there are some more typos, but reporting them via irc is tidious

https://github.com/bastelfreak/cfgmgmtcamp2025/blob/main/ignite.html you can of course submit a PR!

bastelfreak: do you want to link to github & opencollective directly or to https://voxpupuli.org/sponsoring/?

Ah good idea

I received an email reply to my first message to NLnet. It's too late at this point, but he wrote me that he'll be at my office on Feb 27.... this world is just too small ... By that day we may have already received a feedback, but now I'm going to reply, and explain that we've already applied. Is there any message that you would like me to relay? p.s. I don't have IRC at the moment, as I'm traveling to UK.

Massimiliano; please inform him that I applied using my name and the openvox project

I will do it. It should be enough.

and that both binford2k and I will be at FOSDEM, at least to say hello but will happily elaborate anything while there

^^^ that too :-D

btw, on trusted publishing just as I was experimenting with it they released an API for it: https://github.com/rubygems/rubygems.org/issues/4309#issuecomment-2613815246

I'm now chasing the API documentation :)

hello, I'm curious if anyone, most or all folks here use an ENC to enforce a particular environment (eg. production)

not me.

we're gradually switching to a development model where most features in the puppet environment are brought in via branches, but the process is annoying where you've got to also make commits to the ENC to switch so-and-so node to the ephemneral test environment for testing

a long time ago when I still ran Puppet in production at $employer I struggled with that and hacked in an option to strip the enviroment: https://github.com/theforeman/puppet-puppetserver_foreman/blob/29c46478bfab2451f893b3e42d72cbbe8dfcbf4f/files/enc.rb#L453-L461

so a common workflow was to have the production servers enforce it, but have a server that didn't (trusting the client); then you can run puppet agent --server dev.example.com --environment if I recall it correctly

thanks

ewww?

ewoud: that's how many of my customers use it

we run separate puppetservers per environment, so all agents use "production"

anarcat: "ewww?" ? care to expand ?

lavamind: i dunno, that sounds like a huge hack, kind of obscure

kjetilho: that doesn't sound like environments at all :)

at that point, you don't need environments, you just switch between puppet servers

yes

and one has to wonder how the keys get split up there, sounds dangerous

i dunno, eww

i don't get a warm fuzzy feeling about that solution

would be a more polite way to state it

well, we started doing this when Puppet's environment isolation was ... non-existant