sprintf ?

sprintf ?

hey all, anyone had any experience with PE where after the install and first couple puppet agent runs, the classes for the infrastructure node groups are 'missing' or grayed out?

yep. most likely you put your nodes in environment without PE classes

This message was deleted.

So, the

sprintf()

method has a problem in that in only adds padding if the value is longer than the specified pad length. Use Henrik's string slicing solution instead to always add the padding. For example:

$ puppet apply slack.pp
Notice: Scope(Class[main]): hello world
Notice: Scope(Class[main]): hello world
Notice: Scope(Class[main]): length of lots_of_spaces: 100
Notice: Scope(Class[main]):     hello world

does anyone have a blurb about the encryption standards for hiera-eyaml?

https://github.com/voxpupuli/hiera-eyaml/blob/v3.3.0/lib/hiera/backend/eyaml/encryptors/pkcs7.rb#L57-L58 Standard PKCS7, AES 256 bit, CBC encryption

https://github.com/voxpupuli/hiera-eyaml/blob/v3.3.0/lib/hiera/backend/eyaml/encryptors/pkcs7.rb#L57-L58 Standard PKCS7, AES 256 bit, CBC encryption

I take patches if you want to change it :) or create a hiera-eyaml plugin

Last time I looked,

OpenSSL::PKCS7

didn't understand anything stronger than CBC (e.g. GCM). If that's still the case, patches need to go to Ruby its self 😉

But also, if someone is running an Oracle attack on your hiera-eyaml data you've got much bigger problems.

But also, if someone is running an Oracle attack on your hiera-eyaml data you've got much bigger problems.

Because if they can modify eyaml data, they've got some degree of access to control repo content and could likely just add a

notice()

to a manifest that logs out the decrypted value. Or worse.

Because if they can modify eyaml data, they've got some degree of access to control repo content and could likely just add a

notice()

to a manifest that logs out the decrypted value. Or worse.

wat Unknown Puppet subcommand 'cert' ?? [root@puppetserver ~]# puppet cert sign pupcli.local Error: Unknown Puppet subcommand 'cert'

there's no 'cert' or even a 'ca' to sign my client cert? Available subcommands: Common: agent The puppet agent daemon apply Apply Puppet manifests locally config Interact with Puppet's settings. help Display Puppet help. lookup Interactive Hiera lookup module Creates, installs and searches for modules on the Puppet Forge. resource The resource abstraction layer shell

Fresh install of puppetserver and client, initial cert handshake and can't sign the cert. I'm such a n00b

puppetserver ca

and I would use puppet to install puppetserver

This message was deleted.

See the

theforeman-puppet

module at https://forge.puppet.com/theforeman/puppet?src=slack&channel=puppet

[root@puppetserver ~]# puppetserver ca sign --certname pupcli.local Successfully signed certificate request for pupcli.local many thanks man!

waiting 🧑‍🏫PE Console is about to start up in #CFD8Z9A4T

I don't think I can use the module, I barely got it installed on freebsd LOL

For those times when “make world” doesn’t help you….

For those times when “make world” doesn’t help you….

-- Logs begin at Thu 2023-01-26 21:25:38 UTC, end at Thu 2023-01-26 22:14:57 UTC. --
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Execution error (IllegalArgumentException) at puppetlabs.trapperkeeper.services.webserver.jetty9-config/fn$get-x509s-from-ssl-cert-pem$fn (jetty9_config.clj:246).
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Unable to open 'ssl-cert' file: /etc/puppetlabs/puppet/ssl/certs/master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net.pem
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Full report at:
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: /tmp/clojure-2800691518232323941.edn
Jan 26 22:10:06 Compiler-1 puppetserver[231484]: Background process 231512 exited before start had completed
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Control process exited, code=exited, status=1/FAILURE
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Failed with result 'exit-code'.
Jan 26 22:10:06 Compiler-1 systemd[1]: Failed to start puppetserver Service.
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Scheduled restart job, restart counter is at 533.

On my compiler I'm getting this error when it's trying to start puppetdb. This cert doesn't exist on the system. I have

puppetdb::database_host: '<http://master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net|master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net>'

set for the compiler. Any suggestions?

``` took a dive. (Karma: -1)

-- Logs begin at Thu 2023-01-26 21:25:38 UTC, end at Thu 2023-01-26 22:14:57 UTC. --
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Execution error (IllegalArgumentException) at puppetlabs.trapperkeeper.services.webserver.jetty9-config/fn$get-x509s-from-ssl-cert-pem$fn (jetty9_config.clj:246).
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Unable to open 'ssl-cert' file: /etc/puppetlabs/puppet/ssl/certs/master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net.pem
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: Full report at:
Jan 26 22:10:05 Compiler-1 puppetserver[231512]: /tmp/clojure-2800691518232323941.edn
Jan 26 22:10:06 Compiler-1 puppetserver[231484]: Background process 231512 exited before start had completed
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Control process exited, code=exited, status=1/FAILURE
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Failed with result 'exit-code'.
Jan 26 22:10:06 Compiler-1 systemd[1]: Failed to start puppetserver Service.
Jan 26 22:10:06 Compiler-1 systemd[1]: puppetserver.service: Scheduled restart job, restart counter is at 533.

On my compiler I'm getting this error when it's trying to start puppetdb. This cert doesn't exist on the system. I have

puppetdb::database_host: '<http://master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net|master.ksmxe13yf34ergehjclg4kj1vh.bx.internal.cloudapp.net>'

set for the compiler. Any suggestions?