| [2009/12/17 00:04:47] @ Log started by gepetto | ||
| [2009/12/17 00:04:47] @ Quit: M-: "Leaving" | ||
| [2009/12/17 00:13:50] @ Quit: cwebber: | ||
| [2009/12/17 00:15:35] @ rmiller4pi81 joined channel #puppet | ||
| [2009/12/17 00:28:19] @ Demosthenex joined channel #puppet | ||
| [2009/12/17 00:32:38] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out) | ||
| [2009/12/17 00:36:20] @ bodepd left channel #puppet () | ||
| [2009/12/17 00:36:32] @ Quit: n0ts_: Remote closed the connection | ||
| [2009/12/17 00:39:46] @ n0ts joined channel #puppet | ||
| [2009/12/17 00:39:52] @ Quit: pting: "Ex-Chat" | ||
| [2009/12/17 00:41:13] @ Quit: Demosthenes: Read error: 110 (Connection timed out) | ||
| [2009/12/17 00:42:53] @ suchu joined channel #puppet | ||
| [2009/12/17 00:52:18] @ Quit: mecca_: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 01:00:51] @ mecca joined channel #puppet | ||
| [2009/12/17 01:05:33] @ rmiller4pi8 joined channel #puppet | ||
| [2009/12/17 01:06:54] @ Quit: ajf-: Read error: 60 (Operation timed out) | ||
| [2009/12/17 01:08:44] @ bodepd joined channel #puppet | ||
| [2009/12/17 01:09:43] <bodepd> ohadlevy: you have 1.8.1 on RHEL 4 with .25.1? | ||
| [2009/12/17 01:10:05] <ohadlevy> bodepd: i have a few test machines, but most still use 24-8 | ||
| [2009/12/17 01:10:14] <ohadlevy> i didnt migrate to 0.25 yet | ||
| [2009/12/17 01:10:18] <ohadlevy> waiting for 0.25.2 | ||
| [2009/12/17 01:10:42] <bodepd> not a bad idea. I think that the 1.8.1 issue was introduced in .25.0 | ||
| [2009/12/17 01:10:49] @ hy is now known as _silver | ||
| [2009/12/17 01:11:23] <ohadlevy> i guess it depends, you might get all kind of crazy yaml errors with .25, but with moving to pson i think its should be solved | ||
| [2009/12/17 01:12:12] <bodepd> true, it just smells related :) | ||
| [2009/12/17 01:12:17] <ohadlevy> bodepd: long term - 0.25.x should be much faster/better even on older ruby | ||
| [2009/12/17 01:12:43] <ohadlevy> yeah | ||
| [2009/12/17 01:13:40] @ hamish joined channel #puppet | ||
| [2009/12/17 01:14:24] <ohadlevy> i've been considering for a long time to reuse RHE5 ruby in RHE4-3 | ||
| [2009/12/17 01:14:53] <ohadlevy> i use RHE4 ruby in RHE3 as custom package already | ||
| [2009/12/17 01:15:45] @ WALoeIII joined channel #puppet | ||
| [2009/12/17 01:20:06] <gepetto> ::trac:: Release Notes edited @ http://reductivelabs.com/trac/puppet/wiki/ReleaseNotes?version=50 | ||
| [2009/12/17 01:23:42] @ Quit: rmiller4pi81: Read error: 110 (Connection timed out) | ||
| [2009/12/17 01:26:18] @ ajf- joined channel #puppet | ||
| [2009/12/17 01:43:57] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 01:44:50] @ Quit: ajf-: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 01:44:58] @ Quit: rsquared: Read error: 60 (Operation timed out) | ||
| [2009/12/17 01:46:06] @ Quit: nmi: "Leaving" | ||
| [2009/12/17 01:49:52] @ Quit: jfreeman: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 01:50:05] @ Quit: kolla: Read error: 60 (Operation timed out) | ||
| [2009/12/17 01:50:07] @ Quit: bodepd: | ||
| [2009/12/17 01:54:51] @ kibahop joined channel #puppet | ||
| [2009/12/17 01:55:34] @ kibahop left channel #puppet () | ||
| [2009/12/17 01:58:42] @ Quit: pinoyskull: Read error: 113 (No route to host) | ||
| [2009/12/17 02:02:20] @ Quit: rsquared_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 02:02:55] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/12/17 02:13:23] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 02:14:00] @ ajf- joined channel #puppet | ||
| [2009/12/17 02:24:29] @ Quit: Mandus: "leaving" | ||
| [2009/12/17 02:32:55] @ Quit: JM: Read error: 110 (Connection timed out) | ||
| [2009/12/17 02:41:13] @ giskard joined channel #puppet | ||
| [2009/12/17 02:41:16] @ bodepd joined channel #puppet | ||
| [2009/12/17 02:42:02] @ bodepd left channel #puppet () | ||
| [2009/12/17 02:49:15] @ Quit: rsquared_: "Leaving" | ||
| [2009/12/17 02:52:08] @ Quit: bobbyz_: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 02:57:34] @ friendly12345 joined channel #puppet | ||
| [2009/12/17 02:57:41] @ Quit: giskard: Remote closed the connection | ||
| [2009/12/17 03:01:36] @ Mandus joined channel #puppet | ||
| [2009/12/17 03:20:24] @ suchu_ joined channel #puppet | ||
| [2009/12/17 03:22:29] @ suchu__ joined channel #puppet | ||
| [2009/12/17 03:26:13] @ kolla joined channel #puppet | ||
| [2009/12/17 03:29:02] @ Quit: int: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 03:30:05] @ Quit: suchu_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 03:33:03] @ giskard joined channel #puppet | ||
| [2009/12/17 03:33:39] @ pacalm joined channel #puppet | ||
| [2009/12/17 03:33:42] @ poison joined channel #puppet | ||
| [2009/12/17 03:36:59] @ Djelibeybi joined channel #puppet | ||
| [2009/12/17 03:38:41] @ int joined channel #puppet | ||
| [2009/12/17 03:38:47] @ Quit: suchu: Read error: 110 (Connection timed out) | ||
| [2009/12/17 03:39:33] @ yarihm joined channel #puppet | ||
| [2009/12/17 03:39:49] @ tavril joined channel #puppet | ||
| [2009/12/17 03:41:18] <tavril> Hello all. I have a strange behavior with my puppet config (0.25.1) and maybe you can help me ... I defined some users (using virtual resources), | ||
| [2009/12/17 03:41:53] <tavril> everything is fine, except that from time to time, the puppetd client tries to re-created some users ! | ||
| [2009/12/17 03:42:48] <tavril> in the /var/log/messages, I even have successful reports (//user::virtual::gims/User[toto]/ensure) created but /etc/passwd and /etc/shadow are unmodified .... | ||
| [2009/12/17 03:42:49] <tavril> any idea ? | ||
| [2009/12/17 03:45:24] @ raphink joined channel #puppet | ||
| [2009/12/17 03:45:48] @ suchu joined channel #puppet | ||
| [2009/12/17 03:47:04] @ jfreeman joined channel #puppet | ||
| [2009/12/17 03:50:10] @ Quit: suchu: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 03:50:39] @ alexine_dsouza joined channel #puppet | ||
| [2009/12/17 03:56:43] @ danielbln joined channel #puppet | ||
| [2009/12/17 04:00:40] @ Quit: yarihm: "This computer has gone to sleep" | ||
| [2009/12/17 04:03:22] @ Quit: jfreeman: Read error: 60 (Operation timed out) | ||
| [2009/12/17 04:04:28] <henk> puppetd[4023]: Could not retrieve catalog: uninitialized constant Facter::Util::IP any ideas what could be causing this? | ||
| [2009/12/17 04:05:13] @ Quit: suchu__: Read error: 110 (Connection timed out) | ||
| [2009/12/17 04:07:31] <Volcane> did u upgrade facter recently? | ||
| [2009/12/17 04:07:59] <henk> Volcane: yes. | ||
| [2009/12/17 04:08:13] <Volcane> restart puppet | ||
| [2009/12/17 04:09:20] <henk> ah ok, just did that :) let's see if another logcheck mail comes with those messages. thanks | ||
| [2009/12/17 04:10:47] <henk> next try: is there a document describing how to let the puppetmaster manage itself? what to look out for, what pitfalls there are, what NOT to do? because atm i'm just getting errors from the client... | ||
| [2009/12/17 04:11:48] @ quit (okay bye) | ||
| [2009/12/17 04:12:59] @ Joined channel #puppet | ||
| [2009/12/17 04:12:59] @ Topic is "Puppet 0.25.1 released - http://tinyurl.com/puppet0251 | Log bugs and feature requests at http://tinyurl.com/46ryk7" | ||
| [2009/12/17 04:12:59] @ Topic set by jamesturnbull on Tue Oct 27 03:06:46 -0400 2009 | ||
| [2009/12/17 04:13:12] @ Mode +tnc by kubrick.freenode.net | ||
| [2009/12/17 04:13:30] <henk> Volcane: sorry, i mean let puppetd manage the server puppetmasterd runs on with the rules from puppetmasterd. because atm quite a few of my machines are in a good state, with the puppetmaster being one of the worst because all the rules i let puppet apply to other servers are not applied to the server the master is running on. | ||
| [2009/12/17 04:13:33] <Volcane> yes, thats the question i answered :) | ||
| [2009/12/17 04:14:00] @ choffee_ joined channel #puppet | ||
| [2009/12/17 04:14:00] @ blue_ joined channel #puppet | ||
| [2009/12/17 04:14:08] <Volcane> you run puppetd on the master server, and u give it manifest to edit the files needed | ||
| [2009/12/17 04:14:10] <henk> uhm, ok, then i don't understand it :) you mean let puppetd read the rules directly instead of letting it ask the master? | ||
| [2009/12/17 04:14:17] @ taihen joined channel #puppet | ||
| [2009/12/17 04:14:19] @ jhulten_work_ joined channel #puppet | ||
| [2009/12/17 04:14:23] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/12/17 04:14:27] <henk> then i need an extra manifest?! | ||
| [2009/12/17 04:14:46] <Volcane> u need manifests to manage the files needed | ||
| [2009/12/17 04:14:53] <Volcane> its just like any other node | ||
| [2009/12/17 04:14:58] @ suchu joined channel #puppet | ||
| [2009/12/17 04:15:29] <henk> Volcane: either i don't understand you or we are wal^Wtalking in different directions... | ||
| [2009/12/17 04:15:39] <Volcane> :) | ||
| [2009/12/17 04:16:03] @ Quit: ajf-: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:03] @ Quit: OMCK: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:04] @ Quit: _lunix_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:04] @ Quit: pacalm: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:05] @ Quit: rmiller4pi8: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:05] @ Quit: mecca: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:06] @ Quit: bug: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:06] @ Quit: taihen_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:07] @ Quit: Bogdar: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:07] @ Quit: duritong: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:08] @ Quit: rellis: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:08] @ Quit: rwp: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:09] @ Quit: gepetto: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:09] @ Quit: goraxe: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:10] @ Quit: falsch: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:10] @ Quit: kambiz: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:11] @ Quit: Clint: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:11] @ Quit: bda: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:12] @ Quit: lilmatt: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:13] @ Quit: ashp: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:14] @ Quit: jhulten: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:15] @ Quit: samppah: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:16] @ Quit: ptman: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:16] @ Quit: elementai: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:17] @ Quit: blue: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:17] @ Quit: jmslagle: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:18] @ Quit: tuf_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:19] @ Quit: windo: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:19] @ Quit: msf_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:19] @ Quit: dan__t: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:20] @ Quit: jds2001: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:21] @ Quit: choffee__: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:21] @ Quit: asbruvik: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:22] @ Quit: monrad: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:22] @ Quit: impl: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:23] @ Quit: fux__: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:24] @ Quit: _nalle: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:24] @ Quit: Ju: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:24] @ Quit: LapTop006: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 04:16:25] <Volcane> u need stuff like file{"/etc/puppet/puppet.conf": ... } for it, and package{} and so forth and so on | ||
| [2009/12/17 04:16:25] <Volcane> for everything u did to set it up by hand | ||
| [2009/12/17 04:16:25] @ ptman joined channel #puppet | ||
| [2009/12/17 04:16:38] @ samppah joined channel #puppet | ||
| [2009/12/17 04:16:39] @ jds2001 joined channel #puppet | ||
| [2009/12/17 04:16:40] @ falsch joined channel #puppet | ||
| [2009/12/17 04:16:41] @ monrad joined channel #puppet | ||
| [2009/12/17 04:16:42] @ rwp joined channel #puppet | ||
| [2009/12/17 04:16:44] @ Clint joined channel #puppet | ||
| [2009/12/17 04:16:47] @ mecca joined channel #puppet | ||
| [2009/12/17 04:16:53] <henk> Volcane: so essentially i will have my /etc/puppet/manifests/site.pp for use with puppetmasterd and a special manifest that puppetd reads directly on puppetmasterd itself? | ||
| [2009/12/17 04:16:56] @ dan__t joined channel #puppet | ||
| [2009/12/17 04:17:24] <Volcane> no, its just like any other node | ||
| [2009/12/17 04:17:39] <Volcane> it will connect to your master, and do whats in node its.fqdn.com { ... } | ||
| [2009/12/17 04:17:46] @ rellis joined channel #puppet | ||
| [2009/12/17 04:17:54] @ fux joined channel #puppet | ||
| [2009/12/17 04:18:56] @ Bogdar joined channel #puppet | ||
| [2009/12/17 04:19:16] @ ashp joined channel #puppet | ||
| [2009/12/17 04:19:29] @ duritong joined channel #puppet | ||
| [2009/12/17 04:19:33] @ bda joined channel #puppet | ||
| [2009/12/17 04:19:38] @ rmiller4pi8 joined channel #puppet | ||
| [2009/12/17 04:19:52] @ impl joined channel #puppet | ||
| [2009/12/17 04:19:56] @ _nalle joined channel #puppet | ||
| [2009/12/17 04:19:57] @ msf joined channel #puppet | ||
| [2009/12/17 04:20:00] @ windo joined channel #puppet | ||
| [2009/12/17 04:20:07] @ tuf_ joined channel #puppet | ||
| [2009/12/17 04:20:15] @ pacalm joined channel #puppet | ||
| [2009/12/17 04:20:41] @ Quit: Av: Read error: 60 (Operation timed out) | ||
| [2009/12/17 04:20:45] @ kambiz joined channel #puppet | ||
| [2009/12/17 04:20:54] @ Av joined channel #puppet | ||
| [2009/12/17 04:21:17] @ bug joined channel #puppet | ||
| [2009/12/17 04:21:22] @ lilmatt joined channel #puppet | ||
| [2009/12/17 04:22:03] @ asbruvik joined channel #puppet | ||
| [2009/12/17 04:23:20] @ yarihm joined channel #puppet | ||
| [2009/12/17 04:24:50] @ Quit: mecca: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 04:25:08] @ elementai joined channel #puppet | ||
| [2009/12/17 04:28:55] @ goraxe joined channel #puppet | ||
| [2009/12/17 04:30:39] @ Quit: poison: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 04:31:26] @ poison joined channel #puppet | ||
| [2009/12/17 04:33:59] <henk> Volcane: ok o_O that's why i ask if there is anything to look out for: i keep getting these errors from puppetd: http://paste.debian.net/54255/ | ||
| [2009/12/17 04:35:41] @ OMCK joined channel #puppet | ||
