https://www.puppet.com/community logo
Join Slack
Powered by
# voxpupuli
  • t
    If you need something a bit more interesting for munging existing (or creating if not existing) resources https://github.com/simp/pupmod-simp-deferred_resources/
  • t
    If you need something a bit more interesting for munging existing (or creating if not existing) resources https://github.com/simp/pupmod-simp-deferred_resources/
  • t
    It's to be used carefully, but if you need it, you need it
  • v
    ewoud: Zhenech how good is your knowledge about AES?
  • v
  • v
    tl;dr takes a string, encrypts it with aes-128-cfb and uses the agent client cert for that. agent decrypts it
  • s
    This message was deleted.
    🙈 1
    b
    b
    • 3
    • 3
  • v
    bastelfreak, is "avoid it like a plague" counted as "knowledge"
    🍌 1
  • v
    that's my stand as well
  • v
    and my CS degree was some time ago :D
  • v
    so it would help to have an identical IV, at least per agent (knowing that it would be less secure)
  • v
    my knowledge is mostly "leave it to experts and use libraries where possible"
  • v
    that's a much nicer wording of mine :)
  • a
    I have a hacked version that plays nicely with catalog-diff. https://gist.github.com/alexjfisher/b8ce5f388c8ac320cd4e80d58f83b4a9
  • b
    why do you call 
    .encrypt()
    twice?
  • b
    mhm didn't the patch look different the last time you posted it
  • a
    Sorry, my bad. Copied from a diff view in bitbucket. The first instance is a line I removed! Let me fix that.
  • a
    Meanwhile... I think I'm happy with https://github.com/voxpupuli/puppet-grafana/pull/301 now.
  • a
    Meanwhile... I think I'm happy with https://github.com/voxpupuli/puppet-grafana/pull/301 now.
  • b
    fwiw, it should be comparing the unencrypted values, not the encrypted form. https://github.com/binford2k/binford2k-node_encrypt/blob/main/lib/puppet_x/binford2k/node_encrypt.rb#L98
  • j
    Looks like the console gem was fixed and the problematic release deleted from rubygems: https://github.com/socketry/console/issues/35
  • j
    Looks like the console gem was fixed and the problematic release deleted from rubygems: https://github.com/socketry/console/issues/35
  • v
    hmm, I just found out the hard way: passing a command as an array is a Puppet 6 feature
  • v
    anarcat: do you know if anyone is producing backports of Puppet 6+ for Debian 11?
  • v
    I do see testing is at least more up to date (7.16 now)
  • v
    ewoud: no
  • v
    ewoud: i doubt anyone is working on debian.org packages for Puppet 6 at all
  • v
    we're a small team working on puppet 7 right now
  • v
    well, I don't care about Puppet 6 specifically, I just want > 5
  • v
    lavamind got the agent 7 in unstable/testing, and he just uploaded facter 4 to unstable too
1...154155156...648Latest