Thursday, 2008-07-03

[2008/07/03 00:01:05] <lak> jamesturnbull: what do you think of the 'nice' thing?
[2008/07/03 00:01:14] <lak> maybe the answer is just nice puppetd itself?
[2008/07/03 00:06:40] <jamesturnbull> lak: I tihnk that'd be a better approach than what is proposed
[2008/07/03 00:06:48] <jamesturnbull> but still I am puzzled as to what the issue is
[2008/07/03 00:07:10] <lak> just that puppetd isn't time-sensitive
[2008/07/03 00:07:24] <lak> it doesn't matter if yum takes 10s or 20s, really
[2008/07/03 00:07:29] <lak> but other services might actually be time-sensitive
[2008/07/03 00:07:59] <fujin> mhrmhrm
[2008/07/03 00:08:02] <jamesturnbull> lak: true and I guess you could make it configerable - on/off + scale
[2008/07/03 00:08:08] <jamesturnbull> off by default
[2008/07/03 00:08:10] <lak> right
[2008/07/03 00:08:15] <lak> that's basically waht he was getting at
[2008/07/03 00:08:17] @ Quit: randybias:
[2008/07/03 00:08:21] <jamesturnbull> cross-platform issues?
[2008/07/03 00:08:47] <fujin> I'd like to punch the 'nice' thing
[2008/07/03 00:08:52] <fujin> picture me punching
[2008/07/03 00:09:41] <jamesturnbull> don't think that'd work on AIX or HPUX for example
[2008/07/03 00:10:34] <jamesturnbull> hmmm they have nice but the scales differ from Linux
[2008/07/03 00:13:39] @ Quit: shadoi: "leaving"
[2008/07/03 00:15:30] @ nico_ joined channel #puppet
[2008/07/03 00:16:12] @ Quit: brothers: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:14] @ Quit: thijso: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:15] @ Quit: mcp_: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:16] @ Quit: Maliuta: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:18] @ Quit: nico: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:20] @ Quit: jbooth: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:21] @ Quit: Aji-Dahaka: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:23] @ Quit: waawaamilk: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:25] @ Quit: lassizci: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:26] @ Quit: Volcane: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:28] @ Quit: hiffy: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:29] @ Quit: infinity1: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:31] @ Quit: bartc_: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:32] @ Quit: dryrot: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:34] @ Quit: JarleB: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:36] @ Quit: Gh0sty: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:39] @ Quit: fastjay: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:41] @ Quit: londo: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:16:42] @ Quit: wrobel: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:17:28] @ brothers joined channel #puppet
[2008/07/03 00:17:29] @ thijso joined channel #puppet
[2008/07/03 00:17:30] @ mcp_ joined channel #puppet
[2008/07/03 00:17:31] @ Maliuta joined channel #puppet
[2008/07/03 00:17:32] @ nico joined channel #puppet
[2008/07/03 00:17:33] @ jbooth joined channel #puppet
[2008/07/03 00:17:34] @ Aji-Dahaka joined channel #puppet
[2008/07/03 00:17:36] @ waawaamilk joined channel #puppet
[2008/07/03 00:17:38] @ lassizci joined channel #puppet
[2008/07/03 00:17:39] @ Volcane joined channel #puppet
[2008/07/03 00:17:40] @ infinity1 joined channel #puppet
[2008/07/03 00:17:41] @ hiffy joined channel #puppet
[2008/07/03 00:17:42] @ Gh0sty joined channel #puppet
[2008/07/03 00:17:43] @ dryrot joined channel #puppet
[2008/07/03 00:17:44] @ bartc_ joined channel #puppet
[2008/07/03 00:17:45] @ wrobel joined channel #puppet
[2008/07/03 00:17:46] @ londo joined channel #puppet
[2008/07/03 00:17:47] @ JarleB joined channel #puppet
[2008/07/03 00:17:48] @ fastjay joined channel #puppet
[2008/07/03 00:17:49] @ Quit: nico: Connection reset by peer
[2008/07/03 00:17:51] @ Quit: JarleB: Success
[2008/07/03 00:17:52] @ Quit: fastjay: Read error: 104 (Connection reset by peer)
[2008/07/03 00:17:53] @ fastjay joined channel #puppet
[2008/07/03 00:17:53] @ JarleB joined channel #puppet
[2008/07/03 00:17:55] @ londo__ joined channel #puppet
[2008/07/03 00:17:57] @ Quit: londo: Connection reset by peer
[2008/07/03 00:17:59] @ Quit: Gh0sty: Read error: 104 (Connection reset by peer)
[2008/07/03 00:18:03] @ Quit: dryrot: SendQ exceeded
[2008/07/03 00:18:05] @ Quit: thijso: Success
[2008/07/03 00:18:07] @ Gh0sty joined channel #puppet
[2008/07/03 00:18:16] @ thijso joined channel #puppet
[2008/07/03 00:18:22] @ hiffy_ joined channel #puppet
[2008/07/03 00:18:26] @ dryrot joined channel #puppet
[2008/07/03 00:19:01] @ Quit: Darkarnium[Lptp]: Read error: 110 (Connection timed out)
[2008/07/03 00:20:02] @ lassizci_ joined channel #puppet
[2008/07/03 00:21:47] @ Quit: Gh0sty: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:49] @ Quit: londo__: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:51] @ Quit: bartc_: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:53] @ Quit: Volcane: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:55] @ Quit: jbooth: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:56] @ Quit: infinity1: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:21:58] @ Quit: brothers: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:00] @ Quit: hiffy: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:01] @ Quit: wrobel: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:04] @ Quit: Aji-Dahaka: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:06] @ Quit: lassizci: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:07] @ Quit: waawaamilk: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:09] @ Quit: Maliuta: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:10] @ Quit: mcp_: kubrick.freenode.net irc.freenode.net
[2008/07/03 00:22:52] @ Quit: e^ipi: Read error: 60 (Operation timed out)
[2008/07/03 00:23:50] @ waawaamilk joined channel #puppet
[2008/07/03 00:24:01] @ jbooth joined channel #puppet
[2008/07/03 00:24:40] @ Aji-Dahaka joined channel #puppet
[2008/07/03 00:25:19] @ bartc joined channel #puppet
[2008/07/03 00:26:21] @ infinity1 joined channel #puppet
[2008/07/03 00:27:21] @ londo__ joined channel #puppet
[2008/07/03 00:28:56] @ Gh0sty joined channel #puppet
[2008/07/03 00:28:57] @ brothers joined channel #puppet
[2008/07/03 00:28:58] @ mcp_ joined channel #puppet
[2008/07/03 00:28:59] @ Maliuta joined channel #puppet
[2008/07/03 00:29:00] @ lassizci joined channel #puppet
[2008/07/03 00:29:02] @ Volcane joined channel #puppet
[2008/07/03 00:29:03] @ wrobel joined channel #puppet
[2008/07/03 00:29:05] @ Quit: mcp_: Read error: 104 (Connection reset by peer)
[2008/07/03 00:29:14] @ Gh0sty_ joined channel #puppet
[2008/07/03 00:29:53] @ mcp_ joined channel #puppet
[2008/07/03 00:30:13] @ Quit: Gh0sty: Success
[2008/07/03 00:30:18] @ Gh0sty_ is now known as Gh0sty
[2008/07/03 00:30:23] @ Quit: lak:
[2008/07/03 00:31:31] @ Quit: Volcane: Read error: 104 (Connection reset by peer)
[2008/07/03 00:32:00] <MrProper_> what would be nice is having ionice in userland
[2008/07/03 00:32:25] @ Volcane joined channel #puppet
[2008/07/03 00:38:39] @ Quit: lassizci: Connection timed out
[2008/07/03 00:57:17] @ Quit: catdude:
[2008/07/03 01:43:59] @ Quit: stillbourne: Read error: 113 (No route to host)
[2008/07/03 01:52:51] @ Quit: \ask:
[2008/07/03 01:56:02] @ Quit: rizwank:
[2008/07/03 01:58:34] @ rizwank joined channel #puppet
[2008/07/03 01:59:28] @ \ask joined channel #puppet
[2008/07/03 02:00:12] <hMz> err: Could not retrieve catalog: LDAP Search failed: No such object
[2008/07/03 02:00:22] <hMz> my oh my what does this mean
[2008/07/03 02:17:02] @ Quit: \ask:
[2008/07/03 02:17:26] @ Quit: rizwank: Read error: 110 (Connection timed out)
[2008/07/03 02:20:20] @ aymerick joined channel #puppet
[2008/07/03 02:23:03] @ Quit: Wakko666: Read error: 110 (Connection timed out)
[2008/07/03 02:27:11] @ Wakko666 joined channel #puppet
[2008/07/03 02:30:32] @ meandtheshell joined channel #puppet
[2008/07/03 02:38:12] @ nico_ is now known as nico
[2008/07/03 02:41:13] @ henry joined channel #puppet
[2008/07/03 02:41:41] @ henry is now known as Guest54763
[2008/07/03 02:43:02] @ Quit: andrewcshafer_: Read error: 104 (Connection reset by peer)
[2008/07/03 02:43:36] @ andrewcshafer joined channel #puppet
[2008/07/03 02:53:14] @ Quit: brothers: "Leaving."
[2008/07/03 02:56:55] @ Quit: Guest54763: Read error: 113 (No route to host)
[2008/07/03 03:22:25] @ tim|macbook joined channel #puppet
[2008/07/03 03:53:40] @ fbe_ joined channel #puppet
[2008/07/03 04:08:29] @ Quit: meandtheshell: Read error: 110 (Connection timed out)
[2008/07/03 04:31:09] <zipkid> is there a way to discover/iterate all variables defined in a puppet class?
[2008/07/03 04:35:34] @ strerror_work joined channel #puppet
[2008/07/03 04:36:28] <tim|macbook> zipkid: not that i know of
[2008/07/03 04:39:53] <zipkid> thx...
[2008/07/03 04:41:05] @ glaw joined channel #puppet
[2008/07/03 04:48:10] <lazzurs> hello, I have gotten autosigning working for certs, however is there a way to tell puppet to auto clean the certs as well, it is for systems that are frequently being re-installed
[2008/07/03 04:52:03] @ Quit: glaw: "COMPUTER SAYS NO"
[2008/07/03 05:00:29] <tim|macbook> no, because the puppetmaster has no idea when a machine is no longer n production
[2008/07/03 05:00:39] <tim|macbook> you'll always have to do the cleaning manually
[2008/07/03 05:00:52] <tim|macbook> or do you mean that you want it cleaned when the client provides a new cert?
[2008/07/03 05:01:41] <tim|macbook> in the case of the later, it would be pointless, since the ssl cert would not add any viable security... a rogue client simply needs to provide the server with a cert and presto, we're in
[2008/07/03 05:02:16] @ cabbiepete joined channel #puppet
[2008/07/03 05:16:55] @ Quit: hMz: "rewind(c3.2) DO YOU GF? rewind(c3.2)"
[2008/07/03 05:35:48] <lazzurs> tim|macbook: it is a trusted network, not something I need to worry about
[2008/07/03 05:36:53] <tim|macbook> you assume it nothing you need to worry about :)
[2008/07/03 05:36:59] <tim|macbook> we have a list of rules here in the office
[2008/07/03 05:37:03] <tim|macbook> the first one is:
[2008/07/03 05:37:08] <tim|macbook> assumption is the mother of all fuckups
[2008/07/03 05:37:09] <tim|macbook> :)
[2008/07/03 05:37:37] <fujin> lazzurs: regardless, there is no way to achieve what you need (automatically)
[2008/07/03 05:37:56] <tim|macbook> puppet has no option to disable the ssl aspect
[2008/07/03 05:38:03] * tim|macbook thinks that's a good thing
[2008/07/03 05:38:15] <zipkid> diabling certs altogether makes most sense i think here
[2008/07/03 05:38:46] <tim|macbook> that's possible?
[2008/07/03 05:39:04] <fujin> seems counterproductive to be honest
[2008/07/03 05:40:55] <lazzurs> tim|macbook: I agree with your assumption argument there
[2008/07/03 05:41:38] <lazzurs> and I agree it is a good think, I guess I can setup a post install hook from cobbler or something so once we have verified that the system has be reinstalled by the automated system the key gets cleaned
[2008/07/03 05:41:58] <lazzurs> it is nice that puppet is not letting me be lazy and insecure ;)
[2008/07/03 05:42:20] <lazzurs> s/think/thing
[2008/07/03 05:42:35] <zipkid> darn... puppet will not let me be lazy...???? !!!
[2008/07/03 05:42:56] <tim|macbook> lazzurs: you might find these interesting, then: http://www.kumina.nl/admin-best-practices.txt (written by my co-worker)
[2008/07/03 05:43:31] <tim|macbook> zipkid: puppet will let you be lazy quite a lot... what are you actually trying to be lazy about? :)
[2008/07/03 05:44:15] <tim|macbook> oh just noticed that the texts are in dutch in my previous url... nvm that
[2008/07/03 05:44:56] * tim|macbook needs more coffee, he's spewing nonsense
[2008/07/03 05:45:40] <zipkid> tim|macbook: the titles are ok....
[2008/07/03 05:45:54] <zipkid> and ther's google translate.
[2008/07/03 05:45:58] <tim|macbook> ghe
[2008/07/03 05:46:06] <tim|macbook> not sure what google makes of it
[2008/07/03 05:46:12] <zipkid> and everyone should learn dutch anyway...
[2008/07/03 05:47:34] <zipkid> not too bad:
[2008/07/03 05:47:34] <zipkid> not too bad: Ga not assume that things work as you suspect that it works, but
[2008/07/03 05:47:35] <zipkid> Make sure that you 100% sure. If you are unsure, CHECK!
[2008/07/03 05:48:01] <tim|macbook> lol: "make sure you also have been well tested"
[2008/07/03 05:48:20] <zipkid> http://translate.google.com/translate?u=http%3A%2F%2Fwww.kumina.nl%2Fadmin-best-practices.txt&hl=en&ie=UTF8&sl=nl&tl=en
[2008/07/03 05:54:09] <zipkid> tim|macbook: nice company.
[2008/07/03 05:54:18] <tim|macbook> thx :)
[2008/07/03 06:01:51] <lazzurs> tim|macbook: thanks, always looking to do better
[2008/07/03 06:04:32] <tarjei> how can I program interatons in puppet?
[2008/07/03 06:05:42] @ sparanjape joined channel #puppet
[2008/07/03 06:16:43] <tarjei> question: Is it possible to iterate over a defines title like one iterates over the defines name ?
[2008/07/03 06:16:52] <tarjei> background: http://groups.google.com/group/puppet-users/browse_thread/thread/adb6168a67dcb230
[2008/07/03 06:26:59] @ keithlard joined channel #puppet
[2008/07/03 06:27:09] @ saurabhb joined channel #puppet
[2008/07/03 06:29:07] <saurabhb> guys, facing some issues with nested conditionals...
[2008/07/03 06:29:19] <saurabhb> name => $operatingsystemrelease ? { default => "httpd", "4" => { $var2 ? { "val2" => "httpd", default=> "proj-apache" }}},
[2008/07/03 06:29:43] <saurabhb> is the above valid? or is there some syntax error ?
[2008/07/03 06:40:20] <Volcane> whats the error?
[2008/07/03 06:45:38] <zipkid> missing a '$' before name...?
[2008/07/03 06:46:02] @ Quit: Pockets_: Read error: 104 (Connection reset by peer)
[2008/07/03 06:46:14] @ Pockets_ joined channel #puppet
[2008/07/03 06:49:28] <Volcane> i dont think that iwll work at all
[2008/07/03 06:49:32] <Volcane> just split it up into two
[2008/07/03 07:03:32] @ gileswork joined channel #puppet
[2008/07/03 07:06:33] <saurabhb> err: Could not retrieve catalog: Syntax error at '{'; expected '}' at
[2008/07/03 07:06:38] <saurabhb> zipkid, Volcane thats the err
[2008/07/03 07:07:21] <saurabhb> hmm.. splitting it into 2 would be a bit difficult, though i think if this really does not work, then i will have to look at that option
[2008/07/03 07:07:52] <Volcane> pseudo code:
[2008/07/03 07:08:33] <Volcane> $temp = something in the event of operatingsystemrelease == 4
[2008/07/03 07:08:52] <Volcane> $name = "http" else $temp if operatingsystemrelease == 4
[2008/07/03 07:09:06] <Volcane> that wont work?
[2008/07/03 07:09:19] <saurabhb> hmm.. i think that can :)
[2008/07/03 07:09:27] <saurabhb> lemme try that
[2008/07/03 07:10:17] <Volcane> it seems stupidly redundant but thats easiest
[2008/07/03 07:11:01] <saurabhb> Volcane, can i do something like that in a class definition ?
[2008/07/03 07:11:13] <saurabhb> it might be a stupid question, but i'm just starting out
[2008/07/03 07:11:24] <saurabhb> and did not see such an example
[2008/07/03 07:16:48] <Volcane> yes
[2008/07/03 07:17:00] <Volcane> classes are just container for almost anything thats valid elsewhere
[2008/07/03 07:17:38] <saurabhb> Volcane, cool, thanks :)
[2008/07/03 08:16:41] @ duritong_ joined channel #puppet
[2008/07/03 08:29:24] @ jvanzyl joined channel #puppet
[2008/07/03 08:31:22] @ aymerick_ joined channel #puppet
[2008/07/03 08:32:34] @ Quit: duritong: Read error: 110 (Connection timed out)
[2008/07/03 08:38:32] @ aymerick__ joined channel #puppet
[2008/07/03 08:39:04] @ Quit: aymerick__: Read error: 104 (Connection reset by peer)
[2008/07/03 08:39:36] @ aymerick__ joined channel #puppet
[2008/07/03 08:40:03] @ Quit: aymerick_: Read error: 104 (Connection reset by peer)
[2008/07/03 08:42:30] @ Quit: aymerick: Read error: 110 (Connection timed out)
[2008/07/03 08:45:25] @ DavidS joined channel #puppet
[2008/07/03 08:45:47] <DavidS> hi all
[2008/07/03 08:45:56] <tim|macbook> hiya DavidS :)
[2008/07/03 08:46:10] <duritong_> hei DavidS
[2008/07/03 08:46:18] @ duritong_ is now known as duritong
[2008/07/03 08:46:31] <DavidS> hi tim|macbook, duritong !
[2008/07/03 08:49:39] @ strerror_ joined channel #puppet
[2008/07/03 08:50:41] @ Quit: jvanzyl:
[2008/07/03 08:52:04] @ Quit: saurabhb: "Leaving"
[2008/07/03 09:06:13] @ jvanzyl joined channel #puppet
[2008/07/03 09:06:51] @ Quit: strerror_work: Remote closed the connection
[2008/07/03 09:25:05] @ meandtheshell joined channel #puppet
[2008/07/03 09:30:39] <ashp> Urgh, I can't come up with a cleaner solution than definining mountpoints as part of my node defs
[2008/07/03 09:30:57] <ashp> outside of perhaps just doing $mounthome = "yes" in each node def I want it in, I guess
[2008/07/03 09:31:14] <ashp> The logic is too horrible to do it any other clean way as I have random hosts I can't mount home on for silly/annoying reasons
[2008/07/03 09:31:17] <thom> gah, i must figure out why irssi's nick hilights don't work right
[2008/07/03 09:36:11] @ pleemans joined channel #puppet
[2008/07/03 09:38:43] @ kambiz joined channel #puppet
[2008/07/03 09:43:55] <ashp> hmm I am having a weirdo puppet problem lately, I keep getting:
[2008/07/03 09:44:04] <ashp> Jul 3 09:37:19 hlslinutil02 puppetmasterd[20993]: Could not find class rhythmyx at /etc/puppet/manifests/nodes.pp:81 on node hlscms.law.harvard.edu
[2008/07/03 09:44:19] <ashp> This is a previously working node, so I wonder what's going on. Nothing good in the logs to tell me why it's suddenly broken. :/
[2008/07/03 09:46:41] <Volcane> ashp: i have some cases where i get that on first run, then just run again and it works 2nd run :(
[2008/07/03 09:46:54] @ Quit: jvanzyl:
[2008/07/03 09:47:03] @ jfluhmann joined channel #puppet
[2008/07/03 09:47:39] <ashp> volcane: Weirdly, I rpm -e puppet, reinstalled it and resigned the cert and it worked.
[2008/07/03 09:47:50] <ashp> The first time I just --clean'ed the cert, deleted /var/lib/puppet and triedagain
[2008/07/03 09:48:01] <ashp> so it must be something to do with /etc/puppet/ that caused it, how weird
[2008/07/03 09:48:13] <ashp> this started when i cloned this vm, changed the hostname, reran puppet hoping it would recert and work fine
[2008/07/03 09:48:47] <Volcane> heh
[2008/07/03 09:50:57] @ Quit: pkhamre: "leaving"
[2008/07/03 09:51:18] <ashp> For future reference, if anyone clones a vm.. rpm -e puppet and start from scratch :)
[2008/07/03 09:53:54] @ shenson_not_here is now known as shenson
[2008/07/03 09:55:06] @ oskapt joined channel #puppet
[2008/07/03 09:55:40] <lazzurs> ashp: would it not just be a matter of wiping the certs?
[2008/07/03 09:56:15] <lazzurs> also can someone point me to the documentation for naginator?
[2008/07/03 09:56:39] @ jvanzyl joined channel #puppet
[2008/07/03 09:57:14] <jamesturnbull> lazzurs: other than the wiki:TypeReference and the code there isn't really any
[2008/07/03 09:57:38] <gepetto> jamesturnbull: lazzurs: wiki:TypeReference is http://reductivelabs.com/trac/puppet/wiki/TypeReference
[2008/07/03 09:57:38] <ashp> lazzurs: that's what _I_ thought
[2008/07/03 09:57:39] <ashp> lazzurs: but something goes terribly awry and I ended up removing the package and readding it on the original and cloned machine to resolve it
[2008/07/03 09:57:48] @ fbe__ joined channel #puppet
[2008/07/03 09:58:01] @ Quit: fbe_: Remote closed the connection
[2008/07/03 09:58:09] <lazzurs> jamesturnbull: doh, no one has put up any examples?
[2008/07/03 09:58:31] <lazzurs> ashp: doh, that is weird, could it be the hostname or some other old configuration that was causing the issue?
[2008/07/03 09:58:53] <jamesturnbull> lazzurs: ask lak but as far as I know there aren't any examples
[2008/07/03 09:58:55] @ jbrothers joined channel #puppet
[2008/07/03 09:59:09] <jamesturnbull> lazzurs: might be worth sending to the mailing list and asking
[2008/07/03 10:11:10] <tim|macbook> jamesturnbull: were you the one in charge of the wiki rewrite?
