Monday, 2009-12-07

[2009/12/07 00:00:24] @ Log started by gepetto
[2009/12/07 00:00:24] @ Quit: Djelibeybi: "Leaving"
[2009/12/07 00:03:16] <OpenMedia> jamesturnbull: I take it you will be in WLG next month?
[2009/12/07 00:03:26] <jamesturnbull> OpenMedia: maybe....
[2009/12/07 00:03:33] <OpenMedia> Only a maybe...
[2009/12/07 00:03:39] <jamesturnbull> OpenMedia: if I get around to writing my tutorial
[2009/12/07 00:03:43] <OpenMedia> LoL
[2009/12/07 00:03:52] <jamesturnbull> OpenMedia: I just got back from WLG
[2009/12/07 00:04:37] <jamesturnbull> nice little town
[2009/12/07 00:04:58] <jamesturnbull> like Hobart only with hotter wom^H^H^H :P
[2009/12/07 00:05:26] <OpenMedia> ;)
[2009/12/07 00:05:33] <OpenMedia> An more wind.
[2009/12/07 00:06:01] <LinuxCode> Ignore what I asked earlier
[2009/12/07 00:06:17] <LinuxCode> 0.25 seems a lot more accommodating
[2009/12/07 00:07:17] <jamesturnbull> LinuxCode: it is indeed
[2009/12/07 00:07:28] <jamesturnbull> OpenMedia: you going obviously?
[2009/12/07 00:07:42] <LinuxCode> jamesturnbull, how is your 2nd edition coming along ?
[2009/12/07 00:07:47] <LinuxCode> I have a few suggestions
[2009/12/07 00:08:00] <OpenMedia> jamesturnbull: Yeah.. Cherie will be there as a Volunteer as well.
[2009/12/07 00:10:38] <jamesturnbull> LinuxCode: slowly - feel free to email them to me - james@lovedthanlost.net - always welcomed
[2009/12/07 00:10:54] * jamesturnbull notes you don't have to mention the index - he already knows
[2009/12/07 00:11:19] <LinuxCode> jamesturnbull, you got a new ETA on the 2nd edition ?
[2009/12/07 00:11:31] <LinuxCode> or is work, keeping you mega busy ?
[2009/12/07 00:14:34] <OpenMedia> Hmm not quite there.
[2009/12/07 00:14:34] <OpenMedia> err: Could not apply complete catalog: Could not retrieve dependency 'User[fred]' of Ssh_authorized_key[fred] at /etc/puppet/manifests/classes/ssh_authorized_keys.pp:55
[2009/12/07 00:16:01] <OpenMedia> Should I define the keys under the user module or define them under manifest/classes
[2009/12/07 00:19:08] <jamesturnbull> LinuxCode: mid-year next year I think - work and Puppet mostly - my work on the releases take up time as does documentation and about a thousand other product/project related things
[2009/12/07 00:19:23] <jamesturnbull> plus some other projects that I am working on mean spare time is limited
[2009/12/07 00:19:50] <LinuxCode> yeah, I totally understand
[2009/12/07 00:24:29] <OpenMedia> jamesturnbull: Ok my @ssh_authorized_key{ "fred": now has a section
[2009/12/07 00:24:29] <OpenMedia> require => user["fred"],
[2009/12/07 00:24:52] <OpenMedia> This then throws a dependency error..
[2009/12/07 00:25:06] <ohadlevy> require => User["fred"],
[2009/12/07 00:29:03] <OpenMedia> Same error
[2009/12/07 00:29:18] <OpenMedia> err: Could not apply complete catalog: Could not retrieve dependency 'User[fred]' of Ssh_authorized_key[fred] at /etc/puppet/manifests/classes/ssh_authorized_keys.pp:55
[2009/12/07 00:32:43] <OpenMedia> Hmm have to look at this tomorrow.
[2009/12/07 00:39:34] @ OpenMedia left channel #puppet ()
[2009/12/07 00:47:06] @ bug joined channel #puppet
[2009/12/07 00:48:56] @ pinoyskullv2 joined channel #puppet
[2009/12/07 00:53:33] @ Quit: M-: "Leaving"
[2009/12/07 00:59:11] @ hy is now known as _silver
[2009/12/07 01:01:35] @ Djelibeybi joined channel #puppet
[2009/12/07 01:02:21] @ Quit: bug:
[2009/12/07 01:04:50] @ _silver is now known as hy
[2009/12/07 01:06:36] @ Quit: pinoyskull: Read error: 110 (Connection timed out)
[2009/12/07 01:12:42] @ bug joined channel #puppet
[2009/12/07 01:15:59] @ Quit: bgupta: Read error: 110 (Connection timed out)
[2009/12/07 01:17:36] @ Quit: kolla: Remote closed the connection
[2009/12/07 01:45:04] @ bgupta joined channel #puppet
[2009/12/07 01:46:38] @ randybias|away is now known as randybias
[2009/12/07 01:49:39] @ Quit: pinoyskullv2: Read error: 110 (Connection timed out)
[2009/12/07 01:51:31] @ pinoyskullv2 joined channel #puppet
[2009/12/07 02:05:26] @ Quit: Djelibeybi: "Leaving"
[2009/12/07 02:06:38] @ randybias is now known as randybias|away
[2009/12/07 02:16:58] @ BarnacleBob joined channel #puppet
[2009/12/07 02:27:05] @ kibaho1 joined channel #puppet
[2009/12/07 02:28:50] @ pacalm joined channel #puppet
[2009/12/07 02:29:11] @ BB|Work joined channel #puppet
[2009/12/07 02:31:07] @ kibaho1 left channel #puppet ()
[2009/12/07 02:34:24] @ kibaho1 joined channel #puppet
[2009/12/07 02:36:43] @ randybias|away is now known as randybias
[2009/12/07 02:39:22] @ Quit: BarnacleBob: Read error: 110 (Connection timed out)
[2009/12/07 02:50:55] @ Ramonster joined channel #puppet
[2009/12/07 02:54:55] @ francois left channel #puppet ()
[2009/12/07 02:55:12] @ lak joined channel #puppet
[2009/12/07 02:57:13] @ randybias is now known as randybias|away
[2009/12/07 02:59:29] @ francois joined channel #puppet
[2009/12/07 03:00:36] @ Quit: pinoyskullv2: Read error: 110 (Connection timed out)
[2009/12/07 03:00:43] @ Quit: lak:
[2009/12/07 03:01:12] @ pinoyskullv2 joined channel #puppet
[2009/12/07 03:05:24] @ friendly12345 joined channel #puppet
[2009/12/07 03:10:25] @ shug joined channel #puppet
[2009/12/07 03:12:14] @ Quit: jfreeman: Remote closed the connection
[2009/12/07 03:31:29] @ vblandov3 joined channel #puppet
[2009/12/07 03:35:23] @ Quit: vblandov3: Client Quit
[2009/12/07 03:37:32] @ Quit: pinoyskullv2: Read error: 110 (Connection timed out)
[2009/12/07 03:40:23] @ Quit: pugnacity: "Leaving."
[2009/12/07 03:41:57] @ tim|macbook joined channel #puppet
[2009/12/07 03:45:13] <n0ts> I use puppet 0.25.1, I executed "sudo puppetd --server=puppet.example.com" -l console -v --test --debug --noop
[2009/12/07 03:45:24] <n0ts> I got a error "warning: peer certificate won't be verified in this SSL session"
[2009/12/07 03:45:58] <n0ts> my puppetmaster is "/usr/bin/ruby /usr/sbin/puppetmasterd --logdest /var/log/puppet/puppetmaster.log --no-ca"
[2009/12/07 03:48:11] <n0ts> Why?
[2009/12/07 03:48:12] @ Quit: int: Read error: 54 (Connection reset by peer)
[2009/12/07 03:50:11] @ danielbln joined channel #puppet
[2009/12/07 03:50:18] @ glaw joined channel #puppet
[2009/12/07 03:51:17] <n0ts> The puppet client does not listen port 8139.
[2009/12/07 03:54:08] @ poison joined channel #puppet
[2009/12/07 03:54:32] <duritong> n0ts: did you specify --listen?
[2009/12/07 03:55:18] <duritong> n0ts: and are your client certs signed by the master which is the ca?
[2009/12/07 03:55:36] <n0ts> duritong: PUPPET_EXTRA_OPTS="--listen --no-client --verbose --debug"
[2009/12/07 03:55:59] <duritong> or is it --listen true
[2009/12/07 03:56:09] <duritong> I think so
[2009/12/07 03:56:47] <duritong> n0ts: oh and PUPPET_EXTRA_OPTS are only taken by the init script
[2009/12/07 03:56:59] <duritong> not if you run puppet by hand (aka by sudo)
[2009/12/07 03:57:50] <n0ts> Sorry, I executed "sudo puppetd --server=puppet.example.com --verbose --debug --no-client --listen --no-daemonize"
[2009/12/07 03:58:14] <n0ts> My puppetmaster is --no-ca.
[2009/12/07 03:58:20] <duritong> I don't remember exactly but maybe it's --listen
[2009/12/07 03:58:40] @ Quit: BB|Work: Read error: 110 (Connection timed out)
[2009/12/07 03:58:40] <duritong> well how did you sign your certs then?
[2009/12/07 03:58:51] <n0ts> I try HA receipe. http://www.reductiveconsulting.net/trac/puppet/wiki/Recipes/HighAvailability
[2009/12/07 03:59:14] <duritong> so you signed the certs on another master?
[2009/12/07 03:59:21] <duritong> and copied over everything?
[2009/12/07 03:59:38] <n0ts> I'm not sign the client cets on master.
[2009/12/07 03:59:57] @ Quit: |Mike|: barjavel.freenode.net irc.freenode.net
[2009/12/07 03:59:58] @ Quit: barn: barjavel.freenode.net irc.freenode.net
[2009/12/07 03:59:58] @ Quit: londo_: barjavel.freenode.net irc.freenode.net
[2009/12/07 03:59:59] @ Quit: Mandus: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:00] @ Quit: phips: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:00] @ Quit: drbob: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:05] @ Quit: jrojas: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:13] @ Quit: asbruvik: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:17] @ Quit: ReinH: barjavel.freenode.net irc.freenode.net
[2009/12/07 04:00:18] @ jrojas joined channel #puppet
[2009/12/07 04:00:19] @ ReinH joined channel #puppet
[2009/12/07 04:00:21] @ phips joined channel #puppet
[2009/12/07 04:00:22] @ Mandus_ joined channel #puppet
[2009/12/07 04:00:22] @ asbruvik joined channel #puppet
[2009/12/07 04:00:23] <duritong> but they are signed somehow?
[2009/12/07 04:00:36] @ londo_ joined channel #puppet
[2009/12/07 04:01:29] <n0ts> I try firstpuppetmasterhost only.
[2009/12/07 04:03:02] <n0ts> And I created /etc/puppet/autosign.conf.
[2009/12/07 04:03:08] <duritong> you runy our firstpuppetmasterhost with --no-ca?
[2009/12/07 04:03:16] <duritong> s/runy/run/
[2009/12/07 04:03:28] <duritong> you run your firstpuppetmasterhost with --no-ca?
[2009/12/07 04:03:50] <n0ts> yes.
[2009/12/07 04:04:38] <duritong> well this won't work
[2009/12/07 04:04:58] <duritong> at least one puppetmaster has to run as CA imho
[2009/12/07 04:05:13] <duritong> but I never did such a setup so maybe I'm wrong
[2009/12/07 04:07:46] <n0ts> The puppet client must sign cert on puppetmaster?
[2009/12/07 04:07:58] <opqdonut> yeah
[2009/12/07 04:08:11] <duritong> always
[2009/12/07 04:08:35] <duritong> puppet uses ssl for authentication and encryption of the connection
[2009/12/07 04:09:32] @ kibaho1 left channel #puppet ()
[2009/12/07 04:12:18] @ poison_ joined channel #puppet
[2009/12/07 04:12:24] @ kibahop joined channel #puppet
[2009/12/07 04:13:09] <n0ts> ok, I got it.
[2009/12/07 04:14:07] <n0ts> I run puppetmaster has no "-no-ca" option, my puppet client cert request file exist in /var/lib/puppet/ssl/certificate_requests.
[2009/12/07 04:14:29] @ barn joined channel #puppet
[2009/12/07 04:14:54] <n0ts> I executed "sudo puppetca --sign all", I got a error "err: Could not call sign: Could not find certificate request for all".
[2009/12/07 04:15:54] @ nono_ joined channel #puppet
[2009/12/07 04:18:23] @ Quit: tripoux_: Remote closed the connection
[2009/12/07 04:20:06] @ suchu joined channel #puppet
[2009/12/07 04:20:09] <pacalm> --all
[2009/12/07 04:23:44] <TheAvatar> If I have a dir with 52 files, I would like to "manage" with puppet, how would I do that? I could use a 'file' entry for each file but is there some smart way I can do it, when its an entire directory?
[2009/12/07 04:23:58] <n0ts> duritong: pacalm: Thanks for you help.
[2009/12/07 04:24:49] <duritong> n0ts: you're welcome
[2009/12/07 04:25:13] <duritong> TheAvatar: what do you want to manage?
[2009/12/07 04:25:21] <duritong> content or only permissions?
[2009/12/07 04:25:42] @ Robbie_ joined channel #puppet
[2009/12/07 04:26:56] @ Quit: poison: Read error: 113 (No route to host)
[2009/12/07 04:27:19] <duritong> TheAvatar: in short you can manage directories recursively, as well copy files recursively
[2009/12/07 04:27:51] <duritong> TheAvatar: + if you set mode => 0644 , puppet will set 0755 for directories and 0644 for files
[2009/12/07 04:28:33] @ Alexander joined channel #puppet
[2009/12/07 04:29:09] @ Alexander left channel #puppet ()
[2009/12/07 04:29:26] @ avkvl joined channel #puppet
[2009/12/07 04:30:42] <TheAvatar> duritong, I guess both. It is a 'mysql' database dir
[2009/12/07 04:31:05] <TheAvatar> At first, my plan is only, when I install mysql-server (with puppet), it should use this database rather than the default, so it has users, permissions and such
[2009/12/07 04:31:18] <TheAvatar> so content and permissions
[2009/12/07 04:32:17] <duritong> content of the mysql database?
[2009/12/07 04:32:35] <duritong> well anyway have a look at recurse param of file
[2009/12/07 04:34:15] <avkvl> Hello, I have a problem with puppetd v0.25.1. After run puppetd (puppetd --no-daemonize -l console -t -v --noop) I have err: //auth/File[/etc/auth.conf]: Failed to retrieve current state of resource: Connection reset by peer Could not retrieve file metadata for puppet:///auth/default/auth.conf: Connection reset by peer at /home/puppet/configuration/environments/production/auth/manifests/init.pp:41. In puppetmasterd I can't find er
[2009/12/07 04:34:37] @ jab_doa joined channel #puppet
[2009/12/07 04:34:50] <avkvl> can some one help me?
[2009/12/07 04:35:06] <TheAvatar> I'll try that, thanks
[2009/12/07 04:35:28] <TheAvatar> duritong, one last thing. 'puppet-mysql' on github - what is that for?
[2009/12/07 04:35:46] <TheAvatar> I mean - manage mysql in what way
[2009/12/07 04:39:34] @ Quit: glaw: "Leaving."
[2009/12/07 04:47:05] <sHaggY_caT> Anybody may try help? Puppet do'esnt run for requere before dependent object, also i try before in the {} brakets of file resource of configs, and, subcribe.
[2009/12/07 04:47:15] <sHaggY_caT> http://paste.org.ru/?6bzbrv
[2009/12/07 04:47:20] @ glaw joined channel #puppet
[2009/12/07 04:59:34] @ Quit: glaw: "Leaving."
[2009/12/07 05:00:38] @ MattyM joined channel #puppet
[2009/12/07 05:03:28] @ Quit: LinuxCode: "Connection Closed"
[2009/12/07 05:06:28] @ glaw joined channel #puppet
[2009/12/07 05:06:50] @ nakano is now known as nakano_
[2009/12/07 05:07:16] @ alban2 joined channel #puppet
[2009/12/07 05:08:19] <duritong> TheAvatar: it's a module that manages mysql in a certain way that most ppl do. You can use it to not duplicate any work
[2009/12/07 05:13:37] @ Quit: glaw: "Leaving."
[2009/12/07 05:14:03] <TheAvatar> so its used to do various mysql "transactions" like db/user management etc?
[2009/12/07 05:19:42] @ verwilst joined channel #puppet
[2009/12/07 05:20:29] @ poison joined channel #puppet
[2009/12/07 05:21:32] @ GioGio joined channel #puppet
[2009/12/07 05:21:48] <duritong> TheAvatar: it can
[2009/12/07 05:21:51] @ Quit: poison_: Read error: 60 (Operation timed out)
[2009/12/07 05:22:12] <duritong> TheAvatar: but mainly it is used to install mysql, configure it, make a backup job etc.
