Tuesday, 2008-07-15

[2008/07/15 00:00:13] @ pinguskahn left channel #puppet ()
[2008/07/15 00:01:54] @ Quit: shadoi:
[2008/07/15 00:14:19] @ Mode +o jamesturnbull by ChanServ
[2008/07/15 00:14:37] @ jamesturnbull set topic "Try Puppet 0.24.5RC2 (http://tinyurl.com/5puxly) | Welcome to Puppet on Redmine (http://tinyurl.com/48ek6g) | Please see http://snurl.com/1udr1 for channel guidelines"
[2008/07/15 00:15:24] @ Mode -o jamesturnbull by ChanServ
[2008/07/15 00:16:15] @ Quit: Demosthenes: Read error: 113 (No route to host)
[2008/07/15 00:23:07] @ hessml|away joined channel #puppet
[2008/07/15 00:36:51] @ Quit: hessml|away: "Leaving..."
[2008/07/15 00:38:30] @ Quit: lutter: "Leaving."
[2008/07/15 00:58:10] @ lutter joined channel #puppet
[2008/07/15 01:14:24] @ hessml|away joined channel #puppet
[2008/07/15 01:16:53] @ Quit: lutter: "Leaving."
[2008/07/15 01:20:03] <msf> jamesturnbull: hi
[2008/07/15 01:20:17] <jamesturnbull> msf: hi
[2008/07/15 01:20:54] <msf> just to let you know that some of the 0.24.5 regress tests fail on openbsd
[2008/07/15 01:21:06] <msf> I wil open a ticket later
[2008/07/15 01:21:33] <msf> it doesn't look like anything serious, mostly looks like tests that assume everything is a redhat machine
[2008/07/15 01:21:45] @ lutter joined channel #puppet
[2008/07/15 01:26:29] @ Quit: jdputsch:
[2008/07/15 01:33:51] <jamesturnbull> msf: sure
[2008/07/15 01:33:55] <jamesturnbull> msf: thanks for that
[2008/07/15 01:40:29] @ Quit: Kindred: Read error: 104 (Connection reset by peer)
[2008/07/15 01:40:40] @ Kindred joined channel #puppet
[2008/07/15 01:43:08] <jamesturnbull> msf: incidently which tests and can you pastie the results?
[2008/07/15 02:04:50] <msf> pastie: url me
[2008/07/15 02:05:02] <msf> crap.. pastie is down
[2008/07/15 02:07:59] <msf> http://pastie.org/233557
[2008/07/15 02:09:46] @ f--z joined channel #puppet
[2008/07/15 02:10:17] <jamesturnbull> msf: thanks - at least one of those was just introduced
[2008/07/15 02:10:19] <jamesturnbull> msf: crap
[2008/07/15 02:10:51] <jamesturnbull> msf: and here comes RC3... :P
[2008/07/15 02:12:27] <msf> ok
[2008/07/15 02:12:35] <msf> how soon ?
[2008/07/15 02:12:50] <msf> before I start mailing out diffs of rc2 to openbsd testers :-P
[2008/07/15 02:13:46] <jamesturnbull> msf: ummm it'll be a little while - probably tomorrow - I need to debug those a bit more - I am fairly sure two tests are failing because of some changes in RC2. Did you get similar results for RC1?
[2008/07/15 02:15:24] @ Quit: silent-ion: Remote closed the connection
[2008/07/15 02:19:02] <msf> yes
[2008/07/15 02:19:27] <msf> I can get you those result too if you want
[2008/07/15 02:19:35] @ thegcat joined channel #puppet
[2008/07/15 02:33:26] @ Quit: f--z: Read error: 110 (Connection timed out)
[2008/07/15 02:34:14] <msf> uh... is one of the problems of rc2 that all the example configuration files disappeared ?
[2008/07/15 02:38:18] @ Quit: hessml|away: "Leaving..."
[2008/07/15 02:45:56] @ ski98033 joined channel #puppet
[2008/07/15 02:49:58] <mcbride> rc1 regress results: http://pastie.org/233567
[2008/07/15 02:52:53] <jamesturnbull> msf: no they've moved up one directory
[2008/07/15 02:53:08] <jamesturnbull> puppet/examles now contains them
[2008/07/15 02:54:08] <tim|imac> exam-less... nice definition :)
[2008/07/15 02:54:41] <jamesturnbull> puppet/examples
[2008/07/15 02:55:07] <jamesturnbull> tim|imac: p key stuck on Mac a little
[2008/07/15 02:55:50] <tim|imac> exam-less is better, i think :D we don't take examinations! makes me think of pink floyd
[2008/07/15 02:56:39] <tim|imac> sorry, haven't had my morning coffee yet, feel free to ignore me
[2008/07/15 02:57:17] <msf> axtually.. the puppet.conf samples are in ext/root/puppet now
[2008/07/15 02:58:04] @ f--z joined channel #puppet
[2008/07/15 03:00:56] <jamesturnbull> msf: ah
[2008/07/15 03:01:00] <jamesturnbull> msf: do you use those?
[2008/07/15 03:01:16] <jamesturnbull> msf: we didn't think anyone still did
[2008/07/15 03:01:19] <msf> we install them as the default configs
[2008/07/15 03:01:52] <msf> it's ok, it's not hard to adapt the port to fetch the stuff from there
[2008/07/15 03:02:35] <jamesturnbull> msf: no no
[2008/07/15 03:02:50] <jamesturnbull> msf: I'll put them somewhere sensible if you use them
[2008/07/15 03:02:58] <jamesturnbull> perhaps examples/etc?
[2008/07/15 03:03:01] <jamesturnbull> msf: that suit?
[2008/07/15 03:03:02] <msf> sure
[2008/07/15 03:03:09] <msf> that would be great
[2008/07/15 03:03:45] <msf> hey I was wondering if you guys had any plans to allow embedded documentation in module files
[2008/07/15 03:04:00] <msf> so you could extract documentation with pi
[2008/07/15 03:04:18] <msf> that would be really handy
[2008/07/15 03:05:52] @ Quit: n5red-7: Remote closed the connection
[2008/07/15 03:06:47] <jamesturnbull> msf: there is the intent
[2008/07/15 03:06:52] <jamesturnbull> msf: but no definite plans as yet
[2008/07/15 03:07:34] @ Quit: ski98033: "Leaving."
[2008/07/15 03:13:01] @ groove left channel #puppet ()
[2008/07/15 03:16:29] @ aymerick joined channel #puppet
[2008/07/15 03:31:34] @ exit237 left channel #puppet ()
[2008/07/15 03:35:16] <jamesturnbull> msf: mcbride: thanks for those test results - it appears the tests were broken in rc1 too
[2008/07/15 03:43:34] @ lak joined channel #puppet
[2008/07/15 03:44:20] @ kolla_ joined channel #puppet
[2008/07/15 03:44:59] @ andrewcshafer joined channel #puppet
[2008/07/15 04:04:29] @ meandtheshell joined channel #puppet
[2008/07/15 04:27:58] @ jdputsch joined channel #puppet
[2008/07/15 04:28:29] @ Quit: jdputsch: Client Quit
[2008/07/15 04:31:34] @ \ask__ joined channel #puppet
[2008/07/15 04:31:35] @ Quit: \ask_: Read error: 104 (Connection reset by peer)
[2008/07/15 04:31:56] @ Quit: \ask__: Read error: 104 (Connection reset by peer)
[2008/07/15 04:32:41] @ \ask_ joined channel #puppet
[2008/07/15 04:36:54] @ Quit: \ask_: Read error: 104 (Connection reset by peer)
[2008/07/15 04:37:20] @ \ask_ joined channel #puppet
[2008/07/15 04:37:47] @ pleemans joined channel #puppet
[2008/07/15 04:41:10] @ Quit: lak:
[2008/07/15 04:41:28] @ Quit: andrewcshafer:
[2008/07/15 04:58:45] @ mykilx joined channel #puppet
[2008/07/15 04:58:52] @ Quit: mikearr_: Read error: 110 (Connection timed out)
[2008/07/15 04:59:42] @ mdray joined channel #puppet
[2008/07/15 05:11:05] @ Quit: \ask_:
[2008/07/15 05:12:45] @ Quit: realist: Read error: 110 (Connection timed out)
[2008/07/15 05:18:46] @ \ask_ joined channel #puppet
[2008/07/15 05:19:42] @ Quit: thegcat:
[2008/07/15 05:28:53] <DerekW> jamesturnbull: 0.24.5RC2 works well with our config
[2008/07/15 05:30:44] @ Quit: f--z: "KVIrc 3.2.5 Anomalies http://www.kvirc.net/"
[2008/07/15 05:43:15] @ realist joined channel #puppet
[2008/07/15 06:17:46] <jamesturnbull> DerekW: excellent thanks
[2008/07/15 06:20:43] <DerekW> jamesturnbull: Just found some funnies with functions... checking
[2008/07/15 06:23:22] <jamesturnbull> DerekW: funnies?
[2008/07/15 06:27:00] @ Quit: \ask_:
[2008/07/15 06:29:06] <DerekW> jamesturnbull: Functions cleared, but now noticed my authorizedkeys type doesn't work any more
[2008/07/15 06:29:34] <DerekW> jamesturnbull: I see a shipped ssh_authorized_key which makes me roll my eyes at the Bank's policy of now allowing commit-backs
[2008/07/15 06:29:42] @ roald joined channel #puppet
[2008/07/15 06:29:45] <DerekW> But anyway, mine is hanging. Still investigating.
[2008/07/15 06:33:35] @ f--z joined channel #puppet
[2008/07/15 06:37:41] @ ortanc joined channel #puppet
[2008/07/15 06:38:14] <ortanc> puppet
[2008/07/15 06:38:15] <DerekW> Damn my interlinked modules...
[2008/07/15 06:38:22] <ortanc> puppet
[2008/07/15 06:40:48] @ Quit: ortanc: K-lined
[2008/07/15 06:41:00] <jamesturnbull> thanks for that ortanc
[2008/07/15 06:41:18] @ dysinger left channel #puppet ()
[2008/07/15 06:46:47] <DerekW> jamesturnbull: It's probably me being a muppet
[2008/07/15 06:51:27] @ DerekW_ joined channel #puppet
[2008/07/15 06:52:56] @ Quit: DerekW: "Leaving"
[2008/07/15 06:54:15] <DerekW_> jamesturnbull: I think it arose from an incomplete cleaning of old puppet before installing 0.24.5RC2
[2008/07/15 07:17:10] @ Quit: totalchaos: "Ex-Chat"
[2008/07/15 07:21:53] <jamesturnbull> DerekW_: thanks
[2008/07/15 07:23:11] @ a-priori joined channel #puppet
[2008/07/15 07:32:52] @ Quit: f--z: Read error: 110 (Connection timed out)
[2008/07/15 07:36:25] <duritong> jamesturnbull: question: did anything change with the redhat service provider onto the version 0.24.5 ?
