| [2009/05/26 00:11:59] @ Log started by gepetto | ||
| [2009/05/26 00:11:59] @ PaulWay left channel #puppet () | ||
| [2009/05/26 00:16:44] @ lak joined channel #puppet | ||
| [2009/05/26 00:21:50] @ DarkFlib left channel #puppet ("Leaving") | ||
| [2009/05/26 00:29:14] @ Quit: lak: | ||
| [2009/05/26 00:35:16] @ Quit: kelseyhightower: | ||
| [2009/05/26 00:36:54] @ ssm joined channel #puppet | ||
| [2009/05/26 00:58:14] @ sjlain joined channel #puppet | ||
| [2009/05/26 01:00:27] <sjlain> introductions aside. i'd like to know what variables (if any) are set besides stuff collected from facter inside puppet language? | ||
| [2009/05/26 01:02:34] <sjlain> shuffling quickly through puppet documentation didn't reveal the answer and neither did mr. google, so, anyone with a list of reserved words for variables, please? | ||
| [2009/05/26 01:05:25] @ Quit: f3ew: Remote closed the connection | ||
| [2009/05/26 01:06:29] @ f3ew joined channel #puppet | ||
| [2009/05/26 01:07:59] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 01:22:10] @ andrewcshafer_ joined channel #puppet | ||
| [2009/05/26 01:36:00] @ andrewcshafer__ joined channel #puppet | ||
| [2009/05/26 01:37:52] @ Quit: kolla: Remote closed the connection | ||
| [2009/05/26 01:40:15] @ Quit: andrewcshafer: Read error: 110 (Connection timed out) | ||
| [2009/05/26 01:52:55] @ Quit: andrewcshafer_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 01:57:08] @ Quit: roald: "Changing server..." | ||
| [2009/05/26 02:02:16] @ Quit: andrewcshafer__: Read error: 113 (No route to host) | ||
| [2009/05/26 02:05:07] @ andrewcshafer_ joined channel #puppet | ||
| [2009/05/26 02:05:40] @ mfoster left channel #puppet () | ||
| [2009/05/26 02:07:07] @ alhoang joined channel #puppet | ||
| [2009/05/26 02:10:47] @ ohadlevy joined channel #puppet | ||
| [2009/05/26 02:19:26] @ Quit: JibbaD: Read error: 113 (No route to host) | ||
| [2009/05/26 02:35:53] @ Quit: fbe_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 02:40:00] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 02:45:19] @ Quit: comprehensive: "CHOCOA" | ||
| [2009/05/26 02:54:18] @ nakano_ is now known as nakano | ||
| [2009/05/26 02:57:37] @ Quit: andrewcshafer_: Read error: 113 (No route to host) | ||
| [2009/05/26 02:57:50] @ nakano is now known as nakano_ | ||
| [2009/05/26 03:06:09] @ madrescher joined channel #puppet | ||
| [2009/05/26 03:12:22] @ comprehensive joined channel #puppet | ||
| [2009/05/26 03:12:37] <comprehensive> anyone got luck with stored configurations? | ||
| [2009/05/26 03:12:51] <comprehensive> mine is complaining about lack of rails, although it is installed | ||
| [2009/05/26 03:13:15] @ Quit: raphink: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 03:13:17] <comprehensive> May 24 07:54:15 ragnarok puppetmasterd[4257]: Rails is missing; cannot store configurations | ||
| [2009/05/26 03:13:19] <comprehensive> [root@ragnarok log]# /usr/bin/rails -v | ||
| [2009/05/26 03:13:21] <comprehensive> Rails 2.3.2 | ||
| [2009/05/26 03:14:39] @ raphink joined channel #puppet | ||
| [2009/05/26 03:15:14] @ sjlain left channel #puppet () | ||
| [2009/05/26 03:17:28] @ pleemans joined channel #puppet | ||
| [2009/05/26 03:20:12] @ mfournier joined channel #puppet | ||
| [2009/05/26 03:20:18] @ Quit: pugnacity: "Leaving." | ||
| [2009/05/26 03:24:03] @ Quit: andrewcshafer: | ||
| [2009/05/26 03:28:23] @ Quit: madduck: "leaving" | ||
| [2009/05/26 03:37:18] @ tim|macbook joined channel #puppet | ||
| [2009/05/26 03:43:21] @ pugnacity joined channel #puppet | ||
| [2009/05/26 03:47:29] <nico> http://pastie.org/489788 puppet <3 | ||
| [2009/05/26 03:47:38] @ madduck joined channel #puppet | ||
| [2009/05/26 03:47:47] <nico> deploy farms of webservers in 5 minutes | ||
| [2009/05/26 03:48:26] <nico> I'm sure I don't have time to pick up a coffee it is finished | ||
| [2009/05/26 03:52:28] @ Quit: madrescher: "Leaving." | ||
| [2009/05/26 03:53:38] @ MattyM joined channel #puppet | ||
| [2009/05/26 04:06:07] @ jo left channel #puppet () | ||
| [2009/05/26 04:08:18] @ Innocenti joined channel #puppet | ||
| [2009/05/26 04:11:55] @ nasrat joined channel #puppet | ||
| [2009/05/26 04:13:25] @ Djeli joined channel #puppet | ||
| [2009/05/26 04:17:09] @ Quit: webx: "..(cyp): [BX] Time wasted: 11h 31m 24s" | ||
| [2009/05/26 04:18:37] @ gaveen joined channel #puppet | ||
| [2009/05/26 04:20:37] @ nakano_ is now known as nakano | ||
| [2009/05/26 04:24:41] @ Quit: Djelibeybi: Read error: 110 (Connection timed out) | ||
| [2009/05/26 04:24:55] @ markp joined channel #puppet | ||
| [2009/05/26 04:26:23] <duritong> anybody familiar in debuging an exec issue? | ||
| [2009/05/26 04:27:40] @ glaw joined channel #puppet | ||
| [2009/05/26 04:29:18] @ Quit: comprehensive: "CHOCOA" | ||
| [2009/05/26 04:31:00] @ briandquinn joined channel #puppet | ||
| [2009/05/26 04:32:11] <duritong> nevermind I think I found the problem :) | ||
| [2009/05/26 04:40:29] <Volcane> bah, looks like www.kanarip.com had some failure and not alls back yet boohoo | ||
| [2009/05/26 04:41:13] <Volcane> ah, is back actually woohoo | ||
| [2009/05/26 04:41:28] @ aymerick joined channel #puppet | ||
| [2009/05/26 04:43:30] @ Quit: Djeli: "Leaving" | ||
| [2009/05/26 04:43:55] @ Quit: Innocenti: Client Quit | ||
| [2009/05/26 04:44:50] <nasrat> Volcane: awesome | ||
| [2009/05/26 04:44:50] <nasrat> enjoy your phusion rpm :) | ||
| [2009/05/26 04:44:51] <Volcane> yeah, i just cant get myself so far to host rails apps iwth mongrel etc mess yuk | ||
| [2009/05/26 04:44:51] <Volcane> will rather keep coding php | ||
| [2009/05/26 04:45:04] <duritong> phusion rpm? | ||
| [2009/05/26 04:45:30] @ Innocenti joined channel #puppet | ||
| [2009/05/26 04:45:35] <fujin> nginx passenger deb FTW | ||
| [2009/05/26 04:46:26] <Volcane> duritong: http://www.kanarip.com/custom/f11/SRPMS/ | ||
| [2009/05/26 04:47:10] <duritong> fujin: yeah I just recently learned about passenger and nginx | ||
| [2009/05/26 04:47:21] @ Quit: Innocenti: Client Quit | ||
| [2009/05/26 04:47:38] @ Innocenti joined channel #puppet | ||
| [2009/05/26 04:47:41] <duritong> Volcane: cool | ||
| [2009/05/26 04:47:55] @ HarryCalahan joined channel #puppet | ||
| [2009/05/26 04:48:41] <duritong> Volcane: your work? | ||
| [2009/05/26 04:49:11] <Volcane> no, someone who comes here i just forget his exact nick now | ||
| [2009/05/26 04:49:29] <Volcane> Jeroen van Meeuwen | ||
| [2009/05/26 04:49:44] <Volcane> i think his nick is jvmeeuwen | ||
| [2009/05/26 04:50:34] <duritong> I just got interested in the mailman packages as well, as he seems to package mailman per vhost to get around the one big mailman problem | ||
| [2009/05/26 04:50:47] @ Quit: vinci: Read error: 113 (No route to host) | ||
| [2009/05/26 04:50:53] @ monzie joined channel #puppet | ||
| [2009/05/26 04:52:01] * duritong still needs to integrate passenger in puppet | ||
| [2009/05/26 04:52:44] * nico is still with mongrel + nginx | ||
| [2009/05/26 04:52:51] * ssm is still using apache+mongrel, but wants passenger... | ||
| [2009/05/26 04:53:13] <HarryCalahan> duritong: afaik mailman still doesn't support full vhosting. It knows how to generate correct links and urls but listnames (the part before the @) must be unique over all vhosts. | ||
| [2009/05/26 04:53:46] <duritong> yeah moving away from nginx+mongrel to passenger is another thing. I was more talking about getting passenger setup into puppet | ||
| [2009/05/26 04:53:58] * HarryCalahan wants to be a passenger on a flight to fiji ;) | ||
| [2009/05/26 04:54:01] <duritong> first I thought about doing a bunch of execs, but the rpms are definately the better solution | ||
| [2009/05/26 04:54:55] <duritong> HarryCalahan: yeah, however you can get around with that having different mailman installations per vhost. and it looks like jmeeuwen did that | ||
| [2009/05/26 04:55:08] <jmeeuwen> yups | ||
| [2009/05/26 04:55:22] <duritong> jmeeuwen: cool | ||
| [2009/05/26 04:55:42] <HarryCalahan> duritong: ah. | ||
| [2009/05/26 04:55:57] <duritong> jmeeuwen: you have an easy spec file so you can easily create per vhosts rpms? | ||
| [2009/05/26 04:56:00] <jmeeuwen> there's a few SRPMS at http://www.kanarip.com/custom/el5/SRPMS/ that are build specifically to do full mailman vhosting | ||
| [2009/05/26 04:56:06] @ vinci joined channel #puppet | ||
| [2009/05/26 04:56:28] @ Quit: Innocenti: Remote closed the connection | ||
| [2009/05/26 04:56:38] <duritong> yeah I'll have a look at them | ||
| [2009/05/26 04:56:48] @ Innocenti joined channel #puppet | ||
| [2009/05/26 04:56:52] <duritong> jmeeuwen: how about REE in your passenger rpm? | ||
| [2009/05/26 04:57:21] <jmeeuwen> mind though that obviously you will need to set virtusertable / aliases yourself if you use sendmail, or whatever is the equivalent MTA of your choice | ||
| [2009/05/26 04:57:41] <ohadlevy> i made a RH5 passenger rpm | ||
| [2009/05/26 04:57:46] <jmeeuwen> duritong, the passenger SRPM in the el5/ is not the latest and greatest afaik, but has been proven to work | ||
| [2009/05/26 04:57:46] <ohadlevy> if anyone wants the spec file.. | ||
| [2009/05/26 04:57:54] <ohadlevy> with 2.2.2 | ||
| [2009/05/26 04:58:12] <jmeeuwen> duritong, this version of mine however is under review currently to be included in EPEL and Fedora | ||
| [2009/05/26 04:58:27] <duritong> i use exim backed by a db to know about lists and it's super easy to adapt it to a multi vhost solution | ||
| [2009/05/26 04:58:33] <ohadlevy> jmeeuwen: i though that there were licensing issues | ||
| [2009/05/26 04:58:53] <duritong> the only thing which won't work anymore would be the puppet maillist provider | ||
| [2009/05/26 04:58:58] <jmeeuwen> ohadlevy, which I've resolved by communicating with phusion.nl as well as the CNRI guys | ||
| [2009/05/26 04:59:02] <duritong> but I think it's possible to find a workaround | ||
| [2009/05/26 04:59:08] <jmeeuwen> s/I've resolved/I've helped resolving/ | ||
| [2009/05/26 04:59:27] <ohadlevy> jmeeuwen: great, do you also plan to compile the apache modules, or leave it to compile after the rpm is installed? | ||
| [2009/05/26 04:59:56] <jmeeuwen> i believe rebuilding http://www.kanarip.com/custom/f11/SRPMS/rubygem-passenger-2.2.2-1.fc11.src.rpm for el5 will get you the latest and greatest closest to what is going to end up in Fedora / EPEL | ||
| [2009/05/26 05:00:09] <jmeeuwen> ohadlevy, the apache modules are included | ||
| [2009/05/26 05:00:20] <duritong> jmeeuwen: this is what I currently try to do ;) | ||
| [2009/05/26 05:00:30] <jmeeuwen> ohadlevy, the end result is a rubygem-passenger RPM, as well as a mod_passenger RPM | ||
| [2009/05/26 05:00:44] <ohadlevy> jmeeuwen: I think I did more or less the same ;) | ||
| [2009/05/26 05:00:50] <jmeeuwen> ohadlevy, you can find those here: http://www.kanarip.com/custom/f11/i386/ | ||
| [2009/05/26 05:00:52] <ohadlevy> maybe we can compare the spec file | ||
| [2009/05/26 05:01:13] <jmeeuwen> ohadlevy, collaboration is a good thing, very true ;-) | ||
| [2009/05/26 05:01:16] @ Quit: euclid: Remote closed the connection | ||
| [2009/05/26 05:01:21] @ euclid joined channel #puppet | ||
| [2009/05/26 05:01:24] @ Quit: nmalik: Remote closed the connection | ||
| [2009/05/26 05:01:34] <Volcane> jmeeuwen: seriously thanks for the passenger rpm, hate++ their way of installing :) | ||
| [2009/05/26 05:01:34] @ nmalik joined channel #puppet | ||
| [2009/05/26 05:01:53] @ Quit: Innocenti: Client Quit | ||
| [2009/05/26 05:02:02] * Volcane 's just testing it now | ||
| [2009/05/26 05:02:09] @ Innocenti joined channel #puppet | ||
| [2009/05/26 05:02:23] * duritong is sometimes a bit confused about all the different things around | ||
| [2009/05/26 05:02:41] <ohadlevy> jmeeuwen: if you are intersted http://gist.github.com/117966 | ||
| [2009/05/26 05:02:52] <duritong> so I assume that running an app within this passenger we'll use default ruby? | ||
| [2009/05/26 05:03:02] <duritong> and not ruby ree? | ||
