Re: [Puppet Users] fingerprint changes after puppet cert --sign

[Peter Kristolaitis]

This is expected behaviour.  SSL certificate fingerprints are just the 
cryptographic hash of the entire cert, including the signing info if 
present.The hash of an unsigned cert is necessarily different than 
the hash of a signed cert, because they contain different information.



On 2/20/2015 12:54 AM, Tejas Gadaria wrote:

Hi,

I have an issue where my cert finger prints changes after I sign it on 
the master. I removed all certs from master and deleted 
/var/lib/puppet/ssl stopped and started puppet master service. Later 
on client Stopped agent service and removed ssl directory, started 
puppet agent service and run "puppet agent -t" on client. but facing 
same issue.

I have time synchronized on master and agent. Need your help on this.

Regards,
Tejas
--
You received this message because you are subscribed to the Google 
Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to puppet-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/6ea26ca7-e70e-4b5a-b54c-1f76c6001a4a%40googlegroups.com 
.

For more options, visit https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E6CF01.203%40alter3d.ca.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] fingerprint changes after puppet cert --sign

[Tejas Gadaria]

Hi,

I have an issue where my cert finger prints changes after I sign it on the 
master. I removed all certs from master and deleted /var/lib/puppet/ssl 
stopped and started puppet master service. Later on client Stopped agent 
service and removed ssl directory, started puppet agent service and run 
"puppet agent -t" on client. but facing same issue.
I have time synchronized on master and agent. Need your help on this.

Regards,
Tejas

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/6ea26ca7-e70e-4b5a-b54c-1f76c6001a4a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Puppet

[Chetan Singh]

Hi All,

I am new to this product. Could anyone provide with some guide on how to 
build a puppet in my production environment. I also have a satellite server 
6 in place.

Thanks
Chetan

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e5e1b61d-e355-41b9-8ad8-c0de9a5b5d5d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Solaris package installation unattended does not work

[John Warburton]

You need an admin(4) file to set some defaults to questions like this.
Here's mine

% tail -15 modules/base/files/var/sadm/install/admin/puppet
#   Notes: * man -s 4 admin
#  * default pkgadd admin file to just install everything
#  * quit rather than carry on like
/var/sadm/install/admin/noprompt
#
mail=
instance=overwrite
partial=quit
runlevel=nocheck
idepend=quit
rdepend=quit
space=quit
setuid=nocheck
conflict=nocheck
action=nocheck
basedir=default

And how I use it

package { 'SUNWpmr':
ensure=> absent,
adminfile => '/var/sadm/install/admin/puppet',
before=> File['/etc/default/power'],
}

John


On 20 February 2015 at 02:13, Andreas Dvorak 
wrote:

> Dear all
>
> I am trying to install a Solaris package but it does work. Puppet uses -n
> to run unattended, but interaction is required.
>
> package{'CSWpkgutil':
>   ensure => installed,
>   source => "
> http://sv2653/repo/solaris/CSWpkgutil-${::hardwareisa}.pkg";,
> }
>
> Error message:
> Execution of '/usr/sbin/pkgadd -d
> http://sv2653/repo/solaris/CSWpkgutil-i386.pkg -n CSWpkgutil' returned 5:
> This package contains scripts which will be executed with super-user
> permission during the process of installing this package. Please see
> /opt/csw/share/doc/pkgutil/license for license information. Installation of
>  was suspended (interaction required). No changes were made to
> the system.
>
> Can somebody please help me?
>
> Andreas
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/ff789a40-88b2-419b-9ebd-dcc57c1c8fe3%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>



-- 
John Warburton
Ph: 0417 299 600
Email: jwarbur...@gmail.com

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAAJLFxWnR9g1NLNVX9U7s5_0pQX2M0dt1F%3DT1O8MYSRSkRz7WQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Re: Newbie got cart before horse - how to make Puppet files match reality

[Juan Treminio]

Hi y'all!

I'm guessing it may have been a good idea to join this group a while ago.

jcbollinger - you're right in that PuPHPet has changed drastically since 
your original archive was created.

Previously, everything was throwing into a single manifest.pp - even for 
things you may not have chosen via the GUI.

However, everything is also controlled via the puphpet/puppet/config.yaml 
file using simple 0/1 flags, so anything you don't want isn't installed, 
but can be installed later by flipping the int.

My documentation is quite sparse, I'll admit, and I keep putting off 
updating it, so many things are unfortunately out of date. PRs are very 
welcome and highly appreciated, though!

