Installing Puppet Client on Solaris 11 with OpenCSW

The easiest way to install on Solaris is to obtain the packages from http://OpenCSW.org. OpenCSW uses a tool called pkgutil on top of the existing Solaris toolset to obtain, install and maintain OpenCSW packages.

Start by installing the latest version of CSWpkgutil:

The first step is to configure pkgutil to use PGP cryptographic verification. Issue the following command to install the CSWpki package via pkgutil:

First, import the keys with cswpki:

The current fingerprint is available at http://www.opencsw.org/manual/for-administrators/getting-started.html, and currently looks like this:

With the key imported, edit /etc/opt/csw/pkgutil.conf and uncomment the following values, thus setting them to true from their defaults of false:

Now, run a pkgutil catalog update. You should see the GPG verification taking place:

Now, we can search for the appropriate Puppet package using pkgutil -a:

As this is only a client, we will need the puppet3 package, and any dependencies. pkgutil takes care of dependency resolution for us with respect to other OpenCSW.org packages.

 

For the sake of convenience, at this point you should update your $PATH accordingly to find binaries under /opt/csw/bin:

Install the puppet3 package and its dependencies:

By default, an SMF service is created to run the Puppet agent daemonised. This is not something that we want - the updates will be run out of cron for more control and granularity. For now, check the status of the service:

Disable it, thus stopping it also:

Copy the supplied sample puppet.conf into place:

Update puppet.conf server variable in the [agent] section as appropriate:

Try a test run, the certificate request will be sent to the Puppet master, and can be signed as shown in the CentOS instructions above.

Once the certificate is signed, a clean run should be observed:

A quick check of the facter variables on each type of host confirms that things are ready to go: