| [2009/04/01 00:00:48] @ Log started by gepetto | ||
| [2009/04/01 00:00:48] <rmiller4pi8> ohadlevy: well in general verification will always work across certs signed by one CA | ||
| [2009/04/01 00:01:38] <ohadlevy> ok, so in this case, is there a way to fail the verification if one of the sides is not the CA? | ||
| [2009/04/01 00:01:45] <rmiller4pi8> ohadlevy: in situations where you want to prevent that because you don't trust DNS, say with SSL VPNs | ||
| [2009/04/01 00:01:46] @ andrewcshafer joined channel #puppet | ||
| [2009/04/01 00:01:47] <ohadlevy> like a purpose? | ||
| [2009/04/01 00:03:40] <ohadlevy> rmiller4pi8: well, the background of what I'm doing is that I want to trigger puppet run (e.g. push) using puppet certificate infrastrucutre, the problem with the fact that all clients are verified is that you can trigge a run on any server from any server, ofcourse I can add some more checks, but i was wondering if its possible to fail on the certificate verification stage | ||
| [2009/04/01 00:04:14] <rmiller4pi8> ohadlevy: you have to add some special attribute when you sign the cert, make sure you only add that attribute for the special cert, and check for that attribute when you check the cert, beyond the usual ssl verification (eg, tls-verify-server in openvpn) | ||
| [2009/04/01 00:04:33] <rmiller4pi8> ohadlevy: sorry, typed that before your response | ||
| [2009/04/01 00:05:41] <rmiller4pi8> ohadlevy: i don't use puppetrun, but you're saying that if you set puppetclients to listen, you can trigger it from any client? that's ugly | ||
| [2009/04/01 00:06:21] <ohadlevy> not really, puppetrun uses a file called namespaceauth.conf, which is another layer of protection | ||
| [2009/04/01 00:06:34] <rmiller4pi8> ohadlevy: that's kinda what i thought | ||
| [2009/04/01 00:06:44] @ Quit: joe-mac: "Leaving." | ||
| [2009/04/01 00:06:48] <rmiller4pi8> so yeah, you just want to add another layer? | ||
| [2009/04/01 00:07:00] <ohadlevy> but in my case, I dont want to use puppetd listening mode (as puppet abuse a lot of mem ideling, and we run it from cron anyway) | ||
| [2009/04/01 00:07:14] <rmiller4pi8> ah | ||
| [2009/04/01 00:07:16] <ohadlevy> yeah, I guess I could reuse the namespaceauth | ||
| [2009/04/01 00:07:57] <rmiller4pi8> so you want to reuse puppet certs for func or something? | ||
| [2009/04/01 00:08:19] <ohadlevy> I wrote a little daemon which verifies the certificates and starts puppetd --onetime | ||
| [2009/04/01 00:08:40] <ohadlevy> and I wanted to use pure ssl for verification (e.g. usualyl you want to push when something is not working in your machine - e.g. ssh ;)) | ||
| [2009/04/01 00:09:03] @ Quit: jhelwig: Read error: 110 (Connection timed out) | ||
| [2009/04/01 00:09:47] <rmiller4pi8> why not install func? then you can not only push, but in a pinch do other things like fix certs or whatever | ||
| [2009/04/01 00:10:00] <rmiller4pi8> (just trying to make sure we're solving the right problem first) | ||
| [2009/04/01 00:10:49] <ohadlevy> func uses its own daemon? | ||
| [2009/04/01 00:11:10] <rmiller4pi8> yes | ||
| [2009/04/01 00:11:23] <ohadlevy> thats a good question ;) | ||
| [2009/04/01 00:11:31] <rmiller4pi8> which i leave running all the time and is well behaved, which as you note the puppet one isn't especially | ||
| [2009/04/01 00:12:40] @ ijcd joined channel #puppet | ||
| [2009/04/01 00:13:03] <ohadlevy> I guess its pyton based.. brr another language to maintain on all platforms.... | ||
| [2009/04/01 00:13:34] <rmiller4pi8> yeah, i'm lucky in that i have a mostly rhel/centos environment which already is moving to python for most of its utilities | ||
| [2009/04/01 00:13:59] <rmiller4pi8> i guess if you're pretty cross-platform, that means you wouldn't want to rely on hosts.allow either | ||
| [2009/04/01 00:14:02] <rmiller4pi8> ? | ||
| [2009/04/01 00:14:13] <ohadlevy> why not? | ||
| [2009/04/01 00:14:33] <rmiller4pi8> some don't support it? | ||
| [2009/04/01 00:14:42] <rmiller4pi8> i mean, if all of your systems support it, you could just use that | ||
| [2009/04/01 00:14:48] <ohadlevy> python? | ||
| [2009/04/01 00:14:56] <rmiller4pi8> no, hosts.allow | ||
| [2009/04/01 00:15:09] <ohadlevy> but than you depend on rsh/ssh etc | ||
| [2009/04/01 00:15:09] <erikh> tcp wrappers??!? | ||
| [2009/04/01 00:15:23] <erikh> what system doesn't depend on tcp wrappers?! | ||
| [2009/04/01 00:15:23] <rmiller4pi8> erikh: or iptables, chill | ||
| [2009/04/01 00:15:36] <rmiller4pi8> erikh: not everything's posix | ||
| [2009/04/01 00:16:45] <rmiller4pi8> ohadlevy: how are we depending on rsh/ssh? | ||
| [2009/04/01 00:16:59] @ koojoo joined channel #puppet | ||
| [2009/04/01 00:17:03] <rmiller4pi8> ohadlevy: i mean you can protect your own little daemon with all the standard system tools | ||
| [2009/04/01 00:17:08] <ohadlevy> rmiller4pi8: Sorry, I guess I didnt understand what you meant by host.allow | ||
| [2009/04/01 00:17:39] <ohadlevy> rmiller4pi8: ah, sure, the daemon just checks some sort of a file, probably the puppet file makes more sense, as it could be shared with puppetrun | ||
| [2009/04/01 00:17:44] <rmiller4pi8> ohadlevy: as erikh says, linux (and bsds, and i believe all fairly posix systems) implement /etc/hosts.{allow,deny} | ||
| [2009/04/01 00:17:52] <rmiller4pi8> and no, the daemon doesn't check it | ||
| [2009/04/01 00:17:59] <rmiller4pi8> it's done at the tcp level on a port basis | ||
| [2009/04/01 00:18:37] <ohadlevy> rmiller4pi8:ok now I understand what you meant - :) | ||
| [2009/04/01 00:18:39] <rmiller4pi8> they aren't used for much these days now that host-based in-kernel firewalling is common, and as noted you can use that too | ||
| [2009/04/01 00:18:55] <erikh> I'm honestly having trouble think of any systems other than data general unix and xenix that I've used that possibly don't have tcpd | ||
| [2009/04/01 00:19:36] <rmiller4pi8> erikh: when answering questions on irc i try not to make any assumptions about peoples' environments, that's all | ||
| [2009/04/01 00:20:07] <erikh> rmiller4pi8: I think it's reasonable to expect if they have the hardware that can run puppet, they have a modern enough machine to have tcp wrappers on it | ||
| [2009/04/01 00:20:57] <rmiller4pi8> erikh: ok | ||
| [2009/04/01 00:21:51] <rmiller4pi8> ohadlevy: does func/tcpwrappers/iptables work for you, or do you want me to sketch a cert-based solution? | ||
| [2009/04/01 00:23:18] @ ezmob joined channel #puppet | ||
| [2009/04/01 00:23:39] <ohadlevy> rmiller4pi8: thats works, I just wanted to know how far does the certificate verfication goes, afterwards, one additional checks should suffice (e.g. inside the daemon or outside) | ||
| [2009/04/01 00:24:50] <rmiller4pi8> ohadlevy: just to plump for func, i've found it and puppet to be hugely complementary | ||
| [2009/04/01 00:25:07] <ohadlevy> that makes sense, do you use cobbler as well? | ||
| [2009/04/01 00:25:59] <justdave> what's the difference between 'before' and 'require'? the docs only say the both define plain dependencies, but don't distiguish what they do. | ||
| [2009/04/01 00:26:43] <justdave> does before mean "this object gets dealt with before the one I'm referencing" or "the object I'm referencing gets dealt with before I do", for example. :) | ||
| [2009/04/01 00:27:22] <rmiller4pi8> ohadlevy: so the thing is, that the pure openssl library call won't know about an "allowed for puppet server" capability or whatever, so your daemon has to dump the certificate credentials from ssl, and then you can just match on the hostname of your puppet server (which means you don't have to trust your network at all)--this is all that say openvpn does, just checking a capability bit instead of a hostname, but | ||
| [2009/04/01 00:27:59] @ nakano is now known as nakano_ | ||
| [2009/04/01 00:28:17] <rmiller4pi8> ohadlevy: no, i'm thinking about cobbler, but currently i'm just using my own scripts to build pxe images and vm images to minimalist standards, which then get customised by puppet when they come up | ||
| [2009/04/01 00:29:15] <justdave> got a service that depends on three things needing to be done before it gets started. puppet keeps doing 2 of them then starting the service and not doing the third, then on the next pass it does the third one and restarts the service | ||
| [2009/04/01 00:29:51] <justdave> initially those three items had a notify => Service[] on them | ||
| [2009/04/01 00:30:10] <justdave> I also tried it with require => and listing those three things in the service entry | ||
| [2009/04/01 00:30:21] @ Quit: ijcd_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 00:30:25] <rmiller4pi8> justdave: notify just causes the server to restart when they change, nothing about order | ||
| [2009/04/01 00:30:59] <ohadlevy> rmiller4pi8: are you sure? i think that it implies that resources that notify others are evaluated before | ||
| [2009/04/01 00:31:52] @ lak joined channel #puppet | ||
| [2009/04/01 00:35:20] <rmiller4pi8> ohadlevy: not 100%, and too lazy to check, but fairly so | ||
| [2009/04/01 00:35:56] @ benblack|away is now known as benblack | ||
| [2009/04/01 00:35:58] @ the_lale1u joined channel #puppet | ||
| [2009/04/01 00:36:03] @ chrysn_ joined channel #puppet | ||
| [2009/04/01 00:36:14] @ Quit: youam: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 00:36:18] @ youam_ joined channel #puppet | ||
| [2009/04/01 00:36:35] @ Quit: the_lalelu: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 00:36:40] <justdave> ok, got it to work right... | ||
| [2009/04/01 00:36:47] <justdave> put both before and notify on each of the three items | ||
| [2009/04/01 00:36:48] @ Quit: chrysn: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 00:37:35] <rmiller4pi8> to be honest, since i'm using func rather than messing around with exec{}, i find that puppet configs converge over time and thus the ordering stuff kinda becomes tedium | ||
| [2009/04/01 00:37:58] <rmiller4pi8> obviously lots of others disagree, and to each their own | ||
| [2009/04/01 00:38:08] <lak> rmiller4pi8: do you have something you'd rather see? | ||
| [2009/04/01 00:38:15] <lak> or are you just not concerned either way? | ||
| [2009/04/01 00:38:35] <justdave> I'm basically attempting to get the first config run to do everything it's supposed to. | ||
| [2009/04/01 00:38:36] @ Quit: ijcd: | ||
| [2009/04/01 00:38:45] <justdave> for some reason there's always leftovers cleaned up on the second run so far | ||
| [2009/04/01 00:39:07] <justdave> which I think is mostly just stuff happening out of order | ||
| [2009/04/01 00:39:28] <justdave> cleared up a bunch of them so far fixing dependencies | ||
| [2009/04/01 00:40:15] <lak> i think there are a few places where we should be automatically adding relationships and aren't | ||
| [2009/04/01 00:40:36] <lak> one of them has already been added for 0.25 - there's a new function like 'include' but that adds a dependency ('require') | ||
| [2009/04/01 00:40:43] <lak> but i think there are a couple of others | ||
| [2009/04/01 00:41:02] <Djelibeybi> lak: I sent you an email with all the logs I could capture. | ||
| [2009/04/01 00:41:13] <lak> Djelibeybi: saw that, thanks | ||
| [2009/04/01 00:41:14] <rmiller4pi8> lak: not really, func seems to be better suited for procedural rather than declarative work, so i use each tool for its job there, and i don't like notify because i like to know when my services will restart so i'm prepared for any problems (eg, at the office during an ssh restart, so i can console in if necessary), and so in cases where it's just a service on and a package install, by 3 puppet runs it'll be fine | ||
| [2009/04/01 00:41:16] <lak> that includes the manifests? | ||
| [2009/04/01 00:41:23] <Djelibeybi> lak: Yup, in etc-puppet.sip | ||
| [2009/04/01 00:41:26] <Djelibeybi> s/sip/zip | ||
| [2009/04/01 00:41:28] <lak> cool | ||
| [2009/04/01 00:41:45] <lak> rmiller4pi8: ok | ||
| [2009/04/01 00:41:49] <justdave> I think this one's mostly harmless, but the main one still left is this: | ||
| [2009/04/01 00:41:49] <justdave> notice: //Node[default]/base/nrpe/File[nagios-plugins]/checksum: checksum changed '{mtime}Tue Mar 31 21:33:01 -0700 2009' to '{mtime}Tue Mar 31 21:33:03 -0700 2009' | ||
| [2009/04/01 00:41:59] <Djelibeybi> lak: feel free to recommend any efficiency changes while you're at it. :P I suspect my attempts at Puppet modules is going to be amusing | ||
| [2009/04/01 00:42:07] <justdave> first run copies all the files in, but doesn't fix that mtime for some reason | ||
| [2009/04/01 00:42:08] <lak> justdave: yeah, you can't really fix that | ||
| [2009/04/01 00:42:28] <lak> it's a kind of niggling thing - the directory always runs before the files in it, so it can't catch the updated checksum until the next run | ||
| [2009/04/01 00:42:42] <lak> i think i could fix it now, i just haven't gotten pissed enough at it to do so | ||
| [2009/04/01 00:42:45] <lak> one of these days, tho :) | ||
| [2009/04/01 00:43:01] <lak> Djelibeybi: heh, well, i'll let you know if i see anything drastic, but... a guy's got to eat somehow :) | ||
| [2009/04/01 00:43:17] <lak> anyway, just checking in; tomorrow's a travel day, so i need to do my shower/shave bit now | ||
| [2009/04/01 00:43:18] <lak> laters all | ||
| [2009/04/01 00:43:21] <Djelibeybi> lak: I was being more than a little facetious. I'll be happy with just sudoers staying put. | ||
| [2009/04/01 00:43:27] <lak> heh | ||
| [2009/04/01 00:43:30] <lak> yeah, i bet | ||
| [2009/04/01 00:43:34] <lak> ok, ta ta | ||
| [2009/04/01 00:43:37] @ Quit: lak: | ||
| [2009/04/01 00:44:23] @ nakano_ is now known as nakano | ||
| [2009/04/01 00:46:50] @ nakano is now known as nakano_ | ||
| [2009/04/01 00:49:03] @ Quit: claymation_: Read error: 60 (Operation timed out) | ||
| [2009/04/01 01:03:40] @ mayday_jay joined channel #puppet | ||
| [2009/04/01 01:20:41] @ Quit: cwebber: | ||
| [2009/04/01 01:38:15] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 01:39:04] @ Quit: d3vilb0x: Remote closed the connection | ||
| [2009/04/01 01:39:25] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 01:40:21] @ Quit: d3vilb0x: Client Quit | ||
| [2009/04/01 01:40:26] @ f3ew_ is now known as f3ew | ||
| [2009/04/01 01:50:26] @ benblack is now known as benblack|away | ||
| [2009/04/01 01:51:50] @ toi joined channel #puppet | ||
| [2009/04/01 01:58:39] @ jizquierdo joined channel #puppet | ||
| [2009/04/01 02:00:00] @ koojoo is now known as koojooawy | ||
| [2009/04/01 02:03:19] @ Quit: rmiller4pi8: "Leaving." | ||
| [2009/04/01 02:21:21] <FiXion> do you manage the puppetmaster with puppet also? | ||
| [2009/04/01 02:21:38] <FiXion> and if so - do you also distribute /etc/puppet/puppet.conf ? | ||
| [2009/04/01 02:21:54] <FiXion> and if so - do you just add the [puppetmasterd] section to all clients as well, or? | ||
| [2009/04/01 02:22:15] <FiXion> and goodmorning to those of you in CEST :) | ||
| [2009/04/01 02:22:17] @ PaulWay left channel #puppet () | ||
| [2009/04/01 02:23:09] @ Quit: minaural: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 02:23:21] <Djelibeybi> FiXion: yes, no, no. I use Augeas. | ||
| [2009/04/01 02:23:35] <FiXion> Augeas? | ||
| [2009/04/01 02:23:46] * FiXion googles :) | ||
| [2009/04/01 02:24:15] <Djelibeybi> The Augeas type in Puppet allows you to change parts of the file, without using templates | ||
| [2009/04/01 02:24:27] <Djelibeybi> Essentially, it turns certain /etc configuration files into key/value hierarchies | ||
| [2009/04/01 02:24:36] <Djelibeybi> And then allows you to manipulate them | ||
| [2009/04/01 02:25:01] <Djelibeybi> I manage things like sshd_config, pam.d/* and /etc/puppet/*.conf and /etc/sysconfig/* stuff with it | ||
| [2009/04/01 02:25:02] <FiXion> nice. kindof what you'd usually do in cfengine | ||
| [2009/04/01 02:25:20] <Djelibeybi> Dunno, I've never used cfengine. :) | ||
| [2009/04/01 02:25:21] <FiXion> (except you just match "lines" and insert/remove) | ||
| [2009/04/01 02:25:23] <Djelibeybi> www.augeas.net | ||
| [2009/04/01 02:25:32] <Djelibeybi> And check the Augeas type on the Puppet site | ||
| [2009/04/01 02:25:39] <Djelibeybi> And on that note, time for me to go home! | ||
| [2009/04/01 02:25:40] <Djelibeybi> G'night all. | ||
| [2009/04/01 02:25:43] <FiXion> Djelibeybi: thank you for the tip. I'll have a look at it. | ||
| [2009/04/01 02:25:47] <kjetilho> FiXion: well, you can't match lines in, say, my.cnf | ||
| [2009/04/01 02:25:55] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/04/01 02:25:56] <kjetilho> since it uses [sections] | ||
| [2009/04/01 02:26:01] @ raphink joined channel #puppet | ||
| [2009/04/01 02:26:19] <FiXion> kjetilho: but augeas handles [sections] ? | ||
| [2009/04/01 02:26:30] <kjetilho> yes | ||
| [2009/04/01 02:26:55] <kjetilho> Augeas has a special language, a bit similar to BNF, to describe configuration file syntax | ||
| [2009/04/01 02:27:00] <FiXion> why do you use Augeas, instead of just replacing the entire file? | ||
| [2009/04/01 02:27:17] <FiXion> if you only set certain parameters - you can't be certain that the resulting config is actually what you want | ||
| [2009/04/01 02:27:35] <FiXion> but if you want to allow local variations ofcourse | ||
| [2009/04/01 02:27:53] <kjetilho> it's useful if you support many different OS and/or distros | ||
| [2009/04/01 02:28:20] <FiXion> and you don't want a config file in puppet/files-store for each OS/distro | ||
| [2009/04/01 02:28:22] <FiXion> ? | ||
| [2009/04/01 02:28:42] <FiXion> I've just written case statements in the beginning of my rules - that define which src and which dest. to use | ||
| [2009/04/01 02:28:46] <kjetilho> yeah, in some cases you want the distro to be the boss wrt best settings | ||
| [2009/04/01 02:29:03] <kjetilho> it's a pain to go through changes when you do a dist-upgrade of Debian, for instance | ||
| [2009/04/01 02:29:43] <FiXion> we're mainly running ubuntu server LTS | ||
| [2009/04/01 02:29:53] <FiXion> and I wouldn't like the distro to modify my config files all of a sudden | ||
| [2009/04/01 02:30:03] <FiXion> ofcourse it will happen from 8.04 to 9.04 | ||
| [2009/04/01 02:30:31] <FiXion> but that would be a case of modifying config's to support 9.04 (ie. point to a different file where necessary) | ||
| [2009/04/01 02:30:54] <FiXion> and if someone added 9.04 - puppet simply wouldn't do anything distro specific - as the case statements would ensure empty src and dest. vars | ||
| [2009/04/01 02:31:00] <FiXion> that's my current idea atleast :) | ||
| [2009/04/01 02:31:07] <FiXion> so puppet wouldn't "screw it up" | ||
| [2009/04/01 02:31:12] <FiXion> but there'd be a log entry of the error | ||
| [2009/04/01 02:31:30] <FiXion> ie. puppet run on unsupported distro | ||
| [2009/04/01 02:32:34] <FiXion> but if one wants local variances.. I get that Augeas can be nice | ||
| [2009/04/01 02:32:55] <FiXion> or "is the only way to do it" is properly the right way to say it :) | ||
| [2009/04/01 02:33:09] <FiXion> s/properly/probably/ | ||
| [2009/04/01 02:33:11] <FiXion> or something :) | ||
| [2009/04/01 02:33:43] <kjetilho> wehn you have a monolithic config file, you sometimes wonder if a setting is crucial, or just a holdover from the original config used | ||
