From: Peter Palfrader <peter@palfrader.org>
Date: Thu, 30 May 2013 17:22:54 +0000 (+0200)
Subject: puppet cert streamlining
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-wiki.git;a=commitdiff_plain;h=4a8ed1eb4cc71e3d86d342a4aef8a1cd9470e205

puppet cert streamlining
---

diff --git a/input/howto/puppet-setup.mdwn b/input/howto/puppet-setup.mdwn
index edb9bae..20d89cb 100644
--- a/input/howto/puppet-setup.mdwn
+++ b/input/howto/puppet-setup.mdwn
@@ -27,7 +27,9 @@ client cert.  Now is the time to abort if you are getting cold feet.
 Compare incoming csr request:
 on handel, paste the sha256output::
 
-        : __handel__ && echo "paste sha256sum output now:" &&
+        : __handel__ &&
+                ud-replicate && sudo -u puppet make -C /srv/puppet.debian.org/ca/ install &&
+                echo "paste sha256sum output now:" &&
                 read sha256 filename &&
                 cd /var/lib/puppet/ssl/ca/requests &&
                 ( [ -e $filename ] || (echo "$filename does not exist."; exit 1) ) &&
@@ -63,7 +65,6 @@ entries from sources.list.
 
 On handel, make sure the certs exist for the new host
 
-  : :: handel :: : && sudo -u puppet make -C /srv/puppet.debian.org/ca/ install
 
 We ship a samhain config file that includes /lib and /usr/lib.  This will
 almost certainly be different than the config file on the machine, so it