This is my attempte to merge docker-puppetmaster,MunkiServer, Crypt and Hopefully Sal:

this is a clone of : https://github.com/macadmins/docker-puppetmaster

Docker image for puppet server

Autosigning is turned on in puppet.conf.

In addition, confdir is /opt/puppet/ and vardir is /opt/varpuppet/, and both the confdir and vardir are marked as data volumes in the Dockerfile. This makes it easy to use data-only containers.

1. Make a data-only container first, so you can destroy the puppetmaster container without losing certs or other configuration data:
   docker run -d --name puppet-data --entrypoint /bin/echo macadmins/puppetmaster Data-only container for puppetmaster
2. docker run -d --name puppetmaster -h puppet -p 8140:8140 --volumes-from puppet-data macadmins/puppetmaster
3. Important: docker exec puppetmaster cp -Rf /etc/puppet /opt/
4. To see list of certs: docker exec puppetmaster puppet cert list -all
5. To test on a client:
   1. Install Puppet, Hiera, Facter, and Puppet LaunchDaemon onto client
   2. Add the IP of your Docker host to /etc/hosts (or configure DNS so that your Docker host is reachable at "puppet"). For example:
      "10.0.0.1 puppet"
   3. Test puppet on client running as root:
      # puppet agent --test
      You should see the cert request being generated and autosigned.
6. Verify cert signing on puppetmaster docker container:
   docker exec puppetmaster puppet cert list -all
7. On the client, run:
   # puppet agent --test again to verify that cert exists and was confirmed.
8. To create manifests, place them in /opt/puppet/manifests/.