https://www.puppet.com/community logo
Join Slack
Powered by
# puppet
  • d
  • m
    I would check the starttime on the cert to see when it thinks its starting
  • m
    that should give you a clue as to where the process of generation is breaking down
  • s
    This message was deleted.
    m
    n
    +2
    • 5
    • 25
  • n
    hi all, I copy direktory to puppet agent, it include also 
    config files
    , when I run 
    puppet agent -t
    it overwrite my changes. so its possible to overwrite only the Bash files and not config files ? 
    replace => false
    , its for all files so thats why I dont use it. thank you all
    Copy code
    file { 'copy_check_test':
                  ensure             => 'directory',
                  source             => 'puppet:///modules/test_test',
                  path               => '/etc/check_test',
}
  • n
    hi all, I copy direktory to puppet agent, it include also 
    config files
    , when I run 
    puppet agent -t
    it overwrite my changes. so its possible to overwrite only the Bash files and not config files ? 
    replace => false
    , its for all files so thats why I dont use it. thank you all
    Copy code
    file { 'copy_check_test':
                  ensure             => 'directory',
                  source             => 'puppet:///modules/check_test',
                  path               => '/etc/check_test',
}
  • s
    This message was deleted.
    a
    • 2
    • 1
  • t
    Hello! I have the following dependency chains:
    Copy code
    Class['profiles::os::linux::groups']
    ->Class['profiles::os::linux::users']
    ->Class['profiles::os::linux::engops']
    ->Class['profiles::os::linux::dba']
    ->Class['profiles::os::linux::inops']
    ->Class['profiles::os::linux::dev']
    ->Class['profiles::os::linux::authorized_keys']
    ->Class['profiles::os::linux::wcis_directories']

    ####
    # looks like `trust_the_ca` requires the `root` user that's defined in `linux::users` class.
    Class['profiles::os::linux::users']
    ->Class['profiles::os::linux::trust_the_ca']

    ####
    # this chain is for anything dependent on the certifiate authority.
    # Puppet should be able to figure this out.
    Class['profiles::os::linux::trust_the_ca']
    ->Class['profiles::os::linux::logicmonitor']
    ->Class['ivanti']
    ->Class['crowdstrike']
    ->Class['pinn_yubico']
    ->Class['profiles::os::linux::distro']
  • t
    But when i apply the manifest, the resources for 
    profiles::os::linux::distro
    get applied BEFORE the resources for 
    profiles::os::trust_the_ca
  • t
    But I need the 
    trust_the_ca
    to be applied first.
  • t
    When I do a 
    puppet apply -t --debug
    i can see this:
  • t
    Copy code
    Debug: /Stage[main]/Profiles::Os::Linux::Trust_the_ca/before: before to Class[Profiles::Os::Linux::Logicmonitor]
Debug: /Stage[main]/Ca_cert/File[trusted_certs]/notify: notify to Exec[ca_cert_update]
Debug: /Stage[main]/Profiles::Os::Linux::Trust_the_ca/Ca_cert::Ca[ad.company.com_ROOT_CA]/before: before to Ca_cert::Ca[ad.company.com_Intermediate_CA]
Debug: /Stage[main]/Profiles::Os::Linux::Trust_the_ca/Ca_cert::Ca[ad.company.com_Intermediate_CA]/before: before to Ca_cert::Ca[ad.company.com_General_CA]
Debug: /Stage[main]/Profiles::Os::Linux::Trust_the_ca/File[/opt/puppetlabs/puppet/ssl/certs]/notify: notify to Exec[rehash puppetlabs certs]
    Which suggests that the 
    trust_the_ca
    happens before. But the resources actually APPLIED are from that 
    distro
    class.
  • t
    What am I missing? I cannot seem to get the dependencies correct
  • t
    Hello! I have the following dependency chains:
    Copy code
    Class['profiles::os::linux::groups']
    ->Class['profiles::os::linux::users']
    ->Class['profiles::os::linux::engops']
    ->Class['profiles::os::linux::dba']
    ->Class['profiles::os::linux::inops']
    ->Class['profiles::os::linux::dev']
    ->Class['profiles::os::linux::authorized_keys']
    ->Class['profiles::os::linux::wcis_directories']

    ####
    # looks like `trust_the_ca` requires the `root` user that's defined in `linux::users` class.
    Class['profiles::os::linux::users']
    ->Class['profiles::os::linux::trust_the_ca']

    ####
    # this chain is for anything dependent on the certifiate authority.
    # Puppet should be able to figure this out.
    Class['profiles::os::linux::trust_the_ca']
    ->Class['profiles::os::linux::logicmonitor']
    ->Class['ivanti']
    ->Class['crowdstrike']
    ->Class['pinn_yubico']
    ->Class['profiles::os::linux::distro']
  • v
    Output doesn't seem to support that claim, unless I miss something. where do you see resources from 
    profiles::os::linux::distro
    applied ?
  • t
    When I apply it without debug, i see this as the first resource applied:
  • t
    Copy code
    Notice: /Stage[main]/Profiles::Os::Linux::Distro::Redhat/Exec[grab_katello_from_foreftden01]/returns: executed successfully
  • t
    That's from the distro class
  • v
    nope, it's not
  • t
    Well - from the 
    distro::redhat
    class - which is included in the 
    distro
    class
  • t
    Well - from the `distro::redhat `class - which is included in the 
    distro
    class
  • v
    right, but you need to contain it
  • t
    Well - from the 
    distro::redhat
    class - which is included in the 
    distro
    class
  • t
    I don't know what you mean
  • v
    otherwise puppet free to apply it
  • v
    read about contain function
  • v
    basically,
  • v
    Copy code
    class profile::os::linux::distro {
  contain profile::os::linux::distro::redhat
  • v
    that way, redhat class resources will be treated as they were defined in the distro class
  • v
    otherwise there is no ordering for redhat class resources in place
1...277278279...428Latest