updates to Foreman 1.12 and Katello 3.0

Author: dgoetz

README.md

@@ -18,9 +18,9 @@ In addition to the sources you can find the rendered material on
 [netways.github.io](https://netways.github.io/foreman-training)
 
 * [Presentation](https://netways.github.io/foreman-training)
-* [Handouts](https://github.com/NETWAYS/foreman-training/releases/download/v1.0/foreman-training-handouts.pdf)
-* [Exercises](https://github.com/NETWAYS/foreman-training/releases/download/v1.0/foreman-training-exercises.pdf)
-* [Solutions](https://github.com/NETWAYS/foreman-training/releases/download/v1.0/foreman-training-solutions.pdf)
+* [Handouts](https://github.com/NETWAYS/foreman-training/releases/download/v1.1/foreman-training-handouts.pdf)
+* [Exercises](https://github.com/NETWAYS/foreman-training/releases/download/v1.1/foreman-training-exercises.pdf)
+* [Solutions](https://github.com/NETWAYS/foreman-training/releases/download/v1.1/foreman-training-solutions.pdf)
 
 ## Provide your own training
 

Setup.md

@@ -17,16 +17,16 @@ and Puppetlabs EPEL 7 x86_64. This machine will require about 20GB.
 
 To setup the Katello demo follow this guide:
 
-    # git clone https://github.com/Katello/katello-deploy.git
-    # cd katello-deploy
-    # vagrant up centos7-2.4
+    # git clone https://github.com/Katello/forklift.git
+    # cd forklift
+    # vagrant up centos7-katello-3.0
 
 This will setup your Katello server, login with the provided credentials and add the following content:
 
 * GPG Key "RPM-GPG-KEY-CentOS-7" by uploading the key from a CentOS 7 system
 * Product "CentOS7" with the key assigned
 * Repository "CentOS7-Base-x86_64" of type "yum" and URL "http://mirror.centos.org/centos/7/os/x86_64/"
-* Sync this repository - it will consume about 7GB
+* Sync this repository - it will consume about 7GB (or choose "On Demand to save some storage)
 * Life Cycle Environment "Test" and "Production"
 * Content View "CentOS7"
  * Add the Repository "CentOS7-Base-x86_64"

_files/share/modules/training/manifests/user.pp

@@ -0,0 +1,32 @@
+class training::user (
+  $id,
+  $ssh_pub_key,
+  $ssh_key_type = "ssh-rsa",
+  $sudo = false
+) {
+  validate_string($id)
+  validate_string($ssh_pub_key)
+  validate_re($ssh_key_type, [ '^ssh-dss$', '^dsa$', '^ssh-rsa$', '^rsa$', '^ecdsa-sha2-nistp256$', '^ecdsa-sha2-nistp384$', '^ecdsa-sha2-nistp521$', '^ssh-ed25519$', '^ed25519$' ])
+  validate_bool($sudo)
+
+  user { $id:
+    ensure     => present,
+    managehome => true,
+  }
+
+  ssh_authorized_key { $id:
+    user => $id,
+    type => $ssh_key_type,
+    key  => $ssh_pub_key,
+  }
+
+  if $sudo {
+    file { "/etc/sudoers.d/$id":
+      ensure => file,
+      mode   => '0400',
+      owner  => 'root',
+      group  => 'root',
+      content => "$id ALL=(ALL) NOPASSWD: ALL",
+    }
+  }
+}

_files/share/puppetmodules.tar.gz

@@ -85,7 +85,7 @@ using virsh to manage the dnsmasq underneath is available, a productive use is n
 !SLIDE smbullets small
 # Smart Proxy - DNS
 
-* Adds and removes dns records of type A and PTR
+* Adds and removes dns records of type A, AAAA and PTR
 * Requires zone to be configured as dynamic zones
 * Supports: Bind, PowerDNS, Route53, MS DNS, Libvirt
 
@@ -109,17 +109,18 @@ using virsh to manage the dnsmasq underneath is available, a productive use is n
 
 ~~~SECTION:notes~~~
 
-* Foreman does not support IPv6 at the moment, so no AAAA records
-* Also no support for additional records like CNAME 
+* Foreman does support IPv6 from 1.12 onwards
+* No support for additional records like CNAME
 
 ~~~ENDSECTION~~~
 
 ~~~SECTION:handouts~~~
 
 ****
 
-The Smart Proxy DNS is used to add and remove dns records of type A and PTR, at the moment there is no
-support for IPv6 and additional records. For doing such updates it requires the zone to be a dynamic zone.
+The Smart Proxy DNS is used to add and remove dns records of type A and PTR, Foreman 1.12 introduced
+support for IPv6, but there is no support for additional records. For doing such updates it requires
+the zone to be a dynamic zone.
 
 Commonly used on Linux is Bind which takes updates via nsupdate with preshared keys or if used in FreeIPA
 with Kerberos principal. The same mechanism could be used for sending updates to Microsofts DNS. Another

architecture/02_smart_proxy.md

@@ -257,7 +257,7 @@ from unprivileged users.
 ### Set defaults to the Smart class parameters provided by the imported class
 
 Navigate to "Configure > Classes" and select the class "training::user". In the "Smart Class Parameter" tab
-insert your name as Default Value for the name for the user, add a ssh public key as Default Value for ssh_pub_key,
+insert your name as Default Value for the id of the user, add a ssh public key as Default Value for ssh_pub_key,
 for the parameter sudo select override and set the default to true.
 
 Hint: To create a ssh key pair run "ssh-key-gen". The key string required for the puppet module is the second part
@@ -416,3 +416,23 @@ The hash is best used with a defined resource and create_resource function or wi
 Next release of the function will also allow to provide a filter for reducing the data for easier handling.
 