| [2009/05/26 05:03:27] <jmeeuwen> duritong, system ruby as provided on a RHEL, CentOS or Fedora distributions | ||
| [2009/05/26 05:03:47] <jmeeuwen> so in the case of Fedora, where I also maintain ruby, ruby-1.8.6-p287 | ||
| [2009/05/26 05:04:11] <duritong> jmeeuwen: ok | ||
| [2009/05/26 05:04:44] <jmeeuwen> for Fedora 12, I'm planning to rigorously move to ruby-1.9.1 and provide a compat-ruby1.8 package | ||
| [2009/05/26 05:05:05] <jmeeuwen> just so we have the opportunity to move forward as well as the opportunity to lean back ;-) | ||
| [2009/05/26 05:05:18] * Volcane 's only getting internal server errors from his rails app though, will keep fiddling | ||
| [2009/05/26 05:05:52] @ Quit: Innocenti: Client Quit | ||
| [2009/05/26 05:06:07] @ Innocenti joined channel #puppet | ||
| [2009/05/26 05:06:13] <duritong> jmeeuwen: ah yeah, but if I install ree and switch it in the passenger config I'm fine | ||
| [2009/05/26 05:06:43] <jmeeuwen> duritong, i concur you're fine but i have no experience with ree | ||
| [2009/05/26 05:06:46] <jmeeuwen> ;-) | ||
| [2009/05/26 05:06:47] @ Quit: shake-n-bake: | ||
| [2009/05/26 05:07:46] @ siven_007 joined channel #puppet | ||
| [2009/05/26 05:09:18] <Volcane> jmeeuwen: what version rubygem-rack do you use with the rubygem-passenger fc11 rpm? | ||
| [2009/05/26 05:10:19] @ nakano is now known as nakano_ | ||
| [2009/05/26 05:10:27] @ phips joined channel #puppet | ||
| [2009/05/26 05:10:29] @ nakano_ is now known as nakano | ||
| [2009/05/26 05:13:07] <Volcane> defo seems to need a newer one than whats in EPEL | ||
| [2009/05/26 05:20:07] @ int joined channel #puppet | ||
| [2009/05/26 05:22:14] <jmeeuwen> Volcane, sry, gotta run, but we just use the latest available in each branch | ||
| [2009/05/26 05:22:21] <Volcane> k | ||
| [2009/05/26 05:22:24] <siven_007> I'm looking for a tool to manage the configuration of solaris servers in a structured way: it should be service oriented with component services spread over multiple systems; a configuration rollout should be transactional, all or noting with rollback if necessary; in this sense a configuration reflects dependencies between servers and its services | ||
| [2009/05/26 05:22:26] <jmeeuwen> Volcane, i'll verify what we use in production | ||
| [2009/05/26 05:22:31] <Volcane> thanks :) | ||
| [2009/05/26 05:22:34] <Volcane> no rush | ||
| [2009/05/26 05:24:45] <siven_007> sorry, message wasn't complete. Such a configuration should be related to internal (on system) or external (ex. a software release) events. | ||
| [2009/05/26 05:26:40] <siven_007> Any idea whether puppet is suited to deploy and maintain such structured configs in time? | ||
| [2009/05/26 05:28:06] <Volcane> puppet isnt transactional and cant do rollbacks on its own | ||
| [2009/05/26 05:28:16] <siven_007> Is there a good gui for config mgt and follow up? | ||
| [2009/05/26 05:28:17] <Volcane> well, its not all or nothing i mean | ||
| [2009/05/26 05:28:39] <tim|macbook> gui? for system config? | ||
| [2009/05/26 05:29:08] <Volcane> siven_007: puppets like a kind of programming language. | ||
| [2009/05/26 05:29:45] <Volcane> siven_007: but it can easily integrate with 3rd party tools where youc an say apply certain objects on certain machines, and it writes usable reports | ||
| [2009/05/26 05:30:02] <Volcane> siven_007: however, you will need to write lots of puppet language code | ||
| [2009/05/26 05:30:06] <Volcane> no gui for that | ||
| [2009/05/26 05:33:08] <siven_007> is there a way to store different configs in time and redeploy an older config in case of problems? | ||
| [2009/05/26 05:33:43] <tim|macbook> siven_007: we use version control on our manifests | ||
| [2009/05/26 05:33:48] <Volcane> depends how complex your config is, you could use branches on your SCM | ||
| [2009/05/26 05:33:55] <tim|macbook> since it's just text files, it's easy to add to subversion or darcs | ||
| [2009/05/26 05:34:21] <siven_007> it's always possible to have version control in a cvs app but can puppet be made aware of the these diff configs in time? | ||
| [2009/05/26 05:34:44] <tim|macbook> why would puppet need to be aware of them? what do you think it adds to the functionality? | ||
| [2009/05/26 05:36:08] <siven_007> I'd like puppet to be ware of multiple configs in order to track config changes in time as they were deployed | ||
| [2009/05/26 05:36:46] @ MarlondB joined channel #puppet | ||
| [2009/05/26 05:36:55] @ d3vilb0x joined channel #puppet | ||
| [2009/05/26 05:37:00] @ Quit: MarlondB: Remote closed the connection | ||
| [2009/05/26 05:37:06] <tim|macbook> it sounds like puppet is too low level for your needs/requirements | ||
| [2009/05/26 05:37:21] <gebi> sounds like a git backend for stored configs? | ||
| [2009/05/26 05:37:37] @ Quit: aymerick: Read error: 113 (No route to host) | ||
| [2009/05/26 05:37:59] @ aymerick joined channel #puppet | ||
| [2009/05/26 05:42:11] <gebi> siven_007: another idead would be to just hack filebucket and let it commit the configs into a repository <nodename>/<path> | ||
| [2009/05/26 05:42:19] <gebi> maybe one repo per node | ||
| [2009/05/26 05:42:48] @ Quit: ohadlevy: "Leaving." | ||
| [2009/05/26 05:43:16] <gebi> don't know if puppet reporing sends back the applied diff to the server, if yes, you can write a custom report and applie the diff and commit | ||
| [2009/05/26 05:43:46] @ mikepea joined channel #puppet | ||
| [2009/05/26 05:46:39] <Volcane> gebi: and how about results of user{}, package{}, exec{} etc? | ||
| [2009/05/26 05:49:09] <gebi> might get funny | ||
| [2009/05/26 05:49:32] <Volcane> rollback is incredibly complex | ||
| [2009/05/26 05:50:07] <gebi> in the end most puppet users use version controll on puppet configs, _but_ just changing back to an old version don't cut it most of the time | ||
| [2009/05/26 05:50:37] <f3ew> gebi yeah | ||
| [2009/05/26 05:51:18] <f3ew> gebi, you need a tool built on top of a configuration management system | ||
| [2009/05/26 05:51:46] <Volcane> even then, without rollback and state tracking in the providers i cant imagine how it would be possible | ||
| [2009/05/26 05:52:04] <gebi> but those things can't be repaired easily by a tool | ||
| [2009/05/26 05:52:21] <tim|macbook> it would help if all resources have an "undo" method attached to them | ||
| [2009/05/26 05:52:47] <gebi> thats really hard | ||
| [2009/05/26 05:52:59] <tim|macbook> not really | ||
| [2009/05/26 05:53:06] <Volcane> undo an exec | ||
| [2009/05/26 05:53:18] <gebi> i once had a problem with a debian package which disabled our app through dpkg-divert | ||
| [2009/05/26 05:53:32] <tim|macbook> just like you write the exec command, you should be able to write that exec's undo-command | ||
| [2009/05/26 05:54:07] * tim|macbook is not talking about a "magical" undo | ||
| [2009/05/26 05:54:16] <tim|macbook> that would be very, very scary | ||
| [2009/05/26 05:54:27] @ Quit: aymerick: Read error: 54 (Connection reset by peer) | ||
| [2009/05/26 05:54:32] @ aymerick joined channel #puppet | ||
| [2009/05/26 05:55:19] <gebi> even that is not that easy | ||
| [2009/05/26 05:55:34] <gebi> just nuke the box, reinstall it with fai und let puppet apply a fresh config | ||
| [2009/05/26 05:56:56] <gebi> tim|macbook: you really can not cleanly undo a debian package install :/ | ||
| [2009/05/26 05:57:10] <tim|macbook> apt-get --purge remove? | ||
| [2009/05/26 05:57:19] <gebi> not really | ||
| [2009/05/26 05:57:27] <Volcane> you're making wild assumptions about the quality of debian packages :P | ||
| [2009/05/26 05:57:33] <tim|macbook> hehehe true that | ||
| [2009/05/26 05:57:54] <gebi> this executes some crappy post/pre remove installation scripts which _might_ get the state back | ||
| [2009/05/26 05:57:56] <tim|macbook> and from my recent experiences with upgrading mysql-server, i should know better :( | ||
| [2009/05/26 05:57:57] * nico is happy with debian pacakges | ||
| [2009/05/26 05:58:17] <tim|macbook> but it does work most of the time | ||
| [2009/05/26 05:59:33] <gebi> oh year :) | ||
| [2009/05/26 06:00:39] @ verwilst joined channel #puppet | ||
| [2009/05/26 06:05:09] <gebi> in deb's there are quite a few things not versioned by itself (e.g update-alternatives), thus the puppet provider has to store all alternatives for files in the package | ||
| [2009/05/26 06:12:33] <FiXion> anybody have a postfix example for running postmap after updating files like /etc/postfix/virtual etc. ? | ||
| [2009/05/26 06:12:38] <nico> good testing of your manifests makes rollback useless | ||
| [2009/05/26 06:13:36] <nico> FiXion: create an "exec" and add it to notify | ||
| [2009/05/26 06:13:39] @ Quit: alhoang: Read error: 110 (Connection timed out) | ||
| [2009/05/26 06:14:13] <FiXion> nico: yes yes.. but an example would be nice :) - does refreshonly => true on the exec work for instance? | ||
| [2009/05/26 06:14:20] <FiXion> don't want to exec every time | ||
| [2009/05/26 06:14:28] <Volcane> FiXion: why dont you try it? | ||
| [2009/05/26 06:14:44] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 06:14:44] <FiXion> Volcane: I'm lazy - if someone had a working example it would be easier :) | ||
| [2009/05/26 06:14:48] * FiXion hates reinventing the wheel | ||
| [2009/05/26 06:14:55] <Volcane> FiXion: you can write a small little teest manifest in a .pp file and just run it with "puppet test.pp" | ||
| [2009/05/26 06:15:08] <FiXion> Volcane: cool - I didn't know that. | ||
| [2009/05/26 06:15:15] <Volcane> FiXion: no, using an example of a well documented option to exec isnt reinventing the wheel, its refusing to learn something :P | ||
| [2009/05/26 06:15:25] <nico> http://pastie.org/489872 | ||
| [2009/05/26 06:16:38] <nico> ho, time to eat | ||
| [2009/05/26 06:16:39] * nico & | ||
| [2009/05/26 06:17:00] <FiXion> nico: thanks :) | ||
| [2009/05/26 06:18:26] <FiXion> anyone have a smart solution- or should I just have 3 postmap exec's - one for each file that needs to be run postmap on it? | ||
| [2009/05/26 06:18:49] * nico throws a define documentation on FiXion | ||
| [2009/05/26 06:18:54] <FiXion> one solution could probably be a define - defining the psotmap exec | ||
| [2009/05/26 06:27:51] <duritong> jmeeuwen: maybe you should add gcc-c++ as require dependency | ||
| [2009/05/26 06:28:53] @ Quit: Welsh_Dwarf: | ||
| [2009/05/26 06:29:06] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 06:29:52] @ Quit: siven_007: Remote closed the connection | ||
| [2009/05/26 06:30:51] @ veritas_aequitas joined channel #puppet | ||
| [2009/05/26 06:31:29] @ nakano is now known as nakano_ | ||
| [2009/05/26 06:31:40] @ nakano_ is now known as nakano | ||
| [2009/05/26 06:31:49] <FiXion> this worked like a charm - with as less duplication as possible: http://pastebin.com/m6b3935d1 | ||
| [2009/05/26 06:38:57] <Volcane> your exec should also require the /etc/postfix/$name | ||
| [2009/05/26 06:39:11] <FiXion> Volcane: thanks | ||
| [2009/05/26 06:39:22] <Volcane> just for completeness in this case i doubt you'll ever get a problem | ||
| [2009/05/26 06:42:41] <Volcane> right, puppet happily building passenger servers now | ||
| [2009/05/26 06:46:58] @ Quit: garin_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 06:50:32] <Volcane> jmeeuwen: got the passenger from fc11 working on centos 5 but had to build a new rack and a ton of requirements, that version passenger requires rack v.recent, anyway, thanks :) | ||
| [2009/05/26 06:51:43] @ Quit: steven43226: Read error: 110 (Connection timed out) | ||
| [2009/05/26 06:53:47] @ MarlondB joined channel #puppet | ||
| [2009/05/26 06:56:22] @ madrescher joined channel #puppet | ||
| [2009/05/26 06:57:03] @ Quit: glaw: Remote closed the connection | ||
| [2009/05/26 07:01:00] @ glaw joined channel #puppet | ||
| [2009/05/26 07:04:57] @ Pior joined channel #puppet | ||
| [2009/05/26 07:18:56] @ Quit: madrescher: "Leaving." | ||
| [2009/05/26 07:22:36] @ madrescher joined channel #puppet | ||
| [2009/05/26 07:26:51] <joe-mac> is running puppetmasterd as a rack app going to be the supported way to scale in .25.0? | ||
