puppet 0.24.9 → 0.25.0

data/man/man8/puppetca.8

@@ -1,6 +1,6 @@
 .TH   "" "" ""
 .SH NAME
- \- 
+ \-
 
 .\" Man page generated from reStructeredText.
 
@@ -115,4 +115,4 @@ License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/man/man8/puppetd.8

@@ -1,6 +1,6 @@
 .TH Synopsis  "" "" ""
 .SH NAME
-Synopsis \- 
+Synopsis \-
 
 .\" Man page generated from reStructeredText.
 Retrieve the client configuration from the central puppet server and
@@ -181,4 +181,4 @@ Public License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/man/man8/puppetdoc.8

@@ -1,6 +1,6 @@
 .TH   "" "" ""
 .SH NAME
- \- 
+ \-
 
 .\" Man page generated from reStructeredText.
 
@@ -59,4 +59,4 @@ Public License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/man/man8/puppetmasterd.8

@@ -1,6 +1,6 @@
 .TH   "" "" ""
 .SH NAME
- \- 
+ \-
 
 .\" Man page generated from reStructeredText.
 
@@ -84,4 +84,4 @@ License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/man/man8/puppetrun.8

@@ -1,6 +1,6 @@
 .TH   "" "" ""
 .SH NAME
- \- 
+ \-
 
 .\" Man page generated from reStructeredText.
 
@@ -148,4 +148,4 @@ License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/man/man8/ralsh.8

@@ -1,6 +1,6 @@
 .TH   "" "" ""
 .SH NAME
- \- 
+ \-
 
 .\" Man page generated from reStructeredText.
 vim: softtabstop=4 shiftwidth=4 expandtab
@@ -97,7 +97,7 @@ verbose: Print extra information.
 
 
 .SH EXAMPLE
-This example uses 
+This example uses
 .\" visit_literal
 ralsh
 .\" depart_literal
@@ -132,4 +132,4 @@ Public License
 
 
 .\" Generated by docutils manpage writer on 2008-05-05 09:33.
-.\" 
+.\"

data/sbin/puppetca

@@ -0,0 +1,102 @@
+#!/usr/bin/env ruby
+
+#
+# = Synopsis
+#
+# Stand-alone certificate authority.  Capable of generating certificates
+# but mostly meant for signing certificate requests from puppet clients.
+#
+# = Usage
+#
+#   puppetca [-h|--help] [-V|--version] [-d|--debug] [-v|--verbose]
+#               [-g|--generate] [-l|--list] [-s|--sign] [-r|--revoke]
+#               [-p|--print] [-c|--clean] [--verify] [host]
+#
+# = Description
+#
+# Because the puppetmasterd daemon defaults to not signing client certificate
+# requests, this script is available for signing outstanding requests.  It
+# can be used to list outstanding requests and then either sign them individually
+# or sign all of them.
+#
+# = Options
+#
+# Note that any configuration parameter that's valid in the configuration file
+# is also a valid long argument.  For example, 'ssldir' is a valid configuration
+# parameter, so you can specify '--ssldir <directory>' as an argument.
+#
+# See the configuration file documentation at
+# http://reductivelabs.com/projects/puppet/reference/configref.html for
+# the full list of acceptable parameters. A commented list of all
+# configuration options can also be generated by running puppetca with
+# '--genconfig'.
+#
+# all::
+#   Operate on all items.  Currently only makes sense with '--sign',
+#   '--clean', or '--list'.
+#
+# clean::
+#    Remove all files related to a host from puppetca's storage. This is
+#    useful when rebuilding hosts, since new certificate signing requests
+#    will only be honored if puppetca does not have a copy of a signed
+#    certificate for that host. The certificate of the host remains valid.
+#    If '--all' is specified then all host certificates, both signed and
+#    unsigned, will be removed.
+#
+# debug::
+#   Enable full debugging.
+#
+# generate::
+#   Generate a certificate for a named client.  A certificate/keypair will be
+#   generated for each client named on the command line.
+#
+# help::
+#   Print this help message
+#
+# list::
+#   List outstanding certificate requests.  If '--all' is specified,
+#   signed certificates are also listed, prefixed by '+', and revoked
+#   or invalid certificates are prefixed by '-' (the verification outcome
+#   is printed in parenthesis).
+#
+# print::
+#   Print the full-text version of a host's certificate.
+#
+# revoke::
+#   Revoke the certificate of a client. The certificate can be specified
+#   either by its serial number, given as a decimal number or a hexadecimal
+#   number prefixed by '0x', or by its hostname. The certificate is revoked
+#   by adding it to the Certificate Revocation List given by the 'cacrl'
+#   config parameter. Note that the puppetmasterd needs to be restarted
+#   after revoking certificates.
+#
+# sign::
+#   Sign an outstanding certificate request.  Unless '--all' is specified,
+#   hosts must be listed after all flags.
+#
+# verbose::
+#   Enable verbosity.
+#
+# version::
+#   Print the puppet version number and exit.
+#
+# verify::
+#   Verify the named certificate against the local CA certificate.
+#
+# = Example
+#
+#   $ puppetca -l
+#   culain.madstop.com
+#   $ puppetca -s culain.madstop.com
+#
+# = Author
+#
+# Luke Kanies
+#
+# = Copyright
+#
+# Copyright (c) 2005 Reductive Labs, LLC
+# Licensed under the GNU Public License
+
+require 'puppet/application/puppetca'
+Puppet::Application[:puppetca].run

