1_prep.sh

#!/bin/bash

#Common Prep
#---------------------
yum update -y
yum install -y vim perl htop tree
#RHEL -- nmcli general hostname puppet.frankencloud.net
#AWSLinux -- perl -pi -e 's/HOSTNAME=localhost.localdomain/HOSTNAME=puppet.frankencloud.net/g' /etc/sysconfig/network
perl -pi -e 's/#PermitRootLogin yes/PermitRootLogin yes/g' /etc/ssh/sshd_config
perl -pi -e 's/ - set_hostname/# - set_hostname/g' /etc/cloud/cloud.cfg
perl -pi -e 's/ - update_hostname/# - update_hostname/g' /etc/cloud/cloud.cfg

There's a lot of misinformation about where to get your Python libs. For a repo you can trust, simply cut and past the following commands:

rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum install -y python34.x86_64

Sometimes in AWS you'll need to manipulate the default Python version using the following command:

alternatives --set python /usr/bin/python[V.v]

Fetch Puppet Enterprise:

curl -L -o pe-latest.tgz 'https://pm.puppetlabs.com/cgi-bin/download.cgi?dist=el&rel=7&arch=x86_64&ver=latest'

Install script to run from an agent:

curl -k https://[hostname]:8140/packages/current/install.bash | bash

Discover / authorize nodes waiting on signing by the master:

puppet cert list
puppet cert sign [hostname]
puppet cert list -a

Puppet agent commands

puppet agent -t

Look for errors in Puppet Code

puppet parser validate groups/wheel.pp 

#!/bin/bash

PUPPET_PATH="/etc/puppetlabs/puppet/modules"

echo "What would you like to name your module?"
read MODULE_NAME
echo "Creating module framework..."

MODULE_PATH="$PUPPET_PATH/$MODULE_NAME"

mkdir "$MODULE_PATH"
cd $MODULE_PATH && mkdir {files,manifests,templates,tests}
MODULE_PATH="$MODULE_PATH/manifests"
echo -e "class $MODULE_NAME    {\n}" > "$MODULE_PATH/init.pp"
echo -e "include $MODULE_NAME" > "$MODULE_PATH/tests/init.pp"
echo "Module framework created successfully."
tree -A

#recursively create a list of all dictionary values
def get_list(d,l=[]):
    for key in d:
        if isinstance(d[key], dict):
            l = get_list(d[key], l)
        else:
            l.append(key + " - {}".format(d[key],str))
    return l

This script creates a quick log of all the unique ingress IPs connecting to a machine on a given port.

This Powershell script is designed to run on two machines, and to transfer the elastic IP to the running instance should one fail. This script is loosely based on https://aws.amazon.com/articles/2127188135977316 but has several key differences:

1. This provides HA for the public elastic IP without need for an elastic load balancer
2. This script runs in windows as a scheduled task at startup under the SYSTEM account.
3. This script logs errors to the event viewer

Some Caveats:

Prevent containers from starting when Docker starts

This should be run while the docker daemon is stopped

for x in /var/lib/docker/containers/*/config.v2.json; do cp $x $x.bak; cat $x.bak | jq -c '.State.Running = false' > $x; done

The article explains how to leverage S3 to present an Amazon Linux package repository to your local VPC. I implemented this because I didn't want to enable any public routes to my private VPC subnets, and I also wanted centrally manage patch levels.

1. Create a subdomain in cPanel using the "subdomains" tool
2. Create the following directory path using a command prompt:

/usr/local/apache/conf/userdata/std/2_2/[cPanel user]/[sub domain]/

3. create a *.conf file in the directory. I called it "kb.frankenweb.net.conf"
4. Place the following in the config file:

   ServerName kb.frankenweb.net
       ProxyRequests On
       
           Order deny,allow
           Allow from all
       
       ProxyPass / http://frankencloud.co.uk:8090/
       ProxyPassReverse / http://frankencloud.co.uk:8090/