Tuesday, 2009-05-05

[2009/05/05 00:01:28] @ Log started by gepetto
[2009/05/05 00:01:28] @ bgupta joined channel #puppet
[2009/05/05 00:03:19] @ Quit: pdt:
[2009/05/05 00:12:02] @ Quit: d3vilb0x:
[2009/05/05 00:14:24] @ Quit: fujin:
[2009/05/05 00:18:52] @ Demosthenes joined channel #puppet
[2009/05/05 00:21:59] @ edwardam joined channel #puppet
[2009/05/05 00:39:17] @ pietro joined channel #puppet
[2009/05/05 01:14:33] @ Kyreeth joined channel #puppet
[2009/05/05 01:24:38] @ plathrop-away is now known as plathrop
[2009/05/05 01:30:36] @ Quit: Kindred: Read error: 104 (Connection reset by peer)
[2009/05/05 01:30:41] @ Kindred joined channel #puppet
[2009/05/05 01:52:10] @ Quit: edwardam: Remote closed the connection
[2009/05/05 01:54:18] @ plathrop is now known as plathrop-away
[2009/05/05 01:55:25] @ fujin joined channel #puppet
[2009/05/05 02:03:09] @ mattock joined channel #puppet
[2009/05/05 02:07:05] @ jnewland joined channel #puppet
[2009/05/05 02:10:30] @ ghenry joined channel #puppet
[2009/05/05 02:13:55] @ Quit: kolla: Read error: 113 (No route to host)
[2009/05/05 02:19:06] @ Quit: sts: Read error: 60 (Operation timed out)
[2009/05/05 02:19:19] @ sts joined channel #puppet
[2009/05/05 02:26:39] @ Quit: fbe: Read error: 110 (Connection timed out)
[2009/05/05 02:28:01] @ pleemans joined channel #puppet
[2009/05/05 02:29:12] @ Quit: alban2: Read error: 60 (Operation timed out)
[2009/05/05 02:29:37] @ johan-s joined channel #puppet
[2009/05/05 02:30:46] @ PsychoSid joined channel #puppet
[2009/05/05 02:40:08] @ Quit: johan-s: "Leaving..."
[2009/05/05 02:47:38] @ DavidS joined channel #puppet
[2009/05/05 02:49:49] @ kolla joined channel #puppet
[2009/05/05 02:57:03] @ Quit: Kyreeth: "Client exiting"
[2009/05/05 03:06:41] @ johan-s joined channel #puppet
[2009/05/05 03:07:10] @ squiddle joined channel #puppet
[2009/05/05 03:07:39] @ Quit: shake-n-bake: Read error: 60 (Operation timed out)
[2009/05/05 03:11:01] @ MarlondB joined channel #puppet
[2009/05/05 03:11:01] @ PsychoSid1 joined channel #puppet
[2009/05/05 03:16:26] @ nasrat joined channel #puppet
[2009/05/05 03:16:45] @ monzie joined channel #puppet
[2009/05/05 03:16:47] @ Ladeburger1 left channel #puppet ("Leaving.")
[2009/05/05 03:20:00] @ Quit: PsychoSid: Read error: 110 (Connection timed out)
[2009/05/05 03:20:43] <FiXion> morning :)
[2009/05/05 03:21:00] <FiXion> btw. I found out why puppet can't downgrade packages (using apt atleast)
[2009/05/05 03:21:24] <FiXion> apt requires a --force-yes if it sees it's an older version you want to install, than what's installed.
[2009/05/05 03:22:04] <FiXion> I was thinking that the apt-provider should add a --force-yes, when it sees that the same package is installed in a newer version - so that it shows apt that it is doing what it intends to do.
[2009/05/05 03:22:24] @ DerekW joined channel #puppet
[2009/05/05 03:24:18] <FiXion> dpkg has a --force-downgrade ..but alas
[2009/05/05 03:41:14] <FiXion> langseth: for now I use the mount resource - it also adds the mount option to fstab
[2009/05/05 03:55:38] @ MattyM joined channel #puppet
[2009/05/05 03:58:06] @ Quit: zoeloelip: Remote closed the connection
[2009/05/05 03:58:08] @ zoeloelip joined channel #puppet
[2009/05/05 03:59:25] @ Quit: andrewcshafer:
[2009/05/05 04:00:50] @ alban2 joined channel #puppet
[2009/05/05 04:01:32] @ zeroXten joined channel #puppet
[2009/05/05 04:04:50] <johan-s> is there something along the somevar ||= "default value" ruby idioum
[2009/05/05 04:04:59] <johan-s> in puppet?
[2009/05/05 04:05:28] <johan-s> s/idioum/idiom
[2009/05/05 04:06:51] <johan-s> I think I should be able to do $real_var = $var ? {''=>"default val", default => $var} but that's a tad ugly
[2009/05/05 04:07:03] <Volcane> use a case
[2009/05/05 04:07:14] <Volcane> but yeah that also works
[2009/05/05 04:07:23] <Volcane> there's no shorthand way
[2009/05/05 04:08:37] @ tim|mb joined channel #puppet
[2009/05/05 04:12:04] @ DavidS1 joined channel #puppet
[2009/05/05 04:12:38] @ Quit: DavidS: Nick collision from services.
[2009/05/05 04:12:42] @ DavidS1 is now known as DavidS
[2009/05/05 04:14:21] <johan-s> I guess I don't really have to jump through the $real_var hoop either..
[2009/05/05 04:17:04] <Volcane> sometimes unavoidable, its a major pita
[2009/05/05 04:21:48] @ HarryCalahan joined channel #puppet
[2009/05/05 04:27:06] @ aymerick joined channel #puppet
[2009/05/05 04:41:22] @ bbot__ joined channel #puppet
[2009/05/05 04:43:24] <macbar_> what's wrong with http://reductivelabs.com/trac/naginator ?
[2009/05/05 04:44:00] @ Eghie joined channel #puppet
[2009/05/05 04:57:50] @ Quit: rawleto_: Read error: 113 (No route to host)
[2009/05/05 04:59:18] @ verwilst joined channel #puppet
[2009/05/05 05:09:06] @ gebi_ is now known as gebi
[2009/05/05 05:13:23] <dene> ls
[2009/05/05 05:16:07] @ mikepea joined channel #puppet
[2009/05/05 05:20:52] @ Quit: mikepea: Client Quit
[2009/05/05 05:22:03] @ glaw joined channel #puppet
[2009/05/05 06:01:06] @ melopt joined channel #puppet
[2009/05/05 06:12:40] @ keithlard joined channel #puppet
[2009/05/05 06:16:19] @ nakano is now known as nakano_
[2009/05/05 06:16:33] @ Quit: keithlard: Client Quit
[2009/05/05 06:16:49] <jenza> Many people use cobbler and puppet at all?
[2009/05/05 06:19:47] @ keithlard joined channel #puppet
[2009/05/05 06:21:12] <huggie> jenza: we do.
[2009/05/05 06:22:14] <jenza> Work pretty well?
[2009/05/05 06:22:36] <jenza> Do you use cobbler to configure puppet node definitions at all?
[2009/05/05 06:22:58] @ Quit: kolla: Remote closed the connection
[2009/05/05 06:23:38] <huggie> jenza: We don't use it like that. We've got a separate puppet node classifier.
[2009/05/05 06:23:51] <jenza> Ok, what do you use it for? the Initial boot?
[2009/05/05 06:24:06] <jenza> to install a bare bones box then use puppet to push out the rest?
[2009/05/05 06:24:14] <huggie> jenza: We were going to drive cobbler config out of a central DB but never quite got that far. Once the main config is setup cobbler add is fairly cheap to do.
[2009/05/05 06:24:35] <huggie> jenza: Yeah, cobbler does the base install and some tweaks to get puppet up and running to build the rest of it.
[2009/05/05 06:24:45] <huggie> jenza: We also have some puppet config to build our local build servers :)
[2009/05/05 06:24:54] <huggie> Nothing very special though.
[2009/05/05 06:24:57] <jenza> Right
[2009/05/05 06:25:29] <jenza> Cool, that's what I thought it'd be good for. There seems to be a little bit of an overlap, cobbler looks like it tries to do a lot of stuff
[2009/05/05 06:25:40] <jenza> but looks like they can go togeher pretty well
[2009/05/05 06:27:01] <jenza> What external node classifier do you use?
[2009/05/05 06:27:04] <jenza> iClassify?
[2009/05/05 06:28:08] * Volcane 's avoid iclassify at this point
[2009/05/05 06:28:43] <huggie> jenza: We wrote our own. We had a central DB of all our hosts already.
[2009/05/05 06:28:54] <jenza> Cool
[2009/05/05 06:29:03] <jenza> Volcane: What would you recommend?
[2009/05/05 06:29:39] <Volcane> i dont know, anything but something by a company who has devloped a puppet compeitor and who has no further inclination to maintain iclassify as a good puppet classifier :P
[2009/05/05 06:30:18] <jenza> oh, did opscode develop it?
[2009/05/05 06:30:32] <Volcane> hjk yeah
[2009/05/05 06:31:15] <jenza> I see
[2009/05/05 06:44:09] @ mikepea joined channel #puppet
[2009/05/05 06:49:54] @ Quit: erm_: Read error: 110 (Connection timed out)
[2009/05/05 06:55:42] <DerekW> We threw something together in perl to generate the YAML files from a bunch of inputs (groups, members, etc). The ENC program is 'cat' :-)
[2009/05/05 07:03:02] @ Quit: alban2: Read error: 110 (Connection timed out)
[2009/05/05 07:13:18] @ Quit: Eghie: Read error: 110 (Connection timed out)
[2009/05/05 07:14:20] @ Eghie joined channel #puppet
[2009/05/05 07:22:55] @ Quit: lex: Read error: 110 (Connection timed out)
[2009/05/05 07:22:58] @ d3vilb0x joined channel #puppet
[2009/05/05 07:22:59] @ lex joined channel #puppet
[2009/05/05 07:38:38] @ Quit: keithlard: Read error: 145 (Connection timed out)
[2009/05/05 07:39:08] @ erm_ joined channel #puppet
[2009/05/05 07:44:30] @ fujin_ joined channel #puppet
[2009/05/05 07:49:10] <JD> what's the best way of checking to see if a variable starts "md"?
[2009/05/05 07:51:42] <JD> 'if "md" == regsubst($name,'^(..).*$','\\1') then'
[2009/05/05 07:51:50] <JD> would that work?
[2009/05/05 07:54:36] @ nigelk joined channel #puppet
[2009/05/05 07:55:20] <tim|mb> you should be able to leave out the $ in the regex, but I'd expect that to work, yeah
[2009/05/05 07:55:31] @ rdennis joined channel #puppet
[2009/05/05 07:58:54] <JD> tim|mb: it's a useful reminder that you intend it to go up until the end of the line.
[2009/05/05 07:58:59] <JD> I know it's redundant
[2009/05/05 07:59:06] <JD> :)
[2009/05/05 07:59:17] <tim|mb> ;-)
[2009/05/05 08:01:20] @ pdt joined channel #puppet
[2009/05/05 08:01:48] @ Quit: d3vilb0x:
[2009/05/05 08:02:05] @ Quit: fujin: Read error: 113 (No route to host)
[2009/05/05 08:02:24] <rdennis> new to this forum...2 probably simple questions but couldn't find the answers on the wiki or my searching
[2009/05/05 08:02:45] <rdennis> first is if i have lots of modules but want a client to just run one module how would i do that?
[2009/05/05 08:02:55] <rdennis> --tags foomodule ?
[2009/05/05 08:03:11] <tim|mb> rdennis: are you using puppet or puppetd on the client?
[2009/05/05 08:03:17] <rdennis> puppetd on the clinet
[2009/05/05 08:03:42] <tim|mb> then you only add that one module to the host definition for that host in your site.pp on the puppetmaster
[2009/05/05 08:04:10] <rdennis> i was looking for a way from the client to run just certain bits at a time
[2009/05/05 08:05:04] <tim|mb> never done that, but I think you'll need to copy over that module and use puppet instead of puppetd
[2009/05/05 08:05:06] <tim|mb> not sure though
[2009/05/05 08:05:26] <rdennis> second question -- how long until localconfig.yaml will be disregarded?
