Installation of remote-execution plugin fails on Foreman proxy

Support
1

Problem:

I want to install the remote execution plugin on a foreman-proxy, which fails during installation.

2022-11-10 13:26:29 [ERROR ] [configure] Evaluation Error: Error while evaluating a Method call, 'regsubst' parameter 'target' expects a value of type Array or String, got Undef (file: /usr/share/foreman-installer/modules/foreman/manifests/plugin/tasks.pp, line: 18, column: 56) on node proxy1.example.org

and

2022-11-10 13:26:29 [DEBUG ] [configure] Unknown variable: 'foreman::params::plugin_prefix'. (file: /usr/share/foreman-installer/modules/foreman/manifests/plugin/tasks.pp, line: 18, column: 16)
2022-11-10 13:26:29 [ERROR ] [configure] Evaluation Error: Error while evaluating a Method call, 'regsubst' parameter 'target' expects a value of type Array or String, got Undef (file: /usr/share/foreman-installer/modules/foreman/manifests/plugin/tasks.pp, line: 18, column: 56) on proxy1.example.org

Expected outcome:

Working remote execution plugin.

Foreman and Proxy versions:

Version

3.0.2

Active features

  • Discovery

  • Dynflow

  • Logs

  • Puppet

  • Puppet CA

  • Registration

  • SSH

  • Templates

  • TFTP

Foreman and Proxy plugin versions:

Discovery

Version

1.0.5

Dynflow

Version

0.5.2

Registration

Version

3.0.2

SSH

Version

0.4.1

TFTP

Version

3.0.2

TFTP server

false

Templates

Version

3.0.2

Distribution and version:

Other relevant data:

2

The proxy only needs the proxy plugin, not the foreman plugin which you seem to be enabling.

What is your Installer command line?

3

I used:

foreman-installer --enable-foreman-plugin-remote-execution --enable-foreman-proxy-plugin-remote-execution-ssh

This is the /etc/foreman-installer/scenarios.d/foreman-answers.yaml

# Format:
# <classname>: false - don't include this class
# <classname>: true - include and use the defaults
# <classname>:
#   <param>: <value> - include and override the default(s)
#
# See params.pp in each class for what options are available