| [2009/12/17 04:35:41] @ LapTop006 joined channel #puppet | ||
| [2009/12/17 04:35:42] @ Ju joined channel #puppet | ||
| [2009/12/17 04:35:42] @ ajf- joined channel #puppet | ||
| [2009/12/17 04:39:55] @ scylla joined channel #puppet | ||
| [2009/12/17 04:42:57] @ Quit: friendly12345: "Leaving." | ||
| [2009/12/17 04:48:45] @ jfreeman joined channel #puppet | ||
| [2009/12/17 04:53:21] <henk> Volcane: if i do what's mentioned in #1525 (kill mongrel, apache, ... start puppetmasterd --no-daemonize -v) and then restart puppetd, it pulls the catalog just fine and applies it... | ||
| [2009/12/17 04:53:22] <gepetto_> henk: Volcane: #1525 is http://projects.reductivelabs.com/issues/show/1525 "Puppet - Bug #1525: local host fails to sync with mongrel/apache2 - ReductiveLabs.com" | ||
| [2009/12/17 04:56:37] @ MattyM joined channel #puppet | ||
| [2009/12/17 05:01:58] @ PsychoSid joined channel #puppet | ||
| [2009/12/17 05:10:55] @ jab_doa joined channel #puppet | ||
| [2009/12/17 05:12:45] @ mvn071 joined channel #puppet | ||
| [2009/12/17 05:13:00] @ verwilst joined channel #puppet | ||
| [2009/12/17 05:20:26] @ Quit: tavril: "Page closed" | ||
| [2009/12/17 05:22:53] @ Ramonster joined channel #puppet | ||
| [2009/12/17 05:28:43] @ Quit: Demosthenex: Read error: 60 (Operation timed out) | ||
| [2009/12/17 05:31:15] @ Quit: poison: Remote closed the connection | ||
| [2009/12/17 05:33:59] @ Robbie_ joined channel #puppet | ||
| [2009/12/17 05:44:54] @ Quit: jab_doa: "Verlassend" | ||
| [2009/12/17 05:50:03] <TheAvatar> Lets say, I have two File entries for the same file (using a template). Can I, depending on whether a node includes a given other class, make it use either File[1] or File[2]? Like "if includes the class testclass, use File[1], else use File[2]". How do I do that? | ||
| [2009/12/17 05:51:46] @ yure joined channel #puppet | ||
| [2009/12/17 05:57:14] @ Quit: fluxdude: "leaving" | ||
| [2009/12/17 05:58:16] <Volcane> TheAvatar: if defined(Class["foo"]) { ... } | ||
| [2009/12/17 05:58:27] <Volcane> TheAvatar: however its order dependant, so the include has to happen before | ||
| [2009/12/17 05:59:16] <TheAvatar> okay, cool - and can I use if defined(...) { } else { } ? | ||
| [2009/12/17 05:59:28] <TheAvatar> or else two seperate if's, where I can do if undefined or !defined ? | ||
| [2009/12/17 06:00:41] <Volcane> see wiki:LanguageTutorial | ||
| [2009/12/17 06:00:42] <gepetto_> Volcane: wiki:LanguageTutorial is http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial | ||
| [2009/12/17 06:00:55] @ poison joined channel #puppet | ||
| [2009/12/17 06:03:11] @ p3rror joined channel #puppet | ||
| [2009/12/17 06:12:07] <TheAvatar> It seems to work just fine. Thank you very much Volcane | ||
| [2009/12/17 06:14:46] @ _lunix_ joined channel #puppet | ||
| [2009/12/17 06:16:42] <TheAvatar> One more thing... tmp_table_size = <%= (memorysize.to_i*1000*0.016).to_i -%>M. I use that to set various variables for MySQL. The problem is, if the machine is 1GB+ memory, memorysize from facter is in GB. Is it below 1GB, it shows it in MB. That means, my thing counts wrong. | ||
| [2009/12/17 06:17:00] <TheAvatar> What would a smart approach be? I dont know, if I can convert the memorysize to MB always fx | ||
| [2009/12/17 06:17:38] <Volcane> yeah, its a pity the facts for those are favouring human readable format | ||
| [2009/12/17 06:18:37] <Volcane> guess you'd need to just check if the fact has a MB or GB in it | ||
| [2009/12/17 06:21:12] @ blahdeblah joined channel #puppet | ||
| [2009/12/17 06:24:53] @ Quit: jmeeuwen: Read error: 110 (Connection timed out) | ||
| [2009/12/17 06:27:48] <TheAvatar> so, inside my <%= -%>, I can use 'if' and such? | ||
| [2009/12/17 06:28:50] <Volcane> TheAvatar: http://pastie.org/746994 | ||
| [2009/12/17 06:28:55] <Volcane> there's a complex example | ||
| [2009/12/17 06:33:41] <ohadlevy> TheAvatar: I already fixed that in foreman, maybe you can use this (starting at line 44) - http://theforeman.org/repositories/entry/foreman/config/initializers/foreman.rb | ||
| [2009/12/17 06:38:50] <tim|imac> not my place to question the devs, but isn't it a little strange to create a fact that's human readable when you probable want to use it in puppet? | ||
| [2009/12/17 06:39:23] <Volcane> tim|imac: quite | ||
| [2009/12/17 06:39:42] <ohadlevy> yeah | ||
| [2009/12/17 06:39:44] <tim|imac> TheAvatar: I think it should be reported as a bug, then | ||
| [2009/12/17 06:40:09] <ohadlevy> i think that integer facts should have multiple representations | ||
| [2009/12/17 06:40:30] <ohadlevy> e.g. it was annoying to graph avg memory usage | ||
| [2009/12/17 06:40:35] <ohadlevy> based on facts | ||
| [2009/12/17 06:41:44] <Volcane> they should take the scale_number function in those facts out and make it a puppet function | ||
| [2009/12/17 06:41:56] <Volcane> so if u wanted human you can just make it, but the data should be raw | ||
| [2009/12/17 06:42:18] <ohadlevy> yep, sounds to me like a feature request | ||
| [2009/12/17 06:45:59] @ Quit: alexine_dsouza: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 06:49:37] @ Quit: mvn071: Remote closed the connection | ||
| [2009/12/17 06:56:38] <TheAvatar> thanks so far - I'll just gotta go for half an hour - I'll get back to you with my results | ||
| [2009/12/17 07:01:21] @ rsquared joined channel #puppet | ||
| [2009/12/17 07:08:22] @ Quit: yure: "Odhajam" | ||
| [2009/12/17 07:10:42] @ Quit: jfreeman: Read error: 110 (Connection timed out) | ||
| [2009/12/17 07:23:22] @ fluxdude joined channel #puppet | ||
| [2009/12/17 07:28:16] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 07:28:19] @ Quit: rsquared: Read error: 110 (Connection timed out) | ||
| [2009/12/17 07:29:15] <henk> Volcane: any other ideas? the solutions given in the bug i mentioned before did not work out for me... | ||
| [2009/12/17 07:44:45] <verwilst> can i use myparam.include?('bleh') shizzle in manifests like i can in templates? | ||
| [2009/12/17 07:46:56] <ohadlevy> verwilst:no | ||
| [2009/12/17 07:47:27] <verwilst> ohadlevy, only simple comparisons then, as i thought | ||
| [2009/12/17 07:47:52] <ohadlevy> verwilst: you could abuse inline_template | ||
| [2009/12/17 07:54:15] <poison> something like: $myVar = inline_template("<% server_profile_assigned.include?("apachedev") %>"); or how exactly? | ||
| [2009/12/17 07:57:33] @ Quit: erm_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 08:00:29] @ silfreed left channel #puppet ("Leaving") | ||
| [2009/12/17 08:00:33] @ chah joined channel #puppet | ||
| [2009/12/17 08:00:33] @ silfreed joined channel #puppet | ||
| [2009/12/17 08:00:34] <chah> hiqll | ||
| [2009/12/17 08:00:41] @ Quit: lilmatt: Client Quit | ||
| [2009/12/17 08:00:41] <chah> s/q/@ | ||
| [2009/12/17 08:00:57] @ erm_ joined channel #puppet | ||
| [2009/12/17 08:01:01] <chah> in which intervalls checks the puppetclient for updates? | ||
| [2009/12/17 08:05:35] <henk> hm, so the puppetclient on the puppetmaster works fine, when i tell it to use something other than the hostname for its cert... that sucks. | ||
| [2009/12/17 08:05:43] <henk> chah: look in the config. | ||
| [2009/12/17 08:06:31] <giz--> i never used puppet : is it hard to create : specific kernel deployment, network configuration and vmware deployment ? | ||
| [2009/12/17 08:08:05] @ rsquared joined channel #puppet | ||
| [2009/12/17 08:09:09] @ Quit: kolla: Remote closed the connection | ||
| [2009/12/17 08:09:41] @ rmiller4pi81 joined channel #puppet | ||
| [2009/12/17 08:13:30] @ Quit: rsquared_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 08:21:57] @ _Lemon_ joined channel #puppet | ||
| [2009/12/17 08:25:44] @ strangeloop joined channel #puppet | ||
| [2009/12/17 08:25:52] @ nakano_ is now known as nakano | ||
| [2009/12/17 08:26:24] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out) | ||
| [2009/12/17 08:34:51] <strangeloop> what's the purpose of the a query method in a provider? | ||
| [2009/12/17 08:38:38] @ lilmatt joined channel #puppet | ||
| [2009/12/17 08:46:26] @ Quit: suchu: "ChatZilla 0.9.86 [Firefox 3.0.16/2009120208]" | ||
| [2009/12/17 08:50:24] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 08:50:33] @ Quit: rsquared: Read error: 60 (Operation timed out) | ||
| [2009/12/17 08:53:01] @ whaley joined channel #puppet | ||
| [2009/12/17 08:55:39] @ jcape joined channel #puppet | ||
| [2009/12/17 08:57:56] <duritong> strangeloop: to query the current state of the resource? | ||
| [2009/12/17 09:01:03] @ joe-mac joined channel #puppet | ||
| [2009/12/17 09:01:46] @ rsquared joined channel #puppet | ||
| [2009/12/17 09:02:53] @ malraid joined channel #puppet | ||
| [2009/12/17 09:05:06] @ Quit: rsquared_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 09:05:35] @ Quit: crdant: "Leaving." | ||
| [2009/12/17 09:06:07] @ Bass10 joined channel #puppet | ||
| [2009/12/17 09:07:24] <strangeloop> duritong, what state? | ||
| [2009/12/17 09:07:49] <strangeloop> the methods for ensurable are create, destroy and exists? | ||
| [2009/12/17 09:08:07] <strangeloop> and any other parameter needs a corresponding method | ||
| [2009/12/17 09:09:09] @ pheezy joined channel #puppet | ||
| [2009/12/17 09:09:43] @ themurph joined channel #puppet | ||
| [2009/12/17 09:11:39] @ Quit: erm_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 09:13:48] @ Quit: jcape: Read error: 60 (Operation timed out) | ||
| [2009/12/17 09:14:46] @ jcape joined channel #puppet | ||
| [2009/12/17 09:16:11] @ jimmij joined channel #puppet | ||
| [2009/12/17 09:18:37] @ jY left channel #puppet ("Leaving") | ||
| [2009/12/17 09:20:40] @ Quit: RageLink: "up up and away" | ||
| [2009/12/17 09:21:40] @ erm_ joined channel #puppet | ||
| [2009/12/17 09:23:46] <duritong> strangeloop: I'm not really sure if it is always required | ||
| [2009/12/17 09:24:19] @ Quit: lilmatt: Read error: 60 (Operation timed out) | ||
| [2009/12/17 09:24:43] @ Quit: grim_radical_: Read error: 113 (No route to host) | ||
| [2009/12/17 09:25:51] <duritong> strangeloop: seems more like a helper method | ||
| [2009/12/17 09:30:45] @ Quit: bug: | ||
| [2009/12/17 09:31:04] @ Quit: jcape: Read error: 110 (Connection timed out) | ||
| [2009/12/17 09:31:17] @ jcape joined channel #puppet | ||
| [2009/12/17 09:31:26] @ fwryan joined channel #puppet | ||
| [2009/12/17 09:31:37] <_silver> im using the filebucket to send lots of small files, in the logs i see a few seconds between sending every file | ||
| [2009/12/17 09:31:41] <_silver> is this normal? | ||
| [2009/12/17 09:33:38] @ Quit: ssm: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 09:33:39] @ Quit: |Mike|: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 09:33:39] @ Quit: mat_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 09:34:17] <joe-mac> _silver: file serving in puppet pre .25 is slow... | ||
| [2009/12/17 09:34:35] <_silver> ah, figures then since im on 24.6 | ||
| [2009/12/17 09:34:49] <_silver> might be time to upgrade :) | ||
| [2009/12/17 09:34:54] <joe-mac> yea you should upgrade at the very least to .24.8. file serving is still slow but lots of nice features and fixes | ||
| [2009/12/17 09:35:02] <_silver> kk | ||
| [2009/12/17 09:35:22] <joe-mac> i'm on .24.8 right now been pretty solid, waiting for rowlfe... .26 i think it's gonna be | ||
| [2009/12/17 09:35:51] @ ohadlevy left channel #puppet () | ||
| [2009/12/17 09:35:59] @ ohadlevy joined channel #puppet | ||
| [2009/12/17 09:36:10] <Telmo> ohadlevy: ping | ||
| [2009/12/17 09:37:17] @ Quit: giskard: Remote closed the connection | ||
| [2009/12/17 09:38:04] @ giskard joined channel #puppet | ||
| [2009/12/17 09:38:17] @ DracoWork joined channel #puppet | ||
| [2009/12/17 09:43:17] @ mat_ joined channel #puppet | ||
| [2009/12/17 09:43:17] @ ssm joined channel #puppet | ||
| [2009/12/17 09:43:17] @ |Mike| joined channel #puppet | ||
| [2009/12/17 09:43:44] @ Quit: fwryan: "Page closed" | ||
| [2009/12/17 09:43:50] @ Quit: zamolxes: Read error: 60 (Operation timed out) | ||
| [2009/12/17 09:44:05] @ Quit: rmiller4pi81: "Leaving." | ||
| [2009/12/17 09:44:26] <ohadlevy> telmo:pong | ||
| [2009/12/17 09:44:36] <Telmo> there you are :) | ||
| [2009/12/17 09:50:21] @ _bobbyz joined channel #puppet | ||
| [2009/12/17 09:51:15] @ mellentm joined channel #puppet | ||
| [2009/12/17 09:53:01] <chah> cd / | ||
| [2009/12/17 09:53:05] <chah> ... | ||
| [2009/12/17 09:55:02] <ashp> going over old modules is so embarrassing | ||
| [2009/12/17 09:55:21] <ashp> when you realize how insane and complex you made some of the logic for no reason | ||
| [2009/12/17 09:55:39] <fsweetser> I had the same thing going through some SQL I had written about 6 years prior | ||
| [2009/12/17 09:55:42] <ashp> i had a mixture of exec{}'s that were refreshonly and some other stuff etc etc when all I really needed was a single exec{} using a creates | ||
| [2009/12/17 09:55:46] <fsweetser> made me want to go back and slap myself =) | ||
| [2009/12/17 09:55:50] <ashp> all of a sudden everything works perfectly | ||
| [2009/12/17 09:56:27] <ashp> before i had all this clever stuff to try to determine if it had been run once (as you have to accept the licence), then run this boot-enable option to spit out some further stuff | ||
| [2009/12/17 09:56:36] <ashp> i don't know why i made it so hard for myself :) | ||
| [2009/12/17 09:56:43] @ Quit: mellen: Read error: 110 (Connection timed out) | ||
| [2009/12/17 09:56:44] @ mellentm is now known as mellen | ||
| [2009/12/17 09:59:31] <joe-mac> same with programming in all languages | ||
| [2009/12/17 09:59:42] <joe-mac> it's embarassing to review even old nagios configs lol | ||
| [2009/12/17 10:00:37] <ohadlevy> what i like is that now if i rewrite the code, its 70% shorter :) | ||
| [2009/12/17 10:00:55] <fsweetser> all the newbie knows is the using a screwdriver, but he still does his damndest to tighten that bolt with it | ||
| [2009/12/17 10:02:54] <ohadlevy> fsweetser: did you find the new features in foreman useful? | ||
| [2009/12/17 10:03:37] @ ohadlevy left channel #puppet () | ||
| [2009/12/17 10:03:44] @ ohadlevy joined channel #puppet | ||
| [2009/12/17 10:05:15] @ giz-- left channel #puppet () | ||
| [2009/12/17 10:06:47] <fsweetser> ohadlevy: haven't had too much time to play with them all yet | ||
| [2009/12/17 10:07:02] <fsweetser> I'd already been on git, though, so they weren't that new to me =) | ||
| [2009/12/17 10:07:21] @ kaptk2 joined channel #puppet | ||
| [2009/12/17 10:12:35] * ohadlevy wonders if anyone discovered the query interface | ||
| [2009/12/17 10:13:25] <ashp> I want to play with that but it looks like I need to setup some ssh keys or something from the examples? | ||