| [2009/04/01 02:34:10] <kjetilho> with Augeas you're much more explicit about what is actually needed to change | ||
| [2009/04/01 02:34:17] <FiXion> well - that will ofcourse be revisited with each new distro - as you add distro support. | ||
| [2009/04/01 02:34:34] <FiXion> problem with Augeas approach is ofcourse, that 1 config entry can change what the server actually does. | ||
| [2009/04/01 02:35:04] <FiXion> so you could think that a secure setup was ensured with setting X configlines.. and it may not be in a new version. | ||
| [2009/04/01 02:35:21] <FiXion> it seems more dangerous to allow local variances | ||
| [2009/04/01 02:35:58] <kjetilho> sure | ||
| [2009/04/01 02:40:20] @ gaveen joined channel #puppet | ||
| [2009/04/01 02:41:29] @ Quit: gaveen: Read error: 54 (Connection reset by peer) | ||
| [2009/04/01 02:46:11] @ stijnbe joined channel #puppet | ||
| [2009/04/01 02:47:32] @ Quit: stijnbe: Client Quit | ||
| [2009/04/01 02:48:52] @ stijnbe joined channel #puppet | ||
| [2009/04/01 02:55:24] <FiXion> where does puppet get it's hostname from? | ||
| [2009/04/01 02:55:55] <FiXion> it sends reports with a hostname that is not what hostname -f reports | ||
| [2009/04/01 02:57:07] @ mattock joined channel #puppet | ||
| [2009/04/01 03:01:37] <FiXion> hmm can anyone help me with understanding the best practices 2.0 ? | ||
| [2009/04/01 03:02:47] <FiXion> I'm suppose to write a module for each service (like openssh,apache2 etc.) I want to configure | ||
| [2009/04/01 03:03:17] <FiXion> but there seems to be no mention as to the best practice for making the module support different OS/Distro's | ||
| [2009/04/01 03:03:47] <FiXion> also - in regards to the /services/ folder | ||
| [2009/04/01 03:04:10] <FiXion> am I suppose to have a copy of f.ex. openssh and apache2 modules - under there as well | ||
| [2009/04/01 03:04:38] <FiXion> if I have a services/s_ldap (as the example says) - it also needs openssh and apache2 | ||
| [2009/04/01 03:07:05] @ Quit: punkcut: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 03:11:43] @ tim|mb joined channel #puppet | ||
| [2009/04/01 03:12:59] @ markp_ joined channel #puppet | ||
| [2009/04/01 03:24:35] @ Quit: ezmob: "Bye!" | ||
| [2009/04/01 03:27:48] @ Quit: benp-: Read error: 110 (Connection timed out) | ||
| [2009/04/01 03:27:56] @ kibahop joined channel #puppet | ||
| [2009/04/01 03:30:04] @ tim|macbook joined channel #puppet | ||
| [2009/04/01 03:30:12] @ fbe joined channel #puppet | ||
| [2009/04/01 03:31:24] @ MarlondB joined channel #puppet | ||
| [2009/04/01 03:33:19] @ aymerick joined channel #puppet | ||
| [2009/04/01 03:35:51] @ bajan joined channel #puppet | ||
| [2009/04/01 03:47:16] @ kolla joined channel #puppet | ||
| [2009/04/01 03:51:53] @ Quit: tim|mb: Read error: 110 (Connection timed out) | ||
| [2009/04/01 03:53:13] @ seymopau joined channel #puppet | ||
| [2009/04/01 03:53:19] @ Quit: seymopau: Client Quit | ||
| [2009/04/01 03:54:50] @ DerekW joined channel #puppet | ||
| [2009/04/01 03:56:52] @ MattyM joined channel #puppet | ||
| [2009/04/01 03:57:16] @ Djelibeybi joined channel #puppet | ||
| [2009/04/01 03:59:18] @ PsychoSid joined channel #puppet | ||
| [2009/04/01 04:02:26] @ briandquinn joined channel #puppet | ||
| [2009/04/01 04:06:02] @ tim|mb joined channel #puppet | ||
| [2009/04/01 04:12:43] @ Quit: bgupta: | ||
| [2009/04/01 04:13:00] @ bgupta joined channel #puppet | ||
| [2009/04/01 04:16:35] @ Quit: Dyson: Excess Flood | ||
| [2009/04/01 04:17:02] @ Dyson joined channel #puppet | ||
| [2009/04/01 04:19:57] @ Quit: int: Remote closed the connection | ||
| [2009/04/01 04:24:03] @ keithlard joined channel #puppet | ||
| [2009/04/01 04:25:31] @ Quit: tim|macbook: Read error: 110 (Connection timed out) | ||
| [2009/04/01 04:26:18] @ Quit: kibahop: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 04:27:57] @ madrescher1 joined channel #puppet | ||
| [2009/04/01 04:28:00] @ kibahop joined channel #puppet | ||
| [2009/04/01 04:28:23] @ Quit: madrescher1: Remote closed the connection | ||
| [2009/04/01 04:29:14] @ Quit: madrescher: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 04:29:17] @ Quit: sfeehan: Read error: 60 (Operation timed out) | ||
| [2009/04/01 04:29:31] @ madrescher joined channel #puppet | ||
| [2009/04/01 04:29:32] @ Quit: madrescher: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 04:29:59] @ int joined channel #puppet | ||
| [2009/04/01 04:30:59] @ sfeehan joined channel #puppet | ||
| [2009/04/01 04:31:19] @ glaw joined channel #puppet | ||
| [2009/04/01 04:32:20] @ Quit: glaw: Client Quit | ||
| [2009/04/01 04:32:39] @ Quit: andrewcshafer: | ||
| [2009/04/01 04:32:56] @ madrescher joined channel #puppet | ||
| [2009/04/01 04:33:01] @ Quit: madrescher: Remote closed the connection | ||
| [2009/04/01 04:33:13] @ verwilst joined channel #puppet | ||
| [2009/04/01 04:34:46] @ kibahop left channel #puppet () | ||
| [2009/04/01 04:40:30] @ thegcat joined channel #puppet | ||
| [2009/04/01 04:41:13] @ omry_|work joined channel #puppet | ||
| [2009/04/01 04:44:01] @ AussieGuy joined channel #puppet | ||
| [2009/04/01 04:44:20] <AussieGuy> ive gone through the puppet type reference, but what do you make to ensure a certain directory is always there? | ||
| [2009/04/01 04:44:27] <AussieGuy> without specifying whats in it | ||
| [2009/04/01 04:44:42] <Volcane> file{"/foo": ensure => directory} | ||
| [2009/04/01 04:44:47] @ Quit: eythian_: Remote closed the connection | ||
| [2009/04/01 04:44:54] @ eythian joined channel #puppet | ||
| [2009/04/01 04:46:42] <AussieGuy> no quotes around directory? | ||
| [2009/04/01 04:47:30] <huggie> AussieGuy: If you don't believe Volcane you could try it ;) | ||
| [2009/04/01 04:47:55] <AussieGuy> both seem to compile...it would take an hour or two to confirm it though | ||
| [2009/04/01 04:48:39] <Volcane> there's very few things in puppet you "have" to quote :) | ||
| [2009/04/01 04:50:08] @ Quit: briandquinn: | ||
| [2009/04/01 04:50:42] @ Quit: omry|work: Read error: 110 (Connection timed out) | ||
| [2009/04/01 04:52:49] <huggie> AussieGuy: if it takes an hour or two to confirm, you're doing it wrong :) | ||
| [2009/04/01 04:54:00] <AussieGuy> I would start puppetd, make it deploy the file | ||
| [2009/04/01 04:54:12] <AussieGuy> when it gets to it | ||
| [2009/04/01 04:54:39] <Volcane> AussieGuy: create a file with: file{"/tmp/foo": ensure=>directory} all in one line, call it foo.pp, now run "puppet foo.pp" | ||
| [2009/04/01 04:55:02] <Volcane> AussieGuy: voila, 59 minutes 40 seconds saved to answering your own questions | ||
| [2009/04/01 04:57:04] @ kibahop joined channel #puppet | ||
| [2009/04/01 04:58:23] @ Quit: keithlard: | ||
| [2009/04/01 04:59:34] @ keithlard joined channel #puppet | ||
| [2009/04/01 04:59:53] @ Quit: Volcane: Read error: 113 (No route to host) | ||
| [2009/04/01 05:00:41] @ Volcane joined channel #puppet | ||
| [2009/04/01 05:01:38] @ mikepea joined channel #puppet | ||
| [2009/04/01 05:02:23] @ Quit: int: Client Quit | ||
| [2009/04/01 05:04:22] @ int joined channel #puppet | ||
| [2009/04/01 05:17:12] @ briandquinn joined channel #puppet | ||
| [2009/04/01 05:22:53] @ Quit: keithlard: | ||
| [2009/04/01 05:23:02] @ ohadlevy left channel #puppet () | ||
| [2009/04/01 05:39:51] @ glaw joined channel #puppet | ||
| [2009/04/01 05:57:52] @ mattock left channel #puppet () | ||
| [2009/04/01 05:59:47] @ keithlard joined channel #puppet | ||
| [2009/04/01 06:04:21] @ Quit: Llama: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 06:10:11] @ Quit: int: Remote closed the connection | ||
| [2009/04/01 06:13:33] @ int joined channel #puppet | ||
| [2009/04/01 06:19:43] @ lak joined channel #puppet | ||
| [2009/04/01 06:23:11] @ Quit: lak: Client Quit | ||
| [2009/04/01 06:26:56] @ Quit: verwilst: "Ex-Chat" | ||
| [2009/04/01 06:33:52] @ tobias- joined channel #puppet | ||
| [2009/04/01 06:34:55] <tobias-> Mixing versions of puppetd and puppetmaster, is that OK or is it a big no no, more that you should use same version of puppetd and puppetmaster on all machines, manually install the latest stable ? | ||
| [2009/04/01 06:35:28] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/04/01 06:37:20] <ssm> tobias-: I have a mixed environment, but generally try to keep puppetmasterd at the latest release | ||
| [2009/04/01 06:38:19] <ssm> got nice munin-graphs of the nodes' puppetversions changing over time as the other admins upgrade their boxes | ||
| [2009/04/01 06:39:22] <ssm> If you can upgrade all your nodes at once, you'll have an easier time introducing new types and features, though | ||
| [2009/04/01 06:40:22] @ Quit: AussieGuy: "Leaving" | ||
| [2009/04/01 06:41:17] <tobias-> ssm: I'm about to introduce puppet on already setup production boxes | ||
| [2009/04/01 06:42:42] <tobias-> but mostly on new upcoming boxes though | ||
| [2009/04/01 06:42:49] <ssm> tobias-: joy... :P I've done the same thing. When I started introducing puppet, we had several hundred servers all set up by hand. Debian, Ubuntu, SuSE, CentOS, Fedora, RHEL.... | ||
| [2009/04/01 06:43:23] <tobias-> ssm: You went not with using packages of the distribution? | ||
| [2009/04/01 06:43:28] <jenza> hmmm anyone seen bizarre behaviour with authorized_keys on .8 now? | ||
| [2009/04/01 06:44:16] <ssm> tobias-: I've packaged new puppet and facter-.debs for debian/ubuntu, and get the Fedora/CentOS/RHEL packages from EPEL | ||
| [2009/04/01 06:45:13] <ssm> ...and killed off the SuSE-servers... | ||
| [2009/04/01 06:45:26] <tobias-> :) | ||
| [2009/04/01 06:45:56] <tobias-> i've only really made patches to debian packages, not building them from scratch | ||
| [2009/04/01 06:46:34] <tobias-> i'll guess i'll look into do the same, and maybe have our own repository for debian/ubuntu so upgrading will be easier, i guess. | ||
| [2009/04/01 06:47:35] <ssm> The Debian packages of puppet/facter are good enough, download with "dget http://[...].dsc" from the packages.debian.org page, and use "uupdate" to use that packaging on the newest puppet/facter tarballs | ||
| [2009/04/01 06:48:04] <tobias-> ssm: thanks i'll look into that :) | ||
| [2009/04/01 06:48:49] <tobias-> first I'll spend some time with the current version to learn puppet more closely. It's like OO but with systems. I kind of like it :) | ||
| [2009/04/01 06:49:26] <ssm> http://reductivelabs.com/trac/puppet/wiki/StyleGuide was quite useful | ||
| [2009/04/01 06:49:26] <tobias-> Would be interesting to see how other has implemented Puppet. Is there any "Rate my puppet" page somewhere? :) | ||
| [2009/04/01 06:50:04] <ssm> tobias-: not that I know of | ||
| [2009/04/01 06:51:27] <ssm> hmmm, there was another style guide somewhere... | ||
| [2009/04/01 06:51:39] <ssm> mentioning modules/ and clients/ in the module path... | ||
| [2009/04/01 06:52:30] <ssm> ah, this was the one I was looking for: http://reductivelabs.com/trac/puppet/wiki/PuppetBestPractice | ||
| [2009/04/01 06:53:05] <tobias-> ssm: Yes i've seen that, and I will try to follow them | ||
| [2009/04/01 06:53:24] <ssm> I've also set up a testing environment on the same puppetmaster. | ||
| [2009/04/01 06:53:30] <tobias-> ssm: But you know how it is sometimes. When you do something new, if you would do it over again you would do some things differently, right? :) | ||
| [2009/04/01 06:53:36] <ssm> I wrote about it at http://fnord.no/sysadmin/puppet/staging | ||
| [2009/04/01 06:53:53] <ssm> tobias-: I've done lots of things over again, yes :) | ||
| [2009/04/01 06:55:20] <tobias-> Now it's time to get this boat floathing, thanks :) | ||
| [2009/04/01 06:55:30] <tobias-> i'll think i'll be sticking around here | ||
| [2009/04/01 06:55:46] <ssm> Good luck :) | ||
| [2009/04/01 06:57:25] <tobias-> ssm: just so happens that I'm listening to Röyksopps new album, they're norwegian too. So I guess thats a good sign | ||
| [2009/04/01 07:08:05] @ Quit: tim|mb: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:05] @ Quit: bajan: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:07] @ Quit: ezekiel-v3: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:07] @ Quit: jj__: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:08] @ Quit: bda: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:08] @ Quit: CompBrain: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:08] @ Quit: cmoates: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:09] @ Quit: JD: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:09] @ Quit: jmeeuwen: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:09] @ Quit: G_work: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 07:08:16] @ bajan joined channel #puppet | ||
| [2009/04/01 07:08:16] @ ezekiel-v3 joined channel #puppet | ||
| [2009/04/01 07:08:16] @ jj__ joined channel #puppet | ||
| [2009/04/01 07:08:16] @ G_work joined channel #puppet | ||
| [2009/04/01 07:08:16] @ bda joined channel #puppet | ||
| [2009/04/01 07:08:17] @ CompBrain joined channel #puppet | ||
| [2009/04/01 07:08:17] @ cmoates joined channel #puppet | ||
| [2009/04/01 07:08:17] @ jmeeuwen joined channel #puppet | ||
| [2009/04/01 07:08:17] @ JD joined channel #puppet | ||
| [2009/04/01 07:10:30] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 07:11:05] @ tim|mb joined channel #puppet | ||
| [2009/04/01 07:14:07] @ youam_ is now known as youam | ||
| [2009/04/01 07:16:15] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 07:16:18] @ MarlondB joined channel #puppet | ||
| [2009/04/01 07:24:54] @ Quit: d3vilb0x: | ||
| [2009/04/01 07:29:19] @ martha joined channel #puppet | ||
| [2009/04/01 07:32:58] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 07:34:30] @ MarlondB joined channel #puppet | ||
| [2009/04/01 07:41:01] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 07:42:40] @ MarlondB joined channel #puppet | ||
| [2009/04/01 07:44:39] @ Quit: briandquinn: | ||
| [2009/04/01 07:44:50] <duritong> gepetto: seen DavidS | ||
| [2009/04/01 07:44:50] <gepetto> duritong: DavidS was last seen 2 days, 22 hours, 54 minutes and 58 seconds ago, quitting IRC (Read error: 104 (Connection reset by peer)) | ||
| [2009/04/01 07:47:39] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 07:48:07] @ MarlondB joined channel #puppet | ||
| [2009/04/01 07:51:26] @ thegcat_ joined channel #puppet | ||
| [2009/04/01 07:55:13] @ yarihm joined channel #puppet | ||
| [2009/04/01 07:59:46] @ Volcane is now known as Volcane|away | ||
| [2009/04/01 08:00:35] @ MarlondB_ joined channel #puppet | ||
| [2009/04/01 08:00:57] @ Quit: mikepea: | ||
| [2009/04/01 08:01:14] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 08:01:23] @ alban2 joined channel #puppet | ||
| [2009/04/01 08:02:29] @ mikepea joined channel #puppet | ||
| [2009/04/01 08:05:06] @ Quit: thegcat_: | ||
| [2009/04/01 08:08:37] <jenza> so is anyone away of authorized_key changes in .8 at all? | ||
| [2009/04/01 08:09:39] <jenza> s/away/aware/ | ||
| [2009/04/01 08:10:08] <jenza> Fixed #1629 - A refactoring of ssh_authorized_key parsed provider | ||
| [2009/04/01 08:10:09] <gepetto> jenza: #1629 is http://projects.reductivelabs.com/issues/show/1629 "Puppet - Bug #1629: incorrect permissions on ssh_authorized_keys created files - ReductiveLabs.com" | ||
| [2009/04/01 08:10:10] <jenza> Ah yup :) | ||
| [2009/04/01 08:10:16] @ Quit: thegcat: Read error: 110 (Connection timed out) | ||
| [2009/04/01 08:10:42] @ Quit: MarlondB_: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 08:10:50] @ MarlondB joined channel #puppet | ||
| [2009/04/01 08:16:32] @ d3vilb0x_ joined channel #puppet | ||
| [2009/04/01 08:17:03] @ Quit: d3vilb0x_: Client Quit | ||
| [2009/04/01 08:18:41] @ nakano_ is now known as nakano | ||
| [2009/04/01 08:24:50] @ Volcane|away is now known as Volcane | ||
| [2009/04/01 08:25:59] @ kambiz_away is now known as kambiz | ||
| [2009/04/01 08:28:59] @ jharmo2 joined channel #puppet | ||
| [2009/04/01 08:31:16] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 08:32:52] @ MarlondB joined channel #puppet | ||
| [2009/04/01 08:35:17] @ ethan_rowe joined channel #puppet | ||
| [2009/04/01 08:35:38] @ Innocenti joined channel #puppet | ||
| [2009/04/01 08:36:30] @ MarlondB_ joined channel #puppet | ||
| [2009/04/01 08:37:52] @ Quit: MarlondB_: Read error: 54 (Connection reset by peer) | ||
| [2009/04/01 08:41:34] @ MarlondB_ joined channel #puppet | ||
| [2009/04/01 08:41:36] @ Quit: MarlondB: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 08:51:35] @ Quit: stijnbe: "Leaving..." | ||
| [2009/04/01 08:55:14] @ Quit: dene: SendQ exceeded | ||
| [2009/04/01 08:55:16] @ dene joined channel #puppet | ||
| [2009/04/01 09:02:21] @ Volcane left channel #puppet () | ||
| [2009/04/01 09:03:17] @ Volcane joined channel #puppet | ||
| [2009/04/01 09:06:52] @ lludwig left channel #puppet () | ||
| [2009/04/01 09:08:32] @ Bass10 joined channel #puppet | ||
| [2009/04/01 09:13:41] @ webx joined channel #puppet | ||
| [2009/04/01 09:18:13] <webx> if I've installed puppet via source, and I want to move to using gems across my network... can I simply remove the /usr/lib/ruby/site_ruby/1.8/puppet & facter directories | ||
| [2009/04/01 09:18:23] @ Quit: fujin: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 09:18:25] <webx> and then use gem install for the newer versions moving forward | ||
| [2009/04/01 09:18:57] @ fujin joined channel #puppet | ||
| [2009/04/01 09:19:05] <Volcane> there are also a few binaries that gets installed | ||
| [2009/04/01 09:19:22] <Volcane> well, binaries as in stuff in /*bin | ||
| [2009/04/01 09:19:35] <webx> yea | ||
| [2009/04/01 09:20:14] <webx> other than just removing those, which I had assumed would be assumed (hah) -- that should wipe the old libraries out | ||
| [2009/04/01 09:20:47] <Volcane> pretty much | ||
| [2009/04/01 09:21:07] <Volcane> what distro you on? | ||
| [2009/04/01 09:21:20] @ Quit: Bass10: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 09:21:32] <webx> centos | ||
| [2009/04/01 09:21:34] @ Bass10 joined channel #puppet | ||
| [2009/04/01 09:21:41] <Volcane> why not use the rpms? | ||
| [2009/04/01 09:21:55] @ mizzy joined channel #puppet | ||
| [2009/04/01 09:22:03] <webx> I could, but I was reading the puppet page and they seemed to indicate that the EPEL repository wasn't updated often | ||
| [2009/04/01 09:22:18] <webx> inaccurate? | ||
| [2009/04/01 09:22:21] <Volcane> its a bit slow, but puppet ships with a perfectly fine spec file to build your own | ||
| [2009/04/01 09:22:31] <Volcane> instlling from source or other package systems on a RPM system really is a terrible idea | ||
| [2009/04/01 09:22:41] @ Quit: Bass10: SendQ exceeded | ||
| [2009/04/01 09:23:10] @ Bass10 joined channel #puppet | ||
| [2009/04/01 09:26:06] <webx> hmm, I don't see the spec file in 24.8 | ||
| [2009/04/01 09:26:10] <webx> am I just missing it? | ||
| [2009/04/01 09:26:18] <Volcane> you're just missing it | ||
| [2009/04/01 09:26:43] <Volcane> ./conf/redhat/puppet.spec | ||
| [2009/04/01 09:27:37] <webx> thanks | ||
| [2009/04/01 09:27:42] <Volcane> you generally need to up the version in the spec file to the right one, disable the abomination thats aegus if you dont want it in the require list and just do '% rpmbuild -ba -D 'dist .el5' -D 'rhel 5' puppet.spec ' | ||
| [2009/04/01 09:29:01] @ erm_ joined channel #puppet | ||