| [2009/05/26 07:29:11] @ Quit: monzie: | ||
| [2009/05/26 07:36:05] @ Quit: maxagaz: "Leaving" | ||
| [2009/05/26 07:38:50] @ Quit: madrescher: "Leaving." | ||
| [2009/05/26 07:44:03] @ Quit: jason^: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 07:45:02] @ jason^ joined channel #puppet | ||
| [2009/05/26 07:46:03] @ Quit: jason^: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 07:48:18] @ Quit: Welsh_Dwarf: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 07:48:46] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 07:50:03] @ jason^ joined channel #puppet | ||
| [2009/05/26 07:53:48] @ Quit: Welsh_Dwarf: Read error: 60 (Operation timed out) | ||
| [2009/05/26 07:54:03] @ glaw_ joined channel #puppet | ||
| [2009/05/26 07:54:09] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 07:54:30] @ Quit: glaw: Remote closed the connection | ||
| [2009/05/26 07:54:38] <duritong> rpm -Uvh /var//win 16 | ||
| [2009/05/26 07:54:41] <duritong> blah | ||
| [2009/05/26 07:56:15] * nico has just looked to what is rack | ||
| [2009/05/26 07:56:34] <nico> I wonder if I must be happy not to work in rails environments | ||
| [2009/05/26 08:00:03] <duritong> why? | ||
| [2009/05/26 08:01:54] <nico> looks like something really cool to work with, but also bringing headaches | ||
| [2009/05/26 08:05:21] <nasrat> joe-mac: well by using rack if something new comes along then in theory you get support for free if it's rack compatible | ||
| [2009/05/26 08:05:48] <nasrat> and currently phusion passenger seems to be popular choice | ||
| [2009/05/26 08:06:27] <joe-mac> o i c. i am using apache mod_proxy_balancer to solve that problem, working pretty well and i kinda don't want to change to something new lol | ||
| [2009/05/26 08:11:09] @ kibaho1 joined channel #puppet | ||
| [2009/05/26 08:14:40] @ alhoang joined channel #puppet | ||
| [2009/05/26 08:22:39] <Omahn> Hi all. I have a module (autofs) that I would like to enable on all but a few hosts and I'm struggling to find a way to achieve this. Am I missing something obvious? | ||
| [2009/05/26 08:23:53] <Omahn> We have a basenode that has 'include autofs'. In the module I was thinking of checking for the existing of a 'autofs_disabled' variable that I can set from nodes that inherit the basenode. Seems a bit clunky though doing it like that. | ||
| [2009/05/26 08:24:16] <Omahn> (nodes that inheirit the basenode that need autofs disabling that should say) | ||
| [2009/05/26 08:25:04] @ Quit: gaveen: No route to host | ||
| [2009/05/26 08:25:46] @ gaveen joined channel #puppet | ||
| [2009/05/26 08:28:23] @ thegcat joined channel #puppet | ||
| [2009/05/26 08:28:23] @ Quit: thegcat: Remote closed the connection | ||
| [2009/05/26 08:31:35] @ bajan joined channel #puppet | ||
| [2009/05/26 08:32:39] @ bajan left channel #puppet () | ||
| [2009/05/26 08:34:07] @ kambiz_away is now known as kambiz | ||
| [2009/05/26 08:34:57] @ rsquared joined channel #puppet | ||
| [2009/05/26 08:36:21] <phantez> gepetto: !seen lak | ||
| [2009/05/26 08:36:31] <phantez> gepetto: seen lak | ||
| [2009/05/26 08:36:32] <gepetto> phantez: lak was last seen 8 hours, 7 minutes and 17 seconds ago, quitting IRC () | ||
| [2009/05/26 08:42:06] @ fbe_ joined channel #puppet | ||
| [2009/05/26 08:43:04] @ pruebaz joined channel #puppet | ||
| [2009/05/26 08:44:19] @ Quit: alhoang: | ||
| [2009/05/26 08:47:18] @ masterzen joined channel #puppet | ||
| [2009/05/26 08:49:15] @ madrescher joined channel #puppet | ||
| [2009/05/26 08:50:54] @ ceren joined channel #puppet | ||
| [2009/05/26 08:51:27] @ fbe__ joined channel #puppet | ||
| [2009/05/26 08:51:30] @ Quit: fbe_: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 08:56:22] <macbar> oh man, I just don't seem to get the naginator classes :-) | ||
| [2009/05/26 08:57:37] <nico> gepetto: make me a sandwich | ||
| [2009/05/26 08:57:48] <macbar> the way they're written looks overly complex to me ... | ||
| [2009/05/26 09:01:08] @ kngus joined channel #puppet | ||
| [2009/05/26 09:01:18] @ kngus left channel #puppet ("Leaving.") | ||
| [2009/05/26 09:04:40] @ machpo joined channel #puppet | ||
| [2009/05/26 09:05:19] <Welsh_Dwarf> nico: shouldn't that be gepetto: sudo make me a sandwich | ||
| [2009/05/26 09:09:03] @ Quit: mechcow: Remote closed the connection | ||
| [2009/05/26 09:12:47] @ erm_ joined channel #puppet | ||
| [2009/05/26 09:19:29] <masterzen> Welsh_Dwarf: nico: reminds me of this very good xkcd: http://xkcd.com/149/ | ||
| [2009/05/26 09:19:39] <nico> masterzen: it was this one :) | ||
| [2009/05/26 09:20:13] @ Quit: fbe__: Read error: 110 (Connection timed out) | ||
| [2009/05/26 09:20:27] <Welsh_Dwarf> :) | ||
| [2009/05/26 09:25:02] @ nevyn_ joined channel #puppet | ||
| [2009/05/26 09:25:36] <nico> masterzen: nice work on jruby indeed | ||
| [2009/05/26 09:26:12] <masterzen> thanks. We now have to check that it is indeed faster/better than MRI :-) | ||
| [2009/05/26 09:27:05] <masterzen> I expect it will be better, though :-) | ||
| [2009/05/26 09:28:36] <nasrat> masterzen: yeah a perf test would be good | ||
| [2009/05/26 09:30:01] <masterzen> for this I want to see if there is a mongrel like thing on JRuby. I really don't know... | ||
| [2009/05/26 09:30:03] @ pluesch0r joined channel #puppet | ||
| [2009/05/26 09:30:18] <nasrat> masterzen: hold on | ||
| [2009/05/26 09:30:24] <masterzen> maybe there's even better alternatives, as it is java based... | ||
| [2009/05/26 09:30:29] <pluesch0r> hi folks. is there a way to add --force-yes to the apt install command that puppet produces? | ||
| [2009/05/26 09:30:40] <masterzen> sth like glassfish, maybe? | ||
| [2009/05/26 09:30:45] <nasrat> masterzen: yeah I probably have some references (used to work with Ola) | ||
| [2009/05/26 09:31:04] <masterzen> nasrat: I'm interested for any pointers :-) | ||
| [2009/05/26 09:31:14] <masterzen> s/for/by/ | ||
| [2009/05/26 09:32:25] @ mccune joined channel #puppet | ||
| [2009/05/26 09:35:51] <nico> pluesch0r: not to my knowledge, but you should not have to use this | ||
| [2009/05/26 09:36:43] <pluesch0r> nico: i have to if i've got my own repository that's not featuring a key. | ||
| [2009/05/26 09:37:11] <nico> add it a key then, or you may play with apt config maybe | ||
| [2009/05/26 09:37:31] <nasrat> masterzen: probably jruby-rack and warbler to create a war and run in any app server | ||
| [2009/05/26 09:37:39] @ Quit: nevyn: Read error: 101 (Network is unreachable) | ||
| [2009/05/26 09:37:41] @ glaw joined channel #puppet | ||
| [2009/05/26 09:37:55] <joe-mac> #debian is about as helpful as a concrete life jacket | ||
| [2009/05/26 09:38:00] <masterzen> nasrat: thanks, I'll have a closer look to this... | ||
| [2009/05/26 09:38:13] <pluesch0r> joe-mac: true. | ||
| [2009/05/26 09:38:34] <nasrat> though not 100% sure if that is rails only | ||
| [2009/05/26 09:38:41] <joe-mac> lol.. just felt like saying that cause by contrast, this is probably tghe most helpful channel besides #openbsd | ||
| [2009/05/26 09:38:45] <pluesch0r> nico: how do i exclude a certain repository from that key-check stuff? | ||
| [2009/05/26 09:39:05] <nico> pluesch0r: dunno, that's why I added "maybe" | ||
| [2009/05/26 09:39:47] <pluesch0r> nico: 'cause i only know how to disable that warning alltogether. | ||
| [2009/05/26 09:40:36] <nico> pluesch0r: adding a key to a repo is not big stuff in my memory no ? | ||
| [2009/05/26 09:40:59] <pluesch0r> nico: you need to do all sorts if gpg crap, then import the key on each machine and so on. | ||
| [2009/05/26 09:41:12] @ happymcplaksin joined channel #puppet | ||
| [2009/05/26 09:41:26] <pluesch0r> i'd rather avoid this completely, as the repository in question is a non-public repository.\ | ||
| [2009/05/26 09:41:52] <masterzen> pluesch0r: there are tools to manage everything for you. I can't remember its name, sth along the line of apt-repo or apt-repro? | ||
| [2009/05/26 09:42:10] <nico> pluesch0r: importing the key is done with puppet | ||
| [2009/05/26 09:42:21] <pluesch0r> yes. i know. | ||
| [2009/05/26 09:42:29] <pluesch0r> it's still something that i simply do not need. | ||
| [2009/05/26 09:42:46] @ happymcplaksin left channel #puppet ("ERC Version 5.3 (IRC client for Emacs)") | ||
| [2009/05/26 09:43:49] <nico> I tried to pass over the warning too, finally added a key | ||
| [2009/05/26 09:44:12] @ fbe joined channel #puppet | ||
| [2009/05/26 09:44:20] <pluesch0r> all of this crap because Package doesn't take a http:// source. | ||
| [2009/05/26 09:44:26] <pluesch0r> boo. | ||
| [2009/05/26 09:44:30] <joe-mac> it doesn't? | ||
| [2009/05/26 09:44:35] <pluesch0r> no. | ||
| [2009/05/26 09:44:38] <joe-mac> i think that's provider dependant... | ||
| [2009/05/26 09:44:43] <pluesch0r> dpkg/apt | ||
| [2009/05/26 09:44:46] <joe-mac> on my obsd machines i give it ftp sources | ||
| [2009/05/26 09:44:50] <masterzen> pluesch0r: you can file{} the package then use the dpkg provider | ||
| [2009/05/26 09:45:15] <pluesch0r> i can file it if the file is in a local directory (i.e. nfs) or on the puppet server itself. | ||
| [2009/05/26 09:45:26] <pluesch0r> if i deliver the file via puppet server, it dies 'cause it's running out of memory. | ||
| [2009/05/26 09:45:32] @ choffee_ is now known as choffee | ||
| [2009/05/26 09:45:35] <pluesch0r> nfs to each and every of those boxes is out of the question. | ||
| [2009/05/26 09:46:42] @ Quit: glaw_: Remote closed the connection | ||
| [2009/05/26 09:47:00] <masterzen> then exec { "wget" } might be a solution? | ||
| [2009/05/26 09:47:49] <joe-mac> pluesch0r: how big is this file? | ||
| [2009/05/26 09:48:24] @ Quit: gaveen: Success | ||
| [2009/05/26 09:48:46] <pluesch0r> 12M | ||
| [2009/05/26 09:48:59] <pluesch0r> i'm only trying to deploy ruby-enterprise. | ||
| [2009/05/26 09:49:08] @ gaveen joined channel #puppet | ||
| [2009/05/26 09:49:35] <joe-mac> pluesch0r: what version of puppet is this? how many nodes are trying to grab thi file at a given time? | ||
| [2009/05/26 09:50:12] <pluesch0r> that's puppet 0.24.5-3 | ||
| [2009/05/26 09:50:14] <pluesch0r> and it's one node. | ||
| [2009/05/26 09:50:28] <joe-mac> sounds like a bug... how much ram does your master have? | ||
| [2009/05/26 09:50:55] <joe-mac> if this is ubuntu, it's really trivial to build a .24.8 package, solves al ot of bugs | ||
| [2009/05/26 09:50:58] <pluesch0r> 512 MB | ||
| [2009/05/26 09:50:59] <HarryCalahan> pluesch0r: http://pastie.org/490013 | ||
| [2009/05/26 09:51:30] <joe-mac> pluesch0r: yea something is definitely wrong. i would try building the .24.8 package. it's really, really simple. i can pastie you my shell history from when i did it if you want. | ||
| [2009/05/26 09:51:44] <pluesch0r> HarryCalahan: thanks a lot. | ||
| [2009/05/26 09:52:24] <masterzen> pluesch0r: 0.25 is waaaaay better in file serving. | ||
| [2009/05/26 09:52:28] <HarryCalahan> pluesch0r: i use this to add the key to local apt, and copy over the apt config from puppetmaster. | ||
| [2009/05/26 09:52:47] <pluesch0r> HarryCalahan: i'm already copying the apt config from puppetmaster, but the other stuff is nice. | ||
| [2009/05/26 09:52:50] <joe-mac> masterzen: yea i kinda can't wait, but at the same time i have been trying to ph ase out file serving | ||
| [2009/05/26 09:52:58] <pluesch0r> i kinda don't want to update puppet right now. | ||
| [2009/05/26 09:53:09] <HarryCalahan> pluesch0r: do it. it's worth it. | ||
| [2009/05/26 09:53:14] <joe-mac> pluesch0r: if it's only on one node and you can plan on scaling this... i'd do it now | ||
| [2009/05/26 09:53:34] <pluesch0r> somehow, this always ends up in me wanting to do x and having to do a,b,c and so on, just 'cause something's weird. | ||
| [2009/05/26 09:54:10] * HarryCalahan notices he is running 24.8 | ||
| [2009/05/26 09:54:13] <joe-mac> pluesch0r: if a 12 meg file crashes your puppetmaster with 512 MB of ram, you're really never going to be able to use in production | ||
| [2009/05/26 09:54:13] <pluesch0r> anyways. to distribute the new puppet deb, i'd also have to have those keys set up. | ||
| [2009/05/26 09:54:32] <pluesch0r> joe-mac: i'm using it in production on 50 hosts. i just don't deliver 12MB files. | ||
| [2009/05/26 09:54:35] <pluesch0r> :) | ||
| [2009/05/26 09:54:44] <HarryCalahan> pluesch0r: i can give you ubuntu packages for 24.8 and/or dsc files to build yourself. | ||
| [2009/05/26 09:54:49] <pluesch0r> currently, i'm considering puppet as being bit brittle, though. | ||
| [2009/05/26 09:54:55] <joe-mac> wow, ok makes more sense now. you use 50 hosts to a master with 512 megs of ram, now that's kind of impressive lol | ||
| [2009/05/26 09:54:56] <pluesch0r> HarryCalahan: yeah, i'd just use the debian testing stuff. | ||
| [2009/05/26 09:55:08] <pluesch0r> joe-mac: hm? | ||
| [2009/05/26 09:55:27] <pluesch0r> joe-mac: they aren't hitting the master all at once. and i'm trying to keep file-distribution as low as possible. :) | ||
| [2009/05/26 09:56:44] <masterzen> pluesch0r: there were lots of bug fixes and enhancements between 0.24.5 and 0.24.8. I think it's worth the upgrade (especially if you run with storeconfig). | ||
| [2009/05/26 09:56:49] <joe-mac> i have about 30 on one puppetmaster with 3.6 GB of RAM, ten puppet master processes, and it usually sits at 1 GB in total of actual used memory... | ||
| [2009/05/26 09:57:03] <joe-mac> but i do kind of do too much file serving | ||
| [2009/05/26 09:57:21] <HarryCalahan> . o O ( and i thought my java process was a memory-hog) | ||
| [2009/05/26 09:57:43] <pluesch0r> joe-mac: 3.6GB of RAM?!? whoa. | ||
| [2009/05/26 09:58:12] <joe-mac> yea that's what i gave the VM, i want it to scale to bioth racks in that location | ||
| [2009/05/26 09:58:29] <joe-mac> i'm pretty sure that for larger setups people use 16 GB of ram | ||
| [2009/05/26 09:58:49] @ martha joined channel #puppet | ||
| [2009/05/26 09:58:50] * Volcane has 1GB RAM for 50ish machines master | ||
| [2009/05/26 09:58:51] <fujin> such a ridiculous waste of ram | ||
| [2009/05/26 09:58:58] <Volcane> puppet 12725 1.0 12.9 234048 135688 ? Ssl May25 9:47 /usr/bin/ruby /usr/sbin/puppetmasterd --servertype mongrel --masterport 18140 --pidfile /var/run/puppet/puppetmaster-18140.pid | ||
| [2009/05/26 09:59:07] <pluesch0r> joe-mac: to me, that sounds broken. | ||
| [2009/05/26 09:59:43] @ lak joined channel #puppet | ||
| [2009/05/26 10:00:08] <Volcane> 8gb on a ~700 machine installation | ||
| [2009/05/26 10:00:09] <joe-mac> fujin: ruby eats it. if i give it less than 1 GB, i start swapping | ||
| [2009/05/26 10:00:26] <joe-mac> swapping on a VM under vmware crippleserver = death | ||
| [2009/05/26 10:00:29] <pluesch0r> Volcane: that sounds more like it. | ||
| [2009/05/26 10:00:38] <pluesch0r> i'm running the puppetmaster inside of a xen domU\ | ||
| [2009/05/26 10:00:50] <Volcane> also xen here for the 50ish machines | ||
| [2009/05/26 10:00:52] <joe-mac> yea, probably a lot more reliable than the garbage virt we use here | ||
| [2009/05/26 10:02:04] <pluesch0r> joe-mac: we're running some vmware server 2 boxes ... they're usually under a pretty high load. | ||
| [2009/05/26 10:02:18] <pluesch0r> especially when the guests are doing some I/O | ||
| [2009/05/26 10:02:31] <joe-mac> pluesch0r: what is your disk subsystem? we use commodity whitebox sata drives. the hosts are on software raid mirrors | ||
| [2009/05/26 10:02:48] <pluesch0r> joe-mac: all of them are using 3ware sata raid controllers. | ||
| [2009/05/26 10:02:58] <joe-mac> oic | ||
| [2009/05/26 10:03:04] @ flakrat joined channel #puppet | ||
| [2009/05/26 10:03:21] <pluesch0r> i've never seen a linux box with a load of 50 before that. | ||
| [2009/05/26 10:03:25] <pluesch0r> it was quite impressive. and scary. | ||
| [2009/05/26 10:03:44] <HarryCalahan> pluesch0r: see a NFS server day. load 200+ ;) | ||
| [2009/05/26 10:03:58] @ Quit: tessier_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 10:04:05] <pluesch0r> whoa. | ||
| [2009/05/26 10:05:01] <joe-mac> http://www.pastie.org/490029 that's what my puppetmaster threads look like | ||
| [2009/05/26 10:05:06] <HarryCalahan> pluesch0r: but all nfs processes simply wait for the disk array (which broke). So in effect load is zero. no cpu usage, no i/o usage, everything just waiting | ||
| [2009/05/26 10:05:33] @ Quit: madrescher: Read error: 110 (Connection timed out) | ||
| [2009/05/26 10:06:33] * Volcane has 4 x mongrel servers for 50ish clients on a 30 minute cycle | ||
| [2009/05/26 10:11:31] @ fbe_ joined channel #puppet | ||
| [2009/05/26 10:14:14] @ mfoster joined channel #puppet | ||
| [2009/05/26 10:16:39] @ Quit: Pior: Read error: 110 (Connection timed out) | ||
| [2009/05/26 10:17:03] @ Pior joined channel #puppet | ||
| [2009/05/26 10:18:28] @ Quit: tim|macbook: | ||
| [2009/05/26 10:19:50] @ happymcplaksin joined channel #puppet | ||
| [2009/05/26 10:24:26] @ Quit: lak: | ||
| [2009/05/26 10:25:00] @ Quit: fbe: Read error: 110 (Connection timed out) | ||
| [2009/05/26 10:26:32] @ skoog_ joined channel #puppet | ||
| [2009/05/26 10:27:33] @ MaGicKanGaRoo joined channel #puppet | ||
| [2009/05/26 10:29:26] @ saurabhverma joined channel #puppet | ||
| [2009/05/26 10:32:05] @ fbe_ is now known as fbe | ||
| [2009/05/26 10:32:20] @ Quit: flakrat: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 10:33:22] <nico> Volcane: I run 4 mongrel behind nginx for ~100 clients | ||
| [2009/05/26 10:33:57] <z00dax> Volcane: around ? | ||
| [2009/05/26 10:34:03] <Volcane> nods | ||
| [2009/05/26 10:34:08] <nico> only 512 Meg | ||
| [2009/05/26 10:34:17] <nico> and no swap | ||
| [2009/05/26 10:34:29] <Volcane> heh | ||
| [2009/05/26 10:34:30] <nico> no swapping, and unused swap | ||
| [2009/05/26 10:34:36] <nico> (more clear) | ||
| [2009/05/26 10:36:27] <pluesch0r> when updating puppet .. should i start with the clients or with the master? | ||
| [2009/05/26 10:37:53] <masterzen> the master. | ||
| [2009/05/26 10:38:32] <pluesch0r> okie dokie. | ||
| [2009/05/26 10:40:12] <macbar> is the trac database down ? | ||
| [2009/05/26 10:40:49] @ tim|macbook joined channel #puppet | ||
| [2009/05/26 10:40:56] <macbar> not anymore it seems :-) | ||
| [2009/05/26 10:43:04] <sigmonsays> Morning | ||
| [2009/05/26 10:43:05] @ markl__ joined channel #puppet | ||
| [2009/05/26 10:43:08] @ Quit: markl__: Client Quit | ||
| [2009/05/26 10:50:51] @ cwebber joined channel #puppet | ||
| [2009/05/26 10:52:55] @ themurph joined channel #puppet | ||
| [2009/05/26 10:54:33] <joe-mac> Volcane: i should probably knock the threads down to 5 then? | ||
| [2009/05/26 10:54:42] @ tessier_ joined channel #puppet | ||
| [2009/05/26 10:54:50] <Volcane> worth a try, too many of a good thing isnt always good :) | ||
| [2009/05/26 10:55:13] <joe-mac> true | ||
| [2009/05/26 10:55:17] <HarryCalahan> more power *arf* *arf* | ||
| [2009/05/26 10:59:14] @ lak joined channel #puppet | ||
| [2009/05/26 11:00:22] @ hessmll joined channel #puppet | ||
| [2009/05/26 11:00:41] @ Quit: d3vilb0x: | ||
| [2009/05/26 11:01:58] @ d3vilb0x joined channel #puppet | ||
| [2009/05/26 11:05:48] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 11:09:46] @ Quit: z00dax: Read error: 60 (Operation timed out) | ||
| [2009/05/26 11:10:00] @ Quit: gaveen: No route to host | ||
| [2009/05/26 11:11:33] @ Quit: pleemans: Read error: 110 (Connection timed out) | ||
| [2009/05/26 11:11:54] @ Quit: HarryCalahan: "." | ||
| [2009/05/26 11:16:59] @ Quit: glaw: Remote closed the connection | ||
| [2009/05/26 11:18:15] @ edwardam joined channel #puppet | ||
| [2009/05/26 11:24:42] @ Quit: Tuf8: Connection timed out | ||
| [2009/05/26 11:27:22] @ glaw joined channel #puppet | ||
| [2009/05/26 11:28:18] @ Quit: ssm: "Leaving" | ||
| [2009/05/26 11:30:59] @ Quit: MarlondB: | ||
| [2009/05/26 11:34:55] @ Quit: andrewcshafer: Read error: 113 (No route to host) | ||
| [2009/05/26 11:40:30] @ Quit: Innocenti: Read error: 113 (No route to host) | ||
| [2009/05/26 11:40:35] @ Tuf8 joined channel #puppet | ||
| [2009/05/26 11:41:48] @ mvn071 joined channel #puppet | ||
| [2009/05/26 11:44:55] @ Quit: glaw: ""Between two evils, I always pick the one I never tried before" Mae West" | ||
| [2009/05/26 11:45:15] @ Quit: tim|macbook: Read error: 110 (Connection timed out) | ||
| [2009/05/26 11:47:10] <nasrat> gah | ||
| [2009/05/26 11:47:13] <nasrat> jamesturnbull: ping | ||
| [2009/05/26 11:50:58] @ Quit: Welsh_Dwarf: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 11:59:03] @ plathrop-away is now known as plathrop | ||
| [2009/05/26 12:00:31] <jbk> hmm.. can someone confirm this: with a mount resource, it does not create the underlying mount point, and must be created some other method (manually or via a file resource) | ||
| [2009/05/26 12:01:22] <plathrop> jbk: That's what I expected, but I haven't tried it. | ||
| [2009/05/26 12:01:36] <plathrop> I just assumed, and set up appropriate file resources | ||
| [2009/05/26 12:02:49] @ z00dax joined channel #puppet | ||
| [2009/05/26 12:03:14] @ Bass10 joined channel #puppet | ||
| [2009/05/26 12:03:42] <jbk> now an interesting dependency issue.. | ||
| [2009/05/26 12:03:58] <jbk> one technique I like to use is something like this | ||
| [2009/05/26 12:04:19] <jbk> mkdir /mountpoint; chown root:other /mountpoint; mount /mountpoint; chown user:group /mountpoint | ||
| [2009/05/26 12:04:48] <jbk> which has the nice property for filesystems where a non-root user needs rw access -- they get it, only while the filesystem is mounted | ||
| [2009/05/26 12:05:08] <jbk> i'm trying to figure out if there's a way to get similar semantics with puppet.. | ||
| [2009/05/26 12:06:07] <nico> using mount options | ||
| [2009/05/26 12:06:13] <nico> user=XXX ? | ||
| [2009/05/26 12:06:46] <Volcane> yeah | ||
| [2009/05/26 12:07:02] <jbk> no such options on solaris | ||
| [2009/05/26 12:07:26] <jbk> i might just punt and not specify a user/group on the mountpoint and manually chown it | ||
| [2009/05/26 12:07:44] <jbk> i suspect that'll cause it to be created root, but not enforce the ownership | ||
| [2009/05/26 12:08:02] <jbk> (I'm making a module to manage all the resource types for an Oracle ERP instance) | ||
| [2009/05/26 12:16:27] @ flakrat joined channel #puppet | ||
| [2009/05/26 12:20:08] @ pleemans joined channel #puppet | ||
| [2009/05/26 12:21:04] @ kambiz is now known as kambiz_away | ||
| [2009/05/26 12:22:17] @ Quit: aymerick: | ||
| [2009/05/26 12:23:30] @ madrescher joined channel #puppet | ||
| [2009/05/26 12:24:24] @ Quit: tessier_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 12:28:39] @ tessier_ joined channel #puppet | ||
| [2009/05/26 12:28:50] @ Quit: pluesch0r: "BAdum. *pish*" | ||
| [2009/05/26 12:29:10] @ tyler79 joined channel #puppet | ||
| [2009/05/26 12:35:19] @ Quit: fbe: Read error: 110 (Connection timed out) | ||
| [2009/05/26 12:35:31] <joe-mac> how nice of ubuntu 8.04 to bring the interfaces down before parsing /etc/network/interfaces. that way if there's a typo in the interfaces file, you get to make a field trip to the data centre | ||
| [2009/05/26 12:37:30] @ Quit: saurabhverma: Read error: 113 (No route to host) | ||
| [2009/05/26 12:40:06] @ Quit: mikepea: Read error: 60 (Operation timed out) | ||
| [2009/05/26 12:43:55] @ justindossey joined channel #puppet | ||
| [2009/05/26 12:49:38] @ Quit: schwagala: Read error: 60 (Operation timed out) | ||
| [2009/05/26 12:50:45] @ Quit: fujin: | ||
| [2009/05/26 12:52:55] @ schwagala joined channel #puppet | ||
| [2009/05/26 12:55:16] @ Quit: MattyM: "ta ta" | ||
| [2009/05/26 13:06:01] <jbk> hmm.. is there a way to manipulate the case of a variable? | ||
| [2009/05/26 13:06:29] <jbk> if i have define(foo) { ... } and i need both uppercase and lowercase versions of $foo | ||
| [2009/05/26 13:08:35] @ Quit: briandquinn: | ||
| [2009/05/26 13:09:31] @ ezmob joined channel #puppet | ||
| [2009/05/26 13:22:38] <wakko666> jbk: you could always create a puppet function that exposes ruby's .downcase() method. | ||
