User request for input using boxen

Question

I am completely new to boxen (and puppet) and I want to invite the user password during setup. I need to encrypt the input and add it to the configuration file.

I will use the template to create the file, but getting the password is a little difficult, since the puppet will not write to the console when executing the code inside the template.

I thought about this using a ruby ​​or shell script to invite the user and then save the password in an environment variable to use it later in the template, but I don't know if this is the best or most secure way to do this.

Any suggestions? is there a “best practice” for this kind of thing with boxen / puppet?

Answer 1

You can use hiera and encrypt hiera data with hiera-gpg or hiera-eyaml backend

Another option is to use a facter with FACTER_MYPASSWORD environment variables or external facts under /etc/facter/facts.d