---
foreman: false
foreman::cli: false
foreman::cli::ansible: false
foreman::cli::azure: false
foreman::cli::discovery: false
foreman::cli::kubevirt: false
foreman::cli::openscap: false
foreman::cli::puppet: false
foreman::cli::remote_execution: false
foreman::cli::tasks: false
foreman::cli::templates: false
foreman::cli::webhooks: false
foreman_proxy:
  version: present
  ensure_packages_version: present
  bind_host:
  - "*"
  http_port: 8000
  ssl_port: 8443
  groups: []
  log: "/var/log/foreman-proxy/proxy.log"
  log_level: INFO
  log_buffer: 2000
  log_buffer_errors: 1000
  http: true
  ssl: true
  ssl_ca: "/etc/foreman-proxy/ca.pem"
  ssl_cert: "/etc/foreman-proxy/cert.pem"
  ssl_key: "/etc/foreman-proxy/key.pem"
  foreman_ssl_ca: "/etc/foreman-proxy/ca.pem"
  foreman_ssl_cert: "/etc/foreman-proxy/cert.pem"
  foreman_ssl_key: "/etc/foreman-proxy/key.pem"
  trusted_hosts:
  - foreman.example.org
  ssl_disabled_ciphers: []
  tls_disabled_versions: []
  manage_sudoersd: true
  use_sudoersd: true
  use_sudoers: true
  puppetca: true
  puppetca_listen_on: https
  ssldir: "/etc/puppetlabs/puppet/ssl"
  puppetdir: "/etc/puppetlabs/puppet"
  puppetca_cmd: "/opt/puppetlabs/bin/puppet cert"
  puppet_group: puppet
  puppetca_provider: puppetca_hostname_whitelisting
  autosignfile: "/etc/puppetlabs/puppet/autosign.conf"
  puppetca_sign_all: false
  puppetca_tokens_file: "/var/lib/foreman-proxy/tokens.yml"
  puppetca_token_ttl: 360
  puppetca_certificate: 
  manage_puppet_group: true
  puppet: true
  puppet_listen_on: https
  puppet_url: https://proxy1.example.org:8140
  puppet_ssl_ca: "/etc/puppetlabs/puppet/ssl/certs/ca.pem"
  puppet_ssl_cert: "/etc/puppetlabs/puppet/ssl/certs/proxy1.example.org.pem"
  puppet_ssl_key: "/etc/puppetlabs/puppet/ssl/private_keys/proxy1.example.org.pem"
  puppet_api_timeout: 30
  templates: true
  templates_listen_on: both
  template_url: http://proxy1.example.org:8000
  registration: true
  registration_listen_on: https
  logs: true
  logs_listen_on: https
  httpboot: false
  httpboot_listen_on: both
  tftp: true
  tftp_listen_on: https
  tftp_managed: true
  tftp_manage_wget: true
  tftp_syslinux_filenames:
  - "/usr/share/syslinux/chain.c32"
  - "/usr/share/syslinux/mboot.c32"
  - "/usr/share/syslinux/menu.c32"
  - "/usr/share/syslinux/memdisk"
  - "/usr/share/syslinux/pxelinux.0"
  tftp_root: "/var/lib/tftpboot"
  tftp_dirs:
  - "/var/lib/tftpboot/pxelinux.cfg"
  - "/var/lib/tftpboot/grub"
  - "/var/lib/tftpboot/grub2"
  - "/var/lib/tftpboot/boot"
  - "/var/lib/tftpboot/ztp.cfg"
  - "/var/lib/tftpboot/poap.cfg"
  tftp_servername: 
  tftp_replace_grub2_cfg: false
  dhcp: false
  dhcp_listen_on: https
  dhcp_managed: true
  dhcp_provider: isc
  dhcp_subnets: []
  dhcp_ping_free_ip: true
  dhcp_option_domain:
  - example.org
  dhcp_search_domains: 
  dhcp_interface: ens32
  dhcp_additional_interfaces: []
  dhcp_gateway: 
  dhcp_range: 
  dhcp_pxeserver: 
  dhcp_pxefilename: pxelinux.0
  dhcp_network: 
  dhcp_netmask: 
  dhcp_nameservers: default
  dhcp_server: 127.0.0.1
  dhcp_config: "/etc/dhcp/dhcpd.conf"
  dhcp_leases: "/var/lib/dhcpd/dhcpd.leases"
  dhcp_key_name: 
  dhcp_key_secret: 
  dhcp_omapi_port: 7911
  dhcp_peer_address: 
  dhcp_node_type: standalone
  dhcp_failover_address: 10.11.50.50
  dhcp_failover_port: 519
  dhcp_max_response_delay: 30
  dhcp_max_unacked_updates: 10
  dhcp_mclt: 300
  dhcp_load_split: 255
  dhcp_load_balance: 3
  dhcp_manage_acls: true
  dns: false
  dns_listen_on: https
  dns_managed: true
  dns_provider: nsupdate
  dns_interface: ens32
  dns_zone: example.org
  dns_reverse: 
  dns_server: 127.0.0.1
  dns_ttl: 86400
  dns_tsig_keytab: "/etc/foreman-proxy/dns.keytab"
  dns_tsig_principal: foremanproxy/proxy1.example.org@HOGREFE.DE
  dns_forwarders: []
  libvirt_network: default
  libvirt_connection: qemu:///system
  bmc: false
  bmc_listen_on: https
  bmc_default_provider: ipmitool
  bmc_ssh_user: root
  bmc_ssh_key: "/usr/share/foreman/.ssh/id_rsa"
  bmc_ssh_powerstatus: 'true'
  bmc_ssh_powercycle: shutdown -r +1
  bmc_ssh_poweroff: shutdown +1
  bmc_ssh_poweron: 'false'
  realm: false
  realm_listen_on: https
  realm_provider: freeipa
  realm_keytab: "/etc/foreman-proxy/freeipa.keytab"
  realm_principal: realm-proxy@EXAMPLE.COM
  freeipa_config: "/etc/ipa/default.conf"
  freeipa_remove_dns: true
  keyfile: "/etc/rndc.key"
  register_in_foreman: true