[2009/05/05 08:05:40] <rdennis> from a client run that is
[2009/05/05 08:05:52] <rdennis> i found puppetd going back to that even after i changed on the puppetmasterd
[2009/05/05 08:06:46] <tim|mb> then there must have been some error on the puppetmaster (in your manifest or modules perhaps?) since it shouldn't use localconfig.yaml if it can connect to the puppetmaster... it only uses the localconfig.yaml as a fallback in case of errors, afaik
[2009/05/05 08:07:14] <rdennis> ty
[2009/05/05 08:07:37] <tim|mb> check your puppetmaster logs, it should contain info if the client connected at all
[2009/05/05 08:12:05] @ mccune joined channel #puppet
[2009/05/05 08:12:26] @ Quit: nigelk_: Read error: 110 (Connection timed out)
[2009/05/05 08:18:14] @ fujin_ is now known as fujin
[2009/05/05 08:22:46] <rdennis> fwiw, using --tags [modulename] did end up working (initially it didn't for me, i must have had something else not working)
[2009/05/05 08:24:33] @ Quit: rdennis: "leaving"
[2009/05/05 08:24:41] @ Quit: asachs:
[2009/05/05 08:25:52] @ Quit: jbooth: Read error: 60 (Operation timed out)
[2009/05/05 08:26:31] @ Quit: schwagala: Read error: 54 (Connection reset by peer)
[2009/05/05 08:26:48] @ schwagala joined channel #puppet
[2009/05/05 08:28:19] @ artista_frustrad joined channel #puppet
[2009/05/05 08:28:29] @ jbooth joined channel #puppet
[2009/05/05 08:33:43] @ nakano_ is now known as nakano
[2009/05/05 08:37:07] <zeroXten> hmm, what would be a sane way to configure user/groups on a per server basis? Eg the admins group might user_a and user_b on host_a, but only user_a on host_b?
[2009/05/05 08:37:43] <zeroXten> but it would also be nice to apply such config to a class which could be inherited/used by certain types of hosts (e.g. webservers)
[2009/05/05 08:39:53] @ Quit: erm_: Read error: 110 (Connection timed out)
[2009/05/05 08:40:21] <Volcane> you'd probably need to set variables
[2009/05/05 08:42:10] <zeroXten> hmm
[2009/05/05 08:45:55] @ keithlard joined channel #puppet
[2009/05/05 08:52:29] @ Quit: axisys: Read error: 60 (Operation timed out)
[2009/05/05 08:58:30] @ joe-mac joined channel #puppet
[2009/05/05 08:59:50] @ Quit: keithlard: Read error: 145 (Connection timed out)
[2009/05/05 08:59:55] @ erm_ joined channel #puppet
[2009/05/05 09:01:16] @ keithlard joined channel #puppet
[2009/05/05 09:09:02] @ themurph joined channel #puppet
[2009/05/05 09:13:46] @ PsychoSid joined channel #puppet
[2009/05/05 09:14:27] @ DerekW_ joined channel #puppet
[2009/05/05 09:15:25] @ d3vilb0x joined channel #puppet
[2009/05/05 09:15:45] @ Innocenti joined channel #puppet
[2009/05/05 09:18:46] @ kambiz_away is now known as kambiz
[2009/05/05 09:22:59] @ Quit: mccune: Remote closed the connection
[2009/05/05 09:23:55] @ Quit: fujin: Read error: 104 (Connection reset by peer)
[2009/05/05 09:24:18] @ fujin joined channel #puppet
[2009/05/05 09:28:15] * ashp kicks puppet viciously
[2009/05/05 09:30:34] @ Quit: keithlard: Read error: 145 (Connection timed out)
[2009/05/05 09:31:31] @ Quit: DerekW: Read error: 110 (Connection timed out)
[2009/05/05 09:31:55] @ Quit: FiXion: Read error: 101 (Network is unreachable)
[2009/05/05 09:32:19] @ Quit: PsychoSid1: Read error: 110 (Connection timed out)
[2009/05/05 09:32:29] @ shake-n-bake joined channel #puppet
[2009/05/05 09:35:18] <ashp> it's so annoying, I have this wrapping a nagios::service{}
[2009/05/05 09:35:19] <ashp> if defined(Class['nagios::target-workhours']) or defined(Class['nagios::target']) {
[2009/05/05 09:35:29] <ashp> and then I include nagios::target-workhours on the node
[2009/05/05 09:35:41] <ashp> but I guess it's not picking that up before the check, I wonder if I could use a 'tag' or something to replace this :/
[2009/05/05 09:35:43] @ jsm_ joined channel #puppet
[2009/05/05 09:36:14] @ Quit: monzie:
[2009/05/05 09:38:08] <zeroXten> man, puppet config is weird
[2009/05/05 09:38:19] @ Quit: nigelk:
[2009/05/05 09:40:52] @ fujin_ joined channel #puppet
[2009/05/05 09:41:32] @ Quit: pdt:
[2009/05/05 09:41:58] <joe-mac> puppet is strange, when you're a stranger
[2009/05/05 09:42:19] <ashp> right now i'd like to be a stranger
[2009/05/05 09:42:44] <ashp> you know, I guess this should be a virtual resource rather than just nagios::service (as it's going to need to be collected by the server)
[2009/05/05 09:42:50] <ashp> but it doesn't seem to be breaking anything else
[2009/05/05 09:43:08] <ashp> it's weird, i don't use @@'s for all the statements that are evaluated by the client but the server picks them up fine
[2009/05/05 09:43:29] @ mccune joined channel #puppet
[2009/05/05 09:44:33] @ Quit: fujin_: Read error: 54 (Connection reset by peer)
[2009/05/05 09:45:42] @ fujin_ joined channel #puppet
[2009/05/05 09:47:07] <zeroXten> i feel like i have to unlearn programming and nagios before my brain will get around puppet config :)
[2009/05/05 09:47:42] <joe-mac> you just have to learn a new idiom
[2009/05/05 09:48:12] <joe-mac> it's difficult at first
[2009/05/05 09:48:17] <joe-mac> but like is good after puppet
[2009/05/05 09:48:22] <joe-mac> like all automation
[2009/05/05 09:48:38] <zeroXten> yeah, trying to get my head around virtual stuff, definitions and classes
[2009/05/05 09:48:49] <zeroXten> and arrays but without loops =(
[2009/05/05 09:48:50] <joe-mac> life**
[2009/05/05 09:49:10] <joe-mac> yea, it's not iterative
[2009/05/05 09:49:19] <zeroXten> =(
[2009/05/05 09:49:36] <zeroXten> and i'm fussy with my config... i like it to be elegant
[2009/05/05 09:49:43] <joe-mac> lol, do you have something in mind you want to do that you can't figure out how without lloping?
[2009/05/05 09:49:44] @ Quit: shake-n-bake:
[2009/05/05 09:49:57] @ bobbyz joined channel #puppet
[2009/05/05 09:50:04] <zeroXten> well, basically i am going to initially use puppet for user management
[2009/05/05 09:50:44] <zeroXten> i'm thinking of three groups: users, developers and admins
[2009/05/05 09:51:02] <zeroXten> depending on what groups you're in, sudo will let you do certain stuff
[2009/05/05 09:51:32] <zeroXten> then I just need a sane way of saying what users are in what groups on what nodes
[2009/05/05 09:51:50] <zeroXten> or perhaps in a class for the case of something like webservers
[2009/05/05 09:52:17] <joe-mac> you mean your devs are sometimes admins and vice versa?
[2009/05/05 09:52:20] @ fluxdude joined channel #puppet
[2009/05/05 09:52:28] <zeroXten> yeah
[2009/05/05 09:52:35] <zeroXten> our admins are always admins basically
[2009/05/05 09:52:36] <fluxdude> is there a way of managing device nodes in puppet or do I have to write shell in execs?
[2009/05/05 09:52:37] <joe-mac> sudoers is designed to be used ona large network wuith the hostname field
[2009/05/05 09:52:52] <zeroXten> but a user can be a dev on one machine, an admin on another and just staff on a third
[2009/05/05 09:53:06] <joe-mac> that's a confusion of groups and rights IMO
[2009/05/05 09:53:51] @ Quit: fujin: Read error: 113 (No route to host)
[2009/05/05 09:54:39] <joe-mac> if you want your admins to always be admins, make an admin definition, and in your sudoers monolith, on hostname ALL make sure they can run ALL commands as root. then granularly set permissions on each server. that's how i would do it, except i don't use a monolithic sudoers since the data centre is really untrusted and i don't want any compromise to lead to more information gathering
[2009/05/05 09:54:43] @ Quit: jnewland:
[2009/05/05 09:54:45] @ nigelk joined channel #puppet
[2009/05/05 09:55:45] <joe-mac> idk i guess that could get hairy if you're already married to a groups -> rights type of access control
[2009/05/05 09:56:02] <zeroXten> well, i'm happy to look at other ways of doing things
[2009/05/05 09:56:13] <zeroXten> trying to keep it as simple as possible
[2009/05/05 09:56:37] <joe-mac> you can always have a definition, with some default group, but override that.
[2009/05/05 09:56:58] <tim|mb> or add rights in sudo based on the group
[2009/05/05 09:57:14] <fluxdude> does anyone manage /dev devices in puppet?
[2009/05/05 09:57:17] <zeroXten> the latter was what i was going to do
[2009/05/05 09:57:24] <tim|mb> that's how we do it
[2009/05/05 09:57:33] <tim|mb> %root ALL=passwd: ALL
[2009/05/05 09:57:41] <fluxdude> i need this for doing chroot management, can use execs, but a native resource would be better... should I open a ticket for it?
[2009/05/05 09:58:09] <zeroXten> yeah tim|mb, then limiting other commands to different groups
[2009/05/05 09:58:15] <tim|mb> fluxdude: won't a simple file {} suffice? or do you mean something else?
[2009/05/05 09:58:44] @ bobbyz_ joined channel #puppet
[2009/05/05 09:58:46] <zeroXten> fluxdude: you mean mknod?
[2009/05/05 09:58:47] <fluxdude> tim|mb: but if the device node doesn't exist? or if it's a normal file for some reason instead of a device file?
[2009/05/05 09:59:00] <fluxdude> zeroXten: yes that is what I am doing right now...
[2009/05/05 09:59:04] <zeroXten> ah
[2009/05/05 09:59:23] * ashp sweeps away a nest of inherited classes and junk for a define
[2009/05/05 09:59:31] <tim|mb> fluxdude: ah yeah, you'd need an exec for that... native would be nicer, indeed... not sure how many people will actively use it, though
[2009/05/05 09:59:33] <ashp> am I the only person who seems to slowly replace their entire system with more and more defines
[2009/05/05 09:59:52] <tim|mb> ashp: nope, me too
[2009/05/05 09:59:57] <tim|mb> defines are tha bomb
[2009/05/05 10:00:43] <zeroXten> bah, i think i need to get drunk and then read puppet documentation. I'm sure it will all make sense then
[2009/05/05 10:00:59] <tim|mb> i don't think it's all that confusing?
[2009/05/05 10:01:11] <ashp> tim|mb: Lately I just keep finding things I tried to do with all sorts of classes and inherited junk and I realize a single define would replace the lot
[2009/05/05 10:01:12] <tim|mb> besides, what you asked is more a sudo-question than a puppet question :)
[2009/05/05 10:01:28] <zeroXten> i don't have a problem with the sudo bit
[2009/05/05 10:01:34] @ Quit: mattock: "Leaving."
[2009/05/05 10:01:40] <ashp> hmm I wonder if there's a syntax for defined() that can check to see if you are calling a define
[2009/05/05 10:01:45] <zeroXten> my problem is the user/group management on the nodes
[2009/05/05 10:02:01] <ashp> my issue is I now have a define nagios::target{} that calls nagios::host, nagios::service etc for default stuff per node
[2009/05/05 10:02:13] <ashp> but then in other nagios modules I need a way to test that I actually included nagios before doing any more nagios::service{} statements
[2009/05/05 10:02:32] <tim|mb> zeroXten: we use LDAP for that
[2009/05/05 10:02:47] <zeroXten> for auth?
