i guess i'll just disable puppet on this node and assume that the server side is safe when it's safe :)

how does the saying go? a secure computer is one that is turned off and all cables are unplugged

yeah well

there's a range of stuff between that and "oh all my servers are all on the internet and here's my telnet root account"

I wonder if in your case a purely local "puppet apply" from a control repo would work, as there you can at least review the diff that is to be executed etc

but your losing a central place for data and exported resources and everything

yeah that's the thing

i kind of like exported resources, in particular :p

I kinda expected that :/

and honestly, puppet apply is kind of a hack

you need the entire git repo copied over, then hack around modules path, you don't get hiera...

why a hack? you have to start somewhere. I recall time when PE was bunch of bash scripts instead of puppet

that was a hack

you can have hiera (that's how the foreman installer works), but yeah you need to do more than just "agent bootstrap"

Puppet bolt is kind of “remote puppet apply”. So no need to copy your git repo around, just push from your laptop :)

I have a control-repo-like setup for my homelab which is driven by Bolt

Though I believe if I put it into an environment then puppetserver would be able to use it as is

Hiera included :)

Hi there, I want to use puppet-vault_lookup plugin to read from Hashicorp Vault. But I also would like to be able to write from Puppet to vault. (Say I create a user, i want puppet to store its password to vault) I may have missed something, but I can't find a module to write to vault 😕 Could you help me with this ? Thanks

See the

puppet-vault_lookup

module at https://forge.puppet.com/puppet/vault_lookup?src=slack&channel=voxpupuli

@Clément LE ROUX the SIMP people have modules to interact with a K/V store and I think they support vault

https://forge.puppet.com/modules/simp/libkv/readme and https://forge.puppet.com/modules/simp/simpkv/readme

where are the github docs that lists the installes software and running services in their ubuntu runners

ah https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners#supported-software

Yury: https://github.com/hercules-team/augeas/pull/691#issuecomment-1512927107 has the reproducer using plain augtool

uh nice

wow!

ty for reporting upstream.. I’m a bit busy with my job these days 😞 k8s and helm are my daily tools now..

I saw some 💩 .. like 15k-lines-long YAML

and my personal favourite is this

requiredDuringSchedulingIgnoredDuringExecution