| [2010/08/08 00:21:02] @ Log started by gepetto | ||
| [2010/08/08 00:21:02] @ alcy joined channel #puppet | ||
| [2010/08/08 00:27:40] @ ckauhaus joined channel #puppet | ||
| [2010/08/08 00:32:22] @ Quit: ckauhaus: Ping timeout: 252 seconds | ||
| [2010/08/08 00:35:02] @ mattock joined channel #puppet | ||
| [2010/08/08 00:36:02] @ Quit: ceren: Quit: ceren | ||
| [2010/08/08 00:40:28] @ kuttan_ joined channel #puppet | ||
| [2010/08/08 00:42:46] @ kuttan_ left channel #puppet () | ||
| [2010/08/08 00:45:36] @ bgupta joined channel #puppet | ||
| [2010/08/08 00:46:13] @ jmccune joined channel #puppet | ||
| [2010/08/08 00:48:17] @ Quit: tuf: Quit: Look whos tuf now.. | ||
| [2010/08/08 00:48:27] @ Quit: BLZbubba: Ping timeout: 260 seconds | ||
| [2010/08/08 00:48:42] @ kuttan_ joined channel #puppet | ||
| [2010/08/08 00:48:44] @ BLZbubba joined channel #puppet | ||
| [2010/08/08 00:53:55] @ yannL joined channel #puppet | ||
| [2010/08/08 00:54:52] @ Quit: alcy: Quit: ChatZilla 0.9.86 [Firefox 3.6.8/20100722155716] | ||
| [2010/08/08 00:55:05] @ Quit: jmccune: Ping timeout: 245 seconds | ||
| [2010/08/08 01:01:15] @ ceren joined channel #puppet | ||
| [2010/08/08 01:08:52] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 01:11:58] @ littleidea joined channel #puppet | ||
| [2010/08/08 01:21:18] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 01:31:16] @ puppet001 joined channel #puppet | ||
| [2010/08/08 01:33:04] <puppet001> hi there | ||
| [2010/08/08 01:40:49] @ Quit: gniks: Quit: Leaving. | ||
| [2010/08/08 02:06:14] @ Quit: sdog: Changing host | ||
| [2010/08/08 02:06:14] @ sdog joined channel #puppet | ||
| [2010/08/08 02:15:11] @ alban2 joined channel #puppet | ||
| [2010/08/08 02:16:55] @ Quit: mclarke: Quit: mclarke | ||
| [2010/08/08 02:36:17] @ kuttan_ left channel #puppet () | ||
| [2010/08/08 02:36:25] <madduck> facter $factname should just work, right? | ||
| [2010/08/08 02:36:44] <madduck> facter | grep interfaces returns the interfaces fact; facter interfaces returns nothing (and exits with code 0) | ||
| [2010/08/08 02:36:47] <madduck> http://slexy.org/view/s20nbq5UoL | ||
| [2010/08/08 02:36:49] <kjetilho> madduck: unfortunately no | ||
| [2010/08/08 02:37:06] <Volcane> madduck: fixed in the next version of facter | ||
| [2010/08/08 02:37:11] <madduck> sweet | ||
| [2010/08/08 02:38:48] * madduck hopes #4431 will be fixed too | ||
| [2010/08/08 02:38:48] <gepetto> madduck: #4431 is http://projects.puppetlabs.com/issues/show/4431 "Facter - Bug #4431: interfaces does not include interfaces that do not end in a number - Puppet Labs" | ||
| [2010/08/08 02:40:33] <Volcane> madduck: i fixed the first bug, you can fix the second :P | ||
| [2010/08/08 02:40:44] <madduck> is there a way in which I can override facter's facter/util/ip.rb module? Just providing a site-facts/lib/facter/util/ip.rb file does not seem to have that effect | ||
| [2010/08/08 02:40:54] <madduck> Volcane: i am going to try a patch | ||
| [2010/08/08 02:43:09] @ Quit: alban2: Read error: Operation timed out | ||
| [2010/08/08 02:46:16] @ ceren_ joined channel #puppet | ||
| [2010/08/08 02:46:22] <madduck> Volcane: done. ;) http://slexy.org/raw/s2wckYDA47 | ||
| [2010/08/08 02:47:33] <madduck> (note how I updated my paste urls ;) | ||
| [2010/08/08 02:48:08] <madduck> now how do I best distribute the modified facter/util/ip.rb ? | ||
| [2010/08/08 02:49:53] @ Quit: ceren: Ping timeout: 252 seconds | ||
| [2010/08/08 02:50:23] <Volcane> other than just replacing the file i dont think there's a reliable override method | ||
| [2010/08/08 02:50:59] <madduck> you mean replace with a file resource? | ||
| [2010/08/08 02:51:07] <Volcane> something like that | ||
| [2010/08/08 02:51:12] <madduck> ew! | ||
| [2010/08/08 02:51:31] @ Quit: ceren_: Ping timeout: 276 seconds | ||