[2009/05/05 10:02:51] <ashp> otherwise it tries to put in a service statement for a host that doesn't use nagios
[2009/05/05 10:03:02] <ashp> Anyone got any good ideas on how I can do this as it's stumped me for most of a week
[2009/05/05 10:03:02] <tim|mb> zeroXten: Kerberos for auth
[2009/05/05 10:03:12] <zeroXten> i want to use ssh keys
[2009/05/05 10:03:38] <tim|mb> zeroXten: you can still set ssh keys from puppet :)
[2009/05/05 10:03:49] <tim|mb> ashp: besides using variables, I have no idea, sorry :(
[2009/05/05 10:04:04] <zeroXten> hmmm
[2009/05/05 10:04:45] <ashp> argh I hate the idea of having to set a variable per node just to say 'it's monitored'
[2009/05/05 10:04:46] @ lak joined channel #puppet
[2009/05/05 10:04:48] <ashp> but I don't know what else to do
[2009/05/05 10:04:55] <ashp> hey lak, got a second?
[2009/05/05 10:05:07] <lak> kind of, sure
[2009/05/05 10:05:11] <ashp> I'm using a define nagios::target{} that sets nagios::host and nagios::service for a node that should be monitored
[2009/05/05 10:05:21] <ashp> then in various modules I want to add nagios::service{} statements but ONLY if the node has that define
[2009/05/05 10:05:25] <ashp> I was hoping to use if defined()
[2009/05/05 10:05:37] <ashp> but I can't work out what to check in the defined() now I moved to using a define
[2009/05/05 10:05:48] <ashp> is my only option to set a variable per node and check that or am I missing something elegant?
[2009/05/05 10:06:02] <ashp> (sorry to waylay you with a giant brick of text)
[2009/05/05 10:09:08] @ Quit: happymcplaksin: Remote closed the connection
[2009/05/05 10:09:49] <JD> http://pastie.org/468708
[2009/05/05 10:10:12] <JD> is that because $disk_type isn't defined yet or because I'm doing something wrong
[2009/05/05 10:10:22] @ shake-n-bake joined channel #puppet
[2009/05/05 10:10:47] <lak> ashp: you should be able to do if defined(Nagios::Target[foo])
[2009/05/05 10:11:14] <ashp> ahhh, fantastic, I sort of assumed that would never work
[2009/05/05 10:11:31] <ashp> luckily I am lazy and all my defines are called as nagios::target{ "": } so I bet I can do Target[]
[2009/05/05 10:11:45] @ aymerick_ joined channel #puppet
[2009/05/05 10:12:09] <JD> okay, typo alert
[2009/05/05 10:12:51] <ashp> JD: It appears the rule of IRC is 'any time you paste in a problem you will immediately see the error that made it break and feel awkward at solving your own problem instantly'
[2009/05/05 10:13:01] <ashp> you could look at it for weeks but paste it into irc and you're immediately like 'OH!'
[2009/05/05 10:13:29] <tim|mb> what ashp said... you don't wanna know how often that happened to me
[2009/05/05 10:13:48] <ashp> i will look at it for HOURS, ask you guys and immediately spot the problem
[2009/05/05 10:14:10] <ashp> i suppose it's the method you go through to summarize it for everyone that leads you to the solution
[2009/05/05 10:14:17] <lak> ashp: pretty sure target[] != target['']
[2009/05/05 10:14:22] <lak> an empty string is still a string
[2009/05/05 10:14:49] <ashp> yeah, I had to do [""] in the end, you're right
[2009/05/05 10:15:03] <ashp> now to see if I can actually get it working, I've been beating my head on nagios for weeks now :)
[2009/05/05 10:15:24] @ cwebber joined channel #puppet
[2009/05/05 10:16:00] @ cwebber_ joined channel #puppet
[2009/05/05 10:16:11] @ Quit: cwebber: Read error: 104 (Connection reset by peer)
[2009/05/05 10:16:30] <JD> lak: http://reductivelabs.com/trac/puppet/wiki/FunctionReference#regsubst seems the examples are wrong. They use '\\3' when it seems that just returns \3, not the third reference
[2009/05/05 10:16:34] <joe-mac> yea undefined != 0
[2009/05/05 10:18:11] @ happymcplaksin joined channel #puppet
[2009/05/05 10:18:54] <JD> yep, that seems to be the case. I should have known better than to have followed the documentation
[2009/05/05 10:19:09] <tim|mb> JD: it's a wiki, so you're free to fix it :)
[2009/05/05 10:19:28] <JD> "This page is autogenerated; any changes will get overwritten "
[2009/05/05 10:20:12] @ Quit: mccune: "Leaving."
[2009/05/05 10:22:24] @ axisys joined channel #puppet
[2009/05/05 10:22:31] @ stmikeb joined channel #puppet
[2009/05/05 10:23:17] <tim|mb> ow ok
[2009/05/05 10:23:54] @ egerlach joined channel #puppet
[2009/05/05 10:24:37] @ Quit: zoeloelip: Read error: 60 (Operation timed out)
[2009/05/05 10:24:48] @ zoeloelip joined channel #puppet
[2009/05/05 10:25:05] <zeroXten> so close...
[2009/05/05 10:25:13] @ Quit: elijahwright: Remote closed the connection
[2009/05/05 10:27:19] <zeroXten> balls
[2009/05/05 10:28:10] <zeroXten> hmmm
[2009/05/05 10:28:23] @ Quit: happymcplaksin: Remote closed the connection
[2009/05/05 10:28:57] @ happymcplaksin joined channel #puppet
[2009/05/05 10:29:33] @ happymcplaksin left channel #puppet ("ERC Version 5.3 (IRC client for Emacs)")
[2009/05/05 10:34:48] @ marcos_silva joined channel #puppet
[2009/05/05 10:35:53] @ Quit: Demosthenes: "leaving"
[2009/05/05 10:36:21] <marcos_silva> hi, as the puppet, through a minimal OS, I can do all the installation and settings?
[2009/05/05 10:37:21] <ashp> oh i give up, i hate defined() and i fucking hate nagios, i wonder if i can get away with just leaving it broken
[2009/05/05 10:38:10] @ Quit: DerekW_: "Leaving"
[2009/05/05 10:38:23] @ DerekW joined channel #puppet
[2009/05/05 10:38:31] @ Quit: aymerick: No route to host
[2009/05/05 10:41:03] @ ethan_rowe joined channel #puppet
[2009/05/05 10:46:44] @ Quit: tim|mb:
[2009/05/05 10:46:50] <joe-mac> marcos_silva: what do you mean?
[2009/05/05 10:47:23] <joe-mac> using a minimal os such as ubuntu's jeos should work but you might have a couple problems. one i have encountered is that if you don't install cron and you have some cron resources in your manifest it barfs
[2009/05/05 10:48:06] <joe-mac> ashp: you should be at peace with nagios, since it's so prevalent
[2009/05/05 10:49:32] <ashp> if i manually ran nagios it would be ok, it's just the integration into puppet that's a pain
[2009/05/05 10:52:18] <joe-mac> ashp: i just serve out the .cfg's from puppet. the nodes run a cron job that submits passive checks to the nagios server which is also running nsca
[2009/05/05 10:52:43] <joe-mac> i found that the configuration of nagios thruogh puppet didn't really offer much compared to just configuring nagios in nagios. but i could have been doin it wrong
[2009/05/05 10:52:44] <ashp> i wish i had gone that route but i decided to go wild and sprinkle the service{}'s through modules etc so it's completely automated
[2009/05/05 10:52:48] <ashp> this is my last hurdle :)
[2009/05/05 10:53:05] <ashp> the only issue i have is restricting the said service statments to nodes that are in nagios
[2009/05/05 10:53:21] <ashp> if defined(Nagios::Target[""]) { <-- didn't work in the end
[2009/05/05 10:54:09] <sigmonsays> Hey, the re: puppet camp on the maililng list. have they found a location?
[2009/05/05 10:55:06] @ cwebber_ is now known as cwebber
[2009/05/05 10:58:00] * zeroXten starts setting fire to stuff
[2009/05/05 10:58:03] <jenza> It's not a camp unless I can pitch a tent
[2009/05/05 10:58:54] <HarryCalahan> jenza: wear trousers...
[2009/05/05 10:58:57] <zeroXten> how can i get a variable into a class containing virtual users (ie @user)?
[2009/05/05 10:59:47] <jenza> pants should always be optional
[2009/05/05 11:08:14] @ Quit: DerekW: Read error: 104 (Connection reset by peer)
[2009/05/05 11:08:28] @ MrHeavy joined channel #puppet
[2009/05/05 11:09:05] @ DerekW joined channel #puppet
[2009/05/05 11:09:44] @ plathrop-away is now known as plathrop
[2009/05/05 11:12:47] @ tim|mb joined channel #puppet
[2009/05/05 11:15:59] @ elijahwright joined channel #puppet
[2009/05/05 11:17:06] @ Quit: blahdeblah: Remote closed the connection
[2009/05/05 11:17:51] @ blahdeblah joined channel #puppet
[2009/05/05 11:20:54] @ Quit: PsychoSid: "Leaving."
[2009/05/05 11:20:58] @ rdaugherty joined channel #puppet
[2009/05/05 11:24:01] <fruitcake> hey wee question..
[2009/05/05 11:24:19] @ tim|macbook joined channel #puppet
[2009/05/05 11:24:20] <fruitcake> I think I'm doing something wrong with namespaceauth
[2009/05/05 11:25:14] <fruitcake> I can run puppetrun from the master, but I can't run puppetd --test on the localhost
[2009/05/05 11:25:48] <ashp> arghhhhhhh i thought i had cracked it
[2009/05/05 11:26:15] <ashp> if defined(Nagios_host) {
[2009/05/05 11:26:26] <ashp> but no, that just evaluates true for every host regardless of if it uses nagios :(
[2009/05/05 11:26:38] <ashp> maybe I can do Nagios_host["$fqdn"]
[2009/05/05 11:27:29] @ Quit: Innocenti: Client Quit
[2009/05/05 11:28:28] @ jsm_ is now known as jsm
[2009/05/05 11:31:48] @ Quit: tim|mb: Read error: 145 (Connection timed out)
[2009/05/05 11:32:38] @ Quit: pleemans: Read error: 110 (Connection timed out)
[2009/05/05 11:32:46] @ mccune joined channel #puppet
[2009/05/05 11:33:01] @ Quit: themurph: Read error: 145 (Connection timed out)
[2009/05/05 11:35:38] <Volcane> yes, u need to give the whole resource in a defined
[2009/05/05 11:35:46] <Volcane> and order matters
[2009/05/05 11:36:05] <Volcane> include nagios::stuff first, then the if will work, else not
[2009/05/05 11:37:53] @ Quit: bevans5446:
[2009/05/05 11:39:32] @ alban2 joined channel #puppet
[2009/05/05 11:39:57] <ashp> volcane: the trouble is the include stuff comes in nodes.pp
[2009/05/05 11:39:59] @ Quit: verwilst: "Ex-Chat"
[2009/05/05 11:40:02] <ashp> then the if defined() comes in various modules
[2009/05/05 11:40:08] @ Quit: MarlondB:
[2009/05/05 11:40:13] <ashp> so it SHOULD always work as nodes.pp is (obviously) evaluated first
[2009/05/05 11:40:20] <Volcane> as long as it before those modules it should be fine
[2009/05/05 11:40:48] <ashp> i think the [fqdn] bit may have fixed it, i'm just doing the full range of retesting
[2009/05/05 11:41:01] <Volcane> i have:
[2009/05/05 11:41:20] <Volcane> if defined(Class["bind::master"]) { $zone_type = "master" } else { $zone_type = "slave" }
[2009/05/05 11:41:37] <Volcane> and as long as i include in the node bind::master or bind::slave before bind::zones it works sweet
[2009/05/05 11:41:52] @ Quit: axisys: brown.freenode.net irc.freenode.net
[2009/05/05 11:41:53] @ Quit: lex: brown.freenode.net irc.freenode.net
[2009/05/05 11:41:53] @ Quit: ricky: brown.freenode.net irc.freenode.net
[2009/05/05 11:43:22] @ Dyresen_ joined channel #puppet
[2009/05/05 11:44:11] <Volcane> http://pastie.org/468811 that works 100% for me
[2009/05/05 11:44:36] @ Quit: MrHeavy: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:36] @ Quit: fujin_: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:37] @ Quit: squiddle: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:37] @ Quit: nicZar1: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:38] @ Quit: Dyresen: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:39] @ Quit: authentic: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:39] @ Quit: plathrop: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:39] @ Quit: Cuchulain: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:40] @ Quit: mizzy: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:40] @ Quit: jhulten: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:40] @ Quit: Guest78494: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:41] @ Quit: jrojas: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:41] @ Quit: msf: brown.freenode.net irc.freenode.net
[2009/05/05 11:44:53] @ bla-bla joined channel #puppet
[2009/05/05 11:45:28] @ Cuchulain joined channel #puppet
[2009/05/05 11:45:28] @ Quit: johan-s: Read error: 110 (Connection timed out)
[2009/05/05 11:45:29] @ odin joined channel #puppet
[2009/05/05 11:45:30] @ jhulten joined channel #puppet
[2009/05/05 11:45:33] @ msf joined channel #puppet
[2009/05/05 11:45:36] @ jrojas joined channel #puppet
[2009/05/05 11:45:37] <bla-bla> hi, I have a node which was talking to a different puppet master. Now, I have a new puppet master, and I want this node to talk to the new master
[2009/05/05 11:45:55] @ plathrop joined channel #puppet
[2009/05/05 11:45:57] @ odin is now known as Guest52608
[2009/05/05 11:46:02] <bla-bla> For this, I changes the IP of the master in /etc/hosts on my node to the new masters IP
[2009/05/05 11:46:06] @ squiddle joined channel #puppet
[2009/05/05 11:46:13] @ authentic joined channel #puppet
[2009/05/05 11:46:26] <bla-bla> then I run the puppetca --generate on the new master for this node
[2009/05/05 11:46:45] <bla-bla> then I /etc/init.d/puppet restart on the node
[2009/05/05 11:46:57] <bla-bla> is this the right way to move from one master to another?