[2008/07/15 07:38:29] <mdray> anyone else seen "Could not create PID file: /var/run/puppet/puppetd.pid" when using puppet to restart puppet?
[2008/07/15 07:38:41] <duritong> permissions
[2008/07/15 07:39:24] <mdray> enh
[2008/07/15 07:39:48] <jamesturnbull> duritong: between it and what version?
[2008/07/15 07:39:51] <mdray> puppet running as root, /var/run/puppet mode 1777, pid file mode 644 and owned by root
[2008/07/15 07:42:05] <duritong> 0.24.4
[2008/07/15 07:42:23] <duritong> ah I found the changelog in the gitrepo
[2008/07/15 07:45:41] <mdray> does puppet drop privilieges somewhere? ps lists it as root but i still get pidfile problems
[2008/07/15 07:45:55] <jamesturnbull> duritong: there was osme change - we moved away from calling the init scripts themselves and using /sbin/service
[2008/07/15 07:46:40] <duritong> ah ok
[2008/07/15 07:46:53] <Volcane> mdray: rpm -q puppet
[2008/07/15 07:46:58] <Volcane> mdray: are you using the selinux ones?
[2008/07/15 07:47:11] <duritong> hmm sometimes it looks like the service isn't really restarted to me
[2008/07/15 07:47:18] <mdray> epel
[2008/07/15 07:47:19] <mdray> puppet-0.24.4-1.el5
[2008/07/15 07:47:41] <Volcane> saw that with selinux ones, what is your selinux policy?
[2008/07/15 07:47:49] <duritong> jamesturnbull: but i have to examine if /sbin/service really behaves the same as running the init.d script
[2008/07/15 07:48:03] <mdray> the running pid file is puppetd.pid but the init specifies puppet.pid (no d)
[2008/07/15 07:48:16] <mdray> volcane: no selinux!
[2008/07/15 07:50:28] <jamesturnbull> duritong: using /sbin/service runs in the script in the right selinux context
[2008/07/15 07:50:39] <duritong> yeah this is fine
[2008/07/15 07:50:52] <duritong> but i'm not using selinux (currently)
[2008/07/15 07:50:59] <duritong> so this doesn't seem to be the problem
[2008/07/15 07:51:11] <jamesturnbull> duritong: sorry - what's the actual issue?
[2008/07/15 07:51:15] @ silent-ion joined channel #puppet
[2008/07/15 07:51:26] <duritong> no
[2008/07/15 07:52:07] @ ski98033 joined channel #puppet
[2008/07/15 07:52:23] <jamesturnbull> duritong: "no"? :)
[2008/07/15 07:53:17] <duritong> the problem is that I have a notify for the service and puppet tells me that it is refreshed
[2008/07/15 07:53:35] <duritong> however for example for shorewall the new rules didn't apply
[2008/07/15 07:53:59] <duritong> but if I do then the restart manually right after I run puppet, they get applied
[2008/07/15 07:54:18] <duritong> so for me it looked like refresh didn't work correctly
[2008/07/15 07:54:29] <jamesturnbull> duritong: okay - let's take a look
[2008/07/15 07:54:34] <duritong> and I had this now with 3 different services on 3 different machines
[2008/07/15 07:55:42] <jamesturnbull> duritong: hmmm so a refresh should run resatrt
[2008/07/15 07:55:44] <jamesturnbull> restart
[2008/07/15 07:55:54] <jamesturnbull> duritong: do you have a --debug of a run?
[2008/07/15 07:56:04] @ pdt joined channel #puppet
[2008/07/15 07:56:13] <duritong> jamesturnbull: no but I can provide one
[2008/07/15 07:56:18] <jamesturnbull> duritong: thanks
[2008/07/15 07:56:32] <duritong> give me some minutes
[2008/07/15 07:56:59] <jamesturnbull> duritong: nw
[2008/07/15 08:01:32] <ska-fan_> Puppet::Parser::AST::Resource failed with error ArgumentError: Duplicate definition: Package[munin-node] is already defined in file /etc/puppet/modules/munin-node/manifests/init.pp at line 5; cannot redefine at /etc/puppet/manifests/templates.pp:41 on node white
[2008/07/15 08:02:09] <Volcane> you have package{"munin-node":... } twice
[2008/07/15 08:02:10] <ska-fan_> I basically have two classes with an exec with require => Package['munin-node']
[2008/07/15 08:02:10] <Volcane> cant
[2008/07/15 08:02:23] <duritong> jamesturnbull: have a meeting, but will try later
[2008/07/15 08:02:30] <Volcane> you can require it many times, but the error suggest you have it defined twice
[2008/07/15 08:02:31] <ska-fan_> and both have package {"munin-node"}, yes.
[2008/07/15 08:02:37] <ska-fan_> ok
[2008/07/15 08:03:18] <ska-fan_> in one class when I require munin-node (the name of the class with package{'munin-node'}), will that execute before all the other stuff in the class?
[2008/07/15 08:03:33] <ska-fan_> my mysql class requires munin-node
[2008/07/15 08:03:34] @ Quit: ski98033: "Leaving."
[2008/07/15 08:03:57] <Volcane> yes, if you have requires everywhere it will make sure it gets done before
[2008/07/15 08:04:50] <ska-fan_> require => munin-node
[2008/07/15 08:05:02] <ska-fan_> is that the syntax, if the class name was munin-node ?
[2008/07/15 08:05:15] <Volcane> Class[munin-node]
[2008/07/15 08:05:21] <ska-fan_> ok, thanks
[2008/07/15 08:06:39] <ska-fan_> ok. I have the class munin-node defined in another file, so I guess I have to include it in class mysql.
[2008/07/15 08:07:19] <ska-fan_> earlier, I have used include inside a class to add stuff to a class. for example I have a class base and it includes class vim. whenever I installed class base, it also installed vim, and that's what I wanted.
[2008/07/15 08:07:33] <Volcane> yip, sounds right
[2008/07/15 08:07:38] <ska-fan_> so I'm not sure whether include is right here for the mysql class to have the munin-node class available
[2008/07/15 08:07:38] <Volcane> you can include something many times
[2008/07/15 08:07:53] <ska-fan_> what's the effect of including something inside a class?
[2008/07/15 08:08:03] <Volcane> and that wont cause hassles, so if you wrap your package install things in a class, then include that wherever u need it then it will be fine
[2008/07/15 08:09:08] <ska-fan_> ok, I'll try the corresponding changes, thanks
[2008/07/15 08:11:14] <ska-fan_> hrm, I'm getting a similar error now, but with exec instead of packages.
[2008/07/15 08:11:25] <ska-fan_> let me assemble a paste.
[2008/07/15 08:11:57] <jamesturnbull> duritong: sure - it's late here so I might be gone but feel free to email me or log a ticker
[2008/07/15 08:12:01] <jamesturnbull> ticket
[2008/07/15 08:13:46] <mdray> moving a client from one environment to another doesn't generate a new client cert, does it?
[2008/07/15 08:14:01] <lazzurs> Hello, I just noticed the gem package support in puppet, does this mean that puppet is looking to support packages from systems like cpan and pear as well? or a better question to ask would be would they be accepted as package types?
[2008/07/15 08:14:58] <fsweetser> if you can write a provider, probably
[2008/07/15 08:15:31] <ska-fan_> I have two classes mysql and postgresql, one installs mysql and one postgresql. after installing both, I need to execute munin-node-configure. I cannot use exec in both classes because I get duplicate definition of exec('munin-node-configure') then. How do I do that correctly?
[2008/07/15 08:19:03] @ Quit: a-priori:
[2008/07/15 08:21:03] <Volcane> you can notify Exec["configure-munin"]
[2008/07/15 08:25:07] @ keithlard joined channel #puppet
[2008/07/15 08:30:31] <ska-fan_> ok, so when I notify an exec type, it is executed.
[2008/07/15 08:30:48] <ska-fan_> when I notify a service, it is restarted.
[2008/07/15 08:32:10] @ Quit: pdt: Read error: 110 (Connection timed out)
[2008/07/15 08:32:37] <ska-fan_> and the wiki says that I can have multiple exec instances with the same name
[2008/07/15 08:34:59] @ a-priori joined channel #puppet
[2008/07/15 08:43:38] @ pdt joined channel #puppet
[2008/07/15 08:44:24] @ Quit: a-priori:
[2008/07/15 08:47:34] @ Quit: pdt: Client Quit
[2008/07/15 08:57:10] <ska-fan_> Could not parse for environment development: Syntax error at '}'; expected '}' at /etc/puppet/modules/munin-node/manifests/init.pp:7
[2008/07/15 08:57:13] <ska-fan_> great :)
[2008/07/15 08:57:45] <mdray> volcane?
[2008/07/15 08:58:47] <ska-fan_> error was that I wrote service { "munin-node" } instead of service { "munin-node": }
[2008/07/15 08:58:54] <mdray> haha
[2008/07/15 08:59:04] <mdray> yeah we've all been there :~)
[2008/07/15 09:09:22] <duritong> jamesturnbull: ping
[2008/07/15 09:20:50] <ashp> Hmm, interesting mail about performance when doing require => Class
[2008/07/15 09:21:06] <ashp> that makes a lot of sense, i don't think i stumbled into that as I've never required a class, only specific bits within
[2008/07/15 09:22:10] <duritong> i didn't yet get the whole point about it, but just struggling with another problem
[2008/07/15 09:26:28] * Volcane likes requiring classes
[2008/07/15 09:39:12] @ jdputsch joined channel #puppet
[2008/07/15 09:39:57] @ Quit: jdputsch: Client Quit
[2008/07/15 09:48:21] @ f--z joined channel #puppet
[2008/07/15 09:50:46] <Disconnect> what do people do to roll out package updates? pondering a 'package updater' class that just specifies specific updates (and uses environments) but thats probably the wrong way..
[2008/07/15 09:51:40] <Volcane> yeah not doing that through puppet atm
[2008/07/15 09:52:29] <jamesturnbull> duritong: here briefly
[2008/07/15 09:55:21] @ martha joined channel #puppet
[2008/07/15 09:58:25] <machpo> duritong: i'm seeing this too with a couple of services on rh5
[2008/07/15 10:07:05] <lazzurs> Volcane: what is the difference between require and include on a class in puppet?