| [2010/08/08 02:52:19] <Volcane> yup | ||
| [2010/08/08 02:52:30] <Volcane> I've feature requests open that might improve that | ||
| [2010/08/08 02:53:03] <madduck> maybe ruby is nice and actually treats /usr/local/lib/site_ruby/1.8 like it should… | ||
| [2010/08/08 02:53:42] <Volcane> it does, but not all programs written in ruby do :) | ||
| [2010/08/08 02:54:59] <madduck> let's see | ||
| [2010/08/08 02:56:56] <madduck> oh lovely. meaning i have to ensure the parent directories. | ||
| [2010/08/08 02:57:09] * madduck swings a baseball bat, but then puts it down and surrenders | ||
| [2010/08/08 02:59:51] <madduck> /usr/lib/ruby/1.8/facter/interfaces.rb:14: uninitialized constant Facter::Util::IP (NameError) | ||
| [2010/08/08 03:01:06] @ alban2 joined channel #puppet | ||
| [2010/08/08 03:02:22] @ simplechat joined channel #puppet | ||
| [2010/08/08 03:02:33] <simplechat> hey is there any way to specify a common prefix for a file? | ||
| [2010/08/08 03:02:40] <simplechat> ie. this file must start with X, but can be grown on the client side? | ||
| [2010/08/08 03:02:50] <madduck> write a fact and use that | ||
| [2010/08/08 03:03:06] <simplechat> madduck, can i please have more information? | ||
| [2010/08/08 03:03:22] <madduck> simplechat: http://docs.puppetlabs.com/guides/custom_facts.html | ||
| [2010/08/08 03:03:53] <simplechat> cool :D | ||
| [2010/08/08 03:04:06] <simplechat> speaking of other useful things, is there any way to programattically generate parts of site.pp? | ||
| [2010/08/08 03:05:02] @ ceren joined channel #puppet | ||
| [2010/08/08 03:06:05] <madduck> simplechat: check out external nodes | ||
| [2010/08/08 03:06:23] <madduck> and http://git.madduck.net/v/puppet/reclass.git | ||
| [2010/08/08 03:06:48] <simplechat> external nodes? | ||
| [2010/08/08 03:07:10] <simplechat> hmmm | ||
| [2010/08/08 03:08:15] <madduck> http://lmgtfy.com/?q=puppet+external+nodes | ||
| [2010/08/08 03:08:35] <simplechat> not that, i just misparsed "and" | ||
| [2010/08/08 03:08:43] <simplechat> and thought you were linking me to it. (and was then very wtf) | ||
| [2010/08/08 03:08:52] <madduck> oh, sorry. | ||
| [2010/08/08 03:08:55] <simplechat> suffice to say, I came, I noobed, i learned | ||
| [2010/08/08 03:09:09] <simplechat> (and puppet is surprisingly cool) | ||
| [2010/08/08 03:09:32] <madduck> enjoy the innocence while it lasts | ||
| [2010/08/08 03:09:48] <simplechat> yeah? | ||
| [2010/08/08 03:10:08] <madduck> yeah | ||
| [2010/08/08 03:10:11] @ Quit: alban2: Quit: Leaving. | ||
| [2010/08/08 03:10:21] <simplechat> now that sounds like you've seen a few horror stories :) | ||
| [2010/08/08 03:10:56] @ alban2 joined channel #puppet | ||
| [2010/08/08 03:11:04] <madduck> … and yet I am still here | ||
| [2010/08/08 03:11:12] <simplechat> hmmmm | ||
| [2010/08/08 03:11:18] <simplechat> :) | ||
| [2010/08/08 03:11:32] <simplechat> madduck, got any "This might seem like a good idea at the time but don't..."'s? | ||
| [2010/08/08 03:12:01] <madduck> use modules, use environments, use an external node classifier and don't even think about nodes in site.pp | ||
| [2010/08/08 03:12:08] <madduck> embrace ruby | ||
| [2010/08/08 03:12:19] <simplechat> cool | ||
| [2010/08/08 03:12:21] <simplechat> :) | ||
| [2010/08/08 03:12:25] <madduck> and don't ask "why" questions. | ||
| [2010/08/08 03:12:31] <simplechat> why? | ||
| [2010/08/08 03:12:43] <madduck> ERECURSION | ||
| [2010/08/08 03:12:59] <simplechat> :D | ||
| [2010/08/08 03:13:16] <madduck> unlike fight club, we let you talk about puppet at least | ||
| [2010/08/08 03:13:26] <simplechat> just not why its doing things | ||
| [2010/08/08 03:13:39] <madduck> you might start to wonder or get angry | ||
| [2010/08/08 03:13:47] <simplechat> get angry? | ||
| [2010/08/08 03:13:52] <simplechat> does puppet run on slave labour? | ||
