# Deployment management

**URL:** <https://discourse.nodered.org/t/deployment-management/48771>\
**Category:** General\
**Created:** [22 July 2021 11:35 UTC](https://discourse.nodered.org/t/deployment-management/48771 "2021-07-22T11:35:08Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![blunoz](https://avatars.discourse-cdn.com/v4/letter/b/c0e974/32.png) [@blunoz](https://discourse.nodered.org/u/blunoz)\
**Post date:** [22 July 2021 11:35 UTC](https://discourse.nodered.org/t/deployment-management/48771/1 "2021-07-22T11:35:08Z")

</div>

Hey all, I’m wondering what solutions people are using for managing deployments on multiple systems that need to run the same project. Ideally I’d like to be able to remotely deploy a complete configuration to a new machine without needing to configure Node Red and dependent modules. Or at minimum be able to deploy a new version of my NR code to an existing machine. I’ve seen the [qbee.io](http://qbee.io) software which looks good but possibly overkill for what I want and I thought there might be some open source tools to achieve a similar outcome.

I was about to start working on a set of scripts to do what I need but thought that someone must have built this wheel already. Thanks for any advice!

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [22 July 2021 13:52 UTC](https://discourse.nodered.org/t/deployment-management/48771/2 "2021-07-22T13:52:21Z")

</div>

I keep the node red flows, settings etc in github repositories and deploy using ansible.

---

<div class="post-metadata">

**Author:** ![blunoz](https://avatars.discourse-cdn.com/v4/letter/b/c0e974/32.png) [@blunoz](https://discourse.nodered.org/u/blunoz)\
**Post date:** [25 July 2021 03:02 UTC](https://discourse.nodered.org/t/deployment-management/48771/3 "2021-07-25T03:02:56Z")

</div>

Thanks Colin. I'm using Projects and a github repository, just finding it cumbersome to configure all the necessary nodes and static dependencies for each deployment. I've started using a sledgehammer approach to backup the entire .node-red folder and copy this to a new RPI device. Any downside to this approach? I've had some problems in rebuilding nodes like SQLITE when copying between a RPI3 and RPI4.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [25 July 2021 11:31 UTC](https://discourse.nodered.org/t/deployment-management/48771/4 "2021-07-25T11:31:54Z")

</div>

> [@blunoz](#):
>
> cumbersome to configure all the necessary nodes and static dependencies for each deployment

What exactly do you mean? Running `npm install` from the .node-red folder should do most of what you need. Though I don't use projects so maybe that is not right. I use git but not with the projects feature. There aught to be some docs for the feature telling you how to move a project from one machine to another. Perhaps someone else could comment here as my assumptions about what projects can do may be wrong.

> [@blunoz](#):
>
> backup the entire .node-red folder and copy this to a new RPI device. Any downside to this approach

It may fail if the version of nodejs is not the same, or if anything about the hardware or OS environment is different. It is generally better not to copy node\_modules but to rebuild it by running `npm install` from the node-red folder.

---

<div class="post-metadata">

**Author:** ![Jean-Luc](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jean-luc/32/89996_2.png) [@Jean-Luc](https://discourse.nodered.org/u/Jean-Luc)\
**Post date:** [25 July 2021 22:14 UTC](https://discourse.nodered.org/t/deployment-management/48771/5 "2021-07-25T22:14:54Z")

</div>

a solution I tried, port my NR in **docker** and create my own fully customized image.  
Then we put it in a private dockerhub on the net.  
In one of the flows of your application, you make a repetitive check (see below), let's say 1x per day to go see on a remote site if there is an update ready.  
If you set the flag to Yes, then a script will be triggered on each remote Pi to download your image and thus transparently update the containers of the machines.  
Be careful, you have to create an image per hardware architecture! But it's simple and fast.  
The same machinery applies if you use grafana, influxdb, mosquitto, etc..

There is also this "[Watchtower](https://www.ctl.io/developers/blog/post/watchtower-automatic-updates-for-docker-containers)" container which checks the other containers in the Pi and verifies if there are more recent versions and updates them by itself or with confirmation.

I wanted to go all the way with this idea, but the physical devices connected via the USB port can have malfunctions when they are re-mapped into the containers. I've seen this especially with the serial node. I was getting erroneous values randomly, not often but enough to skew a graph.

As for the private data of the user, if there is any, it is very simple to put them in a directory of the Pi and map it in the container. Thus, the update of the container does not lose the personal data.

in this scenario, everything is free software but obviously not as strong as a pro solution.

> [@Colin](#):
>
> and deploy using **ansible**

Hey @Colin , Ansible, I've heard about it, is this software paid ?  
Is it some kind of container orchestrator ?  
I'm curious to know more about it.

**Flow upgrade for example:**

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/3/9/39df48691cab6d45739418416ba788b93dc0fd5f.png)

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/5/4/543ab7517a4da4bb2c021b3d85d19abd5f7790bb.png)

---

<div class="post-metadata">

**Author:** ![blunoz](https://avatars.discourse-cdn.com/v4/letter/b/c0e974/32.png) [@blunoz](https://discourse.nodered.org/u/blunoz)\
**Post date:** [25 July 2021 22:19 UTC](https://discourse.nodered.org/t/deployment-management/48771/6 "2021-07-25T22:19:41Z")

</div>

NPM install doesn't seem to work properly. After running I still get a notification in NR that several nodes are not found. I tracked one problem down to a problem with SQLITE which wasn't rebuilding properly.

I realise that this isn't enough information, so I'm going to run a few more tests on a clean install to see what exactly the problem is so I can report back.