data/sbin/puppetd

@@ -0,0 +1,159 @@
+#!/usr/bin/env ruby
+# == Synopsis
+#
+# Retrieve the client configuration from the central puppet server and apply
+# it to the local host.
+#
+# Currently must be run out periodically, using cron or something similar.
+#
+# = Usage
+#
+#   puppetd  [-D|--daemonize|--no-daemonize] [-d|--debug] [--disable] [--enable]
+#       [-h|--help] [--fqdn <host name>] [-l|--logdest syslog|<file>|console]
+#       [-o|--onetime] [--serve <handler>] [-t|--test] [--noop]
+#       [-V|--version] [-v|--verbose] [-w|--waitforcert <seconds>]
+#
+# = Description
+#
+# This is the main puppet client.  Its job is to retrieve the local machine's
+# configuration from a remote server and apply it.  In order to successfully
+# communicate with the remote server, the client must have a certificate signed
+# by a certificate authority that the server trusts; the recommended method
+# for this, at the moment, is to run a certificate authority as part of the
+# puppet server (which is the default).  The client will connect and request
+# a signed certificate, and will continue connecting until it receives one.
+#
+# Once the client has a signed certificate, it will retrieve its configuration
+# and apply it.
+#
+# = Usage Notes
+#
+# +puppetd+ does its best to find a compromise between interactive use and
+# daemon use.  Run with no arguments and no configuration, it will go into the
+# backgroun, attempt to get a signed certificate, and retrieve and apply its
+# configuration every 30 minutes.
+#
+# Some flags are meant specifically for interactive use -- in particular,
+# +test+ and +tags+ are useful.  +test+ enables verbose logging, causes
+# the daemon to stay in the foreground, exits if the server's configuration is
+# invalid (this happens if, for instance, you've left a syntax error on the
+# server), and exits after running the configuration once (rather than hanging
+# around as a long-running process).
+#
+# +tags+ allows you to specify what portions of a configuration you want to apply.
+# Puppet elements are tagged with all of the class or definition names that
+# contain them, and you can use the +tags+ flag to specify one of these names,
+# causing only configuration elements contained within that class or definition
+# to be applied.  This is very useful when you are testing new configurations --
+# for instance, if you are just starting to manage +ntpd+, you would put all of
+# the new elements into an +ntpd+ class, and call puppet with +--tags ntpd+,
+# which would only apply that small portion of the configuration during your
+# testing, rather than applying the whole thing.
+#
+# = Options
+#
+# Note that any configuration parameter that's valid in the configuration file
+# is also a valid long argument.  For example, 'server' is a valid configuration
+# parameter, so you can specify '--server <servername>' as an argument.
+#
+# See the configuration file documentation at
+# http://reductivelabs.com/trac/puppet/wiki/ConfigurationReference for
+# the full list of acceptable parameters. A commented list of all
+# configuration options can also be generated by running puppetd with
+# '--genconfig'.
+#
+# daemonize::
+#   Send the process into the background.  This is the default.
+#
+# no-daemonize::
+#   Do not send the process into the background.
+#
+# debug::
+#   Enable full debugging.
+#
+# disable::
+#   Disable working on the local system.  This puts a lock file in place,
+#   causing +puppetd+ not to work on the system until the lock file is removed.
+#   This is useful if you are testing a configuration and do not want the central
+#   configuration to override the local state until everything is tested and
+#   committed.
+#
+#   +puppetd+ uses the same lock file while it is running, so no more than one
+#   +puppetd+ process is working at a time.
+#
+#   +puppetd+ exits after executing this.
+#
+# enable::
+#   Enable working on the local system.  This removes any lock file, causing
+#   +puppetd+ to start managing the local system again (although it will continue
+#   to use its normal scheduling, so it might not start for another half hour).
+#
+#   +puppetd+ exits after executing this.
+#
+# fqdn::
+#   Set the fully-qualified domain name of the client.  This is only used for
+#   certificate purposes, but can be used to override the discovered hostname.
+#   If you need to use this flag, it is generally an indication of a setup problem.
+#
+# help::
+#   Print this help message
+#
+# logdest::
+#   Where to send messages.  Choose between syslog, the console, and a log file.
+#   Defaults to sending messages to syslog, or the console if debugging or
+#   verbosity is enabled.
+#
+# no-client::
+#   Do not create a config client.  This will cause the daemon to run
+#   without ever checking for its configuration automatically, and only
+#   makes sense when used in conjunction with --listen.
+#
+# onetime::
+#   Run the configuration once, rather than as a long-running daemon.  This is
+#   useful for interactively running puppetd.
+#
+# serve::
+#   Start another type of server.  By default, +puppetd+ will start
+#   a service handler that allows authenticated and authorized remote nodes to
+#   trigger the configuration to be pulled down and applied.  You can specify
+#   any handler here that does not require configuration, e.g., filebucket, ca,
+#   or resource.  The handlers are in +lib/puppet/network/handler+, and the names
+#   must match exactly, both in the call to +serve+ and in +namespaceauth.conf+.
+#
+# test::
+#   Enable the most common options used for testing.  These are +onetime+,
+#   +verbose+, +ignorecache, +no-daemonize+, and +no-usecacheonfailure+.
+#
+# noop::
+#   Use +noop+ mode where the daemon runs in a no-op or dry-run mode.  This is useful
+#   for seeing what changes Puppet will make without actually executing the changes.
+#
+# verbose::
+#   Turn on verbose reporting.
+#
+# version::
+#   Print the puppet version number and exit.
+#
+# waitforcert::
+#   This option only matters for daemons that do not yet have certificates
+#   and it is enabled by default, with a value of 120 (seconds).  This causes
+#   +puppetd+ to connect to the server every 2 minutes and ask it to sign a
+#   certificate request.  This is useful for the initial setup of a puppet
+#   client.  You can turn off waiting for certificates by specifying a time
+#   of 0.
+#
+# = Example
+#
+#   puppetd --server puppet.domain.com
+#
+# = Author
+#
+# Luke Kanies
+#
+# = Copyright
+#
+# Copyright (c) 2005, 2006 Reductive Labs, LLC
+# Licensed under the GNU Public License
+
+require 'puppet/application/puppetd'
+Puppet::Application[:puppetd].run

