# hostnamectl set-hostname foreman.test.alt

# echo "192.168.0.148 foreman.test.alt foreman" >> /etc/hosts
# echo "192.168.0.181 client1.test.alt client1" >> /etc/hosts
# echo "192.168.0.140 client2.test.alt client2" >> /etc/hosts

# puppetserver ca setup --certname foreman.test.alt --subject-alt-names foreman.test.alt

# puppetserver ca generate --certname <имя_сервера> --subject-alt-names <имя_хоста>,<альтернативное_имя_хоста> --ca-client

# apt-get install foreman puppet-theforeman-foreman puppet-theforeman-puppetserver-foreman

# systemctl restart puppetserver
# systemctl restart puppet

# railsctl setup foreman || echo "Ошибка подготовки"
Work dir is '/var/lib/foreman'
Processing rails application 'foreman' setup...
Applying variables from '/etc/sysconfig/foreman'
Renewing dependencies...
Initializing secret...
Initializing encryption key...
Initializing database...
Checking migration and seeds...
Generating API cache...
Cleaning...
Login credentials: admin / 9T7Z8SzYXMtghJFr

# systemctl enable --now foreman

:trusted_hosts: [foreman.test.alt,foreman,192.168.0.0/24]
:host_details_ui: false

# systemctl restart foreman

# systemctl restart smart-proxy

# ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519 -N ''

# ssh-copy-id -i ~/.ssh/id_ed25519.pub user@client1.test.alt

# ssh user@client1.test.alt
[user@client1 ~]$ su -
Password:
[root@client1 ~]# cat /home/user/.ssh/authorized_keys >>.ssh/authorized_keys
[root@client1 ~]# exit
выход
[user@client1 ~]$ exit
выход
Connection to client1.test.alt closed.

# apt-get install ansible

[agents]
client1.test.alt
client2.test.alt
[agents:vars]
ansible_user=root
ansible_python_interpreter=/usr/bin/python3

# ansible -m ping agents
client1.test.alt | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
client2.test.alt | SUCCESS => {
    "changed": false,
    "ping": "pong"
}

---
:enabled: true
:ansible_dir: /usr/lib/foreman
:working_dir: /tmp

# cp /etc/smart-proxy/config/settings.d/tftp.yml.example /etc/smart-proxy/config/settings.d/tftp.yml

---
# Can be true, false, or http/https to enable just one of the protocols
:enabled: true

#:tftproot: /var/lib/tftpboot
# Defines the TFTP Servername to use, overrides the name in the subnet declaration
:tftp_servername: foreman.test.alt

# Defines the default connection timeout in seconds needed to download tftp artifacts
# like initrd and vmlinuz. Default value 10 seconds
#:tftp_connect_timeout: 10

# Defines the default certificate action for certificate checking.
# When false, the argument --no-check-certificate will be used.
#:verify_server_cert: true

# cp /etc/smart-proxy/config/settings.d/dhcp_isc.yml.example /etc/smart-proxy/config/settings.d/dhcp_isc.yml

---
#
# Configuration file for ISC dhcp provider
#

:config: /etc/dhcp/dhcpd.conf
:leases: /var/lib/dhcp/dhcpd/state/dhcpd.leases
#
# Redhat 5
#
#:config: /etc/dhcpd.conf
#
# Settings for Ubuntu
#
#:config: /etc/dhcp3/dhcpd.conf
#:leases: /var/lib/dhcp3/dhcpd.leases

# Specifies TSIG key name and secret
#:key_name: secret_key_name
#:key_secret: secret_key

:omapi_port: 7911

# use :server setting in dhcp.yml if you are managing a dhcp server which is not localhost

# cp /etc/smart-proxy/config/settings.d/dhcp.yml.example /etc/smart-proxy/config/settings.d/dhcp.yml

---
# Can be true, false, or http/https to enable just one of the protocols
:enabled: true

# valid providers:
#   - dhcp_isc (ISC dhcp server)
#   - dhcp_native_ms (Microsoft native implementation)
#   - dhcp_libvirt
:use_provider: dhcp_isc
:server: 192.168.0.148
# subnets restricts the subnets queried to a subset, to reduce the query time.
:subnets: [192.168.0.0/255.255.255.128, 192.168.0.128/255.255.255.128]

# Perform ICMP and TCP ping when searching free IPs from the pool. This makes
# sure that active IP address is not suggested as free, however in locked down
# network environments this can cause no free IPs. Enabled by default
:ping_free_ip: true

# gpasswd -a _smartforeman named
# gpasswd -a _smartforeman dhcp

# chmod 644 /etc/dhcp/dhcpd.conf

$ curl -k -H "Accept: application/json" http://localhost:8000/version
{"version":"3.5.1","modules":{"ansible":"3.5.0","facts":"3.5.1","tftp":"3.5.1","puppetca":"3.5.1","puppet":"3.5.1","logs":"3.5.1"}}

:logging:
  :level: info
  :production:
    :type: file
    :layout: pattern

:logging:
  :level: info
  :production:
    :type: file
    :layout: pattern

:log_file: /var/log/smart-proxy/proxy.log
:log_level: DEBUG