| [2009/05/26 13:30:45] @ Quit: authentic: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 13:32:48] <Volcane> unfort regsubst() doesnt handle things like \u to make a string uppercase :( | ||
| [2009/05/26 13:33:21] @ Quit: edwardam: Remote closed the connection | ||
| [2009/05/26 13:35:21] @ Quit: shenson_`: Read error: 110 (Connection timed out) | ||
| [2009/05/26 13:35:38] @ zoeloelip is now known as bartvb | ||
| [2009/05/26 13:35:52] @ nakano is now known as nakano_ | ||
| [2009/05/26 13:38:04] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 13:40:56] @ Quit: lak: | ||
| [2009/05/26 13:45:50] @ Quit: madrescher: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 13:47:03] @ madrescher joined channel #puppet | ||
| [2009/05/26 13:56:11] @ Ladeburger joined channel #puppet | ||
| [2009/05/26 14:00:20] @ webx joined channel #puppet | ||
| [2009/05/26 14:02:28] @ edwardam joined channel #puppet | ||
| [2009/05/26 14:03:26] @ Telmo joined channel #puppet | ||
| [2009/05/26 14:05:44] <langseth> I am working getting puppet to handle our filesystem mounts of FreeBSD. The mount type is failing because it does not accept 2 for a value, which is valid on FreeBSD. Where do I change that? I checked the mount.rb file but I did not see where values are limited | ||
| [2009/05/26 14:05:50] <Telmo> evening, when you set puppetmaster to use passenger where do the error logs go? I am getting a bounch of 500 errors but nothing in the error_log for apache? | ||
| [2009/05/26 14:06:41] <langseth> erm I meant 2 for a dump value. | ||
| [2009/05/26 14:06:49] @ Quit: MaGicKanGaRoo: Remote closed the connection | ||
| [2009/05/26 14:08:00] @ grey- joined channel #puppet | ||
| [2009/05/26 14:08:29] <Telmo> to be more specific I am getting | ||
| [2009/05/26 14:08:29] <Telmo> debug: Calling puppetmaster.getconfig | ||
| [2009/05/26 14:08:29] <Telmo> err: Could not call puppetmaster.getconfig: #<RuntimeError: HTTP-Error: 500 Internal Server Error> | ||
| [2009/05/26 14:08:30] <Telmo> err: Could not retrieve catalog: HTTP-Error: 500 Internal Server Error | ||
| [2009/05/26 14:08:32] <jrojas> langseth: dump => "2" doesnt work? | ||
| [2009/05/26 14:08:43] <jrojas> Telmo: use pastie please | ||
| [2009/05/26 14:08:52] <Telmo> k sorry | ||
| [2009/05/26 14:09:03] <jrojas> Telmo: is there anything is namespaceauth.cnf? | ||
| [2009/05/26 14:09:09] <jrojas> err namespaceauth.conf | ||
| [2009/05/26 14:09:48] <Telmo> yes, nothing has changed there, I just moved from using puppetmaster itself to using rack/passenger | ||
| [2009/05/26 14:10:46] <jrojas> Telmo: try rmeoving all entries from namespaceauth.conf or just changing them all to allow * | ||
| [2009/05/26 14:11:16] <Telmo> ok let me give that a try | ||
| [2009/05/26 14:11:37] <jrojas> Telmo: also, in config.ru, you should have Puppet::Util::Log.newdestination("/var/log/puppet/puppetmaster.log") | ||
| [2009/05/26 14:11:59] <jrojas> and above it should be a loglevel line, you can change that to :debug | ||
| [2009/05/26 14:12:27] <Telmo> humm.. I don't have that entry in the config.ru, I copy the one from github | ||
| [2009/05/26 14:12:38] <Telmo> I'll add it | ||
| [2009/05/26 14:12:50] <jrojas> Telmo: | ||
| [2009/05/26 14:12:54] <jrojas> use this http://reductivelabs.com/trac/puppet/wiki/UsingPassenger | ||
| [2009/05/26 14:12:59] <jrojas> err | ||
| [2009/05/26 14:13:01] <Telmo> I did | ||
| [2009/05/26 14:13:03] <jrojas> what version of puppet? | ||
| [2009/05/26 14:13:42] <Telmo> 0.24.7 | ||
| [2009/05/26 14:13:49] <Telmo> humm.. I think I see my problem. | ||
| [2009/05/26 14:14:30] <Telmo> I used the instructions for 0.25 | ||
| [2009/05/26 14:14:34] <jrojas> :) | ||
| [2009/05/26 14:14:34] <Telmo> *sigh* | ||
| [2009/05/26 14:15:23] <jrojas> thats easy then | ||
| [2009/05/26 14:15:48] @ kelseyhightower joined channel #puppet | ||
| [2009/05/26 14:15:52] @ Quit: kelseyhightower: Client Quit | ||
| [2009/05/26 14:21:38] @ notbrien joined channel #puppet | ||
| [2009/05/26 14:21:58] <langseth> jrojas: Nope, I get this "...Invalid 'dump' value "2". Valid values match (?-mix:(0|1))" | ||
| [2009/05/26 14:22:00] <sigmonsays> I can't believe there isn't a file or interface into sysfs | ||
| [2009/05/26 14:22:48] <jrojas> langseth: weird, check projects.reductivelabs.com and see if there is a bug filed on it | ||
| [2009/05/26 14:26:28] @ Quit: ceren: | ||
| [2009/05/26 14:27:49] @ ceren_ joined channel #puppet | ||
| [2009/05/26 14:31:16] @ Quit: edwardam: Remote closed the connection | ||
| [2009/05/26 14:33:54] <Telmo> *sigh* I am just not being lucky with this, all I can see is "May 26 14:28:06 storm puppet-rack[26023]: Starting Rack server for puppet version 0.24.7" but I keep getting the error 500 in the client, even with an empty namespaceauth.conf | ||
| [2009/05/26 14:34:25] <jrojas> Telmo: hmm... | ||
| [2009/05/26 14:34:33] <jrojas> Telmo: where is apache set to log? | ||
| [2009/05/26 14:35:20] <Telmo> default apache location, I left rack logging to :syslog | ||
| [2009/05/26 14:35:21] <jrojas> Telmo: under the vhost section for *:8140 you can add: PassengerLogLevel 1 | ||
| [2009/05/26 14:35:31] <Telmo> that's where I see rack starting | ||
| [2009/05/26 14:35:32] <jrojas> and up that to 3 or 4 and see if more verbose logs will come | ||
| [2009/05/26 14:35:57] @ Quit: markp: | ||
| [2009/05/26 14:36:14] <Telmo> I am going to try that | ||
| [2009/05/26 14:36:42] <jrojas> you will see a bunch of ssl stuff | ||
| [2009/05/26 14:36:45] <jrojas> but it should help | ||
| [2009/05/26 14:37:16] <jrojas> Telmo: also, check permissions as passenger wont run puppetmaster as root afaik | ||
| [2009/05/26 14:37:53] <Telmo> humm... I think all my files are actually owned by root :) | ||
| [2009/05/26 14:38:03] <Telmo> I know I know.. bad thing to do | ||
| [2009/05/26 14:38:40] <jrojas> Telmo: do you actually see the rack application running when you do a ps? | ||
| [2009/05/26 14:39:17] <Telmo> does it run all the time or only when get a call from apache? | ||
| [2009/05/26 14:40:03] <jrojas> depends on the passenger settigngs | ||
| [2009/05/26 14:40:04] <Telmo> nobody 27213 1 0 14:36 ? 00:00:00 Rack: /etc/puppet/rack | ||
| [2009/05/26 14:40:10] <jrojas> er.. | ||
| [2009/05/26 14:40:13] <Telmo> yes is up and running | ||
| [2009/05/26 14:40:27] <jrojas> puppet 30430 47.4 3.5 258792 150064 ? S 13:31 31:13 Rack: /usr/share/puppet/rack/puppetmasterd | ||
| [2009/05/26 14:40:30] <jrojas> that is mine | ||
| [2009/05/26 14:41:16] <jrojas> is /etc/puppet/rack where you have our docroot set to for the vhost? | ||
| [2009/05/26 14:41:17] <Telmo> ok, so the document root for the apache conf doesn't matter? | ||
| [2009/05/26 14:41:21] <Telmo> yes | ||
| [2009/05/26 14:41:23] <jrojas> k | ||
| [2009/05/26 14:42:00] <jrojas> and config.ru is @ /etc/puppet/rack/config.ru ? | ||
| [2009/05/26 14:42:10] <Telmo> I have the manifest and modules in /etc/puppet but most of the rest of stuff (like the $vardir) is in /opt/puppet | ||
| [2009/05/26 14:42:16] <Telmo> yes | ||
| [2009/05/26 14:42:21] <Telmo> let me pastie for you | ||
| [2009/05/26 14:42:39] <jrojas> and the puppetmaster.log has nothing in it? | ||
| [2009/05/26 14:42:41] <jrojas> brb | ||
| [2009/05/26 14:42:53] @ shake-n-bake joined channel #puppet | ||
| [2009/05/26 14:45:21] <Telmo> http://pastie.org/private/pxqh7ze9noy0cuhhi5gb1w that's what I have passenger/rack wise | ||
| [2009/05/26 14:48:42] <jrojas> Telmo: looks fine to me... | ||
| [2009/05/26 14:48:57] <jrojas> anything in syslog? | ||
| [2009/05/26 14:49:11] <Telmo> jsut the same line saying it is starting rack | ||
| [2009/05/26 14:49:24] <Telmo> I am changing the Passenger log level to 3 | ||
| [2009/05/26 14:50:11] @ Quit: omry: Remote closed the connection | ||
| [2009/05/26 14:50:17] <Telmo> I also changed the ownership of all the files to puppet:puppet but it didn't make a difference | ||
| [2009/05/26 14:50:31] <jrojas> well, your rack app is running as nobody | ||
| [2009/05/26 14:51:53] <webx> how much different is passenger versus the old way of having several apache proxy instances running | ||
| [2009/05/26 14:51:58] <webx> (in terms of performance) | ||
| [2009/05/26 14:52:13] <jrojas> webx: ive got over 400 hosts behind one VM running passenger | ||
| [2009/05/26 14:52:24] <jrojas> load avg is about 6 @5min | ||
| [2009/05/26 14:52:31] <webx> I'm at almost 700 now and it seems to be choking bad | ||
| [2009/05/26 14:52:36] <webx> non-passenger | ||
| [2009/05/26 14:52:53] <webx> I get timeouts and then puppetd dies | ||
| [2009/05/26 14:52:59] <jrojas> webx: as long as you tune passenger it should scale pretty well | ||
| [2009/05/26 14:53:12] <jrojas> webx: if you are serving large amounts of files, puppet usually does hang a bit | ||
| [2009/05/26 14:53:31] <webx> even if the files aren't actually served often? | ||
| [2009/05/26 14:53:51] <webx> meaning there are a number of files that puppet distributes, but they change rarely | ||
| [2009/05/26 14:54:03] <jrojas> webx: yes an no, if you do recursing on a top level directory tree, it has been a known bug to sow things down a LOT because it has to checksum each file and each dir | ||
| [2009/05/26 14:54:14] <jrojas> recursion* | ||
| [2009/05/26 14:54:18] <webx> oh, no recursion | ||
| [2009/05/26 14:54:30] <webx> single files, explicitly stated | ||
| [2009/05/26 14:54:51] <jrojas> webx: then i wouldnt worry about it, but if you are getting timeouts, then you may be hitting limitations of mongrel or whatever you are using | ||
| [2009/05/26 14:55:48] <webx> hmm, alright. I'll try to upgrade the client versions first (24.5, blah) | ||
| [2009/05/26 14:55:51] <jrojas> Telmo: you have no tmp dir | ||
| [2009/05/26 14:55:53] <webx> I think that may be some of the issue | ||
| [2009/05/26 14:56:09] <Telmo> tmp dir? | ||
| [2009/05/26 14:56:11] <jrojas> webx: there were a lot of changes that went into 24.8 to speed up things | ||
| [2009/05/26 14:56:17] <jrojas> mkdir /usr/share/puppet/rack/puppetmasterd/public /usr/share/puppet/rack/puppetmasterd/tmp | ||
| [2009/05/26 14:56:23] <jrojas> in the instructions | ||
| [2009/05/26 14:56:27] <jrojas> on the wiki | ||
| [2009/05/26 14:57:13] <jrojas> Telmo: also. it seems you are missing the lines in your pastie for loading the passenger modules | ||
| [2009/05/26 14:57:38] <Telmo> those are there, I just put them after all the other modules are loaded to keep the config consistant | ||
| [2009/05/26 14:57:48] <jrojas> k | ||
| [2009/05/26 14:58:34] <jrojas> Telmo: -rw-r--r-- 1 root root 862 May 26 14:25 config.ru | ||
| [2009/05/26 14:58:44] <jrojas> chown puppet:puppet config.ru | ||
| [2009/05/26 14:58:49] <Telmo> I did | ||
| [2009/05/26 14:58:50] <jrojas> k | ||
| [2009/05/26 14:58:55] <Telmo> all files are puppet:puppet | ||
| [2009/05/26 14:58:58] <jrojas> k | ||
| [2009/05/26 14:59:07] <Telmo> I am restarting http now and running a test | ||
| [2009/05/26 14:59:14] <jrojas> k | ||
| [2009/05/26 14:59:22] <jrojas> did you also change line 22 of your pastie to :debug ? | ||
| [2009/05/26 15:00:31] <jrojas> from :info | ||
| [2009/05/26 15:00:54] @ lak joined channel #puppet | ||
| [2009/05/26 15:01:55] <Telmo> I just did, didn't seem to make a change | ||
| [2009/05/26 15:02:08] <Telmo> I also added an ErrorLog line to the virtual host but the error log is empty | ||
| [2009/05/26 15:02:16] <Telmo> I am just going to redo the whole config again | ||
| [2009/05/26 15:02:23] @ kambiz_away is now known as kambiz | ||
| [2009/05/26 15:02:28] <jrojas> hmm | ||
| [2009/05/26 15:02:39] <jrojas> what version of passenger? | ||
| [2009/05/26 15:02:55] <Telmo> let me check | ||
| [2009/05/26 15:03:25] <Telmo> 2.2.2, rack is 1.0.0 | ||
| [2009/05/26 15:04:27] <Telmo> I am just going to do it the exact same way the wiki does, and then if it works I'll start modifying it | ||
| [2009/05/26 15:04:57] <jrojas> yea thats weird. | ||
| [2009/05/26 15:05:43] <Telmo> humm.. should I install the old version of rack? | ||
| [2009/05/26 15:05:51] <Telmo> the wiki calls for 0.4.0 | ||
| [2009/05/26 15:05:55] <Telmo> I have 1.0.0 | ||