[2008/07/03 10:12:27] <jamesturnbull> tim|macbook: yes I guess I am
[2008/07/03 10:12:45] <tim|macbook> ok, want to show you something, but gotta find it first... just a sec :)
[2008/07/03 10:13:56] @ londo__ is now known as londo
[2008/07/03 10:15:54] <tim|macbook> oh i believe bart showed this one to you already...
[2008/07/03 10:15:56] <tim|macbook> http://puppetdocs.kumina.nl/html/
[2008/07/03 10:16:42] * tim|macbook thinks those are better readable
[2008/07/03 10:17:15] <jamesturnbull> tim|macbook: nice
[2008/07/03 10:17:27] <jamesturnbull> how created?
[2008/07/03 10:17:31] <tim|macbook> is that something you can use for the reordering of the wiki?
[2008/07/03 10:17:49] <tim|macbook> uh... i'd ask my co-worker, but he's kind of busy right now :)
[2008/07/03 10:18:32] @ ski98033 joined channel #puppet
[2008/07/03 10:18:45] @ Quit: oskapt:
[2008/07/03 10:19:45] @ oskapt joined channel #puppet
[2008/07/03 10:20:48] <jamesturnbull> tim|macbook: that'd be a great model - a nice sharp front-end collection of doco and similar for other doco and recipes
[2008/07/03 10:21:51] <tim|macbook> yeah, i liked it a lot too
[2008/07/03 10:22:05] <tim|macbook> i'll ask him how he made it (a bit later, we're trying to fix problems atm)
[2008/07/03 10:25:54] @ Quit: DavidS: "<<-- too stupid for irssi"
[2008/07/03 10:27:11] <Volcane> thats a really nice looking doc
[2008/07/03 10:28:49] <jamesturnbull> tim|macbook: I found the scripts he used
[2008/07/03 10:29:05] <tim|macbook> ah yeah, they're in the top level dir i think :)
[2008/07/03 10:31:09] <jamesturnbull> tim|macbook: yeah and I am a sticky-beak
[2008/07/03 10:31:31] @ Quit: omoon_: "Computer goes to sleep!"
[2008/07/03 10:31:54] <Volcane> jamesturnbull: what would really be kewl is some kind of static export of type/language/function ref pages or indeed the whole thing so we can get mirrors going, I'd be more than happy to host a mirror to speed things up
[2008/07/03 10:32:07] <tim|macbook> don't know the expression, but if you call yourself that, at least I'm not to blame :P
[2008/07/03 10:33:22] <jamesturnbull> tim|macbook: ah - that's probably an English/Australia phrase - sticky-beak - probably related to ant eaters that stick their beaks/noses/snouts into anything :)
[2008/07/03 10:34:07] <jamesturnbull> Volcane: yeah that'd be good
[2008/07/03 10:34:35] <Volcane> or even just way to build those docs ourselves easily - they're rdoc i assume?
[2008/07/03 10:35:07] @ brscott joined channel #puppet
[2008/07/03 10:35:54] <jamesturnbull> Volcane: yeah you can do that now using the install.rb
[2008/07/03 10:36:00] <jamesturnbull> Volcane: or puppetdoc
[2008/07/03 10:36:29] @ Quit: brscott: Client Quit
[2008/07/03 10:36:41] <Volcane> hmm, puppetdoc
[2008/07/03 10:37:01] <Volcane> not in the redhat rpms
[2008/07/03 10:37:12] <Volcane> will check
[2008/07/03 10:37:14] <Volcane> ta
[2008/07/03 10:37:16] <jamesturnbull> Volcane: you'd have to log a ticket downstream on that
[2008/07/03 10:37:20] <Volcane> yeah
[2008/07/03 10:37:27] <jamesturnbull> lutter: ^^^^
[2008/07/03 10:37:31] <Volcane> yip
[2008/07/03 10:38:09] <Volcane> man module/namespaces are driving me ad
[2008/07/03 10:38:10] <Volcane> mad
[2008/07/03 10:38:13] @ brscott joined channel #puppet
[2008/07/03 10:38:28] <Volcane> include monitoring::blah which includes monitoring::nrpe::check_alive
[2008/07/03 10:38:38] @ lak joined channel #puppet
[2008/07/03 10:38:44] <Volcane> no amount of importing etc will make monitoring::blah find monitoring::nrpe::check_alive
[2008/07/03 10:38:59] @ Quit: oskapt: Read error: 110 (Connection timed out)
[2008/07/03 10:40:19] <Volcane> so in that case, wheres the right place to tell it to import nrpe/*.pp ?
[2008/07/03 10:40:35] <Volcane> inside blah.pp or init.pp? or the node?
[2008/07/03 10:41:32] <jamesturnbull> Volcane: init.pp will work
[2008/07/03 10:41:35] <zipkid> Volcane: i use an init.pp with import "*" in each modules/<mod>/manifests/ dir
[2008/07/03 10:41:42] <jamesturnbull> Volcane: I tend to do it there
[2008/07/03 10:41:49] <Volcane> inside the class in init.pp or just top-of-file?
[2008/07/03 10:42:00] <zipkid> and each class/define i put in a file wit the filename == class/define name
[2008/07/03 10:42:51] <Volcane> cos i already have class monitoring { import "nrpe/*" }
[2008/07/03 10:43:55] <jamesturnbull> Volcane: top of file
[2008/07/03 10:44:12] * Volcane tries
[2008/07/03 10:46:44] <Volcane> no love, time to make a pastie
[2008/07/03 10:49:26] <jamesturnbull> alright night all - good luck Volcane
[2008/07/03 10:50:17] <Volcane> http://pastie.org/227119
[2008/07/03 10:50:53] <Volcane> so uber annoyingly, in several places gtmonitoring::nrpe::something includes fine
[2008/07/03 10:51:00] <Volcane> but not in this one case, on the same node
[2008/07/03 10:55:09] @ Quit: meandtheshell: "Leaving."
[2008/07/03 10:55:20] <_NiC> I have a problem with an ntp-manifest, where it should be purged/not running for virtual machines, and installed/running for physical machines, for some reason it thinks the service should be running when it shouldn't.. :) This is my ntp.pp: http://pastebin.com/d39836ca8
[2008/07/03 10:55:31] @ Quit: jvanzyl:
[2008/07/03 10:55:43] @ meandtheshell joined channel #puppet
[2008/07/03 10:55:50] <_NiC> I thought the require-line would stop puppet from believing it should be running, since that package isn't installed
[2008/07/03 11:00:02] @ jvanzyl joined channel #puppet
[2008/07/03 11:02:23] <tim|macbook> _NiC: no, require doesn't work that way
[2008/07/03 11:02:54] <tim|macbook> you now tell it that it needs to run the Package["ntp"] definition before the Service definition... but you cannot make any assumptions of what the status of the package is
[2008/07/03 11:03:15] <tim|macbook> it only says "make sure this is run before the other", not "make sure this is run before the other *and* it's present"
[2008/07/03 11:04:17] <_NiC> ah, ok.
[2008/07/03 11:04:59] <_NiC> So I need to add a test to my service {} then
[2008/07/03 11:05:12] <tim|macbook> indeed
[2008/07/03 11:05:37] <tim|macbook> of have both of them inside the test
[2008/07/03 11:05:46] <tim|macbook> using a case
[2008/07/03 11:06:05] <tim|macbook> which i would prefer, but i guess that's subjective
[2008/07/03 11:06:12] @ Quit: kambiz: "This computer has gone to sleep"
[2008/07/03 11:07:21] <_NiC> Will this work? http://pastebin.com/d3d2ab6e2
[2008/07/03 11:07:41] <_NiC> tim, the test first, and case-switch for package and service?
[2008/07/03 11:10:35] <tim|macbook> i would do it like this: http://pastebin.com/m9867646
[2008/07/03 11:12:03] <_NiC> Hm, that looks kinda clean.
[2008/07/03 11:12:30] <_NiC> except I want the opposite code of what you wrote. :-)
[2008/07/03 11:12:59] <_NiC> (inside the case's that is)
[2008/07/03 11:13:19] <tim|macbook> oh yeah, sorry, i'm actually fixing a problem on a Xen server, so I wasn't really paying attention :P
[2008/07/03 11:13:44] <_NiC> hehe :)
[2008/07/03 11:13:51] * tim|macbook seems to be a non-female, since he can't do two things at the same time without getting one thing wrong (that's what my gf would tell me)
[2008/07/03 11:14:27] <_NiC> Yeah, I've heard that too.. :>
[2008/07/03 11:15:54] <_NiC> I guess I won't be needed that require-line then
[2008/07/03 11:16:21] <tim|macbook> yes you do
[2008/07/03 11:16:30] <tim|macbook> you still need to make sure the package is installed before you start the service
[2008/07/03 11:18:25] <_NiC> but that's ensured a few lines above?
[2008/07/03 11:18:53] <_NiC> this is what I have now: class ntp {
[2008/07/03 11:18:54] <_NiC> $ntp_package = $operatingsystem ? {
[2008/07/03 11:18:54] <_NiC> debian => "ntp",
[2008/07/03 11:18:54] <_NiC> default => "ntp"
[2008/07/03 11:18:54] <_NiC> }
[2008/07/03 11:18:54] <_NiC> case $productname {
[2008/07/03 11:18:56] <_NiC> "VMware Virtual Platform": {
[2008/07/03 11:18:58] <_NiC> package { "$ntp_package":
[2008/07/03 11:19:00] <_NiC> ensure => purged
[2008/07/03 11:19:02] <_NiC> }
[2008/07/03 11:19:03] <tim|macbook> omg
[2008/07/03 11:19:04] <_NiC> }
[2008/07/03 11:19:06] <_NiC> default: {
[2008/07/03 11:19:08] <_NiC> package { "$ntp_package":
[2008/07/03 11:19:10] <_NiC> ensure => present
[2008/07/03 11:19:12] <_NiC> }
[2008/07/03 11:19:14] <_NiC> service { "ntp":
[2008/07/03 11:19:16] <_NiC> ensure => running
[2008/07/03 11:19:18] <_NiC> }
[2008/07/03 11:19:19] * Volcane wish someone had ops
[2008/07/03 11:19:20] <_NiC> }
[2008/07/03 11:19:22] <_NiC> }
[2008/07/03 11:19:24] <_NiC> }
[2008/07/03 11:19:26] <_NiC> oh crap, that's not what I was gonna paste..
[2008/07/03 11:19:30] <_NiC> where did my url go :>
[2008/07/03 11:19:53] <_NiC> terribly sorry about that
[2008/07/03 11:20:13] <tim|macbook> in any case, puppet doesn't "run" the statements in the order that's in the file
[2008/07/03 11:20:17] <tim|macbook> you need the require
[2008/07/03 11:21:23] <_NiC> Ok.
[2008/07/03 11:22:22] <tim|macbook> if you do not specify order explicitly, you'll get errors :)
[2008/07/03 11:22:48] <tim|macbook> remember that, and your new journey into the wonderful world called puppet will be 80% easier
[2008/07/03 11:23:00] <tim|macbook> the remaining 20% is mostly inheritence
[2008/07/03 11:23:21] <tim|macbook> and overriding
[2008/07/03 11:25:03] <tim|macbook> and definitions
[2008/07/03 11:25:06] <tim|macbook> and modules
[2008/07/03 11:25:08] <tim|macbook> and plugins
[2008/07/03 11:25:24] <tim|macbook> ... i might be exaggerating a bit here
[2008/07/03 11:25:55] @ hacim joined channel #puppet
[2008/07/03 11:26:03] <_NiC> Yeah, I've been fiddling around with it a bit, but there's alot of new things for me, so I'll probably be bugged you guys from time to time ;)
[2008/07/03 11:26:11] <_NiC> bugging, even
[2008/07/03 11:26:29] <hacim> lak: probably debian is freezing this month
[2008/07/03 11:27:15] <tim|macbook> hm... then i better finish my samba init script patches this week :S
[2008/07/03 11:27:56] <tim|macbook> _NiC: you might want to consider getting James Turnbull's book... it's quite good
[2008/07/03 11:31:38] * Volcane sorts his import problem out, restart mongrel horrible mess, all works.
