student@x61s-11:~$ sudo puppet agent -t Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Info: Caching catalog for x61s-11.res.training Info: Applying configuration version '1489074973' Notice: /Stage[main]/Main/Exec[apt-update]/returns: executed successfully Error: -su: byobu-select-backend: command not found Error: /Stage[main]/Main/Exec[su - student -c "byobu-select-backend screen"]/returns: change from notrun to 0 failed: -su: byobu-select-backend: command not found Notice: /Stage[main]/Main/Package[libncursesw5-dev]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[lzop]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[tree]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[git]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[htop]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[indent]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[ccache]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[byobu]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Exec[byobu-select-backend screen]/returns: executed successfully Notice: /Stage[main]/Main/File[/tftpboot]/ensure: created Notice: /Stage[main]/Main/Exec[service tftpd-hpa force-reload]/returns: Failed to restart tftpd-hpa.service: Unit tftpd-hpa.service not found. Error: service tftpd-hpa force-reload returned 5 instead of one of [0] Error: /Stage[main]/Main/Exec[service tftpd-hpa force-reload]/returns: change from notrun to 0 failed: service tftpd-hpa force-reload returned 5 instead of one of [0] Notice: /Stage[main]/Main/Package[telnet]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[iotop]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[atop]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[pv]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Exec[locale-gen de_AT.UTF-8]/returns: executed successfully Notice: /Stage[main]/Sudo/File[/etc/sudoers.d/]/mode: mode changed '0755' to '0550' Notice: /Stage[main]/Sudo/File[/etc/sudoers]/content: --- /etc/sudoers 2017-01-20 16:03:57.000000000 +0000 +++ /tmp/puppet-file20170309-2286-ewyteb 2017-03-09 15:58:18.563548966 +0000 @@ -1,3 +1,4 @@ +# file managed by puppet (unless config_file_replace=false) # # This file MUST be edited with the 'visudo' command as root. # @@ -8,7 +9,7 @@ # Defaults env_reset Defaults mail_badpass -Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin" +Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" # Host alias specification Info: Computing checksum on file /etc/sudoers Info: /Stage[main]/Sudo/File[/etc/sudoers]: Filebucketed /etc/sudoers to puppet with sum edcf6528783ecffd3f248c8089dc298e Notice: /Stage[main]/Sudo/File[/etc/sudoers]/content: content changed '{md5}edcf6528783ecffd3f248c8089dc298e' to '{md5}96d9cd290b72e37c1079aa2b4469491a' Notice: /Stage[main]/Main/Package[libncurses5-dev]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[vim]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Package[xdot]/ensure: ensure changed 'purged' to 'present' Error: /Stage[main]/Main/File_line[someline]: Could not evaluate: No such file or directory @ rb_sysopen - /etc/default/tftpd-hpa Notice: /Stage[main]/Main/Exec[dpkg-reconfigure -f noninteractive dash]/returns: executed successfully Notice: /Stage[main]/Main/Package[tftp]/ensure: ensure changed 'purged' to 'present' Notice: /Stage[main]/Main/Exec[echo "dash dash/sh boolean false" | debconf-set-selections]/returns: executed successfully Notice: /Stage[main]/Ssh::Client::Config/File[/etc/ssh/ssh_config]/content: --- /etc/ssh/ssh_config 2016-08-11 16:24:57.000000000 +0000 +++ /tmp/puppet-file20170309-2286-eqnael 2017-03-09 15:59:02.495766814 +0000 @@ -1,56 +1,5 @@ - -# This is the ssh client system-wide configuration file. See -# ssh_config(5) for more information. This file provides defaults for -# users, and the values can be changed in per-user configuration files -# or on the command line. - -# Configuration data is parsed as follows: -# 1. command line options -# 2. user-specific file -# 3. system-wide file -# Any configuration value is only changed the first time it is set. -# Thus, host-specific definitions should be at the beginning of the -# configuration file, and defaults at the end. - -# Site-wide defaults for some commonly used options. For a comprehensive -# list of available options, their meanings and defaults, please see the -# ssh_config(5) man page. +# File managed by Puppet Host * -# ForwardAgent no -# ForwardX11 no -# ForwardX11Trusted yes -# RhostsRSAAuthentication no -# RSAAuthentication yes -# PasswordAuthentication yes -# HostbasedAuthentication no -# GSSAPIAuthentication no -# GSSAPIDelegateCredentials no -# GSSAPIKeyExchange no -# GSSAPITrustDNS no -# BatchMode no -# CheckHostIP yes -# AddressFamily any -# ConnectTimeout 0 -# StrictHostKeyChecking ask -# IdentityFile ~/.ssh/identity -# IdentityFile ~/.ssh/id_rsa -# IdentityFile ~/.ssh/id_dsa -# IdentityFile ~/.ssh/id_ecdsa -# IdentityFile ~/.ssh/id_ed25519 -# Port 22 -# Protocol 2 -# Cipher 3des -# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc -# MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160 -# EscapeChar ~ -# Tunnel no -# TunnelDevice any:any -# PermitLocalCommand no -# VisualHostKey no -# ProxyCommand ssh -q -W %h:%p gateway.example.com -# RekeyLimit 1G 1h - SendEnv LANG LC_* HashKnownHosts yes - GSSAPIAuthentication yes - GSSAPIDelegateCredentials no + SendEnv LANG LC_* Info: Computing checksum on file /etc/ssh/ssh_config Info: /Stage[main]/Ssh::Client::Config/File[/etc/ssh/ssh_config]: Filebucketed /etc/ssh/ssh_config to puppet with sum ac848ff6a465188e7dd91cf91dbe4889 Notice: /Stage[main]/Ssh::Client::Config/File[/etc/ssh/ssh_config]/content: content changed '{md5}ac848ff6a465188e7dd91cf91dbe4889' to '{md5}6b6e968bce40150262b7ab85822e7c07' Info: Computing checksum on file /etc/sudoers.d/README Info: /Stage[main]/Sudo/File[/etc/sudoers.d/README]: Filebucketed /etc/sudoers.d/README to puppet with sum 8d3cf36d1713f40a0ddc38e1b21a51b6 Notice: /Stage[main]/Sudo/File[/etc/sudoers.d/README]/ensure: removed Notice: /Stage[main]/Main/Sudo::Conf[foreman-proxy]/File[20_foreman-proxy]/ensure: created Info: /Stage[main]/Main/Sudo::Conf[foreman-proxy]/File[20_foreman-proxy]: Scheduling refresh of Exec[sudo-syntax-check for file /etc/sudoers.d/20_foreman-proxy] Notice: /Stage[main]/Main/Sudo::Conf[foreman-proxy]/Exec[sudo-syntax-check for file /etc/sudoers.d/20_foreman-proxy]: Triggered 'refresh' from 1 events Notice: /Stage[main]/Main/Sudo::Conf[student]/File[10_student]/ensure: created Info: /Stage[main]/Main/Sudo::Conf[student]/File[10_student]: Scheduling refresh of Exec[sudo-syntax-check for file /etc/sudoers.d/10_student] Notice: /Stage[main]/Main/Sudo::Conf[student]/Exec[sudo-syntax-check for file /etc/sudoers.d/10_student]: Triggered 'refresh' from 1 events Notice: /Stage[main]/Nfs::Server::Package/Package[nfs-kernel-server]/ensure: ensure changed 'purged' to 'present' Info: /Package[nfs-kernel-server]: Scheduling refresh of Service[nfs-server] Notice: /Stage[main]/Nfs::Server::Package/Package[nfs4-acl-tools]/ensure: ensure changed 'purged' to 'present' Info: /Package[nfs4-acl-tools]: Scheduling refresh of Service[nfs-server] Notice: /Stage[main]/Nfs::Server::Config/Concat[/etc/exports]/File[/etc/exports]/content: --- /etc/exports 2012-10-10 16:15:43.000000000 +0000 +++ /tmp/puppet-file20170309-2286-1hh8pii 2017-03-09 15:59:26.811887391 +0000 @@ -1,10 +1,2 @@ -# /etc/exports: the access control list for filesystems which may be exported -# to NFS clients. See exports(5). -# -# Example for NFSv2 and NFSv3: -# /srv/homes hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check) -# -# Example for NFSv4: -# /srv/nfs4 gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check) -# /srv/nfs4/homes gss/krb5i(rw,sync,no_subtree_check) -# +# This file is configured through the nfs::server puppet module +/opt *(rw,no_root_squash,no_subtree_check) Info: Computing checksum on file /etc/exports Info: /Stage[main]/Nfs::Server::Config/Concat[/etc/exports]/File[/etc/exports]: Filebucketed /etc/exports to puppet with sum c4b5a82046e49d2e6a590e49d165f095 Notice: /Stage[main]/Nfs::Server::Config/Concat[/etc/exports]/File[/etc/exports]/content: content changed '{md5}c4b5a82046e49d2e6a590e49d165f095' to '{md5}4707e7a59f6b12e48a4c63ed1e4968a4' Info: Concat[/etc/exports]: Scheduling refresh of Service[nfs-server] Notice: /Stage[main]/Main/Exec[locale-gen en_US.UTF-8]/returns: executed successfully Notice: /Stage[main]/Ssh::Server::Config/Concat[/etc/ssh/sshd_config]/File[/etc/ssh/sshd_config]/content: --- /etc/ssh/sshd_config 2017-03-09 15:33:14.899205554 +0000 +++ /tmp/puppet-file20170309-2286-njugtk 2017-03-09 15:59:28.803897269 +0000 @@ -1,88 +1,10 @@ -# Package generated configuration file -# See the sshd_config(5) manpage for details +# File is managed by Puppet -# What ports, IPs and protocols we listen for -Port 22 -# Use these options to restrict which interfaces/protocols sshd will bind to -#ListenAddress :: -#ListenAddress 0.0.0.0 -Protocol 2 -# HostKeys for protocol version 2 -HostKey /etc/ssh/ssh_host_rsa_key -HostKey /etc/ssh/ssh_host_dsa_key -HostKey /etc/ssh/ssh_host_ecdsa_key -HostKey /etc/ssh/ssh_host_ed25519_key -#Privilege Separation is turned on for security -UsePrivilegeSeparation yes - -# Lifetime and size of ephemeral version 1 server key -KeyRegenerationInterval 3600 -ServerKeyBits 1024 - -# Logging -SyslogFacility AUTH -LogLevel INFO - -# Authentication: -LoginGraceTime 120 -PermitRootLogin prohibit-password -StrictModes yes - -RSAAuthentication yes -PubkeyAuthentication yes -#AuthorizedKeysFile %h/.ssh/authorized_keys - -# Don't read the user's ~/.rhosts and ~/.shosts files -IgnoreRhosts yes -# For this to work you will also need host keys in /etc/ssh_known_hosts -RhostsRSAAuthentication no -# similar for protocol version 2 -HostbasedAuthentication no -# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication -#IgnoreUserKnownHosts yes - -# To enable empty passwords, change to yes (NOT RECOMMENDED) -PermitEmptyPasswords no - -# Change to yes to enable challenge-response passwords (beware issues with -# some PAM modules and threads) +AcceptEnv LANG LC_* +AllowTcpForwarding yes ChallengeResponseAuthentication no - -# Change to no to disable tunnelled clear text passwords -#PasswordAuthentication yes - -# Kerberos options -#KerberosAuthentication no -#KerberosGetAFSToken no -#KerberosOrLocalPasswd yes -#KerberosTicketCleanup yes - -# GSSAPI