| [2009/05/26 15:06:03] <Telmo> not sure if that will make a difference | ||
| [2009/05/26 15:06:25] <jrojas> Telmo: i have rack (0.9.1, 0.4.0) | ||
| [2009/05/26 15:07:06] <Telmo> well, I'll give it a try like this, and I'll install the older version if it doesn't work | ||
| [2009/05/26 15:09:46] @ Quit: Demosthenes: Read error: 110 (Connection timed out) | ||
| [2009/05/26 15:11:09] <Telmo> ok, it didn't work, but at least I am getting some error info in /var/log/messages now | ||
| [2009/05/26 15:12:55] <jrojas> nice | ||
| [2009/05/26 15:14:40] <jrojas> anything interesting | ||
| [2009/05/26 15:14:46] <Telmo> ok, this time around was the namespaceauth.con it didn't like an empty file, so I moved mine back and it is working now | ||
| [2009/05/26 15:14:58] <jrojas> nice | ||
| [2009/05/26 15:15:04] <Telmo> thank you soo much for the help | ||
| [2009/05/26 15:15:06] <jrojas> np | ||
| [2009/05/26 15:15:11] <jrojas> tune passenger | ||
| [2009/05/26 15:15:13] <jrojas> itll help | ||
| [2009/05/26 15:15:38] <Telmo> well, with close of 100 clients now running, just getting it in passanger helps lol | ||
| [2009/05/26 15:15:47] <Telmo> I need to read up on tuning passenger | ||
| [2009/05/26 15:16:06] @ ezmob is now known as ezmob|away | ||
| [2009/05/26 15:20:21] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 15:20:41] @ rgsteele||work joined channel #puppet | ||
| [2009/05/26 15:20:59] <langseth> jrojas: I found a ticket related to my problem #1212, I got it figured out. | ||
| [2009/05/26 15:21:00] <gepetto> langseth: jrojas: #1212 is http://projects.reductivelabs.com/issues/show/1212 "Puppet - Bug #1212: Adding only valid values for dump param in mount type - ReductiveLabs.com" | ||
| [2009/05/26 15:21:22] <rgsteele||work> Is there any way to tell Puppet to always perform a particular way with your package provider? E.g., if I want apt to always be called with '-y' and '--force-yes' for a particular class? | ||
| [2009/05/26 15:22:12] <jrojas> rgsteele||work: no | ||
| [2009/05/26 15:22:22] <rgsteele||work> Or, even just in general (not for a specific class). I know there's a 'responsefile' attribute for the package type, but I was hoping for something a bit less interactive. | ||
| [2009/05/26 15:22:31] <jrojas> rgsteele||work: you would hav to create a custom type for that | ||
| [2009/05/26 15:23:37] <rgsteele||work> jrojas: Hm, bummer. I suppose that I could always require a default for all 'Package' types, which drops in an apt.conf.d file. | ||
| [2009/05/26 15:24:15] <jrojas> in site.pp Package { require => File["path_to_file"]; } | ||
| [2009/05/26 15:24:31] <jrojas> this will ensure that the file exists before any package statements are ran | ||
| [2009/05/26 15:24:45] <rgsteele||work> jrojas: Yup. Just perusing the man pages for the option I'm looking for. | ||
| [2009/05/26 15:24:53] <jrojas> or. | ||
| [2009/05/26 15:24:56] <jrojas> you could patch lib/puppet/provider/package/apt.rb | ||
| [2009/05/26 15:25:21] <rgsteele||work> jrojas: I'm feeling to lazy to bump my package version today. | ||
| [2009/05/26 15:25:26] <rgsteele||work> s/to/too/ | ||
| [2009/05/26 15:25:35] <jrojas> :) | ||
| [2009/05/26 15:26:42] @ Quit: Ladeburger: Remote closed the connection | ||
| [2009/05/26 15:31:47] <jbk> hmm.. the docs suggest that you can't merely put an entry fstab without having it mounted as well... | ||
| [2009/05/26 15:32:43] <agaffney> add 'noauto' to the options | ||
| [2009/05/26 15:32:48] <agaffney> I assume puppet lets you do that | ||
| [2009/05/26 15:33:06] <agaffney> or are you saying that puppet will try to mount it after adding the fstab entry? | ||
| [2009/05/26 15:33:18] <jbk> the docs suggest it will try to mount it after adding the entry | ||
| [2009/05/26 15:33:26] <agaffney> ah | ||
| [2009/05/26 15:33:42] <jbk> i jsut want the entry there, and will manually mount as needed (well in some cases, others it can come up at boot) | ||
| [2009/05/26 15:33:51] @ ezmob|away is now known as ezmob | ||
| [2009/05/26 15:34:29] <Telmo> anyone knows the config option equivalent to the command line option --logdest? | ||
| [2009/05/26 15:34:48] <agaffney> probably 'logdest' :P | ||
| [2009/05/26 15:35:10] <Telmo> hehe, I did a genconfig and "grepped" for it, but its not there | ||
| [2009/05/26 15:35:38] <jbk> which really makes me wonder what use the 'present' value for the mount type has.. | ||
| [2009/05/26 15:35:53] <Telmo> unless genconfig doesn't show all the possible configuration values. | ||
| [2009/05/26 15:35:57] <jbk> (it puts in in fstab/vfstab, but then unmounts the filesystem if mounted) | ||
| [2009/05/26 15:36:56] <jbk> i'm trying to imagine a use case where you have an entry, and you want to make sure it's never mounted -- generally if it's there, it means at least sometimes you might want to mount it, but perhaps not all of the time.. | ||
| [2009/05/26 15:39:17] <Telmo> a share drive between 2 DB servers where the other server is the primary for the didk | ||
| [2009/05/26 15:39:23] <Telmo> s/didk/sidk | ||
| [2009/05/26 15:39:33] <Telmo> disk | ||
| [2009/05/26 15:39:36] <Telmo> .. damn irt | ||
| [2009/05/26 15:39:42] <Telmo> can't type I give up | ||
| [2009/05/26 15:40:10] <Telmo> that was for jbk btw | ||
| [2009/05/26 15:40:44] @ Quit: mfournier: Read error: 60 (Operation timed out) | ||
| [2009/05/26 15:54:13] @ aymerick joined channel #puppet | ||
| [2009/05/26 15:54:58] @ authentic joined channel #puppet | ||
| [2009/05/26 16:01:55] @ cwebber_ joined channel #puppet | ||
| [2009/05/26 16:04:02] @ Quit: kibaho1: "Leaving." | ||
| [2009/05/26 16:04:21] @ Quit: shake-n-bake: | ||
| [2009/05/26 16:06:21] @ ezmob is now known as ezmob|away | ||
| [2009/05/26 16:10:47] @ mikepea joined channel #puppet | ||
| [2009/05/26 16:12:53] @ Welsh_Dwarf is now known as Welsh_Dwarf|Dinn | ||
| [2009/05/26 16:13:20] @ Welsh_Dwarf|Dinn is now known as Welsh_Dwarf|AFK | ||
| [2009/05/26 16:14:28] @ Quit: cwebber: Read error: 110 (Connection timed out) | ||
| [2009/05/26 16:14:30] @ Quit: cwebber_: Read error: 54 (Connection reset by peer) | ||
| [2009/05/26 16:15:06] @ Innocenti joined channel #puppet | ||
| [2009/05/26 16:15:10] @ cwebber joined channel #puppet | ||
| [2009/05/26 16:22:33] @ Quit: madrescher: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 16:23:50] @ madrescher joined channel #puppet | ||
| [2009/05/26 16:28:56] @ Quit: erm_: "Lost terminal" | ||
| [2009/05/26 16:41:16] @ nigelk joined channel #puppet | ||
| [2009/05/26 16:43:31] @ Quit: madrescher: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 16:44:44] @ madrescher joined channel #puppet | ||
| [2009/05/26 16:45:01] @ Quit: andrewcshafer: | ||
| [2009/05/26 16:45:29] @ Quit: lak: | ||
| [2009/05/26 16:46:43] @ Quit: mikepea: | ||
| [2009/05/26 16:50:14] @ Quit: pleemans: Read error: 60 (Operation timed out) | ||
| [2009/05/26 16:56:52] @ edwardam joined channel #puppet | ||
| [2009/05/26 16:58:46] @ Quit: webx: "..(cyp): [BX] They killed Kenny! THOSE BASTARDS!" | ||
| [2009/05/26 16:58:56] @ kambiz is now known as kambiz_away | ||
| [2009/05/26 16:59:37] @ Quit: rgsteele||work: Remote closed the connection | ||
| [2009/05/26 17:01:53] @ mfournier joined channel #puppet | ||
| [2009/05/26 17:05:54] @ Quit: flakrat: "Leaving" | ||
| [2009/05/26 17:06:43] @ friocorte joined channel #puppet | ||
| [2009/05/26 17:07:13] @ Quit: goozbach: Read error: 113 (No route to host) | ||
| [2009/05/26 17:08:09] <jbk> Telmo: still, it seems like at least the fstab presence + mounted state should be divorced from each other | ||
| [2009/05/26 17:08:57] @ Quit: Tuf8: Read error: 54 (Connection reset by peer) | ||
| [2009/05/26 17:09:31] @ friocorte is now known as goozbach | ||
| [2009/05/26 17:15:15] @ londo__ is now known as londo | ||
| [2009/05/26 17:16:13] @ Quit: francois: "Leaving." | ||
| [2009/05/26 17:16:13] @ Quit: nigelk: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 17:16:13] @ nigelk_ joined channel #puppet | ||
| [2009/05/26 17:18:17] @ ezmob|away is now known as ezmob | ||
| [2009/05/26 17:19:25] @ nakano_ is now known as nakano | ||
| [2009/05/26 17:21:20] @ schwagal1 joined channel #puppet | ||
| [2009/05/26 17:23:41] @ Quit: schwagala: Read error: 60 (Operation timed out) | ||
| [2009/05/26 17:24:04] @ Quit: cwebber: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 17:24:13] @ Quit: mvn071: "Leaving" | ||
| [2009/05/26 17:25:43] @ mvn071 joined channel #puppet | ||
| [2009/05/26 17:26:03] @ Quit: mvn071: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 17:27:03] @ cwebber joined channel #puppet | ||
| [2009/05/26 17:34:47] @ ezmob is now known as ezmob|away | ||
| [2009/05/26 17:39:11] @ notbrien_ joined channel #puppet | ||
| [2009/05/26 17:45:09] @ Djelibeybi joined channel #puppet | ||
| [2009/05/26 17:48:01] @ WALoeIII joined channel #puppet | ||
| [2009/05/26 17:53:58] @ Quit: mfoster: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 17:54:35] @ mfoster joined channel #puppet | ||
| [2009/05/26 17:55:14] @ Quit: aymerick: | ||
| [2009/05/26 17:56:10] @ Quit: notbrien: Read error: 110 (Connection timed out) | ||
| [2009/05/26 17:57:43] @ Quit: nigelk_: | ||
| [2009/05/26 18:04:41] @ nigelk joined channel #puppet | ||
| [2009/05/26 18:05:23] @ Quit: justindossey: "Leaving." | ||
| [2009/05/26 18:05:37] @ justindossey joined channel #puppet | ||
| [2009/05/26 18:08:57] @ lak joined channel #puppet | ||
| [2009/05/26 18:10:05] @ fbe joined channel #puppet | ||
| [2009/05/26 18:10:21] @ Quit: mccune: "Leaving." | ||
| [2009/05/26 18:12:14] <agaffney> so, I just encountered an interesting issue | ||
| [2009/05/26 18:12:24] <agaffney> I use the iptables recipe from the wiki | ||
| [2009/05/26 18:12:51] <agaffney> I ran the centos security config thing to disable selinux, and it rewrote my /etc/sysconfig/iptables | ||
| [2009/05/26 18:12:58] <agaffney> it locked me out of the box | ||
| [2009/05/26 18:13:17] <agaffney> I had to add exec { "/usr/sbin/rebuild-iptables": } to that node and wait for the next sync to get back in | ||
| [2009/05/26 18:13:25] <agaffney> how can I automatically detect that? | ||
| [2009/05/26 18:15:05] <agaffney> http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleIptables | ||
| [2009/05/26 18:15:08] <agaffney> that one | ||
| [2009/05/26 18:15:11] <agaffney> well, slightly modified | ||
| [2009/05/26 18:15:23] <agaffney> but nothing that have any bearing on this issue | ||
| [2009/05/26 18:17:28] <agaffney> I guess I can do something like exec { "/usr/sbin/rebuild-iptables": onlyif => 'test -n $(find /etc/sysconfig -mmin -$runinternal -name iptables)' } | ||
| [2009/05/26 18:17:42] <agaffney> actually, there's probably an easier way | ||
| [2009/05/26 18:18:08] <agaffney> just add a commented string I can grep for to the file | ||
| [2009/05/26 18:18:34] @ ezmob|away is now known as ezmob | ||
| [2009/05/26 18:19:51] <agaffney> exec { "/usr/sbin/rebuild-iptables": unless => 'grep -q "^# Managed by puppet" /etc/sysconfig/iptables' } | ||
| [2009/05/26 18:21:05] <nigelk> lak: you or any other reductivelabs people at the Ubuntu Developer Summit ? | ||
| [2009/05/26 18:21:16] <lak> nigelk: unfortunately, no | ||
| [2009/05/26 18:21:25] <lak> although i talked to gustavo this morning | ||
| [2009/05/26 18:21:35] <nigelk> I hear there is an upcoming discussion about the officially sanctioned CMS tomorrow or something | ||
| [2009/05/26 18:21:45] <nigelk> ie which ends up in main as opposed to multiverse | ||
| [2009/05/26 18:22:44] <agaffney> woot, that works | ||
| [2009/05/26 18:23:24] @ Quit: ibt: Remote closed the connection | ||
| [2009/05/26 18:25:47] <lak> nigelk: yeah, i really wanted to be there for that to put my voice in, but we've been talking to them somewhat regularly | ||
| [2009/05/26 18:25:54] <nigelk> that's good to hear. | ||
| [2009/05/26 18:25:55] <lak> nigelk: if you go and it looks like puppet's losing, call me :) | ||
| [2009/05/26 18:26:15] <nigelk> hah. Andy Pollock from here is there, he'll be attending and live updating us, so will do :) | ||
