QCLUG Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Presentation ======

{{wiki/qclug_presentations/puppet-overview-131204211724-phpapp02.pdf}}

====== Puppet Demonstration Steps ======

Step 1: Add the Puppet Repository\\
Step 2: Install Puppet\\
Step 3: Configure the Puppet Master\\
Step 4: Configure a Puppet agent\\
Step 5: Apply Puppet Code

===== Prerequisites =====
  - Master/Agent requires at least two servers, masterless requires only one
  - Master/Agent require DNS to be configured for SSL certificate signing purposes

===== Installing Open Source Puppet =====

Documentation Link: https://docs.puppetlabs.com/guides/install_puppet/install_debian_ubuntu.html

==== Add the Puppet Repository ====
<code>
wget http://apt.puppetlabs.com/puppetlabs-release-wheezy.deb
dpkg -i puppetlabs-release-wheezy.deb
apt-get update
</code>

==== Install Puppet on the Puppet Master Server ====
<code>
apt-get install puppetmaster-passenger
</code>

==== Install the Puppet Agent ====
<code>
apt-get install puppet
</code>

===== Configuring the Puppet Master =====

Add the following to /etc/puppet/puppet.conf under [main] on the Puppet Master:
<code>
[main]
dns_alt_names = pupmaster.pcdomain.pvt,pupmaster
</code>

Since this will be the only Master in the deployment, it will become the CA.
First stop Apache:
<code>
service apache2 stop
</code>

Next, run the following command to kick off the SSL cert generation:
<code>
puppet master --verbose --no-daemonize
</code>

Type ctrl-C to kill the process once it says:
<code>
Notice: Starting Puppet master version <VERSION>
</code>

Add some Puppet Master specific settings under [master]:
<code>
[master]
always_cache_features = true
environment_timeout = unlimited
environmentpath = $confdir/environments
basemodulepath = /etc/puppet/modules
ca = true
</code>

Comment the following setting as it is now deprecated:
<code>
[main]
#templatedir = $confdir/templates
</code>

Start the Apache service
<code>
service apache2 start
</code>
===== Set up your production environment =====

To see the location where your modules will be stored run the following command:
<code>
puppet config print manifest --section master --environment production
</code>

This should output the following directory:
<code>
/etc/puppet/environments/production/manifests
</code>

This directory does not currently exist so you must create it:
<code>
mkdir -p /etc/puppet/environments/production/manifests
</code>

==== Classify a node ====

Create the main manifest located in /etc/puppet/environments/production/manifests/site.pp for simple node classification:
<code>
node 'pupagent.pcdomain.pvt' {
  include roles::home::server
}
</code>

==== Create a module ====

=== Roles ===
A role is simply a module that includes other modules. More specifically, a role includes profile modules.

To create the roles::home::server module you must create a file called server.pp located in /etc/puppet/environments/production/modules/roles/manifests/server.pp:

To simplify things, let's symlink /etc/puppet/modules inside of our production environment:
<code>
ln -s /etc/puppet/modules /etc/puppet/environments/production/modules
</code>

Next, create the roles module directory structure:
<code>
mkdir -p /etc/puppet/environments/production/modules/roles/manifests/home
</code>

Edit the server.pp file and have it include the profiles::home::mysql module which will be created later and will use the Puppetlabs mysql module to install and configure mysql:

<code>
vi /etc/puppet/environments/production/modules/roles/manifests/home/server.pp
</code>

<code>
class roles::home::server {
  include profiles::home::mysql
}
</code>

//Note: A bug you might encounter will cause the following error message during a puppet run://
<code>
Could not evaluate: Could not retrieve information from environment production source(s) puppet://pupmaster.pcdomain.pvt/pluginfacts
</code>

To work around the bug simply create a folder named "facts.d" in the roles module directory:
<code>
mkdir /etc/puppet/environments/production/modules/roles/facts.d
</code>

=== Profiles ===

Roles include profiles so we need to create the profiles module directory structure:
<code>
mkdir -p /etc/puppet/environments/production/modules/profiles/manifests/home
</code>

Edit the mysql.pp file and have it call the mysql::server class:

<code>
vi /etc/puppet/environments/production/modules/profiles/manifests/home/mysql.pp
</code>
<code>
class profiles::home::mysql {
  class { '::mysql::server':
    root_password           => 'strongpassword',
    remove_default_accounts => true,
  }
}
</code>

//Note: Ensure the class is prefixed with the double colons or else the profile will try to load itself instead of the actual mysql module!//

==== Install the puppetlabs-mysql module ====
This command will install the puppetlabs-mysql module into /etc/puppet/modules, which is symlinked inside our production environment:

<code>
puppet module install puppetlabs-mysql
</code>

===== Configuring a Puppet Agent =====

Edit /etc/puppet/puppet.conf and configure the agent:
<code>
[main]
server = pupmaster.pcdomain.pvt
archive_files = true
archive_file_server = pupmaster.pcdomain.pvt
    
[agent]
report = true
classfile = $vardir/classes.txt
localconfig = $vardir/localconfig
graph = true
pluginsync = true
environment = production
</code>

Also remove the [master] section from all agents.

Run the agent to generate an SSL key and CSR request for the Master:
<code>
puppet agent -t
</code>

Login to the Master and sign the certificate:
<code>
puppet cert sign pupagent.pcdomain.pvt
</code>

Which should give you the following output:
<code>
Notice: Signed certificate request for pupagent.pcdomain.pvt
Notice: Removing file Puppet::SSL::CertificateRequest pupagent.pcdomain.pvt at '/var/lib/puppet/ssl/ca/requests/pupagent.pcdomain.pvt.pem'
</code>

Login to the agent and run Puppet again which should kickoff the initial Puppet run:
<code>
puppet agent -t
</code>

Enable the agent service to have Puppet run automatically every 30 minutes by default:
<code>
update-rc.d puppet enable
</code>

===== Additional Resources =====
Puppet Learning VM:
https://puppetlabs.com/download-learning-vm

Presentation Downloaded from the following location:
http://www.slideshare.net/joshbeard/puppet-overview-28908346
QCLUG Wiki

User Tools

Site Tools

Page Tools
