Puppet on Logan's Nest

Foreman + Puppet autosign.conf doesn't work

Mon, 08 Sep 2014 00:00:00 +0000

Issue: 1. Foreman generates auto sign entry when /provision called first time. (boot loader hit) 2. Once OS is done and call puppet agent run, CSR doesn’t get auto-signed. - stays in ‘pending’ status forever

Puppet Dell iDRAC control

Fri, 04 Jul 2014 00:00:00 +0000

1
2
3
4
5
6
7


if $::manufacturer == 'Dell Inc.' {
 exec { 'Disable DRAC SNMP':
 command =>; 'racadm config -g cfgOobSnmp -o cfgOobSnmpAgentEnable 0',
 path =>; '/opt/dell/srvadmin/sbin:/bin',
 onlyif =>; '/usr/bin/test `/opt/dell/srvadmin/sbin/racadm getconfig -g cfgOobSnmp -o cfgOobSnmpAgentEnable` -eq 1',
 }
}

Yea, I think onlyif bit is not nice.

Generate Bacula client cert/key pair via Puppet

Wed, 28 May 2014 00:00:00 +0000

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18


exec {'generate client key file':
command => '/usr/bin/openssl genrsa -out /bacula/bacula-client.key 2048;chmod 600 /bacula/bacula-client.key',
creates => '/bacula/bacula-client.key',
require => Package['bacula-fd'],
}

exec {'generate client cert file':
command => '/usr/bin/openssl req -new -key /bacula/bacula-client.key -x509 -subj "/C=AU/ST=somewhere/L=somewhere/O=something/CN=something" -out /bacula/bacula-client.cert',
creates => '/bacula/bacula-client.cert',
require => [ Package['bacula-fd'], Exec['generate client key file'], ],
}

exec {'combine client key and cert files':
notify => Service["bacula-fd"],
command => '/bin/cat /bacula/bacula-client.key /bacula/bacula-client.cert > /bacula/bacula-client.pem;chmod 600 /bacula/bacula-client.pem',
creates => '/bacula/bacula-client.pem',
require => [ Package['bacula-fd'], Exec['generate client key file'], Exec['generate client cert file'], ],
}

Would be nicer if I can send them to backup location but doesn’t really matter as there’s master key.