I am receiving the above mentioned error. I have launched this master and agent instance from azure with all ports open. But stilling getting this error. Can someone please advise me what to do.
↧
pptAdm@pptagnt:~$ puppet agent -t Error: Could not request certificate: Failed to open TCP connection to puppet:81 40 (getaddrinfo: Name or service not known) Exiting; failed to retrieve certificate and waitforcert is disabled pptAdm@pptagnt:~$
↧
Error: Could not request certificate: Failed to open TCP connection to puppet:8140 (getaddrinfo: Name or service not known) Exiting; failed to retrieve certificate and waitforcert is disabled
I am getting the above error. I have installed the master and agent from azure portal with all the ports open but still getting the following error.
Please give me some solution.
↧
↧
Mcollective doesn't start on CentOS 7 via Systemctl
Hi guys,
I have successfully installed and configured my puppet environment which includes one PuppetMaster and few nodes (Linux/Windows). Foreman is also installed and can do some basic things from there.
Since Foreman does not support the "Puppet Run" via the deprecated "puppet kick" command, I am now trying to configure the mcollective service (middleware based on ActiveMQ), in order to be able to use the mco command from foreman and push single classes on nodes.
The ActiveMQ seems to be properly installed, as i can see the the gui popping up via the browser. Unfortunately i can see any response while running the "mco ping " command, and i suspect it is due to the problem i have when trying to start the mcollective service via systemctl.
Here the error i get, hope some of you might be of help :
systemctl start mcollective
the log :
ERROR -- : pluginmanager.rb:171:in `rescue in loadclass' Failed to load Mcollective::Registration::Meta: cannot load such file -- mcollective/registration/meta.rb
system/package info :
puppet --version
4.10.1
puppetserver --version
puppetserver version: 2.7.2
mco --version
/usr/local/bin/mco 2.10.4
uname -r
3.10.0-514.16.1.el7.x86_64
cat /etc/redhat-release
CentOS Linux release 7.3.1611 (Core)
/etc/puppetlabs/mcollective/server.cfg
connector = activemq
plugin.activemq.pool.size = 1
plugin.activemq.pool.1.host = puppetmaster
plugin.activemq.pool.1.port = 61613
plugin.activemq.pool.1.user = mcollective
plugin.activemq.pool.1.password = marionette
main_collective = mcollective
collectives = mcollective
libdir = /opt/puppetlabs/mcollective/plugins
logfile = /var/log/puppetlabs/mcollective.log
loglevel = info
daemonize = 1
securityprovider = psk
plugin.psk = unset
factsource = yaml
plugin.yaml = /etc/puppetlabs/mcollective/facts.yaml
classesfile = /opt/puppetlabs/puppet/cache/state/classes.txt
plugin.puppet.summary = /opt/puppetlabs/puppet/cache/state/last_run_summary.yaml
registration = Meta
registerinterval = 14400
rpcauthorization = 1
rpcauthprovider = action_policy
plugin.actionpolicy.allow_unconfigured = 1
plugin.activemq.heartbeat_interval = 30
vi /etc/puppetlabs/mcollective/client.cfg
connector = activemq
plugin.activemq.pool.size = 1
plugin.activemq.pool.1.host = puppetmaster
plugin.stomp.port = 61613
plugin.activemq.pool.1.user = mcollective
plugin.activemq.pool.1.password = marionette
connection_timeout = 30
main_collective = mcollective
collectives = mcollective
libdir = /opt/puppetlabs/mcollective/plugins
libdir = /usr/share/mcollective/plugins
libdir = /usr/libexec/mcollective
logfile = /dev/null
loglevel = info
logger_type = console
securityprovider = psk
plugin.psk = unset
factsource = yaml
plugin.yaml = /etc/puppetlabs/mcollective/facts.yam
guidlines/links :
https://docs.puppet.com/mcollective/configure/server.html#facts-identity-and-classes
https://docs.puppet.com/mcollective/deploy/middleware/activemq.html
https://docs.puppet.com/mcollective/deploy/install.html
https://raw.githubusercontent.com/puppetlabs/marionette-collective/master/ext/activemq/examples/single-broker/activemq.xml
https://docs.puppet.com/mcollective/deploy/plugins.html
http://projects.theforeman.org/projects/foreman/wiki/_mcollective_
https://docs.puppet.com/mcollective/reference/basic/basic_cli_usage.html
↧
Can I have a master manifest that crosses multiple environments?
I would like to use multiple environments, web/db/file, etc. but would like to have 1 master manifest that would be common across all environments. Can I do this? I'm running Puppet 3.8.6
Thanks!
↧
Using puppet apply oneliner to pull files from puppetmaster
> puppet apply -e "file { '/var/tmp/puppet-keytab.sh':> ensure => file,> source => 'puppet:///modules/base/infrastructure/bash_scripts/puppet-keytab.sh'> }"
This doesn't work. Tcpdump confirms that it's not even trying to access the puppetmaster.
How to I convince puppet apply to pull from the puppet master?
(Note: puppetmaster is configured in puppet.conf. puppet agent otherwise works fine)
↧
↧
What You Should Know About Used Hybrid Batteries
Before a person buys a hybrid vehicle, they typically show curiosity about monetary savings the environmental edges, and short term gains that hybrids are known for. The reply is merely that routine care is just as significant and is exactly the same for all vehicles. Regular, routine maintenance and minor repairs are no more complex and no higher than that of a regular car. In fact, some automobile experts state that the regular care of a hybrid vehicle is sometimes less than that of a gasoline-fueled automobile.
Many hybrid vehicles include great, long-lasting warranties including their batteries. But if something bad happens with the hybrid system of the car following the warranty has expired, you could then be shelling out quite a bit of cash. Battery could need to be fixed, conditioned, and even replaced in some cases. According to Eric Evarts, senior associate auto editor at Consumer Reports, "Most hybrid vehicles have now been exceptionally reliable in our survey, and few have wanted battery replacements. Even in the event that you are among the unlucky few, look at it this way: In the most used hybrid vehicle design, from Toyota, there are essentially no wearable apdty parts in the transmission. So in case it's necessary to spend $1,800 on a battery after 150,000 miles, you're still ahead of where you would have been in many less-reliable automobiles that are on their second or third transmission by then."
The real question relates to the higher up front expense of a hybrid and buyers still debate whether or not the gas mileage that is higher really does save money down the road. This will depend on factors like how much you drive, how frequently you drive, how long you drive that one vehicle, and also the price of gasoline in your area. Many owners of hybrids who've seen reduced battery operation or warnings lights come on the automobile 's dash are looking into other options in the place of sending the used hybrid or its battery . Alternatives have grown to be less expensive and much more available as technology evolves and hybrid vehicles become a standard part of vehicle production.
When your hybrid battery quits performing like new, one choice will be to buy a brand new battery in a car dealer that will feature a price that is large. Running you tens of thousands of dollars can either give you sticker shock or be an investment you are prepared to make. Either way, it is a choice. Yet, there are some owners who were quoted several thousands of dollars for a brand-new hybrid battery but discovered that he was covered in full by the more, 150,000-mile warranty that applies to owners in states that follow California discharge laws. Another hybrid vehicle owner negotiated the price which dropped about $2000 when all was said and done. There might be a possibility to bargain in certain situation. Again, another alternative.
Then comes the option of battery repair that should not be something an owner does on their very own. More attention lately continues to be brought to the need for auto repair shops and capable individuals to work on hybrid batteries as a result of serious danger of electrocution or shock while working on hybrid vehicles. Hybrid vehicles use electric motors and high voltage batteries to get you the very best fuel economy. Some experts maintain the danger of being electrocuted is exaggerated and why these vehicles are really not dangerous to work on than traditional petrol-powered cars. After all, gasoline is a very flammable and volatile liquid, right? You must be aware of the dangers of high voltage also to treat it with admiration. Education is very important and while battery repair continues to be an option, owners need to be sure that their auto mechanic can manage the complex hybrid systems and their possible risks.
Hybrid battery conditioning is another option for hybrid vehicle owners who have batteries with reduced operation and who are taking a look at investing in a secondhand hybrid battery or breathing life back in their own used hybrid vehicle battery. Battery conditioning could be performed as preventative maintenance or when needed. In a hybrid vehicle, it's not just one battery but an entire pack of battery modules. The battery pack in many cars that are hybrid onward and provides at least a number of the electricity needed to propel the car forward. There are also modules that are individual, and any problem in a battery pack is most likely due to one of the modules, not all of these. Consequently, by replacing only the defective module making the battery perform poorly, a tech replace that individual module and can find which of the modules is causing troubles, and recondition the battery. After battery conditioning, the hybrid vehicle battery should reveal signs of better fuel economy and developments, or can restore your hybrid battery of up to 95% of its first performance.