| [2009/04/01 09:30:27] @ jief- joined channel #puppet | ||
| [2009/04/01 09:31:56] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 09:32:23] <jief-> hello. I keep getting this error on clients after enabling reporting. The error is 'err: Reporting failed: wrong header line format'. From what I can tell, this error comes from http.rb. On the server I get this error "err: Could not intern from marshal: incompatible marshal file format (can't be read) format version 4.8 required; 45.45 given | ||
| [2009/04/01 09:32:30] <jief-> im really lost here | ||
| [2009/04/01 09:32:35] <jief-> anyone has ever seen this problem before? | ||
| [2009/04/01 09:32:44] <jief-> that's on Ubuntu Hardy running 0.24.8 | ||
| [2009/04/01 09:32:58] <jief-> ruby 1.8 | ||
| [2009/04/01 09:33:03] <jief-> facter 1.5.4 | ||
| [2009/04/01 09:33:18] <webx> that is reported from puppet? | ||
| [2009/04/01 09:33:35] <jief-> yup | ||
| [2009/04/01 09:36:20] <jief-> i tried switching to Mongrel. same problem. | ||
| [2009/04/01 09:41:15] @ Quit: toi: Read error: 110 (Connection timed out) | ||
| [2009/04/01 09:43:18] @ Quit: mayday_jay: " HydraIRC -> http://www.hydrairc.com <- The professional IRC Client :D" | ||
| [2009/04/01 09:55:19] @ Quit: fujin: Read error: 110 (Connection timed out) | ||
| [2009/04/01 10:10:45] @ rmiller4pi8 joined channel #puppet | ||
| [2009/04/01 10:18:51] @ rmiller4pi81 joined channel #puppet | ||
| [2009/04/01 10:21:55] @ mfoster joined channel #puppet | ||
| [2009/04/01 10:24:42] @ Quit: aZaFred: | ||
| [2009/04/01 10:25:01] @ Quit: rmiller4pi8: Read error: 60 (Operation timed out) | ||
| [2009/04/01 10:26:24] @ mvn071 joined channel #puppet | ||
| [2009/04/01 10:30:00] @ stijnbe joined channel #puppet | ||
| [2009/04/01 10:30:57] @ claymation joined channel #puppet | ||
| [2009/04/01 10:32:59] @ Quit: d3vilb0x: | ||
| [2009/04/01 10:40:19] @ kibahop left channel #puppet () | ||
| [2009/04/01 10:43:29] @ Quit: tim|mb: | ||
| [2009/04/01 10:46:54] @ Quit: rmiller4pi81: "Leaving." | ||
| [2009/04/01 10:47:31] @ Quit: jief-: "Lost terminal" | ||
| [2009/04/01 10:48:39] @ dragonball_ joined channel #puppet | ||
| [2009/04/01 10:50:32] @ Quit: dragonball_: Client Quit | ||
| [2009/04/01 10:59:17] @ markl_ joined channel #puppet | ||
| [2009/04/01 11:00:28] @ hessml|away joined channel #puppet | ||
| [2009/04/01 11:03:34] @ omry_|work is now known as omry|work | ||
| [2009/04/01 11:05:34] @ unxfrek joined channel #puppet | ||
| [2009/04/01 11:14:35] @ rmiller4pi8 joined channel #puppet | ||
| [2009/04/01 11:15:11] @ hessml|away is now known as hessml|away|away | ||
| [2009/04/01 11:15:57] <ashp> Hmm, anyone noticed any cases of .8 not starting services that aren't running (RHEL5.3) | ||
| [2009/04/01 11:16:08] <ashp> It wouldn't start up any of the dell services, but a --debug showed it was at least checking them | ||
| [2009/04/01 11:16:12] @ joe-mac joined channel #puppet | ||
| [2009/04/01 11:16:38] <duritong> ashp: what reports status? | ||
| [2009/04/01 11:16:46] <duritong> service $dell status | ||
| [2009/04/01 11:16:59] <ashp> well i just manually started them up for some testing, so now I'm going to have to meddle, it was showing them down | ||
| [2009/04/01 11:18:34] <duritong> afair service on .8 now assumes hasstatus to be true | ||
| [2009/04/01 11:18:54] <duritong> and I suspect the dell scripts to be broken | ||
| [2009/04/01 11:19:24] <ashp> OH | ||
| [2009/04/01 11:19:28] <ashp> i screwed up, you managed to make me spot it | ||
| [2009/04/01 11:19:33] <ashp> service { [ 'dataeng','dsm_om_shrsvc','dsm_om_connsvc','mptctl','instsvcdrv','dsm_sa_ipmi' ]: | ||
| [2009/04/01 11:19:36] <ashp> status => "true", | ||
| [2009/04/01 11:19:38] <ashp> ... whoops | ||
| [2009/04/01 11:20:00] <Volcane> duritong: does it really? I cant imagine such a change on a . release | ||
| [2009/04/01 11:20:35] @ Quit: mvn071: "Leaving" | ||
| [2009/04/01 11:20:37] <ashp> now to see if i've used status where I wanted hasstatus elsewhere | ||
| [2009/04/01 11:20:49] @ Quit: PsychoSid: "Leaving." | ||
| [2009/04/01 11:22:23] <Volcane> according to the comments top of the provider it still assumes hasstatus to be false | ||
| [2009/04/01 11:23:04] <duritong> Volcane: I might be wrong, I thought we once discussed about such a change, but only for the redhat provider | ||
| [2009/04/01 11:23:23] <duritong> as redhat scripts seem nearly all to work well with hasstatus | ||
| [2009/04/01 11:23:25] <Volcane> it would be awesome if it did have it, but i am not seeing it in the code | ||
| [2009/04/01 11:23:28] @ joe-mac left channel #puppet () | ||
| [2009/04/01 11:24:06] * duritong might be wrong, but doesn't have time to check the archive, so ng shuts up ;) | ||
| [2009/04/01 11:25:45] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 11:27:57] @ pleemans joined channel #puppet | ||
| [2009/04/01 11:28:41] <Volcane> yeah, not seeing it, the redhat provider checks if hasstatus == true, then does a status, else calls the super | ||
| [2009/04/01 11:29:06] <Volcane> pity, would have been a nice improvement | ||
| [2009/04/01 11:31:36] @ hessml|away|away is now known as hessml|away | ||
| [2009/04/01 11:32:34] @ d3vilb0x_ joined channel #puppet | ||
| [2009/04/01 11:34:48] <ashp> argh this is stupid and annoying | ||
| [2009/04/01 11:34:55] <ashp> dell have one startup script that starts three things | ||
| [2009/04/01 11:35:12] <ashp> so if two are running and one is down status returns ok and it doesn't start the last | ||
| [2009/04/01 11:36:26] @ Quit: alban2: Read error: 110 (Connection timed out) | ||
| [2009/04/01 11:36:34] <Volcane> nice, about as half arsed as their hardware then :P | ||
| [2009/04/01 11:36:34] <rmiller4pi8> thankfully startup scripts are easy to refactor | ||
| [2009/04/01 11:36:59] @ Quit: MarlondB_: | ||
| [2009/04/01 11:37:17] @ pleemans is now known as toi | ||
| [2009/04/01 11:37:56] @ aZaFred joined channel #puppet | ||
| [2009/04/01 11:39:03] @ alban2 joined channel #puppet | ||
| [2009/04/01 11:40:12] @ verwilst joined channel #puppet | ||
| [2009/04/01 11:40:24] @ Quit: Innocenti: Client Quit | ||
| [2009/04/01 11:41:33] @ Quit: catay: Read error: 60 (Operation timed out) | ||
| [2009/04/01 11:43:03] @ cirquitz joined channel #puppet | ||
| [2009/04/01 11:43:24] @ jlambert joined channel #puppet | ||
| [2009/04/01 11:43:50] @ Quit: glaw: | ||
| [2009/04/01 11:44:29] @ Quit: d3vilb0x: Read error: 110 (Connection timed out) | ||
| [2009/04/01 11:45:26] <jlambert> i am new to puppet and am just settting it up right now for testing. is there a way to set a global schedule that everything will only run between (for example) 1800-1900 unless overridden by a different schedule? | ||
| [2009/04/01 11:45:35] <jlambert> i am having a hard time finding good documentation on how the schedules work | ||
| [2009/04/01 11:46:57] @ catay joined channel #puppet | ||
| [2009/04/01 11:48:47] @ nigelk joined channel #puppet | ||
| [2009/04/01 11:48:58] <nigelk> someone broke the puppet tarball | ||
| [2009/04/01 11:48:59] <nigelk> http://reductivelabs.com/downloads/puppet/puppet.0.24.8.tgz | ||
| [2009/04/01 11:49:06] <nigelk> [ ]puppet.0.24.8.tgz23-Mar-2009 03:50 0 | ||
| [2009/04/01 11:49:21] <SyTonnerre> Nicely empty | ||
| [2009/04/01 11:50:15] <cirquitz> Can anyone tell me where in code puppetd sends puppetmasterd a csr to sign? | ||
| [2009/04/01 11:50:16] @ joe-mac joined channel #puppet | ||
| [2009/04/01 11:54:15] <mikepea> woo! we've just completed our migration to 0.24.7 (from 0.23.2!) | ||
| [2009/04/01 11:55:17] @ giles_ joined channel #puppet | ||
| [2009/04/01 11:55:28] <ashp> SEND HELP | ||
| [2009/04/01 11:55:31] <ashp> I AM TRAPPED IN SNMPD HELP | ||
| [2009/04/01 11:55:51] <jenza> Surely you can walk out? | ||
| [2009/04/01 11:56:00] <ashp> hahahaha | ||
| [2009/04/01 11:56:13] <claymation> nigelk: it's using shiny new fractal compression :) | ||
| [2009/04/01 11:56:17] <nigelk> hee | ||
| [2009/04/01 11:56:22] <ashp> i am trying to get zenoss and openmanage/snmpd to play together nicely, but it's... it's not cool | ||
| [2009/04/01 12:01:28] @ alban3 joined channel #puppet | ||
| [2009/04/01 12:03:45] @ benblack|away is now known as benblack | ||
| [2009/04/01 12:06:18] @ alfism joined channel #puppet | ||
| [2009/04/01 12:08:40] @ Quit: verwilst: "Ex-Chat" | ||
| [2009/04/01 12:15:23] @ cwebber joined channel #puppet | ||
| [2009/04/01 12:17:22] @ grim_radical joined channel #puppet | ||
| [2009/04/01 12:17:37] @ Quit: alban2: Read error: 110 (Connection timed out) | ||
| [2009/04/01 12:21:46] @ Quit: benblack: "Leaving..." | ||
| [2009/04/01 12:26:18] @ threetee joined channel #puppet | ||
| [2009/04/01 12:26:46] <giles_> is there a guide for getting a puppetmaster to puppet itself? | ||
| [2009/04/01 12:27:02] <giles_> we have one pmaster that is working, but the others aren't | ||
| [2009/04/01 12:27:06] <Volcane> theres nothing special to it | ||
| [2009/04/01 12:27:14] @ bajan left channel #puppet () | ||
| [2009/04/01 12:27:16] <giles_> I'm getting err: Could not retrieve catalog: Certificates were not trusted: hostname was not match with the server certificate | ||
| [2009/04/01 12:27:31] <giles_> openssl connect is fine | ||
| [2009/04/01 12:27:32] <SyTonnerre> Use the correct server= line then | ||
| [2009/04/01 12:27:34] <giles_> and it's signing it | ||
| [2009/04/01 12:28:08] <giles_> and we use the same puppet.conf on all hosts | ||
| [2009/04/01 12:29:37] <giles_> jeepers you were right | ||
| [2009/04/01 12:29:39] @ Quit: webx: "My damn controlling terminal disappeared!" | ||
| [2009/04/01 12:29:46] <giles_> didn't have the fqdn in the puppet.conf | ||
| [2009/04/01 12:31:09] * barn is battlings gems/rails/puppet! | ||
| [2009/04/01 12:31:15] <barn> why must gems be so annoying | ||
| [2009/04/01 12:31:38] <Volcane> barn: does your distribution not have packages? | ||
| [2009/04/01 12:31:52] <barn> Volcane: debian etch, and the active_record in there leaks to hell and back | ||
| [2009/04/01 12:32:11] @ chiggsy joined channel #puppet | ||
| [2009/04/01 12:32:24] <barn> or trust me, I'd not be putting myself through this pain | ||
| [2009/04/01 12:32:28] <Volcane> debian users should get a special flat on irc, so we know not to expect sensible behaviour :P | ||
| [2009/04/01 12:32:47] <Volcane> s/flat/flag | ||
| [2009/04/01 12:32:56] <barn> Volcane: the debian/gem wars are ugly | ||
| [2009/04/01 12:33:04] <barn> I want to avoid them, I really do (: | ||
| [2009/04/01 12:34:02] <plathrop> Volcane: Debian is like democracy, it is the worst possible Linux distribution, except for all the others. | ||
| [2009/04/01 12:34:24] <Volcane> debians like american democracy | ||
| [2009/04/01 12:34:30] <Volcane> you can do whatever u want with it, as long as you do it their way | ||
| [2009/04/01 12:34:35] <Disconnect> warning: Found multiple default providers for service: freebsd, debian; using freebsd <-- is there a fix/workaround? I'm not finding anything googling | ||
| [2009/04/01 12:34:38] <Volcane> and dont forget to call it GNU/Linux | ||
| [2009/04/01 12:34:38] <plathrop> Volcane: lol | ||
| [2009/04/01 12:34:44] <plathrop> Volcane: fair enough. | ||
| [2009/04/01 12:35:07] * Volcane cant stand the GNU/Linux thing :P | ||
| [2009/04/01 12:35:32] <plathrop> Volcane: +1 | ||
| [2009/04/01 12:35:35] <plathrop> So dumb. | ||
| [2009/04/01 12:36:46] <Disconnect> lsbdistcodename, lsbdistid etc are all correct. there's nothing in there that seems to be freebsd. | ||
| [2009/04/01 12:37:19] @ Quit: MattyM: "ta ta" | ||
| [2009/04/01 12:37:58] <Disconnect> (and 'operatingsystem' is always Ubuntu) | ||
| [2009/04/01 12:38:21] <Disconnect> oooh. or Debian. strange. | ||
| [2009/04/01 12:39:25] @ Quit: alban3: Read error: 110 (Connection timed out) | ||
| [2009/04/01 12:40:04] <Disconnect> oh. ok. facter breakage. http://pastebin.ca/1379055 .. 'facter operatingsystem' != 'facter | grep operatingsystem' fun | ||
| [2009/04/01 12:40:32] <Volcane> Disconnect: hah | ||
| [2009/04/01 12:41:51] <Disconnect> for the record, i super-hate rails right now. >1 week trying to get it working under hardy. not happening, in the end. (cuz the rails dev just did whatever he wanted, and it depends on about a dozen randomly-versioned gems and such. many of which are incompatible with each other, depend on installation order, and break any packaged ruby stuff..) so ooh, jaunty has many of them prepackaged. but then this happened. :/ | ||
| [2009/04/01 12:42:39] <Volcane> Disconnect: sounds like your average java project :_ | ||
| [2009/04/01 12:42:40] <Volcane> :) | ||
| [2009/04/01 12:42:57] <barn> to be honest, I know it's very unlinux sysadmin, but I have a lot less trouble with java | ||
| [2009/04/01 12:43:06] <Disconnect> nah our java stuff 'just works'. (well except i need to do a tomcat update from selfpackaged to upstream) | ||
| [2009/04/01 12:43:07] @ TedC joined channel #puppet | ||
| [2009/04/01 12:43:13] <barn> if your devs aren't idiots and know what they're doing it's so much less pain | ||
| [2009/04/01 12:43:24] <Volcane> dump every jar you can find without version info into lib and hope for the best seems to be the overriding philosophy behind java apps | ||
| [2009/04/01 12:43:30] <Disconnect> every few months I get "can we please put this 200k bin into libs?" "ok just check it into svn and it'll appear on all the servers by morning" | ||
| [2009/04/01 12:43:45] <Volcane> yeah, would also rather run tomcat than rails | ||
| [2009/04/01 12:43:50] <Volcane> at least it has threads :P | ||
| [2009/04/01 12:44:16] <Volcane> and comes packaged out the box with my distro etc | ||
| [2009/04/01 12:44:19] <Disconnect> any thoughts on how to fix facter? | ||
| [2009/04/01 12:44:34] <Volcane> Disconnect: projects.reductivelabs.com :( | ||
| [2009/04/01 12:51:58] <joe-mac> Disconnect: | ||
| [2009/04/01 12:52:09] <joe-mac> you use java packages on rh based on deb based | ||
| [2009/04/01 12:52:21] <joe-mac> i'm having a hell of a time gettuing my preseed to actually tell the opackage i accepted the license | ||
| [2009/04/01 12:52:45] <Disconnect> yah i have a trick for that with preseeding. lemme dig it out. | ||
| [2009/04/01 12:54:03] <Disconnect> http://pastebin.ca/1379067 | ||
| [2009/04/01 12:54:18] @ Telmo joined channel #puppet | ||
| [2009/04/01 12:55:32] @ Quit: unxfrek: "Leaving" | ||
| [2009/04/01 12:55:46] @ Quit: alfism: "Connection reset by beer" | ||
| [2009/04/01 12:57:27] <Telmo> Hello, I have a (I hope) easy to answer question, when you specify a Solaris pkg as "ensure => installed" in a package definition where does it look for the pkg? in what directory? | ||
| [2009/04/01 12:57:49] @ andrewcshafer joined channel #puppet | ||
| [2009/04/01 12:58:04] <Volcane> package{"/path/to/package": ensure => installed} | ||
| [2009/04/01 12:58:24] <Telmo> so I have to specify the source.. I see, Thanks! | ||
| [2009/04/01 12:58:26] <Disconnect> whew. its fixed in 1.5.4 -and- uupdate worked on it :) | ||
| [2009/04/01 12:59:28] <Volcane> Telmo: and thats the location on the client, not the server, so you need to copy them first. This is if your package manager doesnt support talking to the network on its own ofcourse | ||
| [2009/04/01 13:00:15] <Telmo> is there a way of making the path standard? lets say I have 15 packages needed for Oracle and I want to do an array of packages without specifying the whole path for all of them? | ||
| [2009/04/01 13:00:26] <Volcane> you can write a define to handle it | ||
| [2009/04/01 13:00:37] <Volcane> mypackage{"oracle": ensure => installed } | ||
| [2009/04/01 13:00:49] <Volcane> define mypackage($ensure) { .... } | ||
| [2009/04/01 13:01:00] <Telmo> I assume package{"/path/to/[pkg1, pkg2, pkg3]": ensure => installed} wont work | ||
| [2009/04/01 13:01:05] <Volcane> and inside the define you call package with whatever prefix u want, maybe fetch the package if you need etc | ||
| [2009/04/01 13:01:10] <Volcane> that wont work :) | ||
| [2009/04/01 13:01:12] <joe-mac> Disconnect: i go one better and have a preseed type i ganked from the wiki, it works great | ||
| [2009/04/01 13:01:20] <Telmo> I figured that much | ||
| [2009/04/01 13:01:25] <joe-mac> but java, even with that preseed, REFUSES to install cause of the lciense | ||
| [2009/04/01 13:01:43] <Disconnect> ..that recipe works perfectly for me. so evidently the one from the wiki does not, in fact, work great. | ||
| [2009/04/01 13:01:44] <joe-mac> says i need to reconfigure debconf to not be non-interactive | ||
| [2009/04/01 13:02:06] <score> joe-mac: you want do preseed stuff | ||
| [2009/04/01 13:02:07] <joe-mac> Disconnect: it has nothing to do with the preseed package type as i am preseed other packages. the problem lies with java | ||
| [2009/04/01 13:02:32] <Disconnect> right. and what i pasted up there is a preseed file and package config that works 'out of the box' for me. on fully automated server builds. | ||
| [2009/04/01 13:02:50] <joe-mac> :facepalm: i preseed postfix and ssh among other things, it all works fine. i am saying with the exact preseeds you're using on ubuntu 8.04, java does not recognize the boolean as true for accepting the dlj license | ||
| [2009/04/01 13:03:07] <score> joe-mac: look at responsefile param of file type | ||
| [2009/04/01 13:03:35] <joe-mac> :facepalm: i preseed postfix and ssh among other things, it all works fine. i am saying with the exact preseeds you're using on ubuntu 8.04, java does not recognize the boolean as true for accepting the dlj license | ||
| [2009/04/01 13:04:06] @ hessml|away is now known as hessml|away|away | ||
| [2009/04/01 13:04:12] <Disconnect> dunno then. its perfect for me on hardy and jaunty. if it doesn't work for you, you might look into whats different between what i pasted and what you are using. because seriously, that Just Works. | ||
| [2009/04/01 13:04:32] <joe-mac> Disconnect: can you do me a favor and find out what 'mode' your debconf is in? | ||
| [2009/04/01 13:04:39] <joe-mac> it should be non-interactive | ||
| [2009/04/01 13:05:01] <joe-mac> this is seriously driving me up the wall, i spent a better chunk of an hour on it before moving on last ngiht and i am revisiting today | ||
| [2009/04/01 13:05:03] <score> joe-mac: the defaults were fine in every ubuntu i've worked with | ||
| [2009/04/01 13:06:14] @ Quit: mikepea: Read error: 110 (Connection timed out) | ||
| [2009/04/01 13:06:24] <Disconnect> yah. fwiw i build with ubuntu-vm-builder, iclassify+puppet configs and bam. (although i need to add another unrelated preseed, some package recently started doing a console-locale prompt on update :/ ..) | ||
| [2009/04/01 13:06:51] <joe-mac> Disconnect: yea i have to put that in my kernel params for the pxe target | ||
| [2009/04/01 13:06:59] <joe-mac> if we're talking about the same locale prompt | ||
| [2009/04/01 13:07:09] <joe-mac> another thing that drove me up the wall | ||
| [2009/04/01 13:07:09] <score> joe-mac: i can put some of my stuff up on github if you want. i have a java and seed module (probably poorly named) | ||
| [2009/04/01 13:07:39] <joe-mac> score: i might take you up on that offer, let me re-examine the logs after i fix this ridiculous css problem | ||
| [2009/04/01 13:09:53] @ Quit: DerekW: "Leaving" | ||