[2008/07/03 11:32:42] @ martha joined channel #puppet
[2008/07/03 11:34:13] <_NiC> tim, "Pulling Strings with Puppet"?
[2008/07/03 11:34:23] <tim|macbook> exactly that one
[2008/07/03 11:37:57] @ andyhold joined channel #puppet
[2008/07/03 11:49:14] <ralfgro_> I'm trying to register out vmware products (VMware Product Registration)
[2008/07/03 11:49:24] <ralfgro_> ups, wrong channel...
[2008/07/03 11:49:39] @ pkhamre joined channel #puppet
[2008/07/03 11:56:15] <lak> hacim: ok, thanks
[2008/07/03 11:56:20] <lak> we should have 0.24.5 out for it, anyway
[2008/07/03 11:57:23] @ Quit: Gwayne: Remote closed the connection
[2008/07/03 11:57:44] @ jamesttt joined channel #puppet
[2008/07/03 11:57:56] <ashp> what's the timeframe on .5 anyway?
[2008/07/03 11:58:38] @ Quit: roald: "KVIrc 3.4.0 Virgo http://www.kvirc.net/"
[2008/07/03 11:59:05] <jamesttt> hey guys is there any good way to send shadow info to puppet clients besides the recipe at http://reductivelabs.com/trac/puppet/wiki/Recipes/PasswordManagement?
[2008/07/03 11:59:10] <jamesttt> cause i can't get that recipe to work
[2008/07/03 11:59:14] <jamesttt> get thrown some errors
[2008/07/03 11:59:21] <ashp> You got ruby-shadow installed?
[2008/07/03 11:59:23] <tim|macbook> ralfgro_: OMG!! You need to change your passwords now!! ;-)
[2008/07/03 11:59:47] <jamesttt> no i don't have ruby-shadow installed
[2008/07/03 11:59:58] <Volcane> jamesttt: user{} can do it but you need to give it the hash to put in the shadow file
[2008/07/03 11:59:59] <ashp> start with that :)
[2008/07/03 12:00:39] <jamesttt> does that apply to the older versions of puppet tho? because i'm using the one packaged for debian stable
[2008/07/03 12:00:48] <jamesttt> and i don't think user{} supported it yet
[2008/07/03 12:00:59] <ashp> You always need ruby-shadow to get user{} to work, it should support debian stable just fine.
[2008/07/03 12:01:04] <jamesttt> oh ok
[2008/07/03 12:01:15] <ashp> It's what lets it handle /etc/shadow :)
[2008/07/03 12:01:57] <jamesttt> thanks i'll give it a whirl
[2008/07/03 12:02:56] <sigmonsays__> What does this mean:puppetd.log.www326:444:err: //Node[www326]/www_server/Package[php]/ensure: change from 5.1.6-20.el5 to 5.2.6-jason.1 failed: Could not update: Failed to update to version 5.2.6-jason.1, got version 5.1.6-20.el5 instead at /etc/puppet/manifests/classes/www_server.pp:126
[2008/07/03 12:03:45] <sigmonsays__> I think I understand but I find no mention of "php-5.1.6-20.el5" anywhere with rpm -- if I uninstall php and run puppet againt, I don't get problems
[2008/07/03 12:04:55] <jamesttt> one more real quick question...
[2008/07/03 12:04:55] <jamesttt> the hash goes under the user definition like:
[2008/07/03 12:04:55] <jamesttt> password => "hasgoeshere"
[2008/07/03 12:04:55] <jamesttt> right?
[2008/07/03 12:04:59] <Volcane> for some or other reason upgrades are failing
[2008/07/03 12:05:05] <Volcane> you prolly have ensure => latest
[2008/07/03 12:05:06] @ markl_ joined channel #puppet
[2008/07/03 12:06:05] @ Quit: strerror_: Client Quit
[2008/07/03 12:06:12] <Volcane> and one of your yum repos or something is giving you that version
[2008/07/03 12:06:30] @ Quit: sparanjape: "Few women admit their age. Few men act theirs."
[2008/07/03 12:06:36] <ashp> I really should go through every package statment I have and change all the latest's away
[2008/07/03 12:06:42] <ashp> as i guess i don't REALLY want things autoupgrading :)
[2008/07/03 12:06:49] <ashp> it sounded like a great plan at the time..
[2008/07/03 12:07:01] <Volcane> i have some auto upgrading, but yes, dumb idea in general :)
[2008/07/03 12:07:14] <Volcane> cos you really should also then restart services
[2008/07/03 12:07:37] <sigmonsays__> Volcane, I am enforcing a specific version
[2008/07/03 12:08:33] <Volcane> sigmonsays__: ah, well then do --verbose and --debug and see what commands its running
[2008/07/03 12:09:22] @ \ask joined channel #puppet
[2008/07/03 12:10:34] <sigmonsays__> guess i'll have to wait till later. I can't reproduce the error now
[2008/07/03 12:14:27] @ cabbiepete_ joined channel #puppet
[2008/07/03 12:18:05] @ Quit: jvanzyl: Remote closed the connection
[2008/07/03 12:18:12] @ Quit: cabbiepete_: Read error: 104 (Connection reset by peer)
[2008/07/03 12:18:21] @ jvanzyl joined channel #puppet
[2008/07/03 12:18:23] @ Gvj joined channel #puppet
[2008/07/03 12:18:39] @ cabbiepete_ joined channel #puppet
[2008/07/03 12:18:41] <pftqg> is there a way to remove a cert from the puppetca --list without signing it?
[2008/07/03 12:19:56] <martha> --clean
[2008/07/03 12:20:27] <jamesttt> ok i don't get it.... for the shadow stuff
[2008/07/03 12:20:38] <jamesttt> i installed ruby-shadow on both client and puppetmaster
[2008/07/03 12:20:51] <jamesttt> but i get this on client:
[2008/07/03 12:20:52] <jamesttt> err: Could not retrieve configuration: Invalid parameter ':password' for type 'user' in file /etc/puppet/manifests/users/users.pp at line 57
[2008/07/03 12:21:11] <jamesttt> i missing something?
[2008/07/03 12:21:39] <Gvj> Strange situation: (nearly) same hosts, one puppetmasterd. One puppetd works with it 'ok', other has 'Certificates were not trusted: hostname was not match with the server certificate'.
[2008/07/03 12:21:39] <Gvj> Where to dig ?
[2008/07/03 12:21:40] <jamesttt> i also tried setting the provide to useradd
[2008/07/03 12:22:07] <jamesttt> did you reinstall your certs gvj?
[2008/07/03 12:22:12] @ penthief joined channel #puppet
[2008/07/03 12:22:14] <Gvj> competely
[2008/07/03 12:22:15] <jamesttt> cause you might need to delete your certs on the cleitn
[2008/07/03 12:22:18] <jamesttt> client*
[2008/07/03 12:22:23] <jamesttt> and also clean on master
[2008/07/03 12:22:31] <ashp> http://a813.ac-images.myspacecdn.com/images01/128/l_02f149d344e09cfa1dd8ee5607adae1c.jpg
[2008/07/03 12:22:33] <Gvj> removed ssl completely both side on all three hosts
[2008/07/03 12:22:36] <ashp> whoops, sorry
[2008/07/03 12:22:41] <ashp> i didn't mean to spaz and hit my mouse button
[2008/07/03 12:22:51] <jamesttt> you happen to be backing it up with subversion?
[2008/07/03 12:22:54] <ashp> luckily it's an attractive female so you won't hate me. :)
[2008/07/03 12:23:05] <jamesttt> cause i had that problem where i kept accidently updating the old ssl certs with SVN
[2008/07/03 12:23:43] <Gvj> no. no svn.
[2008/07/03 12:23:55] <jamesttt> ok well those are my 2cents i have no idea
[2008/07/03 12:24:00] <Gvj> just 5 min ago done cleanup on all hosts
[2008/07/03 12:24:17] <Gvj> any idea where to dig ?
[2008/07/03 12:24:32] <penthief> My puppetified file is being created as a directory. Why could this be?
[2008/07/03 12:24:48] @ Quit: jvanzyl:
[2008/07/03 12:24:55] <sigmonsays__> penthief, "ensure => directory? " :-)
[2008/07/03 12:25:24] <penthief> ensure => file
[2008/07/03 12:25:37] <jamesttt> no idea where you can dig for that better than here
[2008/07/03 12:25:41] @ jvanzyl joined channel #puppet
[2008/07/03 12:25:43] <jamesttt> unless you start searching on the internet blindly
[2008/07/03 12:25:51] <sigmonsays__> I wish I could help penthief
[2008/07/03 12:25:56] <jamesttt> i'm just learning this stuff too tho
[2008/07/03 12:26:09] <Gvj> ok. Went to make a cleanup once again
[2008/07/03 12:26:51] <sigmonsays__> Gvj, your dns needs to be setup properly (reverse even.. maybe) for certificates to be trusted
[2008/07/03 12:27:51] <Volcane> it doesnt care for ptr records
[2008/07/03 12:27:55] <pftqg> make sure that you're connecting to the same hostname as the name the server thinks it is called.
[2008/07/03 12:28:13] <penthief> This directory thing is very odd. I'm wondering if it is a bug?
[2008/07/03 12:28:24] <Volcane> penthief: put your manifest on pastie.org lets see
[2008/07/03 12:28:26] <Gvj> sigmonsays__: puppet->IP, IP->puppet is ok. Same for clients. No name for master specified on clients.
[2008/07/03 12:29:39] <Volcane> jamesttt: do you have 'password => "kjskdjskjdsk"' or ':password => "jkjkjdfkdjf"'
[2008/07/03 12:30:12] <jamesttt> single quote
[2008/07/03 12:30:26] <Volcane> but :password or password
[2008/07/03 12:30:36] <jamesttt> just password
[2008/07/03 12:30:38] <jamesttt> no colon before
[2008/07/03 12:30:47] <Volcane> oh, weird, show your manifest in pastie
[2008/07/03 12:30:55] @ Quit: cabbiepete: No route to host
[2008/07/03 12:30:56] <Volcane> also what version puppet?
[2008/07/03 12:30:59] <jamesttt> sure gimme a sec
[2008/07/03 12:31:01] <jamesttt> 20.1
[2008/07/03 12:31:04] <Volcane> god
[2008/07/03 12:31:06] <Volcane> throw it away
[2008/07/03 12:31:08] <hacim> omy
[2008/07/03 12:31:12] <sigmonsays__> haha
[2008/07/03 12:31:13] <hacim> that wont work with passwords
[2008/07/03 12:31:23] <jamesttt> well that's what comes with debian stable :P
[2008/07/03 12:31:24] <sigmonsays__> nobody likes old puppets
[2008/07/03 12:31:36] <hacim> jamesttt: install the one from testing, it works without any reqs
[2008/07/03 12:31:42] <Volcane> jamesttt: check the wiki debian page, shows you how to pin the version from testing onto your stable machines
[2008/07/03 12:31:49] <Volcane> jamesttt: cos 0.20 is FAR from stable :P
[2008/07/03 12:31:55] <jamesttt> lol alright
[2008/07/03 12:32:05] <jamesttt> thx will try again
[2008/07/03 12:32:14] <penthief> Volcane: http://pastie.org/227199
[2008/07/03 12:32:41] <Volcane> penthief: ok, which file is being made a dir?
[2008/07/03 12:32:46] <Gvj> Just done procedure: @master: stop master; rm -rf ssl; start master -> master gen self certs ; @client1,2 : stop client ; rm -rf ssl ; start client ; @master: puppetca -s ; @client1,2: stop client ; start client ==> client1 ok, client2 Certificates were not trusted: hostname was not match with the server certificate
[2008/07/03 12:33:34] <Volcane> Gvj: just put in cnames for "puppet" and make sure everything can find "puppet", and set certname=puppet on the master, and leave clients to default
[2008/07/03 12:33:45] <Volcane> Gvj: problem solved, putting it on weird hostnames, will bite you
[2008/07/03 12:34:37] @ Quit: tim|macbook: "This computer has gone to sleep"
[2008/07/03 12:35:11] * pftqg uses "puppet.(company-network-name)", set using server= on the clients (in /etc/puppet/puppet.conf) and server = and certname = on the server (it's also the machines hostname)
[2008/07/03 12:35:43] <penthief> Volcane: sorry, server.xml
[2008/07/03 12:36:19] <pftqg> (using "puppet" wouldn't work with the way our office networks are setup.)
[2008/07/03 12:36:20] <Volcane> pftqg: nods works for some, going back to defaults works always so far, we get this question 100 times here :)
[2008/07/03 12:37:27] <Volcane> pftqg: odd, delete the directory on a client then run --test and show the output in a pastie
[2008/07/03 12:37:37] <penthief> Volcane: All of the dev files in fact.
[2008/07/03 12:38:01] <Volcane> pftqg: also theres a MUCH cleaner way to select the source to put down
[2008/07/03 12:38:01] <pftqg> (I'm also using hostname = and certname = on the clients to keep hostname consistent when they move around and out of the office. which they do. regularly. :))
[2008/07/03 12:38:37] <Volcane> pftqg: source => ["puppet://puppet.unrulymedia.com/tomcat/server.xml.$fqdn", "puppet://puppet.unrulymedia.com/tomcat/server.xml"]
[2008/07/03 12:38:51] <Volcane> pftqg: that will put down the server.xml for whatever fqdn ele a default one
[2008/07/03 12:39:14] <Volcane> pftqg: cos i suspect whats hapening is your vars arent being set correctly, so your source actually avaluates to the directory and not the file
[2008/07/03 12:40:06] <pftqg> I suspect those are for penthief not me :)
[2008/07/03 12:40:16] <Volcane> so the are :)
[2008/07/03 12:44:52] <penthief> Volcane: `puppetd --test' output here after deleting the server.xml directory: http://pastie.org/227206
[2008/07/03 12:46:31] <Volcane> hmm
[2008/07/03 12:46:36] @ Quit: cabbiepete_: Remote closed the connection
[2008/07/03 12:47:15] @ cabbiepete joined channel #puppet
[2008/07/03 12:47:34] <Volcane> penthief: its not clear, but i think the problem lies with your vars
[2008/07/03 12:49:17] <penthief> Volcane: OK. I'll try avoiding the vars in the way that you said.
[2008/07/03 12:56:09] @ Quit: fbe__: Read error: 110 (Connection timed out)
[2008/07/03 12:56:10] <sigmonsays__> Yo
[2008/07/03 12:56:15] @ sigmonsays__ is now known as sigmonsays
[2008/07/03 13:03:59] <jamesttt> hey is puppetd -v replaced by puppetd --test now or something?
[2008/07/03 13:04:35] <jamesttt> cause puppetd -v doesn't seem to do squat in 2.4
[2008/07/03 13:10:15] @ svend joined channel #puppet
[2008/07/03 13:11:09] <Volcane> jamesttt: -t is --debug --verbose --one-time i think
[2008/07/03 13:12:05] <svend> I have an Exec that gets a scheduled refresh, but it doesn't execute.
[2008/07/03 13:13:09] * Volcane 's never tried scheduled stuff
[2008/07/03 13:14:17] <svend> "Scheduling refresh" is what it says in the log. It is a refresh-only exec that is notified when a file is created.
[2008/07/03 13:15:08] <Volcane> oh
[2008/07/03 13:15:12] <benp-> schedule doesnt send notifications
[2008/07/03 13:15:15] <Volcane> then at the end it should execute generally
[2008/07/03 13:16:22] <svend> http://pastie.org/227224
[2008/07/03 13:16:34] <benp-> svend read the type reference again
[2008/07/03 13:17:02] <svend> benp-: The exec type reference?
[2008/07/03 13:17:07] <benp-> no, schedule
[2008/07/03 13:17:09] <benp-> the first paragraph
[2008/07/03 13:17:10] <Volcane> svend: you never get a log line like: notice: //Exec[helloworld]: Triggering 'refresh' from 1 dependencies
[2008/07/03 13:17:55] <svend> I'm not using the schedule type.
[2008/07/03 13:17:56] <Volcane> benp-: i think he's got his terminoligy wrogn, he isnt actually using scheduled resources, he just notified an exec
[2008/07/03 13:18:06] <benp-> if you take refreshonly out of the Exec, you might get what you want
[2008/07/03 13:18:12] <benp-> ahh
[2008/07/03 13:18:15] <benp-> my bad
[2008/07/03 13:18:28] <benp-> i didnt actually read the paste btw
[2008/07/03 13:18:29] <svend> benp-: Then it executes every run, which isn't what I want.
[2008/07/03 13:18:53] <Volcane> svend: its executing just fine
[2008/07/03 13:19:01] <Volcane> notice: //example.com/mail/exec=/usr/bin/debconf-set-selections /var/cache/debconf/exim4.preseed: Triggering 'refresh' from 2 dependencies
[2008/07/03 13:19:06] @ kambiz joined channel #puppet
[2008/07/03 13:19:16] <Volcane> when it says "triggering" it means its doing it
[2008/07/03 13:19:41] <Volcane> and you can even see that it then notified the next resource and that too triggered
[2008/07/03 13:20:11] @ Quit: penthief: "Leaving"
[2008/07/03 13:20:21] <Volcane> i mean based on your manifests, the mere presence of this line : info: //example.com/mail/exec=/usr/bin/debconf-set-selections /var/cache/debconf/exim4.preseed: Scheduling refresh of exec[dpkg-reconf-exim4]
[2008/07/03 13:20:30] <Volcane> means that exec *had* to have done its thing
[2008/07/03 13:20:38] <svend> But it never shows "notice: [...]exec=/usr/bin/debconf-set-selections /var/cache/debconf/exim4.preseed/returns: executed successfully"
[2008/07/03 13:21:02] <Volcane> svend: maybe you're verbocity isnt high enough, --verbose --debug
[2008/07/03 13:21:09] <svend> If I take out the refresh-only, it does say "executed successfully". That is why I think it isn't running.
[2008/07/03 13:21:30] <svend> I'll change the exec to create a file to see if it is running.
[2008/07/03 13:21:57] <svend> Volcane: I am running: sudo /usr/sbin/puppetd -d -v --trace -o
[2008/07/03 13:22:35] <Volcane> svend: http://pastie.org/227232
[2008/07/03 13:22:49] <Volcane> svend: look at my debug, looks like yours, and it made the file
[2008/07/03 13:23:17] <Volcane> your one has no debug lines
[2008/07/03 13:23:34] <Volcane> so they're going missing somewhere :)
[2008/07/03 13:25:54] <Volcane> svend: also generally puppetd --test gives you all you need even diffs to what its editing
[2008/07/03 13:25:56] <svend> You're right, my test exec created a file.
[2008/07/03 13:27:05] <Volcane> kewl
[2008/07/03 13:38:40] @ shake-n-bake_ joined channel #puppet
[2008/07/03 13:48:33] @ plathrop joined channel #puppet
[2008/07/03 13:51:32] @ shenson is now known as shenson_not_here
[2008/07/03 14:03:47] <ashp> hmm i'm being pushed into a development project
[2008/07/03 14:03:49] <ashp> i wonder if this is good or bad
[2008/07/03 14:09:50] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out)
[2008/07/03 14:10:52] @ shake-n-bake_ joined channel #puppet
[2008/07/03 14:17:49] @ jbrothers left channel #puppet ()
[2008/07/03 14:22:17] @ aymerick joined channel #puppet
[2008/07/03 14:22:58] @ Quit: aymerick: Remote closed the connection
[2008/07/03 14:23:18] @ Quit: aymerick__: Read error: 104 (Connection reset by peer)
[2008/07/03 14:23:36] @ aymerick joined channel #puppet
[2008/07/03 14:34:29] @ penthief joined channel #puppet
[2008/07/03 14:36:56] <hacim> if I specify a file resource, but no source, will an empty file be created?
[2008/07/03 14:48:12] @ authentic is now known as fake
[2008/07/03 14:48:14] @ fake is now known as authentic
[2008/07/03 15:03:52] @ \ask_ joined channel #puppet
[2008/07/03 15:06:47] <holoway> hacim: yes
[2008/07/03 15:06:49] <holoway> I believe so
[2008/07/03 15:08:53] <Volcane> i think content => "" also works
[2008/07/03 15:10:47] @ Quit: kambiz: "Leaving"
[2008/07/03 15:11:46] @ Quit: keithlard:
[2008/07/03 15:12:58] @ oskapt joined channel #puppet
[2008/07/03 15:17:03] <lak> anyone around who knows anything about red hat interfaces?
[2008/07/03 15:17:16] <lak> wtf should the name of an interface be? docs say it's the IP address, not the device
[2008/07/03 15:17:22] <lak> but that doesn't make any sense for dhcp interfaces
[2008/07/03 15:18:16] <lak> i'm thinking this redhat interface support isn't going to happen until someone who cares and knows how red hat stuff should work shows up
[2008/07/03 15:18:29] <Volcane> lak: what exactly do you need to know?
[2008/07/03 15:18:33] <Volcane> ifcfg-eth0
[2008/07/03 15:18:37] <Volcane> ifcfg-eth0:1
[2008/07/03 15:18:40] <Volcane> ifcfg-eth0.1
[2008/07/03 15:18:45] <ashp> redhat and networking, what a headache
[2008/07/03 15:18:47] <lak> what should the 'name' of an interface be? the device, or the ip address?
[2008/07/03 15:18:48] <Volcane> thats about the permutations
[2008/07/03 15:19:01] <ashp> the name of the interface should be 'ifcfg-eth0' really, to mirror what the files do
[2008/07/03 15:19:04] <kjetilho> you can pick your own name, but it's typically eth0:N
[2008/07/03 15:19:08] <ashp> it might sound wrong, but it makes sense from a redhat point of view
[2008/07/03 15:19:11] <kjetilho> or just eth0 of course
[2008/07/03 15:19:16] <ashp> we could drop the ifcfg and just go with eth0
[2008/07/03 15:19:22] <ashp> we definitely don't want the name to be the ip address
[2008/07/03 15:19:43] <Volcane> lak: when we worked on the current redhat interface type redhat support suggested ifcfg-anything is possible, etc, but its not, they're on crack
[2008/07/03 15:19:53] <kjetilho> (you can only pick your own name if it's an alias IP)
[2008/07/03 15:20:00] <kjetilho> Volcane: why do you say that?
