| [2009/04/20 00:00:51] @ Log started by gepetto | ||
| [2009/04/20 00:00:51] @ randybias|away is now known as randybias | ||
| [2009/04/20 00:09:28] @ edwardam joined channel #puppet | ||
| [2009/04/20 00:19:51] @ randybias is now known as randybias|away | ||
| [2009/04/20 00:39:50] @ PhabX joined channel #puppet | ||
| [2009/04/20 00:56:15] @ pugnacity joined channel #puppet | ||
| [2009/04/20 00:56:35] @ Quit: PhabX: "Leaving..." | ||
| [2009/04/20 01:02:54] @ randybias|away is now known as randybias | ||
| [2009/04/20 01:05:28] @ Quit: randybias: "Leaving..." | ||
| [2009/04/20 01:13:47] @ Quit: edwardam: Remote closed the connection | ||
| [2009/04/20 01:25:32] @ collier_s joined channel #puppet | ||
| [2009/04/20 01:26:34] @ eythian joined channel #puppet | ||
| [2009/04/20 01:26:57] <eythian> should puppet automatically pick up on changes to an erb template? Mine doesn't seem to be doing so. | ||
| [2009/04/20 01:31:24] <eythian> ah, no. Ignore me. I had a filename wrong. | ||
| [2009/04/20 01:33:54] @ Quit: d3vilb0x: | ||
| [2009/04/20 01:39:02] @ Quit: elementai: Read error: 113 (No route to host) | ||
| [2009/04/20 01:48:41] @ elementai joined channel #puppet | ||
| [2009/04/20 01:50:29] @ pleemans joined channel #puppet | ||
| [2009/04/20 01:51:29] @ Quit: kingitchy: Read error: 110 (Connection timed out) | ||
| [2009/04/20 01:55:06] @ kibaho1 joined channel #puppet | ||
| [2009/04/20 02:03:41] @ oskapt is now known as monachus | ||
| [2009/04/20 02:05:42] @ Quit: monachus: | ||
| [2009/04/20 02:06:42] @ monachus joined channel #puppet | ||
| [2009/04/20 02:10:43] @ Quit: pleemans: Remote closed the connection | ||
| [2009/04/20 02:13:14] @ elementa1 joined channel #puppet | ||
| [2009/04/20 02:13:45] @ Quit: elementai: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 02:17:19] @ monachus is now known as oskapt | ||
| [2009/04/20 02:17:34] @ oskapt is now known as monachus | ||
| [2009/04/20 02:19:17] @ pleemans joined channel #puppet | ||
| [2009/04/20 02:26:41] @ Quit: int: Remote closed the connection | ||
| [2009/04/20 02:30:54] @ Quit: alban2: Read error: 113 (No route to host) | ||
| [2009/04/20 02:33:46] @ devicenull_ joined channel #puppet | ||
| [2009/04/20 02:47:58] @ randybias joined channel #puppet | ||
| [2009/04/20 02:48:43] * monachus is in limbo. | ||
| [2009/04/20 02:50:35] @ int joined channel #puppet | ||
| [2009/04/20 02:51:43] @ Quit: devicenull: Read error: 110 (Connection timed out) | ||
| [2009/04/20 02:55:52] @ Quit: collier_s: "Leaving" | ||
| [2009/04/20 02:56:51] @ Quit: randybias: Client Quit | ||
| [2009/04/20 02:59:52] @ MarlondB joined channel #puppet | ||
| [2009/04/20 03:00:07] @ Quit: fbe_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 03:16:19] @ stijnbe joined channel #puppet | ||
| [2009/04/20 03:16:26] @ PaulWay left channel #puppet () | ||
| [2009/04/20 03:17:09] @ aymerick joined channel #puppet | ||
| [2009/04/20 03:19:34] @ DerekW joined channel #puppet | ||
| [2009/04/20 03:34:50] @ MattyM joined channel #puppet | ||
| [2009/04/20 03:36:16] @ mattock joined channel #puppet | ||
| [2009/04/20 03:38:33] @ mvn071 joined channel #puppet | ||
| [2009/04/20 03:48:37] <phantez> Hey, I'd like to use facter to retrieves information from databases, does it sounds to be a good idea or is there another convenient way to do that ? | ||
| [2009/04/20 03:49:31] * tim|imac would recommend to have only the puppetmaster retreive data from a database, just out of a security and general complexity viewpoint | ||
| [2009/04/20 03:51:27] <phantez> how could the puppetmaster retrieve information from a db ? | ||
| [2009/04/20 03:52:02] <tim|imac> ruby in erb, for example | ||
| [2009/04/20 03:52:47] <f3ew> Hmm | ||
| [2009/04/20 03:53:01] <f3ew> I wonder if an ERB can set a bunch of variables | ||
| [2009/04/20 03:53:07] <f3ew> No reason why it shouldn't | ||
| [2009/04/20 03:53:35] <f3ew> But then you suddenly no longer need to jump through hoops for setting facts | ||
| [2009/04/20 03:53:48] <f3ew> Esepcially role facts | ||
| [2009/04/20 03:53:52] <f3ew> especially* | ||
| [2009/04/20 03:54:15] <tim|imac> f3ew: isn't the erb run on the puppetmaster? | ||
| [2009/04/20 03:54:34] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 03:54:49] <f3ew> tim|imac that's the point | ||
| [2009/04/20 03:55:21] <tim|imac> ah yeah, facts are collected and send back to the server for processing, right? | ||
| [2009/04/20 03:55:26] <f3ew> Yup | ||
| [2009/04/20 03:55:41] <tim|imac> sometimes I amaze myself | ||
| [2009/04/20 03:55:57] <f3ew> We just set a whole bunch of facts on a host depending on it's role, and then use these facts to drive other classes | ||
| [2009/04/20 03:56:23] <f3ew> if I can avoid that hoop, life becomes so mch simpler | ||
| [2009/04/20 03:56:25] <f3ew> much* | ||
| [2009/04/20 03:58:20] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/04/20 04:04:05] @ fbe_ joined channel #puppet | ||
| [2009/04/20 04:06:11] <phantez> how could i populate the template using erb and sql ? | ||
| [2009/04/20 04:07:49] <Volcane> same way you do in ruby | ||
| [2009/04/20 04:08:58] <Volcane> f3ew: yeah gotta say setting facts on nodes is annoying me to | ||
| [2009/04/20 04:09:23] * Volcane really needs a nice node classifier | ||
| [2009/04/20 04:11:15] <phantez> yes, but I mean, do you populate it at the runtime each time a node ask a configuration ? | ||
| [2009/04/20 04:11:40] <Volcane> pretty much everything happens each time a node asks for config yes | ||
| [2009/04/20 04:13:58] @ Quit: aymerick: Remote closed the connection | ||
| [2009/04/20 04:14:14] @ aymerick joined channel #puppet | ||
| [2009/04/20 04:18:49] @ verwilst joined channel #puppet | ||
| [2009/04/20 04:19:42] <phantez> I still don't really see how I can use erb to create and modify .pp file at the runtime without modifying puppetmasterd behaviour. | ||
| [2009/04/20 04:20:18] <Volcane> why would you modify pp files? you wanted something equivelant to facts that are only variables? | ||
| [2009/04/20 04:20:52] * Volcane doesnt know if erbs can set variables though | ||
| [2009/04/20 04:20:52] <phantez> for example, define a role or a group for a node, yes | ||
| [2009/04/20 04:23:09] <f3ew> Yup | ||
| [2009/04/20 04:23:53] <phantez> how it is possible with erb ? | ||
| [2009/04/20 04:24:37] * Volcane wrote a simple parser function to just read this kind of thing from files *shrug* | ||
| [2009/04/20 04:26:19] @ ralfgro joined channel #puppet | ||
| [2009/04/20 04:26:35] @ ghenry joined channel #puppet | ||
| [2009/04/20 04:28:16] @ alban2 joined channel #puppet | ||
| [2009/04/20 04:29:17] @ Quit: andrewcshafer_: | ||
| [2009/04/20 04:29:28] @ fujin joined channel #puppet | ||
| [2009/04/20 04:34:28] @ Quit: fujin: | ||
| [2009/04/20 04:47:07] <Volcane> phantez: http://reductivelabs.com/trac/puppet/wiki/ExternalNodes is how people typically do it | ||
| [2009/04/20 04:48:32] @ friendly12345 joined channel #puppet | ||
| [2009/04/20 04:48:51] <jenza> Whoa | ||
| [2009/04/20 04:49:00] <jenza> zsh is pretty cool | ||
| [2009/04/20 04:49:54] <Volcane> bash has caught up a lot | ||
| [2009/04/20 04:50:13] @ mikepea joined channel #puppet | ||
| [2009/04/20 04:50:36] <Volcane> years ago when i first learned zsh it was awesome compared to bash, now its only marginally better if | ||
| [2009/04/20 04:51:16] <jenza> True, I've been using it for so long I haven't looked to see what features have been added | ||
| [2009/04/20 04:51:30] @ jlamsens joined channel #puppet | ||
| [2009/04/20 04:51:38] @ fdz joined channel #puppet | ||
| [2009/04/20 04:52:08] <jlamsens> anyone knows an easy way to create a user, set a default password and then leave it alone ? | ||
| [2009/04/20 04:54:00] <jenza> exec with onlyif I'd say | ||
| [2009/04/20 04:55:04] @ kolla joined channel #puppet | ||
| [2009/04/20 04:55:54] @ madrescher joined channel #puppet | ||
| [2009/04/20 04:58:07] <jlamsens> jenza: ok, but that's not a very 'nice' way, isn't it ? | ||
| [2009/04/20 05:00:47] @ Quit: fbe_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 05:01:31] <jenza> nope | ||
| [2009/04/20 05:02:01] <jenza> puppet isn't really designed to leave stuff alone | ||
| [2009/04/20 05:02:07] @ Quit: fdz: Read error: 54 (Connection reset by peer) | ||
| [2009/04/20 05:02:12] @ fdz joined channel #puppet | ||
| [2009/04/20 05:02:22] <nico> is it normal that puppet outputs about crontabs installed through puppet at each run ? | ||
| [2009/04/20 05:02:35] <nico> first time ok, but the next ones | ||
| [2009/04/20 05:03:06] <jenza> nico: Nope, sounds like it's not working properly. | ||
| [2009/04/20 05:03:31] <nico> jenza: dam | ||
| [2009/04/20 05:03:32] <nico> +n | ||
| [2009/04/20 05:04:02] <nico> http://pastie.org/452121 | ||
| [2009/04/20 05:04:11] <nico> this is my cron entry definition | ||
| [2009/04/20 05:04:15] <nico> quite simple | ||
| [2009/04/20 05:05:18] <nico> edited pastie to add the output | ||
| [2009/04/20 05:05:48] <jenza> Just don't specify them | ||
| [2009/04/20 05:06:19] <jenza> They default to * | ||
| [2009/04/20 05:06:32] <nico> thnaks | ||
| [2009/04/20 05:06:34] <nico> thanks | ||
| [2009/04/20 05:06:37] <jenza> np | ||
| [2009/04/20 05:06:50] <nico> I need new fingers | ||
| [2009/04/20 05:07:17] <jenza> Not too sure if puppet can help with that, sorry :/ | ||
| [2009/04/20 05:07:40] <f3ew> jenza sure it can | ||
| [2009/04/20 05:07:50] <f3ew> nico just needs a finger type :P | ||
| [2009/04/20 05:07:55] <jenza> hah :) | ||
| [2009/04/20 05:07:55] * f3ew runs | ||
| [2009/04/20 05:08:03] <jenza> typo => false, ? | ||
| [2009/04/20 05:08:30] <nico> class typo { ensure => created } | ||
| [2009/04/20 05:08:55] <f3ew> That needs Perl | ||
| [2009/04/20 05:09:23] <nico> I finally put all my puppet setup in subversion.. why didn't I make this before ? | ||
| [2009/04/20 05:09:34] <f3ew> heh | ||
| [2009/04/20 05:09:42] <f3ew> We have version control | ||
| [2009/04/20 05:10:46] <nico> no more excuses for "who broke this ?" | ||
| [2009/04/20 05:11:14] @ Quit: Kindred: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 05:11:39] @ Kindred joined channel #puppet | ||
| [2009/04/20 05:16:55] @ HarryCalahan joined channel #puppet | ||
| [2009/04/20 05:20:37] <nico> wow, just learnt about http://cft.et.redhat.com/ | ||
| [2009/04/20 05:24:51] <eythian> oh, that looks quite cool. Almost a pity I'm not on redhat :) | ||
| [2009/04/20 05:25:37] <monachus> it probably isn't redhat-specific | ||
| [2009/04/20 05:26:47] @ schwagal1 joined channel #puppet | ||
| [2009/04/20 05:26:47] @ Quit: schwagala: Read error: 54 (Connection reset by peer) | ||
| [2009/04/20 05:28:42] <monachus> yeah - it's just ruby | ||
| [2009/04/20 05:30:36] <jenza> Cool | ||
| [2009/04/20 05:33:44] @ schwagala joined channel #puppet | ||
| [2009/04/20 05:33:45] @ Quit: schwagal1: Read error: 54 (Connection reset by peer) | ||
| [2009/04/20 05:35:22] @ squiddle joined channel #puppet | ||
| [2009/04/20 05:39:51] <eythian> is it possible to associate templates (erb files) with modules, rather than throwing them all in /etc/puppet/templates? | ||
| [2009/04/20 05:44:39] <tim|imac> any brits here? | ||
| [2009/04/20 05:45:11] * tim|imac was wondering if there's some kind of holiday in the UK today | ||
| [2009/04/20 05:45:21] <huggie> There isn't. Sadly. | ||
| [2009/04/20 05:45:38] <monachus> @eythian: if you have your modules structured according to the best practices guide, with a templated directory, then putting | ||
| [2009/04/20 05:45:46] <tim|imac> hm ok, thx huggie | ||
| [2009/04/20 05:45:49] <monachus> content => template(module/file.erb) | ||
| [2009/04/20 05:46:00] <monachus> will load the template from module/templates/file.erb | ||
| [2009/04/20 05:46:13] <huggie> tim|imac: http://www.direct.gov.uk/en/Governmentcitizensandrights/LivingintheUK/DG_073741 | ||
| [2009/04/20 05:46:35] <tim|imac> ah cool, thx! | ||
| [2009/04/20 05:46:37] <monachus> @eythian - that's "templates" directory, not "templated" | ||
| [2009/04/20 05:51:26] @ monzie joined channel #puppet | ||
| [2009/04/20 05:51:43] <eythian> monachus: ah, OK, cool. The docs I saw about doing templates didn't mention that, I'll give it a go. | ||
| [2009/04/20 05:53:07] @ tarjei_ joined channel #puppet | ||
| [2009/04/20 06:06:36] @ Quit: tarjei: Read error: 110 (Connection timed out) | ||
| [2009/04/20 06:10:04] @ fbe_ joined channel #puppet | ||
| [2009/04/20 06:10:35] @ fujin joined channel #puppet | ||
| [2009/04/20 06:11:32] @ Quit: fujin: Client Quit | ||
| [2009/04/20 06:11:45] @ fujin joined channel #puppet | ||
| [2009/04/20 06:14:00] @ nakano is now known as nakano_ | ||
| [2009/04/20 06:39:16] <monzie> hello all | ||
| [2009/04/20 06:39:34] <monzie> anyone care to help me a bit for some provider development? | ||
| [2009/04/20 06:40:11] <monzie> jamesturnbull: please do add stuff about munging in chapter 7 of your book | ||
| [2009/04/20 06:42:10] <monzie> in my parsed.rb , I am doing something like "record_line :parsed, :fields => %w{name pid} | ||
| [2009/04/20 06:42:38] @ Quit: MattyM: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 06:42:38] @ Quit: maxagaz: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 06:42:38] @ Quit: gebi: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 06:42:39] @ Quit: DarkFlibb: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 06:42:42] @ gebi joined channel #puppet | ||
| [2009/04/20 06:42:48] @ happymcplaksin joined channel #puppet | ||
| [2009/04/20 06:42:53] <monzie> i want to modify the "name" and the pid fields before I print it out | ||
| [2009/04/20 06:42:56] @ MattyM joined channel #puppet | ||
| [2009/04/20 06:42:57] @ DarkFlibb joined channel #puppet | ||
| [2009/04/20 06:43:04] @ maxagaz joined channel #puppet | ||
| [2009/04/20 06:49:42] @ Quit: maxagaz: "Leaving" | ||
| [2009/04/20 06:52:51] @ d3vilb0x joined channel #puppet | ||
| [2009/04/20 06:57:17] @ maxagaz joined channel #puppet | ||
| [2009/04/20 07:07:09] @ keithlard joined channel #puppet | ||
| [2009/04/20 07:33:47] @ stasheck joined channel #puppet | ||
| [2009/04/20 07:34:02] <stasheck> Hi all | ||
| [2009/04/20 07:34:15] <f3ew> lo | ||
| [2009/04/20 07:34:18] <stasheck> I know that somebody has done something like this, but I can't find it | ||
| [2009/04/20 07:34:39] <stasheck> I want to update APT package lists periodicaly | ||
| [2009/04/20 07:34:53] <HarryCalahan> stasheck: make a cron | ||
| [2009/04/20 07:35:00] <stasheck> Yes, I did this | ||
| [2009/04/20 07:35:12] <HarryCalahan> so what is the question? | ||
| [2009/04/20 07:35:12] <stasheck> but here's the problem: every cron will execute at the same time | ||
| [2009/04/20 07:35:21] <HarryCalahan> ah. | ||
| [2009/04/20 07:35:24] <stasheck> for up to 40 machines/site | ||
| [2009/04/20 07:35:33] <HarryCalahan> add an apt-proxy on your network | ||
