Remote Code Execution Vulnerability (CVE-2014-3248) for multiple Puppet Products)
Release date:Updated on:
Affected Systems:Puppet Labs PuppetDescription:--------------------------------------------------------------------------------Bugtraq id: 68035CVE (CAN) ID: CVE-2014-3248Puppet is an IT automation software that helps the system administrator manage the infrastructure.Multiple Puppet products have th
Release date:Updated on: 2013-08-21
Affected Systems:Puppet Labs Puppet Enterprise 3.xUnaffected system:Puppet Labs Puppet Enterprise 3.0.1Description:--------------------------------------------------------------------------------Bugtraq id: 61860CVE (CAN) ID: CVE-2013-4968
Puppet is an IT automation software that helps the system administrator manage the infras
Puppet resource Summary
Resource introduction:
Common resources: file, service, and package
Tool resources: exec, cron, user, group
Resource Summary
File
Ensure => (specify the File status)
Present checks whether the file exists. If the file does not exist, it is created.
Absent checks whether the file exists and creates the file if it exists.
Directory specifies this is a directory
Path => (full file path, same as title by default)
Source => Fi
Tag: Puppet Apache modules class node regular expression => creating the httpd Base module #mkdir/etc/puppet/modules/httpd/{files,manifests,templates}-pv# tree/etc/puppet/modules/httpd//etc/puppet/modules/httpd/├──files//the configuration file called by the base module, The agent can download the files defined by the
Puppet Apply Command parameter IntroductionPreviously said puppet two modes of operation, the first type: C/S structure, the second type: single-machine operation. Apply is a code tool that executes local *.pp files independently, and is typically used to test debug puppet code locally.Puppet Apply Common parameters:[[Emailprotected]~]#puppetapply-hpuppet-apply (
Sep 5 08:41:35 2017Copyright (c) 1982, Oracle. All rights reserved.Connected to:Oracle database11g Enterprise Edition Release 11.2.0.3.0-productionWith Thepartitioning, OLAP, Data Mining and Real application testing options[Email protected]>selectstatus from v$instance;STATUS------------OPEN[Email protected]>selectname from V$datafile;NAME--------------------------------------------------------------------------------/u01/app/oracle/oradata/prod5/system01.dbf/u01/app/oracle/oradata/prod5/sysaux
Puppet installation and configuration-preparation workTwo machines: 192.168.205.20 (server side) 192.168.205.21 (client)Two machines close SELinux, empty iptables rules, and save, set hostnameVim/etc/selinux/configSelinux=disabledIptables-fService Iptables Save20 on hostname web9.aming.com, vi/etc/sysconfig/network definition hostname (permanent)21 on hostname web10.aming.com,vi/etc/sysconfig/network definition hostnameEdit the Hosts file, 20 and 21 a
Centos is one of the most widely used linux server systems. It is convenient to use yum for software package management, and is also liked by everyone who uses centos. I am also more and more fond of using yum to install software packages. Unless necessary, software is rarely compiled and installed.
There are also many centos extension sources (repo), such as the well-known EPEL and the two introduced in the previous yum source sharing article by mosquitoes.
However, it is not easy to use centos
1, at the beginning of the configuration certificate matching,/etc/hosts hostname,/etc/sysconfig/network hostname to puppet cert list--all display client hostname to the same, The server in the client's puppet configuration is to point to the hostname on the server, otherwise the certificate cannot be matched successfully and cannot be sent from S to C650) this.width=650; "id=" aimg_5844 "src=" http://www.a
System environment:
[Root@rhel6u3-102 puppet]# Uname-r
2.6.32-279.el6.x86_64
[Root@rhel6u3-102 puppet]# Cat/etc/redhat-release
Red Hat Enterprise Linux Server release 6.3 (Santiago)
First, preparatory work
1, the host name can resolve each other (DNS or hosts file can resolve each other)
Puppet Master (rhel6u3-102.rsyslog.org 192.168.100.102)
Tags: puppet system management follow ASE PUP product host authentication startUbuntu 16.04 build Puppet service:Puppet is a configuration management tool that enables system administrators to automate the configuration and management of server infrastructure.First, install the softwareMasterCurl-o Https://apt.puppetlabs.com/puppetlabs-release-pc1-xenial.debdpkg-i Puppetlabs-release-pc1-xenial.debapt-get up
2. Server-side InstallationInstall the puppet source #会在repo. D to generate the puppet sourceRpm-ivh "http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-7.noarch.rpm"Installing the server-side programYum install-y puppet-serverStart the serviceService puppetmaster StartBoot upChkconfig puppetmaster on3. Client InstallationInstalling the
Before one months of Zabbix, basically can be skilled use, but in the deployment of the time found that this thing in the deployment of the time the machine less line, the machine more manual installation hand will be disabled. The first reaction was to use the puppet, and then Master took the puppet directly. Simply learn a wave of their own, after all, this is an automated operation and maintenance of the
Recently in learning Puppet installation, configuration and use. Download official documents from the website. Because it is also just beginning to learn puppet, so I look at the official website of the document step by step. The official documents are also downloaded and uploaded to 51.http://down.51cto.com/data/1975148 the document address.Experiment Preparation:1, pre-preparation1)
First, puppetmaster configuration:1. Add environment variables to test whether the variables written are in effect.[[email protected] ~]# Vi/etc/profile Add the following: #puppet facterexport facterlib=/etc/puppet/modules/facts/lib/facter/ #自定义变量文件存放路径 [[email protected] ~]# Source/etc/profile2. Custom variable file path in:/etc/puppet/modules/$NAME/lib/facter #
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.