---

<div class="post-metadata">

**Author:** ![blunoz](https://avatars.discourse-cdn.com/v4/letter/b/c0e974/32.png) [@blunoz](https://discourse.nodered.org/u/blunoz)\
**Post date:** [25 July 2021 22:22 UTC](https://discourse.nodered.org/t/deployment-management/48771/7 "2021-07-25T22:22:10Z")

</div>

Thanks Jean-Luc, I'll give that a try!  
Redhat Ansible looks good but it's quite expensive I think.  
[qbee.io](http://qbee.io) looks very good for device deployment and management but it's also fairly expensive.

---

<div class="post-metadata">

**Author:** ![Jean-Luc](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jean-luc/32/89996_2.png) [@Jean-Luc](https://discourse.nodered.org/u/Jean-Luc)\
**Post date:** [25 July 2021 22:25 UTC](https://discourse.nodered.org/t/deployment-management/48771/8 "2021-07-25T22:25:15Z")

</div>

Is everything paid for ?  
If you find elegant solutions, please share, it's an interesting topic

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [26 July 2021 20:57 UTC](https://discourse.nodered.org/t/deployment-management/48771/9 "2021-07-26T20:57:26Z")

</div>

Ansible is free. It is available in Ubuntu and Raspbian via the apt repositories. I guess it can be installed on Windows, but I don't use Windows. It only needs to be installed on the central machine controlling the deployment, it drives the machines receiving the deployment via ssh.  
[https://www.guru99.com/ansible-tutorial.html](https://www.guru99.com/ansible-tutorial.html)

---

<div class="post-metadata">

**Author:** ![Jean-Luc](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jean-luc/32/89996_2.png) [@Jean-Luc](https://discourse.nodered.org/u/Jean-Luc)\
**Post date:** [27 July 2021 08:24 UTC](https://discourse.nodered.org/t/deployment-management/48771/10 "2021-07-27T08:24:47Z")

</div>

Thanks @Colin for the link and clarification.  
I just skimmed the text.  
I see that the ssh port 22 must be rerouted via NAT through the client router, otherwise no remote management.  
This is not the case in HTTP.  
Ansible has no particular link with docker containers, I thought it went together and made for that. So you can have preconceived ideas.

---

<div class="post-metadata">

**Author:** ![blunoz](https://avatars.discourse-cdn.com/v4/letter/b/c0e974/32.png) [@blunoz](https://discourse.nodered.org/u/blunoz)\
**Post date:** [27 July 2021 08:37 UTC](https://discourse.nodered.org/t/deployment-management/48771/11 "2021-07-27T08:37:59Z")

</div>

Sounds good, I didn’t research properly to find the open source version, I had only seen the Redhat (paid) version. I’ll give it a try.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [27 July 2021 09:07 UTC](https://discourse.nodered.org/t/deployment-management/48771/12 "2021-07-27T09:07:58Z")

</div>

> [@Jean-Luc](#):
>
> I see that the ssh port 22 must be rerouted via NAT through the client router, otherwise no remote management.

That is one way of doing it, if you need remote management. There are others such as using a VPN, and it doesn't have to be port 22.

> [@Jean-Luc](#):
>
> This is not the case in HTTP.

How do you do it with HTTP without opening a port?

> [@Jean-Luc](#):
>
> Ansible has no particular link with docker containers, I thought it went together and made for that.

I am not sure what you mean by that. What sort of link are you looking for? I use it for deploying containers without noticeable problems.

---

<div class="post-metadata">

**Author:** ![Jean-Luc](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jean-luc/32/89996_2.png) [@Jean-Luc](https://discourse.nodered.org/u/Jean-Luc)\
**Post date:** [27 July 2021 12:45 UTC](https://discourse.nodered.org/t/deployment-management/48771/13 "2021-07-27T12:45:27Z")

</div>

Port 80 HTTP is open by default in all routers-firewalls, internet box of private.  
This allows for unrestricted surfing.  
It is obviously not advisable to do the same with the ssh port which obviously allows to have access to the OS remotely (on internet) even by changing the port.  
On my side I was looking for a simple solution and I found that the container update (docker pull) was done via the http protocol (see https if more encrypted).  
This allows to do plug and play. The user receives his Pi configured by us and he has nothing more to do.  
It is the Pi via the dedicated flow that will pool to the central point and not the central point that makes push.  
It was my idea, but I didn't go further, I tested the concept and that's all.  
Obviously, a dedicated administration tool with a dedicated infrastructure is going to do a lot more. But that requires other skills.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [27 July 2021 12:50 UTC](https://discourse.nodered.org/t/deployment-management/48771/14 "2021-07-27T12:50:27Z")

</div>

> [@Jean-Luc](#):
>
> Port 80 HTTP is open by default in all routers-firewalls, internet box of private.

No ports will be open by default for _incoming_ connections which is what would be needed for remote deployment.

---

<div class="post-metadata">

**Author:** ![Jean-Luc](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jean-luc/32/89996_2.png) [@Jean-Luc](https://discourse.nodered.org/u/Jean-Luc)\
**Post date:** [27 July 2021 13:08 UTC](https://discourse.nodered.org/t/deployment-management/48771/15 "2021-07-27T13:08:25Z")

</div>

that's why I was thinking more about pulling the update from the Pi or other computer (by going to a URL to see if there is an update available) as opposed to pushing it from the central point.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [25 September 2021 13:08 UTC](https://discourse.nodered.org/t/deployment-management/48771/16 "2021-09-25T13:08:33Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.