Puppet Community

Huh...that's weird. Haven't seen any issues there so far

<https://github.com/puppetlabs/puppetlabs-inifile/pull/481/checks> and <https://github.com/puppetlabs/puppetlabs-apache/pull/2252/checks> have similar failures

Uhhh....OK, works in beaker :shrug: :trollface:

but maybe it's simply their puppet6-nightly repo which is broken while beaker uses GA repos

Any chance for a review of <https://github.com/voxpupuli/puppet-rhsm/pull/124>

anyone have any tips on how to go about combining the letsencrypt and nginx modules in a way that certs get issued before the tls configs are laid down so that nginx doesn't bomb out saying the cert in the config doesn't exist?

So, does this just mean it takes two runs for a new domain to be fully live?

"depends". usually yes. for the vox pupuli infra we do not create the certs initially via puppet, just renew. for creation we use the command that's listed in the puppet code. in theory you could run that and puppet afterwards, then you only need one run + a manual step

if you create the certs via puppet you need two runs

yes! <https://github.com/voxpupuli/controlrepo/blob/production/site/profiles/manifests/grafana.pp#L117> the letsencrypt module has a fact that exposes all certs. if the certs are present we create the https webserver config

Is it still a bit early to be looking at RHEL 9 support for Puppet modules?

<@U1PC2RAH0> I just want to say thank you for the `puppet-unattended_upgrades` v7.0.0 release.. we just hit the issue with old legacy facts because of missing `lsb-release` package :slightly_smiling_face:

See the `puppet-unattended_upgrades` module at <https://forge.puppet.com/puppet/unattended_upgrades?src=slack&amp;channel=voxpupuli>

yes, the broken packaging on Ubuntu / Puppet not dropping legacy facts is really annoying :(

ah interesting. we saw that in our CI only on Ubuntu 18/Puppet 6 I think

ah! I think the Debian 11 base image we use already contains the lsb-release package, so we don't see the error

I guess we have some minimal image here, that's why no lsb-release package.. (I'm still trying to understand things here) :slightly_smiling_face:

let me know if you need a consultant to clean shit up :D

I'll try to get some donations for voxpopuli though.. you guys are doing amazing job

almalinux/9 is available, probably closer to RHEL9

IMHO the best support is getting involved and adopt modules you(r company) rely on but I have no idea about other ways :)

I've create a basic chart with `helm create` and a patch for environment variable if you want

I haven't checked if we can do beaker testing with almalinux/9 - if we can't it's probably not hard to add but some plumbing may be missing

EL9 works, you just have to specify it as `el-9-x86_64` as well as using `net-ssh` `v7.0.0.beta1`.