| [2009/04/01 13:12:37] <joe-mac> hmm the only thing i can think of is my permissions on the .preseed files | ||
| [2009/04/01 13:13:03] <joe-mac> they're 600 when they get delivered | ||
| [2009/04/01 13:13:18] <joe-mac> but it works fine for my other stuff, just not sun's jre/jdk/bin | ||
| [2009/04/01 13:17:41] <Disconnect> the preseeds i posted tell it you've already installed it and this is just an upgrade. (the packages only prompt first time) | ||
| [2009/04/01 13:17:56] <Disconnect> fwiw | ||
| [2009/04/01 13:18:32] @ benblack joined channel #puppet | ||
| [2009/04/01 13:19:28] <joe-mac> Disconnect: theone you posted you mean right? | ||
| [2009/04/01 13:19:36] @ Quit: threetee: Read error: 110 (Connection timed out) | ||
| [2009/04/01 13:19:39] <Disconnect> yep | ||
| [2009/04/01 13:19:52] <Disconnect> the upstream package prompts once, then writes out those debconf entries | ||
| [2009/04/01 13:19:55] <joe-mac> yea that's what i am using let me fire up another vm this is like borderline personal with java now LOL | ||
| [2009/04/01 13:20:01] <Disconnect> the preseed i posted tells it it is doing an upgrade. so it never prompts. | ||
| [2009/04/01 13:20:05] <joe-mac> yea i got the debconf-get-selections from my workstation | ||
| [2009/04/01 13:20:33] <joe-mac> present and installed are the same thing right? | ||
| [2009/04/01 13:20:39] <joe-mac> no implementation difference? | ||
| [2009/04/01 13:20:44] <joe-mac> for the package type i mean | ||
| [2009/04/01 13:21:34] <Disconnect> afaik they are identical yah | ||
| [2009/04/01 13:21:37] @ WALoeIII joined channel #puppet | ||
| [2009/04/01 13:24:29] @ philip__ joined channel #puppet | ||
| [2009/04/01 13:26:36] @ Quit: kolla: Remote closed the connection | ||
| [2009/04/01 13:26:48] <score> joe-mac: what java package you trying to install? | ||
| [2009/04/01 13:26:56] <joe-mac> all three the bin jdk and jre | ||
| [2009/04/01 13:27:25] <joe-mac> i think the jre should pull the other too but i am explicit usually | ||
| [2009/04/01 13:27:34] <score> joe-mac: you might need to set up the dependencies in a certain order or use a responsefile that covers all the packages | ||
| [2009/04/01 13:27:37] @ Quit: giles_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 13:28:08] <score> joe-mac: for instance, if you installed the jdk first, then it'd try to install the jre and if your responsefile only dealt with the license stuff for the jdk package, it'd hang (i guess) | ||
| [2009/04/01 13:29:55] <joe-mac> http://www.pastie.org/433994 score you might be right but last night i thought i had made all three preseeds have the settings from all three | ||
| [2009/04/01 13:29:58] <joe-mac> i am about to try again | ||
| [2009/04/01 13:30:29] <joe-mac> i hsould put the varlocalpreseed file in that class but bahh | ||
| [2009/04/01 13:34:15] <Disconnect> fyi if anyone else hits that (and I don't know why I didn't hit it sooner) the fix is to add "[:debian, :ubuntu]" to lib/providers/service/service.rb | ||
| [2009/04/01 13:34:28] <Disconnect> (the 'too many providers, you must be freebsd' error) | ||
| [2009/04/01 13:36:14] <Volcane> did u file a bug so it gets fixed | ||
| [2009/04/01 13:36:31] <score> Disconnect: please file a bug. i added one that is similar for detection of rails | ||
| [2009/04/01 13:36:38] <score> for storedconfigs | ||
| [2009/04/01 13:37:13] @ Quit: philip__1: Read error: 110 (Connection timed out) | ||
| [2009/04/01 13:38:18] <Disconnect> score: its not a correct fix. something is causing it to detect debian and freebsd style.. that just seems to stop that detection | ||
| [2009/04/01 13:41:03] <score> Disconnect: i think you can get around that in puppet world.. case $operatingsystem.. ubuntu: { Package { provider => apt }} type thing.. | ||
| [2009/04/01 13:41:39] <Disconnect> yah. although i already spun up a local package rev for it so.. | ||
| [2009/04/01 13:42:11] @ ZummiG777 joined channel #puppet | ||
| [2009/04/01 13:42:43] <ZummiG777> Question,Comment: There might be a bug when puppet deals with filenames that include the plus, '+', symbol. | ||
| [2009/04/01 13:43:07] @ the_lale1u is now known as the_lalelu | ||
| [2009/04/01 13:43:39] @ Quit: andrewcshafer: | ||
| [2009/04/01 13:44:52] @ Quit: toi: Read error: 110 (Connection timed out) | ||
| [2009/04/01 13:45:34] @ verwilst joined channel #puppet | ||
| [2009/04/01 13:47:19] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 13:53:08] @ Quit: jlambert: "http://www.mibbit.com ajax IRC Client" | ||
| [2009/04/01 13:54:58] @ pleemans joined channel #puppet | ||
| [2009/04/01 13:55:41] @ Quit: ZummiG777: "Leaving" | ||
| [2009/04/01 13:57:29] <Telmo> Volcane or anyone wake who knows the answers, would this be correct? package { "puppet://solaris/10/SUNWarc": ensure => installed } I guess that what I am asking is if is possible to serve the solaris packages from puppet instead of a local file system. | ||
| [2009/04/01 13:57:56] @ webx joined channel #puppet | ||
| [2009/04/01 13:58:01] <Volcane> telmo: nope, the path has to be something your package manager understand | ||
| [2009/04/01 13:58:15] <Telmo> understood, thanks | ||
| [2009/04/01 13:58:25] <Volcane> telmo: puppet doesnt magically fetch files, so if your package manager is from the 1970s and can only understand file paths, you need to put the files on the client or use nfs or something | ||
| [2009/04/01 13:59:09] <webx> what is the feature request URL? | ||
| [2009/04/01 13:59:17] <Volcane> projects.reductivelabs.com | ||
| [2009/04/01 14:00:12] <webx> thanks | ||
| [2009/04/01 14:01:42] * Volcane goes | ||
| [2009/04/01 14:01:42] <Telmo> I know, we had a meeting with Sun about pkg, and their answer was "will fix that with IPS" which wont be available until Solaris 11 (or whatever they are calling it) and wont be backported to Solaris[8-10] | ||
| [2009/04/01 14:01:53] <Volcane> Telmo: heh | ||
| [2009/04/01 14:03:35] @ hessml|away|away is now known as hessml|away | ||
| [2009/04/01 14:07:48] @ Quit: keithlard: | ||
| [2009/04/01 14:07:56] @ fdz joined channel #puppet | ||
| [2009/04/01 14:09:02] @ koojooawy is now known as koojoo | ||
| [2009/04/01 14:09:16] @ Quit: ethan_rowe: "Lack of interest wins out." | ||
| [2009/04/01 14:09:23] @ ethan_rowe joined channel #puppet | ||
| [2009/04/01 14:11:55] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 14:12:29] @ Quit: cirquitz: "Leaving" | ||
| [2009/04/01 14:12:52] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 14:12:57] @ Quit: benblack: "Leaving..." | ||
| [2009/04/01 14:13:44] @ alfism joined channel #puppet | ||
| [2009/04/01 14:17:41] @ benp- joined channel #puppet | ||
| [2009/04/01 14:19:08] @ nakano is now known as nakano_ | ||
| [2009/04/01 14:19:44] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 14:20:40] <claymation> think sun packages are bad, look at sun patches :) | ||
| [2009/04/01 14:22:32] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 14:23:56] @ Quit: d3vilb0x_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 14:24:07] @ rellis_ joined channel #puppet | ||
| [2009/04/01 14:26:44] <rellis_> How can I get my puppetmaster to regenerate it's certificate? It's hostname is different from the name i want to connect ot it as. | ||
| [2009/04/01 14:26:57] <rellis_> Do I have to do manually with openssl? | ||
| [2009/04/01 14:28:50] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 14:32:59] <MrHeavy> I keep getting the following error | ||
| [2009/04/01 14:33:01] <MrHeavy> warning: Configuration could not be instantiated: Parameter path failed: File paths must be fully qualified | ||
| [2009/04/01 14:33:15] <MrHeavy> And I have absolutely no indication of what resource it's barfing on | ||
| [2009/04/01 14:36:45] @ Demosthenes joined channel #puppet | ||
| [2009/04/01 14:41:08] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 14:44:09] @ Quit: pleemans: Read error: 145 (Connection timed out) | ||
| [2009/04/01 14:45:42] @ Quit: tuf8: Remote closed the connection | ||
| [2009/04/01 14:45:49] @ tuf8 joined channel #puppet | ||
| [2009/04/01 14:48:02] @ madrescher joined channel #puppet | ||
| [2009/04/01 14:48:42] @ Quit: madrescher: Remote closed the connection | ||
| [2009/04/01 14:49:47] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 14:51:13] @ andrewcshafer joined channel #puppet | ||
| [2009/04/01 14:54:57] @ Quit: markp_: | ||
| [2009/04/01 14:56:19] @ Quit: koojoo: | ||
| [2009/04/01 14:59:05] @ Quit: mellen: Remote closed the connection | ||
| [2009/04/01 15:00:16] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 15:04:28] @ Quit: webx: "BitchX-1.1-final -- just do it." | ||
| [2009/04/01 15:05:36] @ threetee joined channel #puppet | ||
| [2009/04/01 15:08:27] @ mikepea joined channel #puppet | ||
| [2009/04/01 15:10:05] @ Quit: hessml|away: | ||
| [2009/04/01 15:11:39] @ Quit: aymerick: "kit mais sage" | ||
| [2009/04/01 15:14:59] @ Quit: mikepea: | ||
| [2009/04/01 15:23:57] @ elijahwright joined channel #puppet | ||
| [2009/04/01 15:25:31] @ Innocenti joined channel #puppet | ||
| [2009/04/01 15:39:10] @ Quit: d3vilb0x: Remote closed the connection | ||
| [2009/04/01 15:39:22] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 15:43:01] @ Quit: raphink: Remote closed the connection | ||
| [2009/04/01 15:44:57] @ Quit: Demosthenes: "leaving" | ||
| [2009/04/01 15:46:25] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 15:48:42] @ greenmoss joined channel #puppet | ||
| [2009/04/01 15:49:31] <greenmoss> so if I write a custom fact, can I refer to the results of another custom fact? | ||
| [2009/04/01 15:50:06] <greenmoss> I know Facter.kernel (for instance) works | ||
| [2009/04/01 15:55:27] <Volcane> you didnt even read the wiki page about writing custom facts did you? | ||
| [2009/04/01 15:57:07] <plathrop> greenmoss: What Volcane is trying to say is yes, you can, and it is in the docs. | ||
| [2009/04/01 15:57:17] <plathrop> greenmoss: Would you like a link to the wiki page | ||
| [2009/04/01 15:57:20] <plathrop> ? | ||
| [2009/04/01 15:57:52] <Volcane> (its google 'puppet custom facts' hit I'm Feeling Lucky) | ||
| [2009/04/01 15:58:07] <Disconnect> Volcane: fyi check out lmgtfy.com | ||
| [2009/04/01 15:58:46] @ fujin joined channel #puppet | ||
| [2009/04/01 15:58:50] @ raphink joined channel #puppet | ||
| [2009/04/01 15:58:54] <Volcane> Disconnect: heh | ||
| [2009/04/01 15:59:34] <Disconnect> did you try it? | ||
| [2009/04/01 15:59:41] <Volcane> yeah its pretty sweet | ||
| [2009/04/01 15:59:47] @ Quit: fujin: Client Quit | ||
| [2009/04/01 16:00:00] <Disconnect> and more polite than jfgit.com | ||
| [2009/04/01 16:05:03] <greenmoss> jeez guys, it was an honest question... I did indeed try it first! | ||
| [2009/04/01 16:06:45] <greenmoss> I've actually written quite a few custom facts before, and they all worked fine... the doco's from the faq helped a lot | ||
| [2009/04/01 16:07:02] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 16:07:23] <nigelk> greenmoss: actually there are some caveats depending on the version you're on | ||
| [2009/04/01 16:07:33] <nigelk> lemme see if I can dig up an illustration | ||
| [2009/04/01 16:08:02] <nigelk> but I think there were versions of puppet/facter where the name of the file the fact was in mattered | ||
| [2009/04/01 16:08:05] <greenmoss> but let me go look again to make sure I haven't missed anything <cough>Volcane</cough> | ||
| [2009/04/01 16:08:17] <nigelk> from memory you couldn't refer to a fact that came before you alphabetically | ||
| [2009/04/01 16:08:26] <nigelk> (from one custom fact to another) | ||
| [2009/04/01 16:08:38] @ rraphink joined channel #puppet | ||
| [2009/04/01 16:08:46] <greenmoss> hmm... so that would be in the file name then? | ||
| [2009/04/01 16:08:50] <nigelk> yeah I think so | ||
| [2009/04/01 16:08:56] <Volcane> Facter.value('foo') has worked for as long as I can remember | ||
| [2009/04/01 16:09:05] <nigelk> we have an environment.rb fact and a bunch of hardware_*.rb facts which worked | ||
| [2009/04/01 16:09:21] <nigelk> but then we had one that was before 'environment' alphabetically which didn't until we upgraded facter | ||
| [2009/04/01 16:09:33] <greenmoss> ok, thanks for the pointers | ||
| [2009/04/01 16:09:39] @ Quit: rraphink: Read error: 54 (Connection reset by peer) | ||
| [2009/04/01 16:09:42] <nigelk> I don't have an older version around to test with if that is affecting you sorry | ||
| [2009/04/01 16:09:57] <nigelk> but it's definitely not an issue in recent versions | ||
| [2009/04/01 16:10:46] @ ezmob joined channel #puppet | ||
| [2009/04/01 16:10:54] @ rraphink joined channel #puppet | ||
| [2009/04/01 16:11:39] @ pleemans joined channel #puppet | ||
| [2009/04/01 16:12:15] <greenmoss> I have 1.3.8; Facter.value('foo') worked, Facter.foo didn't... thanks all | ||
| [2009/04/01 16:12:31] <Volcane> wow why such an old one? | ||
| [2009/04/01 16:12:40] @ Quit: verwilst: "Ex-Chat" | ||
| [2009/04/01 16:12:54] <greenmoss> <shrugs> Ubuntu has it | ||
| [2009/04/01 16:13:21] <nigelk> yeah. It's hard reconciling fast moving targets like puppet/facter with the inertia of distributions.... | ||
| [2009/04/01 16:13:33] <nigelk> we need to get the recent ones into backports for Ubuntu LTS at least | ||
| [2009/04/01 16:14:04] <greenmoss> the perennial problem... | ||
| [2009/04/01 16:19:26] @ Quit: raphink: Read error: 110 (Connection timed out) | ||
| [2009/04/01 16:22:47] @ Quit: SyTonnerre: Remote closed the connection | ||
| [2009/04/01 16:22:58] @ SyTonnerre joined channel #puppet | ||
| [2009/04/01 16:29:40] @ kolla joined channel #puppet | ||
| [2009/04/01 16:30:29] @ Quit: jharmo2: | ||
| [2009/04/01 16:30:54] @ madrescher joined channel #puppet | ||
| [2009/04/01 16:34:28] @ martha left channel #puppet () | ||
| [2009/04/01 16:35:51] <Disconnect> wow factor is sure a lot less useful than facter. | ||
| [2009/04/01 16:37:11] <Volcane> heh | ||
| [2009/04/01 16:43:30] @ koojoo joined channel #puppet | ||
| [2009/04/01 16:44:48] @ Quit: greenmoss: "leaving" | ||
| [2009/04/01 16:46:18] <MrHeavy> I created a custom fact and dropped it in the <module>/plugins/facter directory. How do I test it on a client? | ||
| [2009/04/01 16:46:42] @ mattw joined channel #puppet | ||
| [2009/04/01 16:47:05] <score> MrHeavy: after pluginsync, you should be able to do facter -p (which has facter run with puppet facter plugins).. i think | ||
| [2009/04/01 16:47:11] <MrHeavy> Ah, thanks | ||
| [2009/04/01 16:47:25] <Volcane> I've never had facter -p work for me :( | ||
| [2009/04/01 16:48:02] <score> wasn't a difference between with -p or without | ||
| [2009/04/01 16:48:13] <plathrop> Volcane: +1 | ||
| [2009/04/01 16:48:20] <plathrop> I've always had to set FACTERLIB | ||
| [2009/04/01 16:49:25] <score> FACTERLIB=/var/lib/puppet facter ?? | ||
| [2009/04/01 16:50:20] <plathrop> score: yeah, I think so. | ||
| [2009/04/01 16:52:18] <mattw> I'm getting an error after updating to 24.8 that appears possibly related to #1631 but I didn't see it mentioned in a new ticket already http://pastie.org/434237 | ||
| [2009/04/01 16:52:19] <gepetto> mattw: #1631 is http://projects.reductivelabs.com/issues/show/1631 "Puppet - Bug #1631: Puppet's path should always include '/usr/sbin' and '/sbin' - ReductiveLabs.com" | ||
| [2009/04/01 16:54:58] <mattw> it's coming up in our pre-commit script that runs '/usr/bin/puppet --noop --parseonly --ignoreimport' on the file being checked in | ||
| [2009/04/01 16:56:05] <Volcane> thats pretty odd, that should only happen if you dont have PATH in your environment? | ||
| [2009/04/01 16:56:13] <Volcane> like no path at all | ||
| [2009/04/01 16:57:16] <mattw> that's what I thought, but I added a 'puts ENV["PATH"]' in the script and it not only exists but includes /sbin and /usr/sbin | ||
| [2009/04/01 16:57:56] <gepetto> ::trac:: Language Tutorial edited by jbarratt @ http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial (by jbarratt@serialized.net) | ||
| [2009/04/01 16:58:14] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 16:59:44] @ Quit: pleemans: Read error: 110 (Connection timed out) | ||
| [2009/04/01 17:03:07] @ duncanmv joined channel #puppet | ||
| [2009/04/01 17:03:42] <MrHeavy> Grr | ||
| [2009/04/01 17:03:44] <duncanmv> hi guys, is there a way for puppet report to puppetmaster the output of some command (in this case non-applied security updates)? | ||
| [2009/04/01 17:03:46] <MrHeavy> I keep getting this now trying to pluginsync | ||
| [2009/04/01 17:03:47] <MrHeavy> err: /File[/var/lib/puppet/lib]: Failed to retrieve current state of resource: No specified source was found from puppet://puppet.cshl.edu/plugins | ||
| [2009/04/01 17:06:59] @ Quit: cmoates: "Leaving" | ||
| [2009/04/01 17:10:51] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 17:11:26] @ gaveen joined channel #puppet | ||
| [2009/04/01 17:12:48] <rellis_> Is it standard to install puppet form third party RPM's on RHEL? Can I then use puppet to update itself to a new version? | ||
| [2009/04/01 17:13:12] <threetee> I use puppet from RPMs on RHEL/CentOS | ||
| [2009/04/01 17:13:29] <rellis_> ya i tried those, they just seem to be outdated? | ||
| [2009/04/01 17:13:42] @ sunoano joined channel #puppet | ||
| [2009/04/01 17:14:16] <Volcane> theres a spec file in the tarball | ||
| [2009/04/01 17:14:48] <rellis_> Volcane: Could you elaborate on what that means? | ||
| [2009/04/01 17:14:58] <Volcane> you use a spec file to build an rpm | ||
| [2009/04/01 17:15:28] <rellis_> well right.. and there are the epel rpm's | ||
| [2009/04/01 17:15:29] <Volcane> so freshly pressed rpms is like 2 commands away if you have a machine already setup for rpm building | ||
| [2009/04/01 17:15:36] <threetee> right | ||
| [2009/04/01 17:15:45] <Volcane> yeah, the spec is pretty much exactly what EPEL uses | ||
| [2009/04/01 17:15:52] <rellis_> gotcha | ||
| [2009/04/01 17:16:10] <rellis_> my questions is more about whether there's a puppet specifc way to manage the version of that rpm | ||
| [2009/04/01 17:16:14] <rellis_> and rolling out updates | ||
| [2009/04/01 17:16:21] <rellis_> or if i still depend on yum to do it | ||
| [2009/04/01 17:16:26] <Volcane> yup, package{"puppet": ensure => "0.24.8-1" } | ||
| [2009/04/01 17:16:28] <threetee> replace the source archive with the latest, update the spec, then use rpmbuild | ||
| [2009/04/01 17:16:44] <Volcane> which will use your package manager to do it | ||
| [2009/04/01 17:16:58] <Volcane> and thats where the spec file comes in :) | ||
| [2009/04/01 17:16:59] <threetee> I also recommend setting up a local yum repo | ||
| [2009/04/01 17:17:00] <gaveen> andrewcshafer, are there specific student ideas you were planning to list, when you were thinking of applying to GSoC on behalf of Puppet? | ||
| [2009/04/01 17:17:02] @ Quit: dsch04: "Leaving" | ||
| [2009/04/01 17:17:04] <rellis_> Volcane: ah right, so it depends on me having epel testing repo active? | ||
| [2009/04/01 17:17:13] @ Quit: joe-mac: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 17:17:20] <threetee> rellis_: I like to leave the epel stuff intact | ||
| [2009/04/01 17:17:26] <Volcane> rellis__: mosly people have in-house repositories for this kind of thing | ||
| [2009/04/01 17:17:32] <threetee> and set up my own repo | ||
| [2009/04/01 17:17:44] <rellis_> ya im not doing that | ||
