Puppet Community

i wrote one that queries for some facts in puppetdb using pypuppetdb

we have a python script that breaks up the hostname to make facts and then hiera with list merge for ENC

we are transitioning to trusted facts in our latest design

then in node we just `lookup('classes_main').include`

yeah that's how our stuff works in our puppet 3 legacy stuff

Looking at <http://theforman.org|theforman.org> again after many years and it looks like it fills several roles for me besides an ENC for Puppet. :thinking_face:

I don't use it for puppet, but I do use it for the Katello plugin

it's honestly the best patching system I've used (even if I _hate it with a burning passion at times_

I know. Salt has made me love Puppet more.

yeah we use foreman for a ton of stuff but no ENC

I might be able to use it to replace some Jenkins bits, too.

check which java binary is configured in `/etc/sysconfig/puppetserver`

If it's java 8, install java 11 and update `/etc/sysconfig/puppetserver`

I've already installed Java 11, and it is set:
```java --version
openjdk 11.0.15 2022-04-19 LTS
OpenJDK Runtime Environment 18.9 (build 11.0.15+9-LTS)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.15+9-LTS, mixed mode, sharing)```
```ls -l /usr/bin/java
lrwxrwxrwx 1 root root 22 May  2 21:40 /usr/bin/java -&gt; /etc/alternatives/java```

`grep -i JAVA_BIN /etc/sysconfig/puppetserver`

and `grep -i JAVA_ARGS /etc/sysconfig/puppetserver`

Forcing the path to the Java 11 binary didn't help.
This is what I have for JAVA_ARGS:
```JAVA_ARGS="-Xms2G -Xmx2G -XX:MaxPermSize=4G -Djruby.logger.class=com.puppetlabs.jruby_utils.jruby.Slf4jLogger -XX:ReservedCodeCacheSize=512m"```

`XX:MaxPermSize=4G` is remove on java 11 no ?

you have a space between `-` and `XX:MaxPermSize=4G` ?

Not sure, I tried it thinking it would hard code the max available memory, to avoid the use of `MemTotal` from `/proc/meminfo`.
There is no space in the options in my file.

other quesiton: why does the box even have 3TB of memory?

It's an old server we had for a PoC (IIRC for a database), I'm using it now for various stuff.

`/usr/bin/java -Xms2g -Xmx2G -XX:MaxPermSize=512m -cp /opt/puppetlabs/server/apps/puppetserver/puppet-server-release.jar:/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/facter.jar:/opt/puppetlabs/server/data/puppetserver/jars/* clojure.main -m puppetlabs.trapperkeeper.main --config /etc/puppetlabs/puppetserver/conf.d --bootstrap-config /etc/puppetlabs/puppetserver/services.d/,/opt/puppetlabs/server/apps/puppetserver/config/services.d/` that works ?

Mhh nope:
For info as you said indeed: `Ignoring option MaxPermSize; support was removed in 8.0`
The logs (/tmp/clojure-12610661970285290483.edn):
```{:clojure.main/message
 "Execution error (NumberFormatException) at java.lang.NumberFormatException/forInputString (NumberFormatException.java:65).\nFor input string: \"3037842284\"\n",
 :clojure.main/triage
 {:clojure.error/class java.lang.NumberFormatException,
  :clojure.error/line 65,
  :clojure.error/cause "For input string: \"3037842284\"",
  :clojure.error/symbol java.lang.NumberFormatException/forInputString,
  :clojure.error/source "NumberFormatException.java",
  :clojure.error/phase :execution},
 :clojure.main/trace
 {:via
  [{:type java.lang.NumberFormatException,
    :message "For input string: \"3037842284\"",
    :at
    [java.lang.NumberFormatException
     forInputString
     "NumberFormatException.java"
     65]}],```

It looks like something is using the MemTotal value, but since this server has 3 TB of memory the string is too big ?

I suck at Java, so not even sure if there is a file I can modify to "extend" the string length ?

I never see a memory limit for java, maybe the puppetserver jar when he try to split the memory for dynamic params. Do you set the instance number on the `puppetserver.conf` ?

Hello,
Do you have solve your problem ? I'm interested about the solution

Hello, no, I moved to another thing since.
I think I'll setup a virtual machine with a "normal" amount or RAM to avoid this Java string issue.

