why do you want to do that?

On servers with running containers, a restart of the service breaks the containers. Would rather the service just restart the next time the server is restarted.

Eg., iptables…

I had a similar case like that. "fact" updates a file on file system in

/opt/puppetlabs/puppet/cache

, this file is in manifest with

audit => mtime

and service is subscribed to it

sounds like you need to also restart the containers when the service restarts

Hello @daiki.fujimoto.work! A community user has flagged to me that you have been privately messaging members of the Slack with promotional messages. This falls into a gray area around the 'obvious spammers' portion of our community guidelines: Community Guidelines & Code of Conduct | Perforce Puppet Per our three-strike rule, this is the friendly, but public, reminder that this type of behavior with unwanted promotional private messages is against the spirit of this community. I truly hope you can connect with members of the community and get help with your Puppet work. Let us know how we can help!

@ctrl777 has left the channel

@tyler.smle: Job posts are not for this channel. There is a dedicated #C0W1XUVGQ channel if you are looking for a Puppet expert. That said, your post does not appear to be a Puppet-related job posting and is not relevant for this space. I have removed it.

Hi all, I see that this module no longer has a maintainer github.com/sgnl05/sgnl05-sssd Any advice for configuring sssd without this module. And does the module actually need a new maintainer — I would be happy to do that if that's the only issue.

I use simp-sssd

@tyler.smle: You were warned last week that job posts were not for this channel and to use #C0W1XUVGQ. You were also asked to make sure they were Puppet-related job postings. Your message has been deleted and I will be sending you a direct DM per our community guidelines 'Second occurrence' policy. A third 'strike' will require an account ban.

Just boot ‘em

@CVQuesty: I have directly reached out to the user and they have moved their post to #C0W1XUVGQ, and they have updated it to clarify that it is a position requiring Puppet experience. That said, please remember to flag to any admins of any spam-like or other activity that contradicts the community guidelines!

You were already on it when I saw it, so I let you crack the whip. 😄

FYI: Perforce Agentic Gateway (PAG) — free MCP gateway for Puppet + AI clients Sharing this for anyone here running Puppet Open Source, Core, or Enterprise and working with AI coding assistants (Claude Code, Cursor, etc.): Perforce Agentic Gateway (PAG) is a local MCP gateway. Rather than configuring a separate MCP server connection for each tool an AI client uses, the client connects to PAG once, and PAG manages the individual MCP servers behind it — starting/restarting them, and storing credentials in the OS keychain instead of passing secrets through chat. Key details: • Runs locally via

uvx

— no signup or hosted component required, and it's free to use. • It's a general-purpose MCP catalog/gateway; Puppet is one of several servers available from the catalog (others include P4, Delphix, BlazeMeter, etc.) you can also connect any MCP server you want so there is no limitation. • Setup is a one-line

claude mcp add

command, or a small JSON block for

.mcp.json

-based clients. • Repo and docs: github.com/perforce/perforce-agentic-gateway Note on the attached screenshot: the dashboard example was built using PAG — it's generated by describing what you want to an AI client (e.g., Claude) connected through PAG's Puppet MCP server or if you are using Open Source or Core PAG can create a connection to your Puppet servers API. You tell it what data and views you want, and it builds a dashboard around that. The screenshot is just one example (node inventory, compliance score, fleet status, platform health, open issues) to show what's possible — the actual dashboard you'd get depends on what you ask for.

Hi all, I've had this PR that fixes the broken builds on stdlib for a while fyi github.com/puppetlabs/puppetlabs-stdlib/pull/1481

Hello all, i've got an issue with an expired CA on Mom

how can I regenerate the CA without agent issues ?

whats your puppet enterprise/puppet/puppet core/openvox version?

openvox 8

you probably have a higher chance of answers in the openvox slack/IRC (https://voxpupuli.org/connect/). short version is: you can extend the CA if you still have the private key

if you like bolt, you can check https://forge.puppet.com/modules/puppetlabs/ca_extend/plans

or if you like openssl: https://gist.github.com/bastelfreak/ed874f03e7849d35eb8ec832a58da8f3

I'm interested in installing the puppet-summary utility for simple reporting UI. However, it says archived. Do we have any other alternate one ?

there are two web dashboards which present data collected from puppetdb: puppetboard (https://github.com/voxpupuli/puppetboard) and openvoxview (https://github.com/voxpupuli/openvoxview)

puppet enterprise also has a web ui

@IlovPuppet: What type of data are you looking to see? And which version of Puppet are you running?

Hi, I opened this PR github.com/puppetlabs/ruby-pwsh/pull/384 to fix an issue related to string nullification. It was fixed in 2024 but the last commit made this happen again

Greetings, Running puppetserver 7 (7.9.5-2+deb12u1). Whenever openjdk-17-jre-headless gets updated my ENC breaks. Here is what it looks like on the puppetserver (which runs both the agent and server):

Aug 29 12:23:12 puppet-7-2 puppet-agent[2136111]: Unable to fetch my node definition, but the agent run will continue:
Aug 29 12:23:12 puppet-7-2 puppet-agent[2136111]: Error 500 on SERVER: Server Error: Exception while executing '/opt/bin/puppet-enc': Cannot run program "/opt/bin/puppet-enc" (in directory "."): error=0, Failed to exec spawn helper: pid: 2136113, exit value: 1
Aug 29 12:23:15 puppet-7-2 java[2136247]: Incorrect Java version: 17.0.20+8-1-deb12u1-Debian
Aug 29 12:23:15 puppet-7-2 java[2136247]: jspawnhelper version 17.0.20.1+1-1-deb12u1-Debian
Aug 29 12:23:15 puppet-7-2 java[2136247]: This command is not for general use and should only be run as the result of a call to
Aug 29 12:23:15 puppet-7-2 java[2136247]: ProcessBuilder.start() or Runtime.exec() in a java application
Aug 29 12:23:15 puppet-7-2 puppet-agent[2136111]: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Failed when searching for node <http://puppet-7-2.example.com|puppet-7-2.example.com>: Exception while executing '/opt/bin/puppet-enc': Cannot run program "/opt/bin/puppet-enc" (in directory "."): error=0, Failed to exec spawn helper: pid: 2136247, exit value: 1

A simple restart of puppetserver (

systemctl restart puppetserver

) fixes things. I know I can configure apt to restart puppetserver upon package upgrades. Is that the correct solution from the puppetserver's point of view or am I missing a config option that I should be looking at? Thanks for the help!

you can install needsrestart and debian can automatically restart the service on java updates (older puppetserver packages block that in needsrestart. it's at least fixed in openvox-server)