PUPPETCONF(5) OpenVox manual PUPPETCONF(5) (NAME) puppet.conf - (Configuration settings) o puppet.conf . o (PE) . PE node_terminus storeconfigs always_retry_plugins disable18n environment_timeout ( ) max-active-instances JRuby . PE puppet.conf pe-puppet-server.conf . o --setting (true|false) --setting --no-setting . ( --setting false "Error: Could not parse application options: needless argument" .) o $variables $environment . o ( ) . o : 'y' ( ) 'd' () 'h' () 'm' () 's' () . . '3600' '1h' ( ) '1825d' '5y' ( ) . o splay . o : rundir = $vardir/run { owner = puppet, group = puppet, mode = 644 } o . https://puppet.com/docs/puppet/latest/config_about_settings.html . agent_catalog_run_lockfile . (PID) . o : $statedir/agent_catalog_run.lock agent_disabled_lockfile . JSON . o : $statedir/agent_disabled.lock allow_duplicate_certs . true puppetserver ca clean puppetserver ca sign . o : false allow_pson_serialization PSON . JSON PSON . . false PSON . o : false always_retry_plugins . true Puppet.type.? Puppet.feature.? ( ) . . false . . o : true autoflush () . o : true autosign ( ). (CA) . true ( ) false ( ) . . : ( user ) . CA CSR . (Subject CN) CSR PEM (stdin) . 0 . . puppetserver ca sign . https://puppet.com/docs/puppet/latest/config_file_autosign.html . o : $confdir/autosign.conf basemodulepath . ( POSIX ':' ';' ). . modules . https://puppet.com/docs/puppet/latest/environments_about.html . o : $codedir/modules:/opt/puppetlabs/puppet/modules binder_config (binder). . nil () $confdir/binder_config.yaml . . :binding_config yaml . o : `` bucketdir FileBucket. o : $vardir/bucket ca_fingerprint () CA. CA . CA . o : `` ca_name (CA). o : Puppet CA: $certname ca_port () . o : $serverport ca_refresh_interval CA . CA . CA . runinterval . ca_refresh_interval 0 runinterval CA . CA . CA CA . (30 30s) (30m) (6h) (2d) (5y) . o : 1d ca_server . . o : $server ca_ttl (TTL) . (30 30s) (30m) (6h) (2d) (5y) . o : 5y cacert (CA). o : $cadir/ca_crt.pem cacrl (CRL) . o : $cadir/ca_crl.pem cadir . o : /etc/puppetlabs/puppetserver/ca cakey (CA). o : $cadir/ca_key.pem capub (CA). o : $cadir/ca_pub.pem catalog_cache_terminus . 'json' 'msgpack' 'yaml'. 'json' . o : `` catalog_terminus . memcached . o : compiler cert_inventory . CA . o : $cadir/inventory.txt certdir . o : $ssldir/certs certificate_revocation . CRL CRL PEM . CRL CA crl . CRL CA . certificate_revocation 'true' 'chain' CA CA . 'leaf' CA CA . 'false' CRL . o : chain certname . CA certname Subject CN . auth.conf https://puppet.com/docs/puppetserver/latest/config_file_auth.html . https://puppet.com/docs/puppet/latest/lang_node_definitions.html ENC . $trusted['certname'] ( Facts and Built-In Variables https://puppet.com/docs/puppet/latest/lang_facts_and_builtin_vars.html ). o certname ( /A[a-z0-9._-]+Z/ ). o ca certname . : certname main puppet.conf . . (FQDN) . o : the Host's fully qualified domain name, as determined by Facter ciphers (ciphersuites) TLS . TLS 1.0 . OpenSSL IANA. o : ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256 classfile . puppet --loadclasses . o : $statedir/classes.txt client_datadir . o : $vardir/client_data clientbucketdir FileBucket. o : $vardir/clientbucket clientyamldir YAML . o : $vardir/client_yaml code . puppet . codedir . . root . o : Unix/Linux: /etc/puppetlabs/code -- Windows: C:\ProgramData\PuppetLabs\code -- Non-root user: ~/.puppetlabs/etc/code color . ansi ( true) html false . o : ansi confdir . . root . o : Unix/Linux: /etc/puppetlabs/puppet -- Windows: C:\ProgramData\PuppetLabs\puppet\etc -- Non-root user: ~/.puppetlabs/etc/puppet config . o : $confdir/${config_file_name} config_file_name . o : puppet.conf config_version . . . config_version puppet.conf ( ). environment.conf . https://puppet.com/docs/puppet/latest/environments_about.html . configprint . . . 