| [2010/08/05 00:01:51] @ Log started by gepetto | ||
| [2010/08/05 00:01:51] @ Quit: ckauhaus: Read error: Operation timed out | ||
| [2010/08/05 00:02:17] @ TREllis joined channel #puppet | ||
| [2010/08/05 00:05:50] @ Quit: nexx: Quit: quit | ||
| [2010/08/05 00:06:40] @ kc7zzv joined channel #puppet | ||
| [2010/08/05 00:08:35] <kc7zzv> I'm looking for a puppet type that uses an external program and parses it's output. I want to take it apart to make a cups provider. I'm assuming that writing it in pure ruby will be the easiest answer. Anyone know of a good example? | ||
| [2010/08/05 00:11:00] <ohookins> parses is one thing, but how do you want to use the output? | ||
| [2010/08/05 00:11:15] <ohookins> if it is something simple like checking something and returning true or false, a simple exec can suffice | ||
| [2010/08/05 00:11:21] @ nakano_ is now known as nakano | ||
| [2010/08/05 00:12:20] <kc7zzv> Pretend I'm creating a provider to manage files using "ls", "touch", "chmod", and "rm". | ||
| [2010/08/05 00:12:26] @ sdog joined channel #puppet | ||
| [2010/08/05 00:12:40] @ Quit: pugnacity: Quit: Leaving. | ||
| [2010/08/05 00:12:56] <ohookins> yes, you'd need to write a custom provider in ruby | ||
| [2010/08/05 00:13:09] <kc7zzv> I would need to parse the output of ls to make sure the permissions are right, and the file exists. | ||
| [2010/08/05 00:13:15] <ohookins> technically it is possible to write it in another language but you'd need at least hooks to call out to the other language code | ||
| [2010/08/05 00:13:20] @ Quit: booi: Quit: Leaving | ||
| [2010/08/05 00:13:44] <kc7zzv> Then I'd use the other commands to "fix" what doesn't match the manifest. | ||
| [2010/08/05 00:13:52] <ohookins> for example the yum provider calls out to some python code, but that is only because decent ruby bindings don't exist | ||
| [2010/08/05 00:14:28] <ohookins> if it is possible to use native ruby bindings for what you want to do, that is preferable, because you end up having to parse a whole lot of output from shellouts | ||
| [2010/08/05 00:14:32] <kc7zzv> Ah. I thought the yum provider just ran commands, and looked at the output. | ||
| [2010/08/05 00:14:34] @ Quit: sdog: Changing host | ||
| [2010/08/05 00:14:34] @ sdog joined channel #puppet | ||
| [2010/08/05 00:14:54] <ohookins> nope, there is some python code in there that runs stuff from libyum or whatever it is called | ||
| [2010/08/05 00:14:55] <kc7zzv> That's what I was planning to do. | ||
| [2010/08/05 00:15:08] <ohookins> but that is really an example of what not to do | ||
| [2010/08/05 00:15:18] @ kubicek joined channel #puppet | ||
| [2010/08/05 00:15:20] <kc7zzv> yum? | ||
| [2010/08/05 00:15:34] <ohookins> the way the yum provider is coded | ||
| [2010/08/05 00:15:48] <ohookins> but as i said, it was purely out of necessity | ||
| [2010/08/05 00:16:04] <ohookins> parsing yum output is a big struggle from command line tools, due to the large variety in output formats | ||
| [2010/08/05 00:16:34] @ ckauhaus joined channel #puppet | ||
| [2010/08/05 00:16:35] <kc7zzv> Ok. I know the linux cups has C bindings, but I'd assumed there aren't ruby bindings. I will check though. | ||
| [2010/08/05 00:16:51] <ohookins> check, it will make your life easier if you can do it natively from ruby | ||
| [2010/08/05 00:16:52] @ PaulWay[w] left channel #puppet ("I must go, there are too many tangrams on this channel.") | ||
| [2010/08/05 00:19:35] @ rgevaert joined channel #puppet | ||
| [2010/08/05 00:20:58] @ Ramonster joined channel #puppet | ||
| [2010/08/05 00:22:10] <kc7zzv> Nope. No luck. | ||
| [2010/08/05 00:23:31] <kc7zzv> The data dump from the program looks like this: "media=na_letter_8.5x11in number-up=1 printer-commands=AutoConfigure,Clean,PrintSelfTestPage" | ||
| [2010/08/05 00:26:32] @ pugnacity joined channel #puppet | ||
| [2010/08/05 00:26:42] <ohookins> so how do you want to use that? | ||
| [2010/08/05 00:32:25] @ jmccune joined channel #puppet | ||
| [2010/08/05 00:41:50] @ Naresh` joined channel #puppet | ||
| [2010/08/05 00:42:24] @ toggg joined channel #puppet | ||
| [2010/08/05 00:43:19] @ verwilst joined channel #puppet | ||
| [2010/08/05 00:44:02] @ Quit: jmccune: Ping timeout: 240 seconds | ||
| [2010/08/05 00:44:28] <kc7zzv> In this case, I want to ignore all that. I just want "device-uri", "printer-info, printer-location, and printer-make-and-model. | ||
| [2010/08/05 00:44:40] @ Quit: freshtonic: Quit: freshtonic | ||
| [2010/08/05 00:45:18] <kc7zzv> ohookins: I want to make each of those a parameter of the type. I don't care about the rest. | ||
| [2010/08/05 00:46:02] <ohookins> i can't really help you with creating the type, i've never done it bofer | ||
| [2010/08/05 00:46:05] <ohookins> before | ||
| [2010/08/05 00:46:21] <Volcane> kc7zzv: jamesturnbull has a simple htpasswd provider. it uses a ruby library but you can easily just execute your command and parse the output instead. but its a simple enough example to get going | ||
| [2010/08/05 00:46:21] <ohookins> but from the output, it seems like it would be reasonably easy to format it and parse it correctly | ||
| [2010/08/05 00:46:31] @ randybias joined channel #puppet | ||
| [2010/08/05 00:46:46] <kc7zzv> Ok. I was mostly looking for a similar example. | ||
| [2010/08/05 00:46:55] <kc7zzv> Cool. I'll take a look at that. | ||
| [2010/08/05 00:50:31] <kc7zzv> Volcane: It's not what I was looking for, but it's a very good starting place because it's so simple. (And I need simple, because I hardly know an ruby.) | ||
| [2010/08/05 00:52:35] <Volcane> kc7zzv: yeah, so all you probably need is to build on that and where - in the provider - it use the ruby api for making the change and verifying the state you use a external command | ||
| [2010/08/05 00:52:55] <kc7zzv> Volcane: Before now I wasn't even quite sure where the type ended and the provider began. | ||
| [2010/08/05 00:53:06] <Volcane> kc7zzv: and we can probably help you parse the output of the command when you get to that | ||
| [2010/08/05 00:53:33] <kc7zzv> The mysql one I was looking at is much more complicated. | ||
| [2010/08/05 00:53:40] <Volcane> yeah | ||
| [2010/08/05 00:55:35] <kc7zzv> It's to early for me to do it, but is there a way to say that my resource implies that another resource exists? | ||
| [2010/08/05 00:56:24] <kc7zzv> Basically, would want mine to conflict with File["/etc/cups/printers.conf"]. | ||
| [2010/08/05 00:56:44] <Volcane> yeah gotta be a way to do that - how i am not sure though, also never wrote a type/provider | ||
| [2010/08/05 00:57:05] <kc7zzv> I know about auto-require, but that's almost the opposite of what I want. | ||
| [2010/08/05 00:57:28] <kc7zzv> Ah. Well, once I get to that point, I'll ask again, or use the mailing list. | ||
| [2010/08/05 00:59:01] <kc7zzv> Also, what is the right thing to so if you're creating a deb package that doesn't care about it's architecture? For example a deb that only contains html. | ||
| [2010/08/05 00:59:59] <kc7zzv> Do a create one for each arch, create one with something like noarch as the arch, or give a list in the control file for the deb? | ||
| [2010/08/05 01:00:08] <rgevaert> what is the current best practice to manage nfs exports? | ||
| [2010/08/05 01:00:18] <FiXion> kc7zzv: there's the "all" architecture for that | ||
| [2010/08/05 01:00:25] <FiXion> packagename-all | ||
| [2010/08/05 01:00:34] <FiXion> instead of f.ex. packagename-amd64 | ||
| [2010/08/05 01:00:49] <FiXion> folder is binary-all | ||
| [2010/08/05 01:01:00] <FiXion> vs. binary-amd64 and binary-i386 | ||
| [2010/08/05 01:01:11] <kc7zzv> FiXion: Thanks. I knew there had to be something, but I didn't see it. | ||
| [2010/08/05 01:01:46] <kc7zzv> I think I got noarch from rpm or something. | ||
| [2010/08/05 01:02:10] @ tecto_ joined channel #puppet | ||
| [2010/08/05 01:02:10] @ Quit: tecto_: Changing host | ||
| [2010/08/05 01:02:10] @ tecto_ joined channel #puppet | ||
| [2010/08/05 01:02:47] @ Quit: pugnacity: Remote host closed the connection | ||
| [2010/08/05 01:04:12] @ Quit: toggg: Quit: :) ♪ © ¿ !~§¤[1;21] 0.6+8*9X²2¨@#|/[_.-{3,4°5^5"'€&6,55957(FR)<7%0=1=0%6>?&£`"5^5°4,3}-._]\|#@¨2²X9*8+7.0 [12;2]¤§~¡ ? 12±¾ ® ♪ (: | ||
| [2010/08/05 01:04:28] @ Quit: tecto__: Ping timeout: 265 seconds | ||
| [2010/08/05 01:05:54] @ themroc joined channel #puppet | ||
| [2010/08/05 01:07:30] @ pugnacity joined channel #puppet | ||
| [2010/08/05 01:26:27] <FiXion> noarch is the rpm equivalent | ||
| [2010/08/05 01:27:32] @ ohadlevy joined channel #puppet | ||
| [2010/08/05 01:27:49] @ Quit: wilmoore: Read error: Connection reset by peer | ||
| [2010/08/05 01:29:28] @ wilmoore joined channel #puppet | ||
| [2010/08/05 01:36:46] @ Quit: \ask: Remote host closed the connection | ||
| [2010/08/05 01:37:10] @ \ask joined channel #puppet | ||
| [2010/08/05 01:40:28] @ andrewh joined channel #puppet | ||
| [2010/08/05 01:41:47] @ Quit: \ask: Ping timeout: 252 seconds | ||
| [2010/08/05 01:49:43] @ Quit: mclarke: Quit: mclarke | ||
| [2010/08/05 01:51:26] @ franks_ joined channel #puppet | ||
| [2010/08/05 01:54:59] @ Quit: kc7zzv: Read error: Operation timed out | ||
| [2010/08/05 01:58:59] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 02:02:11] @ lkoranda joined channel #puppet | ||
| [2010/08/05 02:03:12] @ kc7zzv joined channel #puppet | ||
| [2010/08/05 02:03:23] @ Hallaj joined channel #puppet | ||
| [2010/08/05 02:03:52] <Hallaj> Hi all | ||
| [2010/08/05 02:03:55] @ littleidea joined channel #puppet | ||
| [2010/08/05 02:04:04] <zipkid> hello | ||
| [2010/08/05 02:04:37] @ lkoranda is now known as lkoranda_lunch | ||
| [2010/08/05 02:04:46] <Hallaj> can puppet share / edit the same file? | ||
| [2010/08/05 02:04:47] @ lkoranda_lunch is now known as lkoranda | ||
| [2010/08/05 02:05:37] <Hallaj> example: default node { edits / replace /etc/sudoers } node "specific.host" inherits default { edits / replace /etc/suders } | ||
| [2010/08/05 02:05:41] <Hallaj> how do I actually get around it? | ||
| [2010/08/05 02:06:11] <nico> use the source fallback system | ||
| [2010/08/05 02:06:50] <nico> source => [ "puppet:///...../$fqdn.sudoers", "puppet:///....../common.sudoers" ] | ||
| [2010/08/05 02:06:59] @ Quit: littleidea: Client Quit | ||
| [2010/08/05 02:07:14] <nico> if $fqdn.sudoers is not found, will use common.sudoers | ||
| [2010/08/05 02:07:15] <tim|mac> or extlookup | ||
| [2010/08/05 02:07:37] <nico> oh yes, I forgot extlookup is now part of core | ||
| [2010/08/05 02:08:12] <zipkid> is extlookup documente on docs.puppetlabs.com? | ||
| [2010/08/05 02:08:21] <Hallaj> oh, cool | ||
| [2010/08/05 02:08:28] <Hallaj> didn't know we could have that | ||
| [2010/08/05 02:09:06] @ littleidea joined channel #puppet | ||
| [2010/08/05 02:09:41] <zipkid> i dont't find extlookup on http://docs.puppetlabs.com/references/latest/function.html | ||
| [2010/08/05 02:10:06] <nico> zipkid: it was committed quite recently | ||
| [2010/08/05 02:10:07] <dcarley> zipkid: it's probably not, yet. | ||
| [2010/08/05 02:10:29] <dcarley> http://tiny.cc/vhk8j - should cover everything you need for the moment though. | ||
| [2010/08/05 02:10:48] <zipkid> dcarley: thx | ||
| [2010/08/05 02:13:03] <rgevaert> zipkid, 2.6.1 :) | ||
| [2010/08/05 02:13:34] <zipkid> rgevaert: elaborate... | ||
| [2010/08/05 02:14:07] <rgevaert> extlookup :) | ||
| [2010/08/05 02:14:25] <zipkid> is it not in 2.6.0 ? | ||
| [2010/08/05 02:16:09] <dcarley> nope. it's in ext/ and can be made to work. but wasn't officially merged until after. | ||
| [2010/08/05 02:16:25] <zipkid> ok | ||
| [2010/08/05 02:16:46] @ Quit: fluxdude: Quit: KVIrc 4.0.0 Insomnia http://www.kvirc.net/ | ||
| [2010/08/05 02:17:07] @ fluxdude joined channel #puppet | ||
| [2010/08/05 02:17:20] <dcarley> zipkid: you could just pull the single file from the repos if you need to use it in 2.6.0 | ||
| [2010/08/05 02:19:06] <Hallaj> Oh yeah, I've been getting a segmentation fault error on some of my puppet client's | ||
| [2010/08/05 02:19:14] <Hallaj> /usr/lib/ruby/1.8/xmlrpc/client.rb:412: [BUG] Segmentation fault | ||
| [2010/08/05 02:19:30] <Hallaj> I can't really find much information about it, anyone encoutered that before? | ||
| [2010/08/05 02:23:34] <rgevaert> I would like to know when Dan Bode would be on IRC? He asked me to catch him on IRC but I'm a bit in the dark what his IRC habits are. Thanks! | ||
| [2010/08/05 02:23:53] @ itguru joined channel #puppet | ||
| [2010/08/05 02:24:06] <dcarley> Hallaj: what ruby version? | ||
| [2010/08/05 02:24:19] <ohookins> rgevaert: i'm guessing he is on portland time, so he won't show his face for another 6 or so hours | ||
| [2010/08/05 02:25:26] <Hallaj> ruby1.8.4 | ||
| [2010/08/05 02:26:12] <dcarley> Hallaj: have you seen - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=376618 | ||
| [2010/08/05 02:28:09] <Hallaj> dcarley: Oh, there's a problem with ruby itself? | ||
| [2010/08/05 02:28:16] <Hallaj> dcarley: Thanks :) | ||
| [2010/08/05 02:29:13] <dcarley> i haven't experienced it myself. but looks like it :) | ||
| [2010/08/05 02:29:25] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 02:29:48] <rgevaert> ohookins, ok thank | ||
| [2010/08/05 02:32:28] @ \ask joined channel #puppet | ||
| [2010/08/05 02:37:06] @ ffrank joined channel #puppet | ||
| [2010/08/05 02:37:15] @ Quit: \ask: Ping timeout: 264 seconds | ||
| [2010/08/05 02:37:30] @ Quit: malikai: Quit: Leaving. | ||
| [2010/08/05 02:39:04] <ffrank> hi. i have a widely-used define that includes a file { ... } resource. if i mess up and define the same file somewhere else, i may have the error reported as happening inside my define. it would be nice to have a sort of "declaration stack" to see where i actually did screw up. is something like that possible (in 0.25)? | ||
| [2010/08/05 02:44:23] @ toi joined channel #puppet | ||
| [2010/08/05 02:51:23] <zipkid> Hoi toi boy | ||
| [2010/08/05 02:51:49] <toi> Good morning zipkid! | ||
| [2010/08/05 02:52:05] @ [alch] joined channel #puppet | ||
| [2010/08/05 02:54:39] @ Quit: alch: Ping timeout: 264 seconds | ||
| [2010/08/05 02:58:58] @ Quit: toi: Ping timeout: 276 seconds | ||
| [2010/08/05 03:01:35] @ abien joined channel #puppet | ||
| [2010/08/05 03:02:44] <ffrank> it would be sufficient to have a variable or function that can tell me the context where the current resource was declared (such as /MyClass/MyDef[res-name]) | ||
| [2010/08/05 03:03:24] <Volcane> ffrank: 2.6 has a variable for this that you can notice or something | ||
| [2010/08/05 03:04:11] @ huuggee joined channel #puppet | ||
| [2010/08/05 03:04:11] <ffrank> Volcane: that would be splendid *shuffles off towards the release notes once more* | ||
| [2010/08/05 03:04:37] <Volcane> you'd need to notify{} or something though it doesnt just log it | ||
| [2010/08/05 03:06:28] <Volcane> ah, $module_name now is the name of the module its ine | ||
| [2010/08/05 03:06:50] <Volcane> and $caller_module_name inside a define will have the modulename of who is 'calling' the define | ||
| [2010/08/05 03:06:56] <Volcane> #15210 | ||
| [2010/08/05 03:07:04] <Volcane> oh, no its not it #1545 | ||
| [2010/08/05 03:07:05] <gepetto> Volcane: oh: #1545 is http://projects.puppetlabs.com/issues/show/1545 "Puppet - Feature #1545: The module name should be available as a variable - Puppet Labs" | ||
| [2010/08/05 03:07:07] <ffrank> yeh, but that won't quite cut it. can't have a dedicated module for each class, now can i... | ||
| [2010/08/05 03:07:37] <Volcane> nods, so not quite perfect, you could add to the ticket that maybe $caller_class_name would be awesome too | ||
| [2010/08/05 03:07:44] <ffrank> debug() already logs this piece of info in 0.25 i think. but it's not visible on the client, only in the puppetmaster log | ||
| [2010/08/05 03:08:04] @ Quit: kubicek: Read error: Connection reset by peer | ||
| [2010/08/05 03:08:15] <Volcane> or just ask for the logging to be improved, not really a solution for now but should help in future :) | ||
| [2010/08/05 03:08:16] <ffrank> or can i make puppetd somehow yank those logs from the master? that would be awesome | ||
| [2010/08/05 03:08:32] <Volcane> ffrank: you can send them with a report | ||
| [2010/08/05 03:09:10] @ Quit: tecto_: Ping timeout: 276 seconds | ||
| [2010/08/05 03:09:13] @ kubicek joined channel #puppet | ||
| [2010/08/05 03:09:20] <ffrank> Volcane: how are such reports sent? can they be displayed after puppetd --test somehow? | ||
| [2010/08/05 03:09:38] <Volcane> ffrank: nah they get sent to the master and stored, reported in dashboard etc | ||
| [2010/08/05 03:10:37] @ toggg joined channel #puppet | ||
| [2010/08/05 03:11:20] @ toi joined channel #puppet | ||
| [2010/08/05 03:11:31] <ffrank> i see. well, the puppetmasterlog in itself is sufficient, so that'll be allright. but it's cumbersome to have to go there after bio-waste has hit the proverbial fan... ;) | ||
| [2010/08/05 03:11:44] <Volcane> lol | ||
| [2010/08/05 03:17:13] @ ]oestewart joined channel #puppet | ||
| [2010/08/05 03:17:23] @ Quit: randybias: Ping timeout: 260 seconds | ||
