# saltstack

SaltStack (Salt) is a Python-based, event-driven automation tool and framework for deploying, configuring, and managing complex IT systems.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## When security matters: working with Qubes OS at the Guardian

DevFeed: [When security matters: working with Qubes OS at the Guardian](<https://devfeed.tech/articles/when-security-matters-working-with-qubes-os-at-the-guardian-19967.md>)

Original publisher: [Read original article](<https://www.theguardian.com/info/2024/apr/04/when-security-matters-working-with-qubes-os-at-the-guardian>)

Author: Philip McMahon

Published: 2024-04-04T09:32:30Z

Content type: article

Language: en

Sources: [Guardian](<https://devfeed.tech/sources/guardian.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [saltstack](<https://devfeed.tech/topics/saltstack.md>), [Debian](<https://devfeed.tech/topics/debian.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [configuration](<https://devfeed.tech/topics/configuration.md>)

Tags: [amazon-s3](<https://devfeed.tech/tags/amazon-s3.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [debian](<https://devfeed.tech/tags/debian.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [os](<https://devfeed.tech/tags/os.md>), [packages](<https://devfeed.tech/tags/packages.md>), [salt](<https://devfeed.tech/tags/salt.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [workstation](<https://devfeed.tech/tags/workstation.md>)

### AI overview

The Guardian describes its experience configuring Qubes OS for SecureDrop Workstation. The team used SaltStack to set up multiple workstations for safely handling sensitive documents, including an offline Debian 11 virtual machine, managed packages, an amnesic VM, an Amazon S3-hosted private package, a Nautilus extension, and secret configuration values.

### Source excerpt

The latest version of the whistleblowing platform SecureDrop runs on the Qubes operating system. At the Guardian we used the Salt management engine to set up a Qubes environment where journalists could safely interrogate sensitive documents. This post was updated on 9th April 2024 following feedback from the Securedrop Workstation/Qubes community If you've ever scrolled through the Guardian homepage, you may have come across the 'Contact the Guardian securely' banner. This links to a page explaining how to share sensitive information with the Guardian in a number of different ways. Of these, the one that offers the best security is SecureDrop. An offline VM based on Debian 11; Some packages installed from the default repositories and a custom repository; The VM should be 'amnesic' - after a restart it should be reset to a consistent state (so any generated files/downloaded data should be deleted); A custom package installed from a private repository hosted in Amazon S3; A Nautilus extension; A configuration file containing secrets that can't be hard-coded. Continue reading...

## Continuous Performance Monitoring for PHP - The tale of Blackfire at trivago

DevFeed: [Continuous Performance Monitoring for PHP - The tale of Blackfire at trivago](<https://devfeed.tech/articles/continuous-performance-monitoring-for-php-the-tale-of-blackfire-at-trivago-27955.md>)

Original publisher: [Read original article](<https://tech.trivago.com/post/2017-10-27-blackfire/>)

Author: Jorge Luis Betancourt Follow

Published: 2017-10-27T00:00:00Z

Content type: article

Language: en

Sources: [Trivago](<https://devfeed.tech/sources/trivago.md>)

Topics: [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [PHP](<https://devfeed.tech/topics/php.md>), [saltstack](<https://devfeed.tech/topics/saltstack.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [YAML](<https://devfeed.tech/topics/yaml.md>)

Tags: [backend](<https://devfeed.tech/tags/backend.md>), [datacenter](<https://devfeed.tech/tags/datacenter.md>), [devops](<https://devfeed.tech/tags/devops.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [performance](<https://devfeed.tech/tags/performance.md>), [performance-monitoring](<https://devfeed.tech/tags/performance-monitoring.md>), [php](<https://devfeed.tech/tags/php.md>), [provisioning](<https://devfeed.tech/tags/provisioning.md>), [server](<https://devfeed.tech/tags/server.md>), [visibility](<https://devfeed.tech/tags/visibility.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

Trivago describes adopting Blackfire to monitor and optimize the performance of its PHP application across development, QA, staging, and production. The article explains the tool's FreeBSD support, YAML-based performance tests, interface for finding bottlenecks, custom metrics, and SaltStack-based deployment with centralized agents.

### Source excerpt

We're a data-driven company. At trivago we love measuring everything. Collecting metrics and making decisions based on them comes naturally to all our engineers. This workflow also applies to performance, which is key to succeed in the modern Internet.

## Configuration management - How to start testing your salt formulas

DevFeed: [Configuration management - How to start testing your salt formulas](<https://devfeed.tech/articles/configuration-management-how-to-start-testing-your-salt-formulas-27949.md>)

Original publisher: [Read original article](<https://tech.trivago.com/post/2016-10-12-configuration-management-start-testing-saltstack/>)

Author: Marc Siebeneicher Follow

Published: 2016-10-12T00:00:00Z

Content type: tutorial

Language: en

Sources: [Trivago](<https://devfeed.tech/sources/trivago.md>)

Topics: [configuration-management](<https://devfeed.tech/topics/configuration-management.md>), [saltstack](<https://devfeed.tech/topics/saltstack.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [test](<https://devfeed.tech/topics/test.md>), [Provisioning](<https://devfeed.tech/topics/provisioning.md>), [YAML](<https://devfeed.tech/topics/yaml.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>)

Tags: [also](<https://devfeed.tech/tags/also.md>), [backend](<https://devfeed.tech/tags/backend.md>), [configuration-management](<https://devfeed.tech/tags/configuration-management.md>), [devops](<https://devfeed.tech/tags/devops.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [provisioning](<https://devfeed.tech/tags/provisioning.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [salt](<https://devfeed.tech/tags/salt.md>), [testing](<https://devfeed.tech/tags/testing.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

This tutorial explains why trivago began testing SaltStack formulas as its configuration repository grew in complexity. It describes common problems, including YAML syntax errors, incorrect conditions, template issues, networking problems, state-order issues, and logical changes, and motivates automated testing for pull requests.

### Source excerpt

Configuration management tools have recently gained a lot of popularity. At trivago we use SaltStack to automate our infrastructure. As the complexity of configuration files and formulas is increasing, we need a fast, reliable way to test our changes.