Let’s say the top level directory of your environment is `/etc/puppetlabs/environments/production` .  When a request for a catalog from an agent comes in, catalog compilation starts with `/etc/puppetlabs/environments/production/manifests/site.pp` .  You will probably want a `node` definition in there like
```node default {
}```
Inside that `node` block, you can add code that will get applied to all hosts if you just want to test some puppet resources.

If you are learning the language, though, you can always just put some puppet code in a file (say `foo.pp`) and then run `puppet apply foo.pp` locally on a host

Also, it seems you're more asking about the code itself and how it gets from your workstation to its destination on the Puppet server, and that's a pretty big topic.

Way back in 2014, there was a great Puppetconf talk about code management and deployment.

Check this:  <https://m.youtube.com/watch?v=v9LB-NX4_KQ|https://m.youtube.com/watch?v=v9LB-NX4_KQ>

And also read this:

<http://garylarizza.com/blog/2014/02/17/puppet-workflow-part-1/|http://garylarizza.com/blog/2014/02/17/puppet-workflow-part-1/>

That's part 1.  Read 1, 2, 3, 3b, and 4

This is the basics of “how to do Puppet” once everything is installed.

Hey guys, thanks for the replies! Yes, I was wondering how does the code bounce around the server and applies it to the agent. I'm going to test some my code to apply modified paper_lantern theme, so I will see how it goes. Going to try adding the node, then apply it to see if any changes will happen. Thanks!

It's because the question you ask is enormous, and the answer is broad.

Puppet runs, for instance:

<https://puppet.com/docs/puppet/7/subsystem_catalog_compilation.html#catalog-compilation-process|https://puppet.com/docs/puppet/7/subsystem_catalog_compilation.html#catalog-compilation-process>

That's simply the creation of the catalog after code has been applied:
<https://puppet.com/docs/puppet/7/using-puppet-code.html|https://puppet.com/docs/puppet/7/using-puppet-code.html>

Preferably organized into Roles and Profiles:
<https://puppet.com/docs/puppet/7/designing_system_configs_roles_and_profiles.html|https://puppet.com/docs/puppet/7/designing_system_configs_roles_and_profiles.html>

Sometimes from Hiera
<https://puppet.com/docs/puppet/7/hiera.html|https://puppet.com/docs/puppet/7/hiera.html>

And sometimes from an ENC:
<https://puppet.com/docs/puppet/7/nodes_external.html#external-node-classifiers|https://puppet.com/docs/puppet/7/nodes_external.html#external-node-classifiers>

This is not a “do this and it’ll work” question.  Puppet is an enormous platform made up of multiple tools across multiple domains.  The links I sent you deal with how to look at and deploy puppet code. The link above tells you how it runs on your system and so forth.

Hey all, is there a way to manage the /etc/httpd/conf.d/ssl.conf file via the Apache module? I'm trying to add this line to it `SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1`

Thanks! I added this but I think it needs to be an array instead of a string?`apache::mod::ssl::ssl_protocol: 'all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1'`

I'm using hiera and the syntax :confused:

<https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/params.pp#L758-L762>

it's poorly documented compared to most (because it loads from params)

Hmm I'm getting this errror with that line. `Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Function Call, Failed to parse template apache/mod/ssl.conf.erb:`
  `Filepath: /etc/puppetlabs/code/environments/production/modules/apache/templates/mod/ssl.conf.erb`
  `Line: 43`
  `Detail: undefined method `compact' for "all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1":String`
 `at /etc/puppetlabs/code/environments/production/modules/apache/manifests/mod/ssl.pp:198:16``

you have both stdlib and concat installed?

I'm not sure. Adding brackets `apache::mod::ssl::ssl_protocol: ['all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1']` seemed to work?

oh, yea in hiera it either needs to be `["one", "line"]` or
```key:
  - "multi"
  - "line"```

ah I thought I recalled array were like spaces and indentations in hiera. didn't think it would be so easy

if you one line it, it's the same as json

Ahh yeah, that's the format I was thinking of and am not very good at

if it helps, hiera does have a json loader

Thanks I'll keep it in mind for the future. Thanks again! I believe we got it working.

there are a _lot_ of places I use json over yaml

I'm definitely a lot better at json than yaml

<https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/mod/ssl.pp>