In the latest puphpet archives you'll notice that the manifest.pp file was 
split out into several different files under a nodes directory. This makes 
it quite a bit easier to see what's going on after the archive is generated.

Apologies for any troubles you encountered - I'm trying my hardest to 
create a tool that's as simple to use as possible, but time constraints 
keep me from dedicating everything that I want to it :(

Hope your current VM is running smoothly, though!

Thanks,
Juan

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e9004f8c-e89b-4eea-a6ea-fc44f2c60c83%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Re: asking a question a different way

[Peter Berghold]

On Thu, Feb 19, 2015 at 11:49 AM, David Bryant-Moore <
david.bmo...@puppetlabs.com> wrote:

>
>
> Typically, the MoM will host the CA function for the second tier Masters,
> but this isn't an explicit constraint of the model
>
>
> This was the piece I was missing and another answer I got said the same
thing.  Later on today I'm giving this a shot.  Once I get the POC done and
demoed to the bosses I'm going to tackle alt_dns_names setups which blew up
spectacularly for me.


-- 

Peter L. Berghold   salty.cowd...@gmail.com

h ttp://science-fiction.berghold.net

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAArvnv1rcp4xxf7g-auODpr4WQ3O7-TU9CYqXWu%3DQNLNBQbPjA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Continuous Availability

[James A. Peltier]

- Original Message - 

| I am trying to setup CA environment or puppet. How do i approach for the
| solution and what are the options available?

| Thank you in advance.


Perhaps you're mixing two technologies?  High Availability and Continuous 
Integration/Delivery/Deployment?

-- 
James A. Peltier
IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.sfu.ca/itservices
Twitter : @sfu_rcg
Powering Engagement Through Technology
"Build upon strengths and weaknesses will generally take care of themselves" - 
Joyce C. Lock

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/742193047.23119275.1424367507646.JavaMail.zimbra%40sfu.ca.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Re: Possible to include subdirectories of modules?

[David Bryant-Moore]

Hi Antonias.

The way you would implement the pattern you want is to use Puppet 
namespacing.

To explain this using your example code below, your directory structure 
would need to change to:

modules/configuration/manifests/git

And your include statement would change to:

include configuration::git

This method of referencing Puppet classes is really useful.  The rule to 
apply when 
namespacing classes in this manner is that the final element of every name 
space must
always resolve to a puppet class, represented as a .pp file of the same 
name within the module.

Consider:


modules/foo/manifests/bar.pp

Would be declared as: include foo::bar

Whereas:

modules/foo/manifests/bar/baz.pp

Would be declared as: include foo::bar::baz


HTH

David Bryant-Moore.
david.bmo...@puppetlabs.com

On Thursday, February 19, 2015 at 1:36:01 PM UTC, tuner wrote:
>
> Hello,
>
>
> i want to include subdirectories of modules, for example something like:
> cat modules/*configuration/git*/manifests/init.pp
> class git {
>
> if $::osfamily == 'redhat' {
> package {
> 'git': ensure => present,
> }
> }
> }
>
> And then include git like:
> cat manifests/site/git.pp
> node git.domain.tst {
> include "*configuration/git*"
> }
>
>
> I want to have my modules more structured and subdirectories would be a 
> good solution for me here..
>
>
> Thanks,
> Antonios.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/02444b49-411a-4d12-b9f3-ea0f9252b5ab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Re: asking a question a different way

[David Bryant-Moore]

Hi Peter - it's absolutely fine to have a 'Master of Masters.'

All you need to do to implement this is to set the server directive in your 
second tier Masters to point to your Master of Masters.
Your agents, per datacentre, will point to their datacentre Master, and 
have no knowledge of the Master of Masters.

Typically, the MoM will host the CA function for the second tier Masters, 
but this isn't an explicit constraint of the model

Cheers.

David Bryant Moore.
david.bmo...@puppetlabs.com

On Thursday, February 19, 2015 at 3:00:14 PM UTC, Salty Old Cowdawg wrote:
>
> is it possible for one puppet master to be managed by another?  Ascii art 
> to illustrate what I mean:
>Puppet Grand Master
> /   |   \
> Master1 master2master3
>
>  clients:1 clients:2clients:3 
>
>
> My goal is to have a Puppet Master in each data center local to the hosts 
> it manages reporting "up" to a central Foreman server via foreman-proxy
>
>
>
> -- 
>
> Peter L. Berghold   salty@gmail.com 
>
> h ttp://science-fiction.berghold.net
>  