[2009/05/05 11:47:01] @ axisys joined channel #puppet
[2009/05/05 11:47:01] @ lex joined channel #puppet
[2009/05/05 11:47:01] @ ricky joined channel #puppet
[2009/05/05 11:47:49] <bla-bla> btw...this method..failed due to 'Failed to retrieve current state of resource: Certificates were not trusted: certificate verify failed Could not describe /pubkeys/sshd_config: Certificates were not trusted: certificate verify failed at /etc/puppet/modules/pubkeys/manifests/init.pp:66'
[2009/05/05 11:48:09] <HarryCalahan> bla-bla: what about changing the dns record for your puppetmaster?
[2009/05/05 11:48:59] <bla-bla> HarryCalahan: I'm new to this, could you explain more about the dns record in my puppetmaster?
[2009/05/05 11:49:15] <HarryCalahan> bla-bla: imho puppetd does not keep the tcp connection to the master open. On the next update it will connect the new puppetmaster
[2009/05/05 11:49:25] <bla-bla> I see the new nodes IP in the /ca/inventory.txt
[2009/05/05 11:49:34] <HarryCalahan> bla-bla: puppetmaster.example.com CNAME serverold.example.com
[2009/05/05 11:49:40] <Volcane> did u delete /var/lib/puppet/ssl on the client before doing this?
[2009/05/05 11:49:52] <HarryCalahan> bla-bla: change to puppetmaster.example.com CNAME servernem.example.com
[2009/05/05 11:49:54] @ fujin joined channel #puppet
[2009/05/05 11:50:15] <HarryCalahan> and i would simply move the ssl store over to the new master
[2009/05/05 11:50:20] <bla-bla> i did not delete /var/lib/puppet/ssl
[2009/05/05 11:51:57] @ Quit: tim|macbook: Read error: 145 (Connection timed out)
[2009/05/05 11:53:02] @ edwardam joined channel #puppet
[2009/05/05 11:53:20] <Volcane> you'd probably need to delete that dir, rn clean on the master and have the client request a new cert then sign it
[2009/05/05 11:54:15] <HarryCalahan> why not copy the sslcerts over?
[2009/05/05 11:54:20] <bla-bla> ok.let me try
[2009/05/05 11:54:49] <bla-bla> I did read the - http://reductivelabs.com/trac/puppet/wiki/CertificatesAndSecurity page which suggests to copy sslcerts over
[2009/05/05 11:55:01] <bla-bla> but was not sure where to copy...on the client
[2009/05/05 11:55:13] @ nakano is now known as nakano_
[2009/05/05 11:58:00] @ MrHeavy joined channel #puppet
[2009/05/05 11:59:14] @ niczar1 joined channel #puppet
[2009/05/05 12:00:21] <Volcane> as long as you copy over the servers ssl the clients should just keep working
[2009/05/05 12:00:32] @ mizzy joined channel #puppet
[2009/05/05 12:06:43] @ Quit: rdaugherty: Read error: 113 (No route to host)
[2009/05/05 12:07:15] @ Quit: HarryCalahan: "."
[2009/05/05 12:08:10] @ niczar1 is now known as nicZar`
[2009/05/05 12:09:39] @ Quit: fujin:
[2009/05/05 12:11:13] @ FiXion joined channel #puppet
[2009/05/05 12:11:27] @ Quit: melopt: "Leaving"
[2009/05/05 12:12:12] @ kambiz is now known as kambiz_away
[2009/05/05 12:16:31] @ Quit: FiXion: Remote closed the connection
[2009/05/05 12:17:41] @ DerekW_ joined channel #puppet
[2009/05/05 12:21:47] @ Quit: MattyM: "ta ta"
[2009/05/05 12:21:50] @ kingitchy joined channel #puppet
[2009/05/05 12:21:52] <gebi> i've now changed to nginx+mogrel but now the clients seem to get the wrong manifests?
[2009/05/05 12:22:35] <gebi> on the master (which is also configured using puppet) are loads of error messages because it tries to apply the config from another box
[2009/05/05 12:23:27] @ alfism joined channel #puppet
[2009/05/05 12:25:02] <joe-mac> that's a little unsettling
[2009/05/05 12:27:39] <gebi> and i don't know what could be wrong
[2009/05/05 12:28:07] @ rdaugherty joined channel #puppet
[2009/05/05 12:29:43] <bla-bla> Volcane: On my client aba.abc.com I see this error - 'Could not request certificate: Certificate retrieval failed: Certificate request does not match existing certificate; run 'puppetca --clean abc.abc.com''
[2009/05/05 12:30:08] <bla-bla> So I run tpuppetca --clean abc.abc.com on the master...
[2009/05/05 12:30:20] <bla-bla> and I get a msg saying could not find client certificates for abc.abc.com
[2009/05/05 12:30:37] @ andrewcshafer joined channel #puppet
[2009/05/05 12:30:49] <gebi> any ideas what could be that wrong that puppet tries to apply the wrong config?
[2009/05/05 12:32:02] <ashp> Volcane: even if I make sure in nodes.pp that it's nagios::target{} and then the module included later, it seems I can't ensure that it counts as defined. I guess it must reorder them, this is horrible.
[2009/05/05 12:32:26] <ashp> defined() should check the entire graph or something and find out if it's set ANYWHERE as right now it's driving me insane :/
[2009/05/05 12:32:43] @ Quit: DerekW: Read error: 113 (No route to host)
[2009/05/05 12:33:18] <sigmonsays> oh man. this is hilarious. i'm on question hardware right, but when I run puppet the machine locks, even ping breaks, ssh dies etc. well about 30 sec later (about how long this manifest takes), icmp works again and the machine is alive
[2009/05/05 12:33:23] @ Quit: aymerick_:
[2009/05/05 12:33:50] <sigmonsays> that is crazy
[2009/05/05 12:34:36] @ alfism_ joined channel #puppet
[2009/05/05 12:40:16] @ Quit: spheromak: Read error: 104 (Connection reset by peer)
[2009/05/05 12:45:24] @ Quit: edwardam: Remote closed the connection
[2009/05/05 12:48:23] @ themurph joined channel #puppet
[2009/05/05 12:50:38] @ jtimberman joined channel #puppet
[2009/05/05 12:50:54] @ Quit: jtimberman: Remote closed the connection
[2009/05/05 12:50:55] @ kambiz_away is now known as kambiz
[2009/05/05 12:51:00] @ kambiz is now known as kambiz_away
[2009/05/05 12:52:42] <ashp> man this is bizarre
[2009/05/05 12:52:49] <ashp> i am doing if defined(Nagios::Target[""]) {
[2009/05/05 12:52:57] @ Quit: alfism: Read error: 110 (Connection timed out)
[2009/05/05 12:52:59] <ashp> but now it's picking it up on a host that DOESN'T haev that defined
[2009/05/05 12:53:03] @ bevans5446 joined channel #puppet
[2009/05/05 12:53:22] <ashp> oh wait, maybe I forgot to run the client too, i am frazzled with rage at this point :(
[2009/05/05 12:55:08] @ rgsteele||work joined channel #puppet
[2009/05/05 12:56:00] <rgsteele||work> I have about 70 nodes hitting the puppetmaster at once, and the puppetmaster starts to choke. The machine it's on is not taxed all - plenty of RAM, low disk utilization, etc.
[2009/05/05 12:56:17] <plathrop> rgsteele||work: Using webrick?
[2009/05/05 12:56:34] @ Quit: alban2: Read error: 110 (Connection timed out)
[2009/05/05 12:56:37] <flashn> 70 nodes...
[2009/05/05 12:56:37] @ kambiz_away is now known as kambiz
[2009/05/05 12:56:57] <rgsteele||work> I'm not serving many files, but I end up with things like this: http://pastie.org/468869
[2009/05/05 12:56:58] @ kambiz is now known as kambiz_away
[2009/05/05 12:57:31] <plathrop> rgsteele||work: I bet you are using webrick. You want to read wiki:PuppetScalability
[2009/05/05 12:57:32] <gepetto> plathrop: rgsteele||work: wiki:PuppetScalability is http://reductivelabs.com/trac/puppet/wiki/PuppetScalability
[2009/05/05 12:57:38] @ Quit: DerekW_: Read error: 113 (No route to host)
[2009/05/05 12:57:49] <flashn> yeah switch to Apache/Passenger
[2009/05/05 12:58:07] <rgsteele||work> plathrop: Yeah, I think so. --genconfig doesn't have mongrel explicitly specified.
[2009/05/05 12:58:13] <rgsteele||work> And it looks like the default is webrick
[2009/05/05 12:58:14] <flashn> I wouldent use webrick for more than demo/test purpose or small-scale installation
[2009/05/05 12:58:27] <plathrop> rgsteele||work: yes, the default is webrick and you've hit the scaling wall
[2009/05/05 12:58:35] <plathrop> rgsteele||work: time to roll up your sleeves
[2009/05/05 12:59:10] <plathrop> rgsteele||work: I recommend Passenger, not from personal experience, but because it really looks like the best performing solution. (We're converting from nginx soon)
[2009/05/05 12:59:10] <rgsteele||work> plathrop: Heh
[2009/05/05 12:59:47] <rgsteele||work> I don't see Passenger mentioned in the wiki page
[2009/05/05 12:59:51] <plathrop> rgsteele||work: In the meantime, set your runinterval about twice as high and give it a fair amount of splay time, then do a slow rolling restart of your puppet clients.
[2009/05/05 13:00:04] <plathrop> rgsteele||work: wiki:UsingPassenger
[2009/05/05 13:00:07] <gepetto> plathrop: rgsteele||work: wiki:UsingPassenger is http://reductivelabs.com/trac/puppet/wiki/UsingPassenger
[2009/05/05 13:00:08] <flashn> apache w/ mod_rails
[2009/05/05 13:00:34] <rgsteele||work> plathrop: Ah, I had to take a look at http://reductivelabs.com/trac/puppet/wiki/UsingMongrel
[2009/05/05 13:00:40] <rgsteele||work> I see it mentioned there
[2009/05/05 13:01:09] <gebi> wtf... how can a node get another config on some runs??
