message has been deleted

This message was deleted.

Hi, whats wrong with this script? doesn't give any error when i run puppet parser validate nor it updates the nodesource.list with latest version when i run puppet on client

exec { 'add_nodejs_16.x_repo':
    command  => 'curl -fsSL <https://deb.nodesource.com/setup_16.x> | sudo -E bash - && sudo apt update && sudo apt-get install -y nodejs',
    provider => 'shell',
    unless   => 'ls -l /etc/apt/sources.list.d/nodesource.list 2>/dev/null',
  }                                                                                                                                                             package { [                                                                                                                                                  'nodejs'                                                                                                                                                   ]:                                                                                                                                                                 ensure  => present,
    require => Exec['apt_update'],
}

Run the agent with the debug flag (

puppet agent -t -d

) and see what it says.

-d

should output all sorts of stuff

you can use

creates => /etc/apt/sources.list.d/nodesource.list

here

@spp yes there is already nodejs12 running and has its repo in /etc/apt/sources.list.d/nodesource.list

Not a Debian expert, but isn there something that can be less hacky?

yumrepo in Redhat world

Hi, we use Puppet for configuration management and now I am looking a task execution tool to automate OS updates. Should I explore Bolt, which looks like going downwards, or Ansible?

This message was deleted.

I would use a proper tool - Satellite / Katello

message has been deleted

Good morning. I’m getting an error with

puppet-ca/v1/certificate_statuses/any_key

. The auth is set to only

get

with the CA’s certname. Do I need to add

put

or

post

for

puppetserver ca sign --all

?

This message was deleted.

message has been deleted

Packer Ah, snapshot, not base image. misread

I agree about Katello being the right option. Specifically, getting setup with proper content views and lifecycle management. It will allow you to push update sets to node groups in a way that ensures that you get exactly the same set of packages in dev -> prod. with the most recent versions of katello you can basically run the entire setup via API (ansible has a set of modules, not sure about other choices)

heh, said exactly the same in thread 🙂

I've got something like 7000 servers on a single node katello instance (that's ancient and painfully broken) but it does that set of steps insanely well

This message was deleted.

(if you use on-demand as the content update style)

Amazon Linux 2022 promisses yumrepo snapshots, we shall see how it is implemented

We have about 50 servers.

the other positive of foreman/katello would be that if you get all the nodes into it, you can run reporting on all the nodes thgrough it

We don't have the manpower to manage a new service, that's why I was looking for a tool instead of a service.

if you really bought in, foreman could also manage all the builds and entire vm lifecycle

that's its actual focus, katello just adds rpm lifecycle to the system lifecycle

I understand 100% but it's not reasonable for us to add the lifecycle management of yet another service.

then I would highly recommend setting up at least a local mirror of the repos and using a cronjob to mirror so that you know when package sets change