Modern Software Management on Windows with Chocolatey and Puppet
2 likes2,130 views
Rob Reynolds, founder of Chocolatey, presents strategies for modern software management using Chocolatey and Puppet, advocating for its efficiency in handling Windows software automation. Chocolatey offers unique features like package management, automated uninstallations, and comprehensive reporting tailored for organizational needs, optimizing installations and maintenance. The document highlights Chocolatey's capability to integrate with various systems and provides insights into its community resource management and development roadmap.
Modern Software Management on Windows with Chocolatey and Puppet
- 1. Founder Chocolatey Software Rob Reynolds Modern Software Management on Windows with Chocolatey and Puppet
- 2. Rob Reynolds โข Creator and Founder of Chocolatey โข Puppet Alum โข Enjoys long walks on the beach and designing solutions that make hard things easy โข Co-wrote infrastructure framework โจ known as the Chuck Norris Framework โข Over 10 years experience in โจ infrastructure automation โข Obsesses over user experience โข Microsoft MVP for whatever they are calling .NET area now
- 3. Agenda โข Chocolatey โข Why โข What โข Features โข Chocolatey + Puppet โข Demo โข Questions
- 7. Software management may account for 50-90% of your automation
- 8. Windows Software Ecosystem โข Over 20 installer formats and thousands of installers in the wild โข Zips and other archive formats โข Software installers are messy โข Deploy internal/3rd party software using same approach? โข Itโs like the Wild West
- 9. Why Chocolatey? โข Reporting โข Features โข Offline โข Secure โข Flexibility โข Beyond Programs and Features โข Beyond just running installers โข Integrates with everything
- 10. Why Chocolatey? โข Focused solution - does 1 thing very well for over 6+ years โข Uses PowerShell - not learning new or proprietary technologies โข One approach for all software management - 3rd party and internal โข Reinventing Chocolatey could cost over $1 million โข Hundreds of other companies are using it, there must be a reason
- 12. What is Chocolatey? โข Universal Approach for โจ Software Management โข PowerShell โข Fancy zip files = โpackagesโ โข Packages are independent software deployment artifacts โข Takes your deployment scripts to the next level
- 16. Well, obviously - what does it represent though?
- 17. Hereโs a hint
- 19. Community Package Repository โข https://chocolatey.org/packages โข Community Feed / Community Maintained โข Moderated as of October 2014 โข Everything goes through VirusTotal โข Organizations Should Avoid โข Not Fully Reliable - public repo means subject to distribution rights (download CDN cache feature helps) โข Trust and Control
- 20. Sweet Features
- 21. FOSS vs Chocolatey for Business (C4B) โข Chocolatey open source (FOSS) == package management โข Works well in organizational use โข C4B == complete software management โข Smoother experience โข Builds on top of FOSS โข Better system integration, endpoint management, etc โข Better visual interfaces (GUIs) โข Features geared specifically towards organizational use
- 22. Smart Installs / Smarter Upgrades โข Track software installation in Programs & Features to map packages to system installs โข Track environment variable changes โข Leave out guesswork by reporting on software installation location โข Upgrades - Use Xml Document Transform (XDT) for .NET configuration file changes โข Exclusive to Chocolatey - Use new tools / commands without closing / re-opening your shell for environment changes to take effect
- 23. Graphical Interface - Chocolatey GUI โข Configure Chocolatey โข Manage software installations
- 24. Automatic Uninstallation โข Exclusive to Chocolatey - Automatically uninstall over 90% of installations without uninstall script โข AutoUninstaller reduces time by not developing and managing uninstall scripts
- 26. Inventory - Comprehensive Software Audit โข Exclusive to Chocolatey - Visibility beyond just the software โinstalledโ in Programs & Features โข Track versions of zip archives & own internal software that is not visible in system installation. โข Get a complete view of your systems. Chocolatey reports applications in systems not directly under its management. โข Package Audit (C4B) adds who and when
- 27. All Packages in Programs and Features (C4B) โข Programs and Features represents only 50-80% of the software on a machine โข Chocolatey brings managed entries for non-installer packages โข Supporting legacy inventory reporting systems is now a snap โข Do not need to build MSIs / Installers for internal use just to support legacy reporting
- 28. Logging - Detailed Reporting โข Log file captures very detailed information - environment and state โข Reduces rollback / recreation necessity
- 29. Compliance โ Audit Out of Date Software โข choco outdated โข Comprehensive reporting on available upgrades โข See what will upgrade on next maintenance window
- 31. Hosting Your Own Package Server โข https://chocolatey.org/docs/how-to-host-feed โข Artifactory Pro (cross platform) โข Sonatype Nexus (cross platform) โข ProGet / MyGet โข Chocolatey.Server (Puppet Module -->) โข File Share (DFS, SMB, CIFS) โข NuGet Gallery โข NuGet.Server โข SCCM Distribution Points โข Visual Studio Team Services (use v2 endpoints)
- 33. Chocolatey Packages โข Terminology: "Package" is nupkg ๏ฌle, "Software" is binaries or installers โข Zip files + Versioning, Dependencies & PowerShell โข Metadata - Software Information / Package Information โข PowerShell - https://chocolatey.org/docs/helpers-reference โข 30+ Built-in functions - complex tasks become 1 liners โข Handle additional missing installer logic (like add to PATH) โข Add options missing from installer arguments โข Files - drop in binaries, native installers
- 34. Creating Packages โข https://chocolatey.org/docs/create- packages โข choco new โข Generates package files with most of the work done โข Create your own packaging templates!