[2008/07/15 10:08:14] @ Quit: pjw:
[2008/07/15 10:09:43] <fsweetser> I believe that include brings that class in, while require specifies ordering
[2008/07/15 10:10:33] <mdray> thing { require => class } means class is applied before thing
[2008/07/15 10:10:38] <lazzurs> is anyone here using apt through puppet on rpm based systems ?
[2008/07/15 10:10:46] @ Quit: MaliutaLap: Read error: 113 (No route to host)
[2008/07/15 10:11:43] @ Quit: markl_: Remote closed the connection
[2008/07/15 10:11:46] @ markl_ joined channel #puppet
[2008/07/15 10:12:02] @ winrefund joined channel #puppet
[2008/07/15 10:12:07] <winrefund> hello
[2008/07/15 10:12:45] <winrefund> does anyone see a problem with these classes? Error is on the bottom of the page
[2008/07/15 10:12:49] <winrefund> http://pastebin.com/d64c1639d
[2008/07/15 10:13:10] <Volcane> lazzurs: something should be included before it can be used at all, requiring it makes sure it happens first
[2008/07/15 10:14:13] <mdray> where do i start to troubleshoot my mysteriously not-matching signed cert
[2008/07/15 10:15:15] <mdray> 1) bring client up in bootstrap env, 2) sign cert on master, 3) client bootstraps, 4) client puppet restarts, 5) "err: Certificate request does not match existing certificate"
[2008/07/15 10:15:32] <mdray> 4) restarts in production env, sorry
[2008/07/15 10:15:59] <Volcane> its like its trying to request a new sign?
[2008/07/15 10:16:17] <Volcane> run each step with verbose trace etc and see what it says is about the most useful thing there
[2008/07/15 10:18:55] @ ski98033 joined channel #puppet
[2008/07/15 10:20:59] <mdray> hmph
[2008/07/15 10:21:00] <mdray> o
[2008/07/15 10:21:02] <mdray> k
[2008/07/15 10:27:16] <mdray> argh
[2008/07/15 10:27:18] <mdray> got it
[2008/07/15 10:32:18] <lazzurs> ok, how can I change the package provider on a global basis? sorry if I missed it in the docs
[2008/07/15 10:33:57] <mdray> in site.pp
[2008/07/15 10:34:08] <winrefund> Package { provider = foo; }
[2008/07/15 10:34:09] <mdray> Package { provider => foo }
[2008/07/15 10:34:10] <winrefund> I think
[2008/07/15 10:34:15] <winrefund> no ;
[2008/07/15 10:34:16] <winrefund> heh
[2008/07/15 10:35:03] <lazzurs> excellent, thanks guys, I presume I can do the same for just one class as well?
[2008/07/15 10:35:11] <mdray> yep
[2008/07/15 10:35:17] <lazzurs> that is very nice :)
[2008/07/15 10:35:28] * lazzurs is once again impressed with puppet
[2008/07/15 10:35:37] <lazzurs> yum sucks, but at least puppet works :)
[2008/07/15 10:36:02] <mdray> what's up with yum?
[2008/07/15 10:38:11] <lazzurs> mdray: it does not allow downgrades and when you add the plugin in it still does not behave as it should
[2008/07/15 10:38:23] <mdray> heh
[2008/07/15 10:40:09] @ lak joined channel #puppet
[2008/07/15 10:40:26] <winrefund> http://pastebin.com/d64c1639d
[2008/07/15 10:40:32] <riddley> it's way worse than all that
[2008/07/15 10:40:38] <riddley> searching is _horrible_
[2008/07/15 10:40:40] <winrefund> anyone see a problem with that? Error is on the bottom of the page
[2008/07/15 10:40:51] <riddley> it's slow as a dog
[2008/07/15 10:41:02] <riddley> it has no reverse-deps
[2008/07/15 10:41:12] <riddley> yum is awful
[2008/07/15 10:41:29] <lazzurs> riddley: indeed
[2008/07/15 10:41:45] <lazzurs> riddley: so I am replacing with apt across our systems
[2008/07/15 10:41:56] <riddley> replace it with debian :)
[2008/07/15 10:42:17] <riddley> rpm stands for Really Pathetic Managment
[2008/07/15 10:42:38] <kjetilho> riddley: it's OK in Fedora 7 or higher, or RHEL 5 or higher
[2008/07/15 10:42:53] <riddley> kjetilho, it?
[2008/07/15 10:42:59] <kjetilho> yum
[2008/07/15 10:43:02] @ Quit: raphink: Connection reset by peer
[2008/07/15 10:43:11] <riddley> no way
[2008/07/15 10:43:16] <riddley> we run rhel4 and 5
[2008/07/15 10:43:18] <kjetilho> RPM has always been *way* superior to DEB :)
[2008/07/15 10:43:24] <riddley> wait a minute
[2008/07/15 10:43:31] <riddley> yum isn't official in rhel4
[2008/07/15 10:43:41] <riddley> in what way is it superior?
[2008/07/15 10:43:52] <kjetilho> usability of the tools
[2008/07/15 10:44:02] <riddley> what are you smoking?
[2008/07/15 10:44:05] <kjetilho> building of packages
[2008/07/15 10:44:27] <lazzurs> on the building of packages I would agree that it is easier in rpm/redhat land
[2008/07/15 10:44:29] <riddley> I couldn't disagree more :)
[2008/07/15 10:44:30] <hacim> o_O
[2008/07/15 10:44:54] <lazzurs> but the rest I could not agree with riddley more
[2008/07/15 10:45:17] <kjetilho> "which program to check versions? to build a package? to show description? to verify installation isn't corrupt?"
[2008/07/15 10:45:31] <kjetilho> it's atrocious that debsums is an optional extra
[2008/07/15 10:45:34] <riddley> I find building debs to be as easy as anything and they're far more interactive and have more options.
[2008/07/15 10:45:37] <kjetilho> and it doesn't even cover all packages
[2008/07/15 10:45:51] <kjetilho> interaction when installing packages is a bug, not a feature
[2008/07/15 10:46:00] <riddley> yea go use a mac
[2008/07/15 10:46:05] <riddley> some people like choice :)
[2008/07/15 10:46:09] <lazzurs> kjetilho: interaction?
[2008/07/15 10:46:20] <kjetilho> being prompted for answers
[2008/07/15 10:46:34] @ jvanzyl joined channel #puppet
[2008/07/15 10:46:47] <kjetilho> not all DEB packages support non-interactive installation
[2008/07/15 10:47:02] <riddley> for instance?
[2008/07/15 10:47:25] <Volcane> kjetilho: totally agree
[2008/07/15 10:47:36] <kjetilho> riddley: sorry, I don't have a package name ready
[2008/07/15 10:47:37] <lazzurs> kjetilho: I think you will find that you can do a non-interactive install for all applications, but some will not be configured if that is the case
[2008/07/15 10:47:50] <lazzurs> s/applications/packages
[2008/07/15 10:48:30] <riddley> kjetilho, we do all of our debian installs automated and I've never seen a package like you describe
[2008/07/15 10:48:53] <lazzurs> but TBH I think the reason that people who do find deb 'better' than rpm has a lot more to do with debian policy than the packaging tool used
[2008/07/15 10:49:25] <kjetilho> consistent naming of packages is much better in Debian
[2008/07/15 10:49:33] <kjetilho> (although they can be painful at times :)
[2008/07/15 10:49:39] <riddley> I agree that policy has a lot to do with it, but I'm shocked (seriously) to discover that anyone thinks that RPM's tools are better than the dpkg/apt tools
[2008/07/15 10:49:40] <Disconnect> kjetilho: they all use debconf, and its somewhat annoying to automate the answers its possible
[2008/07/15 10:50:01] <riddley> but then I also can't wrap my head around thinking choice is a bad thing, so I guess I lose
[2008/07/15 10:50:13] <kjetilho> Disconnect: ok, perhaps I'm spewing old info, not all packages used debinfo before
[2008/07/15 10:50:38] <fsweetser> having choice can be good, but being forced to choose (rather than having the package just do something sane) can be very bad
[2008/07/15 10:50:39] <kjetilho> eh, s/debinfo/debconf
[2008/07/15 10:51:11] <riddley> the package will always do something sane
[2008/07/15 10:51:22] <riddley> if you don't like choice, reconfigure debconf to never ask you
[2008/07/15 10:51:22] <kjetilho> yes, but not if you ask the user
[2008/07/15 10:51:42] <riddley> kjetilho, it's not like there aren't defaults and "If you don't know, choose blah" message
[2008/07/15 10:51:43] <riddley> s
[2008/07/15 10:51:51] <riddley> garbage in garbage out
[2008/07/15 10:51:54] * lazzurs really did not mean to start a flame war
[2008/07/15 10:52:11] <fsweetser> riddley: that's certainly fine for manually installed stuff
[2008/07/15 10:52:13] @ glaw joined channel #puppet
[2008/07/15 10:52:26] <lazzurs> I guess the $x sucks really was just lighting the flame thrower, sorry people :)
[2008/07/15 10:52:30] <fsweetser> but for provisioning tons of systems, it just adds more things to hack around in puppet
[2008/07/15 10:52:40] <fsweetser> lazzurs: it's an old flamewar anyways =)
[2008/07/15 10:52:46] <riddley> fsweetser, manually as opposed to ?
[2008/07/15 10:53:01] <riddley> oh
[2008/07/15 10:53:07] <riddley> I don't follow that logic
[2008/07/15 10:53:27] <riddley> if an rpm made a bad choice for you, would that be fewer things to manage with puppet?
[2008/07/15 10:53:29] <fsweetser> sitting down and installing a package yourself, vs just adding a package to a puppet manifest
[2008/07/15 10:53:50] <fsweetser> thing is, rpm doesn't ask for choices
[2008/07/15 10:54:03] <fsweetser> you never have to worry about an installation cycle hanging waiting for input
[2008/07/15 10:54:05] <riddley> right it's about choice at install time vs not... and since the packages have defaults, they're in effect making a choice for you if the install is non-interactive, right?
[2008/07/15 10:54:13] @ Quit: glaw: Remote closed the connection
[2008/07/15 10:54:25] <lazzurs> fsweetser: however would you still not want anything your configuration depends on being defined in puppet rather than relying on the 'current' defaults?
[2008/07/15 10:54:29] <fsweetser> if you can make the debs always be non-interactive, than that's great, and my argument goes away completely
[2008/07/15 10:54:33] @ glaw joined channel #puppet
[2008/07/15 10:54:34] <riddley> that is to say they're functionally equivalent (when it comes to making/asking for choices) during a non-interactive install
[2008/07/15 10:54:47] <riddley> You've never used debian.
