Konfigurasikan agen Puppet untuk server Puppet/Foreman Anda.
Pertama, instal agen yang kompatibel dengan sistem operasi dan server Puppet/Foreman Anda dari repositori bertanda tangan milik vendor. Tetap aktifkan pemeriksaan sertifikat TLS dan tanda tangan paket, serta selesaikan autentikasi repositori jika diwajibkan. Gunakan perintah pendaftaran sertifikat yang sesuai dengan versi server Anda.
Menyiapkan repositori bertanda tangan · Menginstal agen
/opt/puppetlabs/bin/puppet config set server YOURSERVERHERE
/opt/puppetlabs/bin/puppet config set certname `hostname -f`
vim /etc/puppet/puppet.conf
- hapus bagian master
- tambahkan bagian [agent]
- add server= YOURSERVERHERE
export PATH=/opt/puppetlabs/bin:$PATH
puppet agent --test
Contoh keluaran, di bawah ini:
root@dcae:/work# puppet agent --test
Info: Creating a new RSA SSL key for sbc-de-02.multitel.ro
Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for sbc-de-02.multitel.ro
Info: Certificate Request fingerprint (SHA256): FD:F3:D1:17:CB:AF:E3:03:55:C4:B4:5E:DC:4C:ED:55:E2:E4:2D:F5:89:36:1A:76:1A:FE:A5:E8:E5:F2:00:21
Info: Certificate for sbc-de-02.multitel.ro has not been signed yet
Couldn't fetch certificate from CA server; you might still need to sign this agent's certificate (sbc-de-02.multitel.ro).
Exiting now because the waitforcert setting is set to 0.
( Sidik jari SHA256 diubah untuk tujuan keamanan)
- ini akan membuat sertifikat lokal dan mendaftarkan dirinya ke server puppet/foreman Anda
- sistem akan memperingatkan bahwa sertifikat tidak diizinkan
Masuk ke server foreman/puppet melalui SSH sekarang.
Jalankan puppet cert list pada server YOURSERVERHERE.
Jalankan: puppet cert sign YOURCLIENTHOSTNAMEHERE
Contoh keluaran, di bawah:
root@repo55:~# puppet cert list
Warning: `puppet cert` is deprecated and will be removed in a future release.
(location: /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:370:in `run')
"dcae.multitel.net" (SHA256) FD:F3:D1:17:CB:AF:E3:03:55:C4:B4:5E:DC:4C:ED:55:E2:E4:2D:F5:89:36:1A:76:1A:FE:A5:E8:E5:F2:00:21
root@foreman:~# puppet cert sign dcae.multitel.net
Warning: `puppet cert` is deprecated and will be removed in a future release.
(location: /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:370:in `run')
Signing Certificate Request for:
"dcae.multitel.net" (SHA256) FD:F3:D1:17:CB:AF:E3:03:55:C4:B4:5E:DC:4C:ED:55:E2:E4:2D:F5:89:36:1A:76:1A:FE:A5:E8:E5:F2:00:21
Notice: Signed certificate request for dcae.multitel.net
Notice: Removing file Puppet::SSL::CertificateRequest dcae.multitel.net at '/etc/puppetlabs/puppet/ssl/ca/requests/dcae.multitel.net.pem'
root@repo55:~#
(Sidik jari SHA256 dan nama host telah diubah demi keamanan)
Kembali ke mesin klien puppet Anda.
Jalankan "puppet agent --test" - sekali lagi di server. Seharusnya sekarang sudah berfungsi
- jika muncul pesan bahwa fitur tersebut belum diaktifkan
- jalankan "puppet agent --enable"