Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Christopher Wood
On Thu, Jan 26, 2012 at 06:32:49PM +, Dan White wrote: > I am relatively new to both Puppet and ssh-keys, > but is it possible for the PuppetMaster to generate all the keys rather that > each client creating their own ? This might be one of the places where erb (templates) being evaluated on

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Dan White
I am relatively new to both Puppet and ssh-keys, but is it possible for the PuppetMaster to generate all the keys rather that each client creating their own ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bi

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread krish
>> Remember, there is always some amount of manual stuff to do. >> >> 1) Install the OS (or clone your VM.) >> 2) Set the IP/hostname >> 3) Install puppet >> 4) Have the puppetmaster sign the cert >> Meh :P .. If you're using a Xen environment, we've taken care of this part already, where a puppe

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Stephen Jahl
> This addresses how to distribute keys to node from the fileserver, but I > wonder if there is a mechanism where if the key doesn't exist on the > fileserver, the key that currently exists on the node is pulled in and saved > for future reference - i.e. when new nodes are created. I believe

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Jonathan Gazeley
On 26/01/12 16:02, Matt Zagrabelny wrote: On Thu, Jan 26, 2012 at 9:35 AM, Jonathan Gazeley wrote: On 26/01/12 15:22, Matt Zagrabelny wrote: I don't know about "easy", but here is what I am doing: Thanks Matt, that's helpful. This addresses how to distribute keys to node from the fileser

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Matt Zagrabelny
On Thu, Jan 26, 2012 at 9:35 AM, Jonathan Gazeley wrote: > On 26/01/12 15:22, Matt Zagrabelny wrote: >> >> I don't know about "easy", but here is what I am doing: > > > Thanks Matt, that's helpful. > > This addresses how to distribute keys to node from the fileserver, but I > wonder if there is a

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Jonathan Gazeley
On 26/01/12 15:22, Matt Zagrabelny wrote: I don't know about "easy", but here is what I am doing: Thanks Matt, that's helpful. This addresses how to distribute keys to node from the fileserver, but I wonder if there is a mechanism where if the key doesn't exist on the fileserver, the key tha

Re: [Puppet Users] Managing SSH host private keys

2012-01-26 Thread Matt Zagrabelny
Hi Jonathan, On Thu, Jan 26, 2012 at 5:40 AM, Jonathan Gazeley wrote: > Hi all, > > I already use Puppet to collect and distribute SSH host public keys between > machines I manage. I now want to collect private host keys from each node > and store them on the puppetmaster, so when I rebuild a nod