  foreman_base_url: https://foreman.example.org
  registered_name: proxy1.example.org
  registered_proxy_url: 
  oauth_effective_user: admin
  oauth_consumer_key: c4ay2TbSGSaF4nMZ9wYR3Hs7em8Mpaw2
  oauth_consumer_secret: JKVPDK23GtU52yyUZXB4PQqfuFp9Htg2
puppet:
  version: present
  user: puppet
  group: puppet
  dir: "/etc/puppetlabs/puppet"
  codedir: "/etc/puppetlabs/code"
  vardir: "/opt/puppetlabs/puppet/cache"
  logdir: "/var/log/puppetlabs/puppet"
  rundir: "/var/run/puppetlabs"
  ssldir: "/etc/puppetlabs/puppet/ssl"
  sharedir: "/opt/puppetlabs/puppet"
  manage_packages: true
  dir_owner: root
  dir_group: 
  package_provider: 
  package_install_options: 
  package_source: 
  port: 8140
  pluginsync: true
  splay: false
  splaylimit: 1800
  autosign: "/etc/puppetlabs/puppet/autosign.conf"
  autosign_entries: []
  autosign_mode: '0664'
  autosign_content: 
  autosign_source: 
  runinterval: 1800
  usecacheonfailure: true
  runmode: service
  run_hour: 
  run_minute: 
  unavailable_runmodes: []
  cron_cmd: 
  systemd_cmd: 
  systemd_randomizeddelaysec: 0
  agent_noop: false
  show_diff: false
  module_repository: 
  http_connect_timeout: 
  http_read_timeout: 
  ca_server: 
  ca_port: 
  ca_crl_filepath: 
  prerun_command: 
  postrun_command: 
  dns_alt_names: []
  use_srv_records: false
  srv_domain: example.org
  pluginsource: puppet:///plugins
  pluginfactsource: puppet:///pluginfacts
  additional_settings: {}
  agent_additional_settings: {}
  agent_restart_command: "/usr/bin/systemctl reload-or-restart puppet"
  classfile: "$statedir/classes.txt"
  hiera_config: "$confdir/hiera.yaml"
  auth_template: puppet/auth.conf.erb
  allow_any_crl_auth: false
  auth_allowed:
  - "$1"
  client_package:
  - puppet-agent
  agent: true
  remove_lock: true
  report: true
  client_certname: proxy1.example.org
  puppetmaster: 
  systemd_unit_name: puppet-run
  service_name: puppet
  syslogfacility: 
  environment: production
  server: true
  server_admin_api_whitelist:
  - localhost
  - proxy1.example.org
  server_manage_user: true
  server_user: puppet
  server_group: puppet
  server_dir: "/etc/puppetlabs/puppet"
  server_ip: 0.0.0.0
  server_port: 8140
  server_ca: true
  server_ca_crl_sync: false
  server_crl_enable: 
  server_ca_auth_required: true
  server_ca_client_self_delete: false
  server_ca_client_whitelist:
  - localhost
  - proxy1.example.org
  server_custom_trusted_oid_mapping: 
  server_http: false
  server_http_port: 8139
  server_reports: foreman
  server_puppetserver_dir: "/etc/puppetlabs/puppetserver"
  server_puppetserver_vardir: "/opt/puppetlabs/server/data/puppetserver"
  server_puppetserver_rundir: "/var/run/puppetlabs/puppetserver"
  server_puppetserver_logdir: "/var/log/puppetlabs/puppetserver"
  server_puppetserver_version: 
  server_external_nodes: "/etc/puppetlabs/puppet/node.rb"
  server_trusted_external_command: 
  server_cipher_suites:
  - TLS_RSA_WITH_AES_256_CBC_SHA256
  - TLS_RSA_WITH_AES_256_CBC_SHA
  - TLS_RSA_WITH_AES_128_CBC_SHA256
  - TLS_RSA_WITH_AES_128_CBC_SHA
  server_config_version: 
  server_connect_timeout: 120000
  server_git_repo: false
  server_default_manifest: false
  server_default_manifest_path: "/etc/puppet/manifests/default_manifest.pp"
  server_default_manifest_content: ''
  server_environments_owner: puppet
  server_environments_group: 
  server_environments_mode: '0755'
  server_envs_dir: "/etc/puppetlabs/code/environments"
  server_envs_target: 
  server_common_modules_path:
  - "/etc/puppetlabs/code/environments/common"
  - "/etc/puppetlabs/code/modules"
  - "/opt/puppetlabs/puppet/modules"
  - "/usr/share/puppet/modules"
  server_git_repo_mode: '0755'
  server_git_repo_path: "/opt/puppetlabs/puppet/cache/puppet.git"
  server_git_repo_group: puppet
  server_git_repo_user: puppet
  server_git_branch_map: {}
  server_idle_timeout: 1200000
  server_post_hook_content: puppet/server/post-receive.erb
  server_post_hook_name: post-receive
  server_storeconfigs: false
  server_ruby_load_paths:
  - "/opt/puppetlabs/puppet/lib/ruby/vendor_ruby"
  server_ssl_dir: "/etc/puppetlabs/puppet/ssl"
  server_ssl_dir_manage: true
  server_ssl_key_manage: true
  server_ssl_protocols:
  - TLSv1.2
  server_ssl_chain_filepath: 
  server_package: 
  server_version: 
  server_certname: proxy1.example.org
  server_request_timeout: 60
  server_strict_variables: false
