On Thu, May 7, 2015 at 6:19 AM, jcbollinger <john.bollin...@stjude.org>
wrote:
>
>
> On Thursday, May 7, 2015 at 12:32:59 AM UTC-5, Josh Cooper wrote:
>>
>>
>>
>> On Wed, May 6, 2015 at 7:29 AM, Johnson Earls <darkfo...@gmail.com>
>> wrote:
>>
>>> never mind. puppet agent ignores the user/group config settings, so
>>> those should be kept at puppet, and ${::settings::user} /
>>> ${::settings::group} should not be used to configure agent-related options
>>> (such as file ownership).
>>>
>>
>> The `puppet` user and group are really server-side settings, to specify a
>> less privileged account to run the webrick/passenger/puppetserver process
>> as.
>>
>>
>
> Right.
>
>
>
>> To confuse things, `puppet` packages (rpm/deb) have always created the
>> `puppet` user and group, but was unnecessary on the agent. In Puppet 4, we
>> have fixed this, so the puppet-agent package does not create a `puppet`
>> user or group. Only the puppetserver package does that.
>>
>
>
> So the new package naming confuses even PL itself?
>
> I mean, in our recent discussion of the new package naming and versioning
> <https://groups.google.com/forum/#!topic/puppet-users/K7-tUQoJ9FA>, Eric
> and Michael asserted that the "puppet-agent" package is the basic Puppet
> infrastructure package, with which one can run the agent, the traditional
> rack-based master, and everything else from Puppet's Ruby stack. They
> claim the "puppetserver" package is *optional*. I completely believe
> that's the *intention*, but in that case the "puppet-agent" package
> should be the one responsible for the "puppet" user and group.
>
We will be releasing updated passenger packages compatible with
puppet-agent "soon"[1]. These packages also create the `puppet` user and
group, like puppetserver.
That leaves webrick. I agree, there is currently an inconsistency --
webrick functionality is provided by the puppet-agent package, but the
package does not create the `puppet` user and group. However, you are free
to create the accounts (using `puppet apply` even!), or specify an
alternate account using Puppet's `user` and `group` settings.
That said, webrick is deprecated and will be removed in Puppet 5[2].
Josh
[1] https://tickets.puppetlabs.com/browse/PUP-4452
[2] https://groups.google.com/d/topic/puppet-dev/RHa2tMPRTx4/discussion
--
Josh Cooper
Developer, Puppet Labs
*PuppetConf 2015 <http://2015.puppetconf.com/> is coming to Portland,
Oregon! Join us October 5-9.*
*Register now to take advantage of the Early Adopter discount
<https://www.eventbrite.com/e/puppetconf-2015-october-5-9-tickets-13115894995?discount=EarlyAdopter>
*
*—**save $349!*
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CA%2Bu97um6D8pRJOX_y8Kn0sEqGfPJ47J4H5WHjEM_6bac4%2BaMCg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