| [2010/08/08 03:16:44] <madduck> no ruby; you decide what's worse. | ||
| [2010/08/08 03:16:59] <simplechat> yeah | ||
| [2010/08/08 03:17:00] <simplechat> :( | ||
| [2010/08/08 03:17:04] * simplechat much prefers python | ||
| [2010/08/08 03:17:19] * madduck sneaks away | ||
| [2010/08/08 03:17:53] <simplechat> lol | ||
| [2010/08/08 03:19:01] @ happymcplaksin left channel #puppet ("ERC Version 5.3 (IRC client for Emacs)") | ||
| [2010/08/08 03:23:40] @ adrian_broher joined channel #puppet | ||
| [2010/08/08 03:28:53] <madduck> Volcane: while I am at it, I'll make that regexp even more generic | ||
| [2010/08/08 03:31:14] @ black`WASP joined channel #puppet | ||
| [2010/08/08 03:31:46] @ black`WASP left channel #puppet () | ||
| [2010/08/08 03:37:13] @ w00 joined channel #puppet | ||
| [2010/08/08 03:37:14] <madduck> /^+[.:]?\d*[.:]?\d*[.:]?\w*/ is maybe a bit excessive when trying to match interface names? | ||
| [2010/08/08 03:37:18] <madduck> /^+[.:]?\d*[.:]?\d*[.:]?\w*/ is maybe a bit excessive when trying to match interface names? | ||
| [2010/08/08 03:38:53] <madduck> wtf is it trying to match? interface aliases are :\d+ | ||
| [2010/08/08 03:39:02] <madduck> vnets are \.\d+ | ||
| [2010/08/08 03:39:04] @ Quit: alban2: Ping timeout: 240 seconds | ||
| [2010/08/08 03:39:16] <madduck> oh, a vnet of an alias?? | ||
| [2010/08/08 03:39:18] <madduck> oh dear | ||
| [2010/08/08 03:39:21] <kjetilho> are there any rules for the lables at all? | ||
| [2010/08/08 03:39:23] <madduck> and why the \w* at the end? | ||
| [2010/08/08 03:39:27] <madduck> kjetilho: no. | ||
| [2010/08/08 03:39:31] <madduck> no spaces basically | ||
| [2010/08/08 03:41:13] <madduck> i think that'll totally suffice too | ||
| [2010/08/08 03:41:42] <madduck> /^\S+/ | ||
| [2010/08/08 03:41:44] <madduck> /^\S+/ | ||
| [2010/08/08 03:44:47] <simplechat> hey madduck is there any nice way to debug external nodes? | ||
| [2010/08/08 03:44:57] <madduck> run the script directly? | ||
| [2010/08/08 03:45:12] <simplechat> when run directly it runs fine | ||
| [2010/08/08 03:45:15] <madduck> e.g. for me | ||
| [2010/08/08 03:45:16] <madduck> /etc/puppet/reclass/node_classifier -n /etc/puppet/nodes -r /etc/puppet/roles lotus.madduck.net | ||
| [2010/08/08 03:45:31] <madduck> might be a permissions problem then. | ||
| [2010/08/08 03:45:35] <simplechat> madduck, is there a complete spec? | ||
| [2010/08/08 03:45:39] <simplechat> it also runs as puppet user fine | ||
| [2010/08/08 03:45:40] <madduck> spec of what? | ||
| [2010/08/08 03:45:52] <madduck> check logs; run puppetmasterd with -d | ||
| [2010/08/08 03:45:55] <simplechat> with sudo -u puppet external.py (full path here) nodeshostname | ||
| [2010/08/08 03:46:03] <simplechat> err: Could not call: cannot generate tempfile `/etc/puppet/puppet20100808-2795-99scqt-9' | ||
| [2010/08/08 03:46:06] <simplechat> is what i end up with | ||
| [2010/08/08 03:46:09] <simplechat> but i don't know why | ||
| [2010/08/08 03:46:21] @ tuo_nick joined channel #puppet | ||
| [2010/08/08 03:46:28] <tuo_nick> ciao | ||
| [2010/08/08 03:46:30] <madduck> well, the puppet user cannot and should not be able to write a tmpfile to /etc/puppet | ||
| [2010/08/08 03:46:30] <tuo_nick> mimmi | ||
| [2010/08/08 03:46:34] <tuo_nick> !list | ||
| [2010/08/08 03:46:36] <madduck> use $TMPDIR or /tmp for that | ||
| [2010/08/08 03:46:42] @ tuo_nick left channel #puppet () | ||
| [2010/08/08 03:46:45] <simplechat> i'm not actually writing anything | ||
| [2010/08/08 03:47:19] <madduck> your external.py apparently is | ||
| [2010/08/08 03:47:29] @ Guest68545 joined channel #puppet | ||
| [2010/08/08 03:47:30] <madduck> or you have a config problem | ||
| [2010/08/08 03:47:41] <madduck> show puppet.conf and the external.py file (using a pastebin) | ||
| [2010/08/08 03:49:25] <madduck> Volcane: #4431 patch submitted | ||
| [2010/08/08 03:49:25] <gepetto> madduck: Volcane: #4431 is http://projects.puppetlabs.com/issues/show/4431 "Facter - Bug #4431: interfaces does not include interfaces that do not end in a number - Puppet Labs" | ||
| [2010/08/08 03:49:41] <Guest68545> hi | ||
| [2010/08/08 03:50:31] <simplechat> madduck, http://pastebin.ca/WfOXkivV | ||
| [2010/08/08 03:51:18] @ alcy joined channel #puppet | ||
| [2010/08/08 03:51:45] <madduck> simplechat: no idea, sorry. try strace -e open? | ||
| [2010/08/08 03:52:02] <simplechat> kk | ||
| [2010/08/08 03:52:27] <simplechat> is {} valid in yaml? | ||
| [2010/08/08 03:52:32] <madduck> yes | ||
| [2010/08/08 03:53:12] <simplechat> ok | ||
| [2010/08/08 03:53:18] <simplechat> madduck, its not opening anything | ||
| [2010/08/08 03:53:34] <madduck> sorry, i don't know. | ||
| [2010/08/08 03:54:35] <simplechat> hey madduck i'm directly printing the output | ||
| [2010/08/08 03:54:43] <simplechat> (just opening up and a single print statement) | ||
| [2010/08/08 03:54:45] <simplechat> and its still complaining | ||
| [2010/08/08 03:55:24] <simplechat> hey madduck would you mind showing me something of yours that works? | ||
| [2010/08/08 03:55:30] <simplechat> if it doesn't work on my system i at least know where to start | ||
| [2010/08/08 03:57:33] <madduck> simplechat: http://git.madduck.net/v/puppet/reclass.git | ||
| [2010/08/08 03:57:40] @ alban2 joined channel #puppet | ||
| [2010/08/08 03:57:43] <madduck> i need to write a documentation. :( | ||
| [2010/08/08 03:58:46] <simplechat> madduck, is there a temp file anywhere in how the node classifier works? | ||
| [2010/08/08 03:58:59] <madduck> don't know; don't think so. | ||
| [2010/08/08 03:59:08] <madduck> that would be terrible. | ||
| [2010/08/08 04:00:50] <simplechat> there are | ||
| [2010/08/08 04:00:54] <simplechat> this is freaking odd | ||
| [2010/08/08 04:01:03] @ Guest68545 left channel #puppet () | ||
| [2010/08/08 04:01:05] <simplechat> can you specify a temp file path in puppet's config? | ||
| [2010/08/08 04:01:23] <madduck> puppetd --genconfig | less | ||
| [2010/08/08 04:02:27] <simplechat> thanks | ||
| [2010/08/08 04:04:13] @ Quit: ceren: Quit: ceren | ||
| [2010/08/08 04:13:01] <simplechat> madduck, if my script fails out, will it go back to site.pp? | ||
| [2010/08/08 04:13:22] <madduck> no | ||
| [2010/08/08 04:13:31] <simplechat> damn | ||
| [2010/08/08 04:13:52] <madduck> you would not want that | ||
| [2010/08/08 04:14:08] <simplechat> err: Could not parse for environment production: Could not find file /etc/puppet/manifests/site.pp | ||
| [2010/08/08 04:14:13] <simplechat> so it still needs site.pp | ||
| [2010/08/08 04:14:39] @ Quit: abien: Ping timeout: 240 seconds | ||
| [2010/08/08 04:14:48] <madduck> yes, for defaults etc. | ||
| [2010/08/08 04:14:51] <madduck> it can be empty | ||
| [2010/08/08 04:14:59] <simplechat> ok | ||
| [2010/08/08 04:15:02] <simplechat> that makes sense | ||
| [2010/08/08 04:15:03] <madduck> i just suggest not to put any nodes in there | ||
| [2010/08/08 04:15:10] <simplechat> however all puppet configs have to come through via my script? | ||
| [2010/08/08 04:15:22] <simplechat> what about other random machines i want puppeted? | ||
| [2010/08/08 04:15:26] <madduck> makes sense? only because puppet decided to abuse single configuration files for completely different things. | ||
| [2010/08/08 04:15:34] <simplechat> yeah | ||
| [2010/08/08 04:15:36] <simplechat> makes more sense :) | ||
| [2010/08/08 04:15:39] <madduck> don't have random machines | ||
| [2010/08/08 04:15:50] <simplechat> ? | ||
| [2010/08/08 04:15:58] <madduck> or put logic to the script to map unknown machines to a default machine | ||
| [2010/08/08 04:16:00] <simplechat> so have a seperate puppet instance for that? | ||
