Problems with unattended provisioning

Florian_Koch · October 28, 2011, 4:55pm

Hi,

i try to install a server (sl6.1 x86_64) with foreman (vmware pxe +
unattended kickstart).
I can create the host in foreman, the server boot via pxe and get the
installer via tftp.

after booting into the installer i get the normal installer menu to
choose the language.

if i spoof the ip from the host with http://…/?spoof=x.x.x.x, the
kickstart looks good, but the installer don't know about it.

any ideas?

rgds f0

Corey_Osman · October 28, 2011, 5:19pm

Watch your smart-proxy log during the boot process.

Things to check for:

foreman-proxy user is able to execute "puppet cert"
foreman-proxy user is able to write to /etc/puppet/autosign.conf
foreman-proxy user is able to write to /var/lib/puppet/ssl/ca/inventory.txt
You have the following in your sudoers file: (update puppet path to your environment)

Defaults:foreman !requiretty
foreman-proxy ALL = NOPASSWD: /opt/puppet/bin/puppet
Defaults:foreman-proxy !requiretty

I am assuming your using puppet 2.6+. If not you need to make sure puppetca is accessible to foreman-proxy and in the sudoers file.

You should be running foreman-proxy as the foreman-proxy user. If not do the following:

chown -R foreman-proxy:foreman-proxy /usr/share/foreman-proxy (or whatever path your using)

Corey Osman
corey@logicminds.biz

Green I.T and Datacenter Automation Specialist

···

On Oct 28, 2011, at 9:55 AM, f0 wrote:

Hi,

i try to install a server (sl6.1 x86_64) with foreman (vmware pxe +
unattended kickstart).
I can create the host in foreman, the server boot via pxe and get the
installer via tftp.

after booting into the installer i get the normal installer menu to
choose the language.

if i spoof the ip from the host with http://…/?spoof=x.x.x.x, the
kickstart looks good, but the installer don’t know about it.

any ideas?

rgds f0

–
You received this message because you are subscribed to the Google Groups “Foreman users” group.
To post to this group, send email to foreman-users@googlegroups.com.
To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/foreman-users?hl=en.

Florian_Koch · October 28, 2011, 5:23pm

Hi,

hm i have disabled puppetca for this proxy , is this really needed to
install a server via kickstart

rgds f0

···

On Oct 28, 7:19 pm, Corey Osman wrote: > Watch your smart-proxy log during the boot process. > > Things to check for: > > foreman-proxy user is able to execute "puppet cert" > foreman-proxy user is able to write to /etc/puppet/autosign.conf > foreman-proxy user is able to write to /var/lib/puppet/ssl/ca/inventory.txt > You have the following in your sudoers file: (update puppet path to your environment) > > Defaults:foreman !requiretty > foreman-proxy ALL = NOPASSWD: /opt/puppet/bin/puppet > Defaults:foreman-proxy !requiretty > > I am assuming your using puppet 2.6+. If not you need to make sure puppetca is accessible to foreman-proxy and in the sudoers file. > > You should be running foreman-proxy as the foreman-proxy user. If not do the following: > > chown -R foreman-proxy:foreman-proxy /usr/share/foreman-proxy (or whatever path your using) > > Corey Osman > co...@logicminds.biz > > Green I.T and Datacenter Automation Specialist > > On Oct 28, 2011, at 9:55 AM, f0 wrote: > > > > > > > > > Hi, > > > i try to install a server (sl6.1 x86_64) with foreman (vmware pxe + > > unattended kickstart). > > I can create the host in foreman, the server boot via pxe and get the > > installer via tftp. > > > after booting into the installer i get the normal installer menu to > > choose the language. > > > if i spoof the ip from the host withhttp://.../?spoof=x.x.x.x, the > > kickstart looks good, but the installer don't know about it. > > > any ideas? > > > rgds f0 > > > -- > > You received this message because you are subscribed to the Google Groups "Foreman users" group. > > To post to this group, send email to foreman-users@googlegroups.com. > > To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com. > > For more options, visit this group athttp://groups.google.com/group/foreman-users?hl=en.

ohadlevy · October 28, 2011, 8:14pm

> Hi,
>
> hm i have disabled puppetca for this proxy , is this really needed to
> install a server via kickstart
>
under settings --> foreman settings, you can disable the manage_puppetca option.

