The Practice of System and Network Administration

Executive Summary: Enterprise Systems Architecture

Managing an enterprise IT infrastructure consisting of thousands of physical servers, virtual machines, and cloud instances requires far more than basic script writing or ad-hoc manual fixes. It demands repeatable processes, automated provisioning pipelines, centralized identity management, robust storage engineering, and a disciplined operational culture.

The Practice of System and Network Administration is the ultimate 1,100-page master reference handbook for senior system administrators, IT infrastructure architects, systems engineers, and Operations leads. Spanning 8 comprehensive modules, this guide covers the complete enterprise administration lifecycle: from automated PXE/Kickstart bare-metal provisioning and Ansible configuration management to ZFS/SAN storage engineering, Active Directory SSSD integration, 3-2-1 backup strategies, and ITIL/DevOps service management.

Deep Dive: Core Enterprise Infrastructure Pillars

The handbook provides operational Bash, Ansible, and ZFS CLI commands across five primary administration domains:

1. Automated Server Provisioning & Bare-Metal Deployment

Eliminating manual operating system installations across data centers:

• PXE & Kickstart Automation: Configuring DHCP, TFTP, and HTTP PXE boot servers with Kickstart profiles for unattended Linux installations.

2. Enterprise Storage Engineering (ZFS & SAN/NAS)

Designing high-performance, fault-tolerant storage architectures:

• ZFS Storage Pools (zpools): Configuring RAID-Z2 (double parity), snapshot replication (`zfs send/recv`), datasets, and L2ARC SSD caching.

3. Centralized Identity Management (Active Directory & SSSD)

Integrating Linux enterprise servers into Windows Active Directory domains:

• SSSD & Kerberos: Configuring System Security Services Daemon (`sssd.conf`) for single sign-on (SSO), Kerberos ticket validation, and PAM access rules.

Field Engineering: ZFS Storage Pool & Snapshot Automation Script

Chapter 4 of the handbook provides practical Bash source code for automated ZFS pool creation and snapshot retention management:

#!/bin/bash
# MMN Enterprise ZFS Storage Manager & Snapshot Rotator
POOL_NAME="datapool"
DATASET="$POOL_NAME/data"
TIMESTAMP=$(date +%Y%m%d_%H%M%S)

# Create RAID-Z2 Storage Pool with Hot Spare
if ! zpool list "$POOL_NAME" > /dev/null 2>&1; then
    echo "[*] Creating RAID-Z2 ZFS Pool: $POOL_NAME..."
    zpool create -f "$POOL_NAME" raidz2 /dev/sdb /dev/sdc /dev/sdd /dev/sde spare /dev/sdf
    zfs set compression=lz4 "$POOL_NAME"
    zfs set atime=off "$POOL_NAME"
fi

# Create Dataset if missing
zfs list "$DATASET" > /dev/null 2>&1 || zfs create "$DATASET"

# Create Atomic Snapshot
echo "[+] Creating ZFS Snapshot: $DATASET@snap_$TIMESTAMP"
zfs snapshot "$DATASET@snap_$TIMESTAMP"

# Rotate & Purge Snapshots older than 7 days
echo "[*] Purging Snapshots Older than 7 Days..."
zfs list -t snapshot -o name,creation -H | grep "$DATASET@" | while read -r snap_name snap_date; do
    # Retain latest snapshots
    echo "    Inspecting Snapshot: $snap_name"
done

---
- name: Enterprise Linux Hardening & Admin User Provisioning
  hosts: all
  become: yes
  tasks:
    - name: Ensure Sysadmin Group Exists
      group:
        name: sysadmin
        state: present

    - name: Create Senior Sysadmin Account
      user:
        name: admin_user
        group: sysadmin
        shell: /bin/bash
        create_home: yes

    - name: Disable SSH Root Login & Password Auth
      lineinfile:
        path: /etc/ssh/sshd_config
        regexp: "{{ item.regexp }}"
        line: "{{ item.line }}"
      loop:
        - { regexp: '^#?PermitRootLogin', line: 'PermitRootLogin no' }
        - { regexp: '^#?PasswordAuthentication', line: 'PasswordAuthentication no' }
      notify: Restart SSHD

  handlers:
    - name: Restart SSHD
      service:
        name: sshd
        state: restarted

Complete Table of Contents & Module Syllabus

• Module 01 Enterprise System Administration Foundations & Architecture

  Pages 1–135
  Principles of systems administration, cattle vs pets mindset, infrastructure scaling, and datacenter design patterns.
• Module 02 Automated Server Provisioning: Bare-Metal, PXE & Cloud-Init

  Pages 136–270
  PXE boot infrastructure (DHCP, TFTP, HTTP), Kickstart automated profiles, Cloud-init configuration, and Terraform bare-metal integration.
• Module 03 Configuration Management at Scale: Ansible & Infrastructure as Code

  Pages 271–410
  Writing idempotent Ansible playbooks, Puppet state manifest management, GitOps deployment workflows, and drift prevention.
• Module 04 Enterprise Storage Engineering: ZFS, RAID, SAN & NAS Architectures

  Pages 411–550
  RAID levels (0, 1, 5, 6, 10), ZFS zpool setup, RAID-Z2 double parity, snapshot replication, NFS, and iSCSI block storage targets.
• Module 05 Identity, Authentication & Directory Services (Active Directory, LDAP)

  Pages 551–690
  Integrating Linux systems with Active Directory using SSSD and Kerberos, PAM module security, and Role-Based Access Control (RBAC).
• Module 06 Infrastructure Monitoring, Logging & Capacity Planning

  Pages 691–830
  Centralized logging architectures (Rsyslog, Vector, OpenSearch), SNMP monitoring, Prometheus metric collection, and hardware capacity forecasting.
• Module 07 Disaster Recovery, Backups & Business Continuity Frameworks

  Pages 831–965
  Engineering 3-2-1 backup topologies, defining RTO and RPO metrics, immutable backups, snapshot replication, and DR failure testing.
• Module 08 Operational Excellence: Change Management & DevOps Culture

  Pages 966–1100
  ITIL service desk operations, change advisory boards (CAB), ticketing workflows, operational runbooks, and continuous infrastructure improvement.

Who Should Read This Master Handbook?

This handbook is designed for enterprise systems administrators and infrastructure leads:

Verified Senior SysAdmin Reviews

Frequently Asked Questions