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/fe69b5fd-d751-4fb4-bbba-ea0e893ebfba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Possible to include subdirectories in modules

[Peter Kristolaitis]

You can't do exactly what you have below, but there is similar 
functionality built into the module architecture.  See:


https://docs.puppetlabs.com/puppet/latest/reference/modules_fundamentals.html#example

So your .pp file would be named

modules/configuration/manifests/git.pp

And the module name would be 'configuration::git'



On 02/19/2015 08:55 AM, tuner wrote:

Hello,


i want to include subdirectories of modules/-path, e.g.
|
cat modules/*configuration/git*/manifests/init.pp
classgit {

if$::osfamily =='redhat'{
package{
'git':ensure=>present,
}
}
}
|

And then include with something like:
|
cat manifests/site/git.pp
node git.testdomain.tst {
include base
include "*configuration/git*"
}
|

This would be very helpful for my configuration. Is there a way to 
manage this?



Thanks,
Antonios.

--
You received this message because you are subscribed to the Google 
Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to puppet-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/2fc44738-5df1-4eda-addd-dfd79996604a%40googlegroups.com 
.

For more options, visit https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E60752.2050303%40alter3d.ca.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Puppet AWS basic issue

[Ghh]

any pointers? please.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/433ce8da-7662-4601-9862-08a13a42f628%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Re: Weird puppetmaster issue.

[jcbollinger]

On Wednesday, February 18, 2015 at 2:12:43 PM UTC-6, Salty Old Cowdawg 
wrote:
>
> I've been banging my head against the wall with this one.  Probably a 
> simple fix but I'm not seeing it at the moment.
>
> I have a proof of concept setup in our lab where I have a central 
> Foreman/Puppet server.  The Puppet server on the Foreman box has the 
> responsibility of keeping things straight on subordinate "remote servers" 
> that in production will be located in the same data center as the client 
> base they will server.
>


I suspect that your issue as to do with exactly what it means (or should 
mean) for a remote server to be "subordinate".  More on that below.

 

>
> To get the POC remote server set up I manually load the Puppet client 
> software on the host (later it will come pre-loaded on a VM template) and I 
> run the Puppet client manually.  That first run is all about the certs and 
> getting the Foreman ENC aware of the host.  Adding a couple of config 
> groups the the host and next we run puppet agent -t-test --server= host fqdn> and all the configuration files get loaded and then things go 
> sideways. 
>
>

If I understand correctly, you are using the Puppet agent on your 
subordinate remote server to configure that server for operation (in 
particular, for operation as a Puppet master for other machines in the same 
data center).

 

> The Puppet Master daemon will not run on the host.  What I'm seeing in 
> /var/log/messages is as follows:
>
> Feb 18 19:48:20  puppet-master[32593]: Could not prepare for 
> execution: The certificate retrieved from the master does not match the 
> agent's private key.
> Feb 18 19:48:20 puppet-master[32593]: Certificate 
> fingerprint: 
> BC:0C:19:83:62:F8:A6:AD:ED:85:B7:19:B6:AD:75:FE:36:62:D7:43:C9:5B:76:64:E8:A1:F5:C1:FE:1F:39:21
> Feb 18 19:48:20 puppet-master[32593]: To fix this, remove the 
> certificate from both the master and the agent and then start a puppet run, 
> which will automatically regenerate a certficate.
> Feb 18 19:48:20  puppet-master[32593]: On the master:
> Feb 18 19:48:20  puppet-master[32593]:   puppet cert 
> clean 
> Feb 18 19:48:20  puppet-master[32593]: On the agent:
> Feb 18 19:48:20  puppet-master[32593]:   1a. On most platforms: 
> find /var/lib/puppet/ssl -name  -delete
> Feb 18 19:48:20 puppet-master[32593]:   1b. On Windows: 
> del "/var/lib/puppet/ssl/.pem" /f
> Feb 18 19:48:20  puppet-master[32593]:   2. puppet agent -t
>
>

If the master is emitting those messages at startup, it must be talking 
about its own cert (so the message is misleading).  I'm inclined to suppose 
that the problem relates to the CA(s).  The subordinate master's cert was 
signed by the central master's CA, but by default a *master* relies on its 
own CA (and your config explicitly specifies that the remote masters should 
do this).  From the subordinate master's perspective, therefore, its own 
certificate is untrusted (there is no trusted authority in its chain).  
This is a *bona fide* problem, because that cert won't be trusted by the 
remote master's clients, either.  There have been ideas floating around for 
a long time about how to deal with this sort of scenario, but as far as I 
am aware, there are few good solutions.