| [2009/04/20 07:35:39] <stasheck> major pain | ||
| [2009/04/20 07:35:54] <HarryCalahan> five minutes | ||
| [2009/04/20 07:35:58] <Volcane> make /usr/local/bin/aptupdate.sh | ||
| [2009/04/20 07:35:59] <stasheck> well, I have local mirror at every site | ||
| [2009/04/20 07:36:00] <Volcane> SLEEP=$(($RANDOM % 300)) | ||
| [2009/04/20 07:36:05] <Volcane> sleep $SLEEP | ||
| [2009/04/20 07:36:06] <stasheck> still, I'm afraid of the net load | ||
| [2009/04/20 07:36:07] <Volcane> apt-get update | ||
| [2009/04/20 07:36:29] <stasheck> Volcane: to the rescue, as always ;-) | ||
| [2009/04/20 07:36:57] <Volcane> :) | ||
| [2009/04/20 07:38:38] @ steven_d joined channel #puppet | ||
| [2009/04/20 07:47:09] <stasheck> Even better: /bin/sleep `/bin/bash -c "echo $(($RANDOM % 300))"`; /usr/bin/apt-get update | ||
| [2009/04/20 07:47:19] <stasheck> no extra files needed | ||
| [2009/04/20 07:47:38] <Volcane> more shell processes though :P | ||
| [2009/04/20 07:47:47] @ Quit: friendly12345: "Leaving." | ||
| [2009/04/20 07:48:34] <stasheck> so, less puppet&filesystem clutter, more system load | ||
| [2009/04/20 07:48:40] <stasheck> :-) | ||
| [2009/04/20 07:49:03] <Volcane> I prefer a little shell script, much easier to also make it log to a file and all kinds of thing like that | ||
| [2009/04/20 07:49:09] <stasheck> btw I'm really starting to like the idea of running puppet from cron (& inetd) | ||
| [2009/04/20 07:49:10] <Volcane> else those one liners become very cluttered | ||
| [2009/04/20 07:49:40] <stasheck> leaving puppet just running ends in errors | ||
| [2009/04/20 07:50:14] <stasheck> I have special cron entry just to restart puppet every hour and fully stop and start it once a day | ||
| [2009/04/20 07:50:30] <stasheck> that way it *mostly* works | ||
| [2009/04/20 07:50:53] <stasheck> too much different systems to be able to tune it perfectly | ||
| [2009/04/20 07:51:45] <HarryCalahan> and you can keep all your little cron scripts in one folder + you can keep this folder under version control | ||
| [2009/04/20 07:52:14] <stasheck> and if running multiple versions of centos and debian wasn't enough, my fellow admins just started to install Debian 5 recently | ||
| [2009/04/20 07:52:37] <stasheck> just like having 2 debian versions wasn't enough, now we have 3 | ||
| [2009/04/20 07:52:39] <HarryCalahan> stasheck: and then you thought, isn't it great to use puppet. | ||
| [2009/04/20 07:53:24] <HarryCalahan> . o O ( but i still would normalize to one distribution, centos5 sounds good ) | ||
| [2009/04/20 07:53:38] <stasheck> yes, my evil plan is first to be able to reinstall every damn server in this company with using puppet and maybe a little manual content copying | ||
| [2009/04/20 07:53:52] <HarryCalahan> sound familiar... | ||
| [2009/04/20 07:53:56] <stasheck> and then to use just 1 version of Centos and 1 version of Debian | ||
| [2009/04/20 07:54:12] <f3ew> stasheck, it can get worse | ||
| [2009/04/20 07:54:13] <stasheck> right now, it isn't THIS great to use puppet | ||
| [2009/04/20 07:54:18] * f3ew gives stasheck a RH 7.3 box | ||
| [2009/04/20 07:54:29] <f3ew> stasheck, you might get pleasantly surprised | ||
| [2009/04/20 07:54:34] <stasheck> as I constantly catch some funny differences between Debians | ||
| [2009/04/20 07:54:39] <stasheck> well :-) | ||
| [2009/04/20 07:54:50] <HarryCalahan> hey guys look, i can just press the reset button on this computer and it will boot from the net, kickstart a basic install, pull in puppet, reboot, run puppetd, configure himself as a webserver, mount the nfs and is ready to be included in the loadbalancer | ||
| [2009/04/20 07:55:07] <f3ew> We have RH 7.3, 9, RHEL 3.x, RHEL4.x, RHEL5.x | ||
| [2009/04/20 07:55:16] <stasheck> for example, on ssh in Debian 3.1, I can't use AcceptEnv param, because it refuses to start | ||
| [2009/04/20 07:55:16] <eythian> HarryCalahan: why the extra reboot? | ||
| [2009/04/20 07:55:25] <HarryCalahan> want to try with the other server. *reset* *reset* *reset* | ||
| [2009/04/20 07:55:47] <HarryCalahan> eythian: because at the end of kickstart it will reboot ;) | ||
| [2009/04/20 07:56:02] <eythian> HarryCalahan: oh, right :) | ||
| [2009/04/20 07:56:24] <stasheck> HarryCalahan: this level of sophistication in unfortunately beyond reach of my org - too much too differing hardware, kickstart works ~40-50% of the time | ||
| [2009/04/20 07:56:48] <HarryCalahan> stasheck: took me two years to normalize the servers and setups this way. | ||
| [2009/04/20 07:56:59] <HarryCalahan> after another year it was so boring i left the company ;) | ||
| [2009/04/20 07:57:05] <stasheck> but it would be enough for me to manually install Debian, run puppetinstall.sh script from the network and then just go for a coffee | ||
| [2009/04/20 07:57:20] <stasheck> HarryCalahan: just my plan | ||
| [2009/04/20 07:57:25] @ Quit: shake-n-bake: | ||
| [2009/04/20 07:57:39] <stasheck> I'm just finishing the first year ;-) | ||
| [2009/04/20 07:58:25] @ Djelibeybi joined channel #puppet | ||
| [2009/04/20 07:58:52] <HarryCalahan> stasheck: good luck | ||
| [2009/04/20 07:59:31] @ nakano_ is now known as nakano | ||
| [2009/04/20 07:59:43] @ Quit: mib_85zip8: "http://www.mibbit.com ajax IRC Client" | ||
| [2009/04/20 08:07:12] @ Quit: xmslack_: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 08:10:26] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/04/20 08:11:22] @ Quit: monzie: Read error: 113 (No route to host) | ||
| [2009/04/20 08:20:02] @ nakano is now known as nakano_ | ||
| [2009/04/20 08:29:00] @ axisys_ joined channel #puppet | ||
| [2009/04/20 08:29:29] @ Quit: d3vilb0x: | ||
| [2009/04/20 08:31:18] <score> g'morning | ||
| [2009/04/20 08:34:53] @ rsquared joined channel #puppet | ||
| [2009/04/20 08:36:02] @ erm_ joined channel #puppet | ||
| [2009/04/20 08:37:06] @ nakano_ is now known as nakano | ||
| [2009/04/20 08:38:19] @ Quit: axisys_: "leaving" | ||
| [2009/04/20 08:38:48] @ axisys_ joined channel #puppet | ||
| [2009/04/20 08:41:37] @ Quit: axisys_: Client Quit | ||
| [2009/04/20 08:41:54] @ axisys_ joined channel #puppet | ||
| [2009/04/20 08:49:15] @ Quit: axisys: Nick collision from services. | ||
| [2009/04/20 08:50:40] @ axisys_ is now known as axisys | ||
| [2009/04/20 08:58:25] @ Quit: mikepea: | ||
| [2009/04/20 09:00:38] @ nakano is now known as nakano_ | ||
| [2009/04/20 09:01:13] @ niczar1 joined channel #puppet | ||
| [2009/04/20 09:03:03] <niczar1> Greetings, humans; I'm trying to get puppet to work with SELinux up, and am getting quite a few AVC alerts with various contexts tripping over while trying to access /tmp/puppet.nnnnn.0 | ||
| [2009/04/20 09:03:17] <niczar1> any idea what to do about that? | ||
| [2009/04/20 09:03:35] @ glaw joined channel #puppet | ||
| [2009/04/20 09:03:48] <Volcane> what version puppet? | ||
| [2009/04/20 09:04:00] <niczar1> puppet-0.24.7-4.el5 | ||
| [2009/04/20 09:04:43] <Volcane> k, dont use selinux myself but just know there were quite a lot of fixes, but before 0.24.7 | ||
| [2009/04/20 09:07:30] <HarryCalahan> wild guess: puppetd downloads and compiles files into /tmp. SELinux does not allow this. so it creates alerts. Selinux needs to be told that ruby or puppetd is allowed to write to /tmp | ||
| [2009/04/20 09:07:31] <niczar1> ok | ||
| [2009/04/20 09:07:33] <fluxdude> is there a way in puppet to do a service restart even if the service is running? I want to make a test, then to restart a service if the test fails... | ||
| [2009/04/20 09:07:41] <fluxdude> perhaps I should just do this in cron... | ||
| [2009/04/20 09:12:17] @ simmerz joined channel #puppet | ||
| [2009/04/20 09:12:34] <simmerz> hi. does the gem provider allow for specifying versions in some fashion? | ||
| [2009/04/20 09:13:00] @ martha joined channel #puppet | ||
| [2009/04/20 09:13:21] <realist> niczar1: you could try audit2allow | ||
| [2009/04/20 09:13:34] @ Quit: Demosthenes: Read error: 113 (No route to host) | ||
| [2009/04/20 09:13:55] <HarryCalahan> fluxdude: you could use an exec with an onlyif or unless | ||
| [2009/04/20 09:14:24] <HarryCalahan> fluxdude: but then you could not use the service resource layer of puppet | ||
| [2009/04/20 09:14:42] <niczar1> realist: nope, it's not a policy problem, it's a context issue | ||
| [2009/04/20 09:14:57] <niczar1> let me paste one line if you don't mind: type=1400 audit(1240231993.573:16): avc: denied { read write } for pid=3684 comm="nscd" path="/tmp/puppet.3134.0" dev=tmpfs ino=38017 scontext=root:system_r:nscd_t:s0 tcontext=root:object_r:initrc_tmp_t:s0 tclass=file | ||
| [2009/04/20 09:15:19] <niczar1> it looks like puppet is having nscd (name service cache daemon) read a file in /tmp | ||
| [2009/04/20 09:15:26] <niczar1> I don't understand why it's doing that | ||
| [2009/04/20 09:15:36] <niczar1> it does taht for other daemons | ||
| [2009/04/20 09:17:08] <phantez> there are some bugfix about selinux in the 0.24.8 version | ||
| [2009/04/20 09:17:13] <niczar1> ah ko | ||
| [2009/04/20 09:17:28] <niczar1> the bug tracker's moved hasn't it, is it in github now or what? | ||
| [2009/04/20 09:17:47] <HarryCalahan> http://projects.reductivelabs.com/issues/ | ||
| [2009/04/20 09:18:20] <HarryCalahan> (someone should either remove the links in trac or update them, or rewrite them) | ||
| [2009/04/20 09:18:38] <niczar1> ah yes thank you | ||
| [2009/04/20 09:19:56] <realist> Is /tmp/puppet.3134.0 a pid/socket file created during the init script? | ||
| [2009/04/20 09:21:20] <niczar1> nope, here I have one created for automount: | ||
| [2009/04/20 09:21:28] <niczar1> -rw------- 1 root root 0 Apr 20 13:21 puppet.1493.0 | ||
| [2009/04/20 09:21:37] @ goa6id joined channel #puppet | ||
| [2009/04/20 09:22:00] <niczar1> oh wait it's actually generated lots of AVC with many contexts | ||
| [2009/04/20 09:22:43] <niczar1> tzdata-update, groupadd, nscd, automount | ||
| [2009/04/20 09:23:01] <niczar1> I'm really wondering what it's trying to do here | ||
| [2009/04/20 09:27:34] @ Bass10 joined channel #puppet | ||
| [2009/04/20 09:28:27] @ Quit: mattock: "Leaving." | ||
| [2009/04/20 09:29:17] <niczar1> ok found the relevant ticket: http://projects.reductivelabs.com/issues/1563 | ||
| [2009/04/20 09:29:34] <niczar1> I think I'll have to create policies for each and every affected daemon, that sucks | ||
| [2009/04/20 09:29:46] <niczar1> to allow their context to touch initrc_tmp_t | ||
| [2009/04/20 09:31:07] @ kibaho1 left channel #puppet () | ||
| [2009/04/20 09:31:18] @ incommon_ike joined channel #puppet | ||
| [2009/04/20 09:33:27] @ shake-n-bake joined channel #puppet | ||
| [2009/04/20 09:34:47] @ zahna_ joined channel #puppet | ||
| [2009/04/20 09:36:47] @ Quit: glaw: Remote closed the connection | ||
| [2009/04/20 09:38:16] @ lak joined channel #puppet | ||
| [2009/04/20 09:41:02] @ Quit: markl_: "Lost terminal" | ||
| [2009/04/20 09:47:23] @ Quit: shake-n-bake: | ||
| [2009/04/20 09:47:46] @ nmalik joined channel #puppet | ||
| [2009/04/20 09:50:49] @ mikepea joined channel #puppet | ||
| [2009/04/20 09:53:03] @ kambiz_away is now known as kambiz | ||
| [2009/04/20 09:54:54] @ cwebber joined channel #puppet | ||
| [2009/04/20 09:55:21] @ zahna_ left channel #puppet () | ||
| [2009/04/20 09:55:33] @ mfoster joined channel #puppet | ||
| [2009/04/20 09:58:07] <FiXion> what's the opposite of ensure => installed ? | ||
| [2009/04/20 09:58:11] <FiXion> in the package context | ||
| [2009/04/20 09:58:18] * FiXion wants to ensure sendmail isn't present :) | ||
| [2009/04/20 09:58:24] <HarryCalahan> absent | ||
| [2009/04/20 09:59:15] <HarryCalahan> http://reductivelabs.com/trac/puppet/wiki/TypeReference#package | ||
| [2009/04/20 09:59:43] <goa6id> ensure => absent; | ||
| [2009/04/20 10:05:07] <simmerz> if i were to, in a rails app for instance, specify config.gem :some_gem, :version => ~>2.3, how might i specify that I want any 2.3.x of some_package installed? | ||
| [2009/04/20 10:06:41] <realist> niczar1: couldn't you use/create a common context instead? | ||
| [2009/04/20 10:07:29] <FiXion> works like a charm :) | ||
| [2009/04/20 10:07:46] <simmerz> all I see is values can match /./ | ||
| [2009/04/20 10:08:10] * HarryCalahan dances happily through the channel. first puppet client installed himself with close to no interaction | ||
| [2009/04/20 10:10:02] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 10:12:00] @ markl_ joined channel #puppet | ||
| [2009/04/20 10:15:52] @ Quit: lak: | ||
| [2009/04/20 10:19:25] @ martha left channel #puppet () | ||
| [2009/04/20 10:19:42] <FiXion> how do I get hostname in an erb template? | ||
| [2009/04/20 10:19:53] <FiXion> it's not mentioned here http://reductivelabs.com/trac/puppet/wiki/PuppetTemplating | ||
| [2009/04/20 10:19:55] <Volcane> variable 'hostname' | ||
| [2009/04/20 10:19:57] <SyTonnerre> Facter[:hostname] | ||
| [2009/04/20 10:20:18] <FiXion> so <%= Facter[:hostname] %> ? | ||
| [2009/04/20 10:20:18] <HarryCalahan> SyTonnerre: you need to specify facter variables? | ||
| [2009/04/20 10:20:20] @ unxfrek joined channel #puppet | ||
| [2009/04/20 10:20:27] <Volcane> no need | ||
| [2009/04/20 10:20:30] <SyTonnerre> HarryCalahan, I don't think I need to | ||
| [2009/04/20 10:20:31] <Volcane> <%= hostname %> | ||
| [2009/04/20 10:20:51] <FiXion> okay - are all facter variables available in the template scope? | ||
| [2009/04/20 10:20:55] <HarryCalahan> yes | ||
| [2009/04/20 10:21:04] * FiXion smiles :) | ||
| [2009/04/20 10:21:45] <HarryCalahan> is that smile as in evil grin? | ||
| [2009/04/20 10:22:00] @ Innocenti joined channel #puppet | ||
| [2009/04/20 10:22:06] <niczar1> realist: what do you mean? | ||
| [2009/04/20 10:26:43] @ Quit: fujin: | ||
| [2009/04/20 10:30:29] <FiXion> anyone have any good experience with roling out releases using puppet? | ||
| [2009/04/20 10:30:36] <FiXion> I was thinking of tar'ing up a release | ||
| [2009/04/20 10:30:40] @ Quit: mvn071: "Leaving" | ||
| [2009/04/20 10:30:54] <FiXion> and then distributing that - with a certain "versionr" named in the pp file | ||
| [2009/04/20 10:31:07] <FiXion> all examples are welcome :) | ||
| [2009/04/20 10:31:11] <HarryCalahan> what about building a package (deb, rpm) | ||
| [2009/04/20 10:31:48] <FiXion> I was thinking about that - but ensure => $version doesn't work yet :( | ||
| [2009/04/20 10:31:59] <HarryCalahan> what? | ||
| [2009/04/20 10:32:07] <HarryCalahan> at least with apt it does. | ||
| [2009/04/20 10:32:07] <Volcane> it works fine? what distro are you on | ||
| [2009/04/20 10:32:09] <FiXion> and until I get around to fixing that.. I need some way of ensuring the actual version that is installed | ||
| [2009/04/20 10:32:16] <FiXion> I checked - it doesn't work | ||
| [2009/04/20 10:32:20] <FiXion> it's also confirmed in the code | ||
