search for: hardeninglinux

Hi. I''m a beginner, but I have a basic puppet setup working. I am doing a manual tarball installation and it seems to be hanging then eventually timing out on just downloading the file: file { "/opt/hadoop-0.20.0.tar.gz": source => "puppet:///hadoop020/hadoop-0.20.0.tar.gz" } I have another module that does the same things and works, my only guess

I am trying to log to a file instead of syslog, but when I set "puppetdlog = /var/log/puppetd.log", it still logs to syslog. If also set "syslogfacility =", it doesn''t log anywhere. Does this work for anyone else? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to

Hi, I found the zypper provider mentioned on this list in another thread, but it failes with the flowing error : Package[kvm]/ensure: change from 0.11.0-4.5.2 to true failed: Could not update: undefined method `zypper'' for #<Puppet::Type::Package::ProviderZypper:0x7fd1acf9e360> at Is the latest provider broken? Is there interest in making this work / making it complete. I

So, I''ve been doing something like this for applications that have a client and server component... node base_node { include syslog_ng::client }} node app_node inherits base_node { } node syslog_server inherits base_node { include syslog_ng::server } ... because I want the client portion, syslog-ng in this case to be installed on everything. However, the server node also has a

I want to create a new page in the wiki, to hold documentation for a new contributed module that I''m developing. I''ll link to it from the modules page. I''ve tried going to http://reductivelabs.com/trac/puppet/wiki/ModuleSshAuth, which AFAIK is supposed to offer me to option to create the page, since it doesn''t exist. But all I get is "Page ModuleSshAuth

Hi folks I know that has, to some degree, been run over the past year in different ways, but, I may have yet another instance of an issue on this. The puppetmaster system and the puppet system are both running 0.24.7-r1, on a gentoo system. Other puppet systems are running 0.24.4. The puppet system (not the puppetmaster system) that is running 0.24.7-r1 is showing multiple close_wait

Hello all, I''m running puppet for the first ime. I''ve finished the install but I''m stuck at the certificate part. The puppet master (0.24.4-3) is running on Ubuntu Lenny and the puppet client (0.24.8-4.el5) is running on CentOS 5.3. After the install, from the client side, I''ve run: puppetd --server puppetmaster.domain.com --waitforcert 60 --test On the

Hey all, I''ve open-sources Digg''s apache module: http://github.com/plathrop/puppet-module-apache I know this isn''t much more advanced than what I''ve seen a lot of people using. Here''s my proposition, though. Let''s get all the disparate "apache" modules out there merged together into One Awesome Module. What do you think? One module

Hey Folks, I''m just starting to look into Puppet though am finding it a bit confusing as to how to get it setup on the network I administer. At the moment it is a combination of RHEL 4 and SLES 10 boxes with windows and novell also. I know that windows / novell is beside the point though am wondering how to get puppet setup on the RHEL and SLES side of things. Any good howto''s

Hi, I''d like to announce a little tool I have written, called cucumber- puppet. It supports writing behavioural tests for your puppet manifest, using cucumber. This allows for BDD-style manifest development and fearless refactorings. http://blog.nistu.de/cucumber_puppet_0_0_3_released.html Let me know what you think! cheers, Nikolay -- You received this message because you are

Can anyone have detailed list of dependencies? I am under impression, that all my all problems with getting puppet to work come from the fact, that I have no idea what are puppet dependencies. On puppet Wiki one can read, that what is required is "ruby", and for storedconfigs "sqlite3" and "libsqlite3-ruby". Well, it is true, that they are required, but by far it

Hi, I''ve got some problems with setting up environments. On the master: [main] [...] manifestdir = /etc/puppet/manifests modulepath = /etc/puppet/modules [...] environments = production,staging [production] manifestdir = /etc/puppet/manifests modulepath = /etc/puppet/modules [staging] manifestdir = /opt/puppet-staging/manifests modulepath = /opt/puppet-staging/modules [puppetmasterd]

Just one more email and I''ll let you go for a few hours :) One of the things I like to see in apps is that they are immediately intuitive and easy to use for new users. I think Puppet is really good here, but there''s opportunity to make everything better. We want everyone to love Puppet from their first few minutes using it, all the way through to datacenter nirvana.

i''ve been reading docs and blundering my way through a simple puppet client/server setup between two test hosts (puppetmasterd on server 10.5.8, puppet client on client 10.6.2) and am wondering if there''s any current definitive guide for configuring puppet for os x systems. it also seems the gems installed on my client with ruby 1.9.1 as default don''t work very well

Guys, I seriously could not find this topic in the documentation. What do you do when you need to force puppetd hosts get the new settings from puppetmasterd? What I found was only sending USR1 signal to the client process in order to make it refresh its configuration from the master. But I find it a bit inconvenient for a large amount of hosts. There is also puppetrun which, if I understand

When I use the latest puppet 0.25.1 I got the same problem. This is what I do: 0. Install the Ubuntu 8.04 server with ssh, ruby, rdoc, libopenssl- ruby and git-core (which gets removed after clone). 1. Install the latest puppet from git repositories on both machines using git clone «git clone git://github.com/reductivelabs/puppet» and «git clone git://github.com/reductivelabs/facter» 2. Install it

This might be a crazy idea, but it just popped into my head, and I wanted to know if it''s possible. Perhaps not possible right now, but possible in a theoretical sense. Is it possible that puppet could be modified to be used to manage switches that have a command line based interface? When I manage our Allied Telesis switches (which have a CLI similar to cisco IOS) I wonder if I could

I am trying to write a module for tripwire. I need to push out the twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not currently exist. How can do I this with File{}? I''m can''t seem to find a way to do it. In general times, how can you deploy file A only when file B does not exist? And... tripwire... what a mess. I am trying to use push out the site key,

...amically-built ''next'' branch Regards James Turnbull - -- Author of: * Pro Linux System Administration (http://tinyurl.com/linuxadmin) * Pulling Strings with Puppet (http://tinyurl.com/pupbook) * Pro Nagios 2.0 (http://tinyurl.com/pronagios) * Hardening Linux (http://tinyurl.com/hardeninglinux) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQEcBAEBAgAGBQJK5pqYAAoJECFa/lDkFHAyZRoH/izOlDvtda8+q1xLfEsgjrrS smnQWRiOMAvE3aMROHEQDwtNk1Rn07s7dTVS4ktID7V/4K6j9gqRLEjtnuU30no0 XNUxhlyeiM/Y2tDVAYvskKFiUXB9hrEnFo7+x0qWSL...

We have a policy that requires all user passwords to expire after 90 days. We also use puppet for managing all users on our machines. Our hope was, when our passwords expire, we could update the puppet manifest which would propogate to all our servers, thus updating all our passwords. The problem is, the User type (w/ manage_passwords enabled and ruby- shadow installed) will only set the