Skip to content

Latest commit

 

History

History
140 lines (102 loc) · 6.37 KB

Exercise4.md

File metadata and controls

140 lines (102 loc) · 6.37 KB
Raw

Task 2 - The build

Estimated time to completion: 30-60 minutes

To kick off a new build, the script 'Build.ps1' is going to be used. Whether or not you are in a build pipeline, the build script will create all artifacts in your current environment.

Remember to check the prerequisites!

2.4 Add another layer to your hierarchy

You are tasked with creating another layer that better reflects separate fire sections for your locations. All locations have two fire sections that are physically kept apart from each other. Each computer should have the fire section information written to its registry in the key 'HKEY_LOCAL_MACHINE\SOFTWARE\Dsc'.

  1. To create a new layer, you need to find an appropriate structure. Since the file system is already quite good when it comes to displaying hierarchical data, we can add a subfolder called FireSections which should contain for example Section1.yml and Section2.yml. The file subscribes to the 'RegistryValues' configuration to write a registry key to the nodes containing the fire section. You may either use VSCode to create the folder and the files or run the following commands:

Note: Before running the commands, make sure you are in the DscWorkshop directory.

@'
Configurations:
  - RegistryValues

RegistryValues:
    Values:
    - Key: HKEY_LOCAL_MACHINE\SOFTWARE\Dsc
      ValueName: FireSection
      ValueData: 1
      ValueType: DWORD
      Ensure: Present
      Force: true
'@ | New-Item -Path .\DSC\DscConfigData\FireSections\Section1.yml -Force

@'
Configurations:
  - RegistryValues

RegistryValues:
    Values:
    - Key: HKEY_LOCAL_MACHINE\SOFTWARE\Dsc
      ValueName: FireSection
      ValueData: 2
      ValueType: DWORD
      Ensure: Present
      Force: true
'@ | New-Item -Path .\DSC\DscConfigData\FireSections\Section2.yml -Force

  1. Please start a new build and examine the RSoP files for the new fire section information once completed. Don't try too hard to find the information. It is expected that it's not there. Why?

    We have created config files containing the fire sections but the nodes have not been assigned a fire section yet.

  2. To assign a node to a fire section, please open the files for the nodes 'DSCFile01' and DSCWeb01' in the dev environment. Like a node is assigned to a location or role, you can add a line containing the fire section like this:

    NodeName: DSCFile01
Environment: Dev
Role: FileServer
Description: File Server in Dev
Location: Frankfurt
FireSection: Section1

  3. Please build the project again. This time you will see that the fire section number has made it to the node's RSoP files. However, something important is missing: The data about the registry key to write. Why is it still missing?

  4. In order to add completely new layers to your configuration, you need to tell Datum about it by modifying the lookup precedence. This is done in the global configuration file called 'Datum.yml' stored in the directory 'DscConfigData'. Please open the file.

  5. Examine the current contents of 'Datum.yml' and notice the resolution order for your files:

    Name Description
    AllNodes\$($Node.Environment)\$($Node.NodeName) The settings unique to one node
    Environment$($Node.Environment) The settings that are environment specific
    Environment$($Node.Location) The settings that are location specific
    Roles\$($Node.Role) The settings unique to the role of a node
    Roles\ServerBaseline The baseline settings that should apply to all nodes and roles
    MetaConfig\DscBaseline DSC specific settings like intervals, maintenance windows and version info

    The settings get more generic the further down you go in the list. This way, your node will always win and will always be able to override settings that have been defined on a more global scale like the environment. This is because the default lookup is set to 'MostSpecific', so the most specific setting wins.

    Some paths are configured to have a different lookup option like 'merge_basetype_array: Unique' or 'merge_hash: deep'. This tells Datum not to override settings in lower levels but merge the content. An example:

    The 'ServerBaseline.yml' adds the Windows feature 'Telnet-Client' to the list of windows features:

      WindowsFeatures:
    Name:
    - -Telnet-Client

    And the web server role contains some other Windows features:

      WindowsFeatures:
  Name:
  - +Web-Server
  - -WoW64-Support

    The 'Datum.yml' defines the merge behavior for the path 'WindowsFeatures\Name':

      WindowsFeatures\Name:
    merge_basetype_array: Unique

    The result can be seen the RSoP files. After building the project, the Windows features config section in the 'DSCWeb01.yml' in the folder 'DSC\BuildOutput\RSOP' looks like this:

      WindowsFeatures:
  Name:
  - +Web-Server
  - -WoW64-Support
  - -Telnet-Client

    More complex merging scenarios are supported that will be explained in later articles.

  6. Let's go back to the fire section task. A good place to add your new layer thus would be somewhere before the node-specific data is applied, since a separate fire section might mean different IP configurations.

    Let's add the new layer by adding an entry to Datum's global lookup precedence. Depending on when you want your new layer to apply, this could look like:

    ResolutionPrecedence:
- AllNodes\$($Node.Environment)\$($Node.NodeName)
- Environment\$($Node.Environment)
- Locations\$($Node.Location)
- FireSections\$($Node.FireSection)
- Roles\$($Node.Role)
- Roles\ServerBaseline
- Roles\DscBaseline

    We are using node-specific settings to select the correct files to import. This principle gives you a lot of flexibility to put your infrastructure and business requirements into DSC config data.

    In summary, adding new layers is a bit more involved than adding a new role. You need to think about the resolution precedence and the way your settings will be merged. Our project can serve as a good starting point, but you still need to take care of organizational requirements and so on.

Please continue with the stretch goal when your are ready.