Tagged Questions

2
votes
2answers
62 views

How can I use Puppet to maintain SSH host keys across system rebuilds?

I have a few lab environments where the computers get rebuilt on a periodic basis but need to keep the same ssh host keys so that the people who connect to the lab computers (often from their own ...
1
vote
2answers
77 views

Puppet Master in VIrtual Machine with Port Forwarding (SSL certificate error?) - SOLVED

I am trying to run a puppet master on a virtual machine, and connect from a client machine, via port forwarding on the virtual machine's host. The details I have a virtual machine running Ubunto ...
3
votes
6answers
235 views

Rolling update with puppet, ansible or fabric

I have some jetty servers with a loadbalancer before them. Now I want to update my application without downtime. When one jetty is going down and no longer reachable the loadbalancer automatically ...
0
votes
2answers
36 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
0
votes
1answer
173 views

pulling git-via-ssh repo via Puppet: “Could not create repository (non-repository at path)”

I'm trying to pull a git (github) repo via Puppet. I've used the official vcsrepo documentation and borrowed from the Fiesta post to come up with the following config: vcsrepo { "/tmp/": ensure ...
1
vote
1answer
174 views

Puppet over ssh tunnel

Hi I am trying to use puppet client/master to set up my servers. I have everything working perfectly on local VM's and now I'm trying to set up my first external server. However I can't get the client ...
1
vote
3answers
170 views

SSH autologin works sporadically

I am installing 20 servers. On each, with a specific user I created a dsa key. I did cat key.pub from each server onto ~/.ssh/authorized_keys of the first server I verified all servers can log in ...
3
votes
1answer
1k views

Add server to known_hosts

I would like to add github.com to the known_hosts file from the command line as I am creating a puppet manifest to provision a remote server. I have tried: "ssh-keyscan -H github.com > ...
0
votes
1answer
429 views

Tool for managing ssh keys in a server cluster

I have couple of Debian servers and currently I am struggling around with adding manually ssh keys to the server's authorized_keys files. Do you know an application which can do this in a nice ...
0
votes
3answers
207 views

Git: push via ssh to a root owned repository with ssh root logins disabled

is that even possible? Summary, i'm running puppet master on a server and ideally we want root logins via ssh disabled, we want to force all access via sudo if root access required however we have ...
5
votes
1answer
346 views

Install single SSH key multiple times on single machine via puppet

I want to have one place where I have defined ssh keys for my users. These users can be in different (multiple) roles on single server. So I defined ssh_authorized_key as virtual and then wanted to ...
9
votes
2answers
2k views

Using Puppet to remove SSH keys not explicitly allowed

I'm using puppet to distribute SSH keys, like so: ssh_authorized_key { "alice@foo.com": ensure => present, key => 'xxxx', type => 'ssh-rsa', user => 'deploy', } The ...
5
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...