| [2010/08/08 04:16:03] <madduck> I suggest not to do that | ||
| [2010/08/08 04:16:14] <madduck> just make an explicit configuration for every machine | ||
| [2010/08/08 04:16:21] <simplechat> yeah | ||
| [2010/08/08 04:16:38] <simplechat> pretty much i have a bunch of nodes with the same configuration and a gateway server i need to configure | ||
| [2010/08/08 04:16:50] <simplechat> should i run a separate puppet server for the gateway? | ||
| [2010/08/08 04:17:01] <madduck> no | ||
| [2010/08/08 04:17:09] <simplechat> define it in site.pp? | ||
| [2010/08/08 04:17:15] <madduck> no | ||
| [2010/08/08 04:17:18] <simplechat> or shove it all in my script? | ||
| [2010/08/08 04:17:26] <madduck> make your external script return something else for that node | ||
| [2010/08/08 04:17:35] <simplechat> ok | ||
| [2010/08/08 04:17:38] <simplechat> i get you | ||
| [2010/08/08 04:17:40] <madduck> with my reclass classifier you would probably define a role "router" | ||
| [2010/08/08 04:17:41] <simplechat> thanks :) | ||
| [2010/08/08 04:17:45] <madduck> and give that role to the router node | ||
| [2010/08/08 04:17:53] <madduck> and do all the necessary config in the router role file | ||
| [2010/08/08 04:19:07] <simplechat> ok | ||
| [2010/08/08 04:19:09] <simplechat> thanks :) | ||
| [2010/08/08 04:25:17] @ nexx joined channel #puppet | ||
| [2010/08/08 04:25:32] @ ceren joined channel #puppet | ||
| [2010/08/08 04:41:32] @ Naresh joined channel #puppet | ||
| [2010/08/08 05:13:07] @ Quit: alcy: Quit: KVIrc Insomnia 4.0.0, revision: 3900, sources date: 20100125, built on: 2010-02-15 08:27:55 UTC http://www.kvirc.net/ | ||
| [2010/08/08 05:17:10] @ cliff-hm joined channel #puppet | ||
| [2010/08/08 05:26:45] <shoot^> Hey all. I'm having some issues on configuring a Puppet on Ubuntu 10.04. I'm running two VMs, master and node1. Yesterday I was having issues with the packaged 0.24.4 so I installed 0.24.5 on both boxes, which introduced an "SSL_connect returned=1 errno=0" error. A bit of Googling suggested running Mongrel (with Apache) resolves this issue. | ||
| [2010/08/08 05:26:57] <simplechat> no | ||
| [2010/08/08 05:27:04] <simplechat> shoot^, can you give me more output? | ||
| [2010/08/08 05:27:35] <simplechat> i think i've seen this before | ||
| [2010/08/08 05:28:15] <shoot^> I'm now getting "err: Could not request certificate: SSL_connect returned=1 errno=0 state=SSLv3 read finished A: sslv3 alert handshake failure" | ||
| [2010/08/08 05:28:48] <shoot^> simplechat, what info can I give to shed some more light? :) | ||
| [2010/08/08 05:29:08] <simplechat> ah | ||
| [2010/08/08 05:29:12] <simplechat> could not request sertificate | ||
| [2010/08/08 05:29:13] <simplechat> hmmmm | ||
| [2010/08/08 05:29:16] <simplechat> odd | ||
| [2010/08/08 05:29:24] <simplechat> this is on two different servers? | ||
| [2010/08/08 05:29:28] <shoot^> yeah | ||
| [2010/08/08 05:29:31] <simplechat> and can you rm -rf the clients ssl dir | ||
| [2010/08/08 05:29:58] <shoot^> I can indeed (/var/lib/puppet/ssl) | ||
| [2010/08/08 05:30:16] @ kuttan_ joined channel #puppet | ||
| [2010/08/08 05:30:30] <shoot^> simplechat, Removed! Shall I fire up puppetd again? | ||
| [2010/08/08 05:30:58] <shoot^> sudo puppetd --onetime --waitforcert 60 --test | ||
| [2010/08/08 05:31:05] <simplechat> sure | ||
| [2010/08/08 05:31:08] <simplechat> and tell me what it says | ||
| [2010/08/08 05:31:16] <simplechat> pastebin full output | ||
| [2010/08/08 05:31:21] <simplechat> also i'd add in -d | ||
| [2010/08/08 05:31:22] <simplechat> for debug mode | ||
| [2010/08/08 05:34:51] <shoot^> simplechat, http://pastebin.com/tiytHwu6 | ||
| [2010/08/08 05:36:11] <simplechat> is your servers certificate name the same as the server name? | ||
| [2010/08/08 05:36:13] <simplechat> (ie. puppet) | ||
| [2010/08/08 05:36:16] @ pinoyskull joined channel #puppet | ||