| [2009/12/17 10:14:10] @ rmiller4pi8 joined channel #puppet | ||
| [2009/12/17 10:14:35] <ohadlevy> ashp: well.. how do you login to your hosts today? | ||
| [2009/12/17 10:15:03] <ohadlevy> the example script is using ssh, but you can use the query interface for a lot of stuff | ||
| [2009/12/17 10:15:22] <ohadlevy> e.g. populate hosts which you open FW ports for | ||
| [2009/12/17 10:15:29] <ohadlevy> or whatever use cases | ||
| [2009/12/17 10:16:04] <ashp> ohadlevy: I have local accounts with passwords (I know, i know) | ||
| [2009/12/17 10:16:21] <ashp> Post christmas when I get to do my GRAND REVAMP of the environment again (if my boss ever stops with projects) | ||
| [2009/12/17 10:16:30] <ashp> I plan to roll out the full ssh key setup and remove local passwords finally | ||
| [2009/12/17 10:28:31] <Volcane> ashp: you can use the query interface to build your nagios without stored configs | ||
| [2009/12/17 10:28:50] @ Quit: DracoWork: | ||
| [2009/12/17 10:28:58] <Volcane> ashp: you just query foreman for all hosts with class apache::service and make nagios checks for them for example | ||
| [2009/12/17 10:32:53] @ Quit: mellen: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 10:33:42] @ mellen joined channel #puppet | ||
| [2009/12/17 10:33:53] @ cwebber joined channel #puppet | ||
| [2009/12/17 10:34:42] <ashp> Volcane: that's pretty neat | ||
| [2009/12/17 10:35:22] <ashp> i think eventually i will move to a hybrid of standard puppet/queried constructions | ||
| [2009/12/17 10:35:26] <ashp> as it makes al ot of sense for some stuff | ||
| [2009/12/17 10:35:55] <Volcane> was the main win that iclassify had really | ||
| [2009/12/17 10:36:04] <Volcane> being able to perform full text search over the data in it | ||
| [2009/12/17 10:37:23] <ashp> how does foreman's querying comparae to your mcollective? | ||
| [2009/12/17 10:38:09] <joe-mac> i'm having a really awfl problem. the nagios.cfg that gets generated by ERB has some kind of bad character(s) in it that are invisible to the human eye, but nagios -v sure sees it.... anybody have any clue how i can figure out exactly what is happening? | ||
| [2009/12/17 10:38:14] <joe-mac> s/awfl/awful | ||
| [2009/12/17 10:38:19] @ lilmatt joined channel #puppet | ||
| [2009/12/17 10:38:21] <Volcane> ashp: different things | ||
| [2009/12/17 10:38:26] <fsweetser> joe-mac: pipe it through od? | ||
| [2009/12/17 10:39:28] <ashp> load it in vim and do :set list | ||
| [2009/12/17 10:39:30] <ashp> and then look? :) | ||
| [2009/12/17 10:39:37] @ jimi_c-ph joined channel #puppet | ||
| [2009/12/17 10:39:39] <fsweetser> actually, hexdump -C is more useful than od | ||
| [2009/12/17 10:40:48] <joe-mac> i don't see anty hing otu of the ordinary | ||
| [2009/12/17 10:41:13] <joe-mac> i tested my hypothesis by typing out a command the same as i saw it, and removing the old autogebnerated one, sure enough the error skips to the next ERB-generated line... | ||
| [2009/12/17 10:45:03] <fsweetser> maybe a cr/nl issue? | ||
| [2009/12/17 10:46:24] @ bug joined channel #puppet | ||
| [2009/12/17 10:47:11] <joe-mac> fsweetser: file claims it's ascii text, usually it says if the line ending is windows or unix i thought | ||
| [2009/12/17 10:47:28] <fsweetser> it only looks at an initial chunk | ||
| [2009/12/17 10:47:49] <joe-mac> hmmm let me run it through dos2unix and see what happens | ||
| [2009/12/17 10:47:53] <beelzebob> opening in vim and looking for ^M works | ||
| [2009/12/17 10:47:56] <fsweetser> wild guess - if the non-ERB generated lines are DOS format, nagios might be getting confused if ERB lines are in UNIX format | ||
| [2009/12/17 10:50:40] <joe-mac> beelzebob: yea i don't see the tel-tale ^M and dos2unix generates a file of the same size and md5sum | ||
| [2009/12/17 10:51:25] <joe-mac> fsweetser: i am guessing i would see the ^Ms in vim | ||
| [2009/12/17 10:51:58] <joe-mac> i' | ||
| [2009/12/17 10:52:04] <joe-mac> m going to try something else | ||
| [2009/12/17 10:52:18] <beelzebob> joe-mac: probably a matter of see what works, what doesn't, then finding the difference ;) | ||
| [2009/12/17 10:53:26] <joe-mac> yea, this really sucks | ||
| [2009/12/17 10:53:50] @ bodepd joined channel #puppet | ||
| [2009/12/17 10:54:04] <fsweetser> joe-mac: vim won't display the ^Ms if it thinks you're opening up a file in DOS mode | ||
| [2009/12/17 10:54:16] <fsweetser> I'd say pipe the file through hexdump -C is your best bet | ||
| [2009/12/17 10:55:22] @ alfism joined channel #puppet | ||
| [2009/12/17 10:55:32] <kjetilho> joe-mac: why don't you make the file available via HTTP so we can look at it? | ||
| [2009/12/17 10:57:50] <joe-mac> kjetilho: my website is down.. forgot to pay the bill | ||
| [2009/12/17 10:57:57] <kjetilho> heh | ||
| [2009/12/17 10:58:41] <beelzebob> so I'm using foreman for an external node classifier, but puppet doesn't seem to honor the environment given by the external node script... setting the environment in the puppet.conf does work though. Any ideas? | ||
| [2009/12/17 10:58:51] <jb> 0.25? | ||
| [2009/12/17 10:59:24] <beelzebob> yes | ||
| [2009/12/17 10:59:39] <beelzebob> seems like it was working before - it could have been 0.24 then though | ||
| [2009/12/17 11:00:25] <joe-mac> i'm about to call it a loss wtih integrating puppet and nagios... | ||
| [2009/12/17 11:00:51] <jb> yeah, environment configuration has changed in 0.25 | ||
| [2009/12/17 11:00:59] <jb> you have to specify it at the puppet client | ||
| [2009/12/17 11:01:07] <jb> theres a ticket with a long discussion about it.. | ||
| [2009/12/17 11:01:28] <beelzebob> exciting | ||
| [2009/12/17 11:02:19] <beelzebob> just when I install the latest foreman release that provides the environment in the output... puppet decides not to listen to it | ||
| [2009/12/17 11:03:18] <ohadlevy> beelzebob: yeah that sucks, might be a way to provide as a parameter that you could set it in a template.. but... :-\ | ||
| [2009/12/17 11:03:45] <beelzebob> ohadlevy: yeah, exactly :/ | ||
| [2009/12/17 11:05:23] <beelzebob> jb: Bug #2748 ? | ||
| [2009/12/17 11:05:24] <gepetto_> beelzebob: jb: #2748 is http://projects.reductivelabs.com/issues/show/2748 "Puppet - Bug #2748: config file takes priority over external_nodes in 0.25.x - ReductiveLabs.com" | ||
| [2009/12/17 11:05:25] @ Quit: pneff: Read error: 60 (Operation timed out) | ||
| [2009/12/17 11:06:42] @ pneff joined channel #puppet | ||
| [2009/12/17 11:07:19] @ jimi_c-ph_ joined channel #puppet | ||
| [2009/12/17 11:10:11] @ bodepd_ joined channel #puppet | ||
| [2009/12/17 11:12:59] @ Quit: giskard: Remote closed the connection | ||
| [2009/12/17 11:14:03] @ giskard joined channel #puppet | ||
| [2009/12/17 11:19:48] @ Quit: rsquared: Read error: 60 (Operation timed out) | ||
| [2009/12/17 11:20:39] @ rsquared joined channel #puppet | ||
| [2009/12/17 11:21:08] @ gpled joined channel #puppet | ||
| [2009/12/17 11:27:17] @ RageLink joined channel #puppet | ||
| [2009/12/17 11:28:32] @ Quit: bodepd: Read error: 110 (Connection timed out) | ||
| [2009/12/17 11:28:32] @ bodepd_ is now known as bodepd | ||
| [2009/12/17 11:30:57] @ Quit: jimi_c-ph: Read error: 110 (Connection timed out) | ||
| [2009/12/17 11:30:58] @ jimi_c-ph_ is now known as jimi_c-ph | ||
| [2009/12/17 11:33:42] @ Quit: lilmatt: Read error: 60 (Operation timed out) | ||
| [2009/12/17 11:34:38] @ DracoWork joined channel #puppet | ||
| [2009/12/17 11:35:29] @ lilmatt joined channel #puppet | ||
| [2009/12/17 11:38:09] @ Quit: reid08: Client Quit | ||
| [2009/12/17 11:38:32] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 11:44:30] <Phibs> anyone havea good example of managing yum repo configs on a client | ||
| [2009/12/17 11:44:48] <komitee> joe-mac what are you trying to do re: integrating puppet and nagios? | ||
| [2009/12/17 11:45:17] <fsweetser> Phibs: I just use the yumrepo native type | ||
| [2009/12/17 11:46:04] <Phibs> fsweetser: yeah, lookin for an example so I don't have to trial and error 50 times :) | ||
| [2009/12/17 11:46:43] @ cwebber_ joined channel #puppet | ||
| [2009/12/17 11:47:24] <jb> lazy | ||
| [2009/12/17 11:47:29] <Phibs> hahaha | ||
| [2009/12/17 11:47:34] <Phibs> u love me jb | ||
| [2009/12/17 11:47:36] <fsweetser> run 'ralsh yumrepo' - it'll dump out your current repo config in puppet format | ||
| [2009/12/17 11:47:42] <Phibs> oh shit | ||
| [2009/12/17 11:47:42] <jb> i manage yum repos by using file {} to drop a file in /etc/yum.repos.d | ||
| [2009/12/17 11:47:52] <jb> i don't mess with the repo function | ||
| [2009/12/17 11:47:52] <Phibs> hah | ||
| [2009/12/17 11:47:54] <Phibs> fsweetser: lub u | ||
| [2009/12/17 11:47:58] <jb> it's easier that way.. | ||
| [2009/12/17 11:48:19] <joe-mac> komitee: automatic nagios via exported resources | ||
| [2009/12/17 11:48:36] <joe-mac> been at it since the weekend in my spare time | ||
| [2009/12/17 11:48:47] <Phibs> jb: debating... | ||
| [2009/12/17 11:50:56] @ cwebber__ joined channel #puppet | ||
| [2009/12/17 11:51:10] @ Quit: cwebber_: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 11:52:27] @ Quit: rsquared: Connection timed out | ||
| [2009/12/17 11:54:31] @ Quit: Ramonster: Client Quit | ||
| [2009/12/17 11:57:38] @ rsquared joined channel #puppet | ||
| [2009/12/17 12:00:15] @ Quit: MattyM: "ta ta" | ||
| [2009/12/17 12:01:55] @ Quit: bodepd: | ||
| [2009/12/17 12:03:52] @ Quit: giskard: "Leaving..." | ||
| [2009/12/17 12:04:03] @ Quit: cwebber: Read error: 110 (Connection timed out) | ||
| [2009/12/17 12:04:03] @ cwebber__ is now known as cwebber | ||
| [2009/12/17 12:04:27] <henk> Volcane: still getting that facter error despite restarting puppet: Could not retrieve catalog: uninitialized constant Facter::Util::IP | ||
| [2009/12/17 12:04:41] <Volcane> henk: how did you update facter? | ||
| [2009/12/17 12:04:46] @ Quit: PsychoSid: "Leaving." | ||
| [2009/12/17 12:05:45] @ Quit: _Lemon_: Remote closed the connection | ||
| [2009/12/17 12:06:19] <henk> Volcane: aptitude install facter ;) | ||
| [2009/12/17 12:06:27] @ labrown joined channel #puppet | ||
| [2009/12/17 12:06:28] <Volcane> weird | ||
| [2009/12/17 12:06:45] <Volcane> donno, but does seem to me like either something didnt get installed or something got left from the previous version | ||
| [2009/12/17 12:07:08] <henk> i'll try reinstalling puppet and facter | ||
| [2009/12/17 12:09:00] @ Quit: stahnma: Read error: 60 (Operation timed out) | ||
| [2009/12/17 12:09:16] <henk> hm, now i did not get that error. but i did not change anything... and 0.25.1 was running before already. strange... 'shrug' let's wait and see what comes tomorrow. thanks | ||
| [2009/12/17 12:10:35] <poison> hi guys, I have a question, I'm having 2 manifests that want to subscribe to a service but for some reason it doesn't want to do it | ||
| [2009/12/17 12:10:39] <poison> Service["apache2"] { subscribe +> Exec["codesync-storagegateway"] } | ||
| [2009/12/17 12:10:53] <poison> err: Could not retrieve catalog from remote server: Error 400 on SERVER: Parameter 'subscribe' is already set on Service[apache2] by apache2::upload at /usr/share/puppet/env/trunk/services/apache2/manifests/upload.pp:17; cannot redefine at /usr/share/puppet/env/trunk/services/apache2/manifests/storagegateway.pp:17 on node uploaddev.netnoc | ||
| [2009/12/17 12:11:05] @ Quit: rsquared_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 12:11:07] @ gpled left channel #puppet ("Ex-Chat") | ||
| [2009/12/17 12:11:22] @ stahnma joined channel #puppet | ||
| [2009/12/17 12:11:47] @ Quit: rmiller4pi8: Read error: 54 (Connection reset by peer) | ||
| [2009/12/17 12:11:48] <poison> any idea? | ||
| [2009/12/17 12:12:23] <Disconnect> is there a way to use tags in a custom facter fact? (modules/foo/plugins/facter/foo.rb) | ||
| [2009/12/17 12:12:46] <Volcane> Disconnect: what kind of tags? | ||
| [2009/12/17 12:12:52] <Volcane> Disconnect: like what do u want to do? | ||
| [2009/12/17 12:12:57] <fsweetser> poison: you can only override parameters in a child class | ||
| [2009/12/17 12:13:04] @ nakano is now known as nakano_ | ||
| [2009/12/17 12:13:10] <poison> jepz fsweetser they are child classes | ||
| [2009/12/17 12:13:29] <poison> but I have one parent class apache and 2 child classes and I want both to subscribe apache to it | ||
| [2009/12/17 12:13:41] <Volcane> poison: u can only +> once | ||
| [2009/12/17 12:13:43] <fsweetser> ah, and are both classes trying to override? | ||
| [2009/12/17 12:13:44] <Disconnect> i'm building a simple(ish) fact to pick a fileserver based on the last octet of the server IP, but I want to then add an offset based on the server type (so "client1" gets fs 1 but "images1" might get fs 5) | ||
| [2009/12/17 12:13:53] <Volcane> poison: but it sounds to me like you're just doing it wrong, show us your code | ||
| [2009/12/17 12:14:19] @ Quit: yarihm: "This computer has gone to sleep" | ||
| [2009/12/17 12:14:29] <Disconnect> Volcane: so the idea is that based on tag (or puppet var) the fs # is incremented. | ||
| [2009/12/17 12:14:31] <Volcane> Disconnect: hmm, and how does server type get set? | ||
| [2009/12/17 12:14:50] <poison> Volcane: oh crap that's a pitty, I have 2 services that needed to notify both apache2 whenever they are changed so I thought subscribing them to apache would be the thing to do | ||
| [2009/12/17 12:14:51] <Volcane> Disconnect: well the short answer is no, facts get populated well before the manifest even gets considered | ||
| [2009/12/17 12:14:58] <Disconnect> Volcane: tags. client1 gets tagged server-client for example | ||
| [2009/12/17 12:15:01] <Volcane> poison: you're doing it wrong | ||
| [2009/12/17 12:16:11] <Phibs> lol | ||
| [2009/12/17 12:16:12] <Disconnect> hmm. :( unfortunately, most of these things are called (imaginatively) "appserver10" "appserver32" etc. ohwell. | ||
| [2009/12/17 12:16:16] <Phibs> ur doin it wrongz | ||
| [2009/12/17 12:16:28] <Phibs> Disconnect: welcome to the world of developers playing sysadmin. | ||
| [2009/12/17 12:16:30] @ Quit: jimi_c-ph: "probably got a phone call..." | ||
| [2009/12/17 12:16:33] <Phibs> last job we had sunfire1 -> 28 | ||
| [2009/12/17 12:16:33] * Disconnect will run it w/o offsets and see how much of a mess it makes. | ||
| [2009/12/17 12:16:37] <Phibs> very descriptive... | ||
| [2009/12/17 12:17:34] <Phibs> can I make a module run tidy before doing yumrepo cmds? | ||
| [2009/12/17 12:17:42] <Phibs> ie, remove what's there first, then create new? | ||
| [2009/12/17 12:17:44] @ Quit: WALoeIII: Success | ||