| [2009/04/20 10:32:23] <Volcane> what distro? | ||
| [2009/04/20 10:32:27] <FiXion> ubuntu | ||
| [2009/04/20 10:32:30] <Volcane> *snigger* | ||
| [2009/04/20 10:32:37] <HarryCalahan> it works on ubuntu | ||
| [2009/04/20 10:32:39] <FiXion> but I have my own 0.24.8 package | ||
| [2009/04/20 10:32:39] <niczar1> FiXion: can't you have a file containing the version # in the package, and read that to ensure? or something | ||
| [2009/04/20 10:33:08] <Volcane> it works on debian, you'd hope ubuntu isnt worse than debian | ||
| [2009/04/20 10:33:20] <FiXion> what's the path to the apt provider ? | ||
| [2009/04/20 10:33:27] <FiXion> it was even written in the code | ||
| [2009/04/20 10:33:33] <HarryCalahan> http://pastie.org/452351 | ||
| [2009/04/20 10:33:38] <FiXion> that was in 0.24.4 though | ||
| [2009/04/20 10:35:04] <FiXion> /usr/lib/ruby/1.8/puppet/provider/package/apt.rb:42 | ||
| [2009/04/20 10:35:07] <HarryCalahan> i tested and placed a 1.4something in this class and puppet tries to downgrade. | ||
| [2009/04/20 10:35:09] <FiXion> it's stated directly there | ||
| [2009/04/20 10:35:39] <FiXion> and the server is running puppet 0.24.8 | ||
| [2009/04/20 10:36:24] <HarryCalahan> i will try. | ||
| [2009/04/20 10:36:34] <FiXion> just vi the file | ||
| [2009/04/20 10:36:37] @ simmerz1 joined channel #puppet | ||
| [2009/04/20 10:36:38] <FiXion> or less it | ||
| [2009/04/20 10:37:03] <FiXion> that apt.rb file is from 0.24.8 | ||
| [2009/04/20 10:37:08] <FiXion> was what I was trying to say :) | ||
| [2009/04/20 10:37:08] <HarryCalahan> no clue about ruby ;) | ||
| [2009/04/20 10:37:17] <FiXion> it says so in a comment | ||
| [2009/04/20 10:37:19] <FiXion> on that line 42 | ||
| [2009/04/20 10:37:55] @ Quit: simmerz: Read error: 60 (Operation timed out) | ||
| [2009/04/20 10:38:15] @ Quit: simmerz1: Remote closed the connection | ||
| [2009/04/20 10:38:18] <FiXion> someone also pointed me to a scheme at some point which showed the status for support of this feature | ||
| [2009/04/20 10:38:39] <HarryCalahan> ok, i have a client without subversion. now i run with the pasted subversion class. | ||
| [2009/04/20 10:38:57] <FiXion> and it will probably install the latest version | ||
| [2009/04/20 10:39:16] @ Quit: pleemans: Read error: 60 (Operation timed out) | ||
| [2009/04/20 10:39:19] <FiXion> so try putting in a versionnr. in the class which isn't what it chooses when you don't have any versionr. mentioned | ||
| [2009/04/20 10:39:47] <FiXion> apt-get install subversion | ||
| [2009/04/20 10:39:51] <FiXion> dpkg -l | grep subversion | ||
| [2009/04/20 10:40:00] <FiXion> and don't choose that version :) | ||
| [2009/04/20 10:40:26] <HarryCalahan> yes. i will install 1.4 and my repo would delier 1.5 and 1.6 | ||
| [2009/04/20 10:40:39] <HarryCalahan> how could i remove colors from puppetd again? | ||
| [2009/04/20 10:40:43] <FiXion> HarryCalahan: do you have the same comment on line 42 ? | ||
| [2009/04/20 10:44:31] @ lak joined channel #puppet | ||
| [2009/04/20 10:45:04] * FiXion has to go.. - I am looking forward to hearing if versioning works for - and if so - what puppet version you have and what is says in your apt.rb :) | ||
| [2009/04/20 10:45:08] <HarryCalahan> it worked. i will purge and try again | ||
| [2009/04/20 10:50:47] <HarryCalahan> FiXion: http://pastie.org/452351 | ||
| [2009/04/20 10:51:03] <HarryCalahan> but downgrading and dependencies seem to be an issue | ||
| [2009/04/20 10:57:45] <HarryCalahan> yeah. downgrades don't work. because subversion depends on libsvn1 and this is not handled by puppet | ||
| [2009/04/20 10:59:16] @ gaveen joined channel #puppet | ||
| [2009/04/20 11:01:08] @ madrescher joined channel #puppet | ||
| [2009/04/20 11:02:56] @ Quit: kolla: Remote closed the connection | ||
| [2009/04/20 11:06:19] @ Quit: HarryCalahan: "." | ||
| [2009/04/20 11:08:17] @ Quit: stasheck: Remote closed the connection | ||
| [2009/04/20 11:10:16] @ ashp joined channel #puppet | ||
| [2009/04/20 11:10:38] <ashp> Is there any sensible or easy way I can attempt to parse my nagios config files with the nagios provider outside of puppet? | ||
| [2009/04/20 11:10:51] <ashp> It keeps choking on the hosts for some reason, but it rebuilds the file right after so I can never find out what line is doing it | ||
| [2009/04/20 11:11:05] <ashp> oh i guess i could try a --noop so it doesn't do that but still reports | ||
| [2009/04/20 11:11:19] <ashp> every time i come in here the solution occurs to me within seconds of asking | ||
| [2009/04/20 11:12:33] <ashp> of course knowing what line is causing the problem doesn't stop it failing to parse this file over and over for no good reason :( | ||
| [2009/04/20 11:13:32] <Volcane> ralsh? | ||
| [2009/04/20 11:13:52] <devicenull_> why is automatically signing client certs considered bad? | ||
| [2009/04/20 11:14:05] <devicenull_> I don't understand what a malicious user could od, aside from getting a copy of the install | ||
| [2009/04/20 11:14:21] <f3ew> devicenull_, default node | ||
| [2009/04/20 11:14:21] <joe-mac> devicenull_: you can serve out any data via puppet | ||
| [2009/04/20 11:14:26] <joe-mac> security settings, etc. | ||
| [2009/04/20 11:14:39] <ashp> http://pastebin.com/d2f247417 | ||
| [2009/04/20 11:14:41] <joe-mac> something could hook up a rogue machine, ghet it auto signed, tghen take it home so they can analyze your setup | ||
| [2009/04/20 11:14:41] <devicenull_> I suppose that's true | ||
| [2009/04/20 11:14:46] <joe-mac> someone** | ||
| [2009/04/20 11:14:56] <ashp> There's the file it can't parse, it's line 175 that it's dying at (because of the 3 lines for pasting the error) | ||
| [2009/04/20 11:15:01] <Telmo> I assume the answer to be no, but can puppet natively manage NFS file system mount points? | ||
| [2009/04/20 11:15:04] <SyTonnerre> Given he has a registered node name | ||
| [2009/04/20 11:15:11] <SyTonnerre> Or does every node get everything? | ||
| [2009/04/20 11:15:13] <ashp> I can't see anything wrong with the define host{} before, can anyone see anything obvious? | ||
| [2009/04/20 11:15:22] <joe-mac> i'm annoyed right now- does anyione else think it's awful programming practice to rely on the 'su' binary, if you're not doing bash that is? | ||
| [2009/04/20 11:15:37] <SyTonnerre> joe-mac, I'd suggest so | ||
| [2009/04/20 11:15:45] <SyTonnerre> joe-mac, many sus do many things | ||
| [2009/04/20 11:16:38] <joe-mac> well, i comment out the auth sufficient pam_rootok.so line in pam.d/su... totally causes our program to crap itself | ||
| [2009/04/20 11:17:02] <elementa1> ashp: empty "parents" ? | ||
| [2009/04/20 11:17:31] <joe-mac> i'm going to file the sequel to the original bug report this morning, too aggravated to work around this yet again | ||
| [2009/04/20 11:17:55] <ashp> elementa1: ohhh, i was looking _above_ the error, not below it, hmm, nice catch :) | ||
| [2009/04/20 11:17:57] <devicenull_> why does puppet execute my config files out of order? | ||
| [2009/04/20 11:18:07] <ashp> ah, this is the entry for itself, this makes some sense at leasst | ||
| [2009/04/20 11:18:11] <devicenull_> I have a exec rpm -i lighttpd line, then a service lighttpd ensure => running | ||
| [2009/04/20 11:18:14] @ vachon joined channel #puppet | ||
| [2009/04/20 11:18:17] <devicenull_> and the service one gets executed first | ||
| [2009/04/20 11:18:17] <Volcane> telmo: look in the docs, theres a mount type | ||
| [2009/04/20 11:18:24] <vachon> hey guys, i have a question I cant find the answer to | ||
| [2009/04/20 11:18:29] <Telmo> thanks | ||
| [2009/04/20 11:18:31] <vachon> how do i overrride the restart functionality | ||
| [2009/04/20 11:18:38] <vachon> i want it to do a "reload" not restart | ||
| [2009/04/20 11:18:40] <f3ew> devicenull_ use a Require to force ordering, Puppe defaults to unordered | ||
| [2009/04/20 11:18:57] <Telmo> the wiki layout is not... very intuitive | ||
| [2009/04/20 11:19:43] @ TREllis2k joined channel #puppet | ||
| [2009/04/20 11:20:58] * monachus is in limbo. | ||
| [2009/04/20 11:21:18] <elementa1> vachon: look here http://projects.reductivelabs.com/issues/1014 | ||
| [2009/04/20 11:22:44] @ Quit: elementa1: "Lost terminal" | ||
| [2009/04/20 11:22:49] @ glaw joined channel #puppet | ||
| [2009/04/20 11:23:16] <Volcane> Telmo: overall yeah, but the type reference is perfectly sensible i think? | ||
| [2009/04/20 11:23:42] @ Quit: verwilst: "Ex-Chat" | ||
| [2009/04/20 11:23:54] <Telmo> once you find it ;) | ||
| [2009/04/20 11:24:00] <Telmo> the problem is finding it | ||
| [2009/04/20 11:25:12] <Volcane> how can you be using puppet without having the wiki:TypeReference and wiki:LanguageTutorial pages ? :) | ||
| [2009/04/20 11:26:12] <vachon> well that is highly inconvient | ||
| [2009/04/20 11:26:28] <Telmo> I have them bookmarked, and I usually checked them before asking.. usually ;) | ||
| [2009/04/20 11:27:07] <Telmo> they should be easier to find in the wiki though | ||
| [2009/04/20 11:27:22] @ edwardam joined channel #puppet | ||
| [2009/04/20 11:27:45] <Volcane> yeah, wiki's getting a good work over, apparently | ||
| [2009/04/20 11:28:02] @ bajan joined channel #puppet | ||
| [2009/04/20 11:28:24] @ bajan left channel #puppet () | ||
| [2009/04/20 11:29:54] @ Quit: stijnbe: Client Quit | ||
| [2009/04/20 11:30:36] <sigmonsays> Anyone got a wiki page on how to write "efficient" manifest | ||
| [2009/04/20 11:30:42] <sigmonsays> I have co workers who simply make a new class for everything | ||
| [2009/04/20 11:30:51] <sigmonsays> and copy and paste from other manifest | ||
| [2009/04/20 11:30:56] <sigmonsays> I need to get 'em to do it properly | ||
| [2009/04/20 11:31:15] <Volcane> I'd say in that case they'd first need to *want* to make a proper manifest. | ||
| [2009/04/20 11:31:21] <Telmo> yep | ||
| [2009/04/20 11:31:21] <sigmonsays> it's really quite insaine as it's driving the system into the ground | ||
| [2009/04/20 11:31:29] <sigmonsays> heh. damn | ||
| [2009/04/20 11:31:52] <Telmo> writing reusable manifests is also a good idea | ||
| [2009/04/20 11:31:55] <Volcane> i think the question is different per environment, for e I just set simple guidelines | ||
| [2009/04/20 11:31:58] <devicenull_> how can I remove two packages at the same time? by default puppet seems to be executing commands one at a time which makes rpm bitch about dependencies | ||
| [2009/04/20 11:32:07] <Volcane> everythings a module, define a typical module layout | ||
| [2009/04/20 11:32:17] <sigmonsays> Volcane, right | ||
| [2009/04/20 11:32:19] <Volcane> with a typical example, and let them work in that framework | ||
| [2009/04/20 11:32:36] <sigmonsays> i'm unfortunately not at modules | ||
| [2009/04/20 11:32:46] <sigmonsays> but that's a whole nother problem | ||
| [2009/04/20 11:32:59] @ Quit: vachon: "Leaving" | ||
| [2009/04/20 11:32:59] <Volcane> then everything being a class is a good thing - modules are just groups of classes anyway | ||
| [2009/04/20 11:34:27] <sigmonsays> except when all the classes define the same stuff | ||
| [2009/04/20 11:34:35] <Volcane> like? | ||
| [2009/04/20 11:34:38] @ mrepop joined channel #puppet | ||
| [2009/04/20 11:34:46] <sigmonsays> well "ldap_ftp_ads" is a class | ||
| [2009/04/20 11:34:59] <sigmonsays> it doesn't inherit or anything | ||
| [2009/04/20 11:35:07] <sigmonsays> and is mixed with 3 other ldap_ftp* stuff | ||
| [2009/04/20 11:35:15] <sigmonsays> duplicates resources all over | ||
| [2009/04/20 11:35:21] <sigmonsays> sometimes they are even the same | ||
| [2009/04/20 11:35:21] <Volcane> ah | ||
| [2009/04/20 11:35:44] <sigmonsays> I know what my problems are. I will just have to make some more strict guidelines | ||
| [2009/04/20 11:36:05] <Volcane> well that just requires actual thinking and design, i mean its easy to pull out things into ldap_ftp_common and just include that in ldap_ftp_ads or whatever | ||
| [2009/04/20 11:36:14] <sigmonsays> yah | ||
| [2009/04/20 11:36:21] <sigmonsays> i need to stimulate that thought obviously | ||
| [2009/04/20 11:36:25] <Volcane> nods | ||
| [2009/04/20 11:38:45] @ Quit: lak: | ||
| [2009/04/20 11:39:25] <Volcane> many systems people just cant think in terms of coding | ||
| [2009/04/20 11:39:47] <Volcane> cant think about reuse or inheritance etc, its a hurdle in puppet adoption with sysads who just code shell scripts all their life | ||
| [2009/04/20 11:40:03] <sigmonsays> Yah. I think that describes what i'm dealing with | ||
| [2009/04/20 11:41:06] @ alfism joined channel #puppet | ||
| [2009/04/20 11:42:58] @ Quit: niczar1: "Leaving." | ||
| [2009/04/20 11:44:01] @ Quit: Innocenti: Client Quit | ||
| [2009/04/20 11:45:07] @ d3vilb0x joined channel #puppet | ||
| [2009/04/20 11:52:05] @ Quit: MattyM: "ta ta" | ||
| [2009/04/20 11:53:30] @ shake-n-bake joined channel #puppet | ||
| [2009/04/20 11:55:01] @ seph_ joined channel #puppet | ||
| [2009/04/20 11:57:22] @ kolla joined channel #puppet | ||
| [2009/04/20 11:58:16] @ niczar1 joined channel #puppet | ||
| [2009/04/20 11:59:29] @ Quit: unxfrek: "Leaving" | ||
| [2009/04/20 11:59:38] @ Quit: markl_: "Lost terminal" | ||
| [2009/04/20 12:00:20] <seph_> I'm having some trouble setting up puppetmaster's cert stuff. My first issue, is that I'm not sure how to configure the CA settings -- my clients will access the puppet server via the name puppet.exampe.com, which is a cname for puppet1.example.com. Which of the configuration parameters do I want to tweak? Seems like maybe certdnsnames | ||
| [2009/04/20 12:01:05] @ Quit: seph_: | ||
| [2009/04/20 12:01:10] @ lak joined channel #puppet | ||
| [2009/04/20 12:01:15] <joe-mac> certname= in puppet.conf | ||
| [2009/04/20 12:01:43] @ Quit: jlamsens: Remote closed the connection | ||
| [2009/04/20 12:06:28] @ Quit: MarlondB: | ||
| [2009/04/20 12:11:42] @ randybias joined channel #puppet | ||
| [2009/04/20 12:13:02] @ Quit: incommon_ike: Read error: 60 (Operation timed out) | ||
| [2009/04/20 12:13:03] @ edwardam is now known as edwardam|phn | ||
| [2009/04/20 12:15:17] @ egerlach joined channel #puppet | ||
| [2009/04/20 12:19:16] <Volcane> lak: for facter, it would be awesome to get http://projects.reductivelabs.com/issues/2157 in/done | ||
| [2009/04/20 12:19:51] <lak> yeah, but that's not going to get done for 1.5.5 | ||
| [2009/04/20 12:19:54] <lak> and probably not for 1.6 | ||
| [2009/04/20 12:20:31] <lak> but if you knock it out, we'll merge it in :) | ||
| [2009/04/20 12:20:40] <nasrat> I've made a start on the tests | ||
| [2009/04/20 12:20:42] <Volcane> i think the point of that ticket - at least it was made during a discussion about this - was to just make a fact for 1.5.x that can bring that proposed 2.0 functionality | ||
| [2009/04/20 12:20:49] <nasrat> yeah | ||
| [2009/04/20 12:20:58] <Volcane> i can write the fact, never done tests though :P | ||