[2009/12/07 05:22:27] @ glaw joined channel #puppet
[2009/12/07 05:24:41] * Volcane wonders whats up with Amsterdam puppet ppl, a) not on the users list b) dont use puppet? c) dont like going to pubs? so far no-once responded for a meet up there
[2009/12/07 05:27:27] <TheAvatar> duritong, okay - thanks :)
[2009/12/07 05:27:33] <TheAvatar> might have a look at that as well
[2009/12/07 05:27:59] <arj> I use puppet in the netherlands, but not in amsterdam :)
[2009/12/07 05:28:27] <duritong> Volcane: you also don't like to go to pubs after pulling teeth (with puppet) ;)
[2009/12/07 05:29:08] <Volcane> heh
[2009/12/07 05:31:35] @ int joined channel #puppet
[2009/12/07 05:33:33] @ pugnacity joined channel #puppet
[2009/12/07 05:33:36] @ giskard joined channel #puppet
[2009/12/07 05:33:47] <sHaggY_caT> Volcane: Do you may try help? Please.. I don't have understand, how it make true, since 2-th day :(
[2009/12/07 05:34:15] <sHaggY_caT> This quation for syntax requere and before utils
[2009/12/07 05:34:32] <sHaggY_caT> s/utils/directives/
[2009/12/07 05:34:55] <sHaggY_caT> Puppet do'esnt run for requere before dependent object, also i try before in the {} brakets of file resource of configs, and, subcribe. http://paste.org.ru/?6bzbrv
[2009/12/07 05:37:43] @ Quit: alban2: Read error: 110 (Connection timed out)
[2009/12/07 05:43:06] @ |Mike| joined channel #puppet
[2009/12/07 05:45:25] * nico not in amsterdam
[2009/12/07 05:47:35] * fruitcake isn't eithr
[2009/12/07 05:53:05] @ shellac_ joined channel #puppet
[2009/12/07 05:54:49] <shellac_> hiyas .. any environment gurus in the house?
[2009/12/07 05:55:16] <shellac_> is it possible to have multiple 'fileserverconf=" lines in a puppetmasterd config file?
[2009/12/07 05:56:24] <shellac_> eg. if I have development, testing and prod environments - would like the fileserver locations to be seperate but able to use the same reference to the file
[2009/12/07 05:57:03] <Volcane> you really should use modules if you want to use environments heavily
[2009/12/07 05:57:23] <shellac_> am starting to discover this :)
[2009/12/07 05:59:15] <Volcane> you can probably do a work around with modules though
[2009/12/07 05:59:24] <Volcane> make a module called 'files' or whatever u call your file location
[2009/12/07 05:59:35] <Volcane> drop all your files as they are now in there
[2009/12/07 05:59:39] <Volcane> and make a module per env
[2009/12/07 05:59:56] <sHaggY_caT> Volcane: i don't want take you time, i think, you are afraid of me :( How i may do, to get knowlege for debug of my puppet code? Some times, error is bad braket, or any simple idiots error
[2009/12/07 06:00:17] @ Welsh_Dwarf joined channel #puppet
[2009/12/07 06:00:57] <sHaggY_caT> And, messages log does'nt take information about error :( is any good and true principies for debug puppet code?
[2009/12/07 06:01:38] <shellac_> volcane: yeah ultimately we dived into puppet head first 6 months ago - it's going great but now we're really starting to have some growing pains :)
[2009/12/07 06:02:26] <Volcane> shellac_: i think its pretty much normal to redo it all 3 times before u get your right layout etc, this is why it pays to get either training or a consultant :P
[2009/12/07 06:02:27] <shellac_> so rather than workaround I might look at refactoring towards using proper modules
[2009/12/07 06:02:32] <shellac_> ha
[2009/12/07 06:02:48] <shellac_> how did you know ... this is pretty much third time around :)
[2009/12/07 06:02:56] <shellac_> :)
[2009/12/07 06:03:01] <Volcane> heh, thats how it goes :P
[2009/12/07 06:03:33] <Darkflib> I'm still on my first iterations (with a few incremental changes)
[2009/12/07 06:03:48] <shellac_> it's great though - but we're suffering a little from it, now we've got more engineers working on the code the "oh shit I broke you" factor is kicking in
[2009/12/07 06:04:24] <shellac_> as an aside are any of you using controltier at all ?
[2009/12/07 06:04:34] <Volcane> never seen/used it
[2009/12/07 06:04:45] <shellac_> www.controltier.com
[2009/12/07 06:04:50] <Volcane> does look interesting from its wiki page though
[2009/12/07 06:05:13] <shellac_> yeah biggest difficulty for us so far is some really convoluted applications we need to deploy
[2009/12/07 06:05:18] <shellac_> all web based
[2009/12/07 06:05:21] <Darkflib> shellac_, I rolled my own provisioning system a while back and use that + puppet
[2009/12/07 06:05:27] <shellac_> current deployment is a mess of shell scripts and the like
[2009/12/07 06:05:39] <sHaggY_caT> Volcane: If you want, i may go out of channel, and, never will be back...
[2009/12/07 06:05:56] <shellac_> puppet has been totally kickass for getting consistency across our environment (~150 servers)
[2009/12/07 06:06:27] <shellac_> but we're currently torn about where we draw the line (and if we should) on having puppet manage the apps too
[2009/12/07 06:06:30] <Volcane> shellac_: yeah even if you just use puppet to create a managed base build that covers 80% of your stuff you get huge advantage out of it
[2009/12/07 06:06:39] <shellac_> yeah that's where we are now
[2009/12/07 06:06:41] <Volcane> shellac_: leaving app deploys and stuff to something a bit better
[2009/12/07 06:06:45] <shellac_> so looking at the next level
[2009/12/07 06:06:57] <sHaggY_caT> But full ignoring, i think, is'nt true
[2009/12/07 06:07:09] <shellac_> so far tool wise has been hard to find something that i'm happy with
[2009/12/07 06:07:18] <shellac_> the ruby guys in the office are all over capistrano
[2009/12/07 06:07:37] <shellac_> but we've got a whole mix of perl + mod_perl, ruby and java running
[2009/12/07 06:07:44] <Volcane> shellac_: if you're a ruby heavy shop check out my mcollective thing http://code.google.com/p/mcollective/ not for everyone but might interest
[2009/12/07 06:07:48] <shellac_> so would love to unify our deployment
[2009/12/07 06:08:36] <shellac_> and ideally have a framework to automate those ssh in a for loop type things
[2009/12/07 06:08:57] <shellac_> like the control tier mantra sums up all the current pains we have in a web operations space
[2009/12/07 06:09:08] @ Quit: friendly12345: Client Quit
[2009/12/07 06:09:09] <shellac_> I fought with it for a few hours today
[2009/12/07 06:09:36] <Volcane> shellac_: check out mcollective then, u can replace those ssh for loops with parallel executed bits of ruby
[2009/12/07 06:10:43] <shellac_> yeah i'm kinda wanting a little more around it
[2009/12/07 06:11:11] <shellac_> particularly with tracking what was done when, building up a library of standard jobs and tasks you might wanna run across large groups of servers etc
[2009/12/07 06:11:34] @ Quit: scylla: "Connection timed out"
[2009/12/07 06:11:46] <Volcane> nods, i havnt built in audit tracking into mcollective yet, need to get feature requests to get a bit of an idea what people might want
[2009/12/07 06:13:04] @ nexx joined channel #puppet
[2009/12/07 06:15:27] <nexx> i want to try out foreman with puppet. at the foreman page it says, that i need rake >= 0.84, but on the rake page the version 0.8.4 is just a pre-version, does anyone have experience with that stuff?
[2009/12/07 06:15:56] <Volcane> from what i know its pretty particular about rake version
[2009/12/07 06:16:07] <Volcane> older one work but u get errors, last time i tried it those werent a problem
[2009/12/07 06:16:25] <nexx> than im gonna try the 0.8.1 from the repo
[2009/12/07 06:16:47] <Volcane> been a while since i tried it thogh
[2009/12/07 06:21:10] @ Quit: avkvl: Ping timeout: 180 seconds
[2009/12/07 06:26:32] <ohadlevy> nexx.. It should be generally ok, look at the troubleshooting page
[2009/12/07 06:28:47] @ Quit: alexine_dsouza: Read error: 104 (Connection reset by peer)
[2009/12/07 06:30:32] <nexx> i just managed to find the projectpage on rubyforge and installed 0.8.7
[2009/12/07 06:31:02] <nexx> actually im trying to get the *** web server running :)
[2009/12/07 06:31:40] <ohadlevy> nexx, great, let me know if u need anything
[2009/12/07 06:31:40] <nexx> and there it is, yeha!
[2009/12/07 06:32:13] <nexx> i will, thanks
[2009/12/07 06:32:21] @ Quit: glaw: "Leaving."
[2009/12/07 06:40:33] @ glaw joined channel #puppet
[2009/12/07 06:42:19] @ Quit: glaw: Client Quit
[2009/12/07 06:44:27] @ Quit: tim|macbook:
[2009/12/07 06:50:21] @ ewdafa- joined channel #puppet
[2009/12/07 06:55:02] @ tim|macbook joined channel #puppet
[2009/12/07 06:58:30] @ groove joined channel #puppet
[2009/12/07 07:01:32] @ Quit: ewdafa: Read error: 110 (Connection timed out)
[2009/12/07 07:01:40] <groove> is there a recipe anywhere for deploying ssh keys which is a little more up to date?
[2009/12/07 07:01:56] <groove> most of the recipes i've seen on the site don't even make use of the ssh_authorized_keys type
[2009/12/07 07:02:14] <Volcane> that's because ssh_authorized_keys isnt great
[2009/12/07 07:03:19] <tim|macbook> it works good enough as long as you define a target, though
[2009/12/07 07:03:19] <groove> well, there goes that idea
[2009/12/07 07:03:28] <Volcane> tim|macbook: needs to support purge
[2009/12/07 07:03:36] <Volcane> tim|macbook: which is the main reason people rather copy files out
[2009/12/07 07:04:04] @ nakano_ is now known as nakano
[2009/12/07 07:05:57] <groove> it has ensure => absent
[2009/12/07 07:06:04] <groove> that seems to work ok
[2009/12/07 07:06:20] <tim|macbook> yeah, i don't really get the purge remark either... works for us?
[2009/12/07 07:06:31] <tim|macbook> what do you want to purge?
[2009/12/07 07:06:31] <Volcane> does it? hmmm
[2009/12/07 07:06:42] <Volcane> if a luser adds keys we didnt put there
[2009/12/07 07:07:08] <tim|macbook> ah ok, no it doesn't do that, indeed
[2009/12/07 07:07:12] <Volcane> cos last time i checked there was no way with the type to enforce *just managed keys*
[2009/12/07 07:07:14] <tim|macbook> those are kept
[2009/12/07 07:07:22] <Volcane> which you could do with say the resources type if it supported the purge feature
[2009/12/07 07:11:43] <kjetilho> ah, I finally found a use for the "concatenate all templates" behaviour of template() -- specify a preamble which defines useful functions
[2009/12/07 07:12:49] <Volcane> heh
[2009/12/07 07:20:03] @ bjaspan joined channel #puppet
[2009/12/07 07:21:08] <nico> Volcane: is you sysadmin middleware (based on) mcollective ?
[2009/12/07 07:21:14] <nico> tour*
[2009/12/07 07:21:19] <nico> your*
[2009/12/07 07:21:24] <Volcane> nico: i wrote mcollective
[2009/12/07 07:21:32] <nico> time to change fingers
[2009/12/07 07:21:38] <nico> Volcane: yeah I know :)
[2009/12/07 07:21:45] <nico> that's why I ask :)
[2009/12/07 07:21:57] <Volcane> nico: so that'd be yes :P the one in the video is from before i opensourced it
[2009/12/07 07:22:10] <Volcane> nico: so sh-* instead of mc-* etc, name changed
[2009/12/07 07:22:13] <Volcane> but same shit
[2009/12/07 07:22:30] <nico> okay, because you said it was closed source on the first demo
[2009/12/07 07:22:36] <Volcane> yup, old info
[2009/12/07 07:22:40] <nico> great
[2009/12/07 07:22:48] <Volcane> decided to opensource the core but kept some of my plugins closed
[2009/12/07 07:23:05] <nico> very cool to open it to others
[2009/12/07 07:23:30] <Volcane> i did a talk last friday for 30 minutes about it, should be up somewhere soon i hope
[2009/12/07 07:23:38] <Volcane> showing lots of demo stuff
[2009/12/07 07:24:38] <nico> stomp is based upon AMQP ?
[2009/12/07 07:25:01] <Volcane> nah, its a open plain text based protocol to speek to pubsub systems
[2009/12/07 07:25:09] <Volcane> so u get stomp plugins for lots of things
[2009/12/07 07:25:16] <nico> okay
[2009/12/07 07:25:22] <Volcane> not sure though if there's one for amqp
[2009/12/07 07:25:42] <Volcane> but the stomp bit is just a plugin, wold be trivial to replace with amqp
[2009/12/07 07:26:15] <nico> I'm always very careful when people say the word "trivial"
[2009/12/07 07:27:04] <Volcane> well
[2009/12/07 07:27:38] <Volcane> i was bored and i made it work over smtp
[2009/12/07 07:27:38] <Volcane> interactivity sucked, but it works
[2009/12/07 07:27:38] <Volcane> http://code.google.com/p/mcollective/source/browse/trunk/plugins/mcollective/connector/stomp.rb
[2009/12/07 07:27:38] <nico> haha
[2009/12/07 07:27:38] <Volcane> there's the stomp code
[2009/12/07 07:27:38] <Volcane> u can see its very simple stuff
[2009/12/07 07:27:38] <nico> yes
[2009/12/07 07:27:44] <nico> definitively
[2009/12/07 07:28:55] <Volcane> could potentially be some hassles with the format of pubsub names or something
[2009/12/07 07:29:14] <Volcane> but happy to make it more configurable, didnt want to prematurely make it massively configable
[2009/12/07 07:29:47] <nico> I'm fine with stomp, looking at some stuff
[2009/12/07 07:29:49] <Volcane> when i looked at amqp servers though Authentication and Authorization was a bit lacking in the opensource ones
[2009/12/07 07:30:50] <nico> using fabric right now for massive one shot actions, but maintaining lists sucks, and if a host timeouts it double sucks
[2009/12/07 07:31:04] <Volcane> yeah, thats what i want to avoid
[2009/12/07 07:31:28] <Volcane> ofcourse if a host is down it doesnt get commands, it wont get them when it comes back
[2009/12/07 07:31:28] <nico> reusing facts is really neat
[2009/12/07 07:31:42] <nico> that's what I want
[2009/12/07 07:31:50] <Volcane> and with my system timeouts = kill the thread, so u do need to think about the timeouts you put in your ocde tc
[2009/12/07 07:31:55] <nico> If you miss the train you take the following one
[2009/12/07 07:32:16] <Volcane> yup, but unlike the list approach the thing wont sit there for ages trying to talk to it
[2009/12/07 07:33:07] <nico> yes, but it's one shot things. If I want things to be persistant in time I use puppet
[2009/12/07 07:33:15] <Volcane> yup
[2009/12/07 07:33:21] <Volcane> exactly the use case
[2009/12/07 07:33:36] <Volcane> I'll update a package with this but if its a managed package I'll then also set puppet to manage it
[2009/12/07 07:33:47] <Volcane> for future builds and stuff, this is just for those do-it-now things
[2009/12/07 07:33:57] <nico> yeah
[2009/12/07 07:35:26] <Volcane> but yeah, now that its ruby and not shoddy perl i am adding tons to it
[2009/12/07 07:35:26] @ fzzzt joined channel #puppet
[2009/12/07 07:35:45] * Cope smiles
[2009/12/07 07:36:31] <Volcane> typing mc-mailq and getting the mailq for every exim box in one go, magic
[2009/12/07 07:36:57] <Volcane> mc-runq --matching /domain.com/
[2009/12/07 07:41:02] <shellac_> later guys
[2009/12/07 07:41:04] @ Quit: shellac_: "Leaving"
[2009/12/07 07:42:40] @ bitfield joined channel #puppet
[2009/12/07 07:43:36] @ poison_ joined channel #puppet
[2009/12/07 07:43:55] @ Quit: poison: Read error: 113 (No route to host)
[2009/12/07 07:45:34] * bitfield waves
[2009/12/07 07:45:59] @ Quit: bjaspan:
[2009/12/07 07:46:32] @ nakano is now known as nakano_
[2009/12/07 07:47:10] @ nakano_ is now known as nakano
[2009/12/07 07:49:12] @ hagedorn joined channel #puppet
[2009/12/07 07:51:02] @ bjaspan joined channel #puppet
[2009/12/07 07:53:44] @ Quit: bjaspan: Client Quit
[2009/12/07 07:54:09] @ hagedorn left channel #puppet ("Ex-Chat")
[2009/12/07 07:55:05] <nico> did you try mcollective with stompserver ?
[2009/12/07 07:55:19] <nico> Volcane: did you try mcollective with stompserver ?
[2009/12/07 07:57:42] <Volcane> nope
[2009/12/07 08:00:37] <Volcane> it doesnt support any kind of auth so didnt bother with it
[2009/12/07 08:00:53] <Volcane> if the PSK thing is enough for u than it should be fine
[2009/12/07 08:01:24] <nico> should be enough, we're in a "closed" environment
[2009/12/07 08:02:11] <Volcane> kewl, i did think it might be the case that i assumed evrything support auth in the code, maybe stompserver just ignores auth requests
[2009/12/07 08:02:31] <nico> gonna try to make it work
[2009/12/07 08:02:42] <nico> first steps with stomp stuff
[2009/12/07 08:07:29] <nico> hmm
[2009/12/07 08:07:38] <nico> little error in the server package
[2009/12/07 08:07:54] <nico> /var/lock/subsys does not exists by default
[2009/12/07 08:08:25] <Volcane> which distro?
[2009/12/07 08:08:37] <nico> debian, squeeze
[2009/12/07 08:08:53] <nico> I use the deb files
[2009/12/07 08:09:08] <Volcane> ah, dont know much about the debian stuff :) someone contributed those i didnt test them much
[2009/12/07 08:09:11] <Volcane> seemed to work on ubuntu
[2009/12/07 08:09:36] <Volcane> if you could make a ticket i can ask him to look
[2009/12/07 08:09:42] <nico> yes
[2009/12/07 08:10:13] <Volcane> going to get food, bbl
[2009/12/07 08:12:35] <nico> done
[2009/12/07 08:22:24] * ohadlevy got mcollective working a while ago, but got distracted along the way...