| [2009/04/01 17:17:46] @ joe-mac joined channel #puppet | ||
| [2009/04/01 17:17:54] <threetee> you probably should be :) | ||
| [2009/04/01 17:17:57] <rellis_> so i'll likely work sometihing ot use testing repo | ||
| [2009/04/01 17:18:02] <andrewcshafer> gaveen: There were a few, why? | ||
| [2009/04/01 17:18:03] <rellis_> na not worth the time | ||
| [2009/04/01 17:18:17] <Volcane> till the day its down and you cant build new machines | ||
| [2009/04/01 17:18:21] <Volcane> then you'll be kicking yourself :P | ||
| [2009/04/01 17:18:34] <rellis_> there are other repos you know =p | ||
| [2009/04/01 17:18:47] <duncanmv> is there a resource abstraction to say the machine is compeltely up2date, or all security updates are installed? | ||
| [2009/04/01 17:19:10] <Volcane> the object of config management is to have a known state, randomly changing to new repos for new machines etc doesnt gel with the objective :) | ||
| [2009/04/01 17:19:22] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 17:19:25] <gaveen> andrewcshafer, I'd like to pitch an idea to work on Puppet under the Rails team. Just talked with them. They weren't negative | ||
| [2009/04/01 17:19:59] @ nakano_ is now known as nakano | ||
| [2009/04/01 17:20:13] <cwebber> so maybe i am not the first to do this ... but is there an easy way to say in a file type.... if file.$host exists use it otherwise use the template? | ||
| [2009/04/01 17:20:21] <gaveen> andrewcshafer, as far as it make's life easier for general Rails guy | ||
| [2009/04/01 17:20:22] @ Quit: ezmob: "Bye!" | ||
| [2009/04/01 17:20:30] <Volcane> cwebber: nope :( | ||
| [2009/04/01 17:20:30] @ Quit: erm_: "leaving" | ||
| [2009/04/01 17:21:12] <threetee> cwebber: if you do find a way, let me know, I would love something like that as well | ||
| [2009/04/01 17:21:14] <threetee> :) | ||
| [2009/04/01 17:21:28] <Volcane> you can do it with file() and inline_template() if you're really desperate | ||
| [2009/04/01 17:21:32] <Volcane> but thats not "easy" :P | ||
| [2009/04/01 17:22:02] <cwebber> Volcane: yeah | ||
| [2009/04/01 17:22:41] <rellis_> Volcane: I don't really think config management is much related ot hosting my own repo, but to each their own. | ||
| [2009/04/01 17:23:45] <Volcane> rellis_: we're just saying you cant rely on a repo out of your control to stay active, or that they wont ever break anything. I used to think similar to you with regard to jpackage, then they went totally titsup for a month and I could literally not build new java app servers for ages it was pretty bad :( | ||
| [2009/04/01 17:24:14] <threetee> volcane: agreed, I even maintain local copies of EPEL repos for similar reasons | ||
| [2009/04/01 17:24:44] <rellis_> eh your servers can go down as well | ||
| [2009/04/01 17:24:52] <Volcane> yeah, I'm not quite that bad, but i do just sometimes yumdownloader --resolver --enablerepo=epel foo and drop that into my own repo | ||
| [2009/04/01 17:24:53] <rellis_> but ya.. very unreliable repos are a bad deal | ||
| [2009/04/01 17:25:33] <Volcane> rellis: theres also cases where repos do silly things like EPEL introduced new dependencies in the puppet packages that I wouldnt have liked to happen on my machines for example | ||
| [2009/04/01 17:25:35] <rellis_> i hear your concerns.. i just the think the added complexity may not be worth it | ||
| [2009/04/01 17:25:59] <rellis_> in a much larger environment with more custom rpm's it could definitely be argued fir mroe easily | ||
| [2009/04/01 17:26:43] <Volcane> nods, like everything, you should tailor peoples best practises to your environment, no point following some 1000 node sites best practises for your 2 nodes, you'll go insane | ||
| [2009/04/01 17:27:00] <andrewcshafer> gaveen: what do you have in mind? I had project ideas from easy things like building generators for scaffolding modules to some core stuff and language stuff. | ||
| [2009/04/01 17:27:09] <threetee> rellis_: I also keep a local copy so that I know that the files are legit. I checksum them when I grab them so I know they're good, then I don't have to worry about some mirror somewhere getting rooted and insidious packages being added to a repo that I am trusting. also, it lets me roll out packages when I want them to be rolled out. With several hundred nodes, I don't want someone running yum update and making one machine out of syn | ||
| [2009/04/01 17:27:11] <rellis_> indeed | ||
| [2009/04/01 17:27:35] <threetee> but volcane is correct: it all depends on your needs | ||
| [2009/04/01 17:27:57] <Volcane> threetee: yeah thats the other thing, *i* get to decide when that symlink moves from 5.2 to 5.3 :) | ||
| [2009/04/01 17:28:05] <threetee> yup | ||
| [2009/04/01 17:28:12] <rellis_> threetee: yep, our environments are just very different | ||
| [2009/04/01 17:28:36] @ Quit: shake-n-bake: Connection timed out | ||
| [2009/04/01 17:28:44] <rellis_> i believe you can have package authenticity verified without doing that though.. | ||
| [2009/04/01 17:29:49] <threetee> yeah, I'm just paranoid :) | ||
| [2009/04/01 17:30:30] <gaveen> andrewcshafer, I didn't have a specific things. That's why I wanted to hear from you too. However I thought having Puppet to be able to handle some of what Cap does would be neat. Like deploying apps and SCM integration. | ||
| [2009/04/01 17:30:35] <joe-mac> does anybody here call retro-fitting systems with puppet "puppetizing" | ||
| [2009/04/01 17:30:38] <joe-mac> or am i the one and only? | ||
| [2009/04/01 17:30:53] <plathrop> joe-mac: That's what we call it. | ||
| [2009/04/01 17:31:07] <rellis_> I like your argument about getting to decide what current means. | ||
| [2009/04/01 17:31:07] <joe-mac> k, just wondering if that's standard terminology | ||
| [2009/04/01 17:31:19] <andrewcshafer> gaveen: I'm jumping on a phone call, I have some ideas. | ||
| [2009/04/01 17:31:34] <gaveen> andrewcshafer, and may be to add SCM support to manifests too | ||
| [2009/04/01 17:31:50] <gaveen> andrewcshafer, ah,.. ok. I can wait | ||
| [2009/04/01 17:33:07] @ keithlard joined channel #puppet | ||
| [2009/04/01 17:33:25] <rellis_> Volcane/threetee: Thanks for the information. | ||
| [2009/04/01 17:33:55] <rellis_> Volcane/threetee: Management seems favorable toward the idea of takign time to create our own rpm repo with the puppet setup, so I'll likely be doing that as well :) | ||
| [2009/04/01 17:34:21] <Volcane> its very easy :) | ||
| [2009/04/01 17:35:52] <joe-mac> i can't wait til i am management, mostly so i can have my own office with a couch | ||
| [2009/04/01 17:35:55] <threetee> it is easy, plus it gives you lots of flexibility | ||
| [2009/04/01 17:35:58] <rellis_> We only have ~10 servers right now, but I think you guys are correct about the advantages as we grow. | ||
| [2009/04/01 17:36:08] <joe-mac> and i want to tell peopel i have 'minions' | ||
| [2009/04/01 17:36:33] <joe-mac> i might be thinking of evil villain, not management so much | ||
| [2009/04/01 17:36:34] * Volcane needs to find a new minion soon :( | ||
| [2009/04/01 17:36:48] @ Quit: plathrop: "leaving" | ||
| [2009/04/01 17:37:11] <joe-mac> Volcane: why's that? incompetence or $MINIONSEX is leaving? | ||
| [2009/04/01 17:37:15] @ plathrop joined channel #puppet | ||
| [2009/04/01 17:37:34] <Volcane> he's leaving, nice guy too, quick learner etc, but wants to move back to italy | ||
| [2009/04/01 17:37:45] <joe-mac> o i would like to move to italy | ||
| [2009/04/01 17:38:00] <Volcane> quite happy with london :) | ||
| [2009/04/01 17:38:10] @ ezmob joined channel #puppet | ||
| [2009/04/01 17:38:35] <joe-mac> i am in boston | ||
| [2009/04/01 17:38:46] @ verwilst joined channel #puppet | ||
| [2009/04/01 17:38:47] <joe-mac> of course i am one of the only actual massachusetts natives in this city | ||
| [2009/04/01 17:38:56] <Volcane> I should really make the effort and come do some conference or something in the states this year | ||
| [2009/04/01 17:38:57] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 17:39:01] <Volcane> keep saying I'll do it, never bother | ||
| [2009/04/01 17:39:16] <joe-mac> heh, they havet ons in vegas | ||
| [2009/04/01 17:39:17] <Volcane> joe-mac: I'm from South Africa originally | ||
| [2009/04/01 17:39:24] <joe-mac> o sweet | ||
| [2009/04/01 17:39:33] <Volcane> 8 years in london | ||
| [2009/04/01 17:40:07] <joe-mac> that's lots of rain | ||
| [2009/04/01 17:40:27] <joe-mac> i think we have a new metric, london-rain-years | ||
| [2009/04/01 17:40:36] <Volcane> doesnt rain that much here :) weather is pretty great actually, I am not a big summer person though | ||
| [2009/04/01 17:40:50] <joe-mac> i've never been so ia m speaking from stereotypes | ||
| [2009/04/01 17:42:00] <Volcane> i am from cape town, and i think the rain is about much the same here really | ||
| [2009/04/01 17:42:14] <Volcane> except in cape town it rains in winter and the wind REALLY blows the crap out of the place | ||
| [2009/04/01 17:44:39] @ Quit: auxesis_: Remote closed the connection | ||
| [2009/04/01 17:44:55] @ Djelibeybi joined channel #puppet | ||
| [2009/04/01 17:45:30] @ nakano is now known as nakano_ | ||
| [2009/04/01 17:45:53] @ Quit: stijnbe: "Leaving..." | ||
| [2009/04/01 17:46:47] @ nakano_ is now known as nakano | ||
| [2009/04/01 17:47:55] <gwar9999> hello all... When using an external script are facts available to the script? If so, what is the convention for accessing them within the script? | ||
| [2009/04/01 17:48:11] <Volcane> do you exec the script? | ||
| [2009/04/01 17:48:15] <Volcane> or how do you call it? | ||
| [2009/04/01 17:48:29] <gwar9999> puppetmaster invokes it. | ||
| [2009/04/01 17:48:41] <Volcane> you mean an external node script? | ||
| [2009/04/01 17:48:51] <gwar9999> yes | ||
| [2009/04/01 17:48:54] <Volcane> ah | ||
| [2009/04/01 17:49:04] <Volcane> no i dont believe facts are available | ||
| [2009/04/01 17:49:12] @ fdz left channel #puppet () | ||
| [2009/04/01 17:49:27] <andrewcshafer> http://stochasticresonance.wordpress.com/2009/04/01/meatcloud-manifesto/ | ||
| [2009/04/01 17:49:35] <andrewcshafer> gaveen | ||
| [2009/04/01 17:49:38] <andrewcshafer> I | ||
| [2009/04/01 17:49:41] <andrewcshafer> am | ||
| [2009/04/01 17:49:43] <andrewcshafer> back | ||
| [2009/04/01 17:49:52] <gwar9999> Volcane: ok, thanks. Bummer, it would be nice since I wanted to include a class based on a fact. | ||
| [2009/04/01 17:49:53] <gaveen> andrewcshafer, I'm here :) | ||
| [2009/04/01 17:50:11] <Volcane> gwar9999: include the class and do an if in the class :P | ||
| [2009/04/01 17:50:22] <Volcane> </lame> | ||
| [2009/04/01 17:50:26] @ gebi_ joined channel #puppet | ||
| [2009/04/01 17:50:49] <gwar9999> Volcane: that's what I'm doing now, but my coworkers thought it would be easier to maintain if logic was removed from the class. | ||
| [2009/04/01 17:51:00] <Volcane> yeah its not awesome | ||
| [2009/04/01 17:51:24] @ kambiz is now known as kambiz_away | ||
| [2009/04/01 17:51:49] <andrewcshafer> gaveen: So let's start out by enumerating what cap does that you would want Puppet to do, and I'll give my opinion on what you want to try to do, and my perspective on where I think we can take things. | ||
| [2009/04/01 17:52:46] <gaveen> ok | ||
| [2009/04/01 17:53:16] @ Quit: nigelk: Read error: 60 (Operation timed out) | ||
| [2009/04/01 17:53:39] @ Quit: gebi: Read error: 145 (Connection timed out) | ||
| [2009/04/01 17:53:47] * Volcane 'd also like to listen to the cap discussion | ||
| [2009/04/01 17:56:10] <gaveen> andrewcshafer, first we can already make puppet to repetitive tasks like setting up the infrastructure. But for deployment automation we use tools like Capistrano or Vlad. What if Puppet could handle that itself. Eg: the ability to fetch a certain version of a Rails app from a SCM and set it up, and rollback if railed | ||
| [2009/04/01 17:57:02] <gaveen> *if failed | ||
| [2009/04/01 17:57:04] <andrewcshafer> gaveen: I've been thinking about git and svn providers for an SCM type. | ||
| [2009/04/01 17:57:31] @ nigelk joined channel #puppet | ||
| [2009/04/01 17:57:39] @ PhabX joined channel #puppet | ||
| [2009/04/01 17:57:40] @ Quit: duncanmv: Remote closed the connection | ||
| [2009/04/01 17:57:44] <andrewcshafer> but i really want to be able to do more than that, in a generic way | ||
| [2009/04/01 17:58:10] <Volcane> yeah, problem with app deployment is they're all different | ||
| [2009/04/01 17:58:13] <Volcane> hard to make generic | ||
| [2009/04/01 17:58:48] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 17:58:51] <andrewcshafer> Deploying one app on one machine is one thing, what about taking machines out of load balancers and rolling through the changes. | ||
| [2009/04/01 17:59:25] <andrewcshafer> the specifics aren't the same, but at a high enough level there are some general scenarios | ||
| [2009/04/01 17:59:28] <Volcane> yup, I've a very complex process to go through for deployment, adjusting priorities, shifting users around the cluster etc, very hard | ||
| [2009/04/01 17:59:41] <ezmob> i started something liek that here for chef: http://github.com/ezmobius/chef-deploy/tree/master you guys shoudl be able to make it work with puppet easily | ||
| [2009/04/01 17:59:44] <rmiller4pi8> why should this be puppet's problem? i mean, it's true that there are some overlaps already | ||
| [2009/04/01 18:00:03] <rmiller4pi8> but at the same time func, puppet, and capistrano provide a nice triad and work well together, too | ||
| [2009/04/01 18:00:30] <Volcane> only one thing to tie into CMDBs etc | ||
| [2009/04/01 18:00:35] <andrewcshafer> that's sort of why I started this conversation with Gaveen, where should the responsibilities be separated | ||
| [2009/04/01 18:00:41] <Volcane> one one language to faff around in, code reuse etc | ||
| [2009/04/01 18:00:51] @ Quit: yarihm: Read error: 110 (Connection timed out) | ||
| [2009/04/01 18:01:01] <andrewcshafer> swiss army knives are rarely the best solution | ||
| [2009/04/01 18:01:02] <Volcane> smaller learning curve etc, funcs great, but i am not learning python, ever. | ||
| [2009/04/01 18:01:28] <Volcane> answer might even be that RL builds a complimentary tool, cos I also dont think puppet should handle code deployments | ||
| [2009/04/01 18:01:32] <andrewcshafer> ezmob: I saw that when you published it, it's a good idea | ||
| [2009/04/01 18:01:45] <Volcane> i think its responcibility should end at preparing the environment that code lives on | ||
| [2009/04/01 18:02:01] <andrewcshafer> Volcane: I tend to agree | ||
| [2009/04/01 18:02:07] <ezmob> i like the idea of my deploy also running my config management recipes, ensuring that everything is proper | ||
| [2009/04/01 18:02:24] <gaveen> ezmob, I saw it too. It also kinda gave me the idea. but I thought it'd be nice to have that in Puppet too | ||
| [2009/04/01 18:02:28] <ezmob> but there are definitely complications to dealw ith | ||
| [2009/04/01 18:02:45] <andrewcshafer> but coordinating and orchestrating is the sauce | ||
| [2009/04/01 18:02:46] <ezmob> you can steal my git classes and ust make puppet providers pretty easily i think | ||
| [2009/04/01 18:03:15] <andrewcshafer> ezmob: Did you see the Meatcloud Manifesto? | ||
| [2009/04/01 18:03:23] <ezmob> yeah that was awesome ;) | ||
| [2009/04/01 18:03:37] <andrewcshafer> My April 1 contribution | ||
| [2009/04/01 18:03:57] <rmiller4pi8> Volcane: why learn python? even if you want to use func programmatically, you can call it on the cli with a ruby system call and it emits yaml back... | ||
| [2009/04/01 18:04:00] <andrewcshafer> not as funny as the Open Cloud Manifesto, but still | ||
| [2009/04/01 18:04:04] <ezmob> haha | ||
| [2009/04/01 18:04:15] <gaveen> :D | ||
| [2009/04/01 18:04:31] <Volcane> a tool that ties in with puppet - knows facts, node variables, this kind of thing - would be pretty kewl, but then let you run bits of code ad-hoc, perhaps those bits of code are written in puppet DSL even. but with a less strict slant on indempotency | ||
| [2009/04/01 18:04:49] <ezmob> andrewcshafer did you see this one? http://docs.google.com/Doc?id=dxr5cbn_03ghsr8ft | ||
| [2009/04/01 18:04:56] <Volcane> rmiller4pi8: yeah you should be able to do most things as is, but ditto for puppet then, why ruby? cos well at some point u want to extend/improve/contribute | ||
| [2009/04/01 18:05:14] <andrewcshafer> ezmob: no, reading now | ||
| [2009/04/01 18:05:33] <ezmob> i was thinking that the deploy resource is just responsible for putting the source in place and managing symlinks and then putting hooks in the app being deployed | ||
| [2009/04/01 18:05:51] <ezmob> so chef/puppet woudl call callbacks defined in the app for the adhoc stuff that has to happen before/after the source deploy | ||
| [2009/04/01 18:06:00] <Volcane> ezmob: thats about the most simplistic deploy ever, and very few real apps have that simple a deploy :P | ||
| [2009/04/01 18:06:18] <rmiller4pi8> and the ones that do quickly get worse and need an upgrade path | ||
| [2009/04/01 18:06:31] <ezmob> well with what i described you get the same power as capistrano and cap can deploy most anything | ||
| [2009/04/01 18:06:40] <Volcane> the moment you start talking to java app servers you're fairly screwed already | ||
| [2009/04/01 18:06:40] <ezmob> Volcane but yeah im biased as i just have to deploy ruby apps | ||
| [2009/04/01 18:06:47] <ezmob> and they are fairly standard in what a deplpoy does | ||
| [2009/04/01 18:06:55] <gaveen> andrewcshafer, well, I'm not actually suggesting to merge Capistrano into Puppet. But application version management, and so deployments feels so much as a past of configuration management rather than a different domain | ||
| [2009/04/01 18:06:58] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 18:06:58] <rellis_> hah | ||
| [2009/04/01 18:07:16] <andrewcshafer> gaveen: it's a problem we've been thinking about | ||
| [2009/04/01 18:07:21] <rellis_> deploying java apps isnt so bad =p | ||
| [2009/04/01 18:07:33] * rellis_ uses a shell script to deploy | ||
| [2009/04/01 18:07:38] <Volcane> rellis_: depends on the kind of freak who writes them :P | ||
| [2009/04/01 18:07:45] <rellis_> haha | ||
| [2009/04/01 18:07:52] <Volcane> rellis: mines written by ex C people, its not nice ! :) | ||
| [2009/04/01 18:08:02] <rellis_> ya that osunds kind of bloody | ||
| [2009/04/01 18:08:08] <andrewcshafer> Puppet is really focused on setting state, but deployment is really about coordinating actions | ||
| [2009/04/01 18:08:09] <Volcane> on the other end I've worked on one that was fully automagic | ||
| [2009/04/01 18:08:13] <Volcane> and everything in between | ||
| [2009/04/01 18:08:20] <rmiller4pi8> rellis: that depends on the scale, load, and interop problems. when you need to call loadbalancer APIs, it's ugly regardless of what the language is | ||
| [2009/04/01 18:08:35] <rmiller4pi8> rellis: or prepopulate caches | ||
| [2009/04/01 18:08:40] <andrewcshafer> rmiller4pi8: but you have to do it, none the less | ||
| [2009/04/01 18:08:49] <rellis_> our cache (ehcache) auto populates | ||
| [2009/04/01 18:08:51] <Volcane> andrewcshafer: i think puppet nodes/external nodes, etc already should know most of what a deploy would need. so a cap that speaks to puppet and can call bits of manifest would be a nice thing I think | ||
