[erulabs]

This will be an unpopular answer, but none. Karpenter for AWS, Rackspace spot, or microk8s up… Stock Debian + Kubernetes means I never have to configure a host system again. Even raid these days is one line of config: “instanceStorePolicy: RAID0”.

My Raspberry Pis at home are maybe the only exception, in which case I don’t need to harden anything as they’re isolated on my network and run trivial things like a webcam.

I’ve been a Linux sysadmin my entire professional life, and I’ll never go back to VIMing conf files ever again. It’s wonderful.

That said, if you do have to do this, Packer and Ansible still exist.

[ValtteriL]

I also like stock Debian/Ubuntu + microk8s. I install and configure that with cloud-init and Ansible.

After the initial config everything goes through k8s. Using Ansible for that as well.

How do you manage k8s?

[erulabs]

Typically kustomize and plain YAML - I like “infrastructure as data”. For IaC tho I’ve been enjoying Pulumi which has been a hit for my Typescript loving developer friends.