HowTo/InstallPuppetClient - Revision history

Eadam: /* Useful links */

2012-10-18T12:29:16Z

Useful links

Eadam at 12:29, 18 October 2012

2012-10-18T12:29:00Z

Eadam: /* CentOS / RHEL */

2012-10-18T12:28:22Z

CentOS / RHEL

Eadam at 14:29, 16 October 2012

2012-10-16T14:29:24Z

Eadam at 14:28, 16 October 2012

2012-10-16T14:28:26Z

Eadam at 14:27, 16 October 2012

2012-10-16T14:27:27Z

Eadam: Created page with "== Puppet Client Installation and Configuration == === On the server - Preparation === - Add the iptables rules to allow port 8140 for the new client: Example (you need to ..."

2012-10-16T14:26:25Z

Created page with "== Puppet Client Installation and Configuration == === On the server - Preparation === - Add the iptables rules to allow port 8140 for the new client: Example (you need to ..."

New page

== Puppet Client Installation and Configuration ==

=== On the server - Preparation ===

- Add the iptables rules to allow port 8140 for the new client:

Example (you need to change IP and insert position):
<verbatim>
iptables -I INPUT 8 -s 188.165.38.75 -m tcp -p tcp --dport 8140 -j ACCEPT
</verbatim>

=== Client side ===

==== CentOS / RHEL ====

In this doc, we assume the master is located at puppet.winsoft-international.com

- [[Public.EPEL][Add EPEL]]

- (Optional: only if latest release required) Add the puppet repo:

vim /etc/yum.repos.d/puppet.repo=
<verbatim>
[puppetlabs]
name=Puppet Labs Packages
baseurl=http://yum.puppetlabs.com/el/6/products/x86_64/
enabled=1
gpgcheck=0
[puppetlabs2]
name=Puppet Labs Packages Deps
baseurl=http://yum.puppetlabs.com/el/6/dependencies/x86_64/
enabled=1
gpgcheck=0
</verbatim>

- Install puppet
<verbatim>
yum install -y puppet
chkconfig puppet on
</verbatim>

- Make sure the hostname is fully qualified, eg 'antares3.winsoft-international.com' and not just 'antares3'

- Edit configuration file =/etc/puppet/puppet.conf= to have:

<verbatim>
[main]
logdir = /var/log/puppet
rundir = /var/run/puppet
ssldir = $vardir/ssl

[agent]
classfile = $vardir/classes.txt
localconfig = $vardir/localconfig
server = puppet.winsoft.fr
report = true
pluginsync = true
</verbatim>

- Register with the master

<verbatim>
puppetd --waitforcert 30 --server puppet.winsoft.fr -v
</verbatim>

==== Debian ====

- Install puppet

<verbatim>
apt-get install puppet
</verbatim>

- Edit configuration file =/etc/puppet/puppet.conf= to have:

<verbatim>
[main]
logdir = /var/log/puppet
rundir = /var/run/puppet
vardir = /var/lib/puppet
ssldir = $vardir/ssl
factpath = $vardir/lib/facter
templatedir = $confdir/templates

[agent]
classfile = $vardir/classes.txt
localconfig = $vardir/localconfig
server = puppet.winsoft.fr
report = true
pluginsync = true
</verbatim>

- Register with the master

<verbatim>
puppetd --waitforcert 30 --server puppet.winsoft.fr -v
</verbatim>

=== On the server - Finalization ===

- Allow the new client:

First, list requests:
<verbatim>
puppetca -l
</verbatim>

Select the hostname of the wanted server and allow it:
<verbatim>
puppetca -s <hostname>
</verbatim>

You're done. The client is registered and will apply the required configuration.

=== Troubleshooting ===

==== Installation issues ====

If the installation of the puppet package fails because of an error related to 'ruby(selinux)', you need to add the 'optional' software channel in redhat.

