1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
# File 'manifests/execution.pp', line 1
class pe_upgrade::execution (
$certname,
$installer,
$version,
$logfile,
$mode,
$migrate_certs,
$server,
$staging_root,
$timeout,
$answersfile,) {
# Fix issue #23 PE3 only ships with puppet-enterprise-installer
$result = versioncmp($version, '3.0.0')
if $result >= 0 {
$bin = 'puppet-enterprise-installer'
} else {
$bin = $mode ? {
'install' => 'puppet-enterprise-installer',
default => 'puppet-enterprise-upgrader',
} }
if $logfile {
$log_directive = "-l ${logfile}"
} else {
$log_directive = ""
}
$answersfile_dest = "${staging_root}/answers.txt"
$cmd = regsubst("${staging_root}/${installer}/${bin}", ':version', $version, 'G'
)
$validate_cmd = "${cmd} -n -a ${answersfile_dest}"
$run_cmd = "${cmd} ${log_directive} -a ${answersfile_dest}"
$exec_paths = [
'/usr/bin',
'/bin',
'/usr/local/bin',
'/usr/sbin',
'/sbin',
'/usr/local/sbin']
file { $answersfile_dest:
ensure => present,
content => template($answersfile),
owner => 0,
group => 0,
}
# exec { 'Validate answers':
# command => $validate_cmd,
# path => $exec_paths,
# user => 0,
# group => 0,
# logoutput => on_failure,
# timeout => $timeout,
# require => File[$answersfile_dest],
#}
exec { 'Run upgrade':
command => $run_cmd,
path => $exec_paths,
user => 0,
group => 0,
logoutput => on_failure,
timeout => $timeout,
}
############################################################################
# If running in install mode, then shut down Puppet Open Source after install
# Don't actually remove it. Let the user define that strategy
############################################################################
if $mode == 'install' {
service { 'puppet':
ensure => stopped,
enable => false,
require => Exec['Run upgrade'],
}
if $migrate_certs {
file { ['/etc/puppetlabs', '/etc/puppetlabs/puppet']:
ensure => directory,
owner => 0,
group => 0,
mode => '0700',
before => Exec['Run upgrade'],
}
# This is done over a recursive file definition because the file
# definition
# will display diffs and thus leak sensitive information.
exec { '/bin/cp --recursive --force /var/lib/puppet/ssl /etc/puppetlabs/puppet/'
:
user => 0,
group => 0,
logoutput => on_failure,
require => Exec['Run upgrade'],
before => Service['puppet'],
}
}
}
}
|