| [2010/08/05 03:17:23] <Volcane> i did file a ticket to get the reports on the node which will help a lot | ||
| [2010/08/05 03:18:15] <ffrank> thanks. sounds good | ||
| [2010/08/05 03:20:18] @ renanm joined channel #puppet | ||
| [2010/08/05 03:24:05] @ zorzar_ joined channel #puppet | ||
| [2010/08/05 03:27:59] @ Quit: kenneho: Ping timeout: 248 seconds | ||
| [2010/08/05 03:28:01] @ Quit: zorzar__: Ping timeout: 276 seconds | ||
| [2010/08/05 03:30:54] @ Quit: pugnacity: Quit: Leaving. | ||
| [2010/08/05 03:30:54] @ kenneho joined channel #puppet | ||
| [2010/08/05 03:40:35] <robinbowes> So, anyone roll out 0.26 yet? | ||
| [2010/08/05 03:40:45] <robinbowes> Any good? | ||
| [2010/08/05 03:41:04] <Volcane> wait for .1 to be out | ||
| [2010/08/05 03:41:29] <robinbowes> I plan to | ||
| [2010/08/05 03:41:46] <robinbowes> Is 0.26.x easier on puppetmasters? | ||
| [2010/08/05 03:42:54] <Volcane> not sure, file transfers should be *much* improved | ||
| [2010/08/05 03:43:06] <Volcane> no problem now transfering large files etc, compile performance seem to be an issue | ||
| [2010/08/05 03:43:10] <robinbowes> I got bitten yesterday when I needed to push out changes to all servers as part of a DC migration | ||
| [2010/08/05 03:43:12] <Volcane> but hopefully fixed in .1 | ||
| [2010/08/05 03:43:50] <robinbowes> Some clients just timed out and didn't run and apply the changes | ||
| [2010/08/05 03:44:10] <Volcane> yeah you cant just run lots at once, dont htnik that'll change for a long time | ||
| [2010/08/05 03:44:25] <robinbowes> I tried to stagger them in batches | ||
| [2010/08/05 03:44:30] <Volcane> need to more or less match puppetmasterd workers 1:1 to running clients | ||
| [2010/08/05 03:44:52] <robinbowes> Hmm, 50 ? | ||
| [2010/08/05 03:45:09] <Volcane> need ltos of puppetmasterd's or spread them | ||
| [2010/08/05 03:45:59] <robinbowes> What would help would be some way to pre-generate each client's manifest so all puppetmaster has to do is send it to the client rather than building it fresh each time | ||
| [2010/08/05 03:46:28] <robinbowes> And caching, of course | ||
| [2010/08/05 03:46:42] <robinbowes> I can feel a ticket coming on... | ||
| [2010/08/05 03:47:12] <Volcane> yeah i think lots of that kind of thing is at least in the 'we should move towards this model' stage at present | ||
| [2010/08/05 03:47:23] <robinbowes> I SQTM when I read the 0.26 announcement: "We’ve got an exciting new construct called “run stages” that will better allow you to order and structure your Puppet runs" | ||
| [2010/08/05 03:47:39] <Volcane> sqtm? | ||
| [2010/08/05 03:47:45] <robinbowes> smiled quietly to myself | ||
| [2010/08/05 03:47:53] <Volcane> ah :) | ||
| [2010/08/05 03:48:03] <robinbowes> More realistic than lol | ||
| [2010/08/05 03:48:44] <robinbowes> Always nice when a feature you requested and argued for makes it as an "exciting new construct" ! | ||
| [2010/08/05 03:48:52] <Volcane> yeah heh | ||
| [2010/08/05 03:51:51] <Volcane> i hacked up something but never released that runs all clients quick as it can with a cap on the concurrency | ||
| [2010/08/05 03:52:01] <Volcane> so my mcollective commander will run them over 30 minutes say with concurrency | ||
| [2010/08/05 03:52:04] @ Quit: alexine_dsouza: Read error: Connection reset by peer | ||
| [2010/08/05 03:52:16] <Volcane> but if i just work through the discovered list quick as possible with no sleep between runs | ||
| [2010/08/05 03:52:28] <Volcane> thats pretty good for forcing out changes that way without hurting things | ||
| [2010/08/05 03:52:30] <cynicismic> has anyone tried to upgrade puppet clients using puppet? | ||
| [2010/08/05 03:52:46] <ohookins> yes | ||
| [2010/08/05 03:52:53] <cynicismic> any luck? | ||
| [2010/08/05 03:53:13] <ohookins> if you are running puppetd as a daemon, you are in for trouble, but from cron it is easier | ||
| [2010/08/05 03:53:48] <cynicismic> all my linux servers are running as a daemon :( | ||
| [2010/08/05 03:54:39] <cynicismic> but I guess it's not too much of a task to migrate them to cron | ||
| [2010/08/05 03:54:52] <cynicismic> as I've got classes written for other OS's | ||
| [2010/08/05 03:55:26] <cynicismic> ohookins: don't suppose you've got any classes/examples of how you did it lying around anywhere? | ||
| [2010/08/05 03:55:41] <ohookins> there wasn't very much to it | ||
| [2010/08/05 03:56:12] <ohookins> as we were running puppetd from cron, it was simply package { puppet: ensure => "someversion"; } and when puppet ran next it upgraded itself | ||
| [2010/08/05 03:56:33] <ohookins> running puppetd as a daemon poses problems when you need it to do anything with itself | ||
| [2010/08/05 03:57:06] <cynicismic> ah, so that depends on having installed it from a package to begin with, rather than tarballs pre-installed on machine images as I have | ||
| [2010/08/05 03:57:28] <ohookins> oh, so you mean starting from a clean slate with nothing there already? | ||
| [2010/08/05 03:57:40] <ohookins> if puppet it not already running, you can't get it to start itself ;) | ||
| [2010/08/05 03:58:26] <cynicismic> It's already installed and running on all the machines, but it was installed from the tarball, rather than via a deb/rpm/package management system | ||
| [2010/08/05 03:59:04] <cynicismic> I guess the right/proper way to do it would have been to package it up and distribute it properly | ||
| [2010/08/05 03:59:11] <ohookins> well, installing from a package resource would still work, but then you'd need to notify an exec to cleanup the tarball contents | ||
| [2010/08/05 03:59:47] <ohookins> and then maybe also notify an exec to schedule a puppetd restart a few minutes after the run | ||
| [2010/08/05 03:59:50] <ohookins> that's just an idea | ||
| [2010/08/05 04:00:01] <ohookins> maybe a poor one ;) but a possibility anyway | ||
| [2010/08/05 04:00:13] <cynicismic> thanks, I'll have a think.. | ||
| [2010/08/05 04:01:34] @ Quit: toi: Ping timeout: 258 seconds | ||
| [2010/08/05 04:07:28] @ Quit: jsman: Ping timeout: 240 seconds | ||
| [2010/08/05 04:09:19] @ Quit: kubicek: Quit: kubicek | ||
| [2010/08/05 04:10:47] <alcy> how does include <modulename> differ from require <modulename> or resource{"abc":require=>Class["classname"]} ? | ||
| [2010/08/05 04:11:47] @ tecto_ joined channel #puppet | ||
| [2010/08/05 04:11:48] @ Quit: tecto_: Changing host | ||
| [2010/08/05 04:11:48] @ tecto_ joined channel #puppet | ||
| [2010/08/05 04:12:41] <ohookins> alcy: you don't include modules, you include classes and import modules | ||
| [2010/08/05 04:13:21] <ohookins> including a class drops that class's code into the manifest at that point | ||
| [2010/08/05 04:13:29] @ kubicek joined channel #puppet | ||
| [2010/08/05 04:13:49] <ohookins> requiring something doesn't pull in the code, it just places a requirement on it when the resources are being activated | ||
| [2010/08/05 04:13:56] <ohookins> activated is not the right word, but you get the idea | ||
| [2010/08/05 04:14:44] <alcy> ohookins: yup, so basically if a module X needs Y's code to be executed first, I simply do an include right | ||
| [2010/08/05 04:14:50] <Volcane> ohookins: 'drops the code into the class' is totally not hte right way to think about it :) | ||
| [2010/08/05 04:15:06] <ohookins> no i agree | ||
| [2010/08/05 04:15:07] <ffrank> ohookins: i disagree about your notion of includes. as classes are singletons, they are imho sort of batched for execution | ||
| [2010/08/05 04:15:21] <ohookins> please disregard my incorrect terminology | ||
| [2010/08/05 04:15:44] <ohookins> including instantiates the class | ||
| [2010/08/05 04:15:53] <Volcane> a class is a collection of resources, resources have a relation. class is a singleton | ||
| [2010/08/05 04:16:03] <Volcane> when you include a class all the resources in it gets added to the run list | ||
| [2010/08/05 04:16:19] <Volcane> later on you can add relationships iwth require => Class["foo"] and this will affect the ordering of the run list | ||
| [2010/08/05 04:16:35] <Volcane> this gets stored on a directed graph - think a tree - with related resources sitting on branches on the tree | ||
| [2010/08/05 04:16:42] <Volcane> what require does is 2 things | ||
| [2010/08/05 04:16:47] <Volcane> it includes the class | ||
| [2010/08/05 04:17:01] @ Quit: lkoranda: Quit: Ex-Chat | ||
| [2010/08/05 04:17:01] <ffrank> not wanting to be nit-picky but - no instances with puppet classes ;- | ||
| [2010/08/05 04:17:14] <Volcane> and it adds a relationship so that the included class and all resources in it becomes a dependancy - as if you added require => Class["foo"] to everything | ||
| [2010/08/05 04:17:20] @ lkoranda joined channel #puppet | ||
| [2010/08/05 04:18:08] @ pugnacity joined channel #puppet | ||
| [2010/08/05 04:18:52] <ohookins> ok, i'll shut up now ;) | ||
| [2010/08/05 04:19:03] <Volcane> if you include a class many times | ||
| [2010/08/05 04:19:06] <Volcane> more or less nothing happens | ||
| [2010/08/05 04:19:28] <Volcane> hence singleton, include foo,foo,foo just include the one foo | ||
| [2010/08/05 04:20:36] @ \ask joined channel #puppet | ||
| [2010/08/05 04:21:07] <alcy> thanks Volcane, ohookins | ||
| [2010/08/05 04:21:24] <ohookins> hopefully i didn't confuse and mislead you | ||
| [2010/08/05 04:23:01] @ Quit: tecto_: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: wilmoore: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: yannL: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: p3rror: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: flakrat: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: matti: *.net *.split | ||
| [2010/08/05 04:23:01] @ Quit: FoXMaN: *.net *.split | ||
| [2010/08/05 04:23:10] <alcy> my knowledge of puppet terminology sucks. now am used to getting bashed every now & then here. at least my modules are ok. but how they fit in a bigger environment/consistency, have to work on it | ||
| [2010/08/05 04:24:07] <ohookins> i know how things work, but perhaps not on an internal to puppet level | ||
| [2010/08/05 04:24:18] <ohookins> and frankly sometimes i don't want to know, after reading the code | ||
| [2010/08/05 04:25:02] <Volcane> yeah its best not to know :) as long as you know the few basic things and how ordering works you're mostly fine | ||
| [2010/08/05 04:25:28] @ Quit: \ask: Ping timeout: 265 seconds | ||
| [2010/08/05 04:25:32] @ Quit: ckauhaus: Read error: Operation timed out | ||
| [2010/08/05 04:26:57] @ matti joined channel #puppet | ||
| [2010/08/05 04:26:57] @ Quit: matti: Changing host | ||
| [2010/08/05 04:26:57] @ matti joined channel #puppet | ||
| [2010/08/05 04:27:36] @ yannL joined channel #puppet | ||
| [2010/08/05 04:28:14] <ffrank> ah, so not only does one not need to know ruby to use puppet - it's actually an advantage ;p | ||
| [2010/08/05 04:29:46] @ flakrat joined channel #puppet | ||
| [2010/08/05 04:31:11] @ tecto_ joined channel #puppet | ||
| [2010/08/05 04:31:11] @ Quit: tecto_: Changing host | ||
| [2010/08/05 04:31:11] @ tecto_ joined channel #puppet | ||
| [2010/08/05 04:33:49] @ wilmoore joined channel #puppet | ||
| [2010/08/05 04:33:49] @ p3rror joined channel #puppet | ||
| [2010/08/05 04:34:54] @ FoXMaN joined channel #puppet | ||
| [2010/08/05 04:35:05] <Volcane> ffrank: lol | ||
| [2010/08/05 04:39:36] @ themroc is now known as themroc_dc | ||
| [2010/08/05 04:42:37] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 04:44:34] @ Quit: Hallaj: Quit: Leaving | ||
| [2010/08/05 04:45:23] @ spacex joined channel #puppet | ||
| [2010/08/05 04:49:40] <FiXion> does puppet 0.25.x og 0.26 support an "optional" exec. ie. I only want to run apt-get update - IF a package is about to be installed | ||
| [2010/08/05 04:49:50] <FiXion> currently puppet runs apt-get update on every run | ||
| [2010/08/05 04:49:54] <FiXion> :( | ||
| [2010/08/05 04:50:16] <ohookins> Package { require => Exec["apt-get update"] } | ||
| [2010/08/05 04:50:22] <ohookins> set the default in site.pp | ||
| [2010/08/05 04:50:33] <ohookins> it's a bit hamfisted though, and i'm not sure i like doing it that way | ||
| [2010/08/05 04:50:44] <ohookins> obviously you need to restrict that to only debian/ubuntu/etc systems | ||
| [2010/08/05 04:51:01] @ Naresh` is now known as Naresh | ||
| [2010/08/05 04:51:06] <Volcane> ohookins: and apart from not doing at all what he asked :) | ||
| [2010/08/05 04:51:07] @ Quit: Naresh: Changing host | ||
| [2010/08/05 04:51:07] @ Naresh joined channel #puppet | ||
| [2010/08/05 04:51:12] <Volcane> ohookins: it will still run every time puppet does | ||
| [2010/08/05 04:51:38] @ Quit: wilmoore: Remote host closed the connection | ||
| [2010/08/05 04:51:41] <ohookins> won't it only run if the package needs to be installed or updated? | ||
| [2010/08/05 04:51:45] <Volcane> nope :( | ||
| [2010/08/05 04:52:00] <ohookins> ah, could be the reason i stopped using it ;) | ||
| [2010/08/05 04:52:02] <Volcane> no way afaik to do that | ||
| [2010/08/05 04:53:11] <kubicek> maybe overriding provider - in command where it executes installation prepend apt-get update? | ||
| [2010/08/05 04:56:29] * FiXion goes and files a feature request :) | ||
| [2010/08/05 04:58:51] @ beata_ joined channel #puppet | ||
| [2010/08/05 04:59:13] <ffrank> Volcane: couldn't the package notify a refreshonly exec? | ||
| [2010/08/05 04:59:36] <FiXion> ffrank: then it would be run afterwards | ||
| [2010/08/05 04:59:41] <FiXion> AFAIK | ||
| [2010/08/05 05:00:10] <ffrank> err that's true. hum. | ||
| [2010/08/05 05:00:52] <FiXion> I'm thinking that perhaps it is a bug that it runs the exec everytime | ||
| [2010/08/05 05:00:57] <FiXion> even when not installing a package | ||
| [2010/08/05 05:01:07] <FiXion> ohookins: I have that require btw. ;) | ||
| [2010/08/05 05:01:12] <henk> we have nagios running anyway, so i setup check_apt to run once everyday... | ||
| [2010/08/05 05:01:45] @ toi joined channel #puppet | ||
| [2010/08/05 05:01:55] <henk> at least for our needs that's good enough. | ||
| [2010/08/05 05:02:28] <ohookins> it kind of requires an inverse to subscribe | ||
| [2010/08/05 05:02:40] * ohookins gasps | ||
| [2010/08/05 05:02:46] <ohookins> s/kind of/kind've/ | ||
| [2010/08/05 05:02:46] <FiXion> not for mine. when I add a new version of a site (which is rolled out as packages) - I need it to be available - when puppet tries to install that specific version :) | ||
| [2010/08/05 05:03:23] <ohookins> it is one area where yum actually wins out over apt | ||
| [2010/08/05 05:03:41] <ffrank> ohookins: how so? | ||
| [2010/08/05 05:03:53] <henk> FiXion: you manage websites through packages? o_O wow, that's new... | ||
| [2010/08/05 05:04:00] <ohookins> at least with yum you can specify a very short metadata caching period on a specific repo, so if you have new versions of an application going into that repository regularly, you can be sure that you will always retrieve the latest version | ||
| [2010/08/05 05:04:32] <henk> at least for me. interesting idea, i just don't know if good also... | ||
| [2010/08/05 05:04:38] <ffrank> ohookins: but isn't the bottom line lots of updates? i was under the impression that FiXion wanted to avoid | ||
| [2010/08/05 05:05:09] <ffrank> FiXion: ensure => latest on the package won't cut it? | ||
| [2010/08/05 05:07:57] <ohookins> thing is, if you specify ensure => latest, it is implicit that you will update the metadata even if there is not a later version to install | ||
| [2010/08/05 05:08:25] <ohookins> so if you have *any* use of ensure => latest in your package resources, you may as well run apt-get update every run anyway | ||
| [2010/08/05 05:08:40] @ ahasenack joined channel #puppet | ||
| [2010/08/05 05:09:27] @ Quit: pinoyskull: Ping timeout: 265 seconds | ||
| [2010/08/05 05:09:32] <ffrank> ah, i see. thanks for clearing that up | ||
| [2010/08/05 05:10:54] <FiXion> I run sites through packages - so we can know EXACTLY when something was changed (ie. upgraded or downgraded) and we have a clear downgrade path if something goes wrong. | ||
| [2010/08/05 05:11:18] <FiXion> ofcourse the site DB needs to be handled upon release as well - but that's what's our release script is fore. | ||
| [2010/08/05 05:11:40] <ffrank> FiXion: so why not through source control? | ||
| [2010/08/05 05:11:43] <FiXion> have a script that builds a package from an svn tag - and adds it to our local package mirror | ||
| [2010/08/05 05:11:44] <ohookins> we only promote packages to the production repo when they are ready to be installed immediately | ||
| [2010/08/05 05:11:49] <FiXion> ffrank: too many mistakes | ||
| [2010/08/05 05:12:08] <ffrank> mistakes? | ||
| [2010/08/05 05:12:17] <madduck> now this is annoying… I have http://slexy.org/view/s22yGDYg5o, and while files under e.g. /etc/puppet/modules/production are chmod'd to 664, the owner/group are not changed. | ||
| [2010/08/05 05:12:19] <ohookins> up until QA everything is promoted automatically, then it is a manual promotion process from qa to staging, then staging to production | ||
| [2010/08/05 05:12:21] <FiXion> branch switching that affected too many - or just the wrong files | ||