| [2009/04/01 18:08:56] <rellis_> our load balancers/cluster handles itself | ||
| [2009/04/01 18:09:09] <rellis_> if you have the ifnrastreucture done correctly java app deployment is pretty painless | ||
| [2009/04/01 18:09:42] <Volcane> rellis: unfort the one i maintain doesnt let users roam freely in the cluster, so upgrades mean moving users to other servers through api calls or web ui, fail. | ||
| [2009/04/01 18:09:55] <rellis_> ouch | ||
| [2009/04/01 18:09:59] <gaveen> andrewcshafer, agree and I see the distinction. But when you think of it can't it be considered as a part of setting the state (using home brew apps, instead of general purpose software) | ||
| [2009/04/01 18:10:05] <rellis_> volcane: do you dsitribute sessions? | ||
| [2009/04/01 18:10:18] <andrewcshafer> The java itself is painful, but the deployment, no problem | ||
| [2009/04/01 18:10:25] <Volcane> rellis: nope, they have some mental block against the idea, boggles the mind | ||
| [2009/04/01 18:10:33] <rellis_> colvane: we run our session in triplicate.. in memory on the first node.. on disk on the others | ||
| [2009/04/01 18:10:50] <rellis_> interesting | ||
| [2009/04/01 18:10:54] <rellis_> ya everyone does it different | ||
| [2009/04/01 18:12:12] <Volcane> anyway, cant complain too much, they do very well, the codes very stable, so prepared to put up with some pain for deployments | ||
| [2009/04/01 18:12:21] <Volcane> got the deploy where they do it themselves anyway | ||
| [2009/04/01 18:12:25] <Volcane> so they made their bed :) | ||
| [2009/04/01 18:12:27] <andrewcshafer> gaveen: I agree and I agree with Volcane that a lot of this can be done using something like puppetrun (a push model) and selective applications of classes/tags, but I think to really take the solution to the next level, you need to be able to respond to inter host events. | ||
| [2009/04/01 18:13:06] <Volcane> andrewcshafer: get the activemq hooks in place i am sure things will become simpler then :) | ||
| [2009/04/01 18:13:07] <plathrop> andrewcshafer: inter-host events would RULE | ||
| [2009/04/01 18:14:08] <andrewcshafer> there is no free lunch, but there are certainly better lunches that cost about the same :/ | ||
| [2009/04/01 18:14:32] <rmiller4pi8> andrewschafer: hah | ||
| [2009/04/01 18:15:06] <Volcane> the runner thingy would still talk to the master to fetch manifests and node values etc, it can also speak to it to place stuff in AMQ queues for other nodes to react too, that would be very kewl | ||
| [2009/04/01 18:15:39] <andrewcshafer> Once 0.25 sees light and gets to stable, there won't be 2 active dev branches and we will focus on some of this stuff. | ||
| [2009/04/01 18:16:19] <Volcane> yeah I've been wanting to get into understanding the inner workings too, but dont have enough headspace to cope with the large amount of change going on right now, so also waiting for 0.25 to settle | ||
| [2009/04/01 18:16:40] @ hMz joined channel #puppet | ||
| [2009/04/01 18:16:41] <gaveen> Volcane, isn't Vertebra doing something like that? | ||
| [2009/04/01 18:16:56] <hMz> is there anyway to enforce the crontab in a distructive way? | ||
| [2009/04/01 18:17:15] <andrewcshafer> hMz: What do you mean? | ||
| [2009/04/01 18:17:18] <Volcane> gaveen: dont know vertebra? you have a url? googling it is hard :P | ||
| [2009/04/01 18:17:31] <Volcane> ah, engineyard thing | ||
| [2009/04/01 18:17:49] <hMz> to where only the cronjobs in puppet exist in the crontab, period. | ||
| [2009/04/01 18:17:50] <gaveen> Volcane, yeah,.. briefly saw the MWRC talk | ||
| [2009/04/01 18:19:13] <Volcane> gaveen: looks interesting for sure, puppet folk is already integrating with AMQ though for some other stuff, I'm already concerned with the dependencies going through the roof as more of this kind of thing come in | ||
| [2009/04/01 18:19:59] <gaveen> Volcane, that's true. | ||
| [2009/04/01 18:20:00] <joe-mac> what the hell is amq | ||
| [2009/04/01 18:20:16] <Volcane> joe-mac: activemq.apache.org | ||
| [2009/04/01 18:21:06] <joe-mac> message broker, so like stock market and bank transaction stuff? | ||
| [2009/04/01 18:21:21] <Volcane> joe-mac: erm, it just have 2 types of data channels | ||
| [2009/04/01 18:21:23] <hMz> huh, guess i could just push out the crontab file itself everywhere | ||
| [2009/04/01 18:21:35] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 18:21:40] <joe-mac> hMz: that's very unpuppet like | ||
| [2009/04/01 18:21:41] <Volcane> joe-mac: 1 is like a broadcast, if you're subscribed you can get the messages,if not you miss them. and a queue | ||
| [2009/04/01 18:21:43] <joe-mac> what's going on | ||
| [2009/04/01 18:21:49] <andrewcshafer> hMz: It doesn't look like cron supports purging. Not sure why. Anyone managing a lot of cron? How do you clear the unmanaged ones? | ||
| [2009/04/01 18:22:01] <hMz> yes, purge is exactly what i'd like | ||
| [2009/04/01 18:22:06] <joe-mac> come to think of it i ran into that problem once hMz | ||
| [2009/04/01 18:22:08] <hMz> couldnt remember the name | ||
| [2009/04/01 18:22:12] <joe-mac> it sucked, andi had to do it by hand | ||
| [2009/04/01 18:22:13] <Volcane> joe-mac: puppet folk wants to defer some puppetmaster side heavy transactions like updating the database for exported resources into a queue | ||
| [2009/04/01 18:22:25] <joe-mac> tyou could require exec that purges teh user's crontab under var spool | ||
| [2009/04/01 18:22:35] <Volcane> joe-mac: so it can happen in the background rather than slow down the puppet clients | ||
| [2009/04/01 18:22:37] <hMz> or just enforce the file right? | ||
| [2009/04/01 18:22:39] <joe-mac> Volcane: i am a big fan of simple things | ||
| [2009/04/01 18:22:44] <hMz> if the file changes, it'll get reset | ||
| [2009/04/01 18:22:46] <hMz> and boom | ||
| [2009/04/01 18:22:48] <joe-mac> yea you could push out an actual file too | ||
| [2009/04/01 18:22:51] <andrewcshafer> A message queue gives you a way to send and respond to inter host events. | ||
| [2009/04/01 18:23:00] <hMz> yea, thats what i thought | ||
| [2009/04/01 18:23:00] @ Quit: PhabX: "Lost terminal" | ||
| [2009/04/01 18:23:07] <hMz> does purge seem sane enough for a feature request? | ||
| [2009/04/01 18:23:09] <Volcane> yeah, i am dead keen to see amq in puppet | ||
| [2009/04/01 18:23:15] <Volcane> i already have amq infrastructure for all sorts | ||
| [2009/04/01 18:23:21] <andrewcshafer> hMz: I think so. | ||
| [2009/04/01 18:23:21] <ezmob> why activemq and not rabbitmq? | ||
| [2009/04/01 18:23:30] <ezmob> rabbitmq is far superior | ||
| [2009/04/01 18:23:32] <joe-mac> man i feel like such a d-bag, everything i have is so simple | ||
| [2009/04/01 18:23:36] <Volcane> ezmob: i think they'll probably speak STOMP | ||
| [2009/04/01 18:23:36] <threetee> hMz: I haven't tried this, and it's probably not simple like a purge option for the cron resource would be, but it seems like you might be able to use augeas in a pinch | ||
| [2009/04/01 18:23:41] <ezmob> cool | ||
| [2009/04/01 18:23:45] <joe-mac> i mean like staright up apache postgres and other run of the mill stuff | ||
| [2009/04/01 18:23:46] <Volcane> ezmob: and i think they said memcache | ||
| [2009/04/01 18:23:47] <hMz> andrewcshafer: where does one direct such a request | ||
| [2009/04/01 18:24:02] <Volcane> ezmob: so it sounds very sexy | ||
| [2009/04/01 18:24:08] * ezmob is at the amqp summit right now | ||
| [2009/04/01 18:24:19] <Volcane> nice | ||
| [2009/04/01 18:24:56] <Volcane> i use it to run some distributed jobs, manage some dynamic firewall rules, and to put a filtered/colored/prettied stream of syslog onto a topic from my loghost so operators can just subscribe to the stream of events etc | ||
| [2009/04/01 18:25:06] <ezmob> nice | ||
| [2009/04/01 18:25:06] <gaveen> andrewcshafer, so you don't think there's a SoC project in adding Cap functionality? :) | ||
| [2009/04/01 18:25:08] <andrewcshafer> hMz: http://projects.reductivelabs.com/ | ||
| [2009/04/01 18:25:23] <hMz> thansk | ||
| [2009/04/01 18:25:43] <andrewcshafer> gaveen: I still think it is undefined what that actually means. | ||
| [2009/04/01 18:26:04] <Volcane> ezmob: http://nephilim.ml.org/~rip/logs.png :) | ||
| [2009/04/01 18:26:22] <Volcane> ezmob: generic stomp client i wrote subscribing to my syslog, enabling/disabling the filter on the syslog etc | ||
| [2009/04/01 18:26:42] <ezmob> sweet | ||
| [2009/04/01 18:26:50] <andrewcshafer> making SCM providers makes a good little project, but it's only a couple days to a week, not a whole summer. | ||
| [2009/04/01 18:27:14] @ Quit: ed209: Remote closed the connection | ||
| [2009/04/01 18:27:27] <gaveen> andrewcshafer, I see. I'm not that familiar with Puppet internals to explain beyond what you and Volcane discussed. | ||
| [2009/04/01 18:27:32] <gaveen> andrewcshafer, yes | ||
| [2009/04/01 18:27:42] @ Quit: shake-n-bake_: Read error: 110 (Connection timed out) | ||
| [2009/04/01 18:27:54] <hMz> sweet, done. | ||
| [2009/04/01 18:28:22] @ ed209 joined channel #puppet | ||
| [2009/04/01 18:28:41] <hMz> so, anyone have suggestions on how to handle keys for pools of machines. ie: they all share ssh keys and exist behind a load balancer | ||
| [2009/04/01 18:28:48] <hMz> oh and i'm using ldap | ||
| [2009/04/01 18:28:58] <gaveen> andrewcshafer, do you have any other thing you'd like to see in Puppet, which I might be able to pitch at the Rails team? | ||
| [2009/04/01 18:29:52] <andrewcshafer> gaveen: Doh, phone call | ||
| [2009/04/01 18:29:57] <andrewcshafer> one sec | ||
| [2009/04/01 18:30:03] <gaveen> andrewcshafer, np | ||
| [2009/04/01 18:31:12] <Volcane> gaveen: simple thing but many more functions for manipulating data, like split etc. like thats even a afternoons work but will make things so much better | ||
| [2009/04/01 18:31:31] <Volcane> gaveen: and an alternative to template() that supports searching for templates like file does. | ||
| [2009/04/01 18:31:43] <Volcane> also probably fairly trivial though | ||
| [2009/04/01 18:33:51] @ nakano is now known as nakano_ | ||
| [2009/04/01 18:35:26] <gaveen> Volcane, thanks for the ideas. I'm looking for something to go with Google SoC, which I can convince the Rails team to be useful for them too | ||
| [2009/04/01 18:35:49] <Volcane> yeah, its a pity the code is in such massive flux right now | ||
| [2009/04/01 18:35:50] @ Quit: WALoeIII: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 18:35:53] @ WALoeIII joined channel #puppet | ||
| [2009/04/01 18:36:02] <Volcane> bad time to be trying to do big things | ||
| [2009/04/01 18:38:14] <Volcane> good reporting tools, and a open node classifier would be massive wins | ||
| [2009/04/01 18:38:30] <Volcane> which sounds like exactly the kind of thing rails dude can excell at | ||
| [2009/04/01 18:39:30] @ giles joined channel #puppet | ||
| [2009/04/01 18:39:36] <gwar9999> Not sure if this is a bug or if I'm doing something wrong. I have a cron resource that is generated from a template and always returns the same output (in my testing environ). However, each time puppetd runs it insists that it's different and re-creates the crontab. | ||
| [2009/04/01 18:39:36] <gwar9999> command changed '/usr/foo 192.168.1.12 &>/dev/null' to '/usr/foo 192.168.1.12 &>/dev/null | ||
| [2009/04/01 18:39:40] <Volcane> something that takes the reports coming from the nodes, pop them into databases, let you browse them very nicely, see facts and all that kind of thing, tie in with a classifier to manage what goes on nodes etc | ||
| [2009/04/01 18:39:58] <Volcane> that would all be great, esp if written by someone who can actually do sexy ajaxy web stuff | ||
| [2009/04/01 18:40:41] <Volcane> gwar9999: is there a ' after the /dev/null in the change to? | ||
| [2009/04/01 18:40:56] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 18:40:56] @ shake-n-bake__ joined channel #puppet | ||
| [2009/04/01 18:41:16] <Volcane> gwar9999: check for a \n at the end of the command | ||
| [2009/04/01 18:41:24] <Volcane> probably dont want a \n there | ||
| [2009/04/01 18:41:47] <gwar9999> Volcane: yes the ' is there but it's on a newline... so that must be breaking things. | ||
| [2009/04/01 18:41:56] <Volcane> that'll be it then | ||
| [2009/04/01 18:44:45] <cwebber> Volcane: I have erb code that will check for the existence of file.hostname and read that in, otherwise echo out the contents of the template if you would like it | ||
| [2009/04/01 18:44:56] <gwar9999> Volcane: there isn't a newline in the template. It's a one liner. wc -l = 1. Not sure why puppet thinks there's a newline. | ||
| [2009/04/01 18:45:20] <Volcane> cwebber: yeah i have similar, but unfortunately doesnt work too awesomly in environments with complex module paths and such :( | ||
| [2009/04/01 18:45:33] <cwebber> yeah, i bet | ||
| [2009/04/01 18:45:49] <Volcane> gwar9999: you sure you're using the thing in the template to surpress the new line? | ||
| [2009/04/01 18:46:16] <Volcane> gwar9999: $foo = template("whatever")\n notice("template says '${foo}'") | ||
| [2009/04/01 18:46:23] <Volcane> gwar9999: testit :) | ||
| [2009/04/01 18:46:37] <bevans5446> Has anyone here had any luck getting puppet to email reports? | ||
| [2009/04/01 18:47:13] <gwar9999> you mean the '-'? Well, the last thing on the line is the /dev/null which isn't templated. Only the ip address (in the middle) is templated and it appears on a single line in the output and in the crontab. | ||
| [2009/04/01 18:47:17] <Volcane> cwebber: file() function can return files like that, first one that exist, and theres now inline_template() with the 2 you can easier do it. except you need to pass file() full pahts which suck in complex module paths | ||
| [2009/04/01 18:48:07] <Volcane> gwar9999: ah, well, from what u show it does seem to suggest theres a new line somewhere :( you 100% certain the erb has no \n in it? | ||
| [2009/04/01 18:48:20] <jrojas> is there a way to concat templates together after they are rendered? like define multiple templates for a file? | ||
| [2009/04/01 18:48:39] <Volcane> jrojas: template("one", "two") :) | ||
| [2009/04/01 18:49:04] <Volcane> will take template 'one' and 'two' render them, concat them | ||
| [2009/04/01 18:49:08] <jrojas> Volcane: will they be rendered in order and written to the file in that order? | ||
| [2009/04/01 18:49:39] <Volcane> yeah, if u can believe what the docs say, I've never tried it | ||
| [2009/04/01 18:49:48] <jrojas> hm...well here goes nothing. | ||
| [2009/04/01 18:49:55] @ Quit: jizquierdo: Read error: 110 (Connection timed out) | ||
| [2009/04/01 18:49:55] <jrojas> ill let you know how it turns out | ||
| [2009/04/01 18:51:38] <gwar9999> Volcane: weird, running your notice test, it does show a newline, but not sure where puppetmaster is getting that from. | ||
| [2009/04/01 18:52:01] <Volcane> on the templating wiki is some ruby to test a template independant of puppet | ||
| [2009/04/01 18:52:13] <Volcane> so you can narrow it down to either the template+irb or puppet | ||
| [2009/04/01 18:52:23] @ yarihm joined channel #puppet | ||
| [2009/04/01 18:54:19] @ alban3 joined channel #puppet | ||
| [2009/04/01 18:54:39] <gwar9999> Volcane: I changed the tpl to just use /bin/true and it shows a newline (the tpl is now a static 1-liner) | ||
| [2009/04/01 18:55:33] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 18:55:56] <Volcane> what editor you using? | ||
| [2009/04/01 18:59:08] @ Quit: verwilst: "Ex-Chat" | ||
| [2009/04/01 19:00:50] <gwar9999> Volcane: I've tried nano and vi, same result. The weird thing I just found is: if the line ends w/ the templated value with the -%> it works fine. However if the line ends with something else (such as the command /bin/true) it adds a newline in the output. | ||
| [2009/04/01 19:03:41] @ Quit: shake-n-bake__: Read error: 110 (Connection timed out) | ||
| [2009/04/01 19:04:03] @ sigmonsays joined channel #puppet | ||
| [2009/04/01 19:04:26] <sigmonsays> So, i'm contemplating using puppet to bootstrap a environment. the catch is, puppet will likely be disabled after initial setup | ||
| [2009/04/01 19:04:35] <sigmonsays> it's likely a misuse of puppet | ||
| [2009/04/01 19:05:04] <sigmonsays> But I know puppet can execute manifest. Can I direct it to read manifest from http ? | ||
| [2009/04/01 19:05:22] @ Quit: mfoster: "Leaving." | ||
| [2009/04/01 19:05:28] <rmiller4pi8> sigmonsays: i use it to boostrap some machines that won't later be under management | ||
| [2009/04/01 19:05:51] <rmiller4pi8> sigmonsays: do you mean execute it with just the client without the puppetmaster, or? | ||
| [2009/04/01 19:06:05] <sigmonsays> well I used "puppet site.pp" when I didn't have a master | ||
| [2009/04/01 19:06:24] <sigmonsays> but ideally, i wouldn't have a puppetmaster and serve .pp files via apache/lighty | ||
| [2009/04/01 19:06:48] <sigmonsays> puppet http://bootstrap/do_something_once.pp seems super sexy | ||
| [2009/04/01 19:06:56] <sigmonsays> I can go through the extra steps of signing certs and stuff | ||
| [2009/04/01 19:07:04] @ Quit: ezmob: "Bye!" | ||
| [2009/04/01 19:07:06] <sigmonsays> but i'd like to skip that to make moving through the motions a breeze | ||
| [2009/04/01 19:07:50] <rmiller4pi8> sigmonsays: well sure, you can set certs to autosign or whatever, but why not just have your script wget the file before calling puppet? | ||
| [2009/04/01 19:08:06] <sigmonsays> Yah, that's probably the easiest way | ||
| [2009/04/01 19:08:20] <sigmonsays> I envison "puppet --apply-class web_server" | ||
| [2009/04/01 19:08:42] <sigmonsays> but i'll see how it goes wget/script | ||
| [2009/04/01 19:09:50] <rmiller4pi8> sigmonsays: there might be something more elegant (or more of a hack, your call): | ||
| [2009/04/01 19:10:08] <sigmonsays> heh. i'll see what I can get myself into | ||
| [2009/04/01 19:12:10] <rmiller4pi8> sigmonsays: since you control the initial image, you can have an already-signed cert on the client, and so if you just have something like "webserver" in your node defn, and you've got that client cert in your boot image or whatever, then all you have to do is have puppet client say hello with that servername | ||
| [2009/04/01 19:12:39] <rmiller4pi8> sigmonsays: hmm, but then you do have to figure out how to lie to your puppetmaster about dns, maybe that's not straightforward | ||
| [2009/04/01 19:13:06] <Volcane> I have a small environment | ||
| [2009/04/01 19:13:07] <rmiller4pi8> sigmonsays: if you're only doing one node at a time then dyndns would solve the problem, otherwise you might have an issue | ||
| [2009/04/01 19:13:11] <Volcane> with just a default node in it | ||
| [2009/04/01 19:13:24] <Volcane> all machines i put in that environment, gets bootrapped with my initial stuff | ||
| [2009/04/01 19:13:41] <sigmonsays> ya, I do that bootstrap stuff too, but this is to quickly setup a test environment | ||
| [2009/04/01 19:13:56] <Volcane> works really nice for just putting machines in like a sane state that i want all machines to start off with | ||
| [2009/04/01 19:13:59] <jrojas> Volcane: the template rendering worked perfectly thanks. | ||
| [2009/04/01 19:14:08] <Volcane> then i can decide to either make them puppet machines or just leave them etc after that | ||
