applicable:
  test.show_notification:
    - text: "chocolatey upgrades is for Windows systems only."
{% endif %}
start windows updates
install_windows_updates:
  module.run:
    - name: win_wua.install
    - categories:
      - SecurityUpdates
      - CriticalUpdates
      - UpdateRollups
    - reboot: False