1. config 수정하기 ```shell
[root@master ~]# vi /etc/puppet/puppet.conf
[main]
# The Puppet log directory.
# The default value is '$vardir/log'.
logdir = /var/log/puppet
# Where Puppet PID files are kept.
# The default value is '$vardir/run'.
rundir = /var/run/puppet
# Where SSL certificates are kept.
# The default value is '$confdir/ssl'.
ssldir = $vardir/ssl
moduledir = /etc/puppet/modules
[agent]
# The file in which puppetd stores a list of the classes
# associated with the retrieved configuratiion. Can be loaded in
# the separate ``puppet`` executable using the ``--loadclasses``
# option.
# The default value is '$confdir/classes.txt'.
classfile = $vardir/classes.txt
# Where puppetd caches the local configuration. An
# extension indicating the cache format is added automatically.
# The default value is '$confdir/localconfig'.
localconfig = $vardir/localconfig
[master]
certname = master.localdomain
moduledir 경로추가, certname = master.localdomain에 master호스트네임 기재
```
2. 패키지 업그레이드 ```shell
[root@master ~]# puppet resource package puppet-server ensure=latest
package { 'puppet-server':
ensure => '3.8.2-1.el6',
}
```
3. 서비스 시작 ```shell
[root@master ~]# /etc/init.d/puppetmaster start
Starting puppetmaster: [ OK ]
```
4. 포트상태 확인 ```shell
[root@master ~]# netstat -antp | grep LISTEN
tcp 0 0 0.0.0.0:8140 0.0.0.0:* LISTEN 1127/ruby
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 878/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 897/sendmail
tcp 0 0 :::22 :::* LISTEN 878/sshd
* tcp/8140번 포트가 오픈되어 있는지 확인.
```
1. 설정파일 수정 ```shell
[root@agent ~]# vi /etc/puppet/puppet.conf
[main]
# The Puppet log directory.
# The default value is '$vardir/log'.
logdir = /var/log/puppet
# Where Puppet PID files are kept.
# The default value is '$vardir/run'.
rundir = /var/run/puppet
# Where SSL certificates are kept.
# The default value is '$confdir/ssl'.
ssldir = $vardir/ssl
[agent]
# The file in which puppetd stores a list of the classes
# associated with the retrieved configuratiion. Can be loaded in
# the separate ``puppet`` executable using the ``--loadclasses``
# option.
# The default value is '$confdir/classes.txt'.
classfile = $vardir/classes.txt
# Where puppetd caches the local configuration. An
# extension indicating the cache format is added automatically.
# The default value is '$confdir/localconfig'.
localconfig = $vardir/localconfig
certname=agent.localdomain
runinterval = 60
certname = 에이전트 호스트네임 추가, runinterval은 업데이트 주기(초단위)로 설정하면 됨.
[root@agent ~]# vi /etc/sysconfig/puppet
# The puppetmaster server
PUPPET_SERVER=master.localdomain
# If you wish to specify the port to connect to do so here
#PUPPET_PORT=8140
# Where to log to. Specify syslog to send log messages to the system log.
PUPPET_LOG=/var/log/puppet/puppet.log
# You may specify other parameters to the puppet client here
#PUPPET_EXTRA_OPTS=--waitforcert=500
PUPPET_SERVER에 마스터 서버 호스트네임 입력
PUPPET_LOG에 에이전트 로그파일 파일명 입력
```
2. 서비스 시작 ```shell
[root@agent ~]# /etc/init.d/puppet start
Starting puppet agent: [ OK ]
[root@agent ~]# ps -ef | grep puppet
root 1072 1 3 16:03 ? 00:00:00 /usr/bin/ruby /usr/bin/puppet agent --server=master.localdomain --logdest=/var/log/puppet/puppet.log
* 프로세스 실핵확인하면 됨
```
1. 인증이 필요한 클라이언트 확인 ```shell
[root@master ~]# puppet cert --sign --list
"agent.localdomain" (SHA256) 52:0D:EF:51:BB:50:99:FE:BC:6D:2F:33:CC:A9:43:73:3B:1C:C6:A1:D6:4C:D2:13:DE:AA:75:E9:7E:D2:2A:E5
* 도메인 옆에 +기호가 붙어있으면 인증이 완료된 에이전트 입니다.
```
2. 에이전트 인증작업 수행 ```shell
[root@master ~]# puppet cert --sign agent.localdomain
Notice: Signed certificate request for agent.localdomain
Notice: Removing file Puppet::SSL::CertificateRequest agent.localdomain at '/var/lib/puppet/ssl/ca/requests/agent.localdomain.pem'
```
3. 인증완료여부 확인 ```shell
[root@master ~]# puppet cert --sign --all --list
+ "agent.localdomain" (SHA256) 9C:18:CA:26:73:CA:65:96:85:07:B1:F4:B7:A3:2C:43:FA:EE:63:3C:A7:A3:6C:CD:A2:51:5B:81:D2:E5:2D:3F
도메인 옆에 +기호가 생기면 완료.
```
4. 아래 경로에서 파일생성 ```shell
[root@master ~]# cat /etc/puppet/manifests/site.pp
file {
'/tmp/hello' :
owner => root,
group => root,
mode => 444,
content => "Hello Pupplet
by Machine\n";
}
```
* /tmp/hello 파일이 생성되는데, 생성시 root의 사용자와 그룹으로 지정하여 생성하고
퍼미션은 444(read)생성하되, 텍스트 데이터는 Hello Pupplet라는 데이터로 저장
5. pupplet 적용하기 ```shell
[root@master ~]# puppet apply /etc/puppet/manifests/site.pp
Notice: Compiled catalog for master in environment production in 0.17 seconds
Notice: /Stage[main]/Main/File[/tmp/hello]/content: content changed '{md5}723c9d4525cebf11f4e6171740b15abd' to '{md5}7b1d27a85c9ebf03075ee2150fb4d770'
Notice: Finished catalog run in 0.09 seconds
에이전트)
/tmp/hello파일이 생성되었는지 확인
```