Puppet

0.25.0

    Fixed #198 - Puppet man pages added

0.24.8

    Fixed #2077 - ralsh user broken on OSX

    Fixed #2004 - ssh_authorized_key fails if no target is defined

    Fixed #1629 - incorrect permissions on ssh_authorized_keys created files

    Fixed #1871 - Sensitive information leaked in log reports

    and fixed incorrect use of 'value' variable rather than 'member'.

    Fixed #1831 - Added sprintf function

    Fixed #1830 - Added regsubst function

    Fixing #1948 and #1953 - augeas ins bug: wrong number of arguments (1 for 3)

    Fixed #961 - puppetd creating too many/not closing TCP connections

    Fixed #1884 - Exported resources are marked as unexported when collected on the exporting host

    Fixed #1922 - Functions squash all arguments into a single hash

    Fixed #1538 - Yumrepo sets permissions wrongly on files in /etc/yum.repos.d

    Fixed #1936 - Added /* */ support to the vim file

    Fixed #1541 -  nagios objects write files to clientbucket on every change

    Fixed #1542 - cannot purge nagios objects

    Fixing #1912 - gid still works with no 'should' value fixing ralsh issues

    Fixing the Rakefile to use 'git format-patch'

    Updated Red Hat spec file 0.24.7

0.24.7

    Fixed #1804 - Added VDev and MultiVDev properties to the ZPool type

    Fixed #1711 - fileserver test fails due to incorrect mocking

    whether stderr and stdout are combined in the output

    Added versionable feature to the RPM provider

    Fixed #1668 - puppetca can't clean unsigned certs

    Moved RRD feature from util/metric.rb to feature/base.rb

    Updated Red Hat spec file for 0.24.6

    now maintained downstream

    Added augeas type

    Added multiline comment support

0.24.6

    key/value pairs (extension to Solaris RBAC support added in

    0.24.6)

    Fixed #1655 - Provider::Confine::Variable tests are broken

    on redhat system

    Fixed #1649 - Updated OSX package cleanup

    Fixed #1647 - puppetdoc -r providers now working again

    Fixed #1639 - uninitialized constant Puppet::Type::User::ProviderUseradd

    can't access their templates

    Fixed #1202 - Collection attribute matching doesn't parse arrays

    is unavailable

    Fixed #1354 - yum provider problems with RHEL 3

    Fixing #947 - pluginsync no longer fails poorly when no plugins exist

    Fixed #981 - Removed 'Adding aliases' info message

    Fixing #1089 - Log messages are now tagged with the log level,

    making it easier to match messages in the 'tagmail' report.

    Fixing #1098 - Multiline strings now correctly increment the line count

    Fixing #1614 - Environments no longer have to be listed out

    hostname

    up settings.

    Feature #1624 - Added RBAC roles to solaris user provider

    Fixed #791 - You should now be able to create and find a user/group in one transaction.

    Fixed #1610 - Raise "Filebucketed" messages to Notice priority

    FIxed #1530 - ssh_authorized_keys provider does not crash anymore on SSH type 1 keys

    Added a number of confines to package providers

    Fixed #1608 - Added ubuntu to defaultfor for apt provider

    provider

    Fixed #1045 - Multiple metaparams all get added to resources.

    now get expanded correctly.

    Fixed #1595 - Internally, Property#retrieve is no longer called

    when no 'should' value is available for a resource.

    Fixed #1584 - Added support for appended variables

    Fixed #1579 and #1580 - errors in the Puppet RPM spec file

    Fixed #1572 -- file purging now fails if remote sources do not exist.

    Fixed #1521 -- ldap user and password are now used with the default connection.

    Fixed issues with file descriptors leaking into subprocesses

    Adjusted hpuxuseradd user provider to confine to HP-UX and fixed HP-UX user provider path regression

    Fixed debug messages in package type - thanks to Todd Zullinger for this fix

    Fixed #1566 - changed password property of the user type

    Fixed debug messages in package type

    Fixed #1526 - Fixed leak in template

    Fixed #1506 - Removed storeconfig duplicate indexes

    Fixed #1457 - case insensitive match for error

    lib/puppet/parser/functions directory.  New functions should be create     in this directory.

    Fixed #1508 - Added HP-UX package provider

    Add the -P/--ping option to puppetrun, fixes #1501

    Fixed #1394 - Added stored configuration clearing script to /ext

    Fixed #1442 - replaced use of Facter for report titling with certname

    Fixed $1456 - add proxy configuration capability to yum repo

    Expose all puppet variables as instance member variables of the template wrapper.