  server_additional_settings: {}
  server_foreman: true
  server_foreman_url: https://foreman.example.org
  server_foreman_ssl_ca: "/etc/foreman-proxy/ca.pem"
  server_foreman_ssl_cert: "/etc/foreman-proxy/cert.pem"
  server_foreman_ssl_key: "/etc/foreman-proxy/key.pem"
  server_foreman_facts: true
  server_puppet_basedir: "/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet"
  server_parser: current
  server_environment_timeout: 
  server_jvm_java_bin: "/usr/bin/java"
  server_jvm_config: "/etc/sysconfig/puppetserver"
  server_jvm_min_heap_size: 2G
  server_jvm_max_heap_size: 2G
  server_jvm_extra_args:
  - "-Djruby.logger.class=com.puppetlabs.jruby_utils.jruby.Slf4jLogger"
  - "-XX:ReservedCodeCacheSize=512m"
  server_jvm_cli_args: 
  server_jruby_gem_home: "/opt/puppetlabs/server/data/puppetserver/jruby-gems"
  server_max_active_instances: 4
  server_max_requests_per_instance: 0
  server_max_queued_requests: 0
  server_max_retry_delay: 1800
  server_multithreaded: false
  server_use_legacy_auth_conf: false
  server_check_for_updates: true
  server_environment_class_cache_enabled: false
  server_allow_header_cert_info: false
  server_web_idle_timeout: 30000
  server_puppetserver_jruby9k: false
  server_puppetserver_metrics: false
  server_puppetserver_profiler: false
  server_metrics_jmx_enable: true
  server_metrics_graphite_enable: false
  server_metrics_graphite_host: 127.0.0.1
  server_metrics_graphite_port: 2003
  server_metrics_server_id: proxy1.example.org
  server_metrics_graphite_interval: 5
  server_metrics_allowed: 
  server_puppetserver_experimental: true
  server_puppetserver_auth_template: 
  server_puppetserver_trusted_agents: []
  server_puppetserver_trusted_certificate_extensions: []
  server_compile_mode: 
  server_acceptor_threads: 
  server_selector_threads: 
  server_ssl_acceptor_threads: 
  server_ssl_selector_threads: 
  server_max_threads: 
  server_ca_allow_sans: false
  server_ca_allow_auth_extensions: false
  server_ca_enable_infra_crl: false
  server_max_open_files: 
  server_versioned_code_id: 
  server_versioned_code_content: 
foreman::plugin::acd: false
foreman::plugin::ansible: false
foreman::plugin::azure: false
foreman::plugin::bootdisk: false
foreman::plugin::chef: false
foreman::plugin::column_view: false
foreman::plugin::default_hostgroup: false
foreman::plugin::dhcp_browser: false
foreman::plugin::discovery: false
foreman::plugin::expire_hosts: false
foreman::plugin::hooks: false
foreman::plugin::host_extra_validator: false
foreman::plugin::kubevirt: false
foreman::plugin::leapp: false
foreman::plugin::memcache: false
foreman::plugin::monitoring: false
foreman::plugin::omaha: false
foreman::plugin::openscap: false
foreman::plugin::ovirt_provision: false
foreman::plugin::puppet: false
foreman::plugin::puppetdb: false
foreman::plugin::remote_execution: {}
foreman::plugin::remote_execution::cockpit: false
foreman::plugin::salt: false
foreman::plugin::setup: false
foreman::plugin::snapshot_management: false
foreman::plugin::statistics: false
foreman::plugin::tasks: false
foreman::plugin::templates: false
foreman::plugin::webhooks: false
foreman::compute::ec2: false
foreman::compute::gce: false
foreman::compute::libvirt: false
foreman::compute::openstack: false
foreman::compute::ovirt: false
foreman::compute::vmware: false
foreman_proxy::plugin::acd: false
foreman_proxy::plugin::ansible: false
foreman_proxy::plugin::chef: false
foreman_proxy::plugin::dhcp::infoblox: false
foreman_proxy::plugin::dhcp::remote_isc: false
foreman_proxy::plugin::discovery:
  install_images: true
  tftp_root: "/var/lib/tftpboot"
  source_url: http://downloads.theforeman.org/discovery/releases/latest/
  image_name: fdi-image-latest.tar
foreman_proxy::plugin::dns::infoblox: false
foreman_proxy::plugin::dns::powerdns: false
foreman_proxy::plugin::dynflow: false
foreman_proxy::plugin::monitoring: false
foreman_proxy::plugin::omaha: false
foreman_proxy::plugin::openscap: false
foreman_proxy::plugin::remote_execution::ssh:
  enabled: true
  listen_on: https
  generate_keys: true
  install_key: false
  ssh_identity_dir: "/var/lib/foreman-proxy/ssh"
  ssh_identity_file: id_rsa_foreman_proxy
  ssh_keygen: "/usr/bin/ssh-keygen"
  local_working_dir: "/var/tmp"
  remote_working_dir: "/var/tmp"
  ssh_kerberos_auth: false
  async_ssh: false
foreman_proxy::plugin::salt: false
foreman_proxy::plugin::shellhooks: false