| [2009/12/17 12:17:52] <Disconnect> Phibs: in this case, they're 99% identical. so i named them accordingly. they're tomcat appservers with the main app deployed, they just get used for different subtasks. actual different deployments get different names (eg thumbnails1) but since all that is set in tags, i don't want to duplicate all the logic in a fact nobody is ever gonna think to look at.. | ||
| [2009/12/17 12:17:54] <Volcane> Phibs: it wouldnt work too hot | ||
| [2009/12/17 12:17:58] <fsweetser> Disconnect: might the fqdn_rand function help? | ||
| [2009/12/17 12:17:59] <Phibs> haha | ||
| [2009/12/17 12:18:03] <Phibs> Volcane: why, no order guarnatee? | ||
| [2009/12/17 12:18:06] <Phibs> guarantee? | ||
| [2009/12/17 12:18:19] <Volcane> Phibs: it confuses puppet a bit, it parses the current yum repos then later adjusts them | ||
| [2009/12/17 12:18:27] <Phibs> ah | ||
| [2009/12/17 12:18:30] <Phibs> hmm | ||
| [2009/12/17 12:18:31] <Disconnect> fsweetser: thought about that but i have to be -sure- there is no dogpiling. anything_rand makes me cry (I realize its more like fqdn_hash but still) | ||
| [2009/12/17 12:18:37] <Phibs> what if they aren't there, will it create? | ||
| [2009/12/17 12:18:39] @ nakano_ is now known as nakano | ||
| [2009/12/17 12:18:39] <Volcane> Phibs: so what would happen is a) parse current b) they would vanish c) it would then make new ones and complain about missing stuff | ||
| [2009/12/17 12:18:44] <Phibs> ;0 | ||
| [2009/12/17 12:18:45] @ Quit: danielbln: "Leaving." | ||
| [2009/12/17 12:18:49] <Phibs> so if I remove them myself, it's ok ? | ||
| [2009/12/17 12:18:50] @ crdant joined channel #puppet | ||
| [2009/12/17 12:19:13] <Volcane> i make ones named my own way and delete the default ones | ||
| [2009/12/17 12:19:26] <Volcane> that seems to keep it happy | ||
| [2009/12/17 12:19:30] <Phibs> yeah | ||
| [2009/12/17 12:19:33] <Phibs> thats what i wanna do | ||
| [2009/12/17 12:19:46] <Volcane> so just use file{} to remove the default ones | ||
| [2009/12/17 12:19:55] <Phibs> meh | ||
| [2009/12/17 12:19:58] <Phibs> I'll use PSSH :) | ||
| [2009/12/17 12:20:13] <Phibs> boxes weren't managed well before so some have multiple layers of terrible yum repos | ||
| [2009/12/17 12:20:14] <Volcane> and how will that work for you on new machines? | ||
| [2009/12/17 12:20:25] <Phibs> this is a good point, I'll have to use file too | ||
| [2009/12/17 12:20:57] <Volcane> if you're pssh'ing a config change you've lost | ||
| [2009/12/17 12:21:00] <Phibs> nod | ||
| [2009/12/17 12:21:01] <poison> Volcane: http://pastie.org/747417 | ||
| [2009/12/17 12:21:08] <Phibs> point taken | ||
| [2009/12/17 12:21:46] @ eventi joined channel #puppet | ||
| [2009/12/17 12:21:56] <Volcane> poison: might be easier to have those exec's notify => Service["apache2"] | ||
| [2009/12/17 12:22:28] <poison> but not always is apache installed when i codesync | ||
| [2009/12/17 12:22:31] <Phibs> Failed to retrieve current state of resource: Mounts without paths are not usable Could not describe /modules/sudo/sudoers: Mounts without paths are not usable at /etc/puppet/modules/sudo/manifests/init.pp | ||
| [2009/12/17 12:22:36] <Volcane> poison: ah | ||
| [2009/12/17 12:22:40] <poison> some boxes don't run apache (like my cron servers) | ||
| [2009/12/17 12:22:48] <Phibs> source => "puppet:///modules/sudo/sudoers", | ||
| [2009/12/17 12:22:51] <Phibs> extra / ? | ||
| [2009/12/17 12:23:03] @ CoolCold_ is now known as CoolCold | ||
| [2009/12/17 12:23:08] <Phibs> yea heh | ||
| [2009/12/17 12:23:16] <Volcane> poison: well u can use if defined(Service[apache2]) but its a bit hacky cos it is order dependant | ||
| [2009/12/17 12:23:27] <Volcane> poison: but +>'ing twice doesnt work either way | ||
| [2009/12/17 12:23:43] <Volcane> poison: which frankly makes +> totally pointless | ||
| [2009/12/17 12:23:55] <poison> exactly | ||
| [2009/12/17 12:24:24] <Phibs> hmm no | ||
| [2009/12/17 12:24:30] <Phibs> source => "puppet:///modules/sudo/sudoers", <-- that works right? | ||
| [2009/12/17 12:24:37] <Volcane> Phibs: on 0.25.x | ||
| [2009/12/17 12:24:41] <Phibs> yeah | ||
| [2009/12/17 12:24:53] <Volcane> Phibs: yup, if your modules are properly setup it should | ||
| [2009/12/17 12:24:56] <eventi> Phibs - the real syntax is //server/path | ||
| [2009/12/17 12:25:00] <Phibs> yeah I know | ||
| [2009/12/17 12:25:08] <Phibs> co worker using old puppet | ||
| [2009/12/17 12:25:21] <eventi> ./// is shorthand to use the puppet server | ||
| [2009/12/17 12:25:25] <Phibs> yeah | ||
| [2009/12/17 12:25:31] <eventi> sorry came in late | ||
| [2009/12/17 12:25:39] <Phibs> np | ||
| [2009/12/17 12:27:37] @ crdant1 joined channel #puppet | ||
| [2009/12/17 12:28:11] @ WALoeIII joined channel #puppet | ||
| [2009/12/17 12:30:44] @ francois joined channel #puppet | ||
| [2009/12/17 12:31:44] @ stochasticresona joined channel #puppet | ||
| [2009/12/17 12:33:19] @ Quit: cwebber: | ||
| [2009/12/17 12:33:29] @ Quit: scylla: "Connection timed out" | ||
| [2009/12/17 12:34:19] <goraxe> I'm attempting to use storedconfigs, and puppetmaster is throwing an error 'Rails is missing' | ||
| [2009/12/17 12:34:32] <goraxe> I have rails 2.2.3 installed | ||
| [2009/12/17 12:35:18] @ bodepd joined channel #puppet | ||
| [2009/12/17 12:35:41] <goraxe> sorry my foo puppetmaster is 0.24.8 not the 0.25.1 i was expecting | ||
| [2009/12/17 12:36:37] @ Quit: crdant: Success | ||
| [2009/12/17 12:37:37] @ rmiller4pi8 joined channel #puppet | ||
| [2009/12/17 12:42:30] @ BarnacleBob joined channel #puppet | ||
| [2009/12/17 12:47:55] @ Quit: rsquared: Read error: 60 (Operation timed out) | ||
| [2009/12/17 12:48:44] @ rsquared joined channel #puppet | ||
| [2009/12/17 12:50:13] @ Quit: pacalm: | ||
| [2009/12/17 12:58:19] @ toi joined channel #puppet | ||
| [2009/12/17 13:01:24] @ ezmobius joined channel #puppet | ||
| [2009/12/17 13:04:46] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 13:07:13] @ Quit: crdant1: Connection timed out | ||
| [2009/12/17 13:08:39] @ Quit: strangeloop: "Leaving" | ||
| [2009/12/17 13:08:39] @ mecca joined channel #puppet | ||
| [2009/12/17 13:13:11] @ cwebber joined channel #puppet | ||
| [2009/12/17 13:14:24] <Phibs> how would I only modify a yum repo file if the box is 64 bit? | ||
| [2009/12/17 13:15:36] @ Quit: rsquared_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 13:15:44] <fsweetser> Phibs: you could key off of the architecture fact | ||
| [2009/12/17 13:15:50] <Phibs> nod, how :) | ||
| [2009/12/17 13:15:57] <fsweetser> i386 => 32 bit, x86_64 => 64 bit | ||
| [2009/12/17 13:16:18] <Phibs> how'd that work in the yumrepo stanza | ||
| [2009/12/17 13:16:19] <fsweetser> just wrap the relevant type in an if $architecture == "x86_64" clause | ||
| [2009/12/17 13:16:31] @ mikerowehl joined channel #puppet | ||
| [2009/12/17 13:16:48] <BarnacleBob> you could also use a case statement if you wanted to do something different on i386 | ||
| [2009/12/17 13:16:59] @ rsquared_ joined channel #puppet | ||
| [2009/12/17 13:17:04] <Phibs> hmm | ||
| [2009/12/17 13:17:23] <Volcane> or you could just fix your broken yumrepo layout so it works for all architectures and use the variables that yum provide for that situation | ||
| [2009/12/17 13:17:26] @ paxos joined channel #puppet | ||
| [2009/12/17 13:17:31] <Phibs> its percona | ||
| [2009/12/17 13:17:34] <Phibs> :) | ||
| [2009/12/17 13:17:34] <KarlHungus> type => $architecture ? { "x86_64" => "foo", "i386" => bar, default => "baz" } | ||
| [2009/12/17 13:17:37] <Phibs> not my repo | ||
| [2009/12/17 13:17:43] <Volcane> Phibs: open a bug ticket to them :P | ||
| [2009/12/17 13:17:49] <Phibs> hehe | ||
| [2009/12/17 13:17:55] <Phibs> dunno if there's a reason to run mysql optimized on i386 :) | ||
| [2009/12/17 13:17:57] <Volcane> Phibs: but still, you're relying on 3rd party repos to build your machines, all bad | ||
| [2009/12/17 13:18:16] <KarlHungus> i love that shorthand case syntax ;) | ||
| [2009/12/17 13:18:26] <Volcane> Phibs: 3rd party repo down == machines cant build == client/boss pissed off | ||
| [2009/12/17 13:18:31] <Phibs> yeah I'm gonna mirror | ||
| [2009/12/17 13:18:38] <Phibs> I'll only add percona to the db servers | ||
| [2009/12/17 13:18:41] <Phibs> no need to be a catch all | ||
| [2009/12/17 13:19:28] @ Quit: rsquared: Read error: 110 (Connection timed out) | ||
| [2009/12/17 13:19:33] <jb> Phibs: use a file {} | ||
| [2009/12/17 13:19:35] <jb> problem solved. | ||
| [2009/12/17 13:19:47] <Phibs> oh | ||
| [2009/12/17 13:19:49] <Phibs> you bitch | ||
| [2009/12/17 13:19:52] <jb> :) | ||
| [2009/12/17 13:19:54] <Phibs> I wanna use the puppet types! | ||
| [2009/12/17 13:20:02] <fsweetser> Volcane: we just mirror any 3rd party repos that we need for that exact reason | ||
| [2009/12/17 13:20:20] <jb> i have local repos for * | ||
| [2009/12/17 13:20:31] <jb> and i just use puppet to drop off a .repo file containing my repos | ||
| [2009/12/17 13:20:38] <Volcane> fsweetser: yeah, though i am less promiscious about it, i only pull in things i am happy to go out, so not just a blind mirror | ||
| [2009/12/17 13:20:48] <BarnacleBob> yeah just make your own repo and drop the pakcages you need into it | ||
| [2009/12/17 13:21:05] @ Quit: toi: Remote closed the connection | ||
| [2009/12/17 13:21:11] @ Quit: stochasticresona: | ||
| [2009/12/17 13:21:32] @ stochasticresona joined channel #puppet | ||
| [2009/12/17 13:21:42] @ Quit: stochasticresona: Client Quit | ||
| [2009/12/17 13:22:16] <Phibs> nod | ||
| [2009/12/17 13:22:34] <Volcane> yumdownloader++ | ||
| [2009/12/17 13:22:37] @ nakano is now known as nakano_ | ||
| [2009/12/17 13:22:47] @ kolla joined channel #puppet | ||
| [2009/12/17 13:23:10] @ littleidea joined channel #puppet | ||
| [2009/12/17 13:24:33] <Phibs> nice tool | ||
| [2009/12/17 13:24:43] @ Quit: jaredrhine: Read error: 110 (Connection timed out) | ||
| [2009/12/17 13:25:02] <jb> i typically push all of my packages out from one central location | ||
| [2009/12/17 13:25:08] <jb> be it via puppet, or my own distribution system | ||
| [2009/12/17 13:25:13] <jb> which basically just uses ssh | ||
| [2009/12/17 13:25:30] @ toi joined channel #puppet | ||
| [2009/12/17 13:29:48] @ mvn071 joined channel #puppet | ||
| [2009/12/17 13:30:14] @ giskard joined channel #puppet | ||
| [2009/12/17 13:33:37] <KarlHungus> my yumdownloader can't specify the arch... | ||
| [2009/12/17 13:33:40] <KarlHungus> :( | ||
| [2009/12/17 13:34:05] <Volcane> or KarlHungus cant read --help | ||
| [2009/12/17 13:34:08] <Volcane> which is more likely? | ||
| [2009/12/17 13:34:28] <KarlHungus> the one i said | ||
| [2009/12/17 13:34:36] <Volcane> --archlist=ARCHLIST only download packages of certain architecture(s) | ||
| [2009/12/17 13:34:36] <Volcane> --samearch-priorities | ||
| [2009/12/17 13:34:37] <Volcane> Priority-exclude packages based on name + arch | ||
| [2009/12/17 13:35:10] <Volcane> i do recall some way to actually set arch though | ||
| [2009/12/17 13:35:11] <ReinH> Hi folks. Anyone feel like sharing some report YAML files from their /var/lib/puppet/reports? | ||
| [2009/12/17 13:35:19] <Volcane> cos I've downloaded x6_64 packages using my i386 vm | ||
| [2009/12/17 13:35:25] <jb> is this for puppet-dashboard dev? | ||
| [2009/12/17 13:35:26] <jb> :P | ||
| [2009/12/17 13:35:26] <KarlHungus> you have to have the repos set up for both | ||
| [2009/12/17 13:35:40] <Volcane> KarlHungus: or one that use $arch surely? | ||
| [2009/12/17 13:35:59] <KarlHungus> Volcane: i have been unable to find a way to specify what value to pass for $arch with yumdownloader | ||
| [2009/12/17 13:36:15] <ReinH> jb: yes, in fact it is :) | ||
| [2009/12/17 13:36:16] <Volcane> been a while since i did it, gone from my 2k line history :) | ||
| [2009/12/17 13:36:16] <KarlHungus> other than that its a great tool, though | ||
| [2009/12/17 13:36:31] <ReinH> Volcane: better bump that up to 10k | ||
| [2009/12/17 13:36:33] <jb> ReinH: sure. | ||
| [2009/12/17 13:36:37] <ReinH> jb: yay! | ||
| [2009/12/17 13:37:11] @ Quit: littleidea: | ||
| [2009/12/17 13:39:02] <Volcane> KarlHungus: not sure how i did it, i see the files i got, but not how heh, def didnt make new repo files though | ||
| [2009/12/17 13:39:21] <KarlHungus> also, i believe yumdownloader is being slowly phased out in favor or reposync/repotrack | ||
| [2009/12/17 13:39:53] <KarlHungus> i haven't started to phase my stuff out though =) maybe you can set $arch in the env and use && yumdownloader? | ||
| [2009/12/17 13:40:00] <BarnacleBob> wget + createrepo! | ||
| [2009/12/17 13:40:07] @ nigelk joined channel #puppet | ||
| [2009/12/17 13:40:17] <KarlHungus> BarnacleBob: wget doesn't have --disablerepo=base --resolve ;) | ||
| [2009/12/17 13:44:27] <BarnacleBob> uh | ||
| [2009/12/17 13:44:40] <BarnacleBob> if your just downloading rpms you can just go to the repo webpage and download it | ||
| [2009/12/17 13:44:44] <BarnacleBob> its not like its all that hard :) | ||
| [2009/12/17 13:44:57] <BarnacleBob> oh | ||
| [2009/12/17 13:45:01] <BarnacleBob> --resolve i guess does deps | ||
| [2009/12/17 13:45:03] <Volcane> BarnacleBob: but finding out all the dependencies you dont have and also getting those is hard | ||
| [2009/12/17 13:45:20] <BarnacleBob> hrm. never ran into that i guess | ||
| [2009/12/17 13:46:42] @ Quit: rsquared_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 13:50:11] @ Quit: pheezy: Read error: 110 (Connection timed out) | ||
| [2009/12/17 13:52:13] <KarlHungus> see, i'm still masochistic enough to manage gems, cpan, and pecl from rpm so --resolve is a godsend ;) | ||
| [2009/12/17 13:59:05] @ glaw joined channel #puppet | ||
| [2009/12/17 14:03:50] @ jaredrhine joined channel #puppet | ||
| [2009/12/17 14:05:20] <ReinH> Volcane: do you have a /var/lib/puppet/reports with reports in it? If so, can you tell me what the directory structure looks like underneath? | ||
| [2009/12/17 14:06:18] @ Quit: Chiku|dc: "Quitte" | ||
| [2009/12/17 14:06:39] @ jes5199 joined channel #puppet | ||
| [2009/12/17 14:07:20] <Volcane> ReinH: http://pastie.org/747615 | ||
| [2009/12/17 14:07:27] <Volcane> ReinH: with just loads of yaml files in each | ||
| [2009/12/17 14:07:49] <ReinH> ok, just hostnames | ||
| [2009/12/17 14:07:50] <ReinH> perfect, ty | ||
| [2009/12/17 14:11:52] <ReinH> rake reports:import is working | ||
| [2009/12/17 14:12:44] <Volcane> home time | ||
| [2009/12/17 14:14:36] @ Quit: jes5199: "Leaving." | ||
| [2009/12/17 14:14:53] @ jes5 joined channel #puppet | ||
| [2009/12/17 14:15:14] @ francois left channel #puppet () | ||
| [2009/12/17 14:15:53] <explody> this may be dumb, but when the docs say 'onlyif' "will only run if the command returns 0" does that mean an actual output of "0" or a return code of 0? | ||