    This helps resolve redmine #1427, by providing a safe mechanism to access variables.

     * Implement Puppet::Parser::Scope#to_hash, which returns a hash containing all the

       variable bindings in the current and, optionally, parent scope.

     * Use that to set instance member variables into Puppet::Parser::Templatewrapper

    interpolation, not both, to avoid issues where a #{} interpolated value

    contains a % character.

    in installation

    Added feature #1241 : Improve performance of group lookups

    certificate signing

    by using the YAML indirector

0.24.5

    You can now select the encoding format when transferring the catalog,

    with 'yaml' still being the default but 'marshal' being an option.

    Updated /spec/unit/rails.rb test

    called from the Red Hat provider

    Fixed #1414 - Return code from waitpid now right shifted 8 bits

    files is available.

    Further moves from the examples directory and ext directory

    Moved debian to conf and updated examples directory

    Fixed #1368 - updated Red Hat init scripts

    Added message referencing ReductiveLabs build library

    Fixed #1396 - Added sha1 function from DavidS to core

    Fixed #1399 - the ldap user provider now knows it can manage

    passwords.

    Fixed #1272 - if you provide a group name as the gid to an ldap

    user, the name will be converted to a gid.  Note that this only

    looks up ldap groups, at this point; if you want to set an ldap

    Fixed 1240 - puppet will function more like puppetd if graphing

    or reporting are enabled.

    Fixed #1231 - Exceptions during initialization should now be clearer.

    Fixed #1006 - puppetrun --class works again.  I added the class

    Fixed #1367 - Updated Rakefile for new daily builds

    Fixed #1370 - removed test/util/loadedfile.rb tests

    Fixed #1221 - aliases to titles now work for resources.

    Fixed #1012 - templates in the templatedir are preferred to module templates.

    Fixed #707 - special '@reboot'-style cron jobs work again.

    Fixed #1369 - the init service provider now supports HP-UX.

    lookups.

    Also removed support for 'default' nodes in external nodes.

    LDAP nodes now use the certificate name, the short name, and 'default',

    but external nodes just use the certificate name and any custom terminus

    types will use just the certificate name.

    Fixing #1168 (for 0.24.x) -- automatically downcasing the fqdn.

    Also requiring that passed in certnames be downcased; the setting

    system isn't currently flexible enough to automatically downcase

    The Master handler previously provided the support for the :node_name

    setting, and that functionality has now been moved into the Node

    class.  At the same time, the names to search through have been

    hostname were both used for searching, but now, the cert name

    is always searched first (unless node_name == facter), but only

    the Facter hostname, domain, and fqdn are used otherwise.  We no

    Adding support for settings within the existing Facter provider confines.

    paths are searched for fresh each time.

    Modified the 'factpath' setting to automatically configure

    Facter to load facts there if a new enough version of

    Facter is used.

    character (fixes #1216)

    for enable => true;

    Added ldap providers for users and groups.

    Added support for the --all option to puppetca --clean.  If

    puppetca --clean --all is issued then all client certificates

    are removed.

    Resources now return the 'should' value for properties from

    the [] accessor method (they previously threw an exception when

    this method was used with properties).  This shouldn't have any

    that it can cause corruption, especially in file serving (but

    it's client-side corruption).

    matching.  The actual problem was caused by the fix to #1001.

    Found all instances of methods where split() is used without

    the bootproto (#762).

    You now must specify an environment and you are required to specify

    Certificates now always specify a subjectAltName, but it defaults

    to '*', meaning that it doesn't require DNS names to match.  You

    exactly the feature asked for, but I could not find a

    way to directly copy ActiveRecord's concept of an environment.

    Puppet clients now have http proxy support (#701).

        Only ONE node source can be used -- you can use LDAP, code, or

        an external node program, but not more than one.

        LDAP node support has two changes:  First, the "ldapattrs" attribute is

        now used for setting the attributes to retrieve from the server (in

        addition to required attriutes), and second, all retrieved attributes

        handle that on its own.

    Reworked the database schema used to store configurations with the

    Replaced the obsolete RRD ruby library with the maintained

    RubyRRDtool library (which requires rrdtool2) (#659).

    fail on cycles.

    Added a 'dynamicfacts' configuration option; any facts in that

    see if they have changed and thus whether a recompile is necessary.

