...
| Astuce |
|---|
Pour les admin chaque environnement correspond a une branche dans le dépôt puppet.git : https://git.gadz.org/git/puppet.git ou git+ssh://[email protected]/puppet.git |
Nom des modules
Modules
...
installés sur chaque serveur :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge | Status | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| stdlib (puppet lib + ressources pour les modules) | sysstat | puppetlabs-stdlib | https://forge.puppet.com/puppetlabs/stdlib |
| |||||||
sysstat | acme-sysstat | https://forge.puppet.com/acme/sysstat |
| ||||||||
ntp | |||||||||||
vim | dhoppe-vim | https://forge.puppet.com/dhoppe/vim |
| ||||||||
htop | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||
git | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||
openssh serverr + client | ssh | interne |
| ||||||||
puppet agent | - | ||||||||||
telegraf | datacentred-telegraf | https://forge.puppet.com/datacentred/telegraf |
| ||||||||
collectd | collecd | interne |
| ||||||||
pam-ldap | ldapuser | interne |
| ||||||||
sudo-ldap | ldapuser | interne |
| ||||||||
wget | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||
curl | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||
dns-utils | postfix | ||||||||||
postfix | dhoppe/postfix | https://forge.puppet.com/dhoppe/postfix |
| ||||||||
rsync-backup | counsyl-sys | https://forge.puppet.com/counsyl/sys | rsync-backup |
| |||||||
ldap-utils | ldap-client | interne | |||||||||
nrpe | nrpe | interne |
| ||||||||
apt-cron | |||||||||||
locales | saz-locales | https://forge.puppet.com/saz/locales |
| ||||||||
logrotates | yo61-logrotate | https://forge.puppet.com/yo61/logrotate/readme | |||||||||
zsh | counsyl-sys | https://forge.puppet.com/counsyl/sys |
| ||||||||
| vmware-tools | razorsedge-vmwaretools | https://forge.puppet.com/razorsedge/vmwaretools |
| ||||||||
| authorized keys de l’user root | ssh | interne | |||||||||
| Un user local “prod” pour maintenance & sauvegarde | |||||||||||
| firewall (netfilter-persistent) | firewall | interne |
| ||||||||
| dns via gadz.org |
Modules installés sur certains serveurs :
Package / fonction | Nom module dans puppet | Interne ou url si issue de la forge |
|---|---|---|
| nfs server | nfs | https://forge.puppet.com/derdanne/nfs |
...
Installation d'un module depuis la forge
| Bloc de code | ||
|---|---|---|
| ||
puppet module install $NOM_DU_MODULE --environment $ENVIRONEMENT --modulepath /etc/puppet/environment/$ENVIRONEMENT/modules
#exemple :
puppet module install acme-sysstat --environment production --modulepath /etc/puppet/environment/production/modules |