| [2009/12/17 14:16:04] <explody> I'm guessing return code, yeah? | ||
| [2009/12/17 14:16:44] <nigelk> return code | ||
| [2009/12/17 14:16:48] @ lak joined channel #puppet | ||
| [2009/12/17 14:16:55] <explody> thanks. I need more caffeine | ||
| [2009/12/17 14:17:01] <nigelk> excellent idea! :) | ||
| [2009/12/17 14:17:15] * explody != awake | ||
| [2009/12/17 14:18:25] @ pheezy joined channel #puppet | ||
| [2009/12/17 14:24:58] @ jab_doa joined channel #puppet | ||
| [2009/12/17 14:27:18] @ mathiaz joined channel #puppet | ||
| [2009/12/17 14:28:35] <mathiaz> hi - I'm trying to get a public ssh key from on machine installed to another system, whith both systems being managed by puppet. Is there a way to handle this situation with puppet *without* storing the public key on the puppet master? | ||
| [2009/12/17 14:30:10] @ Quit: n0ts: Read error: 60 (Operation timed out) | ||
| [2009/12/17 14:31:02] @ n0ts joined channel #puppet | ||
| [2009/12/17 14:32:16] <duritong> mathiaz: no, well stored configs is the solution for that, but that involves storing the key on the master | ||
| [2009/12/17 14:33:47] <mathiaz> duritong: right - I thought so. | ||
| [2009/12/17 14:33:56] <mathiaz> could facts be cached/stored on the puppetmaster? | ||
| [2009/12/17 14:35:52] @ Quit: jcape: Connection timed out | ||
| [2009/12/17 14:43:53] @ littleidea joined channel #puppet | ||
| [2009/12/17 14:43:55] @ gaveen joined channel #puppet | ||
| [2009/12/17 14:45:08] @ jfreeman joined channel #puppet | ||
| [2009/12/17 14:46:08] <kramm> can the puppetmaster notify a puppet client to initiate a catalog run? | ||
| [2009/12/17 14:46:57] <duritong> mathiaz: they are | ||
| [2009/12/17 14:47:33] <mathiaz> duritong: are the facts from other system available at compilation time? | ||
| [2009/12/17 14:48:10] <duritong> no | ||
| [2009/12/17 14:48:20] <mathiaz> duritong: I could easily implement a fact that gives the public ssh key from the master system | ||
| [2009/12/17 14:48:32] <duritong> you could make them avaiable by writing an own function | ||
| [2009/12/17 14:48:35] <mathiaz> duritong: but then I need to be able to pull it on the other system | ||
| [2009/12/17 14:48:52] @ Quit: mvn071: "Leaving" | ||
| [2009/12/17 14:49:06] <duritong> mathiaz: but with querying facts the key is anyway stored on the master | ||
| [2009/12/17 14:49:21] <duritong> so what argues against exported resources? | ||
| [2009/12/17 14:49:31] <duritong> (which i mislabeled before as stored configs) | ||
| [2009/12/17 14:51:33] <mathiaz> duritong: are exported ressources available in puppet? | ||
| [2009/12/17 14:51:57] <duritong> yes | ||
| [2009/12/17 14:52:14] <duritong> it is a feature of puppet | ||
| [2009/12/17 14:52:50] @ phantez joined channel #puppet | ||
| [2009/12/17 14:53:39] <mathiaz> duritong: is there some documentation? I'm not sure I fully understand how to use exported ressources to solve my problem | ||
| [2009/12/17 14:54:01] <duritong> mathiaz: I think it is wiki:ExportedResources | ||
| [2009/12/17 14:54:01] <gepetto_> duritong: mathiaz: wiki:ExportedResources is http://reductivelabs.com/trac/puppet/wiki/ExportedResources | ||
| [2009/12/17 14:54:23] <duritong> yes it is | ||
| [2009/12/17 14:54:50] @ eventi left channel #puppet () | ||
| [2009/12/17 14:55:33] @ Quit: jaredrhine: Remote closed the connection | ||
| [2009/12/17 14:55:42] @ rocket joined channel #puppet | ||
| [2009/12/17 14:57:03] <gepetto_> ::trac:: Downloading Puppet edited @ http://reductivelabs.com/trac/puppet/wiki/DownloadingPuppet?version=94 | ||
| [2009/12/17 15:00:59] <ReinH> Volcane: ping | ||
| [2009/12/17 15:01:09] @ littleidea_ joined channel #puppet | ||
| [2009/12/17 15:01:12] @ Quit: littleidea: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 15:01:23] @ littleidea_ is now known as littleidea | ||
| [2009/12/17 15:01:43] @ _silver is now known as hy | ||
| [2009/12/17 15:02:09] <BarnacleBob> how do you split fileserving off into its own instance? | ||
| [2009/12/17 15:02:33] <BarnacleBob> do you just specify in all your file calls puppet://server:port/ or is there a puppet.conf option that i'm not seeing? | ||
| [2009/12/17 15:02:40] @ Quit: lak: | ||
| [2009/12/17 15:04:00] @ lak joined channel #puppet | ||
| [2009/12/17 15:09:14] @ Quit: lak: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 15:09:20] @ lak joined channel #puppet | ||
| [2009/12/17 15:11:26] @ jaredrhine joined channel #puppet | ||
| [2009/12/17 15:11:43] @ Quit: bug: | ||
| [2009/12/17 15:17:15] <Disconnect> in a class that inherits another, can I remove a resource? (class foo inherits class bar { File ["barbecue"] { ignore => true } } or some such) | ||
| [2009/12/17 15:18:54] @ Quit: lak: | ||
| [2009/12/17 15:19:21] @ lak joined channel #puppet | ||
| [2009/12/17 15:19:28] <fsweetser> Disconnect: 'ensure => undef' *might* work, but I've never tried it | ||
| [2009/12/17 15:19:51] <Disconnect> i'll let you know :) | ||
| [2009/12/17 15:21:06] @ Quit: littleidea: Read error: 60 (Operation timed out) | ||
| [2009/12/17 15:22:30] @ Quit: themurph: Read error: 110 (Connection timed out) | ||
| [2009/12/17 15:23:00] <Disconnect> nope :( | ||
| [2009/12/17 15:23:12] <Disconnect> i can slap the original in puppet but its all :( | ||
| [2009/12/17 15:23:15] @ Quit: nigelk: | ||
| [2009/12/17 15:23:20] <fsweetser> well, that's my one idea | ||
| [2009/12/17 15:25:29] <Disconnect> it acted like it was happy, then it went and swapped the file anyway. ohwell. in the long run i need to refactor this whole thing anyway, now that we have nonstandard appservers suddenly. | ||
| [2009/12/17 15:28:28] @ bug joined channel #puppet | ||
| [2009/12/17 15:30:50] @ littleidea joined channel #puppet | ||
| [2009/12/17 15:31:40] @ nigelk joined channel #puppet | ||
| [2009/12/17 15:33:11] @ erm__ joined channel #puppet | ||
| [2009/12/17 15:34:45] @ littleidea_ joined channel #puppet | ||
| [2009/12/17 15:35:03] @ Djelibeybi joined channel #puppet | ||
| [2009/12/17 15:36:30] @ Quit: nigelk: Client Quit | ||
| [2009/12/17 15:42:59] @ nigelk joined channel #puppet | ||
| [2009/12/17 15:44:18] @ Quit: erm_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 15:50:52] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/12/17 15:54:33] @ Quit: lak: | ||
| [2009/12/17 15:55:08] @ themurph joined channel #puppet | ||
| [2009/12/17 15:57:11] @ Quit: giskard: Remote closed the connection | ||
| [2009/12/17 15:58:04] @ giskard joined channel #puppet | ||
| [2009/12/17 15:59:33] @ Quit: littleidea: Read error: 110 (Connection timed out) | ||
| [2009/12/17 15:59:33] @ littleidea_ is now known as littleidea | ||
| [2009/12/17 16:00:21] @ Quit: jfreeman: Remote closed the connection | ||
| [2009/12/17 16:04:46] @ Djelibeybi joined channel #puppet | ||
| [2009/12/17 16:07:21] <ReinH> Idempotent report importing is just about done | ||
| [2009/12/17 16:07:25] <ReinH> (Puppet Dashboard) | ||
| [2009/12/17 16:13:53] @ Quit: mathiaz: "leaving" | ||
| [2009/12/17 16:17:53] @ jcape joined channel #puppet | ||
| [2009/12/17 16:18:49] @ Quit: Robbie_: Remote closed the connection | ||
| [2009/12/17 16:25:15] @ qwebirc66230 joined channel #puppet | ||
| [2009/12/17 16:25:42] <Volcane> its prety rubbish out there. | ||
| [2009/12/17 16:25:54] <Volcane> littleidea: i gave up on the convention over docs thing, people are too stupid. | ||
| [2009/12/17 16:26:42] <littleidea> I wasn't really advocating that so much as noticing its dominance. | ||
| [2009/12/17 16:26:46] @ Quit: qwebirc66230: Client Quit | ||
| [2009/12/17 16:27:02] <Volcane> littleidea: tried it for ~5 years with a fairly large team, fucked out spectacularly. tools like puppet helps though, you can capture convention in defined types and promote their use | ||
| [2009/12/17 16:27:11] <littleidea> Volcane: Sometimes people who write software are too clever. | ||
| [2009/12/17 16:27:37] <Volcane> littleidea: and overtime people will pick the define apart and learn from that, but taking new ppl into a convention heavy team is a total disaster, every convention becomes a discssion leading to argument leading to rebellion | ||
| [2009/12/17 16:29:50] <littleidea> Viva la Résistance | ||
| [2009/12/17 16:31:36] @ Quit: phantez: "Quitte" | ||
| [2009/12/17 16:31:51] <Volcane> had great milage from defines to take care of things like vhosts | ||
| [2009/12/17 16:32:09] <Volcane> ppl are less resistant to just using apache::vhost{...} than making a set of dirs in places they dont agree with | ||
| [2009/12/17 16:35:30] <rodjek> Volcane: damn straight | ||
| [2009/12/17 16:36:15] @ Quit: toi: "Ex-Chat" | ||
| [2009/12/17 16:37:50] @ Quit: domster: "Leaving" | ||
| [2009/12/17 16:38:50] @ Quit: littleidea: | ||
| [2009/12/17 16:41:46] @ phantez joined channel #puppet | ||
| [2009/12/17 16:47:21] @ Quit: pheezy: Read error: 60 (Operation timed out) | ||
| [2009/12/17 16:47:21] @ pheezy_ joined channel #puppet | ||
| [2009/12/17 16:47:59] @ Quit: glaw: "Leaving." | ||
| [2009/12/17 16:52:00] <joe-mac> any camptocamp people here? | ||
| [2009/12/17 16:52:17] <joe-mac> or, anybgody here who yuses camptocamp's nagios module with success? | ||
| [2009/12/17 16:55:28] @ webx joined channel #puppet | ||
| [2009/12/17 16:56:01] <webx> if I have a directory structure that I want copied recursively to a client, is there something other than using recurse => true in the file paramater ? | ||
| [2009/12/17 16:56:07] <webx> that doesn't seem to be working | ||
| [2009/12/17 16:57:19] @ Quit: labrown: "Leaving" | ||
| [2009/12/17 17:01:13] <joe-mac> ensure = "directory", recurse => "true", source => "puppet://$server/whatever/directory"; | ||
| [2009/12/17 17:01:35] <webx> yea, I do that | ||
| [2009/12/17 17:01:36] <webx> sec | ||
| [2009/12/17 17:02:31] <joe-mac> are you sure you're not getting an errora t all? | ||
| [2009/12/17 17:02:42] <webx> http://pastie.org/747866 | ||
| [2009/12/17 17:02:52] <webx> no errors.. it copies everything to the top level directory | ||
| [2009/12/17 17:03:12] <webx> typo.. it copies everything in the top level directory | ||
| [2009/12/17 17:03:14] <Volcane> take awya the trailing / | ||
| [2009/12/17 17:03:18] <webx> it sets the permissions recursively | ||
| [2009/12/17 17:03:27] <webx> in the path ? | ||
| [2009/12/17 17:03:42] <Volcane> yeah | ||
| [2009/12/17 17:03:55] <gepetto_> ::trac:: External Nodes edited @ http://reductivelabs.com/trac/puppet/wiki/ExternalNodes?version=23 | ||
| [2009/12/17 17:03:56] <Volcane> try it there's been a few bugs about that stuff | ||
| [2009/12/17 17:03:59] <webx> yeah, I tried that both ways | ||
| [2009/12/17 17:04:07] <webx> still nothing | ||
| [2009/12/17 17:05:00] <webx> with the trailing slash on both path & source | ||
| [2009/12/17 17:05:02] <webx> and without | ||
| [2009/12/17 17:05:54] @ Quit: verwilst: Read error: 60 (Operation timed out) | ||
| [2009/12/17 17:07:03] <webx> do I need to set a recursive minimum or maximum or something ? | ||
| [2009/12/17 17:07:09] @ jfreeman joined channel #puppet | ||
| [2009/12/17 17:07:26] <webx> it's only 2-3 directories deep | ||
| [2009/12/17 17:08:11] <webx> 24.8 version, if it matters | ||
| [2009/12/17 17:08:48] @ Quit: jfreeman: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 17:09:07] @ Quit: QMan: Remote closed the connection | ||
| [2009/12/17 17:11:36] <webx> is there anything in file manager configuration that I need to enable ? | ||
| [2009/12/17 17:11:39] @ Quit: poison: Read error: 60 (Operation timed out) | ||
| [2009/12/17 17:11:48] <webx> this seems like a simple thing to do, but it's just not working | ||
| [2009/12/17 17:12:51] @ Quit: mecca: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 17:13:04] @ mecca joined channel #puppet | ||
| [2009/12/17 17:13:40] @ Quit: jimmij: Remote closed the connection | ||
| [2009/12/17 17:15:29] @ poison joined channel #puppet | ||
| [2009/12/17 17:21:15] <BarnacleBob> sweet only 50% of my hosts in error or out of sync state | ||
| [2009/12/17 17:21:17] <BarnacleBob> blargh | ||
| [2009/12/17 17:26:45] @ lak joined channel #puppet | ||
| [2009/12/17 17:29:46] @ Quit: lilmatt: Client Quit | ||
| [2009/12/17 17:30:34] <webx> nothing obviously wrong with this? http://pastie.org/747866 Going to have to move to some sort of cron'd rsync or something which seems pretty ghetto | ||
| [2009/12/17 17:30:58] <Volcane> webx: it seems ok, 100s of ppl use that kind of thing and it works ine | ||
| [2009/12/17 17:32:16] <webx> yea | ||
| [2009/12/17 17:32:25] <webx> looks like it should really straightforward | ||
| [2009/12/17 17:32:34] <webx> nothing needs to be changed in fileserver.conf to make it work | ||
| [2009/12/17 17:32:35] <webx> ? | ||
| [2009/12/17 17:32:45] <Volcane> no | ||
| [2009/12/17 17:34:09] @ littleidea joined channel #puppet | ||
| [2009/12/17 17:36:17] <dsch04> Anyone got any experience of vyatta ? | ||
| [2009/12/17 17:37:37] <webx> Volcane: if the directories don't exist that are under the parent, is there anything that needs to be done to have those directories created ? | ||
| [2009/12/17 17:37:55] <Volcane> webx: they should be created yeah | ||
| [2009/12/17 17:38:16] <Volcane> on its own i mean | ||
| [2009/12/17 17:39:38] <dsch04> webx: you seem to be requiring /opt/splunk/etc/apps as a requirement for /opt/splunk/etc | ||
| [2009/12/17 17:39:55] <webx> yeah, that seems wrong | ||
| [2009/12/17 17:39:56] <webx> hmm, sec | ||
| [2009/12/17 17:40:31] <nigelk> webx: you don't have to explicitly require parent files anymore you know? | ||
| [2009/12/17 17:40:51] <webx> I removed the require, and I still have the same behavior | ||
| [2009/12/17 17:41:02] @ DanF joined channel #puppet | ||
| [2009/12/17 17:41:06] <webx> the recursive part is working for file permissions, but it's not actually transferring the files | ||
| [2009/12/17 17:41:21] <webx> no errors.. just no new files in place | ||
| [2009/12/17 17:41:26] <webx> (or new directories created) | ||
| [2009/12/17 17:41:38] <nigelk> the server definitely has a directory tree underneath that path? | ||
| [2009/12/17 17:41:51] @ glaw joined channel #puppet | ||
| [2009/12/17 17:44:07] <webx> http://pastie.org/747866 is updated to show the recursive ls if that helps | ||
| [2009/12/17 17:44:15] <webx> definitely a bunch of stuff there | ||
| [2009/12/17 17:45:28] <nigelk> odd. | ||
| [2009/12/17 17:45:47] <nigelk> oh wait. "transfer" isn't a module? | ||
| [2009/12/17 17:46:08] <webx> ? | ||
| [2009/12/17 17:46:11] <nigelk> I think you will need to set it up in fileserver.conf then | ||
| [2009/12/17 17:46:16] <webx> yeah, it is | ||