Hybrid motorists are exceptional and progressive in a way because they are highly motivated for different reasons (some which producers are still attempting to meet); oil dependency, possessing the hottest technological trends, spending less in the long-term, the surroundings, etc... No matter the reason why, most drivers desire to get the most out of their hybrid battery as well as their hybrid vehicle. We encourage you to consider your range of your dealership and automobile technicians. Make sure your service mechanic understands more than the usual thing or two about hybrid vehicles as well as their battery packs and certainly will restore its functionality and gas mileage when need be. Without a properly working battery pack, hybrid vehicle motorists won't be able to get the sort of fuel efficiency and low emissions that make hybrids a great selection in the first place.
Many hybrid vehicles include great, long-lasting warranties including their batteries. But if something bad happens with the hybrid system of the car following the warranty has expired, you could then be shelling out quite a bit of cash. Battery could need to be fixed, conditioned, and even replaced in some cases. According to Eric Evarts, senior associate auto editor at Consumer Reports, "Most hybrid vehicles have now been exceptionally reliable in our survey, and few have wanted battery replacements. Even in the event that you are among the unlucky few, look at it this way: In the most used hybrid vehicle design, from Toyota, there are essentially no wearable apdty parts in the transmission. So in case it's necessary to spend $1,800 on a battery after 150,000 miles, you're still ahead of where you would have been in many less-reliable automobiles that are on their second or third transmission by then."
The real question relates to the higher up front expense of a hybrid and buyers still debate whether or not the gas mileage that is higher really does save money down the road. This will depend on factors like how much you drive, how frequently you drive, how long you drive that one vehicle, and also the price of gasoline in your area. Many owners of hybrids who've seen reduced battery operation or warnings lights come on the automobile 's dash are looking into other options in the place of sending the used hybrid or its battery . Alternatives have grown to be less expensive and much more available as technology evolves and hybrid vehicles become a standard part of vehicle production.
When your hybrid battery quits performing like new, one choice will be to buy a brand new battery in a car dealer that will feature a price that is large. Running you tens of thousands of dollars can either give you sticker shock or be an investment you are prepared to make. Either way, it is a choice. Yet, there are some owners who were quoted several thousands of dollars for a brand-new hybrid battery but discovered that he was covered in full by the more, 150,000-mile warranty that applies to owners in states that follow California discharge laws. Another hybrid vehicle owner negotiated the price which dropped about $2000 when all was said and done. There might be a possibility to bargain in certain situation. Again, another alternative.
Then comes the option of battery repair that should not be something an owner does on their very own. More attention lately continues to be brought to the need for auto repair shops and capable individuals to work on hybrid batteries as a result of serious danger of electrocution or shock while working on hybrid vehicles. Hybrid vehicles use electric motors and high voltage batteries to get you the very best fuel economy. Some experts maintain the danger of being electrocuted is exaggerated and why these vehicles are really not dangerous to work on than traditional petrol-powered cars. After all, gasoline is a very flammable and volatile liquid, right? You must be aware of the dangers of high voltage also to treat it with admiration. Education is very important and while battery repair continues to be an option, owners need to be sure that their auto mechanic can manage the complex hybrid systems and their possible risks.
Hybrid battery conditioning is another option for hybrid vehicle owners who have batteries with reduced operation and who are taking a look at investing in a secondhand hybrid battery or breathing life back in their own used hybrid vehicle battery. Battery conditioning could be performed as preventative maintenance or when needed. In a hybrid vehicle, it's not just one battery but an entire pack of battery modules. The battery pack in many cars that are hybrid onward and provides at least a number of the electricity needed to propel the car forward. There are also modules that are individual, and any problem in a battery pack is most likely due to one of the modules, not all of these. Consequently, by replacing only the defective module making the battery perform poorly, a tech replace that individual module and can find which of the modules is causing troubles, and recondition the battery. After battery conditioning, the hybrid vehicle battery should reveal signs of better fuel economy and developments, or can restore your hybrid battery of up to 95% of its first performance.
