augeas { "puppet.conf certname":
    lens    => 'Puppet.lns',
    incl    => "/etc/puppetlabs/puppet/puppet.conf",
    context => "/files/etc/puppetlabs/puppet/puppet.conf",
    changes => [
        "set main/certname ${::networking[fqdn]}",
    ],
  }

# # Or:

  # exec { 'fix puppet.conf certname':
  #   command => 'sed -i "s/^ *certname.*\\$/certname = $(hostname -f)/g" /etc/puppetlabs/puppet/puppet.conf',
  #   path    => ['/bin',],
  #   # onlyif  => 'ls /etc/puppetlabs/puppet/puppet.conf ',
  #   unless  => 'egrep "^ *certname *= *$(hostname -f)" /etc/puppetlabs/puppet/puppet.conf',
  # }
  exec { 'fix puppet.conf certname':
    command => 'touch /etc/puppetlabs/puppet/puppet.conf',
    path    => ['/bin',],
    unless  => 'ls /etc/puppetlabs/puppet/puppet.conf',
  } ->
  exec { 'fix puppet.conf certname2':
    command => 'echo "[main]" >> /etc/puppetlabs/puppet/puppet.conf',
    path    => ['/bin',],
    unless  => 'egrep "^\\\\[main\\\\]" /etc/puppetlabs/puppet/puppet.conf',
  } ->
  exec { 'fix puppet.conf certname3':
    command => 'sed -i "s/ *certname *=.*$//g" /etc/puppetlabs/puppet/puppet.conf || true',
    path    => ['/bin',],
    unless  => 'egrep "^ *certname *= *$(hostname -f | sed \'s/\\([.\\-]\\)/\\\\\\1/g\')\\$" /etc/puppetlabs/puppet/puppet.conf',
  } ~>
  exec { 'fix puppet.conf certname4':
    command => 'sed -i "/\\\\[main\\\\]/a certname = $(hostname -f)" /etc/puppetlabs/puppet/puppet.conf',
    path    => ['/bin',],
    refreshonly => true,
  }

#