| [2010/08/08 05:37:14] <shoot^> simplechat, how should I double check? | ||
| [2010/08/08 05:37:36] <simplechat> whats in your /etc/puppet/puppet.conf | ||
| [2010/08/08 05:37:38] <simplechat> in your server? | ||
| [2010/08/08 05:38:35] <shoot^> simplechat, there is no server name explicitly set serverside. The client is pointed to master.blah.blah | ||
| [2010/08/08 05:38:54] <shoot^> simplechat, is that the issue? :) | ||
| [2010/08/08 05:39:15] <simplechat> give me a second | ||
| [2010/08/08 05:39:17] <simplechat> i'll check mine :) | ||
| [2010/08/08 05:39:23] * simplechat is also a noob, but i do have a working isntance | ||
| [2010/08/08 05:39:25] <simplechat> *instacnce | ||
| [2010/08/08 05:39:44] <simplechat> i think it defaults to puppet | ||
| [2010/08/08 05:39:53] <simplechat> add an entrance into /etc/hosts for puppet on the client | ||
| [2010/08/08 05:40:00] <simplechat> so ping puppet pings the server | ||
| [2010/08/08 05:40:02] <simplechat> remove all ssl files | ||
| [2010/08/08 05:40:06] <simplechat> and run both sides anew | ||
| [2010/08/08 05:40:39] <shoot^> I've set the client server name in /etc/puppet/puppet.conf to master.blah.blah | ||
| [2010/08/08 05:40:51] <shoot^> with the relevant info in /etc/hosts | ||
| [2010/08/08 05:41:15] <simplechat> i'd check it with puppet first | ||
| [2010/08/08 05:41:20] <simplechat> becuase if it suddenly works you know what broke | ||
| [2010/08/08 05:42:00] <shoot^> ok, the client now has no server name defined... and I've entered a puppet entry in /etc/hosts | ||
| [2010/08/08 05:43:40] <shoot^> deleted SSL dirs on both server and client | ||
| [2010/08/08 05:43:46] <shoot^> now restarting puppetmasterd | ||
| [2010/08/08 05:45:06] <shoot^> simplechat, same issue: "err: Could not request certificate: SSL_connect returned=1 errno=0 state=SSLv3 read finished A: sslv3 alert handshake failure" on the client | ||
| [2010/08/08 05:45:22] <simplechat> ok then | ||
| [2010/08/08 05:45:34] <simplechat> change the hostname on the server side to puppet | ||
| [2010/08/08 05:45:36] <simplechat> rerun | ||
| [2010/08/08 05:45:40] <simplechat> (including deletes) | ||
| [2010/08/08 05:50:50] <shoot^> simplechat, same error | ||
| [2010/08/08 05:51:40] <shoot^> I'm wondering whether it is something to do with Apache? Or could it be puppet auth.conf issues? | ||
| [2010/08/08 05:52:56] <shoot^> Apache has logged: [Sun Aug 08 13:50:10 2010] [warn] RSA server certificate CommonName (CN) `puppet' does NOT match server name!? | ||
| [2010/08/08 05:55:50] <simplechat> are you using apache? | ||
| [2010/08/08 05:55:55] <simplechat> i just use it raw | ||
| [2010/08/08 05:56:11] <shoot^> yeah - I tried it raw but I was getting a different set of SSL_connect errors | ||
| [2010/08/08 05:56:30] <simplechat> try it raw for now | ||
| [2010/08/08 05:56:33] <simplechat> once that works switch over | ||
| [2010/08/08 05:56:58] <shoot^> raw, I was getting: "err: Could not request certificate: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A" | ||
| [2010/08/08 06:00:14] <shoot^> simplechat, HAHA! RAW WORKS! | ||
| [2010/08/08 06:00:17] <shoot^> heck yes. | ||
| [2010/08/08 06:00:32] <simplechat> now it works | ||
| [2010/08/08 06:00:38] <simplechat> why do you need nonraw? | ||
| [2010/08/08 06:00:49] <shoot^> well, eventually to balance the service | ||
| [2010/08/08 06:01:08] <shoot^> but this time, it was just to get around the "err: Could not request certificate: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A" | ||
| [2010/08/08 06:01:36] <shoot^> webrick falls over if more than 2 simultaneous requests are made | ||
| [2010/08/08 06:04:31] <Volcane> shoot^: use mongrel or passenger | ||
| [2010/08/08 06:04:52] <shoot^> Volcane, I was using mongrel, but Apache was acting as the proxy | ||