[2008/07/15 10:54:59] <riddley> non-interactive installs don't ask questions.
[2008/07/15 10:55:08] <riddley> so it'll never "hang"
[2008/07/15 10:55:10] <fsweetser> I haven't used it for awhile, but I have in the past
[2008/07/15 10:55:19] <fsweetser> then that's an improvement, which is great
[2008/07/15 10:55:56] <riddley> I've been using debian since 96 and I've never seen a package that would "hang" waiting for input that wasn't installed interactively
[2008/07/15 10:56:05] <fsweetser> I've seen this issue pop up in other contexts as well, where (arguably broken) packages would not install without some degree of user input
[2008/07/15 10:56:16] <fsweetser> it's quite possible that those packages were just poorly done
[2008/07/15 10:56:27] <kjetilho> riddley: then you've been lucky. this was a known problem in Woody
[2008/07/15 10:56:34] <riddley> kjetilho, show me
[2008/07/15 10:56:34] <kjetilho> it was deemed not RC
[2008/07/15 10:56:43] <kjetilho> search the mailing list
[2008/07/15 10:56:47] <fsweetser> this in turn would lead to the argument that even allowing the possability of user input is a questionable design choice
[2008/07/15 10:56:51] <kjetilho> debconf was not mandatory for Woody
[2008/07/15 10:56:51] <riddley> heh no you!
[2008/07/15 10:57:26] <kjetilho> in any case, I trust you're right it's a moot point now
[2008/07/15 10:58:18] <lazzurs> fsweetser: I really don't mean to be a pain here, but could you comment on my query. The reason I ask is I spend a lot of time studying configuration management theory and this is something I cannot get my head around, why anyone would use configuration management but not map out all of their required configurations in configuration management
[2008/07/15 10:58:27] <riddley> well in any case, modern dpkg/apt vs modern rpm+{yum,apt,up2date,w/e} I'll choose dpkg/apt every time because the tools are bazzilions of times better
[2008/07/15 10:58:56] @ markl__ joined channel #puppet
[2008/07/15 10:59:12] <lazzurs> this goes back to why I am switching to apt on an rpm based system. with apt I can ensure that a configuration I write in puppet will be put into place, with yum I cannot ensure that, making a joke of configuration management IMHO
[2008/07/15 10:59:19] <fsweetser> lazzurs: you would.
[2008/07/15 10:59:26] <fsweetser> it's not a question of the final result
[2008/07/15 10:59:33] <kjetilho> riddley: stuff like having to set COLUMNS for dpkg is just broken
[2008/07/15 10:59:46] <fsweetser> it's just hte problem that requiring user interaction as part of the installation process can be a royal PITA for automation
[2008/07/15 10:59:53] <riddley> kjetilho, wha?
[2008/07/15 11:00:04] <fsweetser> obviously you should have puppet manage any aspects of the final config that you care about
[2008/07/15 11:00:13] <riddley> fsweetser, how many times can I say _no package requires user interaction_ ?
[2008/07/15 11:00:18] <kjetilho> riddley: if you don't set it wide enough, columns are truncated
[2008/07/15 11:00:30] <fsweetser> riddley: as I said before, if that's so *great*
[2008/07/15 11:00:33] <riddley> kjetilho, what columns?
[2008/07/15 11:00:42] <fsweetser> that hasn't been my experience before, and I've seen other people run into it
[2008/07/15 11:00:49] <kjetilho> in contrast, rpm has --queryformat so you don't need awk or cut
[2008/07/15 11:00:51] <riddley> fsweetser, I'd love to know more
[2008/07/15 11:00:53] <fsweetser> if it's no longer the case, then as I said, my argument is gone
[2008/07/15 11:00:56] <kjetilho> riddley: dpkg -l
[2008/07/15 11:01:04] <fsweetser> it's been awhile, so I can easily believe my experience is out of date
[2008/07/15 11:01:05] <riddley> kjetilho, aah
[2008/07/15 11:01:16] <fsweetser> and I will happily defer to current debian users on the current state
[2008/07/15 11:01:51] <riddley> kjetilho, so teach me the cool things for yum
[2008/07/15 11:01:55] <riddley> for instance
[2008/07/15 11:02:05] <riddley> if I want to search for a package and know what version will be installed
[2008/07/15 11:02:08] <riddley> how do I do that?
[2008/07/15 11:02:10] @ Quit: lak:
[2008/07/15 11:02:14] <riddley> or see what dependencies it'll need
[2008/07/15 11:02:15] <duritong> how did people solve the signing problem when using mongrel and something (/me nginx) fronted?
[2008/07/15 11:03:01] <lazzurs> fsweetser: you would?
[2008/07/15 11:03:02] <riddley> or see a long description of a package
[2008/07/15 11:03:16] <ashp> Hmm, there's a way to just do test runs without changing anything right?
[2008/07/15 11:03:26] <riddley> ashp --noop
[2008/07/15 11:03:30] <ashp> aha, noop, that's it
[2008/07/15 11:03:53] <kjetilho> yum info PACKAGE ?
[2008/07/15 11:03:54] <ashp> my coworker made a bunch of changes outside of puppet
[2008/07/15 11:04:05] <ashp> so now i have to run --noop on some boxes to see what might change
[2008/07/15 11:04:07] @ dysinger joined channel #puppet
[2008/07/15 11:04:12] @ Quit: kolla_: Remote closed the connection
[2008/07/15 11:04:23] <riddley> info doesn't show deps
[2008/07/15 11:04:41] <riddley> is there any way at all to get reverse deps?
[2008/07/15 11:05:09] <kjetilho> if it's installed, you use rpm -q --requires
[2008/07/15 11:05:27] <kjetilho> if you have the RPM, you use -p FILE of course
[2008/07/15 11:05:34] <riddley> what if it isn't?
[2008/07/15 11:06:17] <kjetilho> then you download the RPM :)
[2008/07/15 11:06:36] <riddley> yea that's completely unacceptable
[2008/07/15 11:06:46] <kjetilho> uh-huh
[2008/07/15 11:06:59] <riddley> not knowing what something needs before you install it?
[2008/07/15 11:06:59] <lazzurs> riddley: well it can use http locations, but yea, not as nice as it could be
[2008/07/15 11:07:03] <riddley> gimme a break
[2008/07/15 11:07:13] <kjetilho> riddley: I said download, not install
[2008/07/15 11:07:25] <riddley> I know what you said
[2008/07/15 11:07:43] <riddley> what's the point of having a package management system if you have to look at the packages as files?
[2008/07/15 11:07:48] * lazzurs will keep my mouth shut next time ;)
[2008/07/15 11:07:55] <riddley> hell even HP-UX' Ignite is better than that
[2008/07/15 11:08:03] <kjetilho> riddley: so tell me, how do I use APT to download the packages to fix a specific CVE_
[2008/07/15 11:08:06] <kjetilho> ?
[2008/07/15 11:08:20] <Volcane> this is what yum or apt-rpm is for
[2008/07/15 11:08:21] <riddley> I don't know what CVE_ is
[2008/07/15 11:08:54] <Volcane> because what you're asking is like how do you install from remote a package and all its dependencies using dpkg
[2008/07/15 11:09:03] <kjetilho> CVE is a unique identifier for a vulnerability
[2008/07/15 11:09:29] <riddley> I'm completely unfamilliar
[2008/07/15 11:09:31] <riddley> sorry
[2008/07/15 11:09:40] @ eventi_ joined channel #puppet
[2008/07/15 11:10:59] @ Quit: eventi_: "Trillian (http://www.ceruleanstudios.com"
[2008/07/15 11:11:15] @ eventi joined channel #puppet
[2008/07/15 11:12:06] <eventi> i have a service that refuses to restart and puppetd always thinks it's not running
[2008/07/15 11:12:15] <eventi> where should I start debugging
[2008/07/15 11:12:16] <eventi> ?
[2008/07/15 11:12:23] <riddley> what provider is it using?
[2008/07/15 11:12:50] <Volcane> eventi: look at hasrestart and hasstatus etc, by default puppet looks with ps for service name
[2008/07/15 11:13:25] <riddley> that depends on the provider actually, Volcane
[2008/07/15 11:13:37] <eventi> it's on redhat - how can i tell the provider?
[2008/07/15 11:13:45] <riddley> redhat uses the init provider
[2008/07/15 11:13:49] <riddley> does the init script work?
[2008/07/15 11:13:52] <mdray> eventi: what is the return code for the 'status' call?
[2008/07/15 11:14:00] <riddley> if you run it with a 'status' argument?
[2008/07/15 11:14:15] <eventi> one sec
[2008/07/15 11:14:41] <eventi> zabbix_agentd (pid 14696 14695 14694 14693 14692 14691) is running...
[2008/07/15 11:14:46] <eventi> oh return code
[2008/07/15 11:15:04] <eventi> $? is 0
[2008/07/15 11:15:46] <mdray> hm
[2008/07/15 11:15:48] <Volcane> and whats the service name?
[2008/07/15 11:15:50] <mdray> that's right
[2008/07/15 11:15:57] <eventi> zabbix-agent
[2008/07/15 11:16:08] <mdray> what if it's not running?
[2008/07/15 11:16:10] <Volcane> so my answer was correct
[2008/07/15 11:16:19] <eventi> it's /etc/init.d/zabbix-agent status
[2008/07/15 11:16:53] <eventi> returns code 3 when stopped
[2008/07/15 11:16:59] <mdray> ok
[2008/07/15 11:17:19] <mdray> volcane's probably on the right track
[2008/07/15 11:17:23] <eventi> i just put in hasstatus
[2008/07/15 11:17:29] <eventi> one sec - lemme try again
[2008/07/15 11:18:10] <eventi> ok - no false start this time - progress :)
[2008/07/15 11:18:20] <eventi> let me see if it picks up the config file change
[2008/07/15 11:19:27] <eventi> looks like it didn't restart
[2008/07/15 11:19:33] <eventi> errors about address in use
[2008/07/15 11:20:55] <eventi> http://pastebin.org/51586 is the manifest
[2008/07/15 11:21:39] <jamesturnbull> eventi: what version?
[2008/07/15 11:21:53] <eventi> puppetd?
[2008/07/15 11:21:59] <jamesturnbull> eventi: yes
[2008/07/15 11:22:07] <Volcane> and if you manually do stop and start quickly after each other what happens? (when it was already running)
[2008/07/15 11:22:09] <eventi> 0.24.1
[2008/07/15 11:22:23] @ Toons- joined channel #puppet
[2008/07/15 11:23:04] <eventi> that looks ok
[2008/07/15 11:23:30] <eventi> actually it seems to be working - would "hasrestart" be better? or is that the default
[2008/07/15 11:23:45] <Volcane> eventi: it just calls restart ten instead of stop and start
[2008/07/15 11:24:01] <eventi> but either one seems to work
[2008/07/15 11:24:09] <eventi> what does redhat default to?