- 35. Package Builder (C4B) - โGenerate software deployment packages in secondsโ โข Package Builder automatically creates high quality packaging from an installer/ zip in 5-10 seconds โข Determines everything necessary for silently installing software for 70% of installers โข Supports passing urls (and checksums) - downloads files first โข Allows customization โข Supports exe, msi, 7z, zip, msu, and msp files
- 36. Package Internalizer (C4B) - โConvert existing packages to 100% offline and reliableโ โข Take advantage of existing packages without dependency on the internet โข Downloads existing package and all remote resources โข Recompiles package to use those internal resources โข Option to download and point to other locations โข Ability to host packages on private internal repositories โข Visual Interface coming
- 37. How does it work?
- 39. Package Synchronizer (C4B) - stay in sync w/system
- 40. Package Synchronizer (Licensed) - Auto Sync โข Chocolatey maintains state based on packages. System state can be manipulated outside of Chocolatey โข Any Chocolatey command will trigger synchronization in licensed editions of Chocolatey โข Package Synchronizer syncs with manual software removal โข Syncs w/software that automatically upgrades, such as Chrome
- 41. Package Synchronizer (C4B) - Choco Sync Command โข Brings all software in Programs and Features under Chocolatey management โข Generates packaging and baselines to Chocolatey install โข Provides packaging code to take back to source control
- 42. Self-Service (C4B) - โNon- administrative desktop users can install/upgrade software!โ
- 43. Self-Service Installer / Background Mode (C4B)
- 44. Package Reducer (Licensed) โข Reduce Chocolatey space usage down automatically โข Reduction on install/ upgrade โข choco optimize to clean existing
- 45. Other Features โข https://chocolatey.org/docs/release-notes โข Internal sources (like ProGet) โข choco upgrade all - Windows update for your 3rd party and internal software โข Shimming - like symlinks but better โข Pass install arguments directly through to installer (append or override package args) โข Package Parameters to adjust logic in packages โข Handles locking on upgrades in package folders โข Great reference docs - https:// chocolatey.org/docs/commands- reference & https://chocolatey.org/ docs/helpers-reference โข Excellent open source support community โข 30+ built-in PowerShell Functions โข Extend functionality with your own PowerShell Modules โข Custom Package Templates โข Can manage anything on Windows
- 46. Other Features (C4B) โข https://chocolatey.org/docs/ release-notes-licensed โข Auto-uninstaller more effective - uninstaller detection / Package Synchronizer โข Install/upgrade keeping secrets out of logs โข Ubiquitous Install Directory Option โข More built-in PowerShell functions โข Uninstall non-Chocolatey managed software โข Direct Installer - install directly from exe/msi โข Package Throttle โข Runtime malware protection โข CDN Cache โข Professional Packaging Services โข Amazing expert support team - https://chocolatey.org/support
- 47. Chocolatey Workshop โข https://github.com/ ferventcoder/chocolatey- worshop โข Become an expert โข You will learn something new โข Great learning resource for newer folks
- 48. Chocolatey Roadmap โข https://chocolatey.org/docs/ roadmap โข Central Management UI (C4B) โข Choco Deploy CLI (C4B) โข WSA / Windows Nano Support โข PowerShell PackageManagement Official Provider โข Package Enhancements โข Pack Validation โข Virtual packages โข GPG Signing โข Package Grid (C4B) โข Deferred Installer (C4B) โข Chocolatey Toast (C4B) โข Possible support on other platforms
- 49. puppetlabs/chocolatey โข https://puppet.com/blog/puppet-supported-module-chocolatey โข Everything from chocolatey/chocolatey - drop in replacement โข package resource โข ensure Chocolatey install โข Full configuration for Chocolatey โข chocolateysource โข chocolateyconfig โข chocolateyfeature
- 50. Install Chocolatey โข Install and initial configuration โข Point to internal resources
- 51. Package Resource โข installable, uninstallable, upgradeable, versionable, holdable, install_options, uninstall_options โข Still later: virtual_packages
- 52. Chocolatey Package Resource โข Built in provider requires manifest maintenance โข Package resource default to provider => chocolatey for Windows. โข Platform agnostic packaging
- 53. chocolateysource โข Disable/remove default community repository โข Add your own sources โข user/password โจ protected as well โข puppet resourceโจ chocolateysource
- 54. chocolateyconfig โข Set config settings โข Full list available byโจ choco config list orโจ puppet resource chocolateyconfig
- 55. chocolateyfeature โข Enable/disable features โข Full list available byโจ choco feature list orโจ puppet resource chocolateyfeature
- 56. Puppet Roadmap โข chocolatey_server to use new Puppet supported IIS module โข IIS has a small bug in it currently for first run โข puppetlabs/chocolatey - continue to be supported by Puppet and Chocolatey โข chocolatey/chocolatey - deciding what to do with it โข New things will be coming
- 57. Once you go Chocolateyโฆ
- 58. Would you go back to other methods?
- 59. Automate Software Management Without Chocolatey?
- 60. Automate Software Management Without Chocolatey?
- 61. Automate Software Management Without Chocolatey?
- 62. Demo
- 63. This is you
- 65. This is you on Chocolatey
- 67. Any Questions?
- 68. https://chocolatey.org/ contact (Sales) โข ferventcoder - twitter, gmail, etc โข Trial Chocolatey for Business in your environment today! Questions?