1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
|
#!/usr/bin/ruby
# == Synopsis
#
# Retrieve the client configuration from the central puppet server and apply
# it to the local host.
#
# Currently must be run out periodically, using cron or something similar.
#
# = Usage
#
# puppetd [-h|--help] [-V|--version] [-d|--debug] [-v|--verbose]
# [--ssldir <cert directory>] [-l|--logdest <syslog|<file>|console>]
# [--fqdn <host name>] [-p|--port <port>] [-s|--server <server>]
# [-w|--waitforcert <seconds>] [-c|--confdir <configuration directory>]
# [--vardir <var directory>]
#
# = Description
#
# This is the main puppet client. Its job is to retrieve the local machine's
# configuration from a remote server and apply it. In order to successfully
# communicate with the remote server, the client must have a certificate signed
# by a certificate authority that the server trusts; the recommended method
# for this, at the moment, is to run a certificate authority as part of the
# puppet server (which is the default). The client will connect and request
# a signed certificate, and will continue connecting until it receives one.
#
# Once the client has a signed certificate, it will retrieve its configuration
# and apply it.
#
# = Options
#
# confdir::
# The configuration root directory, where +puppetmasterd+ defaults to looking
# for all of its configuration files. Defaults to +/etc/puppet+.
#
# debug::
# Enable full debugging.
#
# fqdn::
# Set the fully-qualified domain name of the client. This is only used for
# certificate purposes, but can be used to override the discovered hostname.
# If you need to use this flag, it is generally an indication of a setup problem.
#
# help::
# Print this help message
#
# logdest::
# Where to send messages. Choose between syslog, the console, and a log file.
# Defaults to sending messages to /var/puppet/log/puppet.log, or the console
# if debugging or verbosity is enabled.
#
# port::
# The port to which to connect on the remote server. Currently defaults to 8139.
#
# server::
# The remote server from whom to receive the local configuration. Currently
# must also be the certificate authority. Currently defaults to 'puppet'.
#
# ssldir::
# Where to store and find certificates. Defaults to /etc/puppet/ssl.
#
# vardir::
# The variable-size directory, used for storing state. Defaults to
# /var/puppet.
#
# verbose::
# Turn on verbose reporting.
#
# version::
# Print the puppet version number and exit.
#
# waitforcert::
# Have the process wait around, continuously retrying for the certificate
# each <argument> seconds.
#
# = Example
#
# puppet -s puppet.domain.com
#
# = Author
#
# Luke Kanies
#
# = Copyright
#
# Copyright (c) 2005 Reductive Labs, LLC
# Licensed under the GNU Public License
require 'puppet'
require 'puppet/server'
require 'puppet/client'
require 'getoptlong'
$haveusage = true
begin
require 'rdoc/usage'
rescue LoadError
$haveusage = false
end
result = GetoptLong.new(
[ "--confdir", "-c", GetoptLong::REQUIRED_ARGUMENT ],
[ "--debug", "-d", GetoptLong::NO_ARGUMENT ],
[ "--fqdn", "-f", GetoptLong::REQUIRED_ARGUMENT ],
[ "--help", "-h", GetoptLong::NO_ARGUMENT ],
[ "--logdest", "-l", GetoptLong::REQUIRED_ARGUMENT ],
[ "--noop", "-n", GetoptLong::NO_ARGUMENT ],
[ "--port", "-p", GetoptLong::REQUIRED_ARGUMENT ],
[ "--server", "-s", GetoptLong::REQUIRED_ARGUMENT ],
[ "--ssldir", GetoptLong::REQUIRED_ARGUMENT ],
[ "--verbose", "-v", GetoptLong::NO_ARGUMENT ],
[ "--version", "-V", GetoptLong::NO_ARGUMENT ],
[ "--vardir", GetoptLong::REQUIRED_ARGUMENT ],
[ "--waitforcert", "-w", GetoptLong::REQUIRED_ARGUMENT ]
)
server = "puppet"
fqdn = nil
args = {}
waitforcert = false
begin
result.each { |opt,arg|
case opt
when "--confdir"
Puppet[:puppetconf] = arg
when "--help"
if $haveusage
RDoc::usage && exit
else
puts "No help available unless you have RDoc::usage installed"
exit
end
when "--version"
puts "%s" % Puppet.version
exit
when "--verbose"
Puppet[:loglevel] = :info
when "--debug"
Puppet[:loglevel] = :debug
when "--noop"
Puppet[:noop] = true
when "--ssldir"
Puppet[:ssldir] = arg
when "--fqdn"
fqdn = arg
when "--server"
server = arg
when "--port"
args[:Port] = arg
when "--logdest"
# FIXME we should be able to have log.rb check the validity of the dst
case arg
when "syslog", "console", /^\//:
Puppet[:logdest] = arg
else
$stderr.puts "Invalid log destination %s" % arg
end
when "--vardir"
Puppet[:puppetvar] = arg
when "--waitforcert"
waitforcert = arg
end
}
rescue GetoptLong::InvalidOption => detail
$stderr.puts "Try '#{$0} --help'"
#$stderr.puts detail
# FIXME RDoc::usage doesn't seem to work
#if $haveusage
# RDoc::usage(1,'usage')
#end
exit(1)
end
bg = false
unless Puppet[:loglevel] == :debug or Puppet[:loglevel] == :info
bg = true
end
args[:Server] = server
if fqdn
args[:FQDN] = fqdn
end
client = Puppet::Client::MasterClient.new(args)
unless client.readcert
if waitforcert
begin
while ! client.requestcert do
Puppet.notice "Did not receive certificate"
sleep waitforcert
end
rescue => detail
Puppet.err "Could not request certificate: %s" % detail.to_s
exit(23)
end
else
unless client.requestcert
Puppet.notice "No certificates; exiting"
exit(1)
end
end
end
if bg
unless Puppet[:logdest] == :file
Puppet[:logdest] = Puppet[:logfile]
end
client.daemonize
end
# now set up the network client with the certs, now that we have them
client.setcerts
# and then retrieve and apply our configuration
begin
client.getconfig
client.apply
rescue => detail
Puppet.err detail.to_s
exit(13)
end
# $Id$
|