[2008/07/15 11:24:19] <Volcane> eventi: its nicely covered in the docs
[2008/07/15 11:24:35] <Volcane> eventi: if in doubt, run with --trace --debug --verbose etc and see what puppetd does
[2008/07/15 11:24:39] @ shake-n-bake joined channel #puppet
[2008/07/15 11:24:56] <eventi> k- thanks
[2008/07/15 11:25:18] <eventi> but i gotta say - 1st time i got a RTFM from #puppet :)
[2008/07/15 11:25:25] <f3ew> heh
[2008/07/15 11:25:36] <f3ew> the docs are improving ;)
[2008/07/15 11:25:43] <eventi> they are :)
[2008/07/15 11:25:47] <eventi> nice bg image
[2008/07/15 11:26:34] <Volcane> eventi: I only say rtfm if after I already said you should look at hasrestart you then ask again if it will help :P
[2008/07/15 11:26:42] <eventi> anyway - thanks for the --trace --debug --verbose hint - that'll help
[2008/07/15 11:27:27] <eventi> heh - if i was mad i wouln't have said anything - #puppet has always been very helpful
[2008/07/15 11:27:52] <Volcane> :)
[2008/07/15 11:35:07] <machpo> eventi: cheers
[2008/07/15 11:35:17] <eventi> machpo - ditto
[2008/07/15 11:35:28] @ pjw joined channel #puppet
[2008/07/15 11:38:41] @ Quit: f--z: "KVIrc 3.2.5 Anomalies http://www.kvirc.net/"
[2008/07/15 11:42:21] @ jbrothers joined channel #puppet
[2008/07/15 11:44:11] <jbrothers> in the type reference document, what does (?-mix:(0|1)) mean?
[2008/07/15 11:44:32] @ Quit: roald: Remote closed the connection
[2008/07/15 11:45:03] <jbrothers> is that ruby regexp syntax?
[2008/07/15 11:45:09] <DerekW_> jbrothers: That's just trac/wiki guff
[2008/07/15 11:45:30] <jbrothers> oh, okay
[2008/07/15 11:47:08] <jbrothers> i don't know ruby well enough to be surprised if that was syntax
[2008/07/15 11:50:49] @ a-priori joined channel #puppet
[2008/07/15 11:58:13] @ Quit: Toons-:
[2008/07/15 11:58:31] @ Quit: pleemans: "Ex-Chat"
[2008/07/15 12:00:20] @ Quit: a-priori:
[2008/07/15 12:01:39] @ Quit: mdray: "Leaving"
[2008/07/15 12:04:35] @ sigmonsays joined channel #puppet
[2008/07/15 12:04:37] <sigmonsays> morning folks
[2008/07/15 12:04:50] <sigmonsays> anyone use dsh here?
[2008/07/15 12:05:08] @ raphink joined channel #puppet
[2008/07/15 12:07:07] @ eventi_ joined channel #puppet
[2008/07/15 12:07:41] <tim|imac> do i need a separate file{} statement to change the permissions on a file created by nagios_service{}?
[2008/07/15 12:09:59] @ Quit: pjw: Read error: 110 (Connection timed out)
[2008/07/15 12:10:14] @ kambiz` joined channel #puppet
[2008/07/15 12:10:27] @ Quit: kambiz: Read error: 104 (Connection reset by peer)
[2008/07/15 12:11:42] @ kambiz` is now known as kambiz
[2008/07/15 12:11:49] @ pjw joined channel #puppet
[2008/07/15 12:11:52] <sigmonsays> tim|imac, yes, it's a different syntax too
[2008/07/15 12:12:28] <sigmonsays> File["/your/nagios/file"] { } I think
[2008/07/15 12:13:44] <tim|imac> no, it works with a normal file{} syntax :) but not fun that i need to set it separately
[2008/07/15 12:14:20] <sigmonsays> tim|imac, oh I was under the impression nagios_service {} created a file resource you wanted to modify after.
[2008/07/15 12:14:37] <sigmonsays> tim|imac, make a define
[2008/07/15 12:14:48] <sigmonsays> you have the power
[2008/07/15 12:15:11] <tim|imac> can't make a define, because I'll get double definitions :)
[2008/07/15 12:15:18] <tim|imac> but i'll set it separately
[2008/07/15 12:15:26] <tim|imac> not too much of a bother, just ugly :)
[2008/07/15 12:16:22] @ Quit: glaw: ""Remember, information is not knowledge, knowledge is not wisdom, wisdom is not truth, truth is not beauty, beauty is not lov
[2008/07/15 12:16:35] <sigmonsays> no entiendo porque tue es loco en la cabeze
[2008/07/15 12:19:02] <sigmonsays> anyone know what dsh is? :)
[2008/07/15 12:19:02] @ Quit: pjw:
[2008/07/15 12:21:17] @ pjw joined channel #puppet
[2008/07/15 12:22:03] <n5red-0> distributed shell?
[2008/07/15 12:22:39] <sigmonsays> yea. I figgered this would be a good place for help on it. I cant' get jobs to background properly. No idea why either. must be dsh not supporting ssh's -n I guess
[2008/07/15 12:23:38] <tim|imac> isn't puppet about getting around the whole ssh-in-a-loop problem? :)
[2008/07/15 12:24:53] <sigmonsays> you end all your sentences with :)
[2008/07/15 12:24:54] <sigmonsays> ?
[2008/07/15 12:25:07] <tim|imac> not all:
[2008/07/15 12:25:13] <tim|imac> [18:14] <tim|imac> but i'll set it separately
[2008/07/15 12:25:18] @ Quit: eventi: Read error: 110 (Connection timed out)
[2008/07/15 12:25:25] <tim|imac> but most, yeah :) what can i say, I'm a happy person? :)
[2008/07/15 12:25:46] <sigmonsays> heh
[2008/07/15 12:29:53] @ hessml|away joined channel #puppet
[2008/07/15 12:32:45] @ Quit: pjw:
[2008/07/15 12:34:37] @ pjw joined channel #puppet
[2008/07/15 12:35:45] @ Quit: DerekW_: "Leaving"
[2008/07/15 12:35:59] <sigmonsays> n5red-0, you've used dsh before?
[2008/07/15 12:36:17] <n5red-0> yes, but it has been awhile
[2008/07/15 12:36:37] <sigmonsays> what replaced it? or just stoppped using that kinda app?
[2008/07/15 12:36:39] @ Quit: eventi_: Read error: 110 (Connection timed out)
[2008/07/15 12:36:51] <benp-> ever use cssh? its pretty weird
[2008/07/15 12:37:10] <n5red-0> I have been using gsh instead. Easier from the command line, but not quite as flexible.
[2008/07/15 12:37:26] <n5red-0> Works for the size of installation I have been dealing with
[2008/07/15 12:37:28] <benp-> capistrano can run commands over ssh in parallel too
[2008/07/15 12:38:17] <sigmonsays> yah, that's what dsh does for me too. It doesn't allow me to fork() and close the ssh connection though :(
[2008/07/15 12:38:34] <sigmonsays> I think it's ssh's fault. dsh doesn't seem to have a way to pass -n (close stdin and stdout)
[2008/07/15 12:39:44] <benp-> if you think it's ssh's fault, use a default sshd_config or run sshd in debug mode and see what its doing
[2008/07/15 12:39:59] @ f--z joined channel #puppet
[2008/07/15 12:40:03] <sigmonsays> its ssh in "client mode"
[2008/07/15 12:40:42] <sigmonsays> but i'll do some testing
[2008/07/15 12:46:37] @ Quit: jvanzyl: Read error: 54 (Connection reset by peer)
[2008/07/15 12:46:41] @ jvanzyl joined channel #puppet
[2008/07/15 12:50:48] @ a-priori joined channel #puppet
[2008/07/15 12:51:23] @ dryrot joined channel #puppet
[2008/07/15 12:51:25] @ lak joined channel #puppet
[2008/07/15 12:51:53] @ Quit: pjw:
[2008/07/15 12:53:16] @ Quit: keithlard:
[2008/07/15 12:53:41] @ andrewcshafer joined channel #puppet
[2008/07/15 13:02:07] <martha> is there a way to call warn() only if something happens? like instead of notify to an object, I want to print something
[2008/07/15 13:05:12] <Volcane> acould you notify a Class ?
[2008/07/15 13:05:15] <Volcane> havnt tried
[2008/07/15 13:05:27] <Volcane> but prolly not what you're after
[2008/07/15 13:07:15] @ Quit: hessml|away: "Leaving..."
[2008/07/15 13:09:34] @ hessml|away joined channel #puppet
[2008/07/15 13:18:32] @ Cope joined channel #puppet
[2008/07/15 13:19:55] <Cope> I'm setting up a puppet infrastructure from scratch (for the third time) - historically, I've had /etc/puppet as an svn tree, so I make local changes, then svn up puppet
[2008/07/15 13:20:18] <Cope> I'm wondering what other folk do... as it seems in retropspect that this is a bit risky
[2008/07/15 13:20:29] <Volcane> why?
[2008/07/15 13:21:03] <Cope> well, if $sysadmin checks in something broken, and an svn up is done in /etc/puppet, puppet pushes out broken configs, and the world falls apart
[2008/07/15 13:21:52] <Volcane> well nothing you do will prevent logic problems from going through, apart from testing first on a test environment
[2008/07/15 13:22:02] <martha> yes you can
[2008/07/15 13:22:16] <martha> you can prevent parse errors, at least
[2008/07/15 13:22:23] <martha> with an svn pre-commit hook
[2008/07/15 13:22:24] <Volcane> yes, thats why i said logic errors :P
[2008/07/15 13:22:30] <Cope> sure. i do that already
[2008/07/15 13:22:45] <Cope> Volcane's right about logic errors, and testing
[2008/07/15 13:23:26] <Cope> i was wondering if git might be a good approach
[2008/07/15 13:23:33] <Volcane> Cope: i have multiple environments and if i need to develop on a module i branch the module so the dev environment is the only place that gets the branch, work, test etc, when its all good i merge changes to the prod environment
[2008/07/15 13:23:34] <Cope> as I could do a git push when I was happy with it
[2008/07/15 13:23:55] <Cope> Volcane: right, that's pretty much what I do in puppet instance 1
[2008/07/15 13:24:26] <Volcane> i use puppets own environment support and do it all on one puppet
[2008/07/15 13:25:50] @ Quit: shake-n-bake:
[2008/07/15 13:30:14] @ Quit: f--z: Remote closed the connection
[2008/07/15 13:30:38] @ f--z joined channel #puppet
[2008/07/15 13:32:26] @ shake-n-bake joined channel #puppet
[2008/07/15 13:34:36] @ pleemans joined channel #puppet
[2008/07/15 13:39:08] <Cope> seems git isn't so good for tracking individual files
[2008/07/15 13:39:15] <Cope> so prolly not ideal for puppet
[2008/07/15 13:40:08] <jbrothers> Volcane: environment support? i'm just setting $env in my node hierarchy
[2008/07/15 13:40:18] <tim|imac> why isn't git good for individual files?