'all' . 'puppet config' . crl_refresh_interval (CRL) . CRL . CRL . runinterval . crl_refresh_interval 0 runinterval CRL . CRL . CRL CRL . (30 30s) (30m) (6h) (2d) (5y) . o : 1d csr_attributes (CSR). CA puppetserver ca generate . YAML custom_attributes / extension_requests . OID . CA . OID OID CSR ( RFC 2985 .) . ( autosign ) OID 1.2.840.113549.1.9.7 . . OID OID "ppRegCertExt" (1.3.6.1.4.1.34380.1.1) "ppPrivCertExt" (1.3.6.1.4.1.34380.1.2) "ppAuthCertExt" (1.3.6.1.4.1.34380.1.3) . ppRegCertExt : pp_uuid (.1) pp_instance_id (.2) pp_image_name (.3) pp_preshared_key (.4) -- YAML OID . o : $confdir/csr_attributes.yaml csrdir CA. o : $cadir/requests daemonize ( ) . POSIX true ( ) false . o : true data_binding_terminus . 'hiera' hiera.yaml . ( ) . 'hiera' . 'none' . o : hiera default_file_terminus URI puppet:///file. rest server . apply file_server . o : rest default_manifest . manifest environment.conf . . . . o : ./manifests default_schedules . false . o : true deviceconfdir $confdir . o : $confdir/devices deviceconfig puppet device. o : $confdir/device.conf devicedir $vardir . o : $vardir/devices diff diff . diff diff . o : diff diff_args diff . diff . o : -u digest_algorithm () filebucket. sha256 sha384 sha512 sha224 md5. sha256 . o : sha256 disable_i18n true . o : true disable_per_environment_manifest . true default_manifest . environment.conf . default_manifest . o : false disable_warnings . . . : o deprecations -- . o undefined_variables -- . o undefined_resources -- . o : [] dns_alt_names DNS . ( certname ) . . IP DNS . DNS . ( "puppet.example.com") . (load-balance) . : . . https://puppet.com/docs/puppet/latest/ssl_regenerate_certificates.html . CA puppetserver ca list --all (alt names: ...) . . document_all puppet doc . o : false environment . puppet agent . puppet server . [agent] . . puppet agent . [user] . . puppet module puppet apply . https://puppet.com/docs/puppet/latest/config_file_main.html#config-sections environment . o : production environment_data_provider . 'none' ( ) 'function' ( 'environment::data()') 'hiera' ( hiera.yaml ). . . o : `` environment_timeout . 0 . unlimited . environment_timeout . . 0 . : o unlimited . o . (3m) . environment_timeout API environment-cache . API https://puppet.com/docs/puppetserver/latest/admin-api/v1/environment-cache.html . o : 0 environmentpath ( POSIX ':' ';' ). . $codedir/environments . https://puppet.com/docs/puppet/latest/environments_about.html . o : $codedir/environments evaltrace . . o : false exclude_unchanged_resources . true . o : true external_nodes (ENC) . . node_terminus exec . . : o . o YAML : o classes -- . o environment -- . o parameters -- . o . ENC . ENC https://puppet.com/docs/puppet/latest/nodes_external.html . o : none fact_name_length_soft_limit (). o : 2560 fact_value_length_soft_limit (). o : 4096 factpath () . ( POSIX ':' ';' ). o : $vardir/lib/facter:$vardir/facts facts_terminus . o : facter fileserverconfig (fileserver). o : $confdir/fileserver.conf filetimeout . ( puppet.conf) . environment_cache . o : 15s forge_authorization Puppet Forge. . o : `` freeze_main 'main' . . o : false genconfig true . ( ) CLI . --genconfig . o : false genmanifest . --genmanifest . CLI . o : false graph .dot . OmniGraffle http://www.omnigroup.com/applications/omnigraffle graphviz http://www.graphviz.org . puppet agent puppet apply . graphdir . .dot . dot GraphViz dot -Tpng -o PNG . o : false graphdir .dot ( graph ). o : $statedir/graphs group . (agent apply ) . o : puppet hiera_config hiera. . o : $confdir/hiera.yaml. However, for backwards compatibility, if a file exists at $codedir/hiera.yaml, Puppet uses that instead. hostcert . o : $certdir/$certname.pem hostcert_renewal_interval . . . hostcert_renewal_interval runinterval . hostcert_renewal_interval 0 . (30 30s) (30m) (6h) (2d) (5y) . o : 30d hostcrl (CRL) . CRL . o : $ssldir/crl.pem hostcsr (CSR) CA . o : $requestdir/$certname.pem hostprivkey . o : $privatekeydir/$certname.pem hostpubkey . o : $publickeydir/$certname.pem http_connect_timeout HTTP. . (30 30s) (30m) (6h) (2d) (5y) . o : 2m http_debug HTTP (stderr) . . o : false http_extra_headers http . . o : [] http_keepalive_timeout HTTP . HTTP ( KeepAliveTimeout ). (30 30s) (30m) (6h) (2d) (5y) . o : 4s http_proxy_host HTTP . NO_PROXY no_proxy . http_proxy HTTP_PROXY . o : none http_proxy_password HTTP. http_proxy_user . URL . URL (URL-encode) ( # %23 ). o : none http_proxy_port () HTTP . o : 3128 http_proxy_user HTTP. http_proxy_host . o : none http_read_timeout HTTP. . . (30 30s) (30m) (6h) (2d) (5y) . o : 10m http_user_agent User-Agent HTTP . o : Puppet/ Ruby/ () ignore_plugin_errors pluginsync . false . o : false ignoremissingtypes . . o : false ignoreschedules . . o : false include_legacy_facts () . hiera.yaml hiera $osfamily $facts['os']['family'] false . o : false key_type . rsa ec . rsa . o : rsa keylength . o : 4096 lastrunfile yaml. o : $publicdir/last_run_summary.yaml lastrunreport yaml. cache report routes.yaml https://puppet.com/docs/puppet/latest/config_file_routes.html . o : $statedir/last_run_report.yaml ldapattrs LDAP LDAP . . . 'all' . o : all ldapbase LDAP. LDAP . 'ou=Hosts' . ldapclassattrs LDAP . . o : puppetclass ldapparentattr . o : parentnode ldappassword LDAP. ldapport LDAP. o : 389 ldapserver LDAP. o : ldap ldapssl SSL . false SSL . o : false ldapstackedattrs LDAP . . o : puppetvar ldapstring LDAP. o : (&(objectclass=puppetClient)(cn=%s)) ldaptls TLS . false TLS . o : false ldapuser LDAP. DN . libdir . . . o : $vardir/lib localcacert CA . o : $certdir/ca.pem localedest . o : $vardir/locales localesource . (file) . o : puppet:///locales location_trusted + (redirect) . . o : false log_level . : o debug o info o notice o warning o err o alert o emerg o crit o : notice logdest . 'syslog' ( POSIX) 'eventlog' ( ) 'console' . ( : /path/file1,console,/path/file2). o : `` logdir . o : Unix/Linux: /var/log/puppetlabs/puppet -- Windows: C:\ProgramData\PuppetLabs\puppet\var\log -- Non-root user: ~/.puppetlabs/var/log manage_internal_file_permissions . : .. .. . false . o : true manifest . . / . manifest puppet.conf ( ). . manifests manifest environment.conf . https://puppet.com/docs/puppet/latest/environments_about.html . o : `` masterport ( puppet facts upload puppet agent). (ca_port report_port ). o : 8140 max_deprecations . 0 . . o : 10 max_errors . 0 1 . . o : 10 max_warnings . 