1. Expanded
Introduction
to Puppet
LOAD
Garrett Honeycutt
Professional Services Consultant
garrett@puppetlabs.com
http://linkedin.com/in/garretthoneycutt

2. The one-off myth
Your systems are not
beautiful snowflakes
photo from http://

3. The one-off myth
• Only temporary

4. The one-off myth
• Only temporary
• Replicas for pre-production environments

5. The one-off myth
• Only temporary
• Replicas for pre-production environments
• Disaster recovery

6. Why?

7. Why?
• reduce entropy

8. Why?
• reduce entropy
• disaster recovery

9. Why?
• reduce entropy
• disaster recovery
• change management

10. Why?
• reduce entropy
• disaster recovery
• change management
• infrastructure as code

11. Puppet Open Source Ecosystem
Puppet Distribution
Bundled with major OS
!
3,000 person mailing list
2,000 messages a month Puppet Community
300 people at all times in IRC Active participation
!
(#puppet on freenode.net)
100+ people 100+ modules
Puppet Contributors
contributing to contributed to
Framework
documentation Puppet Module
enhancements
and code
Forge
!

12. Puppet is
Pervasive
Web Entertainment Technology
Financial
Defense

13. Puppet Enterprise
What it is:
• Puppet and related components packaged and
integrated in one install:
• Puppet
• Puppet Master
• Dashboard
• Facter
• Ruby
• Apache
• Passenger, etc.

14. Puppet Enterprise
• Fully QA’d stack of Puppet and dependencies
• Simplified installation
• Ease of maintenance
• Pre-configured for scalability and performance
• Predictable enhancement delivery
• Enhanced enterprise class Support

15. How Puppet Works
1 Define: With Puppet's declarative
language you design a graph of
relationships between resources within
reusable modules. These modules define
your infrastructure in its desired state.
GE
E RA
C OV
SE
EA
CR
IN
ND
E A
I T E R AT
4 Report: Puppet Dashboard reports 2 Simulate: With this resource
track relationships between graph, Puppet is unique in its
components and all changes, allowing ability to simulate deployments, enabling
you to keep up with security and you to test changes without disruption
compliance mandates. And with the to your infrastructure.
open API you can integrate Puppet with
third party monitoring tools.
CURRENT 3 Enforce: Puppet compares your
STATE system to the desired state as you
define it, and automatically enforces it
DESIRED
STATE to the desired state ensuring your system
is in compliance.

16. Use Puppet to create composable configurations
Modules and manage the enterprise infrastructure
1 Define Your Resources in Modules.
! "#$%!&'(()$*!+,'!-).#/)!+,'0!1,-'2)3!4+!/,-)!
9GHGAG7D "DA!7DEFDE G&&!7DEFDE 7D?MEJH = 52633#.#56$#,/3*!3'5%!63!")4!7)08)0!,0!96$6463)*!622,:#/;!
+,'!$,!-).#/)!0)26$#,/3%#(3!4)$:))/!0)3,'05)3!6/-!
5,/.#;'0)!$%,'36/-3!,.!3)08)03!6$!,/5)<!
Via Custom Assign resource relationships automatically.!
Puppet Dashboard External Source
(CMDB, LDAP, etc.)
2
! =,'!56/!$%)/!633#;/!6/-!-)(2,+!5,/.#;'06$#,/3!
8#6!&'(()$!963%4,60-*!,0!:#$%!+,'0!,:/!5'3$,1#>)-!
?@9A!$,,23<
"DA!7DEFDE7 9GHGAG7D!7DEFDE7 G&&IJ?GHJKL!7DEFDE7
LK9D LK9D LK9D
3 Reusable, composable configurations. !
! "#$%!&'(()$!+,'!56/!0)B'3)!1,-'2)3!650,33!1'2$#(2)!
/,-)3*!#/!:%6$)8)0!5,14#/6$#,/!+,'!/))-*!0)-'5#/;!
0)()$#$#8)!$63C3!6/-!)2#1#/6$#/;!)00,0B(0,/)!350#($3<!
LK9D LK9D LK9D Multi Node

17. Puppet Assigns and
Maintains a Node’s

18. Managing Configuration
Drift

19. How Puppet Manages Data Flow
for Individual Nodes
Node
1 Facts
The node sends
normalized data
about itself to the
Puppet Master.
SSL secure 2 Catalog
Puppet uses the Facts to
encryption compile a Catalog that
on all data specifies how the node
transport should be configured.
Report 3
The node
reports back
to Puppet
indicating the
configuration is
complete, which
is visible in the Puppet
Puppet Dashboard. Master 4 Report Collector
(Puppet or 3rd party tool)
Report
can also send data
to third party tools.

20. Facts
Automatically
Maintained Asset
Inventory

21. domain => local
facterversion => 1.5.8
fqdn => sliver.local
hardwaremodel => i386
hostname => sliver
interfaces => lo0,gif0,stf0,en0,en1,fw0,vmnet1,vboxnet0
ipaddress => 192.168.174.1
ipaddress_lo0 => 127.0.0.1
ipaddress_vmnet1 => 192.168.174.1
kernel => Darwin
kernelmajversion => 10.6
kernelrelease => 10.6.0
macosx_productname => Mac OS X
macosx_productversion => 10.6.6
netmask => 255.255.255.0
netmask_lo0 => 255.0.0.0
netmask_vmnet1 => 255.255.255.0
network_lo0 => 127.0.0.0
network_vmnet1 => 192.168.174.0
operatingsystem => Darwin
operatingsystemrelease => 10.6.0
path => /opt/local/bin:/opt/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/
usr/X11/bin:/Users/gh/bin:/Users/gh/.gem/ruby/1.8/bin/
ps => ps auxwww
puppetversion => 2.6.4
rubysitedir => /opt/local/lib/ruby/site_ruby/1.8
timezone => PST
uptime => 1 day
rubyversion => 1.8.7
sp_bus_speed => 1.07 GHz

22. Custom Facts

23. How Puppet Manages Data Flow
for Individual Nodes
Node
1 Facts
The node sends
normalized data
about itself to the
Puppet Master.
SSL secure 2 Catalog
Puppet uses the Facts to
encryption compile a Catalog that
on all data specifies how the node
transport should be configured.
Report 3
The node
reports back
to Puppet
indicating the
configuration is
complete, which
is visible in the Puppet
Puppet Dashboard. Master 4 Report Collector
(Puppet or 3rd party tool)
Report
can also send data
to third party tools.

24. Catalog
• Automatically
maintained
comprehensive resource list
• Easilyvalidated against
compliance requirements prior
to client configuration

25. How Puppet Manages Data Flow
for Individual Nodes
Node
1 Facts
The node sends
normalized data
about itself to the
Puppet Master.
SSL secure 2 Catalog
Puppet uses the Facts to
encryption compile a Catalog that
on all data specifies how the node
transport should be configured.
Report 3
The node
reports back
to Puppet
indicating the
configuration is
complete, which
is visible in the Puppet
Puppet Dashboard. Master 4 Report Collector
(Puppet or 3rd party tool)
Report
can also send data
to third party tools.

26. Report
• Comprehensive report of every
change ever made, correlated to every
resource being managed
• Easily
validated against compliance
requirements after reach run

27. Report
•http
•log
•store
•tagmail

28. Report

29. What not How

30. What not how

31. Example Resource
• cron
Types
• exec
• file
• group
• host
• zfs
• mount
• package
• service
• sshkey

32. Package-File-
Service

33. File Serving

34. Templates

35. Templates -
Advanced

36. Syntax Checking

37. Storeconfigs
Ability to pass data between nodes, via
a database acting as a proxy

38. Storeconfigs
Ability to pass data between nodes, via
a database acting as a proxy
• MySQL
• SQLite3
• PostgreSQL
• Oracle

39. Storeconfigs

40. External Node
Classifier
•Puppet Dashboard
•Your own CMDB

41. External Node
Classifier
A script that takes $certname as
an argument and outputs YAML to
STDOUT

42. External Node
Classifier

43. External Node
Classifier

44. Expanded
Introduction
to Puppet
LOAD
Garrett Honeycutt
Professional Services Consultant
garrett@puppetlabs.com
http://linkedin.com/in/garretthoneycutt