    Renamed some poorly named internal variables:

    Fixing a bug related to link recursion that caused link directories

    to always be considered out of sync.

    --bindaddress.

    Added (probably experimental) mongrel support.  At this point you're

    Correctly handling spaces in file sources.

    Moved documentation into svn tree.

0.18.0

    Added support for a "default" node.

0.9.4

    Small fix to wrap the StatusServer class in the checks for required classes.

0.9.3

    Fixed some significant bugs in cron job management.

Reductive Labs can be contacted at: info@reductivelabs.com

This program and entire repository is free software; you can

Foundation; either version 2 of the License, or any later version.

This program is distributed in the hope that it will be useful,

online at http://reductivelabs.com/trac/puppet/wiki/DocumentationStart .

Generally, you need the following things installed:

Puppet

======

configurations) based on a centralized specification.

online at the `Puppet Wiki`_.

Installation

  the library.

* Facter => 1.1.1

.. _Puppet Wiki: http://reductivelabs.com/trac/puppet/wiki/DocumentationStart

.. _Facter site: http://reductivelabs.com/projects/facter

task :tracdocs do

    require 'puppet'

    require 'puppet/util/reference'

        sh "puppetdoc -m trac -r #{ref.to_s}"

    end

end

    require 'spec/rake/spectask'

    # require 'rcov'

    Spec::Rake::SpecTask.new do |t|

        t.spec_files = FileList['spec/**/*.rb']

    end

end

        require 'ci/reporter/rake/rspec'

        require 'ci/reporter/rake/test_unit'

        ENV['CI_REPORTS'] = 'results'

       puts 'Missing ci_reporter gem. You must have the ci_reporter gem installed to run the CI spec tests'

end

desc "Run the CI RSpec tests"

        raise "Could not get branch from 'git status'"

    end

    branch = $1

    unless branch =~ %r{^([^\/]+)/([^\/]+)/([^\/]+)$}

        raise "Branch name does not follow <type>/<parent>/<name> model; cannot autodetect parent branch"

    end

    mkdir(CHANGELOG_DIR) unless File.directory?(CHANGELOG_DIR)

    change_body=`git log --pretty=format:'%aD%n%an <%ae>%n%s%n'`

    File.open(File.join(CHANGELOG_DIR, "CHANGELOG.git"), 'w') do |f|

    end

    # Changelog commit

    `git add #{CHANGELOG_DIR}/CHANGELOG.git`

    `git commit -m "Update CHANGELOG.git"`

#   /etc/passwd: 429b225650b912a2ee067b0a4cf1e949

#   $ filebucket restore /tmp/passwd 429b225650b912a2ee067b0a4cf1e949

#   $

# = Options

#

# Note that any configuration parameter that's valid in the configuration file

require 'puppet/application/filebucket'

# launch the filebucket

#

# = Usage

#

#             [-r|--reference <[type]|configuration|..>] [manifest-file]

#

# = Description

# available on the Reductive Labs web site.

#

# In 'rdoc' mode, this command generates an html RDoc hierarchy describing the manifests that

# The generated documentation directory is doc by default but can be changed with the 'outputdir' option.

#

# If the command is started with 'manifest-file' command-line arguments, puppetdoc generate a single

# = Example

#

# This example uses ``ralsh`` to return Puppet configuration for the user ``luke``::

#    $ ralsh user luke

#    user { 'luke':

#      home => '/home/luke',

# This is an example auth.conf file, it mimics the puppetmasterd defaults

# The ACL are checked in order of appearance in this file.

# Supported syntax:

# you want to express the ACL.

# Path syntax (the one used below):

# ---------------------------------

# path /path/to/resource

# [auth[enthicated] {yes|no|on|off|any}]

# allow [host|ip|*]

# deny [host|ip]

# The path is matched as a prefix. That is /file match at

# the same time /file_metadat and /file_content.

# Regex syntax:

# -------------

# This one is differenciated from the path one by a '~'

# path ~ regex

# [environment envlist]

# [method methodlist]

# [auth[enthicated] {yes|no|on|off|any}]

# allow [host|ip|*]

# deny [host|ip]

# The regex syntax is the same as ruby ones.

# Ex:

# path ~ .pp$

# will match every resource ending in .pp (manifests files for instance)

# path ~ ^/path/to/resource

# is essentially equivalent to path /path/to/resource

# environment:: restrict an ACL to a specific set of environments

# method:: restrict an ACL to a specific set of methods

# auth:: restrict an ACL to an authenticated or unauthenticated request

# the default when unspecified is to restrict the ACL to authenticated requests

#

### Authenticated ACL - those applies only when the client

# Last Updated: 2008-07-31

#

# Copyright 2008 Google Inc.

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#      http://www.apache.org/licenses/LICENSE-2.0