0 . . o : 10 maximum_uid UID . UID UID . . o : 4294967290 maxwaitforcert . unlimited . (30 30s) (30m) (6h) (2d) (5y) . o : unlimited maxwaitforlock . . unlimited . (30 30s) (30m) (6h) (2d) (5y) . o : 1m merge_dependency_warnings . notice warning . true . o : false mkusers . o : false module_groups Puppet Forge. . o : `` module_repository . o : https://forgeapi.puppet.com module_working_dir . o : $vardir/puppet-module modulepath ( POSIX ':' ';' ). modulepath puppet.conf ( ). . :$basemodulepath modulepath environment.conf . https://puppet.com/docs/puppet/latest/environments_about.html . name . 0$ .rb . o : `` named_curve EC EC. OpenSSL::PKey::EC.builtin_curves . prime256v1 . o : prime256v1 no_proxy http_proxy_host . no_proxy NO_PROXY . FQDN host.example.com *.example.com .example.com example.com . o : localhost, 127.0.0.1 node_cache_terminus . (none) 'json' 'msgpack' 'yaml'. o : `` node_name_fact () . : node_name_value . auth.conf https://puppet.com/docs/puppetserver/latest/config_file_auth.html . node_name_value . : node_name_fact . auth.conf . o : $certname node_terminus . : ( " " ). : 1. ( ). 2. . 3. . : o plain -- . o exec -- (ENC) https://puppet.com/docs/puppet/latest/nodes_external.html external_nodes . o classifier ( console ) -- Puppet Enterprise PE . o : plain noop noop . puppet agent puppet apply . noop . . . : noop https://puppet.com/docs/puppet/latest/metaparameter.html#noop noop noop . noop => false noop = true --noop . o : false number_of_facts_soft_limit (). ( ) . o : 10240 onetime . cron . o : false passfile . . o : $privatedir/password path . . [main] puppet.conf [server] [agent] . o : none payload_soft_limit (payload). o : 16777216 pidfile PID . . o : $rundir/${run_mode}.pid plugindest . o : $libdir pluginfactdest pluginsync . o : $vardir/facts.d pluginfactsource pluginsync. o : puppet:///pluginfacts pluginsignore . o : .svn CVS .git .hg pluginsource . (file) . o : puppet:///plugins pluginsync . . o : true postrun_command . . preferred_serialization_format . . o : json preprocess_deferred (deferred) . true . false . o : false prerun_command . . preview_outputdir . o : $vardir/preview priority . 'high' 'normal' 'low' 'idle'. -5. ( ) . o : `` privatedir . o : $ssldir/private privatekeydir . o : $ssldir/private_keys profile (profiling) . o : false publicdir . o : Unix/Linux: /opt/puppetlabs/puppet/public -- Windows: C:\ProgramData\PuppetLabs\puppet\public -- Non-root user: ~/.puppetlabs/opt/puppet/public publickeydir . o : $ssldir/public_keys puppet_trace (stack trace) . trace . o : false puppetdlog (fallback). --logdest syslog POSIX Event Log . . --logdest puppet server puppet agent puppet apply . o : $logdir/puppetd.log report . o : true report_configured_environmentpath . versioned_environment_dirs true readlink modulepath environmentpath . " " " " . false . o : true report_include_system_store 'http' HTTPS . false 'http' CA CA . o : false report_port report_server. o : $serverport report_server . o : $server reportdir . . store ( reports ). o : $vardir/reports reports . ( reports = http, store). puppet server puppet apply . puppet apply ( report = true ). . none . o : store reporturl URL () . http ( reports ). o : http://localhost:3000/reports/upload requestdir . o : $ssldir/certificate_requests resourcefile . o : $statedir/resources.txt resubmit_facts () . . . puppetdb ( ) . puppetdb . puppetdb . o : false rich_data __ptype. Binary Regexp SemVer SemVerRange Timespan Timestamp Object . o : true route_file YAML indirector. o : $confdir/routes.yaml rundir PID . o : Unix/Linux: /var/run/puppetlabs -- Windows: C:\ProgramData\PuppetLabs\puppet\var\run -- Non-root user: ~/.puppetlabs/var/run runinterval . runinterval 0 " " " ". (30 30s) (30m) (6h) (2d) (5y) . o : 30m runtimeout . . 