@ramnad: As a note, if you are going to do a big upgrade, you should know that Puppet 9 is around the corner. OpenVox 9 (the community-built OSS version) and Puppet Core 9 (the Perforce closed-source version) are both coming out soon. As you move, you might want to look at making sure your new setup is ready for version 9 so the next upgrade won't be that bad. Most of the changes vs Puppet 8 are mostly to underlying components (Ruby in particular). So if you get to v8, the move to v9 should be much easier. You mentioned Puppet 8 OSS, but be sure to know that the current version of Open Source Puppet stops at version 8.10 in October 2024. While that repo hasn't been archived yet, and may still get updates in the future at some point, ongoing development is happening with Puppet Core and OpenVox releases instead. If you aren't sure which way you want to go yet, you can still go to that 8.10 version of Open Source Puppet and then when you make a choice both upgrade paths should be much easier than moving from Puppet 4.

Can an exec notify a service only if a known fact already equals a certain value? Or will I have to do a) some weird manifest conditional logic or b) execute an onlyif command on the server to get it?

why do you want to do that?

On servers with running containers, a restart of the service breaks the containers. Would rather the service just restart the next time the server is restarted.

Eg., iptables…

I had a similar case like that. "fact" updates a file on file system in

/opt/puppetlabs/puppet/cache

, this file is in manifest with

audit => mtime

and service is subscribed to it

sounds like you need to also restart the containers when the service restarts

Hello @daiki.fujimoto.work! A community user has flagged to me that you have been privately messaging members of the Slack with promotional messages. This falls into a gray area around the 'obvious spammers' portion of our community guidelines: Community Guidelines & Code of Conduct | Perforce Puppet Per our three-strike rule, this is the friendly, but public, reminder that this type of behavior with unwanted promotional private messages is against the spirit of this community. I truly hope you can connect with members of the community and get help with your Puppet work. Let us know how we can help!

@ctrl777 has left the channel

@tyler.smle: Job posts are not for this channel. There is a dedicated #C0W1XUVGQ channel if you are looking for a Puppet expert. That said, your post does not appear to be a Puppet-related job posting and is not relevant for this space. I have removed it.

Hi all, I see that this module no longer has a maintainer github.com/sgnl05/sgnl05-sssd Any advice for configuring sssd without this module. And does the module actually need a new maintainer — I would be happy to do that if that's the only issue.

I use simp-sssd

@tyler.smle: You were warned last week that job posts were not for this channel and to use #C0W1XUVGQ. You were also asked to make sure they were Puppet-related job postings. Your message has been deleted and I will be sending you a direct DM per our community guidelines 'Second occurrence' policy. A third 'strike' will require an account ban.

Just boot ‘em

@CVQuesty: I have directly reached out to the user and they have moved their post to #C0W1XUVGQ, and they have updated it to clarify that it is a position requiring Puppet experience. That said, please remember to flag to any admins of any spam-like or other activity that contradicts the community guidelines!

You were already on it when I saw it, so I let you crack the whip. 😄

FYI: Perforce Agentic Gateway (PAG) — free MCP gateway for Puppet + AI clients Sharing this for anyone here running Puppet Open Source, Core, or Enterprise and working with AI coding assistants (Claude Code, Cursor, etc.): Perforce Agentic Gateway (PAG) is a local MCP gateway. Rather than configuring a separate MCP server connection for each tool an AI client uses, the client connects to PAG once, and PAG manages the individual MCP servers behind it — starting/restarting them, and storing credentials in the OS keychain instead of passing secrets through chat. Key details: • Runs locally via

uvx

— no signup or hosted component required, and it's free to use. • It's a general-purpose MCP catalog/gateway; Puppet is one of several servers available from the catalog (others include P4, Delphix, BlazeMeter, etc.) you can also connect any MCP server you want so there is no limitation. • Setup is a one-line

claude mcp add

command, or a small JSON block for

.mcp.json

-based clients. • Repo and docs: github.com/perforce/perforce-agentic-gateway Note on the attached screenshot: the dashboard example was built using PAG — it's generated by describing what you want to an AI client (e.g., Claude) connected through PAG's Puppet MCP server or if you are using Open Source or Core PAG can create a connection to your Puppet servers API. You tell it what data and views you want, and it builds a dashboard around that. The screenshot is just one example (node inventory, compliance score, fleet status, platform health, open issues) to show what's possible — the actual dashboard you'd get depends on what you ask for.

Hi all, I've had this PR that fixes the broken builds on stdlib for a while fyi github.com/puppetlabs/puppetlabs-stdlib/pull/1481

Hello all, i've got an issue with an expired CA on Mom

how can I regenerate the CA without agent issues ?

whats your puppet enterprise/puppet/puppet core/openvox version?

openvox 8

you probably have a higher chance of answers in the openvox slack/IRC (https://voxpupuli.org/connect/). short version is: you can extend the CA if you still have the private key

if you like bolt, you can check https://forge.puppet.com/modules/puppetlabs/ca_extend/plans

or if you like openssl: https://gist.github.com/bastelfreak/ed874f03e7849d35eb8ec832a58da8f3

I'm interested in installing the puppet-summary utility for simple reporting UI. However, it says archived. Do we have any other alternate one ?

there are two web dashboards which present data collected from puppetdb: puppetboard (https://github.com/voxpupuli/puppetboard) and openvoxview (https://github.com/voxpupuli/openvoxview)

puppet enterprise also has a web ui

@IlovPuppet: What type of data are you looking to see? And which version of Puppet are you running?

Hi, I opened this PR github.com/puppetlabs/ruby-pwsh/pull/384 to fix an issue related to string nullification. It was fixed in 2024 but the last commit made this happen again