Puppet users - May 2009 - Using Puppet on Machines Where I Don't Have Root?

I''d like to use puppet to manage configuration files on a couple of
machines.  The catch is that I don''t have root on these machines.  Is
this possible?  What kind of issues am I going to run into?

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

2009/5/26 Brian Ferris <bdferris@gmail.com>:
>
> I''d like to use puppet to manage configuration files on a couple
of
> machines.  The catch is that I don''t have root on these machines.
 Is
> this possible?  What kind of issues am I going to run into?
>


well.... you can do anything with puppet the user you''re running it as
has permissions to do.  So if your user is allowed to manage whatever
configuration files you''re looking to manage, then sure.

If you want to manage a resource that''s not owned by your user, then
puppet can''t help you with your privilege esclation needs.

.r''

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

I understand that I can only edit files where permissions allow.  But can I
run puppet without a "puppet" user?

Basically, after reading over the documentation, I noticed a number of
references to users ("puppet") and paths (/var/...) that puppet needs
to run
that I won''t be able to create / have access to because I
don''t have root on
the boxes.  But I didn''t see any obvious command lines options / config
settings for changing those users and paths.

I understand if this is not how puppet was designed to be used, but I
figured I''d give it a shot.


On Tue, May 26, 2009 at 10:19 PM, RijilV <rijilv@riji.lv> wrote:
>
> 2009/5/26 Brian Ferris <bdferris@gmail.com>:
> >
> > I''d like to use puppet to manage configuration files on a
couple of
> > machines.  The catch is that I don''t have root on these
machines.  Is
> > this possible?  What kind of issues am I going to run into?
> >
>
>
>
> well.... you can do anything with puppet the user you''re running
it as
> has permissions to do.  So if your user is allowed to manage whatever
> configuration files you''re looking to manage, then sure.
>
> If you want to manage a resource that''s not owned by your user,
then
> puppet can''t help you with your privilege esclation needs.
>
> .r''
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Run puppet --genconfig and find all the parameters that would need to  
be changed to make it work. Most if not all of the important stuff can  
be modified by either args to puppet/d or via the puppet.conf

Chris

On May 26, 2009, at 10:53 PM, Brian Ferris wrote:
> I understand that I can only edit files where permissions allow.   
> But can I run puppet without a "puppet" user?
>
> Basically, after reading over the documentation, I noticed a number  
> of references to users ("puppet") and paths (/var/...) that
puppet
> needs to run that I won''t be able to create / have access to
because
> I don''t have root on the boxes.  But I didn''t see any
obvious
> command lines options / config settings for changing those users and  
> paths.
>
> I understand if this is not how puppet was designed to be used, but  
> I figured I''d give it a shot.
>
>
> On Tue, May 26, 2009 at 10:19 PM, RijilV <rijilv@riji.lv> wrote:
>
> 2009/5/26 Brian Ferris <bdferris@gmail.com>:
> >
> > I''d like to use puppet to manage configuration files on a
couple of
> > machines.  The catch is that I don''t have root on these
machines.
> Is
> > this possible?  What kind of issues am I going to run into?
> >
>
>
>
> well.... you can do anything with puppet the user you''re running
it as
> has permissions to do.  So if your user is allowed to manage whatever
> configuration files you''re looking to manage, then sure.
>
> If you want to manage a resource that''s not owned by your user,
then
> puppet can''t help you with your privilege esclation needs.
>
> .r''
>
>
>
>
> >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

2009/5/27 Brian Ferris <bdferris@gmail.com>:
> I understand that I can only edit files where permissions allow.  But can I
> run puppet without a "puppet" user?
>
> Basically, after reading over the documentation, I noticed a number of
> references to users ("puppet") and paths (/var/...) that puppet
needs to run
> that I won''t be able to create / have access to because I
don''t have root on
> the boxes.  But I didn''t see any obvious command lines options /
config
> settings for changing those users and paths.
>
> I understand if this is not how puppet was designed to be used, but I
> figured I''d give it a shot.
You can use --confdir:

puppetmasterd --verbose --confdir /home/user/puppet/

gepetto might help you setup a sandboxed local puppetmaster and client

http://github.com/albanpeignier/gepetto/tree/master

The other option here is to not run puppetd/puppetmasterd and just use
the puppet binary and some other way of distributing manifests and use
puppet executable to run them.

Paul

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

One of the reasons I initially missed these command line options is because
I apparently have an issue with "--help" and the fact that I installed
puppet using a gem.  Is there some easy way of fixing that?  Or is there a
webpage that lists all the command-line args that I''m not seeing?

On Wed, May 27, 2009 at 12:10 AM, Paul Nasrat
<pnasrat@googlemail.com>wrote:
>
> 2009/5/27 Brian Ferris <bdferris@gmail.com>:
> > I understand that I can only edit files where permissions allow.  But
can
> I
> > run puppet without a "puppet" user?
> >
> > Basically, after reading over the documentation, I noticed a number of
> > references to users ("puppet") and paths (/var/...) that
puppet needs to
> run
> > that I won''t be able to create / have access to because I
don''t have root
> on
> > the boxes.  But I didn''t see any obvious command lines
options / config
> > settings for changing those users and paths.
> >
> > I understand if this is not how puppet was designed to be used, but I
> > figured I''d give it a shot.
>
> You can use --confdir:
>
> puppetmasterd --verbose --confdir /home/user/puppet/
>
> gepetto might help you setup a sandboxed local puppetmaster and client
>
> http://github.com/albanpeignier/gepetto/tree/master
>
> The other option here is to not run puppetd/puppetmasterd and just use
> the puppet binary and some other way of distributing manifests and use
> puppet executable to run them.
>
> Paul
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---