Puppet - Revision history

Admin: /* WHAT */

2014-09-07T18:59:07Z

WHAT

@@ Line 59: / Line 59: @@
 firewall-cmd --zone=public --permanent --add-port=8140/tcp # puppet master
 systemctl restart firewalld.service
 </source>

2014-09-07T18:37:59Z

WHAT

← Older revision		Revision as of 21:37, 7 September 2014
Line 5:		Line 5:
	You really really really want at least 2Gb of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )		You really really really want at least 2Gb of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )

	Disable your ipv6 if you don't use it [http://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee How to disable ipv6 on CentOS 7]		Disable your ipv6 if you don't use it [http://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee How to disable ipv6 on CentOS 7] to which I'd add to do this for the named server ( also don't forget to disable the listen ::1 and stuff from /etc/named.conf )
			<source lang="bash">
			echo 'OPTIONS="-4"' >> /etc/sysconfig/named # so it won't resolve ipv6 addresses
			systemctl restart named.service
			</source>

	Make sure all your dns works right ( aliases pointing to master, dns for the agents and so on )		Make sure all your dns works right ( aliases pointing to master, dns for the agents and so on )

2014-09-07T08:39:47Z

WHAT

← Older revision		Revision as of 11:39, 7 September 2014
Line 3:		Line 3:
	==WHAT==		==WHAT==

	You really really really want at least ~~1Gb~~ of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )		You really really really want at least 2Gb of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )

	Disable your ipv6 if you don't use it [http://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee How to disable ipv6 on CentOS 7]		Disable your ipv6 if you don't use it [http://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee How to disable ipv6 on CentOS 7]

2014-09-07T08:39:09Z

WHAT

← Older revision		Revision as of 11:39, 7 September 2014
Line 52:		Line 52:
	firewall-cmd --zone=public --permanent --add-port=3000/tcp # the ruby installer		firewall-cmd --zone=public --permanent --add-port=3000/tcp # the ruby installer
	firewall-cmd --zone=public --permanent --add-port=443/tcp # the dashboard		firewall-cmd --zone=public --permanent --add-port=443/tcp # the dashboard
	firewall-cmd --zone=public --permanent --add-port=8081/tcp		firewall-cmd --zone=public --permanent --add-port=8081/tcp # it only seems to listen on 127.0.0.1 though ...
	firewall-cmd --zone=public --permanent --add-port=8140/tcp # puppet master		firewall-cmd --zone=public --permanent --add-port=8140/tcp # puppet master
	systemctl restart firewalld.service		systemctl restart firewalld.service
	</source>		</source>

2014-09-07T08:30:12Z

WHAT

← Older revision		Revision as of 11:30, 7 September 2014
Line 35:		Line 35:
	<source lang="bash">		<source lang="bash">
	adduser -m puppet		adduser -m puppet
	passwd puppet ( and set a password if you're only allowing sudo with password, it'll also be used if the ssh is with password auth )		passwd puppet # ( and set a password if you're only allowing sudo with password, it'll also be used if the ssh is with password auth )
	genkey		genkey
	mkdir -p /home/puppet/.ssh/		mkdir -p /home/puppet/.ssh/

2014-09-07T08:29:12Z

WHAT

← Older revision		Revision as of 11:29, 7 September 2014
Line 52:		Line 52:
	firewall-cmd --zone=public --permanent --add-port=3000/tcp # the ruby installer		firewall-cmd --zone=public --permanent --add-port=3000/tcp # the ruby installer
	firewall-cmd --zone=public --permanent --add-port=443/tcp # the dashboard		firewall-cmd --zone=public --permanent --add-port=443/tcp # the dashboard
			firewall-cmd --zone=public --permanent --add-port=8081/tcp
	firewall-cmd --zone=public --permanent --add-port=8140/tcp # puppet master		firewall-cmd --zone=public --permanent --add-port=8140/tcp # puppet master
	systemctl restart firewalld.service		systemctl restart firewalld.service
	</source>		</source>

