A similar command (

facter --debug --custom-dir ./lib/facter ssh_user_public_keys

) outputs:

[2022-09-08 22:56:22.471805 ] DEBUG LegacyFacter::Util::Loader - Excluding ./lib/facter from search path. Fact file paths must be an absolute directory

Ah found it they move it from puppet\cache\state to puppet\public thanks for your command:

puppet config print lastrunfile

Ah found it they move it from puppet\cache\state to puppet\public thanks for your command @Pavlos Parissis:

puppet config print lastrunfile

has anyone tried to setup Puppetboard to connect to localhost trough SSL? In my case I get an error on the certificate, and it's saying the the certificate doesn't match '127.0.0.1' So far so good. I regenerated the certificate, adding the dns-altname 127.0.0.1, and I got this certificate:

<http://puppetdb01.xxxx.org|puppetdb01.xxxx.org>                                 (SHA256)  A8:98:F0:51:72:2E:D8:F7:9B:73:94:23:60:E6:1E:3C:14:03:F7:7E:4C:B9:F1:E3:7E:28:7F:F3:5E:B5:D4:A8	alt names: ["DNS:127.0.0.1", "DNS:<http://puppetdb.service.ha.xxxx.net|puppetdb.service.ha.xxxx.net>", "DNS:<http://puppetdb.service.ha.xxxx.org|puppetdb.service.ha.xxxx.org>", "DNS:<http://puppetdb01.xxxx.org|puppetdb01.xxxx.org>"]

but, on puppetDB I still see:

[Fri Sep 09 10:38:20.244607 2022] [wsgi:error] [pid 506084] [remote 2001:798:3::127:14910] ERROR:puppetboard.utils:HTTPSConnectionPool(host='127.0.0.1', port=8081): Max retries exceeded with url: /pdb/meta/v1/version (Caused by SSLError(SSLCertVerificationError("hostname '127.0.0.1' doesn't match either of '127.0.0.1', '<http://puppetdb.service.ha.xxxx.net|puppetdb.service.ha.xxxx.net>', '<http://puppetdb.service.ha.xxxx.org|puppetdb.service.ha.xxxx.org>', '<http://puppetdb01.xxxx.org|puppetdb01.xxxx.org>'")))

This message was deleted.

This message was deleted.

Hi , i am gettinng Failed to open TCP connection to puppet6:8140 error on my puppet master any help , service is inactive due to this any help on this please

service is not running on master @bastelfreak

message has been deleted

message has been deleted

Memory limits are usually set in

JAVA_ARGS

in the service environment file. The output of the following would show us how much the service is configured to request and how much the system has available:

grep JAVA_ARGS= /etc/{sysconfig,default}/puppetserver

free -h

thanks @csharpsteen @bastelfreak @Neeloj here is output

👋 Hello, team!

one more quick help , now when i am running puppet agent -t . i am getting below error Error: certificate verify failed [self signed certificate in certificate chain for CN=Puppet Root CA: @csharpsteen @bastelfreak on agent

Good Day All,

This message was deleted.

This message was deleted.

message has been deleted

Hello, I am in a strange situation. I am trying to remove a node from galera cluster and it also gets disconnected successfully but it is back again as this cluster is managed by puppet. I looked for the config especially with name wreps_cluster_address in whole puppet but didnt find how it is sensing the ip of deleted node and bringing it back. Can you help in finding out where i should look for that particular ip to remove it from puppet. i want to remove that 192......39 ip .Thanks

Hello, I am in a strange situation. I am trying to remove a node from galera cluster and it also gets disconnected successfully but it is back again as this cluster is managed by puppet. I looked for the config especially with name wreps_cluster_address in whole puppet but didnt find how it is sensing the ip of deleted node and bringing it back. Can you help in finding out where i should look for that particular ip to remove it from puppet. i want to remove that 192.168.1.39 ip .Thanks

I see https://github.com/puppetlabs/puppetlabs-apache/pull/2309/ implements my suggestion. @Andries Malan says it works perfectly for our use-case.

hi all, after upgrade puppet to version 7 I get below warning, I know what it mean but:

# puppetserver ca list --all

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.

My question is what should I run on Puppetserver! because its productive system! so I have one shot 😲 And on AgentsI get:

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.
Successfully signed certificate request for xyz

thanks in advance

hi all, after upgrade puppet to version 7 I get below warning, I know what it mean but:

# puppetserver ca list --all

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.

My question is what should I run on Puppetserver! because its productive system! so I have one shot 😲 And on CLients I get:

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.
Successfully signed certificate request for xyz

thanks in advance

hi all, after upgrade puppet to version 7 I get below warning, I know what it mean but:

# puppetserver ca list --all

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.

My question is what should I run on Puppetserver! because its productive system! so I have one shot 😲 And on AgentsI get:

The cadir is currently configured to be inside the /etc/puppetlabs/puppet/ssl directory. This config setting and the directory location will not be used in a future version of puppet. Please run the puppetserver ca tool to migrate out from the puppet confdir to the /etc/puppetlabs/puppetserver/ca directory. Use `puppetserver ca migrate --help` for more info.
Successfully signed certificate request for xyz

thanks in advance

This message was deleted.

If I use a lookup against the same key, this for example: $vault_addr = lookup('vault_addr', String, 'first', ''), 500 times, is that 500 separate lookups, or does puppet cache it the first time and stop re-looking it up? if it doesn't cache it, is there likely to be any noticeable performance hit?

@Daniel Henninger you can't run the line of code

$vault_addr = lookup(...)

more than once, without changing the variable name. Considering lookup is first attempting to find the key/value from a yaml file, then it inserts that value into the catalog it's currently compiling, are you asking if the server when looking up the same key for a different node, would that be cached? no. Are you asking if the same key, for the same lookup, for a different variable but the same node? Also unlikely to be cached

--- assume it's in 500 different classes 😃

no