...
| Astuce |
|---|
Pour les admin chaque environnement correspond a une branche dans le dépôt puppet.git : https://git.gadz.org/git/puppet.git ou git+ssh://[email protected]/puppet.git |
Nom des modules
Modules
...
installés sur chaque serveur :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge | Status | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| stdlib (puppet lib + ressources pour les modules) | puppetlabs-stdlib | https://forge.puppet.com/puppetlabs/stdlib | sysstat |
| ||||||||||
sysstat | acme-sysstat | https://forge.puppet.com/acme/sysstat |
| |||||||||||
ntp | ||||||||||||||
vim | dhoppe-vim | |||||||||||||
htop | ||||||||||||||
git | https://forge.puppet.com/dhoppe/vim |
| ||||||||||||
htop | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
git | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
openssh serverr + client | ssh | interne |
| |||||||||||
puppet agent | - | |||||||||||||
telegraf | datacentred-telegraf | https://forge.puppet.com/datacentred/telegraf |
| |||||||||||
collectd | collecd | interne |
| |||||||||||
pam-ldap | ldapuser | interne |
| |||||||||||
sudo-ldap | ldapuser | interne |
| |||||||||||
wget | curl | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||||
curl | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
dns-utils | postfix | |||||||||||||
postfix | dhoppe/postfix | https://forge.puppet.com/dhoppe/postfix |
| |||||||||||
rsync-backup | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
ldap-utils | ldap-client | interne | ||||||||||||
nrpe | nrpe | interne |
| |||||||||||
apt-cron | ||||||||||||||
locales | logrotates | saz-locales | https://forge.puppet.com/saz/locales |
| ||||||||||
logrotates | yo61-logrotate | https://forge.puppet.com/yo61/logrotate | ||||||||||||
zsh | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| |||||||||||
| vmware-tools | razorsedge-vmwaretools | https://forge.puppet.com/razorsedge/vmwaretools |
| |||||||||||
| authorized keys de l’user root | ssh | interne | ||||||||||||
| Un user local “prod” pour maintenance & sauvegarde | ||||||||||||||
| firewall (netfilter-persistent) | firewall | interne |
| |||||||||||
| dns via gadz.org |
Modules installés sur certains serveurs :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge |
|---|---|---|
| nfs server | nfs | https://forge.puppet.com/derdanne/nfs |
...
Installation d'un module depuis la forge
| Bloc de code | ||
|---|---|---|
| ||
puppet module install $NOM_DU_MODULE --environment $ENVIRONEMENT --modulepath /etc/puppet/environment/$ENVIRONEMENT/modules
#exemple :
puppet module install acme-sysstat --environment production --modulepath /etc/puppet/environment/production/modules |