I just tested this in the

puppet/puppet-agent-ubuntu

Docker image with

moreutils

installed and the following oneliner:

( puppet apply -t --debug |& ts -i %.S )  <<EOF
class main() {
  notify { 'omg': }
}
EOF

message has been deleted

think i isolated the slowness down to encoretechnologies/puppet-powershellmodule. it might be due to powershell cmdlet crl checks on non-inet computers, lack of proxy. anyway pulled it out since its largely abandonware. thanks all to everyone who gave me the breadcrumbs

This message was deleted.

This message was deleted.

Good morning. I can’t seem to figure out an eyaml problem. On the server, I’ve got my encrypted data and on the puppetserver when I run puppet lookup keystore_pass_enc, it returns the correct lookup. Also when a run puppet apply to the filename, it also works (writes /tmp file with correct data). However, on the agent, when I run puppet agent -t it returns an error decrypting… and permission denied on the private_key.pkcs7.pem file. Trying to figure out why it works manually directly on the server, but when invoked from the agent via puppet agent -t it fails.

👋 Hello, team!

Hi Team,

This message was deleted.

Hi Team, I was trying to manage Redhat SCL mariadb ( rh-mariadb105 ) via puppet module ( https://github.com/puppetlabs/puppetlabs-mysql ) and was trying to configure with different options but still cant get it done. Please someone help me on this. Puppetserver: hostname - puppet.mylabserver.com puppetserver version - puppetserver-6.19.0-1.el7.noarch /etc/puppetlabs/code/environments/production/modules/mysql/metadata.json "name": "puppetlabs-mysql", "version": "13.0.0", site.pp: -------- node '9a67a918185c.mylabserver.com' { class { 'mysql::server': package_name => 'rh-mariadb105-mariadb', package_ensure => '10.5.16-2.el7.x86_64', service_name => 'rh-mariadb105-mariadb', service_provider => 'systemd', root_password => 'UNSET', options => { 'mysqld' => { 'datadir' => '/etc/opt/rh/rh-mariadb105/', 'general_log_file' => '/var/log/mariadb/mariadb.log', 'socket' => '/var/run/mariadb/mariadb.sock', 'log-error' => '/var/log/mariadb/mariadb.log', 'pid-file' => '/var/run/mariadb/mariadb.pid', }, } } } Puppet agent: # hostname 9a67a918185c.mylabserver.com # uname -an Linux 9a67a918185c.mylabserver.com 3.10.0-1160.66.1.el7.x86_64 #1 SMP Wed Apr 27 203434 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux # puppet agent -tv Info: Using environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Retrieving locales Info: Loading facts Info: Caching catalog for 9a67a918185c.mylabserver.com Info: Applying configuration version '1664899320' Notice: /Stage[main]/Mysql:ServerService/Service[mysqld] Dependency Mysql_datadir[/etc/opt/rh/rh-mariadb105/] has failures: true Warning: /Stage[main]/Mysql:ServerService/Service[mysqld] Skipping because of failed dependencies Warning: /Stage[main]/Mysql:ServerService/Exec[wait for mysql socket to open] Skipping because of failed dependencies Warning: /Stage[main]/Mysql:Server:Root_password/Exec[remove install pass]: Skipping because of failed dependencies Warning: /Stage[main]/Mysql:Server/Anchor[mysqlserverend] Skipping because of failed dependencies Error: Could not find a suitable provider for mysql_datadir Notice: Applied catalog in 0.23 seconds

You need to spend some quality time with r10k and Roles & Profiles and control_repo. Having all that in your site.pp will become a completely unmanageable situation

Try this as an example https://github.com/simp/pupmod-simp-ds389/blob/master/manifests/install.pp

Now, as to your question…. I would run

puppet agent -td

to get the full scope of what’s going on during your Puppet run. While we can see that something failed, and then it was a requirement for something that wants to run later, we don’t know exactly what the problem is. Can you run it in debug with

puppet agent -td

so we can see the exact issue?

Now, as to your question…. I would run

puppet agent -td

to get the full scope of what’s going on during your Puppet run. While we can see that something failed, and then it was a requirement for something that wants to run later, we don’t know exactly what the problem is. Can you run it in debug with

puppet agent -td

so we can see the exact issue?

message has been deleted

the way this is defined, it looks like datadir is managed via puppet, but the parent dir does not exist (i.e. nothing created /etc/opt/rh). I'd guess that it did not install the SCL package that you wanted. If you really want mysql to store its data in /etc (yikes!), then you need to make sure that the system can install

rh-mariadb105-mariadb

. But that's just guessing, if you want a better answer, we'd need to see the full debug.

cvquesty, i don't use r10k... i make my site.pp just an include to a sitemodule, then sitemodule has include to every other module. then every other module either applies or doesn't if applicable. can r10k work in a monorepo? I don't use forge repos directly. i clone them, and push to internal repo. then use git submodules. nothing talks to inet.

this is really reminding me of some painful years at a previous company

Greg, I like it actually. It makes for very deterministic configs.

you can deploy that with r10k. but it would also allow you to deploy the ither internal/mirrors modules without the pain of submodules

I use r10k with a monorepo, and I couldn’t imagine deploying the code any other way. r10k isn’t just for fetching modules from the Forge. It makes it super simple to use a feature-branch workflow to test code in Puppet environments. And simplifies getting your Puppet code onto a fleet of dozens of Puppetserver compilers.

I use r10k with a monorepo, and I couldn’t imagine deploying the code any other way. r10k isn’t just for fetching modules from the Forge. It makes it super simple to use a feature-branch workflow to test code in Puppet environments. And simplifies getting your Puppet code onto a fleet of dozens of Puppetserver compilers.

yeah it was just a pain making sure modules were properly installed, etc.

and was very difficult to teach others about, etc.

moving to r10k makes it easy to just point at the r10k docs when people want to know more

but in general i tend to lean towards using community tools that i don't have to document or maintain all by myself

Benchmarked the various methods to create a hash of local users on Windows, and this was the most performant option:

Facter.add(:users) do
  confine kernel: 'windows'
  setcode do
    Hash[
      Puppet::Util::Windows::ADSI::User.map { |u| [u.name, true] }
    ]
  end
end

I'd be curious to know how to configure it in a monorepo. I use a custom autostager we wrote a decade ago that does the staging of git code, now on a nfs vol consumed by n # of docker containers.

I'm in the process of learning puppet and am fighting what appears to be a cert issue? The master itself works fine but any other systems I try to connect to the master are throwing errors like this once i've stamped their cert. The master's name is "vmpuppetmaster01.britanniahome.net" does the "puppet" cn represent the default hostname?, where can I override it if so?

Error: /File[/var/cache/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get issuer certificate): [unable to get issuer certificate for /CN=Puppet CA: <http://vmpuppetmaster01.britanniahome.net|vmpuppetmaster01.britanniahome.net>]