@natemccurdy thank you!

see if this works, I am not 100% sure

file { '/etc/big_dir/specific.txt':
  ensure => file,
  audit  => 'content',
  notify => Service['some-service'],
}

I think that’ll override the automatically generated resource from the recursive directory, thus leaving it without any content.

oh, interesting @vchepkov. off to the docs to read up on the

audit

param. TIL

hi guys

This message was deleted.

This message was deleted.

unless you maintain module

snmp

class foo (
  $bar
) {
  notice($bar)
}

and lookup process will look for hiera key

foo::bar

I tried to manually change the archive_files = false on a particular host as it's failing to backup for some reason. I have 10 other hosts working fine and the only real disctintion for this host which can't backup changed files to the other 10 or so that work is this hos is FIPS enabled. Do I figured I would try to just turn off the archive function for this host but changing the puppet.conf didn't seem to stop it from trying. Any suggestions?

any good resource for helping me decide between putting resources like apt::pin, apt::source, logrotate::rule in a profile, or in hieradata?

This message was deleted.

This message was deleted.

Has anyone used LastPass (Enterprise) for credential storage for passwords to be used in a Puppet manifest/template? We currently use Vault (

petems/hiera_vault

module), but we may be switching our primary password storage to LastPass, so I am interested in other options. Types of things we do with this integration: • Make sure each machine's root account has a password matching the random one stored in Vault • Put database connection passwords in application config files

This message was deleted.

This message was deleted.

This message was deleted.

and maybe

journalctl --unit loki -fn 150

businessparrot 🧑‍🏫Puppet Forge is about to start up in #CFD8Z9A4T

I'm going to be the odd man out here and recommend you put everything in your hiera data. Keep your company logic separate from your code. Yes, do a "include ::logrotate" and "create_resources(logrotate::rule, $my_logrotate_hash) in your profile. In my environment I call the profile where all common code/properties are defined "base.pp".

Hey 🙂 Has one of you managed to automate puppetlabs-mysql with SSL certificates? Especially interested how you might have solved the certificate sharing between primary and replicas.

See the

puppetlabs-mysql

module at https://forge.puppet.com/puppetlabs/mysql?src=slack&channel=puppet

Hi team, I want to uninstall puppet agent from my linux server. I am trying /opt/puppetlabs/bin/puppet-enterprise-uninstaller command . Its not available there. Are there any other ways to remove puppet agent.

This message was deleted.

or whatever package manager you use

That uninstaller is for PE instalations

This message was deleted.

message has been deleted

my puppet ca cert got expired and I was able to renew it successfully. We have lot of clients that needs a new cert using this CA. is there a way to force generate the certs on the clients ? Removing the contents from ssl folder and restarting the puppet agent worked, but wanted to know if there is a better procedure?

Before I make a fool of myself at Voxpupuli Chrony .... I'm doing security compliance (Qualys, CIS, etc) and I'm getting dinged on /etc/sysconfig/chrony not having OPTIONS='-u chrony' to ensure that the chrony daemon runs as the chrony user. Something in my brain tells me that /etc/sysconfig/chrony is deprecated (I'm on RHEL6 through 8 ). I have a need to manage the /etc/sysconfig/chrony file in order to pass compliance audits but before I do the work I wanted to know how/if you're meeting this compliance item (if at all) and if I should submit a change to the Voxpupuli project.