DeskTux

Linux on Desktops

User Tools

Site Tools


apps:puppet

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
apps:puppet [2019-08-31 17:00]
jens Modify git link
apps:puppet [2019-08-31 17:59] (current)
jens Fixing messed up headers
Line 4: Line 4:
 Somehow, I could not find very many or good manuals on how to set up your own (basic) Puppet server on Debian, so I decided to write my own. Somehow, I could not find very many or good manuals on how to set up your own (basic) Puppet server on Debian, so I decided to write my own.
  
-==== Installation & Configuration ====+===== Installation & Configuration ​=====
 The installation in Debian (10 or later) is -- as always in Debian -- straight forward. Just run an The installation in Debian (10 or later) is -- as always in Debian -- straight forward. Just run an
  
Line 13: Line 13:
 As for the main configuration file ''/​etc/​puppet/​puppet.conf''​ I leave the Debian standard for what it is. As for the main configuration file ''/​etc/​puppet/​puppet.conf''​ I leave the Debian standard for what it is.
  
-==== Manifests ====+===== Manifests ​=====
 Your manifests should be in ''/​etc/​puppet/​code/''​ and the basic structure looks like this: Your manifests should be in ''/​etc/​puppet/​code/''​ and the basic structure looks like this:
  
Line 55: Line 55:
 Of course, before testing your code, you should first run it through ''​puppet parser validate''​ and ''​puppet-lint''​. However, this is not a Puppet code manual, you should check their [[https://​puppet.com/​docs|excellent documentation]] for that. Of course, before testing your code, you should first run it through ''​puppet parser validate''​ and ''​puppet-lint''​. However, this is not a Puppet code manual, you should check their [[https://​puppet.com/​docs|excellent documentation]] for that.
  
-==== Connecting Clients ====+===== Connecting Clients ​=====
 Of course, your Puppet master will be useless if it only manages itself. To connect clients to your Puppet master, make sure it is reachable on port 8140/TCP (both IPv4 and IPv6 work). Of course, your Puppet master will be useless if it only manages itself. To connect clients to your Puppet master, make sure it is reachable on port 8140/TCP (both IPv4 and IPv6 work).
  
Line 74: Line 74:
 To accept that certificate just run ''​puppet cert sign client.system.tld''​ and you are good to go. From now on, that system will be managed by your Puppet master. To test this you can run a ''​puppet agent -t''​ on the client. To accept that certificate just run ''​puppet cert sign client.system.tld''​ and you are good to go. From now on, that system will be managed by your Puppet master. To test this you can run a ''​puppet agent -t''​ on the client.
  
-=== Removing clients ===+==== Removing clients ​====
 In case you need to remove (decommission) a client, you can list all available certificates with ''​puppet cert list -a''​ and then ''​puppet cert clean <​client.name.tld>''​. Don't forget to remove that client from backup and monitoring ;-) In case you need to remove (decommission) a client, you can list all available certificates with ''​puppet cert list -a''​ and then ''​puppet cert clean <​client.name.tld>''​. Don't forget to remove that client from backup and monitoring ;-)
  
-===== What next? =====+====== What next? ======
 Now, it might be a good idea to manage your Puppet code from your workstation using [[:​apps:​git|git]]. That way you do not need to log in to the Puppet master all the time to make changes to your code as root. Now, it might be a good idea to manage your Puppet code from your workstation using [[:​apps:​git|git]]. That way you do not need to log in to the Puppet master all the time to make changes to your code as root.
apps/puppet.txt ยท Last modified: 2019-08-31 17:59 by jens