On Thu, May 7, 2015 at 6:19 AM, jcbollinger <[email protected]> wrote:
> > > On Thursday, May 7, 2015 at 12:32:59 AM UTC-5, Josh Cooper wrote: >> >> >> >> On Wed, May 6, 2015 at 7:29 AM, Johnson Earls <[email protected]> >> wrote: >> >>> never mind. puppet agent ignores the user/group config settings, so >>> those should be kept at puppet, and ${::settings::user} / >>> ${::settings::group} should not be used to configure agent-related options >>> (such as file ownership). >>> >> >> The `puppet` user and group are really server-side settings, to specify a >> less privileged account to run the webrick/passenger/puppetserver process >> as. >> >> > > Right. > > > >> To confuse things, `puppet` packages (rpm/deb) have always created the >> `puppet` user and group, but was unnecessary on the agent. In Puppet 4, we >> have fixed this, so the puppet-agent package does not create a `puppet` >> user or group. Only the puppetserver package does that. >> > > > So the new package naming confuses even PL itself? > > I mean, in our recent discussion of the new package naming and versioning > <https://groups.google.com/forum/#!topic/puppet-users/K7-tUQoJ9FA>, Eric > and Michael asserted that the "puppet-agent" package is the basic Puppet > infrastructure package, with which one can run the agent, the traditional > rack-based master, and everything else from Puppet's Ruby stack. They > claim the "puppetserver" package is *optional*. I completely believe > that's the *intention*, but in that case the "puppet-agent" package > should be the one responsible for the "puppet" user and group. > We will be releasing updated passenger packages compatible with puppet-agent "soon"[1]. These packages also create the `puppet` user and group, like puppetserver. That leaves webrick. I agree, there is currently an inconsistency -- webrick functionality is provided by the puppet-agent package, but the package does not create the `puppet` user and group. However, you are free to create the accounts (using `puppet apply` even!), or specify an alternate account using Puppet's `user` and `group` settings. That said, webrick is deprecated and will be removed in Puppet 5[2]. Josh [1] https://tickets.puppetlabs.com/browse/PUP-4452 [2] https://groups.google.com/d/topic/puppet-dev/RHa2tMPRTx4/discussion -- Josh Cooper Developer, Puppet Labs *PuppetConf 2015 <http://2015.puppetconf.com/> is coming to Portland, Oregon! Join us October 5-9.* *Register now to take advantage of the Early Adopter discount <https://www.eventbrite.com/e/puppetconf-2015-october-5-9-tickets-13115894995?discount=EarlyAdopter> * *—**save $349!* -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CA%2Bu97um6D8pRJOX_y8Kn0sEqGfPJ47J4H5WHjEM_6bac4%2BaMCg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
