Troubleshooting Installer Issues
A newer version is available; see the version menu above for details.
Common Installer Problems
Here are some common problems that can cause an install to go awry.
Upgrades from 3.2.0 Can Cause Issues with Multi-Platform Agent Packages
Users upgrading from PE 3.2.0 to a later version of 3.x (including 3.2.3) will see errors when attempting to download agent packages for platforms other than the master. After adding
pe_repo classes to the master for desired agent packages, errors will be seen on the subsequent puppet run as PE attempts to access the requisite packages. The issue is caused by an incorrectly set parameter of the
pe_repo class. It can be fixed as follows:
- In the console, navigate to the node page for each master node where you wish to add agent packages.
- On the master’s node page, click Edit and then, for the
pe_repoparameter, click Edit parameters
- Next to the
base_pathparameter, click Reset value
- Save the parameter change and update the node.
Once this has been done, you should now be able to add new agent platforms without issue.
A Note about Changes to
puppet.conf that Can Cause Issues During Upgrades
If you manage
puppet.conf with Puppet or a third-party tool like Git or r10k, you may encounter errors after upgrading based on the following changes. Please assess these changes before upgrading.
In PE versions earlier than 3.2, node classification was configured with
node_terminus=exec, located in
/etc/puppetlabs/puppet/puppet.conf. This caused the puppet master to execute a custom shell script (
/etc/puppetlabs/puppet-dashboard/external_node) which ran a curl command to retrieve data from the console.
PE 3.2 changes node classification in
puppet.conf; the new configuration is
external_nodescript is no longer available; thus,
node_terminus=execno longer works.
With this change, we have improved security, as the puppet master can now verify the console. The console certificate name is
pe-internal-dashboard. The puppet master now finds the console by reading the contents of /
etc/puppetlabs/puppet/console.conf, which provides the following:
[main] server=<console hostname> port=<console port> certificate_name=pe-internal-dashboard
This file tells the puppet master where to locate the console and what name it should expect the console to have. If you want to change the location of the console, you can edit
console.conf, but DO NOT change the
The rules for certificate-based authorization to the console are found in
/etc/puppetlabs/console-auth/certificate_authorization.ymlon the console node. By default, this file allows the puppet master read-write access to the console (based on it’s certificate name) to request node data and submit report data.
Report submission to the console no longer happens using
reports=https. PE 3.2 changed the setting in
reports=console. This change works in the same way as the
node_terminuschanges described above.
Installing Agents in a Puppet Enterprise Infrastructure without Internet Access
When installing agents on a platform that is different from the puppet master platform, the agent install script attempts to connect to the internet to download the appropriate agent tarball after you classify the puppet master, as described in Installing Agents Using PE Package Management.
If your PE infrastructure does not have access to the outside internet, you will not be able to fully use the agent installation instructions. Instead, you will need to download the appropriate agent tarball in advance and use the option below that corresponds to your deployment needs.
If you would like to use the PE-provided repo, you can copy the agent tarball into the
/opt/staging/pe_repodirectory on your master.
Note that if you upgrade your server at any point, you will need to perform this task again for the new version.
If you already have a package management/distribution system, you can use it to install agents by adding the agent packages to your own repo. In this case, you can disable the PE-hosted repo feature altogether by removing the
pe_repoclass from your master, along with any class that starts with
Note that if you upgrade your server, you will need to perform this task again for the new version.
If your deployment has multiple masters and you don’t wish to copy the agent tarball to each one, you can specify a path to the agent tarball. This can be done with an answer file, by setting
q_tarball_serverto an accessible server containing the tarball, or by using the console to set the
base_pathparameter of the
pe_repoclass to an accessible server containing the tarball.
Is DNS Wrong?
If name resolution at your site isn’t quite behaving right, PE’s installer can go haywire.
- Puppet agent has to be able to reach the puppet master server at one of its valid DNS names. (Specifically, the name you identified as the master’s hostname during the installer interview.)
- The puppet master also has to be able to reach itself at the puppet master hostname you chose during installation.
- If you’ve split the master and console roles onto different servers, they have to be able to talk to each other as well.
Are the Security Settings Wrong?
The installer fails in a similar way when the system’s firewall or security group is restricting the ports Puppet uses.
- Puppet communicates on ports 8140, 61613, and 443. If you are installing the puppet master and the console on the same server, it must accept inbound traffic on all three ports. If you’ve split the two roles, the master must accept inbound traffic on 8140 and 61613 and the console must accept inbound traffic on 8140 and 443.
- If your puppet master has multiple network interfaces, make sure it is allowing traffic via the IP address that its valid DNS names resolve to, not just via an internal interface.
Did You Try to Install the Console Before the Puppet Master?
If you are installing the console and the puppet master on separate servers and tried to install the console first, the installer may fail.
How Do I Recover From a Failed Install?
First, fix any configuration problem that may have caused the install to fail. See above for a list of the most common errors.
Next, run the uninstaller script. See the uninstallation instructions in this guide for full details.
After you have run the uninstaller, you can safely run the installer again.
Problems with PE when upgrading your OS
Upgrading your OS while PE is installed can cause problems with PE. To perform an OS upgrade, you’ll need to uninstall PE, perform the OS upgrade, and then reinstall PE as follows:
Back up your databases and other PE files.
Perform a complete uninstall (including the -pd uninstaller option).
Upgrade your OS.
Restore your backup.