Installazione di Puppet in Debian - Revision history

Gabriele.vivinetto at 15:11, 20 May 2013

2013-05-20T15:11:58Z

← Older revision		Revision as of 15:11, 20 May 2013
Line 16:		Line 16:
	}		}
	</pre>		</pre>

			* Con questo file, senza definire nodi, la modifica verrà applicata a '''TUTTI I CLIENT''' che si collegheranno.

	* Far partire in console:		* Far partire in console:
	sudo puppetmasterd --verbose --no-daemonize		sudo puppetmasterd --verbose --no-daemonize

	=~~COnfigurazione~~ Client=		=Configurazione Client=

	* Sul client installare puppet		* Sul client installare puppet
Line 50:		Line 52:
	* Lanciare a mano per ottenere certificato (non deve dare nessun errore):		* Lanciare a mano per ottenere certificato (non deve dare nessun errore):

	sudo puppetd --server ~~galserver~~.~~galimberti~~.~~priv~~ --verbose --waitforcert 60 --no-daemonize		sudo puppetd --server myserver.example.com --verbose --waitforcert 60 --no-daemonize


	* Sul '''server''' listare i certificati:		* Sul '''server''' listare i certificati:
Line 59:		Line 60:
	"localhost.localdomain" (7C:AC:6D:AF:BF:20:84:63:EF:57:CC:7F:32:0A:E8:16)		"localhost.localdomain" (7C:AC:6D:AF:BF:20:84:63:EF:57:CC:7F:32:0A:E8:16)
	</pre>		</pre>

	* Sul '''server''' firmare il certificato:		* Sul '''server''' firmare il certificato:
	sudo puppetca --sign myclient.example.com		sudo puppetca --sign myclient.example.com
Line 76:		Line 78:
	</pre>		</pre>

			* Riavviare l'agent, e si vedrannoa pplicate le modifiche:

			sudo puppetd --server galserver.galimberti.priv --verbose --waitforcert 60 --no-daemonize

			<pre>
			notice: Starting Puppet client version 2.6.2
			info: Caching catalog for lmpubserver.lmpub.galimberti.priv
			info: Applying configuration version '1369062149'
			notice: /Stage[main]//File[/etc/passwd]/group: group changed 'root' to 'bin'
			notice: Finished catalog run in 0.09 seconds
			</pre>

			* Se si vuole testare la modifica, aggiungere come opzione:
			--noop

	The Puppet client will then periodically, by		The Puppet client will then periodically, by
	default every 30 minutes,		default every 30 minutes,

Gabriele.vivinetto: /* Configurazione Lato server */

2013-05-20T15:02:07Z

Configurazione Lato server

← Older revision		Revision as of 15:02, 20 May 2013
Line 12:		Line 12:
	file { "/etc/passwd":		file { "/etc/passwd":
	owner => "root",		owner => "root",
	group => "~~root~~",		group => "bin",
	mode => 644,		mode => 644,
	}		}

Gabriele.vivinetto at 14:45, 20 May 2013

2013-05-20T14:45:47Z

← Older revision		Revision as of 14:45, 20 May 2013
Line 1:		Line 1:
	~~{{Stub}}~~		=Configurazione Lato server=
	* Installare		* Installare i pacchetti
	sudo apt-get install facter puppet puppetmaster		sudo apt-get install facter puppet puppetmaster

Line 19:		Line 19:
	* Far partire in console:		* Far partire in console:
	sudo puppetmasterd --verbose --no-daemonize		sudo puppetmasterd --verbose --no-daemonize

			=COnfigurazione Client=

	* Sul client installare puppet		* Sul client installare puppet
Line 32:		Line 34:
	sudoedit /etc/puppet/puppet.conf		sudoedit /etc/puppet/puppet.conf

	server=myserver.example.com		<pre>
	bindaddress=~~192~~.~~168~~.10.~~254~~		[main]
	~~certname=myclient~~.~~example.com~~		#....
			server=myserver.example.com
			certname=myclient.example.com

			[agent]
			bindaddress=1.2.3.4
			# non sembra funzionare. Per il bind, usare SNAT di iptables
			</pre>

	* Stoppare:		* Stoppare:
	sudo invoke-rc.d puppet stop		sudo invoke-rc.d puppet stop

	* Lanciare a mano per ottenere certificato:		* Lanciare a mano per ottenere certificato (non deve dare nessun errore):

	sudo puppetd --server galserver.galimberti.priv --verbose --waitforcert 60		sudo puppetd --server galserver.galimberti.priv --verbose --waitforcert 60 --no-daemonize


	* Sul server listare i certificati:		* Sul '''server''' listare i certificati:
	sudo puppetca --list		sudo puppetca --list
			<pre>
			"myclient.example.com (A3:9F:0A:FD:0D:8D:58:06:D0:CC:B8:A1:33:68:1F:88)
			"localhost.localdomain" (7C:AC:6D:AF:BF:20:84:63:EF:57:CC:7F:32:0A:E8:16)
			</pre>
			* Sul '''server''' firmare il certificato:
			sudo puppetca --sign myclient.example.com

	* Firmarre il nostro:		<pre>
	~~sudo puppetca --sign~~ myclient.example.com		notice: Signed certificate request for myclient.example.com
			notice: Removing file Puppet::SSL::CertificateRequest myclient.example.com at '/var/lib/puppet/ssl/ca/requests/myclient.example.com.pem'
			</pre>

	* Attendere sul client:		* Attendere sul client:
	~~sudo tail -f~~ /~~var~~/~~log/syslog \| grep puppe~~		<pre>
			info: Caching certificate for myclient.example.com
			notice: Starting Puppet client version 2.6.2
			err: Could not retrieve catalog from remote server: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
			notice: Using cached catalog
			err: Could not retrieve catalog; skipping run
			</pre>


	The Puppet client will then periodically, by		The Puppet client will then periodically, by
	default every 30 minutes,		default every 30 minutes,

Gabriele.vivinetto: Created page with "{{Stub}} * Installare sudo apt-get install facter puppet puppetmaster * Stoppare sudo invoke-rc.d puppetmaster stop * Creare file config base: sudoedit /etc/puppet/manifests…"

2012-10-02T11:18:00Z

Created page with "{{Stub}} * Installare sudo apt-get install facter puppet puppetmaster * Stoppare sudo invoke-rc.d puppetmaster stop * Creare file config base: sudoedit /etc/puppet/manifests…"

New page

{{Stub}}
* Installare
sudo apt-get install facter puppet puppetmaster

* Stoppare
sudo invoke-rc.d puppetmaster stop

* Creare file config base:
sudoedit /etc/puppet/manifests/site.pp

<pre>
file { "/etc/passwd":
owner => "root",
group => "root",
mode => 644,
}
</pre>

* Far partire in console:
sudo puppetmasterd --verbose --no-daemonize

* Sul client installare puppet
sudo apt-get install puppet facter

* Abilitare la partenza:
sudoedit /etc/default/puppet

START=yes

* Dichiarare il server:

sudoedit /etc/puppet/puppet.conf

server=myserver.example.com
bindaddress=192.168.10.254
certname=myclient.example.com

* Stoppare:
sudo invoke-rc.d puppet stop

* Lanciare a mano per ottenere certificato:

sudo puppetd --server galserver.galimberti.priv --verbose --waitforcert 60

* Sul server listare i certificati:
sudo puppetca --list

* Firmarre il nostro:
sudo puppetca --sign myclient.example.com

* Attendere sul client:
sudo tail -f /var/log/syslog | grep puppe

The Puppet client will then periodically, by
default every 30 minutes,