| [2010/08/08 06:04:52] * Volcane didnt scroll all the way up but thats well documented and works | ||
| [2010/08/08 06:05:01] <shoot^> and something was going awry | ||
| [2010/08/08 06:05:03] <Volcane> so you dont want apache? | ||
| [2010/08/08 06:05:08] <shoot^> no, I do | ||
| [2010/08/08 06:05:12] <Volcane> ok | ||
| [2010/08/08 06:05:20] <shoot^> but I'm getting webrick working first | ||
| [2010/08/08 06:05:22] <Volcane> mongrel doesnt speak ssl, so apache does all that | ||
| [2010/08/08 06:05:28] <shoot^> (so I know other issues from yesterday are resolved) | ||
| [2010/08/08 06:05:33] <simplechat> shoot^, varnish/haproxy | ||
| [2010/08/08 06:05:35] <simplechat> is what you want | ||
| [2010/08/08 06:05:48] <shoot^> Yeah, it seems Apache was causing issues of its own (handshake failure) | ||
| [2010/08/08 06:05:50] <Volcane> simplechat: i doubt it. | ||
| [2010/08/08 06:05:58] <simplechat> This is all http? | ||
| [2010/08/08 06:06:00] <simplechat> \https? | ||
| [2010/08/08 06:06:04] <shoot^> yup | ||
| [2010/08/08 06:06:24] <Volcane> simplechat: the problem is the webrick server is very inefficient, there's no point just haproxy'ing to lots of those (it works but its innefieint) | ||
| [2010/08/08 06:06:34] <Volcane> simplechat: where if you use passenger it all just works a ton better | ||
| [2010/08/08 06:06:41] <simplechat> kk | ||
| [2010/08/08 06:06:43] <simplechat> cool :) | ||
| [2010/08/08 06:06:47] <simplechat> i've got to work that out later on | ||
| [2010/08/08 06:06:59] <simplechat> Volcane, at what sort of level does that become required? | ||
| [2010/08/08 06:07:03] <Volcane> however, you'll never just be able to run 100 nodes at exactly the same time against 1 server (unless its seriously massive) | ||
| [2010/08/08 06:07:07] <Volcane> simplechat: 20 nodes. | ||
| [2010/08/08 06:07:20] <simplechat> kk | ||
| [2010/08/08 06:07:30] <simplechat> i was thinking more varnish would cache the config | ||
| [2010/08/08 06:07:31] <simplechat> :) | ||
| [2010/08/08 06:07:34] <Volcane> simplechat: its not quite hard and fast, but webrick is a developers webserver so all desktops dont need full webserving gear - so you can imagine how well it works for concurrent access | ||
| [2010/08/08 06:07:36] <simplechat> so it'd just come from cache | ||
| [2010/08/08 06:07:46] <simplechat> yeah | ||
| [2010/08/08 06:07:47] <simplechat> kk | ||
| [2010/08/08 06:08:14] <shoot^> simplechat / Volcane I've swapped my hostnames back over, but am now getting errors again:( | ||
| [2010/08/08 06:08:25] <shoot^> when server hostname is 'puppet' all seems dandy | ||
| [2010/08/08 06:08:37] <shoot^> with it fully qualified ('master.tomgillett.co.uk') the world ends | ||
| [2010/08/08 06:08:52] <shoot^> err: Could not request certificate: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol | ||
| [2010/08/08 06:09:36] @ alban21 joined channel #puppet | ||
| [2010/08/08 06:09:39] <Volcane> shoot^: you probably need to make sure its either in a vhost matching the certname (puppet by default) or if outside of a vhost then hostname might ahve to be puppet | ||
| [2010/08/08 06:09:41] <shoot^> have I missed a master config option somewhere? | ||
| [2010/08/08 06:10:00] <shoot^> Volcane, I've dropped Apache, and am just running Webrick for now | ||
| [2010/08/08 06:10:32] <Volcane> however | ||
| [2010/08/08 06:10:32] <Volcane> [Sun Aug 08 04:02:05 2010] [warn] RSA server certificate CommonName (CN) `puppet' does NOT match server name!? | ||
| [2010/08/08 06:10:41] <Volcane> mine does the same so i wouldnt be side lined by that eror | ||
| [2010/08/08 06:10:46] <Volcane> its fine, life goes on | ||
| [2010/08/08 06:11:08] <Volcane> shoot^: you sure nothing else is listening on that port? | ||
| [2010/08/08 06:11:44] @ Quit: alban2: Ping timeout: 252 seconds | ||