| [2009/04/20 12:21:31] <nasrat> I'll push my stuff up to github later tonight | ||
| [2009/04/20 12:21:34] @ seph_ joined channel #puppet | ||
| [2009/04/20 12:21:45] @ Quit: glaw: | ||
| [2009/04/20 12:21:51] @ edwardam|phn is now known as edwardam | ||
| [2009/04/20 12:22:52] <Volcane> nasrat: did you write code for it yet? | ||
| [2009/04/20 12:22:55] @ Quit: alfism: "Connection reset by beer" | ||
| [2009/04/20 12:24:45] <Telmo> if a node hasn't been given a default import or anything or even en entry in nodes.pp which classes inherits by default? all of them? | ||
| [2009/04/20 12:25:25] <Volcane> none | ||
| [2009/04/20 12:25:30] <Volcane> unless you have a node default { } | ||
| [2009/04/20 12:25:39] <Telmo> humm... | ||
| [2009/04/20 12:27:10] <nasrat> Volcane: incomplete | ||
| [2009/04/20 12:28:29] @ WALoeIII joined channel #puppet | ||
| [2009/04/20 12:29:00] @ incommon_ike joined channel #puppet | ||
| [2009/04/20 12:33:13] @ Quit: DerekW: Remote closed the connection | ||
| [2009/04/20 12:38:18] @ Quit: shake-n-bake: | ||
| [2009/04/20 12:40:23] @ Quit: dijital1: Read error: 60 (Operation timed out) | ||
| [2009/04/20 12:41:34] @ ezmob joined channel #puppet | ||
| [2009/04/20 12:41:54] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 12:41:55] @ edwardam is now known as edwardam|phn | ||
| [2009/04/20 12:46:33] @ kingitchy joined channel #puppet | ||
| [2009/04/20 12:47:16] <lak> Volcane: that ticket is marked for 2.0, so i'm confused as to how it was expected to bring anything before that... | ||
| [2009/04/20 12:47:25] @ shake-n-bake joined channel #puppet | ||
| [2009/04/20 12:47:49] <nasrat> lak: I mailed for a cfd on list | ||
| [2009/04/20 12:47:57] <nasrat> but not got round to following up | ||
| [2009/04/20 12:47:57] <lak> ah | ||
| [2009/04/20 12:48:08] <lak> can you link to the discussion on the ticket? | ||
| [2009/04/20 12:48:13] <nasrat> will do | ||
| [2009/04/20 12:48:15] <lak> did anyone respond? | ||
| [2009/04/20 12:48:17] <nasrat> when I get home | ||
| [2009/04/20 12:48:21] <lak> i can't remember the conversation specifically | ||
| [2009/04/20 12:48:25] <Volcane> dont think anyone did | ||
| [2009/04/20 12:48:46] <nasrat> don't think so | ||
| [2009/04/20 12:48:58] <nasrat> I'll rekick off | ||
| [2009/04/20 12:49:00] <lak> ah | ||
| [2009/04/20 12:49:01] <nasrat> with code :) | ||
| [2009/04/20 12:51:56] @ Quit: alban2: Read error: 110 (Connection timed out) | ||
| [2009/04/20 12:52:41] @ Quit: nasrat: "Ex-Chat" | ||
| [2009/04/20 12:55:50] <lak> nico: you around? | ||
| [2009/04/20 13:00:44] @ Quit: shake-n-bake: | ||
| [2009/04/20 13:02:35] @ Quit: rsquared: "Leaving" | ||
| [2009/04/20 13:03:28] <Telmo> I have a linear dependency but puppet keeps insisting it is a circular one and wont run... may have something to do with using arrays for creating directories and groups? | ||
| [2009/04/20 13:04:10] <Volcane> or you just havnt found the circular dep yet :P | ||
| [2009/04/20 13:04:59] <Telmo> I have traced it | ||
| [2009/04/20 13:05:09] <Telmo> even wrote in the whiteboard the dependencies | ||
| [2009/04/20 13:10:48] @ jtimberman joined channel #puppet | ||
| [2009/04/20 13:12:45] @ briandquinn joined channel #puppet | ||
| [2009/04/20 13:12:56] @ happymcplaksin left channel #puppet ("ERC Version 5.3 (IRC client for Emacs)") | ||
| [2009/04/20 13:14:50] @ alfism joined channel #puppet | ||
| [2009/04/20 13:15:26] <nico> lak: yes | ||
| [2009/04/20 13:15:55] <lak> nice: re: #2078, did you test with the new patch? | ||
| [2009/04/20 13:15:55] <gepetto> lak: nice: #2078 is http://projects.reductivelabs.com/issues/show/2078 "Facter - Bug #2078: ip.rb errors command not found - ReductiveLabs.com" | ||
| [2009/04/20 13:16:16] <lak> Telmo: did you try loading the .dot graph file in something like graphviz or omnigraffle? | ||
| [2009/04/20 13:16:35] <nico> lak: need something ? | ||
| [2009/04/20 13:16:53] <lak> nico: sorry; yeah, did you test #2078 with the current HEAD of facter's master branch? | ||
| [2009/04/20 13:16:53] <gepetto> lak: nico: #2078 is http://projects.reductivelabs.com/issues/show/2078 "Facter - Bug #2078: ip.rb errors command not found - ReductiveLabs.com" | ||
| [2009/04/20 13:17:01] <lak> or were you just saying you had the same problem with the released 1.5.4? | ||
| [2009/04/20 13:17:26] <nico> I just work with releases | ||
| [2009/04/20 13:19:34] <nico> 19:18 nico@smaug ~> facter -v | ||
| [2009/04/20 13:19:34] <nico> 1.5.4 | ||
| [2009/04/20 13:20:18] @ Quit: fbe_: Read error: 113 (No route to host) | ||
| [2009/04/20 13:20:20] <nico> lak: I did not apply any patch | ||
| [2009/04/20 13:20:29] @ madrescher joined channel #puppet | ||
| [2009/04/20 13:20:39] <lak> ok, then i'm closing the ticket again; it's fixed, but the fix isn't yet part of a release | ||
| [2009/04/20 13:21:01] @ Quit: mikepea: Read error: 110 (Connection timed out) | ||
| [2009/04/20 13:21:09] <flashn> .dot graphs? | ||
| [2009/04/20 13:21:32] <nico> lak: ok | ||
| [2009/04/20 13:21:36] <flashn> you can get puppet so generate .dot files? | ||
| [2009/04/20 13:21:42] <flashn> s,so,to, | ||
| [2009/04/20 13:22:16] @ Quit: bob2: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 13:22:16] <Volcane> flashn: puppetd --graph | ||
| [2009/04/20 13:22:19] <Volcane> or put it in config | ||
| [2009/04/20 13:22:26] @ bob2 joined channel #puppet | ||
| [2009/04/20 13:22:35] @ voixd joined channel #puppet | ||
| [2009/04/20 13:22:54] @ bob2 is now known as Guest28542 | ||
| [2009/04/20 13:24:04] <flashn> nice >:) | ||
| [2009/04/20 13:27:44] @ flakrat joined channel #puppet | ||
| [2009/04/20 13:29:52] @ sandsmark joined channel #puppet | ||
| [2009/04/20 13:30:09] <sandsmark> is it possible to get puppetmasterd to not fork to the background? | ||
| [2009/04/20 13:30:32] <Volcane> is it possible you didnt run puppetmasterd --help ? | ||
| [2009/04/20 13:31:35] <sandsmark> I ran it | ||
| [2009/04/20 13:31:50] <sandsmark> and I tried “/usr/sbin/puppetmasterd --no-daemonize” | ||
| [2009/04/20 13:31:54] <sandsmark> but it still forks off | ||
| [2009/04/20 13:32:46] <Volcane> what version? | ||
| [2009/04/20 13:33:04] <sandsmark> 0.24.4 | ||
| [2009/04/20 13:33:32] <Volcane> hmm, dont have any 0.24.4 machines and i dont recall anything in changelogs related to this but it def works fine in 0.24.8 | ||
| [2009/04/20 13:33:39] <sandsmark> hmm | ||
| [2009/04/20 13:34:00] <Volcane> try --no-daemonize --verbose | ||
| [2009/04/20 13:34:12] <sandsmark> nothing | ||
| [2009/04/20 13:34:28] <Volcane> vi | ||
| [2009/04/20 13:34:34] <Volcane> foo | ||
| [2009/04/20 13:34:36] <sandsmark> :-p | ||
| [2009/04/20 13:34:52] <Volcane> try | ||
| [2009/04/20 13:35:03] <Volcane> puppetmaster --no-daemonize --verbose --genconfig|grep daemon | ||
| [2009/04/20 13:35:15] <Volcane> prolly dont need the verbose | ||
| [2009/04/20 13:35:22] <Volcane> mine says: daemonize = false | ||
| [2009/04/20 13:35:30] <sandsmark> nothing here | ||
| [2009/04/20 13:35:36] <Volcane> erm | ||
| [2009/04/20 13:35:38] <Volcane> broken badly | ||
| [2009/04/20 13:35:46] <sandsmark> indeed | ||
| [2009/04/20 13:35:47] <Volcane> what happens with just puppetmasterd --genconfig | ||
| [2009/04/20 13:35:54] <Volcane> tons of config? or nothing? | ||
| [2009/04/20 13:36:00] <Telmo> lak: sorry I just saw your message. The problem was that i was setting the owner of the directories I was creating to a user that required one of the directories | ||
| [2009/04/20 13:36:01] <sandsmark> just forks to the background | ||
| [2009/04/20 13:36:12] <Volcane> sandsmark: what config files do you have in /etc/puppet | ||
| [2009/04/20 13:36:37] <sandsmark> according to ls: “classes.txt files fileserver.conf localconfig.yaml manifests puppet.conf puppetmasterd.conf ssl tagmail.conf templates” | ||
| [2009/04/20 13:36:53] <Volcane> take away puppetmasterd.conf | ||
| [2009/04/20 13:36:58] <lak> sandsmark: look in your puppetmasterd executable for something about daemonize | ||
| [2009/04/20 13:37:00] <Volcane> it should all be in puppet.conf now | ||
| [2009/04/20 13:37:15] <lak> we changed the interface around 0.24.5, so those older packages probably have a different way of specifying not to daemonize | ||
| [2009/04/20 13:37:17] <lak> but i know it's there | ||
| [2009/04/20 13:37:23] * Volcane wonders why puppet doesnt just *ignore* those files now | ||
| [2009/04/20 13:37:24] <sandsmark> lak: I've looked, it tries to read some config option before it forks, iirc | ||
| [2009/04/20 13:37:53] <sandsmark> if Puppet[:daemonize] | ||
| [2009/04/20 13:37:53] <sandsmark> server.daemonize | ||
| [2009/04/20 13:38:08] <Volcane> yeah looking at source for 0.24.4 here its --no-daemonize | ||
| [2009/04/20 13:38:16] <Volcane> sandsmark: get rid of puppetmasterd.conf | ||
| [2009/04/20 13:38:24] @ randybias is now known as randybias|away | ||
| [2009/04/20 13:38:42] <sandsmark> Volcane: where do I specify port and that I want to use mongrel? | ||
| [2009/04/20 13:38:53] <flashn> strings `which puppetmasterd` | grep daemonize | ||
| [2009/04/20 13:38:55] <Volcane> sandsmark: in puppet.conf in the [puppetmasterd] section | ||
| [2009/04/20 13:39:03] <sandsmark> Volcane: oh, ok | ||
| [2009/04/20 13:39:12] <sandsmark> Volcane: in 0.24.4 too? | ||
| [2009/04/20 13:39:15] <Volcane> yes | ||
| [2009/04/20 13:39:31] <sandsmark> oki | ||
| [2009/04/20 13:40:13] <sandsmark> Volcane: thanks :-) | ||
| [2009/04/20 13:40:18] <Volcane> did it work? | ||
| [2009/04/20 13:40:21] <sandsmark> yup | ||
| [2009/04/20 13:40:24] <Volcane> its evil | ||
| [2009/04/20 13:40:33] <Volcane> i dont know why the existance of those files totally screws it up | ||
| [2009/04/20 13:40:35] <Volcane> but it should ignore them | ||
| [2009/04/20 13:40:42] <sandsmark> indeed | ||
| [2009/04/20 13:41:03] <Volcane> its a bad ting considering how broken debian's package system is | ||
| [2009/04/20 13:41:10] @ Quit: briandquinn: | ||
| [2009/04/20 13:41:25] <sandsmark> hehe, tell me about it :-p | ||
| [2009/04/20 13:41:30] <Volcane> even the rpms afaik will leave those files after upgrades though, which means upgrade fro a old version = dead puppet | ||
| [2009/04/20 13:46:13] <cwebber> ok... so a little bummed with tagmail how do you tag a node that is defined but fqdn? | ||
| [2009/04/20 13:46:48] <cwebber> s/but/by/ | ||
| [2009/04/20 13:50:05] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 13:50:05] * Volcane made a bug about it | ||
| [2009/04/20 13:52:06] @ madrescher joined channel #puppet | ||
| [2009/04/20 13:53:52] <sandsmark> goody :-D | ||
| [2009/04/20 13:54:37] <devicenull_> err: Could not run Puppet::Network::Client::Master: undefined method `-' for #<XMLRPC::DateTime:0xb6f4b8dc> | ||
| [2009/04/20 13:54:41] <devicenull_> what does that mean? | ||
| [2009/04/20 13:54:46] @ Quit: gaveen: Connection timed out | ||
| [2009/04/20 13:55:31] @ gaveen joined channel #puppet | ||
| [2009/04/20 13:58:56] <Telmo> what version of rub devicenull_ ? | ||
| [2009/04/20 13:59:07] <Telmo> s/rub/ruby/ | ||
| [2009/04/20 13:59:27] <devicenull_> ruby 1.8.5 (2006-08-25) [i386-linux] | ||
| [2009/04/20 13:59:33] @ randybias|away is now known as randybias | ||
| [2009/04/20 13:59:41] <devicenull_> I suppose that's a bit out of date? | ||
| [2009/04/20 13:59:43] <Volcane> :( | ||
| [2009/04/20 13:59:45] <Volcane> oops.. | ||
| [2009/04/20 13:59:46] @ devicenull_ is now known as devicenull | ||
| [2009/04/20 13:59:56] <Telmo> nah, that's what I am using | ||
| [2009/04/20 14:00:00] <sandsmark> same here | ||
| [2009/04/20 14:00:04] <Telmo> most of the stuff still has issues with 1.9 | ||
| [2009/04/20 14:00:07] <devicenull> ah | ||
| [2009/04/20 14:00:08] <Volcane> 1.8.5 should be fine | ||
| [2009/04/20 14:00:46] <Telmo> did you install puppet from gems? | ||
| [2009/04/20 14:00:54] <devicenull> I did yum install puppet | ||
| [2009/04/20 14:01:01] <devicenull> centos 5.2 with the rpmforge repo | ||
| [2009/04/20 14:01:13] <Telmo> humm | ||
| [2009/04/20 14:01:46] <Telmo> I am out of ideas then | ||
| [2009/04/20 14:01:58] <devicenull> I can't tell if its hurting anything | ||
| [2009/04/20 14:02:13] <devicenull> it seems to work fine, the only thing I can think of it effecting is automatic updating | ||
| [2009/04/20 14:04:01] @ Quit: randybias: "Leaving..." | ||
| [2009/04/20 14:04:42] <devicenull> any idea why puppet would just freeze up and refuse to die unless I kill -9 it? | ||
| [2009/04/20 14:04:48] <devicenull> unlreated to the err line | ||
| [2009/04/20 14:04:51] @ mvn071 joined channel #puppet | ||
| [2009/04/20 14:05:06] <Volcane> yeah, i know. till then though I am stuck with machines without updates :) | ||
| [2009/04/20 14:05:09] <Volcane> wrong # | ||
| [2009/04/20 14:06:13] <devicenull> even puppet -v -d doesn't actually output anything | ||
| [2009/04/20 14:06:30] <devicenull> puppetmaster runs fine thouhg | ||
| [2009/04/20 14:10:05] <devicenull> nevermind I'm an idiot | ||
| [2009/04/20 14:10:31] <jmslagle> HRM! | ||
| [2009/04/20 14:12:13] @ Quit: lak: | ||
| [2009/04/20 14:13:21] <gwar9999> is there a way for puppet to manage passwords of existing users (eg. root, puppet, etc...)? It seems as though puppet only manages users/passwords for users that puppet created. That is, if I change the comment field for "puppet" and run puppetd, nothing happens. If I change the comment field for a user that puppet created, "foo", the comment field is changed by puppetd. | ||
| [2009/04/20 14:15:41] @ isaac_incommon joined channel #puppet | ||
| [2009/04/20 14:15:42] @ Quit: incommon_ike: Read error: 113 (No route to host) | ||
| [2009/04/20 14:19:43] @ Volcane left channel #puppet () | ||
| [2009/04/20 14:19:49] @ Volcane joined channel #puppet | ||
| [2009/04/20 14:21:05] <devicenull> why do I get an error when I try to do something like "node server1.mysite.com { " | ||
| [2009/04/20 14:21:06] <devicenull> er | ||
| [2009/04/20 14:21:12] <devicenull> yea | ||
| [2009/04/20 14:21:34] <devicenull> it says "syntax error at ." | ||
| [2009/04/20 14:22:21] <bda> Anyone do Solaris Zone/sysidcfg templating? The wiki page seems to be wrong. | ||
| [2009/04/20 14:22:45] <bda> It says to set up your sysicfg template using values you set in the zone{} definition, but the template doesn't seem to have access them? | ||
| [2009/04/20 14:22:58] <bda> e.g., Could not find value for 'realhostname' | ||
| [2009/04/20 14:23:06] @ Quit: isaac_incommon: Remote closed the connection | ||
| [2009/04/20 14:23:17] <bda> devicenull: node 'foo' { } ? | ||
| [2009/04/20 14:23:27] <bda> Or, node 'server1.mysite.com' { } | ||
| [2009/04/20 14:23:44] <joe-mac> bda: there is some variable scoping issue with templates, but i just can't put my finger on how to get around that | ||
| [2009/04/20 14:23:45] <plathrop> devicenull: you have to put quotes around FQDNs | ||