| [2010/08/05 05:12:25] <madduck> moreover, the chmods don't show up in the debug log. | ||
| [2010/08/05 05:12:29] <FiXion> and rollback isn't as easy | ||
| [2010/08/05 05:13:17] <ffrank> FiXion: i see. i guess your processes evolved along a quite rare branch ;) | ||
| [2010/08/05 05:13:32] <FiXion> so instead of writing a script to handle the automating of this, using version control - I figured packages are made for this exact purpose | ||
| [2010/08/05 05:13:45] <FiXion> to control which files are on your system | ||
| [2010/08/05 05:15:32] <FiXion> ffrank: I don't think it's rare. the package system is supposed to handle all files on your system IMHO | ||
| [2010/08/05 05:16:07] <FiXion> and it excels in distribution, upgrading, downgrading, detecting un-auth changes to files belonging to a package etc. | ||
| [2010/08/05 05:16:15] <ffrank> FiXion: true, but I think the majority of places make do with svn or its kin.. | ||
| [2010/08/05 05:16:44] <ohookins> FiXion: i agree with you, but i don't see what the application deployment has to do with running apt-get multiple times | ||
| [2010/08/05 05:16:58] <ohookins> unless that is just an irritation | ||
| [2010/08/05 05:17:14] <ffrank> yeah, i was just being curious about that ;) | ||
| [2010/08/05 05:17:23] <FiXion> ohookins: if I tell puppet to install package=$versionnr - it won't succeed if the packge was added to the repo - after update was last run | ||
| [2010/08/05 05:17:36] @ Quit: axisys: Remote host closed the connection | ||
| [2010/08/05 05:17:43] <FiXion> so I need to run apt-get update before trying to install a package of a specific versionnr. | ||
| [2010/08/05 05:17:55] <FiXion> so ie. - I need the local repo cache to be up2date | ||
| [2010/08/05 05:18:19] <ohookins> well, it's a limitation of apt | ||
| [2010/08/05 05:18:48] <FiXion> the cool part of doing it this way, is that a release on ~20 servers is done in parallel - so release takes only as long as a puppet run | ||
| [2010/08/05 05:18:50] <ohookins> but really it is no different in yum, except that yum includes fetching metadata automatically whereas apt splits it into separate binaries | ||
| [2010/08/05 05:19:01] <FiXion> ohookins: actually yum is bad. it refreshes on every run | ||
| [2010/08/05 05:19:14] <ohookins> i think i suggested a feature at one point to incorporate apt-get update into the apt provider, but it was rejected | ||
| [2010/08/05 05:19:22] <ohookins> yum does not refresh on every run | ||
| [2010/08/05 05:19:29] <FiXion> for how long does it cache then? | ||
| [2010/08/05 05:19:34] <ohookins> it only refreshes if the metadata has expired | ||
| [2010/08/05 05:19:43] <ffrank> ohookins: i disagree. it's not a limitation. if you want your repo data up to date, run apt-get update. FiXion, you should consider doing it on every run, and early | ||
| [2010/08/05 05:19:44] <ohookins> which is controlled either in /etc/yum.conf or in each repository fragment | ||
| [2010/08/05 05:19:57] <FiXion> so it checks the "package-list" file datastamp on the server? | ||
| [2010/08/05 05:20:02] <ohookins> ffrank: i'll rephrase - it's a "feature" | ||
| [2010/08/05 05:20:14] <FiXion> ffrank: I do it on every run now. that's what I don't like. | ||
| [2010/08/05 05:20:30] <ohookins> in the context of puppet, it is a limitation due to a puppet "feature" or "limitation" depending on how you see it | ||
| [2010/08/05 05:20:51] <ffrank> FiXion: is your apt repo being overloaded by the puppet daemons? | ||
| [2010/08/05 05:21:04] <FiXion> don't think so. | ||
| [2010/08/05 05:21:05] <ohookins> because puppet doesn't natively do any apt metadata updating in the apt provider | ||
| [2010/08/05 05:21:14] <FiXion> it is running on a vmware guest - and has been acting "weird" lately | ||
| [2010/08/05 05:21:30] @ uphillian joined channel #puppet | ||
| [2010/08/05 05:21:42] <FiXion> had to reboot it the other day - downloads from it was at about 20kb/s | ||
| [2010/08/05 05:21:48] <FiXion> on a 10Gbe network :( | ||
| [2010/08/05 05:22:17] <FiXion> it's just an annoyance - waste of resources if you will | ||
| [2010/08/05 05:22:36] <FiXion> running an unnecessary apt-get update - when no package is about to be installed | ||
| [2010/08/05 05:23:17] <ohookins> the only way to escape that is by using a package mechanism that does not require metadata | ||
| [2010/08/05 05:23:21] <ohookins> like native rpm, or dpkg | ||
| [2010/08/05 05:23:45] <ohookins> technically you are doubling up on metadata - the repository provides it, and you provide it in the puppet manifest when you specify the version | ||
| [2010/08/05 05:23:49] <FiXion> ohookins: or just have puppet support a require on a change to Package state. | ||
| [2010/08/05 05:24:07] @ ckauhaus joined channel #puppet | ||
| [2010/08/05 05:24:11] <FiXion> ohookins: no. the repo can have (and often does) many versions | ||
| [2010/08/05 05:24:17] <FiXion> I just specify which one I exactly want | ||
| [2010/08/05 05:24:29] <ohookins> yes, but that inherently is metadata | ||
| [2010/08/05 05:24:32] <ohookins> version information | ||
| [2010/08/05 05:24:35] <FiXion> no correlation - except the local cache of metadata needs to know it's there | ||
| [2010/08/05 05:24:52] <FiXion> but not the same metadata aptitude keeps | ||
| [2010/08/05 05:24:58] <FiXion> it just keeps what versions are available | ||
| [2010/08/05 05:25:01] <madduck> wtf? http://slexy.org/view/s2j47SrD6C — the notification happens, but the file resource is not applied, not even if I remove the "ignore" (which was the last change) | ||
| [2010/08/05 05:25:26] <ohookins> FiXion: i'd suggest filing a feature request | ||
| [2010/08/05 05:25:31] @ Quit: alcy: Quit: ChatZilla 0.9.86 [Iceweasel 3.5.10/20100623112841] | ||
| [2010/08/05 05:25:35] <FiXion> ohookins: I've already done so | ||
| [2010/08/05 05:25:39] <FiXion> :) | ||
| [2010/08/05 05:26:14] <FiXion> I'll be commiting my puppet rollout of my own aptitude version :) | ||
| [2010/08/05 05:26:29] @ jsman joined channel #puppet | ||
| [2010/08/05 05:26:29] @ Quit: jsman: Changing host | ||
| [2010/08/05 05:26:29] @ jsman joined channel #puppet | ||
| [2010/08/05 05:26:32] <FiXion> just tested the change on our test setup - now to sync to production :) | ||
| [2010/08/05 05:26:42] @ aowi joined channel #puppet | ||
| [2010/08/05 05:27:11] <FiXion> had to fix an annoying bug in aptitude | ||
| [2010/08/05 05:28:49] <ffrank> madduck: what happens when you e.g. change the mode of one of the trees' root dirs before the next run? | ||
| [2010/08/05 05:31:08] @ rgsteele joined channel #puppet | ||
| [2010/08/05 05:31:36] <madduck> ffrank: then the directory gets changed back to the wanted mode, but none of the contained files do. http://slexy.org/view/s2CDKX4Hqf | ||
| [2010/08/05 05:32:19] @ Quit: SpacePope: Remote host closed the connection | ||
| [2010/08/05 05:32:24] @ SpacePope joined channel #puppet | ||
| [2010/08/05 05:33:16] <FiXion> madduck: try: recursive = true | ||
| [2010/08/05 05:33:29] <FiXion> recurse => true | ||
| [2010/08/05 05:33:46] <madduck> FiXion: did you look at my resource? http://slexy.org/view/s2j47SrD6C | ||
| [2010/08/05 05:34:02] <FiXion> madduck: yes - missed it. sorry. | ||
| [2010/08/05 05:34:07] <madduck> np ;) | ||
| [2010/08/05 05:34:24] <FiXion> madduck: try force => true | ||
| [2010/08/05 05:34:33] <ffrank> madduck: why does it say "not tagged with" at the top of your run? | ||
| [2010/08/05 05:34:39] <FiXion> we have that as well on ours | ||
| [2010/08/05 05:34:39] <Volcane> madduck: looked, but there were no output from the puppetd run or information on the directory so couldnt really help. | ||
| [2010/08/05 05:34:58] <ffrank> uhm, never mind | ||
| [2010/08/05 05:35:19] @ Quit: TREllis: Ping timeout: 276 seconds | ||
| [2010/08/05 05:35:34] @ TREllis joined channel #puppet | ||
| [2010/08/05 05:35:55] <madduck> ffrank: I am filtering out the debug messages | ||
| [2010/08/05 05:36:25] @ axisys joined channel #puppet | ||
| [2010/08/05 05:36:33] <madduck> Volcane: I cut down the puppetd run to the important stuff, do you want the full output? Also, the directory is just a directory, what other information do you need? | ||
| [2010/08/05 05:37:16] <Volcane> are we talking about http://slexy.org/view/s2j47SrD6C ? | ||
| [2010/08/05 05:38:17] @ Quit: ahasenack: Remote host closed the connection | ||
| [2010/08/05 05:39:15] <madduck> Volcane: yes, output is http://slexy.org/view/s2CDKX4Hqf | ||
| [2010/08/05 05:39:35] <madduck> full output is http://scratch.madduck.net/__tmp__out | ||
| [2010/08/05 05:39:56] <madduck> dir is drwxrwxr-x 21 root puppetmasters 4096 2010-08-03 11:31 /etc/puppet/modules/production | ||
| [2010/08/05 05:40:01] <Volcane> yeah i looked when you posted it not 6 minutes later :) | ||
| [2010/08/05 05:41:01] <madduck> Volcane: sorry, this is mind-boggling, hence my crap error reporting | ||
| [2010/08/05 05:41:42] <Volcane> so you changed the directory itself to 755, have the mode => 644 and expect it to do what? | ||
| [2010/08/05 05:41:47] @ ahasenack joined channel #puppet | ||
| [2010/08/05 05:42:13] <Volcane> it adds the +x to the directory modes always | ||
| [2010/08/05 05:42:23] <Volcane> i think there was a bug filed with some usecase where thats a bad assumption | ||
| [2010/08/05 05:42:31] <madduck> i have mode 664 not 644 and so I expect it to change it to 775 and it does | ||
| [2010/08/05 05:42:37] <madduck> but it does not recursively change the files | ||
| [2010/08/05 05:43:09] <Volcane> but you only changed the dir right? | ||
| [2010/08/05 05:43:35] <madduck> no, i also changed files | ||
| [2010/08/05 05:44:21] @ Quit: toi: Ping timeout: 252 seconds | ||
| [2010/08/05 05:44:27] <Volcane> it says: chmod 755 . | ||
| [2010/08/05 05:44:39] <madduck> the files that's a different module, isn't it? | ||
| [2010/08/05 05:44:56] <madduck> oh wait | ||
| [2010/08/05 05:45:06] <madduck> okay, let me do it right this time | ||
| [2010/08/05 05:45:07] <madduck> sec | ||
| [2010/08/05 05:46:05] <Volcane> madduck: http://www.pastie.org/1077269 | ||
| [2010/08/05 05:47:36] <madduck> Volcane: it used to work for weeks, and in the last few days it just stopped. i bet i did something to the configuration, but how am I supposed to find out what it was? | ||
| [2010/08/05 05:47:39] <madduck> http://slexy.org/view/s20j84ww1F | ||
| [2010/08/05 05:48:02] <madduck> it just seems to ignore recurse=>true | ||
| [2010/08/05 05:48:09] <madduck> without a warning or message or anything | ||
| [2010/08/05 05:48:16] <madduck> it's like it's on moodswings | ||
| [2010/08/05 05:49:29] <ffrank> madduck: are you sure there is no other file like /etc or somesuch that recurses in a meddling way..? | ||
| [2010/08/05 05:49:47] <madduck> ffrank: that's why I am using --tags test to only apply this resource | ||
| [2010/08/05 05:50:17] <madduck> and that tag is not applied to any other resource | ||
| [2010/08/05 05:50:24] <ffrank> i see. and without tags, same result? | ||
| [2010/08/05 05:50:30] <madduck> ffrank: yes | ||
| [2010/08/05 05:50:33] <madduck> i think, lemme try | ||
| [2010/08/05 05:50:42] * Volcane thinks its tags. | ||
| [2010/08/05 05:50:43] <madduck> ffrank: and the debug output doesn't even list it doing anything about the files | ||
| [2010/08/05 05:51:08] <madduck> the problem was there before i started to analyse it using --tags | ||
| [2010/08/05 05:51:13] <madduck> and why would it be --tags? | ||
| [2010/08/05 05:51:46] <Volcane> why is there a bug in any weird edge case? | ||
| [2010/08/05 05:51:52] <ffrank> puppet should report the files even w/o -d | ||
| [2010/08/05 05:52:02] <madduck> ffrank: it does not | ||
| [2010/08/05 05:52:05] <madduck> hence i started to look | ||
| [2010/08/05 05:52:34] <Volcane> your output in http://stuff.madduck.net/scratch/__tmp__out doesnt have *any* pupdir notices | ||
| [2010/08/05 05:52:46] <madduck> i removed the notice at some point, sorry. | ||
| [2010/08/05 05:52:48] <madduck> lemme readd it | ||
| [2010/08/05 05:52:52] <Volcane> oh, whatever. | ||
| [2010/08/05 05:52:52] <Volcane> wow | ||
| [2010/08/05 05:54:36] <Volcane> back to original point then. there was a paste that didnt show all the relevant information in one place so i ignored it | ||
| [2010/08/05 05:54:40] <Volcane> should have stuck to my policy :) | ||
| [2010/08/05 05:54:56] <madduck> there's another paste with all the information forthcoming; I'd appreciate if you gave me another chance. | ||
| [2010/08/05 05:56:17] <ffrank> madduck: try and break things down to an example just as simple as the one Volcane pasted. if that happens to work for you, rework it iteratively to your original scenario | ||
| [2010/08/05 05:56:32] <ffrank> if it doesn't, well, then something is quite fucked | ||
| [2010/08/05 05:56:51] <Volcane> ffrank: yup, this is why i use pastie.org and recommend it, it makes it so trivial and obvious to just do the right thing and clearly show the problem etc | ||
| [2010/08/05 05:57:58] @ Quit: kenneho: Quit: Ex-Chat | ||
| [2010/08/05 05:58:48] <madduck> http://slexy.org/view/s21oOu9SQC — the mode on the file is changed due to the git resource running chmod -R ug+rwX,o=rX, not because of the file resource. The file resource just doesn't recurse. | ||
| [2010/08/05 05:59:49] <madduck> line 783 shows how it's changing the mode on the directory | ||
| [2010/08/05 05:59:55] @ sdog left channel #puppet () | ||
| [2010/08/05 06:00:38] <ffrank> i stand by my recommendation then | ||
| [2010/08/05 06:01:04] <madduck> yes of course. i will have to. it's just a massive pain | ||
| [2010/08/05 06:01:21] <madduck> here's something interesting: recursion works fine on all the other puppet_directories, e.g. /etc/puppet/roles | ||
| [2010/08/05 06:01:29] @ Quit: itguru: Read error: Connection reset by peer | ||
| [2010/08/05 06:02:08] @ Quit: choc: Quit: changing servers | ||
| [2010/08/05 06:02:51] <Volcane> why are you even creating these files with wrong perms, seems like you're trying to use puppet as a band aid for a previously bad design | ||
| [2010/08/05 06:02:58] @ choc joined channel #puppet | ||
| [2010/08/05 06:03:23] <madduck> because when I work as non-root, I cannot create inodes owned by root | ||
| [2010/08/05 06:03:46] <Volcane> you edit files manifests in place on the master? | ||
| [2010/08/05 06:03:49] <madduck> and my umask is 0077, and I do not always remember to change it | ||
| [2010/08/05 06:04:04] <madduck> no, I use git checkout on them | ||
| [2010/08/05 06:04:06] @ Bass10 joined channel #puppet | ||
| [2010/08/05 06:04:17] <madduck> but git cannot create root inodes either | ||
| [2010/08/05 06:04:28] <madduck> and it cannot create 664 files | ||
| [2010/08/05 06:04:34] <madduck> unless i set the umask | ||
| [2010/08/05 06:04:40] <madduck> which i sometimes forget | ||
| [2010/08/05 06:04:52] @ Quit: Deesl: Ping timeout: 276 seconds | ||
| [2010/08/05 06:04:56] <Volcane> so presumably the process of maintaining that git clone that your master reads is from cron or something/ | ||
| [2010/08/05 06:04:57] <madduck> so yes, it's a bit of a band aid, but it also appears to me that puppet is gloriously broken | ||
| [2010/08/05 06:05:11] <madduck> sure, it is probably my fault, but the software does everything it can to obscure the real cause | ||
| [2010/08/05 06:05:30] <Volcane> probably what is happenins is you got 2 recurse resources somehow competing | ||
| [2010/08/05 06:05:30] <madduck> no, it's usually by hand. | ||
| [2010/08/05 06:05:39] <Volcane> but yet again in the latest paste you fail to show code | ||
| [2010/08/05 06:05:49] <Volcane> just piles of output that means very little | ||
| [2010/08/05 06:06:00] <ffrank> madduck: are symlinks involved in any fashion? | ||
| [2010/08/05 06:06:05] <madduck> ffrank: no | ||
| [2010/08/05 06:06:18] <Volcane> but the point is, you're just all out Doing It Wrong with what you're trying to band aid with puppet | ||
| [2010/08/05 06:06:32] <madduck> why am I doing it wrong? | ||
| [2010/08/05 06:06:49] @ Quit: choc: Client Quit | ||
| [2010/08/05 06:06:50] <madduck> why can't I use puppet to ensure that certain directories are ug+rwX,g=rX recursively? | ||
| [2010/08/05 06:06:59] <madduck> is this something puppet can't do? | ||
| [2010/08/05 06:07:01] <Volcane> you can and should create the files with the right modes. whatever is doing the git clone into /etc/puppet should be an automated something run by a script that does the right thing | ||
| [2010/08/05 06:07:04] <madduck> and why was it able to do it a few days ago? | ||
| [2010/08/05 06:07:12] <Volcane> madduck: it can do it, as my example shows. | ||
| [2010/08/05 06:07:26] <Volcane> madduck: you have something else going on and you cant seem to show us your code | ||
| [2010/08/05 06:07:28] <madduck> but apparently it's falling flat on its face in this case | ||
| [2010/08/05 06:07:50] <madduck> Volcane: come on… i showed you the code | ||
| [2010/08/05 06:08:04] <madduck> http://git.madduck.net/v/puppet/modules/puppet.git/blob/HEAD:/manifests/server.pp#l62 | ||