| [2009/05/26 18:27:11] @ Quit: Sakarias: "Lost terminal" | ||
| [2009/05/26 18:28:10] @ Sakarias joined channel #puppet | ||
| [2009/05/26 18:29:01] <joe-mac> ubuntu would be absolutely retarded to not put puppet as the main CMS | ||
| [2009/05/26 18:33:34] @ ezmob is now known as ezmob|away | ||
| [2009/05/26 18:35:27] @ Quit: martha: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 18:39:46] @ Quit: Innocenti: Read error: 110 (Connection timed out) | ||
| [2009/05/26 18:40:19] @ Innocenti joined channel #puppet | ||
| [2009/05/26 18:40:32] @ Quit: Sakarias: "leaving" | ||
| [2009/05/26 18:40:32] @ Quit: fbe: Remote closed the connection | ||
| [2009/05/26 18:40:41] @ Sakarias joined channel #puppet | ||
| [2009/05/26 18:41:33] @ cpdiety joined channel #puppet | ||
| [2009/05/26 18:42:22] @ Quit: alban2: Read error: 113 (No route to host) | ||
| [2009/05/26 18:42:26] <cpdiety> gepetto: help | ||
| [2009/05/26 18:42:26] <gepetto> cpdiety: help topics: 10 core modules: auth, basics, config, filters, httputil, irclog, remote, unicode, userdata, wordlist; 8 plugins: debug, hudson, redmineurls, rss, seen, shortenurls, time, tracurls; 76 plugins ignored: use help ignored plugins to see why (help <topic> for more info) | ||
| [2009/05/26 18:45:05] <cpdiety> I've googled around a bit, does puppet support ACLs yet? It would be really handy. | ||
| [2009/05/26 18:45:58] @ kelseyhightower joined channel #puppet | ||
| [2009/05/26 18:48:59] <jrojas> cpdiety: namespacequth.conf | ||
| [2009/05/26 18:49:14] <jrojas> err whatever, sort of restric things based on hostnames to certain aspects of puppetmaster | ||
| [2009/05/26 18:50:01] <jrojas> gepetto: help auth | ||
| [2009/05/26 18:50:01] <gepetto> jrojas: auth <masterpassword>: log in as the bot owner; other commands: login, whoami, permissions syntax, permissions [re]set, permissions view, user, meet, hello, allow, prevent | ||
| [2009/05/26 18:50:01] <cpdiety> jrojas: yeah, I knew about that. I was actually talking about filesystem ACLs. | ||
| [2009/05/26 18:50:10] <jrojas> well that wasnt helpful | ||
| [2009/05/26 18:50:17] <nigelk> joe-mac: I believe Chef may be a contender | ||
| [2009/05/26 18:50:48] <cpdiety> jrojas: Ticket #1033 | ||
| [2009/05/26 18:50:48] <gepetto> cpdiety: jrojas: #1033 is http://projects.reductivelabs.com/issues/show/1033 "Puppet - Feature #1033: support for file system acls on the file type - ReductiveLabs.com" | ||
| [2009/05/26 18:51:13] <cpdiety> jrojas: similar to that | ||
| [2009/05/26 18:51:30] <jrojas> oh those acls | ||
| [2009/05/26 18:52:49] @ Quit: tessier_: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 18:53:30] <jrojas> cpdiety: thats a pretty specific freebsd item i take it | ||
| [2009/05/26 18:54:11] <jrojas> cpdiety: you almost could make a custom type for it, shouldnt be too hard. | ||
| [2009/05/26 18:54:22] <cpdiety> I imagine that I could build a definition that wraps around file and uses a bunch of execs to check and set ACLs somehow. But I was just wondering whether there was something more official. | ||
| [2009/05/26 18:54:46] <cpdiety> jrojas: actually it's a posix spec I believe | ||
| [2009/05/26 18:55:05] <Djelibeybi> Is anyone aware of a bug in 0.24.8 where Puppet doesn't remove a user from a group if the group => setting changes? | ||
| [2009/05/26 18:55:19] <Djelibeybi> I've removed a group from the array, but Puppet isn't changing the group membership of the user | ||
| [2009/05/26 18:56:07] <joe-mac> nigelk: hasn't chef only been aroudn for like a couple of months? | ||
| [2009/05/26 18:56:16] <Djelibeybi> However, if I change the comment, that changes fine. | ||
| [2009/05/26 18:56:21] <joe-mac> jrojas: that's not freebsd specific | ||
| [2009/05/26 18:56:26] <joe-mac> hp ux, linux, freebsd all do it | ||
| [2009/05/26 18:56:34] <jrojas> joe-mac: well, only if it is enabled | ||
| [2009/05/26 18:56:37] <jrojas> :) | ||
| [2009/05/26 18:57:01] <joe-mac> yea, i always enable it | ||
| [2009/05/26 18:57:11] <cpdiety> I think most linux distros have it on by default | ||
| [2009/05/26 18:57:16] <joe-mac> some people are claiming ZFS acl's are the future, but you can't even back those up yet afaik | ||
| [2009/05/26 18:57:22] @ rektide joined channel #puppet | ||
| [2009/05/26 18:57:22] <joe-mac> i know boontoo doesn't | ||
| [2009/05/26 18:57:31] <jbk> yes you can (on solaris at least) | ||
| [2009/05/26 18:57:35] <joe-mac> i have to set it on / with puppet or in my preseed | ||
| [2009/05/26 18:57:43] <joe-mac> jbk: how? | ||
| [2009/05/26 18:57:46] <cpdiety> joe-mac: hehe, one distro I don't touch | ||
| [2009/05/26 18:58:09] <joe-mac> i haven't used RHEL in a while, but i thought you had to enable the fs opt on there too... it should be a default imo | ||
| [2009/05/26 18:58:23] <joe-mac> cpdiety: yea i really only picked it up cause of this job i got | ||
| [2009/05/26 18:58:24] <cpdiety> it is default in 5.3 | ||
| [2009/05/26 18:58:36] <joe-mac> nice... i don't think i've touched rhel since 52 | ||
| [2009/05/26 18:58:50] <cpdiety> I'm in a all centos shop | ||
| [2009/05/26 18:58:56] <joe-mac> lucky you | ||
| [2009/05/26 18:59:13] <cpdiety> heh, yeah, not so much, I actually hate it, but it works | ||
| [2009/05/26 18:59:20] <joe-mac> i'm cleaning up a huge dumb that this guy took and called it "infrastructure" | ||
| [2009/05/26 18:59:21] @ ezmob|away is now known as ezmob | ||
| [2009/05/26 18:59:25] <joe-mac> dump** | ||
| [2009/05/26 18:59:54] <joe-mac> cpdiety: what is your distro of choice? | ||
| [2009/05/26 19:00:04] <cpdiety> I take it that it resembles something built by red-green | ||
| [2009/05/26 19:00:39] <Djelibeybi> Nevermind, needed the membership => inclusive option | ||
| [2009/05/26 19:00:51] <jrojas> any of the comptocamp guys around? | ||
| [2009/05/26 19:00:53] <cpdiety> joe-mac: I'm a gentoo user. Everytime I get annoyed at the compile time I try another binary distro, and then remember why I like gentoo. | ||
| [2009/05/26 19:01:03] <jbk> joe-mac: tar seems to work fine for it (at least on solaris, I can't comment on any other os) | ||
| [2009/05/26 19:01:20] <jbk> but they're pretty close to what ntfs and nfsv4 use for their acls as well.. | ||
| [2009/05/26 19:01:20] <joe-mac> jbk: hmmm maybe cause we use opensolaris | ||
| [2009/05/26 19:01:47] <jbk> are you using /usr/gnu/bin/tar or /usr/bin/tar | ||
| [2009/05/26 19:01:48] <jbk> ? | ||
| [2009/05/26 19:02:02] <joe-mac> yea that's what i was told, and why i was told using linux acl's in production wasn't so swift cause they're gonna get deprecated... but the syntax of linux acls is similar if not identical to the original ones in hp-ux and they look like the fbsd ones i've seen | ||
| [2009/05/26 19:02:03] @ mfoster left channel #puppet () | ||
| [2009/05/26 19:02:11] <jbk> i'm guessing gnu tar won't, but /usr/bin/tar should | ||
| [2009/05/26 19:02:15] <cpdiety> has anybody loked at the crazy fuse version of ZFS? | ||
| [2009/05/26 19:02:22] <jbk> well it;s also the same format as ufs acl's | ||
| [2009/05/26 19:02:28] @ ibt joined channel #puppet | ||
| [2009/05/26 19:02:29] <joe-mac> good question jbk, i'm not in charge of that box, i will forward the information to the guy thuogh, he just hopped on a flight out of here | ||
| [2009/05/26 19:02:37] <jbk> IIRC, there was a posix draft that was never approved | ||
| [2009/05/26 19:02:45] <jbk> and a lot of *ix'es adopted it | ||
| [2009/05/26 19:02:51] <jbk> hence why they all look similar | ||
| [2009/05/26 19:03:06] <jbk> though i don't know why it wasn't approved | ||
| [2009/05/26 19:03:32] * cpdiety shrugs | ||
| [2009/05/26 19:03:33] <jbk> do you track /release or /dev ? | ||
| [2009/05/26 19:04:05] <jbk> i would think if for acls if it just passed the string down uninterpeted, that might be sufficient to work with whatever | ||
| [2009/05/26 19:04:21] <joe-mac> yea i actually put "make a define for acl's" in my request tracker... | ||
| [2009/05/26 19:05:16] <cpdiety> I suppose the tricky bit would be figuring out what the underlying fs supported. | ||
| [2009/05/26 19:05:47] <joe-mac> hmmm, i guess you could require the mount and make sure options has acl... it'd be kludgy though | ||
| [2009/05/26 19:05:57] <jbk> one of my projects (after a few others are done) is to (assuming no one else gets to it first) add in a lot more support to puppet for opensolaris stuff (such as pkg(5), additional facts, updatig the zfs type) | ||
| [2009/05/26 19:08:48] <joe-mac> jbk: i'm not sure on the specifics, this guy who is like a sys admin for the devs on the left coast told me this, and i ddin't believe him, so i looked it up and other people were complaining too... i'm thinking you might be on to something with the gnu vs solaris tar though | ||
| [2009/05/26 19:09:14] <jbk> probably, i'm looking at the solaris tar source :) | ||
| [2009/05/26 19:09:19] <jbk> the acl support is there | ||
| [2009/05/26 19:09:35] <jbk> it's been a bit of an annoyance that they put /usr/gnu/bin first in the path | ||
| [2009/05/26 19:10:11] <jbk> my argument to the indiana guys was either patch the gnu utilities to support the solaris features (i.e. acls, extended attributes), or fix the solaris utilities for any major missing features | ||
| [2009/05/26 19:10:25] @ tessier_ joined channel #puppet | ||
| [2009/05/26 19:10:33] <joe-mac> good argument, i think i'd agree | ||
| [2009/05/26 19:11:29] <jbk> apparently patches were attempted to be submitted in the past, but rejected by the coreutils people because it was 'platform specific'.. so it was more 'maintain a fork' or 'fix our stuff' | ||
| [2009/05/26 19:12:00] @ Quit: justindossey: "Leaving." | ||
| [2009/05/26 19:12:22] <jbk> though on that vein, while it got missed for the upcoming 2009.06 release, /bin/ls will support color starting in b116 (if you use /dev, or will see it in the next release after this) | ||
| [2009/05/26 19:15:29] <joe-mac> is it solaris sed that won't read the last line of the file is there is not an extra newline? god that was annoying | ||
| [2009/05/26 19:15:36] @ Demosthenes joined channel #puppet | ||
| [2009/05/26 19:19:31] <jbk> hmm not sure.. i usually used the xpg4 version | ||
| [2009/05/26 19:21:46] @ shake-n-bake joined channel #puppet | ||
| [2009/05/26 19:21:47] @ Quit: Innocenti: Read error: 110 (Connection timed out) | ||
| [2009/05/26 19:23:54] @ ezmob is now known as ezmob|away | ||
| [2009/05/26 19:46:05] <ed209> can you use a file type to recursively copy over a directory to clients? | ||
| [2009/05/26 19:46:42] <ed209> I have a directory full of scripts, and was wondering if I can make a quick type to ensure that they are on all clients | ||
| [2009/05/26 19:46:54] <ed209> rather than doing an exec rsync to keep things up to date | ||
| [2009/05/26 19:50:59] <ed209> oh, I think I'm dumb, just add the recurse => true | ||
| [2009/05/26 19:52:09] <lak> ed209: yep :) | ||
| [2009/05/26 19:52:36] @ Quit: lak: | ||
| [2009/05/26 19:59:09] @ Quit: cwebber: | ||
| [2009/05/26 20:00:04] @ cwebber joined channel #puppet | ||
| [2009/05/26 20:05:37] <tessier_> hmm....where do I define what the puppetmaster is? It is trying to retrieve files from a machine named "puppet" but I don't have such a machine. Maybe I should just make one in DNS and cname it to my real puppetmaster machine. | ||
| [2009/05/26 20:06:01] <jrojas> source => puppet://$servername/path/to/file | ||
| [2009/05/26 20:06:07] @ Quit: cwebber: Read error: 60 (Operation timed out) | ||
| [2009/05/26 20:06:09] <Djelibeybi> tessier_: Are you using the /etc/sysconfig/puppet file? | ||
| [2009/05/26 20:06:20] <Djelibeybi> tessier_: it uses that to set the --server command line variable | ||
| [2009/05/26 20:06:26] <jrojas> that too :) | ||
| [2009/05/26 20:07:00] @ mib_9fccx1 joined channel #puppet | ||
| [2009/05/26 20:09:00] <mib_9fccx1> having trouble with 0.24.4 and subscribing to a File with a dash in the file name | ||
| [2009/05/26 20:09:12] <mib_9fccx1> Configuration could not be instantiated: Could not find dependency File[/etc/syslog-ng/syslog-ng.conf] | ||
