Puppet tries to connect to remote server about zulip HOT 1 CLOSED

puppet.zulip.com has never even existed, so that's definitely a bug.
Agreed on the approach -- since we already run Puppet via the
scripts/zulip-puppet-apply wrapper where we could put in options (as we
already do for show_diff), it should definitely not be needed...

    -Tim Abbott

On Sat, Sep 26, 2015 at 5:43 AM, Roman Mueller [email protected]
wrote:

There are some issues with how you are using Puppet.

The /etc/puppet/puppet.conf you are dropping on the system contains:

[main]
server = puppet.zulip.com

As Ubuntu automatically starts the puppet agent after the package is
installed (via your install script) all servers will try to connect to
puppet.zulip.com.
Thankfully that server does not exist but it is a serious security risk.
If someone were to setup a server at that address he could control all
servers which installed via that install script.

Also, it is nowhere mentioned that you shouldn't run the installer on a
system which is already running Puppet.
The installer will overwrite your /etc/puppet/puppet.conf and break your
setup.

In my opinion you shouldn't replace the puppet.conf at all.
As far as I can tell you are using puppet apply ... and you should be
able to specify all options directly there.

—
Reply to this email directly or view it on GitHub
#23.

from zulip.