| [2010/08/05 06:08:44] @ \ask joined channel #puppet | ||
| [2010/08/05 06:09:04] @ choc joined channel #puppet | ||
| [2010/08/05 06:09:28] * Volcane even showed a nice example of how to go about showing the results, code etc all in one nice and simply readable place :( | ||
| [2010/08/05 06:09:49] <darkfade1> now calm done | ||
| [2010/08/05 06:09:51] <madduck> i appreciate it | ||
| [2010/08/05 06:09:53] <darkfade1> down. :> | ||
| [2010/08/05 06:10:10] <Volcane> instead its all spread over multiple browser tabs and full of unneeded debug noise etc, all i am saying is we're spending our own time here to help you out | ||
| [2010/08/05 06:10:14] <Volcane> make it easy for us to help you | ||
| [2010/08/05 06:10:20] <madduck> i did make some progress: as soon as I remove my self-written git module (http://git.madduck.net/v/puppet/modules/git.git/tree) it works as expected | ||
| [2010/08/05 06:10:22] @ DbT_ joined channel #puppet | ||
| [2010/08/05 06:10:27] <darkfade1> pasting 5 links surely isn't good and saying that he didn't see it just because you missed the one link isn't good either :. | ||
| [2010/08/05 06:10:30] <madduck> and now i think i know exactly what is going on | ||
| [2010/08/05 06:10:38] <madduck> in fact, it *is* the two file resources competing | ||
| [2010/08/05 06:10:45] @ Quit: ]oestewart: Quit: This computer has gone to sleep | ||
| [2010/08/05 06:10:49] <darkfade1> there you go :> | ||
| [2010/08/05 06:10:55] <madduck> and the git resource wins, probably because it's more specific (a subdirectory) | ||
| [2010/08/05 06:11:11] <Volcane> darkfade1: are you saying i posted 5 links? not sure what you mean | ||
| [2010/08/05 06:11:15] <darkfade1> no | ||
| [2010/08/05 06:11:19] <Volcane> ok :) | ||
| [2010/08/05 06:11:21] @ radkin joined channel #puppet | ||
| [2010/08/05 06:11:30] <darkfade1> i think madduck overwhelmed you :) | ||
| [2010/08/05 06:11:39] @ Deesl joined channel #puppet | ||
| [2010/08/05 06:11:57] <ffrank> not only him. slexy is an ugly bitch. stop using it, madduck :P | ||
| [2010/08/05 06:12:03] <Volcane> +1 | ||
| [2010/08/05 06:12:23] <madduck> what is the problem with slexy? | ||
| [2010/08/05 06:12:55] <madduck> it allows people to reply, which pastie can't seem to do | ||
| [2010/08/05 06:13:01] <ffrank> madduck: poor readability | ||
| [2010/08/05 06:13:14] <madduck> oh it does allow replying | ||
| [2010/08/05 06:13:16] <madduck> "paste again" | ||
| [2010/08/05 06:13:16] <Volcane> why do we need to reply? you're right here :) | ||
| [2010/08/05 06:13:30] @ Quit: \ask: Ping timeout: 252 seconds | ||
| [2010/08/05 06:13:49] <Volcane> the whole point of using it is to make the debug info easily readable while discussing something on irc | ||
| [2010/08/05 06:13:59] <Volcane> i mean in our use case obviously | ||
| [2010/08/05 06:14:07] <madduck> as soon as pastebinit supports pastie.org, I might use it. | ||
| [2010/08/05 06:14:26] <Volcane> butt fugly paste tool = horrible thing that makes it harder | ||
| [2010/08/05 06:14:40] @ Quit: toggg: Quit: :) ♪ © ¿ !~§¤[1;21] 0.6+8*9X²2¨@#|/[_.-{3,4°5^5"'€&6,55957(FR)<7%0=1=0%6>?&£`"5^5°4,3}-._]\|#@¨2²X9*8+7.0 [12;2]¤§~¡ ? 12±¾ ® ♪ (: | ||
| [2010/08/05 06:14:45] <madduck> oh dear | ||
| [2010/08/05 06:14:53] <madduck> pastie.org says: why pastie… It's a Ruby on Rails application | ||
| [2010/08/05 06:14:54] <madduck> Isn't that reason enough? Fun. | ||
| [2010/08/05 06:14:57] <madduck> hahahahahaha | ||
| [2010/08/05 06:15:03] <ffrank> yay, flamewar | ||
| [2010/08/05 06:15:19] * ffrank passes the marshmallows around | ||
| [2010/08/05 06:15:20] <madduck> ;) | ||
| [2010/08/05 06:15:23] <fenris02> fpaste.org / dpaste.com both work and are simple. no ads. no junk. | ||
| [2010/08/05 06:16:07] @ reyjrar joined channel #puppet | ||
| [2010/08/05 06:16:39] <darkfade1> ffrank: thanks :) | ||
| [2010/08/05 06:17:16] <ffrank> darkfade1: meh, the bitching stopped already. this channel is boring ;) | ||
| [2010/08/05 06:17:34] <darkfade1> i still use pastebin, the best thing is the subdomains, it makes you feel so private. even better: just a moment later, you'll have 10 pastes with trojan source codes and a lot of CC numbers in your private pastebin | ||
| [2010/08/05 06:18:17] <darkfade1> ffrank: we can try talking about xen again later today | ||
| [2010/08/05 06:18:23] <Volcane> there's some nice command line gist clients too | ||
| [2010/08/05 06:18:50] <ffrank> darkfade1: ooh, i'd like that =] how about debian vs. (insert distro here)... | ||
| [2010/08/05 06:18:58] <darkfade1> freebsd! | ||
| [2010/08/05 06:19:05] <ffrank> squee | ||
| [2010/08/05 06:19:06] <Volcane> OpenServer | ||
| [2010/08/05 06:19:08] <ohookins> how about pronunciation of "debian" | ||
| [2010/08/05 06:19:13] <ohookins> deebian vs debian | ||
| [2010/08/05 06:19:28] <zipkid> dweebian ... ? | ||
| [2010/08/05 06:19:32] * ffrank proposes deb-eye-an just to freshen things up | ||
| [2010/08/05 06:19:38] <barn> Beardian | ||
| [2010/08/05 06:19:46] <tim|mac> it originates from Debora and Ian... so debian is the most logical! | ||
| [2010/08/05 06:20:07] <ohookins> tim|mac: i tell people that, but they still stick with their failpronunciation | ||
| [2010/08/05 06:21:03] <ffrank> germany is free of "deebian" sayers. it seems counterintuitive to us | ||
| [2010/08/05 06:21:09] <darkfade1> yeah | ||
| [2010/08/05 06:23:21] <Tonnerre> Depperjan | ||
| [2010/08/05 06:23:50] @ MPSimmons joined channel #puppet | ||
| [2010/08/05 06:27:27] <ohookins> ffrank: instead we have deb -eye-an sayers | ||
| [2010/08/05 06:27:53] @ gmason joined channel #puppet | ||
| [2010/08/05 06:28:05] <ohookins> oh you said that, but perhaps only as a joke | ||
| [2010/08/05 06:28:08] <ohookins> i've heard it in person | ||
| [2010/08/05 06:28:41] <SEJeff> But deb-ee-uh-n is the only gramatical way to join Deborah and Ian | ||
| [2010/08/05 06:28:56] <bhearsum> what about Ianah? | ||
| [2010/08/05 06:29:34] <SEJeff> That distro would just be a fork. They probably wouldn't contribute much upstream, but they would do lots of marketing. | ||
| [2010/08/05 06:30:23] <ohookins> SEJeff: unless you pronounce ian as eye-an | ||
| [2010/08/05 06:30:37] <ohookins> which the locals seem to do here, well some of them anyway | ||
| [2010/08/05 06:31:02] <SEJeff> Interesting. Where do you live? As american born/raise, I've never heard it pronounced that way ever. | ||
| [2010/08/05 06:31:14] <ohookins> berlin | ||
| [2010/08/05 06:31:38] <ohookins> i hadn't heard it either, until i got here | ||
| [2010/08/05 06:31:39] <SEJeff> Ah. I'll have to ask my grandmother. She is from Dusseldorf | ||
| [2010/08/05 06:31:55] <ffrank> ohookins: my sympathies | ||
| [2010/08/05 06:31:58] <ohookins> it's a mistake, for sure, but one that might be typical of german speakers | ||
| [2010/08/05 06:32:29] @ Quit: jsman: *.net *.split | ||
| [2010/08/05 06:32:29] @ Quit: FoXMaN: *.net *.split | ||
| [2010/08/05 06:32:29] @ Quit: p3rror: *.net *.split | ||
| [2010/08/05 06:32:54] <ffrank> ohookins: true that | ||
| [2010/08/05 06:32:55] @ dearka joined channel #puppet | ||
| [2010/08/05 06:38:11] @ jsman joined channel #puppet | ||
| [2010/08/05 06:38:11] @ FoXMaN joined channel #puppet | ||
| [2010/08/05 06:39:10] @ Quit: jsman: *.net *.split | ||
| [2010/08/05 06:39:10] @ Quit: FoXMaN: *.net *.split | ||
| [2010/08/05 06:41:07] @ Quit: DbT_: Quit: zzzz | ||
| [2010/08/05 06:41:21] @ Quit: ghaskins_mobile: Ping timeout: 265 seconds | ||
| [2010/08/05 06:45:54] @ ghaskins_mobile joined channel #puppet | ||
| [2010/08/05 06:46:34] @ gpurrenhage joined channel #puppet | ||
| [2010/08/05 06:47:44] @ p3rror joined channel #puppet | ||
| [2010/08/05 06:48:21] @ Quit: tecto_: Quit: tecto_ | ||
| [2010/08/05 06:49:50] @ jsman joined channel #puppet | ||
| [2010/08/05 06:49:51] @ FoXMaN joined channel #puppet | ||
| [2010/08/05 06:51:00] @ bobbyz_ joined channel #puppet | ||
| [2010/08/05 06:53:11] @ Quit: TREllis: Quit: --->Rückkehr nach England! | ||
| [2010/08/05 06:54:04] @ Quit: verwilst: Ping timeout: 276 seconds | ||
| [2010/08/05 06:56:14] @ jdcasey joined channel #puppet | ||
| [2010/08/05 06:56:53] @ Quit: p3rror: Ping timeout: 260 seconds | ||
| [2010/08/05 06:57:54] <gpurrenhage> I'm using autosign to distribute certs in an environment that requires frequent re-imaging. My issue is that when a client is re-imaged, it generates a new private key and then reports "Retrieved certificate doesn't match private key", which is expected. My plan was to pay attention to the logs on the server and clean the cert whenever that happened so that a subsequent attempt would produce a new cert, but I can't find a log anywhere that report | ||
| [2010/08/05 06:57:54] <gpurrenhage> that. I'm almost positive it used to show up in syslog, but doesn't seem to anymore. Puppetmaster is 0.25.4. Any ideas? | ||
| [2010/08/05 06:58:38] <Volcane> shows up in my logs afaik | ||
| [2010/08/05 06:58:57] <Volcane> hmm, no seems it doesn | ||
| [2010/08/05 06:59:07] @ Quit: choc: Quit: changing servers | ||
| [2010/08/05 06:59:11] <gpurrenhage> Yeah, that was my experience exactly :-) | ||
| [2010/08/05 06:59:13] <agaffney> autosign combined with automatic key cleaning completely defeats the purpose of certificates :P | ||
| [2010/08/05 06:59:26] <gpurrenhage> I know, but that's a separate conversation. | ||
| [2010/08/05 06:59:33] <Volcane> agaffney: sometimes certs just doesnt add any value :( | ||
| [2010/08/05 06:59:56] <gpurrenhage> Probably in a future version I'll have it pull the original cert from somewhere on re-image, but I'm in a bind until then. | ||
| [2010/08/05 07:00:03] <Dominic> I still get it in syslog when a server is reimaged, on 0.25.4 (EPEL) | ||
| [2010/08/05 07:00:23] <Volcane> yeah on the client | ||
| [2010/08/05 07:00:31] @ ]oestewart joined channel #puppet | ||
| [2010/08/05 07:00:45] <Dominic> ah, yes, not on the master | ||
| [2010/08/05 07:01:07] <gpurrenhage> I'm sure that in an older version (0.24.something?) it logged it on the server too. | ||
| [2010/08/05 07:01:21] <gpurrenhage> Does anyone know of a setting to re-enable that? | ||
| [2010/08/05 07:01:23] <ffrank> gpurrenhage: so if you must clean up anyway, what does autosign give you? | ||
| [2010/08/05 07:01:44] * ffrank doesn't see the advantage | ||
| [2010/08/05 07:02:24] <gpurrenhage> It avoids the need to put a cert in place manually, for now. Mostly, I'm working around an oversight in a ~400 client environment, until I can build a smarter solution :-( | ||
| [2010/08/05 07:02:27] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 07:02:30] <Volcane> gpurrenhage: thing is with say apache infront of the master isnt it apache thats doing the verification? | ||
| [2010/08/05 07:03:40] * Volcane 's not sure, not done the autosign thing for a while its managed by mcollective now | ||
| [2010/08/05 07:03:47] @ Quit: ceren: Quit: ceren | ||
| [2010/08/05 07:04:36] @ ceren joined channel #puppet | ||
| [2010/08/05 07:04:42] @ Quit: Deesl: Ping timeout: 272 seconds | ||
| [2010/08/05 07:06:16] <gpurrenhage> I'm not behind apache ATM. Just straight up puppetmaster | ||
| [2010/08/05 07:07:49] @ verwilst joined channel #puppet | ||
| [2010/08/05 07:08:00] @ pheezy joined channel #puppet | ||
| [2010/08/05 07:08:49] @ notbrien joined channel #puppet | ||
| [2010/08/05 07:08:51] @ p3rror joined channel #puppet | ||
| [2010/08/05 07:10:56] @ choc joined channel #puppet | ||
| [2010/08/05 07:15:17] @ Quit: rmiller4pi8: Quit: Leaving. | ||
| [2010/08/05 07:17:17] @ hal-j joined channel #puppet | ||
| [2010/08/05 07:17:29] <hal-j> hello from canada... | ||
| [2010/08/05 07:18:29] @ littleidea joined channel #puppet | ||
| [2010/08/05 07:22:18] @ gniks joined channel #puppet | ||
| [2010/08/05 07:23:09] @ Quit: ckauhaus: Read error: Operation timed out | ||
| [2010/08/05 07:25:07] @ Quit: cliff-hm: Ping timeout: 258 seconds | ||
| [2010/08/05 07:26:45] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 07:26:55] <ffrank> arrgh. you gotta love how both old Ubuntu and current Debian share $operatingsystem == "Debian", but only old Ubuntu has $lsbdistid == "Ubuntu". *cringe* | ||
| [2010/08/05 07:27:25] @ joe-mac1 joined channel #puppet | ||
| [2010/08/05 07:29:09] <cynicismic> ffrank? I don't have that - operatingsystem => Ubuntu | ||
| [2010/08/05 07:32:34] @ Quit: zorzar_: Ping timeout: 245 seconds | ||
| [2010/08/05 07:33:41] <cynicismic> ahh - *old* Ubuntu :'( | ||
| [2010/08/05 07:36:30] @ wilmoore joined channel #puppet | ||
| [2010/08/05 07:36:46] <kjetilho> *old* facter, I think is more accurate | ||
| [2010/08/05 07:36:57] <kjetilho> uh. "old *facter*" I mean | ||
| [2010/08/05 07:37:39] @ bug joined channel #puppet | ||
| [2010/08/05 07:37:43] <cynicismic> *old facter* ? | ||
| [2010/08/05 07:37:46] <cynicismic> :( | ||
| [2010/08/05 07:39:07] @ rmiller4pi8 joined channel #puppet | ||
| [2010/08/05 07:39:11] <ffrank> yeah it's basically a retirement home for software i'm running there | ||
| [2010/08/05 07:39:41] <ffrank> puppet 24.4 for crissakes | ||
| [2010/08/05 07:39:55] <hal-j> dunno.. I just did an apt-get install facter on a lucid machine and it's got lsbdistid | ||
| [2010/08/05 07:40:24] <kjetilho> IMHO Puppet prior to 0.24.8 is so limited it's just not worth supporting it in your manifests | ||
| [2010/08/05 07:40:27] @ Quit: rmiller4pi8: Client Quit | ||
| [2010/08/05 07:40:33] <cynicismic> but it also has Operatingsystem => Ubuntu | ||
| [2010/08/05 07:40:38] <kjetilho> and really I think 0.25.5 is a more reasonable minimum | ||
| [2010/08/05 07:40:46] <ffrank> kjetilho: agreed | ||
| [2010/08/05 07:40:54] <kjetilho> (and facter versions need to be from the same generation) | ||
| [2010/08/05 07:41:25] @ rmiller4pi8 joined channel #puppet | ||
| [2010/08/05 07:41:32] <kjetilho> hal-j: lsb-release is an optional package | ||
| [2010/08/05 07:42:31] <hal-j> ahh... I wouldn't have normally checked, but I am planning an upgrade of my servers to 10.04 so you got me a bit concerned :) | ||
| [2010/08/05 07:42:34] <hal-j> it's a ways off anyhow | ||
| [2010/08/05 07:42:54] @ RussS joined channel #puppet | ||
| [2010/08/05 07:42:58] @ Quit: MarkN1: Ping timeout: 260 seconds | ||
| [2010/08/05 07:43:09] <hal-j> we'll see if I get there before the NEXT LTS is out :P | ||
| [2010/08/05 07:43:39] @ Quit: wilmoore: Remote host closed the connection | ||
| [2010/08/05 07:44:40] @ Quit: verwilst: Ping timeout: 276 seconds | ||
| [2010/08/05 07:49:10] <joe-mac1> hal-j: i recommend against it dude | ||
| [2010/08/05 07:49:13] <joe-mac1> collectd is FUCKED | ||
| [2010/08/05 07:49:18] <joe-mac1> puppet is kind of semi fucked | ||
| [2010/08/05 07:49:29] <joe-mac1> openssl is waht's really fucked | ||
| [2010/08/05 07:49:31] <joe-mac1> just wait dude | ||
| [2010/08/05 07:49:39] <joe-mac1> i am one of those asshole early adopt/test guys | ||
| [2010/08/05 07:49:42] <joe-mac1> and it pains me | ||
| [2010/08/05 07:49:47] <dearka> you like to say fucked... | ||
| [2010/08/05 07:49:53] <hal-j> I generally take the strategy of "if it ain't broke, don't fix it" - you can see how fast I'm moving on it :) | ||
| [2010/08/05 07:49:57] <joe-mac1> sorry, way i was raised it's just another word | ||
| [2010/08/05 07:49:59] <hal-j> Hardy does everything I need :) | ||
| [2010/08/05 07:50:19] <joe-mac1> hal-j: at first hardy had some problems but it's pretty dam nice now imo | ||
| [2010/08/05 07:50:25] <joe-mac1> plus, you ready to learn some new init?!!? | ||
| [2010/08/05 07:50:29] <joe-mac1> come on, throw out 20 years of knowledge | ||
| [2010/08/05 07:50:39] <hal-j> I early adopt on my own stuff.. I don't get woken up at 3am when my netbook does something bad though | ||
| [2010/08/05 07:51:12] <hal-j> my servers, stability trumps new and shiny :) | ||
| [2010/08/05 07:51:14] <joe-mac1> hal-j: yea i do that too | ||
| [2010/08/05 07:51:21] <joe-mac1> one thing i needed 10.04 for was rsyslogd | ||
| [2010/08/05 07:51:25] <joe-mac1> it was really borked in 8.04 | ||
| [2010/08/05 07:51:45] <joe-mac1> rsyslogd is nice but gives me sucha headache. building the openbsd package is driving me batty the past couple of days | ||
| [2010/08/05 07:51:58] <joe-mac1> it's like to build this, you need the new make. to build the new make... you need the new make. | ||
| [2010/08/05 07:52:05] <joe-mac1> ??? what?? | ||
| [2010/08/05 07:52:08] @ ecapriolo joined channel #puppet | ||
| [2010/08/05 07:52:27] <hal-j> but I've got all sorts of backports and newer versions of things in my apt repo, which helps quite a bit | ||
| [2010/08/05 07:52:44] <joevano> looking at the auto generated docs on "Type" at the "User" section specifically, and for 'Password' it says "requires features manages_passwords". What does that mean? How do I require that? | ||
| [2010/08/05 07:52:47] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 07:52:47] <joe-mac1> hal-j: yea i definitely built my own for puppet and a couple other things | ||
| [2010/08/05 07:52:55] <joe-mac1> joevano: you don't need to | ||
| [2010/08/05 07:53:08] <joe-mac1> but you *do* need to install libshadow-ruby on your boxes if you want to use the password parameter | ||
