Questions tagged [puppet]
Puppet is a configuration management tool (Unix & Windows) with its own Domain Specific Language.
1,797
questions
0
votes
0
answers
21
views
How to change the URL for Web UI Foreman?
Hi Can I change the url link for the web UI interface? I am using Foreman 3.9 versions. I try to change url with foreman-installer --foreman-url but I get error with ssl-certificate problem. Changing ...
0
votes
0
answers
16
views
Puppet not pulling in changes - Could not request certificate getaddrinfo: Name or service not known
I hope this is a simple fix and as background I have no experience with Puppet or Foreman.
The set up:
two puppet master nodes running on ec2
many other ec2 nodes running puppet modules
foreman ...
0
votes
0
answers
64
views
Puppet agent certificate verify failure for new agents, but existing agents work fine (Puppet 7)
I have over 200 hosts presently working correctly against my puppet master (puppet agent -t applies a catalog). However, starting sometime recently I can no longer add new hosts. There have been no ...
0
votes
0
answers
46
views
Unable to autosign certificates for Puppet
I have a new Puppet server set up and am unable to currently get autosigning of certificates to work.
I've followed the setup instructions on https://www.puppet.com/docs/puppet/7/config_file_autosign ...
0
votes
1
answer
69
views
Need help managing per-machine per-user sudo permissions in a research network environment using saz-sudo and Hiera with Puppet
Currently our Puppet server has an /etc/sudoers file defined with the permissions for every user on every machine in our network. This file is distributed equally to every host to provide permissions. ...
0
votes
1
answer
145
views
Puppet syntax issue when configuring a Prometheus scrape on an SNMP exporter
Some context
I have an SNMP exporter running as a service on a server which allows me to access the data of some PDU using the following URL: http://my.host.name:9116/snmp?target=10.0.1.200&auth=...
0
votes
1
answer
93
views
How to fix puppet installation of ifupdown2 so that networking comes back up (or doesn't go down)?
I have puppet code which automatically installs ifupdown2 on newly provisioned physical servers (along with all other new host configuration). (This is Debian 11 Bullseye.)
However, nearly all of the ...
0
votes
1
answer
106
views
Puppet server can not sign certificate - FileSystemException: Operation not permitted
I have a pending puppet certificate:
$ puppetserver ca list
Requested Certificates:
intern.mydomain.com (SHA256) 3C:82:85:ED:6C:30:54:79:7A:FC:41:00:63:33:E0:52:BE:AA:3B:3F:76:21:73:1E:0B:...
0
votes
0
answers
66
views
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Duplicate declaration: Package[ksh] is already declared in file
I have an issue in setting up ksh installation on a module where it fails saying its already declared in another module. can someone assist me on how can I fix this?
my code :
on a module called ...
0
votes
0
answers
70
views
puppet 5.5 issue after renewed master certificate
I currently faced issue after renewing Puppet certificate.
I did a clean backup of client SSL folder and did a puppet agent ‑t.
Can anyone help me?
This is the code.
[root@pupcltlp0001 AEST /etc/...
0
votes
0
answers
54
views
regex puppet query syntax
I'm trying to learn how to use puppet query, but I'm finding it difficult to target a particular fact path using regex.
If I use the following query, I get exactly what I'm looking for:
puppet-query '...
0
votes
0
answers
13
views
How to read the central Puppet Configurations in the Dockerfile
Currently, I am working on a project we are trying to containerize our application. As our current VMs build scripts are pulling the environment and application-related parameters via puppet file ...
0
votes
1
answer
144
views
Puppet install: timeout when retrieving certificate
Trying to install the latest puppet enterprise (2023.0.0) per their guide on an Unbuntu 20.04 VM in Azure. I started with the out-of-the-box pe.conf. Install proceeds for awhile until I get some ...
0
votes
0
answers
181
views
Continous delivery using Gitlab, Foreman and Puppet
We are using different tools to orchestrate our environment. On one side, we have Puppet and Foreman to deploy our different server applications, on the other side, we are using Gitlab in order to ...
0
votes
2
answers
378
views
Adding users to Unix groups only if said groups exist (puppet)
I tried using the 'group' attribute of the 'user' resource like so :
user {
"user":
group => ["docker", "www-data"]
}
If the groups 'docker' and 'www-data' exist ...
0
votes
1
answer
304
views
how to prevent puppet to override any change you made on the linux server?
i was trying to to change the timedatectl of one server from CST to EST. But everytime i made the change, puppet will override the change and bring it back to where it was after few minuite. How can i ...
