Questions tagged [puppet]
Puppet is a configuration management tool (Unix & Windows) with its own Domain Specific Language.
1,795 questions
1 vote
1 answer
81 views
How to use eyaml and hiera with puppet?
Manuals about puppet suggest to separate code and data, using hiera. Further manuals suggest using eyaml in order not to store passwords etc. in plaintext on the puppetmaster, in the puppet catalogues ...
1 vote
1 answer
52 views
facter fails with: Syntax error: word unexpected (expecting ")")
Ich was working with puppet and facter to collect information from the puppet node. Testing the *.rb script however regularly failed with WARN backup_key.rb - Command /opt/puppetlabs/facter/facts.d/...
0 votes
1 answer
54 views
Upgraded PuppetDB to 7.x now Puppetserver fails to connect
I upgraded my PuppetDB to 7.20 and now my Puppetserver fails to connect. Puppet agents fail with this error: Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: ...
0 votes
0 answers
65 views
Puppet Environments, Classes, and Config groups grayed out after foreman upgrade
I am trying to bring our foreman environment up to the latest version. I upgraded foreman from 2.3.5 -> 2.4.1 -> 2.5.4 -> 3.0.1 -> 3.1.3 The 2.5.4 version displayed the following messages: ...
0 votes
1 answer
1k views
Puppet Error: Could not retrieve catalog from remote server ... Unknown variable: 'operatingsystem'
I am new to puppet and I am trying to understand the following. In all manifests i see using top scope variables used like $::operatingsystem, $::operatingsystemrelease, $::hostname etc. but when i ...
1 vote
0 answers
176 views
How to change the URL for Web UI Foreman?
Hi Can I change the url link for the web UI interface? I am using Foreman 3.9 versions. I try to change url with foreman-installer --foreman-url but I get error with ssl-certificate problem. Changing ...
0 votes
1 answer
96 views
Need help managing per-machine per-user sudo permissions in a research network environment using saz-sudo and Hiera with Puppet
Currently our Puppet server has an /etc/sudoers file defined with the permissions for every user on every machine in our network. This file is distributed equally to every host to provide permissions. ...
0 votes
1 answer
244 views
Puppet syntax issue when configuring a Prometheus scrape on an SNMP exporter
Some context I have an SNMP exporter running as a service on a server which allows me to access the data of some PDU using the following URL: http://my.host.name:9116/snmp?target=10.0.1.200&auth=...
0 votes
1 answer
231 views
How to fix puppet installation of ifupdown2 so that networking comes back up (or doesn't go down)?
I have puppet code which automatically installs ifupdown2 on newly provisioned physical servers (along with all other new host configuration). (This is Debian 11 Bullseye.) However, nearly all of the ...
0 votes
1 answer
297 views
Puppet server can not sign certificate - FileSystemException: Operation not permitted
I have a pending puppet certificate: $ puppetserver ca list Requested Certificates: intern.mydomain.com (SHA256) 3C:82:85:ED:6C:30:54:79:7A:FC:41:00:63:33:E0:52:BE:AA:3B:3F:76:21:73:1E:0B:...
0 votes
0 answers
171 views
puppet 5.5 issue after renewed master certificate
I currently faced issue after renewing Puppet certificate. I did a clean backup of client SSL folder and did a puppet agent ‑t. Can anyone help me? This is the code. [root@pupcltlp0001 AEST /etc/...
0 votes
1 answer
309 views
Puppet install: timeout when retrieving certificate
Trying to install the latest puppet enterprise (2023.0.0) per their guide on an Unbuntu 20.04 VM in Azure. I started with the out-of-the-box pe.conf. Install proceeds for awhile until I get some ...
0 votes
0 answers
319 views
Continous delivery using Gitlab, Foreman and Puppet
We are using different tools to orchestrate our environment. On one side, we have Puppet and Foreman to deploy our different server applications, on the other side, we are using Gitlab in order to ...
0 votes
2 answers
938 views
Adding users to Unix groups only if said groups exist (puppet)
I tried using the 'group' attribute of the 'user' resource like so : user { "user": group => ["docker", "www-data"] } If the groups 'docker' and 'www-data' exist ...
0 votes
1 answer
667 views
how to prevent puppet to override any change you made on the linux server?
i was trying to to change the timedatectl of one server from CST to EST. But everytime i made the change, puppet will override the change and bring it back to where it was after few minuite. How can i ...
1 vote
1 answer
239 views
How to use puppet-apache mod (v8.3.0) with hiera?
Queston: Using the roles & profiles method, is it possible to use 'puppetlabs-apache', '8.3.0' with a hiera lookup? Context: I am using mod 'puppetlabs-apache', '8.3.0' to configure an apache ...
0 votes
1 answer
269 views
Puppet errors with cron resource
I have this in my manifest: class security::sensor_apps::arkime (....) { ...... cron { "file_maintenance": command => "$home/db/db.pl http://secesprd01.its....
0 votes
1 answer
416 views
puppet 7: Deferred value in File.content impossible?
I'm trying to use a deferred value in puppet 7 (server 7.4.2 and agent 7.14.0) to write a file, like this: file { "/tmp/testfile": ensure => 'present', content => Deferred(&...
0 votes
0 answers
159 views
apt clean apt autoremove
So i would like to remove unwanted files ( /var/cache and old kernels in /boot) to free up some space using puppet script and add this script to puppet master to automatically run once every month. I ...
1 vote
1 answer
834 views
Puppet: Issues with Vcsrepo (git) ".... exists and is not the desired repository."
I use puppet/Vcsrepo to distribute and update software to a bunch of linux servers from a Bitbucket(cloud) server. This worked fine for years but about 6 months ago Puppet started complaining about ...
1 vote
1 answer
414 views
Puppet Vcsrepo (git) : getting error "exists and is not the desired repository."
I am using vcsrepo with git to maintain a bunch of software on ubuntu systems. I use this bit of puppet code in a loop to keep the files up to date vcsrepo { "/usr/local/tools/$repo": ...
2 votes
1 answer
1k views
How to sign an agent certificate in puppet?
I am using puppet 7.15.0 and when I try to puppet agent -vt, I get the below meesage: Couldn't fetch certificate from CA server; you might still need to sign this agent's certificate (my-vm....
1 vote
1 answer
283 views
How to add sticky bits via puppet?
I would like to make sure the files that get added to a certain directory inherits the parent directory's permission and that permission never changes. I guess it's called sticky bit but cannot find a ...
0 votes
0 answers
488 views
Puppet: Create user account and use its UID/GID in dependent resource
I would like Puppet to do the following on the host: Ensure a user named myuser exists. I don't want to hardcode the UID as there are several users created this way. Use the UID of myuser in a shell ...
1 vote
1 answer
442 views
Puppet manifest configuration for docker image verification
I’m quite new to devops/ci/cd, so bear with me. Currently, I’m getting a puppet manifest configuration set up for docker image verification. Let me try to layout it out: I have a puppet master server ...
2 votes
2 answers
354 views
How to implement Continuous Integration with Puppet and multiple services
We're trying to implement a Continuous Integration pipeline in our environment. We have a lot of different services, each with its own Git repository. Deployment is done via Puppet, using an external ...
2 votes
2 answers
3k views
DNF Enable/Disable in Puppet
I'm trying to get PHP 7.4 installed on my RHEL 8 system with Puppet, but can't get the package declaration right to disable php and enable php:7.4 with dnf. The Puppet Package documentation doesn't ...
0 votes
1 answer
256 views
Detecting hypervisors in Puppet
Puppet provides a fact vitual which is supposed to show what virtualization method a system is using. We use Redhat 7 and 8 for guest operating systems. We have a lot of physical systems, and also use ...
0 votes
1 answer
356 views
Puppet/Augeas -- ins command worked on RH6, fails on RH7
I have this construct in my puppet module to add a line in /etc/sudoers after the last "Defaults" line: augeas { "sudoers.ssh_auth_sock" : lens => "Sudoers.lns", ...
0 votes
1 answer
2k views
How to generate certificates for (secondary) compile puppetserver?
I'm trying to scale puppetserver, in order to have redundancy, using round robin DNS. The secondary puppetserver (version 7.4.0) is configured to use the CA authority from primary puppetserver: /etc/...
2 votes
1 answer
361 views
How to set value of ipa_hostname directive in sssd.conf using Augeas
Using Puppet versions Master: puppetserver 6.7 Client: puppet-agent 6.10 I have other Augeas code in other modules that works just fine. Example sssd.conf [sssd] services = nss, sudo, pam, ssh ...
0 votes
1 answer
2k views
Puppet - can I selectively notify a Service?
I have a Puppet script that handles things differently in different environments based on an if/else block. But I have a bunch of common file resource blocks at the bottom that apply to all ...
1 vote
1 answer
688 views
Puppet 5.5.22, dnfmodule reset
I've been trying to figure out how to convert dnf module reset php dnf module install php:remi-7.4 to a stanza in a puppet module for several hours without any success. Has anyone figured out how to ...
