similar to: Is there a way to push/copy a file from client to master ?

We have discovered a security vulnerability (“AltNames Vulnerability”) whereby a malicious attacker can impersonate the Puppet master using credentials from a Puppet agent node. This vulnerability cannot cross Puppet deployments, but it can allow an attacker with elevated privileges on one Puppet-managed node to gain control of any other Puppet-managed node within the same infrastructure. All

Hi, I am trying to use Hiera in puppet 3 and I have two nodes that both need the same configuration. In this case they are two web servers which have the same apache configuration. Rather than creating two seperate hiera files for node1.yaml and node2.yaml is there a way to group these by role (e.g. webserver.yaml)? I want to avoid duplicating the configuration if possible and keep the data

Hi everyone, Please help, I have built a new server and installed puppet (2.6.17) running on RHEL 6.3. It seems that it is not listening on port 8139. iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt

I''ve been looking around for instructions on installing puppetmaster with a standalone passenger, without apache. I''m a personal believer in, "the fewer layers, the better" :) Unfortunately, I cant find any instructions for this configuration. Everything seems to be written for "puppet AND httpd and passenger". Could anyone point me to instructions sans

Hi all, Doing some work with a puppet 2.7.14 installation to see what''s new and needs to be changed, however i''m seeing unexpected behavior with my manifests, so my external node directory isn''t being imported. This is on a rhel 5 server with the puppet rpms from yum.puppetlabs.com, but the cilent machines is based on fc17 beta with 2.7.13 rpm (which is with that

I am using stored configs to manage my nagios host and services checks and I have run into a problem that I have been unable to solve. When the stored configs are purged from puppet the nagios server correctly removes them from the services and hosts file but does not notify the nagios service and instead throws an error. So the entries are still there and nagios still reports on them until

Hi list, In our platform we have a lot of machines in which the system is a single disk image loaded on RAM from PXE. The problem is quite simple : if I install puppetd on the image, I will end up using the same certificate for 100 different servers with different names (the hostname is setup at boot time from dhcp) and I guess the puppetmaster won''t allow that. In other words : what

Puppet Dashboard 1.2.23 is a maintenance release of the 1.2 series of Puppet Dashboard with bug fixes and minor features. This release is available for download at: https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.23.tar.gz Available in native package format in the Puppet Labs yum and apt repositories at: http://yum.puppetlabs.com and http://apt.puppetlabs.com Please report

Stumbled around a bit until I figured out you need to do this: gem install deep_merge to get it to work ! “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group.

I see that there''s a thread from September asking a very similar question ("Official puppetlabs position on cron vs puppet as a service?"). I want to ask what should I take into account when making this decision? Just some background: - All my servers are Red Hat or CentOS - We have about 5 servers managed by Puppet now. The goal is to have ~50 servers. These are generally

puppet agent --verbose shows a verbose output of the changes done by puppet, such as: notice: /Stage[main]/Logstash::Config/Logstash::Configdir[agent]/File[/etc/logstash/agent/config]/owner: owner changed ''root'' to ''logstash'' notice: /Stage[main]/Varnish/Service[varnish]/ensure: ensure changed ''stopped'' to ''running''

G''day. I am wondering what the current best practice for building a single file out of distributed fragments is with puppet. Specifically, my problem: 1. Install munin-node on arbitrary machines. 2. Install ''munin.conf'' as a single file on one machine, containing a configuration stanza for every machine that munin-node is installed on. The current best practice

OK. What did I booger up this time ? agent.myexample.org and puppetmaster.myexample.org are the same server. ---------------------------------------------------------------------------- # puppetd --no-daemonize --onetime --debug --noop debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not

Anyone from puppetmanaged.org listening to this list ? The web page to create an account <http://www.puppetmanaged.org/user/register> is busted. The CAPTCHA does not show up and you cannot register without it. So I tried their mailing list -- <http://www.puppetmanaged.org/mailman/listinfo> I was able to join, but then my attempt to post to the list bounced:

What is the best and easy''t way to let all nodes ssh passwordless to each other ? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com.

On Feb 1, 2012, at 8:06 PM, Nan Liu wrote: > Puppet uses REST, so you can run puppet master on 443 to work around firewalls. I would like to get a bit more information on this. Is it as simple as setting all the ports in puppet.conf to 443 on master and agent ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact

Hi, are there any good ways of scripting an inventory of managed resources on all nodes? I''ve found the inventory script by R.I.Pienaar ( http://www.devco.net/archives/2010/02/26/what_does_puppet_manage_on_a_node-2.php) which does what I want but only locally on each client. Is there any native way of syncing the client_yaml data centrally or any other way of doing this? I need a

Here''s one I learned: I originally had # Ensure /etc/hosts contains the basics host { "${fqdn}": host_aliases => $hostname, ip => $ipaddress, } And thru some trial and error, got down to this (which puppet-lint does not gripe about) # Ensure /etc/hosts contains the basics host { $fqdn: host_aliases => $hostname, ip => $ipaddress, }

Hello, I am a bit confused by the REST syntax - how can I PUT an arbitrary file in the bucket? Downloading works fine (Perl+LWP), see below, but for PUT I only see this line in the docs (http://docs.puppetlabs.com/guides/rest_api.html): PUT /{environment}/file_bucket_file/md5/{checksum} Should I compute the MD5 of the file and port its contents at the url ? my code: my $ua =

Hello All, Moving from 2.5 to 2.6.2 and I was wondering if there is a preferred directory structure for using multiple environments? Does it work much different in 2.6 than in 2.5? When I made the move I assumed (I know) that my current structure and configurations would just roll over but that isn''t the case. Thanks, Jim -- You received this message because you are subscribed to the