[2009/12/07 08:23:51] <nico> openend another issue
[2009/12/07 08:43:59] @ stasheck joined channel #puppet
[2009/12/07 08:44:00] @ groove left channel #puppet ()
[2009/12/07 08:49:17] @ tripoux joined channel #puppet
[2009/12/07 08:49:58] @ glaw joined channel #puppet
[2009/12/07 08:51:03] @ komitee joined channel #puppet
[2009/12/07 08:51:08] <komitee> mornin folks.
[2009/12/07 08:52:00] <komitee> is there a way to check the syntax of a manifest?
[2009/12/07 08:52:03] <komitee> without applying it
[2009/12/07 08:52:16] <nexx> ohadlevy: i would need some info now :)
[2009/12/07 08:52:28] <komitee> where that manifest is itself dependent on definitions defined in other manifest files?
[2009/12/07 08:52:34] <nexx> komitee: there is a tool named "manitest"
[2009/12/07 08:52:51] <nexx> didnt use it yet, but maybe its the right thing for you
[2009/12/07 08:53:26] <nexx> http://github.com/ohadlevy/manitest
[2009/12/07 08:54:01] <komitee> thanks, foun dit
[2009/12/07 08:54:04] <komitee> i'll give it a shot.
[2009/12/07 08:54:10] <komitee> hopefully it'll work on older versions of puppet.
[2009/12/07 08:54:13] <komitee> we havnt upgraded yet
[2009/12/07 08:54:24] @ Quit: kibahop: "Leaving."
[2009/12/07 08:57:50] <nico> it works on 0.24.8
[2009/12/07 08:58:35] <komitee> there's no check-this-file version is there. you've got to point it at site.pp
[2009/12/07 08:58:44] <komitee> which is great except we'd like to be able to use this as a commit hook.
[2009/12/07 08:59:16] <komitee> to do things like find typos in resource definitions (ensucre instead of ensure, and the like)
[2009/12/07 09:07:06] <nico> there is a pre commit hook that checks syntax
[2009/12/07 09:07:17] <ohadlevy> nexx: what do you need?
[2009/12/07 09:07:25] <nico> http://www.windley.com/archives/2008/08/using_a_precommit_hook_to_check_puppet_syntax.shtml
[2009/12/07 09:07:31] <ohadlevy> komitee: its designed to test the whole manifest, not just a file
[2009/12/07 09:07:41] <ohadlevy> komitee: for a given host parameters
[2009/12/07 09:08:37] <nexx> ohadlevy: just an info for beginners: "no report named foreman" error @ syslog, i set it up as shown at wiki/foreman/puppet_reports
[2009/12/07 09:08:51] <ohadlevy> nexx: did you restart your puppetmaster?
[2009/12/07 09:08:55] <nexx> yes
[2009/12/07 09:09:19] <ohadlevy> nexx: you've put it in the right place? does the user that runs puppet has permissions on it?
[2009/12/07 09:09:33] @ Bass10 joined channel #puppet
[2009/12/07 09:09:46] <nexx> it? you mean puppet(master)? yeah, everything else runs just fine
[2009/12/07 09:10:01] <nexx> i use it with ca. 25 clients
[2009/12/07 09:10:24] @ Quit: Bass10: SendQ exceeded
[2009/12/07 09:10:31] <ohadlevy> nexx: thats ok, which os are you running on your pm?
[2009/12/07 09:10:45] <nexx> debian
[2009/12/07 09:11:37] <nico> ls /usr/lib/ruby/1.8/puppet/reports/
[2009/12/07 09:11:47] <nico> (and pastie it)
[2009/12/07 09:12:08] <nexx> the reportdir is anotherone: /var/lib/puppet/reports
[2009/12/07 09:12:18] <nexx> as shown under puppetmasterd --genconfig
[2009/12/07 09:12:25] <ohadlevy> nexx: there is no need for the reportdir
[2009/12/07 09:12:32] <ohadlevy> nexx: you can compare here: http://theforeman.org/repositories/browse/foreman/extras/puppet/foreman
[2009/12/07 09:12:37] <ohadlevy> its a puppet module for foreman
[2009/12/07 09:13:15] <nexx> ls /usr/lib/ruby/1.8/puppet/reports/
[2009/12/07 09:13:16] <nexx> log.rb rrdgraph.rb store.rb tagmail.rb
[2009/12/07 09:13:31] <nexx> there should go the foreman.rb i guess?
[2009/12/07 09:13:36] <ohadlevy> nexx: yes
[2009/12/07 09:15:22] <nexx> syslog now looks fine, but i cant see anything in the browser, i just did report=true on one client to test it
[2009/12/07 09:15:28] <komitee> nico yeah, we've generated something like that which we use as wlel
[2009/12/07 09:15:30] <komitee> as wlel
[2009/12/07 09:15:35] <komitee> as well (third times a charm)
[2009/12/07 09:15:50] <ohadlevy> nexx: and you restarted your puppetmaster? :)
[2009/12/07 09:15:50] <komitee> the only problem is it doesn't find syntax errors when we use our own definitions
[2009/12/07 09:15:59] <nexx> ohadlevy: again, yes ;)
[2009/12/07 09:16:03] <ohadlevy> nexx: did you change the url to point to your server?
[2009/12/07 09:16:09] <ohadlevy> inside foreman.rb?
[2009/12/07 09:16:10] <nexx> ohadlevy: yep
[2009/12/07 09:16:14] @ joe-mac joined channel #puppet
[2009/12/07 09:16:22] <komitee> even when those definitions are in the same file we're testing.
[2009/12/07 09:16:24] @ kibahop joined channel #puppet
[2009/12/07 09:17:00] <joe-mac> is there a way to have a tagmail.conf per environment?
[2009/12/07 09:18:19] <nexx> ohadlevy: error @ syslog is there again. nasty...
[2009/12/07 09:18:37] <ohadlevy> nexx: which error?
[2009/12/07 09:18:53] <nexx> ohadlevy: puppetmasterd[13430]: No report named 'foreman
[2009/12/07 09:19:42] <ohadlevy> nexx: so it means its not in the right place.. or wrong permissions
[2009/12/07 09:20:03] @ Quit: shug: "Leaving"
[2009/12/07 09:20:37] <nexx> so i guess i need to set the reportdir manually in the puppet.conf to be sure
[2009/12/07 09:20:51] <ohadlevy> nexx: it doesnt need the reportdir at all
[2009/12/07 09:23:40] <ohadlevy> nexx: did you put the right file with the right permissions under /usr/lib/ruby/1.8/puppet/reports/foreman.rb?
[2009/12/07 09:23:41] <nexx> okay, i think i fixed at least this one, the file was named "foreman-report.rb" but needed to be "foreman.rb", just as i wrote it to puppet.conf
[2009/12/07 09:24:15] <nexx> file is owned by root...
[2009/12/07 09:24:30] <nexx> like every other file too in this directory
[2009/12/07 09:25:09] <ohadlevy> nexx: ok, does it work now?
[2009/12/07 09:25:22] @ bearnard joined channel #puppet
[2009/12/07 09:25:48] <nexx> ohadlevy: *sigh* no, still nothing to see
[2009/12/07 09:26:01] <ohadlevy> and the error in the log?
[2009/12/07 09:26:10] <nexx> gone
[2009/12/07 09:26:15] @ spyder2010 joined channel #puppet
[2009/12/07 09:26:22] <nexx> hum
[2009/12/07 09:29:00] <ohadlevy> hum? :)
[2009/12/07 09:29:43] <nexx> does the log from the webserver give useful information?
[2009/12/07 09:30:14] <ohadlevy> nexx: it should if the log actually gets triggered
[2009/12/07 09:30:18] <nexx> failed to process report for ftpbackup02.cocomore.com due to:undefined method `[]' for #<Puppet::Util::Metric:0x7f5e6c9b4cf0>
[2009/12/07 09:30:29] <ohadlevy> nexx: hmm.. thats useful,
[2009/12/07 09:30:35] <ohadlevy> do you use a 0.24-4 master?
[2009/12/07 09:30:38] <nexx> oops, forget the hostname :)
[2009/12/07 09:30:51] <nexx> puppetmasterd --version
[2009/12/07 09:30:52] <nexx> 0.24.5
[2009/12/07 09:31:37] <ohadlevy> I think that I've fixed that, but thats only at the edge version
[2009/12/07 09:32:14] <ohadlevy> nexx: there are two options :)
[2009/12/07 09:32:20] <nexx> maybe i just dont use it the right way; do i have to do something in the frontend or do the reports "just show up" if its set up correctly?
[2009/12/07 09:32:33] @ jcape joined channel #puppet
[2009/12/07 09:32:44] <ohadlevy> nexx: someone submitted a patch to fix some issues on a 0.24-4 master, I'm guessing they are also relevant to a 024-5 master
[2009/12/07 09:32:50] <ohadlevy> yeah, they just show up
[2009/12/07 09:33:16] <nexx> ohadlevy: okay, and option number 2?
[2009/12/07 09:33:36] <ohadlevy> nexx: if you use git, you can try the latest version, that hopefully fixes this problem, or try the patch from here http://theforeman.org/issues/show/78
[2009/12/07 09:34:10] <joe-mac> hey ohadlevy you might know this, is this a way to have a tagmail.conf per environment
[2009/12/07 09:34:47] @ malraid joined channel #puppet
[2009/12/07 09:36:00] <ohadlevy> joe-mac: no - tag mail doesnt scale at all
[2009/12/07 09:36:18] <joe-mac> ohadlevy: don't you think that's a great idea
[2009/12/07 09:36:31] <ohadlevy> joe-mac: I'm just adding a feature to foreman to send reports to specific users (e.g. you can say these hosts should send a notification to this group of users)
[2009/12/07 09:36:33] <joe-mac> i want to make an engineering enbvironment for an eng ops group, but don't give a shit about errors in their enbvironment
[2009/12/07 09:36:58] <joe-mac> ruigth now my tagmail.conf sends errors of all types to my group's mailing list...
[2009/12/07 09:37:14] <joe-mac> anybody have an alternate solution before i propose a feat request?
[2009/12/07 09:37:26] @ pheezy joined channel #puppet
[2009/12/07 09:37:42] <ohadlevy> joe-mac: write your own report :)
[2009/12/07 09:38:09] <joe-mac> yeas, not the answer i was hoping for lol
[2009/12/07 09:38:17] <bearnard> hi all
[2009/12/07 09:38:29] <ohadlevy> joe-mac: or wait a few more days until I'll release the new version of foreman
[2009/12/07 09:38:38] <ohadlevy> I'm trying to release every month
[2009/12/07 09:38:47] <bearnard> I am trying to setup reporting on 0.25.1
[2009/12/07 09:39:08] <bearnard> i have /var/lib/puppet/reports/myreporter.rb
[2009/12/07 09:39:13] <joe-mac> i don't really need all the features of foreman, just a nice reporting tool
[2009/12/07 09:39:32] <ohadlevy> joe-mac: well, you just mentioned one feature ;)
[2009/12/07 09:39:32] <bearnard> but I keep getting "No report named 'myreporter'"
[2009/12/07 09:39:45] <ohadlevy> bearnard: thats the wrong directory
[2009/12/07 09:40:05] <ohadlevy> bearnard: look for other reports, e.g. it should be in the same dir like tagmail
[2009/12/07 09:41:33] <ohadlevy> nexx: what did you chose? ;)
[2009/12/07 09:42:06] @ kibahop left channel #puppet ()
[2009/12/07 09:42:30] @ Quit: rmiller4pi8: "Leaving."
[2009/12/07 09:43:36] <nexx> ohadlevy: can i just replace the "old" replace.rb with the replace.rb.patch? the patching is messing up here
[2009/12/07 09:44:53] <ohadlevy> nexx: which version of foreman did you install? stable nightly or from git?
[2009/12/07 09:45:14] <nexx> 0.1.2 stable
[2009/12/07 09:46:22] <ohadlevy> do you have git?
[2009/12/07 09:46:27] <ohadlevy> (I think that would be faster)
[2009/12/07 09:46:34] <bearnard> thanks ohadlevy that worked :)
[2009/12/07 09:46:50] <ohadlevy> bearnard: you're welcomed
[2009/12/07 09:47:10] <nexx> ohadlevy: no, can i install git and use it with an installation wich wasnt made with git?
[2009/12/07 09:47:40] <ohadlevy> nexx: let me see if I can patch the file for you..
[2009/12/07 09:47:43] @ nakano is now known as nakano_
[2009/12/07 09:47:59] <nexx> yay :)
[2009/12/07 09:49:46] <ohadlevy> nexx: http://pastie.org/731849
[2009/12/07 09:50:36] <ohadlevy> nexx: btw: the way to apply the patch is something like patch -p0 < /tmp/a.patch
[2009/12/07 09:51:06] @ silfreed left channel #puppet ("Leaving")
[2009/12/07 09:51:10] @ silfreed joined channel #puppet
[2009/12/07 09:51:13] <nexx> ohadlevy: thanks! pastie just lags like hell, gonna test it in... ehm.. some minutes hopefully
[2009/12/07 09:51:36] <nexx> yeah, never patched before and didnt found the right infos fast enough ;)
[2009/12/07 09:52:08] <ohadlevy> :)
[2009/12/07 09:52:27] <ohadlevy> nexx: i didnt try this patch myself, so I'm not sure if it works
[2009/12/07 09:55:25] <ohadlevy> bearnard: what does your report do?
[2009/12/07 09:56:15] <nexx> ohadlevy: new report.rb applied, puppetmaster restarted and... nothing to see :(
[2009/12/07 09:56:44] <ohadlevy> and in the log?
[2009/12/07 09:56:57] <bearnard> nothing yet ohadlevy, I was just testing. I am actually trying the puppet-dashboard report
[2009/12/07 09:57:08] <ohadlevy> bearnard: ok
[2009/12/07 09:57:53] <nexx> ohadlevy: logs are error-free
[2009/12/07 09:58:15] <ohadlevy> nexx: did you restart your foreman instance?
[2009/12/07 09:58:49] @ nakano_ is now known as nakano
[2009/12/07 09:59:11] <nexx> you mean the ./script/server -e thing?
[2009/12/07 09:59:22] @ Quit: glaw: "Leaving."
[2009/12/07 09:59:27] <ohadlevy> yeah
[2009/12/07 10:02:20] <nexx> ohadlevy: i love you!
[2009/12/07 10:02:22] <nexx> :)
[2009/12/07 10:02:58] <ohadlevy> I'm guessing it works?
[2009/12/07 10:02:59] <nexx> its the wrong host indeed, but at least there is a sign of life
[2009/12/07 10:03:23] <ohadlevy> what do you mean by wrong host?
[2009/12/07 10:04:09] <nexx> i expected the host that i set to "report=true", but theres another one who had already turned on reporting
[2009/12/07 10:04:24] <ohadlevy> ah, thats not a bad thing then :)
[2009/12/07 10:04:34] <nexx> and theres the second one
[2009/12/07 10:04:46] <nexx> i think it takes some minutes to list all hosts
[2009/12/07 10:05:13] <ohadlevy> until their next puppet run :)
[2009/12/07 10:05:22] <ohadlevy> you should also import the inventory
[2009/12/07 10:05:35] <ohadlevy> so you'll get a lot more details about the hosts
[2009/12/07 10:05:40] <nexx> uhm
[2009/12/07 10:06:15] <ohadlevy> are you using storeconfigs?
[2009/12/07 10:06:20] <nexx> nope
[2009/12/07 10:06:28] <ohadlevy> http://theforeman.org/wiki/foreman/Puppet_Facts#Not-using-Puppet-storeconfigs
[2009/12/07 10:07:04] @ bobbyz_ joined channel #puppet
[2009/12/07 10:07:16] @ kaptk2 joined channel #puppet
[2009/12/07 10:09:12] <nexx> im not using facts at all
[2009/12/07 10:09:26] <ohadlevy> nexx: well, you get it for free :)
[2009/12/07 10:09:28] <nexx> but lets change that
[2009/12/07 10:12:20] <nexx> hmmmm
[2009/12/07 10:21:31] @ Quit: fruitcake: "Lost terminal"
[2009/12/07 10:22:36] @ erm_ joined channel #puppet
[2009/12/07 10:24:03] @ labrown joined channel #puppet
[2009/12/07 10:24:25] <rocket> anyone here work with writing unit tests?
[2009/12/07 10:28:08] @ rmiller4pi8 joined channel #puppet
[2009/12/07 10:30:47] <joe-mac> has anybody automated generating an openssl cert? the man page is freaking atrocious, and it needs user input. i need to automate all that via the CLI
[2009/12/07 10:31:19] @ brothers joined channel #puppet
[2009/12/07 10:32:28] <joe-mac> o ok there is a manpage for the sub function of the openssl binary
[2009/12/07 10:32:38] <z00dax> most people tend to use a CA or the makefiles
[2009/12/07 10:33:28] @ Quit: rmiller4pi8: "Leaving."
[2009/12/07 10:34:07] @ ashim joined channel #puppet
[2009/12/07 10:34:45] @ rmiller4pi8 joined channel #puppet
[2009/12/07 10:34:52] <Volcane> i use http://sial.org/howto/openssl/ca/
[2009/12/07 10:36:17] @ unxfrek joined channel #puppet
[2009/12/07 10:36:58] @ jcape left channel #puppet ()
[2009/12/07 10:37:15] @ Quit: spyder2010: "Later"
[2009/12/07 10:39:20] @ Quit: jaredrhine: Read error: 110 (Connection timed out)
[2009/12/07 10:41:12] <ptman> joe-mac: also check out easyrsa from openvpn
[2009/12/07 10:41:30] <joe-mac> Volcane: though that looks kind of interestuing, seems a little ovcerkill. all i want to do is generate a key for my rsyslog master
[2009/12/07 10:41:36] <joe-mac> using an exec resource
[2009/12/07 10:41:47] <joe-mac> i think you casn just pass the CN and everything via the CLI
[2009/12/07 10:41:51] <joe-mac> reviewing the manpage now
[2009/12/07 10:42:29] <Volcane> joe-mac: not quite that easy
[2009/12/07 10:42:31] <Volcane> joe-mac: http://www.devco.net/pubwiki/Bacula/TLS
[2009/12/07 10:42:43] <Volcane> joe-mac: though u can probably skip the encoding of password into the key phase
[2009/12/07 10:43:02] <joe-mac> i mean like the counytry code and all that
[2009/12/07 10:43:06] <ptman> joe-mac: a self-signed certificate is easy:
[2009/12/07 10:43:08] <joe-mac> there's got to be a way to pass that via CLI
[2009/12/07 10:43:09] <ptman> openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/ssl/private/fqdn.key -out /etc/ssl/fqdn.crt
[2009/12/07 10:43:17] <joe-mac> yes but it can't be interactiove
[2009/12/07 10:44:17] <joe-mac> -batch
[2009/12/07 10:44:21] <ptman> a bit of expect magic...
[2009/12/07 10:44:25] <joe-mac> nope
[2009/12/07 10:44:27] <joe-mac> just add -batch
[2009/12/07 10:44:38] <joe-mac> wonder what it has for the CN and whatnot though lol
[2009/12/07 10:44:56] <ptman> yes, you probably want to specify those..
[2009/12/07 10:45:10] <joe-mac> can do that with a different argument it lokos like
[2009/12/07 10:45:13] <joe-mac> will paste when i figure it out
[2009/12/07 10:45:26] <joe-mac> anybody recall what the openssl command is to show a keyfile's properties?
[2009/12/07 10:45:39] <joe-mac> just openssl -x509 filename
[2009/12/07 10:45:41] <joe-mac> ?
[2009/12/07 10:46:05] <ptman> openssl x509 -in filename -noout -text
[2009/12/07 10:46:19] <joe-mac> thanks ptman
[2009/12/07 10:47:39] @ Quit: suchu: "ChatZilla 0.9.85 [Firefox 3.0.15/2009101601]"
[2009/12/07 10:48:34] <ashp> goddamn i am tired of puppetmaster breaking on me now
[2009/12/07 10:48:39] <ashp> i keep getting this: err: Could not retrieve catalog from remote server: Error 400 on SERVER: undefined method `each' for nil:NilClass
[2009/12/07 10:53:38] @ mikerowehl joined channel #puppet
[2009/12/07 10:53:43] <ashp> http://projects.reductivelabs.com/issues/2863
[2009/12/07 10:53:46] <ashp> grr so it's this
[2009/12/07 10:54:14] @ jimmij joined channel #puppet
[2009/12/07 10:58:51] @ Quit: tim|macbook: Read error: 60 (Operation timed out)
[2009/12/07 11:05:20] @ Quit: Chunko_: Remote closed the connection
[2009/12/07 11:07:51] @ nakano is now known as nakano_
[2009/12/07 11:07:56] @ francois left channel #puppet ()
[2009/12/07 11:09:33] @ nigelk joined channel #puppet
[2009/12/07 11:10:06] @ nakano_ is now known as nakano
[2009/12/07 11:10:09] <joe-mac> hey guys in case anyone is interested
[2009/12/07 11:10:25] <joe-mac> sudo openssl req -newkey rsa:3072 -batch -x509 -days 3650 -multivalue-rdn -subj "/C=US/L=Boston/O=MyCompany LLC/CN=IT" -nodes -out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem
[2009/12/07 11:10:31] @ Quit: erm_: Read error: 110 (Connection timed out)
[2009/12/07 11:10:34] <joe-mac> that will without any interaction create a private key for stunnel
[2009/12/07 11:10:40] <joe-mac> using it in my recipe for rsyslog
[2009/12/07 11:15:57] <duritong> has anybody built a passenger-rpm using REE ?
[2009/12/07 11:16:38] @ Quit: stasheck: Remote closed the connection
[2009/12/07 11:17:15] @ Quit: unxfrek: Remote closed the connection
[2009/12/07 11:19:20] <fsweetser> quick question - anybody know what category a bug in puppetdoc should go in?
[2009/12/07 11:20:28] @ lutter joined channel #puppet
[2009/12/07 11:23:31] @ Quit: GioGio: "Page closed"
[2009/12/07 11:25:02] <joe-mac> fsweetser: just in general, brice does all those (masterzen)
[2009/12/07 11:27:58] <joe-mac> there are qwuite a few found and fixed recently fsweetser, and it's going to be BA when .25.2 coems out
[2009/12/07 11:28:11] <fsweetser> BA?
[2009/12/07 11:28:14] <joe-mac> going to autogenerate my docs and put them in the knowledge base
[2009/12/07 11:28:18] <joe-mac> BA = badass
[2009/12/07 11:28:24] <fsweetser> ah =)
[2009/12/07 11:29:20] <fsweetser> I guess I'll just throw the ticket in uncategorized
[2009/12/07 11:29:29] <fsweetser> I did a quick search, and didn't see any other tickets like the issue I found...
[2009/12/07 11:29:38] <joe-mac> what are yous eeing fsweetser?
[2009/12/07 11:30:33] <fsweetser> if you have unparseable .pp files in a modules/foo/files directory, puppetdoc dies an ungraceful death
[2009/12/07 11:30:53] <fsweetser> in my case, it's some selinux compiled policy files, which also have a .pp extension
[2009/12/07 11:32:06] <kjetilho> don't do that then
[2009/12/07 11:32:50] <fsweetser> I wouldn't if I didn't have to, but I do, so I do
[2009/12/07 11:33:25] <SyTonnerre> Is an invisible djinn forcing you to?
[2009/12/07 11:33:56] <jb-> heh, a bug is a bug.
[2009/12/07 11:33:56] <fsweetser> nope - hunger
[2009/12/07 11:34:22] <fsweetser> if the policy file doesn't get pushed out, then dhcpd doesn't work, which means the network doesn't work, which means I get fired, which means I don't eat =)
[2009/12/07 11:34:51] <SyTonnerre> You get fired if you don't name the policy files .pp on the puppetmaster?
[2009/12/07 11:34:53] <SyTonnerre> That's rough
[2009/12/07 11:35:10] <fsweetser> ah, I see what you mean - use a source that doesn't have .pp in it
[2009/12/07 11:35:28] <SyTonnerre> What else would we have been suggesting?
[2009/12/07 11:35:37] <fsweetser> true, I could do that, but it would be nice if puppetdoc did something other than shoot itself in the head
[2009/12/07 11:35:58] <SyTonnerre> Yeah
[2009/12/07 11:36:09] <fsweetser> I would argue that it shouldn't be looking in files/ anyway, since that's not where puppetmaster is going to be loading classes from
[2009/12/07 11:36:29] <kjetilho> well, ok, I can agree with the files/ part
[2009/12/07 11:37:15] <joe-mac> fsweetser: under files i don't name anything .pp
[2009/12/07 11:37:18] <ashp> hmm they want me to 'turn up puppetmasterd logging'
[2009/12/07 11:37:20] <kjetilho> also about dying a horrible death -- but you should get lots of warnings about parse errors :-)
[2009/12/07 11:37:23] <joe-mac> .pp i reserve for puppet code
[2009/12/07 11:37:24] <ashp> anyone know what controls the AMOUNT of log detail? :/
[2009/12/07 11:37:33] <joe-mac> that's sort of like naming a text file .c then wondering why it won';t compile
[2009/12/07 11:37:33] <fsweetser> joe-mac: obviously a good idea =)
[2009/12/07 11:38:12] <fsweetser> true, but I don't normaly have a make file that does 'gcc `find -name *.c`'
[2009/12/07 11:39:03] <joe-mac> that is what all my makefiles do, you insensitive clod!
[2009/12/07 11:39:04] <ashp> i can see a loglevel but that's by resource :/
[2009/12/07 11:39:15] @ jmarki joined channel #puppet
[2009/12/07 11:42:17] <joe-mac> guys anybody know where i can find some part time systems/infrastructure type work
[2009/12/07 11:42:32] <joe-mac> night time stuff is A++ i am an insomniac pretty much
[2009/12/07 11:42:47] @ lak joined channel #puppet
[2009/12/07 11:44:49] @ Quit: Ramonster: Client Quit
[2009/12/07 11:47:41] <masterzen> fsweetser: use the "documentation" category
[2009/12/07 11:47:42] @ kristian_ joined channel #puppet
[2009/12/07 11:47:58] @ kristian_ is now known as Vanders
[2009/12/07 11:48:10] <fsweetser> masterzen: will do
[2009/12/07 11:48:52] @ cwebber joined channel #puppet
[2009/12/07 11:50:14] <Vanders> Can anyone help me solve a dependency issue? I'm trying to write a manifest for Debian and I need puppet to run "apt-get update" as soon as sources.list changes and before it attempts to install any more packages, but Puppet simply "schedules" the exec of apt-get update and tries (& fails) to install packages. Is there any way to force Puppet to run apt-get update immediately after it's changed sources.list?
[2009/12/07 11:50:45] <Volcane> every package should require the exec
[2009/12/07 11:50:55] <Volcane> or set a default in your site.pp
[2009/12/07 11:51:02] <Volcane> Package{ require => Exec[....] }
[2009/12/07 11:51:25] <joe-mac> Volcane: that's a terrible solution
[2009/12/07 11:51:27] <Vanders> I've tried that, but it seems to cause the packages to fail as they all attempt to run the exec at the same time, but apt-get update requires some time to work.
[2009/12/07 11:51:34] <joe-mac> apt-get update takes way too long for that to be viable
[2009/12/07 11:51:50] <joe-mac> however
[2009/12/07 11:51:53] <Volcane> joe-mac: does it? runs like in a second for me, works a charm
[2009/12/07 11:51:58] <joe-mac> it migth be the *only* solution
[2009/12/07 11:52:00] <Vanders> Not to mention I only need the Exec *if* sources.list changes, which is usually wont
[2009/12/07 11:52:07] <Volcane> joe-mac: anyway, requiring a refreshonly exec doesnt mean it has to run each time
[2009/12/07 11:52:13] <joe-mac> Volcane: i've seen it on some of my boxes take long, quite annoying
[2009/12/07 11:52:13] <neek> should subclasses work in module/manifests/init.pp ? so I define a subclass in the init.pp, and include that instead of the main class? when I do it, the subclass errors as undefined when I try to include it.
[2009/12/07 11:52:20] <joe-mac> true
[2009/12/07 11:52:38] <Volcane> joe-mac: have local deb mirrors :P
[2009/12/07 11:53:08] <joe-mac> Volcane: nah, too much work
[2009/12/07 11:53:19] <joe-mac> if you saw the nuclear fallout i inherited, you'd understand
[2009/12/07 11:53:21] <Vanders> Volcane: So you reckon if I make my packages 'require => Exec["apt-update"]' and then make apt-update refreshonly that'd work?
[2009/12/07 11:53:40] <Volcane> Vanders: then notify it from your file resource yes
[2009/12/07 11:53:58] <joe-mac> picture, someone asking me to retrieve cpu info on about 30 boxes... no big deal right? o yea but the boxes don't have keyed auth and the l/p's are different on every single one
[2009/12/07 11:53:59] <Vanders> I'll give it a go. brb editing 100 packages...
[2009/12/07 11:54:36] <Volcane> Vanders: set the default
[2009/12/07 11:55:17] <Volcane> joe-mac: mc-nrpe -v get_cpu :P
[2009/12/07 11:55:45] <masterzen> fsweetser: what was the problem?
[2009/12/07 11:56:22] <joe-mac> yea that would have been feasible, except at the time there was no nagios either
[2009/12/07 11:56:22] <fsweetser> puppetdoc crashes if it finds .pp files it can't read, even if they're in module/foo/files
[2009/12/07 11:56:31] <joe-mac> i built everything, from scratch
[2009/12/07 11:56:37] <joe-mac> it's like my baby, besides my other baby lol
[2009/12/07 11:57:59] @ Quit: spawnyd: Remote closed the connection
[2009/12/07 11:58:03] @ Quit: bearnard:
[2009/12/07 11:59:09] <dan__t> 'morning
[2009/12/07 11:59:27] @ Quit: bobbyz_: Read error: 110 (Connection timed out)
[2009/12/07 12:00:41] <dan__t> I don't really feel like doing anything today.
[2009/12/07 12:01:06] @ p3rror joined channel #puppet
[2009/12/07 12:02:35] @ Quit: pacalm:
[2009/12/07 12:02:44] <dan__t> because, well, im way hungover.
[2009/12/07 12:03:55] @ Quit: Robbie_: Remote closed the connection
[2009/12/07 12:04:40] <masterzen> fsweetser: what do you mean by "it can't read"? you mean permission issues or impossible to parse because invalid?
[2009/12/07 12:06:55] <fsweetser> impossible to parse
[2009/12/07 12:07:22] <Vanders> Volcane: By jove I think it's working. Thanks, been banging my head on the desk all afternoon with that one.
[2009/12/07 12:07:38] <masterzen> fsweetser: ok, enter the bug, I'll have a look
[2009/12/07 12:07:54] <fsweetser> masterzen: #2894
[2009/12/07 12:07:54] <gepetto> fsweetser: masterzen: #2894 is http://projects.reductivelabs.com/issues/show/2894 "Puppet - Bug #2894: puppetdoc should ignore modules/<foo>/files/*.pp - ReductiveLabs.com"
[2009/12/07 12:08:53] <danielbln> you have my vote
[2009/12/07 12:09:52] <masterzen> fsweetser: indeed that's an issue. I'll see how I can fix this.
[2009/12/07 12:10:26] @ mvn071 joined channel #puppet
[2009/12/07 12:10:31] <masterzen> the issue is that puppetdoc doesn't chose which file to parse, it is directed by RDoc... which we told to parse *.pp files :-)
[2009/12/07 12:11:11] <fsweetser> yep, that lines up with what I saw =)
[2009/12/07 12:12:11] <fsweetser> if it's not practical to avoid the files/ directory, a warning in the docs would be nice instead
[2009/12/07 12:13:04] @ randybias|away is now known as randybias
[2009/12/07 12:18:02] @ exn joined channel #puppet
[2009/12/07 12:21:22] @ jaredrhine joined channel #puppet
[2009/12/07 12:22:12] @ Quit: danielbln: "Leaving."
[2009/12/07 12:23:58] <fzzzt> So I ran into something last week
[2009/12/07 12:24:28] <fzzzt> If you have a dir specified, just ensure => directory nothing inside it, but there are files in side it, puppetd somehow loads those files into memory
[2009/12/07 12:25:05] <fzzzt> A dev was doing some one time maintenance on an app and created a tmp dir with tons of files inside it, inside a dir Puppet creates, and Puppet ate up 100% CPU and GBs of ram heh
[2009/12/07 12:25:32] <Volcane> heh
[2009/12/07 12:25:40] <Volcane> sounds like something worth logging a bug for
[2009/12/07 12:26:20] <fzzzt> after i make a cron watchdog script :P
[2009/12/07 12:26:39] <mark> yep, we're also restarting puppetd every day ;)
[2009/12/07 12:30:38] @ Quit: randybias: "Leaving..."
[2009/12/07 12:31:15] @ Quit: Welsh_Dwarf: Remote closed the connection
[2009/12/07 12:32:30] @ toi joined channel #puppet
[2009/12/07 12:34:32] <kjetilho> fzzzt: no recurse ?
[2009/12/07 12:35:00] <neek> fzzzt: interesting. that might explain our memory and cpu use issues, too.
[2009/12/07 12:35:25] <neek> since puppet creates a bare tree that our code deploy scripts later come fill in.
[2009/12/07 12:35:41] @ Quit: int: Remote closed the connection
[2009/12/07 12:38:28] @ fluxdude joined channel #puppet
[2009/12/07 12:39:01] @ Devin joined channel #puppet
[2009/12/07 12:39:20] <fzzzt> no recursion
[2009/12/07 12:39:23] <fluxdude> hi volcane!
[2009/12/07 12:39:34] <Devin> Anyone here available to answer questions about the puppet certificate authority?
[2009/12/07 12:39:40] <fzzzt> just file[...] ensure directory
[2009/12/07 12:39:42] <fzzzt> brb meeting
[2009/12/07 12:39:53] @ ericholscher left channel #puppet ("Leaving")
[2009/12/07 12:40:40] <Devin> Looks like the puppetca creates certs with a 5 year life. What commands are issued when the 5 years are up to renew the certificates?
[2009/12/07 12:42:38] <fzzzt> actually, yes with recursion i think
[2009/12/07 12:42:54] <fzzzt> we create /usr/local/fedora, and the dir he was using was /usr/local/fedora/migration with his files inside it
[2009/12/07 12:42:56] <fzzzt> brb
[2009/12/07 12:48:18] @ gpled joined channel #puppet
[2009/12/07 12:49:09] @ Quit: jeff: Remote closed the connection
[2009/12/07 12:49:27] @ Quit: jaredrhine: Read error: 110 (Connection timed out)
[2009/12/07 12:49:35] @ bobbyz_ joined channel #puppet
[2009/12/07 12:49:35] <gpled> can puppet push cron jobs?