1
vote
1
answer
145
views
How to use puppet-apache mod (v8.3.0) with hiera?
Queston: Using the roles & profiles method, is it possible to use 'puppetlabs-apache', '8.3.0' with a hiera lookup?
Context:
I am using mod 'puppetlabs-apache', '8.3.0' to configure an apache ...
0
votes
1
answer
139
views
Puppet errors with cron resource
I have this in my manifest:
class security::sensor_apps::arkime (....) {
......
cron {
"file_maintenance":
command => "$home/db/db.pl http://secesprd01.its....
0
votes
1
answer
234
views
puppet 7: Deferred value in File.content impossible?
I'm trying to use a deferred value in puppet 7 (server 7.4.2 and agent 7.14.0) to write a file, like this:
file { "/tmp/testfile":
ensure => 'present',
content => Deferred(&...
0
votes
0
answers
127
views
apt clean apt autoremove
So i would like to remove unwanted files ( /var/cache and old kernels in /boot) to free up some space using puppet script and add this script to puppet master to automatically run once every month. I ...
1
vote
1
answer
526
views
Puppet: Issues with Vcsrepo (git) ".... exists and is not the desired repository."
I use puppet/Vcsrepo to distribute and update software to a bunch of linux servers from a Bitbucket(cloud) server. This worked fine for years but about 6 months ago Puppet started complaining about ...
1
vote
1
answer
316
views
Puppet Vcsrepo (git) : getting error "exists and is not the desired repository."
I am using vcsrepo with git to maintain a bunch of software on ubuntu systems. I use this bit of puppet code in a loop to keep the files up to date
vcsrepo { "/usr/local/tools/$repo":
...
1
vote
1
answer
902
views
How to sign an agent certificate in puppet?
I am using puppet 7.15.0 and when I try to puppet agent -vt, I get the below meesage:
Couldn't fetch certificate from CA server; you might still need to sign this agent's certificate (my-vm....
1
vote
1
answer
198
views
How to add sticky bits via puppet?
I would like to make sure the files that get added to a certain directory inherits the parent directory's permission and that permission never changes. I guess it's called sticky bit but cannot find a ...
0
votes
0
answers
301
views
Puppet: Create user account and use its UID/GID in dependent resource
I would like Puppet to do the following on the host:
Ensure a user named myuser exists.
I don't want to hardcode the UID as there are several users created this way.
Use the UID of myuser in a ...
1
vote
1
answer
312
views
Puppet manifest configuration for docker image verification
I’m quite new to devops/ci/cd, so bear with me.
Currently, I’m getting a puppet manifest configuration set up for docker image verification. Let me try to layout it out:
I have a puppet master server ...
2
votes
2
answers
220
views
How to implement Continuous Integration with Puppet and multiple services
We're trying to implement a Continuous Integration pipeline in our environment. We have a lot of different services, each with its own Git repository. Deployment is done via Puppet, using an external ...
2
votes
2
answers
1k
views
DNF Enable/Disable in Puppet
I'm trying to get PHP 7.4 installed on my RHEL 8 system with Puppet, but can't get the package declaration right to disable php and enable php:7.4 with dnf. The Puppet Package documentation doesn't ...
0
votes
1
answer
178
views
Detecting hypervisors in Puppet
Puppet provides a fact vitual which is supposed to show what virtualization method a system is using. We use Redhat 7 and 8 for guest operating systems. We have a lot of physical systems, and also use ...
0
votes
1
answer
201
views
Puppet/Augeas -- ins command worked on RH6, fails on RH7
I have this construct in my puppet module to add a line in /etc/sudoers after the last "Defaults" line:
augeas { "sudoers.ssh_auth_sock" :
lens => "Sudoers.lns",
...
0
votes
1
answer
1k
views
How to generate certificates for (secondary) compile puppetserver?
I'm trying to scale puppetserver, in order to have redundancy, using round robin DNS. The secondary puppetserver (version 7.4.0) is configured to use the CA authority from primary puppetserver:
/etc/...
2
votes
1
answer
257
views
How to set value of ipa_hostname directive in sssd.conf using Augeas
Using Puppet versions
Master: puppetserver 6.7
Client: puppet-agent 6.10
I have other Augeas code in other modules that works just fine.
Example sssd.conf
[sssd]
services = nss, sudo, pam, ssh
...
0
votes
1
answer
1k
views
Puppet - can I selectively notify a Service?
I have a Puppet script that handles things differently in different environments based on an if/else block. But I have a bunch of common file resource blocks at the bottom that apply to all ...