| [2009/05/26 20:09:31] <mib_9fccx1> I can't seem to find anything related to his in my searching | ||
| [2009/05/26 20:09:52] <mib_9fccx1> file does exist | ||
| [2009/05/26 20:10:02] @ Quit: hessmll: "Leaving..." | ||
| [2009/05/26 20:10:38] <tessier_> Djelibeybi: Ah, there it is. It is commented out. Thanks! | ||
| [2009/05/26 20:10:39] <mib_9fccx1> *this | ||
| [2009/05/26 20:11:28] <tessier_> Can someone give me a brief rundown on when I would want to use a manifest vs a module vs a class? | ||
| [2009/05/26 20:11:59] @ Quit: nigelk: | ||
| [2009/05/26 20:14:10] <joe-mac> does ssh_authorized_key take a full path under target, or just a filename? | ||
| [2009/05/26 20:20:40] @ Quit: mfournier: Read error: 113 (No route to host) | ||
| [2009/05/26 20:22:08] @ Quit: notbrien_: | ||
| [2009/05/26 20:26:56] @ chip__ joined channel #puppet | ||
| [2009/05/26 20:28:04] @ ezmob|away is now known as ezmob | ||
| [2009/05/26 20:29:24] @ WALoeIII_ joined channel #puppet | ||
| [2009/05/26 20:33:11] @ ryanduff|away is now known as ryanduff | ||
| [2009/05/26 20:36:31] @ Quit: shake-n-bake: | ||
| [2009/05/26 20:38:26] @ Quit: Pior: Read error: 110 (Connection timed out) | ||
| [2009/05/26 20:39:17] @ Quit: mib_9fccx1: "http://www.mibbit.com ajax IRC Client" | ||
| [2009/05/26 20:43:19] @ Quit: atlan_: Read error: 110 (Connection timed out) | ||
| [2009/05/26 20:44:17] @ Quit: ezmob: "Bye!" | ||
| [2009/05/26 20:45:56] @ Quit: WALoeIII_: No route to host | ||
| [2009/05/26 20:46:24] @ Quit: alfism: "Connection reset by beer" | ||
| [2009/05/26 20:46:39] @ Quit: WALoeIII: Read error: 113 (No route to host) | ||
| [2009/05/26 20:49:11] <jrojas> tessier_: classes are in manifests. | ||
| [2009/05/26 20:50:16] <tessier_> jrojas: And what's the difference between manifests and modules? | ||
| [2009/05/26 20:50:40] <jrojas> tessier_: modules are generally extensions or organized manifests for specific items, say an iptables module or apache module, that has classes within it ie: class apache {..} and class apache::config {..} where the end result would be in your node definition, only needing to include "apache" | ||
| [2009/05/26 20:52:04] <tessier_> I seem to have followed two different tutorials which create an example manifest to control /etc/sudoers and one uses just a straight manifest and one uses a module and I seem to have confused things pretty goo. | ||
| [2009/05/26 20:52:05] <tessier_> d | ||
| [2009/05/26 20:52:35] <tessier_> Do you normally start out writing a manifest for something basic and then move it to a module as it becomes more complicated? Or should I be trying to set everything up as a module? | ||
| [2009/05/26 20:53:03] <jrojas> tessier_: i start new environments with modules, just so organization is easier, | ||
| [2009/05/26 20:53:27] @ garin_ joined channel #puppet | ||
| [2009/05/26 20:53:39] <jrojas> and the only things that I would have in the default manifests dir (where your site.pp is) would be a global_defaults.pp (variables and stuff in one central place) | ||
| [2009/05/26 20:53:49] <jrojas> and the site.pp would contain node definitions, | ||
| [2009/05/26 20:54:20] <jrojas> everything else is a module, so for example, i can have an apache module, that will have this dir structure: modules/apache/{files,templates,manifests} | ||
| [2009/05/26 20:54:54] <jrojas> inside of manifests is an init.pp that includes the other pp files within that manifests dir so things can be broken out into easier to manage smaller files | ||
| [2009/05/26 20:55:20] <joe-mac> yea, i would recommend starting off using modules, or you'll end up in the mess that i am | ||
| [2009/05/26 20:55:29] <joe-mac> tons of classes that are disorganized and suck to manage | ||
| [2009/05/26 20:55:56] <joe-mac> i'm going to phase out as many fiel resources as possible now that i am on .24.8 and then modularize everything | ||
| [2009/05/26 20:56:04] <tessier_> When I run puppetd --server myserver.domain.com --waitforcert 60 --test it provides some output but does not actually tell me what it is doing/checking/changing. What is the best way to test one's config and have some visibility into what is getting done? | ||
| [2009/05/26 20:56:18] <joe-mac> tessier: puppetd --test | ||
| [2009/05/26 20:56:22] <joe-mac> or -t, synonymous | ||
| [2009/05/26 20:56:36] <jrojas> i usually use puppetd -vt | ||
| [2009/05/26 20:56:36] <joe-mac> o i didn't see you had --test in there | ||
| [2009/05/26 20:56:42] <jrojas> and sometimes --noop | ||
| [2009/05/26 20:56:50] <joe-mac> yea, --debug if it's just sitting there forever | ||
| [2009/05/26 20:56:57] <joe-mac> (my way of doing it atl east) | ||
| [2009/05/26 20:57:11] <tessier_> hmm...yeah, --test didn't really show anything useful. I'm not sure if it is picking up my module or not. | ||
| [2009/05/26 20:57:40] <joe-mac> change something in your module that should change something on the node then | ||
| [2009/05/26 20:57:53] <joe-mac> something simple, create a file resource /tmp/testing or something | ||
| [2009/05/26 20:58:02] <tessier_> --debug provides a lot more. Looks like it isn't getting my module. I don't see it doing anything with the /etc/sudoers file | ||
| [2009/05/26 20:58:34] @ shake-n-bake joined channel #puppet | ||
| [2009/05/26 20:58:36] <tessier_> It should be loading /etc/puppet/manifests/site.pp by default and I can get everything else loaded from there right? | ||
| [2009/05/26 21:00:17] <tessier_> http://copilotco.com/paste/31/ is my site.pp and then my modules.pp contains only import "sudo" and sudo lives at /etc/puppet/modules/sudo | ||
| [2009/05/26 21:00:49] <jrojas> tessier_: does puppet.conf know where your module dir is? | ||
| [2009/05/26 21:01:24] <jrojas> modulepath = /opt/puppet/production/modules | ||
| [2009/05/26 21:01:25] <jrojas> etc.. | ||
| [2009/05/26 21:01:30] <tessier_> Perhaps not. Although I'm surprised it didn't throw some sort of error. I haven't told it anything about it. | ||
| [2009/05/26 21:01:42] <tessier_> I was wondering how all of this fit together. Not surprised I'm missing something. | ||
| [2009/05/26 21:02:00] <jrojas> tessier_: if it doesnt know about it, how acn i complain about it? | ||
| [2009/05/26 21:02:31] <tessier_> the site.pp says: import "modules" | ||
| [2009/05/26 21:03:10] <jrojas> tessier_: import "modules" is pretty generic, http://reductivelabs.com/trac/puppet/wiki/ModuleOrganisation | ||
| [2009/05/26 21:03:30] <tessier_> Right, that document is where I got it from. | ||
| [2009/05/26 21:04:02] <jrojas> so does your puppetmaster config have a moduledir ? | ||
| [2009/05/26 21:04:04] <tessier_> Ah, but it seems I missed that step. | ||
| [2009/05/26 21:04:08] <tessier_> Nope. Let me fix that... | ||
| [2009/05/26 21:04:10] <jrojas> or modulepath | ||
| [2009/05/26 21:05:45] @ lludwig joined channel #puppet | ||
| [2009/05/26 21:06:17] @ Quit: lludwig: Client Quit | ||
| [2009/05/26 21:06:32] @ lludwig joined channel #puppet | ||
| [2009/05/26 21:19:49] @ plathrop is now known as plathrop-away | ||
| [2009/05/26 21:28:56] @ Quit: shake-n-bake: | ||
| [2009/05/26 21:29:47] @ lak joined channel #puppet | ||
| [2009/05/26 21:46:38] @ Quit: lak: | ||
| [2009/05/26 21:49:28] @ maxagaz joined channel #puppet | ||
| [2009/05/26 21:56:45] @ Quit: dan_chen: "leaving" | ||
| [2009/05/26 21:57:20] @ dan_chen joined channel #puppet | ||
| [2009/05/26 22:10:05] @ cwebber joined channel #puppet | ||
| [2009/05/26 22:10:27] @ mfoster joined channel #puppet | ||
| [2009/05/26 22:15:25] @ atlan_ joined channel #puppet | ||
| [2009/05/26 22:23:52] @ pleemans joined channel #puppet | ||
| [2009/05/26 22:31:21] @ Quit: chip__: Read error: 110 (Connection timed out) | ||
| [2009/05/26 22:31:23] <devicenull> is there a decent way to interact with iptables? | ||
| [2009/05/26 22:31:25] @ mfoster left channel #puppet () | ||
| [2009/05/26 22:32:14] <agaffney> devicenull: http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleIptables | ||
| [2009/05/26 22:32:19] <agaffney> that works great | ||
| [2009/05/26 22:32:56] <devicenull> thx | ||
| [2009/05/26 22:58:52] <dixond> hrm, I'm not certain about the whole iptables fragments thing. It seems.... dirty. | ||
| [2009/05/26 22:59:16] <dixond> I feel like there should be a higher level declarative syntax a-la firehol or something. | ||
| [2009/05/26 22:59:25] <dixond> *shrugs* oh well :) | ||
| [2009/05/26 22:59:39] @ lak joined channel #puppet | ||
| [2009/05/26 23:03:03] @ Quit: kelseyhightower: | ||
| [2009/05/26 23:15:12] @ jmeeuwen_ joined channel #puppet | ||
| [2009/05/26 23:15:29] @ Welsh_Dwarf joined channel #puppet | ||
| [2009/05/26 23:16:56] @ Quit: garin_: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:57] @ Quit: Welsh_Dwarf|AFK: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:57] @ Quit: machpo: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:57] @ Quit: jmeeuwen: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:57] @ Quit: omry|work: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:58] @ Quit: tsb: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:59] @ Quit: cmoates: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:59] @ Quit: mrrx: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:16:59] @ Quit: buggs: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:17:00] @ Quit: jamesturnbull: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:17:00] @ Quit: ralfgro_: verne.freenode.net irc.freenode.net | ||
| [2009/05/26 23:17:02] @ jmeeuwen_ is now known as jmeeuwen | ||
| [2009/05/26 23:17:41] @ garin_ joined channel #puppet | ||
| [2009/05/26 23:17:41] @ machpo joined channel #puppet | ||
| [2009/05/26 23:17:42] @ omry|work joined channel #puppet | ||
| [2009/05/26 23:17:42] @ tsb joined channel #puppet | ||
| [2009/05/26 23:17:42] @ cmoates joined channel #puppet | ||
| [2009/05/26 23:17:42] @ jamesturnbull joined channel #puppet | ||
| [2009/05/26 23:17:42] @ buggs joined channel #puppet | ||
| [2009/05/26 23:17:42] @ ralfgro_ joined channel #puppet | ||
| [2009/05/26 23:17:43] @ mrrx joined channel #puppet | ||
| [2009/05/26 23:18:13] @ Quit: tsb: SendQ exceeded | ||
| [2009/05/26 23:19:53] @ tsb joined channel #puppet | ||
| [2009/05/26 23:38:02] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 23:39:17] @ andrewcshafer_ joined channel #puppet | ||
| [2009/05/26 23:39:18] @ Quit: andrewcshafer: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:43:56] @ csamuelson joined channel #puppet | ||
| [2009/05/26 23:44:52] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 23:44:53] @ Quit: andrewcshafer_: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:46:46] @ csamuelson left channel #puppet () | ||
| [2009/05/26 23:48:17] @ andrewcshafer_ joined channel #puppet | ||
| [2009/05/26 23:48:17] @ Quit: andrewcshafer: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:49:02] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 23:49:05] @ Quit: andrewcshafer_: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:49:40] @ andrewcshafer_ joined channel #puppet | ||
| [2009/05/26 23:49:43] @ Quit: andrewcshafer: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:50:56] @ csamuelson joined channel #puppet | ||
| [2009/05/26 23:53:06] @ PaulWay joined channel #puppet | ||
| [2009/05/26 23:53:11] <PaulWay> Hi all! | ||
| [2009/05/26 23:53:24] @ Quit: pleemans: Read error: 110 (Connection timed out) | ||
| [2009/05/26 23:53:25] @ Quit: andrewcshafer_: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:53:36] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 23:54:52] @ Quit: andrewcshafer: Read error: 104 (Connection reset by peer) | ||
| [2009/05/26 23:55:05] @ andrewcshafer joined channel #puppet | ||
| [2009/05/26 23:55:24] @ Quit: andrewcshafer: Client Quit | ||
| [2009/05/26 23:57:19] <PaulWay> I've got machine names that are in the form xxx-yyy-zzz-abc, but for a bacula template I'd like to add these using just the abc part. |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!