and this is the version I used before trying to install the plugin: This does not produce any errors:

# Format:
# <classname>: false - don't include this class
# <classname>: true - include and use the defaults
# <classname>:
#   <param>: <value> - include and override the default(s)
#
# See params.pp in each class for what options are available

---
foreman: false
foreman::cli: false
foreman::cli::ansible: false
foreman::cli::azure: false
foreman::cli::discovery: false
foreman::cli::kubevirt: false
foreman::cli::openscap: false
foreman::cli::puppet: false
foreman::cli::remote_execution: false
foreman::cli::tasks: false
foreman::cli::templates: false
foreman::cli::webhooks: false
foreman_proxy:
  version: present
  ensure_packages_version: present
  bind_host:
  - "*"
  http_port: 8000
  ssl_port: 8443
  groups: []
  log: "/var/log/foreman-proxy/proxy.log"
  log_level: INFO
  log_buffer: 2000
  log_buffer_errors: 1000
  http: true
  ssl: true
  ssl_ca: "/etc/foreman-proxy/ca.pem"
  ssl_cert: "/etc/foreman-proxy/cert.pem"
  ssl_key: "/etc/foreman-proxy/key.pem"
  foreman_ssl_ca: "/etc/foreman-proxy/ca.pem"
  foreman_ssl_cert: "/etc/foreman-proxy/cert.pem"
  foreman_ssl_key: "/etc/foreman-proxy/key.pem"
  trusted_hosts:
  - foreman.example.org
  ssl_disabled_ciphers: []
  tls_disabled_versions: []
  manage_sudoersd: true
  use_sudoersd: true
  use_sudoers: true
  puppetca: true
  puppetca_listen_on: https
  ssldir: "/etc/puppetlabs/puppet/ssl"
  puppetdir: "/etc/puppetlabs/puppet"
  puppetca_cmd: "/opt/puppetlabs/bin/puppet cert"
  puppet_group: puppet
  puppetca_provider: puppetca_hostname_whitelisting
  autosignfile: "/etc/puppetlabs/puppet/autosign.conf"
  puppetca_sign_all: false
  puppetca_tokens_file: "/var/lib/foreman-proxy/tokens.yml"
  puppetca_token_ttl: 360
  puppetca_certificate: 
  manage_puppet_group: true
  puppet: true
  puppet_listen_on: https
  puppet_url: https://proxy1.example.org:8140
  puppet_ssl_ca: "/etc/puppetlabs/puppet/ssl/certs/ca.pem"
  puppet_ssl_cert: "/etc/puppetlabs/puppet/ssl/certs/proxy1.example.org.pem"
  puppet_ssl_key: "/etc/puppetlabs/puppet/ssl/private_keys/proxy1.example.org.pem"
  puppet_api_timeout: 30
  templates: true
  templates_listen_on: both
  template_url: http://proxy1.example.org:8000
  registration: true
  registration_listen_on: https
  logs: true
  logs_listen_on: https
  httpboot: false
  httpboot_listen_on: both
  tftp: true
  tftp_listen_on: https
  tftp_managed: true
  tftp_manage_wget: true
  tftp_syslinux_filenames:
  - "/usr/share/syslinux/chain.c32"
  - "/usr/share/syslinux/mboot.c32"
  - "/usr/share/syslinux/menu.c32"
  - "/usr/share/syslinux/memdisk"
  - "/usr/share/syslinux/pxelinux.0"
  tftp_root: "/var/lib/tftpboot"
  tftp_dirs:
  - "/var/lib/tftpboot/pxelinux.cfg"
  - "/var/lib/tftpboot/grub"
  - "/var/lib/tftpboot/grub2"
  - "/var/lib/tftpboot/boot"
  - "/var/lib/tftpboot/ztp.cfg"
  - "/var/lib/tftpboot/poap.cfg"
  tftp_servername: 
  tftp_replace_grub2_cfg: false
  dhcp: false
  dhcp_listen_on: https
  dhcp_managed: true
  dhcp_provider: isc
  dhcp_subnets: []
  dhcp_ping_free_ip: true
  dhcp_option_domain:
  - example.org
  dhcp_search_domains: 
  dhcp_interface: ens32
  dhcp_additional_interfaces: []
  dhcp_gateway: 
  dhcp_range: 
  dhcp_pxeserver: 
  dhcp_pxefilename: pxelinux.0
  dhcp_network: 
  dhcp_netmask: 
  dhcp_nameservers: default