[2008/07/03 15:20:38] <ashp> What I think for the redhat interface stuff
[2008/07/03 15:20:45] <ashp> is that we should totally ignore all the stupid vlan and alias stuff for now
[2008/07/03 15:20:58] <ashp> and just focus on having it build straight out simple eth0, eth1 and eth0:0 type stuff
[2008/07/03 15:21:02] <Volcane> kjetilho: trying to find it now, its been months, but theres a regex in one of the up scripts that made it ignore named interfaces - at least on rhel4
[2008/07/03 15:21:04] <lak> ashp: that's a given
[2008/07/03 15:21:22] <kjetilho> Volcane: you can have ifcfg-volcane0, but you need to set PHYSDEV=eth0 or whatever in that file
[2008/07/03 15:21:23] <ashp> lak: I'm glad you're taking a look because several of us have tried and failed to make any sense of it :)
[2008/07/03 15:21:25] <lak> the two choices here are: disable it, until someone wants it fixed enough to do it him/herself
[2008/07/03 15:21:38] <lak> or: get it to the point where it's apparently working (again)
[2008/07/03 15:21:55] <ashp> I think the second choice, done by tearing out anything clever, is probably the way to go
[2008/07/03 15:21:56] <lak> the problem is i wrote all these unit tests and no integration tests
[2008/07/03 15:22:00] <lak> which works out poorly
[2008/07/03 15:22:08] <kjetilho> handling ethX and bondX with :N for aliases is sufficient for most people
[2008/07/03 15:22:10] <lak> there's no cleverness there that i can see
[2008/07/03 15:22:11] <lak> just mistakes
[2008/07/03 15:22:36] <lak> kjetilho: i can basically guarantee i won't support that
[2008/07/03 15:22:52] <lak> arbitrary configuration variety should be punished, not supported :/
[2008/07/03 15:22:53] <kjetilho> that == what?
[2008/07/03 15:23:01] <lak> that == naming the file randomly
[2008/07/03 15:23:01] <ashp> just mistakes might explain why it looks complicated to me :)
[2008/07/03 15:23:07] <lak> and putting the real name in the file
[2008/07/03 15:23:33] <lak> 'course, red hat appears to do it with lo -- it has DEVICE=loopback in the default lo cfg file
[2008/07/03 15:23:41] <kjetilho> well, it's not a design goal in itself, it just is a product of having very flexible handling of layered network configuration (bonding, vlan etc.)
[2008/07/03 15:24:11] <ashp> I think that the interface type
[2008/07/03 15:24:16] <kjetilho> oh? my says DEVICE=lo
[2008/07/03 15:24:20] <ashp> shouldn't do anything involving lo at all
[2008/07/03 15:24:23] <kjetilho> RHEL5 and F8
[2008/07/03 15:24:28] <ashp> it should only allow ethX and nothing else
[2008/07/03 15:24:39] <kjetilho> it says NAME=loopback, but that's just freetext AFAIK
[2008/07/03 15:24:54] <ashp> I have DEVICE=lo on centos 5
[2008/07/03 15:26:14] * kjetilho is off to a concert
[2008/07/03 15:26:57] @ Quit: meandtheshell: Read error: 110 (Connection timed out)
[2008/07/03 15:27:42] <Volcane> ah yes, we wanted to name our vlans
[2008/07/03 15:27:49] <Volcane> like instead of have ifcfg-eth0.123
[2008/07/03 15:27:55] <Volcane> they wanted a name
[2008/07/03 15:27:58] <Volcane> and thats not supported
[2008/07/03 15:28:18] <Volcane> yet they claimed it was
[2008/07/03 15:29:41] <Volcane> lak: I'd say go for the simple stuff, ifcfg-eth0, ifcfg-eth0:0, ifcfg-eth0.1 and ifcfg-eth0-range0
[2008/07/03 15:29:53] <lak> range0? wtf is that?
[2008/07/03 15:30:01] <Volcane> if ppl need more than that, they can provide code
[2008/07/03 15:30:13] <Volcane> lak:
[2008/07/03 15:30:14] <Volcane> IPADDR_START=192.168.0.100
[2008/07/03 15:30:14] <Volcane> IPADDR_END=192.168.0.200
[2008/07/03 15:30:14] <Volcane> CLONENUM_START=0
[2008/07/03 15:30:16] <lak> Volcane: again, i don't think this is a question of simple vs. complex; it's function vs not
[2008/07/03 15:30:25] <lak> yeah, that's not supported
[2008/07/03 15:30:35] <Volcane> put that in a range, and it makes many aliases for you, i think its very rarely used
[2008/07/03 15:30:39] <lak> i don't think that's "simple" :)
[2008/07/03 15:31:00] <Volcane> well sure :) but compared to customly named interface files and stuff hehe
[2008/07/03 15:32:42] <lak> ok, looking more closely at this stuff
[2008/07/03 15:32:53] <ashp> yeah screw range, just stick to the basic stuff
[2008/07/03 15:32:55] <lak> redhat and solaris behave differently, apparently
[2008/07/03 15:32:55] <lak> yay
[2008/07/03 15:33:04] <ashp> they can always place their own interface files and manually shove them on hosts
[2008/07/03 15:33:11] <Volcane> lak: hmmm, i dont see your example of lo on any of my machines
[2008/07/03 15:33:17] <lak> ok, step back a sec
[2008/07/03 15:33:23] <lak> i'm *not* adding functionality
[2008/07/03 15:33:38] <lak> i'm trying to figure out whether i can even make this work
[2008/07/03 15:33:40] <lak> or if it's just crazy
[2008/07/03 15:33:43] @ fbe__ joined channel #puppet
[2008/07/03 15:33:45] <ashp> All interface{} should do on redhat is let you specify, at best:
[2008/07/03 15:33:48] <lak> and i'm coming to the confluction it's create
[2008/07/03 15:34:19] <ashp> name =>, broadcast, ipaddr, netmask, network, and that's about it
[2008/07/03 15:34:27] <Volcane> lak: interface type for redhat needs a rewrite by someone who knows ruby and puppet well before I'd touch it again
[2008/07/03 15:34:28] <lak> confluction? wtf is that
[2008/07/03 15:34:30] <lak> *conclusion*
[2008/07/03 15:34:44] <lak> Volcane: it got that -- i just don't know red hat interface files
[2008/07/03 15:34:46] <ashp> and maybe allow a few other bits like bootproto/device/hwaddr/onboot
[2008/07/03 15:34:55] <lak> i basically wrote that time from scratch the last time people complained about it
[2008/07/03 15:35:11] <lak> ashp: the question is more fundamental than that
[2008/07/03 15:35:24] <Volcane> lak: ah did it? kewl, i just recall when gu did it and how big a mess it was :P
[2008/07/03 15:35:32] <lak> yeah, it was
[2008/07/03 15:35:38] <lak> and people complained, so i rewrote it
[2008/07/03 15:35:46] <Volcane> ah ok, didnt know about the rewrite
[2008/07/03 15:35:46] <lak> but didn't add any integration tests, so it didn't really work
[2008/07/03 15:36:04] <lak> and the sunos and redhat providers behave pretty differently
[2008/07/03 15:36:08] @ Quit: sigmonsays: Read error: 110 (Connection timed out)
[2008/07/03 15:36:10] <lak> i.e., the use different values for the names
[2008/07/03 15:36:12] <lak> this is ridiculous
[2008/07/03 15:37:08] <lak> brb
[2008/07/03 15:37:11] @ Quit: lak:
[2008/07/03 15:37:13] * Volcane thinks conceptually puppet shouldnt do interfaces, but thats just me
[2008/07/03 15:37:34] <holoway> it's pretty easy to handle with definitions and templates (and many people have)
[2008/07/03 15:37:36] @ bk1 joined channel #puppet
[2008/07/03 15:37:38] @ lak joined channel #puppet
[2008/07/03 15:37:44] <Volcane> holoway: yeah
[2008/07/03 15:37:46] @ bk1 is now known as bk
[2008/07/03 15:38:11] <ashp> I think it should do interfaces because it's nice to hide how they are implemented
[2008/07/03 15:38:16] <ashp> and just deal with them at a higher level
[2008/07/03 15:38:39] <ashp> If 'many people' are making defines and templates it's probably a good candidate to be managed by puppet properly
[2008/07/03 15:38:50] <bk> gepetto: help
[2008/07/03 15:38:52] <gepetto> bk: help topics: 9 core modules: auth, basics, config, filters, httputil, irclog, remote, unicode, userdata; 8 plugins: factoids, redmineurls, rss, salut, seen, shortenurls, stats, tracurls (help <topic> for more info)
[2008/07/03 15:39:49] <bk> Halo everyone. Is there doco on how to read the dependency cycle output?
[2008/07/03 15:39:51] <lak> do redhat interfaces normally specify a name with the interface? as in, a hostname?
[2008/07/03 15:40:05] <lak> bk: what do you mean? what output?
[2008/07/03 15:40:14] <Volcane> lak: hostname goes to /etc/sysconfig/network
[2008/07/03 15:40:39] <ashp> yeah, no hostname
[2008/07/03 15:41:10] <bk> lak: I get the following error at execution time: http://pastie.org/227325
[2008/07/03 15:41:19] <ashp> here's two typical entries:
[2008/07/03 15:41:20] <ashp> http://pastebin.com/d50526fa0
[2008/07/03 15:41:32] <lak> Volcane: that's a single file, at least on this fedora 8 ec2 image, and all it says is "NETWORKING=yes"
[2008/07/03 15:41:40] <bk> lak: I am sure I hosed up my manifest, but I am trying to figure out how to read this to tear it apart
[2008/07/03 15:41:55] <Volcane> lak: want a vm to play on?
[2008/07/03 15:42:08] <lak> i'm playing on one right now
[2008/07/03 15:42:21] <ashp> root@hlslinutil02(modules)$ cat /etc/sysconfig/network
[2008/07/03 15:42:21] <ashp> NETWORKING=yes
[2008/07/03 15:42:21] <ashp> HOSTNAME=hlslinutil02.law.harvard.edu
[2008/07/03 15:42:21] <ashp> GATEWAY=10.241.209.1
[2008/07/03 15:42:21] <lak> "...ec2 image..."
[2008/07/03 15:42:34] <lak> that doesn't help you for multiple interfaces
[2008/07/03 15:42:40] <lak> right?
[2008/07/03 15:42:47] <Volcane> redhat doesnt do multiple hostnames
[2008/07/03 15:42:57] <Volcane> one per box, not per interface
[2008/07/03 15:43:02] <lak> so the answer is, no, there's no hostname associated with red hat interfaces
[2008/07/03 15:43:06] <Volcane> http://www.centos.org/docs/5/html/5.2/Deployment_Guide/s2-networkscripts-interfaces-eth0.html
[2008/07/03 15:43:12] <Volcane> thats all thats valid in a eth
[2008/07/03 15:44:29] <lak> i'm disabling this type
[2008/07/03 15:44:40] <lak> the only two providers that exist -- sunos and redhat -- have completely different models
[2008/07/03 15:44:59] <lak> sunos uses the hostname for the name, redhat uses the ip address, or something else just as random, from what i can tell
[2008/07/03 15:45:02] <lak> neither one makes sense
[2008/07/03 15:45:06] <Volcane> and isnt sunos about to change drastically too?
[2008/07/03 15:45:14] <lak> no idea
[2008/07/03 15:45:18] <holoway> shouldn't they both be interface name?
