Skip to content

Instantly share code, notes, and snippets.

@legooolas
legooolas / cve_2019_11477.pp
Created June 19, 2019 13:52
Puppet manifest for TCP SACK PANIC mitigation (CVE-2019-11477/11478/11479)
# CVE-2019-11477 fix until reboots can occur
# https://access.redhat.com/security/vulnerabilities/tcpsack for description and mitigations
class profile::security_workarounds::cve_2019_11477 {
sysctl { 'net.ipv4.tcp_sack':
ensure => present,
value => '0',
persist => true,
comment => 'Mitigate issue CVE-2019-11477 and CVE-2019-11478 via sysctl',
}
@legooolas
legooolas / layout.kbd.json
Last active January 10, 2019 16:51 — forked from mmynsted/layout.kbd.json
Untitled Keyboard Layout
[
[
{
"a": 7
},
"",
{
"a": 4
},
"F1",
@legooolas
legooolas / puppet-agent.log
Last active October 23, 2017 14:39
Puppet agent error with non-existant environment
# puppet agent --test --noop
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: Find /puppet/v3/node/hostname.example.com?environment=doesntexist&configured_environment=doesntex... resulted in 404 with the message: {"message":"Not Found: Could not find environment 'doesntexist'","issue_kind":"RUNTIME_ERROR"}
Info: Retrieving pluginfacts
Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve information from environment doesntexist source(s) puppet:///pluginfacts
Info: Retrieving plugin
Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve information from environment doesntexist source(s) puppet:///plugins
Notice: /File[/opt/puppetlabs/puppet/cache/lib/facter]: Dependency File[/opt/puppetlabs/puppet/cache/lib] has failures: true
Warning: /File[/opt/puppetlabs/puppet/cache/lib/facter]: Skipping because of failed dependencies
Notice: /File[/opt/puppetlabs/puppet/cache/lib/facter/apache_version.rb]: Dependenc
@legooolas
legooolas / puppetlabs-puppetdb__manifests__master__config.pp
Last active May 6, 2016 14:13
puppet multiply-defined classes workaround
class puppetdb::master::config (
$restart_puppet,
$manage_config,
$manage_routes,
$puppet_service_name,
...
) {
if ($restart_puppet) {
## We will need to restart the puppet master service if certain config
## files are changed, so here we make sure it's in the catalog.