Puppet 3 Cookbook - Second Edition

Puppet 3 Cookbook - Second Edition

By : John Arundel

Buy this Book

Puppet 3 Cookbook - Second Edition

By: John Arundel

Buy this Book

Overview of this book

A revolution is happening in web operations. Configuration management tools can build servers in seconds, and automate your entire network. Tools like Puppet are essential to taking full advantage of the power of cloud computing, and building reliable, scalable, secure, high-performance systems. More and more systems administration and IT jobs require some knowledge of configuration management, and specifically Puppet."Puppet 3 Cookbook" takes you beyond the basics to explore the full power of Puppet, showing you in detail how to tackle a variety of real-world problems and applications. At every step it shows you exactly what commands you need to type, and includes full code samples for every recipe.The book takes the reader from a basic knowledge of Puppet to a complete and expert understanding of Puppet's latest and most advanced features, community best practices, writing great manifests, scaling and performance, and extending Puppet by adding your own providers and resources. It starts with guidance on how to set up and expand your Puppet infrastructure, then progresses through detailed information on the language and features, external tools, reporting, monitoring, and troubleshooting, and concludes with many specific recipes for managing popular applications.The book includes real examples from production systems and techniques that are in use in some of the world's largest Puppet installations, including a distributed Puppet architecture based on the Git version control system. You'll be introduced to powerful tools that work with Puppet such as Hiera. The book also explains managing Ruby applications and MySQL databases, building web servers, load balancers, high-availability systems with Heartbeat, and many other state-of-the-art techniques

Puppet 3 Cookbook

Credits

About the Author

About the Reviewers

www.PacktPub.com

Preface

Free Chapter

Puppet Infrastructure

Introduction

Installing Puppet

Creating a manifest

Managing your manifests with Git

Creating a decentralized Puppet architecture

Writing a papply script

Running Puppet from cron

Deploying changes with Rake

Bootstrapping Puppet with Rake

Automatic syntax checking with Git hooks

Puppet Language and Style

Introduction

Using community Puppet style

Checking your manifests with puppet-lint

Using modules

Using standard naming conventions

Using inline templates

Iterating over multiple items

Writing powerful conditional statements

Using regular expressions in if statements

Using selectors and case statements

Using the in operator

Using regular expression substitutions

Writing Better Manifests

Introduction

Using arrays of resources

Using node inheritance

Passing parameters to classes

Using class inheritance and overriding

Writing reusable, cross-platform manifests

Getting information about the environment

Importing dynamic information

Passing arguments to shell commands

Working with Files and Packages

Introduction

Making quick edits to config files

Using Augeas to automatically edit config files

Building config files using snippets

Using ERB templates

Using array iteration in templates

Using GnuPG to encrypt secrets

Installing packages from a third-party repository

Building packages automatically from source

Comparing package versions

Users and Virtual Resources

Introduction

Using virtual resources

Managing users with virtual resources

Managing users' SSH access

Managing users' customization files

Efficiently distributing cron jobs

Using schedules to limit when resources can be applied

Using host resources

Using multiple file sources

Distributing directory trees

Cleaning up old files

Auditing resources

Temporarily disabling resources

Applications

Introduction

Managing Apache servers

Creating Apache virtual hosts

Creating Nginx virtual hosts

Managing MySQL

Managing Ruby

Servers and Cloud Infrastructure

Introduction

Building high-availability services using Heartbeat

Managing NFS servers and file shares

Using HAProxy to load-balance multiple web servers

Managing firewalls with iptables

Managing EC2 instances

Managing virtual machines with Vagrant

External Tools and the Puppet Ecosystem

Introduction

Creating custom facts

Adding external facts

Setting facts as environment variables

Importing configuration data with Hiera

Storing secret data with hiera-gpg

Generating manifests with puppet resource

Generating manifests with other tools

Testing your manifests with rspec-puppet

Using public modules

Using an external node classifier

Creating your own resource types

Creating your own providers

Creating your own functions

Monitoring, Reporting, and Troubleshooting

Introduction

Doing a dry run

Logging command output

Logging debug messages

Generating reports

Producing automatic HTML documentation

Drawing dependency graphs

Understanding Puppet errors

Inspecting configuration settings

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Managing firewalls with iptables

As experienced system administrators know, security comes from defense in depth. It's not enough to stick a single firewall in front of your network and hope for the best. Every machine needs to be securely configured so that only the required network ports are accessible, and this means that every machine needs to have its own firewall.

Linux comes with its own industrial-strength, kernel-based packet filtering firewall, iptables. However, it's not particularly user-friendly, as a typical iptables rule looks something as follows:

iptables -A INPUT -d 10.0.2.15/32 -p tcp -m tcp --dport 80 -j ACCEPT

It would be nice to be able to express firewall rules in a more symbolic and readable way. Puppet can help, because we can use it to abstract away some of the implementation detail of iptables, and create roles based on the services the machine provides:

firewall::role { 'webserver': }
firewall::role { 'dbserver': }

Getting ready…

You will need the append_if_no_such_line...

Puppet 3 Cookbook - Second Edition

By : John Arundel

Puppet 3 Cookbook - Second Edition

By: John Arundel

Overview of this book

Related Content you might be interested in

Current Title:

Puppet 3 Cookbook - Second Edition

Managing firewalls with iptables

Getting ready…