[tor-bugs] #33588 [Internal Services/Tor Sysadmin Team]: migrate to puppetserver before EOL

[Tor Bug Tracker & Wiki]

#33588: migrate to puppetserver before EOL
-----------------------------------------------------+-----------------
     Reporter:  anarcat                              |      Owner:  tpa
         Type:  project                              |     Status:  new
     Priority:  Low                                  |  Milestone:
    Component:  Internal Services/Tor Sysadmin Team  |    Version:
     Severity:  Major                                |   Keywords:
Actual Points:                                       |  Parent ID:
       Points:                                       |   Reviewer:
      Sponsor:                                       |
-----------------------------------------------------+-----------------
 our current puppetmaster configuration ("apache + passenger") is
 deprecated and will be removed in Puppet 6. we need to switch to the
 alternative, which is "puppetserver", a daemon written in Clojure
 especially for that purpose.

 the tool is [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=830904 not
 yet in Debian], so this can wait until then. otherwise we could also use
 the upstream puppet debian repositories.

 our "old" passenger configuration lead to at least one security issue
 (#33587) which was due to how complex that configuration is.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33588>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online