2 votes
0 answers
125 views
Puppet Module File Resource Copy From Network Mount
I'm using RHEL Satellite 6.6 with puppet 5.5.12. I have a module which, among other things, copies a file from a network mapped folder to the local drive, then executes it. When I run the module ...
1 vote
0 answers
239 views
Issue installing puppet agent on Windows Servers
I'm trying to setup a Puppet dev environment in my datacenter. I've configured the Puppet Master on Cent0S 7 along with two agents, also running RH CentOS 7. The Puppet version I am running on the ...
0 votes
1 answer
414 views
Plan lookup: Could not find class
When running a Puppet plan that uses lookup{} function against Hiera I get the error: The target node: 'computer1.domain.com' errored with a message: Internal Server Error: org.jruby.exceptions....
0 votes
0 answers
139 views
Is there a way to communicate information between puppet classes/resources
Is there a way to communicate information between classes/resources? I have a profile that I want to include on all nodes to set them up as being monitored by Icinga which uses an exported resource : ...
1 vote
1 answer
283 views
Quickly install multiple puppet modules from directory
Is there a way to install multiple puppet modules from a directory in one command? I have a directory containing multiple puppet modules in tar.gz form downloaded from the forge, and I need to install ...
0 votes
1 answer
162 views
Run "puppetserver ca" commands on a remote server
We are running a Puppet Open Source server. To sign and revoke Puppet client certificates we logon to this Puppet server and run puppetserver ca ... commands. We would like to be able to stand-up a ...
0 votes
1 answer
73 views
Puppet copy and install program on users
Trying to write module to install nomachine on every user how created on ubuntu deskop. I need assist to solve two problem: nbadmin its my user but I woluld like to write genral user second I got ...
0 votes
0 answers
167 views
Using Puppet to configure hypervisor
I am looking to use Puppet to configure a bare-metal host to spawn VMs using Vagrant/VirtualBox, whose configurations will also be managed by Puppet. I think this can be achieved by: Installing ...
1 vote
1 answer
114 views
Are Puppet virtual resources auto-realized if they're auto-required?
It's documented that Puppet will auto-require certain resources, e.g. a (puppet-managed) directory that is a parent of a File resource, or a group resource referenced in a user resource. If an auto-...
0 votes
1 answer
159 views
dependency loop : to deploy gitlab using awx ansible i need a repository
I want to deploy gitlab using awx and ansible ( or with puppet and rundeck ) and to do it i need a repository ( SCM : gitlab ) , the thing is i want to deploy gitlab but i need a gitlab , i can't find ...
0 votes
2 answers
165 views
Using Configuration management tools to synchronize large files
We are looking into using a configuration mangement tool (like Salt or Puppet) to automate what is currently a lot of manual work. One requirement is that we have to distribute rather large files / ...
2 votes
2 answers
4k views
Puppetserver ca list fails with OpenSSL::X509::StoreError; agent unable to connect
On Puppet master: puppetserver ca list Traceback (most recent call last): 9: from /opt/puppetlabs/server/apps/puppetserver/cli/apps/ca:5:in '<main>' 8: from /opt/puppetlabs/puppet/lib/ruby/...
0 votes
1 answer
175 views
How to manage puppet master and agent connectivity
As it is lab, we can add Ip address of agent to master hosts file.But if I have 1000 agents(partly windows and Linux machines), we can't add each and every agent to hosts file of master.How to manage ...
2 votes
0 answers
881 views
Set YUM versionlock, but allow updating to specific versions
I am trying to control the version of puppet agent installed on our RedHat systems. Our Puppet manifest has $puppet_version = hiera('profile::puppet_agent::version', '6.12.0') class {'::puppet_agent':...
2 votes
1 answer
740 views
Puppetserver unable to locate gems
I'm trying to use a module which adds an AWS Secrets Manager hiera backend: https://forge.puppet.com/accenture/hiera_aws_sm This module requires the aws-sdk-secretsmanager gem, which I installed via ...
1 vote
2 answers
236 views
How to control which version of Powershell Puppet shells out to on Windows?
Microsoft recently changed their download repository for Windows Powershell to require TLS 1.2+ which Windows Powershell 5.1 doesn't support without the runtime setting change to Net....
0 votes
1 answer
172 views
Install openldap server wth puppet - Error: Could not prefetch openldap_database provider 'olc': Command original_slapcat is missing
i am trying to install openldap server with Puppet Version 5.5.20. For the openldap installation i use camptocamp/openldap module v 2.0.0. I try it first with minimal configuration. My puppet ...