-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi,
Am Mi den 9. Jun 2010 um 3:35 schrieb Joe McDonagh: > > But that is exact the point. If I collect the information with > > ssh-keyscan there is a little change that the key is wrong and not the > > one of the machine. Puppet give a nice way to collect the ssh keys of > > all hosts it manage from facter. And it provides also a nice way to > > spread all that collected keys to all machines known-hosts file. > > Unfortunately the key for the key (ehem, I hope you can follow. ;-) is > > the host name so you have to choose which one of each host you want to > > spread to all machines. > > This is one of the cases where 'tags' are really useful. You can tag > something like tag => "for_collection" in the exported resource, then > when you collect the exported resource, you would do Sshkey <<| tag => > "for_collection" |>>. Have to test this out if that work with the existing ssh-hostkey type, thanks for that hint. > > Ps. Disclaimer: This mail is in British English and not in puppet > > English. That means I use terms like "collect" in the British > > meaning and _not_ for the puppet meaning. > > Right but it serves no one including yourself to continue using a > technical term in a technical forum when you really mean some other > concept or principle. Ok, I forgot to add a smile. However, it is really difficult for some which mother thong is not English to distinguish between the technical term used just in on software and the correct English word. So telling the one that "collect" is a technical term in puppet with a completely different meaning than "collect" in English maybe, is not helpful and more confusing. > It seems like exactly what you want is collecting exported resources. > I recommend checking wiki:ExportedResource if what I am saying makes > no sense. Exact. And I still read that sources. With the Sshkey type there is still a implemented solution to collect that keys and export them to all hosts. But that Type only allow to export one of the two hostkeys a host have. And that is the source of my question. Regards Klaus Ethgen - -- Klaus Ethgen http://www.ethgen.de/ pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <kl...@ethgen.de> Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEVAwUBTA9Xb5+OKpjRpO3lAQpR4Af+ONFCFUNrfhG6La0zrrLYkU7qa2OXprZm 8bGlEZFTYCYvPeNmc3aNBAyz+OK15GZ3ZdOPfHY+dgTOuFTCg8TzmtcZ0C07U5aq WITlW+aoN1SH8Xx+FrpGEbuJlDbfcZB8nkkvRu3r400GifHLLduJ1690M/7BpBv/ 5uELFG15TyeUSx92DuU8tD5S9i4s3oxPYFmLWuunywdNFjiQI36DZl/Ja5X2v9+C Ox+dPjRGQRMwhvh1WN//p+85V+pVbZmCsD73qynMfxnO7G6LhMjy4vBluMFDO0LX VFUzZev/Fd26wGsqyI+7WUfMZhUbBegCt7oPUy3GzOBqaKrsO4ot6A== =wyft -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
