Foreman

Установка на сайте https://www.theforeman.org
Debian 9 (Centos пока не завелось из-за pessenger)
После установки добавить в инфраструктура - капсулы свой сервер
https://deb.example.com:8443
(только через домен)

• ln -s /opt/puppetlabs/bin/puppet /usr/bin/puppet
• puppet cert list --all
• puppet cert clean deb8.com
• puppet cert --revoke deb8.com
• puppet cert --sign deb8.com
• puppet cert sign --all

Сервер
проверка порта

• netstat -nl|grep 8443

Дебаг агента

/usr/bin/ruby /usr/bin/puppet agent --debug

mcedit /etc/puppet/puppet.conf
закомментировать

templatedir=$confdir/templates

и поставить

[agent]
server = deb.example.com

puppet config print certname
rm -rf /var/lib/puppet/ssl
puppet node clean deb8.com
puppet node deactivate deb8.compuppet agent -t

Переустановка сертификата:
deb.example.com - сервер
deb8.com - клиент

• puppet cert clean deb8.com
• rm -rf /var/lib/puppet/ssl
• puppet agent --server deb.example.com --waitforcert 60
• puppet cert list --all
• puppet cert sign deb8.com

После этого узел должен появиться в foreman - узлы - all hosts

Установка клиента Centos 6 (домен cent.my):

Изменение hostname 

mcedit /etc/sysconfig/network

• yum install puppet

Ошибка 

Could not request certificate: getaddrinfo: Name or service not known

смотрим есть ли серт в /var/lib/puppet/ssl

• puppet agent --test

Error: Could not request certificate: getaddrinfo: Name or service not known

Exiting; failed to retrieve certificate and waitforcert is disabled

• mcedit /etc/hosts

127.0.0.1       cent6.my

puppet agent --no-daemonize --debug --onetime --server deb.example.com

добавил домен на роутер

centos 7 агент

• hostnamectl set-hostname cent7.com
• systemctl restart systemd-hostnamed
• rpm -Uvh https://yum.puppet.com/puppet5/puppet5-release-el-7.noarch.rpm
• yum install puppet-agent
• mcedit /etc/puppetlabs/puppet/puppet.conf

[agent]
pluginsync = true
report = true
ignoreschedules = true
environment = production
server = deb.example.com

• /opt/puppetlabs/bin/puppet resource service puppet ensure=running enable=true
• /opt/puppetlabs/bin/puppet agent --no-daemonize --debug --onetime --server deb.example.com
• puppet cert -c hostname
• find /etc/puppetlabs/puppet/ssl -name cent7.com.pem -delete
• puppet agent -t

На сервере

• puppet cert list --all
• puppet cert sign cent7.com
• puppet cert clean cent7.com

Включить puppetrun
на сервере

• mcedit /etc/foreman/settings.yaml

:puppetrun: true

********************************************
Centos 7
yum -y install https://yum.puppetlabs.com/puppet5/puppet5-release-el-7.noarch.rpm
yum -y install http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum -y install https://yum.theforeman.org/releases/1.19/el7/x86_64/foreman-release.rpm
yum -y install foreman-installer

• hostname cent7.example.com (временно, применить сразу)
• /etc/hostname (deb)

Также пришлось прописать домен в hosts и закомментить localhost строчку

foreman-installer


************************************************************

• rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
• rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm
• rpm -ivh http://yum.theforeman.org/releases/1.9/el7/x86_64/foreman-release.rpm
• yum-config-manager --enable rhel-7-server-optional-rpms rhel-server-rhscl-7-rpms
• yum -y install foreman-installer

Проверяем hostname

• hostname -f

localhost надо изменить

• hostname cent7.example.com

Ставим foreman

• foreman-installer

*********************************************************************

Решение ошибки

Phusion Passenger faster. Please run 'sudo yum install passenger-devel-4.0.53'

yum remove passenger-4.0.53-4.el7.x86_64 mod_passenger-4.0.53-4.el7.x86_64
/etc/yum.repos.d/epel.repo in the [epel] section add
mcedit /etc/yum.repos.d/epel.repo
exclude=passenger* mod_passenger*

И ставим заново пакеты:

• yum install passenger mod_passenger

*********************************************************************