| [2009/04/20 14:23:45] <devicenull> that works | ||
| [2009/04/20 14:23:49] <devicenull> I was using double quotes | ||
| [2009/04/20 14:23:55] <devicenull> which didn't work | ||
| [2009/04/20 14:24:04] <joe-mac> there is a way, my memory just sucks is what i am saying | ||
| [2009/04/20 14:24:30] <plathrop> devicenull: are you sure? I use double-qoutes all the time... | ||
| [2009/04/20 14:24:31] <bda> joe-mac: Hm. | ||
| [2009/04/20 14:24:36] <devicenull> plathrop, yep, quite sure | ||
| [2009/04/20 14:24:40] <devicenull> I tried that before asking | ||
| [2009/04/20 14:24:40] <plathrop> huh | ||
| [2009/04/20 14:24:42] <plathrop> weird | ||
| [2009/04/20 14:24:43] <devicenull> single quotes worked though | ||
| [2009/04/20 14:24:47] <joe-mac> "realhostname" is something you defined right? like, it's not a fact? | ||
| [2009/04/20 14:25:18] <bda> joe-mac: Right. It's defined in zone { realhostname => "test.foo.com", .. } | ||
| [2009/04/20 14:25:25] @ edwardam|phn is now known as edwardam | ||
| [2009/04/20 14:26:11] <joe-mac> ohhh it's an attribute | ||
| [2009/04/20 14:26:20] <joe-mac> maybe Volcane knows how to get around that | ||
| [2009/04/20 14:26:53] <bda> nod | ||
| [2009/04/20 14:27:34] <bda> It's just a bit odd: http://reductivelabs.com/trac/puppet/wiki/TypeReference#zone | ||
| [2009/04/20 14:27:40] <bda> Note the sysidcfg template. :) | ||
| [2009/04/20 14:27:42] <bda> Probably just out of date? | ||
| [2009/04/20 14:27:43] <bda> Volcane: ping? | ||
| [2009/04/20 14:28:14] <joe-mac> yea, i note it, but it's screwed up i think | ||
| [2009/04/20 14:28:18] <bda> nod | ||
| [2009/04/20 14:28:31] <joe-mac> < is that just my web browser adding html in there? | ||
| [2009/04/20 14:28:44] <bda> It's just whatever generated that page being hosed. | ||
| [2009/04/20 14:28:45] * joe-mac doesn't get to use solaris | ||
| [2009/04/20 14:28:53] <joe-mac> k, just making sure | ||
| [2009/04/20 14:28:57] <bda> Solaris++ | ||
| [2009/04/20 14:29:18] <joe-mac> bda: you wanna pastie your template? | ||
| [2009/04/20 14:31:27] @ ijcd joined channel #puppet | ||
| [2009/04/20 14:32:14] <joe-mac> "Pastie: Not Just the Color of My Skin" pastie.org | ||
| [2009/04/20 14:32:23] <pastie> joe-mac: http://pastie.org/452620 by bda. | ||
| [2009/04/20 14:32:36] <bda> I love my create_args. | ||
| [2009/04/20 14:32:48] <bda> Adding fs/dataset support to the zones provider is on my list. | ||
| [2009/04/20 14:33:11] <bda> (that passwd hash is a throwaway) | ||
| [2009/04/20 14:33:21] <joe-mac> o i was hoping to hack your gibson :-( | ||
| [2009/04/20 14:33:26] @ Quit: mikearr: Read error: 110 (Connection timed out) | ||
| [2009/04/20 14:33:39] <joe-mac> on a serious note, so, the template fills in everything else? | ||
| [2009/04/20 14:33:42] <joe-mac> just not realhostname | ||
| [2009/04/20 14:33:56] <bda> It errors out on the first value it can't interpolate. | ||
| [2009/04/20 14:34:06] @ mikearr joined channel #puppet | ||
| [2009/04/20 14:34:16] <bda> So if I changed the password to being passed via zone {} it would error on that. | ||
| [2009/04/20 14:35:08] @ Quit: d3vilb0x: | ||
| [2009/04/20 14:35:45] <joe-mac> yea gotta be an attribute scope thing, i'm interested in this i just have no clue, sorry man | ||
| [2009/04/20 14:35:52] <bda> np | ||
| [2009/04/20 14:35:53] <bda> Thanks much. | ||
| [2009/04/20 14:36:12] <joe-mac> np | ||
| [2009/04/20 14:37:25] <joe-mac> anybody know how to specify an attribute's value when you realize a resource? | ||
| [2009/04/20 14:38:18] @ pleemans joined channel #puppet | ||
| [2009/04/20 14:38:26] <joe-mac> for instance, i have an ssh_user definition that my users get defined as. so they are @ssh_user someguy, and $shell has a default value of /bin/bash, but i need to override that cause these people don't need full shells | ||
| [2009/04/20 14:40:27] @ alban2 joined channel #puppet | ||
| [2009/04/20 14:40:59] <joe-mac> going to lunch, if anyone knows that feel free to say, thanks | ||
| [2009/04/20 14:48:38] @ lak joined channel #puppet | ||
| [2009/04/20 14:49:28] @ Maliuta joined channel #puppet | ||
| [2009/04/20 14:51:23] @ Quit: Maliuta: Read error: 54 (Connection reset by peer) | ||
| [2009/04/20 14:51:57] @ Maliuta joined channel #puppet | ||
| [2009/04/20 14:53:48] @ rgsteele||work joined channel #puppet | ||
| [2009/04/20 14:55:40] @ andrewcshafer joined channel #puppet | ||
| [2009/04/20 14:56:22] @ Quit: Maliuta: Remote closed the connection | ||
| [2009/04/20 14:59:12] <devicenull> is there a way to ignore the return code from an exec command? | ||
| [2009/04/20 14:59:25] <devicenull> rpm -iF returns different things if the package exists or the package was installed | ||
| [2009/04/20 14:59:30] <devicenull> but both are sucess | ||
| [2009/04/20 15:01:21] @ Quit: madrescher: Read error: 113 (No route to host) | ||
| [2009/04/20 15:03:16] @ Quit: ch: "leaving" | ||
| [2009/04/20 15:04:07] @ ijcd_ joined channel #puppet | ||
| [2009/04/20 15:04:59] @ madrescher joined channel #puppet | ||
| [2009/04/20 15:09:38] @ Maliuta joined channel #puppet | ||
| [2009/04/20 15:09:43] @ Quit: seph_: | ||
| [2009/04/20 15:11:02] @ Quit: Maliuta: Remote closed the connection | ||
| [2009/04/20 15:12:34] @ Quit: ijcd: Read error: 110 (Connection timed out) | ||
| [2009/04/20 15:16:47] @ ijcd joined channel #puppet | ||
| [2009/04/20 15:18:55] @ bje joined channel #puppet | ||
| [2009/04/20 15:24:21] <bda> Heh, I'm defining class test_zone { $foo zone { test: ... } } ; and $foo is used in the template. | ||
| [2009/04/20 15:24:32] <bda> And then inluding that class in the node{} where I want the zone. | ||
| [2009/04/20 15:24:35] <bda> Is that .. insane? | ||
| [2009/04/20 15:25:06] @ joejax joined channel #puppet | ||
| [2009/04/20 15:25:08] <joejax> < 4/20 Heil....HeilHitlerHe.. #In Memory of Adolf Hitler# ..Heil....HeilHitlerHe | ||
| [2009/04/20 15:25:11] <joejax> < Heil....ilHitlerHeil.... We will always remember ....Heil....ilHitlerHeil | ||
| [2009/04/20 15:25:14] <joejax> < Heil....Heil............. and cherish you. Your .....Heil....Heil........ | ||
| [2009/04/20 15:25:17] <joejax> < Heil....Heil............. acts of selflessness ......Heil....Heil........ | ||
| [2009/04/20 15:25:20] <joejax> < Heil....Heil........... will be passed down from ....Heil....Heil........ | ||
| [2009/04/20 15:25:23] <joejax> < HeilHitlerHeilHitler... generation to generation. ...HeilHitlerHeilHitler | ||
| [2009/04/20 15:25:26] <joejax> < HeilHitlerHeilHitler... The lies that dishonor your .HeilHitlerHeilHitler | ||
| [2009/04/20 15:25:29] <joejax> < ........Heil....Heil..... name will be vanquished. ..........Heil....Heil | ||
| [2009/04/20 15:25:32] <joejax> < ........Heil....Heil.... You were a true patriot ............Heil....Heil | ||
| [2009/04/20 15:25:35] <joejax> < ........Heil....Heil.... and a lover of all men, ............Heil....Heil | ||
| [2009/04/20 15:25:38] <joejax> < HeilHitlerHe....Heil... all races, all religions. ...HeilHitlerHe....Heil | ||
| [2009/04/20 15:25:41] <joejax> < ilHitlerHeil....Heil.. #In Memory of Adolf Hitler# ..ilHitlerHeil....Heil | ||
| [2009/04/20 15:25:53] @ joejax left channel #puppet () | ||
| [2009/04/20 15:26:25] @ Quit: ijcd_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 15:27:40] @ Maliuta joined channel #puppet | ||
| [2009/04/20 15:27:49] <riddley> speaking of insane | ||
| [2009/04/20 15:28:48] <mrrx> it's inspiring! | ||
| [2009/04/20 15:29:18] @ Quit: Maliuta: Remote closed the connection | ||
| [2009/04/20 15:29:44] @ jason^_ joined channel #puppet | ||
| [2009/04/20 15:31:21] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 15:31:34] @ madrescher joined channel #puppet | ||
| [2009/04/20 15:36:11] <jmslagle> Hrm! | ||
| [2009/04/20 15:36:36] <jmslagle> puppetd --test seems to exit a script I call it from when it exits. | ||
| [2009/04/20 15:40:33] @ Quit: jason^: Read error: 110 (Connection timed out) | ||
| [2009/04/20 15:42:30] @ ezmob is now known as ezmob|away | ||
| [2009/04/20 15:45:51] @ bevans5446 joined channel #puppet | ||
| [2009/04/20 15:47:04] @ markl_ joined channel #puppet | ||
| [2009/04/20 15:47:46] <jbooth> It was comcastic! | ||
| [2009/04/20 15:53:30] <lak> jmslagle: that usually happens when you don't do all the crazy crap you need to do on unix to daemonize something | ||
| [2009/04/20 15:54:25] <flakrat> I have a file that I want puppet to manage on several workstations, I've set up a class for the file and "include auto_home" in the template inherited by my workstations | ||
| [2009/04/20 15:54:48] <flakrat> problem is, some of the workstations grab the latest copy of the file, while others ignore it | ||
| [2009/04/20 15:56:09] <flakrat> anyone have any suggestions? the workstations all inherit the same template workstation and don't modify it any further | ||
| [2009/04/20 15:56:58] <jmslagle> lak: --test shouldn't daemonize though right? | ||
| [2009/04/20 15:56:59] <joe-mac> you can override source if you inherit auto_home in the node, but that's far from optimal | ||
| [2009/04/20 15:57:06] <lak> jmslagle: right | ||
| [2009/04/20 15:57:16] <jmslagle> I wonder why it's doing it | ||
| [2009/04/20 15:59:38] <lak> why puppetd is exiting? | ||
| [2009/04/20 15:59:45] <lak> or why its exit forces your script to exit? | ||
| [2009/04/20 15:59:47] <jmslagle> Causing the calling script to exit. | ||
| [2009/04/20 16:00:14] <bda> Are you running your script with -e? | ||
| [2009/04/20 16:00:20] <jmslagle> No | ||
| [2009/04/20 16:03:02] @ Quit: erm_: "leaving" | ||
| [2009/04/20 16:07:26] @ Quit: squiddle: Read error: 113 (No route to host) | ||
| [2009/04/20 16:09:49] @ nasrat joined channel #puppet | ||
| [2009/04/20 16:11:45] @ Maliuta joined channel #puppet | ||
| [2009/04/20 16:12:34] <flakrat> strange if I run /usr/sbin/puppetd --debug --test it will synchronize the file | ||
| [2009/04/20 16:13:12] @ nakano_ is now known as nakano | ||
| [2009/04/20 16:13:37] @ aymerick left channel #puppet () | ||
| [2009/04/20 16:14:15] @ Quit: ijcd: | ||
| [2009/04/20 16:15:44] <flakrat> even stranger, I'm seeing a number of other files that I've updated that never synched | ||
| [2009/04/20 16:15:55] <flakrat> and are now syncing using --debug --test | ||
| [2009/04/20 16:16:30] <flakrat> all running 0.24.8 | ||
| [2009/04/20 16:16:43] @ sandsmark left channel #puppet ("lolque") | ||
| [2009/04/20 16:16:59] <bda> Heh, I can't tell if this change I just made to p/zone/solaris.rb is a fix or not. :P | ||
| [2009/04/20 16:17:08] <bda> But now I can have a complex create_args, so. | ||
| [2009/04/20 16:17:14] @ Quit: rgsteele||work: Remote closed the connection | ||
| [2009/04/20 16:17:46] @ aymerick joined channel #puppet | ||
| [2009/04/20 16:18:49] @ ezmob|away is now known as ezmob | ||
| [2009/04/20 16:21:17] @ rsquared joined channel #puppet | ||
| [2009/04/20 16:25:08] @ erm_ joined channel #puppet | ||
| [2009/04/20 16:26:19] @ Quit: rsquared: "Leaving" | ||
| [2009/04/20 16:27:00] @ Quit: Maliuta: Remote closed the connection | ||
| [2009/04/20 16:34:35] @ fbe_ joined channel #puppet | ||
| [2009/04/20 16:34:36] <jmslagle> Messed with it awhile and now it works | ||
| [2009/04/20 16:36:10] @ rsquared joined channel #puppet | ||
| [2009/04/20 16:36:56] @ Quit: aymerick: Read error: 110 (Connection timed out) | ||
| [2009/04/20 16:44:34] @ travisbrady joined channel #puppet | ||
| [2009/04/20 16:46:29] @ Quit: pleemans: Read error: 110 (Connection timed out) | ||
| [2009/04/20 16:51:23] <gepetto> ::trac:: Advanced Puppet Recipe edited by paulgear @ http://reductivelabs.com/trac/puppet/wiki/AdvancedPuppetRecipe (by puppet@gear.dyndns.org) | ||
| [2009/04/20 16:55:28] <travisbrady> what is the "*/" in the following bit of syntax: minute => "*/15"? | ||
| [2009/04/20 16:55:50] <Volcane> every 15 minutes | ||
| [2009/04/20 16:56:44] <Volcane> its a cron feature, not puppet | ||
| [2009/04/20 16:57:15] <cwebber> does anyone know if in tagmail.conf you can specify all, !arbitrary_tag ? | ||
| [2009/04/20 16:57:22] @ Quit: joe-mac: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 16:57:46] <travisbrady> Volcane: thank you | ||
| [2009/04/20 17:00:22] <travisbrady> what's the standard pattern to have a job that runs only one a particular host? | ||
| [2009/04/20 17:00:45] <Volcane> put it in a class, include the class in one node only | ||
| [2009/04/20 17:01:14] @ WALoeIII_ joined channel #puppet | ||
| [2009/04/20 17:01:21] @ nigelk joined channel #puppet | ||
| [2009/04/20 17:01:38] @ Quit: WALoeIII_: Remote closed the connection | ||
| [2009/04/20 17:01:56] @ fujin joined channel #puppet | ||
| [2009/04/20 17:02:55] <score> there any way to get the nagios types to use /etc/nagios2 instead of /etc/nagios? | ||
| [2009/04/20 17:03:57] @ seph_ joined channel #puppet | ||
| [2009/04/20 17:04:10] @ randybias joined channel #puppet | ||
| [2009/04/20 17:04:32] @ joe-mac joined channel #puppet | ||
| [2009/04/20 17:04:46] @ bobbyz_ joined channel #puppet | ||
| [2009/04/20 17:05:02] <plathrop> score: symlink? :-P | ||
| [2009/04/20 17:05:15] <score> :( | ||
| [2009/04/20 17:05:35] * Volcane spots another happy debian user :P | ||
| [2009/04/20 17:07:20] <joe-mac> rofl | ||
| [2009/04/20 17:07:31] <score> am i supposed to be using centos or what? | ||
| [2009/04/20 17:08:18] <Volcane> donno, just saying, its the awesome | ||
| [2009/04/20 17:08:44] <joe-mac> anything that has init scripts that have a status function, it hink i would stop bitching about debian if they just made that a requirement | ||
| [2009/04/20 17:08:51] @ Quit: lak: | ||
| [2009/04/20 17:09:21] <score> Volcane: what's the awesome? | ||
| [2009/04/20 17:10:14] <joe-mac> debian, sort of like a prostate exam. | ||
| [2009/04/20 17:10:38] <seph_> I'm having some trouble with variables. I have http://pastie.org/452845 but it doesn't work. The later variable declaration doesn't seem to override the former. (Or is it that the postfix module is included before the later variable is assigned?) | ||
| [2009/04/20 17:10:59] <joe-mac> seph_: you can't do that | ||
| [2009/04/20 17:11:04] <joe-mac> can't re assign variables | ||
| [2009/04/20 17:11:08] <seph_> damn. Is there a better way to do this? | ||
| [2009/04/20 17:11:09] <joe-mac> they're more like constants in that sense | ||
| [2009/04/20 17:11:13] <Volcane> seph:http://reductivelabs.com/trac/puppet/wiki/CommonMisconceptions | ||
| [2009/04/20 17:11:16] <joe-mac> usually there is a better way | ||
| [2009/04/20 17:11:16] <seph_> I can stick things in an ugly case | ||
| [2009/04/20 17:12:44] <seph_> Hrm. I'll have to ponder what the better way might be. I guess maybe to switch the the class definition, as suggested there | ||
| [2009/04/20 17:13:50] @ Quit: nasrat: "Get Colloquy for iPhone! http://mobile.colloquy.info/" | ||