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

function find_installer() {

  # root/conf or root/conf/osx

  if [ -f "./${INSTALLRB}" ]; then

    installer="$(pwd)/${INSTALLRB}"

  # to look at for package creation and substitue the version strings out.

  # Major/Minor versions can only be integers, so we have "0" and "245" for

  # puppet version 0.24.5

  # follow symlinks.

  VER1=$(echo ${puppet_version} | awk -F "." '{print $1}')

  VER2=$(echo ${puppet_version} | awk -F "." '{print $2}')

  sed -i '' "s/{SHORTVERSION}/${puppet_version}/g" "${pkgtemp}/${PROTO_PLIST}"

  sed -i '' "s/{MAJORVERSION}/${major_version}/g" "${pkgtemp}/${PROTO_PLIST}"

  sed -i '' "s/{MINORVERSION}/${minor_version}/g" "${pkgtemp}/${PROTO_PLIST}"

  # We need to create a preflight script to remove traces of previous

  # puppet installs due to limitations in Apple's pkg format.

  mkdir "${pkgtemp}/scripts"

  cp "${puppet_root}/conf/osx/${PREFLIGHT}" "${pkgtemp}/scripts"

  # substitute in the sitelibdir specified above on the assumption that this

  # is where any previous puppet install exists that should be cleaned out.

  sed -i '' "s|{SITELIBDIR}|${SITELIBDIR}|g" "${pkgtemp}/scripts/${PREFLIGHT}"

  fi

  find_installer

  if [ ! "${installer}" ]; then

    echo "Unable to find ${INSTALLRB}"

    cleanup_and_exit 1

  fi

  find_puppet_root

  if [ ! "${puppet_root}" ]; then

    echo "Unable to find puppet repository root."

    cleanup_and_exit 1

  fi

  pkgroot=$(mktemp -d -t puppetpkg)

  if [ ! "${pkgroot}" ]; then

    echo "Unable to create temporary package root."

    cleanup_and_exit 1

  fi

  pkgtemp=$(mktemp -d -t puppettmp)

  if [ ! "${pkgtemp}" ]; then

    echo "Unable to create temporary package root."

    cleanup_and_exit 1

  fi

  install_puppet

  get_puppet_version

  if [ ! "${puppet_version}" ]; then

    echo "Unable to retrieve puppet version"

    cleanup_and_exit 1

  fi

  prepare_package

  create_package

  cleanup_and_exit 0

}

if [ -n "$PUPPETMASTER_PORTS" ] && [ ${#PUPPETMASTER_PORTS[@]} -gt 1 ]; then

    PUPPETMASTER_OPTS="$PUPPETMASTER_OPTS --servertype=mongrel"

elif [ -n "$PUPPETMASTER_PORTS" ] && [ ${#PUPPETMASTER_PORTS[@]} -eq 1 ]; then

fi

[ -n "$PUPPETMASTER_LOG" ] && PUPPETMASTER_OPTS="${PUPPETMASTER_OPTS} --logdest=${PUPPETMASTER_LOG}"

PUPPETMASTER_OPTS="${PUPPETMASTER_OPTS} \

    if [ -n "$PUPPETMASTER_PORTS" ] && [ ${#PUPPETMASTER_PORTS[@]} -gt 1 ]; then

        for ((i=0; i<${#PUPPETMASTER_PORTS[@]}; i++)); do

            echo -en "\nPort: ${PUPPETMASTER_PORTS[$i]}"

            ret=$?; [ $ret != 0 ] && RETVAL=$ret

        done

    else

    if [ -n "$PUPPETMASTER_PORTS" ] && [ ${#PUPPETMASTER_PORTS[@]} -gt 1 ]; then

        for ((i=0; i<${#PUPPETMASTER_PORTS[@]}; i++)); do

            echo -en "Port ${PUPPETMASTER_PORTS[$i]}: "

            ret=$?; [ $ret != 0 ] && RETVAL=$ret

    else

        status $PUPPETMASTER

        RETVAL=$?