Probably the easiest class of solutions to set up is the central CA.  
Instead of your remote masters providing CA services to their clients, all 
client certificate requests would go to your central master's CA.  You can 
configure this directly in the agents' Puppet configuration, or you can set 
up CA proxies on the satellite masters to disguise the true location of the 
CA.

An alternative would be to put two separate copies of Puppet on your 
satellite masters, one with which to run the agent against the central 
master, and another with which to serve its own clients.  I think this is 
dirty, ugly, and dangerous, and I do not recommend it, but I mention it 
because you're likely to come up with the idea on your own, anyway.

If you don't like the central CA then I think the best thing to do -- and I 
don't think there's an automated way to go about it -- is to set up the 
remote masters with CA certs signed by the central CA, and have each 
master's identifying cert signed by its own CA.  I think the masters' certs 
will then be trusted by the central master because its own CA is in their 
chain of trust, and each master and its agents will certainly trust that 
master's cert because it is signed by the master's CA.  If you wanted 
machines, including masters, at different remote sites to trust each 
other's certs, then maybe you could accomplish it by adding the central 
CA's cert to their trusted CA lists.


John

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid

Re: [Puppet Users] Continuous Availability

[Christopher Wood]

I'm not up on the latest fashionable buzzwords, possibly this might be useful:

https://docs.puppetlabs.com/guides/scaling_multiple_masters.html

On Wed, Feb 18, 2015 at 09:54:47PM -0800, Rajesh Kunwar wrote:
>I am trying to setup CA environment or puppet. How do i approach for the
>solution and what are the options available?
>Thank you in advance.
> 
>--
>You received this message because you are subscribed to the Google Groups
>"Puppet Users" group.
>To unsubscribe from this group and stop receiving emails from it, send an
>email to [1]puppet-users+unsubscr...@googlegroups.com.
>To view this discussion on the web visit
>
> [2]https://groups.google.com/d/msgid/puppet-users/b4218d30-717a-429e-8b8a-4967b7e46ef0%40googlegroups.com.
>For more options, visit [3]https://groups.google.com/d/optout.
> 
> References
> 
>Visible links
>1. mailto:puppet-users+unsubscr...@googlegroups.com
>2. 
> https://groups.google.com/d/msgid/puppet-users/b4218d30-717a-429e-8b8a-4967b7e46ef0%40googlegroups.com?utm_medium=email&utm_source=footer
>3. https://groups.google.com/d/optout

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20150219153304.GA29285%40iniquitous.heresiarch.ca.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Solaris package installation unattended does not work

[Andreas Dvorak]

Dear all

I am trying to install a Solaris package but it does work. Puppet uses -n 
to run unattended, but interaction is required.

package{'CSWpkgutil':
  ensure => installed,
  source => 
"http://sv2653/repo/solaris/CSWpkgutil-${::hardwareisa}.pkg";,
}

Error message:
Execution of '/usr/sbin/pkgadd -d 
http://sv2653/repo/solaris/CSWpkgutil-i386.pkg -n CSWpkgutil' returned 5: 
This package contains scripts which will be executed with super-user 
permission during the process of installing this package. Please see 
/opt/csw/share/doc/pkgutil/license for license information. Installation of 
 was suspended (interaction required). No changes were made to 
the system.

Can somebody please help me?

Andreas

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/ff789a40-88b2-419b-9ebd-dcc57c1c8fe3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] asking a question a different way

[Peter Berghold]

is it possible for one puppet master to be managed by another?  Ascii art
to illustrate what I mean:
   Puppet Grand Master
/   |   \
Master1 master2master3

 clients:1 clients:2clients:3


My goal is to have a Puppet Master in each data center local to the hosts
it manages reporting "up" to a central Foreman server via foreman-proxy



-- 

Peter L. Berghold   salty.cowd...@gmail.com

h ttp://science-fiction.berghold.net

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAArvnv0CnZ4XPd%2B9cv1H9TS%2B4UVbsyNAXtZi1oyEHmSBMeoqkA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Possible to include subdirectories in modules

[tuner]

Hello,


i want to include subdirectories of modules/-path, e.g.
cat modules/*configuration/git*/manifests/init.pp
class git {

if $::osfamily == 'redhat' {
package {
'git': ensure => present,
}
}
}

And then include with something like:
cat manifests/site/git.pp
node git.testdomain.tst {
include base
include "*configuration/git*"
}

This would be very helpful for my configuration. Is there a way to manage 
this?


