How to Setup Open Source Puppet Server and Puppet Agent on Centos 6.5

Share this Article :

Puppet is an open source IT automation software and configuration management tool for systems administrators that helping them to manage and operate infrastructure of Unix-like and Microsoft Windows systems. It will improve the efficiency because with puppet, we can easily automate repetitive tasks, quickly deploy critical applications, and proactively manage the changes. This post will show how to setup Open Source Puppet Server and Puppet Agent on Centos 6.5.

Puppet Server : puppet-server.ehowstuff.local (192.168.0.5)
Puppet Agent : puppet-agent.ehowstuff.local (192.168.0.6)

A : Setting Up Puppet Server :

1. Set up Puppet Labs Repository :

[[email protected] ~]# rpm -ivh https://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-10.noarch.rpm
Retrieving https://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-10.noarch.rpm
warning: /var/tmp/rpm-tmp.sPYqlZ: Header V4 RSA/SHA1 Signature, key ID 4bd6ec30: NOKEY
Preparing...                ########################################### [100%]
   1:puppetlabs-release     ########################################### [100%]

2. Install Puppet Master :

[[email protected] ~]# yum install puppet-server -y

3. Start the Puppet-Server :

[[email protected] ~]# /etc/init.d/puppetmaster start
Starting puppetmaster:                                     [  OK  ]

4. Make Puppet-Server star at boot :

[[email protected] ~]# puppet resource service puppetmaster ensure=running enable=true

5. Install Apache and necessary dependencies :

[[email protected] ~]# yum install httpd httpd-devel mod_ssl openssl-devel gcc-c++ curl-devel zlib-devel make automake ruby-devel rubygems -y

6.Install Rack Passenger :

[[email protected] ~]# gem install rack passenger
Successfully installed rack-1.5.2
Building native extensions.  This could take a while...
Successfully installed rake-10.3.1
Successfully installed daemon_controller-1.2.0
Successfully installed passenger-4.0.41
4 gems installed
Installing ri documentation for rack-1.5.2...
Installing ri documentation for rake-10.3.1...
Installing ri documentation for daemon_controller-1.2.0...
Installing ri documentation for passenger-4.0.41...
Installing RDoc documentation for rack-1.5.2...
Installing RDoc documentation for rake-10.3.1...
Installing RDoc documentation for daemon_controller-1.2.0...
Installing RDoc documentation for passenger-4.0.41...
[[email protected] ~]# passenger-install-apache2-module

At the end of the installation you will get this message. So change your puppetmaster config file path correctly :

..
..
..
Almost there!

Please edit your Apache configuration file, and add these lines:

   LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-4.0.41/buildout/apache2/mod_passenger.so
   <ifmodule mod_passenger.c>
     PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-4.0.41
     PassengerDefaultRuby /usr/bin/ruby
   </ifmodule>

After you restart Apache, you are ready to deploy any number of web
applications on Apache, with a minimum amount of configuration!

Press ENTER to continue.


--------------------------------------------

Deploying a web application: an example

Suppose you have a web application in /somewhere. Add a virtual host to your
Apache configuration file and set its DocumentRoot to /somewhere/public:

   <virtualhost *:80>
      ServerName www.yourhost.com
      # !!! Be sure to point DocumentRoot to 'public'!
      DocumentRoot /somewhere/public
      <directory /somewhere/public>
         # This relaxes Apache security settings.
         AllowOverride all
         # MultiViews must be turned off.
         Options -MultiViews
      </directory>
   </virtualhost>

And that's it! You may also want to check the Users Guide for security and
optimization tips, troubleshooting and other useful information:

  /usr/lib/ruby/gems/1.8/gems/passenger-4.0.41/doc/Users guide Apache.html
  http://www.modrails.com/documentation/Users%20guide%20Apache.html

Enjoy Phusion Passenger, a product of Phusion (www.phusion.nl) :-)
https://www.phusionpassenger.com

Phusion Passenger is a trademark of Hongli Lai & Ninh Bui.

