Corporate IT: What do you use to manage Linux laptops for your employees?

11 pointsDogRunner1y ago7 comments

My current company is managing the employees' laptops, which can either be Windows 11 based or MacOS based devices. We use JAMF, Intune and Empirum (made by Matrix42) to manage and ensure governance over the devices. In my former firms, this was never a problem, as the company trusted their experts to ensure secure usage and proper licensing on their devices, but this is not an option in this scenario.

We would love to offer Linux-based laptops as well and especially the developers and IT technicans would be super happy to have a debians based OS, the IT service teams don't want to hand over these machines without any centralized control/governance.

Do you have any experience or hints how to ensure any kind of centralized managemend / governance / control for a linux based laptop? What you the solutions, your company have chosen?

Thanks

7 comments

eyeris1y ago

Recommend r/sysadmin on Reddit if you haven’t already checked there

bigfatkitten1y ago

Puppet. We use it to configure the OS from barebones Kickstart onwards, as well as continuously enforce the various security policies we need to be able to tell people that we comply with.

jdsalaro1y ago

Are all of your recipes home brewed?

bigfatkitten1y ago

They are, we're not doing anything super fancy, mostly just pushing lots of templated config files, ensuring that particular packages are installed, and that services like fapolicyd and auditd are running.

dyingkneepad1y ago

Just remember: whenever IT doesn't deliver a workable solution, Shadow IT does.

synthoidzeta1y ago

I used DriveStrike at an organization

Spooky231y ago

It’s going to depend on the requirements the company has. For example, if you need to deal with FIPS or IRS compliance, it is going to be tough.

When I was responsible for IT in a regulated scenario, we over provisioned laptops and used VMs or the Windows 10 Linux layer. We treated the Linux part like a developer tool.

If you don’t have compliance and audit risk, just find an angle to make it on. The puppet advice is good - maybe add shipping logs to a siem or splunk server.

j / k navigate · click thread line to collapse

Corporate IT: What do you use to manage Linux laptops for your employees?

11 pointsDogRunner1y ago7 comments

Do you have any experience or hints how to ensure any kind of centralized managemend / governance / control for a linux based laptop? What you the solutions, your company have chosen?

Thanks

7 comments

eyeris1y ago

Recommend r/sysadmin on Reddit if you haven’t already checked there

bigfatkitten1y ago

Puppet. We use it to configure the OS from barebones Kickstart onwards, as well as continuously enforce the various security policies we need to be able to tell people that we comply with.

jdsalaro1y ago

Are all of your recipes home brewed?

bigfatkitten1y ago

dyingkneepad1y ago

Just remember: whenever IT doesn't deliver a workable solution, Shadow IT does.

synthoidzeta1y ago

I used DriveStrike at an organization

Spooky231y ago

It’s going to depend on the requirements the company has. For example, if you need to deal with FIPS or IRS compliance, it is going to be tough.

When I was responsible for IT in a regulated scenario, we over provisioned laptops and used VMs or the Windows 10 Linux layer. We treated the Linux part like a developer tool.

If you don’t have compliance and audit risk, just find an angle to make it on. The puppet advice is good - maybe add shipping logs to a siem or splunk server.

j / k navigate · click thread line to collapse