| [2009/12/17 17:46:23] <nigelk> shouldn't the files then be in | ||
| [2009/12/17 17:46:32] <webx> .. /puppet/transfer is what I have in fileserver.conf as "transfer" | ||
| [2009/12/17 17:46:35] <nigelk> transfer/files/xxxxx/splunk2/etc ? | ||
| [2009/12/17 17:47:17] <nigelk> if you're using a module, you don't need to create fileserver.conf entries | ||
| [2009/12/17 17:47:25] <webx> source => "puppet:///transfer/xxxxxxx/splunk2/etc", | ||
| [2009/12/17 17:47:27] <webx> ? | ||
| [2009/12/17 17:47:34] <webx> isn't that right ? | ||
| [2009/12/17 17:47:38] <nigelk> yes | ||
| [2009/12/17 17:47:40] <webx> it's not a module | ||
| [2009/12/17 17:47:41] <webx> k | ||
| [2009/12/17 17:47:45] <nigelk> oh. ok then :) | ||
| [2009/12/17 17:47:54] <webx> ;) | ||
| [2009/12/17 17:48:16] <nigelk> obligatory: modules are awesome you should use them :) | ||
| [2009/12/17 17:48:29] <webx> lol | ||
| [2009/12/17 17:48:36] <webx> I keep hearing that | ||
| [2009/12/17 17:50:05] <joe-mac> fuixed that nagios problem is anyone is interested | ||
| [2009/12/17 17:50:35] <joe-mac> i had mistaken the camptocamp nagios vars cfg_dir and root_dir, and ended up causing some weird kind of scan loop in nagios that nagios wasn't smart enough to detect with -v, so it would just bitch about the first line of the config that it foudn | ||
| [2009/12/17 17:50:49] @ grantk joined channel #puppet | ||
| [2009/12/17 17:51:25] <grantk> puppetd gets the server address from the puppet.conf and that only correct? | ||
| [2009/12/17 17:51:58] @ Quit: themurph: Read error: 110 (Connection timed out) | ||
| [2009/12/17 17:52:11] <joe-mac> grantk: well, it automagically looks for the server named 'puppet' if you don't specify one | ||
| [2009/12/17 17:52:26] <joe-mac> also there is an old bug where having a puppet.conf and a puppetd.conf can cause weirdness. you only need the one file, puppet.conf. | ||
| [2009/12/17 17:52:42] <grantk> yeah, I got wierdness | ||
| [2009/12/17 17:52:58] <grantk> two puppetmasters, one puppet the other alpha-puppet and both defined so in my dns server. | ||
| [2009/12/17 17:53:07] <webx> if I renamed an existing directory to a new name, and restarted puppet, then the files that were supposed to go in that directory were delivered | ||
| [2009/12/17 17:53:25] <webx> explody: mv auth auth2; service puppetd restart -- the stuff in auth/ gets delivered | ||
| [2009/12/17 17:53:28] <webx> wow | ||
| [2009/12/17 17:53:31] <webx> explody = ex: | ||
| [2009/12/17 17:53:38] <webx> nick complete sucks | ||
| [2009/12/17 17:53:44] <grantk> I am setting up a new server so it uses alpha-puppet, when I get to the cert generation the puppet server sees the generation request, alpha-puppet sees nothing. | ||
| [2009/12/17 17:53:46] <explody> heehee | ||
| [2009/12/17 17:53:51] <webx> :P | ||
| [2009/12/17 17:54:11] <DanF> Hi All, I'm trying to get my head around puppet and followed http://reductivelabs.com/trac/puppet/wiki/AdvancedPuppetRecipe. But running "puppetd --test -v" gives "err: Could not retrieve catalog: Could not find class sudo at /etc/puppet/manifests/nodes.pp:4 on node ..." I'm not sure where to start looking to diagnose this, any pointers? | ||
| [2009/12/17 17:54:23] <joe-mac> check /etc/hosts. if you need to override then set servername in puppet.conf | ||
| [2009/12/17 17:54:39] <grantk> will do joe | ||
| [2009/12/17 17:54:58] <grantk> DanF: I would look in the puppet/manifests/nodes.pp | ||
| [2009/12/17 17:55:27] <grantk> then look at the modules/sudo for proper spelling as well. | ||
| [2009/12/17 17:56:56] <Phibs> could be a syntax error too | ||
| [2009/12/17 17:56:59] <grantk> joe-mac: does puppet not check dns to resolve hosts? | ||
| [2009/12/17 17:57:01] <Phibs> restart the puppetmaster | ||
| [2009/12/17 17:57:28] <Phibs> and watch logz | ||
| [2009/12/17 17:58:59] @ preaction joined channel #puppet | ||
| [2009/12/17 17:59:45] <DanF> just noticed i had modules/sudo/manifest and not modules/sudo/manifests, so that's one problem. I'm just frustrated because I don't understand puppet enough to form a decent question yet :) | ||
| [2009/12/17 18:00:33] <grantk> it's worth getting it down, I still don't understand enough either, but it saves me a boatload of time. | ||
| [2009/12/17 18:01:33] @ grantk left channel #puppet () | ||
| [2009/12/17 18:02:00] @ yarihm joined channel #puppet | ||
| [2009/12/17 18:05:15] <DanF> Ah ha, I've solved my problem(s). Far too many syntax errors/typos | ||
| [2009/12/17 18:05:33] @ Quit: yarihm: Client Quit | ||
| [2009/12/17 18:07:03] <Phibs> :) | ||
| [2009/12/17 18:07:15] <Phibs> sweet man | ||
| [2009/12/17 18:08:35] @ Quit: ptman: Read error: 60 (Operation timed out) | ||
| [2009/12/17 18:09:06] @ Quit: malraid: "ChatZilla 0.9.86 [Firefox 3.0.14/2009090216]" | ||
| [2009/12/17 18:09:56] @ ptman joined channel #puppet | ||
| [2009/12/17 18:10:43] @ Quit: kaptk2: "Leaving." | ||
| [2009/12/17 18:13:20] @ Quit: erm__: Read error: 110 (Connection timed out) | ||
| [2009/12/17 18:27:42] @ londo__ joined channel #puppet | ||
| [2009/12/17 18:29:22] @ Quit: londo_: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 18:30:09] @ Quit: pheezy_: Remote closed the connection | ||
| [2009/12/17 18:31:27] @ Quit: ezmobius: Remote closed the connection | ||
| [2009/12/17 18:33:14] <markl_> ok so i am really filling silly here... i have some dvd images here | ||
| [2009/12/17 18:33:15] <markl_> not isos | ||
| [2009/12/17 18:33:22] <markl_> but copies of what would be in the isos | ||
| [2009/12/17 18:33:46] <markl_> i.e. a directory named MARKS_MOVIE and inside that a VIDEO_TS directory | ||
| [2009/12/17 18:33:55] <markl_> no storage groups | ||
| [2009/12/17 18:34:22] <markl_> in myth 0.21 when i'd use mythvideo and open MARKS_MOVIE, i'd get the dvd menu | ||
| [2009/12/17 18:34:28] <markl_> in 0.22 it just shows VIDEO_TS | ||
| [2009/12/17 18:34:37] <markl_> is there a way to have it bring up the dvd menu? | ||
| [2009/12/17 18:34:59] <proton> markl_: wrong channel methinks :) | ||
| [2009/12/17 18:35:18] <markl_> doh this was supposed to by #mythbuntu :) | ||
| [2009/12/17 18:35:30] <BarnacleBob> lol | ||
| [2009/12/17 18:35:47] <markl_> ah it forwarded to a different channel that i was already in, so it just left me in #puppet | ||
| [2009/12/17 18:35:51] <markl_> weird | ||
| [2009/12/17 18:36:24] @ jimmij joined channel #puppet | ||
| [2009/12/17 18:36:47] @ Quit: glaw: "Leaving." | ||
| [2009/12/17 18:42:44] @ erm_ joined channel #puppet | ||
| [2009/12/17 18:55:55] @ Quit: bug: | ||
| [2009/12/17 18:56:37] @ Quit: RageLink: "up up and away" | ||
| [2009/12/17 18:58:00] @ ricdanger joined channel #puppet | ||
| [2009/12/17 19:02:49] @ ricdanger left channel #puppet () | ||
| [2009/12/17 19:05:08] @ Quit: p3rror: Remote closed the connection | ||
| [2009/12/17 19:05:27] @ p3rror joined channel #puppet | ||
| [2009/12/17 19:21:40] @ Quit: jcape: Read error: 110 (Connection timed out) | ||
| [2009/12/17 19:22:07] @ Quit: erm_: Read error: 60 (Operation timed out) | ||
| [2009/12/17 19:30:48] @ londo__ is now known as londo_ | ||
| [2009/12/17 19:34:05] @ jaredrhine left channel #puppet () | ||
| [2009/12/17 19:40:46] @ Quit: _bobbyz: Read error: 110 (Connection timed out) | ||
| [2009/12/17 19:42:46] @ Quit: dsch04: "Leaving" | ||
| [2009/12/17 19:43:55] @ Quit: paxos: | ||
| [2009/12/17 19:50:46] @ Quit: cwebber: | ||
| [2009/12/17 19:53:54] @ Quit: alfism: "http://opensolaris.com/" | ||
| [2009/12/17 19:55:51] @ Quit: jab_doa: "Verlassend" | ||
| [2009/12/17 19:56:08] @ alfism joined channel #puppet | ||
| [2009/12/17 19:56:18] @ Quit: nigelk: | ||
| [2009/12/17 19:57:08] @ dsch04 joined channel #puppet | ||
| [2009/12/17 20:05:30] @ bug joined channel #puppet | ||
| [2009/12/17 20:09:16] @ jcape joined channel #puppet | ||
| [2009/12/17 20:10:31] @ Quit: lak: | ||
| [2009/12/17 20:14:24] @ Quit: webx: "My damn controlling terminal disappeared!" | ||
| [2009/12/17 20:15:15] @ Quit: arj: Remote closed the connection | ||
| [2009/12/17 20:18:30] @ Quit: jcape: Read error: 104 (Connection reset by peer) | ||
| [2009/12/17 20:19:20] @ jcape joined channel #puppet | ||
| [2009/12/17 20:20:39] @ jcape left channel #puppet () | ||
| [2009/12/17 20:22:54] @ Quit: Djelibeybi: "Leaving" | ||
| [2009/12/17 20:25:54] @ RageLink joined channel #puppet | ||
| [2009/12/17 20:32:31] @ arj joined channel #puppet | ||
| [2009/12/17 20:33:12] @ fwryan joined channel #puppet | ||
| [2009/12/17 20:36:09] <ohadlevy> morning | ||
| [2009/12/17 20:40:38] @ spencert joined channel #puppet | ||
| [2009/12/17 20:40:46] <spencert> hello | ||
| [2009/12/17 20:40:50] @ joe-mac1 joined channel #puppet | ||
| [2009/12/17 20:40:55] <spencert> question for you all | ||
| [2009/12/17 20:41:40] <spencert> I have created a custom fact and it deploys correctly etc, and I have some case statements that check for the results of that custom fact and do work based on the results | ||
| [2009/12/17 20:41:49] <spencert> I have found the following issue | ||
| [2009/12/17 20:42:28] <spencert> the fact is not downloaded on the first puppet run after a box is freshly provisioned and therefore all the decisions based on that fact use the default value because the fact does not return any data | ||
| [2009/12/17 20:42:36] @ M- joined channel #puppet | ||
| [2009/12/17 20:42:41] <joe-mac1> i think this is a common problem | ||
| [2009/12/17 20:42:53] <ohadlevy> spencert: why isnt it downloaded? | ||
| [2009/12/17 20:42:58] <ohadlevy> it should | ||
| [2009/12/17 20:43:06] <joe-mac1> ohadlevy: i think on the first run you don't get custom facts | ||
| [2009/12/17 20:43:11] <spencert> one file I generate based on this data is /etc/resolv.conf therefore that file gets nuked and then puppet cannot run anymore, unless I manually fix it | ||
| [2009/12/17 20:43:13] @ erm_ joined channel #puppet | ||
| [2009/12/17 20:43:19] <joe-mac1> i don't use custom facts but i could have sworn i've seen people talk about this in here | ||
| [2009/12/17 20:43:21] <ohadlevy> of course you do, if you enable pluginsync/factsync | ||
| [2009/12/17 20:44:33] <spencert> ohadlevy: I am not sure why it does not come down the first time it runs, but if I fix /etc/resolv.conf and immediately run puppet again the first thing it does is pull down the custom fact and loads it before it does anything else | ||
| [2009/12/17 20:45:14] <ohadlevy> make sure your initial puppet run includes pluginsync (or factsync) - you can also use --factsync or --pluginsync on the command line | ||
| [2009/12/17 20:45:29] <spencert> ok, I will try that | ||
| [2009/12/17 20:45:50] <spencert> I have about 60 vm's that need provisioning tonight so I have plenty of fresh virtual hardware | ||
| [2009/12/17 20:45:53] <spencert> brb | ||
| [2009/12/17 20:46:08] <ohadlevy> spencert: how do you deploy those? | ||
| [2009/12/17 20:46:18] <spencert> the vm's? or the os's? | ||
| [2009/12/17 20:46:34] <ohadlevy> the whole process | ||
| [2009/12/17 20:47:34] <spencert> 32 esx servers pointed to hp eva storage, kickstart/puppet | ||
| [2009/12/17 20:47:54] <spencert> brb, going to windows for virtual infrastructure client | ||
| [2009/12/17 20:51:37] <joe-mac1> you should pick up vmwre workstation | ||
| [2009/12/17 20:51:45] <joe-mac1> with unity | ||
| [2009/12/17 20:51:51] <joe-mac1> that's the only suck part about esxi | ||
| [2009/12/17 20:52:10] @ Quit: mikerowehl: | ||
| [2009/12/17 20:52:28] @ jaredrhine joined channel #puppet | ||
| [2009/12/17 20:53:49] @ Quit: p3rror: "أستودعكم الله" | ||
| [2009/12/17 20:59:06] <spencert> ok | ||
| [2009/12/17 20:59:08] <spencert> no change | ||
| [2009/12/17 20:59:46] <spencert> I added --factsync --pluginsync to the puppetd command in the postinstall script of kickstart and it still does not pull down the custom fact | ||
| [2009/12/17 21:00:13] <spencert> this is what I have in the post script | ||
| [2009/12/17 21:00:14] <spencert> /usr/sbin/puppetd --factsync --pluginsync --debug --no-daemonize --onetime --verbose --logdest /tmp/puppetd.log | ||
| [2009/12/17 21:00:22] <spencert> nothing in /tmp/puppetd.log | ||
| [2009/12/17 21:00:28] <joe-mac1> what version of puppet? | ||
| [2009/12/17 21:00:52] <spencert> some boxes when they run this command only get the ssl key signed, others get the ssl key signed AND do a run, I don't get that part | ||
| [2009/12/17 21:01:03] <ohadlevy> hmm.. it works for me... maybe you can compare: http://theforeman.org/repositories/entry/foreman/app/views/unattended/kickstart.rhtml | ||
| [2009/12/17 21:01:18] <spencert> Dec 18 01:38:48 app003 puppetd[3907]: Starting Puppet client version 0.25.1 | ||
| [2009/12/17 21:01:33] <ohadlevy> spencert: and thats the puppet.conf that i use: http://theforeman.org/repositories/entry/foreman/app/views/unattended/snippets/_puppet.conf.erb | ||
| [2009/12/17 21:02:08] <spencert> ohadlevy: and that pulls down your custom facts on first run eh? | ||
| [2009/12/17 21:02:14] <ohadlevy> yes | ||
| [2009/12/17 21:02:26] <ohadlevy> if you use plugins, you would need to change it to pluginsync | ||
| [2009/12/17 21:02:40] @ Quit: littleidea: | ||
| [2009/12/17 21:03:36] <spencert> so this is where I have my custom fact (this may be the problem) its in a module... puppet/modules/network/lib/facter/datacenter.rb | ||
| [2009/12/17 21:04:16] <ohadlevy> so you need pluginsync | ||
| [2009/12/17 21:04:55] @ `properz1l joined channel #puppet | ||
| [2009/12/17 21:04:58] <spencert> hmm, one sec, I am running puppet from kickstart using the default puppet.conf | ||
| [2009/12/17 21:05:07] <spencert> let me look at that before I think of anything else | ||
| [2009/12/17 21:05:40] <BarnacleBob> you can run puppetd --tags puppet to get your puppet.conf over then run it again for a full run | ||
| [2009/12/17 21:06:55] <ohadlevy> BarnacleBob: or just use foreman to do it for you ;) | ||
| [2009/12/17 21:07:03] <BarnacleBob> lol yeah :) | ||
| [2009/12/17 21:07:22] <BarnacleBob> got all my nodes into foreman today | ||
| [2009/12/17 21:07:30] <BarnacleBob> i was at 10% ok 90% sync or error | ||
| [2009/12/17 21:07:33] <ohadlevy> BarnacleBob: found lots of errors? ;) | ||
| [2009/12/17 21:07:34] <BarnacleBob> i was loling | ||
| [2009/12/17 21:07:36] <ohadlevy> lol | ||
| [2009/12/17 21:08:01] <BarnacleBob> well i'm gonna take off | ||
| [2009/12/17 21:08:06] <BarnacleBob> lasters | ||
| [2009/12/17 21:08:08] <BarnacleBob> laters | ||
| [2009/12/17 21:08:12] @ Quit: BarnacleBob: "This computer has gone to sleep" | ||
| [2009/12/17 21:08:12] <ohadlevy> cya | ||
| [2009/12/17 21:09:10] @ alexine_dsouza joined channel #puppet | ||