[2009/05/05 13:01:30] <gebi> most of the times it went fine, but on _some_ runs it gets configs from another node
[2009/05/05 13:01:33] @ jmarki joined channel #puppet
[2009/05/05 13:02:14] @ edwardam joined channel #puppet
[2009/05/05 13:02:30] <rgsteele||work> plathrop: Are there any benchmarks?
[2009/05/05 13:02:37] <rgsteele||work> What are you basing that assessment on?
[2009/05/05 13:02:37] <ch> gebi: maybe it's an old config of this node?
[2009/05/05 13:03:23] <plathrop> rgsteele||work: list traffic, and the fact that nigelk is a really smart guy
[2009/05/05 13:03:48] <plathrop> rgsteele||work: IOW anecdotal evidence, completely un-scientific
[2009/05/05 13:04:01] <gebi> ch: how to verify this?
[2009/05/05 13:04:39] <gebi> it's just that on some runs it wants to add users (from another config) and most of the time it doesn't
[2009/05/05 13:04:41] <ch> gebi: well, if it's an old config, *and* you're running more than one puppetmaster instance (almost certainly when not using webrick), touching site.pp may help
[2009/05/05 13:05:18] <gebi> ah no i've changed back to webrick and this config was never configured for this node
[2009/05/05 13:05:21] <ch> gebi: you could always put a notice("hello $fqdn") in the node manifest and compare the logs
[2009/05/05 13:06:01] <ashp> ok i gave up and decided to beg the mailing list for help
[2009/05/05 13:06:09] <ashp> i give up, i can't fix this myself :(
[2009/05/05 13:07:54] @ MattyM joined channel #puppet
[2009/05/05 13:07:57] @ Quit: glaw: Remote closed the connection
[2009/05/05 13:09:57] <ch> gebi: btw, which versions are you running? >= 0.24.5?
[2009/05/05 13:10:38] <gebi> ch: the notice snippet get only to the logs from the right node
[2009/05/05 13:11:03] <gebi> but the "wrong" node want to apply the config and no notice gets to the logs
[2009/05/05 13:11:31] <plathrop> ashp: hrm... have you gotten bit by the "syntax error, puppetmaster is ignoring my configs" thing?
[2009/05/05 13:11:39] <gebi> version is 0.24.5
[2009/05/05 13:12:16] <ashp> plathrop: i restart puppetmaster with every commit
[2009/05/05 13:12:26] <plathrop> ashp: darn
[2009/05/05 13:12:35] <plathrop> ashp: was hoping for the simple fix
[2009/05/05 13:12:50] @ johan-s joined channel #puppet
[2009/05/05 13:13:01] <ashp> yeah i'm being driven INSANE
[2009/05/05 13:13:04] <ch> gebi: can you put the notice() in some base class you include everywhere?
[2009/05/05 13:13:12] <ashp> i can get it to slap in a nagios::service{} for all nodes or no nodes
[2009/05/05 13:13:14] <ashp> but nothing else :/
[2009/05/05 13:14:49] @ Quit: marcos_silva: "http://www.mibbit.com ajax IRC Client"
[2009/05/05 13:15:10] <gebi> ch: yes, this gets printet for the problematic node too
[2009/05/05 13:15:22] <ch> gebi: does it show a different hostname then?
[2009/05/05 13:15:46] @ Quit: punkcut: Nick collision from services.
[2009/05/05 13:15:46] @ punkcut1 joined channel #puppet
[2009/05/05 13:15:47] @ flakrat joined channel #puppet
[2009/05/05 13:15:52] @ punkcut1 is now known as punkcut
[2009/05/05 13:15:59] <plathrop> ashp: I got nothing, but please don't light your office on fire :-)
[2009/05/05 13:16:36] <gebi> ch: yes
[2009/05/05 13:17:54] <ashp> i may have to :(
[2009/05/05 13:18:09] <flakrat> is there a way to set the "account expires" date for a linux account when defining a user via puppet?
[2009/05/05 13:18:15] <ashp> i will have to cover my failure some how..
[2009/05/05 13:18:26] <flakrat> example: usermod -e 2009-09-01 somedude
[2009/05/05 13:19:46] <flashn> yes?
[2009/05/05 13:20:42] <flashn> didnt you just answer your own question or am I missing something? >:)
[2009/05/05 13:21:30] <flakrat> haha, I guess I could have it execute that for the user, but was wondering if it was a field in the user data structure
[2009/05/05 13:23:31] <ch> gebi: strange, have not seen such a problem yet :/
[2009/05/05 13:24:15] <gebi> ch: thats the trace of one error http://paste.debian.net/35318/
[2009/05/05 13:24:19] <gebi> me2 :/
[2009/05/05 13:25:30] <gebi> is there any caching which could mess arround?
[2009/05/05 13:31:23] <bla-bla> hi...what does this log msg mean ? - Lock file /home/admin/.puppet/var/state/puppetdlock exists; skipping catalog run
[2009/05/05 13:33:43] @ Quit: mikepea: Read error: 145 (Connection timed out)
[2009/05/05 13:35:24] <ch> gebi: previous versions had a serverside config cache, but this shouldn't be the case with >=0.24.5
[2009/05/05 13:35:44] <ch> gebi: also, if you run with --test, does it happen too? 'cause that should disable all caching...
[2009/05/05 13:36:48] <gebi> yes, it happens with puppetd -tv --debug
[2009/05/05 13:38:49] @ Quit: lak:
[2009/05/05 13:41:16] <wakko666> if i set up a dependency in class foo, is it possible for me to override/remove that dependency in foo::bar?
[2009/05/05 13:41:58] <rgsteele||work> plathrop: Back to the topic on performance, have you tried 0.25 yet? Any gains there?
[2009/05/05 13:42:08] <rgsteele||work> wakko666: If it's inherited, sure.
[2009/05/05 13:42:54] @ Quit: alfism_: "Connection reset by beer"
[2009/05/05 13:43:26] <plathrop> rgsteele||work: haven't tried yet
[2009/05/05 13:44:01] <wakko666> rgsteele||work: what's the syntax on that? notify => "" doesn't seem to workk.
[2009/05/05 13:45:04] <Volcane> ashp: surely nagios::target{"": } isnt a great idea? empty namevar?
[2009/05/05 13:45:43] <ashp> well... it's probably not a great plan but it seems to work, i guess I should have made the namevar be notification_period, but i wanted to make it clear for my coworker
[2009/05/05 13:45:44] @ mikepea joined channel #puppet
[2009/05/05 13:45:52] <rgsteele||work> wakko666: http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#classes
[2009/05/05 13:46:18] <rgsteele||work> wakko666: undef it
[2009/05/05 13:47:37] <Volcane> ashp: also you're just adding nagios::service{} resources on each node right? how does the nagios server get these?
[2009/05/05 13:47:41] <gebi> can i remove /var/lib/puppet/state/*?
[2009/05/05 13:47:54] <rgsteele||work> gebi: Yes.
[2009/05/05 13:48:07] <gebi> in localconfig.yaml are configs from other nodes :/
[2009/05/05 13:48:18] <ashp> Volcane: I tried with @@'s so it would collect them too
[2009/05/05 13:48:38] <ashp> Volcane: weirdly it doesn't seem to make any difference and even with just nagios::service{} it seems to make it to the server, which I find consistantly confusing
[2009/05/05 13:48:44] <gebi> rgsteele||work: thx
[2009/05/05 13:49:02] <ashp> if i remove the if defined() then it'll happily create the right stuff on the server (well, except for every node)
[2009/05/05 13:49:14] <ashp> so the answer is 'i don't know how they get there' i suppose :)
[2009/05/05 13:49:28] <Volcane> ashp: sounds to me like you've tried a ton of things and now have a ton of half working/bad ideas working against each other :P setup a very simple test case of a node that has a simple service and move from there
[2009/05/05 13:49:50] @ mikepea left channel #puppet ()
[2009/05/05 13:51:00] <ashp> i tried a bunch of test cases and i never once found a way of using defined() to exclude nodes
[2009/05/05 13:51:08] <ashp> it either does them all or none
[2009/05/05 13:51:20] <ashp> so there's not much more to test
[2009/05/05 13:51:28] <Volcane> on your nodes u need to do the if, and only create @@ resources if the define is there
[2009/05/05 13:52:00] <Volcane> alternatively, always create them, but only tag them if the define is there, then restrict collecting with the tag
[2009/05/05 13:52:00] <ashp> but i can't put the if's into the node as they need to belong to the module, otherwise i'll end up with loads of if's repeated endlessly?
[2009/05/05 13:52:18] <ashp> yeah if i can't get this working i need to investigate tags because that's my only other option
[2009/05/05 13:52:37] <Volcane> the nodes create the resources, if the nodes create them, they get exported, the only way to prevent from appearing on the collecting side is to restrict it with tags or not to creat ehtem
[2009/05/05 13:52:47] <wakko666> rgsteele||work: thanks!
[2009/05/05 13:52:56] <rgsteele||work> wakko666: No prob.
[2009/05/05 13:53:17] <ashp> which is why my original plan was to find a way that when the node evalulates the module it checks for something that will only allow it to create the resources if it happens to be a nagios::target
[2009/05/05 13:53:36] <ashp> it's a shame i can't make a fact that somehow checks if they have that define :)
[2009/05/05 13:53:44] <ashp> i should make the define touch /nagioshost and then check for that
[2009/05/05 13:54:03] <ashp> that is so dirty and horrible but technically possible i guess
[2009/05/05 13:54:11] @ Quit: zeroXten: Read error: 54 (Connection reset by peer)
[2009/05/05 13:54:23] <Volcane> if you do a very simple test case, like say put your define in test.pp, create an instance of it, then check with if defined() and just run it with pupppet test.pp
[2009/05/05 13:54:25] <Volcane> what happens?
[2009/05/05 13:55:01] <ashp> hmm, let me experiment, didn't know i could run puppet against .pp's in that way
[2009/05/05 13:55:20] <Volcane> (puppet without a d)
[2009/05/05 13:56:57] <gebi> which classes get included if i write include foo and have inn modules/foo/manifest/init.pp a class foo and foo::nodes?
[2009/05/05 13:57:10] <Volcane> gebi: just foo
[2009/05/05 13:57:21] <gebi> hmm...
[2009/05/05 13:57:38] <Volcane> else how on earth would bind::master and bind::slave work? :P
[2009/05/05 13:57:41] <ashp> well maybe if i empty the define as it tries to pull in the rest :)
[2009/05/05 13:58:10] <ashp> Volcane: ok i tried
[2009/05/05 13:58:13] <ashp> if defined(Nagios::Target[""]) { err("yes it's running the define")
[2009/05/05 13:58:13] <ashp> }
[2009/05/05 13:58:19] <Volcane> ashp: pastie.
[2009/05/05 13:58:23] <ashp> i got no output so
[2009/05/05 13:58:38] <Volcane> dont make empty name resources, i told you its a bad idea already :)
[2009/05/05 13:58:53] <ashp> well i was testing so i wanted to keep it the same
[2009/05/05 13:59:02] <ashp> http://pastebin.com/d7f76f7af
[2009/05/05 13:59:05] <ashp> so now i'll try and add a name
[2009/05/05 13:59:28] <ashp> adding a name makes it much harder to test the define but sdfsdfsd it needs the name to work
[2009/05/05 13:59:36] <ashp> it now works
[2009/05/05 13:59:39] <ashp> -sh-3.2# puppet test.pp
[2009/05/05 13:59:39] <ashp> err: Scope(Class[main]): yes it's running the define
[2009/05/05 13:59:59] <gebi> Volcane: thx
[2009/05/05 14:00:00] <ashp> I can't use wildcards and I don't want to have loads of if defined() or defined() or defined() :/
[2009/05/05 14:00:37] @ Quit: ipl31: "Changing server"
[2009/05/05 14:00:50] <Volcane> all u want is one if defined surely? you just want to know if its a nagios target?