7. Create the directory structure for Puppet Master Rack Application

[[email protected] ~]# mkdir -p /usr/share/puppet/rack/puppetmasterd
[[email protected] ~]# mkdir /usr/share/puppet/rack/puppetmasterd/public
[[email protected] ~]# mkdir /usr/share/puppet/rack/puppetmasterd/tmp
[[email protected] ~]# cp /usr/share/puppet/ext/rack/config.ru /usr/share/puppet/rack/puppetmasterd/
[[email protected] ~]# chown puppet /usr/share/puppet/rack/puppetmasterd/config.ru

8. Create a virtual host file for puppet and configure Apache server. Please not that some of the parameter on previous version in not required anymore such as “PassengerUseGlobalQueue” and “RackAutoDetect”
:

[[email protected] ~]# vim /etc/httpd/conf.d/puppetmaster.conf

Add below config file :

LoadModule passenger_module /usr/lib/ruby/gems/1.8/gems/passenger-4.0.41/buildout/apache2/mod_passenger.so
PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-4.0.41/
PassengerRuby /usr/bin/ruby

# And the passenger performance tuning settings:
PassengerHighPerformance On
# Set this to about 1.5 times the number of CPU cores in your master:
PassengerMaxPoolSize 6
# Recycle master processes after they service 1000 requests
PassengerMaxRequests 1000
# Stop processes if they sit idle for 10 minutes
PassengerPoolIdleTime 600

Listen 8140
<virtualhost *:8140>
    SSLEngine On

    # Only allow high security cryptography. Alter if needed for compatibility.
    SSLProtocol             All -SSLv2
    SSLCipherSuite          HIGH:!ADH:RC4+RSA:-MEDIUM:-LOW:-EXP
    SSLCertificateFile      /var/lib/puppet/ssl/certs/puppet-server.ehowstuff.local.pem
    SSLCertificateKeyFile   /var/lib/puppet/ssl/private_keys/puppet-server.ehowstuff.local.pem
    SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
    SSLCACertificateFile    /var/lib/puppet/ssl/ca/ca_crt.pem
    SSLCARevocationFile     /var/lib/puppet/ssl/ca/ca_crl.pem
    SSLVerifyClient         optional
    SSLVerifyDepth          1
    SSLOptions              +StdEnvVars +ExportCertData

    # These request headers are used to pass the client certificate
    # authentication information on to the puppet master process
    RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

    DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/
    <directory /usr/share/puppet/rack/puppetmasterd></directory>
        Options None
        AllowOverride None
        Order Allow,Deny
        Allow from All
    
</virtualhost>

9. Start the Apache :

[[email protected] ~]# /etc/init.d/puppetmaster stop
[[email protected] ~]# /etc/init.d/httpd start

10. Disable WEBrick and enable Apache on boot. Ensure that any WEBrick puppet master process is stopped before starting the Apache service; only one can be bound to TCP port 8140.:

[[email protected] ~]# chkconfig puppetmaster off
[[email protected] ~]# chkconfig httpd on

11. Make sure the port is open and it’s listening:

[[email protected] ~]# netstat -ln | grep 8140
tcp        0      0 :::8140                     :::*                        LISTEN

12. Set the server to auto-sign certs :

[[email protected] ~]# vim /etc/puppet/puppet.conf

Add the following line under [main]

[main]
   server = centos6.5.ehowstuff.local

Add the following at the bottom :

[master]
   certname = puppet-server.ehowstuff.local
   autosign = true

13. List outstanding certificate requests :

[[email protected] ~]# puppet cert list --all
+ "puppet-server.ehowstuff.local" (SHA256) 14:2C:1F:98:EF:23:8E:A0:0E:A3:81:65:97:FE:15:5D:E0:28:36:74:3D:3B:EC:F5:1B:35:B2:C5:E3:CD:79:36 (alt names: "DNS:puppet-server.ehowstuff.local")

B : Setting Up Puppet Agent :

14. Login to puppet client. Set up Puppet Labs Repository :

[[email protected] ~]# rpm -ivh https://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-10.noarch.rpm
Retrieving https://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-10.noarch.rpm
warning: /var/tmp/rpm-tmp.i5Nzgn: Header V4 RSA/SHA1 Signature, key ID 4bd6ec30: NOKEY
Preparing...                ########################################### [100%]
   1:puppetlabs-release     ########################################### [100%]

15. Install the Puppet Client/Agent on Client node :

[[email protected] ~]# yum install puppet -y

16. Edit your hosts on puppet agent :

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.0.6     puppet-agent.ehowstuff.local
192.168.0.5     puppet-server.ehowstuff.local

17. Edit /etc/puppet/puppet.conf and add the agent variables under [agent]:

[[email protected] ~]# vim /etc/puppet/puppet.conf
    server = puppet-server.ehowstuff.local
    report = true
    pluginsync = true

18. Set puppet to run on boot :

[[email protected] ~]# chkconfig puppet on
[[email protected] ~]# puppet agent --daemonize

19. Test the client :

[[email protected] ~]# puppet agent -t

20. Connect you to the server which will automatically sign the cert :

[[email protected] ~]# puppet cert --sign puppet-server.ehowstuff.local

Done..

Leave a Reply