i'm looking at https://help.puppet.com/pe/2023.8/topics/puppetfile_relative_control_branch.htm which is the exact version i'm using on my server

you should have a code review process so that there is no accidentally changing things in a repo

we do, but ... let's just say there are people "reviewing" PRs who have no idea what they're looking at. the phrase "rubber stamping" has become a common joke/complaint here.

PIM issue I tried PIM for the first time (multiple times) yesterday to bootstrap a prototyping VM for validating backup/recovery and other testing…. It didn’t go well. I tried running with parameters, and that always failed seemingly when setting up ca;

2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.730-04:00 - [Notice]: /Stage[main]/Pe_install::Prepare::Certificates/Exec[generate ca cert]/returns: Error:
2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.730-04:00 - [Notice]: /Stage[main]/Pe_install::Prepare::Certificates/Exec[generate ca cert]/returns: Missing public key to match private key at /etc/puppetlabs/puppet/ssl/private_keys/gs-eim-protopuppet.inf.earthdata.nasa.gov.pem
2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.731-04:00 - [Notice]: /Stage[main]/Pe_install::Prepare::Certificates/Exec[generate ca cert]/returns: Missing public key to match private key at /etc/puppetlabs/puppet/ssl/private_keys/gs-eim-protopuppet.inf.earthdata.nasa.gov.pem
2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.731-04:00 - [Error]: '/opt/puppetlabs/bin/puppetserver ca setup --certname <http://gs-eim-protopuppet.inf.earthdata.nasa.gov|gs-eim-protopuppet.inf.earthdata.nasa.gov> --ca-name 'Puppet Enterprise CA generated at +2025-08-13 19:47:46 -0400' --subject-alt-names 'puppet'' returned 1 instead of one of [0]
2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.732-04:00 - [Error]: /Stage[main]/Pe_install::Prepare::Certificates/Exec[generate ca cert]/returns: change from 'notrun' to ['0'] failed: '/opt/puppetlabs/bin/puppetserver ca setup --certname <http://gs-eim-protopuppet.inf.earthdata.nasa.gov|gs-eim-protopuppet.inf.earthdata.nasa.gov> --ca-name 'Puppet Enterprise CA generated at +2025-08-13 19:47:46 -0400' --subject-alt-names 'puppet'' returned 1 instead of one of [0]
2025-08-13T19:50:41-04:00   2025-08-13T19:49:35.733-04:00 - [Notice]: /Stage[main]/Pe_install::Prepare::Certificates/Exec[generate node cert]: Dependency Exec[generate ca cert] has failures: true

I tried removing altnames element from parameters.json, and that didn’t fix it. I’m trying the wizard now…

wizard failed because it doesn’t honor -b “tmpdir=/root/tmp” to specify alternative /tmp directory

Is that from a new installation or a recovery?

fresh VM

(I prefer using PEADM instead of PIM, PIM is just another abstraction layer that makes it more complicated IMO)

PEADM?

which PE version, just primary or also replica/compiler, which parameters and do you have working hostname resolution on the box?

2023.8.5

(current LTS version)

bolt is a tool that runs task and plans, similar to ansible. PEADM (https://github.com/puppetlabs/puppetlabs-peadm) is a collection of such tasks and plans to install and modify a PE installation. PIM is a wrapper around bolt and PEADM

I use vagrant/peadm for sandbox https://github.com/vchepkov/bootstrap-pe-ha

you can borrow ideas there

We can’t use vagrant anymore because puppet server doesn’t support Apple Silicon

yep, that's why I will keep my iMac forever 🙂 but if you ignore virtualbox bits, it should work

just create appropriate inventory.yaml

Vagrant was our development environment until we all got refreshed with M3/M4. Now we’re looking at Docker/Podman.

Yeah, PEADM looks more like what I want. I was frankly kicking the tires of PIM just to see if it would be quick/easy.

you could also switch to openvox, which has proper ARM builds 🙂

You are in PE channel 🙂

¯\_(ツ)_/¯

openvox supports ARM? I had been playing around with openvox last year.

Oh yeah, lookie! https://downloads.voxpupuli.org/mac/openvox8/15/

We also have EL10 ARM builds https://yum.voxpupuli.org/openvox8/el/10/aarch64/ and other platforms

Stop winning!

okay, so I won't mention the containers that we have

🙂