== Puppet < 3 == Notes on running on puppet on puias. puppet is in the unsupported repo. The recommended configuration is using passenger with apache. nginx will also work. * Install mod_passenger, mod_ssl * mkdir -p /etc/puppet/rack/public * copy /usr/share/puppet/ext/rack/files/config.ru /etc/puppet/rack * create puppetmaster.conf in /etc/httpd/conf.d {{{ Listen 8140 SSLEngine on SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA SSLCertificateFile /var/lib/puppet/ssl/certs/puppetmaster.pem SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppetmaster.pem SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem # CRL checking should be enabled; if you have problems with Apache complaining about the CRL, disable the next line SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StdEnvVars # The following client headers allow the same configuration to work with Pound. RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e RackAutoDetect On DocumentRoot /etc/puppet/rack/public/ Options None AllowOverride None Order allow,deny allow from all }}} == Puppet3 == puppet3 is in the unsupported repo, users of puppet prior to version 3 will have to update their manifests before using version 3, so we have made this package under a different name. Users can install puppet3 and migrate their configurations over to the new format. Eventually version 3 will be pushed out as puppet, but for now, we'll keep it separate as puppet3.