| [2009/12/17 21:09:34] <spencert> ohadlevy: so if my puppet.conf does not have pluginsync in puppet.conf when puppet first runs in the kikcstart postscript, shouldn't I just be able to run puppetd --pluginsync and not worry about that? | ||
| [2009/12/17 21:09:41] @ Quit: jes5: "Leaving." | ||
| [2009/12/17 21:09:45] <spencert> I repeated myself | ||
| [2009/12/17 21:10:03] @ Quit: erm_: Read error: 110 (Connection timed out) | ||
| [2009/12/17 21:10:07] <ohadlevy> spencert: i think you are correct, unless you have pluginsync false.. hmm, not 100% sure about that :) | ||
| [2009/12/17 21:10:27] @ Cyis joined channel #puppet | ||
| [2009/12/17 21:10:34] <spencert> ohadlevy: I see :-) | ||
| [2009/12/17 21:10:42] <spencert> testing follows | ||
| [2009/12/17 21:10:53] <spencert> pluginsync is default off correct? | ||
| [2009/12/17 21:11:00] <ohadlevy> i did that part of the code maybe two years ago.. so :) | ||
| [2009/12/17 21:11:06] <Cyis> is it possible to virtualize ssh_authorized_key entries like you do User and Group entities? | ||
| [2009/12/17 21:11:22] <spencert> Cyis: I would love to know that as well, that is my next project | ||
| [2009/12/17 21:11:22] <joe-mac1> yes | ||
| [2009/12/17 21:11:48] <Cyis> joe-mac: @ ssh_authorized_key { ... } then realize ( ? ) | ||
| [2009/12/17 21:11:53] <Cyis> ? | ||
| [2009/12/17 21:11:56] <joe-mac1> yea | ||
| [2009/12/17 21:12:07] <joe-mac1> in fact i wrap the authorized keys into a defined type called ssh_user | ||
| [2009/12/17 21:12:24] <joe-mac1> creates the user, their ssh key, and a couple needed directories. then i make those defines virtual | ||
| [2009/12/17 21:12:27] <spencert> joe-mac1: do you have an example, I am needing to do this for my next project | ||
| [2009/12/17 21:13:19] <Cyis> a gist would be great.. I'm starting from scratch... taking over for a piss-poor previous admin and really needing to whip things in shape so turning to Puppet | ||
| [2009/12/17 21:13:22] <joe-mac1> spencert: which part do you want to see an example of? | ||
| [2009/12/17 21:13:38] <spencert> ohadlevy: pluginsync = false is default | ||
| [2009/12/17 21:13:55] <ohadlevy> spencert: there you go :) | ||
| [2009/12/17 21:13:56] <spencert> the define portion | ||
| [2009/12/17 21:13:59] @ Quit: bodepd: | ||
| [2009/12/17 21:14:27] <Cyis> right now I've created a module for all of our user accounts... virtual user, group and was hoping ssh keys... then I have another module based on specific groups that get installed where I'm realizing the user,groups, keys | ||
| [2009/12/17 21:14:27] <joe-mac1> sure, hold on spencert. | ||
| [2009/12/17 21:14:48] <spencert> ohadlevy: I assume that I should be able to run --pluginsync on the commandline to override the default | ||
| [2009/12/17 21:14:57] @ Quit: `properzel: Read error: 110 (Connection timed out) | ||
| [2009/12/17 21:14:59] <spencert> that assumption appears to be incorrectr | ||
| [2009/12/17 21:15:50] <ohadlevy> spencert: i guess that was one of the first reasons why I overridden the whole puppet.conf that comes in the packages, i have to manage a lot of different os's.. | ||
| [2009/12/17 21:16:10] @ Quit: fwryan: Ping timeout: 180 seconds | ||
| [2009/12/17 21:18:40] <spencert> I don't need to do something silly like --pluginsync true | ||
| [2009/12/17 21:18:44] <spencert> on the command line | ||
| [2009/12/17 21:21:20] @ Quit: rmiller4pi8: Read error: 110 (Connection timed out) | ||
| [2009/12/17 21:21:43] <joe-mac1> spencert: http://www.pastie.org/748200 | ||
| [2009/12/17 21:22:15] <spencert> joe-mac1: that is excellent! | ||
| [2009/12/17 21:23:27] @ pheezy joined channel #puppet | ||
| [2009/12/17 21:23:27] <spencert> ok, consider this, that solves one portion of my project, now the next portion | ||
| [2009/12/17 21:23:52] @ Quit: jaredrhine: Read error: 110 (Connection timed out) | ||
| [2009/12/17 21:24:28] <spencert> we have shared service accounts, i.e. for our application, it gets installed under the fs user (for some reason we don't believe in sudo) so instead we need a "group" of people to get their authorized keys installed in the /home/fs/.ssh/authorized_keys file | ||
| [2009/12/17 21:24:43] <spencert> joe-mac1: do you mind if I use what you have already put together? | ||
| [2009/12/17 21:25:15] <joe-mac1> no, if it helps use it | ||
| [2009/12/17 21:25:31] <spencert> thank you | ||
| [2009/12/17 21:27:57] <spencert> ohadlevy: ok taking out --factsync and leaving --pluginsync the custom fact downloaded on the first puppet run | ||
| [2009/12/17 21:28:03] <spencert> however it did not load it | ||
| [2009/12/17 21:28:38] <spencert> nevermind | ||
| [2009/12/17 21:28:43] <ohadlevy> hmm.. one more thing that i do, is not to run puppet in the kickstart, i mean it does run and fetch the certificate, but it runs without a real tag | ||
| [2009/12/17 21:28:44] <spencert> it claimed it did | ||
| [2009/12/17 21:29:05] <Cyis> spencert, just have multiple ssh_authorized_key { } entires with user => "fs" | ||
| [2009/12/17 21:29:14] <Cyis> I have 2 ssh keys myself and it works | ||
| [2009/12/17 21:29:21] <spencert> Cyis: hmm, did not think of that | ||
| [2009/12/17 21:29:28] <spencert> I was making it overly complex | ||
| [2009/12/17 21:29:46] <Cyis> just a sec and I'll post a gist of what I have | ||
| [2009/12/17 21:29:52] <spencert> ohadlevy: --tags no_such_tag is that what you mean "without a real tag" | ||
| [2009/12/17 21:29:58] <ohadlevy> yes | ||
| [2009/12/17 21:30:08] <spencert> ok let me try that | ||
| [2009/12/17 21:31:57] <Cyis> http://gist.github.com/259240 | ||
| [2009/12/17 21:32:47] <Cyis> users:: is our virutalized user construct module... then techops:: is one dept's realization | ||
| [2009/12/17 21:33:18] <spencert> Cyis: wow that is too easy, | ||
| [2009/12/17 21:33:24] @ Quit: pheezy: Remote closed the connection | ||
| [2009/12/17 21:33:34] <spencert> I am not sure what I was doing making it hard | ||
| [2009/12/17 21:33:37] <spencert> this is excellent | ||
| [2009/12/17 21:33:52] <Cyis> Hmm... joe's thoughts are nice as it ties in with Nagios contacts as well... I like that | ||
| [2009/12/17 21:34:18] <Cyis> spencert, my way if a key were compromised I could keep it in there but change ensure => absent | ||
| [2009/12/17 21:34:50] <spencert> that's a good idea, an audit control | ||
| [2009/12/17 21:34:56] <joe-mac1> that part i pasted is all defines though, not the actual users | ||
| [2009/12/17 21:35:10] <spencert> what does one user look like? | ||
| [2009/12/17 21:35:14] <joe-mac1> hold on | ||
| [2009/12/17 21:35:23] <spencert> there were a lot of variables you were passing in | ||
| [2009/12/17 21:36:03] <Cyis> spencert, I'll add the user and group defines | ||
| [2009/12/17 21:36:46] <Cyis> users & techops modules have 3 manifests besides init.pp... accounts.pp, groups.pp and keys.pp to keep things segmented and clean | ||
| [2009/12/17 21:37:42] <spencert> ohadlevy: so here is result of --tags no_such_tag | ||
| [2009/12/17 21:37:46] <joe-mac1> spencert: here is an example http://www.pastie.org/748214 | ||
| [2009/12/17 21:38:27] <joe-mac1> if you replace the sshpubkey string, it overwrites the old key | ||
| [2009/12/17 21:39:27] <spencert> it only gets the ssl cert on first run, on second run it does not get the plugins because the puppet.conf is still original, however the /etc/resolv.conf is not messed up because of a unforeseen "benefit??" I have a module that changes from dhcp to static ip assignments, this causes /etc/init.d/network to refresh thereby causing dhclient to "put back" the original /etc/resolv.conf it got from dhcp. | ||
| [2009/12/17 21:39:34] <spencert> so I still have the problem but it masks itself | ||
| [2009/12/17 21:40:06] <ohadlevy> spencert: why doesnt it get the plugins on the first run as well? | ||
| [2009/12/17 21:40:16] <spencert> joe-mac:1 that is not as big as I had imagined, that is easy | ||
| [2009/12/17 21:40:21] @ rmiller4pi8 joined channel #puppet | ||
| [2009/12/17 21:40:33] @ lilmatt joined channel #puppet | ||
| [2009/12/17 21:41:01] <spencert> ohadlevy: the first run in the os is still using the default puppet.conf from the rpm and puppetd is started from /etc/init.d/puppetd using all defaults | ||
| [2009/12/17 21:41:19] <ohadlevy> spencert so add pluginsync =true to the file | ||
| [2009/12/17 21:41:37] <Cyis> I've updated my gist to include all the classes... I could probably stand to reduce it down using some defines... but this is a first run at it... I'll refine later | ||
| [2009/12/17 21:42:00] <spencert> yes, I have a puppet.conf that gets deployed that has that in it, it just waits to get deployed with the rest of the puppet manifest | ||
| [2009/12/17 21:42:44] @ Quit: lilmatt: Client Quit | ||
| [2009/12/17 21:43:17] <ohadlevy> spencert: in my setup, i do it twice, one generated via foreman, and the other is a plain puppet template | ||
| [2009/12/17 21:45:48] <spencert> you do what twice exactly? | ||
| [2009/12/17 21:45:57] <spencert> I have been at work for 12hrs and my mind is going to mush | ||
| [2009/12/17 21:47:14] <Cyis> next task to take on... sudo control | ||
| [2009/12/17 21:47:32] <joe-mac1> mehhh, i just use a monolithic sudoers with the proper hostnames | ||
| [2009/12/17 21:48:18] <Cyis> need too many different versions it would get ugly messy... | ||
| [2009/12/17 21:48:41] <spencert> joe-mac1 and Cyis: how many machines are you managing? | ||
| [2009/12/17 21:49:05] <joe-mac1> i think around 70 right now | ||
| [2009/12/17 21:49:25] <spencert> I have some questions about load balancing my puppetmasters on two separate physical hosts | ||
| [2009/12/17 21:49:33] <Cyis> spen: I haven't got a full count yet... working on the first 2 data centers and our office servers... and we expect 2 more data centers to be rolled out shortly | ||
| [2009/12/17 21:49:42] <joe-mac1> will be up around 110-120 once I get our west coast office in here. finally my colleague got hardware for his location to run esxi. | ||
| [2009/12/17 21:49:44] <ohadlevy> spencert: puppet.conf | ||
| [2009/12/17 21:49:59] <joe-mac1> i'm at a relatively smallc ompany | ||
| [2009/12/17 21:50:07] <spencert> ohadlevy: ok, thanks I will try some more --pluginsync or manual puppet.conf drops.. | ||
| [2009/12/17 21:50:30] <spencert> joe-mac1 and Cyis: cool, cool, | ||
| [2009/12/17 21:50:41] <Cyis> we're relatively small as well... I've worked in larger companies with less advanced configuration management... last one still used rsync ;) | ||
| [2009/12/17 21:51:18] <spencert> we have plans for about 500 or so puppet clients, I am hoping to move our 4000 cfengine managed nodes to puppet but have some political barriers | ||
| [2009/12/17 21:51:20] <joe-mac1> i still use rsync for openbsd. well, rsync is part of it. it's just the config files for the fw cluster in a subversion repo then a capistrano recipe to deploy to both nodes in the cluster | ||
| [2009/12/17 21:51:42] <spencert> 4000 nodes debian, 500 nodes redhat | ||
| [2009/12/17 21:51:56] <joe-mac1> where do you work spencert? | ||
| [2009/12/17 21:52:00] <joe-mac1> that's a lot of nodes | ||
| [2009/12/17 21:52:04] <spencert> familysearch.org | ||
| [2009/12/17 21:52:31] <spencert> genealogy website | ||
| [2009/12/17 21:52:39] @ Quit: WALoeIII: Read error: 60 (Operation timed out) | ||
| [2009/12/17 21:52:43] <joe-mac1> nice | ||
| [2009/12/17 21:52:46] <spencert> the little site on www.familysearch.org is 25 iis servers, | ||
| [2009/12/17 21:52:55] <spencert> that is going away | ||
| [2009/12/17 21:53:01] <joe-mac1> yea lucky for you lol | ||
| [2009/12/17 21:53:04] <spencert> the cool stuff is on labs.familysearch.org | ||
| [2009/12/17 21:53:11] <spencert> most everything is beta right now | ||
| [2009/12/17 21:53:13] <joe-mac1> managing windows boxes is way too complicated | ||
| [2009/12/17 21:53:18] <spencert> not beta like google beta | ||
| [2009/12/17 21:53:39] <spencert> beta like the product managers think its good enough to be called that even though it breaks all the time :-) | ||
| [2009/12/17 21:53:53] <joe-mac1> heh | ||
| [2009/12/17 21:54:00] <spencert> so we fight fires lots | ||
| [2009/12/17 21:54:18] <spencert> and break thumbs of devs when they do dumb things | ||
| [2009/12/17 21:55:09] <Cyis> I just came on-board here... they haven't had a sysadmin in awhile since they got rid of the inept one they had... so dev has been managing things... so I'm ripping out their access and taking control for our ops group | ||
| [2009/12/17 21:55:36] <Cyis> this is the first step and working to do it in tandem with a large re-deployment soon to happen in which we're blowing away and re-installing systems from scratch | ||
| [2009/12/17 21:55:43] <spencert> that sounds like it would be fun | ||
| [2009/12/17 21:55:43] <Cyis> so I'm trying to put things together quickly | ||
| [2009/12/17 21:55:50] <spencert> puppet is the tool for that | ||
| [2009/12/17 21:55:54] <spencert> which os you running? | ||
| [2009/12/17 21:56:00] <ohadlevy> spencert: how do you monitor your puppets? | ||
| [2009/12/17 21:56:05] <Cyis> debian mostly... but some centos | ||
| [2009/12/17 21:56:16] <spencert> ohadlevy: good question, we have not setup anything | ||
| [2009/12/17 21:56:28] <spencert> I had a few puppetd 's die last week for unknown reasons | ||
| [2009/12/17 21:56:32] <ohadlevy> spencert: you might be interested in foreman then (http://theforeman.org) | ||
| [2009/12/17 21:56:45] <spencert> found em the classic way, via pdsh runs | ||
| [2009/12/17 21:58:10] <spencert> ohadlevy: that looks really neat | ||
| [2009/12/17 21:58:16] <spencert> do you run it locally? | ||
| [2009/12/17 21:58:44] <ohadlevy> spencert: what do you mean locally? | ||
| [2009/12/17 21:58:45] <joe-mac1> ohadlevy made it! | ||
| [2009/12/17 21:59:25] @ cwebber joined channel #puppet | ||
| [2009/12/17 22:02:21] <spencert> ohadlevy: I mean do I install foreman in my datacenter? | ||
| [2009/12/17 22:03:12] <ohadlevy> i have one foreman for all of my DC | ||
| [2009/12/17 22:03:34] <ohadlevy> I dont think you want a hosted foreman for 4000 nodes ;) | ||
| [2009/12/17 22:04:06] <spencert> yea,as I read around the site I noticed more, this is awesome! | ||
| [2009/12/17 22:04:28] <ohadlevy> maybe it would help you migrate faster from cfengine ;) | ||
| [2009/12/17 22:05:02] <joe-mac1> what is the blocker for cfengine migration? | ||
| [2009/12/17 22:08:27] <Cyis> foreman looks like something I may need to check into | ||
| [2009/12/17 22:09:02] <Cyis> our deployment method though would mean one foreman per DC as we have a PXE boot server in each | ||
| [2009/12/17 22:09:38] <ohadlevy> Cyis: foreman would be smart enough to handle that | ||