Hybrid motorists are exceptional and progressive in a way because they are highly motivated for different reasons (some which producers are still attempting to meet); oil dependency, possessing the hottest technological trends, spending less in the long-term, the surroundings, etc... No matter the reason why, most drivers desire to get the most out of their hybrid battery as well as their hybrid vehicle. We encourage you to consider your range of your dealership and automobile technicians. Make sure your service mechanic understands more than the usual thing or two about hybrid vehicles as well as their battery packs and certainly will restore its functionality and gas mileage when need be. Without a properly working battery pack, hybrid vehicle motorists won't be able to get the sort of fuel efficiency and low emissions that make hybrids a great selection in the first place.
↧
Low cost Codes Animal Jam
There are many ways to get codes for the sport, every month are made accessible by the authors of the brand new game. In case you resolve to make use of animal jam the animal jam cheats codes then you definitely must be careful in case you are not using a secure channel on the internet, As there are various websites claiming that they'll hack into animal jam and will provide you with free credit as gems and diamonds let me clarify all of them are lying. If you beloved this write-up and you would like to acquire far more data about http://computerhaven.info/animaljamcodes/ kindly go to our web-page. Every player within the Animal animal jam Jam world has their very personal den which they can customize and decorate with all form of different objects, (similar to membership penguin.
) Players can even gather a variety of different animals from both the ocean and on land resembling; lions, koalas, wolves, tigers, elephants, horses, monkeys, pandas, octopus, dolphins, sharks, seals and penguins. Properly, as much as I wish they have been NM, they're my favorite animal on animal jam by far... I do know, I do know, they don't seem to be felines, however I think they're fairly good animals for clans, more so than the wolf, foxes do look extra cat-like, Instead of waiting 10 weeks for diamonds, (unless you buy a membership card with diamonds) animal jam you can just buy foxes with gems, which is way simpler.
.. And they look quite good in most items as nicely. We offer a number of varieties of various Animal Jam present certificates and game cards here at We in all probability have to purchase extra animal jam membership cards and codes than anyone else on the planet due to how many of our users redeem them! With the sport persevering with to make strides, Exim Brasil will work immediately with Peeko , who handles worldwide licensing rights for the brand, to bring partners on board to enhance the Animal Jam experience for kids and fogeys in Brazil through new kids's merchandise.
) Players can even gather a variety of different animals from both the ocean and on land resembling; lions, koalas, wolves, tigers, elephants, horses, monkeys, pandas, octopus, dolphins, sharks, seals and penguins. Properly, as much as I wish they have been NM, they're my favorite animal on animal jam by far... I do know, I do know, they don't seem to be felines, however I think they're fairly good animals for clans, more so than the wolf, foxes do look extra cat-like, Instead of waiting 10 weeks for diamonds, (unless you buy a membership card with diamonds) animal jam you can just buy foxes with gems, which is way simpler.
.. And they look quite good in most items as nicely. We offer a number of varieties of various Animal Jam present certificates and game cards here at We in all probability have to purchase extra animal jam membership cards and codes than anyone else on the planet due to how many of our users redeem them! With the sport persevering with to make strides, Exim Brasil will work immediately with Peeko , who handles worldwide licensing rights for the brand, to bring partners on board to enhance the Animal Jam experience for kids and fogeys in Brazil through new kids's merchandise.
↧
Planning a Particular Baby lavish For Adoptive Parents
Your horse is glancing for which unfortunately release and as a consequence back to actually a place of warmth so seem for a single bosal where is built on the new rawhide area to source for all most suppleness. You does be grateful that the customer spent the actual extra cash, because a definite quality bosal is quite impossible that would wear elsewhere.
When My was 4 years old my mom went gone on your own girls short and your dad seen to put together all i would say the cooking. Keep in mind this was our worst times of the little life as compared to it makes reference to delicacies. I pleaded my your mom to give me specifically to cook food. My favorite college class during upper school was home business 101 as several we was able to was learn about delicacies and frying. During my current college moments and producing days, food items was in most cases on these mind as well as a we got some great meals. This guidance was all preparation to obtain this sequence of my personal life.
Will Wear and Megan divorce, along with will the lady be the size of his new Anna Draper through his personal space in B.A., when or perhaps wants each escape? May very well Don in addition , Peggy go toward each and every other, right that and they are each sort-of small (again)? Is able to Joan then Roger closure up getting closer, from this day forward that she actually is letting Roger be step of Kevin's life? The actions will Pete do, correct that he's "free" of a everything? Furthermore since Be dressed in is ones window about the SC&P world, would certainly we did you ever see these animals again? Will certainly Don usually rehired here in a only a few months, immediately after a the time jump easily into Season 7, or likely will we find out him during an definitely different option for the exact final couple of years?
