Home

puppet-system

Manage Linux system resources and services from hiera configuration or using parameterised classes.

• augeas: apply file changes using the augeas tool
• crontabs: set user crontab entries
• execs: run idempotent external commands
• facts: set custom facts
• files: create/update files or directories
• groups: manage entries in /etc/group
• hosts: manage entries in /etc/hosts
• limits: manage entries in /etc/security/limits.conf
• mail manage entries in /etc/aliases or set a relay host
• mounts: manage entries in /etc/fstab
• network: configure basic networking and dns
• ntp: configure NTP servers in /etc/ntp.conf
• packages: manage system packages
• schedules: determine when resource config should not be applied and how often
• services: manage system services
• sshd: manage configuration in /etc/ssh/sshd_config including subsystems like sftp
• sysconfig: manage files under /etc/sysconfig: clock, i18n, keyboard, puppet-dashboard, puppet, puppetmaster, selinux
• sysctl: manage entries in /etc/sysctl.conf
• templates: create files from ERB templates
• users: manage users in /etc/passwd and /etc/shadow
• yumgroups: manage system package groups
• yumrepos: manage yum repository files under /etc/yum.repos.d

Documentation

For default types (users, groups, mounts, yumrepos, packages, cron, exec) see the documentation at http://docs.puppetlabs.com/references/latest/type.html for the parameters that can be passed to each of the resources.

For augeasproviders types (sysctl, sshd) see http://forge.puppetlabs.com/domcleal/augeasproviders.

For limits see http://forge.puppetlabs.com/erwbgy/limits.

Usage

Include the system module in your puppet configuration:

include system

and add required hiera configuration.

Note: To exclude certain system classes when doing 'include system' you can set their schedule parameter to 'never'. This may be useful when testing or debugging issues or just to prevent config lower in the hierarchy being applied.

For example:

system::packages::schedule:  'never'
system::yumgroups::schedule: 'never'

will ignore any configuration for system::packages and system::yumgroups.