| [2009/04/01 19:14:08] <sigmonsays> like if someone wants to mess around w/ current prod web server, they can bootstrap it and have puppet disabled off the bat | ||
| [2009/04/01 19:14:13] <Volcane> jrojas: sweet | ||
| [2009/04/01 19:14:34] <sigmonsays> I love templates | ||
| [2009/04/01 19:14:59] <rmiller4pi8> sigmonsays: the only thing is, then you have to either have one puppetmaster for each role, or somehow have the machine declaring what role it's in, which doesn't quite work with Volcane's setup | ||
| [2009/04/01 19:15:21] <sigmonsays> Yah, that's the problem i'm trying to solve cleanly | ||
| [2009/04/01 19:15:53] <Volcane> different environments? or just create a file on the node that sets a fact for $role | ||
| [2009/04/01 19:16:10] <Volcane> or even FACTER_ROLE=foo ; puppetd --test | ||
| [2009/04/01 19:16:20] <sigmonsays> it's lower level than that | ||
| [2009/04/01 19:16:23] <Volcane> set $ROLE for you via facter | ||
| [2009/04/01 19:17:03] <sigmonsays> I could download a manifest tarball and dynamically edit site.pp via script, then run puppet site.pp | ||
| [2009/04/01 19:17:12] <sigmonsays> but that's not too elegant ;) | ||
| [2009/04/01 19:17:18] @ Quit: d3vilb0x: Read error: 110 (Connection timed out) | ||
| [2009/04/01 19:17:37] @ Quit: yarihm: "This computer has gone to sleep" | ||
| [2009/04/01 19:18:35] <Volcane> heh | ||
| [2009/04/01 19:18:46] <rmiller4pi8> sigmonsays: actually, Volcane's solution seems pretty elegant, why wouldn't that work? | ||
| [2009/04/01 19:19:05] <rmiller4pi8> Volcane: for some reason i always forget about custom facts, i should probably refactor my config to do more of that | ||
| [2009/04/01 19:19:12] <sigmonsays> Hrm | ||
| [2009/04/01 19:19:17] <sigmonsays> oh, I get it | ||
| [2009/04/01 19:19:29] <Volcane> rmiller4pi8: I've a /etc/facts.txt where i just dump stuff into, simple and lowtech | ||
| [2009/04/01 19:19:38] <Volcane> rmiller4pi8: fact=value lines | ||
| [2009/04/01 19:19:39] <sigmonsays> hehe, likewise :) | ||
| [2009/04/01 19:20:07] <rmiller4pi8> Volcane: i've never messed with facter, how do you read those out? | ||
| [2009/04/01 19:20:18] <sigmonsays> Volcane, thanks for the great ideas | ||
| [2009/04/01 19:20:20] <Volcane> gotta say though i am loving the idea that somone mentioned of like /etc/facts.d full of shell/perl/ruby/c/whatever that all just return a fact=value line that then gets put into the facter outpu | ||
| [2009/04/01 19:20:40] <rmiller4pi8> Volcane: that is an awesome idea, very nrpe-like | ||
| [2009/04/01 19:20:45] <Volcane> indeed | ||
| [2009/04/01 19:20:47] <Volcane> its awesome | ||
| [2009/04/01 19:20:59] <Volcane> its just a matter of getting bored enough and I'll write something one night | ||
| [2009/04/01 19:21:27] <Volcane> rmiller4pi8: if you have used variables like $operatingsystem in your manifests, then you've used facts :() | ||
| [2009/04/01 19:21:47] <sigmonsays> Volcane, that is a good idea. I wish facts got cached. | ||
| [2009/04/01 19:21:54] <rmiller4pi8> Volcane: yeah, i meant, how do lines in /etc/facts become facts? | ||
| [2009/04/01 19:22:04] <sigmonsays> i wouldn't want the result of a fsck getting added as a fact :) | ||
| [2009/04/01 19:22:17] @ Quit: giles: Read error: 110 (Connection timed out) | ||
| [2009/04/01 19:22:20] <Volcane> rmiller4pi8: with a couple of lines of ruby http://reductivelabs.com/trac/puppet/wiki/AddingFacts | ||
| [2009/04/01 19:22:27] <Volcane> sigmonsays: lol | ||
| [2009/04/01 19:22:40] <Volcane> sigmonsays: yeah defo something to wrap in a timeout block | ||
| [2009/04/01 19:23:01] <sigmonsays> http://rafb.net/p/Zu46OI86.html rmiller4pi8 this is the /etc/facts.txt u can find *somewhere* in the wiki | ||
| [2009/04/01 19:23:25] * Volcane recognises his early-ruby-days code in sigmonsays's pastie :P | ||
| [2009/04/01 19:23:35] <sigmonsays> hehe | ||
| [2009/04/01 19:23:56] <sigmonsays> funny how that works | ||
| [2009/04/01 19:24:05] <Volcane> http://pastie.org/434393 | ||
| [2009/04/01 19:24:08] <Volcane> my current version | ||
| [2009/04/01 19:24:48] <sigmonsays> better | ||
| [2009/04/01 19:25:11] <sigmonsays> i still struggle trying to do the "un ruby" thing | ||
| [2009/04/01 19:25:18] <sigmonsays> (when i'm writing ruby) | ||
| [2009/04/01 19:25:19] <rmiller4pi8> Volcane: now we're talking, very nice | ||
| [2009/04/01 19:25:28] <rmiller4pi8> thanks much to both of you | ||
| [2009/04/01 19:25:36] <Volcane> sigmonsays: yeah hard for old perl folk to wake-the-f-up :P | ||
| [2009/04/01 19:26:08] <sigmonsays> yah | ||
| [2009/04/01 19:26:14] <rmiller4pi8> heh | ||
| [2009/04/01 19:26:32] <rmiller4pi8> my boss is a perl guy and i'm a ruby/python guy and it's sometimes hard for us to read each others' code, even in the same language | ||
| [2009/04/01 19:26:52] <rmiller4pi8> you can even tell the difference in the way we write shell | ||
| [2009/04/01 19:26:59] @ punkcut joined channel #puppet | ||
| [2009/04/01 19:28:15] <Volcane> yeah, though been writing more and more ruby stuff, lots of little object thingys etc, defo getting more into the ruby way of things | ||
| [2009/04/01 19:28:31] <sigmonsays> i'd like to claim i'm agnostic but I'm definitely a { } and ( ) kinda guy still. it's obvious. | ||
| [2009/04/01 19:28:32] <Volcane> rewrote quite a few of my old perl stuff into nicer looking ruby stuff | ||
| [2009/04/01 19:28:55] <Volcane> heh, i mix them | ||
| [2009/04/01 19:28:55] <sigmonsays> I am still a python nut, mostly because I know it well | ||
| [2009/04/01 19:29:03] <Volcane> sometimes begin/end reads easier | ||
| [2009/04/01 19:29:06] <sigmonsays> yah | ||
| [2009/04/01 19:29:13] <Volcane> i blame pascal | ||
| [2009/04/01 19:29:33] <Volcane> was it pascal? hmm | ||
| [2009/04/01 19:29:43] <bevans5446> Has anyone here had any luck getting puppet to email reports? | ||
| [2009/04/01 19:29:48] <Volcane> yes, pascal was all begin/end | ||
| [2009/04/01 19:30:03] <Volcane> bevans5446: never tried | ||
| [2009/04/01 19:30:16] <sigmonsays> only reason I like {[( is because of vim and shift % | ||
| [2009/04/01 19:30:22] <bevans5446> doesn't see to want to work | ||
| [2009/04/01 19:30:22] <Volcane> heh | ||
| [2009/04/01 19:30:33] <Volcane> bevans5446: any errors or just no mail? | ||
| [2009/04/01 19:30:38] <bevans5446> just no mail | ||
| [2009/04/01 19:30:44] <Volcane> sux | ||
| [2009/04/01 19:30:53] <bevans5446> heh, yup | ||
| [2009/04/01 19:31:11] <Volcane> i think i played with it once, but got very quickly very annoyed by the mails | ||
| [2009/04/01 19:31:19] <Volcane> so i wrote something to aggregate them on a web page | ||
| [2009/04/01 19:31:41] <Volcane> where i can see all nodes, click a node, see logs | ||
| [2009/04/01 19:32:20] <bevans5446> that would be helpful too. I'm jsut curious as to what the emails have in them | ||
| [2009/04/01 19:32:26] <bevans5446> just simple logs? | ||
| [2009/04/01 19:32:36] <Volcane> yeah i dont think they've overly sexy | ||
| [2009/04/01 19:32:42] <Volcane> the book has some thing about it | ||
| [2009/04/01 19:32:54] @ Quit: keithlard: | ||
| [2009/04/01 19:33:02] <Volcane> bevans5446: this is my kind of fugly php for the aggregation of logs/facts/etc http://www.devco.net/pubwiki/Puppet/PuppetView | ||
| [2009/04/01 19:34:00] <bevans5446> nice. I'll check that out | ||
| [2009/04/01 19:34:02] <bevans5446> thanks | ||
| [2009/04/01 19:34:50] <Volcane> it looks ugly, the idea is you'll fiddle the templates and make it look however u want | ||
| [2009/04/01 19:34:56] <Volcane> but if asthetics doesnt matter, it'll do | ||
| [2009/04/01 19:35:53] <bevans5446> aesthetics don't matter - I was silling to go with email :p | ||
| [2009/04/01 19:36:44] @ keithlard joined channel #puppet | ||
| [2009/04/01 19:39:01] <Volcane> k, bed time, chat 'morrow | ||
| [2009/04/01 19:39:28] @ Quit: shake-n-bake: Read error: 60 (Operation timed out) | ||
| [2009/04/01 19:41:00] <gaveen> andrewcshafer, It's about 5.15am here. I need to get some sleep because I have some errands today. I'll send you a mail. Thanks for the discussion. | ||
| [2009/04/01 19:41:19] <andrewcshafer> cheers | ||
| [2009/04/01 19:42:30] <gaveen> andrewcshafer, oh,.. I thought you were away. Anyway, I'll be back in a few hours. But you might be away. So I'll just mail | ||
| [2009/04/01 19:50:11] @ Quit: gaveen: "Enough lurking for now" | ||
| [2009/04/01 19:53:22] @ Quit: Innocenti: Read error: 110 (Connection timed out) | ||
| [2009/04/01 20:00:19] @ Quit: f3ew: Read error: 113 (No route to host) | ||
| [2009/04/01 20:01:34] @ Quit: bgupta: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 20:01:34] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 20:03:04] @ bgupta joined channel #puppet | ||
| [2009/04/01 20:10:15] @ Quit: aZaFred: | ||
| [2009/04/01 20:12:11] @ shake-n-bake_ joined channel #puppet | ||
| [2009/04/01 20:18:25] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 20:20:39] <jamesturnbull> gepetto: seen nasrat | ||
| [2009/04/01 20:20:39] <gepetto> jamesturnbull: nasrat was last seen 6 days, 6 hours, 20 minutes and 13 seconds ago, quitting IRC () | ||
| [2009/04/01 20:27:12] @ Quit: alfism: "Connection reset by beer" | ||
| [2009/04/01 20:31:14] @ Quit: andrewcshafer: | ||
| [2009/04/01 20:32:37] @ benblack joined channel #puppet | ||
| [2009/04/01 20:34:11] <eythian> If I give pupptd some tags, but I have no tags defined in the configuration, does this mean that nothing will happen at all? | ||
| [2009/04/01 20:35:44] <eythian> So, if I started to use tags, I'd have to go through and tag _everything_? | ||
| [2009/04/01 20:37:03] @ fujin joined channel #puppet | ||
| [2009/04/01 20:37:03] @ Quit: keithlard: | ||
| [2009/04/01 20:37:17] <plathrop> eythian: There are a number of implicit tags | ||
| [2009/04/01 20:37:26] <plathrop> eythian: I believe the class name is one of them. | ||
| [2009/04/01 20:37:51] <plathrop> eythian: see wiki:UsingTags for details | ||
| [2009/04/01 20:37:52] <gepetto> plathrop: eythian: wiki:UsingTags is http://reductivelabs.com/trac/puppet/wiki/UsingTags | ||
| [2009/04/01 20:38:07] @ cwebber_ joined channel #puppet | ||
| [2009/04/01 20:38:33] <eythian> plathrop: the UsingTags doc is what I'm looking at. It's an introduction, but it's too sparse to be very useful beyond that. | ||
| [2009/04/01 20:38:36] <plathrop> eythian: yeah, node, define, and class statements cause implicit tagging. | ||
| [2009/04/01 20:38:40] @ Quit: benblack: "Leaving..." | ||
| [2009/04/01 20:38:59] <plathrop> eythian: which is stated on that page. If you feel it is unclear, please file a bug. | ||
| [2009/04/01 20:39:37] <eythian> but that means you're doubling up your definitions, right? On one hand, you need to say 'apache' and 'postgres' in your tags, and also in your node definition on the master. | ||
| [2009/04/01 20:40:39] <eythian> plathrop: it's not that the doc is unclear, it's just that it tells you the mechanics of it only, a nice summary of 'how you might use this in real life' would be good :) | ||
| [2009/04/01 20:41:32] <plathrop> eythian: tags are defined on the master. And you don't need to tag "apache" or "postgres" if that's the name of the class. | ||
| [2009/04/01 20:42:22] <plathrop> eythian: It seems pretty clear to me from the documentation under "Automatic Tagging" that there are some tags you don't have to explicitly define in order to use them. | ||
| [2009/04/01 20:43:35] <eythian> plathrop: that's not the problem. I'm not concerned about implicit tagging. It's that as soon as I use one tag on the client, I have to use _every_ tag for everything it'll need, which seems to defeat the purpose of the node definition, almost. | ||
| [2009/04/01 20:44:47] <plathrop> eythian: I'm not sure I understand what you are shooting for, here. | ||
| [2009/04/01 20:45:17] <plathrop> The purpose of tagging is to run only a subset of your configuration. | ||
| [2009/04/01 20:45:52] <eythian> plathrop: ah, right. I think it was that idea that I was missing. | ||
| [2009/04/01 20:46:13] @ Quit: cwebber: Read error: 145 (Connection timed out) | ||
| [2009/04/01 20:46:15] <plathrop> This is good for things like scheduled nightly maintenance. Maybe you've got some config changes that you want enforced all the time, but you only want to make *changes* during specific times | ||
| [2009/04/01 20:46:30] <plathrop> You could schedule a cron run of puppetd with tag --nightly-maintenance. | ||
| [2009/04/01 20:47:01] <plathrop> Then tag those resources you want to remain unchanged during the day with "nightly-maintenance" | ||
| [2009/04/01 20:47:16] <eythian> plathrop: you'd have to do it in reverse, wouldn't you? Have a normal tag of 'daytime', and then run without that tag at night, given nighttime is a superset of daytime? | ||
| [2009/04/01 20:47:54] <plathrop> eythian: yeah, but you get the point :-P | ||
| [2009/04/01 20:47:58] <plathrop> eythian: I just don't use tags | ||
| [2009/04/01 20:49:08] <eythian> plathrop: yeah. they seem very niche to me. What I'm trying to do is define the particular configuration applied by puppet using some parameters on VM startup. Currently I've got custom facts, I was seeing if tags would make it easier. | ||
| [2009/04/01 20:50:44] <eythian> what I'd like to be able to do is have a fact: "modules=apache,postgres,somethingelse" and have if statements in the config works out what to do. | ||
| [2009/04/01 20:51:17] <eythian> But I don't think puppet can do that, so I may need to do 'apache=true, postgres=true, ...' instead. | ||
| [2009/04/01 20:51:28] <eythian> Which is probably close enough | ||
| [2009/04/01 20:52:42] <plathrop> eythian: you're fighting the tool, I think | ||
| [2009/04/01 20:52:58] <eythian> plathrop: I'm trying not too :) | ||
| [2009/04/01 20:53:00] <stevenjenkins> does anyone know where brice's commits are for storeconfigs improvements? | ||
| [2009/04/01 20:53:02] <plathrop> eythian: You seem to be trying to have the *node* tell the *puppetmaster* what it should be? | ||
| [2009/04/01 20:53:07] @ Quit: joe-mac: "Leaving." | ||
| [2009/04/01 20:53:17] <plathrop> eythian: that's backwards from the puppet model | ||
| [2009/04/01 20:53:18] @ Quit: madrescher: Read error: 113 (No route to host) | ||
| [2009/04/01 20:53:49] @ Quit: hMz: "rewind(c3.2) DO YOU GF? rewind(c3.2)" | ||
| [2009/04/01 20:54:31] <eythian> plathrop: yeah. The thing is, I want to be able to deploy a stock VM image, have it know (from args it's given) what it's supposed to be running, and get instructions from puppet on how to actually do that. | ||
| [2009/04/01 20:55:14] <rmiller4pi8> eythian: why not just put those "args" into the node defn on the server side? | ||
| [2009/04/01 20:55:25] <plathrop> eythian: Right. That's definitely fighting the tool, man. Puppet is about centralized configuration. The puppetmaster is supposed to be the source of the configuration. | ||
| [2009/04/01 20:55:51] @ Quit: cwebber_: Connection timed out | ||
| [2009/04/01 20:56:14] <eythian> rmiller4pi8: because in a VM environment that doesn't make sense. I could have one instance running, or 50. They all come from one image, so there's no way to tell them apart aside from runtime parameters. | ||
| [2009/04/01 20:56:29] <plathrop> eythian: that's not true. | ||
| [2009/04/01 20:56:49] <plathrop> eythian: they have to have unique IP addresses at minimum | ||
| [2009/04/01 20:56:57] <eythian> plathrop: which are completely dynamic | ||
| [2009/04/01 20:57:02] <plathrop> eythian: for Puppet to work at all, they have to have unique hostnames | ||
| [2009/04/01 20:57:29] @ madrescher joined channel #puppet | ||
| [2009/04/01 20:57:30] <eythian> plathrop: they have unique hostnames, but it's defined when the image comes up, and goes away when the image goes away. | ||
| [2009/04/01 20:57:32] <plathrop> eythian: I think what you really want is an external node script | ||
| [2009/04/01 20:57:41] <rmiller4pi8> second | ||
| [2009/04/01 20:57:52] <eythian> plathrop: what do you mean? | ||
| [2009/04/01 20:58:04] <plathrop> eythian: wiki:ExternalNodes | ||
| [2009/04/01 20:58:04] <gepetto> plathrop: eythian: wiki:ExternalNodes is http://reductivelabs.com/trac/puppet/wiki/ExternalNodes | ||
| [2009/04/01 20:58:40] <plathrop> Someone is running some sort of command to fire up these VMs, right? | ||
| [2009/04/01 20:59:01] <plathrop> They are fired up for a purpose that is known at time of creation, yes? | ||
| [2009/04/01 20:59:09] <eythian> plathrop: yep | ||
| [2009/04/01 20:59:10] <plathrop> So, you can do one of two things: | ||
| [2009/04/01 20:59:29] <plathrop> 1) define nodes as you create machines, remove them as you destroy machines | ||
| [2009/04/01 20:59:54] <plathrop> 2) use an external nodes script to interface with whatever classification scheme you like | ||
| [2009/04/01 21:00:02] <plathrop> To elaborate on #2, for instance | ||
| [2009/04/01 21:00:05] <gepetto> plathrop: #2 is http://projects.reductivelabs.com/issues/show/2 "Puppet - Feature #2: Add 'link' ability to File - ReductiveLabs.com" | ||
| [2009/04/01 21:00:41] <plathrop> One of my clients has a webapp for firing up VMs. When a VM is created, the user selects a "class" of VM. | ||
| [2009/04/01 21:00:58] <plathrop> A hostname is generated, hostname and class are stored in SQLite | ||
| [2009/04/01 21:01:20] <plathrop> Then their external node script looks up the hostname from the SQLite db and applies the appropriate class | ||
| [2009/04/01 21:01:39] <eythian> plathrop: OK. Now this looks promising. I didn't know about it. | ||
| [2009/04/01 21:02:00] <plathrop> eythian: :-) | ||
| [2009/04/01 21:02:01] <eythian> And it does seem nicer than that I was thinking of. | ||
| [2009/04/01 21:02:11] <plathrop> eythian: Puppet rules. | ||
| [2009/04/01 21:03:11] @ mikepea joined channel #puppet | ||
| [2009/04/01 21:04:36] <eythian> How do you get around “If you specify any nodes in your site.pp, you must specify all nodes in site.pp, even those that are looked up via the external nodes script.” — currently I'm using --fqdn to fake the hostname so they all appear the same. Do I just need the single entry in node.pp (I'm not using site.pp for nodes) then? | ||
| [2009/04/01 21:05:08] <plathrop> eythian: My client just doesn't specify any nodes in site.pp | ||
| [2009/04/01 21:05:15] <eythian> Also, does the external nodes definition override the nodes.pp one, or do they get combined? | ||
| [2009/04/01 21:05:29] <plathrop> eythian: I believe the behavior if they conflict is undefined. | ||
| [2009/04/01 21:05:59] <eythian> plathrop: OK. I have the puppetmaster managing other machines that behave more like real ones, and they all have 'node' entries. | ||
| [2009/04/01 21:06:28] <plathrop> eythian: So does my client :-) | ||
| [2009/04/01 21:06:40] <plathrop> eythian: they put their real nodes in the db too | ||
| [2009/04/01 21:07:46] <eythian> plathrop: hmm. That does seem sensible, yeah. So, there are no node definitions for real hosts anywhere? Just for | ||
| [2009/04/01 21:07:53] <eythian> ...for ones that will be inherited? | ||
| [2009/04/01 21:08:15] <plathrop> eythian: um... no, there are node definitions in the database. | ||
| [2009/04/01 21:08:29] <plathrop> eythian: oh! | ||
| [2009/04/01 21:08:39] <plathrop> eythian: You mean there are no puppet DSL "node" statements | ||