[2009/12/07 12:50:30] <joe-mac> yep
[2009/12/07 12:50:33] <joe-mac> thejre is a cron type
[2009/12/07 12:51:44] <gpled> trying to manage yum updates. thinking: have a cron job check for updates, and then tell me what servers need what updates. is that how most people do it?
[2009/12/07 12:53:31] @ lilmatt joined channel #puppet
[2009/12/07 12:53:41] <kjetilho> gpled: we have a check in Nagios
[2009/12/07 12:54:08] @ Quit: toi: Read error: 113 (No route to host)
[2009/12/07 12:55:12] <gpled> is Nagios open source?
[2009/12/07 12:55:33] <kjetilho> yes
[2009/12/07 12:56:57] * Volcane 's machines sends the output of yum check-updates to a cnetral machine where it ends up in a report
[2009/12/07 12:57:04] @ Quit: Vanders: "Leaving"
[2009/12/07 12:57:54] @ Quit: lilmatt: Client Quit
[2009/12/07 12:58:05] <gpled> Volcane: how are you sending the output to the central machine?
[2009/12/07 12:58:19] <Volcane> crypto signed smtp
[2009/12/07 12:58:39] <Volcane> ie. get retrying and network interruption handling for free without having to code it
[2009/12/07 12:59:04] <kjetilho> I think Nagios + NRPE is easier :-)
[2009/12/07 12:59:13] @ lilmatt joined channel #puppet
[2009/12/07 12:59:27] <Volcane> kjetilho: http://nephilim.ml.org/~rip/updatecentral/sample/tabbed/
[2009/12/07 12:59:33] <Volcane> kjetilho: not really the same
[2009/12/07 12:59:58] <Volcane> this can handle any package manager - easy plugin system - etc
[2009/12/07 13:00:09] <Volcane> any its just a erb file so whatever format u want
[2009/12/07 13:00:20] <kjetilho> well, we have overview pages for Nagios alerts, too
[2009/12/07 13:00:43] <kjetilho> with drilldown. although that's some internal PHP code
[2009/12/07 13:00:49] <Volcane> not easy to say - which machines need apache updated?
[2009/12/07 13:00:55] <Volcane> ah yeah if you coded up something sure
[2009/12/07 13:01:20] <kjetilho> depends on policy, of course. we tend to install updates as soon as possible
[2009/12/07 13:01:21] <Volcane> cos the various check updates plugins on their own are pretty crap
[2009/12/07 13:01:22] @ docelic joined channel #puppet
[2009/12/07 13:01:38] <Volcane> kjetilho: yeah me too generally
[2009/12/07 13:02:44] @ plathrop-away is now known as plathrop
[2009/12/07 13:05:04] @ ambroff_ joined channel #puppet
[2009/12/07 13:06:37] @ jaredrhine joined channel #puppet
[2009/12/07 13:08:41] @ notbrien joined channel #puppet
[2009/12/07 13:19:37] @ Quit: MattyM: "ta ta"
[2009/12/07 13:23:59] @ alfism_ joined channel #puppet
[2009/12/07 13:24:28] @ Quit: mvn071: "Leaving"
[2009/12/07 13:25:24] @ Quit: poison_: Remote closed the connection
[2009/12/07 13:25:50] @ poison joined channel #puppet
[2009/12/07 13:25:54] @ Quit: poison: Remote closed the connection
[2009/12/07 13:31:49] @ [newbie] joined channel #puppet
[2009/12/07 13:36:36] @ bruce joined channel #puppet
[2009/12/07 13:38:58] @ Quit: Devin: "Page closed"
[2009/12/07 13:39:45] @ Quit: Rejo: "kernel update"
[2009/12/07 13:40:20] @ Quit: alfism: Read error: 110 (Connection timed out)
[2009/12/07 13:40:21] @ alfism_ is now known as alfism
[2009/12/07 13:42:47] <jason^> i have a machine that was apart of a class that included a cronjob. i removed the class from the node but the cronjob still exists. what would the proper way to handle this case?
[2009/12/07 13:46:12] <Volcane> only real way is to set them absent
[2009/12/07 13:46:33] <Volcane> some resource types let you purge unmanaged stuff, but generally removing includes doesnt clean up
[2009/12/07 13:49:01] @ Quit: fluxdude: Read error: 110 (Connection timed out)
[2009/12/07 13:52:17] @ [0x100] joined channel #puppet
[2009/12/07 13:52:26] <jason^> maybe i'm using classes incorrectly
[2009/12/07 13:52:52] <plathrop> jason^: No, you're having a reasonable expectation that turns out to be wrong :-P
[2009/12/07 13:53:04] @ poison joined channel #puppet
[2009/12/07 13:53:20] <plathrop> jason^: unfortunately, it is non-trivial to make puppet realize that removing a node from a class means "clean up all the stuff this class defined"
[2009/12/07 13:53:37] @ nakano is now known as nakano_
[2009/12/07 13:54:10] <jason^> yeah i was hoping for a include ~some-class or something similar to essentially absent an entire class, which really would be difficult
[2009/12/07 13:54:49] <plathrop> jason^: Yeah, I've taken a couple cracks at coding it, but it is... not easy.
[2009/12/07 13:54:58] @ Chiku joined channel #puppet
[2009/12/07 13:55:02] <plathrop> jason^: Like, how do you "un-do" an exec?
[2009/12/07 13:55:46] <jason^> plathrop: so how do you currently handle it?
[2009/12/07 13:55:57] <jason^> in this case it's easy, i'm removing a service with one class
[2009/12/07 13:56:20] <plathrop> jason^: Well, in our environment, it is almost always cheapest to reprovision the machine in its new role.
[2009/12/07 13:56:37] <Volcane> reprovisioning is the way to go
[2009/12/07 13:56:54] <plathrop> jason^: We do have several classes that are "compatible" - all our database manifests for example are guaranteed to work when moving a node from one to another.
[2009/12/07 13:57:03] <plathrop> jason^: that requires some careful manifest work.
[2009/12/07 13:57:59] <jason^> the problem is that manifests and modules are so open and can be very dynamic and there's not a whole load of good patterns you can replicate
[2009/12/07 13:58:35] <plathrop> jason^: I'm not sure I follow. In terms of good manifest development practice?
[2009/12/07 13:59:41] <jason^> i have a module i use for apache, but should i put the requirement with the php5 package in the apache module or should i put php5 in it's own class and just require it from the moudle? the module doesn't have access to the usual manifests (i assume) so i don't think i can do that
[2009/12/07 14:00:41] <jason^> good manifests development and how to structure manifests, modules, nodes, inherited classes, etc
[2009/12/07 14:01:25] @ randybias joined channel #puppet
[2009/12/07 14:01:56] <plathrop> jason^: I'm not sure what you mean by "doesn't have access" - resources are defined in a flat space essentially, there's no reason your php5 module can't require => Package[apache] when Package[apache] is defined in the "apache" module.
[2009/12/07 14:02:23] <plathrop> As for best practices, I think the community is still developing them, however you can get a lot of mileage out of looking at good programming practices.
[2009/12/07 14:03:10] <jason^> i haven't made a huge effort towards looking at other deployments though
[2009/12/07 14:03:54] * plathrop is working hard to get his manifests in shape for public consumption
[2009/12/07 14:04:01] <plathrop> Not that we do anything that clever.
[2009/12/07 14:07:26] <jason^> plathrop: so i'm thinking that modules were in a different scope of the non-modulized classes and they couldn't require each others classes for some reason
[2009/12/07 14:08:01] <plathrop> jason^: you are incorrect. I do that *all* over the place.
[2009/12/07 14:08:15] <jason^> okay well that makes things easier
[2009/12/07 14:08:44] <plathrop> or I'm on crack. Sometimes I say something with great authority and turn out to be wrong. Just so you know
[2009/12/07 14:09:13] <plathrop> Volcane is smarter than me, though, so you can double-check me easy :-P
[2009/12/07 14:09:38] <Volcane> jason^: see http://www.devco.net/archives/2009/09/28/simple_puppet_module_structure.php i show lots about classes requiring each other etc, and all of that works between modules and classes
[2009/12/07 14:09:45] <KarlHungus> at some point i saw a set of recipes that included "if $munin" and set up the plugins for that service. now i can't find them any more :/
[2009/12/07 14:09:56] @ Quit: lak:
[2009/12/07 14:12:03] @ Quit: jaredrhine: Read error: 113 (No route to host)
[2009/12/07 14:14:55] @ Quit: fsweetser: Remote closed the connection
[2009/12/07 14:15:09] @ fsweetser joined channel #puppet
[2009/12/07 14:16:24] @ jaredrhine joined channel #puppet
[2009/12/07 14:16:57] @ lak joined channel #puppet
[2009/12/07 14:18:16] @ leanucci joined channel #puppet
[2009/12/07 14:18:46] <leanucci> ohadlevy: ping?
[2009/12/07 14:22:48] @ shaggy_cat_ joined channel #puppet
[2009/12/07 14:23:07] <himanshu> when we create any node definiton , say node "node1" { include class A include class B include class C}, is this ensures that class A will be executed first and then class B and then class C?
[2009/12/07 14:23:18] <Volcane> no
[2009/12/07 14:23:40] <Volcane> what if class A also included class X and class B also includes class X?
[2009/12/07 14:23:49] <Volcane> how would being top-down ordering work in that case?
[2009/12/07 14:24:20] <himanshu> what is class Class A and class X are from different modules?
[2009/12/07 14:24:32] <Volcane> doesnt make a difference
[2009/12/07 14:24:50] <himanshu> is there is any way to ensure some order between classes of different modules
[2009/12/07 14:25:02] <Volcane> there's a 'require' keyword
[2009/12/07 14:25:10] <Volcane> and you can use the 'require' function
[2009/12/07 14:25:14] <himanshu> ok
[2009/12/07 14:25:53] <himanshu> just 1 more Qs, is it possible to have 2 requirement same time, say I need Package X and Class Y to execute some function?
[2009/12/07 14:26:01] @ bearnard joined channel #puppet
[2009/12/07 14:26:25] <Volcane> require => [ Package["X"], Class["Y"] ]
[2009/12/07 14:26:33] <himanshu> ok cool
[2009/12/07 14:26:35] <himanshu> Thanks
[2009/12/07 14:27:02] <himanshu> so ordering in required value matters?
[2009/12/07 14:27:09] <Volcane> no
[2009/12/07 14:27:13] <himanshu> ok
[2009/12/07 14:27:22] <Volcane> package{"foo": require => [ Package["X"], Class["Y"] ] }
[2009/12/07 14:27:35] <Volcane> both package x and class y has to be done bfore package foo
[2009/12/07 14:27:51] <Volcane> the order will depend on whatever is set on package x and class y's resources
[2009/12/07 14:28:00] <himanshu> okk
[2009/12/07 14:28:28] <himanshu> is require the right approach to ensure ordering between inter modules or intra modules functions?
[2009/12/07 14:29:04] <Volcane> the only options tht influence ordering is require, notify, subscribe and before
[2009/12/07 14:29:15] @ Quit: p3rror: Remote closed the connection
[2009/12/07 14:29:19] <himanshu> okk
[2009/12/07 14:29:25] <plathrop> himanshu: require/before and subscribe/notify are the correct (and only) way to ensure ordering.
[2009/12/07 14:29:36] @ p3rror joined channel #puppet
[2009/12/07 14:31:08] @ pting joined channel #puppet
[2009/12/07 14:31:14] @ spyder2010 joined channel #puppet
[2009/12/07 14:31:24] @ Quit: sHaggY_caT: Read error: 60 (Operation timed out)
[2009/12/07 14:32:20] <himanshu> say in my Exec { "B": subscribe=> Exec["A"], }, do I need require => Exec["B"] also?
[2009/12/07 14:32:41] <himanshu> sorry , i mean require => Exec["A"]
[2009/12/07 14:33:27] <himanshu> or subscribe will ensure that whenever Exec A is executed, exec b will always be executed
[2009/12/07 14:33:39] @ toi joined channel #puppet
[2009/12/07 14:34:29] <Volcane> no
[2009/12/07 14:34:50] <Volcane> execs always execute, every time puppet run
[2009/12/07 14:34:59] <Volcane> unless you use one of the specific options to prevent that
[2009/12/07 14:35:00] <himanshu> ok
[2009/12/07 14:35:04] <plathrop> himanshu: subscribe is a superset of require
[2009/12/07 14:35:20] <plathrop> and notify is a superset of before
[2009/12/07 14:36:40] @ Quit: jimmij: Read error: 60 (Operation timed out)
[2009/12/07 14:41:38] <himanshu> can we have some kind of OR case in multiple values under require? I mean say I have require=> Package["X"], Package["Y"]. Now instead of requiring both X and Y, I need a way X or Y?
[2009/12/07 14:44:13] <plathrop> himanshu: I do not believe that is possible. I'm also unsure of the utility of an option like that.
[2009/12/07 14:47:11] <himanshu> ohk, Also when we say require => File["test.bin"], cwd => "/tmp", path=> "/usr/local/bin:/bin" Is it ensures file test.bin only in cwd or can be in /usr/local/bin and /bin path also?
[2009/12/07 14:50:19] @ Quit: pheezy: "Leaving..."
[2009/12/07 14:50:21] @ Quit: jab_doa: "Verlassend"
[2009/12/07 14:57:04] <joe-mac> do people normally have a syslog server per domain or justr one main syslog server?
[2009/12/07 14:58:09] @ nevyn joined channel #puppet
[2009/12/07 15:01:27] @ jb joined channel #puppet
[2009/12/07 15:02:31] @ Quit: ambroff_: Read error: 110 (Connection timed out)
[2009/12/07 15:05:57] @ Quit: randybias: "Leaving..."
[2009/12/07 15:06:50] <jason^> if i create a class called test in a module called teststuff, do i just include test or am i required to include teststuff::test
[2009/12/07 15:10:28] @ Quit: nevyn_: Read error: 101 (Network is unreachable)
[2009/12/07 15:17:58] @ randybias joined channel #puppet
[2009/12/07 15:20:14] @ nakano_ is now known as nakano
[2009/12/07 15:24:23] @ Quit: poison: Remote closed the connection
[2009/12/07 15:25:24] @ Ramonster joined channel #puppet
[2009/12/07 15:32:29] @ Djelibeybi joined channel #puppet
[2009/12/07 15:34:34] <fsweetser> jason^: you'd have to call it teststuff::test and include that
[2009/12/07 15:34:46] <fsweetser> otherwise the auto-import magic wouldn't find it
[2009/12/07 15:35:12] <fsweetser> also, it would then have to be in the file manifests/test.pp
[2009/12/07 15:39:38] @ Quit: jmarki: Remote closed the connection
[2009/12/07 15:43:52] @ Quit: p3rror: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:55] @ Quit: jb-: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:55] @ Quit: nakano: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:56] @ Quit: himanshu: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:56] @ Quit: Bosse: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:57] @ Quit: choffee__: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:57] @ Quit: ptman: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:58] @ Quit: FiXion: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:58] @ Quit: plathrop: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:59] @ Quit: whack: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:43:59] @ Quit: markwell: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:00] @ Quit: bzrk: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:01] @ Quit: cmek: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:02] @ Quit: phearless: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:03] @ Quit: glut: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:03] @ Quit: kennethd: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:04] @ Quit: blue: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:04] @ Quit: samppah: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:05] @ Quit: opqdonut: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:05] @ Quit: windo: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:06] @ Quit: `properzel: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:06] @ Quit: thijso: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:07] @ Quit: skaar: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:08] @ Quit: arj: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:08] @ Quit: JD: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:09] @ Quit: ggillies_: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:10] @ Quit: shine: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:10] @ Quit: pneff: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:11] @ Quit: ezekiel: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:11] @ Quit: Dominic: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:12] @ Quit: jameswhi1e: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:12] @ Quit: cshields: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:13] @ Quit: Filbert: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:14] @ Quit: mark: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:15] @ Quit: proton: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:16] @ Quit: sid77: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:16] @ Quit: rodjek: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:17] @ Quit: Av: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:17] @ Quit: CoolCold: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:18] @ Quit: jds2001: barjavel.freenode.net irc.freenode.net
[2009/12/07 15:44:48] @ p3rror joined channel #puppet
[2009/12/07 15:44:48] @ arj joined channel #puppet
[2009/12/07 15:44:48] @ blue joined channel #puppet
[2009/12/07 15:44:48] @ cmek joined channel #puppet
[2009/12/07 15:44:49] @ windo joined channel #puppet
[2009/12/07 15:44:49] @ bzrk joined channel #puppet
[2009/12/07 15:44:49] @ shine joined channel #puppet
[2009/12/07 15:44:49] @ jds2001 joined channel #puppet
[2009/12/07 15:44:49] @ CoolCold joined channel #puppet
[2009/12/07 15:44:49] @ JD joined channel #puppet
[2009/12/07 15:44:49] @ kennethd joined channel #puppet
[2009/12/07 15:44:49] @ cshields joined channel #puppet
[2009/12/07 15:44:49] @ jb- joined channel #puppet
[2009/12/07 15:44:49] @ ggillies_ joined channel #puppet
[2009/12/07 15:44:49] @ nakano joined channel #puppet
[2009/12/07 15:44:50] @ markwell joined channel #puppet
[2009/12/07 15:44:50] @ glut joined channel #puppet
[2009/12/07 15:44:50] @ himanshu joined channel #puppet
[2009/12/07 15:44:50] @ opqdonut joined channel #puppet
[2009/12/07 15:44:50] @ sid77 joined channel #puppet
[2009/12/07 15:44:50] @ mark joined channel #puppet
[2009/12/07 15:44:50] @ Bosse joined channel #puppet
[2009/12/07 15:44:50] @ jameswhi1e joined channel #puppet
[2009/12/07 15:44:50] @ choffee__ joined channel #puppet
[2009/12/07 15:44:50] @ Dominic joined channel #puppet
[2009/12/07 15:44:51] @ ptman joined channel #puppet
[2009/12/07 15:44:51] @ Av joined channel #puppet
[2009/12/07 15:44:51] @ Filbert joined channel #puppet
[2009/12/07 15:44:51] @ rodjek joined channel #puppet
[2009/12/07 15:44:51] @ whack joined channel #puppet
[2009/12/07 15:44:51] @ proton joined channel #puppet
[2009/12/07 15:44:51] @ `properzel joined channel #puppet
[2009/12/07 15:44:51] @ thijso joined channel #puppet
[2009/12/07 15:44:52] @ samppah joined channel #puppet
[2009/12/07 15:44:52] @ plathrop joined channel #puppet
[2009/12/07 15:44:52] @ skaar joined channel #puppet
[2009/12/07 15:44:52] @ ezekiel joined channel #puppet
[2009/12/07 15:44:52] @ phearless joined channel #puppet
[2009/12/07 15:44:52] @ FiXion joined channel #puppet
[2009/12/07 15:44:52] @ pneff joined channel #puppet
[2009/12/07 15:44:53] @ Quit: spyder2010: "Later"
[2009/12/07 15:47:23] @ Mick27 joined channel #puppet
[2009/12/07 15:49:04] @ Quit: bug:
[2009/12/07 15:52:53] <joe-mac> ping nigelk
[2009/12/07 15:52:57] <nigelk> pong
[2009/12/07 15:53:05] <joe-mac> it'd be nice if the debian preseed accepted some settings
[2009/12/07 15:53:14] <nigelk> that's next on my list of bugs :)
[2009/12/07 15:53:15] <joe-mac> that way i could preseed the environment and shit
[2009/12/07 15:53:22] <joe-mac> nice, i guess great minds think alike!
