* run generate, or wait until cron runs it for you. Update DNS.
{{{
- : :: draghi :: && sudo -u sshdist ud-generate && sudo -H ud-replicate && sudo -H puppet agent --no-daemonize --onetime
+ : :: draghi :: && sudo -u sshdist ud-generate && sudo -H ud-replicate && sudo -H puppet agent -t
: :: denis :: && sudo -H ud-replicate
}}}
* run puppet a couple times
{{{
- puppet agent --no-daemonize --onetime; puppet agent --no-daemonize --onetime; puppet agent --no-daemonize --onetime; puppet agent --no-daemonize --onetime
+ puppet agent -t; puppet agent -t; puppet agent -t
}}}
* install security updates etc.
* install samhain and get puppet to configure it
{{{
apt-get install -y samhain &&
- ( puppet agent --no-daemonize --onetime || true ) &&
+ ( puppet agent -t || true ) &&
service samhain stop &&
rm -f /var/state/samhain/samhain_file /var/lib/samhain/samhain_file &&
samhain --foreground -t init -p none -s none -l none -m none &&
: ::client:: && me=$(hostname -f) && [ "$me" != "${me%debian.org}" ] && apt-get update &&
apt-get install -y --no-install-recommends puppet ruby-augeas augeas-lenses lsb-release &&
service puppet stop &&
- (puppet agent --no-daemonize --onetime || true ) &&
+ (puppet agent -t || true ) &&
cd /var/lib/puppet/ssl/certificate_requests &&
echo sha256sum output: && echo &&
sha256sum $me.pem &&
echo 'EOF' &&
cd / &&
echo 'puppet agent --enable' &&
- echo 'puppet agent --no-daemonize --onetime --pluginsync' &&
- echo 'puppet agent --no-daemonize --onetime --pluginsync'
+ echo 'puppet agent -t --pluginsync' &&
+ echo 'puppet agent -t --pluginsync'
and execute this on the client.
Try this once if you're nervous:
- : ::client:: && puppet agent --no-daemonize --onetime --pluginsync --noop
+ : ::client:: && puppet agent -t --pluginsync --noop
It will tell you what would have changed without actually doing it.
Then run (this will change the configs in /etc):
- : ::client:: && puppet agent --no-daemonize --onetime --pluginsync
+ : ::client:: && puppet agent -t --pluginsync
This run will start puppet after reconfiguring it, so if you are
unhappy with what just happened, you'll need to stop it again to do