2014-09-07T08:13:01Z

WHAT

← Older revision		Revision as of 11:13, 7 September 2014
Line 42:		Line 42:
	chmod 700 /home/puppet/.ssh/		chmod 700 /home/puppet/.ssh/
	chmod 600 /home/puppet/.ssh/authorized_keys		chmod 600 /home/puppet/.ssh/authorized_keys
			usermod -a -G wheel puppet
	</source>		</source>

2014-09-07T08:11:05Z

WHAT

← Older revision		Revision as of 11:11, 7 September 2014
Line 4:		Line 4:

	You really really really want at least 1Gb of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )		You really really really want at least 1Gb of ram assigned to the virtual machine ( the java stuff hits the swap hard ! )

			Disable your ipv6 if you don't use it [http://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee How to disable ipv6 on CentOS 7]

			Make sure all your dns works right ( aliases pointing to master, dns for the agents and so on )

	Create your postgresql users before hand ! ( 3.3.1 seems to only support postgres and they won't support mysql in the future )		Create your postgresql users before hand ! ( 3.3.1 seems to only support postgres and they won't support mysql in the future )

2014-09-07T08:06:58Z

WHAT

← Older revision		Revision as of 11:06, 7 September 2014
Line 20:		Line 20:
	<source lang="bash">		<source lang="bash">
	tail -n 3 /var/lib/pgsql/data/pg_hba.conf		tail -n 3 /var/lib/pgsql/data/pg_hba.conf
	#host pe-puppetdb pe-puppetdb 127.0.0.1/32 md5
	#host console console 127.0.0.1/32 md5		host pe-puppetdb pe-puppetdb 127.0.0.1/32 md5
	#host console-auth console-auth 127.0.0.1/32 md5		host console console 127.0.0.1/32 md5
			host console-auth console-auth 127.0.0.1/32 md5

	systemctl restart postgresql.service		systemctl restart postgresql.service
	</source>		</source>

2014-09-07T08:06:33Z

WHAT

← Older revision		Revision as of 11:06, 7 September 2014
Line 19:		Line 19:

	<source lang="bash">		<source lang="bash">
	# tail -n 3 /var/lib/pgsql/data/pg_hba.conf		tail -n 3 /var/lib/pgsql/data/pg_hba.conf
	host pe-puppetdb pe-puppetdb 127.0.0.1/32 md5		#host pe-puppetdb pe-puppetdb 127.0.0.1/32 md5
	host console console 127.0.0.1/32 md5		#host console console 127.0.0.1/32 md5
	host console-auth console-auth 127.0.0.1/32 md5		#host console-auth console-auth 127.0.0.1/32 md5
	# systemctl restart postgresql.service		systemctl restart postgresql.service
	</source>		</source>

	You'll neet to create an user with sudo privileges !		You'll neet to create an user with sudo privileges !
	<source lang="bash">		<source lang="bash">
	# adduser -m puppet		adduser -m puppet
	# passwd puppet ( and set a password if you're only allowing sudo with password, it'll also be used if the ssh is with password auth )		passwd puppet ( and set a password if you're only allowing sudo with password, it'll also be used if the ssh is with password auth )
	# genkey		genkey
	# mkdir -p /home/puppet/.ssh/		mkdir -p /home/puppet/.ssh/
	# cp /root/.ssh/id_rsa.pub /home/puppet/.ssh/authorized_keys		cp /root/.ssh/id_rsa.pub /home/puppet/.ssh/authorized_keys
	# chown -R puppet:puppet /home/puppet/.ssh/		chown -R puppet:puppet /home/puppet/.ssh/
	# chmod 700 /home/puppet/.ssh/		chmod 700 /home/puppet/.ssh/
	# chmod 600 /home/puppet/.ssh/authorized_keys		chmod 600 /home/puppet/.ssh/authorized_keys
	</source>		</source>