| [2009/04/01 21:08:43] <eythian> yeah | ||
| [2009/04/01 21:08:54] <plathrop> eythian: that is correct. There are only classes and definitions. | ||
| [2009/04/01 21:09:04] <eythian> OK. So even things like 'basenode' go in the db? | ||
| [2009/04/01 21:09:49] <plathrop> Well, they don't do it that way. They have a class that they include on every node that sets things up. You can write your script to do any sort of weird node inheritance you want. | ||
| [2009/04/01 21:10:44] <plathrop> My client doesn't need any "node" inheritance. | ||
| [2009/04/01 21:11:01] <rmiller4pi8> eythian: that's how i do it too, with a common include, but it seems like the docs are suggesting "one include and one inheritance" per node now...is there anything bad about our way that i should be aware of? | ||
| [2009/04/01 21:11:16] <eythian> true. Oh. If you don't know the hostname until after the image has launched, how do you handle that situation? | ||
| [2009/04/01 21:11:17] <rmiller4pi8> err, sorry | ||
| [2009/04/01 21:11:22] <rmiller4pi8> that was to plathrop | ||
| [2009/04/01 21:11:26] @ ohadlevy joined channel #puppet | ||
| [2009/04/01 21:12:05] <plathrop> eythian: I don't want to solve *all* the fun problems for you. | ||
| [2009/04/01 21:12:16] <plathrop> eythian: but I'd say you could have the node "check in " at boot | ||
| [2009/04/01 21:12:37] <plathrop> rmiller4pi8: Where is that in the docs? I certainly don't do it that way at Digg! | ||
| [2009/04/01 21:13:25] @ Quit: WALoeIII: Read error: 113 (No route to host) | ||
| [2009/04/01 21:13:45] <eythian> plathrop: heh. Because the launch config ends up on the client, I'm still thinking I need some way of getting that information to the master, so it knows the config that it needs to push through. But it seems that hostname is the only item that gets passed back, right? | ||
| [2009/04/01 21:13:51] <rmiller4pi8> plathrop: i forget, just something i saw the other day...seems like the docs are in quite a state of flux, which makes sense, since i guess the code is as well | ||
| [2009/04/01 21:14:12] <plathrop> rmiller4pi8: Yeah, I haven't heard anything of the sort. | ||
| [2009/04/01 21:14:44] <plathrop> eythian: all you get is hostname and facts. All your script gets is hostname | ||
| [2009/04/01 21:15:15] <plathrop> eythian: remember, the model here is that there is a central source imposing configuration on clients | ||
| [2009/04/01 21:15:23] <eythian> plathrop: oh. then it won't work. The first I know about a hostname is when the image comes up. | ||
| [2009/04/01 21:15:32] <plathrop> eythian: So? | ||
| [2009/04/01 21:15:59] <eythian> plathrop: so, if I don't know what the hostname is until then, I don't know what it's role is supposed to be, so I can determine what to give it as its configuration. | ||
| [2009/04/01 21:16:23] <eythian> *can't | ||
| [2009/04/01 21:16:23] <plathrop> eythian: Sure you do. You fired up the host for a purpose, right? | ||
| [2009/04/01 21:16:40] <plathrop> You know the role. | ||
| [2009/04/01 21:17:04] <plathrop> Here's an example: | ||
| [2009/04/01 21:17:05] <eythian> plathrop: I told the system 'give me a machine', 5 minutes later the machine connects to the master with a random hostname and asks for it's configuration. | ||
| [2009/04/01 21:17:12] <plathrop> You have the VM run some command on startup which "registers" itself as a free node in a database of some sort. | ||
| [2009/04/01 21:17:35] <plathrop> eythian: yeah, the VM isn't gonna get any config at that point, because the puppetmaster doesn't know who it is | ||
| [2009/04/01 21:18:05] <plathrop> your external node script looks at that database. Maybe you also store "pending machine requests" in the db. | ||
| [2009/04/01 21:18:09] <eythian> plathrop: indeed, only the VM knows what it's supposed to be doing at this point. | ||
| [2009/04/01 21:18:20] <plathrop> Your VM creation app tells the DB "I want 10 apache servers" | ||
| [2009/04/01 21:18:23] @ walrus__ joined channel #puppet | ||
| [2009/04/01 21:18:33] <plathrop> your VM creator turns up 10 VMs | ||
| [2009/04/01 21:19:01] <eythian> Actually, I can sorta see how that would work. Although it would be a fair bit of effort to get it there. Probably worthwhile in the longer term. | ||
| [2009/04/01 21:19:08] <plathrop> Your external node script does some fancy logic -- it gets an unknown hostname and matches it with a pending request, then marks that host allocated | ||
| [2009/04/01 21:19:21] <plathrop> There are definitely simpler intermediate steps | ||
| [2009/04/01 21:19:35] <plathrop> For instance, I just track the VMs by hand. It isn't that hard in my environment. | ||
| [2009/04/01 21:19:54] <rmiller4pi8> if you trust your VMs, then your VM can just edit its own LDAP entry, no? | ||
| [2009/04/01 21:19:55] <eythian> plathrop: that's what I do on the internal lan, I can give each one a hostname when it starts up. | ||
| [2009/04/01 21:19:59] <plathrop> My script for VM creation takes a name and automagically allocates IPs and adds them to site.pp | ||
| [2009/04/01 21:20:11] <eythian> but now I'm working on EC2 images. | ||
| [2009/04/01 21:20:21] <plathrop> eythian: rmiller4pi8 has a good point, you can also use wiki:LdapNodes | ||
| [2009/04/01 21:20:49] <plathrop> er... | ||
| [2009/04/01 21:20:59] <plathrop> wiki:LDAPNodes | ||
| [2009/04/01 21:20:59] <gepetto> plathrop: wiki: wiki:LDAPNodes is http://reductivelabs.com/trac/puppet/wiki/LDAPNodes | ||
| [2009/04/01 21:22:16] <plathrop> eythian: Oh, EC2! | ||
| [2009/04/01 21:22:22] <rmiller4pi8> or maybe ldap is heavyweight (haha) for what you're doing, but the only point is that if only the node knows its role, then the node can just register itself in your config db | ||
| [2009/04/01 21:22:31] <rmiller4pi8> which you grab with external node | ||
| [2009/04/01 21:22:34] <plathrop> eythian: There's a fair amount of discussion in the list archives about EC2 | ||
| [2009/04/01 21:23:23] <eythian> rmiller4pi8: yeah, that's what I got thinking to. It can call back to the master with a server I write reporting its hostname and role information, and then puppet starts up after that and pulls it down. | ||
| [2009/04/01 21:23:35] <eythian> plathrop: oh yeah? I might have to have a look. | ||
| [2009/04/01 21:23:48] <plathrop> eythian: http://www.mikebrittain.com/blog/2008/07/19/web-hosting-on-ec2/ | ||
| [2009/04/01 21:24:29] <plathrop> isn't super-helpful but might give you ideas | ||
| [2009/04/01 21:25:01] @ d3vilb0x joined channel #puppet | ||
| [2009/04/01 21:25:35] @ Quit: nigelk: | ||
| [2009/04/01 21:25:38] <plathrop> eythian: This article outlines the process http://edmund.haselwanter.com/en/blog/2008/09/06/bootstraping-ec2-with-puppet-iclassify-and-capistrano/ | ||
| [2009/04/01 21:25:44] <plathrop> I gotta go, though | ||
| [2009/04/01 21:25:58] <eythian> plathrop: cheers for the help, I think I got some good ideas about making it work. | ||
| [2009/04/01 21:26:06] <plathrop> eythian: no prob | ||
| [2009/04/01 21:34:03] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 21:34:41] @ Quit: shake-n-bake_: Read error: 60 (Operation timed out) | ||
| [2009/04/01 21:46:04] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/01 21:48:35] @ threetee left channel #puppet () | ||
| [2009/04/01 21:49:24] @ shake-n-bake__ joined channel #puppet | ||
| [2009/04/01 21:52:28] @ nigelk joined channel #puppet | ||
| [2009/04/01 21:53:27] @ Quit: nigelk: Client Quit | ||
| [2009/04/01 21:54:47] @ lak joined channel #puppet | ||
| [2009/04/01 21:57:09] @ Quit: shake-n-bake: Read error: 110 (Connection timed out) | ||
| [2009/04/01 21:57:41] @ londo__ joined channel #puppet | ||
| [2009/04/01 21:58:34] @ Quit: londo: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 22:00:02] @ shake-n-bake joined channel #puppet | ||
| [2009/04/01 22:04:10] @ Quit: markl___: "Lost terminal" | ||
| [2009/04/01 22:06:53] @ Quit: shake-n-bake__: Read error: 110 (Connection timed out) | ||
| [2009/04/01 22:07:28] @ Quit: ethan_rowe: "Lack of interest wins out." | ||
| [2009/04/01 22:07:32] @ andrewcshafer joined channel #puppet | ||
| [2009/04/01 22:17:21] @ andrewcshafer_ joined channel #puppet | ||
| [2009/04/01 22:22:05] @ Quit: shake-n-bake: | ||
| [2009/04/01 22:22:52] @ Quit: lak: | ||
| [2009/04/01 22:23:20] @ Quit: claymation: Read error: 110 (Connection timed out) | ||
| [2009/04/01 22:27:51] @ Quit: andrewcshafer: Read error: 110 (Connection timed out) | ||
| [2009/04/01 22:34:06] @ roadgeek joined channel #puppet | ||
| [2009/04/01 22:35:16] @ Quit: koojoo: "Leaving..." | ||
| [2009/04/01 22:42:17] @ MrHeavy_ joined channel #puppet | ||
| [2009/04/01 22:43:46] <MrHeavy_> Is feature #916 in Puppet 0.24.8? The ticket was closed a month ago but I can't tell if it actually made it into master | ||
| [2009/04/01 22:43:47] <gepetto> MrHeavy_: #916 is http://projects.reductivelabs.com/issues/show/916 "Puppet - Feature #916: Add support for the plugin mount to the indirected file server - ReductiveLabs.com" | ||
| [2009/04/01 22:44:06] <MrHeavy_> Err, not master, into the 0.24.x branch | ||
| [2009/04/01 22:44:50] @ Quit: walrus__: Remote closed the connection | ||
| [2009/04/01 22:44:50] <roadgeek> Good evening all, I'm struggling with a dilemma. I need the ability to arbitrarily make edits to text files. I've found some simple recipes to do this (http://reductivelabs.com/trac/puppet/wiki/Recipes/SimpleText) but it all seems sort of kludgy | ||
| [2009/04/01 22:45:12] <MrHeavy_> Augeas is a good place to start looking | ||
| [2009/04/01 22:45:33] <MrHeavy_> I saw someone's thing for this in a random Git repo I was browsing the other day though | ||
| [2009/04/01 22:45:35] <MrHeavy_> Lemme try to find it | ||
| [2009/04/01 22:46:27] <roadgeek> Thank you! I've read a bit about Augeas, but it seems to be not all that well documented and, quite honestly, is overkill for what I need to do | ||
| [2009/04/01 22:46:42] <MrHeavy_> Yeah, the Puppet support is still a little iffy too | ||
| [2009/04/01 22:47:04] <MrHeavy_> For example, with --noop, it tells you what Augeas operations it's about to perform, but it doesn't give you a diff of the file like the file provider does | ||
| [2009/04/01 22:47:17] <MrHeavy_> file type, rather | ||
| [2009/04/01 22:47:21] <MrHeavy_> Damn, I suck at terminologu | ||
| [2009/04/01 22:47:22] <MrHeavy_> y | ||
| [2009/04/01 22:47:50] <roadgeek> I understand what you mean :) | ||
| [2009/04/01 22:48:19] <MrHeavy_> Argh, I can never find the repos of people's configs on the wiki without Googling for ten minutes | ||
| [2009/04/01 22:49:19] @ Quit: chiggsy: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 22:53:09] <MrHeavy_> http://github.com/camptocamp/puppet-common/tree/75b3a2cfe9148a28ed2efd536264a23c5334e7ff/manifests/defines | ||
| [2009/04/01 22:53:47] @ Quit: andrewcshafer_: | ||
| [2009/04/01 22:53:49] <MrHeavy_> "replace.pp" and "append_if_no_such_line.pp" are probably of particular interest to you | ||
| [2009/04/01 22:54:33] <jamesturnbull> MrHeavy_: that's in master | ||
| [2009/04/01 22:54:43] <jamesturnbull> MrHeavy_: it's a REST thing that'll be in 0.25.0 | ||
| [2009/04/01 22:55:01] <MrHeavy_> Gotcha. So, right now, on 0.24.8, can I actually get pluginsync working, or am I dealing with it throwing errors? | ||
| [2009/04/01 22:55:21] <MrHeavy_> I just get this: | ||
| [2009/04/01 22:55:22] <jamesturnbull> MrHeavy_: pluginsync should work fine in 0.24.8 as it has for previous releases. having issues? | ||
| [2009/04/01 22:55:29] <MrHeavy_> err: /File[/var/lib/puppet/lib]: Failed to retrieve current state of resource: No specified source was found from puppet://puppet.mydomain.org/plugins | ||
| [2009/04/01 22:56:53] <MrHeavy_> But I'm not totally sure where the problem is because I literally generated a 3,000 line diff of my org's manifests today | ||
| [2009/04/01 22:57:08] @ koojoo joined channel #puppet | ||
| [2009/04/01 22:57:27] <jamesturnbull> MrHeavy_: that's feels like misconfiguration somewhere - you're using wiki:PluginsInModules ? | ||
| [2009/04/01 22:57:27] <gepetto> jamesturnbull: MrHeavy_: wiki:PluginsInModules is http://reductivelabs.com/trac/puppet/wiki/PluginsInModules | ||
| [2009/04/01 22:58:18] <MrHeavy_> That's the one | ||
| [2009/04/01 22:58:37] <MrHeavy_> Currently I only have one custom fact | ||
| [2009/04/01 22:58:45] @ chiggsy joined channel #puppet | ||
| [2009/04/01 22:59:18] <MrHeavy_> It shouldn't make a difference that I'm using PluginsInModules with environments, right? | ||
| [2009/04/01 23:00:21] <MrHeavy_> There's nothing else remotely odd about my setup anymore | ||
| [2009/04/01 23:01:01] <jamesturnbull> MrHeavy_: shouldn't do | ||
| [2009/04/01 23:01:09] * jamesturnbull is sory but he will bbl | ||
| [2009/04/01 23:01:56] <roadgeek> MrHeavy_ - thank you, I'll check out those modules | ||
| [2009/04/01 23:04:14] @ Quit: mikepea: | ||
| [2009/04/01 23:08:04] @ Quit: rellis__: Read error: 104 (Connection reset by peer) | ||
| [2009/04/01 23:08:25] @ rellis__ joined channel #puppet | ||
| [2009/04/01 23:12:12] <roadgeek> On the topic of editing files: http://groups.google.com/group/puppet-users/browse_thread/thread/5f8288184db21f1a | ||
| [2009/04/01 23:18:30] @ aZaFred joined channel #puppet | ||
| [2009/04/01 23:20:26] @ Quit: rellis__: Read error: 131 (Connection reset by peer) | ||
| [2009/04/01 23:20:47] @ rellis__ joined channel #puppet | ||
| [2009/04/01 23:21:29] @ andrewcshafer joined channel #puppet | ||
| [2009/04/01 23:22:55] <MrHeavy_> Is there any API documentation out there for Facter? I'm specifically looking for how to get at a hash of all loaded facts | ||
| [2009/04/01 23:24:49] <MrHeavy_> ...okay, apparently to_hash was too obvious :) | ||
| [2009/04/01 23:50:11] @ Quit: roadgeek: "Leaving" | ||
| [2009/04/01 23:52:32] @ claymation joined channel #puppet | ||
| [2009/04/01 23:56:15] @ Quit: Kindred: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:16] @ Quit: G: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:16] @ Quit: erikh: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:17] @ Quit: slap_stick: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:17] @ Quit: phantez: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:18] @ Quit: BMDan: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:18] @ Quit: macbar_: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:18] @ Quit: cornet: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:19] @ Quit: charlieS: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:19] @ Quit: z00dax: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:20] @ Quit: astinus: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:49] @ Quit: _nono_: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:49] @ Quit: tim|imac: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:49] @ Quit: barn: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:50] @ Quit: madduck: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:50] @ Quit: arjanoosting: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:50] @ Quit: FiXion: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:51] @ Quit: duritong: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:52] @ Quit: pugnacity: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:52] @ Quit: jbooth: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:52] @ Quit: johnf1911: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:53] @ Quit: mrrx: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:53] @ Quit: idimmu: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:54] @ Quit: fsweetser: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:54] @ Quit: riddley: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:54] @ Quit: LapTop006: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:55] @ Quit: tuf8: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:55] @ Quit: grim_radical: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:56] @ Quit: score: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:56] @ Quit: teratoma: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:56] @ Quit: ipl31: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:57] @ Quit: PsychoTrahe: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:57] @ Quit: danp: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:57] @ Quit: bje: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:58] @ Quit: rabbit7: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:58] @ Quit: nico: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:59] @ Quit: m0zzzy: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:59] @ Quit: joe: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:59] @ Quit: proton: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:56:59] @ Quit: zoeloelip: kubrick.freenode.net irc.freenode.net | ||
| [2009/04/01 23:57:36] @ tuf8 joined channel #puppet | ||
| [2009/04/01 23:57:36] @ grim_radical joined channel #puppet | ||
| [2009/04/01 23:57:36] @ score joined channel #puppet | ||
| [2009/04/01 23:57:37] @ teratoma joined channel #puppet | ||
| [2009/04/01 23:57:37] @ FiXion joined channel #puppet | ||
| [2009/04/01 23:57:37] @ m0zzzy joined channel #puppet | ||
| [2009/04/01 23:57:37] @ ipl31 joined channel #puppet | ||
| [2009/04/01 23:57:37] @ PsychoTrahe joined channel #puppet | ||
| [2009/04/01 23:57:37] @ duritong joined channel #puppet | ||
| [2009/04/01 23:57:37] @ _nono_ joined channel #puppet | ||
| [2009/04/01 23:57:37] @ danp joined channel #puppet | ||
| [2009/04/01 23:57:37] @ nico joined channel #puppet | ||
| [2009/04/01 23:57:37] @ pugnacity joined channel #puppet | ||
| [2009/04/01 23:57:37] @ joe joined channel #puppet | ||
| [2009/04/01 23:57:37] @ johnf1911 joined channel #puppet | ||
| [2009/04/01 23:57:37] @ LapTop006 joined channel #puppet | ||
| [2009/04/01 23:57:37] @ riddley joined channel #puppet | ||
| [2009/04/01 23:57:38] @ proton joined channel #puppet | ||
| [2009/04/01 23:57:38] @ jbooth joined channel #puppet | ||
| [2009/04/01 23:57:38] @ fsweetser joined channel #puppet | ||
| [2009/04/01 23:57:38] @ idimmu joined channel #puppet | ||
| [2009/04/01 23:57:38] @ tim|imac joined channel #puppet | ||
| [2009/04/01 23:57:38] @ bje joined channel #puppet | ||
| [2009/04/01 23:57:38] @ rabbit7 joined channel #puppet | ||
| [2009/04/01 23:57:38] @ zoeloelip joined channel #puppet | ||
| [2009/04/01 23:57:38] @ mrrx joined channel #puppet | ||
| [2009/04/01 23:57:38] @ madduck joined channel #puppet | ||
| [2009/04/01 23:57:38] @ barn joined channel #puppet | ||
| [2009/04/01 23:57:38] @ arjanoosting joined channel #puppet | ||
| [2009/04/01 23:57:55] @ astinus joined channel #puppet | ||
| [2009/04/01 23:57:55] @ Kindred joined channel #puppet | ||
| [2009/04/01 23:57:55] @ G joined channel #puppet | ||
| [2009/04/01 23:57:55] @ erikh joined channel #puppet | ||
| [2009/04/01 23:57:55] @ charlieS joined channel #puppet | ||
| [2009/04/01 23:57:55] @ cornet joined channel #puppet | ||
| [2009/04/01 23:57:55] @ slap_stick joined channel #puppet | ||
| [2009/04/01 23:57:55] @ phantez joined channel #puppet | ||
| [2009/04/01 23:57:55] @ BMDan joined channel #puppet | ||
| [2009/04/01 23:57:55] @ macbar_ joined channel #puppet | ||
| [2009/04/01 23:57:55] @ z00dax joined channel #puppet |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!
