managing windows systems with puppet - puppetconf 2013

Managing Windows Systems with PuppetJames SweenyProfessional Services | Puppet Labs james.sweeny@puppetlabs.comsupercow on irc.freenode.net@jsween_y

Friday, August 23, 13

puppetconf.com #puppetconf

Introduction

• Windows Agent overview

• Puppet resource model overview

• Managing Linux vs. managing Windows

• Windows specific challenges and solutions

• Windows oddities that will bite you

Supported Platforms

• Server 2003 and 2003 R2

• Server 2008

• Windows 7/Server 2008 R2

• Windows Server 2012

Installation

msiexec /qn /l*v install.log /i puppet-3.2.4.msi

INSTALLDIR="C:\Program Files\Puppet Labs\Puppet Enterprise"

PUPPET_MASTER_SERVER="master.domain.com"

PUPPET_AGENT_CERTNAME="agenthost.domain.com"

• C:\Program Files (x86)\Puppet Labs\Puppet

– \sys– \bin

• C:\ProgramData\PuppetLabs

- or -

• C:\Documents and Settings\All Users\Application Data\PuppetLabs

– \puppet\var• cached data• plugins

– \puppet\etc• puppet.conf• ssl data

Anatomy of a Puppet run

ResourcesThe fundamental building block

Resource Abstraction

Providers

Linux Resources

So what makes Windows special?

Host Resource

Service Resource

Windows Service

Cron Resource

Cron Scheduled Task Resource

• Line Endings

• Paths

Always ask yourself: “Where is this evaluated”?

Files - Paths

• 'C:\WINDOWS\system32'

• 'C:/WINDOWS/system32'

• "C:\\WINDOWS\\system32"

All are OK, but forward slashes are safer...

Files - Paths

. . . except when a Windows program will read them.

Files - Line Endings^M^M^M

• CRLF vs. LF^M

• Windows uses two characters for^M newlines^M

• Puppet master always runs in Linux^M

Files - Line Endings

• File resources are written in binary

• source with Windows newlines will be preserved

• content will always generate Linux newlines, unless you add them

File Resource - Permissions

• Still specified with Unix-style modes

• Mode must be specified if owner/group are

File Resource - Permissions

• Be careful of case

• Can't set SID

Exec Resource

• Execs run without a shell

32-bit Redirection

• %WINDIR%\Sysnative

• %WINDIR%\System32

Powershell Exec

Powershell Exec Provider

ModulesModules are the best way to organize your code and extend core Puppet

forge.puppetlabs.com

puppet module search <keyword>

puppet module install <author-module>

puppetlabs/registry

adenning/winntp

simondean/net_share

trlinkin/domain_membership

More Windows Modules

• puppetlabs/mssql

• simondean/iis

• adenning/winfacts

• jonnyx/msuac

Search 'windows' on forge.puppetlabs.com

MSI Package Provider

Windows Package Provider

• Deprecates msi provider

• Available in Puppet 3.0

• Backports available for Puppet 2.7

• Supports .exe and .msi seamlessly

Centralized Packages

• Versionable and Upgradable

• Linux has it easy

• yum

• apt-get

• zypper

Chocolately

• Third party Windows package manager

• http://chocolatey.org/

cinst my_package

See Rob Reynolds tomorrow in the Fountain Room at 5:10PM!

rismoney/chocolatey

• Server 2008+ Roles and Features

• Install Windows server roles such as

• DNS Server

• DHCP Server

• IIS

puppetlabs/dism

Rebooting

Pending Reboots

Windows Reboot

Additional Resources

• http://docs.puppetlabs.com/windows

• http://docs.puppetlabs.com/references/latest/type.html

• http://puppetlabs.com/blog/part-top-questions-on-puppet-and-windows/

• Puppet Types and Providers by Dan Bode and Nan Liu

Thank You - Questions?James SweenyProfessional Services | Puppet Labs james.sweeny@puppetlabs.comsupercow on irc.freenode.net@jsween_y

Collaborate. Automate. Ship.

Follow us on Twitter @puppetlabs

youtube.com/puppetlabsinc

slideshare.net/puppetlabs

Collaborate. Automate. Ship.

managing windows systems with puppet - puppetconf 2013

puppetconf resources

puppetconf puppetlabsregistry

puppetconf chocolately

puppetconf execs

puppetconf simondeannet

puppetconf anatomy

puppetconf installation

puppetconf providers

Technology

puppet design patterns - puppetconf

auditing/security with puppet - puppetconf 2014

performance tuning your puppet infrastructure - puppetconf...

puppetconf. 2016: puppet best practices: roles & profiles...

test driven development with puppet - puppetconf 2014

git and code organization for managing your puppet code -...

test-driven puppet development - puppetconf 2014

puppet for everybody! - federated and hierarchical puppet...

puppetconf 2016: direct puppet and application management...

puppetconf track overview: puppet 4

getting started with puppet - puppetconf 2014

puppetconf 2016: keynote - luke kanies, puppet founder

managing and scaling puppet - puppetconf 2014

packaging software, puppet labs style - puppetconf 2014

state of the puppet community - puppetconf 2012

juju + puppet (puppetconf 2011)

puppetconf 2013 vcloud hybrid service and puppet

puppetconf 2016: keynote - sanjay mirchandani, puppet ceo

using docker with puppet - puppetconf 2014

puppet labs partner network - puppetconf 2014