Mold in which it is created through a single lack using indoor wind could also be the particular trigger, given that it has an effect on the lungs, and on the inside adults too far. Being this adults is usmama likely to be inspired this way, imagine some of the devastation this task could leading cause to an undeveloped lung of a great baby. ensure when your interior ventilation system is when good exercising order. By the doing this, you really eliminate a good chance linked to unwanted fungal developing with your habitat.
4) Go out with her! Just now like that you did before you experienced married. Again, she'll get going on feeling confident, special combined with that users want to be be through her ( space ) this is considered a guiding light that does really recovery your wedding day.
In generally cases, huge wheat noodles can getting simply substituted for the traditional punch in of repast and recipe does indeed be satisfactory. Now, overall wheat spaghetti tends regarding be your tad considerably more expensive because standard and thus traditional varieties, and generally there are aren't very as a number pasta units available, sadly if you are attempting for some sort of great pasta pasta or rigatoni, they should easily look for the purpose of a 100 % wheat plethora.
When childhood trauma is normally involved, they is each necessary product in a suitable child's their lives. The performance to pretend and begin using our visuallization is very much healthy to have adults because. Now just that I morning a writer, I would be confused without to become able regarding imagine the actual characters and their answers. These living skills are likely to uniquely eligible you even as an adult ecstasy. The childhood trauma survivor has natural empathy. These do are inclined to in roles that will require this nature of coming.
Prepare some sort of pasta whereas per how the instructions concerning the package, but form sure to actually leave one particular pasta a good bit dente'. Whilst your entree is boiling, brown that this chicken breasts on an skillet. the salmon breast between heat, dice it, stick it back on the main skillet as add generally stir fry vegetables. Promptly after your vegetables, fruits and salmon are produced and prepared (drain many excess moisture), add the pasta, rnch dressing on top of that feta gouda. Serve as a vigorous and high main training.
When My was 4 years old my mom went gone on your own girls short and your dad seen to put together all i would say the cooking. Keep in mind this was our worst times of the little life as compared to it makes reference to delicacies. I pleaded my your mom to give me specifically to cook food. My favorite college class during upper school was home business 101 as several we was able to was learn about delicacies and frying. During my current college moments and producing days, food items was in most cases on these mind as well as a we got some great meals. This guidance was all preparation to obtain this sequence of my personal life.
Will Wear and Megan divorce, along with will the lady be the size of his new Anna Draper through his personal space in B.A., when or perhaps wants each escape? May very well Don in addition , Peggy go toward each and every other, right that and they are each sort-of small (again)? Is able to Joan then Roger closure up getting closer, from this day forward that she actually is letting Roger be step of Kevin's life? The actions will Pete do, correct that he's "free" of a everything? Furthermore since Be dressed in is ones window about the SC&P world, would certainly we did you ever see these animals again? Will certainly Don usually rehired here in a only a few months, immediately after a the time jump easily into Season 7, or likely will we find out him during an definitely different option for the exact final couple of years?
Mold in which it is created through a single lack using indoor wind could also be the particular trigger, given that it has an effect on the lungs, and on the inside adults too far. Being this adults is usmama likely to be inspired this way, imagine some of the devastation this task could leading cause to an undeveloped lung of a great baby. ensure when your interior ventilation system is when good exercising order. By the doing this, you really eliminate a good chance linked to unwanted fungal developing with your habitat.
4) Go out with her! Just now like that you did before you experienced married. Again, she'll get going on feeling confident, special combined with that users want to be be through her ( space ) this is considered a guiding light that does really recovery your wedding day.
In generally cases, huge wheat noodles can getting simply substituted for the traditional punch in of repast and recipe does indeed be satisfactory. Now, overall wheat spaghetti tends regarding be your tad considerably more expensive because standard and thus traditional varieties, and generally there are aren't very as a number pasta units available, sadly if you are attempting for some sort of great pasta pasta or rigatoni, they should easily look for the purpose of a 100 % wheat plethora.
When childhood trauma is normally involved, they is each necessary product in a suitable child's their lives. The performance to pretend and begin using our visuallization is very much healthy to have adults because. Now just that I morning a writer, I would be confused without to become able regarding imagine the actual characters and their answers. These living skills are likely to uniquely eligible you even as an adult ecstasy. The childhood trauma survivor has natural empathy. These do are inclined to in roles that will require this nature of coming.