options -#GSSAPIAuthentication no -#GSSAPICleanupCredentials yes - -X11Forwarding yes -X11DisplayOffset 10 +PasswordAuthentication yes PrintMotd no -PrintLastLog yes -TCPKeepAlive yes -#UseLogin no - -#MaxStartups 10:30:60 -#Banner /etc/issue.net - -# Allow client to pass locale environment variables -AcceptEnv LANG LC_* - Subsystem sftp /usr/lib/openssh/sftp-server - -# Set this to 'yes' to enable PAM authentication, account processing, -# and session processing. If this is enabled, PAM authentication will -# be allowed through the ChallengeResponseAuthentication and -# PasswordAuthentication. Depending on your PAM configuration, -# PAM authentication via ChallengeResponseAuthentication may bypass -# the setting of "PermitRootLogin without-password". -# If you just want the PAM account and session checks to run without -# PAM authentication, then enable this but set PasswordAuthentication -# and ChallengeResponseAuthentication to 'no'. UsePAM yes +X11Forwarding yes Info: Computing checksum on file /etc/ssh/sshd_config Info: /Stage[main]/Ssh::Server::Config/Concat[/etc/ssh/sshd_config]/File[/etc/ssh/sshd_config]: Filebucketed /etc/ssh/sshd_config to puppet with sum bd3a2b95f8b4b180eed707794ad81e4d Notice: /Stage[main]/Ssh::Server::Config/Concat[/etc/ssh/sshd_config]/File[/etc/ssh/sshd_config]/content: content changed '{md5}bd3a2b95f8b4b180eed707794ad81e4d' to '{md5}6f617e675649bbd53ac7a176e68c4217' Notice: /Stage[main]/Ssh::Server::Config/Concat[/etc/ssh/sshd_config]/File[/etc/ssh/sshd_config]/mode: mode changed '0644' to '0600' Info: Concat[/etc/ssh/sshd_config]: Scheduling refresh of Service[ssh] Info: Class[Ssh::Server::Config]: Scheduling refresh of Class[Ssh::Server::Service] Info: Class[Ssh::Server::Service]: Scheduling refresh of Service[ssh] Notice: /Stage[main]/Ssh::Server::Service/Service[ssh]: Triggered 'refresh' from 2 events Notice: /Stage[main]/Nfs::Server::Service/Service[nfs-server]: Triggered 'refresh' from 3 events Info: Creating state file /var/lib/puppet/state/state.yaml Notice: Finished catalog run in 194.02 seconds student@x61s-11:~$ sudo puppet agent -t Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Info: Caching catalog for x61s-11.res.training Info: Applying configuration version '1489075183' Notice: /Stage[main]/Main/Exec[apt-update]/returns: executed successfully Notice: /Stage[main]/Main/Exec[su - student -c "byobu-select-backend screen"]/returns: executed successfully Notice: /Stage[main]/Main/Exec[byobu-select-backend screen]/returns: executed successfully Notice: /Stage[main]/Main/Exec[service tftpd-hpa force-reload]/returns: Failed to restart tftpd-hpa.service: Unit tftpd-hpa.service not found. Error: service tftpd-hpa force-reload returned 5 instead of one of [0] Error: /Stage[main]/Main/Exec[service tftpd-hpa force-reload]/returns: change from notrun to 0 failed: service tftpd-hpa force-reload returned 5 instead of one of [0] Notice: /Stage[main]/Main/Exec[locale-gen de_AT.UTF-8]/returns: executed successfully Error: /Stage[main]/Main/File_line[someline]: Could not evaluate: No such file or directory @ rb_sysopen - /etc/default/tftpd-hpa Notice: /Stage[main]/Main/Exec[dpkg-reconfigure -f noninteractive dash]/returns: executed successfully Notice: /Stage[main]/Main/Exec[echo "dash dash/sh boolean false" | debconf-set-selections]/returns: executed successfully Notice: /Stage[main]/Main/Exec[locale-gen en_US.UTF-8]/returns: executed successfully Notice: Finished catalog run in 12.49 seconds