[Pkg-puppet-devel] Bug#509566: Puppet: setting timeout to 0 causes puppet to try requesting a certificate infinitely often

Apollon Oikonomopoulos apoikos at gmail.com
Tue Dec 23 10:52:01 UTC 2008


Package: puppet
Version: 0.24.5-2
Severity: normal

puppetd accepts a "timeout" argument (-w), that instructs the daemon to wait
for a specified amount of time before re-requesting a certificate from the
puppet master. The parameter's value in /etc/default/puppet is set to 0, which
causes puppet to request a signed certificate from the puppet server infinitely
often, using 100% CPU time on the managed box and filling its log files with
failure entries until it receives a signed certificate. This parameter should
be set to something more reasonable (e.g. 5 seconds), to avoid resource abuse
on the managed hosts.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (99, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=el_GR.UTF-8, LC_CTYPE=el_GR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash





More information about the Pkg-puppet-devel mailing list