puppet入門4の予定で書いてた部分

site.pp

import: ファイルを読み込むだけ。
include: ファイル内容を適用。

ハマった場合の対処

err: Could not retrieve catalog from remote server: hostname was not match with the server certificate の解決方法

クライアントにて

# puppet agent --server puppetmaster --test --noop --verbose
err: Could not retrieve catalog from remote server: hostname was not match with the server certificate
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run

puppet ssl clean もよいかも。

クライアントにて

# rm -r /var/lib/puppet/ssl/
# service puppet restart
puppet を停止中:                                           [失敗]
puppet を起動中:                                           [  OK  ]
# puppet agent --server puppetmaster --test --noop --verbose
warning: peer certificate won't be verified in this SSL session
info: Caching certificate for ca
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
info: Creating a new SSL certificate request for puppetclient.icl
info: Certificate Request fingerprint (md5): F4:14:20:48:D1:06:59:FD:8E:73:E1:48:EB:EA:8D:4D
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
warning: peer certificate won't be verified in this SSL session
Exiting; no certificate found and waitforcert is disabled

で、何回sslフォルダを削除してやり直してもだめだ！っていうとき、

# puppet agent --server puppetmaster --test --verbose
# puppet agent --server puppetmaster --test --verbose
# puppet agent --server puppetmaster --test --verbose

を何回か繰り返すと処理が進んだりします。(puppet自体の設定をpuppetで配布している時。)

puppetmasterが起動していない場合のエラー

$ sudo puppet agent --server puppetmaster --test --noop --verbose
info: Creating a new SSL key for websrv.local
err: Could not request certificate: Connection refused - connect(2)
Exiting; failed to retrieve certificate and waitforcert is disabled

puppetmasterを起動しましょう。

次はpuppet入門5 ユーザー、グループの追加