This is an automated archive.
The original was posted on /r/sysadmin by /u/JackTheRipper91 on 2023-07-18 01:48:23+00:00.
I recently worked as a software engineer for a project and was moved to a qa automation engineer position. On paper, I would use continuous integration tools ( e.g., Jenkins), working with Windows/Red Hat Linux OS in a sys admin capacity, developing bash scripts, applying security guides and requirements, and desktop automation.
However, that's far from the case. The team has a high turnover due to a project manager and team leads needing to figure out what to do.
The team maintains RHEL images with vulnerability scanner software. Additionally, the images must be configured with security implementation guides. The team additionally provides patches to the system for the security vulnerability software. Once this has been done, the vulnerability scanner is run, and the findings are patched. A physical copy is made and distributed for production.
This is all completed off-network because the project manager will not/cannot maintain our systems on the network. I am constantly creating "up-to-date" images on disc drives and installing them to test them. I need to download the patches from a machine on network to patch the systems. Burn the patches to a disc. And update the systems. The only caveat is that the production image has to be eventually burned to a disc for dissemination.
Since this is my first time working in this environment, I must rely on something other than my team leader for direction. The silver lining is I have been given clearance to rewrite the process.
My start to-do includes updating our machines and passing security scans to be on the network. Update the red hat os from el6 to el8. I have briefly looked into using Red Hats image builder, creating a golden image pipeline, e.g., I am looking for suggestions to help make this process efficient and automated, e.g., Thank you.