[2008/07/15 13:42:17] <Volcane> jbrothers: http://reductivelabs.com/trac/puppet/wiki/UsingMultipleEnvironments
[2008/07/15 13:42:33] @ Quit: a-priori:
[2008/07/15 13:42:39] <jbrothers> thanks
[2008/07/15 13:42:42] <Volcane> jbrothers: it lets you maintain complete seperate trees of modules etc per environment
[2008/07/15 13:43:01] <Volcane> jbrothers: and u decide what environment a box is in in its config or a custom fact
[2008/07/15 13:44:50] @ pjw joined channel #puppet
[2008/07/15 13:45:48] @ Quit: shake-n-bake: Read error: 104 (Connection reset by peer)
[2008/07/15 13:46:12] @ muerr joined channel #puppet
[2008/07/15 13:49:57] @ BB|AtWork joined channel #puppet
[2008/07/15 13:50:56] <BB|AtWork> hello everyone. I'm writing a service type but i only want it to be done if a certain folder exists on the server, this folder is not managed by puppet tho, it is pushed out with capistrano (app code)
[2008/07/15 13:51:05] <BB|AtWork> any ideas?
[2008/07/15 13:51:45] <BB|AtWork> could i do an exec{" [ -d/path/to/folder ]" } and require that?
[2008/07/15 13:52:25] <BB|AtWork> the command in the exec would return true or false so i guess that would make that item fail or pass in puppet and so then attempt or not the service that depends on it
[2008/07/15 13:54:23] <martha> BB|AtWork: look at onlyif for exec
[2008/07/15 13:54:36] <Volcane> i think if you make a file{} resource for the path but do not set any ensure stuff, then it will evaluate as true only if the file exists
[2008/07/15 13:54:48] <Volcane> doubt it will work though
[2008/07/15 13:55:33] @ Quit: f--z: Read error: 110 (Connection timed out)
[2008/07/15 13:55:47] <Volcane> with onlyif on exec you'd still need to actually do something though? to notify the service with?
[2008/07/15 13:56:12] <BB|AtWork> hrm onlyif + notify=>Service might work
[2008/07/15 13:56:16] <martha> the best way is to write a new facter fact
[2008/07/15 13:56:22] <BB|AtWork> but it seems like either way i will need an exec and a service
[2008/07/15 13:56:37] <BB|AtWork> yeah i'm not deploying facter stuff to the server yet
[2008/07/15 13:56:38] @ Quit: Kindred: Read error: 104 (Connection reset by peer)
[2008/07/15 13:56:40] <BB|AtWork> i need this to work today
[2008/07/15 13:56:51] <Volcane> exec+service then
[2008/07/15 13:57:26] @ Kindred joined channel #puppet
[2008/07/15 13:58:07] <Volcane> http://pastie.org/233999
[2008/07/15 13:58:16] <Volcane> that works, doesnt do the exec if /tmp/trigger doesnt exist
[2008/07/15 13:58:22] <Volcane> if i then touch the file, the exec happens
[2008/07/15 13:58:26] <Volcane> you could do the same with service
[2008/07/15 13:58:42] <BB|AtWork> hrm
[2008/07/15 13:58:43] <BB|AtWork> ok
[2008/07/15 13:58:51] @ shake-n-bake joined channel #puppet
[2008/07/15 13:58:51] <BB|AtWork> well if this one i have written doesnt work i'll do that
[2008/07/15 14:00:16] <Volcane> no, that wont work with service apparently
[2008/07/15 14:00:44] <BB|AtWork> i think i have one that might
[2008/07/15 14:00:45] <Volcane> the requires is satisfied even when /tmp/trigger doesnt exist
[2008/07/15 14:00:52] <Volcane> so exec is what u need
[2008/07/15 14:01:15] <BB|AtWork> right but exec{ "-e /tmp/trigger" might work
[2008/07/15 14:02:28] <Superfly_> i guess test -e might work
[2008/07/15 14:02:51] <BB|AtWork> er
[2008/07/15 14:02:53] <BB|AtWork> yeah thats what i ments
[2008/07/15 14:02:56] * Volcane goes home
[2008/07/15 14:02:59] <BB|AtWork> [ -e /tmp/trigger ]
[2008/07/15 14:03:09] <BB|AtWork> have a good time Volcane
[2008/07/15 14:05:26] <BB|AtWork> sweet that works
[2008/07/15 14:06:07] <BB|AtWork> http://pastie.org/234012
[2008/07/15 14:06:49] <BB|AtWork> well at least it doesn't run because the app isn't there
[2008/07/15 14:06:53] <BB|AtWork> now lets test a deploy
[2008/07/15 14:08:59] @ \ask_ joined channel #puppet
[2008/07/15 14:23:31] @ ckm joined channel #puppet
[2008/07/15 14:24:00] @ Quit: dysinger:
[2008/07/15 14:26:20] @ dysinger joined channel #puppet
[2008/07/15 14:28:27] <martha> warning/err/notice etc only seem to log to the master when using puppetd. is there any way to print to the client?
[2008/07/15 14:31:07] <jason^_> what value from a init.d status verb means "success"?
[2008/07/15 14:44:22] @ Quit: lak: Read error: 104 (Connection reset by peer)
[2008/07/15 14:44:35] @ lak joined channel #puppet
[2008/07/15 14:49:24] <ashp> goddamn my boss
[2008/07/15 14:49:31] <ashp> now he's stalling me on my puppet money because he might want mysql support
[2008/07/15 14:49:40] <ashp> we only have two mysql servers what the hell kind of support could we possibly need?
[2008/07/15 14:49:43] @ Quit: andrewcshafer:
[2008/07/15 14:51:24] <dryrot> what is 'puppet money'
[2008/07/15 14:53:20] @ Quit: lak:
[2008/07/15 14:54:49] @ sazma joined channel #puppet
[2008/07/15 14:57:20] @ Quit: winrefund: "Leaving"
[2008/07/15 15:13:39] <muerr> money to give to luke to fix bugs, i imagine.
[2008/07/15 15:17:50] <ashp> support contract, yeah
[2008/07/15 15:17:53] <ashp> he keeps delaying me
[2008/07/15 15:18:10] <ashp> i don't care about mysql so it's frustrating
[2008/07/15 15:20:52] <muerr> I can't imagine paying for mysql support.
[2008/07/15 15:21:14] <muerr> There's piles of resources available, not to mention books on both mysql and database administration in general
[2008/07/15 15:21:17] <ashp> I am trying to convince him it's a waste of money
[2008/07/15 15:22:12] <muerr> Are you or anyone that works there a Mysql ninja?
[2008/07/15 15:22:30] <ashp> not really, but we don't need one
[2008/07/15 15:22:34] <muerr> :)
[2008/07/15 15:22:41] <ashp> we just do the standard kind of things you'd expect with mysql
[2008/07/15 15:22:45] <ashp> we have nothing really complex
[2008/07/15 15:22:52] <muerr> no replication?
[2008/07/15 15:23:02] <muerr> stored procedures?
[2008/07/15 15:23:03] <ashp> we're about to set that up soon
[2008/07/15 15:23:09] <ashp> i don't even think we have any stored procedures
[2008/07/15 15:23:11] <muerr> backup schemes?
[2008/07/15 15:23:31] <ashp> I imagine, knowing this place, we just backup /var/lib/mysql or wherever it stores the databases
[2008/07/15 15:23:46] <muerr> Determine what kind of benefit mysql support "might" have, and argue why you don't need that :-).
[2008/07/15 15:24:11] <ashp> i think it's just a comfort blanket that if the server ever stopped working in the middle of the night, sun could remotely fix everything
[2008/07/15 15:26:22] <Volcane> mysql support is great
[2008/07/15 15:26:29] <Volcane> those guys are shit hot in helping you resolve problems
[2008/07/15 15:26:40] <Volcane> and the mysql enterprise monitor is awesome too
[2008/07/15 15:27:19] <ashp> don't tell my boss this :)
[2008/07/15 15:27:30] <ashp> the enterprise monitor actually does look nice, that was the only thing i liked
[2008/07/15 15:28:28] @ Quit: aymerick:
[2008/07/15 15:28:28] <Volcane> though i find i look at the cacti mysql template things more often than ent monitor
[2008/07/15 15:28:35] <Volcane> its great though for alerts etc - ent monitor
[2008/07/15 15:29:38] @ aymerick joined channel #puppet
[2008/07/15 15:29:50] @ Quit: aymerick: Client Quit
[2008/07/15 15:45:48] @ Quit: ckm: Read error: 60 (Operation timed out)
[2008/07/15 15:52:47] @ martha left channel #puppet ()
[2008/07/15 15:53:26] <muerr> I've had varied experience with Sun support services.
[2008/07/15 15:57:07] <Volcane> i last had to ask mysql anything before sun but they were really great then
[2008/07/15 15:57:16] <Volcane> very quick turn around, answers complete and 100% spot on etc
[2008/07/15 16:09:24] @ martha joined channel #puppet
[2008/07/15 16:09:56] <fastjay> can someone hit me with a clue-by-four as to why puppetrun is giviging me Certificates were not trusted;: certificate verify failed errrors?
[2008/07/15 16:11:09] <fastjay> running on the puppetmaster
[2008/07/15 16:13:34] @ _zsh joined channel #puppet
[2008/07/15 16:16:16] @ _zsh left channel #puppet ()
[2008/07/15 16:22:38] @ Quit: pleemans: "Ex-Chat"
[2008/07/15 16:23:07] @ Quit: meandtheshell: "Leaving."