# Specify syslog to send log messages to the system log.

#PUPPETMASTER_LOG=syslog

# puppetmaster should listen. Default is: 8140

# If you specify more than one port, the puppetmaster ist automatically

# started with the servertype set to mongrel. This might be interesting

# if you'd like to run your puppetmaster in a loadbalanced cluster.

# If you'd like to run puppetmaster with mongrel as servertype but only

# on one (specified) port, you have to add --servertype=mongrel to

# PUPPETMASTER_EXTRA_OPTS.

# specific port)

#

# Please note: Due to reduced options in the rc-functions lib in RHEL/Centos

# known to work.

#PUPPETMASTER_PORTS=""

# Puppetmaster on a different port, run with standard webrick servertype

                type='path'>

        <service_fmri value='file:///etc/puppet/puppet.conf'/>

    </dependency>

    <dependency name='loopback'

                grouping='require_all'

                restart_on='error'

                type='path'>

        <service_fmri value='file:///etc/puppet/puppet.conf'/>

    </dependency>

    <dependency name='loopback'

                grouping='require_all'

                restart_on='error'

### BEGIN INIT INFO

# Provides: puppet

# Required-Start: $local_fs $network $syslog

# Required-Stop:

# Default-Start: 3 4 5

# Default-Stop: 0 1 2 6

BuildRequires: ruby >= 1.8.6

%description

along with obviously discrete elements like packages, services, and files.

%package server

* Sat Feb 16 2008 James Turnbull <james@lovedthanlost.net> - 0.24.1-1

- Fixed puppet configuation file references to match single puppet.conf file

- Update versions for 0.24.1 release

* Tue Aug  3 2006 Martin Vuk <martin.vuk@fri.uni-lj.si> - 0.18.4-3

- Replaced puppet-bin.patch with %build section from David's spec

* Tue Aug  1 2006 Martin Vuk <martin.vuk@fri.uni-lj.si> - 0.18.4-2

- Added supprot for enabling services in SuSE

* Tue Aug  1 2006 Martin Vuk <martin.vuk@fri.uni-lj.si> - 0.18.4-1

- New version and support for SuSE

* Mon Jun 19 2006 David Lutterkort <dlutter@redhat.com> - 0.18.0-1

- Patch config for LSB compliance (lsb-config.patch)

  to /var/lib/puppet, /etc/puppet/clases.txt to /var/lib/puppet/classes.txt,

  /etc/puppet/localconfig.yaml to /var/lib/puppet/localconfig.yaml

- Rebuilt for new version

* Wed Mar 22 2006 David Lutterkort <dlutter@redhat.com> - 0.15.1-1

  for primetime

* Mon Mar 13 2006 David Lutterkort <dlutter@redhat.com> - 0.15.0-1

  allocate the puppet uid/gid dynamically

* Sun Feb 19 2006 David Lutterkort <dlutter@redhat.com> - 0.13.0-4

problem with listing fileserver.conf and puppetmaster.conf twice

* Wed Feb  8 2006 David Lutterkort <dlutter@redhat.com> - 0.13.0-3

- Added basic fileserver.conf

* Wed Jan 11 2006 David Lutterkort <dlutter@redhat.com> - 0.10.1-1

initscripts into separate files. Folded tools rpm into server

* Thu Nov 24 2005 Duane Griffin <d.griffin@psenterprise.com>

### BEGIN INIT INFO

# Provides: puppetmaster

# Required-Start: $local_fs $network $syslog

# Required-Stop:

# Default-Start: 3 4 5

# Default-Stop: 0 1 2 6

Group { provider => "directoryservice" }

user {

        ensure => absent,

        uid => 550;

    "testhere":

        ensure => present,

        gid => 551;

Group { provider => "directoryservice" }

user {

        ensure => absent,

        uid => 550;

    "testhere":

# Copyright (C) David Schmitt <david@schmitt.edv-bus.at>

# All rights reserved.

# Redistribution and use in source and binary forms, with or without

# modification, are permitted provided that the following conditions

# are met:

# 3. Neither the name of the Author nor the names of its contributors

#    may be used to endorse or promote products derived from this software

#    without specific prior written permission.

# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND

# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

# Jeff McCune <jeff.mccune@northstarlabs.net>

# Demonstration of a custom parser function and erb template within

# a module, working in concert.

class sample-module {

  $fqdn_to_dn = hostname_to_dn($domain)

  $sample_template = template("sample-module/sample.erb")

  notice("hostname_to_dn module function returned: [$fqdn_to_dn]")

  info("sample.erb looks like:\n$sample_template")

}