| [2010/08/05 07:53:14] <joe-mac1> for instance, openbsd does not support it | ||
| [2010/08/05 07:53:27] <joe-mac1> therefore you need to hack together a mechanism for keeping openbsd passwords in sync with puppet | ||
| [2010/08/05 07:53:34] <joe-mac1> if you're ionly oin linux, the package should be available | ||
| [2010/08/05 07:53:52] <joe-mac1> a "feature" is a thing in the puppet code, not something you need to worry too much about unless you intend on coding for puppet | ||
| [2010/08/05 07:54:10] <joevano> joemac1: ok... thank you. just using linux so that should work. | ||
| [2010/08/05 07:54:49] @ Quit: kolla: Remote host closed the connection | ||
| [2010/08/05 07:55:51] <joe-mac1> again, sorry # if my use of the word 'fuck' offended anyone... sort of built into my vocab from childhood | ||
| [2010/08/05 07:56:07] <joe-mac1> if i was english a different foru letter word would probably be a lot more offensive lol | ||
| [2010/08/05 07:56:12] <joe-mac1> or irish | ||
| [2010/08/05 07:56:19] @ benkevan joined channel #puppet | ||
| [2010/08/05 07:56:40] @ Quit: ghaskins_mobile: Ping timeout: 276 seconds | ||
| [2010/08/05 07:57:00] @ \ask joined channel #puppet | ||
| [2010/08/05 07:57:34] @ tecto_ joined channel #puppet | ||
| [2010/08/05 07:57:35] @ Quit: tecto_: Changing host | ||
| [2010/08/05 07:57:35] @ tecto_ joined channel #puppet | ||
| [2010/08/05 07:58:59] @ verwilst joined channel #puppet | ||
| [2010/08/05 07:59:49] @ ghaskins_mobile joined channel #puppet | ||
| [2010/08/05 08:00:46] @ ohookins left channel #puppet ("Leaving.") | ||
| [2010/08/05 08:01:39] @ Quit: \ask: Ping timeout: 260 seconds | ||
| [2010/08/05 08:05:44] @ devdas joined channel #puppet | ||
| [2010/08/05 08:10:54] @ Quit: jsman: Ping timeout: 246 seconds | ||
| [2010/08/05 08:13:15] @ lak joined channel #puppet | ||
| [2010/08/05 08:14:29] @ Quit: ghaskins_mobile: Read error: Operation timed out | ||
| [2010/08/05 08:15:25] @ ghaskins_mobile joined channel #puppet | ||
| [2010/08/05 08:15:26] <gpurrenhage> Me again. I've looked through the code for 24.4 and 25.4, and the logging on the server didn't change. I suspect the issue is that the cert is cached and given to the client now, instead of actually re-negotiating the cert w/ the new key. Can anyone vouch for my theory? | ||
| [2010/08/05 08:15:39] @ pinoyskull joined channel #puppet | ||
| [2010/08/05 08:16:40] @ alcy joined channel #puppet | ||
| [2010/08/05 08:17:22] @ brothers joined channel #puppet | ||
| [2010/08/05 08:22:49] @ Quit: [alch]: Ping timeout: 240 seconds | ||
| [2010/08/05 08:24:57] @ Quit: ghaskins_mobile: Ping timeout: 252 seconds | ||
| [2010/08/05 08:25:45] @ Quit: lak: Quit: lak | ||
| [2010/08/05 08:34:33] @ mrk1207 joined channel #puppet | ||
| [2010/08/05 08:34:51] @ Quit: devdas: Ping timeout: 252 seconds | ||
| [2010/08/05 08:35:00] @ Quit: macfly: Disconnected by services | ||
| [2010/08/05 08:36:10] @ macfly1 joined channel #puppet | ||
| [2010/08/05 08:39:49] @ mrk1207 is now known as _mrk1207 | ||
| [2010/08/05 08:44:29] @ Quit: alcy: Quit: ChatZilla 0.9.86 [Firefox 3.6.6/20100625231939] | ||
| [2010/08/05 08:44:39] @ Quit: verwilst: Quit: Ex-Chat | ||
| [2010/08/05 08:47:05] @ mrk1207 joined channel #puppet | ||
| [2010/08/05 08:47:40] @ Quit: mrk1207: Quit: Leaving | ||
| [2010/08/05 08:48:07] @ Quit: _mrk1207: Quit: Leaving | ||
| [2010/08/05 08:51:47] @ GaViT joined channel #puppet | ||
| [2010/08/05 08:52:44] @ tonyskapunk joined channel #puppet | ||
| [2010/08/05 08:54:14] @ thekad-afk is now known as thekad | ||
| [2010/08/05 08:56:27] @ TREllis joined channel #puppet | ||
| [2010/08/05 08:56:46] @ joe-mac1 left channel #puppet () | ||
| [2010/08/05 08:56:59] @ [GuS] joined channel #puppet | ||
| [2010/08/05 09:01:31] @ ghaskins_mobile joined channel #puppet | ||
| [2010/08/05 09:03:26] @ Quit: Ramonster: Quit: So long, thanx for all the fish | ||
| [2010/08/05 09:07:16] @ Quit: p3rror: Read error: Connection reset by peer | ||
| [2010/08/05 09:11:10] @ Quit: ffrank: Quit: leaving | ||
| [2010/08/05 09:11:48] @ scashin133 joined channel #puppet | ||
| [2010/08/05 09:12:31] @ jsman joined channel #puppet | ||
| [2010/08/05 09:12:31] @ Quit: jsman: Changing host | ||
| [2010/08/05 09:12:31] @ jsman joined channel #puppet | ||
| [2010/08/05 09:12:42] @ Quit: scashin133: Client Quit | ||
| [2010/08/05 09:16:47] @ toi joined channel #puppet | ||
| [2010/08/05 09:17:15] @ p3rror joined channel #puppet | ||
| [2010/08/05 09:21:10] @ Quit: p3rror: Read error: Operation timed out | ||
| [2010/08/05 09:22:47] @ Quit: biopete_: Quit: Page closed | ||
| [2010/08/05 09:22:55] @ biopete_ joined channel #puppet | ||
| [2010/08/05 09:25:15] @ Quit: jaredrhine: Ping timeout: 264 seconds | ||
| [2010/08/05 09:26:00] @ happymcplaksin joined channel #puppet | ||
| [2010/08/05 09:26:29] @ happymcplaksin left channel #puppet () | ||
| [2010/08/05 09:27:05] @ joe-mac1 joined channel #puppet | ||
| [2010/08/05 09:28:18] <kc7zzv> gpurrenhage: I can't tell you how to fix what you're doing, but I can tell you what I did in the same situation. | ||
| [2010/08/05 09:28:59] @ windowsrefund joined channel #puppet | ||
| [2010/08/05 09:29:01] <windowsrefund> hello | ||
| [2010/08/05 09:29:25] @ Quit: notbrien: Quit: notbrien | ||
| [2010/08/05 09:29:29] <windowsrefund> I'm using a template to assign a variable and I see white space on the end of the string | ||
| [2010/08/05 09:29:37] <windowsrefund> can't figure out why that's happening | ||
| [2010/08/05 09:29:39] <kc7zzv> gpurrenhage: I eventually gave up on autosign and just use --generate to make the certificate/key pair on the server. Then I use scp to copy the key to the client manually. | ||
| [2010/08/05 09:29:42] <joe-mac1> windowsrefund: variable or fact? | ||
| [2010/08/05 09:30:02] <joe-mac1> autosign is insecure unless you're in a pretty insular network | ||
| [2010/08/05 09:30:06] <joe-mac1> i recommend against it really | ||
| [2010/08/05 09:30:11] <hal-j> is there whitespace after the %> ? | ||
| [2010/08/05 09:30:12] @ p3rror joined channel #puppet | ||
| [2010/08/05 09:30:13] <joe-mac1> i have a set of scripts for generating and revoking keys | ||
| [2010/08/05 09:30:20] <windowsrefund> joe-mac1: the template uses a fact to assign the variable | ||
| [2010/08/05 09:30:39] @ Quit: adrian_broher: Ping timeout: 248 seconds | ||
| [2010/08/05 09:30:45] <joe-mac1> so, you have <% var1 = fact1 -%>? | ||
| [2010/08/05 09:30:50] <joe-mac1> and there's whitespace? | ||
| [2010/08/05 09:30:57] <joe-mac1> that's odd, i guess just use chomp in the interim | ||
| [2010/08/05 09:31:02] <joe-mac1> til you figure out the actual problem | ||
| [2010/08/05 09:31:13] <joe-mac1> if you have time to troubleshoot, see if it's a facter bug | ||
| [2010/08/05 09:31:20] <windowsrefund> var = template('my_template.erb') | ||
| [2010/08/05 09:31:32] <windowsrefund> that kinda thing | ||
| [2010/08/05 09:31:40] <joe-mac1> oh, i've never done anythjing like that | ||
| [2010/08/05 09:31:42] <windowsrefund> but chomp may work :) | ||
| [2010/08/05 09:31:47] <hal-j> and where's the whitespace? at the end of $var? | ||
| [2010/08/05 09:31:52] <windowsrefund> yes | ||
| [2010/08/05 09:31:54] <joe-mac1> maybe var = inline_template("<% somecode -%>) | ||
| [2010/08/05 09:32:15] <joe-mac1> gotta be adding a line by not using -%> | ||
| [2010/08/05 09:32:22] <joe-mac1> there are two modes for ERB | ||
| [2010/08/05 09:32:32] <windowsrefund> oh, I haven't heard of inline_template | ||
| [2010/08/05 09:32:33] <joe-mac1> puppet uses the one where you can disable extra whitespace with -% | ||
| [2010/08/05 09:32:46] <joe-mac1> windowsrefund: check it ou t, useful for one-liners of ruby | ||
| [2010/08/05 09:32:55] <windowsrefund> k | ||
| [2010/08/05 09:35:11] @ Quit: swa_work: Read error: Connection reset by peer | ||
| [2010/08/05 09:35:45] @ nakano is now known as nakano_ | ||
| [2010/08/05 09:36:15] @ Quit: Naresh: Ping timeout: 265 seconds | ||
| [2010/08/05 09:37:10] <windowsrefund> how's this look? | ||
| [2010/08/05 09:37:12] <windowsrefund> $my_stage1_hostname = inline_template("ptc-liv-<%= macaddress_rtls0.gsub(':', '-' -%>") | ||
| [2010/08/05 09:37:42] @ Quit: andrewh: Ping timeout: 265 seconds | ||
| [2010/08/05 09:37:52] @ Quit: toi: Ping timeout: 240 seconds | ||
| [2010/08/05 09:38:59] @ toi joined channel #puppet | ||
| [2010/08/05 09:39:08] <joe-mac1> you missed a ) | ||
| [2010/08/05 09:39:22] <joe-mac1> you can also run even one line erb's through an erb cli check | ||
| [2010/08/05 09:39:22] <windowsrefund> right :) | ||
| [2010/08/05 09:39:25] <joe-mac1> i have it in my post commit | ||
| [2010/08/05 09:39:29] <joe-mac1> let me dig it up for you | ||
| [2010/08/05 09:39:55] <windowsrefund> thanks | ||
| [2010/08/05 09:40:49] <joe-mac1> erb -x -T '-' $TMPFILE | ruby -c | ||
| [2010/08/05 09:40:57] <joe-mac1> where tmpfile is the .erb file | ||
| [2010/08/05 09:41:17] <windowsrefund> good deal | ||
| [2010/08/05 09:42:22] @ zorzar_ joined channel #puppet | ||
| [2010/08/05 09:42:37] <joe-mac1> s/post/pre | ||
| [2010/08/05 09:42:44] <joe-mac1> wouldn't make sense to syntax check in the post commit heh | ||
| [2010/08/05 09:42:50] <windowsrefund> heh | ||
| [2010/08/05 09:43:09] @ adrian_broher joined channel #puppet | ||
| [2010/08/05 09:43:12] <kc7zzv> Don't you want a "-P" on erb? | ||
| [2010/08/05 09:44:13] <windowsrefund> it is workie | ||
| [2010/08/05 09:45:13] @ \ask joined channel #puppet | ||
| [2010/08/05 09:46:01] <joe-mac1> i'm not sure what -P does but that is straight from the puppet wiki and serves me well in my pre-commit against committing syntax errors | ||
| [2010/08/05 09:46:44] <jhelwig> -P is 'ignore lines which start with "%"' | ||
| [2010/08/05 09:46:53] <kc7zzv> Strange. I'll see if I can find the mailing list post. | ||
| [2010/08/05 09:47:00] @ mikey_p joined channel #puppet | ||
| [2010/08/05 09:47:19] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 09:47:27] @ Quit: tonyskapunk: Read error: Connection reset by peer | ||
| [2010/08/05 09:47:29] @ Quit: renanm: Quit: leaving | ||
| [2010/08/05 09:47:30] @ mikepea joined channel #puppet | ||
| [2010/08/05 09:47:49] @ jmccune joined channel #puppet | ||
| [2010/08/05 09:48:33] @ labrown joined channel #puppet | ||
| [2010/08/05 09:49:01] <kc7zzv> joe-mac1: I found it http://markmail.org/message/en2s2x34tbdhzyc5 | ||
| [2010/08/05 09:49:51] @ Quit: \ask: Ping timeout: 264 seconds | ||
| [2010/08/05 09:49:55] @ jaredrhine joined channel #puppet | ||
| [2010/08/05 09:50:25] @ Quit: b14ck: Remote host closed the connection | ||
| [2010/08/05 09:50:33] @ tonyskapunk joined channel #puppet | ||
| [2010/08/05 09:51:03] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 09:51:31] <joe-mac1> thanks for the heads-up kc7zzv | ||
| [2010/08/05 09:52:27] @ mclarke joined channel #puppet | ||
| [2010/08/05 09:52:51] @ Quit: huuggee: Ping timeout: 264 seconds | ||
| [2010/08/05 09:53:43] @ Quit: toi: Ping timeout: 265 seconds | ||
| [2010/08/05 09:58:08] @ Quit: jaredrhine: Ping timeout: 240 seconds | ||
| [2010/08/05 10:00:26] @ randybias joined channel #puppet | ||
| [2010/08/05 10:01:41] @ Deesl joined channel #puppet | ||
| [2010/08/05 10:02:58] @ WALoeIII joined channel #puppet | ||
| [2010/08/05 10:04:16] @ lak joined channel #puppet | ||
| [2010/08/05 10:04:58] <FoXMaN> hi | ||
| [2010/08/05 10:05:04] <FoXMaN> lustrefs anyone? | ||
| [2010/08/05 10:06:40] @ Quit: ahasenack: Ping timeout: 240 seconds | ||
| [2010/08/05 10:08:03] <joe-mac1> please be more specific | ||
| [2010/08/05 10:08:06] <joe-mac1> this is a channel for puppe | ||
| [2010/08/05 10:08:07] <joe-mac1> t | ||
| [2010/08/05 10:08:54] @ notbrien joined channel #puppet | ||
| [2010/08/05 10:09:42] @ Quit: rcrowley: Read error: Operation timed out | ||
| [2010/08/05 10:13:16] @ \ask joined channel #puppet | ||
| [2010/08/05 10:13:55] @ kolla joined channel #puppet | ||
| [2010/08/05 10:15:02] @ Quit: TREllis: Quit: --->flying sardine can in the sky | ||
| [2010/08/05 10:16:27] @ rcrowley joined channel #puppet | ||
| [2010/08/05 10:16:45] @ jaredrhine joined channel #puppet | ||
| [2010/08/05 10:18:34] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 10:19:34] @ mikepea joined channel #puppet | ||
| [2010/08/05 10:19:42] @ ahasenack joined channel #puppet | ||
| [2010/08/05 10:20:12] @ gmcquillan joined channel #puppet | ||
| [2010/08/05 10:20:17] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 10:20:22] @ mikepea joined channel #puppet | ||
| [2010/08/05 10:21:07] @ Quit: jaredrhine: Ping timeout: 260 seconds | ||
| [2010/08/05 10:21:33] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 10:21:58] @ Quit: dearka: Remote host closed the connection | ||
| [2010/08/05 10:22:31] @ mikepea joined channel #puppet | ||
| [2010/08/05 10:23:00] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 10:23:09] @ HouseAway is now known as AimanA | ||
| [2010/08/05 10:23:21] @ mikepea joined channel #puppet | ||
| [2010/08/05 10:24:04] @ Quit: mikepea: Read error: Connection reset by peer | ||
| [2010/08/05 10:24:17] @ mikepea joined channel #puppet | ||
| [2010/08/05 10:24:51] @ Quit: tecto_: Quit: tecto_ | ||
| [2010/08/05 10:28:46] @ jaredrhine joined channel #puppet | ||
| [2010/08/05 10:31:13] @ tecto_ joined channel #puppet | ||
| [2010/08/05 10:33:04] @ Quit: Deesl: Ping timeout: 240 seconds | ||
| [2010/08/05 10:33:20] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/08/05 10:34:14] @ nexx joined channel #puppet | ||
| [2010/08/05 10:38:23] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 10:39:06] @ DavidS joined channel #puppet | ||
| [2010/08/05 10:40:10] @ Quit: stevenjenkins: Ping timeout: 276 seconds | ||
| [2010/08/05 10:41:00] <windowsrefund> thanks | ||
| [2010/08/05 10:41:02] @ Quit: windowsrefund: Quit: leaving | ||
| [2010/08/05 10:41:04] @ Deesl joined channel #puppet | ||
| [2010/08/05 10:44:26] @ devdas joined channel #puppet | ||
| [2010/08/05 10:44:54] @ Quit: DavidS: Quit: Leaving. | ||
| [2010/08/05 10:45:05] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 10:45:12] @ DavidS joined channel #puppet | ||
| [2010/08/05 10:46:52] @ Quit: \ask: Remote host closed the connection | ||
| [2010/08/05 10:49:07] @ nakano_ is now known as nakano | ||
| [2010/08/05 10:52:41] @ Quit: DavidS: Ping timeout: 265 seconds | ||
| [2010/08/05 10:55:11] @ DavidS joined channel #puppet | ||
| [2010/08/05 10:56:27] @ Quit: devdas: Ping timeout: 264 seconds | ||
| [2010/08/05 10:56:35] @ bodepd joined channel #puppet | ||
| [2010/08/05 11:01:48] @ Quit: ]oestewart: Ping timeout: 240 seconds | ||
| [2010/08/05 11:01:54] @ Quit: MarkN1: Ping timeout: 260 seconds | ||
| [2010/08/05 11:11:30] @ alfism joined channel #puppet | ||
| [2010/08/05 11:12:09] @ jdcasey joined channel #puppet | ||
| [2010/08/05 11:13:36] <eric0> instapoll -- what's everybody's preference for dealing with puppet's internal files like vardir, ssldir, rundir whose 'native' locations vary per operating system? do you put them in the place the OS expects it or standardise on one location across OSes? | ||
| [2010/08/05 11:15:22] @ thekad is now known as thekad-afk | ||
| [2010/08/05 11:17:45] <jmccune> eric0: I've standardized in the past. vardir = /var/lib/puppet was the most important one. | ||
| [2010/08/05 11:17:57] <jmccune> eric0: confdir and such can vary without much additional work. | ||
| [2010/08/05 11:19:08] @ \ask joined channel #puppet | ||
| [2010/08/05 11:20:41] <benkevan> how / where can I verify that my files are being backed up after being changed? | ||
| [2010/08/05 11:21:09] @ black`WASP joined channel #puppet | ||
| [2010/08/05 11:21:23] <aforgue> in /var/lib/puppet/client/bucket | ||
| [2010/08/05 11:21:36] <aforgue> they're keyed by the hash of the file | ||
| [2010/08/05 11:21:41] <aforgue> clientbucket, not client/bucket | ||
| [2010/08/05 11:22:12] <aforgue> I just do: grep -r "/path/to/file" /var/lib/puppet/clientbucket | ||
| [2010/08/05 11:22:52] <aforgue> it'll return a file called paths, just cat that file and look in the same directory for a file called 'contents' and it'll be the previous version | ||
| [2010/08/05 11:23:18] <benkevan> awesome.. thanks aforgue how can I utilize puppet to stash files that i want to save? or .. in this case I want to push files to serverxxx in directoriesxxx (i want to push all the servers passwd files to the said server) | ||
| [2010/08/05 11:23:42] @ Quit: Deesl: Remote host closed the connection | ||
| [2010/08/05 11:24:43] <aforgue> http://docs.puppetlabs.com/guides/types/filebucket.html | ||
| [2010/08/05 11:24:45] <black`WASP> hey guys, in a node declaration where you say node /^dev-web-\d/ inherits default { ... several includes }, can I set up one include to depend on another one, like we do with 'require File["foo"]' inside a class declaration? | ||
| [2010/08/05 11:25:15] <aforgue> you create a filebucket resource and then use that as an argument to file.backup attribute | ||
| [2010/08/05 11:25:22] @ Quit: tecto_: Read error: Operation timed out | ||
| [2010/08/05 11:26:44] @ tecto_ joined channel #puppet | ||
| [2010/08/05 11:26:50] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 11:27:00] <aforgue> you just 'include' the dependent class in side the other class. | ||
| [2010/08/05 11:27:42] <aforgue> black`WASP: class x { } class y { include x } ... include y. or class x {} class y inherits x {} include y | ||
| [2010/08/05 11:27:46] <benkevan> hummm.. ok thanks aforgue i'll have to take a look at that | ||
| [2010/08/05 11:27:51] @ Quit: \ask: Ping timeout: 260 seconds | ||
| [2010/08/05 11:29:12] <black`WASP> aforgue: what if 2 other classes depend on this one? like I need to import some data AFTER I create a mount point and mount a device under it? | ||
| [2010/08/05 11:29:45] <black`WASP> aforgue: problem being that 2 classes depend on creating that mountpoint. | ||
| [2010/08/05 11:30:15] @ Quit: gmason: Quit: gmason | ||
| [2010/08/05 11:32:28] @ Quit: ashp: Ping timeout: 276 seconds | ||
| [2010/08/05 11:33:03] @ ashp joined channel #puppet | ||
| [2010/08/05 11:33:16] @ \ask joined channel #puppet | ||
| [2010/08/05 11:39:38] @ Quit: lkoranda: Quit: Ex-Chat | ||
| [2010/08/05 11:40:18] <benkevan> aforgue: are you going to be around later to maybe help my retardedness get some ssh keys all around my environment? I'm being hard headed on figuring out how puppet handles the sshkeys (user and or host) .. thanks.. (but for now.. it's lunch time) | ||
| [2010/08/05 11:44:06] @ Quit: kc7zzv: Remote host closed the connection | ||
| [2010/08/05 11:44:26] @ kc7zzv joined channel #puppet | ||
| [2010/08/05 11:50:03] <gpurrenhage> kc7zzv: I finally tracked it down, and it appears that with the switch to REST, the server never even knows that the client's keys have changed. The client requests the CA and it's own cert, which the server happily provides, and then the client realizes that it's own cert doesn't match it's (newly created) key and fails. | ||
| [2010/08/05 11:51:05] <kc7zzv> gpurrenhage: Yes. I was mostly listing how you can get around that. | ||
| [2010/08/05 11:52:03] <kc7zzv> gpurrenhage: You do need to assume that anyone (on your network) can spoof any of these clients at that point. | ||
| [2010/08/05 11:52:25] <gpurrenhage> kc7zzv: Thanks. I'm not sure scp'ing the key down will work in my environment, but I've got a few other ideas. I had some fun hacking around in the source, at least :-) | ||
| [2010/08/05 11:53:11] <gpurrenhage> kc7zzv: Yeah, that's a given. In my environment that's not much of a concern. I'm managing end-user machines, not servers, so spoofing one will only get you a locked down system | ||
| [2010/08/05 11:53:27] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 11:53:36] <kc7zzv> gpurrenhage: You might just want to put the private keys in a public location and use a script at the end of the imaging to pull down the private key. | ||
| [2010/08/05 11:53:55] <kc7zzv> gpurrenhage: Or, If the clients you want to autosign are all easy to tell apart, you can just run an hourly cron job that deletes their certs from the server. That way autosign will not have a copy of the certificate so it will use the new csr every time. | ||
| [2010/08/05 11:55:07] <gpurrenhage> kc7zzv: that's what I'm thinking. Everything keeps working if you --clean the client cert, as far as I can tell, and then a newly imaged machine can get a new cert. | ||
| [2010/08/05 11:56:11] <kc7zzv> gpurrenhage: In 2.6.x, clean revokes the cert. If the client might still be around, use something more like, "rm -Rf /var/lib/puppet/ssl/ca/certs/clientname.pem". | ||
| [2010/08/05 11:57:05] <gpurrenhage> kc7zzv: Good to know--I'll be looking at 2.6 soon. In the meantime, do you know if puppetca --clean --all cleans the ca/server cert too, or just all the client certs? | ||
| [2010/08/05 11:58:22] @ Quit: lak: Quit: lak | ||
| [2010/08/05 11:59:10] <kc7zzv> Puppetca only works with server stuff. | ||
| [2010/08/05 11:59:45] <kc7zzv> I didn't think --clean and --all worked together. Do they? | ||
| [2010/08/05 12:00:21] <kc7zzv> If not, "rm -Rf /var/lib/puppet/ssl/ca/certs/*" will do the same thing, and not revoke certs. (Disclaimer: That directory path is from memory. Please actually check it before running that command.) | ||
| [2010/08/05 12:02:25] <eric0> signed/ | ||
| [2010/08/05 12:02:28] @ nanliu joined channel #puppet | ||
| [2010/08/05 12:02:48] @ toi joined channel #puppet | ||
| [2010/08/05 12:03:12] <gpurrenhage> They didn't used to, but I think they do in the current version. My big concern is accidentally removing ca certs or other certs needed by the puppetmaster--are they ALL kept elsewhere? | ||
| [2010/08/05 12:04:04] <kc7zzv> gpurrenhage: By the way, I'm doing the same thing here. The clients are kiosks so I don't mind if anyone impersonates them. What OS are you using? | ||
| [2010/08/05 12:05:52] <kc7zzv> member:gpurrenhage: Instead of imaging, I preseeding and just do a new install each time. | ||
| [2010/08/05 12:06:14] <joe-mac> is PL looking into doing a dev course> | ||
| [2010/08/05 12:06:22] <joe-mac> i'd really love to contribute more code to puppet | ||
| [2010/08/05 12:07:14] @ dearka joined channel #puppet | ||
| [2010/08/05 12:07:49] <gpurrenhage> OS X 10.6 | ||
| [2010/08/05 12:08:15] <kc7zzv> Ah. You using NetRestore or Netboot? | ||
| [2010/08/05 12:08:20] <gpurrenhage> NetRestore | ||
| [2010/08/05 12:09:20] <gpurrenhage> I'm sure our next build will curl the key down from a server or something, but in the meantime I've got a bunch of machines in the wild that are re-imaged on the fly, so I need a stop-gap. | ||
| [2010/08/05 12:10:07] @ Quit: GaViT: Ping timeout: 248 seconds | ||
| [2010/08/05 12:10:18] @ Mick27 joined channel #puppet | ||
| [2010/08/05 12:11:10] <kc7zzv> Do you use the client's hostnames? | ||
| [2010/08/05 12:11:22] <joe-mac> hmmm, maybe i can automate the final portion of my build that isn't automated, you can curl the keys down from the server now? | ||
| [2010/08/05 12:11:24] <joe-mac> how do you auth? | ||
| [2010/08/05 12:11:28] <joe-mac> this is making my mouth water | ||
| [2010/08/05 12:11:44] <kc7zzv> If not, you could generate the key and cert then put them in the image. | ||
| [2010/08/05 12:11:57] <joe-mac> not possible for the way i built | ||
| [2010/08/05 12:12:00] <joe-mac> build | ||
| [2010/08/05 12:12:21] @ littleidea joined channel #puppet | ||
| [2010/08/05 12:13:13] @ Quit: DavidS: Read error: Connection reset by peer | ||
| [2010/08/05 12:15:41] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 12:17:56] @ jangell joined channel #puppet | ||
| [2010/08/05 12:17:59] @ Quit: toi: Ping timeout: 245 seconds | ||
| [2010/08/05 12:18:08] <jangell> How do you configure a puppet client to check its configuration more often then every 30 minutes? | ||
| [2010/08/05 12:18:24] @ GaViT joined channel #puppet | ||
| [2010/08/05 12:18:49] <kc7zzv> jangell: Connect to the server more often, or check the local configuration? | ||
| [2010/08/05 12:19:05] <jangell> kc7zzv: I can't figure out what the config defination would be to change that when it's running in daemon mode? | ||
| [2010/08/05 12:19:36] <Dominic> jangell: runinterval | ||
| [2010/08/05 12:19:47] <jangell> Dominic: Thank you. | ||
| [2010/08/05 12:19:49] <Dominic> or switch to cron, or use puppetrun, or just change that :) | ||
| [2010/08/05 12:20:24] <kc7zzv> jangell: Change which? How often it checks puppet.conf or how often it connects to the server and does a full run? | ||
| [2010/08/05 12:20:37] <jangell> kc7zzv: How often it connects to teh server and does a full run | ||
| [2010/08/05 12:20:37] @ toi joined channel #puppet | ||
| [2010/08/05 12:20:53] <jangell> Dominic: I'm trying to figure out what the best way to run it is...cron vs daemon | ||
| [2010/08/05 12:20:54] <kc7zzv> Ok. What they said. | ||
| [2010/08/05 12:21:16] <Dominic> jangell: I still run mine via daemons because I'm lazy, but most people advocate using cron | ||
| [2010/08/05 12:21:33] <jangell> Dominic: What is the reason for that? | ||
| [2010/08/05 12:21:36] <kc7zzv> Do you have the extra RAM to spare? It will often just sit there using 50-70MB. | ||
| [2010/08/05 12:21:46] <Dominic> ^ memory | ||
| [2010/08/05 12:22:05] <jangell> and there really is no real advantage to letting it run as a daemon? | ||
| [2010/08/05 12:22:05] <Dominic> I haven't had any issues with memory leaks, but it's a possibility | ||
| [2010/08/05 12:22:39] <kc7zzv> I'm not claiming it's leaking memory. I just meant it doesn't give the memory back between runs. | ||
| [2010/08/05 12:22:46] <jangell> My next question...is there a good way to check the syntax of all teh puppet config files short of having a client connect and blow up? | ||
| [2010/08/05 12:22:50] <Dominic> I believe puppetrun needs the puppetd daemon online, but I suppose there are alternatives | ||
| [2010/08/05 12:23:05] <beata_> trying to test out a snapshot of 2.6.x from today and it is saying "Could not parse configuration file: StoreConfigs not supported without ActiveRecord 2.1 or higher" but i have activerecord (2.3.5) installed and verified via gem list. any ideas what to check? | ||
| [2010/08/05 12:23:07] <Dominic> kc7zzv: sorry, I didn't mean to imply you did. I was just thinking aloud :) | ||
| [2010/08/05 12:23:18] <pheezy> http://www.devco.net/archives/2009/08/19/tips_and_tricks_for_puppet_debugging.php @jangell | ||
| [2010/08/05 12:23:21] @ cyrus_mc joined channel #puppet | ||
| [2010/08/05 12:23:26] <jangell> pheezy: thank you | ||
| [2010/08/05 12:24:30] <pheezy> if you have your puppet code checked into a repository somewhere you can setup pre-commit hooks that will check syntax as well | ||
| [2010/08/05 12:25:50] <jangell> pheezy: that's really what I'm looking to do. | ||
| [2010/08/05 12:26:00] <jangell> pheezy: I don't want myself, or someone else to commit a change that isn't valid..... | ||
| [2010/08/05 12:26:17] @ Quit: [GuS]: Remote host closed the connection | ||
| [2010/08/05 12:26:29] @ Quit: hal-j: Quit: Leaving. | ||
| [2010/08/05 12:26:33] <cyrus_mc> i moved my puppet sever over to a new machine. updated dns. on the clients after deleting the ssl dir i get. couldn't request certificate retrieved certificate does not match private key | ||
| [2010/08/05 12:26:33] <pheezy> http://pastie.org/1078047 <- pre commit hook for SVN | ||
| [2010/08/05 12:26:48] @ hal-j joined channel #puppet | ||
| [2010/08/05 12:27:33] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 12:28:15] @ Quit: axisys: Ping timeout: 248 seconds | ||
| [2010/08/05 12:28:24] @ timdau joined channel #puppet | ||
| [2010/08/05 12:28:35] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 12:31:22] <kc7zzv> cyrus_mc: You deleted the ssl dir on the clients but not the server? | ||
| [2010/08/05 12:32:20] <jens_> pheezy, thanks! | ||
| [2010/08/05 12:32:36] <pheezy> hey, i didn't write it! lol. | ||
| [2010/08/05 12:36:06] <pheezy> ahh seems theres finally some documentation on it, so here ya go: http://projects.puppetlabs.com/projects/1/wiki/Puppet_Version_Control | ||
| [2010/08/05 12:37:20] @ jose____ joined channel #puppet | ||
| [2010/08/05 12:37:53] @ Quit: cyrus_mc: Quit: Yaaic - Yet another Android IRC client - http://www.yaaic.org | ||
| [2010/08/05 12:40:15] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 12:43:27] @ ckauhaus joined channel #puppet | ||
| [2010/08/05 12:44:29] @ Quit: jose____: Quit: Page closed | ||
| [2010/08/05 12:47:14] <timdau> can someone point me at a resource for moving from cfengine2 to puppet | ||
| [2010/08/05 12:47:28] @ Quit: toi: Ping timeout: 240 seconds | ||
| [2010/08/05 12:48:50] @ toi joined channel #puppet | ||
| [2010/08/05 12:53:13] @ Quit: pheezy: Remote host closed the connection | ||
| [2010/08/05 12:55:00] @ DavidS joined channel #puppet | ||
| [2010/08/05 12:56:19] @ Quit: e1mer: Quit: captured by martians | ||
| [2010/08/05 12:56:56] @ Quit: black`WASP: | ||
| [2010/08/05 12:57:10] @ Quit: notbrien: Remote host closed the connection | ||
| [2010/08/05 12:57:26] @ notbrien joined channel #puppet | ||
| [2010/08/05 12:58:02] @ Quit: f3ew: Read error: Connection reset by peer | ||
| [2010/08/05 12:58:23] @ Quit: GaViT: Ping timeout: 260 seconds | ||
| [2010/08/05 13:00:11] @ Quit: notbrien: Remote host closed the connection | ||
| [2010/08/05 13:00:52] @ notbrien joined channel #puppet | ||
| [2010/08/05 13:01:21] @ Quit: notbrien: Remote host closed the connection | ||
| [2010/08/05 13:01:50] @ Quit: ckauhaus: Read error: Connection reset by peer | ||
| [2010/08/05 13:02:03] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 13:02:07] @ notbrien joined channel #puppet | ||
| [2010/08/05 13:02:18] @ Quit: notbrien: Client Quit | ||
| [2010/08/05 13:02:37] @ Quit: \ask: Ping timeout: 276 seconds | ||
| [2010/08/05 13:09:07] @ \ask joined channel #puppet | ||
| [2010/08/05 13:09:44] @ Quit: hal-j: Quit: Leaving. | ||
| [2010/08/05 13:10:56] @ pting joined channel #puppet | ||
| [2010/08/05 13:10:57] @ benkevan_ joined channel #puppet | ||
| [2010/08/05 13:11:51] @ Quit: benkevan_: Client Quit | ||
| [2010/08/05 13:11:51] @ hal-j joined channel #puppet | ||
| [2010/08/05 13:12:12] @ benkevan_ joined channel #puppet | ||
| [2010/08/05 13:12:44] @ Quit: benkevan_: Client Quit | ||
| [2010/08/05 13:12:48] @ Quit: benkevan: Ping timeout: 258 seconds | ||
| [2010/08/05 13:13:01] @ Quit: toi: Ping timeout: 276 seconds | ||
| [2010/08/05 13:14:07] @ ]oestewart joined channel #puppet | ||
| [2010/08/05 13:19:49] @ bodepd joined channel #puppet | ||
| [2010/08/05 13:21:04] @ Quit: nexx: Quit: quit | ||
| [2010/08/05 13:22:10] <joevano> so I want to manage a user password. in the user type, password element do I use the encrypted password that is stored in the /etc/shadow file for the user? | ||
| [2010/08/05 13:22:25] @ Quit: rgsteele: Remote host closed the connection | ||
| [2010/08/05 13:22:46] <joevano> so that the same password is applied across all systems that use that element | ||
| [2010/08/05 13:23:09] <bodepd> joevano: yes | ||
| [2010/08/05 13:23:47] <joevano> bodepd: thank you | ||
| [2010/08/05 13:23:52] <miah> its even better to just use kerberos ;) | ||
| [2010/08/05 13:24:22] @ littleidea joined channel #puppet | ||
| [2010/08/05 13:24:28] <bodepd> or push out public keys | ||
| [2010/08/05 13:24:43] <miah> i suppose, but only if you also build code to remove those public keys | ||
| [2010/08/05 13:25:11] @ tyll joined channel #puppet | ||
| [2010/08/05 13:25:26] @ Quit: beata_: Quit: leaving | ||
| [2010/08/05 13:28:12] <bodepd> use purge | ||
| [2010/08/05 13:28:42] @ f3ew joined channel #puppet | ||
| [2010/08/05 13:31:22] <miah> my company doesnt allow usage of public keys for ssh.. mostly because revocation and enforcing key lifetimes on ssh-agent (though this isn't too hard actually) | ||
| [2010/08/05 13:31:33] <miah> ldap is decent too | ||
| [2010/08/05 13:33:34] @ Quit: bug: Quit: bug | ||
| [2010/08/05 13:34:21] <DavidS> miah: use ssh-blacklist infrastructure from debian for revocation | ||
| [2010/08/05 13:34:43] <miah> i haent seen that one | ||
| [2010/08/05 13:35:34] @ lak joined channel #puppet | ||
| [2010/08/05 13:36:05] <miah> i feel like kerberos is easier though, you can wrap lots of policy around it that you just cant do with ssh keys | ||
| [2010/08/05 13:36:41] @ joe-mac left channel #puppet () | ||
| [2010/08/05 13:37:16] @ drue joined channel #puppet | ||
| [2010/08/05 13:38:04] <DavidS> miah: yeah, once it is set up... | ||
| [2010/08/05 13:38:12] <miah> its not hard to setup =) | ||
| [2010/08/05 13:38:22] @ Quit: ceren: Quit: ceren | ||
| [2010/08/05 13:41:48] <miah> ive been slowly building out a kerberos module for puppet, to manage all of it | ||
| [2010/08/05 13:42:03] <miah> i need to add keytab generation / support still | ||
| [2010/08/05 13:42:57] @ DavidS left channel #puppet () | ||
| [2010/08/05 13:44:24] @ Quit: jens_: Quit: Verlassend | ||
| [2010/08/05 13:48:23] @ S_BS joined channel #puppet | ||
| [2010/08/05 13:48:35] @ joe-mac joined channel #puppet | ||
| [2010/08/05 13:49:24] @ Quit: reyjrar: Quit: Leaving. | ||
| [2010/08/05 13:52:20] @ gmason joined channel #puppet | ||
| [2010/08/05 13:52:35] <S_BS> question: if puppet installs subversion, which user's home directory is being used to store subversion config files? | ||
| [2010/08/05 13:52:49] <joe-mac> S_BS: i don't understand | ||
| [2010/08/05 13:52:58] <joe-mac> aptitude install subversion installs subversion | ||
| [2010/08/05 13:53:05] <joe-mac> home directories don't come into play | ||
| [2010/08/05 13:53:55] @ Quit: dearka: Remote host closed the connection | ||
| [2010/08/05 13:55:58] @ plathrop-away is now known as plathrop | ||
| [2010/08/05 13:56:23] @ puppet-noob joined channel #puppet | ||
| [2010/08/05 13:57:28] <S_BS> well heres the thing | ||
| [2010/08/05 13:57:36] <S_BS> when you try to check out using subversion | ||
| [2010/08/05 13:57:53] <S_BS> it asks whether or not it is ok to store plaintext passwords | ||
| [2010/08/05 13:58:26] <S_BS> the only way (that i know of) to disable that prompt is to echo a certain string to /home/user/.subversion/servers | ||
| [2010/08/05 13:58:37] <puppet-noob> hey.. does anyone have an easy way to distribute ssh keys with puppet? | ||
| [2010/08/05 13:58:45] <joe-mac> oh, you can put that in /etc/subversion/servers if you want | ||
| [2010/08/05 13:58:50] <joe-mac> then only root can access it | ||
| [2010/08/05 13:58:54] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 13:59:12] <joe-mac> idk really cause i use svn either with keys interactively, or non-interactively on the same system (file:///) | ||
| [2010/08/05 13:59:16] @ jense joined channel #puppet | ||
| [2010/08/05 13:59:26] @ Quit: mattock: Quit: Leaving. | ||
| [2010/08/05 13:59:30] <joe-mac> puppet-noob: define distribute? | ||
| [2010/08/05 13:59:30] <hal-j> you can also cram in a "for puppet's use" config dir and run svn with --config-dir | ||
| [2010/08/05 13:59:35] <S_BS> i see. so if i put it /etc/subversion/servers it will not ask for this | ||
| [2010/08/05 13:59:36] <joe-mac> there is an ssh_authorized_keys type | ||
| [2010/08/05 13:59:40] <joe-mac> also you can use regular files | ||
| [2010/08/05 13:59:43] @ Quit: tecto_: Quit: tecto_ | ||
| [2010/08/05 13:59:51] <joe-mac> and let your devs/admins edit their own keys in the vcs tree | ||
| [2010/08/05 14:00:05] <joe-mac> S_BS: check the man page, but if memory serves, yes | ||
| [2010/08/05 14:00:07] <joe-mac> man page/red book | ||
| [2010/08/05 14:00:34] <S_BS> that's great, thank you very much! saved tons of headache! | ||
| [2010/08/05 14:00:36] <miah> i tend to make my svn stuff available via DAV and just allow servers read-only access | ||
| [2010/08/05 14:00:42] <miah> easier than dealing with passwords/keys | ||
| [2010/08/05 14:01:18] @ Quit: lak: Quit: lak | ||
| [2010/08/05 14:01:20] @ gpurrenhage_ joined channel #puppet | ||
| [2010/08/05 14:01:59] <puppet-noob> yeah i tried using the ssh_authorized_keys but i cant get the keys to copy between all the nodes.. so each end up with their own id_rsa.pub.. | ||
| [2010/08/05 14:02:09] @ bodepd joined channel #puppet | ||
| [2010/08/05 14:02:16] @ benkevan joined channel #puppet | ||
| [2010/08/05 14:02:46] @ bug joined channel #puppet | ||
| [2010/08/05 14:03:17] <benkevan> is there a way I can test to see if I have perl rrd tools installed? | ||
| [2010/08/05 14:03:45] <benkevan> s/tools/bindings/ | ||
| [2010/08/05 14:04:20] <miah> the perl module itself, or via rpm/dpkg etc? | ||
| [2010/08/05 14:04:28] @ Quit: gpurrenhage_: Client Quit | ||
| [2010/08/05 14:04:38] <benkevan> well I built an rpm, but I want to make sure the libraries are actually available for puppet | ||
| [2010/08/05 14:05:07] <Volcane> you mean the ruby rrd right? | ||
| [2010/08/05 14:05:21] @ Quit: uphillian: Quit: Leaving. | ||
| [2010/08/05 14:05:27] @ Quit: gpurrenhage: Ping timeout: 264 seconds | ||
| [2010/08/05 14:05:28] <miah> you could write a small app that loads the modules to test? | ||
| [2010/08/05 14:05:59] @ Quit: roflcopter69: Quit: Leaving | ||
| [2010/08/05 14:06:01] <benkevan> is it ruby rrd? well now I feel like a douche.. i built the perl one haha.. | ||
| [2010/08/05 14:06:08] <Volcane> heh | ||
| [2010/08/05 14:06:23] <Volcane> anyway, this shouldnt give an error: ruby -e 'require "RRDtool"' | ||
| [2010/08/05 14:07:17] <ReinH> nasrat: ping again :) | ||
| [2010/08/05 14:09:03] <benkevan> let me rebuild the rpm .. this time including the ruby stuff (supid ben.. doing perl.. what was I thinking) | ||
| [2010/08/05 14:10:13] <Volcane> the bindings needed is not the ones ffom the rrdtool itself | ||
| [2010/08/05 14:10:16] <joe-mac> problem with ruby rrd tool on ubuntu at least you have to copy it into the sitedir for ruby | ||
| [2010/08/05 14:10:20] <joe-mac> freakking retarded | ||
| [2010/08/05 14:10:20] <Volcane> its other ones called RRDTool | ||
| [2010/08/05 14:10:32] <Volcane> RRDtool even | ||
| [2010/08/05 14:10:49] <joe-mac> yea, i have an ugly exec triggered by the master install that copies it into place and restarts puppetmasterd | ||
| [2010/08/05 14:12:03] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 14:12:09] <benkevan> oh.. so ruby-rrdtool != RRDtool ruby? I'm confused | ||
| [2010/08/05 14:12:16] <benkevan> wheere would I get the _correct_ | ||
| [2010/08/05 14:12:32] @ shenson is now known as zz_shenson | ||
| [2010/08/05 14:14:35] @ Quit: puppet-noob: Quit: Page closed | ||
| [2010/08/05 14:14:52] @ Quit: tyll: Quit: leaving | ||
| [2010/08/05 14:17:01] @ fredden joined channel #puppet | ||
| [2010/08/05 14:18:51] @ joe-mac left channel #puppet () | ||
| [2010/08/05 14:19:26] @ Quit: project2501a: Remote host closed the connection | ||
| [2010/08/05 14:20:55] @ greg___ joined channel #puppet | ||
| [2010/08/05 14:25:40] @ Quit: MrHeavy: Read error: Connection reset by peer | ||
| [2010/08/05 14:27:07] <jangell> I want to use a yum repository, but only when I'm installing a specific package. I tried to use includepkgs => "package-name" to accomplish that in the yumrepo class. Problem is it won't install any of it's dependencies and there are hundreds. Is there some way I can tell it to enable a yum repository when its installing a specific package but leave it disabled otherwise? | ||
| [2010/08/05 14:27:43] @ Quit: SpacePope: Ping timeout: 248 seconds | ||
| [2010/08/05 14:27:54] @ Quit: MPSimmons: Quit: Leaving. | ||
| [2010/08/05 14:28:00] <benkevan> jangell: possibly use exec instead of the default provider? | ||
| [2010/08/05 14:28:31] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 14:28:41] @ project2501a joined channel #puppet | ||
| [2010/08/05 14:28:57] <miah> so just build a yum repo with that one package | ||
| [2010/08/05 14:29:13] <miah> so long as the repo is installed on your server, just puppet should just figure it out | ||
| [2010/08/05 14:29:30] @ Quit: labrown: Quit: Leaving | ||
| [2010/08/05 14:29:36] <miah> ive totally done that before in the past, for some stuff | ||
| [2010/08/05 14:29:43] <jangell> miah: the repository is used t oinstall one package and its hundreds of dependencies. but I dont want to leave that repositroy enabled all the time as it'd take over and upgrade other packages if a yum upgrade were done. | ||
| [2010/08/05 14:30:00] <jangell> I don't want to make my own custom repo for it and its hundreds of dependencies and then ahve to keep all that stuff updated | ||
| [2010/08/05 14:30:10] <miah> ah ya | ||
| [2010/08/05 14:30:27] <jangell> normally i would do a yum --enablerepo=rpmforge install amavisd-new | ||
| [2010/08/05 14:30:34] <jangell> and otherwise leave it disabled | ||
| [2010/08/05 14:30:36] <miah> just make sure you don't do "latest" on the package | ||
| [2010/08/05 14:30:44] <jangell> as i don't want ALL their packages to replace the official distribution packages | ||
| [2010/08/05 14:31:06] <jangell> I didn't. I specified the version I want. but I can't leave the repo enabled otherwise a yum upgrade would be nasty | ||
| [2010/08/05 14:31:24] <jangell> and if I leave it enabled and use includepkgs that wont work becuase it wont install the dependencies | ||
| [2010/08/05 14:31:43] <miah> ah | ||
| [2010/08/05 14:31:48] <miah> you could do exec's ? | ||
| [2010/08/05 14:31:57] <jangell> I could I guess. was just trying to avoid that. seems "messy" | ||
| [2010/08/05 14:32:17] <miah> ya | ||
| [2010/08/05 14:33:16] @ glaw joined channel #puppet | ||
| [2010/08/05 14:35:27] <Ned_> is it possible to do something like if Class["myclass"] | ||
| [2010/08/05 14:35:27] <Ned_> ? | ||
| [2010/08/05 14:35:42] <Ned_> i.e. behave differently if another class is loaded ? | ||
| [2010/08/05 14:36:08] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 14:39:10] @ sijis is now known as sijis-afk | ||
| [2010/08/05 14:42:20] <eric0> Ned_: i think 'if defined ( Class["myclass"] ) will work - i know that works to test *resources* that might be dfined inside myclass so perhaps that's an option for you too | ||
| [2010/08/05 14:42:47] <Ned_> heh | ||
| [2010/08/05 14:42:49] * Ned_ will experiment | ||
| [2010/08/05 14:42:55] <Volcane> eric0: yeah that'll work but its order dependant | ||
| [2010/08/05 14:43:01] <Ned_> eric0: I guess the alternate if my class can just set a variable ... | ||
| [2010/08/05 14:43:14] <Volcane> eric0: it will only know about classes that has already been included at that point, not all classes | ||
| [2010/08/05 14:43:34] @ scashin133 joined channel #puppet | ||
| [2010/08/05 14:44:10] @ Quit: glaw: Remote host closed the connection | ||
| [2010/08/05 14:46:58] <eric0> Volcane: ah that makes sense, i try to avoid classes including other classes except at the top level so i'd never see that | ||
| [2010/08/05 14:47:20] <Volcane> well you would | ||
| [2010/08/05 14:47:26] <Volcane> node foo { include one,two } | ||
| [2010/08/05 14:47:27] <Volcane> vs | ||
| [2010/08/05 14:47:33] <Volcane> node foo { include two,one } | ||
| [2010/08/05 14:47:51] <Volcane> if class two were checking if defined(Class["one"]) the 2nd line wouldnt work | ||
| [2010/08/05 14:50:47] @ lak joined channel #puppet | ||
| [2010/08/05 14:51:48] @ Quit: lak: Client Quit | ||
| [2010/08/05 14:53:49] @ Quit: ahuman: Remote host closed the connection | ||
| [2010/08/05 14:54:03] @ Quit: MarkN1: Ping timeout: 264 seconds | ||
| [2010/08/05 14:55:22] @ Quit: gniks: Quit: Leaving. | ||
| [2010/08/05 14:55:31] @ SpacePope joined channel #puppet | ||
| [2010/08/05 14:59:35] @ Quit: fcami: Quit: 2.6.34 from koji. joy. | ||
| [2010/08/05 15:01:52] @ MarkN1 joined channel #puppet | ||
| [2010/08/05 15:01:56] @ MarkN1 left channel #puppet () | ||
| [2010/08/05 15:02:00] @ fcami joined channel #puppet | ||
| [2010/08/05 15:03:51] @ littleidea joined channel #puppet | ||
| [2010/08/05 15:03:55] @ Quit: ecapriolo: Ping timeout: 260 seconds | ||
| [2010/08/05 15:06:40] @ Quit: kolla: Remote host closed the connection | ||
| [2010/08/05 15:07:56] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 15:11:26] @ Quit: jdcasey: Remote host closed the connection | ||
| [2010/08/05 15:12:11] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 15:12:55] @ Quit: fcami: Quit: gone | ||
| [2010/08/05 15:15:15] @ fcami joined channel #puppet | ||
| [2010/08/05 15:17:40] @ Kaelten joined channel #puppet | ||
| [2010/08/05 15:18:56] <Kaelten> hi I seem to be unable to get a file to copy from one server to another (using source), and I'm running out of logical debug steps (at least logical for me) anyone able to point me in the right direction? | ||
| [2010/08/05 15:20:07] <bdha> pastebin the code? | ||
| [2010/08/05 15:21:17] @ bodepd joined channel #puppet | ||
| [2010/08/05 15:21:32] <Kaelten> bdha: sure http://puppet.pastebin.com/jWr2Wfha | ||
| [2010/08/05 15:21:44] <Kaelten> I've copied it from one of the examples I've been looking at | ||
| [2010/08/05 15:21:58] <Kaelten> and I've worked on it until I don't get any errors or warnings | ||
| [2010/08/05 15:22:26] <Kaelten> but when I make changes to /files/etc/apt/sources.list and run puppet on the client it doesn't update /etc/apt/sources.list | ||
| [2010/08/05 15:23:01] @ gniks joined channel #puppet | ||
| [2010/08/05 15:23:36] <bdha> Can the client resolve pmaster? | ||
| [2010/08/05 15:23:59] <bdha> What does your puppet.conf look like? Or fileserver.conf or whatever. | ||
| [2010/08/05 15:24:09] <Kaelten> bdha: yes it can | ||
| [2010/08/05 15:24:17] <bdha> e.g., does it contain a [files] section? | ||
| [2010/08/05 15:24:27] <bdha> Though you should get an error about that. | ||
| [2010/08/05 15:24:53] <Kaelten> bdha: http://puppet.pastebin.com/N1iDCEey fileserver.conf | ||
| [2010/08/05 15:25:36] <bdha> I can't see anything obviously wrong. :( | ||
| [2010/08/05 15:26:14] <Kaelten> bdha: http://puppet.pastebin.com/19V9yHUd | ||
| [2010/08/05 15:26:52] <Kaelten> and here is the puppet.conf on the client http://puppet.pastebin.com/iZ2d8tkV | ||
| [2010/08/05 15:29:16] <bdha> I don't see anything in that output where it's actually trying to talk to the master. | ||
| [2010/08/05 15:29:45] <Kaelten> hrm | ||
| [2010/08/05 15:29:46] <Kaelten> odd | ||
| [2010/08/05 15:30:13] <bdha> Try --server pmaster.cursetest.local or whatever? | ||
| [2010/08/05 15:30:28] <bdha> (just guessing now, long day) | ||
| [2010/08/05 15:31:07] <Kaelten> http://puppet.pastebin.com/qgb98GtG | ||
| [2010/08/05 15:31:12] <Kaelten> I get that on the master | ||
| [2010/08/05 15:32:12] <bdha> Touch /etc/puppet/auth.conf. | ||
| [2010/08/05 15:32:16] <bdha> Restart the master. | ||
| [2010/08/05 15:32:37] @ Quit: bug: Quit: bug | ||
| [2010/08/05 15:32:46] <bdha> But yeah, the master is handing off the catalog to the client. | ||
| [2010/08/05 15:33:24] <Kaelten> http://puppet.pastebin.com/SAn4sPz1 after touching the auth.conf | ||
| [2010/08/05 15:33:38] <bdha> And the file containing node default{} is getting loaded? | ||
| [2010/08/05 15:33:50] <Kaelten> that's the sites.pp | ||
| [2010/08/05 15:33:59] <bdha> site.pp. | ||
| [2010/08/05 15:34:06] <bdha> Not sure if it's magical. | ||
| [2010/08/05 15:34:06] <Kaelten> er site.pp | ||
| [2010/08/05 15:34:07] <Kaelten> ya | ||
| [2010/08/05 15:34:19] <Kaelten> as far as I know it's getting loaded, anyway for me to confirm? | ||
| [2010/08/05 15:34:46] <bdha> Have it throw a warn or notice. | ||
| [2010/08/05 15:34:53] <bdha> Or just break it. | ||
| [2010/08/05 15:35:18] @ Quit: gmason: Quit: gmason | ||
| [2010/08/05 15:35:46] <kc7zzv> Just change "default" to "deffault" | ||
| [2010/08/05 15:35:54] <kc7zzv> *to break it | ||
| [2010/08/05 15:36:03] <Kaelten> I removed a } and got this when I tried to run puppetd again err: Could not parse for environment production: Syntax error at end of file; expected '}' at /etc/puppet/manifests/site.pp:19 | ||
| [2010/08/05 15:36:14] @ imran_ joined channel #puppet | ||
| [2010/08/05 15:36:36] <bdha> Heh, well, that's good. :) | ||
| [2010/08/05 15:36:42] <kc7zzv> Which version of puppet client and server? | ||
| [2010/08/05 15:36:48] <Kaelten> 25.4 | ||
| [2010/08/05 15:36:48] @ imran_ is now known as imran- | ||
| [2010/08/05 15:37:17] <Kaelten> well .25.4 | ||
| [2010/08/05 15:38:05] <kc7zzv> Puppetd is running as root on the client? | ||
| [2010/08/05 15:38:20] <imran-> hello. | ||
| [2010/08/05 15:38:23] <Kaelten> yes | ||
| [2010/08/05 15:39:03] @ Quit: bobbyz_: Ping timeout: 264 seconds | ||
| [2010/08/05 15:39:18] <Kaelten> I just changed the mode for the file and it still isn't doing anything | ||
| [2010/08/05 15:39:41] @ Quit: S_BS: Quit: Page closed | ||
| [2010/08/05 15:40:05] <imran-> trying to use augeas with mysql's my.cnf. it doesn't see the names of the subsections but rather uses 'target[1]' etc. .. any other lenses available that would work better than the ones that come with augeas? | ||
| [2010/08/05 15:40:11] @ Quit: jangell: Quit: jangell | ||
| [2010/08/05 15:40:25] <Kaelten> is there something I need to setup in my puppet.conf to make things work maybe? | ||
| [2010/08/05 15:40:56] <bdha> Kaelten: Not really... 1s, I'll pastebin my (working) config. | ||
| [2010/08/05 15:41:11] @ Quit: spacex: Quit: Leaving. | ||
| [2010/08/05 15:41:18] <kc7zzv> On the server, su to puppet, and then try "cat /etc/puppet/files/etc/apt/sources.list" | ||
| [2010/08/05 15:41:19] @ Quit: adrian_broher: Quit: Verlassend | ||
| [2010/08/05 15:41:42] <bdha> kc7zzv: Shouldn't it throw an error if it can't read the source? | ||
| [2010/08/05 15:42:21] <kc7zzv> Sometimes the puppet server acts strange if there's a permission problem on the local machine. | ||
| [2010/08/05 15:42:23] <imran-> also, i get "You cannot collect without storeconfigs being set..." but storeconfigs is on, and its 'collecting' fine... i.e. its generating a nagios config on the nagios master... | ||
| [2010/08/05 15:42:59] <Kaelten> hrm, I can't seem to su into puppet | ||
| [2010/08/05 15:43:06] <bdha> kc7zzv: ah. Yeah. As a rule, puppet code should be puppet:puppet. | ||
| [2010/08/05 15:43:13] <bdha> Kaelten: Probably has no valid shell, as it doesn't need one. | ||
| [2010/08/05 15:43:16] <bdha> The master just drops privs to it. | ||
| [2010/08/05 15:44:46] <Kaelten> I just chown'd -R puppet:\ files and still no go | ||
| [2010/08/05 15:44:46] @ rodnet joined channel #puppet | ||
| [2010/08/05 15:45:17] @ littleidea joined channel #puppet | ||
| [2010/08/05 15:45:28] <Kaelten> but more than that I changed the mode=> in the manifest and it doesn't even try to change that on the client | ||
| [2010/08/05 15:45:36] <Kaelten> does my client not think it should apply the default profile maybe? | ||
| [2010/08/05 15:45:42] <kc7zzv> imran-: I don't have a copy of the my.cnf file, but you can usually pick a section like this: /files/etc/mysql/my.cnf/target[.='sectionname'] | ||
| [2010/08/05 15:45:47] <kc7zzv> Try that in augtool | ||
| [2010/08/05 15:46:12] <kc7zzv> Kaelten: You forgot the ensure line. | ||
| [2010/08/05 15:46:37] <kc7zzv> The's the problem. | ||
| [2010/08/05 15:47:05] @ kolla joined channel #puppet | ||
| [2010/08/05 15:47:44] @ Alagar joined channel #puppet | ||
| [2010/08/05 15:47:44] @ Quit: Alagar: Excess Flood | ||
| [2010/08/05 15:48:16] <Kaelten> oh? you have to provide it in as well? | ||
| [2010/08/05 15:48:23] <Kaelten> for some reason I thought it would infer it from the name of the file | ||
| [2010/08/05 15:48:31] <kc7zzv> Try adding "ensure => present," to your file definition. | ||
| [2010/08/05 15:49:10] <kc7zzv> That tells puppet you want to create the file instead of something else, like removing the file. | ||
| [2010/08/05 15:49:49] <Kaelten> kc7zzv: did nothing | ||
| [2010/08/05 15:50:54] <Kaelten> just tried replace=true as well | ||
| [2010/08/05 15:51:12] <Kaelten> in the log I never see it event rying to grab the filef rom the server | ||
| [2010/08/05 15:52:08] @ Djelibeybi joined channel #puppet | ||
| [2010/08/05 15:52:16] <Djelibeybi> jamesturnbull: http://www.djelibeybi.net/2010/08/using-oracle-database-for-puppet-stored-configuration/ | ||
| [2010/08/05 15:54:09] <bdha> Kaelten: Try changing node default{} to node pmaster.cursetest.local{} or whatever. | ||
| [2010/08/05 15:54:16] <bdha> But.. really. Eh. | ||
| [2010/08/05 15:54:25] * bdha can't remember how that works anyway. | ||
| [2010/08/05 15:54:58] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 15:55:39] <Kaelten> bdha: no affect :( | ||
| [2010/08/05 15:56:39] @ Quit: Groenleer: Ping timeout: 240 seconds | ||
| [2010/08/05 15:56:57] @ Quit: kc7zzv: Quit: kc7zzv | ||
| [2010/08/05 16:00:25] <Kaelten> so I'm guessing my contrived and unexplainable problems with puppet are just to torment me | ||
| [2010/08/05 16:00:38] <bdha> Kaelten: Well, for whatever it's worth: | ||
| [2010/08/05 16:01:46] <bdha> http://pastie.org/1078541.txt?key=ipgkbvtoa3vsqrqxdiukjw | ||
| [2010/08/05 16:01:49] <bdha> http://pastie.org/1078515.txt?key=4jz0d0olqotlm1eskhg | ||
| [2010/08/05 16:01:53] <bdha> http://pastie.org/1078519.txt?key=lo7pcynhkfuqt2jwtk6w | ||
| [2010/08/05 16:01:56] <bdha> http://pastie.org/1078528.txt?key=6u92yveu3twyfwohbku0gw | ||
| [2010/08/05 16:02:28] @ Alagar joined channel #puppet | ||
| [2010/08/05 16:02:28] @ Quit: Alagar: Excess Flood | ||
| [2010/08/05 16:04:34] @ Quit: ]oestewart: Quit: This computer has gone to sleep | ||
| [2010/08/05 16:05:14] <Kaelten> bdha: interesting, looks nothign like my configs, lol | ||
| [2010/08/05 16:05:22] <Kaelten> are you using the same version? | ||
| [2010/08/05 16:05:24] <bdha> Yeah. | ||
| [2010/08/05 16:05:48] <bdha> Well, 0.25.5. | ||
| [2010/08/05 16:05:55] <Kaelten> where does $fileserver comefrome? | ||
| [2010/08/05 16:06:05] <bdha> I set it in site.pp. | ||
| [2010/08/05 16:06:22] <bdha> Global definitions tend to live there, as class inheritence is sometimes.. weird. | ||
| [2010/08/05 16:07:09] <bdha> I think I have some configs from before I started using modules, but it's all the same stuff. | ||
| [2010/08/05 16:07:14] <bdha> Just where it lives. | ||
| [2010/08/05 16:07:50] @ lak joined channel #puppet | ||
| [2010/08/05 16:08:14] <bdha> Yo Luke. | ||
| [2010/08/05 16:08:24] <lak> hullo bdha | ||
| [2010/08/05 16:09:08] @ itguru joined channel #puppet | ||
| [2010/08/05 16:09:09] @ Quit: itguru: Changing host | ||
| [2010/08/05 16:09:09] @ itguru joined channel #puppet | ||
| [2010/08/05 16:11:11] <Kaelten> what's this about? modulepath = /opt/puppet/modules/services:/opt/puppet/modules/example | ||
| [2010/08/05 16:12:18] @ carrotsticks joined channel #puppet | ||
| [2010/08/05 16:13:54] @ Quit: rcrowley: Quit: rcrowley | ||
| [2010/08/05 16:14:31] @ bobinabottle joined channel #puppet | ||
| [2010/08/05 16:16:50] @ Quit: Djelibeybi: Quit: Leaving | ||
| [2010/08/05 16:19:12] <Kaelten> woot, got it to make a directory | ||
| [2010/08/05 16:19:52] @ Quit: Mick27: Quit: This computer has gone to sleep | ||
| [2010/08/05 16:20:01] @ Quit: lak: Quit: lak | ||
| [2010/08/05 16:23:16] <Kaelten> bdha: it helped, I think I'm making progress | ||
| [2010/08/05 16:23:36] <bdha> Kaelten: Cool. :) | ||
| [2010/08/05 16:23:47] <bdha> Kaelten: modulepath defines where your modules live. Modules are self-contained .. modules of code. | ||
| [2010/08/05 16:23:52] <bdha> Just like Perl, or Ruby, or whatever. | ||
| [2010/08/05 16:24:05] <Kaelten> ah, I haven't looked at that stuff yet | ||
| [2010/08/05 16:27:08] <Kaelten> ok, now this is looking like it's going to be pretty cool | ||
| [2010/08/05 16:27:20] <imran-> kc7zzv: ok, thanks, I'll try that now in augtool (sorry, I gotta distracted by those emergency dept meetings) | ||
| [2010/08/05 16:27:45] <Kaelten> thanks again guys | ||
| [2010/08/05 16:27:49] <Kaelten> :) | ||
| [2010/08/05 16:29:31] <imran-> kc7zzv: nice , worked great! thanks. | ||
| [2010/08/05 16:30:23] @ Quit: benkevan: Quit: leaving | ||
| [2010/08/05 16:31:55] @ bug joined channel #puppet | ||
| [2010/08/05 16:32:53] @ \ask_ joined channel #puppet | ||
| [2010/08/05 16:33:12] <bdha> Kaelten: :) | ||
| [2010/08/05 16:34:01] @ Quit: \ask_: Remote host closed the connection | ||
| [2010/08/05 16:34:35] @ \ask_ joined channel #puppet | ||
| [2010/08/05 16:35:34] @ Quit: \ask: Read error: Connection reset by peer | ||
| [2010/08/05 16:37:09] @ Quit: gniks: Ping timeout: 245 seconds | ||
| [2010/08/05 16:38:35] @ Quit: WALoeIII: Read error: Operation timed out | ||
| [2010/08/05 16:39:01] @ gniks joined channel #puppet | ||
| [2010/08/05 16:42:43] @ Quit: Edgan: Quit: Edgan | ||
| [2010/08/05 16:43:07] @ Edgan joined channel #puppet | ||
| [2010/08/05 16:43:39] @ Quit: alfism: Quit: alfism | ||
| [2010/08/05 16:49:45] @ jangell joined channel #puppet | ||
| [2010/08/05 16:50:25] <carrotsticks> which cert files do I need to copy over to the new puppet server I am making to have all of the clients agree that the new server is the right one? | ||
| [2010/08/05 16:51:42] @ Quit: radkin: Remote host closed the connection | ||
| [2010/08/05 16:52:10] @ freshtonic joined channel #puppet | ||
| [2010/08/05 16:52:37] @ thekad-afk is now known as thekad | ||
| [2010/08/05 16:56:48] @ Quit: Bass10: Ping timeout: 240 seconds | ||
| [2010/08/05 16:57:22] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 17:04:27] @ Quit: RussS: Quit: Leaving | ||
| [2010/08/05 17:07:33] @ Quit: greg___: Quit: greg___ | ||
| [2010/08/05 17:08:19] @ gniks1 joined channel #puppet | ||
| [2010/08/05 17:09:27] @ Quit: mikey_p: Quit: mikey_p | ||
| [2010/08/05 17:11:43] @ Quit: gniks: Ping timeout: 260 seconds | ||
| [2010/08/05 17:14:02] @ bodepd joined channel #puppet | ||
| [2010/08/05 17:18:23] @ Quit: zeroXten: Ping timeout: 265 seconds | ||
| [2010/08/05 17:21:36] @ Quit: gmcquillan: Quit: gmcquillan | ||
| [2010/08/05 17:24:07] @ lak joined channel #puppet | ||
| [2010/08/05 17:35:04] @ Bass10 joined channel #puppet | ||
| [2010/08/05 17:37:22] <bodepd> carrotsticks: you can just specify ca=false, then have the new server signed by the old one. (and new clients will have to set ca_server as the old server) | ||
| [2010/08/05 17:42:58] @ Quit: asmodeo__: Ping timeout: 276 seconds | ||
| [2010/08/05 17:44:09] @ Quit: ghaskins_mobile: Ping timeout: 240 seconds | ||
| [2010/08/05 17:44:21] @ Quit: Edgan: Read error: Connection reset by peer | ||
| [2010/08/05 17:45:07] @ Edgan joined channel #puppet | ||
| [2010/08/05 17:47:18] @ Quit: lak: Quit: lak | ||
| [2010/08/05 17:49:42] @ ghaskins_mobile joined channel #puppet | ||
| [2010/08/05 17:52:50] @ Quit: rodnet: Quit: rodnet | ||
| [2010/08/05 17:53:47] @ ]oestewart joined channel #puppet | ||
| [2010/08/05 17:58:04] @ e1mer joined channel #puppet | ||
| [2010/08/05 17:58:07] @ Quit: jmccune: Ping timeout: 240 seconds | ||
| [2010/08/05 17:58:08] @ Quit: imran-: Ping timeout: 240 seconds | ||
| [2010/08/05 17:59:00] @ littleidea joined channel #puppet | ||
| [2010/08/05 18:00:16] @ Quit: rmiller4pi8: Ping timeout: 240 seconds | ||
| [2010/08/05 18:05:06] @ Quit: jaredrhine: Quit: Leaving. | ||
| [2010/08/05 18:05:25] @ Quit: gniks1: Quit: Leaving. | ||
| [2010/08/05 18:07:02] @ gniks joined channel #puppet | ||
| [2010/08/05 18:11:44] @ gmcquillan joined channel #puppet | ||
| [2010/08/05 18:11:52] @ Quit: bobinabottle: Quit: bobinabottle | ||
| [2010/08/05 18:13:49] @ Quit: ahasenack: Quit: Leaving | ||
| [2010/08/05 18:19:24] @ brothers_ joined channel #puppet | ||
| [2010/08/05 18:20:52] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/05 18:21:21] @ Quit: itguru: Read error: Operation timed out | ||
| [2010/08/05 18:21:27] @ Quit: brothers: Ping timeout: 240 seconds | ||
| [2010/08/05 18:21:47] @ wilmoore joined channel #puppet | ||
| [2010/08/05 18:24:03] @ Quit: brothers_: Ping timeout: 264 seconds | ||
| [2010/08/05 18:27:20] @ Quit: mclarke: Quit: mclarke | ||
| [2010/08/05 18:38:04] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 18:49:59] @ bodepd joined channel #puppet | ||
| [2010/08/05 18:53:50] @ Quit: wilmoore: Remote host closed the connection | ||
| [2010/08/05 18:57:31] @ e1mer joined channel #puppet | ||
| [2010/08/05 18:58:51] @ Quit: nanliu: Quit: nanliu | ||
| [2010/08/05 19:00:00] @ jmccune joined channel #puppet | ||
| [2010/08/05 19:00:50] @ bodepd left channel #puppet () | ||
| [2010/08/05 19:05:47] @ jaredrhine joined channel #puppet | ||
| [2010/08/05 19:06:02] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/05 19:06:37] @ Quit: pinoyskull: Ping timeout: 258 seconds | ||
| [2010/08/05 19:06:39] @ Hallaj joined channel #puppet | ||
| [2010/08/05 19:07:38] <n3kl> anyone know when puppet labs is starting interviews? | ||
| [2010/08/05 19:13:40] @ thekad is now known as thekad-afk | ||
| [2010/08/05 19:14:18] @ mikey_p joined channel #puppet | ||
| [2010/08/05 19:14:28] <BLZbubba> is it legal to do node ['node1', 'node2', 'node3'] {} | ||
| [2010/08/05 19:15:34] <BLZbubba> yep, ok coo | ||
| [2010/08/05 19:15:35] <BLZbubba> l | ||
| [2010/08/05 19:21:11] @ bobinabottle joined channel #puppet | ||
| [2010/08/05 19:24:32] @ plathrop is now known as plathrop-away | ||
| [2010/08/05 19:27:18] @ bodepd joined channel #puppet | ||
| [2010/08/05 19:27:19] @ Quit: randybias: Ping timeout: 276 seconds | ||
| [2010/08/05 19:28:38] @ randybias joined channel #puppet | ||
| [2010/08/05 19:34:40] @ nanliu joined channel #puppet | ||
| [2010/08/05 19:40:15] @ Quit: tonyskapunk: Ping timeout: 264 seconds | ||
| [2010/08/05 19:46:08] @ e1mer joined channel #puppet | ||
| [2010/08/05 19:46:20] @ Quit: ]oestewart: Quit: This computer has gone to sleep | ||
| [2010/08/05 19:50:52] <Ned_> has anyone had issues with installing postgres and getting C encoding (instead of utf-8) | ||
| [2010/08/05 19:50:55] <Ned_> ? | ||
| [2010/08/05 19:50:57] <Ned_> anyone know of a nice solution ? | ||
| [2010/08/05 20:01:01] @ rmiller4pi8 joined channel #puppet | ||
| [2010/08/05 20:06:23] @ Quit: pting: Ping timeout: 248 seconds | ||
| [2010/08/05 20:07:05] @ Quit: mikey_p: Quit: mikey_p | ||
| [2010/08/05 20:15:00] @ ]oestewart joined channel #puppet | ||
| [2010/08/05 20:20:57] @ Djelibeybi joined channel #puppet | ||
| [2010/08/05 20:22:08] @ Quit: Bass10: Ping timeout: 240 seconds | ||
| [2010/08/05 20:25:54] @ Quit: bgupta: Quit: bgupta | ||
| [2010/08/05 20:26:50] @ lak joined channel #puppet | ||
| [2010/08/05 20:28:15] @ Quit: AimanA: Ping timeout: 265 seconds | ||
| [2010/08/05 20:28:21] @ AimanA joined channel #puppet | ||
| [2010/08/05 20:29:45] @ Quit: scashin133: Ping timeout: 246 seconds | ||
| [2010/08/05 20:32:59] @ RussS joined channel #puppet | ||
| [2010/08/05 20:39:52] @ jens_ joined channel #puppet | ||
| [2010/08/05 20:43:43] @ Quit: jense: Ping timeout: 265 seconds | ||
| [2010/08/05 20:45:07] @ Quit: akoma1s: Read error: Connection reset by peer | ||
| [2010/08/05 20:47:29] @ akoma1s joined channel #puppet | ||
| [2010/08/05 20:48:05] @ spacex joined channel #puppet | ||
| [2010/08/05 20:54:22] @ znoG joined channel #puppet | ||
| [2010/08/05 20:55:36] <znoG> hey all.. is it possible to do a conditional test on a scope variable? | ||
| [2010/08/05 20:55:54] <znoG> <% if scope.lookupvar("....") == "something" %> ... <% end %> | ||
| [2010/08/05 20:56:03] <agaffney> I see no reason why not | ||
| [2010/08/05 20:56:07] <znoG> it doesn't :( | ||
| [2010/08/05 20:56:36] <znoG> <%= scope.lookupvar("...") %> works of course | ||
| [2010/08/05 20:56:42] <znoG> but a conditional doesn't and it's driving me nuts | ||
| [2010/08/05 20:56:48] <agaffney> is there an error? | ||
| [2010/08/05 20:57:02] <znoG> no, it just doesn't go into the "if" when I run puppet once | ||
| [2010/08/05 20:57:10] <znoG> and it should, based on the value of the variable | ||
| [2010/08/05 20:57:13] @ AimanA is now known as HouseAway | ||
| [2010/08/05 20:57:20] <znoG> confirmed the value of the variable through <%= scope.lookupvar("...") %> | ||
| [2010/08/05 20:59:15] @ Quit: gmcquillan: Quit: gmcquillan | ||
| [2010/08/05 20:59:21] @ jfreeman joined channel #puppet | ||
| [2010/08/05 21:03:07] @ gmcquillan joined channel #puppet | ||
| [2010/08/05 21:03:23] @ Quit: gmcquillan: Client Quit | ||
| [2010/08/05 21:04:03] <znoG> anyone? | ||
| [2010/08/05 21:06:01] <torrancew> znoG: try the logic outside of the <%= %> maybe? | ||
| [2010/08/05 21:07:28] <znoG> how so? | ||
| [2010/08/05 21:16:07] <torrancew> if blahblah <%= stuff-puppet-should-use %> | ||
| [2010/08/05 21:16:11] <torrancew> to be honest, that's a guess | ||
| [2010/08/05 21:16:31] @ nexx joined channel #puppet | ||
| [2010/08/05 21:19:27] <znoG> not sure I follow your example | ||
| [2010/08/05 21:20:21] @ Quit: bug: Quit: bug | ||
| [2010/08/05 21:23:39] @ Quit: Djelibeybi: Quit: Page closed | ||
| [2010/08/05 21:28:12] @ bug joined channel #puppet | ||
| [2010/08/05 21:29:18] @ axisys joined channel #puppet | ||
| [2010/08/05 21:34:12] @ physicspackage joined channel #puppet | ||
| [2010/08/05 21:35:03] @ Quit: nanliu: Quit: nanliu | ||
| [2010/08/05 21:37:02] @ tecto_ joined channel #puppet | ||
| [2010/08/05 21:38:34] @ Quit: physicspackage: Client Quit | ||
| [2010/08/05 21:50:23] @ Quit: randybias: Ping timeout: 248 seconds | ||
| [2010/08/05 21:52:58] @ Quit: tecto_: Read error: Operation timed out | ||
| [2010/08/05 21:57:19] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/05 21:59:12] @ Quit: bodepd: Quit: bodepd | ||
| [2010/08/05 21:59:24] @ Quit: franks_: Quit: ChatZilla 0.9.86 [Firefox 3.6.8/20100723085541] | ||
| [2010/08/05 22:17:07] @ Quit: nexx: Quit: quit | ||
| [2010/08/05 22:17:58] @ littleidea joined channel #puppet | ||
| [2010/08/05 22:18:42] @ imran_ joined channel #puppet | ||
| [2010/08/05 22:22:42] @ tecto_ joined channel #puppet | ||
| [2010/08/05 22:23:49] @ bodepd joined channel #puppet | ||
| [2010/08/05 22:23:50] @ Quit: imran_: Quit: imran_ | ||
| [2010/08/05 22:24:53] @ pinoyskull joined channel #puppet | ||
| [2010/08/05 22:33:51] @ Quit: lak: Quit: lak | ||
| [2010/08/05 22:34:54] @ gebi joined channel #puppet | ||
| [2010/08/05 22:36:50] @ bodepd left channel #puppet () | ||
| [2010/08/05 22:36:57] @ Quit: jangell: Quit: jangell | ||
| [2010/08/05 22:38:13] @ jangell joined channel #puppet | ||
| [2010/08/05 22:38:57] @ tecto__ joined channel #puppet | ||
| [2010/08/05 22:39:09] @ Quit: tecto__: Changing host | ||
| [2010/08/05 22:39:09] @ tecto__ joined channel #puppet | ||
| [2010/08/05 22:42:59] @ Quit: tecto_: Ping timeout: 252 seconds | ||
| [2010/08/05 22:54:12] @ Quit: \ask_: Remote host closed the connection | ||
| [2010/08/05 22:55:32] @ ceren joined channel #puppet | ||
| [2010/08/05 22:55:42] @ Quit: gebi: Ping timeout: 246 seconds | ||
| [2010/08/05 22:57:38] @ Quit: fredden: Quit: Leaving | ||
| [2010/08/05 22:58:42] @ lak joined channel #puppet | ||
| [2010/08/05 23:05:54] @ Quit: RussS: Quit: Leaving | ||
| [2010/08/05 23:06:13] @ tecto_ joined channel #puppet | ||
| [2010/08/05 23:06:13] @ Quit: tecto_: Changing host | ||
| [2010/08/05 23:06:13] @ tecto_ joined channel #puppet | ||
| [2010/08/05 23:06:52] @ Quit: tecto__: Ping timeout: 265 seconds | ||
| [2010/08/05 23:10:32] @ bodepd joined channel #puppet | ||
| [2010/08/05 23:13:39] @ Quit: bodepd: Client Quit | ||
| [2010/08/05 23:14:02] @ nakano is now known as nakano_ | ||
| [2010/08/05 23:14:33] @ mikey_p joined channel #puppet | ||
| [2010/08/05 23:15:39] @ mattock joined channel #puppet | ||
| [2010/08/05 23:16:31] @ _Groenleer joined channel #puppet | ||
| [2010/08/05 23:20:32] @ tecto__ joined channel #puppet | ||
| [2010/08/05 23:21:21] @ Quit: jfreeman: Read error: Operation timed out | ||
| [2010/08/05 23:23:55] @ Quit: tecto_: Ping timeout: 276 seconds | ||
| [2010/08/05 23:24:21] @ WALoeIII joined channel #puppet | ||
| [2010/08/05 23:29:27] @ _Groenleer is now known as Groenleer | ||
| [2010/08/05 23:29:29] @ Quit: Groenleer: Changing host | ||
| [2010/08/05 23:29:29] @ Groenleer joined channel #puppet | ||
| [2010/08/05 23:34:58] @ bodepd joined channel #puppet | ||
| [2010/08/05 23:35:05] @ bodepd left channel #puppet () | ||
| [2010/08/05 23:35:54] @ kenneho joined channel #puppet | ||
| [2010/08/05 23:36:41] @ Quit: gniks: Quit: Leaving. | ||
| [2010/08/05 23:44:18] @ sdog joined channel #puppet | ||
| [2010/08/05 23:44:20] @ nul0op joined channel #puppet | ||
| [2010/08/05 23:46:01] @ Quit: WALoeIII: Quit: Bai. | ||
| [2010/08/05 23:50:03] @ \ask joined channel #puppet | ||
| [2010/08/05 23:57:43] @ Quit: mikey_p: Quit: mikey_p |
Generated by irclog2html.py 2.8 by Marius Gedminas - find it at mg.pov.lt!