  dhcp_server: 127.0.0.1
  dhcp_config: "/etc/dhcp/dhcpd.conf"
  dhcp_leases: "/var/lib/dhcpd/dhcpd.leases"
  dhcp_key_name: 
  dhcp_key_secret: 
  dhcp_omapi_port: 7911
  dhcp_peer_address: 
  dhcp_node_type: standalone
  dhcp_failover_address: 10.11.50.50
  dhcp_failover_port: 519
  dhcp_max_response_delay: 30
  dhcp_max_unacked_updates: 10
  dhcp_mclt: 300
  dhcp_load_split: 255
  dhcp_load_balance: 3
  dhcp_manage_acls: true
  dns: false
  dns_listen_on: https
  dns_managed: true
  dns_provider: nsupdate
  dns_interface: ens32
  dns_zone: example.org
  dns_reverse: 
  dns_server: 127.0.0.1
  dns_ttl: 86400
  dns_tsig_keytab: "/etc/foreman-proxy/dns.keytab"
  dns_tsig_principal: foremanproxy/proxy1.example.org@HOGREFE.DE
  dns_forwarders: []
  libvirt_network: default
  libvirt_connection: qemu:///system
  bmc: false
  bmc_listen_on: https
  bmc_default_provider: ipmitool
  bmc_ssh_user: root
  bmc_ssh_key: "/usr/share/foreman/.ssh/id_rsa"
  bmc_ssh_powerstatus: 'true'
  bmc_ssh_powercycle: shutdown -r +1
  bmc_ssh_poweroff: shutdown +1
  bmc_ssh_poweron: 'false'
  realm: false
  realm_listen_on: https
  realm_provider: freeipa
  realm_keytab: "/etc/foreman-proxy/freeipa.keytab"
  realm_principal: realm-proxy@EXAMPLE.COM
  freeipa_config: "/etc/ipa/default.conf"
  freeipa_remove_dns: true
  keyfile: "/etc/rndc.key"
  register_in_foreman: true
  foreman_base_url: https://foreman.example.org
  registered_name: proxy1.example.org
  registered_proxy_url: 
  oauth_effective_user: admin
  oauth_consumer_key: c4ay2TbSGSaF4nMZ9wYR3Hs7em8Mpaw2
  oauth_consumer_secret: JKVPDK23GtU52yyUZXB4PQqfuFp9Htg2
puppet:
  version: present
  user: puppet
  group: puppet
  dir: "/etc/puppetlabs/puppet"
  codedir: "/etc/puppetlabs/code"
  vardir: "/opt/puppetlabs/puppet/cache"
  logdir: "/var/log/puppetlabs/puppet"
  rundir: "/var/run/puppetlabs"
  ssldir: "/etc/puppetlabs/puppet/ssl"
  sharedir: "/opt/puppetlabs/puppet"
  manage_packages: true
  dir_owner: root
  dir_group: 
  package_provider: 
  package_install_options: 
  package_source: 
  port: 8140
  pluginsync: true
  splay: false
  splaylimit: 1800
  autosign: "/etc/puppetlabs/puppet/autosign.conf"
  autosign_entries: []
  autosign_mode: '0664'
  autosign_content: 
  autosign_source: 
  runinterval: 1800
  usecacheonfailure: true
  runmode: service
  run_hour: 
  run_minute: 
  unavailable_runmodes: []
  cron_cmd: 
  systemd_cmd: 
  systemd_randomizeddelaysec: 0
  agent_noop: false
  show_diff: false
  module_repository: 
  http_connect_timeout: 
  http_read_timeout: 
  ca_server: 
  ca_port: 
  ca_crl_filepath: 
  prerun_command: 
  postrun_command: 
  dns_alt_names: []
  use_srv_records: false
  srv_domain: example.org
  pluginsource: puppet:///plugins
  pluginfactsource: puppet:///pluginfacts
  additional_settings: {}
  agent_additional_settings: {}
  agent_restart_command: "/usr/bin/systemctl reload-or-restart puppet"
  classfile: "$statedir/classes.txt"
  hiera_config: "$confdir/hiera.yaml"
  auth_template: puppet/auth.conf.erb
  allow_any_crl_auth: false
  auth_allowed:
  - "$1"
  client_package:
  - puppet-agent
  agent: true
  remove_lock: true
  report: true
  client_certname: proxy1.example.org
  puppetmaster: 
  systemd_unit_name: puppet-run
  service_name: puppet
  syslogfacility: 
  environment: production
  server: true
  server_admin_api_whitelist:
