Puppet is a configuration management tool (Unix & Windows) with its own Domain Specific Language (Puppet or Ruby DSL)

learn more… | top users | synonyms

51
votes
2answers
8k views

Why is it so difficult to upgrade between major versions of Red Hat and CentOS?

"Can we upgrade our existing production EL5 servers to EL6?" A simple-sounding request from two customers with completely different environments prompted my usual best-practices answer of "yes, but ...
61
votes
6answers
3k views

Choosing between meaningful and meaningless hostnames

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
14
votes
4answers
4k views

Managing an application across multiple servers, or PXE vs cfEngine/Chef/Puppet

We have an application that is running on a few (5 or so and will grow) boxes. The hardware is identical in all the machines, and ideally the software would be as well. I have been managing them by ...
72
votes
6answers
13k views

How can the little guys effectively learn and use Puppet?

Six months ago, in our not-for-profit project we decided to start migrating our system management to a Puppet-controlled environment because we are expecting our number of servers to grow ...
48
votes
6answers
12k views

Why use Chef/Puppet over shell scripts?

New to Puppet and Chef tools. Seems like the job that they are doing can be done with shell scripting. Maybe it was done in shell scripts until these came along. I would agree they are more readable. ...
13
votes
3answers
2k views

Pros and Cons of a Decentralized Puppet Architecture

We have around 300 RHEL servers that are currently connecting to a Puppetmaster server. However, we have noticed some performance bottlenecks and it is the point of failure in our system. I am ...
4
votes
2answers
1k views

Iterate resources in a puppet template

I am trying to manage my /etc/hosts file with puppet, but I don't like the internal 'host' type, I'd like to use my own template if possible. I have therefore defined a 'host' resource: # Basic ...
48
votes
6answers
6k views

What should NOT be managed by puppet?

I'm learning my way through configuration management in general and using puppet to implement it in particular, and I'm wondering what aspects of a system, if any, should not be managed with puppet? ...
23
votes
4answers
15k views

automate dpkg-reconfigure tzdata

I'm using puppet to admin a cluster of debian servers. I need to change the timezone of each machine on the cluster. The proper debian way to do this is to use dpkg-reconfigure tzdata. But I can ...
10
votes
3answers
7k views

Set sysctl.conf parameters with Puppet

This was a breeze in CFEngine... But I'm in a Puppet environment now, and need to be able to assign/ensure/check certain sysctl.conf variables. In the CFEngine world, I could simply check for specific ...
6
votes
1answer
90 views

Easily recreate a server's “state” [closed]

I want the ability to setup new servers for dev/testing/prod very easily. The reasons for being able to setup a new dev VM is obvious, but for prod my concern is adding a new production ...
5
votes
1answer
688 views

Puppet variables not always working

I want to apply the "DRY" (don't repeat yourself) principle in the nodes.pp by grouping machines, e.g. RH5 and RH6 machines instead of adding multiple lines of includes for all RH5 and RH6 servers. ...
0
votes
2answers
521 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
17
votes
2answers
10k views

Puppet: Node name seems dependent on reverse dns?

I seem to be running into a little bit of a problem understanding how to get this to work. I have a new server I'm building sitting behind the office NAT at work, its reverse dns maps to ...
6
votes
3answers
3k views

Managing service passwords with Puppet

I'm setting up my Bacula configuration in Puppet. One thing I want to do is ensure that each password field is different. My current thought is to hash the hostname with a secret value that would ...
6
votes
2answers
1k views

Puppet: Only allow changes during certain hours?