| [2009/12/17 22:10:09] <Cyis> but right now our puppetmaster and our PXE boot server are separate machines | ||
| [2009/12/17 22:10:27] <ohadlevy> cyis: there is a proxy service which you can run on a machine that has access to your tftp dirs | ||
| [2009/12/17 22:10:31] <spencert> blocker for cfengine -> puppet migration it would take away someones job (and management like that someone) | ||
| [2009/12/17 22:10:46] <spencert> we got a new person in to that position and he is more open to puppet | ||
| [2009/12/17 22:10:52] <spencert> so it may be time, we shall see | ||
| [2009/12/17 22:11:09] <Cyis> ohadlevy, how would it handle a single puppetmaster with multiple foreman? | ||
| [2009/12/17 22:11:27] <spencert> well, I am going home, thanks all for your help this evening (for me its 8:12pm) | ||
| [2009/12/17 22:11:44] <ohadlevy> Cyis: you will define a tftp service per domain (or subnet) | ||
| [2009/12/17 22:16:02] @ lludwig joined channel #puppet | ||
| [2009/12/17 22:16:11] @ Quit: lludwig: Client Quit | ||
| [2009/12/17 22:18:49] @ WALoeIII joined channel #puppet | ||
| [2009/12/17 22:29:25] @ Quit: gaveen: "Leaving" | ||
| [2009/12/17 22:31:19] @ Djelibeybi joined channel #puppet | ||
| [2009/12/17 22:35:04] @ littleidea joined channel #puppet | ||
| [2009/12/17 22:36:48] @ Quit: ambroff: "Ex-Chat" | ||
| [2009/12/17 22:40:10] @ erm_ joined channel #puppet | ||
| [2009/12/17 22:45:04] @ Quit: WALoeIII: "Bai." | ||
| [2009/12/17 22:45:27] @ Quit: ssm: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:45:27] @ Quit: mat_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:45:28] @ Quit: |Mike|: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:49:18] @ jfreeman joined channel #puppet | ||
| [2009/12/17 22:50:18] @ mat_ joined channel #puppet | ||
| [2009/12/17 22:50:18] @ ssm joined channel #puppet | ||
| [2009/12/17 22:50:18] @ |Mike| joined channel #puppet | ||
| [2009/12/17 22:50:28] @ Quit: mat_: Remote closed the connection | ||
| [2009/12/17 22:50:38] @ mat_ joined channel #puppet | ||
| [2009/12/17 22:53:43] @ Quit: mat_: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:53:44] @ Quit: ssm: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:53:44] @ Quit: |Mike|: kubrick.freenode.net irc.freenode.net | ||
| [2009/12/17 22:57:24] @ Cyis left channel #puppet ("Leaving") | ||
| [2009/12/17 22:58:04] @ nigelk joined channel #puppet | ||
| [2009/12/17 22:58:13] @ Quit: nigelk: Client Quit | ||
| [2009/12/17 23:02:53] @ mat_ joined channel #puppet | ||
| [2009/12/17 23:02:53] @ ssm joined channel #puppet | ||
| [2009/12/17 23:02:53] @ |Mike| joined channel #puppet | ||
| [2009/12/17 23:12:59] <Phibs> I know this is puppet, but anyone doing Virtualization w/ KVM under CentoS with bonding AND vlans? | ||
| [2009/12/17 23:18:19] <jamesturnbull> Phibs: Djelibeybi is doing something in that line - Xen rather than KVM though | ||
| [2009/12/17 23:19:11] <Phibs> hehe yeah I'm using xen now, wnana try kvm wondering if networking is any easier :) | ||
| [2009/12/17 23:19:21] <Phibs> I've got the dom0 up with 4x1Gbit on bond0 w/ vlans | ||
| [2009/12/17 23:19:31] <Djelibeybi> Phibs: yes, I do that with Xen fairly easily. | ||
| [2009/12/17 23:19:38] <Phibs> making bridges and all the dirtyness for xen is annoying | ||
| [2009/12/17 23:19:41] <Phibs> esp using the default xen scripts :( | ||
| [2009/12/17 23:19:48] * Djelibeybi does not use the default Xen scripts | ||
| [2009/12/17 23:19:51] <Phibs> hehhe | ||
| [2009/12/17 23:19:52] <Phibs> what do ya use | ||
| [2009/12/17 23:19:57] <Djelibeybi> I just setup all the bridges manually in /etc/sysconfig/network-scripts | ||
| [2009/12/17 23:19:58] <Cuchulain> don't the default xen scripts just make the bridges for you? | ||
| [2009/12/17 23:20:08] <Phibs> Djelibeybi: hows that work? | ||
| [2009/12/17 23:20:13] <Djelibeybi> And set xend-config.sxp's network-bridges script to /bin/true | ||
| [2009/12/17 23:20:14] <Phibs> Cuchulain: yeah for a simple / default install | ||
| [2009/12/17 23:20:14] @ Quit: bug: | ||
| [2009/12/17 23:20:18] <Cuchulain> last i checked it was far easier, under debian at least, to let it handle everything | ||
| [2009/12/17 23:20:26] <Phibs> Cuchulain: maybe the debian ones dont suck. | ||
| [2009/12/17 23:20:31] <Cuchulain> hrm | ||
| [2009/12/17 23:20:38] @ `properz1l is now known as `properzel | ||
| [2009/12/17 23:20:39] <Djelibeybi> Phibs: just create the interfaces and bridges yoruself | ||
| [2009/12/17 23:20:39] <Cuchulain> actually, i seem to recall having to mess round to get vlans working | ||
| [2009/12/17 23:20:46] <Phibs> Djelibeybi: got a sample or two sir from network-scripts? | ||
| [2009/12/17 23:21:09] <Djelibeybi> Phibs: http://wiki.oracle.com/page/Oracle+VM+Server+Configuration-+bonded+and+trunked+network+interfaces | ||
| [2009/12/17 23:21:18] <Djelibeybi> Oracle VM is just a packaged version of Xen | ||
| [2009/12/17 23:21:26] <Phibs> most excellent thanks | ||
| [2009/12/17 23:21:51] <Djelibeybi> No worries. I do this a lot. :) | ||
| [2009/12/17 23:22:02] <Phibs> ehe | ||
| [2009/12/17 23:23:11] <Phibs> if I oh my god | ||
| [2009/12/17 23:23:13] <Phibs> that is so ugly | ||
| [2009/12/17 23:23:14] <Phibs> ;0 | ||
| [2009/12/17 23:23:42] <Djelibeybi> You think? | ||
| [2009/12/17 23:23:46] * Djelibeybi finds it exceptionally clean | ||
| [2009/12/17 23:23:47] <Phibs> uh huh | ||
| [2009/12/17 23:23:49] <Phibs> haha | ||
| [2009/12/17 23:23:59] <Djelibeybi> All the networking handled by the networking engine | ||
| [2009/12/17 23:24:02] <Phibs> true | ||
| [2009/12/17 23:24:04] <Djelibeybi> Nice and simple | ||
| [2009/12/17 23:24:07] <Phibs> how is performance? | ||
| [2009/12/17 23:24:13] <Djelibeybi> And I can add/remove/change bridges/VLANs on the fly | ||
| [2009/12/17 23:24:36] <Djelibeybi> Phibs: PV guests hit bare-metal networking limits | ||
| [2009/12/17 23:24:42] <Phibs> nice. | ||
| [2009/12/17 23:24:49] <Djelibeybi> Phibs: HVM guests need to switch to emulate the e1000 to hit GigE speeds | ||
| [2009/12/17 23:24:59] <Phibs> meh, I only do PV. | ||
| [2009/12/17 23:25:06] <Djelibeybi> KVM doesn't do PV, you know that right? | ||
| [2009/12/17 23:25:11] <Phibs> eh? | ||
| [2009/12/17 23:25:14] <Phibs> I thought it did... | ||
| [2009/12/17 23:25:17] <Djelibeybi> KVM = HV only | ||
| [2009/12/17 23:25:22] <Djelibeybi> Xen = PV/HV | ||
| [2009/12/17 23:25:23] <Phibs> and it's sposed to be as fast as xen pv? | ||
| [2009/12/17 23:25:28] <Djelibeybi> Um, no. | ||
| [2009/12/17 23:25:36] <Djelibeybi> Well, actually | ||
| [2009/12/17 23:25:36] <Phibs> man.. why would I choose kvm then... | ||
| [2009/12/17 23:25:40] <Phibs> other than if I wanted to run windows. | ||
| [2009/12/17 23:25:43] <Djelibeybi> If you're running on the new Nehalems, perhaps | ||
| [2009/12/17 23:25:47] <Phibs> haha | ||
| [2009/12/17 23:25:52] <Phibs> attack of the nehalems! | ||
| [2009/12/17 23:25:55] <Djelibeybi> The newer Intel/AMD chipsets have much better VT extensions | ||
| [2009/12/17 23:25:59] <Phibs> nod | ||
| [2009/12/17 23:26:06] <Djelibeybi> So, the HV+PV driver VMs can achieve really good performance | ||
| [2009/12/17 23:26:16] * Djelibeybi is a virtualization architect for Oracle. I do this for a living. :) | ||
| [2009/12/17 23:26:22] <Djelibeybi> Though, I am biased towards Xen | ||
| [2009/12/17 23:26:27] <Phibs> I indeed have a Nehalem | ||
| [2009/12/17 23:26:30] <Phibs> E5504 | ||
| [2009/12/17 23:26:40] <Djelibeybi> Is that a hyperthreaded one? | ||
| [2009/12/17 23:26:46] <Djelibeybi> Or is that just the 5560+? | ||
| [2009/12/17 23:26:54] <Phibs> don't see any HT | ||
| [2009/12/17 23:27:02] <Phibs> although it has the cpu flag. | ||
| [2009/12/17 23:27:04] <Phibs> fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm syscall nx lm constant_tsc pni monitor ds_cpl vmx est tm2 cx16 xtpr lahf_lm | ||
| [2009/12/17 23:27:19] <Cuchulain> ht | ||
| [2009/12/17 23:27:22] <Djelibeybi> If you do a xm info, how many cores does it see? | ||
| [2009/12/17 23:27:32] <Djelibeybi> And yes, there is an "ht" flag | ||
| [2009/12/17 23:27:33] <Phibs> 8 cpu | ||
| [2009/12/17 23:27:35] <Phibs> 4 cores/socket | ||
| [2009/12/17 23:28:02] <Cuchulain> AFAIK, all 55xx cpus are HT/SMT capable, but it's a BIOS enable option | ||
| [2009/12/17 23:28:03] <Djelibeybi> You should see 16 cores on a hyperthreaded Nehalem, 2 threads/core | ||
| [2009/12/17 23:28:12] <Phibs> Doc says the E5504 does not have HT | ||
| [2009/12/17 23:28:18] <Phibs> http://ark.intel.com/Product.aspx?id=40711 | ||
| [2009/12/17 23:28:19] <Djelibeybi> yeah, I didn't think it did | ||
| [2009/12/17 23:28:26] <Djelibeybi> Still, should be nice and fast | ||
| [2009/12/17 23:28:27] <Cuchulain> ah, ok | ||
| [2009/12/17 23:28:28] <Phibs> yeah. | ||
| [2009/12/17 23:28:33] <Phibs> it's not slow ;0 | ||
| [2009/12/17 23:28:34] <Djelibeybi> How many servers? | ||
| [2009/12/17 23:28:45] <Phibs> in my CO total? | ||
| [2009/12/17 23:28:52] <Djelibeybi> No, running Xen | ||
| [2009/12/17 23:28:54] <Phibs> oh | ||
| [2009/12/17 23:29:04] <Phibs> Prolly about 8 so far | ||
| [2009/12/17 23:29:04] <Cuchulain> we're using 5560s | ||
| [2009/12/17 23:29:07] <Cuchulain> they're expensive :/ | ||
| [2009/12/17 23:29:07] <Djelibeybi> If you need a high-speed network, you can create a host-only bridge that runs at switch speed | ||
| [2009/12/17 23:29:10] <Phibs> Cuchulain: my boss is cheap | ||
| [2009/12/17 23:29:15] <Phibs> :) | ||
| [2009/12/17 23:29:16] <Djelibeybi> Cuchulain: yeah, we do too in BL490 blades | ||
| [2009/12/17 23:29:34] <Phibs> I'm keen to see what happens to Sunacle :) | ||
| [2009/12/17 23:29:36] <Cuchulain> yeah, we're going to look at using the X5504 or X5502 in a lightweight version of our platform | ||
| [2009/12/17 23:29:52] <Cuchulain> single X5502 vs dual X5560, should be a big enough difference to justify it | ||
| [2009/12/17 23:30:02] <Phibs> I'd hope so :) | ||
| [2009/12/17 23:30:49] <Phibs> hmm proc/net/bonding/bond0 doens't list eth3 as being in the grp | ||
| [2009/12/17 23:30:51] <Phibs> wtf | ||
| [2009/12/17 23:31:00] <Djelibeybi> Phibs: you mean Snoracle? :) | ||
| [2009/12/17 23:31:03] <Phibs> haha | ||
| [2009/12/17 23:31:12] <Phibs> I wonder if the xen scripts are fubaring things | ||
| [2009/12/17 23:31:13] @ bhenson001 joined channel #puppet | ||
| [2009/12/17 23:31:19] <bhenson001> hello all | ||
| [2009/12/17 23:31:27] <Djelibeybi> Phibs: yes, you need to switch xend-config.sxp to use a dummy script | ||
| [2009/12/17 23:31:31] <Djelibeybi> That just returns true | ||
| [2009/12/17 23:31:33] <Phibs> nod | ||
| [2009/12/17 23:31:49] <Phibs> have not done bridges yet, gonna do that next per the article | ||
| [2009/12/17 23:31:51] * Djelibeybi also recommends you check out Oracle VM 2.2 for all your pre-packged, Open Source Xen goodness. | ||
| [2009/12/17 23:31:56] <Phibs> haha | ||
| [2009/12/17 23:32:04] <Phibs> I'm ok with CentOS for now ;0 | ||
| [2009/12/17 23:32:05] <Djelibeybi> It's a much newer version than the one that ships with CentOS. :) | ||
| [2009/12/17 23:32:09] <Phibs> I bet | ||
| [2009/12/17 23:32:11] <bhenson001> got a question for ya.. i need to generate a new cert for the puppetmaster how would i go about doing that | ||
| [2009/12/17 23:32:16] <Djelibeybi> Comes with a free web-based GUI management tool! | ||
| [2009/12/17 23:32:23] * Djelibeybi will stop now. It is good though, check it out | ||
| [2009/12/17 23:32:26] <Phibs> bhenson001: remove the old certs and run it in webbrick mode | ||
| [2009/12/17 23:32:44] <bhenson001> webbrick mode? never run acoss that in the docs | ||
| [2009/12/17 23:32:49] <bhenson001> can you explain it plz | ||
| [2009/12/17 23:32:55] <Phibs> you just run it normally | ||
| [2009/12/17 23:33:00] <Phibs> /etc/init.d/puppetmaster start | ||
| [2009/12/17 23:33:43] <bhenson001> tried that but the client says it does not trust the server and the puppetca --list command shows no cert waitin to be signed | ||
| [2009/12/17 23:33:59] <bhenson001> warning: Certificate validation failed; considering using the certname configuration option | ||
| [2009/12/17 23:34:40] <Phibs> wow ... | ||
| [2009/12/17 23:35:08] <bhenson001> ? | ||
| [2009/12/17 23:35:25] <Phibs> never seen that one | ||
| [2009/12/17 23:35:56] <bhenson001> i already tried removing the package and starting again and same error | ||
| [2009/12/17 23:36:26] <Phibs> Djelibeybi: do I change vif-script too or just comment? | ||
| [2009/12/17 23:36:59] <Djelibeybi> Phibs: I don't touch vif-script, just network-bridge, IIRC | ||
| [2009/12/17 23:37:03] <Phibs> okie | ||
| [2009/12/17 23:38:58] @ Quit: whaley: Read error: 110 (Connection timed out) | ||
| [2009/12/17 23:40:43] <bhenson001> any ideas on how to fix it? | ||
| [2009/12/17 23:41:05] <Phibs> what does puppetca --list --all say | ||
| [2009/12/17 23:41:14] <bhenson001> no certificates | ||
| [2009/12/17 23:41:18] <Phibs> a all?? | ||
| [2009/12/17 23:41:19] <Phibs> at all? | ||
| [2009/12/17 23:41:46] <Phibs> how did you install puppet | ||
| [2009/12/17 23:41:48] <bhenson001> nope | ||
| [2009/12/17 23:41:50] <Phibs> and what OS/Dist | ||
| [2009/12/17 23:41:56] <bhenson001> apt-get intstall puppetmaster | ||
| [2009/12/17 23:41:59] <bhenson001> debian lenny | ||
| [2009/12/17 23:42:37] <bhenson001> *apt-get install puppetmaster | ||
| [2009/12/17 23:42:53] <Phibs> ah hmm.... | ||
| [2009/12/17 23:43:00] <Phibs> I only use it on CentOS so I don't know how different it is | ||
| [2009/12/17 23:43:02] <bhenson001> and if it helps is amd64 | ||
| [2009/12/17 23:43:32] <Phibs> http://groups.google.com/group/puppet-users/browse_thread/thread/fc325274736e2500 | ||
| [2009/12/17 23:44:00] <bhenson001> let me go try it real fast and see if it works | ||
| [2009/12/17 23:44:02] <Phibs> see bottom post | ||
| [2009/12/17 23:44:03] <Phibs> :) | ||
| [2009/12/17 23:44:06] <Phibs> seems to be same issue | ||
| [2009/12/17 23:45:51] @ bug joined channel #puppet | ||
| [2009/12/17 23:46:31] <Phibs> Djelibeybi: testing w/ bridges now, hope it works the remote console is a pita 0; | ||
| [2009/12/17 23:46:43] <Djelibeybi> Inded | ||
| [2009/12/17 23:46:48] <Djelibeybi> indeed, even :) | ||
| [2009/12/17 23:47:30] @ Quit: cwebber: | ||
| [2009/12/17 23:47:44] <bhenson001> fixed it what i did was copy the folder to the /etc/puppet and it worked fine | ||
| [2009/12/17 23:47:47] <bhenson001> thanks again | ||
| [2009/12/17 23:48:19] <Phibs> np | ||
| [2009/12/17 23:51:09] @ Quit: Bass10: Read error: 60 (Operation timed out) | ||
| [2009/12/17 23:51:15] @ cwebber joined channel #puppet | ||
| [2009/12/17 23:53:00] @ Quit: cwebber: Client Quit |
Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!