data/sbin/puppetmasterd

@@ -0,0 +1,66 @@
+#!/usr/bin/env ruby
+
+#
+# = Synopsis
+#
+# The central puppet server.  Functions as a certificate authority by default.
+#
+# = Usage
+#
+#   puppetmasterd [-D|--daemonize|--no-daemonize] [-d|--debug] [-h|--help]
+#       [-l|--logdest <file>|console|syslog] [-v|--verbose] [-V|--version]
+#
+# = Description
+#
+# This is the puppet central daemon.
+#
+# = Options
+#
+# Note that any configuration parameter that's valid in the configuration file
+# is also a valid long argument.  For example, 'ssldir' is a valid configuration
+# parameter, so you can specify '--ssldir <directory>' as an argument.
+#
+# See the configuration file documentation at
+# http://reductivelabs.com/trac/puppet/wiki/ConfigurationReference for
+# the full list of acceptable parameters. A commented list of all
+# configuration options can also be generated by running puppetmasterdd with
+# '--genconfig'.
+#
+# daemonize::
+#   Send the process into the background.  This is the default.
+#
+# no-daemonize::
+#   Do not send the process into the background.
+#
+# debug::
+#   Enable full debugging.
+#
+# help::
+#   Print this help message.
+#
+# logdest::
+#   Where to send messages.  Choose between syslog, the console, and a log file.
+#   Defaults to sending messages to syslog, or the console
+#   if debugging or verbosity is enabled.
+#
+# verbose::
+#   Enable verbosity.
+#
+# version::
+#   Print the puppet version number and exit.
+#
+# = Example
+#
+#   puppetmasterd
+#
+# = Author
+#
+# Luke Kanies
+#
+# = Copyright
+#
+# Copyright (c) 2005 Reductive Labs, LLC
+# Licensed under the GNU Public License
+
+require 'puppet/application/puppetmasterd'
+Puppet::Application[:puppetmasterd].run

data/sbin/puppetqd

@@ -0,0 +1,53 @@
+#!/usr/bin/env ruby
+# == Synopsis
+#
+# Retrieve serialized records from a queue and process them in order.
+#
+# = Usage
+#
+#   puppetqd  [-d|--debug] [-v|--verbose]
+#
+# = Description
+#
+# This is a simple application that just processes entities in a queue as they
+# are recieved.
+#
+# = Options
+#
+# Note that any configuration parameter that's valid in the configuration file
+# is also a valid long argument.  For example, 'server' is a valid configuration
+# parameter, so you can specify '--server <servername>' as an argument.
+#
+# See the configuration file documentation at
+# http://reductivelabs.com/trac/puppet/wiki/ConfigurationReference for
+# the full list of acceptable parameters. A commented list of all
+# configuration options can also be generated by running puppetd with
+# '--genconfig'.
+#
+# debug::
+#   Enable full debugging.
+#
+# help::
+#   Print this help message
+#
+# verbose::
+#   Turn on verbose reporting.
+#
+# version::
+#   Print the puppet version number and exit.
+#
+# = Example
+#
+#   puppetqd
+#
+# = Author
+#
+# Luke Kanies
+#
+# = Copyright
+#
+# Copyright (c) 2009 Reductive Labs, LLC
+# Licensed under the GNU Public License
+
+require 'puppet/application/puppetqd'
+Puppet::Application[:puppetqd].run