Is it possible to setup puppet in a way that changes in manifests only will be applied during certain hours, so that any eventual downtime on our server will occur when we decide it to? Thanks
5
votes
4answers
6k views

Puppet : How to override / redefine outside child class (usecase and example detailled)

The use case i try to illustrate is when to declare some item (eq mysqld service) with a default configuration that could be included on every node (class stripdown in the example, for basenode), and ...
4
votes
3answers
994 views

Alerting on Failed Puppet Status

I can view "Currently failing" nodes in the puppet dashboard web GUI, and even drill into it to see what policy has gone awry. I can also see if nodes are not reporting. Is there any way I could get ...
4
votes
2answers
642 views

puppetrun not reporting client errors

puppetrun doesn't report errors my puppetclients encounter. for instance, if I put jibberish into site.pp and run puppetd --test on the clients I get an error. if I run puppetrun on the puppetmaster ...
3
votes
4answers
680 views

Reference of Built-In Puppet Facts

Is there a reference for the facts that are included in a default puppet installation? For example, some examples I see include $operatingsystem which can be used to identify the distribution. Is ...
2
votes
1answer
4k views

puppet not signing cert or getting new requests

I am not sure how to word the question, so here is the problem: I have a brand new install of puppet-server and puppet using v2.6.16 and running on 2 nodes (puppet and puppet-agent, respectively) ...
0
votes
1answer
1k views

Puppet yum repo - Pull down 2.7.x vs 3.0.x

So a few weeks ago I started on the path to using puppet to automate all the configs/services. At the time I was using the EPEL repo, which installed version 2.6.x. After some reading I was trying to ...
4
votes
1answer
1k views

Puppet claims to be unable to resolve domains even if domain properly resolves

I have a fairly simple puppet setup, one master and one node, both running Debian Squeeze 6.0.4. I have DNS entries for the two machines, client and master respectively. Both client and master's DNS ...
1
vote
1answer
179 views

User can't log in after I manually set MD5 hash

I'm using Puppet to manage user passwords. (Yes, I know LDAP is better, but I've been told from the higher-ups to use Puppet.) I have this class that, when run as root, changes bob's password to ...
1
vote
2answers
2k views

What's the difference between include and require in puppet

I have a class in puppet if I have the following code: class A { require B .... } I get circular dependencies error. If I have: class A { include B .... } everything works fine
50
votes
6answers
14k views

Puppet vs Chef, pro and contra from users and use cases [closed]

I already googled and read the "to-puppet-or-to-chef-that-is-the-question" article. I'm interested in use cases, real world implementations in which people had choosen one or the other on real ...
26
votes
9answers
10k views

Are configuration management tools (Puppet, Chef) capable of keeping installed packages up to date?

This is probably a simple question for those of you already running configuration management tools. Are configuration management tools such as Puppet or Chef the right approach for keeping installed ...
22
votes
4answers
6k views

How can I pre-sign puppet certificates?

Puppet requires certificates between the client (puppet) being managed and the server (puppetmaster). You can run manually on the client and then go onto the server to sign the certificate, but how do ...
20
votes
6answers
19k views

Adding a yum repo to puppet before doing anything else

Is there a way to force puppet to do certain things first? For instance, I need it to install an RPM on all servers to add a yum repository (IUS Community) before I install any of the packages.
8
votes
4answers
17k views

How can I have puppet deploy ssh keys for virtual users?

I am trying to get puppet to assign authorized ssh keys for virtual users but I keep getting the following error: err: Could not retrieve catalog: Could not parse for environment production: Syntax ...
11
votes
2answers
2k views

Configuration management: push versus pull based topology

The more established configuration management (CM) systems like Puppet and Chef use a pull-based approach: clients poll a centralized master periodically for updates. Some of them offer a masterless ...
10
votes
3answers
9k views

How to manage mounted partitions (fstab + mount points) from puppet

I want to manage the mounted partitions from puppet which includes both modifying /etc/fstab and creating the directories used as mount points. The mount resource type updates fstab just fine, but ...
6
votes
2answers
1k views

Scripted install vs cloning

What are the downside of cloning vs scripted installation (using Kick-start / Puppet)? I read a lot of pro-scripted install opinion, where cloning is considered as unreliable method due to ever ...
8
votes
4answers
2k views

Puppetize everything or not?