Prepare some sort of pasta whereas per how the instructions concerning the package, but form sure to actually leave one particular pasta a good bit dente'. Whilst your entree is boiling, brown that this chicken breasts on an skillet. the salmon breast between heat, dice it, stick it back on the main skillet as add generally stir fry vegetables. Promptly after your vegetables, fruits and salmon are produced and prepared (drain many excess moisture), add the pasta, rnch dressing on top of that feta gouda. Serve as a vigorous and high main training.
↧
puppet master not updating tomcat connector port, instead it is defining another connector port in the server.xml file
Hi
I am trying run multiple tomcat instances on same node/host with different ports. For second tomcat instance I am explicitly defining connector port with 8081 using tomcat::config::server::connector, but puppet master instead of updating exiting Connector port in the second tomcat instance, it is defining new tag at the end of server.xml file and due to this I am end up with having two connector port (one is 8080 and 8081).
Also, the default connector port 8080 taking precedence over 8081 (or server not recognizing 8081 port)
Is there any solution to update exiting connector port instead of creating new connector tag in the server.xml using puppet master.
**Here is the puppet master site.pp file snippet**
class { 'java':
package => 'java-1.8.0-openjdk-devel',
}
tomcat::install { '/opt/tomcat9':
source_url => 'https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.0.M1/bin/apache-tomca
t-9.0.0.M1.tar.gz'
}
tomcat::instance { 'tomcat-first':
catalina_home => '/opt/tomcat9',
catalina_base => '/opt/tomcat9/first',
}
tomcat::instance { 'tomcat-second':
catalina_home => '/opt/tomcat9',
catalina_base => '/opt/tomcat9/second',
}
tomcat::config::server { 'tomcat-second':
catalina_base => '/opt/tomcat9/second',
port => '8006',
}
tomcat::config::server::connector { 'tomcat-second-http':
catalina_base => '/opt/tomcat9/second',
port => '8081',
protocol => 'HTTP/1.1',
additional_attributes => {
'redirectPort' => '8443'
},
}
↧
↧
How to deploy MSI Packages with puppet on Windows 2012 Server?
Hello,
we would like to deploy check_MK Packages. This is working fine on Windows7 with the following script:
# Windows only
if $::kernel == 'windows' {
file { "C:\\check-mk-agent_${version}_all.msi":
ensure => present,
source => "puppet:///modules/admin/check-mk-agent_${version}_all.msi",
notify => Package["Check_MK Agent"],
}
package { "Check_MK Agent":
ensure => installed,
source => 'C:\check_mk_agent.msi',
require => File["C:\\check-mk-agent_${version}_all.msi"],
install_options => [ { 'INSTALLDIR' => 'C:\check_mk' } ]
}
file { "C:\\check_mk\\check_mk.ini":
ensure => present,
content => template('admin/check_mk_agent_windows.erb'),
notify => Service["check-mk-windows-service"],
require => Package["Check_MK Agent"]
}
service { 'check-mk-windows-service':
name => "Check_MK_Agent",
ensure => running,
enable => true,
require => Package["Check_MK Agent"]
}
}
But i get alway the that be ensure that it is an real msi and that you have the right permission on the file. Is there a special securty flag in windows that i'am able to execute over puppet?
Thanks
↧
Deploy file based on conditional of file existing
Am trying to deploy /etc/pam.d/* files to a linux server on initial server install, but not to over-write once server install completed (in case modifications have been made). Puppet 4.4.2.
Am trying to use "Require" option with an Exec (as seen on other forums) but that does not work, and constantly over-writes the target file regardless of whether the flag file /tmp/first_time_install is present or not.
exec { "test1":
command => "/bin/true",
onlyif => "/usr/bin/test -f /tmp/first_time_install",
path => ['/usr/bin','/usr/sbin','/bin','/sbin'],
}
file { 'system-auth':
path => '/etc/pam.d/system-auth-ac',
owner => root,
group => root,
mode => "644",
source => "puppet:///modules/redhat_os/system-auth-ac",
require => Exec["test1"],
}
Have tried switching the Exec to "false" by default and using "unless" and it functionally works, but the deployment displays an error each time the flag file is not present.
So to summarise, I need a solution that does both options (deploys or not deploys) correctly AND quietly!
At the present, my best option is to copy all the files to a temporary directory /var/tmp/first_install then run a script to perform the complex dependency calculations and copies (which kind of defeats the purpose of using an automation tool like Puppet).