  - localhost
  - proxy1.example.org
  server_manage_user: true
  server_user: puppet
  server_group: puppet
  server_dir: "/etc/puppetlabs/puppet"
  server_ip: 0.0.0.0
  server_port: 8140
  server_ca: true
  server_ca_crl_sync: false
  server_crl_enable: 
  server_ca_auth_required: true
  server_ca_client_self_delete: false
  server_ca_client_whitelist:
  - localhost
  - proxy1.example.org
  server_custom_trusted_oid_mapping: 
  server_http: false
  server_http_port: 8139
  server_reports: foreman
  server_puppetserver_dir: "/etc/puppetlabs/puppetserver"
  server_puppetserver_vardir: "/opt/puppetlabs/server/data/puppetserver"
  server_puppetserver_rundir: "/var/run/puppetlabs/puppetserver"
  server_puppetserver_logdir: "/var/log/puppetlabs/puppetserver"
  server_puppetserver_version: 
  server_external_nodes: "/etc/puppetlabs/puppet/node.rb"
  server_trusted_external_command: 
  server_cipher_suites:
  - TLS_RSA_WITH_AES_256_CBC_SHA256
  - TLS_RSA_WITH_AES_256_CBC_SHA
  - TLS_RSA_WITH_AES_128_CBC_SHA256
  - TLS_RSA_WITH_AES_128_CBC_SHA
  server_config_version: 
  server_connect_timeout: 120000
  server_git_repo: false
  server_default_manifest: false
  server_default_manifest_path: "/etc/puppet/manifests/default_manifest.pp"
  server_default_manifest_content: ''
  server_environments_owner: puppet
  server_environments_group: 
  server_environments_mode: '0755'
  server_envs_dir: "/etc/puppetlabs/code/environments"
  server_envs_target: 
  server_common_modules_path:
  - "/etc/puppetlabs/code/environments/common"
  - "/etc/puppetlabs/code/modules"
  - "/opt/puppetlabs/puppet/modules"
  - "/usr/share/puppet/modules"
  server_git_repo_mode: '0755'
  server_git_repo_path: "/opt/puppetlabs/puppet/cache/puppet.git"
  server_git_repo_group: puppet
  server_git_repo_user: puppet
  server_git_branch_map: {}
  server_idle_timeout: 1200000
  server_post_hook_content: puppet/server/post-receive.erb
  server_post_hook_name: post-receive
  server_storeconfigs: false
  server_ruby_load_paths:
  - "/opt/puppetlabs/puppet/lib/ruby/vendor_ruby"
  server_ssl_dir: "/etc/puppetlabs/puppet/ssl"
  server_ssl_dir_manage: true
  server_ssl_key_manage: true
  server_ssl_protocols:
  - TLSv1.2
  server_ssl_chain_filepath: 
  server_package: 
  server_version: 
  server_certname: proxy1.example.org
  server_request_timeout: 60
  server_strict_variables: false
  server_additional_settings: {}
  server_foreman: true
  server_foreman_url: https://foreman.example.org
  server_foreman_ssl_ca: "/etc/foreman-proxy/ca.pem"
  server_foreman_ssl_cert: "/etc/foreman-proxy/cert.pem"
  server_foreman_ssl_key: "/etc/foreman-proxy/key.pem"
  server_foreman_facts: true
  server_puppet_basedir: "/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet"
  server_parser: current
  server_environment_timeout: 
  server_jvm_java_bin: "/usr/bin/java"
  server_jvm_config: "/etc/sysconfig/puppetserver"
  server_jvm_min_heap_size: 2G
  server_jvm_max_heap_size: 2G
  server_jvm_extra_args:
  - "-Djruby.logger.class=com.puppetlabs.jruby_utils.jruby.Slf4jLogger"
  - "-XX:ReservedCodeCacheSize=512m"
  server_jvm_cli_args: 
  server_jruby_gem_home: "/opt/puppetlabs/server/data/puppetserver/jruby-gems"
  server_max_active_instances: 4
  server_max_requests_per_instance: 0
  server_max_queued_requests: 0
  server_max_retry_delay: 1800
  server_multithreaded: false