Ohad

···

On Fri, Oct 28, 2011 at 7:23 PM, f0 wrote: > rgds f0 > > On Oct 28, 7:19 pm, Corey Osman wrote: >> Watch your smart-proxy log during the boot process. >> >> Things to check for: >> >> foreman-proxy user is able to execute "puppet cert" >> foreman-proxy user is able to write to /etc/puppet/autosign.conf >> foreman-proxy user is able to write to /var/lib/puppet/ssl/ca/inventory.txt >> You have the following in your sudoers file: (update puppet path to your environment) >> >> Defaults:foreman !requiretty >> foreman-proxy ALL = NOPASSWD: /opt/puppet/bin/puppet >> Defaults:foreman-proxy !requiretty >> >> I am assuming your using puppet 2.6+. If not you need to make sure puppetca is accessible to foreman-proxy and in the sudoers file. >> >> You should be running foreman-proxy as the foreman-proxy user. If not do the following: >> >> chown -R foreman-proxy:foreman-proxy /usr/share/foreman-proxy (or whatever path your using) >> >> Corey Osman >> co...@logicminds.biz >> >> Green I.T and Datacenter Automation Specialist >> >> On Oct 28, 2011, at 9:55 AM, f0 wrote: >> >> >> >> >> >> >> >> > Hi, >> >> > i try to install a server (sl6.1 x86_64) with foreman (vmware pxe + >> > unattended kickstart). >> > I can create the host in foreman, the server boot via pxe and get the >> > installer via tftp. >> >> > after booting into the installer i get the normal installer menu to >> > choose the language. >> >> > if i spoof the ip from the host withhttp://.../?spoof=x.x.x.x, the >> > kickstart looks good, but the installer don't know about it. >> >> > any ideas? >> >> > rgds f0 >> >> > -- >> > You received this message because you are subscribed to the Google Groups "Foreman users" group. >> > To post to this group, send email to foreman-users@googlegroups.com. >> > To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com. >> > For more options, visit this group athttp://groups.google.com/group/foreman-users?hl=en. > > -- > You received this message because you are subscribed to the Google Groups "Foreman users" group. > To post to this group, send email to foreman-users@googlegroups.com. > To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/foreman-users?hl=en. > >

Florian_Koch · October 29, 2011, 4:55pm

Hi,

yes puppetca was the problem…thx

···

On Oct 28, 10:14 pm, Ohad Levy wrote: > On Fri, Oct 28, 2011 at 7:23 PM, f0 wrote: > > Hi, > > > hm i have disabled puppetca for this proxy , is this really needed to > > install a server via kickstart > > under settings --> foreman settings, you can disable the manage_puppetca option. > > Ohad > > > > > > > > > rgds f0 > > > On Oct 28, 7:19 pm, Corey Osman wrote: > >> Watch your smart-proxy log during the boot process. > > >> Things to check for: > > >> foreman-proxy user is able to execute "puppet cert" > >> foreman-proxy user is able to write to /etc/puppet/autosign.conf > >> foreman-proxy user is able to write to /var/lib/puppet/ssl/ca/inventory.txt > >> You have the following in your sudoers file: (update puppet path to your environment) > > >> Defaults:foreman !requiretty > >> foreman-proxy ALL = NOPASSWD: /opt/puppet/bin/puppet > >> Defaults:foreman-proxy !requiretty > > >> I am assuming your using puppet 2.6+. If not you need to make sure puppetca is accessible to foreman-proxy and in the sudoers file. > > >> You should be running foreman-proxy as the foreman-proxy user. If not do the following: > > >> chown -R foreman-proxy:foreman-proxy /usr/share/foreman-proxy (or whatever path your using) > > >> Corey Osman > >> co...@logicminds.biz > > >> Green I.T and Datacenter Automation Specialist > > >> On Oct 28, 2011, at 9:55 AM, f0 wrote: > > >> > Hi, > > >> > i try to install a server (sl6.1 x86_64) with foreman (vmware pxe + > >> > unattended kickstart). > >> > I can create the host in foreman, the server boot via pxe and get the > >> > installer via tftp. > > >> > after booting into the installer i get the normal installer menu to > >> > choose the language. > > >> > if i spoof the ip from the host withhttp://.../?spoof=x.x.x.x, the > >> > kickstart looks good, but the installer don't know about it. > > >> > any ideas? > > >> > rgds f0 > > >> > -- > >> > You received this message because you are subscribed to the Google Groups "Foreman users" group. > >> > To post to this group, send email to foreman-users@googlegroups.com. > >> > To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com. > >> > For more options, visit this group athttp://groups.google.com/group/foreman-users?hl=en. > > > -- > > You received this message because you are subscribed to the Google Groups "Foreman users" group. > > To post to this group, send email to foreman-users@googlegroups.com. > > To unsubscribe from this group, send email to foreman-users+unsubscribe@googlegroups.com. > > For more options, visit this group athttp://groups.google.com/group/foreman-users?hl=en.