...
Astuce |
---|
Pour les admin chaque environnement correspond a une branche dans le dépôt puppet.git : https://git.gadz.org/git/puppet.git ou git+ssh://gitgit@git.gadz.org/puppet.git |
Nom des modules
Modules
...
installés sur chaque serveur :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge | Status | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
stdlib (puppet lib + ressources pour les modules) | puppetlabs-stdlib | https://forge.puppet.com/puppetlabs/stdlib |
| |||||||||||
sysstat | ||||||||||||||
ntpsysstat | acme-sysstat | https://forge.puppet.com/acme/sysstat |
| |||||||||||
ntp | ||||||||||||||
vim | ||||||||||||||
htop | ||||||||||||||
git | dhoppe-vim | https://forge.puppet.com/dhoppe/vim |
| |||||||||||
htop | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
git | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
openssh serverr + client | ssh | interne |
| |||||||||||
puppet agent | - | telegraf | ||||||||||||
telegraf | datacentred-telegraf | https://forge.puppet.com/datacentred/telegraf |
| |||||||||||
collectd | collecd | interne |
| |||||||||||
pam-ldap | ldapuser | interne |
| |||||||||||
sudo-ldap | ldapuser | interne |
| |||||||||||
wget | curl | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||||
curl | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
dns-utils | postfix | |||||||||||||
postfix | dhoppe/postfix | https://forge.puppet.com/dhoppe/postfix |
| |||||||||||
rsync-backup | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
ldap-utils | ldap-client | interne | ||||||||||||
nrpe | nrpe | interne |
| |||||||||||
apt-cron | ||||||||||||||
locales | logrotates | saz-locales | https://forge.puppet.com/saz/locales |
| ||||||||||
logrotates | yo61-logrotate | https://forge.puppet.com/yo61/logrotate | ||||||||||||
zsh | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
vmware-tools | razorsedge-vmwaretools | https://forge.puppet.com/razorsedge/vmwaretools |
| |||||||||||
authorized keys de l’user root | ssh | interne | ||||||||||||
Un user local “prod” pour maintenance & sauvegarde | ||||||||||||||
firewall (netfilter-persistent) | firewall | interne |
| |||||||||||
dns via gadz.org |
Modules installés sur certains serveurs :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge |
---|---|---|
nfs server | nfs | https://forge.puppet.com/derdanne/nfs |
...
Installation d'un module depuis la forge
Bloc de code | ||
---|---|---|
| ||
puppet module install $NOM_DU_MODULE --environment $ENVIRONEMENT --modulepath /etc/puppet/environment/$ENVIRONEMENT/modules
#exemple :
puppet module install acme-sysstat --environment production --modulepath /etc/puppet/environment/production/modules |