[2008/07/03 15:45:23] <lak> sure
[2008/07/03 15:45:26] <lak> but they aren't
[2008/07/03 15:45:37] <lak> and i was expecting to do some basic fixing
[2008/07/03 15:45:38] <Volcane> redhat uses interface name - physical device name
[2008/07/03 15:45:44] <lak> not completely rearchitecting the type
[2008/07/03 15:45:49] <lak> and both providers
[2008/07/03 15:45:53] <lak> this is a couple of day's work
[2008/07/03 15:46:02] <lak> which means, not something that's going to get done for 0.24.5
[2008/07/03 15:46:10] <ashp> I wonder why sunos uses the hostname
[2008/07/03 15:46:15] <lak> esp. since it requires a good amount of research into each of the two platforms
[2008/07/03 15:46:16] <ashp> because that's crazy bogus :/
[2008/07/03 15:46:20] <Volcane> interface{"eth0": } would be ifcfg-eth0, interface{"eth0:1": } would be ifcfg-eth0:1
[2008/07/03 15:46:28] <lak> ashp: because that's how the original author wrote it
[2008/07/03 15:46:51] <lak> Volcane: that may be how it *should* work, but that's not how it *does* work
[2008/07/03 15:47:04] <ashp> Sounds like what needs fixing is sunos to use the device, I wonder how hard that would be. I'm no solaris expert.
[2008/07/03 15:47:07] <Volcane> lak: oh, thats all thats documented in rh docs supported
[2008/07/03 15:47:22] <lak> this is code that someone else wrote and i foolishly integrated without tests
[2008/07/03 15:47:29] <lak> when i tried to write tests, i apparently broke it more
[2008/07/03 15:47:51] <lak> and the original authors aren't around any more
[2008/07/03 15:48:00] @ e^ipi joined channel #puppet
[2008/07/03 15:48:11] <ashp> I guess what it needs is the whole thing doing from scratch
[2008/07/03 15:48:33] <ashp> and then just rewriting of the bit that takes the standard information that's cross platform and writes it out to a file
[2008/07/03 15:48:43] <ashp> So that everything matches and is based on the device, not anything else
[2008/07/03 15:49:02] <ashp> i mean after all most of an interface should be absolutely generic, they all require a device, ip, netmask etc
[2008/07/03 15:50:09] <lak> except dhcp
[2008/07/03 15:50:12] <lak> which doesn't require anything
[2008/07/03 15:50:26] <lak> and solaris uses magical hostname-in-config-file to determine ip
[2008/07/03 15:50:34] <Volcane> ashp: problem is the original interface type for redhat code is massively over engineered and has too many features - some of them even undocumented and stuff that was figured out as working on the specific version of redhat it was coded on
[2008/07/03 15:50:46] <Volcane> ashp: so to fix it, mean throw away and start fresh and go for the common ground
[2008/07/03 15:50:47] <lak> i.e., you put ip info in /etc/hosts, the hostname in /etc/hostname.eth0, and it tracks down the right ip for that interface
[2008/07/03 15:50:53] @ Quit: bk: Read error: 104 (Connection reset by peer)
[2008/07/03 15:51:12] <lak> massively over-engineered? what features does it have that make that label fit?
[2008/07/03 15:51:15] <lak> it seems pretty basic to me
[2008/07/03 15:51:21] @ bk joined channel #puppet
[2008/07/03 15:51:28] <lak> the only thing at all crazy is the dummy/loopback stuff, but even that's not exactly complicated
[2008/07/03 15:51:40] <ashp> don't forget that 90% of the redhat stuff is optional
[2008/07/03 15:51:49] <ashp> as long as you shove in the ip, netmask and device name it'll probably just work fine
[2008/07/03 15:52:08] * Volcane remembers reading many ifup scripts source to figure out if what they wanted could be done and how to do it, and defo soem of the stuff was not documented to work in rhel4 documentation
[2008/07/03 15:52:09] <lak> like i said, i'm skipping it
[2008/07/03 15:52:13] <e^ipi> I have this : mysql.pp: "@@host { $hostname: tag => "mysql", }"...
[2008/07/03 15:52:20] <e^ipi> mongrel.pp: "Host <<|tag == "mysql" |>>" \n "file { "/tmp/test.build": ensure => present, content => template("test.erb"), } "
[2008/07/03 15:52:24] <lak> Volcane: were you part of the original authoring effort?
[2008/07/03 15:52:28] <e^ipi> test.erb " <% host.each do |host| -%> <%= host %> <%end -%> "
[2008/07/03 15:52:44] <e^ipi> but when the mongrel host tries to connect i get: err: Could not retrieve catalog: Failed to parse template test.erb: Could not find value for 'host' at /etc/puppet/manifests/classes/mongrel.pp:6
[2008/07/03 15:52:53] <e^ipi> insights?
[2008/07/03 15:52:58] <Volcane> lak: well i didnt know ruby then so didnt actually code (though i debugged and fiddled)
[2008/07/03 15:53:04] <Volcane> lak: but yes, was there.
[2008/07/03 15:53:12] <lak> ah, ok; didn't know
[2008/07/03 15:53:20] <lak> well, anyway, i'm disabling the type
[2008/07/03 15:53:24] <lak> which is to say, removing it entirely
[2008/07/03 15:53:27] <Volcane> nods
[2008/07/03 15:53:42] <lak> or maybe i should just disable the sunos tpye
[2008/07/03 15:53:46] <lak> sunos provider, rather
[2008/07/03 15:53:52] <ashp> well, obviously it's not up to me
[2008/07/03 15:53:54] <lak> the redhat one is probably 90% functional as it is
[2008/07/03 15:53:57] <ashp> but the sunos one sounds worse
[2008/07/03 15:54:01] <ashp> it's the one that uses the hostname or something silly
[2008/07/03 15:54:12] <Volcane> ashp: but thats how solaris works
[2008/07/03 15:54:22] <lak> depends on your definition of "worse"; it's 100x easier to maintain as a user on solaris
[2008/07/03 15:54:33] <lak> redhat's profusion of files all over the damn place is pretty annoying
[2008/07/03 15:54:52] <ashp> Someone needs to make a distribution that's designed to make it easy to support with puppet :)
[2008/07/03 15:54:58] @ Quit: bk: Client Quit
[2008/07/03 15:55:20] @ bk joined channel #puppet
[2008/07/03 15:56:21] <Wakko666> there's always Linux From Scratch. ;-)
[2008/07/03 15:57:33] <e^ipi> sunos is just the kernel name
[2008/07/03 16:00:13] @ verwilst joined channel #puppet
[2008/07/03 16:01:41] <e^ipi> anyone re: my exported resource issue?
[2008/07/03 16:02:14] @ Quit: verwilst: Client Quit
[2008/07/03 16:04:54] @ Quit: andrewcshafer:
[2008/07/03 16:05:44] @ meandtheshell joined channel #puppet
[2008/07/03 16:05:58] @ Quit: penthief: Remote closed the connection
[2008/07/03 16:07:49] <Volcane> e^ipi: not that many ppl use them :(
[2008/07/03 16:08:01] <e^ipi> it is the entire reason we're using puppet
[2008/07/03 16:08:22] <Volcane> e^ipi: i know some ppl had issues with exported defined types
[2008/07/03 16:08:28] <Volcane> e^ipi: but i dont recall the specifics
[2008/07/03 16:09:27] @ therealmonkey joined channel #puppet
[2008/07/03 16:09:32] <e^ipi> i'm just trying to automagically build a config file with all the other nodes of certain classes in it
[2008/07/03 16:10:00] @ Quit: neh: "leaving"
[2008/07/03 16:10:02] <e^ipi> my boss said "do puppet"
[2008/07/03 16:10:05] <Volcane> heh
[2008/07/03 16:10:10] <kjetilho> lak: that's not how Solaris works, you can put the IP in there if you likle
[2008/07/03 16:10:11] <e^ipi> otherwise i'd just roll something myself in a less braindead language that actually works
[2008/07/03 16:10:16] <e^ipi> i'm getting pretty fed up with this crap
[2008/07/03 16:10:21] <lak> oh, really? didn't know that
[2008/07/03 16:10:35] <kjetilho> but it's more common to use symbolic name and add it to /etc/hosts
[2008/07/03 16:10:51] <Volcane> e^ipi: i had it working with self defined nagios types, but didnt end up using it so dont have my examples around anymore
[2008/07/03 16:10:55] <Volcane> e^ipi: actually, let me check
[2008/07/03 16:10:56] <kjetilho> (not req btw, if you can access a different naming service)
[2008/07/03 16:10:56] <lak> e^ipi: collection doesn't do what you appear to think it does
[2008/07/03 16:11:16] <lak> that is, it doesn't create a variable 'host' that contains those collected resources
[2008/07/03 16:11:22] <lak> it just includes the collected resources in the catalog
[2008/07/03 16:11:42] <lak> well, at this point, i'm doing enough fixes to the interface to make it clear what's needed
[2008/07/03 16:11:42] <kjetilho> what's magic in Solaris is that if the line contains more thanm one line, the second line is used as extra arguments for ifcong
[2008/07/03 16:11:45] <lak> then i'm going to remove it all
[2008/07/03 16:11:58] <lak> kjetilho: yeah, i didn't know that either
[2008/07/03 16:11:59] <kjetilho> this is used to set up multipathing etc
[2008/07/03 16:12:03] <lak> that's what i get for keeping it simple :)
[2008/07/03 16:12:23] @ Quit: aymerick: "kit mais sage"
[2008/07/03 16:12:26] <kjetilho> eh, the *file* contains more than one line, of course
[2008/07/03 16:12:31] <ashp> right after you remove it, that's when I'll buy the support contract and say 'hey.. this doesn't work anymore' :D
[2008/07/03 16:13:12] <kjetilho> lak: just decide what you want to support semi-portably
[2008/07/03 16:13:32] <therealmonkey> anyone have experience using %h in fileserver.conf? I can't seem to get it working in 0.24.4 (debian backports).
[2008/07/03 16:13:34] <kjetilho> I don't think it's good to require names, though
[2008/07/03 16:13:38] <ashp> You know, we should start up some kind of 'bounty' site
[2008/07/03 16:13:47] <ashp> where we can collectively pool $20 each to get features written
[2008/07/03 16:13:51] <ashp> $200 to fix the interface type, etc
[2008/07/03 16:13:57] <kjetilho> only the nodename itself (/etc/nodename on Solaris)
[2008/07/03 16:14:13] <ashp> I can afford $20 out of my own pocket, but not the real money required to get someone experienced to fix it :)
[2008/07/03 16:14:25] @ Quit: bk: Read error: 110 (Connection timed out)
[2008/07/03 16:14:44] <e^ipi> lak: so how do you propose I solve the problem if not through exported resources ?
[2008/07/03 16:14:53] @ penthief joined channel #puppet
[2008/07/03 16:15:08] <kjetilho> lak: what's your base distro/OS?
[2008/07/03 16:15:23] <lak> e^ipi: what's your actual problem?
[2008/07/03 16:15:24] <Volcane> e^ipi: heres a simple example that works: http://pastie.org/227360
[2008/07/03 16:15:39] <lak> kjetilho: i'm a dev now, so i don't really have a base distro, but i know solaris the best
[2008/07/03 16:15:46] <lak> altho i haven't really used it in about 5 years
[2008/07/03 16:15:50] @ bk joined channel #puppet
[2008/07/03 16:15:52] <kjetilho> ok
[2008/07/03 16:15:56] <lak> which is how long it's been since i was an active admin
[2008/07/03 16:15:57] <e^ipi> lak: i'm trying to make it such that my mongrel hosts can add my mysqlhosts to their mysql-proxy config file
[2008/07/03 16:15:59] <lak> thankfully :)
[2008/07/03 16:15:59] <Volcane> e^ipi: in that example, nagios.me.net gets a file /etc/nagios/hosts/puppet_hosts.cfg with dev1.me.net in it with all the needed params set
[2008/07/03 16:16:45] <Volcane> e^ipi: however, i got that far then started trying to do the same with defined types and ran into issues, too many and dark and painfull to remember, so i gave up on it
[2008/07/03 16:17:35] <bk> lak: on this error...  http://pastie.org/227325does X => Y mean that X depends on Y being executed? If so.. what are the comments?
