INFN wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Add an existing host to Foreman ======
==== on client node with centos7 ====

In the existing host download this script: [[http://cld-foreman.cloud.pd.infn.it/foreman_client_centos7.sh | foreman_client_centos7.sh]]
<code>
PUPPETMASTER="cld-foreman.cloud.pd.infn.it"

# start with a subscribed RHEL7 box
rpm -Uvh https://dl.fedoraproject.org/pub/epel/7/x86_64/Packages/e/epel-release-7-12.noarch.rpm
rpm -Uvh https://yum.puppetlabs.com/el/7/products/x86_64/puppetlabs-release-7-12.noarch.rpm
yum clean all

# install dependent packages
yum install -y augeas puppet git policycoreutils-python

# Set PuppetServer
augtool -s set /files/etc/puppet/puppet.conf/agent/server $PUPPETMASTER

# Set Environment
augtool -s set /files/etc/puppet/puppet.conf/agent/environment production

# Set ca cert
augtool -s set /files/etc/puppet/puppet.conf/agent/ca_server $PUPPETMASTER

# Set cert name
augtool -s set /files/etc/puppet/puppet.conf/agent/certname `hostname -f`

# Puppet Plugins
augtool -s set /files/etc/puppet/puppet.conf/main/pluginsync true

# Allow puppetrun from foreman/puppet master to work
augtool -s set /files/etc/puppet/puppet.conf/main/listen true

# Allow execution of puppetrun button from puppet master 
num=$(awk 'END { print NR }' /etc/puppet/auth.conf)
lunum=`expr $num - 4`
sed -i "$lunum i\ \n#added to allow execution of puppetrun button\npath /run\nauth any\nmethod save\nallow $PUPPETMASTER\n" /etc/puppet/auth.conf
# for older versions of puppet, also need to "touch /etc/puppet/namespace.auth"

# check in to foreman
puppet agent --test
sleep 1
puppet agent --test

systemctl start puppet

systemctl enable puppet
</code>

If some warnings or errors (like Exiting; no certificate found ...) have been thrown, you can safely ignore them.   

Remember to give the executable permission to the script and launch it as root user:
<code>
chmod +x foreman_client_centos7.sh
./foreman_client_centos7.sh
</code>

==== on client node with centos6 ====

In the existing host download this script: [[http://cld-foreman.cloud.pd.infn.it/foreman_client.sh | foreman_client.sh]]
<code>
PUPPETMASTER="cld-foreman.cloud.pd.infn.it"

# start with a subscribed RHEL7 box
rpm -Uvh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
rpm -Uvh https://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-7.noarch.rpm
rpm -Uvh http://mirror3.mirror.garr.it/mirrors/scientific/6x/x86_64/os/Packages/yum-utils-1.1.30-14.el6.noarch.rpm
yum-config-manager --enable rhel-6-server-optional-rpms
yum clean all

# install dependent packages
yum install -y augeas puppet git policycoreutils-python

# Set PuppetServer
augtool -s set /files/etc/puppet/puppet.conf/agent/server $PUPPETMASTER

# Set Environment
augtool -s set /files/etc/puppet/puppet.conf/agent/environment production

# Set ca cert
augtool -s set /files/etc/puppet/puppet.conf/agent/ca_server $PUPPETMASTER

# Set cert name
augtool -s set /files/etc/puppet/puppet.conf/agent/certname `hostname -f`

# Puppet Plugins
augtool -s set /files/etc/puppet/puppet.conf/main/pluginsync true

# Allow puppetrun from foreman/puppet master to work
augtool -s set /files/etc/puppet/puppet.conf/main/listen true

# Allow execution of puppetrun button from puppet master 
num=$(awk 'END { print NR }' /etc/puppet/auth.conf)
lunum=`expr $num - 4`
sed -i "$lunum i\ \n#added to allow execution of puppetrun button\npath /run\nauth any\nmethod save\nallow $PUPPETMASTER\n" /etc/puppet/auth.conf
# for older versions of puppet, also need to "touch /etc/puppet/namespace.auth"

# check in to foreman
puppet agent --test
sleep 1
puppet agent --test

/etc/init.d/puppet start

chkconfig puppet on
</code>

If some warnings or errors (like Exiting; no certificate found ...) have been thrown,you can safely ignore them.

Remember to give the executable permission to the script and launch it as root user:
<code>
chmod +x foreman_client.sh
./foreman_client.sh
</code>

==== on puppet server node ====

On the puppet master server you have to run these commands:
<code>
/opt/puppetlabs/bin/puppetserver ca sign --all
systemctl restart puppetserver
systemctl restart foreman-proxy
</code>

==== on foreman node ====

On the foreman node you have to run these commands (changing <hostname_with domain> with the name of the new host imported i.e. ceph-rgw-02.cloud.pd.infn.it):
<code>
/usr/bin/hammer host update --name <hostname_with domain> --hostgroup hosts_all --location "Default Location" --organization "Default Organization"

systemctl restart httpd
</code>

In our infrastructure the foreman and the puppet server node is the same host: cld-foreman.cloud.pd.infn.it

The new host should appear in the Host tab of the web application.