[2009/05/05 14:01:04] <ashp> aha, I can just check Nagios::Target
[2009/05/05 14:01:07] <ashp> i don't need the [] stuff
[2009/05/05 14:01:50] <ashp> this makes testing a lot easier, using just puppet :)
[2009/05/05 14:01:58] <Volcane> ashp: no you cant
[2009/05/05 14:02:10] <ashp> I just did it in the test?
[2009/05/05 14:02:34] <ashp> http://pastebin.com/m6b7d24c6 see?
[2009/05/05 14:02:47] <Volcane> checking http://pastie.org/468927
[2009/05/05 14:03:11] <Volcane> true even if you dont create a resources.
[2009/05/05 14:03:23] <ashp> .. fuck :/
[2009/05/05 14:03:37] <gebi> ok i've deleted /var/lib/puppet/state/* and now those errors are gone
[2009/05/05 14:03:37] <Volcane> you'll have one nagios::target per host?
[2009/05/05 14:03:47] <ashp> yes
[2009/05/05 14:03:53] <Volcane> so why not call it $fqdn?
[2009/05/05 14:04:03] <ashp> hmm that's true, that's easy enough to check
[2009/05/05 14:04:08] @ Quit: nearthal: Read error: 113 (No route to host)
[2009/05/05 14:04:31] <Volcane> and you dont need to create a ton of if's
[2009/05/05 14:05:06] <Volcane> just make a define to create your nagios stuff, and do the if in there
[2009/05/05 14:05:25] <gebi> wtf... now they are back in localconfig.yaml?
[2009/05/05 14:05:48] <ashp> volcane: you mean move the if from the apache module to the ::target define?
[2009/05/05 14:05:57] @ Quit: squiddle: Remote closed the connection
[2009/05/05 14:06:05] @ squiddle joined channel #puppet
[2009/05/05 14:06:28] <Volcane> actually nah, wont work
[2009/05/05 14:06:30] <Volcane> just use tags
[2009/05/05 14:07:32] <Volcane> like, add a variable or a fact, something like $monitoredhost=1
[2009/05/05 14:08:15] <ashp> yeah i guess i'm just going to have to slap in a variable per host for now and revisit this later as it's such a waste of time
[2009/05/05 14:08:20] <Volcane> actually, $monitoredhost="monitored" or whatever u want, then set resource defaults on all your Nagios::Service{}'s etc
[2009/05/05 14:08:24] <Volcane> and collect based on the tag
[2009/05/05 14:08:45] <Volcane> using the $monitoredhost thing as a tag
[2009/05/05 14:09:02] <Volcane> dont you have something like common::hosts or something, something that you roll out to *all* hosts?
[2009/05/05 14:09:08] <ashp> baseclass
[2009/05/05 14:09:14] <ashp> is all that i have that's really on all hosts
[2009/05/05 14:09:59] <Volcane> k, so set the variable on each node that now has nagios::target, then just do the target stuff in your baseclass
[2009/05/05 14:10:06] <Volcane> then its exactly the same amount of work:P
[2009/05/05 14:10:16] <Volcane> you either include something, or set a variable, some thing
[2009/05/05 14:11:28] <ashp> yeah, i'm going to move over to setting a variable as this didn't work out
[2009/05/05 14:14:45] @ Quit: minaural: Remote closed the connection
[2009/05/05 14:15:31] <Volcane> ashp: anyway, I'd suggest you rip it all out and start simple, get just one working and refactor from there, cos I'm sure you're on the right track, just managed to confuse yourself by tring 100s of things over time
[2009/05/05 14:18:19] <ashp> i am scared that this might.. this might work?
[2009/05/05 14:18:27] <ashp> i have to test the node without the def first, that's where i always get cheated :)
[2009/05/05 14:24:26] <ashp> it.. it seems to be working
[2009/05/05 14:24:38] <Volcane> :)
[2009/05/05 14:25:27] <ashp> in an hour it will probably open the gates of hell, but we'll see
[2009/05/05 14:25:49] @ alfism joined channel #puppet
[2009/05/05 14:27:31] <gebi> is there a way to see why a .pp file is included?
[2009/05/05 14:27:49] <Volcane> include is the only way really
[2009/05/05 14:28:00] <gebi> from my localconfig.yaml the generated_users.pp (for the cluster nodes) gets included on the cluster master
[2009/05/05 14:28:04] <Volcane> so its either a node, or a class you're including
[2009/05/05 14:28:22] <gebi> but the class which brings the generated_users.pp in is not listed on the cluster master
[2009/05/05 14:28:39] <Volcane> there could also be something inheriting from that one
[2009/05/05 14:29:07] @ Quit: rdaugherty: "Leaving."
[2009/05/05 14:29:25] <gebi> there is only one include of cluster_users which is from cluster_node
[2009/05/05 14:29:40] <Volcane> and no inherits cluster_users anywhere?
[2009/05/05 14:29:50] <gebi> cluster_users is of the form: class cluster_users { import "generated_users" }
[2009/05/05 14:30:00] <gebi> no
[2009/05/05 14:31:15] <gebi> the only inherits in the whole config is class cluster_node inherits environment and class cluster_master inherits environment
[2009/05/05 14:31:23] <gebi> where cluster_users is included in cluster_node
[2009/05/05 14:31:43] @ MarlondB joined channel #puppet
[2009/05/05 14:32:35] <gebi> but somehow after a few runs (and after at _least_ one run of a cluster node, cluster master gets generated_users.pp, but not class cluster_users)
[2009/05/05 14:33:08] <Volcane> odd
[2009/05/05 14:33:19] @ claymation joined channel #puppet
[2009/05/05 14:34:38] @ fbe joined channel #puppet
[2009/05/05 14:34:38] <gebi> is the definition of cluster_users ok?
[2009/05/05 14:34:59] <Volcane> looks fine, why do you import?
[2009/05/05 14:35:13] <gebi> it's an automatic generated file from a list
[2009/05/05 14:35:20] <gebi> with automatic group adding
[2009/05/05 14:36:02] <gebi> so generated_users is recreated by a script and included from cluster_users, hope this is ok
[2009/05/05 14:36:54] <Volcane> donno, hard to follow without examples
[2009/05/05 14:38:07] <gebi> generated_users has e.g group { "domainadmins": gid=>"123" ... } user { "admin": gid=>"123" ...}
[2009/05/05 14:41:38] @ zirpu2 joined channel #puppet
[2009/05/05 14:41:38] @ zirpu2 is now known as zirpu
[2009/05/05 14:45:22] @ rdaugherty joined channel #puppet
[2009/05/05 14:47:33] @ Quit: MattyM: "ta ta"
[2009/05/05 14:53:18] <gebi> Volcane: some idea on how to debug this (maybe how to see where this gets included?, or autorequired?)
[2009/05/05 14:54:01] <Volcane> classed dont get autorequired, i think the easiest is to run puppetd --graph and look at the resulting graph in dot/graphviz or whatever, then you should hopefully see some relationships
[2009/05/05 14:54:31] <Volcane> graphs end up in /var/lib/puppet somewhere on the client
[2009/05/05 14:55:32] <gebi> ah, nice didn't know about --graph, thx :)
[2009/05/05 14:56:09] @ rdaugherty left channel #puppet ()
[2009/05/05 15:00:29] @ lak joined channel #puppet
[2009/05/05 15:01:18] @ jmarki is now known as jmarki|sleep
[2009/05/05 15:02:50] @ Quit: ghenry: Read error: 145 (Connection timed out)
[2009/05/05 15:05:25] <jrojas> has anyone seen the issue where files and directories constantly change their checksum for each time puppet runs?
[2009/05/05 15:05:37] <Volcane> yeah :(
[2009/05/05 15:05:45] <jrojas> is it still a bug in 24.8?
[2009/05/05 15:05:50] <Volcane> yes
[2009/05/05 15:05:55] <jrojas> hmm
[2009/05/05 15:06:04] <jrojas> i cant seem to find a ticket on it
[2009/05/05 15:06:05] <Volcane> just checksum/timestamp changes without content changes
[2009/05/05 15:06:11] <jrojas> correct
[2009/05/05 15:06:15] <Volcane> nods
[2009/05/05 15:06:32] @ k00011 joined channel #puppet
[2009/05/05 15:07:03] <jrojas> of all things i am being bitched at for log chatter...
[2009/05/05 15:08:01] <Volcane> heh
[2009/05/05 15:08:17] <Volcane> add a ticket, i am sure i recall one being there before though
[2009/05/05 15:08:24] <jrojas> we've had puppet running in our production env for months now and people are just noticing it.
[2009/05/05 15:09:26] <Volcane> heh
[2009/05/05 15:09:32] <gebi> Volcane: there is nothing in the dependency graph, http://mgeb.org/share/expanded_relationships.dot.png
[2009/05/05 15:10:08] <gebi> just the user required groups from the class itself, no reason why this file ever gets included
[2009/05/05 15:11:36] <Volcane> donno then
[2009/05/05 15:12:27] @ ghenry joined channel #puppet
[2009/05/05 15:12:49] <jrojas> Volcane: http://projects.reductivelabs.com/issues/1056
[2009/05/05 15:12:54] <jrojas> Says its fixed...
[2009/05/05 15:13:19] <Volcane> do you only see it on files pushed out with pluginsync or others too?
[2009/05/05 15:13:30] <jrojas> i see it on facts and pluginsync
[2009/05/05 15:13:59] <Volcane> well, open it again :( cos i def still see it too
[2009/05/05 15:14:20] <jrojas> Volcane: i see it for mtime and md5 checksums
[2009/05/05 15:15:19] <gebi> ok i'll add a ticket tomorrow
[2009/05/05 15:15:33] <Volcane> ah just grepped my logs again, not seen any today (i have a filter out on my loghost so dont see them)
[2009/05/05 15:15:38] <Volcane> maybe its not there in 0.24.8 anymore
[2009/05/05 15:15:49] <jrojas> hm..let me upgrade a client and test.
[2009/05/05 15:18:57] @ Quit: lak:
[2009/05/05 15:21:09] <jrojas> Volcane: yeah it looks like the exact same problem in the ticket.
[2009/05/05 15:21:19] <jrojas> removing state.yaml fixes it for one run.
[2009/05/05 15:21:26] <Volcane> what version?
[2009/05/05 15:21:30] <jrojas> 24.8
[2009/05/05 15:21:34] <Volcane> ah
[2009/05/05 15:21:34] <jrojas> client and server
[2009/05/05 15:21:46] <jrojas> puppetd[29825]: (/File[/var/lib/puppet/lib]/checksum) checksum changed '{mtime}Sat May 02 03:17:05 -0700 2009' to '{mtime}Mon May 04 16:54:21 -0700 2009'
[2009/05/05 15:21:52] <Volcane> yeah
[2009/05/05 15:24:43] <jrojas> now only if i can get that iptables plugin working ill be all square
[2009/05/05 15:36:07] @ gaveen joined channel #puppet
[2009/05/05 15:39:56] @ lak joined channel #puppet
[2009/05/05 15:40:39] @ mvn071 joined channel #puppet
[2009/05/05 15:45:08] @ Quit: bla-bla: "ChatZilla 0.9.84 [Firefox 3.0.10/2009042316]"
[2009/05/05 16:00:00] <joe-mac> hey guys i asked this in #ruby but got no response, so here goes
[2009/05/05 16:00:02] <joe-mac> hi guys i am having a little bit of trouble with erb, if i paste the erb in a template and run erb -x -T '-' test.erb | ruby -c it says syntax OK, when i have the template inside a ruby script like template = %{ templatestuiffhere } then do html = ERB.new(template) then later call template.run I get a failure. Do I have to do something special for erb to see the variables in my script?
[2009/05/05 16:00:42] <jrojas> joe-mac: yeah definitely a ruby question.
[2009/05/05 16:01:32] <Volcane> erb.result(binding)
[2009/05/05 16:02:11] <nigelk> joe-mac: I actually just did this the other day
[2009/05/05 16:02:43] @ Quit: blahdeblah: "Leaving."
