使用Foreman 1.6.0.53附带的Satellite 6。
默认情况下，Puppetlabs的文档指出，hieraconfiguration应该在$config/hiera.yaml 。
# puppet config print confdir hiera_config confdir = /etc/puppet hiera_config = /etc/puppet/hiera.yaml
看看我们的hieraconfiguration：
# cat /etc/puppet/hiera.yaml --- :backends: yaml :yaml: :datadir: /var/lib/hiera :hierarchy: - users - groups - global
数据文件存在：
# cat /var/lib/hiera/users.yaml --- users: bfernandez: uid: 300 fullname: Belmin Fernandez
而且，为了testing它，我使用hiera的CLI和一个puppet apply ：
# hiera --conf=/etc/puppet/hiera.yaml --debug -h users DEBUG: 2015-05-06 14:11:37 -0400: Hiera YAML backend starting DEBUG: 2015-05-06 14:11:37 -0400: Looking up users in YAML backend DEBUG: 2015-05-06 14:11:37 -0400: Looking for data source users DEBUG: 2015-05-06 14:11:37 -0400: Found users in users DEBUG: 2015-05-06 14:11:37 -0400: Looking for data source groups DEBUG: 2015-05-06 14:11:37 -0400: Looking for data source global {"bfernandez"=>{"uid"=>300, "fullname"=>"Belmin Fernandez"}} # puppet apply -e '$foo = hiera_hash(users) notify { $foo: }' Notice: Compiled catalog for foosat.example.com in environment production in 0.08 seconds Notice: {"bfernandez"=>{"uid"=>300, "fullname"=>"Belmin Fernandez"}} Notice: /Stage[main]/Main/Notify[{"bfernandez"=>{"uid"=>300, "fullname"=>"Belmin Fernandez"}}]/message: defined 'message' as '{"bfernandez"=>{"uid"=>300, "fullname"=>"Belmin Fernandez"}}' Notice: Finished catalog run in 0.30 seconds
到目前为止，一切看起来不错。 但是，当我在模块中引用hiera_hash('users')并将其应用于节点时，出现此错误：
May 6 13:49:04 foo1 puppet-agent[8688]: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item users in any Hiera data file and no default supplied at /etc/puppet/modules/accounts/manifests/init.pp:10 on node foo1.example.com
任何想法我应该看看？ 感觉就像我在工头上丢失了一些东西。
Per @lsd，尝试使用/etc/hiera.yaml作为configuration，而不是创build符号链接。 用hiera CLI进行testing，确认configuration：
# hiera --conf=/etc/hiera.yaml --debug -h users DEBUG: 2015-05-06 14:31:13 -0400: Hiera YAML backend starting DEBUG: 2015-05-06 14:31:13 -0400: Looking up users in YAML backend DEBUG: 2015-05-06 14:31:13 -0400: Looking for data source defaults DEBUG: 2015-05-06 14:31:13 -0400: Cannot find datafile /var/lib/hiera/defaults.yaml, skipping DEBUG: 2015-05-06 14:31:13 -0400: Looking for data source users DEBUG: 2015-05-06 14:31:13 -0400: Found users in users DEBUG: 2015-05-06 14:31:13 -0400: Looking for data source groups DEBUG: 2015-05-06 14:31:13 -0400: Looking for data source global {"bfernandez"=>{"uid"=>300, "fullname"=>"Belmin Fernandez"}}
然而，代理人仍然得到了错误，所以没有解决这个问题。
在我的通勤思考后，决定检查SELinux，那里是：
[root@foosat hiera]# grep yaml /var/log/audit/audit.log | head -n1 type=AVC msg=audit(1430926955.728:75727): avc: denied { getattr } for pid=17099 comm="ruby" path="/var/lib/hiera/users.yaml" dev="dm-2" ino=25185161 scontext=system_u:system_r:passenger_t:s0 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file
将hiera文件上的文件上下文更改为puppet_etc_t （如果有人知道更合适的东西，请评论）：
[root@foosat hiera]# semanage fcontext -a -s system_u -t puppet_etc_t "/var/lib/hiera(/.*)?" [root@foosat hiera]# restorecon -R -v . restorecon reset /var/lib/hiera/users.yaml context unconfined_u:object_r:var_lib_t:s0->unconfined_u:object_r:puppet_etc_t:s0
现在工作。 希望这可以帮助别人。