0 . . (30 30s) (30m) (6h) (2d) (5y) . o : 1h serial . o : $cadir/serial server . o : puppet server_datadir . o : $vardir/server_data server_list . (FQDN) ':' . masterport . o : [] serverport ( puppet facts upload puppet agent). (ca_port report_port ). o : 8140 settings_catalog . o : true show_diff . . diff/lcs . o : false signeddir CA. o : $cadir/signed skip_logging_catalog_request_destination . true . o : false skip_tags . . . sourceaddress . o : `` splay ( $splaylimit) . $runinterval . $runinterval splay false 00: 01: 31: . splay $splaylimit . 08: . 38: . splay splay . splay . o : false splaylimit splay . $runinterval . splay . (30 30s) (30m) (6h) (2d) (5y) . o : $runinterval srv_domain SRV . o : example.com ssl_client_header SSL DN . SSL DN ( /CN=puppet.puppetlabs.com). (CN) (DN) CN . HTTP (CGI) : HTTP_ . X-Client-DN HTTP_X_CLIENT_DN . o : HTTP_X_CLIENT_DN ssl_client_verify_header . 'SUCCESS' . HTTP (CGI) : HTTP_ . X-Client-Verify HTTP_X_CLIENT_VERIFY . o : HTTP_X_CLIENT_VERIFY ssl_lockfile ssl . o : $ssldir/ssl.lock ssl_trust_store CA PEM HTTPS . https https 'http'. //:puppet . o : `` ssldir SSL. o : $confdir/ssl statedir . ( ). o : $vardir/state statefile . . o : $statedir/state.yaml statettl . (30 30s) (30m) (6h) (2d) (5y) . 0 unlimited . schedule statefile . statettl . o : 32d static_catalogs https://puppet.com/docs/puppet/latest/static_catalogs.html#enabling-or-disabling-static-catalogs code-id-command code-content-command puppetserver.conf . o : true storeconfigs . - . 'puppetdb' . storeconfigs_backend . o : false storeconfigs_backend StoreConfigs . PuppetDB StoreConfigs . o : puppetdb strict . : o off - o warning - o error - () . disable_warnings . o : error strict_environment_mode . o : false strict_variables ( undef ). o : true summarize . o : false supported_checksum_types (checksum) . . sha256 sha256lite sha384 sha512 sha224 sha1 sha1lite md5 md5lite mtime ctime. o : ["sha256", "sha384", "sha512", "sha224", "md5"] syslogfacility syslog syslog . Syslog . o : daemon tags . . . tasks . API . . o : false top_level_facts_soft_limit () . o : 512 trace (stack trace) . . o : false transactionstorefile ( corrective_change) . o : $statedir/transactionstore.yaml trusted_external_command . . () : o . o JSON . o . 'external' . trusted['external'] . o : `` trusted_oid_mapping_file OID SSL . o : $confdir/custom_trusted_oid_mapping.yaml use_cached_catalog . . . o : false use_last_environment last_run_summary . true . false last_run_summary . o : true use_srv_records SRV DNS . o : false usecacheonfailure . . o : true user . (agent apply ) . o : puppet vardir . confdir . o : Unix/Linux: /opt/puppetlabs/puppet/cache -- Windows: C:\ProgramData\PuppetLabs\puppet\cache -- Non-root user: ~/.puppetlabs/opt/puppet/cache vendormoduledir (vendored). basemodulepath . basemodulepath pluginsync . o : /opt/puppetlabs/puppet/vendor_modules versioned_environment_dirs $environmentpath/ . . o : false waitforcert . (CSR) ca_server CA . . . 0 maxwaitforcert . (30 30s) (30m) (6h) (2d) (5y) . o : 2m waitforlock . ( 0). . 0 maxwaitforlock . (30 30s) (30m) (6h) (2d) (5y) . o : 0 write_catalog_summary classfile resourcefile . puppet apply. o : true yamldir YAML . o : $vardir/yaml Vox Pupuli January 2025 PUPPETCONF(5)