 ~~~ENDSECTION~~~
+
+
+!SLIDE smbullets small
+# Replace Puppet's default lookup
+
+* Puppet uses Hiera as default lookup for parameters
+* Can be replaced with Foreman
+* Requires two plugins
+ * Param lookup - Exposes parameters via API
+ * Data binding - Replaces Puppet's lookup
+
+~~~SECTION:handouts~~~
+
+****
+
+You can replace Puppet's default lookup with Foreman by installing Param lookup and Data binding plugin. This allows to
+use the Roles-Profiles-Pattern or similar concepts which do not directly assign classes and still use Foreman to configure
+parameters.
+
+~~~ENDSECTION~~~

configmanagement/02_puppet.md

@@ -0,0 +1,15 @@
+!SLIDE smbullets small
+# Config Groups
+
+* Allows to group classes
+* Assign like single classes
+
+~~~SECTION:handouts~~~
+
+****
+
+Config Groups allow to group classes and assign them in the same way you would use single classes.
+This follows the same ideas like the very popular Roles-Profiles-Pattern used in Puppet to simplify
+assignment via another layer of abstraction.
+
+~~~ENDSECTION~~~

configmanagement/03_configgroups.md

@@ -10,11 +10,9 @@
  * SCLorg SIG repository
  * optionally: Puppetlabs Repository
 * Fedora (not recommended) 
-* Debian 7
- * optionally: Puppetlabs Repository
 * Debian 8
  * optionally: Puppetlabs Repository
-* Ubuntu 12.04 & 14.04
+* Ubuntu 14.04 & 16.04
  * optionally: Puppetlabs Repository
 
 ~~~SECTION:handouts~~~
@@ -27,27 +25,32 @@ On the mentioned operating systems packages are provided by the project, a insta
 is not recommended. On all platforms all updates should be applied before installation. Using the
 Puppetlabs Repository providing an up-to-date version of Puppet is preferred.
 
+Please note that support for Foreman on Red Hat Enterprise Linux 6 and all its derivates is deprecated
+and upgrading to 7 is recommended.
+
 ~~~ENDSECTION~~~
 
 !SLIDE smbullets small noprint
 # Requirements - Puppet & Facter
 
 * Support matrix
 
-Puppet version | Foreman installer | Smart proxy     | Report/fact processors | ENC
----------------|-------------------|-----------------|------------------------|--------------------------------
-0.25.x         | Not supported     | Untested        | Untested               | No Parametrized Classes
-2.6.0 - 2.6.5  | Not supported     | Untested        | Untested               | No Parametrized Classes
-2.6.5+         | Not supported     | Supported       | Supported              | Supported
-2.7.x          | Supported         | Supported       | Supported              | Supported
-3.0.x          | Limited support   | 1.1 or higher   | Supported              | Supported
-3.1.x - 3.4.x  | 1.1 or higher     | 1.1 or higher   | Supported              | Supported
-3.5.x          | 1.4.3 or higher   | 1.4.2 or higher | Supported              | Supported
-3.6.0+         | 1.4.3 or higher   | 1.5.1 or higher | Supported              | Supported
-4.x            | Not supported     | Partial support | Untested               | Untested
+Puppet version         | Foreman installer | Smart proxy     | Report/fact processors | ENC
+-----------------------|-------------------|-----------------|------------------------|--------------------------------
+0.25.x, 2.6.0 - 2.6.5  | Not supported     | Untested        | Untested               | No Parametrized Classes
+2.6.5+                 | Not supported     | Supported       | Supported              | Supported
+2.7.x                  | Supported         | Supported       | Supported              | Supported
+3.0.x                  | Limited support   | 1.1 or higher   | Supported              | Supported
+3.1.x - 3.4.x          | 1.1 or higher     | 1.1 or higher   | Supported              | Supported
+3.5.x                  | 1.4.3 or higher   | 1.4.2 or higher | Supported              | Supported
+3.6.0+                 | 1.4.3 or higher   | 1.5.1 or higher | Supported              | Supported
+4.x                    | 1.12 or higher    | 1.12 or higher  | Supported              | Supported
 
 * Puppet Enterprise is not supported
-* Facter 1.x is supported, 2.x requires Foreman >= 1.4.2, Structured Facts are not supported for now
+* All-in-one and FHS packaging model are both supported for Puppet 4
+* Puppet Master and Puppet Server are both supported
+* Facter 1.x is supported, 2.x requires Foreman >= 1.4.2
+* Structured Facts are supported with Foreman >= 1.12
 