Thanks,
Antonios.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/2fc44738-5df1-4eda-addd-dfd79996604a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Possible to include subdirectories of modules?

[Antonios Dimtsoudis]

Hello,


i want to include subdirectories of modules, for example something like:
cat modules/*configuration/git*/manifests/init.pp
class git {

if $::osfamily == 'redhat' {
package {
'git': ensure => present,
}
}
}

And then include git like:
cat manifests/site/git.pp
node git.domain.tst {
include "*configuration/git*"
}


I want to have my modules more structured and subdirectories would be a 
good solution for me here..


Thanks,
Antonios.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e2f5a665-e2c1-4b8a-8621-fb6ef6c344d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Puppet AWS basic issue

[Ghh]

Experts:

I have set up the AWS key id and access key in .fog file

while I run some basic commands like

* puppet node_aws list -region=us-west-2*

I get no outputs of the EC2 instances , just comes back to the prompt, but  
I am running already


now When I execute the same command, I  get the error message


*Error: AuthFailure => AWS was not able to validate the provided access 
credentialsError: Try 'puppet help node_aws list' for usage*


My network is working and I have not touched the .fog file or it was not 
updated by any program

Please help, 

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e79ebd5a-8982-4b1e-92f8-87d415279035%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] Re: Puppet directory environments mysteriously breaking -- help?

[Johan De Wit]

For the record,

Got the same error, 

I solved it by adding the following to my puppet.conf :

server = 

De default (puppet) was not resolvable in my environment

Grts

On Wednesday, 29 October 2014 14:32:25 UTC+1, jcbollinger wrote:
>
>
>
> On Wednesday, October 29, 2014 8:31:12 AM UTC-5, jcbollinger wrote:
>>
>> Without the certname specified in your config file, does Puppet 
>> successfully serve correct manifests?
>>
>
> I meant "serve correct *catalogs*," of course.
>
>
> John
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/79ee79c4-57ac-4036-b510-53155102d477%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Design help: django deployment

[Jonathan Gazeley]

On 18/02/15 21:05, Pete Brown wrote:
If you can't find anything decent I would see that as an opportunity 
to add your resulting module to puppet forge. :)


Indeed :) I couldn't find anything quite suitable so I started work on a 
basic module.


https://forge.puppetlabs.com/jgazeley/django

Cheers,
Jonathan

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E5BCE0.7060003%40bristol.ac.uk.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] My puppet code is not idempotent (Windows package provider)

[cko]

I installed the package manually and used "puppet resource package" to 
determine the exact package name.

But I just found out that Puppet *doesn't install the package* at all 
*unless* I run puppet manually via "puppet agent -t". The report says 
otherwise.

The Puppet service on the nodes runs as the "Local System Account" (Default)


I do not want to run "puppet agent -t" manuall on every machine for this to 
work :|

On Thursday, February 19, 2015 at 11:15:34 AM UTC+1, Dirk Heinrichs wrote:
>
>  Am 19.02.2015 um 10:29 schrieb cko:
>
>  But on every puppet run, the "package" resource gets applied. Example 
> tagmail output:
>
>  
>
> *Thu Feb 19 09:48:28 +0100 2015 /Stage[main]/[ .. module 
> ]/Package[signotec WinUSB]/ensure (notice): created Thu Feb 19 10:16:59 
> +0100 2015 /Stage[main]/[ .. module ]/Package[signotec WinUSB]/ensure 
> (notice): created *
> *.*
>
>  Any ideas?
>
>
> Is  'signotec WinUSB' exactly the name of the package as reported by 
> Windows in Control Panel\All Control Panel Items\Programs and Features? 
> dito for the version?
>
> HTH...
>
> Dirk
> -- 
>
> *Dirk Heinrichs*, Senior Systems Engineer, Engineering Solutions
> *Recommind GmbH*, Von-Liebig-Straße 1, 53359 Rheinbach
> *Tel*: +49 2226 159 (Ansage) 1149
> *Email*: d...@recommind.com 
> *Skype*: dirk.heinrichs.recommind
> www.recommind.com
>  

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/fe2a6f7a-9010-4e47-bfb1-6c05896d6749%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] My puppet code is not idempotent (Windows package provider)

[Dirk Heinrichs]

Am 19.02.2015 um 10:29 schrieb cko:

> But on every puppet run, the "package" resource gets applied. Example
> tagmail output:
>
> /Thu Feb 19 09:48:28 +0100 2015 /Stage[main]/[ .. module
> ]/Package[signotec WinUSB]/ensure (notice): created
> Thu Feb 19 10:16:59 +0100 2015 /Stage[main]/[ .. module
> ]/Package[signotec WinUSB]/ensure (notice): created
> /
> /./
>
> Any ideas?

Is  'signotec WinUSB' exactly the name of the package as reported by
Windows in Control Panel\All Control Panel Items\Programs and Features?
dito for the version?

HTH...

Dirk
-- 

*Dirk Heinrichs*, Senior Systems Engineer, Engineering Solutions
*Recommind GmbH*, Von-Liebig-Straße 1, 53359 Rheinbach
*Tel*: +49 2226 159 (Ansage) 1149
*Email*: d...@recommind.com 
*Skype*: dirk.heinrichs.recommind
www.recommind.com 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E5B7B3.9050807%40recommind.com.
For more options, visit https://groups.google.com/d/optout.

[Puppet Users] My puppet code is not idempotent (Windows package provider)

[cko]

Hi everyone,

I'm using the following manifest to deploy a driver package (and its 
certificate) to about 150 Windows Server 2008 R2 nodes.

https://gist.github.com/anonymous/1cbaa90e1d0497ebaeb3

The "file" and "exec" resources are applied successfully and only once.

But on every puppet run, the "package" resource gets applied. Example 
tagmail output:




*Thu Feb 19 09:48:28 +0100 2015 /Stage[main]/[ .. module ]/Package[signotec 
WinUSB]/ensure (notice): createdThu Feb 19 10:16:59 +0100 2015 
/Stage[main]/[ .. module ]/Package[signotec WinUSB]/ensure (notice): 
created*
*.*


Any ideas?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/73b28b55-3f57-4ab1-b92a-1078c5175f76%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] using heredoc in an erb template with hiera

[Angel L. Mateo]

El 18/02/15 a las 19:08, Mark Rosedale escribió:

Hello,

I'm using hiera with puppet 3.7. What I need to do is pass in a
formatted string to puppet to be used inside an erb template. What I'd
really like is to use heredoc, but it doesn't seem like that is going to
work. Does anyone have information on this and whether it is possible or
not?


Do you mean the | of the yaml? Like this?

my_formated_option: |
This is just a long formated text
more text
blah...

and this is the final
other_option: other_value

--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868887590
Fax: 86337

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E59F52.1040705%40um.es.
For more options, visit https://groups.google.com/d/optout.

Re: [Puppet Users] Continuous Availability

[Johan De Wit]

you can start here :

https://docs.puppetlabs.com/guides/scaling_multiple_masters.html

try also : http://bit.ly/1FwNZbK

hth

johan

On 19/02/15 06:54, Rajesh Kunwar wrote:
I am trying to setup CA environment or puppet. How do i approach for 
the solution and what are the options available?


Thank you in advance.
--
You received this message because you are subscribed to the Google 
Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to puppet-users+unsubscr...@googlegroups.com 
.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/b4218d30-717a-429e-8b8a-4967b7e46ef0%40googlegroups.com 
.

For more options, visit https://groups.google.com/d/optout.



--
Johan De Wit

Open Source Consultant

Red Hat Certified Engineer  (805008667232363)
Puppet Certified Professional 2013/2014 (PCP006)
blog : http://johan.koewacht.net/
_
 
Open-Future Phone +32 (0)2/255 70 70

Zavelstraat 72  Fax   +32 (0)2/255 70 71
3071 KORTENBERG Mobile+32 (0)474/42 40 73
BELGIUM http://www.open-future.be
_
 



Next Events:
Puppet Practitioner | 
http://www.open-future.be/puppet-practitioner-training-17th-till-19th-february
Bacula Administrator 1 | 
http://www.open-future.be/bacula-administrator-i-training-24th-till-26th-february
Zabbix Certified Specialist | 
http://www.open-future.be/zabbix-certified-specialist-training-2nd-till-4th-march
Zabbix Certified Professional | 
http://www.open-future.be/zabbix-certified-professional-training-5th-till-6th-march
Bacula Administrator 1 | 
http://www.open-future.be/bacula-administrator-i-training-10th-till-12th-march
Puppet Fundamentals | 
http://www.open-future.be/puppet-fundamentals-training-16th-till-18th-march
Puppet Architect | 
http://www.open-future.be/puppet-architect-training-19th-till-20th-march
Subscribe to our newsletter | http://eepurl.com/BUG8H

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/54E597F0.6030600%40open-future.be.
For more options, visit https://groups.google.com/d/optout.