Initial Commit.

etckeeper-commit-post

+#!/bin/sh
+
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+which etckeeper > /dev/null 2>&1 || exit 0
+
+etckeeper commit "committing changes in /etc after puppet catalog run"
+
+# Failure of etckeeper should not be fatal.
+exit 0

etckeeper-commit-pre

+#!/bin/sh
+
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+which etckeeper > /dev/null 2>&1 || exit 0
+
+etckeeper commit "saving uncommitted changes in /etc prior to puppet catalog run"
+
+# Failure of etckeeper should not be fatal.
+exit 0

manifests/site.pp

+node default {
+	include system
+	include persist
+	include desktop
+}

modules/desktop/manifests/init.pp

+class desktop {
+
+	$packages = [
+		'lxde',
+		'iceweasel',
+		'iceweasel-l10n-*',
+	]
+  
+	package { $packages:
+		ensure => installed,
+	}
+
+}

modules/persist/manifests/init.pp

+class persist {
+
+	file { '/usr/local/sbin/git2puppet':
+		ensure => present,
+		content => "#!/bin/bash\ncd /etc/puppet && git pull && puppet apply /etc/puppet/manifests/site.pp\n",
+		mode => '0755',
+	}
+
+	$packages = [
+		'git-core',
+		'puppet',
+	]
+  
+	package { $packages:
+		ensure => installed,
+	}	
+
+}

modules/system/manifests/init.pp

+class system {
+
+	$packages = [
+		'chrony',
+		'sudo',
+		'lsof',
+		'vim',
+		'screen',
+		'rsync',
+		'tcpdump',
+		'pv',
+		'openssh-server',
+	]
+  
+	package { $packages:
+		ensure => installed,
+	}	
+
+}

puppet.conf

+[main]
+logdir=/var/log/puppet
+vardir=/var/lib/puppet
+ssldir=/var/lib/puppet/ssl
+rundir=/var/run/puppet
+factpath=$vardir/lib/facter
+prerun_command=/etc/puppet/etckeeper-commit-pre
+postrun_command=/etc/puppet/etckeeper-commit-post
+
+[master]
+# These are needed when the puppetmaster is run by passenger
+# and can safely be removed if webrick is used.
+ssl_client_header = SSL_CLIENT_S_DN 
+ssl_client_verify_header = SSL_CLIENT_VERIFY