Giter VIP home page Giter VIP logo

pltraining-bootstrap's Introduction

Bootstrap module for Puppet Training VMs

This module is used to build all classroom training VMs. Each supported role is managed via a single role class. The standard classroom VM is managed via the bootstrap::role::master role.

These classes are designed to be idempotent, so classroom VMs can be run against this classification to receive updates. This is automated via the first install bootstrap script and by the classroom manager.

Module Quirks

For the most part, this is a fairly standard module. It preconfigures the machine with local yum & gem repositories that can be used when running in offline mode, preinstalls Docker and images, pre-installs the Puppet Enterprise stack, pre-installs the PDF creation stack, etc. There are a few things that may be unexpected though:

  • In order to allow the classroom command to update modules in the production environment, this module manages a Puppetfile. To update the modules deployed in the classroom VM, you should update this Puppetfile
  • To provide consistent access to all classroom VMs, even after password randomization or changes, we manage an ssh key, which is conveniently the same key as in the courseware repository and used by the deprecated rake ssh command.
  • We preinstall courseware on each classroom VM as a git clone of the repository. To authorize that, the classroom master has several keys stored in eyaml that are consumed by classes in this module.

pltraining-bootstrap's People

Contributors

acidprime avatar binford2k avatar fiddyspence avatar gsarjeant avatar hunner avatar ipcrm avatar josephoaks avatar kjhenner avatar klynton avatar marrero984 avatar mwaggett avatar nanliu avatar nfagerlund avatar puppetpirate avatar samuelson avatar supercow avatar thedarkwriter avatar trevharmon avatar trlinkin avatar

Stargazers

 avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

pltraining-bootstrap's Issues

Use of hard-coded passwords and binding to 0.0.0.0 are security smells

Greetings,

I am a security researcher, who is looking for security smells in Puppet scripts.
I noticed instances of hard-coded passwords, which are against the best practices
recommended by Common Weakness Enumeration (CWE) [https://cwe.mitre.org/data/definitions/259.html] and also by other security practitioners.
I suggest use of undef to mitigate this smell. Feedback is welcome.

PR: #354
Source: https://github.com/puppetlabs/pltraining-bootstrap/blob/master/manifests/role/learning.pp

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.