FixnLogin

Puppet Master Server Backup Guide 1. Prepare for Backup Ensure you have working backups of the Primary , Replica , and Compilers . Before initiating the backup, stop the pe_databases module timers to prevent pg_repack from interfering: systemctl stop pe_databases-*.timer 2. Create Backup Run the backup command on the Primary server: sudo puppet-backup create --dir=<BACKUP_DIRECTORY> --name=<BACKUP_NAME> 3. Backup Secret Keys Secure the secret keys used by Orchestration and LDAP services: Orchestration: /etc/puppetlabs/orchestration-services/conf.d/secrets/ LDAP (if applicable): /etc/puppetlabs/console-services/conf.d/secrets/keys.json 4. Restart Database Timers systemctl start pe_databases-catalogs.timer pe_databases-facts.timer pe_databases-other.timer systemctl status pe_databases-*.timer Puppet Master Server Restore Guide 1. Stop Database Timers systemctl stop pe_databases-*.timer 2. Uninstall PE on the Restore Target sudo /opt/pupp...

How to Enable Autosign for Puppet Agents If you're looking to automate the certificate signing process for Puppet agents, follow these tested and verified steps based on a real support case. Step 1: Enable Autosign on the Primary Server Edit the Puppet configuration file on your Primary Server : sudo nano /etc/puppetlabs/puppet/puppet.conf Add line "autosign = true" under the [main] section: [main] certname = puppet-master.example.com server = puppet-master.example.com user = pe-puppet group = pe-puppet environment_timeout = 0 module_groups = base+pe_only autosign = true Save and exit the file. Step 2: Clean the Agent Certificate on Primary To remove any conflicting certificate on the primary server, run: puppetserver ca clean --certname agent-node.example.com Replace agent-node.example.com with your actual agent's FQDN. Step 3: Clean SSL Certs on the Agent Node Now go to the agent node and clean its certificates: puppet ssl cl...