Is the linux package

libselinux-ruby

is required to install for puppet7 to manage selinux policies through puppet?

Puppet DevX Releases Puppet Visual Studio Code (VSCode) Extension 1.5.4 What it is: The Puppet Visual Studio Code (VSCode) extension is a tool designed to enhance the experience of writing and managing Puppet code within Visual Studio Code (VSCode). This is a security release focused on upgrading the Axios dependency to 1.7.5 to resolve high vulnerability CVE-2024-39338 Where you can find it: - https://marketplace.visualstudio.com/items?itemName=puppet.puppet-vscode - https://marketplace.visualstudio.com/items/puppet.puppet-vscode/changelog Key features/changes: • Axios was updated to be => 1.7.5 resolving high vulnerability CVE-2024-39338 Feedback: - https://github.com/puppetlabs/puppet-vscode/issues

PDX folks! I do a weekly happy "hour" at Beermongers starting somewhere around noon. We hack on a few things, we chat about things, we drink a few beers. This week, @smortex is joining us, and you're welcome to join too.

Hi, I’m creating app_vg on my 2 disk /dev/sdb and passing all the lvm data in hiera node.yaml. Since the device names are not persistent and sdb name is being taken by the 1st disk where OS is installed. Therefore, the Vg creation is failing on /dev/sdb. How should we address the issue of inconsistent device name and have Puppet to create the VG on the available disk

Happy birthday @fiddyspence !

Interesting the type docs says https://www.puppet.com/docs/puppet/8/types/file.html#file-attribute-source Puppet determines if file content is synchronized by computing a checksum for the local file and comparing it against the

checksum_value

parameter. If the

checksum_value

parameter is not specified for

puppet

and

file

sources, Puppet computes a checksum based on its

Puppet[:digest_algorithm]

. For

http(s)

sources, Puppet uses the first HTTP header it recognizes out of the following list:

X-Checksum-Sha256

,

X-Checksum-Sha1

,

X-Checksum-Md5

or

Content-MD5

. If the server response does not include one of these headers, Puppet defaults to using the

Last-Modified

header. Puppet updates the local file if the header is newer than the modified time (mtime) of the local file.

☕ DevX Team is about to start up in #CFD8Z9A4T

I am just wondering if I can change the Puppet output of an error message to show more detail and include that of echos with in a bash script inside the Puppet script. So what I am asking is to show more on the output than that of just Puppet. I believe this could be done via

logback.xml

once Puppet Server is installed however, I am trying to do this before Puppet Server is installed. Does anyone have any idea on how this could be done?

hello,

clientversion :	The current version of Puppet agent.
puppetversion :	The current version of Puppet on the node.
aio_agent_version

does anyone know what the differences are between those facts. the text description in the documentation does not make it very clear https://www.puppet.com/docs/puppet/8/lang_facts_builtin_variables

I'd consult the source: • https://github.com/search?q=repo%3Apuppetlabs%2Ffacter+aio_agent_version&type=code • https://github.com/search?q=repo%3Apuppetlabs%2Ffacter+puppetversion&type=code • https://github.com/puppetlabs/puppet/blob/b7f89c426f97fb03a2de884e5372d0ab0edf5c06/lib/puppet/node/facts.rb#L32 so seems like

clientversion

and

puppetversion

are the same, and

aio_agent_version

exists if puppet is installed from an all-in-one package

great, thank you.

uhm. aio triggers async-io not all-in-one for me

Hi guys, I noticed that in RHEL name of disks are changed after reboots. E.g. /dev/sda can become/dev/sdb. Official documentation says that I should use UUID or another identification to point to the correct disk. My question is: if my puppet code use lvm module (https://forge.puppetlabs.com/modules/puppetlabs/lvm/readme). Can I use /dev/disk/by-path as the title for physical_volume resource? (To make sure that the correct disk is chosen). Or how do you do it?

I would use a different name

mhm ohr maybe not, not sure right now 😄

the type has a

name

attribute that you can set if you want

Hello all (#C0W298S9G)! I set up a separate CA server in my puppet infrastructure. All of the certs are present (meaning certs for compilers, master, etc.) and signed on the CA server but my compilers will not connect to the master. Please read the error below

Debug: Starting connection for https://<master.server>:8140
Error: Could not retrieve catalog from remote server: certificate verify failed [certificate revoked for CN=<master.server>]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Debug: Resolving service 'report' using Puppet::HTTP::Resolver::Settings
Debug: Creating new connection for https://<master.server>:8140
Debug: Starting connection for https://<master.server>:8140
Error: Could not send report: certificate verify failed [certificate revoked for CN=<master.server>]

so you've a server with foreman+puppetserver running and that acts as a CA? Does the puppet agent work on that?

question ... i've got a

Boolean

parameter which has existed for 3-4 versions of our software, but now needs to not exist in hiera for the next version, i.e. if it does exist the code should

fail()

... i've tried changing it from

Boolean $x = false

to

Optional[Boolean] $x = undef

, but the

if ( defined($x) ) {

check in the code is throwing the error

'defined' parameter 'vals' expects a value of type String or Type, got Undef

... is there a normal pattern to check for whether a parameter is defined or not, regardless of the type? (this one is a

Boolean

but i have 3-4 others that are also being deprecated, some

String

and one

Integer

)

new question ... under PE 2016.2.0 (i know, i know), if

template()

encounters a value in a substitution tag in a template which doesn't exist as a variable, it throws the most UN-helpful error message i've ever seen ... is there any way to trick it into giving me any more useful information, like the line number within the template, or the symbol it wasn't able to evaluate? the only thing it's ever given me is something like

Detail: integer 10796184562 too big to convert to 'int'

goodnews 🧑‍🏫PE Console is about to start up in #CFD8Z9A4T

Question regarding postgresql 14.x database bloat with PuppetDB 8.6.0. I'm running PuppetDB 8.6.0 on Alma 9 and postgresql 14 on Ubuntu 22.04. I have noticed that the database keeps consuming more file system resources. Not sure if I should blame postgresql 14 or Puppet 8 as I did not have this issue 4 months back when running Puppet 7 and postgresql 12. I was looking at the PuppetDB dashboard and it appears that each puppet agent run results in facts being updated as the catalog count is 0.0%. I'm going to have to run a vacuum full on my postgresql server tonight. This is the second time in 6 weeks. Not sure what the deal is. My test setup has 1,000 fewer servers and is only 1/2 the size. Not sure if this is due to business partner creating more churn in production via deploying new servers and destroying old more frequently there. Or maybe puppet code in prod generating more facts. Thoughts?

FYI. puppet 8.8.1 breaks SELinux context management. reverting to 8.7.0 fixes it