Notice: there is a lot of theoretical questions. Recently I'm reading about Puppet (and similar systems), which - as I believe - can make my work easier, a lot. But I try - and unfortunately can't - ...
17
votes
3answers
23k views

puppet: force service restart after configuration file was modified

how can i ensure that if new version of configuration file is downloaded via puppet from master repository to one of managed servers relevant service is restarted. typical scenario - let's say there ...
6
votes
4answers
15k views

How to deploy applications (in .tar.gz) with Puppet?

I'm a beginner with Puppet and I would like to know if I'm on the right way to deploy applications with Puppet. The applciations are in a tar.gz file which contains a file with the version number. ...
4
votes
2answers
5k views

Puppet agent certificate verify failure

I have a Puppet Master/Agent set up, and have successfully signed the certificate for the agent on the master. However, when I run puppet agent --test I get a failure that looks like this: Warning: ...
10
votes
2answers
5k views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
9
votes
2answers
2k views

Installing open-vm-tools in Ubuntu via Puppet; what's the lesser evil?

In an ideal world, configuring puppet to install the open-vm-tools should be as simple as this: class vm-tools { package { 'open-vm-tools': ensure => installed } package { ...
7
votes
1answer
3k views

How can I have puppet only set password when creating a user?

I want Puppet not to manage a password (i.e., reset it when it's changed) but to set the initial password when Puppet creates the user. I was thinking of doing a notify to an Exec resource that sets ...
7
votes
2answers
2k views

Puppet configuration using augeas fails if combined with notify

I'm having a problem with the following Puppet manifest, which is meant to enable the passwdqc pam module on a RHEL-6 system (this is using Puppet 0.25.5 and augeas 0.7.2): augeas { 'authconfig': ...
6
votes
2answers
4k views

How do I provide dpkg configuration parameters to aptitude or apt-get?

When installing gitolite I find that: # aptitude install gitolite The following NEW packages will be installed: gitolite 0 packages upgraded, 1 newly installed, 0 to remove and 29 not upgraded. ...
5
votes
1answer
3k views

migrating puppet clients to a new puppet master (old puppet master server gone, only using backup)

My puppet master server had a hardware failure, and I have restored to another box. However this box has different hardware and hostname. If I restore the existing /etc/puppet directory to the new ...
4
votes
2answers
2k views

Puppet&Hiera: $variable is not an hash or array when accessing it

I was using Puppet 3.2.2 and Hiera 1.2.1. And I wrote a puppet module and the content of init.pp was: class install( $common_instanceconfig = hiera_hash('common_instanceconfig'), ...
4
votes
3answers
2k views

Vagrant OS X host nfs share permissions error - Failed to set owner to '1000'

I am a Vagrant and Puppet newbie, I have created a Base Box with Debian Squeeze plus standalone Puppet, using the instructions here to install Puppet with the Puppetlabs packages. The box itself ...
3
votes
3answers
6k views

Differences between local 'puppet apply' and 'puppet agent' to a puppetmaster

We're in the process of migrating away from a monolithic puppet repository that contains all of the config. This one repo contains things that really shouldn't be on every node ever, so a ...
2
votes
3answers
2k views

Using a proxy with Vagrant & Puppet

I'm trying to run a puppet manifest which depends on the target machine having proxy settings to access the Internet. I haven't been able to pass http_proxy_host as Puppet suggests (I believe its a ...
1
vote
3answers
3k views

Appending a line to a file if it doesn't exist using Puppet

I've got a defined resource type to append a line to a file if it doesn't exist, as per below: define appendLineToFile($file, $line, $user) { exec { "echo \"\\n$line\" >> \"$file\"": ...
1
vote
3answers
3k views

Puppet: variable overriding best practices

I'm wondering what are best practices for overriding variables in puppet. I'd like to have all my nodes (which located in different places, some of them are qa, some live) with same classes. Now I ...
8
votes
3answers
3k views

What is the best way in Puppet to add a piece of text to the /etc/hosts file?

I would also like to keep the ability to manually edit hosts-file, at least the first 10 lines. #Public IP's - eth0 192.168.1.103 front-01 192.168.1.106 front-02 #Private IP's - eth1 ...