[2008/07/15 16:37:27] @ Quit: pjw:
[2008/07/15 16:40:50] <ashp> hmm I found a problem
[2008/07/15 16:40:58] <ashp> I changed a mountpoint and puppet didn't actually remount the filesystem :/
[2008/07/15 16:41:17] <riddley> in my experience the mount provider is a bit whacky
[2008/07/15 16:41:30] <ashp> oh, hmm, I have bigger problems than that
[2008/07/15 16:41:34] <ashp> err: Could not retrieve catalog: Could not find class rhythmyx at /etc/puppet/manifests/nodes.pp:57 on node hlstestper1.law.harvard.edu
[2008/07/15 16:41:43] <ashp> It's all gone weird again. This happened to me before.
[2008/07/15 16:42:24] <ashp> It's because my coworker broke puppet again, goddamn
[2008/07/15 16:42:52] @ pjw joined channel #puppet
[2008/07/15 16:44:40] <Volcane> theres prolly a syntax error somewhere and it just sux at reporting them, i hate that
[2008/07/15 16:44:57] <ashp> I removed an environment a while ago and it seems related to that actually
[2008/07/15 16:47:34] <ashp> it's weird, the node has $hlsenvironment set to 'production'
[2008/07/15 16:47:44] <ashp> but something somewhere keeps setting the puppet.conf to environment = productionactive
[2008/07/15 16:47:50] <ashp> which i removed, and now I can't find what's doing it :)
[2008/07/15 16:48:40] @ Quit: dan___t: Read error: 60 (Operation timed out)
[2008/07/15 16:54:17] @ Quit: pjw:
[2008/07/15 16:57:56] @ Bushtea joined channel #puppet
[2008/07/15 16:58:38] <ashp> ARGHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH
[2008/07/15 16:58:44] <ashp> I just cannot understand what is happening today
[2008/07/15 17:00:27] @ dan___t joined channel #puppet
[2008/07/15 17:00:48] @ Bushtea left channel #puppet ()
[2008/07/15 17:00:59] @ martha left channel #puppet ()
[2008/07/15 17:01:05] <ashp> It keeps managing to recreate this old puppet.conf that just isn't in my configuration anyway :(
[2008/07/15 17:05:06] @ pjw joined channel #puppet
[2008/07/15 17:08:53] <muerr> Spite.
[2008/07/15 17:08:56] <muerr> Definitely.
[2008/07/15 17:08:58] <fujin> --test? :}
[2008/07/15 17:09:06] <muerr> --noop
[2008/07/15 17:09:14] <fujin> --debug!
[2008/07/15 17:09:32] <muerr> --sleep
[2008/07/15 17:14:38] <fujin> toodles ;]
[2008/07/15 17:15:08] @ Quit: pjw:
[2008/07/15 17:16:00] @ Quit: ptrmcrthr:
[2008/07/15 17:16:05] <muerr> i wish.
[2008/07/15 17:16:19] <muerr> for some crazy reason my boss wants me to get 'billable work' done :-o
[2008/07/15 17:16:21] @ f--z joined channel #puppet
[2008/07/15 17:16:40] <fujin> ah
[2008/07/15 17:17:15] @ pjw joined channel #puppet
[2008/07/15 17:18:24] @ Quit: MrProper__: "Leaving"
[2008/07/15 17:30:28] <fastjay> howdee
[2008/07/15 17:34:20] @ andrewcshafer joined channel #puppet
[2008/07/15 17:53:01] <fastjay> anyone got time for a puppetrun question.. that i think will turn into be a CA issue :)
[2008/07/15 17:54:07] <n5red-0> Looks like I have puppet certificates being pushed out correctly at kickstart time. This is very good.
[2008/07/15 17:58:58] <fastjay> is there a way to tell puppetrun to use a specific hostname?
[2008/07/15 17:59:04] <fastjay> for its cert
[2008/07/15 18:15:03] @ descala joined channel #puppet
[2008/07/15 18:16:39] <fujin> certname?
[2008/07/15 18:17:42] @ cote joined channel #puppet
[2008/07/15 18:18:08] <fastjay> wasnt this part of the ruby/ssl issue?
[2008/07/15 18:18:27] <fastjay> i dunno the details osmeone else here made the changes that made it 'work' but puppetrun is not working
[2008/07/15 18:18:40] <fastjay> dont mind me for sounding braindead today.. as I am braindead today :)
[2008/07/15 18:18:58] <fastjay> but i need this to work so dns zones get pushed out all around
[2008/07/15 18:21:59] <fastjay> not sure why its not working is all
[2008/07/15 18:22:17] <fastjay> puppetrun tells me the certificate was not trusted
[2008/07/15 18:23:19] <fastjay> running with --debug doesnt help.. and the logs dont show much other than some noise about tls1 on the puppetd side
[2008/07/15 18:28:54] <benp-> why not just wait for the clients to do a run?
[2008/07/15 18:29:23] <fastjay> we want to be able to force a run so that dns is in sync across all our dns servers?
[2008/07/15 18:29:53] <jamesturnbull> gepetto: seen lak
[2008/07/15 18:29:54] <gepetto> jamesturnbull: lak was last seen 3 hours, 36 minutes and 33 seconds ago, quitting IRC ()
[2008/07/15 18:30:11] @ hessml|away is now known as hessml|away|away
[2008/07/15 18:30:40] @ corsair_ left channel #puppet ("Konversation terminated!")
[2008/07/15 18:32:16] @ Quit: pjw:
[2008/07/15 18:32:48] @ Quit: descala:
[2008/07/15 18:33:44] @ Quit: cote:
[2008/07/15 18:34:33] <MrProper_> mornin
[2008/07/15 18:35:39] @ atm joined channel #puppet
[2008/07/15 18:36:25] <atm> can some one please tell me what I have to do to see log messages I include in myself in a class?
[2008/07/15 18:36:48] <atm> e.g. notice("I wish this would appear in a log file!")
[2008/07/15 18:36:58] <fujin> exactly taht
[2008/07/15 18:37:03] <MrProper_> ^^
[2008/07/15 18:37:06] <fujin> that'll be logged at the notice level on the master
[2008/07/15 18:37:11] <atm> ohhhhhhhh
[2008/07/15 18:37:13] <atm> on the master
[2008/07/15 18:37:25] <atm> wow
[2008/07/15 18:37:37] <atm> i didn't see that mentioned in the docs
[2008/07/15 18:38:00] <fujin> heh, and you can turn on reports (wiki:ReportReference) to get more data
[2008/07/15 18:38:02] <gepetto> fujin: heh: wiki:ReportReference is http://reductivelabs.com/trac/puppet/wiki/ReportReference
[2008/07/15 18:38:08] <fujin> like, the full logs from the clients sent back to the master
[2008/07/15 18:38:25] <atm> wonderful
[2008/07/15 18:39:28] <atm> so when I run "puppetd --verbose --no-daemonize --evaltrace" on the client, i see what look to be log messages
[2008/07/15 18:39:32] <atm> what are those from?
[2008/07/15 18:40:02] <fujin> That's the client applying the manifest
[2008/07/15 18:40:07] <fujin> and any related output
[2008/07/15 18:40:41] <fastjay> i think the problem is that my puppetmasteerd's certificate has a hostname of 'puppet'
[2008/07/15 18:40:51] <fastjay> but when a puppetrun happens.. something else is going on.
[2008/07/15 18:41:01] <fastjay> or something evil like that
[2008/07/15 18:41:04] <atm> so is there any way I can make log output show up there?
[2008/07/15 18:41:32] <fujin> uh
[2008/07/15 18:44:25] <fastjay> so.. okay.. let me ask this a different way.. how do i authorize a box to call puppetrun against it?
[2008/07/15 18:44:32] @ Quit: shake-n-bake:
[2008/07/15 18:44:35] <fujin> namespaceauth
[2008/07/15 18:44:40] <fastjay> hmmf.. okay
[2008/07/15 18:44:44] <fastjay> this box is in it
[2008/07/15 18:45:50] <fujin> what error are you getting?
[2008/07/15 18:46:03] <fastjay> puppetrun is getting a 500
[2008/07/15 18:46:53] <fastjay> and the http.log on the pyuppetd box has a 'XMLRPX::FaultException: Host <hostname here> not authorized to call puppetrun.run
[2008/07/15 18:47:01] <fastjay> and said hostname is in the allow line for puppetrunner
[2008/07/15 18:49:42] @ Quit: andrewcshafer:
[2008/07/15 18:50:28] <fujin> sec lemme test
[2008/07/15 18:50:50] <fastjay> i am also seeing a 'peer ceritifcate won't be verified in this ssl session'
[2008/07/15 18:51:02] <fastjay> sorry about omitting that
[2008/07/15 19:01:55] @ Quit: BB|AtWork: "This computer has gone to sleep"
[2008/07/15 19:09:40] @ Quit: markl__: "Lost terminal"
[2008/07/15 19:14:10] @ BB|AtWork joined channel #puppet
[2008/07/15 19:15:37] @ Quit: f--z: "KVIrc 3.2.5 Anomalies http://www.kvirc.net/"
[2008/07/15 19:15:59] @ f--z joined channel #puppet
[2008/07/15 19:19:34] <fastjay> fujin: could it be because i am running my config though an apache mod_balance?
[2008/07/15 19:19:39] <fastjay> oh wait n/m this is going the other direction
[2008/07/15 19:19:49] <fastjay> i think someone is just installing something which is why i am seeing the 127.0.0.1 hits
[2008/07/15 19:23:19] @ Quit: randybias:
[2008/07/15 19:32:21] @ muerr left channel #puppet ("Leaving.")
[2008/07/15 20:04:26] @ punkcut joined channel #puppet
[2008/07/15 20:04:52] <punkcut> I need to remove a client from the puppetmasters inventory and add another one with the same hostname. How do I do this?
[2008/07/15 20:05:10] <holoway> punkcut: puppetca --remove fqdn
[2008/07/15 20:05:23] <punkcut> thanks holoway
[2008/07/15 20:05:24] <holoway> then let the new host register
[2008/07/15 20:06:21] <fujin> --clean, isn't it?
[2008/07/15 20:06:24] * fujin waves
[2008/07/15 20:06:24] <punkcut> unrecognized option `--remove'
[2008/07/15 20:06:27] <holoway> fujin: yar
[2008/07/15 20:06:30] <holoway> that's right
[2008/07/15 20:06:39] <holoway> afternoon slowness, clearly
[2008/07/15 20:06:42] <fujin> hah!
[2008/07/15 20:06:44] * holoway waves at fujin
[2008/07/15 20:06:48] <fujin> time for a nap, eh
[2008/07/15 20:15:18] <ashp> hey holoway, fujin :)
[2008/07/15 20:16:12] <fujin> howdy howdy
[2008/07/15 20:16:13] @ Quit: f--z: "KVIrc 3.2.5 Anomalies http://www.kvirc.net/"
[2008/07/15 20:16:30] @ shadoi joined channel #puppet
[2008/07/15 20:22:08] @ muerr joined channel #puppet
[2008/07/15 20:23:05] @ Quit: barnbarn: Read error: 110 (Connection timed out)
[2008/07/15 20:24:29] @ Quit: gileswork: Read error: 113 (No route to host)
[2008/07/15 20:29:45] @ Quit: ski98033: "Leaving."
