Puppet Sync

This project provides a script to synchronize your manifests from a GIT
repository to your Puppet master.

Usage

Usage: puppet-sync -b BRANCH [options]
    -b, --branch BRANCH              Mandatory, specify the git branch to clone.
    -d, --deploy DIR                 Specify the directory to deploy to.
    -e, --environment DIR            Specify the name of the environment to deploy to, defaults to the branch.
    -D, --delete                     Remove the specified branch from the deployment directory.
    -r, --repository URL             Git url for the repository.
    -s SUBMODULES                    Comma-seperated list of submodule paths to enable.
        --submodules-enabled
    -fs --full-sync                  Do a full sync: download missing environments and delete non-existing ones
Common options:
    -V, --version                    Display the script version.
    -v, --verbose                    Be more verbose.
    -h, --help                       Show this message

To sync a specific branch, to specific location, from a specific repository run the
script with the following arguments:

  puppet-sync --branch master \
              --deploy /etc/puppet/environments \
              --repository ssh+git://git/puppet.git

Git Hook

I usually call this script from a GIT hook. If your GIT repository is located
on a different server as your Puppet master, you will need to ensure that
a certain user can login to your Puppet server, without manual interactions.
I use the “puppet” user for this purpose.

  # change to the user and generate a key
  sudo -u puppet ssh-keygen -t rsa -b 4096 -f ~puppet/.ssh/id_rsa

  # copy the public key file to your puppetmaster server (where you have already
  # created the puppet user)
  ssh server 'cat - >> ~puppet/.ssh/authorized_keys' < ~puppet/.ssh/id_rsa.pub

Now you need to add the following to the Git hook file:

  #!/bin/sh
  # File: /git/puppet.git/hooks/post-receive

  REPO="[email protected]:puppet.git"
  DEPLOY="/etc/puppet/environments"
  SSH_ARGS="-i /path/to/privatekey"
  PUPPETMASTER="[email protected]"
  SYNC_COMMAND="/usr/local/bin/puppet-sync"

  while read oldrev newrev refname
  do
    BRANCH=`echo $refname | sed -n 's/^refs\/heads\///p'`
    [ "$newrev" -eq 0 ] 2> /dev/null && DELETE='--delete' || DELETE=''

    ssh $SSH_ARGS "$PUPPETMASTER" "$SYNC_COMMAND" \
      --branch "$BRANCH" \
      --repository "$REPO" \
      --deploy "$DEPLOY" \
      $DELETE

  done