  server_use_legacy_auth_conf: false
  server_check_for_updates: true
  server_environment_class_cache_enabled: false
  server_allow_header_cert_info: false
  server_web_idle_timeout: 30000
  server_puppetserver_jruby9k: false
  server_puppetserver_metrics: false
  server_puppetserver_profiler: false
  server_metrics_jmx_enable: true
  server_metrics_graphite_enable: false
  server_metrics_graphite_host: 127.0.0.1
  server_metrics_graphite_port: 2003
  server_metrics_server_id: proxy1.example.org
  server_metrics_graphite_interval: 5
  server_metrics_allowed: 
  server_puppetserver_experimental: true
  server_puppetserver_auth_template: 
  server_puppetserver_trusted_agents: []
  server_puppetserver_trusted_certificate_extensions: []
  server_compile_mode: 
  server_acceptor_threads: 
  server_selector_threads: 
  server_ssl_acceptor_threads: 
  server_ssl_selector_threads: 
  server_max_threads: 
  server_ca_allow_sans: false
  server_ca_allow_auth_extensions: false
  server_ca_enable_infra_crl: false
  server_max_open_files: 
  server_versioned_code_id: 
  server_versioned_code_content: 
foreman::plugin::acd: false
foreman::plugin::ansible: false
foreman::plugin::azure: false
foreman::plugin::bootdisk: false
foreman::plugin::chef: false
foreman::plugin::column_view: false
foreman::plugin::default_hostgroup: false
foreman::plugin::dhcp_browser: false
foreman::plugin::discovery: false
foreman::plugin::expire_hosts: false
foreman::plugin::hooks: false
foreman::plugin::host_extra_validator: false
foreman::plugin::kubevirt: false
foreman::plugin::leapp: false
foreman::plugin::memcache: false
foreman::plugin::monitoring: false
foreman::plugin::omaha: false
foreman::plugin::openscap: false
foreman::plugin::ovirt_provision: false
foreman::plugin::puppet: false
foreman::plugin::puppetdb: false
foreman::plugin::remote_execution: false
foreman::plugin::remote_execution::cockpit: false
foreman::plugin::salt: false
foreman::plugin::setup: false
foreman::plugin::snapshot_management: false
foreman::plugin::statistics: false
foreman::plugin::tasks: false
foreman::plugin::templates: false
foreman::plugin::webhooks: false
foreman::compute::ec2: false
foreman::compute::gce: false
foreman::compute::libvirt: false
foreman::compute::openstack: false
foreman::compute::ovirt: false
foreman::compute::vmware: false
foreman_proxy::plugin::acd: false
foreman_proxy::plugin::ansible: false
foreman_proxy::plugin::chef: false
foreman_proxy::plugin::dhcp::infoblox: false
foreman_proxy::plugin::dhcp::remote_isc: false
foreman_proxy::plugin::discovery:
  install_images: true
  tftp_root: "/var/lib/tftpboot"
  source_url: http://downloads.theforeman.org/discovery/releases/latest/
  image_name: fdi-image-latest.tar
foreman_proxy::plugin::dns::infoblox: false
foreman_proxy::plugin::dns::powerdns: false
foreman_proxy::plugin::dynflow: false
foreman_proxy::plugin::monitoring: false
foreman_proxy::plugin::omaha: false
foreman_proxy::plugin::openscap: false
foreman_proxy::plugin::remote_execution::ssh: false
foreman_proxy::plugin::salt: false
foreman_proxy::plugin::shellhooks: false
4

Right, but --enable-foreman-plugin-remote-execution is for the Foreman plugin, you do not want that. You only need --enable-foreman-proxy-plugin-remote-execution-ssh.

Can you give it another run with --no-enable-foreman-plugin-remote-execution?

1 Like