| [2009/04/20 17:15:29] <joe-mac> you could include postfix::$postfix_rule i think | ||
| [2009/04/20 17:15:30] <joe-mac> but don' | ||
| [2009/04/20 17:15:32] <joe-mac> t quote me on that | ||
| [2009/04/20 17:15:42] <joe-mac> role** | ||
| [2009/04/20 17:15:45] <Volcane> include("postfix::${foo}") | ||
| [2009/04/20 17:16:21] <Volcane> include's just a function | ||
| [2009/04/20 17:16:44] @ Quit: WALoeIII: No route to host | ||
| [2009/04/20 17:17:30] <joe-mac> yea there ya go | ||
| [2009/04/20 17:17:43] <joe-mac> that way you can have postfix::satellite, so on and so forth | ||
| [2009/04/20 17:17:52] <joe-mac> interesting thought | ||
| [2009/04/20 17:18:44] <seph_> hrm. I don't quite get it -- my goal is to have the default be postfix::satellite and then the override it in specific cases. (and this is an idiom I want to use in a couple places) | ||
| [2009/04/20 17:19:07] <seph_> Is the suggestion to include postfix::$role, and then just reset the role variable? | ||
| [2009/04/20 17:19:37] <bda> joe-mac: See my solution? | ||
| [2009/04/20 17:20:00] <Volcane> seph_: why not just set $postfix_role in the node{} ? | ||
| [2009/04/20 17:20:12] <Volcane> then you dont need the mta-server class at all. | ||
| [2009/04/20 17:20:17] <joe-mac> yea, i set a few variables in every node, no good way around it | ||
| [2009/04/20 17:20:28] <seph_> In this case, I have multiple mta-servers and was hoping to centralize. | ||
| [2009/04/20 17:20:28] <joe-mac> bda: nah what happened | ||
| [2009/04/20 17:20:49] <Volcane> seph_: sure, so youc an do that, just dont rely on setting these variables in the classes, set htem in the node | ||
| [2009/04/20 17:21:11] <Volcane> seph_: or dont use inheritance if you dont need to override things | ||
| [2009/04/20 17:21:33] <Volcane> seph_: class mta-server { $postfix_role = "relay"\ninclude baseclass } | ||
| [2009/04/20 17:22:36] <seph_> lemme try this | ||
| [2009/04/20 17:23:14] <bda> joe-mac: http://pastie.org/452863 # I had to mangle zone.rb so I could use those create_args. | ||
| [2009/04/20 17:23:21] <bda> Mixing ; and \n seems unhappy. | ||
| [2009/04/20 17:23:36] <Volcane> obviously i just put "\n" there to avoid typing multiple lines. | ||
| [2009/04/20 17:24:48] <bda> Pretty sure I should move those zfs blocks for the zoneroot to the class. | ||
| [2009/04/20 17:26:51] @ lak joined channel #puppet | ||
| [2009/04/20 17:28:21] @ Quit: rsquared: "Leaving" | ||
| [2009/04/20 17:32:19] <travisbrady> is there a validator of some kind I can use to test if my manifest is compliant before deploying? | ||
| [2009/04/20 17:32:29] <Volcane> puppet --parseonly foo.pp | ||
| [2009/04/20 17:33:10] <travisbrady> thanks | ||
| [2009/04/20 17:34:31] @ kambiz is now known as kambiz_away | ||
| [2009/04/20 17:34:33] @ masterzen joined channel #puppet | ||
| [2009/04/20 17:35:45] @ d3vilb0x joined channel #puppet | ||
| [2009/04/20 17:35:57] <seph_> I'm sorry, I'm not really seeing how to make this DWIW. Namely, I want to include my module postfix everywhere, with 1 behavior specific as a default, and another behavior specified on a more specific basis. Playing with the suggestions here don't seem to work | ||
| [2009/04/20 17:36:18] <seph_> Or rather, they all behave the same way. postfix is included, but always with the deault behavior | ||
| [2009/04/20 17:36:29] <masterzen> lak: sorry to disturb you. Is that normal that the indirection for finding/saving facts is /facts/<certname> but for catalog access we use the hostname fact? | ||
| [2009/04/20 17:37:14] <lak> masterzen: not, it's not | ||
| [2009/04/20 17:37:18] @ rsquared joined channel #puppet | ||
| [2009/04/20 17:37:36] @ smooge joined channel #puppet | ||
| [2009/04/20 17:37:44] <lak> masterzen: i haven't really worried about it because the value is essentially always ignored - we either actually use the cert name, or we use the hostname from the facts | ||
| [2009/04/20 17:37:45] <mconigliaro> hey guys, how can i put a literal <% %> in an erb file? | ||
| [2009/04/20 17:38:05] @ Djelibeybi joined channel #puppet | ||
| [2009/04/20 17:39:20] <masterzen> lak: ok. That's just on my dev machine they differ (ie --certname) and I was triggering an auth deny :-) | ||
| [2009/04/20 17:39:32] <seph_> Best thing I've got so far, is http://pastie.org/452878 but I'm worried I can't extend this to something more complicated | ||
| [2009/04/20 17:39:33] <masterzen> I mean for catalog, but it was working for facts... | ||
| [2009/04/20 17:39:59] <lak> masterzen: right - now you see why it's better to handle this in the auth system rather than in code :) | ||
| [2009/04/20 17:40:07] <masterzen> yep | ||
| [2009/04/20 17:40:07] @ ijcd joined channel #puppet | ||
| [2009/04/20 17:40:25] <masterzen> except, that I can't test it without renaming my dev machine :-( | ||
| [2009/04/20 17:42:05] <masterzen> lak: on the same subject: I confirm that the facts ACL needs both find _and_ save. I didn't check in the code why yet, though. But I think this is related to caching. You need to find, first maybe and if nil, then save? | ||
| [2009/04/20 17:42:27] <lak> crap | ||
| [2009/04/20 17:42:28] <lak> yes | ||
| [2009/04/20 17:42:30] <lak> that's what it is | ||
| [2009/04/20 17:42:45] <lak> well, it shouldn't as of my recent fix, but that fix hasn't been merged | ||
| [2009/04/20 17:44:25] <nDuff> lak, has deepak talked to you about the changes to the graph library he's working on? | ||
| [2009/04/20 17:44:39] <masterzen> that's not an issue. I'll and an ACL to match find /facts/(myself) as for the catalog :-) | ||
| [2009/04/20 17:44:43] <lak> masterzen: if you rebase against 2149, you'll see that's not called any more | ||
| [2009/04/20 17:44:55] <masterzen> lak: ok, will throw an eye later. | ||
| [2009/04/20 17:44:55] <lak> i recommend just doing your dev against that (i just rebased it against master) | ||
| [2009/04/20 17:45:00] <lak> and i'll get it merged in asap | ||
| [2009/04/20 17:45:03] <lak> nDuff: nope | ||
| [2009/04/20 17:45:07] <lak> but i'd definitely like to hear about it | ||
| [2009/04/20 17:45:09] <masterzen> lak: ok, will do then. | ||
| [2009/04/20 17:45:58] <grim_radical> lak: I've been mucking around with simple_graph...in our testing, things like remove_edge! and walk take thousands of seconds | ||
| [2009/04/20 17:46:10] <lak> really? ouch | ||
| [2009/04/20 17:46:11] <lak> um | ||
| [2009/04/20 17:46:12] <lak> ouch | ||
| [2009/04/20 17:46:26] <grim_radical> I can send you the ruby-prof output, if you like | ||
| [2009/04/20 17:46:38] <grim_radical> but yeah, it takes up a lot of time. :P | ||
| [2009/04/20 17:46:43] <lak> the fix for #1885 should drastically reduce the number of edges in the graph | ||
| [2009/04/20 17:46:44] <gepetto> lak: #1885 is http://projects.reductivelabs.com/issues/show/1885 "Puppet - Bug #1885: Requires are passed down to defines and exported with resources - ReductiveLabs.com" | ||
| [2009/04/20 17:46:50] <lak> but it only works for the master branch | ||
| [2009/04/20 17:47:00] <lak> i believe you :/ | ||
| [2009/04/20 17:47:03] <lak> where's all the time being spent? | ||
| [2009/04/20 17:47:14] @ shake-n-bake joined channel #puppet | ||
| [2009/04/20 17:47:19] <grim_radical> there's some low-hanging fruit...changing @edges to a Set instead of a list reduces the time considerably (assuming that's a safe modification) | ||
| [2009/04/20 17:47:36] <grim_radical> lak: let me dig up the ruby-prof output... | ||
| [2009/04/20 17:48:12] @ Quit: cwebber: Read error: 60 (Operation timed out) | ||
| [2009/04/20 17:49:08] <grim_radical> lak: the main offenders are in the ruby stdlib. There are around 250 million calls to Kernel.equal?, 10s of millions of calls to Array.each, etc | ||
| [2009/04/20 17:49:24] <grim_radical> I think what's driving this, though, is remove_edge! and walk | ||
| [2009/04/20 17:50:02] <grim_radical> remove_edge! is walking the list of edges, which is a O(N) operation...and our N is around 10000. :P | ||
| [2009/04/20 17:50:10] @ Quit: shake-n-bake: Client Quit | ||
| [2009/04/20 17:50:16] <lak> right | ||
| [2009/04/20 17:50:26] <lak> how often is remove_edge! called? i would have figured rarely | ||
| [2009/04/20 17:50:51] <grim_radical> lak: 29956 times | ||
| [2009/04/20 17:51:32] <grim_radical> using a Set object for @edges massively improves things | ||
| [2009/04/20 17:52:12] <grim_radical> I've also changed remove_vertex! to use Set's subtract method, which is faster than using "each" and deleting edges individually | ||
| [2009/04/20 17:52:45] <lak> cool | ||
| [2009/04/20 17:52:49] <lak> you could probably do the same with arrays | ||
| [2009/04/20 17:53:07] <lak> although in looking at it, i think edge removal only happens during cleanup after a transaction | ||
| [2009/04/20 17:53:08] <grim_radical> replace some of the arrays with sets, you mean? | ||
| [2009/04/20 17:53:28] <lak> no; i just mean using array subtraction rather than iterate + delete | ||
| [2009/04/20 17:53:32] <grim_radical> ah | ||
| [2009/04/20 17:53:42] <lak> so some refactoring could probably make it so you didn't even need to do the edge removal | ||
| [2009/04/20 17:54:31] <lak> hrm | ||
| [2009/04/20 17:54:35] <lak> actually, you're on 0.24 | ||
| [2009/04/20 17:54:37] <lak> no can do :/ | ||
| [2009/04/20 17:54:39] <score> is there good docs on how you're supposed to use the nagios resources? a full example? | ||
| [2009/04/20 17:54:45] <grim_radical> argh. :P | ||
| [2009/04/20 17:55:14] @ cwebber joined channel #puppet | ||
| [2009/04/20 17:55:25] <nigelk> so I've started playing around with the rack setup instead of mongrel, and I seem to have reactivated a bug I was sure we'd fixed in Puppet.... | ||
| [2009/04/20 17:55:35] <nigelk> the server can't find the plugins that the clients are downloading.... | ||
| [2009/04/20 17:55:52] <nigelk> but I can't find the original bug to work out what's different about rack in this case | ||
| [2009/04/20 17:55:55] <nigelk> any suggestions peeps? | ||
| [2009/04/20 17:56:09] <lak> grim_radical: there might still be a way to fix it | ||
| [2009/04/20 17:57:34] <grim_radical> lak: http://gist.github.com/98792 | ||
| [2009/04/20 17:57:54] <grim_radical> lak: that's the ruby-prof output from the "main" puppet thread (only the biggest offenders) | ||
| [2009/04/20 17:58:19] <lak> grim_radical: basically, make a clone of the catalog in Transaction#initialize, and them comment out the bits that remove the resource from the graph in Catalog#remove_resource | ||
| [2009/04/20 17:59:05] <grim_radical> lak: the only patch I used for that run was changing remove_edge! to use reject! instead of iterating through each edge | ||
| [2009/04/20 17:59:32] <lak> i assume it had a big impact? | ||
| [2009/04/20 18:00:06] <grim_radical> medium impact...maybe ~10-15% reduction in time | ||
| [2009/04/20 18:00:12] <lak> ok | ||
| [2009/04/20 18:00:25] <lak> do you know what % time is being spent in the transaction's cleanup method? | ||
| [2009/04/20 18:00:31] <grim_radical> switching to Set has been the big win so far...the current runs are taking ~40% of the time of the original | ||
| [2009/04/20 18:00:36] <grim_radical> hmm, let me see | ||
| [2009/04/20 18:00:42] <lak> e.g., if you just comment out the call to cleanup | ||
| [2009/04/20 18:00:55] <lak> you should be able to basically do something like: | ||
| [2009/04/20 18:01:00] <lak> return if host_config? | ||
| [2009/04/20 18:01:00] <grim_radical> lak: 245.3 seconds | ||
| [2009/04/20 18:01:04] <lak> in the transaction cleanup method | ||
| [2009/04/20 18:01:22] <lak> what is that in %? | ||
| [2009/04/20 18:01:32] <grim_radical> hmm, lemme calculate | ||
| [2009/04/20 18:02:01] @ claymation joined channel #puppet | ||
| [2009/04/20 18:02:23] <grim_radical> lak: around 20% total time | ||
| [2009/04/20 18:02:29] <lak> ok | ||
| [2009/04/20 18:02:50] <lak> so yeah, try with that return as the first line of Transaction#cleanup | ||
| [2009/04/20 18:02:51] @ Quit: nigelk: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 18:02:53] @ nigelk joined channel #puppet | ||
| [2009/04/20 18:02:57] <lak> altho it's return if catalog.host_config? | ||
| [2009/04/20 18:03:01] <grim_radical> lak: ok, I'll give that a shot now | ||
| [2009/04/20 18:03:03] <lak> cool | ||
| [2009/04/20 18:03:39] <grim_radical> lak: I've also tried changing the @adjacencies object to use Set objects instead of lists, but that seems to cause some correctness errors | ||
| [2009/04/20 18:04:06] <grim_radical> err: Got an uncaught exception of type NoMethodError: undefined method `target' for #<Set:0x2aaaad1297b0> | ||
| [2009/04/20 18:04:57] <grim_radical> if I can get that stuff converted to Set objects, though...I think that would help a lot | ||
| [2009/04/20 18:05:07] <grim_radical> I think we've got a lot of very-connected vertices | ||
| [2009/04/20 18:05:19] @ Quit: ghenry: Remote closed the connection | ||
| [2009/04/20 18:05:35] <grim_radical> but basically, anything that changes some of the core operations from O(N) to O(1) would likely be a win | ||
| [2009/04/20 18:06:06] <lak> and Sets do that? | ||
| [2009/04/20 18:06:35] <lak> grim_radical: email me the code you used to change the adjacencies to sets | ||
| [2009/04/20 18:06:38] <lak> i'll see if i can fix it | ||
| [2009/04/20 18:06:45] <grim_radical> well, I can't speak for the quality of the Ruby Set implementation, but it *should* | ||
| [2009/04/20 18:07:04] <grim_radical> I believe ruby sets are implemented using Hashes under-the-hood (or something hash-esque) | ||
| [2009/04/20 18:07:36] <grim_radical> so adds, deletes, etc are fast since you don't need to traverse a list | ||
| [2009/04/20 18:08:04] <masterzen> yes they're backed by a hash, so you get O(1) lookup | ||
| [2009/04/20 18:08:09] <grim_radical> lak: I changed line 22 of simple_graph to: | ||
| [2009/04/20 18:08:18] <grim_radical> @adjacencies = {:in => Hash.new { |h,k| h[k] = Set.new }, :out => Hash.new { |h,k| h[k] = Set.new }} | ||
| [2009/04/20 18:08:44] <lak> ok | ||
| [2009/04/20 18:08:52] <grim_radical> looking at simple_graph, I can't quite figure out why the code wouldn't work just swapping out the "[]" for Set.new | ||
| [2009/04/20 18:09:13] <grim_radical> it appears that the rest of that code is using vanilla list-esque operations, which also work on Set objects | ||
| [2009/04/20 18:09:24] <grim_radical> (<<, delete, flatten, etc) | ||
| [2009/04/20 18:10:17] <grim_radical> in completely different performance news, using a ruby interpreter compiled with --disable-pthread speeds up out puppet runs by about 25% | ||
| [2009/04/20 18:11:39] <lak> i think Set.each returns something different | ||
| [2009/04/20 18:12:35] <grim_radical> lak: really? that's surprising...I would have expected it to do the same thing as List#each | ||