 !SLIDE smbullets small printonly
 # Requirements - Puppet & Facter
@@ -62,22 +65,29 @@ Puppet version | Foreman installer | Smart proxy     | Report/fact processors |
 3.1.x - 3.4.x  | 1.1 or higher     | 1.1 or higher   | Supported              | Supported
 3.5.x          | 1.4.3 or higher   | 1.4.2 or higher | Supported              | Supported
 3.6.0+         | 1.4.3 or higher   | 1.5.1 or higher | Supported              | Supported
-4.x            | Not supported     | Partial support | Untested               | Untested
+4.x            | 1.12 or higher    | 1.12 or higher  | Supported              | Supported
 
 ~~~PAGEBREAK~~~
 
 * Puppet Enterprise is not supported
-* Facter 1.x is supported, 2.x requires Foreman >= 1.4.2, Structured Facts are not supported for now
+* All-in-one and FHS packaging model are both supported for Puppet 4
+* Puppet Master and Puppet Server are both supported
+* Facter 1.x is supported, 2.x requires Foreman >= 1.4.2
+* Structured Facts are supported with Foreman >= 1.12
 
 ~~~SECTION:handouts~~~
 
 ****
 
 An up-to-date version of Puppet 3.x is recommended while other versions will work. Puppet 4.x support is
-pending. Puppet Enterprise is not supported, but can work with manual tweaking of the setup.
+introduced with Foreman 1.12, supporting All-in-one and Filesystem-Hierarchy-Standard packaging standard.
+Puppet Enterprise is not supported, but can work with manual tweaking of the setup.
+
+Both versions of the central server in a Puppet environment are supported. If the All-in-on package of Puppet 4
+is found it will use the Puppet Server, in all other cases it will setup Puppet Master using Apache and Passenger.
 
 Facter 1.x is supported, Facter 2.x is supported by requires at least Foreman 1.4.2. Support for structured
-facts provided by Facter 2.x is not supported for now, feature request is pending.
+facts provided by Facter 2.x is also added with Foreman 1.12.
 
 ~~~ENDSECTION~~~
 

installation/01_requirements.md

@@ -13,6 +13,7 @@
 * Runs parameterized or interactively
  * command line flags
  * answers file
+ * scenarios
 
 ~~~SECTION:handouts~~~
 
@@ -22,7 +23,7 @@ The Foreman installer is based on a separate project named kafo (Katello/Foreman
 be used by other projects. It utilizes existing Puppet modules to install and configure all required
 components. Module parameters are provided as commandline arguments to the installer,
 as an answers file formatted in yaml (can be autosaved) or by running the installer
-in interactive mode.
+in interactive mode. The installer supports also predefined scenarios which is only used by Katello for now.
 
 ~~~PAGEBREAK~~~
 

installation/02_installer.md

@@ -6,7 +6,6 @@
 * Steps:
  * Make Puppetlabs repository available
  * Make EPEL repository available
- * Make SCLorg repository available
  * Make Foreman repository available
  * Install foreman-installer
 
@@ -40,16 +39,6 @@ URL: http://fedoraproject.org/wiki/EPEL
 
 Command: yum install epel-release
 
-* Make SCLorg repository available
-
-Install the release package provided by CentOS repository to make it available for package
-installation required as dependency.
-
-URL: https://wiki.centos.org/AdditionalResources/Repositories/SCL
-
-Command: yum install centos-release-scl
-
-
 * Make Foreman repository available
 
 Install the release package provided by the Foreman repository to make it available for package
@@ -85,21 +74,21 @@ The Foreman installer is installed and "foreman-installer --help" could be run f
 Install the release package provided by the Puppetlabs repository to make it available for package
 installation of open source version of Puppet.
 
-    # yum install http://yum.puppetlabs.com/puppetlabs-release-el-7.rpm -y
+    # yum install http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm -y
 
-### Make EPEL repository available
+In the training we will stick with Puppet 3 and the Puppet Master because it does require much less
+initial resources allowing us to run more virtual machines in parallel. If you really want to run
+Puppet 4, increase the memory of the virtual machine at least to 3 GB and install the Puppet Collection
+repository.
 
-Install the release package provided by the CentOS to make it available for package
-installation required as dependency.
-
-    # yum install epel-release -y
+    # yum install http://yum.puppetlabs.com/puppetlabs-release-pc1-el-7.noarch.rpm -y
 
-### Make SCLorg repository available
+### Make EPEL repository available
 
 Install the release package provided by the CentOS to make it available for package
 installation required as dependency.
 
-    # yum install centos-release-scl -y
+    # yum install epel-release -y
 
 ### Make Foreman repository available
 
@@ -196,7 +185,7 @@ To install run the following command:
     --foreman-proxy-dhcp-interface=eth0 \
     --foreman-proxy-dhcp-gateway=10.0.0.1 \
     --foreman-proxy-dhcp-range="10.0.0.100 10.0.0.200" \
-    --foreman-proxy-dhcp-nameservers="10.0.0.1"
+    --foreman-proxy-dhcp-nameservers="10.0.0.2"
 
 This will output on success something similar: