| [2010/07/22 00:00:20] @ Log started by gepetto | ||
| [2010/07/22 00:00:20] @ Quit: ckauhaus: Read error: Operation timed out | ||
| [2010/07/22 00:02:27] @ lkoranda joined channel #puppet | ||
| [2010/07/22 00:04:59] @ Quit: fbe: Ping timeout: 264 seconds | ||
| [2010/07/22 00:12:52] @ MattyM joined channel #puppet | ||
| [2010/07/22 00:31:36] <sejo> does puppet-dashboard support hashes? | ||
| [2010/07/22 00:39:11] @ vinci is now known as vincib | ||
| [2010/07/22 00:39:23] @ vincib is now known as vinci | ||
| [2010/07/22 00:48:27] @ Quit: jmeeuwen: Ping timeout: 276 seconds | ||
| [2010/07/22 00:48:58] <zipkid> sejo: NO | ||
| [2010/07/22 00:49:43] <zipkid> sejo: http://projects.puppetlabs.com/issues/3534 | ||
| [2010/07/22 00:50:26] @ Quit: kolla: Remote host closed the connection | ||
| [2010/07/22 00:54:22] <sejo> lol next time I'll search on your nickname before even asking :p | ||
| [2010/07/22 00:57:38] <bigon> haha | ||
| [2010/07/22 01:01:59] <zipkid> ah, hashes.... | ||
| [2010/07/22 01:02:25] <zipkid> anyway, if it does not support arrays, why would it support hashes.... | ||
| [2010/07/22 01:04:08] @ Quit: gniks: Quit: Leaving. | ||
| [2010/07/22 01:04:49] <sejo> zipkid: idd | ||
| [2010/07/22 01:05:18] <sejo> it just returns it as a string at this time (as far as my tests go) | ||
| [2010/07/22 01:08:07] <zipkid> it just returns everything as a string, so if you put " key1 => val1, key2 => val2 " in dashboard you could use 2 splits in a loop to create your hash..... | ||
| [2010/07/22 01:08:23] <zipkid> just as i do with the split now to create my arrays... | ||
| [2010/07/22 01:10:06] @ kolla joined channel #puppet | ||
| [2010/07/22 01:14:12] @ Quit: kolla: Remote host closed the connection | ||
| [2010/07/22 01:15:25] @ Quit: yakub: Quit: leaving | ||
| [2010/07/22 01:16:12] @ kolla joined channel #puppet | ||
| [2010/07/22 01:16:31] @ spawnyd joined channel #puppet | ||
| [2010/07/22 01:25:48] @ Quit: kolla: Remote host closed the connection | ||
| [2010/07/22 01:27:20] @ benoit__ joined channel #puppet | ||
| [2010/07/22 01:27:56] @ verwilst joined channel #puppet | ||
| [2010/07/22 01:28:27] @ pctony left channel #puppet () | ||
| [2010/07/22 01:28:56] @ progre55 joined channel #puppet | ||
| [2010/07/22 01:32:13] <progre55> hi guys, I've installed the puppet from a tarball.. but now how can I uninstall/remove it? cause I've decided to install the one from the repos.. | ||
| [2010/07/22 01:33:42] @ kolla joined channel #puppet | ||
| [2010/07/22 01:35:05] @ TREllis joined channel #puppet | ||
| [2010/07/22 01:37:03] @ itguru joined channel #puppet | ||
| [2010/07/22 01:37:04] @ Quit: itguru: Changing host | ||
| [2010/07/22 01:37:04] @ itguru joined channel #puppet | ||
| [2010/07/22 01:37:23] @ Quit: n0ts: Ping timeout: 264 seconds | ||
| [2010/07/22 01:37:35] @ dbruce joined channel #puppet | ||
| [2010/07/22 01:39:13] <fenris02> tar tf file.tar.gz -- will provide you a list of the filenames | ||
| [2010/07/22 01:39:43] @ Quit: TREllis: Ping timeout: 240 seconds | ||
| [2010/07/22 01:43:59] * Volcane remembers telling progre55 not to use the tarball cos he will hate it when he needs to upgrade | ||
| [2010/07/22 01:45:17] <fenris02> ouch | ||
| [2010/07/22 01:45:25] @ n0ts joined channel #puppet | ||
| [2010/07/22 01:49:34] <zipkid> Volcane: LOL | ||
| [2010/07/22 01:50:18] <progre55> haha )) | ||
| [2010/07/22 01:50:22] <progre55> thanks guys | ||
| [2010/07/22 01:51:25] <progre55> Volcane: but I have jaunty, and the jaunty repos dont have the new puppet versions.. how can I at least install 0.25? | ||
| [2010/07/22 01:51:53] <Volcane> and i said get the one from debian backports into your own repo | ||
| [2010/07/22 01:51:59] <Volcane> and you went round and round in circles | ||
| [2010/07/22 01:52:09] <masterzen> progre55: you can grab the debian squeeze package | ||
| [2010/07/22 01:52:25] @ Quit: spawnyd: Ping timeout: 276 seconds | ||
| [2010/07/22 01:53:12] <barn> Umbongo is just debian-unstable-and-wild | ||
| [2010/07/22 01:53:33] <barn> (well, -testing, but from a debian point of view, that's CRAZY!) | ||
| [2010/07/22 01:54:01] <progre55> Volcane: how to add lucid repos to jaunty as backports? | ||
| [2010/07/22 01:54:22] <progre55> masterzen: would that work for jaunty? let me try to look for it.. | ||
| [2010/07/22 01:54:39] @ andrewh joined channel #puppet | ||
| [2010/07/22 01:54:46] <barn> progre55: man 5 sources.list | ||
| [2010/07/22 01:55:14] <masterzen> progre55: I don't know, I'm no ubuntu user. But I know the debian squeeze or sid puppet packages can be backported (or even used directly) easily on lenny. | ||
| [2010/07/22 01:55:17] <progre55> barn: thanks ) | ||
| [2010/07/22 01:56:27] <barn> progre55: is there anything in the depends section that jaunty doesn't have? http://packages.ubuntu.com/lucid/puppet | ||
| [2010/07/22 01:57:24] <progre55> let me have a look | ||
| [2010/07/22 01:57:29] @ elementai joined channel #puppet | ||
| [2010/07/22 01:58:17] <QuackNL> I see that puppet 2.6 gives back exit codes now. Does that also work with the --noop flag? We don't run puppet on a regular basis, and I want to see if there are changes waiting for a server with a nagios check. | ||
| [2010/07/22 01:59:23] @ Quit: docelic: Ping timeout: 260 seconds | ||
| [2010/07/22 02:00:10] <progre55> barn: there is just one package that jaunty doesnt have.. puppet-common :) | ||
| [2010/07/22 02:00:28] <progre55> barn: so I can install the lucid puppet? | ||
| [2010/07/22 02:01:11] <barn> looks that way! | ||
| [2010/07/22 02:01:42] <barn> you can either do it the quick way and just download the .debs from there and dpkg -i them | ||
| [2010/07/22 02:02:03] <barn> or put them in a repo of your own, or add that repo and just pin puppet to it | ||
| [2010/07/22 02:02:23] @ alcy joined channel #puppet | ||
| [2010/07/22 02:04:18] <elementai> Hi, quick question, I've failed to find answers in google. For example I have an Exec type that should only run on Debian. I have $operatingsystem ? { Debian: "/do/smth", } | ||
| [2010/07/22 02:04:27] <progre55> barn: thanks man, appreciate. I think I'll just download the .deb files | ||
| [2010/07/22 02:04:29] <elementai> But what should I write in default: ? | ||
| [2010/07/22 02:04:48] @ Quit: cristim: Ping timeout: 240 seconds | ||
| [2010/07/22 02:06:00] <alcy> I forgot if there can be multiple require statements in a particular type ? like is this ok: service{"xyz":require=>Package[abc],require=>file[def],} ...not sure but could this throw an error like can't have multiple require | ||
| [2010/07/22 02:06:18] <zipkid> elementai: just skip the default: | ||
| [2010/07/22 02:06:24] <zipkid> or do default: {} | ||
| [2010/07/22 02:07:56] @ ckauhaus joined channel #puppet | ||
| [2010/07/22 02:09:30] <fenris02> require => [ Package['abc'], File['cde'], .... ] | ||
| [2010/07/22 02:09:32] <fenris02> works. | ||
| [2010/07/22 02:10:03] <alcy> fenris02: cool, thanks | ||
| [2010/07/22 02:10:10] @ cristim joined channel #puppet | ||
| [2010/07/22 02:11:27] @ Quit: Djelibeybi: Quit: Leaving | ||
| [2010/07/22 02:13:31] @ docelic joined channel #puppet | ||
| [2010/07/22 02:14:30] <progre55> awesome, now I have puppet 0.25.5 =) | ||
| [2010/07/22 02:14:34] <progre55> barn: thanks man | ||
| [2010/07/22 02:15:05] <fenris02> 2.6.0 was released two days ago with spiffy new features :) | ||
| [2010/07/22 02:15:33] <progre55> fenris02: but I'm installing it on a server.. and I wouldnt like to risk with a non-stable puppet ) | ||
| [2010/07/22 02:27:11] <zipkid> progre55: the release is supposed to be stable... | ||
| [2010/07/22 02:27:26] <zipkid> and we all run puppet on 'a server' ... :-) | ||
| [2010/07/22 02:27:45] <barn> zipkid: great, now I'm thinking if I can run it on my phone | ||
| [2010/07/22 02:28:20] <zipkid> barn: it does take som men ... if your recepies are tiny you should though! | ||
| [2010/07/22 02:28:44] <zipkid> s/men/mem/ | ||
| [2010/07/22 02:29:17] <tim|mac> phones just need more ram | ||
| [2010/07/22 02:29:24] <tim|mac> and better ruby support | ||
| [2010/07/22 02:29:34] <tim|mac> although android is doing that fairly well | ||
| [2010/07/22 02:29:52] @ itguru left channel #puppet ("http://quassel-irc.org - Chat comfortably. Anywhere.") | ||
| [2010/07/22 02:29:53] * progre55 thinking to upgrade already.. :) | ||
| [2010/07/22 02:29:58] <zipkid> For the time being, i'll just run it on my netbook | ||
| [2010/07/22 02:32:12] <progre55> I'm trying to connect to puppetmaster from a client, and getting this "err: Could not request certificate: undefined method `closed?' for nil:NilClass" any suggestions, please? | ||
| [2010/07/22 02:37:21] <Hilli> progre55: Can it resolve the hostname of your master? | ||
| [2010/07/22 02:37:38] <progre55> oh, sec | ||
| [2010/07/22 02:39:03] <progre55> Hilli: oh, it can ping the hostname, but cannot access the port, as it's firewalled =) totally forgot about that.. I'll probably tunnel the port over 22 | ||
| [2010/07/22 02:40:15] <elementai> zipkid: Omitting "default =>" or putting "default => {}" aren't right either. | ||
| [2010/07/22 02:40:42] <progre55> Hilli: yeah, tunneling works. thanks for the tip =) | ||
| [2010/07/22 02:40:56] <Hilli> progre55: No worries :) | ||
| [2010/07/22 02:41:21] <elementai> zipkid: Exec tries to execute "" command or says No matching value for selector param 'RedHat' , for example. | ||
| [2010/07/22 02:45:11] @ TREllis joined channel #puppet | ||
| [2010/07/22 02:45:45] <progre55> and now I'm getting this error "err: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': undefined method `closed?' for nil:NilClass" | ||
| [2010/07/22 02:47:08] <elementai> zipkid: Did it with "if $operatingsystem == "Blah" , seems that'll be easier. | ||
| [2010/07/22 02:47:26] @ spawnyd joined channel #puppet | ||
| [2010/07/22 02:51:39] @ Quit: rcrowley: Quit: rcrowley | ||
| [2010/07/22 02:52:18] @ devdas joined channel #puppet | ||
| [2010/07/22 02:57:24] @ tim__ joined channel #puppet | ||
| [2010/07/22 02:57:35] <tim__> hi | ||
| [2010/07/22 02:57:52] <tim__> is it possible to put a conditional inside a service resource? | ||
| [2010/07/22 02:58:17] <masterzen> tim__: only a selector | ||
| [2010/07/22 02:58:54] <alcy> can someone have a look at this : http://pastie.org/1055047 ? scroll to the bottom and you'll see what I mean. basically, I don't know what else needs to be done to ensure the run is successful the first time itself. | ||
| [2010/07/22 02:59:11] <tim__> hmm, I have a problem where stopping the auditd service on RHEL4 machines results in an error (non-zero reutnr) | ||
| [2010/07/22 02:59:19] <tim__> so I only want to try to stop it on rhel5 | ||
| [2010/07/22 02:59:27] <tim__> and just disable it on rhel4 | ||
| [2010/07/22 02:59:41] <tim|mac> tim__: do it from within an if? | ||
| [2010/07/22 03:00:15] <tim__> ok, I'll try that, thanks | ||
| [2010/07/22 03:00:28] <progre55> is it a common bug or am I the only loser facing it? =) http://pastie.org/1055049 it says undefined method `closed?' for nil:NilClass | ||
| [2010/07/22 03:00:35] @ yure joined channel #puppet | ||
| [2010/07/22 03:03:03] @ bobinabottle joined channel #puppet | ||
| [2010/07/22 03:03:18] <masterzen> progre55: what version do you use? It's a known issue with ruby 1.8.7 if I remember correctly | ||
| [2010/07/22 03:03:29] @ suit joined channel #puppet | ||
| [2010/07/22 03:03:34] <masterzen> progre55: that was fixed in 0.25.4 or 0.25.5 (can't remember) | ||
| [2010/07/22 03:04:17] @ jmeeuwen joined channel #puppet | ||
| [2010/07/22 03:04:24] <progre55> masterzen: using 0.25.4 | ||
| [2010/07/22 03:04:41] @ evilgeenius joined channel #puppet | ||
| [2010/07/22 03:05:30] <progre55> masterzen: but I had installed 0.25.5 from a tarball on the server side, and then tried to remove it and install 0.25.4 from the repos, but it still says I'm using 0.25.5 when I --version | ||
| [2010/07/22 03:05:59] <barn> which -a puppetd | ||
| [2010/07/22 03:06:00] <alcy> progre55: the date/time for your client/server seems messed up or could possibly be one of the reasons. | ||
| [2010/07/22 03:06:01] <evilgeenius> Hi, im a complete noobee to puppet. If you use puppet then do you have to use it for everything? lets say you need to run some commands, or install an an app on just one of your servers, are you allowed to do it manually or would it break with the philosophy of using Puppet? | ||
| [2010/07/22 03:06:03] <progre55> so I'm was thinking maybe that might cause the problem.. | ||
| [2010/07/22 03:06:05] <barn> will show you the locations it's in | ||
| [2010/07/22 03:07:18] <progre55> alcy: oh, that might be the case.. cause my client is in the amazon clouds, and my server is in Sweden =) | ||
| [2010/07/22 03:07:22] <progre55> barn: let me try that.. | ||
| [2010/07/22 03:07:22] <progre55> barn: it's only in /usr/sbin/ | ||
| [2010/07/22 03:07:57] <alcy> progre55: due to mismatching of date/time, the certificates won't be valid. | ||
| [2010/07/22 03:08:14] <progre55> well yeah, my server time is "Thu Jul 22 12:07:38 CEST 2010" and my client time is "Thu Jul 22 10:07:39 UTC 2010" | ||
| [2010/07/22 03:08:25] <evilgeenius> Can anyone answer my last question? | ||
| [2010/07/22 03:08:41] <hal-j> evilgeenius: using puppet doesn't stop you from doing things manually | ||
| [2010/07/22 03:08:54] <hal-j> but it will stomp on your changes if you make a change to something it's managing | ||
| [2010/07/22 03:09:28] <hal-j> progre55: in the long run, you'll feel much less pain if all of your servers, regardless of where they are, use UTC | ||
| [2010/07/22 03:09:45] <evilgeenius> hal-j: Is it feasible to do all the changes just using puppet? or do you sometimes have to resort to doing things manually? | ||
| [2010/07/22 03:10:07] <hal-j> I've got a rule that all configs and software is managed by puppet | ||
| [2010/07/22 03:10:10] <evilgeenius> hal-j: Im just wondering what Puppet can realistically be used for, and what it cant. | ||
| [2010/07/22 03:10:15] <hal-j> that doesn't mean I never log in to bounce services and such | ||
| [2010/07/22 03:10:31] <progre55> hal-j: yeah, I'll consider that | ||
| [2010/07/22 03:11:24] <evilgeenius> hal-j: How many servers is it easy to manage with puppet? how many do you have? | ||
| [2010/07/22 03:11:32] <evilgeenius> hal-j: We use LDAP here, can it deal with that? | ||
| [2010/07/22 03:11:42] <dcarley> timezones shouldn't make a different for cert validation. all certs are treated as UTC anyway. | ||
| [2010/07/22 03:13:43] <sejo> from functions (custom) how do you send notices? | ||
| [2010/07/22 03:14:07] <sejo> Puppet::Notice("bleh") ? | ||
| [2010/07/22 03:14:54] <hal-j> evilgeenius: the system I manage consists of around 30 servers | ||
| [2010/07/22 03:15:19] <evilgeenius> hal-j: Cool. Can it deal with LDAP? | ||
| [2010/07/22 03:15:22] <hal-j> we were bought by a larger company which manages probably 3 times that, using puppet | ||
| [2010/07/22 03:15:54] <hal-j> the larger company uses LDAP to manage the nodes, and puppet pulls that information down | ||
| [2010/07/22 03:16:23] @ Quit: gebi: Ping timeout: 264 seconds | ||
| [2010/07/22 03:16:31] <hal-j> I've just started reorganizing their puppet setup last week. Not entirely sure I like the LDAP setup or not, I'm still in "I'm not entirely used to this" mode | ||
| [2010/07/22 03:22:41] <evilgeenius> hal-j: You mean the concept of LDAP, or the way they have it setup? | ||
| [2010/07/22 03:23:13] <hal-j> my puppet setup stores all teh nodes in puppet manifests | ||
| [2010/07/22 03:24:00] <hal-j> theirs pulls the nodes from LDAP (http://projects.puppetlabs.com/projects/puppet/wiki/Ldap_Nodes) | ||
| [2010/07/22 03:26:10] <evilgeenius> hal-j: So it gets the node info from puppet, but the Classes that the ldap node refers to is still in puppet manifest files? | ||
| [2010/07/22 03:26:20] <hal-j> yup | ||
| [2010/07/22 03:26:36] <evilgeenius> Sorry, i mean gets the node info from LDAP | ||
| [2010/07/22 03:26:51] <hal-j> probably makes sense if you've already got all of your hosts in ldap, and use that for other things | ||
| [2010/07/22 03:26:57] <hal-j> heh, I read it as you intended ;) | ||
| [2010/07/22 03:27:05] <evilgeenius> :-) | ||
| [2010/07/22 03:27:45] <evilgeenius> I think we only use LDAP here for storing user data | ||
| [2010/07/22 03:28:34] <hal-j> right now I'm thinking that if your hosts aren't in ldap already, I wouldn't go that route. Granted I'm biased towards storing nodes in puppet manifests since I've been doing it for a long time and I'm used to it | ||
| [2010/07/22 03:28:38] <evilgeenius> So with puppet would it be easy to setup a server with all the configs/apps needed to allow ldap users to log into it? | ||
| [2010/07/22 03:28:42] <hal-j> but there's something to be said for having all of the config in one place | ||
| [2010/07/22 03:29:16] <hal-j> yeah, they also use ldap for user login info, and puppet tosses all of the required bits and configures pam accordingly | ||
| [2010/07/22 03:30:15] <evilgeenius> cool. Is there a module somewhere that does this? or would I have to write it from scratch | ||
| [2010/07/22 03:30:28] <evilgeenius> A puppet module, or whatever they are called in puppet. | ||
| [2010/07/22 03:31:00] <evilgeenius> The puppet home page says its easy to use other people's config data, but I can't see anywhere on their site to browse pre-existing stuff | ||
| [2010/07/22 03:31:14] <hal-j> theirs is most certainly written from scratch and is a smattering of classes. I'm in the process of going through their stuff and reorganizing. | ||
| [2010/07/22 03:31:29] <hal-j> http://forge.puppetlabs.com/ | ||
| [2010/07/22 03:32:01] <hal-j> don't think there's any module there for setting up logins via ldap, but if I come up with something sane when I get to that, I'll contribute | ||
| [2010/07/22 03:32:44] <hal-j> their setup uses no modules (and surprisingly, not a single erb template!) so there's a good deal of work to do to fix things up | ||
| [2010/07/22 03:32:51] @ Quit: ckauhaus: Read error: Operation timed out | ||
| [2010/07/22 03:33:01] <evilgeenius> Yeah, just done a search for "ldap" on that page and nothing came up. How strange, I would have thought that a plugin for setting up logins via LDAP would have been defniately there, i mean, isn't that what most people use ldap for? | ||
| [2010/07/22 03:33:38] <hal-j> I think the forge is pretty new | ||
| [2010/07/22 03:33:45] <hal-j> there may be other sources of modules out there | ||
| [2010/07/22 03:33:56] <evilgeenius> Is there another place to download modules or is that it? | ||
| [2010/07/22 03:34:01] <evilgeenius> ah ok | ||
| [2010/07/22 03:34:35] <evilgeenius> What do you think is the best way to introduce puppet into a company that doesn't use puppet at all? and which already has many servers. And where there might be a bit of resistance. | ||
| [2010/07/22 03:34:53] <nimrod10> Hi guys. I"m getting this error "Could not request certificate: undefined method `closed?' for nil:NilClass" when I run puppetd --test --debug from a client | ||
| [2010/07/22 03:35:02] <evilgeenius> What could I show them that would impress them the most and make their life easier? | ||
| [2010/07/22 03:35:12] <nimrod10> any idea how to get rid of it? running puppet 0.2.25 | ||
| [2010/07/22 03:35:32] <nimrod10> sorry 0.25.4 | ||
| [2010/07/22 03:36:20] <hal-j> evilgeenius: TBH - I know so little about your needs, so it's hard to tell for sure :) I can tell stories about my experience, but those are just stories. I sold the new company's ops team on my puppet rewrite by showing them how little effort it took me to do things with the systems I brought in with me | ||
| [2010/07/22 03:36:37] <hal-j> you may want to mock some stuff up and show them | ||
| [2010/07/22 03:36:55] <hal-j> does the ops team use anything for automation currently? | ||
| [2010/07/22 03:38:16] @ spawnyd_ joined channel #puppet | ||
| [2010/07/22 03:38:37] <alcy> sorry I am repeating my previous query but, puppet complains about not being able to get the status of a service due to non-existence of a directory, when in fact the directory does exist (checking in noop mode) http://pastie.org/1055047 , any clue about this ? | ||
| [2010/07/22 03:39:12] <hal-j> alcy: you're sure about perms being OK, and puppetd running as root, right? | ||
| [2010/07/22 03:39:25] @ testburgher joined channel #puppet | ||
| [2010/07/22 03:39:34] <testburgher> hello | ||
| [2010/07/22 03:39:40] <hal-j> nimrod10: you're sure that the puppetd on the client side can talk to the puppetmaster on the right port? | ||
| [2010/07/22 03:40:21] <testburgher> I have my puppet server and some clients registered, and now I want to create a profile for my webserver nodes, I am thinking I need to make a class that should be applied to these nodes | ||
| [2010/07/22 03:40:51] <testburgher> but I can't see which documentation I should be looking at for defining and apply these | ||
| [2010/07/22 03:41:07] <testburgher> any suggesions on where to look next, I guess i need to create a class | ||
| [2010/07/22 03:41:08] <testburgher> etc. | ||
| [2010/07/22 03:41:30] <hal-j> http://forge.puppetlabs.com/modules?q=apache&commit=Go&vid=fd8cb80d-c8d9-40a9-985a-4a57559ada79&lf_cid=LF_c268993e may be good starting points | ||
| [2010/07/22 03:41:37] @ Quit: spawnyd: Ping timeout: 276 seconds | ||
| [2010/07/22 03:41:46] <hal-j> (I've got no experience with any of those, I've got a home grown apache module) | ||
| [2010/07/22 03:42:48] <alcy> hal-j: permissions are fine. | ||
| [2010/07/22 03:43:45] <nimrod10> hal-j, it can ping it | ||
| [2010/07/22 03:44:11] <alcy> its strange ? I first ensure the directory exists. then I make the service require that directory. and then the provider complains. | ||
| [2010/07/22 03:44:34] <nimrod10> hal-j, puppet client can successfully ping puppet master using the name puppet , and the master can ping back the client | ||
| [2010/07/22 03:44:38] <hal-j> alcy: have you tried executing the same command on teh commandline? | ||
| [2010/07/22 03:44:50] <hal-j> /usr/bin/sv status /etc/service/dnscache | ||
| [2010/07/22 03:45:12] <hal-j> nimrod10: and can the client connect to the puppetmaster on the right port? | ||
| [2010/07/22 03:46:09] <alcy> hal-j: its a dry run. | ||
| [2010/07/22 03:48:54] <testburgher> what concept does a module apply to? would you create a module for your nodes with (apache/tomcat/mysql jdbc driver) or would that go into a class? | ||
| [2010/07/22 03:49:00] <hal-j> never the less, did you try executing what it says it's executing and failing | ||
| [2010/07/22 03:49:37] <hal-j> testburgher: modules are made up of 1 or more classes, and alternatively templates and files | ||
| [2010/07/22 03:49:52] <hal-j> http://projects.puppetlabs.com/projects/puppet/wiki/Puppet_Modules | ||
| [2010/07/22 03:51:32] <nimrod10> hal-j, just tested puppetclient can connect to the puppetmaster on port 8140 | ||
| [2010/07/22 03:52:55] @ Quit: p3rror: Ping timeout: 246 seconds | ||
| [2010/07/22 03:53:12] @ Quit: crdant: Quit: Leaving. | ||
| [2010/07/22 03:53:21] <alcy> gives the same error, as suggested when in noop mode. | ||
| [2010/07/22 03:53:58] @ Quit: pinoyskull: Ping timeout: 276 seconds | ||
| [2010/07/22 03:54:03] <hal-j> alcy: I meant run that command manually | ||
| [2010/07/22 03:54:17] <alcy> I meant the same. | ||
| [2010/07/22 03:54:27] <alcy> I did run the command manually. | ||
| [2010/07/22 03:54:38] <hal-j> so it's sv that's complaining | ||
| [2010/07/22 03:54:47] <hal-j> if I'm understanding | ||
| [2010/07/22 03:55:27] @ gebi joined channel #puppet | ||
| [2010/07/22 03:56:39] <alcy> problem is, puppet calls sv to check for the status of service, but since this is in noop mode, the service doesn't actually exist, and hence the error. I guess i'll just do the actual run. | ||
| [2010/07/22 03:57:18] <hal-j> I'm kind of at a loss, I'm not familiar with sv, so I don't know what it's complaining about :) | ||
| [2010/07/22 04:00:57] <alcy> hal-j: thanks for trying to help though. the actual run doesn't give that much of a problem. :) | ||
| [2010/07/22 04:02:18] <alcy> its probably got to do somthing with the integration of runit with puppet. | ||
| [2010/07/22 04:04:48] @ Quit: ohadlevy: Ping timeout: 260 seconds | ||
| [2010/07/22 04:05:05] @ ohadlevy_ joined channel #puppet | ||
| [2010/07/22 04:05:18] <Volcane> it seems everyday there is someone here proving that you shoudlnt mess with how your distro is designed :P | ||
| [2010/07/22 04:05:29] <testburgher> im not sure whether i am being thick. but I can't seem to find any documentation on defining a node, and applying config to nodes... ie the reference docs | ||
| [2010/07/22 04:05:43] <Volcane> testburgher: language tutorial, look for node | ||
| [2010/07/22 04:07:31] <evilgeenius> hal-j: We currently have no automation at all here, everything is done manually or via small scripts. | ||
| [2010/07/22 04:08:14] <testburgher> ok thanks | ||
| [2010/07/22 04:08:18] <hal-j> Volcane: you can mess with it, it just takes a good deal of dedication to maintain :) | ||
| [2010/07/22 04:08:26] <hal-j> and pain when you want to upgrade | ||
| [2010/07/22 04:08:35] @ Quit: ahasenack: Ping timeout: 264 seconds | ||
| [2010/07/22 04:08:49] <hal-j> evilgeenius: ouch | ||
| [2010/07/22 04:09:30] <evilgeenius> hal-j: Yeah its contstant firefighting here.... Im not strictly a sysadmin so I have to sit back and watch all this happen. | ||
| [2010/07/22 04:10:12] <evilgeenius> hal-j: Im mainly a developer. I think my company really need something like puppet. Im just not sure what the best method to introduce it is. | ||
| [2010/07/22 04:10:21] @ Quit: bobinabottle: Quit: bobinabottle | ||
| [2010/07/22 04:10:44] <Volcane> evilgeenius: how many servers do they look after if i may ask? | ||
| [2010/07/22 04:10:54] <Volcane> just curious | ||
| [2010/07/22 04:10:55] @ pinoyskull joined channel #puppet | ||
| [2010/07/22 04:11:14] <evilgeenius> In total about 60-75 | ||
| [2010/07/22 04:11:19] <hal-j> run. | ||
| [2010/07/22 04:11:20] <hal-j> fast | ||
| [2010/07/22 04:11:22] <hal-j> and far | ||
| [2010/07/22 04:11:23] <Volcane> heh | ||
| [2010/07/22 04:12:22] <Volcane> evilgeenius: well obviously there was a time when that was the only option, but unless they're exceptionally good and you have a fairly stable platform its uphill all the way :( | ||
| [2010/07/22 04:12:38] <Volcane> evilgeenius: sadly though most traditional sysadins thinks automation is a fad | ||
| [2010/07/22 04:13:14] <barn> Volcane: but upgrading stuff with tar zxvf && ./configure && make install is the way forward! | ||
| [2010/07/22 04:13:16] <devdas> Automation is a fad. Compilers are a fad too. Assembly forever! | ||
| [2010/07/22 04:13:18] <devdas> ;) | ||
| [2010/07/22 04:13:38] <Volcane> barn: and here i was thinking i should offer you a job :P | ||
| [2010/07/22 04:13:48] @ Quit: tim__: Remote host closed the connection | ||
| [2010/07/22 04:13:52] * devdas blinks | ||
| [2010/07/22 04:13:53] <barn> (I'm so glad those days are gone outside of dev environments and every blog post on software) | ||
| [2010/07/22 04:14:01] <hal-j> real men assemble by hand | ||
| [2010/07/22 04:14:19] <devdas> evilgeenius, hire me! I have developers who do that on production systems! | ||
| [2010/07/22 04:14:38] <devdas> Oh, I didn't see library foo so I compiled it! | ||
| [2010/07/22 04:14:47] <devdas> As opposed to yum -y install foo | ||
| [2010/07/22 04:14:47] @ Quit: benoit__: Ping timeout: 240 seconds | ||
| [2010/07/22 04:15:07] <devdas> It's not the latest version, so we have to compile! | ||
| [2010/07/22 04:15:30] * devdas waves at alexine_dsouza | ||
| [2010/07/22 04:18:27] * hal-j thanks [deity] for build servers | ||
| [2010/07/22 04:18:40] <hal-j> code goes in, packages come out | ||
| [2010/07/22 04:18:43] <alcy> Volcane:, yup pretty much everyday ! :( | ||
| [2010/07/22 04:19:31] <hal-j> evilgeenius: honestly, a good demo would probably speak volumes | ||
| [2010/07/22 04:20:46] <evilgeenius> hal-j: What's a good demo with puppet? What would look impressive? Maybe If I showed them how a change in puppet would affect all the servers at once? I don't know, I've never used puppet. | ||
| [2010/07/22 04:21:22] <Berge> evilgeenius: You can break all the servers in one go. | ||
| [2010/07/22 04:21:28] <evilgeenius> lol | ||
| [2010/07/22 04:21:30] <Berge> That'll get 'em impressed. | ||
| [2010/07/22 04:21:32] <Berge> Or.. something. | ||
| [2010/07/22 04:23:19] <progre55> hey guys, I've got a server that's using the CEST timezone.. how can I change it to UTC? and will it affect the applications and services running on it? like, mysql | ||
| [2010/07/22 04:23:28] <evilgeenius> Does anyone use Solaris here? nearly all our servers use that. | ||
| [2010/07/22 04:25:01] <hal-j> evilgeenius: if it were me, first I'd learn puppet, then I'd pick a sticky point that they deal with and show them how to make it easier | ||
| [2010/07/22 04:25:23] <hal-j> although if they log in to N servers and do the same thing over and over regularly, a good introduction to automation may be capistrano | ||
| [2010/07/22 04:25:39] <hal-j> putting a few capfiles together to do common tasks may break the ice | ||
| [2010/07/22 04:26:08] <evilgeenius> hal-j: aren't capfiles are capistrano receipies? | ||
| [2010/07/22 04:26:24] <hal-j> yup | ||
| [2010/07/22 04:27:07] <evilgeenius> hal-j: So what's that got to do with puppet? | ||
| [2010/07/22 04:28:17] <hal-j> like I said above - if they routinely log into N servers and do the same 5 things, one after the other after the other, capistrano may be a good way to break the ice regarding automation | ||
| [2010/07/22 04:28:55] <hal-j> with the benefit of not needing to have any infrastructure set up (like you would with puppet.. having it configured on the servers, having a puppetmaster set up etc...) | ||
| [2010/07/22 04:29:52] <hal-j> and if you show them that you _can_ make their lives easier, it'd be easier to get them to listen to more grandiose ideas | ||
| [2010/07/22 04:32:09] @ Quit: alexine_dsouza: Read error: Connection reset by peer | ||
| [2010/07/22 04:34:51] <evilgeenius> Why not go all the way and have ALL servers virtualised, and when any changes are made via puppet, make a snapshot of the image, so you can go back to it if it cocks up. | ||
| [2010/07/22 04:35:57] <hal-j> hey, if it floats your boat | ||
| [2010/07/22 04:36:46] <evilgeenius> hal-j: Is that not the ideal scenario? | ||
| [2010/07/22 04:37:03] <hal-j> depends on your level of paranoia I guess. | ||
| [2010/07/22 04:37:27] <hal-j> my puppet manifests are versioned, so I've got that to fall abck on | ||
| [2010/07/22 04:37:28] <evilgeenius> hal-j: Its like having a source code control system but on the level of servers. | ||
| [2010/07/22 04:37:35] <hal-j> and I do have images of lots of my stuff | ||
| [2010/07/22 04:38:05] <evilgeenius> ULTIMATE POWER | ||
| [2010/07/22 04:38:07] <hal-j> but I don't automatically cut images after each time puppet runs | ||
| [2010/07/22 04:39:36] <evilgeenius> One day in the future the current sysadmins will laugh at you lot for not doing it that way... | ||
| [2010/07/22 04:40:12] <evilgeenius> "What fools!! How could they not see that virtualising & versioning everything wasn't the way, ha!..." | ||
| [2010/07/22 04:41:22] <evilgeenius> A completely vitualised, version controlled, ability to start/stop as many instances as required, at any location, system. How can that not be good? How? | ||
| [2010/07/22 04:42:40] <hal-j> my system is entirely in AWS, so I kinda have a lot of that :) | ||
| [2010/07/22 04:43:13] <evilgeenius> Your 30 servers are all in AWS? | ||
| [2010/07/22 04:45:05] @ Quit: devdas: Remote host closed the connection | ||
| [2010/07/22 04:45:12] @ p3rror joined channel #puppet | ||
| [2010/07/22 04:46:07] <testburgher> i dont have access to my local DNS server, so I am going to have to push the server name out to the clients | ||
| [2010/07/22 04:46:50] <testburgher> whats the preferred way of doing that? (haha do I have to use some other bootstrapping tool or can I provide an option somewhere for the rpm install?) | ||
| [2010/07/22 04:48:32] <hal-j> evilgeenius: yup | ||
| [2010/07/22 04:48:34] @ Quit: spawnyd_: Ping timeout: 276 seconds | ||
| [2010/07/22 04:48:41] <hal-j> 30ish, depending on the day, what I'm doing etc... | ||
| [2010/07/22 04:49:30] <hal-j> and if the 90 or so that the new company has, about 20 or so are regular ec2 instances, and there's a mess of EMR instances that come and go depending on what's being run at the moment | ||
| [2010/07/22 04:53:23] <ghaskins_mobile> morning all | ||
| [2010/07/22 04:53:46] <ghaskins_mobile> so i am in _much_ better shape this morning thanks to all the help here | ||
| [2010/07/22 04:53:58] <ghaskins_mobile> I still have two outstanding issues that perhaps someone may know something bout | ||
| [2010/07/22 04:54:36] <ghaskins_mobile> 1) it doesnt appear that my puppetd daemon ever contacts the server again within the waitforcert timeout | ||
| [2010/07/22 04:54:52] <ghaskins_mobile> (I was expecting it to happen within the default 120 seconds) | ||
| [2010/07/22 04:55:09] <ghaskins_mobile> running puppetd --test by hand (after signing the cert) does indeed work | ||
| [2010/07/22 04:55:29] <ghaskins_mobile> its like the daemonized puppetd went out to lunch after the initial sign request | ||
| [2010/07/22 04:56:00] <ghaskins_mobile> 2) I noticed that my service{} declarations do indeed start the service, but they do not modify chkconfig | ||
| [2010/07/22 04:56:29] <ghaskins_mobile> the result is that the service will only be running if puppetd has run...e.g. rebooting the node will result in the previously started services to not be running | ||
| [2010/07/22 04:57:02] <ghaskins_mobile> so a) any ideas on the former? | ||
| [2010/07/22 04:57:22] <ghaskins_mobile> and b) am I expected to do something else besides a simple service{} declaration? | ||
| [2010/07/22 04:57:51] <hal-j> no idea about 1, honestly. for #2, that sounds about right. Puppet is just making sure the service is running, I'm not sure it's supposed to be doing anything to assure that the system will automatically run it | ||
| [2010/07/22 04:57:51] <gepetto> hal-j: #2 is http://projects.puppetlabs.com/issues/show/2 "Puppet - Feature #2: Add 'link' ability to File - Puppet Labs" | ||
| [2010/07/22 04:57:52] <ghaskins_mobile> (e.g. perhaps I need to write a provider for my platform that also sets the chkconfig on in addition to the other things it does | ||
| [2010/07/22 04:58:29] <hal-j> gepetto: wha? | ||
| [2010/07/22 04:58:44] <progre55> hey guys, how do you enable debugging on the server side? or paraphrased, how do you run puppetmaster with debug on, and where does it log the debug info? | ||
| [2010/07/22 04:59:04] <hal-j> ghaskins_mobile: you could perhaps make your own service type that wraps service plus the chkconfig, yeah | ||
| [2010/07/22 04:59:17] <hal-j> alternatively, make a puppet run the first thing the system does after coming online ;) | ||
| [2010/07/22 04:59:21] <ghaskins_mobile> hal-j, ok, i will look into that | ||
| [2010/07/22 04:59:29] <ghaskins_mobile> hal-j, true, i could do that | ||
| [2010/07/22 04:59:42] <ghaskins_mobile> tho i would have expected that to happen anyway | ||
| [2010/07/22 04:59:46] <hal-j> (as there may be other things that it's doing that you'd like, like forcing a time sync, or setting up blahblah) | ||
| [2010/07/22 05:00:01] <ghaskins_mobile> puppetd should typically be run at first boot if I have it set up properly anyway, right? | ||
| [2010/07/22 05:00:19] <ghaskins_mobile> (e.g. it doesnt preserve its "next update timestamp" across reboots or anything, right? | ||
| [2010/07/22 05:00:48] <hal-j> I'm not sure. I had some problems with puppetd getting pissy as a result of network problems, so I run it from a cron job presently | ||
| [2010/07/22 05:00:49] * ghaskins_mobile now questions if his (1) and (2) problems are related | ||
| [2010/07/22 05:00:53] @ Quit: FOCer: Remote host closed the connection | ||
| [2010/07/22 05:01:08] @ Quit: ahuman: Ping timeout: 248 seconds | ||
| [2010/07/22 05:01:31] @ ahuman joined channel #puppet | ||
| [2010/07/22 05:02:02] <ghaskins_mobile> hal-j, does using the cron method instead of daemon still address the waitforcert window? | ||
| [2010/07/22 05:02:11] <ghaskins_mobile> or do you need to do something special there | ||
| [2010/07/22 05:02:13] <ghaskins_mobile> ? | ||
| [2010/07/22 05:02:23] <hal-j> well, you're only waiting for a cert the first time | ||
| [2010/07/22 05:02:57] <ghaskins_mobile> i am developing auto-provisioning software, so this "waitforcert" scenario is common as new nodes are brought up | ||
| [2010/07/22 05:03:10] <ghaskins_mobile> especially right now, as i am still developing ;) | ||
| [2010/07/22 05:03:14] <hal-j> so provisioning a new host looks like: 1) run puppetd —test 2) sign on puppetmaster 3) run puppetd —test again, this time resulting in puppet doing what it should | ||
| [2010/07/22 05:03:25] <ghaskins_mobile> hal-j, nod | ||
| [2010/07/22 05:03:34] <ghaskins_mobile> that is what i am doing right now due to (1) | ||
| [2010/07/22 05:03:41] <ghaskins_mobile> the expected behavior is: | ||
| [2010/07/22 05:03:42] <hal-j> I've got no auto-provisioning set up. it's on my TODO list | ||
| [2010/07/22 05:03:43] @ groove joined channel #puppet | ||
| [2010/07/22 05:03:54] <groove> hi, does facter do any caching of facts? | ||
| [2010/07/22 05:04:00] @ ahasenack joined channel #puppet | ||
| [2010/07/22 05:04:05] <hal-j> unfortunately, my TODO list is longer than my life expectancy | ||
| [2010/07/22 05:04:20] <groove> i notice that the macaddress facts use ifconfig -a to gather information, but the output i get from ifconfig -a and from facter is different | ||
| [2010/07/22 05:04:59] <ghaskins_mobile> 1) setup puppetd daemon 2) it contacts for cert 3) server/human handles acceptance critiria, signing cert, 4) puppetd comes back within waitforcert interval 5) much rejoicing | ||
| [2010/07/22 05:05:21] @ [GuS] joined channel #puppet | ||
| [2010/07/22 05:05:28] <hal-j> yeah, I can't help you with the waitforcert | ||
| [2010/07/22 05:05:40] <hal-j> beyond trying it and debugging, which you can do too :) | ||
| [2010/07/22 05:05:51] <ghaskins_mobile> in practice, what I see is that "service start puppet" does indeed result in that first contact, and I can see the daemon running | ||
| [2010/07/22 05:06:04] <ghaskins_mobile> (yeah, undersoood...just describing the scenario now) | ||
| [2010/07/22 05:06:09] <sdog> ghaskins_mobile: half the world is waiting for the --trust-my-network parameter :( | ||
| [2010/07/22 05:06:27] <ghaskins_mobile> sdog, ;) | ||
| [2010/07/22 05:07:22] <ghaskins_mobile> hal-j, i might try cron today, just so I can try to wrangle the operation with a little more control | ||
| [2010/07/22 05:07:26] <groove> never mind, realised facter is being smart with my bonding devices | ||
| [2010/07/22 05:07:27] @ groove left channel #puppet () | ||
| [2010/07/22 05:07:41] <ghaskins_mobile> currently that puppetd floats around in the process-space, but I have no idea if its dead or alive | ||
| [2010/07/22 05:08:10] <ghaskins_mobile> its outwardly observable behavior indicates the former ;) | ||
| [2010/07/22 05:08:28] <ghaskins_mobile> hal-j, what switches do you use when running it from cron? | ||
| [2010/07/22 05:08:35] <ghaskins_mobile> --test ? | ||
| [2010/07/22 05:10:49] <hal-j> cron calls a script that does some lockfile wrangling to make sure that we don't stack on top of ourselves, then sleeps for a random number of seconds between 0 and some X, and then runs puppetd --onetime --ignorecache --no-usecacheonfailure -w 120 | ||
| [2010/07/22 05:11:07] @ Quit: pinoyskull: Ping timeout: 265 seconds | ||
| [2010/07/22 05:11:27] <hal-j> essentially —test without the verbosity | ||
| [2010/07/22 05:15:17] <ghaskins_mobile> hal-j, ah, perfect | ||
| [2010/07/22 05:15:18] @ Quit: carlasouza: Ping timeout: 240 seconds | ||
| [2010/07/22 05:15:19] <ghaskins_mobile> thanks! | ||
| [2010/07/22 05:17:57] <hal-j> I don't claim that isn't a hack | ||
| [2010/07/22 05:18:07] <ghaskins_mobile> hal-j, ;) | ||
| [2010/07/22 05:18:08] <hal-j> but it resolved an issue I didn't feel like tracking down deeper :) | ||
| [2010/07/22 05:18:16] <ghaskins_mobile> np, and understood | ||
| [2010/07/22 05:18:35] <ghaskins_mobile> at this point, I am such a puppet newbie that I am sure my entire setup is completely hackish | ||
| [2010/07/22 05:18:44] <ghaskins_mobile> i keep smashing it over the head until it works | ||
| [2010/07/22 05:19:34] <progre55> hey guys, I keep getting "err: Could not retrieve catalog from remote server: undefined method `closed?' for nil:NilClass". I do have connection to the server (at least when I telnet to port 8140 it lets me in). Any suggestions, please? | ||
| [2010/07/22 05:22:42] @ benoit__ joined channel #puppet | ||
| [2010/07/22 05:25:26] @ rgsteele joined channel #puppet | ||
| [2010/07/22 05:33:35] <progre55> client says "debug: Using cached certificate for ca, good until Mon Jul 20 09:13:53 UTC 2015" how can I clean the cache? or create another certificate? | ||
| [2010/07/22 05:34:04] <progre55> because I have revoked the old cert. on the server.. | ||
| [2010/07/22 05:39:31] <sejo> can someone explain me why it does not want to split? http://dpaste.com/220831/ | ||
| [2010/07/22 05:42:47] @ Quit: alcy: Quit: ChatZilla 0.9.86 [Iceweasel 3.5.10/20100623112841] | ||
| [2010/07/22 05:44:56] <Volcane> sejo: line 18 | ||
| [2010/07/22 05:44:57] <Volcane> $lan | ||
| [2010/07/22 05:45:07] <Volcane> sejo: ruby doesnt do $ in vars, dont use it like that :) | ||
| [2010/07/22 05:45:09] <Volcane> $ means something else | ||
| [2010/07/22 05:45:15] <Volcane> $arr, $pairs etc | ||
| [2010/07/22 05:45:18] <Volcane> take away all the $s | ||
| [2010/07/22 05:45:22] <sejo> k | ||
| [2010/07/22 05:45:32] <progre55> Volcane: can you please help me out? | ||
| [2010/07/22 05:45:49] <Volcane> progre55: you dont take my advise | ||
| [2010/07/22 05:46:18] <progre55> Volcane: I do! I removed the tarball installation, and installed it from the repos, as you said =) | ||
| [2010/07/22 05:46:50] <Volcane> sejo: specifically each do |lan|...that creates a variable called lan not $lan | ||
| [2010/07/22 05:47:20] <sejo> ok thx | ||
| [2010/07/22 05:47:46] <ghaskins_mobile> progre55, i dealt with that issue just yesterday | ||
| [2010/07/22 05:47:59] <ghaskins_mobile> i just rpm -rf /var/lib/puppet/ssl on the client | ||
| [2010/07/22 05:48:01] <progre55> ghaskins_mobile: could you please share? | ||
| [2010/07/22 05:48:07] <progre55> oh, sec | ||
| [2010/07/22 05:48:07] <ghaskins_mobile> s/rpm/rm | ||
| [2010/07/22 05:48:23] <ghaskins_mobile> on next run, it will generate a new cert request | ||
| [2010/07/22 05:49:13] <ghaskins_mobile> (the path is from memory, might need slight adjustment | ||
| [2010/07/22 05:49:24] <ghaskins_mobile> also, perhaps it is different on different platforms | ||
| [2010/07/22 05:49:32] <ghaskins_mobile> but its the ./puppet/ssl that is key | ||
| [2010/07/22 05:49:47] @ failshell joined channel #puppet | ||
| [2010/07/22 05:49:56] <progre55> yep, it worked | ||
| [2010/07/22 05:50:02] <progre55> ghaskins_mobile: thanks man | ||
| [2010/07/22 05:50:05] <ghaskins_mobile> progre55, nice | ||
| [2010/07/22 05:50:06] <ghaskins_mobile> np | ||
| [2010/07/22 05:50:06] <Volcane> sejo: $foo is a global variable available in all code etc :) so not what you want | ||
| [2010/07/22 05:50:10] <failshell> hello. did i dream this or the clients can't be newer than the server? otherwise you can't receive a SSL cert for the clients? | ||
| [2010/07/22 05:50:26] <progre55> but now I still have the "undefined method `closed?' for nil:NilClass" problem.. | ||
| [2010/07/22 05:50:32] <progre55> ghaskins_mobile: ^^ | ||
| [2010/07/22 05:50:38] <ghaskins_mobile> progre55, i wish I could help you wth that | ||
| [2010/07/22 05:50:41] <ghaskins_mobile> i am a newbie | ||
| [2010/07/22 05:50:50] <progre55> =) | ||
| [2010/07/22 05:51:02] <ghaskins_mobile> just so happened to have dealt with the cert problem only yesterday ;) | ||
| [2010/07/22 05:51:24] <progre55> ghaskins_mobile: thanks anyways | ||
| [2010/07/22 05:51:24] <ghaskins_mobile> but i can barely spell puppet otherwise ;) | ||
| [2010/07/22 05:51:27] <progre55> appreciate | ||
| [2010/07/22 05:51:47] <ghaskins_mobile> np, good luck | ||
| [2010/07/22 05:51:57] <failshell> server is 0.24.8 and lucid ships with 0.25.4 | ||
| [2010/07/22 05:51:59] <progre55> Volcane: I know you can help.. but you dont want to ( | ||
| [2010/07/22 05:52:41] <progre55> failshell: I had the same problem yesterday.. then I had to upgrade my server, which worked fine | ||
| [2010/07/22 05:53:20] <failshell> progre55: i thought id have to do that. time to backport again to hardy | ||
| [2010/07/22 05:53:58] <masterzen> progre55: check #3101 and #3083 | ||
| [2010/07/22 05:53:59] <gepetto> masterzen: progre55: #3101 is http://projects.puppetlabs.com/issues/show/3101 "Puppet - Bug #3101: Unhelpful message "undefined method `closed?' for nil:NilClass" when DNS misconfigured - Puppet Labs" | ||
| [2010/07/22 05:54:00] <gepetto> masterzen: progre55: #3083 is http://projects.puppetlabs.com/issues/show/3083 "Puppet - Bug #3083: Failed to retrieve current state of resource: undefined method `closed?' for nil:NilClass - Puppet Labs" | ||
| [2010/07/22 05:54:27] <progre55> masterzen: thanks! | ||
| [2010/07/22 05:54:42] <sejo> Volcane: thanks that helped! | ||
| [2010/07/22 05:54:51] <Volcane> sejo: kewl | ||
| [2010/07/22 05:55:08] @ cliff-hm joined channel #puppet | ||
| [2010/07/22 05:55:24] @ groove joined channel #puppet | ||
| [2010/07/22 05:55:24] <failshell> can i take my configs from 0.24 and use them in 2.6 seemlessly? | ||
| [2010/07/22 05:55:38] @ jumex joined channel #puppet | ||
| [2010/07/22 05:56:13] <groove> this is probably a stupid question, but if i have puppetd running as a daemon and i change parts of /etc/puppet/puppet.conf will the puppetd in the background re-evaluate it on the next run? | ||
| [2010/07/22 05:56:26] @ devdas joined channel #puppet | ||
| [2010/07/22 05:56:43] <Volcane> groove: yeah for most kinds of settings, 2 or 3 specific ones it needs a restart like listen= | ||
| [2010/07/22 05:56:53] <groove> Volcane: yes, understood | ||
| [2010/07/22 05:56:58] <groove> i want to turn on pluginsync | ||
| [2010/07/22 05:57:14] <Volcane> best to just test it and find out :) | ||
| [2010/07/22 05:58:04] <progre55> what's the latest ruby version? is it 1.8.7? | ||
| [2010/07/22 06:00:36] <masterzen> failshell: you mean puppet.conf, fileserver.conf... or your manifests? | ||
| [2010/07/22 06:01:06] <failshell> manifests | ||
| [2010/07/22 06:01:39] @ carlasouza joined channel #puppet | ||
| [2010/07/22 06:03:37] <groove> hmm, looks like puppetd re-evaluates the config but evidently ignores pluginsync being turned on | ||
| [2010/07/22 06:03:38] <masterzen> failshell: then they should work directly. | ||
| [2010/07/22 06:03:53] <masterzen> failshell: and if not, then this is a bug. | ||
| [2010/07/22 06:05:26] <failshell> ok | ||
| [2010/07/22 06:05:50] <failshell> hmm now lucid's version is too old too | ||
| [2010/07/22 06:05:55] <failshell> i want to move everything to 2.6 | ||
| [2010/07/22 06:06:03] @ Quit: Days`: Ping timeout: 240 seconds | ||
| [2010/07/22 06:06:14] @ mez12345678 joined channel #puppet | ||
| [2010/07/22 06:08:29] @ spawnyd joined channel #puppet | ||
| [2010/07/22 06:10:07] @ mez12345678 left channel #puppet ("Leaving") | ||
| [2010/07/22 06:13:03] @ Quit: devdas: Ping timeout: 240 seconds | ||
| [2010/07/22 06:13:22] <FiXion> failshell: you should always have your own repo with the puppet version you want to run | ||
| [2010/07/22 06:13:32] * FiXion had a customer who used backports for his Lenny | ||
| [2010/07/22 06:13:52] <FiXion> but they upgrade pretty often and suddenly he no longer had the version he used on all other hosts available :) | ||
| [2010/07/22 06:14:12] <FiXion> had to built it with a deb tool to build a deb from an installed package :) | ||
| [2010/07/22 06:14:19] <hal-j> in addition, critical stuff should not be ensure => latest :) | ||
| [2010/07/22 06:14:30] <FiXion> I always enforce $version on puppet | ||
| [2010/07/22 06:14:46] <FiXion> where version ofcourse is set to a given version for each distro :) | ||
| [2010/07/22 06:16:34] <jumex> Another n00b question: I am trying to set up a Mac OS X puppet master (using puppet master --mkusers) and I am getting the "Tried to get name field for silly id 4294967294" error. I know this is because of the nobody group id being -2 and Ruby can't deal (http://bit.ly/977isG). Can someone point me to the workaround? | ||
| [2010/07/22 06:17:11] <ashp> jamesturnbull: hey, who runs the training sessions? My coworker is hoping to go to the one near boston | ||
| [2010/07/22 06:17:20] <ashp> and I figure if he does that then I need to turn up for drinks or something :) | ||
| [2010/07/22 06:17:32] <testburgher> I would like to add a list of mounts to my /etc/fstab, but there are existing entries in there from the build process that do not appear to be consistent, is there a strategy for merging Files? | ||
| [2010/07/22 06:19:45] <failshell> FiXion: i maintain over 200 .deb right now for various versions of ubuntu hehe | ||
| [2010/07/22 06:23:28] @ Quit: jhaddad: Ping timeout: 276 seconds | ||
| [2010/07/22 06:24:13] @ alban2 joined channel #puppet | ||
| [2010/07/22 06:24:50] @ groove left channel #puppet ("Leaving.") | ||
| [2010/07/22 06:25:49] @ MPSimmons joined channel #puppet | ||
| [2010/07/22 06:26:29] <dcarley> hi matt. | ||
| [2010/07/22 06:27:23] <sejo> hmm is the rvalue always a string? | ||
| [2010/07/22 06:28:42] @ Days` joined channel #puppet | ||
| [2010/07/22 06:28:51] <Volcane> hmm, not tested but would suck if parser functions cant make hashes | ||
| [2010/07/22 06:28:56] <Volcane> was going to make extlookup support hashes | ||
| [2010/07/22 06:31:56] @ Quit: jumex: Ping timeout: 252 seconds | ||
| [2010/07/22 06:32:05] @ phildoc joined channel #puppet | ||
| [2010/07/22 06:33:13] @ Quit: spawnyd: Ping timeout: 276 seconds | ||
| [2010/07/22 06:33:15] <sejo> Volcane | ||
| [2010/07/22 06:33:26] <sejo> woll I think it doesn't wark :/ | ||
| [2010/07/22 06:33:29] <sejo> work | ||
| [2010/07/22 06:33:37] <sejo> lit me test a bit more | ||
| [2010/07/22 06:35:08] <sejo> ok returning it works | ||
| [2010/07/22 06:35:18] <sejo> but passing it to a define fails | ||
| [2010/07/22 06:35:28] <sejo> in the define it's flattened | ||
| [2010/07/22 06:35:57] <Volcane> ah :( | ||
| [2010/07/22 06:36:10] <Volcane> masterzen is the person to ask about this | ||
| [2010/07/22 06:37:38] <masterzen> sejo: function should support hashes as args and rvalues. | ||
| [2010/07/22 06:37:57] @ kaptk2 joined channel #puppet | ||
| [2010/07/22 06:38:19] <masterzen> sejo: can you file a bug report with a simple test manifests for the definitions that flattens parameters issue you found? | ||
| [2010/07/22 06:38:47] @ radkin joined channel #puppet | ||
| [2010/07/22 06:38:52] <sejo> masterzen: i will first testing though | ||
| [2010/07/22 06:39:49] <masterzen> sejo: oh, I thought you were saying it wasn't working | ||
| [2010/07/22 06:40:19] @ phildoc left channel #puppet () | ||
| [2010/07/22 06:42:44] <testburgher> i want to comment out a line in a conf file, is there a pattern for that? | ||
| [2010/07/22 06:43:01] <testburgher> or do i have to use a a template or replace the whole file? | ||
| [2010/07/22 06:43:11] <progre55> I've been tunneling the port 8140 over port 22 from the client to server. Apparently that's the reason I keep getting this "undefined method 'closed?'" error. Because my client thinks it's connecting to localhost:8140, but it's actually connecting to server:8140. Any suggestions on how to fix it, please? | ||
| [2010/07/22 06:44:07] @ Quit: yure: Quit: Odhajam | ||
| [2010/07/22 06:44:25] <failshell> i found an error on the website | ||
| [2010/07/22 06:44:33] <failshell> http://www.puppetlabs.com/misc/download-options/ | ||
| [2010/07/22 06:44:40] @ sebas891 joined channel #puppet | ||
| [2010/07/22 06:44:41] <failshell> in the version information, 2.6.0 is the latest stable | ||
| [2010/07/22 06:44:52] <failshell> but the stable tarball is 0.25 | ||
| [2010/07/22 06:45:08] <sejo> masterzen this I will submit ok?: | ||
| [2010/07/22 06:45:10] <sejo> notice: Scope(Class[Nic_config]): eth2 | ||
| [2010/07/22 06:45:11] <sejo> notice: Scope(Networking[netmask255.255.255.0ipaddr192.168.1.2gateway192.168.1.1niceth2]): should not be converted to string: netmask255.255.255.0ipaddr192.168.1.2gateway192.168.1.1niceth2['nic'] | ||
| [2010/07/22 06:45:15] <sejo> debug: Scope(Networking[netmask255.255.255.0ipaddr192.168.1.2gateway192.168.1.1niceth2]): Retrieving template networking/ifcfg.erb | ||
| [2010/07/22 06:45:18] <sejo> debug: template[/etc/puppet/git/modules/networking/templates/ifcfg.erb]: Bound template variables for /etc/puppet/git/modules/networking/templates/ifcfg.erb in 0.00 seconds | ||
| [2010/07/22 06:45:21] <sejo> err: Failed to parse template networking/ifcfg.erb: undefined method `[]' for nil:NilClass at /etc/puppet/git/modules/networking/manifests/init.pp:5 on node puppetclient.isabelteam.be | ||
| [2010/07/22 06:45:25] <sejo> bleh | ||
| [2010/07/22 06:45:27] <sejo> sorry | ||
| [2010/07/22 06:45:36] <sejo> masterzen: http://dpaste.com/220852/ | ||
| [2010/07/22 06:49:20] @ jcharette joined channel #puppet | ||
| [2010/07/22 06:49:37] <masterzen> sejo: can you run with --trace (to that we have the full stack trace). Can you make a simpler manifests not requiring your function? or is the function part of the problem? | ||
| [2010/07/22 06:50:00] <masterzen> sejo: and what's in the template? | ||
| [2010/07/22 06:50:21] <sejo> function is not part of the problem nor is the template | ||
| [2010/07/22 06:50:38] <masterzen> sejo: oh, I understand now | ||
| [2010/07/22 06:50:52] <sejo> it's the define (i'm adding comments) | ||
| [2010/07/22 06:51:40] <sejo> i'll remove the function and hard code the $nics | ||
| [2010/07/22 06:51:43] <sejo> as example | ||
| [2010/07/22 06:53:22] @ Quit: project2501a: Ping timeout: 276 seconds | ||
| [2010/07/22 06:53:32] @ herdingcat joined channel #puppet | ||
| [2010/07/22 06:53:34] @ spawnyd joined channel #puppet | ||
| [2010/07/22 06:54:11] <masterzen> sejo: you can't use an hash as a resource key. | ||
| [2010/07/22 06:54:45] <masterzen> sejo: you can pass hash parameters to a define. The resource name is not a parameter it is something special which for the moment is only a string. | ||
| [2010/07/22 06:55:05] <sejo> ach! | ||
| [2010/07/22 06:55:07] <sejo> cool | ||
| [2010/07/22 06:55:28] @ jdcasey joined channel #puppet | ||
| [2010/07/22 06:56:06] <masterzen> so maybe you can do: networkin { $nics['nic']: specificities => $nics } and use $specificities instead of $name in the definition. | ||
| [2010/07/22 06:57:15] <sejo> I will try | ||
| [2010/07/22 06:57:50] @ joe-mac joined channel #puppet | ||
| [2010/07/22 06:59:09] @ notbrien joined channel #puppet | ||
| [2010/07/22 06:59:55] <progre55> is it possible to turn off ssl handshake in puppet client-server connection?? | ||
| [2010/07/22 07:00:08] <masterzen> progre55: no | ||
| [2010/07/22 07:00:17] <progre55> cause I'm still tunneling the port 8140 over 22 | ||
| [2010/07/22 07:00:29] <progre55> and I have a problem with certificate verification | ||
| [2010/07/22 07:01:13] @ pheezy joined channel #puppet | ||
| [2010/07/22 07:01:50] @ squirrel_labs joined channel #puppet | ||
| [2010/07/22 07:05:55] <FiXion> hmm - is there a "prexec hook" or something to a user { "username".. definition? | ||
| [2010/07/22 07:06:07] <FiXion> puppet fails changing a homefolder for a user - because the user is logged in. | ||
| [2010/07/22 07:06:15] <FiXion> the user is logged in because the service is running | ||
| [2010/07/22 07:06:28] <FiXion> I'd like puppet to stop the service before trying to change the homefolder :) | ||
| [2010/07/22 07:07:02] @ zooz joined channel #puppet | ||
| [2010/07/22 07:07:10] <Tonnerre> Hum, why would you not be able to change an user's homedir if said user is still logged in? | ||
| [2010/07/22 07:07:41] <FiXion> dunno - usermod complains with that message | ||
| [2010/07/22 07:07:51] <FiXion> so I guess there's a reason :) | ||
| [2010/07/22 07:07:59] <Tonnerre> Weirdo usermod then | ||
| [2010/07/22 07:08:11] @ Quit: ahasenack: Quit: Leaving | ||
| [2010/07/22 07:08:19] <FiXion> Ubuntu 10.04 | ||
| [2010/07/22 07:08:35] <Tonnerre> Ah, the one where rm -fr / is forbidden | ||
| [2010/07/22 07:08:49] <FiXion> hehe :) | ||
| [2010/07/22 07:08:54] <Tonnerre> .oO(Kinder UNIX) | ||
| [2010/07/22 07:08:54] <zooz> http://p.defau.lt/?5khz9b6FBC7wiArgsphQhw | ||
| [2010/07/22 07:09:09] <zooz> What am I doing wrong that puppet doesn't restart the service? | ||
| [2010/07/22 07:09:10] <Tonnerre> I can see how such a feature would be useful per se, but I'm not aware of one | ||
| [2010/07/22 07:09:33] <zooz> I make sure the content of subscribed file changes | ||
| [2010/07/22 07:10:01] <Tonnerre> zooz, FYI, you may also want to subscribe to the package | ||
| [2010/07/22 07:10:20] <zooz> to the package? | ||
| [2010/07/22 07:10:28] <zooz> the package is installed on the system | ||
| [2010/07/22 07:10:30] <Tonnerre> Package[$zabbix_agentd_packages] | ||
| [2010/07/22 07:10:44] <Tonnerre> zooz, yes, but if it's updated or something | ||
| [2010/07/22 07:11:48] <sejo> masterzen: works like a charm!!!! | ||
| [2010/07/22 07:11:56] <zooz> Tonnerre: sure, will do that | ||
| [2010/07/22 07:12:02] <masterzen> sejo: cool :) | ||
| [2010/07/22 07:12:07] <zooz> that's the log: http://p.defau.lt/?ee6f40OIerKnP8eqZM8ipQ | ||
| [2010/07/22 07:12:55] <Tonnerre> notice: //zabbix-agentd/Service[zabbix-agentd]: Triggering 'refresh' from 1 dependencies | ||
| [2010/07/22 07:13:00] <Tonnerre> Looks like it worked? | ||
| [2010/07/22 07:13:19] <zooz> yeah, but didn't get restarted | ||
| [2010/07/22 07:13:54] <Tonnerre> That line is output when the refreshcmd is run | ||
| [2010/07/22 07:14:01] <FiXion> where is the "create bug report" link hidden? | ||
| [2010/07/22 07:14:10] <FiXion> I'm logged in projects.puppetlabs.com and can't find any | ||
| [2010/07/22 07:14:11] <Volcane> new issue when you're logged in | ||
| [2010/07/22 07:14:27] <FiXion> can't see any "new issue" anywhere | ||
| [2010/07/22 07:14:57] <zooz> Tonnerre: can I specify refreshcmd ? | ||
| [2010/07/22 07:15:07] <zooz> restart => "/sbin/service zabbix-agentd force-reload", | ||
| [2010/07/22 07:15:09] <Tonnerre> zooz, sure | ||
| [2010/07/22 07:15:19] <zooz> does the above line do the trick? | ||
| [2010/07/22 07:15:28] <zooz> is that how I specify that? | ||
| [2010/07/22 07:19:20] <FiXion> Volcane: where do you see it - and on what url? | ||
| [2010/07/22 07:19:34] @ vachon joined channel #puppet | ||
| [2010/07/22 07:19:35] <FiXion> logged in on http://projects.puppetlabs.com/ - I can't find it | ||
| [2010/07/22 07:19:47] <Volcane> FiXion: pick a project first | ||
| [2010/07/22 07:19:56] <vachon> hey all, im blanking, whats the command on the master to show the state of the clients/ | ||
| [2010/07/22 07:20:30] <FiXion> why isn't puppet on the list of projects ? | ||
| [2010/07/22 07:20:31] @ Quit: ghaskins_mobile: Quit: This computer has gone to sleep | ||
| [2010/07/22 07:20:38] <Volcane> its there | ||
| [2010/07/22 07:21:17] <Volcane> top right, click projects | ||
| [2010/07/22 07:21:21] <testburgher> is it reasonable to bootstrap the puppet client from a the default node definition | ||
| [2010/07/22 07:21:28] <Volcane> well top right of the list of options on the left :) | ||
| [2010/07/22 07:21:32] <Volcane> pick puppet | ||
| [2010/07/22 07:21:37] <testburgher> i want to send report = true to all the clients | ||
| [2010/07/22 07:21:41] <Volcane> hit 'new issue' | ||
| [2010/07/22 07:22:04] <FiXion> ohh - it's because puppet had a much larger font | ||
| [2010/07/22 07:22:08] <FiXion> I figured it was just some headline | ||
| [2010/07/22 07:22:19] <FiXion> Volcane: thanks :) | ||
| [2010/07/22 07:22:27] <zooz> Volcane: could you look at my last question please? | ||
| [2010/07/22 07:23:25] <zooz> Tonnerre: ? | ||
| [2010/07/22 07:23:28] <zooz> could you? | ||
| [2010/07/22 07:24:53] <vachon> ok, so i found the executable, how would i clean the master's fact for all nodes? (re: puppetlast) | ||
| [2010/07/22 07:24:59] <vachon> i have a stale node | ||
| [2010/07/22 07:25:05] @ Bass10 joined channel #puppet | ||
| [2010/07/22 07:26:31] <Volcane> puppetlast just look at the age of the yaml files in /var/lib/puppet | ||
| [2010/07/22 07:26:34] @ Quit: Bass10: Max SendQ exceeded | ||
| [2010/07/22 07:26:37] <vachon> k | ||
| [2010/07/22 07:27:01] @ Bass10 joined channel #puppet | ||
| [2010/07/22 07:28:00] <vachon> ah, that was it, yaml/facts/ still had the stale one, yaml/nodes i fixed | ||
| [2010/07/22 07:29:22] @ ahasenack joined channel #puppet | ||
| [2010/07/22 07:30:07] <zipkid> any srpm / specs around yet for puppet 2.6? | ||
| [2010/07/22 07:30:16] @ tonyskapunk joined channel #puppet | ||
| [2010/07/22 07:31:28] @ Quit: herdingcat: Ping timeout: 265 seconds | ||
| [2010/07/22 07:32:49] @ Quit: RussS: Quit: Leaving | ||
| [2010/07/22 07:34:39] @ herdingcat joined channel #puppet | ||
| [2010/07/22 07:36:25] @ Quit: jcharette: Quit: ~ Trillian Astra - www.trillian.im ~ | ||
| [2010/07/22 07:42:13] @ ckk joined channel #puppet | ||
| [2010/07/22 07:42:15] @ Quit: herdingcat: Quit: Leaving | ||
| [2010/07/22 07:42:49] <testburgher> how do i force an update? | ||
| [2010/07/22 07:43:14] <Tonnerre> SIGHUP the puppet process | ||
| [2010/07/22 07:43:22] <Tonnerre> Or use mcollective | ||
| [2010/07/22 07:44:15] <failshell> where can i find the changelog for 2.6.0? i can't seem to find it online | ||
| [2010/07/22 07:44:26] @ Quit: wilmoore: Remote host closed the connection | ||
| [2010/07/22 07:44:26] <failshell> it seems my googling skills would require more coffee | ||
| [2010/07/22 07:44:36] <masterzen> failshell: check the release notes | ||
| [2010/07/22 07:44:38] <Volcane> failshell: release notes | ||
| [2010/07/22 07:45:41] <joe-mac> wiki:TypeReference | ||
| [2010/07/22 07:46:05] <failshell> now that i pushed 2.6.0 in our mirror, time to get dashboard running | ||
| [2010/07/22 07:47:21] <masterzen> joe-mac: gepetto is sleeping. | ||
| [2010/07/22 07:47:43] @ Quit: MattyM: Remote host closed the connection | ||
| [2010/07/22 07:49:32] <joe-mac> nice 2.6 dsc is on ftp.ubuntu | ||
| [2010/07/22 07:50:11] @ Quit: jdcasey: Read error: Connection reset by peer | ||
| [2010/07/22 07:50:25] @ jdcasey joined channel #puppet | ||
| [2010/07/22 07:50:53] <tmz> zipkid: http://tmz.fedorapeople.org/repo/puppet/ for fedora/epel. I sent a patch to the list to update the spec file in conf/redhat/ the other day as well. It's a very minimal change. | ||
| [2010/07/22 07:51:09] <joe-mac> hm looks like the new puppet dsc comes with an apache conf? | ||
| [2010/07/22 07:51:13] <joe-mac> wonder if it pulls in rack now... | ||
| [2010/07/22 07:52:26] <zipkid> tmz: i just found the SLES version i need on http://projects.puppetlabs.com/issues/4326 and it builds .. :-) thx anyway! | ||
| [2010/07/22 07:54:08] <testburgher> all of my signed certs on the server seemed to have disappeared, puppetca -l --all only now lists the server | ||
| [2010/07/22 07:54:09] @ Quit: sdog: Quit: Leaving. | ||
| [2010/07/22 07:54:24] @ reyjrar joined channel #puppet | ||
| [2010/07/22 07:54:28] <testburgher> though the clients seem to have the certs, they are failing to verify, | ||
| [2010/07/22 07:54:30] <testburgher> and idea why? | ||
| [2010/07/22 07:55:01] @ Hollow left channel #puppet () | ||
| [2010/07/22 07:55:09] @ vachon left channel #puppet () | ||
| [2010/07/22 07:56:10] @ Quit: kolla: Remote host closed the connection | ||
| [2010/07/22 07:56:34] @ Quit: squirrel_labs: Quit: See ya! | ||
| [2010/07/22 07:56:50] @ Quit: viq: Quit: Shin! Shin! Sei! Kyu! Sai! | ||
| [2010/07/22 07:57:49] @ Quit: failshell: Quit: Lost terminal | ||
| [2010/07/22 08:00:20] @ project2501a joined channel #puppet | ||
| [2010/07/22 08:03:40] @ benkevan joined channel #puppet | ||
| [2010/07/22 08:08:08] <masterzen> testburgher: you're master has regenerated its ca | ||
| [2010/07/22 08:08:14] <masterzen> *your | ||
| [2010/07/22 08:08:34] <testburgher> aww craps | ||
| [2010/07/22 08:08:39] <masterzen> testburgher: maybe you changed $ssldir or $vardir, and when restarting puppet created a new ca. | ||
| [2010/07/22 08:09:01] <masterzen> testburgher: you should try to find all ca_crt.pem on your master host | ||
| [2010/07/22 08:09:02] <testburgher> i think i run the rpm install again by accident when i was pushing it out to clients | ||
| [2010/07/22 08:09:18] <masterzen> testburgher: no good... | ||
| [2010/07/22 08:09:45] <Volcane> rpm reinstall or update doesnt regenerate ca | ||
| [2010/07/22 08:09:53] <masterzen> testburgher: you can get back the ca crt from the clients, but you have lost the private key... if you don't have any backup | ||
| [2010/07/22 08:10:02] <masterzen> testburgher: you'll have to sign all the clients again | ||
| [2010/07/22 08:10:09] <testburgher> how can i get all the clients to re-try? | ||
| [2010/07/22 08:10:38] <masterzen> testburgher: check first you're not using a different vardir or ssldir | ||
| [2010/07/22 08:11:38] <testburgher> masterzen: hmm. i created a puppet.conf from the conf gen script | ||
| [2010/07/22 08:11:41] @ concatenate joined channel #puppet | ||
| [2010/07/22 08:12:09] @ concatenate is now known as Guest53500 | ||
| [2010/07/22 08:12:28] <masterzen> testburgher: I meant physically on your master host. maybe installing the rpm changed the settings and your old ssl dir is still there. | ||
| [2010/07/22 08:12:40] <testburgher> where is ssldir set? | ||
| [2010/07/22 08:12:50] <testburgher> it looks hard coded in /etc/puppet/puppet.conf | ||
| [2010/07/22 08:13:13] <masterzen> $ssldir = $vardir/ssl | ||
| [2010/07/22 08:13:17] <masterzen> by default | ||
| [2010/07/22 08:13:22] <Volcane> "hardcoded" in a config file | ||
| [2010/07/22 08:13:25] <Volcane> hehe | ||
| [2010/07/22 08:13:27] <barn> hardcoded in the config file? | ||
| [2010/07/22 08:13:37] <masterzen> some have it as /etc/puppet/ssl or /var/lib/puppet/ssl | ||
| [2010/07/22 08:14:25] @ jhaddad joined channel #puppet | ||
| [2010/07/22 08:14:30] <masterzen> Volcane: as soon as it is written somewhere, it is hardcoded :-) I prefer values coming directly from my mind :-D | ||
| [2010/07/22 08:15:15] <pheezy> masterzen, might you be able to help me with a puppetdoc problem? | ||
| [2010/07/22 08:15:20] @ Mick27 joined channel #puppet | ||
| [2010/07/22 08:15:24] <masterzen> pheezy: sure | ||
| [2010/07/22 08:15:43] <pheezy> basically i'm just attempting to generate those rdoc html pages from my manifests | ||
| [2010/07/22 08:15:48] <pheezy> however i get : http://pastie.org/1055489 | ||
| [2010/07/22 08:16:07] <testburgher> haha, I have a ca_crt.pem in both /etc/puppet/ssl and /var/lib/puppet/ssl | ||
| [2010/07/22 08:16:22] <testburgher> i didn't change any ssl_dir variables. something has gone screwy ;-) | ||
| [2010/07/22 08:16:24] <pheezy> i'm using RDoc V1.0.1 - 20041108 which comes from EPEL | ||
| [2010/07/22 08:16:34] <Volcane> testburgher: did you install from source then install a package? | ||
| [2010/07/22 08:16:38] <testburgher> Volcane: no | ||
| [2010/07/22 08:16:55] <testburgher> just from the epel package | ||
| [2010/07/22 08:17:26] <Volcane> k | ||
| [2010/07/22 08:17:31] <masterzen> pheezy: yes, this is a known issue with older ruby version | ||
| [2010/07/22 08:18:01] <masterzen> pheezy: you can workaround it by editing puppet/util/rdoc.rb and removing the --force-update options in the options array. | ||
| [2010/07/22 08:18:08] <pheezy> ah hah | ||
| [2010/07/22 08:18:12] <masterzen> pheezy: then it will work fine | ||
| [2010/07/22 08:18:14] @ rcrowley joined channel #puppet | ||
| [2010/07/22 08:19:46] <pheezy> excellent man, very excellent, thanks so much for that masterzen, it's been bugging me for days :D | ||
| [2010/07/22 08:20:27] <masterzen> pheezy: np. There's a ticket logged in redmine, but I didn't manage to have the time to fix it yet. | ||
| [2010/07/22 08:20:45] <benkevan> ok.. back to setting up my new puppet environment.. (now that I have everything on 2.6.. well exect my rhel test machine.. let me update that).. does anyone know if epel is updated? | ||
| [2010/07/22 08:21:14] <pheezy> i don't believe so benkevan, it might be in epel-testing though | ||
| [2010/07/22 08:21:30] @ sijis joined channel #puppet | ||
| [2010/07/22 08:21:38] <ohadlevy_> benkevan: there are rpms already, but i guess its too early for epel | ||
| [2010/07/22 08:21:44] <zipkid> how well are 0.25.4 clients supposed to behave on a 2.6 server? And what about 0.24.8 clients? | ||
| [2010/07/22 08:22:05] <benkevan> zipkid: guessing .24.8 is SLES 11 | ||
| [2010/07/22 08:22:15] <Volcane> masterzen: any idea about Could not generate documentation: undefined method `global' for #<RDoc::TopLevel:0x2b81c971c908> ? | ||
| [2010/07/22 08:22:21] <benkevan> zipkid: plain and simple.. try to have them on the same level is what people have told me :) | ||
| [2010/07/22 08:22:38] <zipkid> benkevan: eum.... i'm not telking server-distro... | ||
| [2010/07/22 08:22:43] <zipkid> puppet 2.6 | ||
| [2010/07/22 08:22:49] <zooz> I found what was wrong! :-) | ||
| [2010/07/22 08:23:05] <masterzen> Volcane: hhhm, don't know. Do you have a stacktrace that I can analyze? | ||
| [2010/07/22 08:23:19] <zipkid> benkevan: i was looking for 'experiences'.... | ||
| [2010/07/22 08:23:38] <masterzen> zipkid: normally 0.25 and 0.24 client should be supported by a 2.6 master. But I didn't check myself. | ||
| [2010/07/22 08:23:40] * Volcane 's only tring puppetdoc again first time in ages now since i built new ruby packages | ||
| [2010/07/22 08:24:08] <benkevan> zipkid: I had .25.5 server with a .24.8 client and it worked sometimes, and other times it wouldn't get the catalog (this was a few weeks ago, when everone here told me to get on the same branch) | ||
| [2010/07/22 08:24:22] <masterzen> Volcane: is it with 2.6? what version of rdoc do you have installed? | ||
| [2010/07/22 08:24:22] <zipkid> ok masterzen, i'm going to set up test anyway, just wondering if anyone has been there... | ||
| [2010/07/22 08:24:44] <benkevan> but I've since upgraded all to 2.6 | ||
| [2010/07/22 08:25:08] <zipkid> benkevan: i have that setup and some things fail but they ar clear and defined, no wierdness so no problem... | ||
| [2010/07/22 08:25:08] * progre55 feels bad about hurting Volcane 's feelings.. | ||
| [2010/07/22 08:25:49] <Volcane> masterzen: http://www.pastie.org/1055510 | ||
| [2010/07/22 08:25:55] <benkevan> zipkid: strange.. yah.. my problem is the catalog would get pulled.. then sometimes not get pulled.. (oh wait. nevermind.. I had .24.8 server with .25.5 client.. SLES 11 server w/ RHEL epel client).... so wrong example | ||
| [2010/07/22 08:26:05] <zipkid> progre55: just say sorry and behave, Volcane is a strong kid, he can handle it :-) | ||
| [2010/07/22 08:26:10] <Volcane> progre55: no hurt feelings, i just know who to spend my time on :) | ||
| [2010/07/22 08:26:28] <benkevan> does anyone know where I can get the 2.6 RH rpm's? I can't find them on pub/epel/testing | ||
| [2010/07/22 08:26:33] <progre55> zipkid: you see.. and I'm not even sure why he's mad at me.. | ||
| [2010/07/22 08:26:39] <Volcane> benkevan: see the users list | ||
| [2010/07/22 08:26:50] <progre55> Volcane: sorry :/ | ||
| [2010/07/22 08:27:12] <zipkid> progre55: i at least saw 1 thing where you ignored his advice and next cam whining about it.... | ||
| [2010/07/22 08:27:41] <masterzen> Volcane: what version of ruby and rdoc do you have? | ||
| [2010/07/22 08:27:56] <Volcane> ruby-1.8.6.287-2.el5 ruby-rdoc-1.8.6.287-2.el5 | ||
| [2010/07/22 08:28:04] <benkevan> Volcane: what's a userlist? (sorry I'm in the dark with that) | ||
| [2010/07/22 08:28:13] <Volcane> benkevan: the mailing list for puppet users | ||
| [2010/07/22 08:28:17] <progre55> zipkid: about not installing tarballs? yeah, my bad.. but what I can do about it now? ( | ||
| [2010/07/22 08:28:37] <zipkid> 17:26 < zipkid> progre55: just say sorry and behave, Volcane is a strong kid, he can handle it :-) | ||
| [2010/07/22 08:28:44] * progre55 wishes he could solve the situation by a couple of bottles of beer.. | ||
| [2010/07/22 08:28:55] <progre55> zipkid: I already did =) | ||
| [2010/07/22 08:28:56] <zipkid> the "and behave" part is important here | ||
| [2010/07/22 08:29:02] <progre55> oh :) | ||
| [2010/07/22 08:29:12] <progre55> will do my best ) | ||
| [2010/07/22 08:29:35] <zipkid> progre55: i'm sure Volcane will be happy if you ship him a crate of Westvleteren.... | ||
| [2010/07/22 08:29:46] * zipkid would too.... | ||
| [2010/07/22 08:29:52] <progre55> whereis Volcane | ||
| [2010/07/22 08:29:56] <progre55> oops =) | ||
| [2010/07/22 08:30:02] <progre55> the command doesnt work here :/ | ||
| [2010/07/22 08:30:04] <zipkid> will you hurt my feelings too plz progre55 ? | ||
| [2010/07/22 08:30:04] <hal-j> you can solve just about any problem with enough beer | ||
| [2010/07/22 08:30:19] <progre55> zipkid: get in the line :D | ||
| [2010/07/22 08:30:21] <Volcane> hal-j, zipkid: you assume i drink alcohol :P | ||
| [2010/07/22 08:30:28] <zipkid> hal-j: s/enough/good/ | ||
| [2010/07/22 08:30:45] <barn> Volcane: coffee vouchers | ||
| [2010/07/22 08:30:45] <hal-j> Volcane: I was talking about myself | ||
| [2010/07/22 08:30:46] <zipkid> Volcane: if you don't you can send that crate to me! | ||
| [2010/07/22 08:30:54] <Volcane> zipkid: lol | ||
| [2010/07/22 08:30:55] <hal-j> zipkid: s/enough/enough good | ||
| [2010/07/22 08:31:15] <progre55> well, if any of you are ever in Sweden, just let me know =) | ||
| [2010/07/22 08:31:20] <progre55> I'll have the crate ready | ||
| [2010/07/22 08:32:53] <Volcane> masterzen: i think i only ever managed to get puppetdoc to work once :P | ||
| [2010/07/22 08:33:08] <masterzen> Volcane: lol | ||
| [2010/07/22 08:33:36] <testburgher> ok, i have it sorted | ||
| [2010/07/22 08:33:45] <masterzen> Volcane: you might have a complex setup... | ||
| [2010/07/22 08:33:54] <Volcane> yeah :( | ||
| [2010/07/22 08:34:25] <progre55> how can I force the master to update a file on clients if it has been modified? | ||
| [2010/07/22 08:34:32] <benkevan> Volcane: man.. i can't find it in puppet-users | ||
| [2010/07/22 08:34:41] <testburgher> the rpm installed puppet.conf with defaults, and at some point i over wrote it with the output from puppet --genconfig presuming they were similar defaults.. | ||
| [2010/07/22 08:35:00] <zipkid> progre55: that is what puppet is all about... it just should... | ||
| [2010/07/22 08:35:12] <Volcane> benkevan: amazing cos i type '2.6 rpm' into the search box on groups.google.com and find it right away | ||
| [2010/07/22 08:35:12] <progre55> zipkid: oh, thanks =) | ||
| [2010/07/22 08:35:26] <testburgher> any idea what "seluser: seluser changed 'root' to 'system_u'" has just done? | ||
| [2010/07/22 08:35:57] <AK6L> sounds like an selinux change, if that helps at all | ||
| [2010/07/22 08:36:02] <AK6L> that's about all i can offer though | ||
| [2010/07/22 08:36:07] <benkevan> Volcane: haha.. the comment was collapsed that had the link to it :( | ||
| [2010/07/22 08:36:10] <masterzen> Volcane: is your stacktrace from a puppet 2.6 setup or 0.25? | ||
| [2010/07/22 08:36:22] <Volcane> masterzen: 0.25.5 | ||
| [2010/07/22 08:36:56] @ Quit: verwilst: Quit: Ex-Chat | ||
| [2010/07/22 08:37:35] <Volcane> hmm somethings happening now - pegging my cpu that has to be a good sign :P | ||
| [2010/07/22 08:38:34] <masterzen> Volcane: you mean regarding puppetdoc? | ||
| [2010/07/22 08:38:36] <Volcane> 8327 root 25 0 398m 326m 2720 R 100.1 15.9 1:53.59 puppetdoc | ||
| [2010/07/22 08:38:40] <Volcane> :) | ||
| [2010/07/22 08:38:52] <Volcane> ah and after a long time dies with same | ||
| [2010/07/22 08:39:01] <masterzen> you can run with --debug to see on what file/module it chokes | ||
| [2010/07/22 08:39:46] <Volcane> what the hell, its finding .rb files in my homedir lols | ||
| [2010/07/22 08:40:03] <fenris02> testburgher, run "semanage login -l" and look for your 'root' line. it should look like this ==> root unconfined_u s0-s0:c0.c1023 | ||
| [2010/07/22 08:42:00] <Volcane> 528 pp files with 10000 lines though | ||
| [2010/07/22 08:42:20] <masterzen> Volcane: the issue is that it should produce PuppetTopLevel objects, but in your case it produces TopLevel objects. Those were certainly parsed from .rb. | ||
| [2010/07/22 08:42:30] <masterzen> Volcane: how do you call puppetdoc? | ||
| [2010/07/22 08:42:48] <masterzen> Volcane: I think there are arguments that are missing like modulepath or sth | ||
| [2010/07/22 08:43:11] <testburgher> its | ||
| [2010/07/22 08:43:12] <testburgher> __default__ user_u s0 root root SystemLow-SystemHigh | ||
| [2010/07/22 08:43:19] <Volcane> yeah tried setting those :) --modulepath=/etc/puppet/manifests/common/modules and tried setting a special empty site.pp also environment etc | ||
| [2010/07/22 08:43:31] <Volcane> but i do have lots of rb in my manifests, let me make a copy that excludes all that stuff | ||
| [2010/07/22 08:43:57] <masterzen> Volcane: are they in lib/plugins or files/ ? | ||
| [2010/07/22 08:44:04] <fenris02> err, testburgher i hope that is more than one line. if not, your system sounds really messed up badly | ||
| [2010/07/22 08:44:07] <Volcane> not all | ||
| [2010/07/22 08:44:08] <Volcane> files | ||
| [2010/07/22 08:44:17] <masterzen> normally it should skip those | ||
| [2010/07/22 08:44:39] <masterzen> or maybe it's a bug I fixed only in 2.6 :( | ||
| [2010/07/22 08:46:56] <Volcane> :) if i make a tree with just .pp files it works | ||
| [2010/07/22 08:46:59] <Volcane> well, i have files | ||
| [2010/07/22 08:47:03] <Volcane> let e get them so i can browse | ||
| [2010/07/22 08:47:43] <masterzen> Volcane: yeah, the issue is .rb in files/, rdoc parses them :( | ||
| [2010/07/22 08:48:07] <Whoop> Anyone know where I can find a reliable list of puppet requirements? I cannot for the life of me find them on the site | ||
| [2010/07/22 08:48:10] <progre55> how to delete the "default schedules" so that the client would update the files I've just created? | ||
| [2010/07/22 08:48:13] <Whoop> (attempting to get puppet running on AIX) | ||
| [2010/07/22 08:48:14] <fenris02> is there a way to set your search path? | ||
| [2010/07/22 08:48:47] <progre55> I have changed the pp files, but no effect on the client.. | ||
| [2010/07/22 08:49:23] <fenris02> Whoop, needs facter and ruby | ||
| [2010/07/22 08:49:36] @ toi joined channel #puppet | ||
| [2010/07/22 08:49:38] <Volcane> masterzen: kewl, well i lack decent comments but good to know i know how to get it going now thanks :) | ||
| [2010/07/22 08:49:54] <progre55> Volcane: maybe you could help me out on this? =) | ||
| [2010/07/22 08:50:03] <masterzen> Volcane: cool. I'll make sure it skips .rb | ||
| [2010/07/22 08:50:10] <progre55> Volcane: promise I wont disregard your suggestions | ||
| [2010/07/22 08:50:20] <Whoop> fenris02, Thats not very help :P | ||
| [2010/07/22 08:50:23] <Whoop> Which version of ruby? | ||
| [2010/07/22 08:50:24] <Volcane> masterzen: somehow its still ending up in my ~ and finding all sorts of shit | ||
| [2010/07/22 08:50:25] <Whoop> Any gems? | ||
| [2010/07/22 08:50:27] <Whoop> activerecord? | ||
| [2010/07/22 08:50:29] <Whoop> anyting? | ||
| [2010/07/22 08:50:31] <Volcane> masterzen: had to run it on a box with a clean home dir heh | ||
| [2010/07/22 08:50:48] <progre55> zipkid: help? ) | ||
| [2010/07/22 08:51:00] <masterzen> Volcane: if you want you can send me privately the commandline args and debug output you used. I'll have a look. | ||
| [2010/07/22 08:51:04] <zipkid> progre55: gotta leave to go home.... | ||
| [2010/07/22 08:51:05] <fenris02> Whoop, i did not need any of those, no. | ||
| [2010/07/22 08:51:14] <Volcane> masterzen: will wait for 2.6 | ||
| [2010/07/22 08:51:17] <zipkid> progre55: what are you trying to change? | ||
| [2010/07/22 08:51:26] <Volcane> masterzen: no point debugging too much old code :P | ||
| [2010/07/22 08:51:36] <masterzen> Volcane: #2894, so .rb are not excluded :( | ||
| [2010/07/22 08:51:37] <gepetto> masterzen: Volcane: #2894 is http://projects.puppetlabs.com/issues/show/2894 "Puppet - Bug #2894: puppetdoc should ignore modules/<foo>/files/*.pp - Puppet Labs" | ||
| [2010/07/22 08:51:39] <progre55> zipkid: I've changed the .pp files on the server side.. but no effect on the client side | ||
| [2010/07/22 08:51:42] <fenris02> Whoop, just ruby-1.8.6 and facter-1.5.7 here. along with what they required of course. | ||
| [2010/07/22 08:51:54] <zipkid> progre55: you changed them wrong then... | ||
| [2010/07/22 08:51:58] <zipkid> simple :-) | ||
| [2010/07/22 08:52:14] <zipkid> or you have no clue as to what you are doing.... | ||
| [2010/07/22 08:52:18] <progre55> hmm.. I have a module, and my site.pp imports that module | ||
| [2010/07/22 08:52:29] <progre55> yeah, probably the second :) | ||
| [2010/07/22 08:52:35] <zipkid> or your server is barfing on them and just serving the old version still | ||
| [2010/07/22 08:53:10] <progre55> oh wait, I created a class, but my pp file is named differently than the class name.. | ||
| [2010/07/22 08:53:14] <joe-mac> hmmm, the new 2.6 dsc file is in the 3.0 format, which appaerntly doesn't work on hardy | ||
| [2010/07/22 08:53:14] <progre55> would that be the problem? | ||
| [2010/07/22 08:53:18] <zipkid> progre55: pastie.com your code and someone will (maybe) help you | ||
| [2010/07/22 08:53:29] <progre55> zipkid: sec | ||
| [2010/07/22 08:53:34] <zipkid> .. | ||
| [2010/07/22 08:53:39] <zipkid> 5 | ||
| [2010/07/22 08:54:19] <zipkid> 4 | ||
| [2010/07/22 08:55:02] <zipkid> 3 2 1 Byeeeeeeeeeee | ||
| [2010/07/22 08:55:12] <progre55> here | ||
| [2010/07/22 08:55:16] <progre55> http://pastie.org/1055560 | ||
| [2010/07/22 08:55:28] <benkevan> ah bummer.. RHEL4 ships with ruby 1.8.1 .. too bad the person that build the RHEL4 version spec file didn't include a requires of ruby 1.8.2 (now I have a broken install of puppet since I have puppet 1.8.1 haha) | ||
| [2010/07/22 08:55:30] <progre55> zipkid: take care, man | ||
| [2010/07/22 08:55:35] <progre55> zipkid: appreciate all the help :) | ||
| [2010/07/22 08:55:54] @ thekad-afk is now known as thekad | ||
| [2010/07/22 08:56:06] @ Quit: pmorillo: Quit: pmorillo | ||
| [2010/07/22 08:56:16] <fenris02> benkevan, file a bug report for sure. | ||
| [2010/07/22 08:56:27] @ littleidea joined channel #puppet | ||
| [2010/07/22 08:57:00] <benkevan> Requires: ruby >= 1.8.1 | ||
| [2010/07/22 08:57:07] <benkevan> :( .. boy .. did they get that wrong HAHA | ||
| [2010/07/22 08:57:23] <benkevan> filing now | ||
| [2010/07/22 08:58:21] <fenris02> tmz, ping? | ||
| [2010/07/22 08:58:24] <tmz> benkevan: I thought puppet still worked with 1.8.1 | ||
| [2010/07/22 08:58:44] <tmz> fenris02: Yes? | ||
| [2010/07/22 08:58:54] <benkevan> tmz: 2.6.0 requires 1.8.2 | ||
| [2010/07/22 08:59:33] <fenris02> tmz, just that :) | ||
| [2010/07/22 09:00:22] <tmz> benkevan: I just saw a conversation on the list yesterday about 1.8.1. What is it that's broken? | ||
| [2010/07/22 09:00:38] <benkevan> tmz: puppet won't start | ||
| [2010/07/22 09:01:00] <benkevan> http://www.fpaste.org/cam7/ | ||
| [2010/07/22 09:01:32] <progre55> I have a module, and in the manifests folder I have 2 pp files, init.pp and myclass.pp. I wanted to include myclass.pp and call it in inin.pp, but it says it cant find the class.. suggestions, please? | ||
| [2010/07/22 09:01:58] <schimmi> montag | ||
| [2010/07/22 09:02:03] <schimmi> bin ja nicht da am tag | ||
| [2010/07/22 09:02:12] <schimmi> und es steht "persönlich" auf dem paket | ||
| [2010/07/22 09:02:14] <schimmi> clever | ||
| [2010/07/22 09:02:22] <schimmi> soory | ||
| [2010/07/22 09:02:27] <schimmi> wrong channel ;) | ||
| [2010/07/22 09:02:36] <Volcane> progre55: ask actual questions dont make up hypothetical, and just show what you have on pastie | ||
| [2010/07/22 09:02:44] <tmz> benkevan: Add me as a watcher on the bug you file in redmine. I thought 1.8.1 was still supposed to be supported. | ||
| [2010/07/22 09:02:53] @ bodepd joined channel #puppet | ||
| [2010/07/22 09:02:59] <nimrod10> hi guys, I have a combination of puppetmasterd and puppetd each on his own server. Does it work just by specifying names in /etc/hosts or is it imperative that I use dns ? | ||
| [2010/07/22 09:03:05] <benkevan> tmz http://projects.puppetlabs.com/issues/4333 | ||
| [2010/07/22 09:03:10] <progre55> Volcane: that was a question.. sec, I'll paste it | ||
| [2010/07/22 09:03:25] <Volcane> progre55: no it was not a question, it was a hypothetical | ||
| [2010/07/22 09:03:34] <Volcane> progre55: you're not really calling it myclass? | ||
| [2010/07/22 09:03:45] <jamesturnbull> ashp: for training - talk to scott@puppetlabs.com | ||
| [2010/07/22 09:03:47] <nimrod10> I get this error which is not at all helpful : err: Could not retrieve catalog from remote server: undefined method `closed?' for nil:NilClass | ||
| [2010/07/22 09:04:30] <tmz> jamesturnbull: Is ruby 1.8.1 still intended to work with puppet 2.6.0? Or does the README and other places need updated? | ||
| [2010/07/22 09:04:36] @ dbristow joined channel #puppet | ||
| [2010/07/22 09:04:41] <jamesturnbull> tmz: it should still work | ||
| [2010/07/22 09:04:46] <jamesturnbull> tmz: what's up? | ||
| [2010/07/22 09:05:02] <tmz> jamesturnbull: See benkevan's paste: http://www.fpaste.org/cam7/ and #4333 | ||
| [2010/07/22 09:05:03] <gepetto> tmz: jamesturnbull: #4333 is http://projects.puppetlabs.com/issues/show/4333 "Puppet - Bug #4333: conf/redhat/puppet.spec has wrong ruby requires, leaving installations on RHEL4 broken - Puppet Labs" | ||
| [2010/07/22 09:05:04] <Volcane> jamesturnbull: #4333 | ||
| [2010/07/22 09:05:04] <gepetto> Volcane: jamesturnbull: #4333 is http://projects.puppetlabs.com/issues/show/4333 "Puppet - Bug #4333: conf/redhat/puppet.spec has wrong ruby requires, leaving installations on RHEL4 broken - Puppet Labs" | ||
| [2010/07/22 09:05:10] <Volcane> :) | ||
| [2010/07/22 09:05:15] <Volcane> lets all spam james day | ||
| [2010/07/22 09:05:27] <dbristow> What does the "managehome" attribute for a user object work? The website docs don't say much. | ||
| [2010/07/22 09:05:33] <benkevan> haha.. | ||
| [2010/07/22 09:05:34] <progre55> Volcane: oh you mean that :) well, here it is http://pastie.org/1055571 | ||
| [2010/07/22 09:05:38] <Volcane> dbristow: managehome => true | ||
| [2010/07/22 09:05:53] <dbristow> Volcane: But what does it mean? | ||
| [2010/07/22 09:06:07] <Volcane> dbristow: it will tell adduser to make a homedirectory | ||
| [2010/07/22 09:06:15] <progre55> and here is the error I get from the client: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find class tomcat at /etc/puppet/modules/tomcat6/manifests/init.pp:1 | ||
| [2010/07/22 09:06:18] <dbristow> If the user already exists, will it mess with it? | ||
| [2010/07/22 09:06:25] <Volcane> progre55: module tomcat, if you just want to do include tomcat you have to put it in init.pp | ||
| [2010/07/22 09:06:28] <Volcane> dbristow: no | ||
| [2010/07/22 09:06:56] <dbristow> I'd like to symlink the home dir to a volume with more space. If I do that, will puppet change it back? | ||
| [2010/07/22 09:07:11] <jamesturnbull> tmz: so there seem to be a logic leap there | ||
| [2010/07/22 09:07:20] <Volcane> dbristow: not if the user already exist, all managehome does is run adduser with the right option - so its during creation only | ||
| [2010/07/22 09:07:25] <dbristow> Ahhh. Great. | ||
| [2010/07/22 09:07:29] <dbristow> That's what I thought. | ||
| [2010/07/22 09:07:32] <jamesturnbull> tmz: 2.6.0 != 1.8.1 - if it isn't that'd be a bug | ||
| [2010/07/22 09:07:40] <Volcane> dbristow: i think it might also run userdel -r or whatever, but should leave existing users alone | ||
| [2010/07/22 09:07:51] <jamesturnbull> also ... spec file is not written by me :) | ||
| [2010/07/22 09:08:42] <Volcane> progre55: so modules/tomcat/manifests/init.pp is class tomcat but modules/tomcat/manifests/tomcat.pp is class tomcat::tomcat | ||
| [2010/07/22 09:08:50] @ Quit: jaredrhine: Ping timeout: 276 seconds | ||
| [2010/07/22 09:09:11] <benkevan> i feel like I've been the .spec police lately haha | ||
| [2010/07/22 09:09:23] <progre55> Volcane: oh, now I get it! | ||
| [2010/07/22 09:09:41] <progre55> Volcane: I just copied the whole class code into init.pp and it worked! thanks man | ||
| [2010/07/22 09:10:17] <tmz> jamesturnbull: I'm confused. Is ruby 1.8.1 no longer supported? | ||
| [2010/07/22 09:10:27] @ Quit: yannL: Read error: Connection reset by peer | ||
| [2010/07/22 09:10:31] <jamesturnbull> tmz: nope ... it's supported | ||
| [2010/07/22 09:10:44] <jamesturnbull> tmz: I'm confused too - I've queried that dev list email internally | ||
| [2010/07/22 09:10:51] <tmz> jamesturnbull: Okay. Then it's just broken for now in 2.6.0. :) | ||
| [2010/07/22 09:10:57] <jamesturnbull> tmz: but we still support 1.8.1 and RHEL4 | ||
| [2010/07/22 09:11:13] <tmz> jamesturnbull: Excellent. I'll keep my eye on that ticket. | ||
| [2010/07/22 09:12:00] <benkevan> I'm going to build ruby 1.8.4 on this same RHEL4 machine and let you know how it works too | ||
| [2010/07/22 09:12:29] <progre55> well, my working day is over for today | ||
| [2010/07/22 09:12:33] <progre55> take care people! | ||
| [2010/07/22 09:12:39] <progre55> and thanks for all the help =) | ||
| [2010/07/22 09:12:39] <jamesturnbull> benkevan: before yu do I need some more data | ||
| [2010/07/22 09:12:40] <tmz> benkevan: I think a few folks have just rebuilt the EL-5 ruby for EL-4. | ||
| [2010/07/22 09:12:56] <jamesturnbull> benkevan: can you run with --debug --trace and put the results in the ticket? | ||
| [2010/07/22 09:13:00] <tmz> jamesturnbull: I have a centos 4.7 VM at hand, if you want. | ||
| [2010/07/22 09:13:09] <jamesturnbull> tmz: or that - thanks :) | ||
| [2010/07/22 09:13:11] <benkevan> yup.. will do.. but do want to note that 1.8.4 worked just fine on the said machine | ||
| [2010/07/22 09:13:21] @ progre55 left channel #puppet ("time for some golf") | ||
| [2010/07/22 09:13:40] <tmz> jamesturnbull: puppetd --trace --debug --test yeilds no more output. | ||
| [2010/07/22 09:13:43] @ squirrel_labs joined channel #puppet | ||
| [2010/07/22 09:13:50] @ ceren joined channel #puppet | ||
| [2010/07/22 09:13:51] <tmz> Will note that in the ticket. | ||
| [2010/07/22 09:14:41] <jamesturnbull> tmz: thanks | ||
| [2010/07/22 09:14:42] @ sebas891 left channel #puppet () | ||
| [2010/07/22 09:15:04] <jamesturnbull> benkevan: how did you install Puppet on that host? | ||
| [2010/07/22 09:15:29] <benkevan> jamesturnbull: RPM provided by tmz via puppet repo | ||
| [2010/07/22 09:15:45] <benkevan> works fine with ruby 1.8.4 not with 1.8.1 | ||
| [2010/07/22 09:17:00] <tmz> benkevan: Thanks for testing those packages. Sorry for not testing them myself on EL-4 to save you the trouble. :/ | ||
| [2010/07/22 09:17:27] <jamesturnbull> hmmm looks like optparse has different methods on 1.8.1 | ||
| [2010/07/22 09:17:55] <benkevan> tmz: not a problemo.. not your fault.. but if I remember reading correctly the documentation I saw fo puppet 2.6.0 said it required 1.8.2 (let me dig up) | ||
| [2010/07/22 09:18:13] <cparedes> hey guys. had a quick question: is puppet compatible with ruby 1.9.x? | ||
| [2010/07/22 09:18:58] <cparedes> (i've heard of memory leak issues on ruby 1.8.x; this isn't necessarily a deal breaker, i guess i could set up puppetmasterd to run with inetd/xinetd) | ||
| [2010/07/22 09:19:11] <benkevan> tmz: and another note.. I'm sad to have RHEL4 :D | ||
| [2010/07/22 09:19:14] <cparedes> (and puppetd to run with a cron) | ||
| [2010/07/22 09:19:32] <Volcane> you probably would not want the master to run under inetd :) | ||
| [2010/07/22 09:19:41] <benkevan> What Is The Minimum Version of Ruby? | ||
| [2010/07/22 09:19:42] <benkevan> Puppet is supported on all versions of Ruby from 1.8.2 on up. It will sometimes work on 1.8.1, but it’s not supported on that release. | ||
| [2010/07/22 09:19:42] <Volcane> and really the mem leaks is fud, its mostly fine | ||
| [2010/07/22 09:19:52] <benkevan> is what i see on http://projects.puppetlabs.com/projects/puppet/wiki/Frequently_Asked_Questions#What+Is+The+Minimum+Version+of+Ruby? | ||
| [2010/07/22 09:20:29] <cparedes> Volcane: i don't know about that. i hear a lot on mailing lists about it. | ||
| [2010/07/22 09:20:40] <Volcane> cparedes: i am saying in the case of puppetmaster | ||
| [2010/07/22 09:20:43] <cparedes> ah | ||
| [2010/07/22 09:20:53] <Volcane> cparedes: if you avoid certain tings like copying large files you're fine | ||
| [2010/07/22 09:21:07] <Volcane> cparedes: and in the newest version even thats not a problem really | ||
| [2010/07/22 09:21:35] <cparedes> ah awesome. | ||
| [2010/07/22 09:21:54] <Volcane> my masters run for months and never cause me a moments hassle | ||
| [2010/07/22 09:22:00] <fenris02> Volcane, how large of a file? | ||
| [2010/07/22 09:22:28] <Volcane> cparedes: especially if you run the master under passenger - it will get recycled now and then keeping any issues there are under control | ||
| [2010/07/22 09:22:44] <Volcane> cparedes: and as you suggest running puppetd in cron is fine - you must just avoid them running all at the sae time | ||
| [2010/07/22 09:22:58] <cparedes> (i have to come up with a comparison sheet between puppet, bcfg2, and maybe pacha or whatever it's called.) | ||
| [2010/07/22 09:23:11] <cparedes> ah. so stagger the crons somehow? | ||
| [2010/07/22 09:23:15] * jamesturnbull falls off his couch Volcane is saying nice things about Puppet's memory usage... :) | ||
| [2010/07/22 09:23:23] <Volcane> fenris02: *shrug* its a config management system, i copy config files | ||
| [2010/07/22 09:23:44] <Volcane> cparedes: yup, the master is a ruby web app, you want to not hit it with 1000 nodes at once :) | ||
| [2010/07/22 09:23:48] <fenris02> Volcane, right, of course -- i meant how large of a file before it becomes an issue? | ||
| [2010/07/22 09:23:51] <hal-j> re: running from cron. I do it. cron runs a script that sleeps for a random number of seconds and then does a onetime puppet run | ||
| [2010/07/22 09:23:57] <jamesturnbull> fenris02: 2.6.0 has file streaming too ... so that "large" file is larger than it used to be | ||
| [2010/07/22 09:24:13] <Volcane> fenris02: it depends on a many factors | ||
| [2010/07/22 09:24:19] <fenris02> Volcane, does it maintain a copy in ram for each client? what does the issue stem from? | ||
| [2010/07/22 09:24:46] <Volcane> fenris02: ruby cannot release memory from its VM, ever. | ||
| [2010/07/22 09:24:54] <fenris02> ouch | ||
| [2010/07/22 09:25:10] <Volcane> fenris02: and in older versions of puppet each file sat in memory 2 or 3 times i forget the specific now | ||
| [2010/07/22 09:25:19] <Volcane> fenris02: and one of those copies were like mime encoded or something | ||
| [2010/07/22 09:25:33] <Volcane> fenris02: 25 is better, 26 appaerntly much better | ||
| [2010/07/22 09:25:52] <fenris02> there is no gc/reaper process for ruby? | ||
| [2010/07/22 09:26:07] <Volcane> it can gc, so memory already allocated to the VM can be reused | ||
| [2010/07/22 09:26:15] <hal-j> it's worth noting that this all falls under the "inconvenience" heading, not critical problem making puppet useless | ||
| [2010/07/22 09:26:16] <Volcane> but if say it needed a meg to do something, then discard that and gc it | ||
| [2010/07/22 09:26:29] <Volcane> you'd have a VM with a meg free | ||
| [2010/07/22 09:26:32] <Volcane> it doesnt release it to the OS | ||
| [2010/07/22 09:26:36] <cparedes> my main issue is that i have to convince someone who's really into python | ||
| [2010/07/22 09:26:41] <cparedes> to adopt something written in ruby | ||
| [2010/07/22 09:26:46] <cparedes> even if the DSL isn't in ruby! | ||
| [2010/07/22 09:26:53] <bitfield> linux isn't written in ruby | ||
| [2010/07/22 09:26:59] <fenris02> Volcane, right, other langs do the same thing | ||
| [2010/07/22 09:27:00] <bitfield> is that a problem? :) | ||
| [2010/07/22 09:27:07] <benkevan> i wish my attention span was longer then my 3 year old sons | ||
| [2010/07/22 09:27:27] <fenris02> benkevan, hm? shiny object? where? | ||
| [2010/07/22 09:27:27] @ yannL joined channel #puppet | ||
| [2010/07/22 09:27:37] <benkevan> ooh look a squirrel | ||
| [2010/07/22 09:27:56] <cparedes> bitfield: not at all. :) | ||
| [2010/07/22 09:28:20] <hal-j> cparedes: both python and ruby are written in C, so it's all good | ||
| [2010/07/22 09:28:23] * cparedes prefers tools that work well, no matter the OS or language. and puppet works well. | ||
| [2010/07/22 09:29:36] @ Quit: ahasenack: Quit: Leaving | ||
| [2010/07/22 09:29:41] <Volcane> the daemon doesnt work well :) | ||
| [2010/07/22 09:30:18] <cparedes> for what it purports to do along with the language, i think it works well. i like being able to prototype an infrastructure with puppet code without having to deploy anything. | ||
| [2010/07/22 09:30:37] <cparedes> but i guess the same could be said of any conf mgmt system? :x | ||
| [2010/07/22 09:30:39] <Volcane> no, puppet is fine, what it does is fine, the end result is fine | ||
| [2010/07/22 09:30:43] @ gniks joined channel #puppet | ||
| [2010/07/22 09:30:49] <Volcane> the *daemon* isnt great | ||
| [2010/07/22 09:31:01] <cparedes> ah :P | ||
| [2010/07/22 09:31:01] <Volcane> i didnt say puppet isnt | ||
| [2010/07/22 09:32:16] @ Quit: gniks: Client Quit | ||
| [2010/07/22 09:34:33] @ Quit: bitfield: Ping timeout: 240 seconds | ||
| [2010/07/22 09:34:48] @ adrian_broher joined channel #puppet | ||
| [2010/07/22 09:36:10] @ Hypnoz joined channel #puppet | ||
| [2010/07/22 09:39:50] @ Quit: toi: Ping timeout: 260 seconds | ||
| [2010/07/22 09:40:12] @ bitfield joined channel #puppet | ||
| [2010/07/22 09:42:12] @ twoslice joined channel #puppet | ||
| [2010/07/22 09:44:14] @ mclarke joined channel #puppet | ||
| [2010/07/22 09:45:15] @ jab_doa joined channel #puppet | ||
| [2010/07/22 09:48:37] @ stopdropandrew joined channel #puppet | ||
| [2010/07/22 09:48:47] @ lminav joined channel #puppet | ||
| [2010/07/22 09:50:13] <stopdropandrew> is anyone getting this error when upgrading to puppet 2.6? | ||
| [2010/07/22 09:50:13] <stopdropandrew> err: /File[/var/lib/puppet/reports]: Could not evaluate: Could not find group puppet | ||
| [2010/07/22 09:50:13] <stopdropandrew> Could not prepare for execution: Got 1 failure(s) while initializing: Could not evaluate: Could not find group puppet | ||
| [2010/07/22 09:50:26] @ gniks joined channel #puppet | ||
| [2010/07/22 09:50:43] @ Quit: TREllis: Read error: Operation timed out | ||
| [2010/07/22 09:50:45] <Volcane> and do you have a group puppet? | ||
| [2010/07/22 09:50:56] <stopdropandrew> no, i just installed the gem, i run puppet as root | ||
| [2010/07/22 09:50:59] <Volcane> well then | ||
| [2010/07/22 09:51:14] <stopdropandrew> why does the gem require me to have a puppet group? | ||
| [2010/07/22 09:52:44] <Volcane> well, the gem doesnt require it | ||
| [2010/07/22 09:52:50] <Volcane> using puppet requires you read the docs though | ||
| [2010/07/22 09:52:56] <Volcane> which tells you how to add the user | ||
| [2010/07/22 09:53:34] @ Quit: rmiller4pi8: Ping timeout: 265 seconds | ||
| [2010/07/22 09:53:49] <Volcane> ideally you'd use a package for your OS | ||
| [2010/07/22 09:53:54] <stopdropandrew> i read the change logs and it said nothing about requiring a puppet user/group | ||
| [2010/07/22 09:54:23] <Volcane> because requireing the user isnt a change | ||
| [2010/07/22 09:54:27] <Volcane> its always been needed | ||
| [2010/07/22 09:54:36] <bleything> stopdropandrew: I think it was always "required", but would work without before | ||
| [2010/07/22 09:54:50] <stopdropandrew> well, i've been running it without one for awhile, and just got the error after upgrading | ||
| [2010/07/22 09:56:05] <stopdropandrew> thanks ben, i still don't see anything in the docs but i guess i'll bite the bullet and manually install a puppet user on all my servers (isn't that what puppet is for?) | ||
| [2010/07/22 09:56:17] <bleything> stopdropandrew: one sec | ||
| [2010/07/22 09:56:26] <Volcane> stopdropandrew: pretty sure its only the master that needs it | ||
| [2010/07/22 09:56:40] <bleything> it's really sad that the docs are so crap :( | ||
| [2010/07/22 09:56:42] <Volcane> stopdropandrew: if the normal daemon on the clients need it then thats a bug | ||
| [2010/07/22 09:57:11] <bleything> stopdropandrew: http://docs.puppetlabs.com/guides/configuring.html in the "Start the central daemon" section, it sort of mentions in small text that you need to set that up :/ | ||
| [2010/07/22 09:57:14] <Volcane> bleything: making users on the master is well documented http://docs.puppetlabs.com/guides/configuring.html | ||
| [2010/07/22 09:57:29] @ markm joined channel #puppet | ||
| [2010/07/22 09:57:53] <markm> noob question for y'all... | ||
| [2010/07/22 09:58:21] <stopdropandrew> i have the user on the master, it's on my clients that i'm getting the error | ||
| [2010/07/22 09:58:34] <Volcane> stopdropandrew: then i think there's a bug, is it 2.6? | ||
| [2010/07/22 09:58:48] <Volcane> though all my clients have that user - the rpm makes it | ||
| [2010/07/22 09:59:00] @ jumex joined channel #puppet | ||
| [2010/07/22 09:59:04] @ twoslice left channel #puppet ("Leaving") | ||
| [2010/07/22 09:59:25] <stopdropandrew> yeah, i use the gem. i didn't want to mess with the rpm because i have a complicated ruby install. | ||
| [2010/07/22 09:59:55] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/07/22 10:00:02] <markm> I see that there is -some- windows support now in puppet.... would this be usable with windows instances on ec2? I'm going to have a growing number of ec2 instances, and would like to be able to use puppet to handle deployment/configuration tasks to multiple instances. Am I digging in the right place? | ||
| [2010/07/22 10:00:06] <hal-j> FWIW - my ubuntu debs seem to ahve created the user on the clients as well | ||
| [2010/07/22 10:00:24] @ vachon joined channel #puppet | ||
| [2010/07/22 10:00:24] <ReinH> morning | ||
| [2010/07/22 10:00:27] <jamesturnbull> stopdropandrew: so ... Rubygems can't create users/groups | ||
| [2010/07/22 10:00:34] @ Quit: jumex: Client Quit | ||
| [2010/07/22 10:00:34] <ReinH> jamesturnbull: oh hi | ||
| [2010/07/22 10:00:47] <jamesturnbull> ReinH: hi indeed | ||
| [2010/07/22 10:00:50] <Volcane> jamesturnbull: seems the client now wont work without the user - cant imagine why the client even needs it | ||
| [2010/07/22 10:01:15] <jamesturnbull> Volcane: possibly a bug in the new bootstrap code | ||
| [2010/07/22 10:01:33] <jamesturnbull> stopdropandrew: can you run with --trace --debug and log a ticket with the output please? | ||
| [2010/07/22 10:01:43] <ashp> jamesturnbull: is scott someoen in here? I just wondered if it was someone from here I've been speaking to for years :D | ||
| [2010/07/22 10:01:54] <stopdropandrew> jamesturnbull: sure | ||
| [2010/07/22 10:02:02] <jamesturnbull> ashp: nope - he's in sales - he doesn't recognise IRC :) | ||
| [2010/07/22 10:02:10] <jamesturnbull> ashp: "Does it have an interface to Salesforce...." | ||
| [2010/07/22 10:02:18] <ashp> :D | ||
| [2010/07/22 10:02:22] @ alfism joined channel #puppet | ||
| [2010/07/22 10:02:36] <ashp> but it's one of you techies who normally does the actual training, right? they don't let the sales guy run it :D | ||
| [2010/07/22 10:03:47] <jamesturnbull> ashp: lol | ||
| [2010/07/22 10:03:53] <vachon> is this legit for a cron entry? (note the multi-quotes) | ||
| [2010/07/22 10:03:54] <vachon> http://pastebin.com/HDZ8v834 | ||
| [2010/07/22 10:04:24] <jamesturnbull> ashp: training is run by Jeff McCune or Dan Bode or Nan ... so technos | ||
| [2010/07/22 10:04:37] <vachon> Dan is quote the techno | ||
| [2010/07/22 10:04:49] @ Quit: Mick27: Quit: Leaving | ||
| [2010/07/22 10:05:16] <vachon> jamesturnbull: what do you think of that Likewise module Rob/eidlion submitted? | ||
| [2010/07/22 10:05:35] <ashp> see if it was dan doing boston | ||
| [2010/07/22 10:05:39] <ashp> i'd definitely hassle him into beer :) | ||
| [2010/07/22 10:05:48] <ashp> he's helped me a bunch on cases | ||
| [2010/07/22 10:07:52] <joe-mac> what is puppet-testsuite for? | ||
| [2010/07/22 10:08:27] <joe-mac> i have a simple likewise class, just joins the machine toa d omain | ||
| [2010/07/22 10:08:31] <joe-mac> what does this new module do | ||
| [2010/07/22 10:08:50] @ sdog joined channel #puppet | ||
| [2010/07/22 10:08:58] <vachon> i guess its not on the forge yet | ||
| [2010/07/22 10:09:15] <vachon> it does everything | ||
| [2010/07/22 10:09:24] <joe-mac> so it will go get me lunch right now? | ||
| [2010/07/22 10:09:28] <joe-mac> i'm installing it :-D | ||
| [2010/07/22 10:09:31] @ Quit: [GuS]: Remote host closed the connection | ||
| [2010/07/22 10:09:35] <vachon> install, join, gpo update, etc | ||
| [2010/07/22 10:09:41] <vachon> (if he got that far) | ||
| [2010/07/22 10:10:37] <jamesturnbull> ashp: It's Dan | ||
| [2010/07/22 10:10:53] @ [GuS] joined channel #puppet | ||
| [2010/07/22 10:10:54] @ Quit: [GuS]: Changing host | ||
| [2010/07/22 10:10:54] @ [GuS] joined channel #puppet | ||
| [2010/07/22 10:10:56] <jamesturnbull> vachon: looks like it's not submitted yet | ||
| [2010/07/22 10:11:03] <vachon> yea, so i saw | ||
| [2010/07/22 10:11:21] <jamesturnbull> joe-mac: it's acceptance tests for puppet and puppet manifests | ||
| [2010/07/22 10:11:29] @ TREllis joined channel #puppet | ||
| [2010/07/22 10:11:58] @ Quit: alban2: Ping timeout: 246 seconds | ||
| [2010/07/22 10:12:44] <joe-mac> hmm, interesting | ||
| [2010/07/22 10:12:51] <joe-mac> so i can unit test my manifests with uit i guess? | ||
| [2010/07/22 10:15:57] @ plathrop-away is now known as plathrop | ||
| [2010/07/22 10:16:10] @ lutter joined channel #puppet | ||
| [2010/07/22 10:16:16] <jamesturnbull> joe-mac: sorry which thing are you talking about again? just to make sure we're on the same page | ||
| [2010/07/22 10:16:27] @ Quit: TREllis: Ping timeout: 240 seconds | ||
| [2010/07/22 10:16:52] @ fcami joined channel #puppet | ||
| [2010/07/22 10:17:25] @ Quit: sdog: Quit: Leaving. | ||
| [2010/07/22 10:17:52] <Volcane> joe-mac: it tests puppet for all sorts of things, like something they use before release | ||
| [2010/07/22 10:18:05] @ gmcquillan joined channel #puppet | ||
| [2010/07/22 10:18:18] <Volcane> or so it seems anyway judging by the files :) | ||
| [2010/07/22 10:19:45] <testburgher> im not getting anything in my puppet-dashboard | ||
| [2010/07/22 10:20:08] <testburgher> ive set reports=true and reports = store, http | ||
| [2010/07/22 10:20:15] <testburgher> and restarted the server and clients, but nothing | ||
| [2010/07/22 10:22:57] <jamesturnbull> testburgher: houston we have a problem that ReinH can explain ... :P | ||
| [2010/07/22 10:23:32] <ReinH> jamesturnbull: delighted to | ||
| [2010/07/22 10:23:40] <ReinH> testburgher: you're on Puppet 2.6.0? | ||
| [2010/07/22 10:23:50] @ lak joined channel #puppet | ||
| [2010/07/22 10:24:12] <testburgher> ReinH: no. puppet-0.25.5-1.el5 | ||
| [2010/07/22 10:24:41] <ReinH> testburgher: which puppet version? | ||
| [2010/07/22 10:24:42] <ReinH> er | ||
| [2010/07/22 10:24:45] <ReinH> dashboard | ||
| [2010/07/22 10:24:57] <testburgher> from repos puppet-dashboard.noarch | ||
| [2010/07/22 10:25:25] <testburgher> 1.0.1 r2 | ||
| [2010/07/22 10:25:45] <ReinH> testburgher: ah, there's a bug in reporting in that release, we should get an update out today | ||
| [2010/07/22 10:26:14] <ReinH> testburgher: if you'd like to use my git master, it's fixed there: http://github.com/reinh/puppet-dashboard | ||
| [2010/07/22 10:26:55] <testburgher> ReinH: cool. many thanks! | ||
| [2010/07/22 10:27:55] @ jmccune joined channel #puppet | ||
| [2010/07/22 10:27:57] @ jdcasey joined channel #puppet | ||
| [2010/07/22 10:28:02] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/07/22 10:33:48] @ Quit: [GuS]: Remote host closed the connection | ||
| [2010/07/22 10:34:12] @ flakrat_ joined channel #puppet | ||
| [2010/07/22 10:35:30] @ failshell joined channel #puppet | ||
| [2010/07/22 10:35:38] @ [GuS] joined channel #puppet | ||
| [2010/07/22 10:35:38] @ Quit: [GuS]: Changing host | ||
| [2010/07/22 10:35:38] @ [GuS] joined channel #puppet | ||
| [2010/07/22 10:38:05] <vachon> if anyone is in the same boat as me (aka tagmail seems too much and you have no http access to the server) http://pastebin.stonekeep.com/11333 script parses puppetlast and says if stuff is stale | ||
| [2010/07/22 10:38:12] <vachon> not perfect, but better than nothing | ||
| [2010/07/22 10:38:47] <joe-mac> tagmail is ok, though it needs some more featurs for sure | ||
| [2010/07/22 10:39:06] <joe-mac> namely the ability to say err except some_class: myteam@mysite.com | ||
| [2010/07/22 10:39:08] @ Quit: wakko666: Quit: Ex-Chat | ||
| [2010/07/22 10:39:20] <joe-mac> exceptions would be really nice, cause i know at certain times, certain things will bef ailing, and regular err tag will spam me | ||
| [2010/07/22 10:39:23] @ wakko666 joined channel #puppet | ||
| [2010/07/22 10:39:42] <vachon> exactly why i am not using it | ||
| [2010/07/22 10:39:53] <vachon> i dont see it being improved anytime soon with dashboard catching on | ||
| [2010/07/22 10:40:53] @ sdog joined channel #puppet | ||
| [2010/07/22 10:44:55] <joe-mac> vachon: i was going to patch it up this past weekend but i got caught up doing a bunch of other shit, and will likely get jammed this weekend too | ||
| [2010/07/22 10:44:59] <testburgher> can iptables use a nsswitch.conf style netgroup? | ||
| [2010/07/22 10:45:03] <joe-mac> it shouldn't be too ahrd to add a couple nice-to-haves to it | ||
| [2010/07/22 10:49:14] @ jdcasey joined channel #puppet | ||
| [2010/07/22 10:57:48] @ muffintop joined channel #puppet | ||
| [2010/07/22 10:58:03] @ Quit: sdog: Changing host | ||
| [2010/07/22 10:58:03] @ sdog joined channel #puppet | ||
| [2010/07/22 10:58:22] @ Quit: bodepd: Quit: bodepd | ||
| [2010/07/22 10:58:45] <muffintop> If I have machines named "hello{1,2,3,4}", is there a way in site.pp to say "node hello* { include hello }"? | ||
| [2010/07/22 10:58:57] @ Quit: evilgeenius: Quit: Page closed | ||
| [2010/07/22 10:59:35] <eric0> you've almost got it, just use regexp delimiters around the hostname node /hello\d+/ { include hello } | ||
| [2010/07/22 10:59:44] <vachon> yup | ||
| [2010/07/22 10:59:58] <muffintop> is that pure Ruby regex syntax? | ||
| [2010/07/22 11:00:08] <eric0> aye | ||
| [2010/07/22 11:00:15] <vachon> there's a difference? | ||
| [2010/07/22 11:01:10] <eric0> vachon: there are lots of different regex engines. | ||
| [2010/07/22 11:02:04] @ the854 joined channel #puppet | ||
| [2010/07/22 11:02:39] @ Quit: littleidea: Quit: littleidea | ||
| [2010/07/22 11:03:46] @ littleidea joined channel #puppet | ||
| [2010/07/22 11:05:52] @ Quit: lutter: Quit: Leaving. | ||
| [2010/07/22 11:06:40] <muffintop> cool, that worked great, thank you eric0 | ||
| [2010/07/22 11:07:46] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:07:59] @ Quit: lminav: Remote host closed the connection | ||
| [2010/07/22 11:10:09] @ lutter joined channel #puppet | ||
| [2010/07/22 11:10:40] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:11:03] @ HouseAway is now known as AimanA | ||
| [2010/07/22 11:11:10] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:11:50] @ Quit: failshell: Quit: Lost terminal | ||
| [2010/07/22 11:11:53] @ Quit: bodepd: Read error: Connection reset by peer | ||
| [2010/07/22 11:12:20] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:12:39] @ bodepd left channel #puppet () | ||
| [2010/07/22 11:13:33] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:13:38] @ Quit: bodepd: Client Quit | ||
| [2010/07/22 11:15:02] @ Quit: markm: Quit: Page closed | ||
| [2010/07/22 11:19:29] @ Quit: n0ts: Ping timeout: 276 seconds | ||
| [2010/07/22 11:20:09] <benkevan> tmz: if you want some rhel4 updated ruby packages.. I've built: http://download.opensuse.org/repositories/home:/eclipseagent:/ruby/RedHat_RHEL-4/ | ||
| [2010/07/22 11:23:14] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:23:45] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:23:57] @ n0ts joined channel #puppet | ||
| [2010/07/22 11:24:10] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:24:42] @ Quit: bodepd: Client Quit | ||
| [2010/07/22 11:27:00] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:27:13] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:27:47] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:28:24] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:28:54] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:29:36] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:29:41] <the854> Does Puppet allow for configuration files to be modified in place? | ||
| [2010/07/22 11:30:05] @ bodepd joined channel #puppet | ||
| [2010/07/22 11:30:17] <jbooth> the854: Likely not as you mean. | ||
| [2010/07/22 11:30:38] <the854> so then is puppet only designed for deployment? | ||
| [2010/07/22 11:30:51] @ Quit: bodepd: Remote host closed the connection | ||
| [2010/07/22 11:30:57] <jbooth> the854: Puppet can run sed, which can do that. It has some providers which understand and modify files (augeas, yumrepo). It can also just all-out replace them with a copy or templated file from the server. | ||
| [2010/07/22 11:31:23] <the854> ok | ||
| [2010/07/22 11:31:24] <jbooth> the854: But if you're looking for a builtin "add this line. Delete this line" that's not the puppet way. | ||
| [2010/07/22 11:31:47] <the854> so then if i wanted to add 'TraceEnable off' to /etc/httpd/conf/httpd.conf would that be possible for example? | ||
| [2010/07/22 11:31:48] <jbooth> the854: You can make it do it, but that signals it is time to step back and consider the problem carefully. | ||
| [2010/07/22 11:32:27] <jbooth> the854: Sure. exec { "echo ...>>file": unless => "grep ... file" } | ||
| [2010/07/22 11:32:49] <jbooth> It should still make you stop and think, "is this really the right way to do this" | ||
| [2010/07/22 11:33:04] <jbooth> Sometimes the answer is yes -- I use echo a few places where I really do want to just add one line. | ||
| [2010/07/22 11:33:04] <hal-j> the answer is probably "no" :) | ||
| [2010/07/22 11:33:24] <the854> ok | ||
| [2010/07/22 11:33:26] <jbooth> Generally though the answer is no | ||
| [2010/07/22 11:33:33] <the854> now does puppet allow different servers to have different configurations | ||
| [2010/07/22 11:33:38] <the854> or does it do a "across the board" | ||
| [2010/07/22 11:33:50] <jbooth> Wouldn't be much use if it didn't let configs vary | ||
| [2010/07/22 11:34:00] <the854> ok | ||
| [2010/07/22 11:34:13] <the854> and thirdly...could i have puppet run a command across all of the servers in puppet? | ||
| [2010/07/22 11:34:46] <jbooth> If you mean like you would via pdsh, no. | ||
| [2010/07/22 11:35:05] <jbooth> It can, but that's using puppet's hammer to drive a screw into a board. | ||
| [2010/07/22 11:35:27] <jbooth> You tell puppet what a server should look like in final state. Puppet makes it so. | ||
| [2010/07/22 11:36:34] <jbooth> Among other things, this means you need to be able to make all your changes idempotent -- the machine needs to land in the same state after the first run, the second run, ... then n'th run. | ||
| [2010/07/22 11:37:27] <jbooth> Concrete example: You don't want to just exec { "echo ...>>file": } -- you'll end up with dozens of copies of that line in the file. You need the unless=>"grep ... file" to make it idempotent. | ||
| [2010/07/22 11:37:43] @ failshell joined channel #puppet | ||
| [2010/07/22 11:37:44] <jbooth> Running a one-off command kinda breaks that | ||
| [2010/07/22 11:38:06] <failshell> hey guys. does the dashboard use the same DB schema as storeconfigs? | ||
| [2010/07/22 11:38:29] <jbooth> failshell: No, it uses its own. | ||
| [2010/07/22 11:38:44] <jbooth> failshell: I think you can store them in the same DB, but I'm not sure that offers any advantage | ||
| [2010/07/22 11:38:57] @ Quit: lkoranda: Quit: Ex-Chat | ||
| [2010/07/22 11:39:01] <failshell> so how does it know about what Puppet does then? | ||
| [2010/07/22 11:39:52] <jbooth> You have to set up reporting, where puppet tells it | ||
| [2010/07/22 11:41:46] <failshell> is there any docs other than the README that ships with the tarball? | ||
| [2010/07/22 11:41:50] <failshell> i didnt find any on the website | ||
| [2010/07/22 11:42:16] @ robinbowes_nb joined channel #puppet | ||
| [2010/07/22 11:44:09] @ Quit: gebi: Ping timeout: 240 seconds | ||
| [2010/07/22 11:44:29] <jbooth> uhh, there might have been some in the git repo but I think that's probably just the same readme. | ||
| [2010/07/22 11:44:39] <jbooth> I found some searching google, but a lot of getting dashboard working was luck | ||
| [2010/07/22 11:44:51] <failshell> hehe ok | ||
| [2010/07/22 11:44:52] <jbooth> That said I have it working so I can try to field questions | ||
| [2010/07/22 11:45:03] <jbooth> I think the puppetlabs folks might have a puppet module to install dash -- but it might be rhel only | ||
| [2010/07/22 11:45:24] <failshell> i built a deb based on james' debian config | ||
| [2010/07/22 11:45:45] <jbooth> Just pull theirs, unless you're using a newer rev than they have out | ||
| [2010/07/22 11:47:46] @ toi joined channel #puppet | ||
| [2010/07/22 11:48:43] <jbooth> but other than that, shoot with questions, I'll try to lend a hand | ||
| [2010/07/22 11:49:55] <failshell> on hardy rake is too old | ||
| [2010/07/22 11:53:09] @ Quit: lak: Quit: lak | ||
| [2010/07/22 11:53:35] <joe-mac> hey can someone tell me in auth.conf how i can allow a machine's IP to hit its catalog/ | ||
| [2010/07/22 11:53:52] <joe-mac> or is this a side effect of having .25.4 clients talk to a new 2.6 master? | ||
| [2010/07/22 11:53:58] <joe-mac> also, at the same time, i am moving to passenger | ||
| [2010/07/22 11:54:02] <joe-mac> since it kind of seems like it's the future | ||
| [2010/07/22 11:54:19] @ vachon left channel #puppet () | ||
| [2010/07/22 11:54:23] @ Quit: Hypnoz: Ping timeout: 260 seconds | ||
| [2010/07/22 11:56:48] @ Quit: andrewh: Ping timeout: 240 seconds | ||
| [2010/07/22 12:02:04] <joe-mac> 10.1.1.1(10.1.1.1) access to /catalog/rightcomputer.mysite.com [find] at line 0 | ||
| [2010/07/22 12:02:38] @ Quit: failshell: Quit: Leaving | ||
| [2010/07/22 12:02:59] <joe-mac> it's denying it, now is that a problem maybe having to do with reverse lookups? | ||
| [2010/07/22 12:03:33] <joe-mac> reverse lookups are all borked | ||
| [2010/07/22 12:05:20] <ashp> I really need to build some physical mysql servers and figure out the best way to do replication, because this having mysql on virtual servers is a real drag | ||
| [2010/07/22 12:05:30] <ashp> this view the developers knocked out takes about 45 seconds to run and melts the cpu :/ | ||
| [2010/07/22 12:06:45] @ Quit: squirrel_labs: Quit: See ya! | ||
| [2010/07/22 12:08:48] <joe-mac> so, anyone got 2.6 auth.conf working? | ||
| [2010/07/22 12:09:07] <Kiloman> ashp: having it in a VM is only a problem if you can't throw proper resources at VMs | ||
| [2010/07/22 12:09:23] @ pting joined channel #puppet | ||
| [2010/07/22 12:09:39] <hal-j> schema and query design can play a part too :) | ||
| [2010/07/22 12:09:44] <Kiloman> If you've got a proper VM farm and SAN you should just be able to crank up the CPU/memory, and put the tables on RDM if you need higher disk IO | ||
| [2010/07/22 12:09:53] @ lilmatt joined channel #puppet | ||
| [2010/07/22 12:09:53] <hal-j> you _may_ find that a physical server takes 41 minutes to do the same query :) | ||
| [2010/07/22 12:09:59] <Kiloman> just like you would with a physical machine | ||
| [2010/07/22 12:10:11] @ Quit: the854: Quit: Page closed | ||
| [2010/07/22 12:10:33] <Kiloman> I've seen Oracle on VMware, the performance hit is only like 5% | ||
| [2010/07/22 12:10:34] @ stan_ joined channel #puppet | ||
| [2010/07/22 12:11:38] <joe-mac> hm so looks like it is resolving reverse lookups | ||
| [2010/07/22 12:12:01] <joe-mac> is there a way to disable that? .,.. i added the old legacy server that has the right PTR records in resolv.conf and it works from nslookup but still not from puppet | ||
| [2010/07/22 12:12:45] @ Quit: sdog: Ping timeout: 258 seconds | ||
| [2010/07/22 12:13:08] <joe-mac> ah, ok looks like my auth.conf also has a problem | ||
| [2010/07/22 12:13:56] <lisa> is it possible to get puppet 0.25.x on ubuntu 9.10? | ||
| [2010/07/22 12:14:06] <stan_> I'm trying to get up to speed w/ puppet (v0.26), and have some working modules using a directory structure like this... /etc/puppet/manifests/modules/ But I see a lot of example directory structures that look like this --> /etc/puppet/modules/ /etc/puppet/manifests (the modules dir is on the same dir level as manifests). What is the "correct" location of the modules dir? Under "/etc/puppet/manifests" or under /etc/puppet/mo | ||
| [2010/07/22 12:14:10] <muffintop> anyone find a way to monitor puppet run exit codes from nagios? | ||
| [2010/07/22 12:14:57] <stan_> btw, lisa... I am running 0.26 on Ubuntu 9.10, if that helps | ||
| [2010/07/22 12:15:43] <Volcane> muffintop: you might have to run it through some wrapper from cron and record the exit somewhere | ||
| [2010/07/22 12:16:13] <muffintop> not a bad idea | ||
| [2010/07/22 12:16:14] <lisa> stan_: how'd you manage it? I am not a debian or ubuntu guru by any means. | ||
| [2010/07/22 12:16:17] @ Quit: lutter: Quit: Leaving. | ||
| [2010/07/22 12:16:17] <Volcane> muffintop: better might be to check the reports | ||
| [2010/07/22 12:16:26] <muffintop> I did reporting via puppet dashboard | ||
| [2010/07/22 12:16:38] <muffintop> but as far as I can tell, there's not much that can be done with that project yet | ||
| [2010/07/22 12:17:17] <muffintop> the green/red circles are nice to know, but when im managing 1000s of hosts or something and I already have a monitoring system, I'm leaning towards integrating into that system | ||
| [2010/07/22 12:17:23] @ linuxgurugamer joined channel #puppet | ||
| [2010/07/22 12:17:27] <Volcane> muffintop: do you want to know of any changes or failing resources or just if its able to run? | ||
| [2010/07/22 12:17:32] @ sdog joined channel #puppet | ||
| [2010/07/22 12:17:47] @ \ask joined channel #puppet | ||
| [2010/07/22 12:18:02] <muffintop> I want nagios to notify me if puppet was unable to compile/apply the catalog for any reason | ||
| [2010/07/22 12:18:13] <Volcane> muffintop: ok thats easy | ||
| [2010/07/22 12:18:16] <linuxgurugamer> Hi, I'm trying to get Puppet 2.6 running on a pair of Cents 5.5 systems, and am running into some problems. Can anyone help? | ||
| [2010/07/22 12:18:27] <Volcane> muffintop: there are 2 files, the state file and the local cache of the catalog | ||
| [2010/07/22 12:18:40] <Volcane> muffintop: if the state file isnt touched regularly it means puppet isnt running at all | ||
| [2010/07/22 12:18:57] <Volcane> muffintop: if the local cache isnt upating it means its not getting a new succesfully compiled catalog from the master | ||
| [2010/07/22 12:18:59] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/07/22 12:19:12] <Volcane> muffintop: so simple file age checks can sort you out | ||
| [2010/07/22 12:19:27] <muffintop> Volcane: makes sense, but how do I know if there was an error with applying the catalog? | ||
| [2010/07/22 12:19:47] <muffintop> Volcane: like, service XYZ start was unsuccessful? | ||
| [2010/07/22 12:19:55] <Volcane> muffintop: yeah thats not in that file, for that u need reports of the detailed exit codes in 2.6 | ||
| [2010/07/22 12:20:00] <muffintop> Volcane: or is that not within the scope of the puppet daemon really | ||
| [2010/07/22 12:20:04] <muffintop> oh ok | ||
| [2010/07/22 12:20:35] <stan_> Lisa, I used apt-get to install ruby, rdoc, libopenssl-ruby, rubygems (not sure I needed that one)... Then I installed facter: wget http://puppetlabs.com/downloads/facter/facter-latest.tgz ; gzip -d -c facter-latest.tgz | tar xf - ; cd facter-* ; sudo ruby install.rb; Then installed puppet: wget http://puppetlabs.com/downloads/puppet/puppet-latest.tgz gzip -d -c puppet-latest.tgz | tar xf - cd puppet* sudo ruby install.r | ||
| [2010/07/22 12:20:49] <Volcane> muffintop: would be nice if the output from like puppetd --summarize were available in /var/lib/puppet somewhere after each run on the nodes | ||
| [2010/07/22 12:21:04] @ alban2 joined channel #puppet | ||
| [2010/07/22 12:21:25] <joe-mac> are there any docs at all on auth.conf | ||
| [2010/07/22 12:21:44] <lisa> stan_: ahh, you installed from a tarball and not a debian package? | ||
| [2010/07/22 12:21:46] <joe-mac> lisa: i backport the packages myself for 8.04 | ||
| [2010/07/22 12:21:59] <joe-mac> fairly easy, though for 2.6 it's more involved | ||
| [2010/07/22 12:21:59] <muffintop> Volcane: yes! that would be perfect | ||
| [2010/07/22 12:22:13] <Volcane> I'll file a fearture request fwiw | ||
| [2010/07/22 12:22:30] <muffintop> Volcane: thank you so much :-) | ||
| [2010/07/22 12:22:35] <stan_> lisa: right | ||
| [2010/07/22 12:22:44] <muffintop> I'm a puppet n00bie, trying to get my head around the concept | ||
| [2010/07/22 12:23:01] <muffintop> this project has been very strongly advocated where I work | ||
| [2010/07/22 12:24:00] <linuxgurugamer> Volcane, are you available for helping ? | ||
| [2010/07/22 12:24:18] <stan_> so, lisa... where do you put your modules directory? under /etc/puppet ? or /etc/puppet/manifests ? | ||
| [2010/07/22 12:24:51] <joe-mac> Volcane: you using auth.conf? | ||
| [2010/07/22 12:25:35] <lisa> what? | ||
| [2010/07/22 12:26:05] <lisa> stan_: http://projects.reductivelabs.com/projects/puppet/wiki/Puppet_Best_Practice | ||
| [2010/07/22 12:27:04] <linuxgurugamer> whois lisa | ||
| [2010/07/22 12:27:21] <linuxgurugamer> Sorry, mistype. IIRC newbie here | ||
| [2010/07/22 12:27:29] <Volcane> muffintop: #4339 | ||
| [2010/07/22 12:27:29] <gepetto> Volcane: muffintop: #4339 is http://projects.puppetlabs.com/issues/show/4339 "Puppet - Feature #4339: Record last run status on the node - Puppet Labs" | ||
| [2010/07/22 12:27:40] <Volcane> joe-mac: defaults just worked for me never tweaked it | ||
| [2010/07/22 12:27:55] @ Quit: sdog: Quit: Leaving. | ||
| [2010/07/22 12:28:02] <stan_> tnx, lisa... that is the guideline I followed, then fell down the rathole trying to figure out how to use plugins and custom facts, and found out that some people are using a difference dir structure, placing the modules dirs outside of /etc/puppet/manifests | ||
| [2010/07/22 12:28:03] @ Quit: bug: Quit: bug | ||
| [2010/07/22 12:28:42] @ Quit: lilmatt: Quit: lilmatt | ||
| [2010/07/22 12:28:50] @ lilmatt joined channel #puppet | ||
| [2010/07/22 12:29:22] <muffintop> Volcane: absolutely perfect, thank you very much | ||
| [2010/07/22 12:29:56] <joe-mac> Volcane: weird, i am getting denied here, do i have to point puppet att hat file? | ||
| [2010/07/22 12:30:01] <joe-mac> or does it just hang out in /etc/puppet? | ||
| [2010/07/22 12:30:39] <Volcane> joe-mac: puppetd --genconfig|grep rest_authconfig | ||
| [2010/07/22 12:31:40] @ lutter joined channel #puppet | ||
| [2010/07/22 12:31:43] <joe-mac> thank you Volcane, as usual you come through | ||
| [2010/07/22 12:32:01] @ jbb_ joined channel #puppet | ||
| [2010/07/22 12:32:13] @ Quit: jbb_: Remote host closed the connection | ||
| [2010/07/22 12:32:26] <joe-mac> actually genconfig shows you defaults right? | ||
| [2010/07/22 12:32:31] <joe-mac> let me add it exlpicitly | ||
| [2010/07/22 12:32:32] @ jbb_ joined channel #puppet | ||
| [2010/07/22 12:32:38] <Volcane> it shows you whats active | ||
| [2010/07/22 12:32:52] @ Quit: linuxgurugamer: Quit: Page closed | ||
| [2010/07/22 12:32:53] @ Quit: jbb_: Remote host closed the connection | ||
| [2010/07/22 12:33:03] @ Quit: gniks: Ping timeout: 276 seconds | ||
| [2010/07/22 12:33:12] @ jbb_ joined channel #puppet | ||
| [2010/07/22 12:33:21] <joe-mac> right, looks like it's just ignoring the auth.conf | ||
| [2010/07/22 12:33:32] <jbb_> Hi, anyone available to answer a few question? | ||
| [2010/07/22 12:33:50] @ Quit: jbb_: Remote host closed the connection | ||
| [2010/07/22 12:34:14] @ jbb_ joined channel #puppet | ||
| [2010/07/22 12:35:13] <lisa> So frustrating. This node will not trust the server cert! | ||
| [2010/07/22 12:35:42] <hal-j> jbb: ask :) | ||
| [2010/07/22 12:35:54] @ Quit: jbb_: Client Quit | ||
| [2010/07/22 12:36:03] @ jbb_ joined channel #puppet | ||
| [2010/07/22 12:36:42] <lisa> i have read the FAQ on not trusting the server cert. i've tried each resolution method therein but this node will not trust the server cert. any other places to look to resolve this? | ||
| [2010/07/22 12:37:55] <Volcane> lisa: what does it say exactly? | ||
| [2010/07/22 12:38:09] <radkin> lisa, I'm not saying this is your issue ... but I am working with virtual servers and whenever I copy it the same thing happens. Somehow it knows we're dealing with a different server and complains | ||
| [2010/07/22 12:38:26] <lisa> let's see: | ||
| [2010/07/22 12:38:40] <lisa> (//snmpd/File[/etc/snmp/snmpd.conf]/content) change from {md5}546d188fbdf7fc9e3cffce9d5c64fd9a to {md5}be63bbf84c194726f7867f6ebad24fa6 failed: Certificates were not trusted: hostname was not match with the server certificate | ||
| [2010/07/22 12:38:57] <Volcane> lisa: do you set server= on the client at all? | ||
| [2010/07/22 12:39:04] <jbb_> I can't get a client to ls | ||
| [2010/07/22 12:39:18] <jbb_> sorry. Can't get a client to connect properly | ||
| [2010/07/22 12:39:25] <jbb_> anyone able to help? | ||
| [2010/07/22 12:39:31] <lisa> Volcane: for this host yes, i've set [puppetd] server=puppet.company.com | ||
| [2010/07/22 12:39:53] <Volcane> lisa: and you probably have source puppet://<something else>/.... | ||
| [2010/07/22 12:39:53] @ gniks joined channel #puppet | ||
| [2010/07/22 12:40:28] <stan_> lisa, can you ping <server>.localdomain ? | ||
| [2010/07/22 12:40:29] @ Quit: gniks: Client Quit | ||
| [2010/07/22 12:40:32] <lisa> Volcane: no, all sources are "puppet:/// ..." | ||
| [2010/07/22 12:40:49] <lisa> stan_: what is localdomain? | ||
| [2010/07/22 12:40:59] <Volcane> lisa: ok, do you have a filebucket set? | ||
| [2010/07/22 12:41:03] <hal-j> jbb: can you offer any more specifics? | ||
| [2010/07/22 12:41:29] <lisa> Volcane: yes, it's also puppet.company.com | ||
| [2010/07/22 12:41:55] <jbb_> When I use the command: puppetd --server puppet --waitforcert 60 --test, I get the following error: | ||
| [2010/07/22 12:42:14] <jbb_> Could not retrieve catalog from remote server: certificate verify failed | ||
| [2010/07/22 12:42:23] @ gniks joined channel #puppet | ||
| [2010/07/22 12:42:25] <Volcane> lisa: ok, and thats the only error? it never complains about this kind of thing elsewhere in the run? | ||
| [2010/07/22 12:42:47] <stan_> I am running ubuntu vms, and though my host files do not specify 'localdomain', this is the only way I can get hostnames to match server certs. | ||
| [2010/07/22 12:42:51] <jbb_> These are two CentOS 5.5 systems, fully updated | ||
| [2010/07/22 12:43:21] <jbb_> The server happens to be a virtualized system which is running on the client, but I don't think that is the problem. | ||
| [2010/07/22 12:43:24] <jbooth> jbb_: How's the system clock on both? | ||
| [2010/07/22 12:43:32] <lisa> Volcane: it complains about several other things, all of which have to do with not trusting the server cert and hostname not matching server cert | ||
| [2010/07/22 12:44:07] <Volcane> lisa: ok, do oyu set certname on the master? | ||
| [2010/07/22 12:44:08] <jbb_> within 4 seconds of each other | ||
| [2010/07/22 12:44:25] <lisa> Volcane: no. | ||
| [2010/07/22 12:44:38] <Volcane> lisa: generally you really should just get all your clients to use the same hostname | ||
| [2010/07/22 12:45:02] <jbb_> the hostname "puppet" is in the /etc/hosts file on both systems | ||
| [2010/07/22 12:45:05] <lisa> use the same hostname? it does by default, no? | ||
| [2010/07/22 12:45:15] <jbooth> jbb_: Good enough. Test environment? Blow away /var/lib/puppet/ssl on the client. Try again. If it fails, puppetca --clean <clientfqdn> on the server && rm on client, try again. | ||
| [2010/07/22 12:45:34] <Volcane> lisa: the master has its name in the ssl cert. and the client verifies that whats in --server (puppet by default) matches whats actualy in the masters cert | ||
| [2010/07/22 12:45:47] <Volcane> lisa: so you set --server on a client to anything then it all goes south | ||
| [2010/07/22 12:46:38] @ ckauhaus joined channel #puppet | ||
| [2010/07/22 12:46:51] <aforgue> exec { command => ... } command can be an array? | ||
| [2010/07/22 12:47:57] <Volcane> afletcher: exec{[array]: } no need for command => then | ||
| [2010/07/22 12:48:10] <jbb_> did that, no change. Doing puppetca --list on the server shows nothing. There is a chance I ran the puppetmasterd on the client one time, how do I clean up after that? | ||
| [2010/07/22 12:48:12] <joe-mac> uhhh the auth.conf is drivinf me nuts | ||
| [2010/07/22 12:48:18] <joe-mac> i got plugins to work by marking it un authenticated | ||
| [2010/07/22 12:48:29] <aforgue> well I need to ensure the order of a command | ||
| [2010/07/22 12:48:30] <joe-mac> now it's still getting forbidden on catalogs | ||
| [2010/07/22 12:48:45] <lisa> Volcane: i don't understand why every other node is working without issue and this node is having problems. | ||
| [2010/07/22 12:49:00] <Volcane> lisa: so you set server on them all the same? | ||
| [2010/07/22 12:49:01] <hal-j> aforgue: you'll probably want a few execs with requires | ||
| [2010/07/22 12:49:02] <jbb_> the /var/lib/puppet/ssl doesn't exist, and I'm still getting the errors. It is not created by puppetd. | ||
| [2010/07/22 12:49:12] <lisa> Volcane: no. no node has "server" set. DNS works fine here | ||
| [2010/07/22 12:49:32] <Volcane> lisa: then they all have server to 'puppet' you've set this one to something else | ||
| [2010/07/22 12:49:58] <lisa> i didn't set it to anything | ||
| [2010/07/22 12:50:01] <lisa> hm | ||
| [2010/07/22 12:50:11] <lisa> unless uninstalling this didn't actually clear /etc files out | ||
| [2010/07/22 12:50:12] <Volcane> lisa: hehe i asked you said you set it :) | ||
| [2010/07/22 12:50:14] <lisa> gah. ty ubuntu | ||
| [2010/07/22 12:50:27] <lisa> yes, prior to that it was not set and not working | ||
| [2010/07/22 12:50:30] <aforgue> well can I just do "blah && blah" then? | ||
| [2010/07/22 12:50:35] <aforgue> as command => | ||
| [2010/07/22 12:50:38] * Volcane 's lost :P | ||
| [2010/07/22 12:51:44] <hal-j> jbb: what does your config have for ssldir/ | ||
| [2010/07/22 12:51:46] <hal-j> ssldir? | ||
| [2010/07/22 12:51:53] @ cloudy joined channel #puppet | ||
| [2010/07/22 12:52:05] <jbb_> on the server or client? | ||
| [2010/07/22 12:52:22] <hal-j> client | ||
| [2010/07/22 12:52:41] <cloudy> where can i learn more about the new puppet event model in 2.6? | ||
| [2010/07/22 12:52:49] <hal-j> (that's where you were looking for it, right? /var/lib/puppet/ssl | ||
| [2010/07/22 12:52:56] <joe-mac> can someone tell me if you're running under passenger, how do you put master in debug mode | ||
| [2010/07/22 12:53:39] <jbb_> On the server it is: ssldir = $vardir/ssl | ||
| [2010/07/22 12:54:08] <jbb_> there is nothing in the client conf file, the only line in that is server=puppet | ||
| [2010/07/22 12:54:33] @ bug joined channel #puppet | ||
| [2010/07/22 12:55:01] <joe-mac> well, i am retarded | ||
| [2010/07/22 12:55:04] @ Quit: lilmatt: Ping timeout: 246 seconds | ||
| [2010/07/22 12:55:09] <joe-mac> default acl obviously doesn't have environments into account | ||
| [2010/07/22 12:55:15] <jbb_> Should I clean out the server ssl dir and restart the puppetmaster? | ||
| [2010/07/22 12:55:16] <joe-mac> i like this passenger stuff | ||
| [2010/07/22 12:55:44] <jbooth> jbb_: More basic just to check; the two boxes can ping and resolve each other right? | ||
| [2010/07/22 12:56:05] <jbb_> yes, and I can ssh from one to the other | ||
| [2010/07/22 12:56:31] <hal-j> jbb: puppetd --genconfig | grep ssldir shoudl tell you the default value | ||
| [2010/07/22 12:56:39] <hal-j> BTW - you're running puppetd as root right? | ||
| [2010/07/22 12:56:49] <hal-j> (all of the above refers to the client) | ||
| [2010/07/22 12:56:53] <jbb_> both as root. | ||
| [2010/07/22 12:57:35] <jbb_> OH!!!!!!!! damn. SSL on the client is in /etc/puppet Grrrrrrr | ||
| [2010/07/22 12:58:02] <jbb_> that was it. | ||
| [2010/07/22 12:58:23] <jbb_> I just deleted the ssl on the client, and am now getting the proper messages. | ||
| [2010/07/22 12:58:28] <hal-j> ok, with that, I'm AFK for a while | ||
| [2010/07/22 12:58:29] <jbb_> Thank you for your help | ||
| [2010/07/22 12:58:33] <hal-j> NP | ||
| [2010/07/22 12:58:41] <jbb_> Now on to learning about puppet 2.6 | ||
| [2010/07/22 12:58:42] @ smithowens joined channel #puppet | ||
| [2010/07/22 12:58:43] @ vdc joined channel #puppet | ||
| [2010/07/22 13:00:06] @ Quit: [GuS]: Read error: Connection reset by peer | ||
| [2010/07/22 13:00:30] @ Quit: cloudy: Quit: Page closed | ||
| [2010/07/22 13:01:39] @ Quit: smithowens: Client Quit | ||
| [2010/07/22 13:04:10] <joe-mac> rest auth just isn't working | ||
| [2010/07/22 13:04:15] <joe-mac> anything that has auth disabled works fine | ||
| [2010/07/22 13:04:30] <Volcane> joe-mac: you're still trying to get facts from a node? | ||
| [2010/07/22 13:04:51] <joe-mac> no | ||
| [2010/07/22 13:04:55] <joe-mac> i'm trying to run puppet lol | ||
| [2010/07/22 13:05:04] <joe-mac> i just installed 2.6 | ||
| [2010/07/22 13:05:06] <joe-mac> ona master | ||
| [2010/07/22 13:05:07] <Volcane> ah | ||
| [2010/07/22 13:05:29] <joe-mac> any stanzas in the authenticated part don't work | ||
| [2010/07/22 13:05:38] @ rmiller4pi8 joined channel #puppet | ||
| [2010/07/22 13:05:50] <Volcane> weird i had 2.6 installed for a few minutes and it did work mostly | ||
| [2010/07/22 13:06:25] <joe-mac> err: Could not send report: Error 403 on SERVER: Forbidden request: computer(10.1.1.1) access to /report/computer [save] at line 0 | ||
| [2010/07/22 13:06:51] <joe-mac> http://www.pastie.org/1055962 | ||
| [2010/07/22 13:06:55] <joe-mac> makes no sense | ||
| [2010/07/22 13:07:01] <joe-mac> if i put auth no i bet it will work | ||
| [2010/07/22 13:07:04] @ Quit: toi: Quit: Ex-Chat | ||
| [2010/07/22 13:08:09] <joe-mac> yep | ||
| [2010/07/22 13:08:12] <joe-mac> if i turn auth to no | ||
| [2010/07/22 13:08:14] <joe-mac> it just works | ||
| [2010/07/22 13:08:46] <Volcane> sorted then :P | ||
| [2010/07/22 13:09:03] <joe-mac> ok i just figured it out | ||
| [2010/07/22 13:09:11] <joe-mac> leaving auth yes out does not imply auth yes like the docs say | ||
| [2010/07/22 13:09:34] @ bleything left channel #puppet ("Leaving...") | ||
| [2010/07/22 13:10:11] <joe-mac> nope, i lied | ||
| [2010/07/22 13:10:15] <joe-mac> wtfffff' | ||
| [2010/07/22 13:10:33] @ OpenMedia joined channel #puppet | ||
| [2010/07/22 13:10:42] <vdc> hi y'all. yesterday I made a change to a file resource that wasn't part of any class, and it affected 200+ nodes. I'd like to not do that in the future. any thoughts? | ||
| [2010/07/22 13:10:51] <jbooth> jbb_: Noted that 2.6 apparently moved things. :-/ | ||
| [2010/07/22 13:11:03] @ Quit: ckauhaus: Quit: Leaving. | ||
| [2010/07/22 13:11:16] <Volcane> vdc: everything should be in a class | ||
| [2010/07/22 13:11:38] <Volcane> vdc: outside of a class == all nodes | ||
| [2010/07/22 13:11:52] <vdc> but that's a best practice. puppet doesn't prevent you from doing what i did (obviously). | ||
| [2010/07/22 13:12:12] <vdc> i'm looking for a way to protect myself from myself. | ||
| [2010/07/22 13:12:17] <Volcane> no, cos making a file on all nodes might be desirable | ||
| [2010/07/22 13:12:21] <Volcane> thats just how it is | ||
| [2010/07/22 13:12:41] <Volcane> what you did is equiv to just putting the file resource in site.pp | ||
| [2010/07/22 13:13:30] <vdc> right. but, there's no option to turn it off? or restrict to say sites.pp (and maybe other files). | ||
| [2010/07/22 13:13:35] <Volcane> no | ||
| [2010/07/22 13:14:20] <Volcane> not afaik, i did exactly the same thing on my first day puppet :P | ||
| [2010/07/22 13:14:28] <Volcane> installed some weird redhat file on lots of solaris machines | ||
| [2010/07/22 13:14:44] @ Quit: fcami: Quit: xorg restart | ||
| [2010/07/22 13:14:46] <Volcane> cos i thought if its in foo.pp which has class foo, then the whole file is the class | ||
| [2010/07/22 13:14:51] <muffintop> sometimes it's useful to declare things outside of a class, no? | ||
| [2010/07/22 13:14:52] @ jdcasey joined channel #puppet | ||
| [2010/07/22 13:15:29] <muffintop> like I have my config for resolv.conf the same on all machines, so site.pp says "include everyserver", then that class makes sure resolv.conf is uniform | ||
| [2010/07/22 13:15:39] <muffintop> is that the wrong way to do it? | ||
| [2010/07/22 13:15:39] <vdc> heheh. is there a way to view dependencies before making changes? i think for us this is a scaling issue. as we create more and more files and classes, it becomes harder to see how they're all tied together. | ||
| [2010/07/22 13:16:22] <vdc> muffintop: no, i think that's fine. i'm totally saying i made a mistake but one that we don't really want to allow either. | ||
| [2010/07/22 13:16:57] <muffintop> I don't see why it should be gotten rid of, though | ||
| [2010/07/22 13:17:15] <vdc> I don't think so either. I was looking for an option or way to configure it. | ||
| [2010/07/22 13:17:20] <joe-mac> is it possiblet hat puppet can't read the ssldir or something | ||
| [2010/07/22 13:17:20] <muffintop> gotcha | ||
| [2010/07/22 13:17:21] <muffintop> sorry | ||
| [2010/07/22 13:17:31] <joe-mac> and that is causing auth yes to fail? | ||
| [2010/07/22 13:17:41] <Volcane> muffintop: i have a class common::linux or whatever that goes on all machines rather than just putting it in the global scope | ||
| [2010/07/22 13:19:28] <joe-mac> jesus i've gotta fix this | ||
| [2010/07/22 13:19:58] <jbb_> Volcane, can you make that class available for download? | ||
| [2010/07/22 13:20:56] @ lak joined channel #puppet | ||
| [2010/07/22 13:21:26] <Volcane> jbb_: its just a class that includes a lot of other classes | ||
| [2010/07/22 13:21:43] <Volcane> jbb_: whatever i want on most of my machines, like sysadmin users | ||
| [2010/07/22 13:22:13] @ fcami joined channel #puppet | ||
| [2010/07/22 13:22:51] @ Quit: robinbowes_nb: Ping timeout: 265 seconds | ||
| [2010/07/22 13:22:52] <jbb_> ok. | ||
| [2010/07/22 13:23:05] <muffintop> I've just been born of the philosophy that just because I have the ability to shoot myself in the foot quite badly doesn't mean I should disable the gun, just means I should be careful not to shoot my foot, because other people might find it useful to shoot their feet... | ||
| [2010/07/22 13:23:47] @ robinbowes_nb joined channel #puppet | ||
| [2010/07/22 13:24:35] <Volcane> muffintop: do oyu ever log into a machine and type any commands? :P | ||
| [2010/07/22 13:24:51] <Volcane> muffintop: or do you shut down sshd in case you screw up? :) | ||
| [2010/07/22 13:26:04] <Volcane> seriously though, tools like puppet have insane potential for damage to your machines | ||
| [2010/07/22 13:26:12] <Volcane> every character you type matters and deserves serious thought | ||
| [2010/07/22 13:26:47] <Volcane> and to deal with mistake you can and should use tools like git for your repositories and instigate a system of peer review | ||
| [2010/07/22 13:26:58] <Volcane> and release manager etc, just like with any other production source code | ||
| [2010/07/22 13:27:04] <jbb_> Hey, can a puppet 0.25 client talk to a 2.6 server? | ||
| [2010/07/22 13:28:52] <Volcane> and while most production released source code - web apps and such - doesnt run as root | ||
| [2010/07/22 13:29:09] <Volcane> the code coming out of puppet written by you does run as root and deserve a lot more thought and care | ||
| [2010/07/22 13:29:44] @ Quit: carlasouza: Ping timeout: 240 seconds | ||
| [2010/07/22 13:30:04] <muffintop> I do a lot of system administration, and being able to set global params is a powerful feature, just one that needs to be used wisely | ||
| [2010/07/22 13:30:57] <Volcane> its an unintended outcome. if you look somewhere and it says include globalstuff, its clear | ||
| [2010/07/22 13:31:10] <Volcane> if the behavior is hidden in a file somewhere where it just magicly happen someone can miss it | ||
| [2010/07/22 13:31:24] <Volcane> you can still access variables etc in that class like $globalstuff::foo etc | ||
| [2010/07/22 13:31:44] <Volcane> putting out of scope stuff in files in a module for example will be intermittant as well | ||
| [2010/07/22 13:31:54] <Volcane> they'll only make it to a host once a file has been imported | ||
| [2010/07/22 13:32:09] <Volcane> so unless you import the file specifically in site.pp you can get weird behavior | ||
| [2010/07/22 13:32:36] <Volcane> so totally if u need it use it, but need to be careful cos it can be odd and behave strnagely | ||
| [2010/07/22 13:33:06] <muffintop> I have the capability to globally destroy my computer with "rm -rf /", doesn't mean we should block it by default or something necessarily though | ||
| [2010/07/22 13:33:25] <muffintop> of course, when I say "we", I mean "you", cause im not a dev by any means haha | ||
| [2010/07/22 13:33:30] @ Quit: flakrat_: Quit: Leaving | ||
| [2010/07/22 13:33:59] <Volcane> muffintop: I agree, i am arguing for not blocking it, you asked if there's a way to disable the global scope though | ||
| [2010/07/22 13:34:02] <muffintop> so I think we're actually on the same side, im just making my point badly | ||
| [2010/07/22 13:34:14] <muffintop> noooo that wasn't me haha | ||
| [2010/07/22 13:34:24] <muffintop> I was advocating against blocking it | ||
| [2010/07/22 13:34:34] <Volcane> oh wait, i am confusing you and vdc | ||
| [2010/07/22 13:34:42] <Volcane> yeah we agree then :P | ||
| [2010/07/22 13:34:42] <muffintop> happens | ||
| [2010/07/22 13:34:43] <muffintop> haha | ||
| [2010/07/22 13:34:45] <muffintop> good :-) | ||
| [2010/07/22 13:35:06] @ Quit: ceren: Quit: ceren | ||
| [2010/07/22 13:35:10] <Volcane> too many channels :P | ||
| [2010/07/22 13:37:08] @ explody joined channel #puppet | ||
| [2010/07/22 13:37:36] @ glaw joined channel #puppet | ||
| [2010/07/22 13:43:54] <fenris02> selinux has a boolean for puppet. something like "puppet_yes_really" [sic], without that set, it wont allow you to 'rm -rf' or the like | ||
| [2010/07/22 13:44:02] @ Quit: lutter: Quit: Leaving. | ||
| [2010/07/22 13:44:08] <joe-mac> doh, librack-ruby 1.0 is not compatible with puppet | ||
| [2010/07/22 13:44:11] <joe-mac> probably the cause of my problem | ||
| [2010/07/22 13:44:23] <joe-mac> now this is quite a rabbit hole. going to have to compile ruby1.9.1 and some other stuff | ||
| [2010/07/22 13:44:33] <joe-mac> so i can backport 1.1 to ubuntu 8.04 | ||
| [2010/07/22 13:45:02] @ Quit: bug: Quit: bug | ||
| [2010/07/22 13:45:06] @ Quit: lak: Quit: lak | ||
| [2010/07/22 13:46:30] @ ceren joined channel #puppet | ||
| [2010/07/22 13:46:42] <muffintop> I see Windows support is making progress, that's fantastic news! hats off to the puppet devs :-) | ||
| [2010/07/22 13:54:59] <glaw> muffintop: all we need is windows deployment in foreman and we're done.... ;) | ||
| [2010/07/22 13:55:28] <muffintop> foreman? | ||
| [2010/07/22 13:55:39] <Volcane> theforeman.org | ||
| [2010/07/22 13:56:15] <muffintop> sounds cool | ||
| [2010/07/22 13:56:26] <Volcane> lots of screenshots on there | ||
| [2010/07/22 13:56:27] <muffintop> we're on the kickstart system over here | ||
| [2010/07/22 13:56:54] <joe-mac> foreman uses kickstart... among other technologies | ||
| [2010/07/22 13:56:57] <Volcane> it does kickstart | ||
| [2010/07/22 14:00:31] @ duerF joined channel #puppet | ||
| [2010/07/22 14:00:31] @ Hypnoz joined channel #puppet | ||
| [2010/07/22 14:00:49] <benkevan> what's the opposite of present for ensure? | ||
| [2010/07/22 14:00:55] <benkevan> absent? | ||
| [2010/07/22 14:02:44] <Volcane> yup | ||
| [2010/07/22 14:03:02] <benkevan> Volcane: yah.. just tested.. for some reason just found out that SLES doesn't have rrdtool-ruby packages | ||
| [2010/07/22 14:03:59] <Volcane> there 2 rrd libraries, think we migth need the other one if naming matches rhels | ||
| [2010/07/22 14:03:59] <benkevan> have to figure out what usability I'll lose from puppet without rrdtool-ruby | ||
| [2010/07/22 14:04:22] <benkevan> the only rrdtool in sles at all is rrdtool (how can I check to see if it has the required ruby portions?) | ||
| [2010/07/22 14:04:44] <Volcane> it can make graphs of compile time, number of resources, changes etc and run times | ||
| [2010/07/22 14:05:19] <benkevan> was surprised to see puppet agent --test failed :( | ||
| [2010/07/22 14:08:27] @ Quit: reyjrar: Quit: Leaving. | ||
| [2010/07/22 14:08:34] @ fbe joined channel #puppet | ||
| [2010/07/22 14:10:37] @ Quit: rgsteele: Remote host closed the connection | ||
| [2010/07/22 14:10:45] <benkevan> err: /File[/var/lib/puppet/lib/plugins]: Could not evaluate: Could not retrieve information from source(s) puppet://puppet.global.bio-rad.com/plugins | ||
| [2010/07/22 14:11:09] <benkevan> how can I find out what's trying to pull from there | ||
| [2010/07/22 14:11:18] <Volcane> pluginsync in the config | ||
| [2010/07/22 14:11:29] @ Quit: p3rror: Ping timeout: 265 seconds | ||
| [2010/07/22 14:11:39] <benkevan> ah ok.. just did grep plugin in all of /etc/puppet and I see that.. | ||
| [2010/07/22 14:11:47] <benkevan> hummm.. I don't even know what plugins are yet.. (so I'll skip) | ||
| [2010/07/22 14:11:54] <Volcane> you can ignore or disable | ||
| [2010/07/22 14:13:05] <benkevan> puppet agent --test should work right? | ||
| [2010/07/22 14:13:25] @ p3rror joined channel #puppet | ||
| [2010/07/22 14:15:42] @ wednrosso joined channel #puppet | ||
| [2010/07/22 14:18:29] @ Quit: yannL: Remote host closed the connection | ||
| [2010/07/22 14:20:20] <joe-mac> undefined local variable or method `parser' for #<Puppet::Parser::Scope:0xb63e973c> at /etc/puppet/production/modules/accounts/manifests/groups.pp:7 on | ||
| [2010/07/22 14:20:35] <Volcane> extlookup? | ||
| [2010/07/22 14:23:52] <joe-mac> yes | ||
| [2010/07/22 14:23:59] <joe-mac> do i need to modify it? | ||
| [2010/07/22 14:24:02] <Volcane> #4275 | ||
| [2010/07/22 14:24:03] <gepetto> Volcane: #4275 is http://projects.puppetlabs.com/issues/show/4275 "Puppet - Bug #4275: ext/extlookup.rb and 2.6.0 - undefined method 'parser' - Puppet Labs" | ||
| [2010/07/22 14:24:35] @ Quit: adrian_broher: Quit: Verlassend | ||
| [2010/07/22 14:24:36] <joe-mac> thanks Volcane | ||
| [2010/07/22 14:24:41] @ fredden joined channel #puppet | ||
| [2010/07/22 14:25:26] @ Quit: bgupta: Ping timeout: 240 seconds | ||
| [2010/07/22 14:26:55] <benkevan> is there any way I can check to see if the ruby bindings for rrdtools are installed? | ||
| [2010/07/22 14:27:41] <Volcane> ruby -e 'require "RRDtool"' | ||
| [2010/07/22 14:28:02] <benkevan> usherlxa06:/etc/puppet/modules/puppet/templates/master # ruby -e 'require "RRDtool"' | ||
| [2010/07/22 14:28:05] <benkevan> -e:1:in `require': no such file to load -- RRDtool (LoadError) | ||
| [2010/07/22 14:28:05] @ bgupta joined channel #puppet | ||
| [2010/07/22 14:28:08] <benkevan> ah bummer | ||
| [2010/07/22 14:30:05] @ bgupta_ joined channel #puppet | ||
| [2010/07/22 14:32:20] @ Quit: bgupta: Ping timeout: 248 seconds | ||
| [2010/07/22 14:33:15] @ shenson is now known as zz_shenson | ||
| [2010/07/22 14:34:36] @ Quit: spawnyd: Quit: leaving | ||
| [2010/07/22 14:37:47] @ Quit: wednrosso: | ||
| [2010/07/22 14:44:09] @ jatencio joined channel #puppet | ||
| [2010/07/22 14:44:40] <jamesturnbull> benkevan: #4333 | ||
| [2010/07/22 14:44:40] <gepetto> jamesturnbull: benkevan: #4333 is http://projects.puppetlabs.com/issues/show/4333 "Puppet - Bug #4333: Support for Ruby 1.8.1 is broken in 2.6.0 - Puppet Labs" | ||
| [2010/07/22 14:44:52] <jamesturnbull> tmz: ^^^ fixed as a patch if you can test please | ||
| [2010/07/22 14:50:34] @ nicklewis joined channel #puppet | ||
| [2010/07/22 14:50:58] @ carlasouza joined channel #puppet | ||
| [2010/07/22 14:54:49] @ Quit: vdc: Quit: Leaving | ||
| [2010/07/22 14:54:56] @ Quit: radkin: Read error: Connection reset by peer | ||
| [2010/07/22 14:55:50] @ Quit: glaw: Quit: glaw | ||
| [2010/07/22 14:55:55] @ glaw joined channel #puppet | ||
| [2010/07/22 14:59:05] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/07/22 15:00:33] @ vdc joined channel #puppet | ||
| [2010/07/22 15:01:29] <benkevan> jamesturnbull: do you think that should be a package management patch, or upstream? or will default_argv not be used? | ||
| [2010/07/22 15:02:06] <jamesturnbull> benkevan: it'll be in 2.6.1 | ||
| [2010/07/22 15:02:18] <jamesturnbull> benkevan: but I am hoping you or tmz can test it to confirm it now works | ||
| [2010/07/22 15:09:43] @ Quit: gniks: Quit: Leaving. | ||
| [2010/07/22 15:11:17] @ gniks joined channel #puppet | ||
| [2010/07/22 15:12:40] @ rodnet joined channel #puppet | ||
| [2010/07/22 15:16:47] <testburgher> I thought i had it, then my brain crashed! | ||
| [2010/07/22 15:17:12] <testburgher> if i have a server type which is a node type in a server farm | ||
| [2010/07/22 15:17:38] <testburgher> and i want to setup a bunch of services that have specific configs, should i be creating a module? | ||
| [2010/07/22 15:18:02] <tmz> jamesturnbull: I gave it a quick run on a centos4 box and it allows puppet to run properly. | ||
| [2010/07/22 15:18:23] <benkevan> tmz: do you have the rpm? | ||
| [2010/07/22 15:18:26] <tmz> I didn't test on other systems yet, to ensure it doesn't cause some unintended side-effect. | ||
| [2010/07/22 15:18:31] <benkevan> i can test against against RHEL4 | ||
| [2010/07/22 15:18:36] <tmz> benkevan: I just manually patched the system. | ||
| [2010/07/22 15:18:42] <benkevan> really it's a small logic change.. | ||
| [2010/07/22 15:18:45] <benkevan> tmz: ah.. ok | ||
| [2010/07/22 15:18:46] <tmz> I can give you the application.rb file if you like? | ||
| [2010/07/22 15:18:53] <benkevan> naw.. that's simple enough :) | ||
| [2010/07/22 15:18:58] <tmz> Cool. | ||
| [2010/07/22 15:19:58] @ nakano is now known as nakano_ | ||
| [2010/07/22 15:21:15] @ Quit: pheezy: Remote host closed the connection | ||
| [2010/07/22 15:24:05] @ Quit: heydrick: Ping timeout: 245 seconds | ||
| [2010/07/22 15:24:05] @ Quit: MattM: Ping timeout: 245 seconds | ||
| [2010/07/22 15:24:36] @ Quit: explody: Ping timeout: 248 seconds | ||
| [2010/07/22 15:24:43] @ heydrick joined channel #puppet | ||
| [2010/07/22 15:25:45] @ MattM joined channel #puppet | ||
| [2010/07/22 15:25:59] <benkevan> jamesturnbull: it worked with just removing the stuff in application.rb | ||
| [2010/07/22 15:26:38] <benkevan> ah.. i think application_spec.rb is a puppetmaster thing? I don't see it on my puppet client | ||
| [2010/07/22 15:27:16] @ Quit: dcarley: Ping timeout: 248 seconds | ||
| [2010/07/22 15:27:52] @ dcarley joined channel #puppet | ||
| [2010/07/22 15:28:28] @ Quit: kaptk2: Quit: Leaving. | ||
| [2010/07/22 15:28:48] @ Quit: fbe: Quit: Leaving | ||
| [2010/07/22 15:29:28] @ nakano_ is now known as nakano | ||
| [2010/07/22 15:32:09] <nicklewis> jobs | ||
| [2010/07/22 15:32:18] <nicklewis> ..I need to stop leaving irc as my current tab | ||
| [2010/07/22 15:34:04] @ explody joined channel #puppet | ||
| [2010/07/22 15:35:19] @ Quit: robinbowes_nb: Ping timeout: 276 seconds | ||
| [2010/07/22 15:36:15] @ zorzar joined channel #puppet | ||
| [2010/07/22 15:36:59] <odyi> Anyone have an osx box with ipv6 that was autoconfigured and could pastie me the output of `netstat -rn -f inet6`? | ||
| [2010/07/22 15:37:05] @ Quit: zorzar_: Read error: Operation timed out | ||
| [2010/07/22 15:39:59] @ kolla joined channel #puppet | ||
| [2010/07/22 15:40:27] @ jatencio left channel #puppet () | ||
| [2010/07/22 15:42:19] @ Quit: littleidea: Quit: littleidea | ||
| [2010/07/22 15:43:52] @ Quit: \ask: Remote host closed the connection | ||
| [2010/07/22 15:45:35] @ Quit: gniks: Quit: Leaving. | ||
| [2010/07/22 15:46:29] @ craftytech joined channel #puppet | ||
| [2010/07/22 15:47:01] @ Quit: craftytech: Client Quit | ||
| [2010/07/22 15:47:13] @ craftytech joined channel #puppet | ||
| [2010/07/22 15:47:32] <craftytech> hello all | ||
| [2010/07/22 15:48:17] <craftytech> #foreman | ||
| [2010/07/22 15:49:24] @ gniks joined channel #puppet | ||
| [2010/07/22 15:50:30] @ Quit: gniks: Client Quit | ||
| [2010/07/22 15:53:31] @ littleidea joined channel #puppet | ||
| [2010/07/22 15:53:33] @ gniks joined channel #puppet | ||
| [2010/07/22 15:54:21] @ Quit: stan_: Quit: Page closed | ||
| [2010/07/22 15:54:51] <jmccune> odyi: http://pastie.org/1056215 | ||
| [2010/07/22 15:55:51] <odyi> jmccune++ just what I was hopint to see. | ||
| [2010/07/22 15:56:48] <odyi> Trying to implement that request you put in for ipaddress to try and guess what interface might be the "primary" interface into the ipv6 fact I have working on. | ||
| [2010/07/22 15:59:55] @ Quit: rodnet: Read error: Connection reset by peer | ||
| [2010/07/22 15:59:56] @ rodnet_ joined channel #puppet | ||
| [2010/07/22 16:01:23] @ Quit: littleidea: Quit: littleidea | ||
| [2010/07/22 16:02:29] @ bug joined channel #puppet | ||
| [2010/07/22 16:03:52] @ Quit: craftytech: Quit: Page closed | ||
| [2010/07/22 16:09:24] @ MattyM joined channel #puppet | ||
| [2010/07/22 16:15:46] @ Quit: alfism: Quit: alfism | ||
| [2010/07/22 16:17:27] @ glaw left channel #puppet () | ||
| [2010/07/22 16:19:33] @ Quit: MattyM: Remote host closed the connection | ||
| [2010/07/22 16:21:50] @ Quit: cynicismic: Quit: leaving | ||
| [2010/07/22 16:22:27] <joe-mac> hety guys where are plugins supposed to be in 2.6? | ||
| [2010/07/22 16:22:38] @ \ask joined channel #puppet | ||
| [2010/07/22 16:28:02] <benkevan> joe-mac: depends what you define in puppet.conf? | ||
| [2010/07/22 16:28:27] <joe-mac> well, specifically i mean, have plugins in modules changed? | ||
| [2010/07/22 16:28:31] <joe-mac> i'm having a lot of problems with 2.6 | ||
| [2010/07/22 16:28:41] <joe-mac> it just hangs when compiling catalogs | ||
| [2010/07/22 16:28:59] @ lutter joined channel #puppet | ||
| [2010/07/22 16:29:09] <benkevan> My environment is so small.. that it works just fine :D .. (1 server and 3 clients) | ||
| [2010/07/22 16:29:11] @ Quit: benkevan: Quit: leaving | ||
| [2010/07/22 16:29:29] <joe-mac> looks like this is doing it still err: undefined local variable or method `parser' for #<Puppet::Parser::Scope:0xb661d198> | ||
| [2010/07/22 16:31:11] <joe-mac> wow, ok | ||
| [2010/07/22 16:33:35] @ Quit: Hypnoz: Ping timeout: 265 seconds | ||
| [2010/07/22 16:34:58] @ craftytech_ joined channel #puppet | ||
| [2010/07/22 16:36:12] <craftytech_> Can anyone assist with usigng ext nodes via puppet? | ||
| [2010/07/22 16:36:32] <craftytech_> correction... via Foreman | ||
| [2010/07/22 16:37:34] @ chendry joined channel #puppet | ||
| [2010/07/22 16:38:13] <chendry> hey all! I'm able to authenticate to my puppet server, and it signs my certificate, but immediately after I get an error: "err: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': undefined method `closed?' for nil:NilClass" | ||
| [2010/07/22 16:38:41] <chendry> What's the best way to troubleshoot this? I'm having a hard time finding clues in the verbose output | ||
| [2010/07/22 16:39:28] @ littleidea joined channel #puppet | ||
| [2010/07/22 16:43:44] @ Quit: littleidea: Ping timeout: 240 seconds | ||
| [2010/07/22 16:45:41] @ pinoyskull joined channel #puppet | ||
| [2010/07/22 16:46:04] @ formandfxn joined channel #puppet | ||
| [2010/07/22 16:46:12] <formandfxn> hello | ||
| [2010/07/22 16:46:22] <formandfxn> I heard you are hiring documentation writers? | ||
| [2010/07/22 16:47:07] <jmccune> formandfxn: Yep, that's one aspect of the position. Interested? | ||
| [2010/07/22 16:47:42] <formandfxn> Yes. What's the job description? | ||
| [2010/07/22 16:47:58] <jmccune> formandfxn: One second | ||
| [2010/07/22 16:50:32] <jmccune> formandfxn: https://hire.jobvite.com/Jobvite/Job.aspx?m=nPliSfw4&j=o5olVfwt | ||
| [2010/07/22 16:51:00] @ devdas joined channel #puppet | ||
| [2010/07/22 16:52:00] <formandfxn> Ah, ok. Based on the conversation I had I thought it was a writing-based job. I'm a publicist | ||
| [2010/07/22 16:52:40] <odyi> jmccune: Well luke is tweet the other day after the funding came through if anyone was looking for documentation writers/QA folks. | ||
| [2010/07/22 16:53:02] <odyi> This might be what he was thinking. | ||
| [2010/07/22 16:53:16] <odyi> formandfxn: no jobs have been posted though | ||
| [2010/07/22 16:53:23] <jmccune> odyi: Hrm, that may be a position I haven't seen the posting for. | ||
| [2010/07/22 16:53:46] <Kiloman> you guys still looking for an ops guy? | ||
| [2010/07/22 16:54:05] <jmccune> Kiloman: As far as I know, yes. | ||
| [2010/07/22 16:54:09] <odyi> jmccune: I haven't seen one either...just that one tweet. | ||
| [2010/07/22 16:54:19] <Kiloman> it's a tempting opening... | ||
| [2010/07/22 16:54:22] <jmccune> Kiloman: That's proably the link I just sent to formandfxn | ||
| [2010/07/22 16:54:30] <formandfxn> it looked like it | ||
| [2010/07/22 16:54:45] <jmccune> I'm only two months in as an employee and having the time of my life. | ||
| [2010/07/22 16:56:33] <hal-j> at least you know they've got a solid automation setup :P | ||
| [2010/07/22 16:56:45] <Kiloman> hehe | ||
| [2010/07/22 16:56:56] <mackn> it would be funny if they didn't | ||
| [2010/07/22 16:57:16] <hal-j> for moderately "sad" values of "funny" | ||
| [2010/07/22 16:57:29] <mackn> but it's....oregon... | ||
| [2010/07/22 16:57:45] @ Quit: rmiller4pi8: Ping timeout: 265 seconds | ||
| [2010/07/22 16:57:50] <Kiloman> hey Oregon is awesome | ||
| [2010/07/22 16:58:09] <Kiloman> if I hadn't just bought a house in Eugene I would be up there interviewing like yesterday ;) | ||
| [2010/07/22 16:58:15] @ Quit: gniks: Ping timeout: 276 seconds | ||
| [2010/07/22 16:58:19] <Kiloman> or at least applying | ||
| [2010/07/22 16:59:03] <Kiloman> now sounds like an awesome time to be a puppeteer | ||
| [2010/07/22 17:02:38] <hal-j> my office is in LA and I'm about 200 miles north of NYC. working remote is nice :) | ||
| [2010/07/22 17:05:14] @ Quit: tonyskapunk: Quit: ERC Version 5.3 (IRC client for Emacs) | ||
| [2010/07/22 17:05:19] <mackn> i got tired of it after a while | ||
| [2010/07/22 17:05:54] <mackn> it's nice for contract work but sot of sucks for full time heh | ||
| [2010/07/22 17:07:14] <chendry> I'd move to Oregon just for the beer | ||
| [2010/07/22 17:07:35] <Kiloman> it is very good | ||
| [2010/07/22 17:07:55] @ Quit: jab_doa: Quit: Verlassend | ||
| [2010/07/22 17:08:16] @ jaredrhine joined channel #puppet | ||
| [2010/07/22 17:10:50] @ Djelibeybi joined channel #puppet | ||
| [2010/07/22 17:11:18] @ gniks joined channel #puppet | ||
| [2010/07/22 17:11:45] @ Quit: jmccune: Ping timeout: 240 seconds | ||
| [2010/07/22 17:14:26] @ Quit: jaredrhine: Ping timeout: 258 seconds | ||
| [2010/07/22 17:16:13] <hal-j> I like working at home. Much more productive ;) | ||
| [2010/07/22 17:18:45] <hal-j> it's not for everyone though. I think I've been working at home longer than not, at this point | ||
| [2010/07/22 17:22:28] @ Quit: stopdropandrew: Quit: Leaving. | ||
| [2010/07/22 17:27:15] @ ghaskins_mobile joined channel #puppet | ||
| [2010/07/22 17:28:18] <mackn> i think i have too many distractions at home.. | ||
| [2010/07/22 17:28:45] <Kiloman> yeah wife + pets + kids eventually = no work | ||
| [2010/07/22 17:28:51] <mackn> yup | ||
| [2010/07/22 17:29:16] <mackn> i find that i'm half as productive working from home compared to when I was single :) | ||
| [2010/07/22 17:30:08] @ Quit: mclarke: Read error: Connection reset by peer | ||
| [2010/07/22 17:30:13] @ mclarke joined channel #puppet | ||
| [2010/07/22 17:32:17] @ RussS joined channel #puppet | ||
| [2010/07/22 17:32:53] <hal-j> like I said, it's not for everyone. you either end up working constantly because you're always in the office, or you never work because you're never in the office | ||
| [2010/07/22 17:32:53] @ mclarke_ joined channel #puppet | ||
| [2010/07/22 17:32:54] @ Quit: mclarke: Read error: Connection reset by peer | ||
| [2010/07/22 17:32:56] @ mclarke_ is now known as mclarke | ||
| [2010/07/22 17:33:48] @ jmccune joined channel #puppet | ||
| [2010/07/22 17:34:52] @ Quit: Guest53500: Ping timeout: 252 seconds | ||
| [2010/07/22 17:34:57] @ Quit: nicklewis: Quit: Page closed | ||
| [2010/07/22 17:35:20] @ jaredrhine joined channel #puppet | ||
| [2010/07/22 17:51:06] @ Quit: ricky: Ping timeout: 265 seconds | ||
| [2010/07/22 17:54:19] @ nakano is now known as nakano_ | ||
| [2010/07/22 17:59:14] @ thekad is now known as thekad-afk | ||
| [2010/07/22 18:04:34] @ Quit: craftytech_: Ping timeout: 252 seconds | ||
| [2010/07/22 18:04:45] @ nakano_ is now known as nakano | ||
| [2010/07/22 18:05:35] @ ricky joined channel #puppet | ||
| [2010/07/22 18:11:56] @ Quit: devdas: Remote host closed the connection | ||
| [2010/07/22 18:18:23] @ Dreamer3 joined channel #puppet | ||
| [2010/07/22 18:18:42] @ Dreamer3 left channel #puppet ("Leaving") | ||
| [2010/07/22 18:18:45] <jamesturnbull> woot pastie bot back :) | ||
| [2010/07/22 18:18:47] <jamesturnbull> pastie: url me | ||
| [2010/07/22 18:19:40] <Kiloman> hmm looks like my boss beat me to the punch on that job posting | ||
| [2010/07/22 18:21:04] <mackn> haha | ||
| [2010/07/22 18:21:48] * Djelibeybi would like to work from home. *HINT* jamesturnbull *HINT* :p | ||
| [2010/07/22 18:22:33] <jamesturnbull> Djelibeybi: I'd like you to work from Portland | ||
| [2010/07/22 18:22:38] <jamesturnbull> Djelibeybi: I did offer... :) | ||
| [2010/07/22 18:22:54] <Djelibeybi> jamesturnbull: yes, I know. :) I'm actually considering it. But, it would be a few months away, i.e. after November. | ||
| [2010/07/22 18:23:05] @ plathrop is now known as plathrop-away | ||
| [2010/07/22 18:23:25] @ plathrop-away is now known as plathrop | ||
| [2010/07/22 18:23:39] <Kiloman> jamesturnbull: when are you hoping to close on the ops? | ||
| [2010/07/22 18:24:22] @ wilmoore joined channel #puppet | ||
| [2010/07/22 18:24:49] <jamesturnbull> Kiloman: soon ... want a short list by the end of next week | ||
| [2010/07/22 18:25:11] @ Quit: gmcquillan: Quit: gmcquillan | ||
| [2010/07/22 18:26:35] @ plathrop is now known as plathrop-away | ||
| [2010/07/22 18:28:06] <odyi> Speaking of beer! http://beeradvocate.com/events/info/34768 | ||
| [2010/07/22 18:28:27] * odyi will likely be there. | ||
| [2010/07/22 18:29:40] * fenris02 has a kind and benevolent boss that lets him work half-days from home even ... | ||
| [2010/07/22 18:30:01] <fenris02> any 12hrs i wish. | ||
| [2010/07/22 18:30:07] <Kiloman> hah | ||
| [2010/07/22 18:30:34] <odyi> I am giving up my work where I want and when I want job to fly around the country for Puppet. | ||
| [2010/07/22 18:32:37] <fenris02> odyi, you teach classes or something? | ||
| [2010/07/22 18:33:50] @ littleidea joined channel #puppet | ||
| [2010/07/22 18:35:20] <chendry> Can I force puppet to use a particular host name for it's server certificate? | ||
| [2010/07/22 18:35:45] <odyi> fenris02: will. Start first week of august. | ||
| [2010/07/22 18:36:17] <Djelibeybi> chendry: yes, you can. The actual parameter escapes me at the moment. --certdnsname I think | ||
| [2010/07/22 18:36:47] <odyi> There is also an option to set dns aliases for the cert too | ||
| [2010/07/22 18:36:51] <fenris02> good times! i'm still trying to get the folks at $work to consider puppet/cobbler. | ||
| [2010/07/22 18:37:50] <fenris02> odyi, isnt the alias set to 'puppet' by default already? | ||
| [2010/07/22 18:38:21] <odyi> fenris02: yeah | ||
| [2010/07/22 18:38:39] @ Quit: rcrowley: Quit: rcrowley | ||
| [2010/07/22 18:38:50] <odyi> You can feed it a list of aliases if you so desire | ||
| [2010/07/22 18:39:41] <chendry> ohh! excellent, I see now. It was certdnsnames, and the value I entered is showing up in the SSL certificate. Thanks! | ||
| [2010/07/22 18:41:06] @ Quit: RussS: Quit: Leaving | ||
| [2010/07/22 18:43:03] @ rcrowley joined channel #puppet | ||
| [2010/07/22 18:44:06] @ Quit: mclarke: Quit: mclarke | ||
| [2010/07/22 18:44:47] @ craftytech_ joined channel #puppet | ||
| [2010/07/22 18:45:03] <craftytech_> Can anyone assist with usingg ext nodes via Foreman? | ||
| [2010/07/22 18:45:27] <chendry> is 2.6.0 the recommended version? http://www.puppetlabs.com/misc/download-options/ is a bit ambiguous :) | ||
| [2010/07/22 18:45:48] @ Quit: formandfxn: Quit: Leaving | ||
| [2010/07/22 18:48:07] <Djelibeybi> chendry: not ambiguous. "The stable version is 2.6.0. We recommend always using the stable version for production environments." | ||
| [2010/07/22 18:49:05] <craftytech_> I'm getting error: "Error 400 on SERVER: Could not find node" when I use external node | ||
| [2010/07/22 18:50:05] <chendry> Djelibeybi: that part's clear, but lower in the page it says 0.25.5 is the stable release | ||
| [2010/07/22 18:50:32] <Djelibeybi> chendry: yeah, but the tarballs point to 2.6. | ||
| [2010/07/22 18:50:39] <Djelibeybi> jamesturnbull: ^^ your page is out-of-date still. :) | ||
| [2010/07/22 18:51:01] <Djelibeybi> chendry: though, you should use your distro packages and not the source tarballs anyway | ||
| [2010/07/22 18:51:14] <chendry> oh! heh, i didn't even check the link :) well, cool -- i'm a bit behind, 0.25.4 is what the Ubuntu package manager is up to | ||
| [2010/07/22 18:52:16] <chendry> goodness, I didn't even know that Puppet could be installed as a gem -- that is perfect | ||
| [2010/07/22 18:53:01] <odyi> I usually run clients off of the distros packages and server out of gems. Nice if you want to keep/need the server to be ahead of clients because you have varied client versions because of different OSes. | ||
| [2010/07/22 18:54:06] <jamesturnbull> Djelibeybi: fixed | ||
| [2010/07/22 18:54:18] <Djelibeybi> chendry: ^^ fixed. :) | ||
| [2010/07/22 18:54:50] <Djelibeybi> chendry: I think the gem is the least-recommended package, but still preferred over the source tarball | ||
| [2010/07/22 18:55:02] <Djelibeybi> jamesturnbull: where are the Debian/Ubuntu 2.6 packages? | ||
| [2010/07/22 18:56:01] @ Quit: pinoyskull: Ping timeout: 258 seconds | ||
| [2010/07/22 18:56:58] <chendry> why is the gem approach not recomended? | ||
| [2010/07/22 18:58:08] @ notbrien_ joined channel #puppet | ||
| [2010/07/22 19:01:04] @ Quit: notbrien: Ping timeout: 240 seconds | ||
| [2010/07/22 19:01:04] @ notbrien_ is now known as notbrien | ||
| [2010/07/22 19:01:39] <jamesturnbull> Djelibeybi: ask the Debian/Ubuntu packaging team | ||
| [2010/07/22 19:01:56] <Djelibeybi> jamesturnbull: who are the Debian/Ubuntu packaging team? | ||
| [2010/07/22 19:02:08] <jamesturnbull> Djelibeybi: check the package website? | ||
| [2010/07/22 19:02:21] <Djelibeybi> jamesturnbull: it's all too hard! I'm switching to Chef! | ||
| [2010/07/22 19:02:33] @ Quit: jmccune: Ping timeout: 240 seconds | ||
| [2010/07/22 19:03:10] * fenris02 smirks | ||
| [2010/07/22 19:05:05] @ Quit: jaredrhine: Ping timeout: 240 seconds | ||
| [2010/07/22 19:08:58] @ Quit: craftytech_: Quit: Page closed | ||
| [2010/07/22 19:12:59] @ Quit: \ask: Remote host closed the connection | ||
| [2010/07/22 19:13:18] @ jaredrhine joined channel #puppet | ||
| [2010/07/22 19:22:03] @ \ask joined channel #puppet | ||
| [2010/07/22 19:28:02] <ghaskins_mobile> what is the proper fileserver.conf setting for exporting plugins in 2.6 ? | ||
| [2010/07/22 19:28:31] <ghaskins_mobile> i upgraded from 24.8 to 2.6, and now my clients are reporting problems against the [plugin] export | ||
| [2010/07/22 19:28:41] <ghaskins_mobile> [plugins]. rather | ||
| [2010/07/22 19:33:36] <jamesturnbull> ghaskins_mobile: what problems are they reporting? | ||
| [2010/07/22 19:33:47] <jamesturnbull> ghaskins_mobile: can you pastie your output? | ||
| [2010/07/22 19:35:33] @ Quit: rcrowley: Quit: rcrowley | ||
| [2010/07/22 19:35:40] <pastie> jamesturnbull: http://pastie.org/1056419 by ghaskins_mobile. | ||
| [2010/07/22 19:36:12] <ghaskins_mobile> that pastie integration to IRC is pretty slick | ||
| [2010/07/22 19:36:42] <ghaskins_mobile> jamesturnbull, thanks for your interest..i actually have to run for the evening but will check back in the AM | ||
| [2010/07/22 19:36:48] <ghaskins_mobile> btw: here is my fileserver.conf | ||
| [2010/07/22 19:37:40] <jamesturnbull> thank Josh from pastie - it's his code - awesome stuff | ||
| [2010/07/22 19:37:47] <ghaskins_mobile> http://pastie.org/1056424 | ||
| [2010/07/22 19:38:33] <ghaskins_mobile> i probably screwed something up when I rebuilt the puppetmaster | ||
| [2010/07/22 19:38:42] <jamesturnbull> ghaskins_mobile: how did you install? | ||
| [2010/07/22 19:39:00] <ghaskins_mobile> it wasnt an upgrade, i rebuilt a new machine with the 2.6 rpms, and decommisioned the 24.8 system | ||
| [2010/07/22 19:39:19] <jamesturnbull> ghaskins_mobile: also can you run with --debug and --trace so I can see how detailedc errors? | ||
| [2010/07/22 19:39:20] <ghaskins_mobile> from rpms I built in open-suse build service | ||
| [2010/07/22 19:39:32] <ghaskins_mobile> i have to run, but will ping in the am | ||
| [2010/07/22 19:39:36] <ghaskins_mobile> i appreciate the help! | ||
| [2010/07/22 19:39:40] <ghaskins_mobile> bt i have to go | ||
| [2010/07/22 19:39:40] <jamesturnbull> no problems | ||
| [2010/07/22 19:39:43] <ghaskins_mobile> later | ||
| [2010/07/22 19:47:25] @ randybias joined channel #puppet | ||
| [2010/07/22 19:50:00] @ Quit: notbrien: Quit: notbrien | ||
| [2010/07/22 19:50:35] @ MarkN1 joined channel #puppet | ||
| [2010/07/22 19:52:18] @ Quit: littleidea: Quit: littleidea | ||
| [2010/07/22 20:15:08] @ randybias is now known as randybias|away | ||
| [2010/07/22 20:18:30] @ Quit: Djelibeybi: Quit: Leaving | ||
| [2010/07/22 20:21:57] @ davea1 joined channel #puppet | ||
| [2010/07/22 20:25:30] @ Quit: pting: Quit: Ex-Chat | ||
| [2010/07/22 20:30:04] @ Quit: \ask: Remote host closed the connection | ||
| [2010/07/22 20:36:47] @ Quit: davea1: Quit: Leaving | ||
| [2010/07/22 20:43:44] @ Quit: cliff-hm: Ping timeout: 258 seconds | ||
| [2010/07/22 20:44:50] @ Quit: yeled: Ping timeout: 260 seconds | ||
| [2010/07/22 20:45:51] @ yeled joined channel #puppet | ||
| [2010/07/22 20:46:44] @ Quit: Bass10: Ping timeout: 240 seconds | ||
| [2010/07/22 20:49:18] @ rcrowley joined channel #puppet | ||
| [2010/07/22 20:52:55] @ Quit: Maliuta: Remote host closed the connection | ||
| [2010/07/22 20:53:39] @ Maliuta joined channel #puppet | ||
| [2010/07/22 20:54:31] @ AimanA is now known as HouseAway | ||
| [2010/07/22 20:55:38] @ Quit: rcrowley: Quit: rcrowley | ||
| [2010/07/22 20:57:49] @ Quit: OpenMedia: Quit: Leaving. | ||
| [2010/07/22 21:00:34] @ Quit: jense: Ping timeout: 265 seconds | ||
| [2010/07/22 21:12:46] @ sebas891 joined channel #puppet | ||
| [2010/07/22 21:14:05] @ jense joined channel #puppet | ||
| [2010/07/22 21:20:30] @ pinoyskull joined channel #puppet | ||
| [2010/07/22 21:21:52] @ gmcquillan joined channel #puppet | ||
| [2010/07/22 21:41:17] @ alcy joined channel #puppet | ||
| [2010/07/22 21:44:49] @ Quit: rodnet_: Quit: rodnet_ | ||
| [2010/07/22 21:45:38] <alcy> isn't there a way to recursively set the owner & group of files udner a directory, akin to chown -R user:group /dir ? recurse=>true and mode=>xxx (alongwith user/group) doesn't has the desired effect. | ||
| [2010/07/22 21:47:27] @ Quit: wilmoore: Read error: Connection reset by peer | ||
| [2010/07/22 21:47:44] @ littleidea joined channel #puppet | ||
| [2010/07/22 21:48:22] @ wilmoore joined channel #puppet | ||
| [2010/07/22 22:03:08] @ Quit: sebas891: Quit: Leaving. | ||
| [2010/07/22 22:08:41] @ ohadlevy_ is now known as ohadlevy | ||
| [2010/07/22 22:14:19] @ Quit: mizzy: Ping timeout: 265 seconds | ||
| [2010/07/22 22:15:16] @ mizzy joined channel #puppet | ||
| [2010/07/22 22:22:19] @ alexine_dsouza joined channel #puppet | ||
| [2010/07/22 22:26:14] @ Quit: littleidea: Quit: littleidea | ||
| [2010/07/22 22:43:24] <tuf> alcy: you can use recurse I believe | ||
| [2010/07/22 22:44:18] <tuf> theres recurse and recurselevel | ||
| [2010/07/22 22:44:26] <alcy> tuf: recurse sets the file permissions recursively from what I could make out. as of now I am doing an exec for chown -R but would like to have a better solution | ||
| [2010/07/22 22:44:54] <tuf> recurse isnt just for perms | ||
| [2010/07/22 22:44:58] <tuf> right? | ||
| [2010/07/22 22:45:39] <tuf> owner => apache, | ||
| [2010/07/22 22:45:44] @ Quit: gmcquillan: Quit: gmcquillan | ||
| [2010/07/22 22:45:45] <tuf> recurse => true; | ||
| [2010/07/22 22:45:48] <tuf> etc | ||
| [2010/07/22 22:46:31] <alcy> yeah well, that doesn't do it. have you tried it ? | ||
| [2010/07/22 22:46:43] <tuf> yes | ||
| [2010/07/22 22:46:46] <tuf> works fine | ||
| [2010/07/22 22:46:53] <tuf> ill grab a working one..one sec | ||
| [2010/07/22 22:48:16] <tuf> file { | ||
| [2010/07/22 22:48:17] <tuf> "/www": owner => apache, group => apache, mode => 664, ensure => directory, recurse => true; | ||
| [2010/07/22 22:48:30] @ Quit: benoit__: Ping timeout: 260 seconds | ||
| [2010/07/22 22:50:13] <alcy> errm, yes, that's how its here as well. but in my case dirs & files under the directory don't get the owner. appreciate the help, one thing though, try using pastie or pastebin. ;) | ||
| [2010/07/22 22:50:31] <tuf> not for a one liner :) | ||
| [2010/07/22 22:50:42] <tuf> thats a waste of bits and effort | ||
| [2010/07/22 22:51:26] @ randybias|away is now known as randybias | ||
| [2010/07/22 22:52:25] <alcy> alright, so...in my case that doesn't do it. it just sets the owner for the dir ( /www in the example) and not for anything under /www. | ||
| [2010/07/22 22:53:09] <tuf> theres a few options for recurse, maybe youve got a special case there | ||
| [2010/07/22 22:53:17] <tuf> remote and inf I believe | ||
| [2010/07/22 22:53:27] <tuf> I know what remote does but have no idea what inf does | ||
| [2010/07/22 22:53:32] <tuf> couldnt find docs on it anywhere | ||
| [2010/07/22 22:54:34] <chendry> are any of you familiar with the new run stages? Do you typically define your stages in site.pp? | ||
| [2010/07/22 22:55:26] <tuf> I've got a q: is there a type that would allow me to check for the presence of a link, and if its not present run an exec? | ||
| [2010/07/22 22:55:42] <tuf> or an example of that with a few statements? | ||
| [2010/07/22 22:58:01] <chendry> could you do something like: exec { "/bin/build_my_link": if => "[ -L /path/to-link ]" } ? | ||
| [2010/07/22 22:58:55] <tuf> hrm possibly | ||
| [2010/07/22 22:59:09] <tuf> thatd be idempotent at least | ||
| [2010/07/22 22:59:11] <chendry> wait, unless => "[ -L /path/to/link ]" ? and probably creates => "/path/to/link" so it doesn't keep running it | ||
| [2010/07/22 23:00:05] <tuf> I know I can use exec in conjunction with subscribe | ||
| [2010/07/22 23:00:21] <tuf> but would that work if the subscribed file wasnt there? | ||
| [2010/07/22 23:00:49] <tuf> essentially what I want to happen is if puppet sees the file is missing, exec the line which will recreate the link | ||
| [2010/07/22 23:01:41] <tuf> ooh | ||
| [2010/07/22 23:01:45] <tuf> creates | ||
| [2010/07/22 23:02:02] <tuf> creates => "mylink" | ||
| [2010/07/22 23:02:09] <chendry> yeah -- the creates will ensure that the exec doesn't run unless the link doesn't exist | ||
| [2010/07/22 23:02:13] <tuf> says itll retrigger the exec if the linked file isnt there | ||
| [2010/07/22 23:02:17] <tuf> woo | ||
| [2010/07/22 23:02:20] <tuf> I think thatll do it | ||
| [2010/07/22 23:02:25] <chendry> cool! | ||
| [2010/07/22 23:02:37] <tuf> I knew there must be a way to do it within puppet | ||
| [2010/07/22 23:02:44] <tuf> and avoid ye old external script :) | ||
| [2010/07/22 23:02:48] <tuf> thx for the inspiration! | ||
| [2010/07/22 23:05:02] <chendry> heh -- np | ||
| [2010/07/22 23:10:08] <tuf> any option on this: say you update a gem using package, but an exec needs to kick off only if that package is updated. I'm not sure I can do that one w/o a script on the server. | ||
| [2010/07/22 23:10:18] <tuf> option/opinion :) | ||
| [2010/07/22 23:10:58] <tuf> I could use something like onlyif | ||
| [2010/07/22 23:11:33] <tuf> the trick will be detecting if gem updates on the server, which seems extraneous since its updating through package in the manifest | ||
| [2010/07/22 23:12:47] @ Quit: pastie: Ping timeout: 264 seconds | ||
| [2010/07/22 23:17:10] <tuf> ooh | ||
| [2010/07/22 23:17:40] <tuf> require => Exec["execalias"]; | ||
| [2010/07/22 23:17:47] <tuf> now were talkin' | ||
| [2010/07/22 23:19:04] @ \ask joined channel #puppet | ||
| [2010/07/22 23:22:35] @ mfladischer joined channel #puppet | ||
| [2010/07/22 23:25:18] @ Quit: \ask: Remote host closed the connection | ||
| [2010/07/22 23:31:37] <chendry> tuf: for that, couldn't you use a notify? gem { haml: ensure => latest, notify => Exec[handle_haml_upgrade] } ? | ||
| [2010/07/22 23:32:23] <chendry> tuf: or create an exec that subscribes to the gem { foo: ensure => latest } | ||
| [2010/07/22 23:34:04] <tuf> yes the notify might work there | ||
| [2010/07/22 23:34:30] <tuf> chendry: heres what im working on (its conceptual havent tried it yet) http://www.pastie.org/1056576 | ||
| [2010/07/22 23:35:01] <tuf> ignore the creates in there | ||
| [2010/07/22 23:35:18] <tuf> but youll get the idea looking at the package type | ||
| [2010/07/22 23:37:07] @ mclarke joined channel #puppet | ||
| [2010/07/22 23:37:34] @ lkoranda joined channel #puppet | ||
| [2010/07/22 23:38:44] <tuf> if you refesh the pastie youll see your suggestion at the bottom there | ||
| [2010/07/22 23:38:52] <tuf> I _think_ that'll work | ||
| [2010/07/22 23:39:32] <tuf> but the execs may need some special stuff like the paths etc | ||
| [2010/07/22 23:39:44] <tuf> (you can see im trying to do this w/o a server side script) | ||
| [2010/07/22 23:44:31] @ yannL joined channel #puppet | ||
| [2010/07/22 23:44:36] @ \ask joined channel #puppet | ||
| [2010/07/22 23:46:26] @ Quit: randybias: Quit: Leaving... | ||
| [2010/07/22 23:48:46] <tuf> im not sure if notify is usable within a package type | ||
| [2010/07/22 23:50:51] @ Quit: fredden: Read error: Connection reset by peer | ||
| [2010/07/22 23:51:50] <chendry> ohh, i see | ||
| [2010/07/22 23:52:27] <chendry> I think for that top part, you don't want a require -- that will execute the Exec's before passenger is installed. Maybe a notify instead? | ||
| [2010/07/22 23:52:56] <tuf> oh right | ||
| [2010/07/22 23:53:05] <tuf> the puppet docs dont list notify as an option in there | ||
| [2010/07/22 23:53:09] <tuf> but ill try it | ||
| [2010/07/22 23:53:24] <chendry> and for the bottom part, I think that's relatively new syntax, declaring a dependency on a resource that you create inline -- i'm not too familiar with it | ||
| [2010/07/22 23:53:31] @ sdog joined channel #puppet | ||
| [2010/07/22 23:53:50] <chendry> i think notify falls under the category of "metaparameters" (applies to all resource types) so that might be why it's not listed | ||
| [2010/07/22 23:53:54] <tuf> I wasnt either but I saw an example and was intrigued | ||
| [2010/07/22 23:54:08] @ Quit: sdog: Changing host | ||
| [2010/07/22 23:54:09] @ sdog joined channel #puppet | ||
| [2010/07/22 23:54:31] <chendry> same here -- i'm going to need to take a day and clean my stuff up with all the new syntax | ||
| [2010/07/22 23:55:44] <tuf> ah I think thatll do it | ||
| [2010/07/22 23:55:49] <tuf> let me test this | ||
| [2010/07/22 23:57:02] @ nakano is now known as nakano_ |
Generated by irclog2html.py 2.9.2 by Marius Gedminas - find it at mg.pov.lt!