[2009/12/07 15:53:27] <nigelk> do you need more than just providing an opaque string?
[2009/12/07 15:53:33] <joe-mac> hopefully you make it into .25.2? heh
[2009/12/07 15:53:52] <joe-mac> nah man pretty much all settings i can think of that would be yuseful are strings in /etc/puppet/puppet.conf
[2009/12/07 15:54:00] <nigelk> http://projects.reductivelabs.com/issues/2349
[2009/12/07 15:54:25] <nigelk> check you're ok with the strategy we came up with at the end, noting that I might not get around to adding a File resource parameter
[2009/12/07 15:54:38] <nigelk> as I don't see what the utility is really if you can specify a string in the package resource itself
[2009/12/07 15:54:46] <joe-mac> i'm going to pitch this crazy idea. see i used to work at RH and wiorked on the desktop team, over 2k linux desktops. i want to start doing that here for certain departments. i want to have a puppet config for that as a separate environment and i think i can do this all and be very successful
[2009/12/07 15:55:25] <joe-mac> no no nigelk not gernerally to preseed
[2009/12/07 15:55:29] <joe-mac> but preseeding puppet itself
[2009/12/07 15:55:36] <nigelk> oh. now I know what you mean
[2009/12/07 15:55:36] <joe-mac> it's donme in the deb package root, /me forgets the file
[2009/12/07 15:55:38] <nigelk> yeah
[2009/12/07 15:55:55] @ jab_doa joined channel #puppet
[2009/12/07 15:55:57] <nigelk> while I'm digging something up... be good to get a +1 from someone who uses apt/dpkg with Puppet on this: https://groups.google.com/group/puppet-dev/browse_thread/thread/f61472b400c343d0
[2009/12/07 15:55:58] <joe-mac> btw the general responsefile thing works great for me
[2009/12/07 15:56:07] <nigelk> I dislike having to provide a file myself, but meh.
[2009/12/07 15:56:24] @ bug joined channel #puppet
[2009/12/07 15:56:26] <joe-mac> i don't even know what 'hold' is in dpkg nigelk, sorry
[2009/12/07 15:56:32] <nigelk> doh
[2009/12/07 15:56:40] <nigelk> stops it being upgraded automatically on a dist-upgrade
[2009/12/07 15:56:45] <joe-mac> nigelk: yea i just really would like to be able to somehow send a setting to the installer wespecially the environment
[2009/12/07 15:56:58] <nigelk> so we had a discussion at UDS about this
[2009/12/07 15:57:26] <joe-mac> i miss all the fun stuff apparently
[2009/12/07 15:57:28] <nigelk> https://blueprints.launchpad.net/ubuntu/+spec/foundations-lucid-puppet-installer
[2009/12/07 15:57:36] <nigelk> nothing has been updated there yet
[2009/12/07 15:57:59] <nigelk> but we're thinking about something that takes a catalog for a client and generates preseed files for the client
[2009/12/07 15:58:04] <joe-mac> that idea is like if you took bacon, wrapped a pig in, then had a pig roast
[2009/12/07 15:58:10] <nigelk> so you do an install, and at least a large chunk of your puppet config gets applied as preseed
[2009/12/07 15:59:43] @ Quit: nigelk:
[2009/12/07 16:02:02] @ Quit: randybias:
[2009/12/07 16:04:28] @ nigelk joined channel #puppet
[2009/12/07 16:04:38] <ashp> I hate tracking these down:
[2009/12/07 16:04:47] <ashp> err: Got an uncaught exception of type ArgumentError: ip is a required attribute for hosts
[2009/12/07 16:04:51] <ashp> nothing in --debug about where :/
[2009/12/07 16:05:05] <ashp> I don't even know if they mean host{} or node{} or what it refers too
[2009/12/07 16:05:08] <Djelibeybi> ashp: grep -r "host {" *
[2009/12/07 16:05:19] <Djelibeybi> They mean host {}
[2009/12/07 16:05:30] <Djelibeybi> You have a host {} type without an ip => attribute
[2009/12/07 16:05:31] <ashp> they all have ip =>, so I guess one of my facts isn't working.
[2009/12/07 16:05:42] <Djelibeybi> ashp: if the fact generates the IP, then probably. :)
[2009/12/07 16:06:16] <ashp> it's almost certainly somehow this one:
[2009/12/07 16:06:19] <ashp> @@host { "$fqdn":
[2009/12/07 16:06:22] <ashp> ip => "$ipaddress",
[2009/12/07 16:06:26] <ashp> I just have to work out WHY. :/
[2009/12/07 16:07:05] <ashp> there must be a way to get facter to read puppet facts and then show them to me so I can be sure that another entry, $puppetip actually works
[2009/12/07 16:07:28] <Djelibeybi> ashp: Just run facter on the command line
[2009/12/07 16:07:35] <Djelibeybi> $ipaddress is a built-in fact, isn't it?
[2009/12/07 16:07:55] <Djelibeybi> (I have an almost identical external/realised host resource block, btw)
[2009/12/07 16:07:57] <ashp> I have another host{} relying on $puppetip
[2009/12/07 16:08:10] <Djelibeybi> Ah, right.
[2009/12/07 16:08:10] <ashp> which is almost certainly it as it's the only non-facter built in variable used in host{} at all
[2009/12/07 16:08:27] <Djelibeybi> There is a way to get facter to load custom facts
[2009/12/07 16:08:35] <ashp> oh hmm, I .. I see the issue
[2009/12/07 16:08:38] <Djelibeybi> I think you have to pass a RUBYLIB= path before you run facter
[2009/12/07 16:08:42] <ashp> it's to do with the pluginsync stuff changes I think
[2009/12/07 16:08:42] <Djelibeybi> Hmm?
[2009/12/07 16:08:47] <Djelibeybi> Ah, yes.
[2009/12/07 16:08:49] <ashp> it's erroring _before_ it replaces puppet.conf with my changes :)
[2009/12/07 16:09:00] <ashp> other nodes updated somehow
[2009/12/07 16:09:09] @ Quit: jaredrhine: Read error: 113 (No route to host)
[2009/12/07 16:09:15] @ Quit: bruce: "The computer fell asleep"
[2009/12/07 16:09:26] @ bruce joined channel #puppet
[2009/12/07 16:10:03] <Djelibeybi> ashp: sounds like you need a require => on the hosts block to ensure the fact is delivered by your puppet.conf changes
[2009/12/07 16:10:15] <ashp> also if markus roberts is around in here, thank god for your work on 2863
[2009/12/07 16:10:23] <ashp> because I'd have never gotten puppetmasterd working without that change
[2009/12/07 16:10:36] <ashp> Djelibeybi: I'm adding it to my GIANT list of things to do :(
[2009/12/07 16:10:39] @ jaredrhine joined channel #puppet
[2009/12/07 16:10:48] <ashp> post this huge project I'm working on I am going back to square one with so much of my infrastructure
[2009/12/07 16:10:58] <ashp> right now I have this insane mess of classes and defines and it's all evil
[2009/12/07 16:11:09] <ashp> I do tricks to work out if i'm bootstrapping or in production and use different modules etc
[2009/12/07 16:11:10] <Djelibeybi> ashp: yeah, refactoring that first Puppet deployment is fun. I'm in the middle of doing my own.
[2009/12/07 16:11:22] <ashp> I need to get rid of all that again so it can take a cobbler build up to working without being so broken
[2009/12/07 16:11:25] <Djelibeybi> Thankfully, I have a production team that I can hand all this over to. :)
[2009/12/07 16:11:40] <ashp> I am probably going to start doing something like /.puppet/flatfiles and checking those in facter
[2009/12/07 16:11:51] <ashp> so that cobbler can write a couple of plain one liner files and use those elsewhere
[2009/12/07 16:11:58] <ashp> sadly the production team is me :/
[2009/12/07 16:12:59] <ashp> -sh-3.2# facter -p | grep puppet
[2009/12/07 16:12:59] <ashp> puppetip => 10.241.209.118
[2009/12/07 16:13:03] <ashp> ARGH, so it's NOT that failing
[2009/12/07 16:14:41] @ fzzzt left channel #puppet ()
[2009/12/07 16:14:50] <ashp> I wonder, when it says err: Got an uncaught exception of type ArgumentError: ip is a required attribute for hosts
[2009/12/07 16:14:59] <ashp> if there's any way it could refer to nagios host stuff :/
[2009/12/07 16:15:27] <ashp> as i have nagios::host
[2009/12/07 16:15:47] <gpled> so when working with source packages (like clamav). do you have the client: wget, tar xfz, configure; make; make install; then push out custom /etc files?
[2009/12/07 16:16:09] @ Quit: cwebber:
[2009/12/07 16:17:32] <Volcane> make rpms
[2009/12/07 16:17:35] <Volcane> or debs or whatever
[2009/12/07 16:17:38] <Volcane> dont install from source
[2009/12/07 16:17:58] <ashp> oh my god now one of my broken nodes suddenly works despite _no_ changes by me to anything
[2009/12/07 16:18:09] <ashp> i ran it again to watch the error and it worked :/
[2009/12/07 16:18:21] @ jl joined channel #puppet
[2009/12/07 16:19:03] @ Quit: bruce: Read error: 148 (No route to host)
[2009/12/07 16:22:54] @ Quit: jl: Client Quit
[2009/12/07 16:33:44] <nico> +1 volcane
[2009/12/07 16:33:48] <nico> make packages
[2009/12/07 16:34:46] <himanshu> hi what is the use of recurse ?
[2009/12/07 16:35:45] <whack> if you want puppet to deploy a directory and stuff in that directory
[2009/12/07 16:35:54] <whack> or to delete a directory recursively, etc
[2009/12/07 16:36:11] <himanshu> ok cool
[2009/12/07 16:36:13] <himanshu> thanks
[2009/12/07 16:36:39] <Djelibeybi> ashp: could it be that the first run the exported resource wasn't yet available? But it was on the second, so it worked?
[2009/12/07 16:37:05] <Djelibeybi> So, when it first ran, there was no puppetip in the database, because it hadn't been exported yet. On the second run, it had been exported, so it worked
[2009/12/07 16:37:17] <ashp> it might be, it's pretty odd
[2009/12/07 16:37:27] <ashp> i'm back to my ORIGINAL problem now of nagios deleting itself every second run
[2009/12/07 16:37:32] <ashp> but at least i've made some progress today :)
[2009/12/07 16:37:34] <Djelibeybi> yes, Volcane++. Use packages. :)
[2009/12/07 16:37:45] <Djelibeybi> Ah. I don't use Nagios, so I can't help there sadly.
[2009/12/07 16:37:48] <ashp> they wanted me to do puppetd -tvd --tags nagios but i dunno if i have to go in and tag every nagios resource or what
[2009/12/07 16:38:01] <ashp> it's so odd, it creates all the conf then the next run does an ensure => deleted which definitely isn't anywhere
[2009/12/07 16:38:51] <ashp> i got a ticket open about it but this new bug overshadowed the original issue and took all day to put a fix in place for :/
[2009/12/07 16:44:10] @ eventi_ joined channel #puppet
[2009/12/07 16:45:46] @ Quit: toi: "Ex-Chat"
[2009/12/07 16:47:47] @ Quit: exn: "see you later"
[2009/12/07 16:50:01] @ Quit: shaggy_cat_: Remote closed the connection
[2009/12/07 16:54:28] @ glaw joined channel #puppet
[2009/12/07 16:58:01] @ Quit: eventi_: "Trillian (http://www.ceruleanstudios.com"
[2009/12/07 16:58:23] <joe-mac> so nigelk that thing we were talking about, worth filing a bug over, or worth filing a debian bug over?
[2009/12/07 16:59:50] <nigelk> Maybe start a discussion on puppet-users ?
[2009/12/07 17:00:01] <nigelk> and once we have something concrete and achievable, we'll file a debian bug?
[2009/12/07 17:00:22] @ eventi joined channel #puppet
[2009/12/07 17:00:47] @ Quit: bearnard:
[2009/12/07 17:00:51] <eventi> any idea if Joyent's "accelerators" have a puppet package?
[2009/12/07 17:01:18] <eventi> and am I a traitor to lak if I go there?
[2009/12/07 17:06:49] <KarlHungus> are any of the puppet books relevant still? or are they all outdated?
[2009/12/07 17:07:14] <eventi> all books are outdated, but pulling strings is still good
[2009/12/07 17:07:32] <KarlHungus> cool
[2009/12/07 17:07:32] <joe-mac> nigelk: great idea
[2009/12/07 17:07:46] <KarlHungus> the online docs are tough to navigate
[2009/12/07 17:08:04] * Volcane wonders abt: Could not retrieve selinux: Invalid argument - /proc/self/attr/current
[2009/12/07 17:08:09] <Volcane> i recall a fix but cant find it now
[2009/12/07 17:09:44] <joe-mac> nigelk: email sent
[2009/12/07 17:10:54] @ Quit: ashim: "Leaving."
[2009/12/07 17:10:55] <KarlHungus> where can i find info on how the <<| |>> operator works?
[2009/12/07 17:11:09] <Volcane> hmm, its facter
[2009/12/07 17:11:14] @ Quit: ambroff: "Ex-Chat"
[2009/12/07 17:11:33] <Volcane> KarlHungus: wiki:ExportedResources
[2009/12/07 17:11:35] <gepetto> Volcane: KarlHungus: wiki:ExportedResources is http://reductivelabs.com/trac/puppet/wiki/ExportedResources
[2009/12/07 17:11:45] <KarlHungus> Volcane: thanks
[2009/12/07 17:12:02] @ ambroff joined channel #puppet
[2009/12/07 17:12:52] @ Quit: labrown: "Leaving"
[2009/12/07 17:16:10] @ mrbucket_ joined channel #puppet
[2009/12/07 17:16:35] <mrbucket_> q: my 0.24.8 daemons running on RHEL4 dont check in with my puppetmasterd every 30 minutes, but if i manually run them they seem alright
[2009/12/07 17:16:54] <eventi> is the puppet service running?
[2009/12/07 17:16:59] <mrbucket_> yes
[2009/12/07 17:16:59] <eventi> check daemon.log
[2009/12/07 17:17:41] <Djelibeybi> mrbucket_: have you upgraded Puppet to 0.24.8 without upgrading Facter, perhaps?
[2009/12/07 17:17:55] <mrbucket_> they were installed together by hand..
[2009/12/07 17:17:56] <Djelibeybi> mrbucket_: there is a known bug with 0.24.8 on EL4 where Ruby hangs
[2009/12/07 17:17:58] <mrbucket_> ah
[2009/12/07 17:18:00] <mrbucket_> there we go
[2009/12/07 17:18:11] <Djelibeybi> Working?
[2009/12/07 17:18:19] <mrbucket_> no, the bug explanation
[2009/12/07 17:18:30] <Djelibeybi> mrbucket_: Oh. Well, it requires a particular Puppet/Facter combination
[2009/12/07 17:18:40] <Djelibeybi> Essentially, Facter hangs, which causes Puppet to hang.
[2009/12/07 17:18:43] <mrbucket_> got a bug id?
[2009/12/07 17:18:47] <mrbucket_> or what vers?
[2009/12/07 17:18:55] <mrbucket_> facter 1.5.4 and puppet 0.24.8
[2009/12/07 17:18:58] <Djelibeybi> It was Facter 1.5.4 IIRC
[2009/12/07 17:18:59] <mrbucket_> is what im running
[2009/12/07 17:19:00] <mrbucket_> haha
[2009/12/07 17:19:01] <mrbucket_> zing
[2009/12/07 17:19:08] <Djelibeybi> Fixed in 1.5.5 and 1.5.6, AFAIK
[2009/12/07 17:19:18] <mrbucket_> now the question is can i find the rpms for those
[2009/12/07 17:19:40] <mrbucket_> why yes i can
[2009/12/07 17:19:44] <Djelibeybi> http://download.fedora.redhat.com/pub/epel/4/i386/repoview/facter.html
[2009/12/07 17:19:57] <Djelibeybi> 1.5.7 is already in EPEL. :)
[2009/12/07 17:20:03] <eventi> dlutter's repo?
