I had a similiar post a month ago, except I wanted to disable the CA stuff.

For my puppet kickstart integration, I did the following:

1. Picked a static ip address and hostname that will be used for all
installations.
2. Generate all of the keys for this hostname ahead of time.
3. in the kickstart postconfig section, add lines to create the directory
and add the key
  mkdir /var/lib/puppet/ssl/private_keys
  echo "
  RSA-KEY
  " >   /var/lib/puppet/ssl/private_keys/HOSTNAME.pem

This may not be secure enough for you, but my use case is behind a firewall.
(please double check the dir names, I am not at my workstation)

On Tue, Nov 4, 2008 at 2:47 PM, AndrewHolt <[EMAIL PROTECTED]> wrote:

>
> Hi,
>
> If I install the facter & puppet client software via an automated
> process (kickstart, jumpstart, imaging) how can I distribute keys so I
> don't have to do the certificate signing manually ?
>
> Thanks,
> Andrew
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to