[2008/07/15 20:30:35] @ Quit: BB|AtWork: "This computer has gone to sleep"
[2008/07/15 20:37:03] @ Quit: evil_steve: Read error: 110 (Connection timed out)
[2008/07/15 20:42:32] <fujin> holoway: any way to delete a mongrel_runit site?
[2008/07/15 20:45:12] <holoway> rm -rf /etc/sv/mongrel-foo-*
[2008/07/15 20:48:51] <fujin> assumed as much
[2008/07/15 20:48:51] <fujin> ta
[2008/07/15 20:49:26] <fujin> runit was hammering my box trying to start up rails for a site i deleted ages ago, just recently rebooted lol
[2008/07/15 20:57:29] @ punkcut left channel #puppet ()
[2008/07/15 21:04:19] <holoway> fujin: we have a runit_service define
[2008/07/15 21:04:23] <holoway> that takes an onlyif parameter
[2008/07/15 21:04:28] <holoway> that we usually set to the path for the rails app
[2008/07/15 21:04:33] <holoway> that auto-downs the runit stuff
[2008/07/15 21:04:35] <holoway> if it goes nuts
[2008/07/15 21:05:46] <muerr> I should look at that :)
[2008/07/15 21:27:57] @ Quit: tmz: Read error: 110 (Connection timed out)
[2008/07/15 21:39:24] @ evil_steve joined channel #puppet
[2008/07/15 21:40:00] @ randybias joined channel #puppet
[2008/07/15 21:40:44] @ tmz joined channel #puppet
[2008/07/15 21:51:29] @ Demosthenes joined channel #puppet
[2008/07/15 22:02:19] @ Quit: evil_steve: Read error: 113 (No route to host)
[2008/07/15 22:05:00] <gepetto> ::puppet:: Whos Using Puppet edited by windowsrefund @ http://reductivelabs.com/trac/puppet/wiki/WhosUsingPuppet (by reductivelabs@windowsrefund.info)
[2008/07/15 22:05:57] @ evil_steve joined channel #puppet
[2008/07/15 22:10:21] @ Joined channel #puppet
[2008/07/15 22:10:21] @ Topic is "Try Puppet 0.24.5RC2 (http://tinyurl.com/5puxly) | Welcome to Puppet on Redmine (http://tinyurl.com/48ek6g) | Please see http://snurl.com/1udr1 for channel guidelines"
[2008/07/15 22:10:21] @ Topic set by jamesturnbull on Tue Jul 15 00:14:37 -0400 2008
[2008/07/15 22:11:50] @ evil_ste1e joined channel #puppet
[2008/07/15 22:11:53] @ Quit: evil_steve: Read error: 104 (Connection reset by peer)
[2008/07/15 22:12:27] @ evil_ste1e is now known as evil_steve
[2008/07/15 22:12:31] @ Quit: evil_steve: Client Quit
[2008/07/15 22:21:36] @ zirpu2 joined channel #puppet
[2008/07/15 22:21:59] @ zirpu2 is now known as zirpu
[2008/07/15 22:23:30] <fujin> holoway: ah, nice.
[2008/07/15 22:33:38] @ andrewcshafer joined channel #puppet
[2008/07/15 22:34:21] @ n5red-7 joined channel #puppet
[2008/07/15 22:34:22] @ Quit: andrewcshafer: Read error: 104 (Connection reset by peer)
[2008/07/15 22:34:43] @ andrewcshafer joined channel #puppet
[2008/07/15 22:35:43] @ evil_steve joined channel #puppet
[2008/07/15 22:36:02] <n5red-7> my brain hurts. I'm trying to put together a basic skeleton configuration for a compute cluster.
[2008/07/15 22:39:28] <n5red-7> ANy good pointers on where to start? There seems to be quite a hierarchy of files that I don't fully understand.
[2008/07/15 22:39:53] <zirpu> there a puppet book you can buy a pdf of. it's a good place to start.
[2008/07/15 22:39:57] <zirpu> short read too.
[2008/07/15 22:40:28] <n5red-7> "Pulling Strings With Puppet"?
[2008/07/15 22:40:31] <muerr> thats the one
[2008/07/15 22:41:04] <n5red-7> I have read it, still trying to understand enough to build a configuration
[2008/07/15 22:41:04] <muerr> n5red-7: If you don't want to wait for the book to arrive in the mail, check the wiki:PuppetBestPractices for a pretty good starting point.
[2008/07/15 22:41:21] <muerr> You might also look at some of the repositories that people have shared.
[2008/07/15 22:41:56] <n5red-7> Ok. I'm seeing lots of fragments right now. Can't wrap my brain around enough of the big picture
[2008/07/15 22:42:27] @ Quit: muerr: Remote closed the connection
[2008/07/15 22:42:32] <n5red-7> I'm nowhere near as bright as a lot of the Ruby folks I know
[2008/07/15 22:42:41] @ muerr joined channel #puppet
[2008/07/15 22:42:57] <zirpu> puppet is big, and takes a bit of digestion. very worth it though.
[2008/07/15 22:43:00] <muerr> Well, the best way to start, is start small.
[2008/07/15 22:43:25] <zirpu> indeed. start small with very basic config. push a file to /tmp. then work from there.
[2008/07/15 22:43:33] <n5red-7> ok, where can I find a good starting configuration?
[2008/07/15 22:43:37] <zirpu> then maybe add and remove a package you don't need.
[2008/07/15 22:43:37] <muerr> one moment.
[2008/07/15 22:43:43] <muerr> I had a bookmark :)
[2008/07/15 22:44:09] <n5red-7> I'm looking at http://reductivelabs.com/trac/puppet/wiki/PuppetBestPractice#sample-site-pp
[2008/07/15 22:44:42] <n5red-7> Great fragments, but I don't quite see enough
[2008/07/15 22:45:19] <muerr> Well, the hard part is that every site is different :-)
[2008/07/15 22:45:31] <n5red-7> I also have a system that I can do a complete kickstart rebuild of in 10 minutes (mostly POST time)
[2008/07/15 22:45:46] <muerr> If you want to see a really complete configuration, http://reductivelabs.com/trac/puppet/wiki/CompleteConfiguration
[2008/07/15 22:46:02] <muerr> http://reductivelabs.com/trac/puppet/wiki/Lab42Infrastructure
[2008/07/15 22:46:04] <muerr> is another
[2008/07/15 22:46:10] <n5red-7> Haven't quite made the cognativer leap
[2008/07/15 22:48:08] <n5red-7> installing git
[2008/07/15 22:48:31] <n5red-7> my puppetmaster system is slow and small.
[2008/07/15 22:49:50] <muerr> well, I don't think I have a bookmark to the repo I was thinking of, and I don't see a link to anything like it on the wiki or the google group :-\
[2008/07/15 22:50:56] <muerr> However, to help you along, the bulk of configurations live in modules. the contents of the module depend on the configuration it applies.
[2008/07/15 22:51:01] <n5red-7> I think if I can get off of top dead center, I'll be able to make it work well
[2008/07/15 22:55:46] @ Quit: hessml|away|away: "Leaving..."
[2008/07/15 22:57:36] <muerr> At my last company where we used puppet to deploy a variety of infrastructure services, and each service was a module. the site.pp merely set some resource defaults, loaded all the modules, and the configuration was applied on a per-node basis.
[2008/07/15 22:58:17] <n5red-7> For this, there will only be 4 basic system types
[2008/07/15 22:58:19] <muerr> fwiw, we had two different cluster packages that were configured in puppet (basic config - packages, etc)
[2008/07/15 22:59:49] @ Quit: andrewcshafer:
[2008/07/15 23:01:20] <jamesturnbull> muerr: which link were you after?
[2008/07/15 23:02:11] <jamesturnbull> n5red-7: well then that's the start of your classification - 4 system types, what packages/services does each type run, see if someone has laready down a module for those, create some niode statements, load the relevant modules, and test test test :)
[2008/07/15 23:02:25] <jamesturnbull> s/laready down/already done/
[2008/07/15 23:04:08] <n5red-7> right. Trying to get the basic structure working. I don't think in the same patterns as some of y'all
[2008/07/15 23:04:13] <muerr> jamesturnbull: I think it was on irc, and I don't remember. Someone posted their git repo and it was a pretty simple config that they used to manage some LAMP boxes.
[2008/07/15 23:04:51] <jamesturnbull> muerr: there is an irc log archive I run
[2008/07/15 23:05:29] <jamesturnbull> muerr: http://pelin.lovedthanlost.net/puppet/
[2008/07/15 23:06:37] <muerr> n5red-7 as far as directory/file structure, I'd start with the best practices doc.
[2008/07/15 23:06:46] <muerr> since uh... thats what i started with originally :)
[2008/07/15 23:07:03] <jamesturnbull> gepetto: seen lak
[2008/07/15 23:07:04] <gepetto> jamesturnbull: lak was last seen 8 hours, 13 minutes and 44 seconds ago, quitting IRC ()
[2008/07/15 23:07:41] <zirpu> he'll be back, i know his type. :)
[2008/07/15 23:08:22] @ shake-n-bake joined channel #puppet
[2008/07/15 23:08:50] @ Quit: \ask_: Remote closed the connection
[2008/07/15 23:09:11] <muerr> jamesturnbull: heh, i don't even remember what string to search for.
[2008/07/15 23:09:23] @ \ask_ joined channel #puppet
[2008/07/15 23:10:13] <zirpu> what's the git cmd to find where I pulled a repo from?
[2008/07/15 23:10:42] <muerr> heh though searching for github sure returns a lot of links to my repo :-x
[2008/07/15 23:11:23] <fujin> ls
[2008/07/15 23:11:41] <fujin> fuck
[2008/07/15 23:11:48] <fujin> zirpu: git remote show origin
[2008/07/15 23:13:20] @ Joined channel #puppet
[2008/07/15 23:13:20] @ Topic is "Try Puppet 0.24.5RC2 (http://tinyurl.com/5puxly) | Welcome to Puppet on Redmine (http://tinyurl.com/48ek6g) | Please see http://snurl.com/1udr1 for channel guidelines"
[2008/07/15 23:13:20] @ Topic set by jamesturnbull on Tue Jul 15 00:14:37 -0400 2008

Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!