Puppet Tutorial: How does Puppet Work

Error message

Warning: DOMNode::appendChild(): Document Fragment is empty in _ai_injectXPath() (line 269 of /var/www/html/modules/adsense_injector/adsense_injector.module).
Sarath Pillai's picture
how does puppet work

My previous Tutorial about puppet was just an introduction to puppet configuration management tool. In this tutorial we will once again go through puppet and will try to understand how really does puppet configuration management tool works.

The normal and usual configuration of puppet consists of a server (Puppet Master) and a client(Puppet agent).

 

How Does Puppet Work?

 

It works like this..Puppet agent is a daemon that runs on all the client servers(the servers where you require some configuration, or the servers which are going to be managed using puppet.)

All the clients which are to be managed will have puppet agent installed on them, and are called nodes in puppet.

Puppet Master: This machine contains all the configuration for different hosts. Puppet master will run as a daemon on this master server.

Puppet Agent: This is the daemon that will run on all the servers, which are to be managed using puppet. Puppet agent will go and ask the configuration for itself from the puppet master server at a specific time interval.

The connection between puppet agent and master is made in a secure encrypted channel with the help of SSL.

If suppose the puppet agent has already applied the required configuration and there are no new changes then it will do nothing.

Note: You can also manually ask puppet agent to go and fetch the configuration from the puppet master server whenever required. People manage puppet agent to fetch configuration through a cron. But managing puppet agent to automatically fetch data, by running it as a daemon on every node is a good idea.

30 minutes is the default interval when puppet agent daemon will go and fetch config data from puppet master.

working of puppet configuration management tool

 

As shown in the above figure puppet master server has all the configuration options for Host 1(or call it the first node), Host 2(node 2),Host 3(node 3).

An important fact to note is that it is the client(puppet agent or nodes) who go and fetches the configuration data from the puppet master server at a regular interval.

Now there are multiple steps involved whenever a puppet agent of any node connects to a puppet master server for fetching data. These steps are mentioned below.

Step 1: Whenever a client node connects to the master, the master server analyzes the configuration to be applied to the node, and how to apply that configs on the node.

Step 2:Puppet master server Takes and collects all the resources and configurations to be applied to the node, and compiles it and make it a catalog. This catalog is given to the puppet agent of the node.

Step 3: Puppet agent will apply the configuration on the node, according to the catalog, and then reply back, and submit the report of the configuration applied to the puppet master server.

How does Puppet Work with Different Platforms?

This is possible with the help of a tool called as Facter.

Whenever the agent connects to the puppet master server for configuration data, Facter tool is used to give the complete details about the node(agent) to the puppet master.

Facter will provide almost all information about the agent node. The information is very much detailed. See an example output of Facter below.

[root@myvm1 ~]# facter
architecture => i386
augeasversion => 0.10.0
boardmanufacturer => Intel Corporation
boardproductname => 440BX Desktop Reference Platform
boardserialnumber => None
domain => sarath.com
facterversion => 1.6.6
fqdn => myvm1.sarath.com
hardwareisa => i686
hardwaremodel => i686
hostname => myvm1
id => root
interfaces => eth0,lo,sit0
ipaddress => 192.168.159.128
ipaddress_eth0 => 192.168.159.128
ipaddress_lo => 127.0.0.1
is_virtual => true
kernel => Linux
kernelmajversion => 2.6
kernelrelease => 2.6.18-128.el5
kernelversion => 2.6.18
lsbdistcodename => Tikanga

the output of facter is much more detailed than the above example output shown.

Puppet master gets the complete information about the node, and takes a decision with the help of that information on how to apply the configuration.

For example if suppose the node is debian then to install a package puppet will use apt-get instead of yum.

You can do stuff's like if the IP address is this, then apply this gateway to the server. And you can also add custom made facts to a node, and do configuration based on that fact(this makes puppet much more customizable).

You require Facter tool to be installed on all the nodes, where you want to apply configuration using puppet. Without Facter, there is no way through which puppet server will get all information about the agent.

We will be going through the steps regarding how to install puppet-master, puppet-agent, facter etc on my next post. Hope this post was helpful in understanding how puppet works.

Rate this article: 
Average: 4.2 (62 votes)

Comments

Good Post

Awesome explaination, would like to hear more from you on Puppet

can you explain how it actually works in background?
i mean via SSL?

Sarath Pillai's picture

Hi Karthik,

Working of SSL is quite similar to how SSL is implemented in other protocols like HTTP..the below puppet article might be helpful in configuring master and agents with SSL certificates.

http://www.slashroot.in/puppet-tutorial-configuring-puppet-agent
http://www.slashroot.in/puppet-tutorial-configuring-puppet-master

If you are interested in understanding how SSL works..then you can refer a couple of other articles below.

http://www.slashroot.in/understanding-working-secure-socket-layerssl

Hope that helps...

Clear and easy to understand , thanks
keep going.....

Add new comment

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Type the characters you see in this picture. (verify using audio)
Type the characters you see in the picture above; if you can't read them, submit the form and a new image will be generated. Not case sensitive.