| [2009/04/20 18:12:38] <Djelibeybi> Anyone seen Puppet create hundreds of [cat] <defunct> processes on EL4? | ||
| [2009/04/20 18:12:46] <lak> no, you're right; there's something else going on | ||
| [2009/04/20 18:12:48] <lak> gimme a minute | ||
| [2009/04/20 18:13:15] @ Quit: joe-mac: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:16] @ Quit: randybias: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:16] @ Quit: alfism: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:17] @ Quit: LapTop006: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:17] @ Quit: Telmo: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:18] @ Quit: Superfly_: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:18] @ Quit: CompBrain: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:19] @ Quit: bolt: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:20] @ Quit: JD: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:20] @ Quit: hamish: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:21] @ Quit: spheromak: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:22] @ Quit: rektide: kornbluth.freenode.net irc.freenode.net | ||
| [2009/04/20 18:13:22] <Djelibeybi> Hmm.. seems like one defunct process per Puppet run | ||
| [2009/04/20 18:13:23] <lak> grim_radical: the problem is line 38 of simple_graph | ||
| [2009/04/20 18:13:38] <lak> Djelibeybi: looks likely you're spawning an exec that puppet's not expecting | ||
| [2009/04/20 18:13:43] <lak> some background process | ||
| [2009/04/20 18:13:55] @ Quit: snafu_: Read error: 60 (Operation timed out) | ||
| [2009/04/20 18:14:04] <Djelibeybi> lak: None of my execs use "cat" as far as I know... | ||
| [2009/04/20 18:14:15] * Djelibeybi will go prodding, to see if any of the juniors have done anything silly | ||
| [2009/04/20 18:15:01] <grim_radical> lak: hmm, I'd expect that to just add the edge to the list/set | ||
| [2009/04/20 18:15:02] <masterzen> grim_radical: I was told the MBARI patches will gain you an extra 30% in performance. Never tried it by myself, but might be worth checking. | ||
| [2009/04/20 18:15:11] <masterzen> s/gain/give/ | ||
| [2009/04/20 18:15:15] <grim_radical> masterzen: MBARI? | ||
| [2009/04/20 18:15:59] <masterzen> grim_radical: see: http://sites.google.com/site/brentsrubypatches/ | ||
| [2009/04/20 18:16:08] <grim_radical> masterzen: cool, thx | ||
| [2009/04/20 18:16:34] <masterzen> evaluation of those was on my TODO list, but you know...never evning todo list :-) | ||
| [2009/04/20 18:17:09] @ Quit: cwebber: | ||
| [2009/04/20 18:17:13] <Djelibeybi> lak: how can I be spawning an exec that Puppet is not expecting? | ||
| [2009/04/20 18:18:12] @ barnoid_ joined channel #puppet | ||
| [2009/04/20 18:18:28] <nigelk> Djelibeybi: it's not a fact gone mad? | ||
| [2009/04/20 18:18:47] <nigelk> can you reproduce it by simply evaluating all your facts outside of puppet? | ||
| [2009/04/20 18:19:09] <Djelibeybi> nigelk: Hmm, could be. I do use cat in a custom fact. | ||
| [2009/04/20 18:19:20] <lak> grim_radical: just emailed you a patch that appears to fix it so the sets work (at least, all tests pass) | ||
| [2009/04/20 18:19:30] <grim_radical> sweet...I'll try that out ASAP | ||
| [2009/04/20 18:19:47] @ joe-mac joined channel #puppet | ||
| [2009/04/20 18:19:48] @ randybias joined channel #puppet | ||
| [2009/04/20 18:19:48] @ alfism joined channel #puppet | ||
| [2009/04/20 18:19:48] @ rektide joined channel #puppet | ||
| [2009/04/20 18:19:48] @ LapTop006 joined channel #puppet | ||
| [2009/04/20 18:19:48] @ Superfly_ joined channel #puppet | ||
| [2009/04/20 18:19:48] @ bolt joined channel #puppet | ||
| [2009/04/20 18:19:48] @ Telmo joined channel #puppet | ||
| [2009/04/20 18:19:48] @ spheromak joined channel #puppet | ||
| [2009/04/20 18:19:48] @ hamish joined channel #puppet | ||
| [2009/04/20 18:19:48] @ CompBrain joined channel #puppet | ||
| [2009/04/20 18:19:48] @ JD joined channel #puppet | ||
| [2009/04/20 18:19:48] @ Guest28542 is now known as bob2 | ||
| [2009/04/20 18:19:53] <Djelibeybi> nigelk: how do I get facter to see my custom facts on the command-line? | ||
| [2009/04/20 18:20:03] <lak> add --puppet | ||
| [2009/04/20 18:20:10] @ fbe__ joined channel #puppet | ||
| [2009/04/20 18:20:16] <lak> and set RUBYLIB in your shell environment if you've changed the vardir or libdir | ||
| [2009/04/20 18:20:18] @ bob2 is now known as Guest93773 | ||
| [2009/04/20 18:20:19] @ Quit: rsquared: "Leaving" | ||
| [2009/04/20 18:20:29] @ Quit: huggie: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 18:20:39] @ Quit: barnoid: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 18:21:14] <Djelibeybi> lak: still not seeing my custom facts show up | ||
| [2009/04/20 18:21:26] <Djelibeybi> I've set RUBYLIB to /var/lib/puppet/lib/facter | ||
| [2009/04/20 18:21:35] <Djelibeybi> Should it just be to /var/lib/puppet/lib perhaps? | ||
| [2009/04/20 18:21:54] <Djelibeybi> Ah, there we go | ||
| [2009/04/20 18:21:55] <lak> yep | ||
| [2009/04/20 18:22:14] <Djelibeybi> Ok, that doesn't increase the number of defunct cat processes | ||
| [2009/04/20 18:22:15] @ snafu joined channel #puppet | ||
| [2009/04/20 18:22:27] <lak> facter doesn't daemonize | ||
| [2009/04/20 18:22:45] <lak> when facter dies, so does its child processes waiting to tell their parent processes about their lives | ||
| [2009/04/20 18:22:48] <Djelibeybi> lak: yes, good point. | ||
| [2009/04/20 18:23:05] * Djelibeybi needs some kind person to rewrite his dodgy facts into actual Ruby. :) | ||
| [2009/04/20 18:23:33] @ huggie joined channel #puppet | ||
| [2009/04/20 18:32:14] @ Quit: masterzen: "Exploring other worlds" | ||
| [2009/04/20 18:32:57] @ Guest93773 is now known as bob2 | ||
| [2009/04/20 18:33:25] @ Quit: fbe_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 18:33:32] @ Quit: bobbyz_: "Leaving" | ||
| [2009/04/20 18:33:48] @ cwebber joined channel #puppet | ||
| [2009/04/20 18:33:55] @ Quit: steven_d: | ||
| [2009/04/20 18:34:44] @ Quit: cwebber: Client Quit | ||
| [2009/04/20 18:39:16] @ PaulWay joined channel #puppet | ||
| [2009/04/20 18:42:49] <Volcane> andrewcshafer: hah! donno which are the good confs to go to? never been to the states, so would need to get recommendations | ||
| [2009/04/20 18:43:04] <PaulWay> Go to Linux.conf.au! | ||
| [2009/04/20 18:43:13] <PaulWay> It's fun, cheap and in New Zealand next year! | ||
| [2009/04/20 18:43:54] <PaulWay> My problem: I've got a define that implements my Nagios NRPE monitoring - http://pastie.org/452920 | ||
| [2009/04/20 18:44:12] <andrewcshafer> Volcane: God knows I don't know which conferences would be good. LISA or SCALE maybe | ||
| [2009/04/20 18:44:12] * Volcane 's been to Auckland from London, took ~32 hours of travel | ||
| [2009/04/20 18:44:39] <andrewcshafer> Seems like someone should start a conference for admins that doesn't suck and is caught up to 2009 | ||
| [2009/04/20 18:44:56] <Volcane> hehe | ||
| [2009/04/20 18:45:17] * Volcane 's wanted to come last year, LISA looked ok but then ppl said it wasnt | ||
| [2009/04/20 18:45:22] <Volcane> not sure, its hard to say | ||
| [2009/04/20 18:45:38] <PaulWay> However, it seems that if I do two nagios::nrpe_command definitions with the same plugin, Puppet complains that I can't include the same plugin twice. | ||
| [2009/04/20 18:46:09] @ Quit: claymation: | ||
| [2009/04/20 18:46:25] <Volcane> PaulWay: each one needs a unique name ie. nagios::nrpe_command{"check_foo":....} and nagios::nrpe_command{"check_bar": ... } | ||
| [2009/04/20 18:47:01] <Volcane> where'd you get that define? /me 's recognising his code :P | ||
| [2009/04/20 18:47:08] @ randybias is now known as randybias|away | ||
| [2009/04/20 18:47:28] <andrewcshafer> I'm sure LISA had some high points, when one of the the main organizer goes out of his way to make a point that he doesn't use vim and wants you to know the flags he uses to compile vi, there is a bound to be... | ||
| [2009/04/20 18:47:39] <grim_radical> lak: wow...moving to Set objects + my @remove_vertex! changes result in a 60% reduction in running time | ||
| [2009/04/20 18:47:41] <PaulWay> Volcane: probably from you :-) | ||
| [2009/04/20 18:47:44] <PaulWay> I added a bit. | ||
| [2009/04/20 18:47:54] <grim_radical> lak: oh, this also includes your suggested change to Transaction#cleanup | ||
| [2009/04/20 18:47:54] <lak> grim_radical: shwing | ||
| [2009/04/20 18:48:02] <PaulWay> I'm definitely giving them a unique name. | ||
| [2009/04/20 18:48:04] <grim_radical> lak: shwing indeed | ||
| [2009/04/20 18:48:12] <Volcane> PaulWay: show where you use it and the error | ||
| [2009/04/20 18:48:27] <PaulWay> OK, one moment while I break it ;-) | ||
| [2009/04/20 18:48:45] <grim_radical> ok, I'm going to run this through our automated testing system and see what comes out. Hopefully I'll have a set of patches for you tomorrow some time | ||
| [2009/04/20 18:49:00] * Volcane might have to go pick up his better half in 5 minutes, so dont break it if me not being here will suck :P | ||
| [2009/04/20 18:49:21] <lak> Volcane: i recommend linux.conf.au, oscon, and velocity, in that order | ||
| [2009/04/20 18:49:35] <lak> lisa if you really like academic sysadmin stuff that hasn't changed much since 1993 | ||
| [2009/04/20 18:49:35] <Volcane> i think velocity was the one i considered last year | ||
| [2009/04/20 18:49:53] <lak> grim_radical: sounds good | ||
| [2009/04/20 18:50:04] <PaulWay> err: Could not retrieve catalog: Puppet::Parser::AST::Resource failed with error ArgumentError: Duplicate definition: Package[nagios-plugins-file_age] is already defined in file /etc/puppet/modules/nagios/manifests/init.pp at line (48); cannot redefine at /etc/puppet/modules/nagios/manifests/init.pp:(48) | ||
| [2009/04/20 18:50:14] <Volcane> but traveling london->new zeeland juist isnt gonna happen for me every again i dont think :P | ||
| [2009/04/20 18:50:17] <PaulWay> (48) is the line in the paste that I linked to above. | ||
| [2009/04/20 18:50:26] @ claymation joined channel #puppet | ||
| [2009/04/20 18:50:33] <Volcane> PaulWay: ah | ||
| [2009/04/20 18:50:40] <Volcane> PaulWay: dont include hte package int he define | ||
| [2009/04/20 18:50:57] <PaulWay> Hmmm. | ||
| [2009/04/20 18:51:02] <Volcane> PaulWay: make a class to install nagios, do the package there, even in the define you need unique resource names, package{$nagios_plugin: } would not be | ||
| [2009/04/20 18:51:43] <Volcane> though i can see how that would suck, perhaps you could use virtual packages, but then you'd still need to somewhere define the list of available plugins | ||
| [2009/04/20 18:52:04] @ Quit: bobbyz: "Leaving" | ||
| [2009/04/20 18:53:12] * Volcane 's integrated his puppetview into this machdb thing (www.machdb.org) | ||
| [2009/04/20 18:53:17] <Volcane> hopefully the person will take patches | ||
| [2009/04/20 18:53:29] <PaulWay> The problem is that I don't want to have any one module be the 'owner' of the package - i.e. to have to have one module responsible for defining all the plugins, or to have the module that first uses that plugin responsible for defining it. | ||
| [2009/04/20 18:53:48] <Volcane> PaulWay: yup, why i said i can tell how this would suck for you :P | ||
| [2009/04/20 18:53:50] @ Quit: markl_: "Lost terminal" | ||
| [2009/04/20 18:54:13] <Volcane> PaulWay: however, with virtual packages you can have one file that does @@package{$allnagiosplugins: ensure => present} | ||
| [2009/04/20 18:54:28] <PaulWay> Hmmmm. | ||
| [2009/04/20 18:54:33] <Volcane> and then in each nrpe define you do realize(Package[$plugin]) | ||
| [2009/04/20 18:54:43] <Volcane> then it will only actually *install* the ones that gets reailzed | ||
| [2009/04/20 18:54:51] <PaulWay> The 'one module that defines all the plugins' approach is ugly but workable. | ||
| [2009/04/20 18:54:57] <Volcane> but you'd need to create the list somewhere | ||
| [2009/04/20 18:55:17] <PaulWay> I can put that in the nagios module - that seems the logical place for it. | ||
| [2009/04/20 18:55:38] @ Quit: joe-mac: "Leaving." | ||
| [2009/04/20 18:55:43] @ Quit: fbe__: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 18:57:01] <PaulWay> Should I put it in the init.pp file or create a separate file, and if the latter do I have to do anything to have it included? | ||
| [2009/04/20 18:57:29] <Volcane> i have a module packages::virt - all the virtual packages there, it gets included on all my machines | ||
| [2009/04/20 18:57:59] <PaulWay> Volcane: I'm new to virtual packages - let me look up how to do it... | ||
| [2009/04/20 18:58:07] <Volcane> ok | ||
| [2009/04/20 18:58:52] @ cwebber joined channel #puppet | ||
| [2009/04/20 18:59:07] @ Quit: erm_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 18:59:45] <bevans5446> has anyone here had any luck rebuilding the Ruby RPMs for Centos 5? | ||
| [2009/04/20 19:00:08] <Volcane> is the supplied ruby no good? | ||
| [2009/04/20 19:00:46] <bevans5446> There si a memory leak | ||
| [2009/04/20 19:00:54] <Volcane> ahy | ||
| [2009/04/20 19:00:59] <Volcane> not tried | ||
| [2009/04/20 19:01:00] <bevans5446> http://reductivelabs.com/trac/puppet/wiki/PuppetRedHatCentos | ||
| [2009/04/20 19:01:02] @ ijcd_ joined channel #puppet | ||
| [2009/04/20 19:01:26] <PaulWay> bevans5446: now that's useful to know. | ||
| [2009/04/20 19:01:37] <PaulWay> Do you know if that also affects Red Hat? | ||
| [2009/04/20 19:01:57] <bevans5446> yeah, it's the ruby RPMS in RHEL 4 & 5 | ||
| [2009/04/20 19:02:20] <bevans5446> or maybe just 5, I personally haven't seen it on 4 yet | ||
| [2009/04/20 19:02:48] @ Quit: lak: | ||
| [2009/04/20 19:03:15] <PaulWay> OK, I'm running RHEL 4 - I'll breathe a little easier. | ||
| [2009/04/20 19:03:17] @ Quit: alfism: "Connection reset by beer" | ||
| [2009/04/20 19:04:00] <Djelibeybi> bevans5446: also managed to some degree by restarting the puppet daemon on a daily basis, if you don't want to upgrade the RPMs. | ||
| [2009/04/20 19:04:17] <PaulWay> I had some puppet daemons just freeze and never finish their runs over the weekend, and I'm wondering what caused it. | ||
| [2009/04/20 19:04:51] <bevans5446> Djelibeybi: I could do that, but I'd like to fix the root of the problem | ||
| [2009/04/20 19:04:54] <PaulWay> service{ "puppetd": restart => daily; } :-) | ||
| [2009/04/20 19:05:09] <Djelibeybi> bevans5446: oh, sure. In which case, there should be a RHEL Bugzilla on this. :) | ||
| [2009/04/20 19:05:20] <bevans5446> ahhh....good point | ||
| [2009/04/20 19:06:13] @ Quit: voixd: Read error: 110 (Connection timed out) | ||
| [2009/04/20 19:07:33] @ randybias|away is now known as randybias | ||
| [2009/04/20 19:08:17] <Djelibeybi> Anyone know where I find doco on enabling splay time for the puppet clients? | ||
| [2009/04/20 19:08:44] @ Quit: fdz: "Leaving." | ||
