How to identify third-party dependencies that are used within puppet server?

asked 2017-04-06 18:17:09 -0500

JohnsonEarls gravatar image

I need to identify all third party code that is used by puppet server in order to get the approval to run it within my company. I cannot find any documentation on the site that provides a list of third party software used by puppet server. There is a list of CVEs published against the third party software, but that doesn't help - i need the complete list of the third party software itself, not just those that have CVEs.

Is the third party code used by puppet server documented anywhere?

edit retag flag offensive close merge delete

Comments

Are you talking about the OS layer code the puppet requires or are you talking about the include module list that puppet modules need themselves in order to run? For the former, 'rpm -q -R <puppetrpm> will show you the required packages puppet needs in order to run on Linux.

bschonecker gravatar imagebschonecker ( 2017-04-07 05:33:02 -0500 )edit

If you search for 'dependencies' in the individual modules' metadata.json file, it'll show you the modules' dependencies on other modules.

bschonecker gravatar imagebschonecker ( 2017-04-07 05:34:10 -0500 )edit

Are you looking for all of the components in the AIO packages, and their dependencies? Things like Facter, Hiera, puppet-agent, puppet-server, their dependencies, etc...?

DarylW gravatar imageDarylW ( 2017-04-07 07:40:32 -0500 )edit

Some of the information is discussed here https://docs.puppet.com/puppet/4.9/puppet_collections.html

DarylW gravatar imageDarylW ( 2017-04-07 07:59:00 -0500 )edit