[2009/05/05 16:02:43] <nigelk> ruby -r erb -e 'foobar="xxx" ; puts ERB.new(File.new(ARGV[0]).read).result' /tmp/foo.erb
[2009/05/05 16:03:05] <nigelk> will let you assign variables on the command line to check the output of an erb file
[2009/05/05 16:03:24] <joe-mac> wow, thanks nigelk
[2009/05/05 16:03:35] <joe-mac> Volcane: care to explain waht exactly binding is?
[2009/05/05 16:03:56] <nigelk> we use something like that to take the puppet.conf.erb file we distribute to turn it back into a normal file for distribution via apt/pkg
[2009/05/05 16:03:58] <joe-mac> i looked at an example and the get_binding method of this object simply said "binding" in the body of the method, so i just had a big question mark
[2009/05/05 16:04:07] <Volcane> http://pastie.org/469071
[2009/05/05 16:04:26] <joe-mac> is the word binding a keyword?
[2009/05/05 16:05:02] <Volcane> http://www.ruby-doc.org/core/classes/Binding.html
[2009/05/05 16:06:30] <Volcane> so you could isolate things that only a certain few variables are available to your erb and not the hwole contexts by using bindings, or just say binding to get current
[2009/05/05 16:06:51] <joe-mac> ah, ok
[2009/05/05 16:07:06] <joe-mac> thanks for clarifying that, i was like WTF is binding
[2009/05/05 16:09:34] <Volcane> http://onestepback.org/index.cgi/Tech/Ruby/RubyBindings.rdoc
[2009/05/05 16:11:23] <Volcane> afaik puppet uses a funky binding to make variables available to erb's, and they're not exactly real variables, which is why things like if (foo) in a erb under puppet just doesnt do sane things
[2009/05/05 16:11:26] <joe-mac> wow ruby is a pretty crazy language
[2009/05/05 16:11:44] <joe-mac> yea iw as gonna say, the whole scope thing with puppet and erbs makes a little more sense now
[2009/05/05 16:13:27] <Volcane> yeah there's no doubt some weird way in the code snippet i posted to puill the global vars into local ones in the def, donno, there's lots of weird shit in ruby
[2009/05/05 16:14:01] @ Quit: gaveen: "Enough lurking for now"
[2009/05/05 16:17:21] @ verwilst joined channel #puppet
[2009/05/05 16:17:24] @ alban2 joined channel #puppet
[2009/05/05 16:18:50] @ TREb0re joined channel #puppet
[2009/05/05 16:19:01] @ Quit: lak: Read error: 110 (Connection timed out)
[2009/05/05 16:20:59] <joe-mac> hmm looks like my bindings are simply not getting passed to ERB. hey Volcane could you take a quick look if i pastie it?
[2009/05/05 16:29:19] @ Quit: themurph: Read error: 60 (Operation timed out)
[2009/05/05 16:30:02] <Volcane> yeah
[2009/05/05 16:34:03] @ Quit: d3vilb0x: Read error: 110 (Connection timed out)
[2009/05/05 16:35:04] @ Quit: rgsteele||work: Remote closed the connection
[2009/05/05 16:35:11] <joe-mac> Volcane: http://www.pastie.org/469097
[2009/05/05 16:36:21] <Volcane> and u just get empty stuff when u run it?
[2009/05/05 16:37:13] <joe-mac> yea
[2009/05/05 16:37:18] <joe-mac> i'll pastie the error i get
[2009/05/05 16:38:26] <joe-mac> http://www.pastie.org/469103
[2009/05/05 16:38:49] <Volcane> ah, well not working and getting syntax errors is 2 diff things :P
[2009/05/05 16:39:02] <joe-mac> lol
[2009/05/05 16:39:08] <joe-mac> it's all just FAIL to me
[2009/05/05 16:40:04] @ kambiz_away is now known as kambiz
[2009/05/05 16:42:51] <joe-mac> it looks like the ; from the style sheet and the vars not getting filled in is the problem? then again i may juist be pulling thigns out of a hat
[2009/05/05 16:42:57] <joe-mac> thre goes a rabbit...
[2009/05/05 16:43:48] <wilturn> no strange control characters on line 63? of the 1st one
[2009/05/05 16:44:34] <Volcane> not to mention the {}s
[2009/05/05 16:46:56] <joe-mac> yea, idk i need to make this csv shiny, and my idea of having an excel macro failed when crossoverw ouldn't use macros in office 2k7, so, my boss suggested making an html doc with a stylesheet. now i am trying that.
[2009/05/05 16:47:51] <wilturn> maybe you can setup your styles in another file which is sourced to test?
[2009/05/05 16:48:18] <wilturn> it looks like a parsing error with all those 'unusual' characters
[2009/05/05 16:50:26] <joe-mac> well, when i paste the meat of the template in a file and parse it through erb to ruby it satys syntax ok
[2009/05/05 16:51:07] <joe-mac> sorry for clogging the puppet channel with this, #ruby still hasn't responded. i tend to get the msot help here than any other channel lol
[2009/05/05 16:52:40] <Volcane> no its pretty weird
[2009/05/05 16:53:22] @ Quit: cwebber:
[2009/05/05 16:54:09] <wilturn> joe-mac, if your pastie from before is still good, I think the syntax is "new array.each", not "newarray.each" ?
[2009/05/05 16:54:50] <joe-mac> newarray is an array named newarray i just named it something ridiculous to keep track. this script is really just to make my monday mornings easier so i don't have to manually grab otuage reports and colorize them
[2009/05/05 16:54:53] @ WALoeIII joined channel #puppet
[2009/05/05 16:55:06] <joe-mac> really sucks the wind out of my sails and eats up time i could be using on important things
[2009/05/05 16:55:06] <wilturn> lol
[2009/05/05 16:55:09] <wilturn> use perl, the end ;p
[2009/05/05 16:55:33] <joe-mac> LOL, god i hate perl
[2009/05/05 16:56:42] <Volcane> so
[2009/05/05 16:56:54] <Volcane> <%= stuff -%>
[2009/05/05 16:57:00] <Volcane> thats something puppets enabled somehow
[2009/05/05 16:57:07] <Volcane> take out the "-" and its fine
[2009/05/05 16:57:14] <Volcane> and load your erb from a file
[2009/05/05 16:58:17] <Volcane> http://pastie.org/469129
[2009/05/05 16:58:22] @ Bass10 joined channel #puppet
[2009/05/05 16:59:32] @ Quit: Bass10: SendQ exceeded
[2009/05/05 17:00:01] @ Bass10 joined channel #puppet
[2009/05/05 17:00:32] @ cwebber joined channel #puppet
[2009/05/05 17:01:33] @ kambiz is now known as kambiz_away
[2009/05/05 17:02:25] @ kambiz_away is now known as kambiz
[2009/05/05 17:04:59] <Volcane> perl, pft. friends dont let friends use perl
[2009/05/05 17:06:08] @ Quit: cwebber:
[2009/05/05 17:06:17] <joe-mac> Volcane: you are the man
[2009/05/05 17:06:35] <Volcane> :)
[2009/05/05 17:07:10] <Volcane> its a bit fiddley, but once i got digging into it i remember i had the exact same annoyance when i wrote my first erb stuff cos somehow puppet does this -%> thing
[2009/05/05 17:07:24] @ fbe_ joined channel #puppet
[2009/05/05 17:07:48] <wilturn> that compiler warning is truly unhelpful too
[2009/05/05 17:08:22] <Volcane> yeah, its the way bindings work have to do tons of evals, so the errors they produce is totally bogus
[2009/05/05 17:08:23] <wilturn> I expected a semicolon!!
[2009/05/05 17:08:33] @ cwebber joined channel #puppet
[2009/05/05 17:11:22] <joe-mac> lol, if i wrote a compiler, i would make awesome errro messages
[2009/05/05 17:11:30] <joe-mac> like a compiler... on lsd
[2009/05/05 17:12:08] <flashn> you mean MIPSpro?
[2009/05/05 17:12:11] @ Quit: lex: Read error: 110 (Connection timed out)
[2009/05/05 17:12:16] <flashn> hrhr
[2009/05/05 17:12:34] @ lex joined channel #puppet
[2009/05/05 17:15:00] @ lak joined channel #puppet
[2009/05/05 17:17:27] @ Quit: WALoeIII:
[2009/05/05 17:18:40] @ Quit: cwebber:
[2009/05/05 17:20:08] @ Quit: fbe: Connection timed out
[2009/05/05 17:21:24] @ Quit: chadh: Read error: 110 (Connection timed out)
[2009/05/05 17:23:26] @ Quit: Bass10: "Leaving"
[2009/05/05 17:24:40] @ fbe_ is now known as fbe
[2009/05/05 17:26:31] @ Quit: erm_: "leaving"
[2009/05/05 17:30:14] @ cwebber joined channel #puppet
[2009/05/05 17:32:19] @ Quit: MarlondB:
[2009/05/05 17:35:31] @ WALoeIII joined channel #puppet
[2009/05/05 17:40:05] @ Quit: stmikeb: "http://www.mibbit.com ajax IRC Client"
[2009/05/05 17:41:04] @ Quit: Eghie: Client Quit
[2009/05/05 17:41:17] @ kambiz is now known as kambiz_away
[2009/05/05 17:42:11] @ Quit: WALoeIII:
[2009/05/05 17:44:08] @ Quit: jmarki|sleep: Remote closed the connection
[2009/05/05 17:51:58] @ WALoeIII joined channel #puppet
[2009/05/05 17:56:38] @ d3vilb0x joined channel #puppet
[2009/05/05 18:00:18] @ Quit: axisys: "leaving"
[2009/05/05 18:02:25] * alban2 is away: ZZZzzzZzzzzZzZzzzzzzzz....
[2009/05/05 18:06:06] @ Quit: mvn071: "Leaving"
[2009/05/05 18:08:04] @ webx joined channel #puppet
[2009/05/05 18:08:17] <webx> for a linux host, what is the method that puppet uses to determine it's hostname ?
[2009/05/05 18:08:25] <webx> (CentOS, if it matters)
[2009/05/05 18:09:10] <goozbach> webx: the 'hostname' command?
[2009/05/05 18:09:24] <webx> I would assume that, but I don't know
[2009/05/05 18:10:53] <Volcane> see /usr/lib/ruby/site_ruby/1.8/facter/hostname.rb
[2009/05/05 18:13:44] @ joe-mac left channel #puppet ()
[2009/05/05 18:25:21] @ Quit: flakrat: "Leaving"
[2009/05/05 18:28:14] @ Quit: cwebber:
[2009/05/05 18:28:42] @ Quit: lak:
[2009/05/05 18:33:48] <k00011> guys, if i have a resource file { "/foo/bar/baz", source => "puppet:///baz" }, if /boo/baz folder don't exist, how can i get them to be automagically created?
[2009/05/05 18:34:10] <Volcane> you cant
[2009/05/05 18:34:17] <jenza> hehe
[2009/05/05 18:34:29] <Volcane> #86
[2009/05/05 18:34:30] <gepetto> Volcane: #86 is http://projects.reductivelabs.com/issues/show/86 "Puppet - Feature #86: Directory creation fails if parent directory does not exist - ReductiveLabs.com"
[2009/05/05 18:35:16] <k00011> Volcane: thanks
[2009/05/05 18:35:40] <ezekiel-v3> k00011: means you need to have individual resources BEFORE the final file to ensure => directory for each parent dir
[2009/05/05 18:35:52] <ezekiel-v3> so, puppet can still do all the work, just not in one rule
[2009/05/05 18:36:09] <k00011> ezekiel-v3: got it... thanks
[2009/05/05 18:36:11] <ezekiel-v3> np
[2009/05/05 18:36:17] <Volcane> see the ticket, theres a shorthand
[2009/05/05 18:36:24] <Volcane> also add a "me too!" to the ticket
[2009/05/05 18:36:27] @ masterzen joined channel #puppet
[2009/05/05 18:37:08] @ Quit: mccune: Remote closed the connection
[2009/05/05 18:41:06] @ Quit: WALoeIII:
[2009/05/05 18:42:15] @ Quit: bobbyz: Read error: 60 (Operation timed out)
[2009/05/05 18:46:22] @ Quit: verwilst: "Ex-Chat"
[2009/05/05 18:47:54] <k00011> Volcane: doesn't a "me too!" adds just noise?