↧
Infrastructure and Application environments : looking for a solution
Hello my dear puppeteers,
I am currently looking forward to have a solution which would allow me to manage hundreds of machines with different needs.
Brief explanation about the setup I currently have :
- there is one puppetmaster per technical environment ( i.e : **dev**, **uat**, **prod** ... )
- each puppetmaster handles several application-based environments
*example*
machine `devpuppetmaster` has the following items in `/etc/puppetlabs/code/environments/`
- `application1`
- `application2`
- `application3`
This setup is a bit different from the expected standards as the '*environments*' processed are not **technical** environments but **application-based** ones
While it works well for the current deployment needs, I am willing to extend the scope of puppet machines' management to entire park ... and this is where it gets complicated :(
I could have a '**default**' environment defined, that all the infrastructure machines would use in order to get a generic configuration ( *system utilities, middlewares etc.* ) .... but then how would I also get the application definitions deployed on the machines which require it ? ( AFAIK, a puppet agent can only be configured to use **one** environement )
Thanks beforehand for any answers !
↧
string based from two hiera lookups?
Hi there
How could I write a string based from two hiera-lookups with an @ un the middle?
something like
hiera('rabbit_user')@hiera('control_node') should give me for example elmer_fudd@runrabbitrun as string
class profiles::rabbitmq {
include ::rabbitmq
rabbitmq_user { hiera('rabbit_user'):
admin => false,
password => hiera('rabbit_password'),
}
rabbitmq_user_permissions { "hiera('rabbit_user')@hiera('rabbit_node')":
configure_permission => '.*',
read_permission => '.*',
write_permission => '.*',
}
}
I've tried also "hiera('rabbit_user')"@"hiera('rabbit_node')": but everything what i tried gives me an
Server Error: Syntax error at '@' at
thanks in advance
↧
↧
Can I configure puppet to install packages through a proxy?
I have a few nodes that I'd like to install packages externally from my company (which sits behind a proxy). Is there anything in the "package" resource that would allow this?
Or is there a way I can temporarily set the environment variables *http_proxy*, *https_proxy*, and *no_proxy* while the package is being installed?
I see *http_proxy_host* can be set in puppet.conf, but I was just looking for a temporary solution...not something that permanently setup the proxy. Not to mention that this is only a single setting, and doesn't seem to support *https_proxy* or *no_proxy* settings.
↧
Web viewer for Puppet catalogs
In a [separate question](http://ask.puppetlabs.com/question/14789/how-to-view-compiled-catalog/) I learned how to view a node's catalog on the command line. My question here is this: are there any web-based tools that take the information from `puppet catalog find --terminus rest --render-as [dot|json|yaml] node.example.com` and display it in a meaningful way?
↧
Centos 7 agent executing code from apt module
Hello,
currently I have my puppet server only dealing with debian clients. Everything is fine.
I tried to add a new client running Cento s7, but I encounter a weird situation, the client compilation is failing with error :
[root@ratest /]#puppet agent -t
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Loading facts
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: This module only works on Debian or derivatives like Ubuntu at /etc/puppet/modules/apt/manifests/params.pp:4 on node ratest.domain.local
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
I see that the client is getting in apt module logic which of course isn't made for CentOS. But I didn't set anywhere on the node to load this module, here is my site.pp :
node 'ratest.domain.local'
{
}
Even with this simple node definition the compilation is failing.
Any tips to point me to the right direction ?
Thank you
↧
puppet windows add wait or sleep
I have a script which is having multiple file and exec resources. My question is can i add some attribute in each of these resources to take time(like sleep) before next resource is executed? I want puppet to fully complete a task before moving to another.
exec { 'Enable ASP NET 2.0' : command => 'C:\Windows\System32\inetsrv\appcmd.exe set app "DefaultWebSite/ShipGuestLog" "/applicationpool:ASP.NET v2.0" ',
} file { 'C:\inetpub\wwwroot\ShipGuestLog\Web.config' : ensure => file, source => 'puppet:///modules/guestlog/Web.config',
↧
↧
Fresh install of puppetserver not starting properly
I have just started to learn puppet. I installed the latest package of puppetserver and have not been able to get it to start properly. I tried it on an Ubuntu 12 box, a CentOS box from puppetlabs and also fresh CentOS 7 copy.
