Home / server / Questions / 606717
In Process
Yarik Dot
Asked: 2014-06-21 02:22:18 +0800 CST

Puppet random password generating

  • 772

I am going to install around 100 mysql servers and I would like to have different root password on every of them.

I am going to use puppet mysql (https://forge.puppetlabs.com/puppetlabs/mysql) which is amazing. Unfortunately, it supports only passing password from puppet. The great thing is that it stores password in /root/.my.cnf file, so I can connect to mysql locally without knowing the password. So that I don't see the need to have password stored in puppet anymore.

Is there any way to generate password on the server so I don't need to store it on my puppet master?

mysql

1 Answers

  1. This should do:

    $ cat passwd.pp
exec {
    'foobar':
      command => '/usr/bin/openssl rand -base64 12 > /root/.my.cnf',
      creates => '/root/.my.cnf',
      user    => 'root',
      timeout => '-1',
      require => Package['mysql'];
}

    But, since you will have to administer a great number of instances, you might find more useful to switch to PAM authentication, available both in MySQL Enterprise and MariaDB.

    • 1