[2009/12/07 17:20:38] <mrbucket_> thanks!
[2009/12/07 17:20:46] <Djelibeybi> eventi: no, the official EPEL repository. The RPMs are packaged by Todd Zollinger
[2009/12/07 17:21:06] <eventi> see - i'm old
[2009/12/07 17:21:16] <eventi> lol - I have epel too - that makes sense
[2009/12/07 17:25:06] <mrbucket_> hm
[2009/12/07 17:25:12] <mrbucket_> can i actaully replace facter with puppet
[2009/12/07 17:25:25] <mrbucket_> or will replacing that just
[2009/12/07 17:25:29] <mrbucket_> make shit all kinds of sad
[2009/12/07 17:25:50] <eventi> it'll get over it
[2009/12/07 17:25:55] <mrbucket_> neat
[2009/12/07 17:26:11] <eventi> you mean update puppet with puppet?
[2009/12/07 17:26:23] <Djelibeybi> mrbucket_: you can upgrade both facter and puppet with puppet. i do it all the time.
[2009/12/07 17:26:24] <mrbucket_> update facter with puppet
[2009/12/07 17:26:26] <mrbucket_> cool
[2009/12/07 17:26:31] <eventi> yep - do it
[2009/12/07 17:26:37] <Djelibeybi> But, in your case it's not helpful
[2009/12/07 17:26:39] <eventi> no problem at all
[2009/12/07 17:26:44] <Djelibeybi> If puppet doesn't run, it can't update facter. :)
[2009/12/07 17:26:51] <mrbucket_> well
[2009/12/07 17:26:54] <mrbucket_> i can manually invoke
[2009/12/07 17:26:56] <mrbucket_> puppetrun
[2009/12/07 17:27:01] <mrbucket_> its only 50 hosts
[2009/12/07 17:27:01] <mrbucket_> eh
[2009/12/07 17:27:06] <Djelibeybi> mrbucket_: manual invoke should work. Not sure about puppetrun
[2009/12/07 17:27:11] * Djelibeybi doesn't use puppetrun
[2009/12/07 17:31:55] @ bruce joined channel #puppet
[2009/12/07 17:35:53] @ Quit: docelic: "Leaving"
[2009/12/07 17:45:59] @ fwryan joined channel #puppet
[2009/12/07 17:46:51] @ Quit: bug:
[2009/12/07 17:46:54] <fwryan> Hi channel, quick question: does puppet support compiling software on individual puppet clients?
[2009/12/07 17:47:19] <fwryan> (I see a lot of references to things like apt, yum -- but I usually compile everything myself)
[2009/12/07 17:48:11] <KarlHungus> fwryan: on the server's themselves?
[2009/12/07 17:48:15] @ bug joined channel #puppet
[2009/12/07 17:48:27] <KarlHungus> fwryan: or on a build host?
[2009/12/07 17:48:52] @ ghostman joined channel #puppet
[2009/12/07 17:48:59] <Volcane> building from source = fail
[2009/12/07 17:49:19] <KarlHungus> i dunno. i find myself building things from source all the time
[2009/12/07 17:49:31] <KarlHungus> but i always write the build into a spec file and roll it into an rpm
[2009/12/07 17:49:37] <fwryan> preferably on the clients themself
[2009/12/07 17:49:38] <ghostman> naa, iditn
[2009/12/07 17:49:38] <KarlHungus> on my build host, using mock. =)
[2009/12/07 17:49:50] @ Quit: glaw: "Leaving."
[2009/12/07 17:49:51] <KarlHungus> fwryan: gcc on a server is a BAD THING
[2009/12/07 17:49:59] <Volcane> KarlHungus: yes, but packages onto actual machines, thats the only true way
[2009/12/07 17:50:06] <KarlHungus> Volcane: yup
[2009/12/07 17:50:10] <Volcane> everything else is non deterministic and rubbish for more than 1 machine
[2009/12/07 17:50:16] <ghostman> fuckyou
[2009/12/07 17:50:46] <nevyn> KarlHungus: meet oracle who I hate
[2009/12/07 17:50:50] <KarlHungus> fwryan: if you have the resources, try to set up a build server.
[2009/12/07 17:50:57] <nevyn> who require a full build environment on every system
[2009/12/07 17:51:00] <ghostman> OPH
[2009/12/07 17:51:02] <ghostman> ZHHHH5ÜHKẞ0OPPIOP4HQ
[2009/12/07 17:51:04] <ghostman> +34TGGGẞ45ÜOPZHKJMM46QHJMNPOIQ4TRJMGIOÜ321JO, ÜR3
[2009/12/07 17:51:04] <ghostman> Q
[2009/12/07 17:51:04] <Djelibeybi> nevyn: yes, we do suck that way
[2009/12/07 17:51:05] <ghostman> +34T+GK45666ZHUJMMMMM6OPP5ZKJM+ẞPU35W6
[2009/12/07 17:51:06] <ghostman> +34
[2009/12/07 17:51:07] <ghostman> TT42´5GÜKZUHẞÜ56KKHUJ45Q62ZGH45
[2009/12/07 17:51:08] <Volcane> sigh.
[2009/12/07 17:51:08] <ghostman> ẞKZU+0256UZH
[2009/12/07 17:51:10] <ghostman> 455ZHU
[2009/12/07 17:51:12] <ghostman> 56ẞIKUJ
[2009/12/07 17:51:13] <Djelibeybi> nevyn: if it makes you feel better, it drives me insane.
[2009/12/07 17:51:14] <ghostman> 5W645
[2009/12/07 17:51:16] <ghostman> 6KU3
[2009/12/07 17:51:18] <ghostman> ẞ6UIKJ
[2009/12/07 17:51:20] <ghostman> 5ẞ6UJK5267UIK
[2009/12/07 17:51:23] <Djelibeybi> Can someone kill/kick ghostman?
[2009/12/07 17:51:24] <nevyn> Djelibeybi: it makes me feel a little better.
[2009/12/07 17:51:24] <ghostman> 25ẞJ6UHHHH4QTGI9U4
[2009/12/07 17:51:26] <nevyn> !ops
[2009/12/07 17:51:26] <ghostman> ´+5UZLK0OP567KUJẞ563KUHẞ´Ü56
[2009/12/07 17:51:28] <ghostman> +U222ZIKKKKKK6IUJH0+562JZK´TG32+5
[2009/12/07 17:51:30] <ghostman> ´T45KPẞUUK33ZU
[2009/12/07 17:51:32] <ghostman> Z7UUUẞ07IKJUẞÜ245
[2009/12/07 17:51:33] <KarlHungus> fwryan: i'm certain you could configure puppet to handle the build process, but it will be ugly
[2009/12/07 17:51:34] <ghostman> QLTK45KOZ7UIK65UK356ẞ0UUUO5PKUOPH566UHJẞ5PKZOK5
[2009/12/07 17:51:36] <KarlHungus> just /ignore
[2009/12/07 17:51:36] <ghostman> +
[2009/12/07 17:51:38] <ghostman> 45H
[2009/12/07 17:51:40] <ghostman> GH
[2009/12/07 17:51:42] <ghostman> 4GH
[2009/12/07 17:51:44] <ghostman> 56H
[2009/12/07 17:51:46] <ghostman> 5Z6H
[2009/12/07 17:51:48] <ghostman> H5Z6
[2009/12/07 17:51:49] <nevyn> sigh
[2009/12/07 17:51:50] <ghostman> HZ
[2009/12/07 17:51:54] <nevyn> that shouldn't be nessicary
[2009/12/07 17:51:54] <Djelibeybi> nevyn: we have secure images for the bank, so we have to load the build stuff, install database and then remove the build stuff
[2009/12/07 17:51:54] <ghostman> ZHT
[2009/12/07 17:51:56] <ghostman> HZ
[2009/12/07 17:51:58] <ghostman> H5
[2009/12/07 17:51:59] @ Mode +o lak by ChanServ
[2009/12/07 17:52:00] <ghostman> H5
[2009/12/07 17:52:02] <ghostman> H
[2009/12/07 17:52:04] <ghostman> 5
[2009/12/07 17:52:04] @ ghostman has been kicked from #puppet by lak (lak)
[2009/12/07 17:52:08] <Djelibeybi> lak: thanks.
[2009/12/07 17:52:09] <nevyn> thanks luke
[2009/12/07 17:52:16] <lak> hmm
[2009/12/07 17:52:22] <lak> plathrop has ops, but i should give more out
[2009/12/07 17:52:49] * nevyn puts his hand up ;)
[2009/12/07 17:52:55] * KarlHungus would not want that
[2009/12/07 17:53:03] <z00dax> I guess spread it out based on $TZ
[2009/12/07 17:53:10] * lak always forgets the rules for giving out ops to other s:/
[2009/12/07 17:53:10] * Djelibeybi does not put his hand up. I don't need the temptation. :p
[2009/12/07 17:53:23] * lak was thinking Volcane to start
[2009/12/07 17:53:26] <nevyn> ok
[2009/12/07 17:53:27] <lak> then maybe someone in .au
[2009/12/07 17:53:33] <lak> i think jamesturnbull has it already
[2009/12/07 17:53:33] <nevyn> james?
[2009/12/07 17:53:36] <z00dax> lak: /msg chanserv access help
[2009/12/07 17:53:39] <lak> so with Volcane we'd have 24
[2009/12/07 17:53:42] <nevyn> hrm
[2009/12/07 17:53:46] <nevyn> that's more than enought
[2009/12/07 17:53:54] <nevyn> I thought you had like 3 or something ;)
[2009/12/07 17:54:01] <Djelibeybi> lak: I can do op duty if you want. I'm in the same timezone/city as jamesturnbull
[2009/12/07 17:54:21] <lak> nevyn: i meant, 24 hr coverage
[2009/12/07 17:55:52] <lak> Volcane: can you op yourself with chanserv now?
[2009/12/07 17:56:11] * Volcane tries to figure out how
[2009/12/07 17:56:26] @ Mode +o Volcane by ChanServ
[2009/12/07 17:56:31] <lak> there you go :)
[2009/12/07 17:56:32] <lak> sounds like a yes
[2009/12/07 17:56:43] <lak> ok, 7 ops total now
[2009/12/07 17:56:46] <nevyn> looks like a yes too.
[2009/12/07 17:57:00] <lak> should we have more?
[2009/12/07 17:57:08] @ Mode -o Volcane by Volcane
[2009/12/07 17:57:20] * Volcane 's forgotten all about irc commands
[2009/12/07 17:57:54] <nevyn> /kick user
[2009/12/07 17:57:58] @ Quit: p3rror: No route to host
[2009/12/07 17:58:00] <nevyn> /kickban user
[2009/12/07 17:58:07] <nevyn> should be all you need ;)
[2009/12/07 17:58:24] <jamesturnbull> Did I miss all the fun?
[2009/12/07 17:58:28] @ p3rror joined channel #puppet
[2009/12/07 17:58:38] <KarlHungus> is it possible to set an ignore for .svn in fileserver.conf?
[2009/12/07 17:58:51] @ Mode +o jamesturnbull by ChanServ
[2009/12/07 17:58:52] <nevyn> jamesturnbull: a spam bot in channel lead to a disucssion of ops for #puppet
[2009/12/07 17:59:12] <jamesturnbull> nevyn: ah
[2009/12/07 17:59:12] <nevyn> so Volcane is now an op
[2009/12/07 17:59:12] * jamesturnbull is now op'ed and dangerous
[2009/12/07 17:59:20] <jamesturnbull> nevyn: is that a good idea?
[2009/12/07 17:59:23] <jamesturnbull> Volcane: :P
[2009/12/07 17:59:25] <Djelibeybi> No ops for me!
[2009/12/07 17:59:29] <nevyn> heh
[2009/12/07 17:59:34] <lak> jamesturnbull shows up guns drawn after everyone's dead
[2009/12/07 17:59:38] <nevyn> heh
[2009/12/07 17:59:40] * Volcane 's patience might be too short :P
[2009/12/07 17:59:44] <nevyn> hrm
[2009/12/07 17:59:48] <Djelibeybi> lak: he tends to do that IRL as well. :)
[2009/12/07 17:59:59] <jamesturnbull> lak: best place to be
[2009/12/07 18:00:01] <Djelibeybi> lak: usually looking up from his Crackberry with a "Huh, wot?" expression.
[2009/12/07 18:00:07] <z00dax> btw, doing a mode +q is better than a kick, since that leaves the person in the channel, but blocks all text from them
[2009/12/07 18:00:09] <nevyn> so redhat decided that it's ok for /usr/sbin/cman_tool to rely on PATH having sbin in it...
[2009/12/07 18:00:19] <mrbucket_> hmm. so i want to have puppet restart after facter is updated. ideas?
[2009/12/07 18:00:28] <nevyn> well s/redhat/cman_tool/ maintainers
[2009/12/07 18:00:28] <mrbucket_> im trying to think of some sort of subscribe => line
[2009/12/07 18:00:28] <Volcane> too many years or having an H lined perl bot on another network that can do all my dirty work
[2009/12/07 18:00:31] <Djelibeybi> mrbucket_: create a service {} type for Puppet and notify it
[2009/12/07 18:00:34] <mrbucket_> ah k
[2009/12/07 18:00:34] <nevyn> mrbucket_: subscribe it to the service?
[2009/12/07 18:00:36] <jamesturnbull> lak: did you think there was another approach? I'd have taken off and nuked the OK Corral from orbit
[2009/12/07 18:00:37] <Volcane> z00dax: why would we want a spammer here?
[2009/12/07 18:00:53] <jamesturnbull> lak: it'd be the only way to be sure :)
[2009/12/07 18:00:53] <mrbucket_> dur. thanks.
[2009/12/07 18:00:59] <z00dax> Volcane: in many cases, its not really a spammer, its like a paste gone wrong :)
[2009/12/07 18:01:14] <Volcane> z00dax: not when it starts with 'fuckyou' as in this case :)
[2009/12/07 18:01:19] <nevyn> z00dax: or a bot that uses irc for cmmand and control
[2009/12/07 18:01:19] <z00dax> but yea, if its a spammer - report to freenode staff to kline accordingly
[2009/12/07 18:01:39] <z00dax> Volcane: right :)
[2009/12/07 18:01:40] * jamesturnbull is off to a meeting
[2009/12/07 18:01:46] <nevyn> hrm meetings
[2009/12/07 18:01:52] <nevyn> vampires of time and will to live
[2009/12/07 18:01:53] * Volcane should pack
[2009/12/07 18:02:02] @ Quit: leanucci: Remote closed the connection
[2009/12/07 18:02:04] <Volcane> not found any puppeters in ams other than the once i know
[2009/12/07 18:02:13] <z00dax> 'ams' ?
[2009/12/07 18:02:18] <Volcane> amsterdam
[2009/12/07 18:02:24] @ leanucci joined channel #puppet
[2009/12/07 18:02:35] <kjetilho> z00dax: pft, don't you know all the world's airport by their abbreviation?
[2009/12/07 18:02:49] <kjetilho> *airports
[2009/12/07 18:03:03] <kjetilho> (not meaning to sound too arrogant on Schipol's behalf)
[2009/12/07 18:03:21] @ verwilst_ joined channel #puppet
[2009/12/07 18:07:17] <z00dax> amsterdam has an airport ?
[2009/12/07 18:10:11] <RomainK> I thought all it had were idiot tourists that wanna smoke weed?
[2009/12/07 18:10:36] * Volcane doesnt like amsterdam at all
[2009/12/07 18:11:49] * lak also thinks in airport codes
[2009/12/07 18:13:32] <hggh> z00dax: yes amsterdam has got an airport. imho the biggest one at .eu
[2009/12/07 18:14:05] <z00dax> :)
[2009/12/07 18:14:09] <Volcane> its 5th alrgest
[2009/12/07 18:14:44] <RomainK> yeah, let's talk in airport codes and country tlds..
[2009/12/07 18:14:45] <hggh> Volcane: use `sort` for alrgest ;)
[2009/12/07 18:15:06] <z00dax> the question really is - do they manage using puppet ?
[2009/12/07 18:15:55] <Volcane> time for call of duty then bed
[2009/12/07 18:16:06] <z00dax> ooh.. mw2 ?
[2009/12/07 18:16:15] <Volcane> nods
[2009/12/07 18:16:21] <z00dax> on the ps3 ?
[2009/12/07 18:16:25] <Volcane> xboxen
[2009/12/07 18:16:31] <RomainK> TRAITOR!
[2009/12/07 18:16:34] <Volcane> i dont have any sony crap
[2009/12/07 18:16:35] <z00dax> humm.. but i can run puppet on the ps3!
[2009/12/07 18:16:58] <Volcane> my lst remaining bit of sony was stolen a few weeks ago out of my garage wooh
[2009/12/07 18:20:57] @ Quit: leanucci: Read error: 110 (Connection timed out)
[2009/12/07 18:24:04] <joe-mac> how do you look up vars in a template?
[2009/12/07 18:24:11] <joe-mac> normally ij ust use them but it isn't working here
[2009/12/07 18:24:12] <joe-mac> lookupvar?
[2009/12/07 18:28:43] @ Quit: rmiller4pi8: Read error: 60 (Operation timed out)
[2009/12/07 18:29:01] @ Quit: jab_doa: "Verlassend"
[2009/12/07 18:29:16] @ Quit: gpled: "Ex-Chat"
[2009/12/07 18:30:08] @ Quit: kaptk2: "Leaving."
[2009/12/07 18:30:08] <nevyn> hrm
[2009/12/07 18:30:19] <himanshu> i am getting following error message when trying to install some package: change from notrun to 0 failed: cd /opt/mod_cband-0.9.7.5; ./configure --with-python=python2.6 && make && make install returned 1 instead of 0
[2009/12/07 18:30:25] <himanshu> not sure why :(
[2009/12/07 18:31:07] <himanshu> I can sucessfully execute above commands from terminal on puppet client
[2009/12/07 18:31:27] <kjetilho> and you checked $? afterwards?
[2009/12/07 18:31:45] <himanshu> yes it returns 0 but when I execute from puppet it fails
[2009/12/07 18:32:01] <kjetilho> could be lots of stuff. environment, for instance
[2009/12/07 18:32:22] @ illsci joined channel #puppet
[2009/12/07 18:32:34] <kjetilho> is $PATH the same, is the user the same, are the groups the same
[2009/12/07 18:32:38] <z00dax> doing a make install from puppet.... damn
[2009/12/07 18:32:55] <z00dax> what OS / distro is that ? does it not have some form of a managed package payload mechanism
[2009/12/07 18:32:55] <himanshu> is there is anything wrong in doing make install from puppet?
[2009/12/07 18:33:03] <himanshu> centos 5.3
[2009/12/07 18:33:20] @ ezmobius joined channel #puppet
[2009/12/07 18:33:27] <himanshu> I am trying to install customized apache module
[2009/12/07 18:33:32] <Djelibeybi> himanshu: you should be using an RPM package
[2009/12/07 18:33:38] <nevyn> himanshu: build a package.
[2009/12/07 18:33:47] <nevyn> Djelibeybi: you don't get to talk.
[2009/12/07 18:33:50] <nevyn> srsly
[2009/12/07 18:34:00] <Djelibeybi> nevyn: why not? I'm not in the Database team. :)
[2009/12/07 18:34:05] <nevyn> heh
[2009/12/07 18:34:07] <Djelibeybi> nevyn: my stuff *is* packaged. :p
[2009/12/07 18:34:14] <himanshu> you mean to say I cannot use make install?
[2009/12/07 18:34:21] <Djelibeybi> (It also shits me that Oracle XE ships as an RPM but nothing else does)
[2009/12/07 18:34:21] <z00dax> i wonder how on-topic it is here to talk about generic sysadmin practises etc not always around puppet
[2009/12/07 18:34:29] <nevyn> himanshu: just that you shouldn't ;)
[2009/12/07 18:34:30] <grim_radical> himanshu: you *can*...but you shouldn't
[2009/12/07 18:34:34] <Djelibeybi> himanshu: it's not that you can't, it's just that it's much harder to troubleshoot
[2009/12/07 18:34:55] <Djelibeybi> himanshu: I usually create a script that does the compiling and run that instead, so at least I can log output
[2009/12/07 18:35:17] <z00dax> Djelibeybi: exec can log stuff too :)
[2009/12/07 18:35:30] <himanshu> where I can see exec logs?
[2009/12/07 18:35:32] <Djelibeybi> z00dax: sure, I know .. but I'm installing Oracle products that are stupid.
[2009/12/07 18:35:48] <Djelibeybi> z00dax: so I create small installation scripts that write logs out as I need them
[2009/12/07 18:35:51] <z00dax> Djelibeybi: joy. Do you need to accept the license terms as well :)
[2009/12/07 18:36:10] <Djelibeybi> z00dax: no. :) We don't actually prompt for license acceptance during a silent install
[2009/12/07 18:36:24] <Djelibeybi> Oracle has no copy protection/license protection in any products.
[2009/12/07 18:36:25] @ Quit: shine: Read error: 113 (No route to host)
[2009/12/07 18:36:33] <Djelibeybi> We just have Oracle Auditing. Dun dun dun!
[2009/12/07 18:36:42] * z00dax has a few spec files that accept licenses during rpmbuild!
[2009/12/07 18:37:16] <Djelibeybi> Nifty
[2009/12/07 18:37:29] <z00dax> also, i should go do some glibc poking around. and then sleep. be back tom
[2009/12/07 18:37:34] <nevyn> oracle auditing...
[2009/12/07 18:40:04] <whack> odd 'duplicate definition' report: http://pastebin.com/m3d12f6d0 - claims I'm duplicating the definition defined on the same line.
[2009/12/07 18:40:34] <nevyn> we're apparently being audited.
[2009/12/07 18:41:04] <Djelibeybi> whack: do you have a File{} inside a define?
[2009/12/07 18:41:04] <whack> aah, I see, the line number is just the file { } block.
[2009/12/07 18:41:16] <Djelibeybi> If so, when it gets called the 2nd time, it become a duplicate of itself
[2009/12/07 18:42:31] @ Quit: tripoux: Read error: 110 (Connection timed out)
[2009/12/07 18:45:11] @ bevans5446_ joined channel #puppet
[2009/12/07 18:46:17] @ Quit: bevans5446: Read error: 60 (Operation timed out)
[2009/12/07 18:46:17] @ bevans5446_ is now known as bevans5446
[2009/12/07 18:57:08] @ jcape joined channel #puppet
[2009/12/07 18:57:58] @ Quit: bobbyz_: Read error: 110 (Connection timed out)
[2009/12/07 19:03:43] @ Quit: fwryan: "Page closed"
[2009/12/07 19:13:33] @ PaulWay[w] joined channel #puppet
[2009/12/07 19:13:51] @ poison joined channel #puppet
[2009/12/07 19:21:33] @ Quit: notbrien:
[2009/12/07 19:21:49] @ Quit: Mick27: "This computer has gone to sleep"
[2009/12/07 19:22:04] <ashp> well, i feel so stupid
[2009/12/07 19:22:09] <ashp> my nagios issue had a simple cause
[2009/12/07 19:22:21] <ashp> something that worked in 0.24 but not in 0.25, the actual nagios_cfg directory had a purge => true, on it
[2009/12/07 19:22:37] @ labrown joined channel #puppet
[2009/12/07 19:22:47] @ Quit: labrown: Client Quit
[2009/12/07 19:26:52] @ Quit: poison: Remote closed the connection
[2009/12/07 19:29:32] @ odyi_ is now known as odyi
[2009/12/07 19:43:43] @ OpenMedia joined channel #puppet
[2009/12/07 19:47:57] @ jmarki joined channel #puppet
[2009/12/07 19:49:44] @ Quit: jcape: Read error: 110 (Connection timed out)
[2009/12/07 19:51:16] @ Quit: verwilst_: "Ex-Chat"
[2009/12/07 19:51:41] @ Quit: ezmobius: Remote closed the connection
[2009/12/07 19:56:51] @ Quit: p3rror: "أستودعكم الله"
[2009/12/07 19:57:11] @ blahdeblah joined channel #puppet
[2009/12/07 20:03:35] @ Quit: brothers:
[2009/12/07 20:09:37] @ PsychoSid joined channel #puppet
[2009/12/07 20:12:00] @ Quit: PsychoSid: Client Quit
[2009/12/07 20:18:11] @ Quit: lak:
[2009/12/07 20:36:11] @ Quit: bruce:
[2009/12/07 20:45:07] @ plathrop is now known as plathrop-away
[2009/12/07 20:45:28] @ elijahwright joined channel #puppet
[2009/12/07 20:47:47] @ plathrop-away is now known as plathrop
[2009/12/07 20:50:07] @ plathrop is now known as plathrop-away
[2009/12/07 20:52:24] @ WALoeIII joined channel #puppet
[2009/12/07 20:56:52] <wakko666> when referencing differently scoped variables (e.g. $foo::bar), is it possible to have a part of the variable name expanded via another variable? (e.g. $${baz}::bar expands to $foo::bar)
[2009/12/07 21:00:07] @ plathrop-away is now known as plathrop
[2009/12/07 21:01:07] @ plathrop is now known as plathrop-away
[2009/12/07 21:01:17] @ plathrop-away is now known as plathrop
[2009/12/07 21:01:57] @ plathrop is now known as plathrop-away
[2009/12/07 21:02:07] @ plathrop-away is now known as plathrop
[2009/12/07 21:02:38] @ Quit: plathrop: "leaving"
[2009/12/07 21:03:08] @ plathrop joined channel #puppet
[2009/12/07 21:03:54] @ Quit: WALoeIII:
[2009/12/07 21:03:56] @ plathrop is now known as plathrop-away
[2009/12/07 21:04:05] <kjetilho> wakko666: as always, you can do it via inline_template
[2009/12/07 21:05:05] <wakko666> kjetilho: not sure i understand. can you elaborate?
[2009/12/07 21:05:06] @ plathrop-away is now known as plathrop
[2009/12/07 21:05:36] @ plathrop is now known as plathrop-away
[2009/12/07 21:06:12] <kjetilho> use the scope lookup function
[2009/12/07 21:06:14] <Djelibeybi> ashp: at least you found it. :)
[2009/12/07 21:06:26] <kjetilho> bedtime for me
[2009/12/07 21:07:02] <wakko666> kjetilho: you're not exactly giving me much to go on. what's the scope lookup function?
[2009/12/07 21:09:24] <wakko666> ah... found it. nope, that won't work for me. i'm not doing this in a template.
[2009/12/07 21:10:02] <ashp> Djelibeybi: it's weird as purge => true on the dir shouldn't purge nagios generated files
[2009/12/07 21:10:14] <ashp> but i guess it checks the purge before building up a list of stuff puppet generates?
[2009/12/07 21:10:39] <Djelibeybi> ashp: it'll purge whatever it finds, I suspect.
[2009/12/07 21:10:49] @ Quit: jmarki: Read error: 131 (Connection reset by peer)
[2009/12/07 21:11:06] <Djelibeybi> ashp: I'm not sure there is a control that's mutually exclusive, unless there is a require on the purge *before* you create the nagios stuff, but even then I suspect it'd delete everything and recreate on every run
[2009/12/07 21:11:22] <ashp> Djelibeybi: I thought the idea was it only purged files that 'don't belong' via other file{} statements?
[2009/12/07 21:11:38] <ashp> if it had purged then recreated in the same run it wouldn't be so bad
[2009/12/07 21:11:41] <ashp> but it purged then gave up :)
[2009/12/07 21:11:42] <Djelibeybi> ashp: I don't know, to be honest. I don't use the purge option
[2009/12/07 21:12:20] <ashp> i removed it and it stopped breaking nagios so i'm happy, i can get on with real work tomorrow :)
[2009/12/07 21:18:26] @ alexine_dsouza joined channel #puppet
[2009/12/07 21:30:22] <ohadlevy> leanucci:pong
[2009/12/07 21:30:55] @ WALoeIII joined channel #puppet
[2009/12/07 21:34:46] @ Quit: elijahwright: Read error: 110 (Connection timed out)
[2009/12/07 21:41:47] @ blahdeblah left channel #puppet ()
[2009/12/07 21:42:20] <nevyn> so does anyone else have massive problems getting a workable structure for their modules and puppet code?
[2009/12/07 21:42:40] <nevyn> like just getting the classes to line up properly so you have a place to put stuff.
[2009/12/07 21:42:46] <ohadlevy> nevyn: that was one of the more complicated things I had to work on when using puppet
[2009/12/07 21:43:17] <nevyn> like don't get me wrong.. puppet's awesome. and modules help a lot
[2009/12/07 21:43:26] <ohadlevy> nevy: but I now the structure is stable (for 1.5 years or so)
[2009/12/07 21:43:33] <nevyn> but some sort of suggested class layout might be useful.
[2009/12/07 21:43:51] <nevyn> ohadlevy: the structure for your site?
[2009/12/07 21:43:55] <ohadlevy> hmm.. I've posted my repo layout in one of my presentations if you are intersted
[2009/12/07 21:44:51] <nevyn> the problem I have is I occasionally paint myself into a corner
[2009/12/07 21:45:06] <nevyn> where things need significnat re-structureing to move forward
[2009/12/07 21:47:37] <ohadlevy> nevyn: examples?
[2009/12/07 21:49:42] <nevyn> mostly this is my own shortsighteness.
[2009/12/07 21:50:04] <nevyn> where I've puppetised systems for Service A on Solaris
[2009/12/07 21:50:25] <nevyn> and then migrated the service and discovered that I've tied Service stuff to OS stuff wrongly
[2009/12/07 21:50:43] <nevyn> s/wrongly/incorrectly/g
[2009/12/07 21:52:02] <nevyn> but some sort of class framework with slots for platform specific stuff. multiplatform infrastructure and service specific stuff is what I'm thinking
[2009/12/07 21:52:56] <nevyn> not to mention management of puppet code.
[2009/12/07 21:53:06] <nevyn> like releases.
[2009/12/07 21:53:18] <ohadlevy> nevyn: we do that
[2009/12/07 21:53:33] <nevyn> sorry I'm rambling somewhat
[2009/12/07 21:53:56] <nevyn> ohadlevy: you have a framework or you paint yourself into a corner sometimes?
[2009/12/07 21:54:06] <nevyn> the problem is.
[2009/12/07 21:54:19] @ Quit: jaredrhine: Read error: 113 (No route to host)
[2009/12/07 21:54:31] <nevyn> We did a puppet pilot for a project which was a great success... and got the required buy in to go further.
[2009/12/07 21:55:24] <nevyn> and while we did follow the repository layout as proposed by stanford?
[2009/12/07 21:55:26] <Djelibeybi> nevyn: I just factor/refactor as I go. Sometimes you have to back out and re-work, but as you get better, you'll find yourself doing that less and less.
[2009/12/07 21:55:32] <nevyn> we've still got a crufty code base.
[2009/12/07 21:55:46] <nevyn> Djelibeybi: how do you integrate that with a formal release process.
[2009/12/07 21:55:54] <nevyn> and how do you regression test it
[2009/12/07 21:56:04] <Djelibeybi> nevyn: we use svn tags to flag a release candidate
[2009/12/07 21:56:12] <Djelibeybi> nevyn: which then goes into the test labs
[2009/12/07 21:56:21] <Djelibeybi> nevyn: once it's been signed off, the tag is branched to pre-production/production
[2009/12/07 21:56:24] <nevyn> yeah you get to have a test lab.
[2009/12/07 21:56:36] <nevyn> management have decided we don't need a build/test lab anymore
[2009/12/07 21:56:38] <Djelibeybi> nevyn: our test lab is fully virtual, though. :) it's basically a single machine that runs 20 VMs
[2009/12/07 21:57:05] * ohadlevy release each module (e.g. version tag etc), and use manitest to regression test it
[2009/12/07 21:57:13] <nevyn> hrm
[2009/12/07 21:57:18] @ jfreeman joined channel #puppet
[2009/12/07 21:57:20] <Djelibeybi> nevyn: essentially, releases include both new modules as well as some amount of clean-up of old stuff (as necessary)
[2009/12/07 21:57:28] <nevyn> hrm
[2009/12/07 21:57:40] <Djelibeybi> nevyn: we continually clean up stuff in development so that it rolls into pre-prod/prod with new releases.
[2009/12/07 21:57:42] <ohadlevy> and the thing that I test at the end of the day is a combination of modules in a specific environment
[2009/12/07 21:57:59] <nevyn> ohadlevy: how do you ensure adequate coverage?
[2009/12/07 21:58:10] <ohadlevy> for what?
[2009/12/07 22:03:03] @ Quit: nigelk:
[2009/12/07 22:13:54] <nevyn> ohadlevy: 13:54 < ohadlevy> and the thing that I test at the end of the day is a combination of modules in a specific environment
[2009/12/07 22:14:12] <nevyn> how do you ensure you've exercised all your resources
[2009/12/07 22:14:49] <ohadlevy> with manitest
[2009/12/07 22:21:39] @ pinoyskull joined channel #puppet
[2009/12/07 22:24:18] @ M- joined channel #puppet
[2009/12/07 22:33:13] @ jaredrhine joined channel #puppet
[2009/12/07 22:38:22] @ Quit: WALoeIII:
[2009/12/07 22:38:58] @ Quit: ambroff: Read error: 110 (Connection timed out)
[2009/12/07 22:39:20] @ Quit: ricky: Client Quit
[2009/12/07 22:40:24] @ Lincesilenciosa joined channel #puppet
[2009/12/07 22:40:39] <Lincesilenciosa> :)
[2009/12/07 22:41:10] @ Quit: maxagaz: "Ex-Chat"
[2009/12/07 22:41:34] @ Lincesilenciosa left channel #puppet ()
[2009/12/07 22:45:57] @ Quit: Maliuta: Remote closed the connection
[2009/12/07 22:46:56] @ Quit: jfreeman: Remote closed the connection
[2009/12/07 22:58:42] @ Quit: bug:
[2009/12/07 23:01:46] @ bug joined channel #puppet
[2009/12/07 23:02:45] @ Quit: bug: Client Quit
[2009/12/07 23:03:13] @ jfreeman joined channel #puppet
[2009/12/07 23:07:04] @ happymcplaksin joined channel #puppet
[2009/12/07 23:08:54] @ bug joined channel #puppet
[2009/12/07 23:09:13] @ maxagaz joined channel #puppet
[2009/12/07 23:09:23] @ Quit: bug: Client Quit
[2009/12/07 23:21:31] @ Quit: jfreeman: Remote closed the connection
[2009/12/07 23:28:33] @ jfreeman joined channel #puppet
[2009/12/07 23:31:14] @ bug joined channel #puppet
[2009/12/07 23:34:26] @ Quit: bug: Client Quit
[2009/12/07 23:45:24] @ bearnard joined channel #puppet
[2009/12/07 23:53:49] @ Quit: jfreeman: Read error: 104 (Connection reset by peer)

Generated by irclog2html.py 2.8 by Marius Gedminas - find it at mg.pov.lt!