[2008/07/03 16:17:48] <bk> %s/comments/commas/g
[2008/07/03 16:18:11] <therealmonkey> does anyone know why %h in fileserver.conf wouldn't get populated with the hostname on the file request? I've verified with strace that puppetmaster is trying to server out /etc/puppet/modules/<modulename>/files/<file> instead of /etc/puppet/modules/<modulename>/files/<hostname>/<file>
[2008/07/03 16:18:19] <therealmonkey> for the life of me I can't figure out the problem
[2008/07/03 16:18:52] <ashp> lak: How can I write a manifest that controls my coffee machine to make an endless amount
[2008/07/03 16:18:58] <lak> bk: do you have omnigraffle available, or something that can read .dot files?
[2008/07/03 16:19:05] <bk> yeah
[2008/07/03 16:19:08] <e^ipi> Volcane: so the solution is to extend puppet
[2008/07/03 16:19:28] <lak> then look in the $(sudo puppetd --configprint graphdir), and look at the expanded_relationships.dot file
[2008/07/03 16:19:29] <bk> lak I have graphhiz installed
[2008/07/03 16:19:41] <e^ipi> also, your example only has one host in puppet_hosts.cfg, or does it append it?
[2008/07/03 16:19:58] <lak> ok, i removed all of the interface code
[2008/07/03 16:20:04] <ashp> e^ipi: I can't be sure on this, but it seems like similar problems have had the solution of iclassify suggested in the past as it can make that stuff easier when dealing with templates
[2008/07/03 16:20:11] <ashp> e^ipi: but I'm not 100% sure I grasp what you're doing
[2008/07/03 16:20:19] <lak> but before i did so, i fixed enough that anyone who wants to take it up should know where to start, with semi-appriately failing tests
[2008/07/03 16:20:38] <Volcane> e^ipi: hmm,i missed out something in my pastie let me update sorry
[2008/07/03 16:20:45] <lak> bk: the commas are between edges; looks like you've got very big cycles, or lots of small ones
[2008/07/03 16:21:00] <plathrop> I'm bummed. I've been so buried in Python at work I'm having trouble writing Ruby!
[2008/07/03 16:21:07] <bk> lak.. ok.. will go look.. thx
[2008/07/03 16:21:15] <e^ipi> i have a dozen hosts. they all do different things. some of those hosts are mysql hosts. they need to export their hostname. then, after that, the mongrel hosts need to import all those mysql hosts' hostname, and build a config file from it
[2008/07/03 16:22:12] <Volcane> e^ipi: yes, sorry: http://pastie.org/227360
[2008/07/03 16:22:27] <Volcane> e^ipi: with that, each host that includes include nagios_host_definition
[2008/07/03 16:22:33] <Volcane> e^ipi: will end up in the file on the nagios server
[2008/07/03 16:22:53] <ashp> e^ipi: I guess the idea with iclassify is you'd tag each host that uses mysql, and then use that to write the templated conf file, it's what holoway suggested to me in the past for similar things
[2008/07/03 16:23:24] <e^ipi> ashp: solutions such as "use iclassify" are unhelpful
[2008/07/03 16:23:42] <e^ipi> as they convey no information as to how to do that
[2008/07/03 16:23:49] <e^ipi> and it being the ruby community, there's no documentation either
[2008/07/03 16:24:02] <Volcane> e^ipi: the trick here is if you want to use a define called do_mongrel_stuff{} on your mongrel server, then your nodes need to have @@do_mongrel_stuf{} with appropriate params
[2008/07/03 16:24:25] <Volcane> e^ipi: only then will you export work and supply the info to the mongrel server
[2008/07/03 16:26:38] <e^ipi> i don't understand why everything ruby has to be 'recipes' and 'howtos' rather than actual useful documentation...
[2008/07/03 16:27:08] <Volcane> cos no1 pays full time documenters to spend months doing it
[2008/07/03 16:27:28] <e^ipi> recipes are a good starting point, but completely and utterly useless unless you want to do something pretty close to that recipe
[2008/07/03 16:27:32] @ Quit: pleemans: "Ex-Chat"
[2008/07/03 16:28:04] <e^ipi> but i think it's symptomatic of the whole language... there is no ruby language definition in the same way that most other popular languages have
[2008/07/03 16:28:49] * Volcane finds rdocs are pretty good in general
[2008/07/03 16:29:00] <e^ipi> people such as o'rly collect together "stuff you can do" pretty well, but unlike, say, Java, there's no document saying "this is how everything in the language works"
[2008/07/03 16:29:07] <Volcane> but for some things they do suck, mostly cos whoever wrote whatever class didnt write good focs
[2008/07/03 16:29:30] <Volcane> docs
[2008/07/03 16:29:58] <Volcane> e^ipi: where was a pastie with your problem manifest again?
[2008/07/03 16:30:11] <ashp> personally I've found documentation to be lacking on a whole, but I've just muddled through as best I could
[2008/07/03 16:30:13] @ bk1 joined channel #puppet
[2008/07/03 16:30:37] @ Quit: bk1: Client Quit
[2008/07/03 16:30:45] @ bk1 joined channel #puppet
[2008/07/03 16:31:09] <kjetilho> e^ipi: I think it is the Japan factor
[2008/07/03 16:31:43] @ dysinger joined channel #puppet
[2008/07/03 16:31:50] <kjetilho> although I don't know if there's a complete reference in Japanese either
[2008/07/03 16:31:52] <e^ipi> Volcane: http://opensolaris.pastebin.com/m62ea2bcb
[2008/07/03 16:32:05] <e^ipi> ashp: openbsd and solaris have some amazing documentation
[2008/07/03 16:32:15] @ Quit: bk1: Client Quit
[2008/07/03 16:32:19] <e^ipi> kjetilho: japanese people don't like documentation?
[2008/07/03 16:32:21] <ashp> solaris is hardly a good example considering the massive commerical backing.
[2008/07/03 16:32:25] @ bk1 joined channel #puppet
[2008/07/03 16:32:35] <Volcane> e^ipi: and where does host come from?
[2008/07/03 16:32:35] <e^ipi> openbsd has almost no commercial backing
[2008/07/03 16:32:37] <ashp> If puppet/ruby had the kind of money sun had, you could be sure there'd be a lot more documentation too!
[2008/07/03 16:32:42] <e^ipi> and their docs are good
[2008/07/03 16:32:51] <e^ipi> Volcane: mysql.pp
[2008/07/03 16:32:53] <ashp> the BSDs are generally good with documentation, the freebsd handbook is a good example.
[2008/07/03 16:32:54] <e^ipi> sorry, that should read @@host
[2008/07/03 16:33:17] <e^ipi> pastebin strips it out it appears
[2008/07/03 16:34:03] <Volcane> e^ipi: and you want to create /etc/host entries?
[2008/07/03 16:34:07] <Volcane> e^ipi: cos thats what host does
[2008/07/03 16:34:25] @ andrewcshafer joined channel #puppet
[2008/07/03 16:35:48] <Volcane> e^ipi: it seems you lack a lot of basic understanding of puppet, the kind that you can learn from the off-the-shelve book thats been published
[2008/07/03 16:36:00] <Volcane> e^ipi: and once you have that, the exported resources wiki page will make crystal clear sense
[2008/07/03 16:36:35] <Volcane> so i have to totally disagree about the doc situation and puppet with you :)
[2008/07/03 16:36:58] <Volcane> cos i can guarantee, if you have the book, used it, learned how it works, you'll not have this problem.
[2008/07/03 16:41:12] @ Quit: bk1: "Leaving."
[2008/07/03 16:41:20] @ bk1 joined channel #puppet
[2008/07/03 16:41:47] @ Quit: bk1: Read error: 104 (Connection reset by peer)
[2008/07/03 16:41:56] @ bk1 joined channel #puppet
[2008/07/03 16:44:46] @ Quit: meandtheshell: "Leaving."
[2008/07/03 16:45:14] @ Quit: bk1: Client Quit
[2008/07/03 16:45:33] @ bk1 joined channel #puppet
[2008/07/03 16:46:52] @ Quit: bk: Read error: 110 (Connection timed out)
[2008/07/03 16:52:59] @ Quit: bk1: "Leaving."
[2008/07/03 16:53:06] @ bk joined channel #puppet
[2008/07/03 16:53:37] @ Quit: bk: Client Quit
[2008/07/03 16:53:45] @ bk joined channel #puppet
[2008/07/03 16:53:49] @ Quit: andrewcshafer:
[2008/07/03 16:53:53] @ Quit: bk: Client Quit
[2008/07/03 16:54:02] @ bk joined channel #puppet
[2008/07/03 17:02:01] @ brscott left channel #puppet ()
[2008/07/03 17:02:14] @ Quit: penthief: "Leaving"
[2008/07/03 17:10:00] @ martha left channel #puppet ()
[2008/07/03 17:13:28] @ Quit: bk: Read error: 110 (Connection timed out)
[2008/07/03 17:16:12] @ kambiz joined channel #puppet
[2008/07/03 17:20:36] @ Quit: plathrop: Remote closed the connection
[2008/07/03 17:33:40] @ Quit: \ask_:
[2008/07/03 17:38:05] @ jamesttt left channel #puppet ()
[2008/07/03 17:38:25] @ andrewcshafer joined channel #puppet
[2008/07/03 17:38:30] @ fbe_ joined channel #puppet
[2008/07/03 17:39:45] @ Quit: andrewcshafer: Client Quit
[2008/07/03 17:50:56] @ Quit: fbe__: Read error: 110 (Connection timed out)
[2008/07/03 17:52:18] @ rizwank joined channel #puppet
[2008/07/03 17:54:25] @ andrewcshafer joined channel #puppet
[2008/07/03 17:57:31] @ Quit: cabbiepete:
[2008/07/03 18:06:12] @ henry joined channel #puppet
[2008/07/03 18:06:41] @ henry is now known as Guest33395
[2008/07/03 18:08:38] @ therealmonkey left channel #puppet ()
[2008/07/03 18:25:50] <gepetto> ::puppet:: Recipes/Authorized_keys edited by rainhead @ http://reductivelabs.com/trac/puppet/wiki/Recipes/Authorized_keys (by rainhead@gmail.com)
[2008/07/03 18:31:05] @ neh joined channel #puppet
[2008/07/03 18:59:44] @ Quit: shake-n-bake_:
[2008/07/03 19:05:37] @ keithlard joined channel #puppet
[2008/07/03 19:06:11] @ Quit: andrewcshafer:
[2008/07/03 19:07:02] @ Quit: keithlard: Client Quit
[2008/07/03 19:08:27] <jamesturnbull> lak: okay all the RtC patches are pushed
[2008/07/03 19:08:55] <jamesturnbull> lak: and then there were 5...
[2008/07/03 19:12:21] <lak> teh awesome
[2008/07/03 19:12:28] <lak> i assume you're ok with disabling the interface type
[2008/07/03 19:13:09] @ sigmonsays joined channel #puppet
[2008/07/03 19:13:41] <sigmonsays> any idea what this means: err: Could not retrieve catalog: end of file reache