Jira (PUP-1391) puppet device cannot create certs when run as root

[Thomas Kishel (JIRA)]

Title: Message Title

Thomas Kishel commented on PUP-1391   Re: puppet device cannot create certs when run as root You only need to specify `--user=root` during `puppet device` runs that save certificate requests or signed certificates, even if `puppet device` is run as root: [root@proxy ~]# puppet device -v Info: starting applying configuration to bigip at https://bigip.example.com/ Info: Creating a new SSL key for bigip Error: Could not request certificate: Could not write /opt/puppetlabs/puppet/cache/devices/bigip/ssl/private_keys/bigip.pem to privatekeydir: Permission denied @ rb_sysopen - /opt/puppetlabs/puppet/cache/devices/bigip/ssl/private_keys/bigip.pem [root@proxy ~]# puppet device -v Info: starting applying configuration to bigip at https://bigip.example.com/ Info: Caching certificate for bigip Error: Could not write /opt/puppetlabs/puppet/cache/devices/bigip/ssl/certs/bigip.pem to certdir: Permission denied @ rb_sysopen - /opt/puppetlabs/puppet/cache/devices/bigip/ssl/certs/bigip.pem Error: Could not request certificate: Could not write /opt/puppetlabs/puppet/cache/devices/bigip/ssl/certs/bigip.pem to certdir: Permission denied @ rb_sysopen - /opt/puppetlabs/puppet/cache/devices/bigip/ssl/certs/bigip.pem Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.