==== /var/log/messages ====

- If you get 'Could not request certificate: getaddrinfo: Name or service not known', you may need to add the following line in =/etc/puppet/puppet.conf= under the '[agent]' section:
<verbatim>
server = puppet.winsoft.fr
</verbatim>

==== Useful links ====

- General issues: [[http://docs.puppetlabs.com/guides/troubleshooting.html]]

- Certificate issues: [[http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security]]

← Older revision		Revision as of 12:29, 18 October 2012
Line 126:		Line 126:
	- [http://docs.puppetlabs.com/guides/troubleshooting.html General issues]		- [http://docs.puppetlabs.com/guides/troubleshooting.html General issues]

−	- ~~Certificate issues: [~~[http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security]]	+	- [http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security Certificate issues]

@@ Line 14: / Line 14: @@
 ==== CentOS / RHEL ====
-In this doc, we assume the master is located at puppet.winsoft-international.com
+In this doc, we assume the master is located at puppet.lunasys.fr
 - [[Public.EPEL][Add EPEL]]
@@ Line 120: / Line 120: @@
 - If you get 'Could not request certificate: getaddrinfo: Name or service not known', you may need to add the following line in /etc/puppet/puppet.conf under the '[agent]' section:
-<pre>
+ server = puppet.lunasys.fr
 ==== Useful links ====

@@ Line 124: / Line 124: @@
 ==== Useful links ====
-- General issues: [[http://docs.puppetlabs.com/guides/troubleshooting.html]]
+- [http://docs.puppetlabs.com/guides/troubleshooting.html General issues]
 - Certificate issues: [[http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security]]

@@ Line 6: / Line 6: @@
 Example (you need to change IP and insert position):
-<verbatim>
+<pre>
 iptables -I INPUT 8 -s 188.165.38.75 -m tcp -p tcp --dport 8140 -j ACCEPT
-</verbatim>
+</pre>
 === Client side ===
@@ Line 21: / Line 21: @@
   vim /etc/yum.repos.d/puppet.repo
-<verbatim>
+<pre>
 [puppetlabs]
 name=Puppet Labs Packages
@@ Line 32: / Line 32: @@
 enabled=1
 gpgcheck=0
-</verbatim>
+</pre>
 - Install puppet
-<verbatim>
+<pre>
 yum install -y puppet
 chkconfig puppet on
-</verbatim>
+</pre>
 - Make sure the hostname is fully qualified, eg 'yuka.lunasys.fr' and not just 'yuka'
@@ Line 44: / Line 44: @@
 - Edit configuration file /etc/puppet/puppet.conf to have:
-<verbatim>
+<pre>
 [main]
      logdir = /var/log/puppet
@@ Line 56: / Line 56: @@
      report = true
      pluginsync = true
-</verbatim>
+</pre>
 - Register with the master
-<verbatim>
+<pre>
 puppetd --waitforcert 30 --server puppet.lunasys.fr -v
-</verbatim>
+</pre>
 ==== Debian ====
@@ Line 68: / Line 68: @@
 - Install puppet
-<verbatim>
+<pre>
 apt-get install puppet
-</verbatim>
+</pre>
 - Edit configuration file =/etc/puppet/puppet.conf= to have:
-<verbatim>
+<pre>
 [main]
      logdir = /var/log/puppet
@@ Line 89: / Line 89: @@
      report = true
      pluginsync = true
-</verbatim>
+</pre>
 - Register with the master
-<verbatim>
+<pre>
 puppetd --waitforcert 30 --server puppet.lunasys.fr -v
-</verbatim>
+</pre>
 === On the server - Finalization ===
@@ Line 102: / Line 102: @@
 First, list requests:
-<verbatim>
+ puppetca -l
 Select the hostname of the wanted server and allow it:
-<verbatim>
+ puppetca -s <hostname>
 puppetca -s <hostname>
 You're done. The client is registered and will apply the required configuration.
@@ Line 123: / Line 120: @@
 - If you get 'Could not request certificate: getaddrinfo: Name or service not known', you may need to add the following line in /etc/puppet/puppet.conf under the '[agent]' section:
-<verbatim>
+<pre>
 server = puppet.winsoft.fr
-</verbatim>
+</pre>
 ==== Useful links ====