[2009/05/05 18:48:00] <k00011> ad**
[2009/05/05 18:48:01] <k00011> add*
[2009/05/05 18:52:13] <wilturn> I only have a more hackish solution we used with a "mkdir -p" exec hinging on a subscribe to get it handled.. but I think it is a feature, not a bug when you think about it
[2009/05/05 18:54:41] <Volcane> k00011: it might convince someone to impliment the feature if there's enough support
[2009/05/05 18:55:06] <wilturn> it's definitely one of those wtf moments when you first start working with puppet from my experience
[2009/05/05 18:55:45] <Volcane> its quite a complex problem to just make parent dirs
[2009/05/05 18:55:49] @ Quit: bobbyz_: Read error: 110 (Connection timed out)
[2009/05/05 18:55:49] <wilturn> it gets easy to assume it has no limitations :)
[2009/05/05 18:56:25] <Volcane> like, you could assume parent dirs should be owned by the user the final dir gets made as
[2009/05/05 18:56:27] <wilturn> It's not so bad to have to set up all the directories with proper permissions just that once
[2009/05/05 18:56:29] <Volcane> but that would be wrong
[2009/05/05 18:56:46] @ lak joined channel #puppet
[2009/05/05 18:56:53] <wilturn> yeah, I have a nasty qmail setup which that wouldnt work on
[2009/05/05 18:57:11] <wilturn> puppet could go back and enforce later maybe but I dont know the details
[2009/05/05 18:57:14] <plathrop> There are a lot of places it doesn't work. It's non-trivial.
[2009/05/05 18:57:28] <plathrop> This is why I put it back down after I initially tried to implement it.
[2009/05/05 18:58:02] <Volcane> yeah, you might say make /path/to/dir all if its not there, it would create each with a specific owner etc, but then what if /path existed already? should it force a owner change? ignore it? how should it know?
[2009/05/05 18:58:23] <Volcane> theres a suggested extra param in the ticket that seems promising but not great really
[2009/05/05 19:20:22] @ Quit: squiddle: Read error: 104 (Connection reset by peer)
[2009/05/05 19:21:20] <sigmonsays> Hey puppeteers, read about the new beta w/ message queing
[2009/05/05 19:21:32] <sigmonsays> is it going to have the ability to subscribe to resources on other hosts?
[2009/05/05 19:21:39] <sigmonsays> what is the initial focus of message queues?
[2009/05/05 19:23:06] <andrewcshafer> sigmonsays: this step is not so ambitious, it's queueing saving stored configs for performance
[2009/05/05 19:23:29] <andrewcshafer> but interhost events is on the road map
[2009/05/05 19:23:47] * Volcane 's been toying with the idea of putting reports onto the bus to centralise them on one of hte masters
[2009/05/05 19:24:05] <Volcane> so reports, rrds etc, all end up in one place
[2009/05/05 19:24:14] <sigmonsays> well stored configs would be a huge plus
[2009/05/05 19:24:23] <sigmonsays> READ: stored configs that scale
[2009/05/05 19:24:31] <Volcane> this isnt to make them all show up in one place still
[2009/05/05 19:24:32] <andrewcshafer> yep
[2009/05/05 19:24:42] <Volcane> what it does is defer them to the background (another daemon)
[2009/05/05 19:24:50] <andrewcshafer> they all show up in the database
[2009/05/05 19:25:07] * Volcane has masters in different contries/data centers
[2009/05/05 19:25:11] <Volcane> there's no "the database"
[2009/05/05 19:25:31] <andrewcshafer> yeah, it's queuing them instead of doing them synchronously
[2009/05/05 19:25:41] <andrewcshafer> you people with your different countries :/
[2009/05/05 19:25:47] <Volcane> its a PITA
[2009/05/05 19:25:51] <andrewcshafer> yeah, that's a problem
[2009/05/05 19:25:58] <sigmonsays> haha
[2009/05/05 19:26:09] * sigmonsays has 5 puppetized dc's of varying size
[2009/05/05 19:26:13] <Volcane> my current master is in germany, quite a problem talking to it from west coast us
[2009/05/05 19:26:17] <sigmonsays> and uses svn to do all that magic
[2009/05/05 19:27:18] <andrewcshafer> I'm becoming more of a git zealot everyday.
[2009/05/05 19:27:24] @ Quit: lak:
[2009/05/05 19:27:29] @ WALoeIII joined channel #puppet
[2009/05/05 19:27:39] <sigmonsays> dont' git me started. i love git
[2009/05/05 19:27:50] <sigmonsays> my co workers don't
[2009/05/05 19:27:59] <ezekiel-v3> then they probably haven't used it enough
[2009/05/05 19:28:06] <plathrop> Yay git!
[2009/05/05 19:28:08] * sigmonsays concurs
[2009/05/05 19:28:22] <ezekiel-v3> what do your co-workers use?
[2009/05/05 19:28:30] @ plathrop is now known as plathrop-away
[2009/05/05 19:28:41] <ezekiel-v3> Or, are they BSD folk? 'cause the GPL can get in the way there...
[2009/05/05 19:29:10] <sigmonsays> silly reasons. they use svn. they use tortise on windows
[2009/05/05 19:29:17] <sigmonsays> because that's what other people use
[2009/05/05 19:29:24] <sigmonsays> *shrug*
[2009/05/05 19:29:34] * Volcane likes SVN too, but probably cos I've never used git :P
[2009/05/05 19:29:43] <sigmonsays> it's hard enough to get 'em to commit everything. I don't wanna make 'em switch
[2009/05/05 19:30:29] @ k00011 left channel #puppet ()
[2009/05/05 19:31:39] <ezekiel-v3> but it can actually make it EASIER for them
[2009/05/05 19:32:03] <andrewcshafer> yeah, that's two layers of technical problem that won't be fixed without social engineering
[2009/05/05 19:32:08] <ezekiel-v3> haha
[2009/05/05 19:34:12] <sigmonsays> man, i'm pretty stoked to test the beta
[2009/05/05 19:34:28] <sigmonsays> i originally setup nagios using stored configs and failed miserably. (stored configs did really)
[2009/05/05 19:34:28] <Volcane> doesnt run my manifests :(
[2009/05/05 19:34:33] <sigmonsays> :(
[2009/05/05 19:34:42] <andrewcshafer> Volcane: what is it messing up?
[2009/05/05 19:34:51] <andrewcshafer> did you open issues yet?
[2009/05/05 19:34:54] <Volcane> i made tickets yeah :)
[2009/05/05 19:35:25] <Volcane> mostly #2220
[2009/05/05 19:35:26] <gepetto> Volcane: #2220 is http://projects.reductivelabs.com/issues/show/2220 "Puppet - Bug #2220: Empty Directories and Purging not behaving well - ReductiveLabs.com"
[2009/05/05 19:35:40] <sigmonsays> i just made nagios generate the configs locally, then had a notify script to send the configs to the monitoring host. not ideal but it scaled. I dont wanna change it now =)
[2009/05/05 19:36:05] <sigmonsays> :(
[2009/05/05 19:36:16] <sigmonsays> it's ran my stuff fine so far
[2009/05/05 19:36:21] <sigmonsays> but I havn't tested extensively yet
[2009/05/05 19:37:15] * Volcane 's common::linux does something of everything, so easy to test :)
[2009/05/05 19:37:57] <sigmonsays> that's actually a interesting subject. Testing something like puppet isn't exactly trivial
[2009/05/05 19:38:12] <Volcane> nope
[2009/05/05 19:51:10] @ Quit: andrewcshafer:
[2009/05/05 19:52:35] @ andrewcshafer joined channel #puppet
[2009/05/05 19:56:06] <stick> can a function in puppet return more than 1 thing? (I know it can return an array of things, but more than one array, or an array and a string, etc)
[2009/05/05 20:16:47] @ edwardam is now known as edwardam|AFK
[2009/05/05 20:18:23] @ jantman joined channel #puppet
[2009/05/05 20:21:14] @ Quit: WALoeIII:
[2009/05/05 20:31:00] @ kambiz_away is now known as kambiz
[2009/05/05 20:31:30] @ lak joined channel #puppet
[2009/05/05 20:34:03] @ axisys joined channel #puppet
[2009/05/05 20:38:53] @ Quit: lak:
[2009/05/05 20:44:33] @ Quit: alfism: "Connection reset by beer"
[2009/05/05 21:15:05] @ Quit: kingitchy:
[2009/05/05 21:30:06] @ Quit: masterzen: "Exploring other worlds"
[2009/05/05 21:33:00] @ Quit: nigelk:
[2009/05/05 21:35:08] @ kambiz is now known as kambiz_away
[2009/05/05 21:35:29] @ lak joined channel #puppet
[2009/05/05 21:44:53] @ rdaugherty joined channel #puppet
[2009/05/05 21:50:47] @ Quit: lak:
[2009/05/05 21:57:40] @ digiru joined channel #puppet
[2009/05/05 21:57:45] <digiru> hello
[2009/05/05 21:57:54] <digiru> i having a hard time with modules
[2009/05/05 21:58:02] <digiru> i can't seem to get my modules loaded
[2009/05/05 21:58:12] <digiru> i've only been playing around with puppet for a day
[2009/05/05 21:58:19] <digiru> i have basic things working
[2009/05/05 21:58:26] <digiru> but would like to get puppet-haproxy
[2009/05/05 22:03:40] @ digiru left channel #puppet ()
[2009/05/05 22:05:20] @ gebi_ joined channel #puppet
[2009/05/05 22:17:11] @ Quit: gebi: Read error: 110 (Connection timed out)
[2009/05/05 22:18:49] @ pdt joined channel #puppet
[2009/05/05 22:24:53] @ chip__ joined channel #puppet
[2009/05/05 22:26:07] @ Quit: atlan_: Read error: 60 (Operation timed out)
[2009/05/05 22:27:21] @ Quit: pdt: Read error: 54 (Connection reset by peer)
[2009/05/05 22:27:41] @ pdt joined channel #puppet
[2009/05/05 22:28:43] @ erm_ joined channel #puppet
[2009/05/05 22:39:14] @ WALoeIII joined channel #puppet
[2009/05/05 22:43:37] @ nakano_ is now known as nakano
[2009/05/05 22:56:57] @ johnw joined channel #puppet
[2009/05/05 22:57:48] <johnw> is there a way to determine which of a systems resources is not mentioned in the host's catalog? I know ralsh can show me all the User resources, but what if I only specify two users in my manifest; I'd like to know which ones exist that weren't specified
[2009/05/05 23:00:14] @ Quit: WALoeIII:
[2009/05/05 23:00:22] @ nigelk joined channel #puppet
[2009/05/05 23:00:27] @ nigelk_ joined channel #puppet
[2009/05/05 23:04:15] <agaffney> johnw: that's going to include 15-20 "system" accounts
[2009/05/05 23:04:24] <johnw> that's ok by me
[2009/05/05 23:04:32] <johnw> i can generate a baseline and then just look at diffs from then on
[2009/05/05 23:12:04] @ edwardam|AFK is now known as edwardam
[2009/05/05 23:14:50] @ Quit: pdt:
[2009/05/05 23:18:05] @ Quit: nigelk: Read error: 110 (Connection timed out)
[2009/05/05 23:19:06] @ ShooterMc joined channel #puppet
[2009/05/05 23:21:05] @ ShooterMc left channel #puppet ()
[2009/05/05 23:47:45] @ sergei joined channel #puppet
[2009/05/05 23:47:51] @ sergei left channel #puppet ()
[2009/05/05 23:53:00] @ Ladeburger joined channel #puppet
[2009/05/05 23:54:53] @ nakano is now known as nakano_
[2009/05/05 23:57:57] @ jantman left channel #puppet ()

Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!