| [2009/04/20 19:09:41] @ Quit: ijcd: Read error: 110 (Connection timed out) | ||
| [2009/04/20 19:11:22] <andrewcshafer> Djelibeybi: http://reductivelabs.com/trac/puppet/wiki/ConfigurationReference search for splay, you can add it to the puppet.conf | ||
| [2009/04/20 19:11:32] <Djelibeybi> andrewcshafer: ta muchly. | ||
| [2009/04/20 19:12:33] @ mfoster left channel #puppet () | ||
| [2009/04/20 19:13:26] @ nakano is now known as nakano_ | ||
| [2009/04/20 19:14:02] @ Quit: schwagala: Read error: 60 (Operation timed out) | ||
| [2009/04/20 19:15:20] <eythian> If I were to set variables in the node definition for a machine, would they behave exactly the same as though they were picked up as facts? | ||
| [2009/04/20 19:15:44] <Volcane> pretty much | ||
| [2009/04/20 19:16:55] <eythian> cool. That makes something a lot easier. | ||
| [2009/04/20 19:18:16] @ schwagala joined channel #puppet | ||
| [2009/04/20 19:21:00] <PaulWay> Nice - my config rewrite worked first go! | ||
| [2009/04/20 19:21:12] <PaulWay> I must be subconsciously understanding the puppet language syntax. | ||
| [2009/04/20 19:23:38] <travisbrady> is "command => $fqdn ? {("somehost" or "someotherhost") => "something", default ="/bin/true"}" valid? | ||
| [2009/04/20 19:26:39] @ collier_s joined channel #puppet | ||
| [2009/04/20 19:28:00] <Volcane> try $fqdn ? { foo,bar => "something" } | ||
| [2009/04/20 19:28:09] <Volcane> works in a case, might work for selectors | ||
| [2009/04/20 19:28:09] @ Quit: schwagala: Operation timed out | ||
| [2009/04/20 19:29:13] @ schwagala joined channel #puppet | ||
| [2009/04/20 19:29:25] @ MrProper_ joined channel #puppet | ||
| [2009/04/20 19:30:03] <Volcane> ooh, reports have improved a bit since last time i looked into them | ||
| [2009/04/20 19:30:19] <Volcane> yaml files now show how much time was spent on each type of resource, nice | ||
| [2009/04/20 19:30:40] <MrProper_> jamesturnbull, hey james, do you mind if i add a common pitfall section to the following wiki page: http://reductivelabs.com/trac/puppet/wiki/CertificatesAndSecurity | ||
| [2009/04/20 19:31:18] <Volcane> not sure he's around, but any additional info on CertificateHell would be awesome | ||
| [2009/04/20 19:32:01] <MrProper_> Volcane, i've been bitten by the local clocks being out of sync too many times with respect to certificate verification | ||
| [2009/04/20 19:32:09] <Volcane> hehe | ||
| [2009/04/20 19:32:55] @ voixd joined channel #puppet | ||
| [2009/04/20 19:34:15] @ shake-n-bake joined channel #puppet | ||
| [2009/04/20 19:34:24] <devicenull> dnsdomainname: Unknown host | ||
| [2009/04/20 19:34:30] <devicenull> why do I get that when I first start up puppetd? | ||
| [2009/04/20 19:34:44] <devicenull> it seems to run fine | ||
| [2009/04/20 19:35:13] <eythian> devicenull: does the machine know the IP address of its own hostname? | ||
| [2009/04/20 19:35:17] <Volcane> what does dnsdomainname say when you run it? | ||
| [2009/04/20 19:35:19] <devicenull> nope | ||
| [2009/04/20 19:35:45] <devicenull> sec need to wait until this run finishes, but yea its using a domain name that doesnt actually exist for testing | ||
| [2009/04/20 19:36:04] <devicenull> it's an amazing thing watching a machine set itself up correctly :D | ||
| [2009/04/20 19:36:15] <PaulWay> mmmmm - I love it. | ||
| [2009/04/20 19:36:31] <eythian> devicenull: perhaps put it's full name in /etc/hosts as 127.0.1.1 or something. | ||
| [2009/04/20 19:36:46] <devicenull> eythian, yea it doesn't seem to break anything, and only happens on my vmware testing client | ||
| [2009/04/20 19:36:49] @ lak joined channel #puppet | ||
| [2009/04/20 19:36:51] <devicenull> so, I'll just ignore it | ||
| [2009/04/20 19:37:39] <eythian> devicenull: OK, but if you get errors with other programs, it'd be the first place I'd look. | ||
| [2009/04/20 19:38:01] <devicenull> I will, but given that this is only to test puppet installs thats unlikely | ||
| [2009/04/20 19:38:12] <eythian> ah right. That's not so bad then | ||
| [2009/04/20 19:39:55] <devicenull> any ideas for how I could remove three packages at once? | ||
| [2009/04/20 19:40:02] <devicenull> using package ensure=>absent doesnt work | ||
| [2009/04/20 19:40:20] <devicenull> I'm using exec { "yum remove -y yp-tools ypbind portmap" now | ||
| [2009/04/20 19:40:23] <devicenull> but it seems hacky | ||
| [2009/04/20 19:42:57] @ Quit: madrescher: Read error: 113 (No route to host) | ||
| [2009/04/20 19:43:05] @ madrescher joined channel #puppet | ||
| [2009/04/20 19:45:42] <jrojas> devicenull: there is no real good way to remove packages, especially with yum | ||
| [2009/04/20 19:46:37] <jrojas> devicenull: since you can define a package in puppet (ie php5) it will automagically install php5's dependencies, and the dependencies dependencies. so in most situations removing packages just doesnt work | ||
| [2009/04/20 19:46:59] <devicenull> yea in this case it has circular dependencies | ||
| [2009/04/20 19:47:03] <devicenull> yp-tools depends on ypbind | ||
| [2009/04/20 19:47:07] <devicenull> ypbind depends on yp-tools | ||
| [2009/04/20 19:47:23] <jrojas> devicenull: unless, you hack up the yum provider and include groupinstall/groupremove and maintain a groups file that accounts for all deps in your internal yum repo. | ||
| [2009/04/20 19:47:35] <PaulWay> That sounds wrong - no rpm package can have circular dependencies. | ||
| [2009/04/20 19:47:48] <Cuchulain> sure it can. | ||
| [2009/04/20 19:47:58] <devicenull> PaulWay, the remove was failing with errors indicating that | ||
| [2009/04/20 19:48:10] <PaulWay> OK, no, you're right, I've got it now. | ||
| [2009/04/20 19:48:21] <PaulWay> I was thinking of a bootstrapping problem but this is different. | ||
| [2009/04/20 19:48:21] @ Quit: lak: | ||
| [2009/04/20 19:48:38] <PaulWay> We need some powerful device to trap lak in the room :-) | ||
| [2009/04/20 19:48:57] <jrojas> Why, hes not a package maintainer, just a puppet developer :) | ||
| [2009/04/20 19:49:14] <PaulWay> Heh. | ||
| [2009/04/20 19:49:55] <jrojas> PaulWay: if you ever want to see some fun circular rpm dependencies, check out libxml2 and xml sax and all the perl related xml crap | ||
| [2009/04/20 19:49:58] <jrojas> its a nightmare | ||
| [2009/04/20 19:50:12] <PaulWay> Don't get me started on the XMLTV dependencies... | ||
| [2009/04/20 19:50:32] <jrojas> hehe | ||
| [2009/04/20 19:50:51] @ gebi_ joined channel #puppet | ||
| [2009/04/20 19:51:00] <PaulWay> "We're going to depend on a version of the XML package that hasn't been released yet!" | ||
| [2009/04/20 19:51:03] <PaulWay> "Muahahahahahah!" | ||
| [2009/04/20 19:51:03] <devicenull> lol | ||
| [2009/04/20 19:51:25] <devicenull> tbh, I've found apt does a much better job of dealing with dependencies then yum | ||
| [2009/04/20 19:51:34] @ mikepea joined channel #puppet | ||
| [2009/04/20 19:51:37] <devicenull> I've had yum just completely give up when a package required another package | ||
| [2009/04/20 19:52:36] <jrojas> ive just gotten into the habit of keeping a base centos repo untouched for kicking machines, then my custom repo, which has rpms that are built on clean environments thanks to mock | ||
| [2009/04/20 19:53:28] <devicenull> yea I don't have a custom repository yet since atm I don't have a need | ||
| [2009/04/20 19:54:15] @ Quit: ijcd_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 19:54:33] @ randybias is now known as randybias|away | ||
| [2009/04/20 19:58:56] @ Quit: thijso: Read error: 113 (No route to host) | ||
| [2009/04/20 19:59:20] @ Quit: cwebber: | ||
| [2009/04/20 20:01:43] @ Quit: gebi: Read error: 110 (Connection timed out) | ||
| [2009/04/20 20:02:32] @ mib_2w3x78 joined channel #puppet | ||
| [2009/04/20 20:03:54] @ etaylor joined channel #puppet | ||
| [2009/04/20 20:04:40] @ Quit: mib_2w3x78: Client Quit | ||
| [2009/04/20 20:04:40] <gepetto> ::trac:: Certificates And Security edited by mrproper @ http://reductivelabs.com/trac/puppet/wiki/CertificatesAndSecurity (by brendan@sitesuite.com.au) | ||
| [2009/04/20 20:12:46] @ Quit: smooge: "-ENOCAFFEINE" | ||
| [2009/04/20 20:13:56] <sigmonsays> jrojas, how is mock better than a dedicated build server? | ||
| [2009/04/20 20:15:42] <nigelk> huh. Do plugins in modules now work with environments? When did that get fixed? | ||
| [2009/04/20 20:22:15] @ unxfrek joined channel #puppet | ||
| [2009/04/20 20:22:50] <jrojas> sigmonsays: mock creates a chroot via yum, that just installs a bare minimum base, so you dont have any tainted packages installed when you build something. | ||
| [2009/04/20 20:23:08] <jrojas> sigmonsays: use mock + hudson or cc.rb and you are set for rpm building | ||
| [2009/04/20 20:23:42] <sigmonsays> ah, so you don't pull in any crazy deps | ||
| [2009/04/20 20:23:46] <sigmonsays> that sounds like a good idea | ||
| [2009/04/20 20:24:03] <jrojas> sigmonsays: exactly, and on top of it, you keep the spec files/sources in a scm, so you can provide accountability | ||
| [2009/04/20 20:24:24] @ randybias|away is now known as randybias | ||
| [2009/04/20 20:24:35] <sigmonsays> jrojas, indeed. I do that now | ||
| [2009/04/20 20:24:42] <sigmonsays> I just don't use a build env | ||
| [2009/04/20 20:24:53] <sigmonsays> (apart from a kickstarted puppet machine :)) | ||
| [2009/04/20 20:25:08] <jrojas> well when i came to this company, the yumrepo/kickstart/lack of puppet was horrible | ||
| [2009/04/20 20:25:36] <jrojas> the old yum repo contained packages for 3 or 4 different versions of centOS | ||
| [2009/04/20 20:25:59] <jrojas> and I think that they even spanned diff gcc versions which caused hell. | ||
| [2009/04/20 20:28:48] @ Quit: voixd: Read error: 110 (Connection timed out) | ||
| [2009/04/20 20:30:07] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/04/20 20:34:36] @ Kostagr33k joined channel #puppet | ||
| [2009/04/20 20:37:07] @ Quit: ezmob: "Bye!" | ||
| [2009/04/20 20:45:15] @ Quit: travisbrady: | ||
| [2009/04/20 20:46:52] @ Quit: randybias: "Leaving..." | ||
| [2009/04/20 20:53:12] @ Quit: nigelk: | ||
| [2009/04/20 20:56:20] @ Quit: kingitchy: | ||
| [2009/04/20 21:04:22] @ Quit: Kostagr33k: | ||
| [2009/04/20 21:15:11] @ Quit: collier_s: Read error: 110 (Connection timed out) | ||
| [2009/04/20 21:31:30] @ collier_s joined channel #puppet | ||
| [2009/04/20 21:34:16] @ Demosthenes joined channel #puppet | ||
| [2009/04/20 21:34:51] @ Quit: unxfrek: "Leaving" | ||
| [2009/04/20 21:34:59] @ Quit: gaveen: Read error: 60 (Operation timed out) | ||
| [2009/04/20 21:35:14] @ Quit: fujin: | ||
| [2009/04/20 21:35:30] @ fujin joined channel #puppet | ||
| [2009/04/20 21:43:29] @ Quit: keithlard: | ||
| [2009/04/20 21:43:37] @ lak joined channel #puppet | ||
| [2009/04/20 21:45:38] @ keithlard joined channel #puppet | ||
| [2009/04/20 21:50:12] @ Quit: shake-n-bake: | ||
| [2009/04/20 21:53:10] @ gaveen joined channel #puppet | ||
| [2009/04/20 22:00:09] @ Quit: lak: | ||
| [2009/04/20 22:03:37] @ voixd joined channel #puppet | ||
| [2009/04/20 22:06:53] @ WALoeIII joined channel #puppet | ||
| [2009/04/20 22:13:11] @ Quit: jmeeuwen: "Disconnecting from stoned server." | ||
| [2009/04/20 22:13:48] @ jmeeuwen joined channel #puppet | ||
| [2009/04/20 22:14:06] @ travisbrady joined channel #puppet | ||
| [2009/04/20 22:23:03] @ Quit: claymation: | ||
| [2009/04/20 22:31:31] @ jtimberman_ joined channel #puppet | ||
| [2009/04/20 22:32:57] @ axisys_ joined channel #puppet | ||
| [2009/04/20 22:36:31] @ chip__ joined channel #puppet | ||
| [2009/04/20 22:37:24] @ Quit: mikepea: | ||
| [2009/04/20 22:46:46] @ Quit: keithlard: | ||
| [2009/04/20 22:47:53] @ Quit: jtimberman: Read error: 110 (Connection timed out) | ||
| [2009/04/20 22:48:46] @ ohadlevy joined channel #puppet | ||
| [2009/04/20 22:49:55] @ Quit: axisys: Read error: 110 (Connection timed out) | ||
| [2009/04/20 22:51:57] @ kingitchy joined channel #puppet | ||
| [2009/04/20 22:52:46] @ Quit: atlan_: Read error: 110 (Connection timed out) | ||
| [2009/04/20 22:57:25] @ axisys joined channel #puppet | ||
| [2009/04/20 23:00:22] @ Quit: jtimberman_: "Quitters never win [at irc]." | ||
| [2009/04/20 23:04:49] @ Quit: axisys_: Read error: 60 (Operation timed out) | ||
| [2009/04/20 23:06:56] @ nigelk joined channel #puppet | ||
| [2009/04/20 23:08:45] @ nigelk_ joined channel #puppet | ||
| [2009/04/20 23:10:06] <eythian> I'm setting a variable in my node definition, and it has a '.' in the value. Puppet says: Could not parse for environment production: Syntax error at '.'; expected '}' at /etc/puppet/manifests/nodes.pp:89 | ||
| [2009/04/20 23:10:27] <eythian> I've wrapped the string in quotes, backslashed out the '.', etc but it doesn't seem happy about it. | ||
| [2009/04/20 23:12:10] <eythian> oh, I have to wrap all the strings in quotes. Duh. Fixed. | ||
| [2009/04/20 23:24:03] @ randybias joined channel #puppet | ||
| [2009/04/20 23:24:04] @ Quit: eythian: Read error: 104 (Connection reset by peer) | ||
| [2009/04/20 23:24:36] @ lak joined channel #puppet | ||
| [2009/04/20 23:27:08] @ Quit: nigelk: Read error: 110 (Connection timed out) | ||
| [2009/04/20 23:27:31] @ axisys_ joined channel #puppet | ||
| [2009/04/20 23:29:53] @ eythian joined channel #puppet | ||
| [2009/04/20 23:30:54] <eythian> if I have a 'creates' on an exec and it gets a notify, will it run regardless of the state of the 'creates'? | ||
| [2009/04/20 23:31:19] <eythian> Alternately, how can I send it a notify if a directory doesn't exist? | ||
| [2009/04/20 23:32:05] <ohadlevy> file{"directory": ensure => directory, notify =>Exec..} | ||
| [2009/04/20 23:32:54] <eythian> ohadlevy: but that will create the directory. The exec is really what creates it, and I want it to be run if it doesn't exist. | ||
| [2009/04/20 23:33:26] <ohadlevy> if you dont want to have the dir manage by puppet, create another exec which checks for the dir and return the correct exit code | ||
| [2009/04/20 23:33:35] <ohadlevy> or | ||
| [2009/04/20 23:34:02] <ohadlevy> onlyif => 'test -d /directory' | ||
| [2009/04/20 23:34:30] <eythian> will onlyif be overridden by a notify from something else? | ||
| [2009/04/20 23:34:48] <ohadlevy> I'm not sure, try it :) | ||
| [2009/04/20 23:35:29] <eythian> hmm, OK | ||
| [2009/04/20 23:37:17] <eythian> No wait, it won't, because I have to have refreshonly=>true on anyway. | ||
| [2009/04/20 23:37:45] <eythian> Oh well, I'll just remember to keep an eye on that part of the setup. | ||
| [2009/04/20 23:45:48] @ Quit: fujin: | ||
| [2009/04/20 23:47:23] @ keyur joined channel #puppet | ||
| [2009/04/20 23:48:11] @ fujin joined channel #puppet | ||
| [2009/04/20 23:49:40] @ Quit: axisys: Read error: 110 (Connection timed out) | ||
| [2009/04/20 23:57:47] @ axisys joined channel #puppet |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!