1
vote
1
answer
564
views
Puppet 5.5.22, dnfmodule reset
I've been trying to figure out how to convert
dnf module reset php
dnf module install php:remi-7.4
to a stanza in a puppet module for several hours without any success.
Has anyone figured out how to ...
2
votes
0
answers
105
views
Puppet Module File Resource Copy From Network Mount
I'm using RHEL Satellite 6.6 with puppet 5.5.12. I have a module which, among other things, copies a file from a network mapped folder to the local drive, then executes it. When I run the module ...
1
vote
0
answers
163
views
Issue installing puppet agent on Windows Servers
I'm trying to setup a Puppet dev environment in my datacenter. I've configured the Puppet Master on Cent0S 7 along with two agents, also running RH CentOS 7. The Puppet version I am running on the ...
0
votes
1
answer
273
views
Plan lookup: Could not find class
When running a Puppet plan that uses lookup{} function against Hiera I get the error:
The target node: 'computer1.domain.com' errored with a message: Internal Server Error: org.jruby.exceptions....
0
votes
0
answers
110
views
Is there a way to communicate information between puppet classes/resources
Is there a way to communicate information between classes/resources?
I have a profile that I want to include on all nodes to set them up as being monitored by Icinga which uses an exported resource :
...
1
vote
1
answer
193
views
Quickly install multiple puppet modules from directory
Is there a way to install multiple puppet modules from a directory in one command?
I have a directory containing multiple puppet modules in tar.gz form downloaded from the forge, and I need to install ...
0
votes
1
answer
108
views
Run "puppetserver ca" commands on a remote server
We are running a Puppet Open Source server. To sign and revoke Puppet client certificates we logon to this Puppet server and run puppetserver ca ... commands.
We would like to be able to stand-up a ...
0
votes
1
answer
52
views
Puppet copy and install program on users
Trying to write module to install nomachine on every user how created on ubuntu deskop.
I need assist to solve two problem:
nbadmin its my user but I woluld like to write genral user
second I got ...
0
votes
0
answers
118
views
Using Puppet to configure hypervisor
I am looking to use Puppet to configure a bare-metal host to spawn VMs using Vagrant/VirtualBox, whose configurations will also be managed by Puppet.
I think this can be achieved by:
Installing ...
1
vote
1
answer
94
views
Are Puppet virtual resources auto-realized if they're auto-required?
It's documented that Puppet will auto-require certain resources, e.g. a (puppet-managed) directory that is a parent of a File resource, or a group resource referenced in a user resource.
If an auto-...
0
votes
1
answer
123
views
dependency loop : to deploy gitlab using awx ansible i need a repository
I want to deploy gitlab using awx and ansible ( or with puppet and rundeck ) and to do it i need a repository ( SCM : gitlab ) , the thing is i want to deploy gitlab but i need a gitlab , i can't find ...
0
votes
2
answers
128
views
Using Configuration management tools to synchronize large files
We are looking into using a configuration mangement tool (like Salt or Puppet) to automate what is currently a lot of manual work. One requirement is that we have to distribute rather large files / ...
1
vote
1
answer
3k
views
puppet agent not able to connect to master
on master:
puppetserver ca list Traceback (most recent call last):
9: from /opt/puppetlabs/server/apps/puppetserver/cli/apps/ca:5:in '<main>'
8: from /opt/puppetlabs/puppet/lib/ruby/vendor_gems/...
0
votes
1
answer
127
views
How to manage puppet master and agent connectivity
As it is lab, we can add Ip address of agent to master hosts file.But if I have 1000 agents(partly windows and Linux machines), we can't add each and every agent to hosts file of master.How to manage ...
2
votes
0
answers
732
views
Set YUM versionlock, but allow updating to specific versions
I am trying to control the version of puppet agent installed on our RedHat systems.
Our Puppet manifest has
$puppet_version = hiera('profile::puppet_agent::version', '6.12.0')
class {'::puppet_agent':...
2
votes
1
answer
524
views
Puppetserver unable to locate gems
I'm trying to use a module which adds an AWS Secrets Manager hiera backend:
https://forge.puppet.com/accenture/hiera_aws_sm
This module requires the aws-sdk-secretsmanager gem, which I installed via ...
1
vote
2
answers
158
views
How to control which version of Powershell Puppet shells out to on Windows?
Microsoft recently changed their download repository for Windows Powershell to require TLS 1.2+ which Windows Powershell 5.1 doesn't support without the runtime setting change to Net....