Skip to content

Instantly share code, notes, and snippets.

@pschyska
Last active July 6, 2021 12:30
Show Gist options
  • Star 5 You must be signed in to star a gist
  • Fork 9 You must be signed in to fork a gist
  • Save pschyska/26002d5f8ee0da2a9ea0 to your computer and use it in GitHub Desktop.
Save pschyska/26002d5f8ee0da2a9ea0 to your computer and use it in GitHub Desktop.
PW hashing with puppet parser function
# lib/puppet/parser/functions/pw_hash.rb
module Puppet::Parser::Functions
newfunction(:pw_hash, type: :rvalue) do |args|
raise Puppet::ParseError, "pw_hash takes exactly two arguments, #{args.length} provided" if args.length != 2
# SHA512 ($6), default number of rounds (5000)
# rounds could be specified by prepending rounds=<n>$ parameter before the salt, i.e.
# args[0].crypt("$6$rounds=50000$#{args[1]}")
args[0].crypt("$6$#{args[1]}")
end
end
user { 'root':
ensure => present,
password => pw_hash($root_pw, $root_salt),
}
@vikas027
Copy link

Nice pschyska, works like a charm.

@prathyushmr
Copy link

Nice one

@william-richard
Copy link

If you use stdlib, it includes a function that does this now:
https://github.com/puppetlabs/puppetlabs-stdlib#pw_hash

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment