Blogging Without a Safety Net » ITIL

Adding support for Services to Rails-CMDB

mrpurpleduck — Sat, 12 Apr 2008 17:25:44 +0000

I’ve just checked my work in progress of adding support for modeling services in Rails-CMDB into SVN, it’s not really ready for production use yet (i.e. I may change the model in incomputable ways) and it’s lacking much code and tests.

The following is a my current thoughts on the process flow for modeling transitions of services:

I’m thinking buying a license for OmniGraffle, as I can’t edit the above diagram any more, it seems a lot nicer than Visio which I use quite a lot at work. The only thing is the Professional version worth the extra money ?

ITIL Foundation v3 Certificate

mrpurpleduck — Fri, 19 Oct 2007 19:30:10 +0000

I got some very good news in the post this morning (well it turned up for a start). After weeks of waiting I got the letter informing me that I had passed the ITIL Foundation v3 exam, which I sat on 27th September.

Really happy about this as I started reading about ITIL some time in May this year, just before I learned about version 3. All in all I think it’s a good improvement over version 2 and well worth doing.

Rails-CMDB release 0.2

mrpurpleduck — Wed, 29 Aug 2007 20:42:17 +0000

Well it’s been a month since the first release of Rails-CMDB and it’s now time for another release. This is the rather large list of changes:

Added some unit tests for PurchaseOrder.
Added Export to CSV.
Added Import from CSV.
An asset can have many hardware items.
The Asset name does not need to be a number.
Catch trying to show a device that does not exist.
Add order_date column to PurchaseOrder Model.
Rename order_date column in Asset to delivery_date.
Correct typo’s in CreateNetworks which prevented loading of the schema.
Rename the database’s used to match the application name.
Added some simple doc’s on getting the system up and running.
Change to using host: 127.0.0.1 in database.yml instead of sockets.

The source code can be found here. Not sure what is going to be in the next version, however I expect it’ll not be ready for release until mid to late September.

First release of Rails-CMDB (v0.1)

mrpurpleduck — Fri, 27 Jul 2007 10:41:58 +0000

This is the first ever release (0.1) of Rails-CMDB, the Ruby on Rails project I’ve been working on since the end of last month. It’s best described as little rough round the edges and the under laying DB schema may change with no upgrade path. However it’s possible to enter (and change) all of information via the interface and also view all details for a device on a single page.

The source code can be found here on my main web site, I’ll try to do a second release within the next few weeks when I get an idea of what’s needed next (I’m currently thinking it’ll need to be import or export via an Excel speed sheet or a CSV file).

Update: It’s been pointed out the me that I did not say what this software is, you can find a lot more details ITIL defines as a configuration management database (cmdb) in this post from last month.

The lack of a open source configuration management database ?

mrpurpleduck — Mon, 18 Jun 2007 19:05:06 +0000

Recently I had given Cisco technical study a rest and did some reading about other logistical aspects of running a complex networks. There are plenty of tools to version control your software and configuration files (e.g. CVS, RCS, Subversion). However there seems to be almost a total lack of tools which allow you to track the larger picture about your systems and devices on the network.

I’m talking about the details of about a device (a Configuration Item in ITIL terms):

What is it called.
What IP address(es) does it have.
Where is it located.
What model is it and specification details.
Does it have a support contact, if so; with who, what level, their contact details.
When was it bought.
Its PO number and asset tag (for when finance ask those questions).
What is it connected too.
What services does it run.
Has the vendor announced end of life/end of support
What OS version is it running
Do you plan to decommission it or renew its support
The level of change control that applies to it
Should be be security scanned as part of compliance and how often.
If it’s part of a chassis system you’ll want to cover a whole pile of details about its line cards and their firmware versions (and possibly even the version of any daughter cards).

Then there is the compliance issues that you may have to deal with, for PCI/DSS you really should be tracking if the device configuration has changed and is the device up to date for security patches.

There is also the change management aspects that is often needed for compliance and there is the useful information about pending changes on this device and what systems/applications will a change on a single device/system impact. Much of this are needed to smoothly run a large network and which is not directly required for compliance, however it can make the process easier.

Much of this is enshrined in the UK Information Technology Infrastructure Library and also in Mike Rothman’s Pragmatic CSO book (I’m thinking of step 2 really). It’s the idea that you need to know what you have to be able to manage change within it.

So why is it hard to find any open source software to do this, or is it just that there is nothing out there? There’s many ticket tracking systems out there, many of them are really good (like Request Tracker). It’s possible that many people who don’t have the budget for the consultant sold and configured systems just have some home brewed/internal developed application for this sort of thing or just use a few Excel spread sheets and lack the tools to do this management well.

Given the above is it possible for a single person (or small team) to change this, how much effort would be needed to cover the basics and start something that people flock too and improve? There is a project called OpenCMDB on sourceforge, however there is currently no code after 3 years.

Maybe having this sort of system free and open source is not meant to be, people will not have the time/energy or commitment at work to allow this to happen. My head almost starts to spin at the though of writing something like this outside of work and wanting to make use of it within, the ownership lines get very blurred. Especially if you end up making changes within work and want to merge them back into the main code base, let alone the problems of getting newer code written by others deployed at work. Will you just end up with you systems that diverge from one another ?

Update: I’ve started writing a CMDB in Ruby on Rails called Rails-CMDB.