I am running virtualbox and using vagrant to create the VM. I have allocated 6GB of RAM to the puppet and this is the vm config
config.vm.define :puppet do |puppet_config|
puppet_config.vm.box = "centos/7"
puppet_config.vm.hostname = "puppet.localdomain"
puppet_config.vm.network :private_network, ip: "10.0.15.210"
puppet_config.vm.synced_folder ".", "/vagrant", disabled: true
puppet_config.vm.provider "virtualbox" do |vb|
vb.memory = "6048"
end
end
After executing the command systemctl start puppetserver, I get a failure message and ps -ef shows a puppet process. Unable to figure out what is going wrong.
> Job for puppetserver.service failed> because the control process exited> with error code. See "systemctl status> puppetserver.service" and "journalctl> -xe" for details.
I don't see any useful message in the log files even after I set the log mode to trace. This is the message I have in puppetserver.log
> 2017-06-01 15:38:46,370 DEBUG [main] [p.t.bootstrap] Loading bootstrap configs:
/etc/puppetlabs/puppetserver/services.d/ca.cfg
/opt/puppetlabs/server/apps/puppetserver/config/services.d/bootstrap.cfg
This is from journalctl -xe
> -- Unit puppetserver.service has begun starting up.
Jun 01 15:45:02 puppet.localdomain puppetserver[7032]: OpenJDK 64-Bit Server VM warning: ignoring option MaxPermSize=256m; support was removed in 8Jun 01 15
:50:01 puppet.localdomain systemd[1]: puppetserver.service start operation timed out. Terminating.
Jun 01 15:50:02 puppet.localdomain puppetserver[7032]: Startup script was terminated before completion
Jun 01 15:50:03 puppet.localdomain systemd[1]: puppetserver.service: control process exited, code=exited status=1
Jun 01 15:50:03 puppet.localdomain systemd[1]: Failed to start puppetserver Service.>-- Subject: Unit puppetserver.service has failed>-- Defined-By: systemd>-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel>-->-- Unit puppetserver.service has failed.>-->-- The result is failed.>Jun 01 15:50:03 puppet.localdomain systemd[1]: Unit puppetserver.service entered failed state.>Jun 01 15:50:03 puppet.localdomain systemd[1]: puppetserver.service failed.>Jun 01 15:50:03 puppet.localdomain polkitd[545]: Unregistered Authentication Agent for unix-process:7026:244832 (system bus name :1.69, object pathJun 01 15:50:03 puppet.localdomain systemd[1]: puppetserver.service holdoff time over, scheduling restart.>Jun 01 15:50:03 puppet.localdomain systemd[1]: Starting puppetserver Service...>-- Subject: Unit puppetserver.service has begun start-up>-- Defined-By: systemd>-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel>-->-- Unit puppetserver.service has begun starting up.>Jun 01 15:50:03 puppet.localdomain puppetserver[7615]: OpenJDK 64-Bit Server VM warning: ignoring option MaxPermSize=256m; support was removed in 8lines 254
I don't have a DNS server but have configured hosts file to have fqdn of the system.
Hosts file:
127.0.0.1 puppet.localdomain puppet localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
10.0.15.210 puppet.localdomain
From /etc/sysconfig/network
# Created by anaconda
HOSTNAME="puppet.localdomain"
.
What should I do to get it to work?
↧
WIndows Second run - how to identify
We have a module which we need to run only one time, If its already performed we like to skip the run , is there a way to identity first run or second run
↧
remove statements/resources from a class without to touch the original module
Hi there
In a class for example [designate::keystone::authtoken](https://github.com/openstack/puppet-designate/blob/stable/ocata/manifests/keystone/authtoken.pp) are some resources they will be used as default by calling this class. For example:
$auth_uri = 'http://localhost:5000',
$auth_url = 'http://localhost:35357',
On my setup I don't need these settings or rewrite values of these settings but puppet writes it because It's a default with default values from these class, in the configuration of my node. What would break my setup later.
result after puppet-run on my node:
[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
project_name = services
username = designate
password = something_secret
project_domain_id = default
user_domain_id = default
auth_type = password
auth_uri=http://localhost:5000
auth_url=http://localhost:35357
but it should be:
[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = designate
admin_password = something_secret
So I would like to ask what would been an elegant way to remove stuff in resoucres from classes without to touch the files inside the module? Write an class using in profiles, copy the whole class and rewrite it and remove the unwanted stuff?
cheers Darko
↧