| [2010/08/08 06:11:57] @ ewdafa joined channel #puppet | ||
| [2010/08/08 06:12:03] <shoot^> Volcane, yeah - although telnet is immediately dropped | ||
| [2010/08/08 06:12:11] <Volcane> thats not good | ||
| [2010/08/08 06:13:15] <shoot^> Volcane, do I need to set the server name, on the puppet master? | ||
| [2010/08/08 06:15:20] <Volcane> nah just leave defaults, pastie.org your master puppet.conf pls | ||
| [2010/08/08 06:15:26] <Volcane> and how you run puppetmasterd | ||
| [2010/08/08 06:15:41] <shoot^> puppet.conf on the master? | ||
| [2010/08/08 06:16:12] <madduck> facter code is a mess! | ||
| [2010/08/08 06:16:19] <Volcane> shoot^: yes | ||
| [2010/08/08 06:16:28] <shoot^> http://pastebin.com/c2LkEyKh | ||
| [2010/08/08 06:16:28] <Volcane> madduck: its old and crusty indeed | ||
| [2010/08/08 06:16:41] <madduck> hm, crusty | ||
| [2010/08/08 06:16:54] <madduck> anyway, i have a patch that can replace ifconfig with iproute on linux | ||
| [2010/08/08 06:17:02] <madduck> half way towards making multi-ip facts happen | ||
| [2010/08/08 06:17:05] <madduck> and then ipv6 | ||
| [2010/08/08 06:17:12] <Volcane> shoot^: thats the whole puppet.conf and you have no puppetmasterd.conf etc? | ||
| [2010/08/08 06:17:23] <simplechat> madduck, i've heard a lot about iproute | ||
| [2010/08/08 06:17:24] <Volcane> madduck: neat | ||
| [2010/08/08 06:17:28] <simplechat> what exactly is it? | ||
| [2010/08/08 06:17:56] <shoot^> Volcane, there is also auth.conf and fileserver.conf ? | ||
| [2010/08/08 06:18:04] <Volcane> shoot^: thats fine | ||
| [2010/08/08 06:18:23] <madduck> simplechat: search the web for lartc | ||
| [2010/08/08 06:18:36] @ Quit: kubicek: Quit: kubicek | ||
| [2010/08/08 06:18:55] <simplechat> kk | ||
| [2010/08/08 06:20:03] <shoot^> Volcane, I'm confused as to why telnet instantly kills the connection... | ||
| [2010/08/08 06:20:21] <Volcane> shoot^: run the puppetmasterd in the foreground with debug on see what it says | ||
| [2010/08/08 06:20:28] <madduck> Volcane: do I check out facter and then submit git-send-email patches to the puppet mailing list? | ||
| [2010/08/08 06:21:12] <Volcane> madduck: i think so, you probably also need a ticket and branch set in the ticket. never really submitted much code to puppet myself | ||
| [2010/08/08 06:21:21] <madduck> oh dear | ||
| [2010/08/08 06:21:28] <madduck> i'll just make issues then | ||
| [2010/08/08 06:21:48] <shoot^> Volcane: http://pastebin.com/X0cpxJzJ | ||
| [2010/08/08 06:21:51] <Volcane> if you make an issue just set the branch to where yours is | ||
| [2010/08/08 06:22:11] <madduck> my branch is actually a module | ||
| [2010/08/08 06:22:15] <madduck> so i will just get the diffs out | ||
| [2010/08/08 06:22:30] <Volcane> shoot^: so its listening on the port and when you telnet does it say anything? | ||
| [2010/08/08 06:23:16] <simplechat> madduck, lartc doesn't seem to have any useful tutorials. It also doesn't seem to have been updated since 05? | ||
| [2010/08/08 06:23:37] <shoot^> Volcane: http://pastebin.com/p2btkNBf | ||
| [2010/08/08 06:23:51] <madduck> simplechat: that's ok. it's the definitive resource | ||
| [2010/08/08 06:24:05] <shoot^> Volcane, when I telnet, the puppetmaster says nothing... | ||
| [2010/08/08 06:24:11] <simplechat> both | ||
| [2010/08/08 06:24:19] <simplechat> madduck, hmmm | ||
| [2010/08/08 06:24:20] <simplechat> kk | ||
| [2010/08/08 06:24:22] <madduck> oh man, i have to fix *everything* | ||
| [2010/08/08 06:24:40] <simplechat> so i pull the cvs tree? | ||
| [2010/08/08 06:24:43] <Volcane> shoot^: and netstat -anp shows its the ruby process listening on that port? | ||
| [2010/08/08 06:25:04] <madduck> it's so awesome; IP facts are collected, pushed to array, but only the first argument is ever returned. | ||
| [2010/08/08 06:25:07] <madduck> pathetic | ||
| [2010/08/08 06:26:34] <shoot^> Volcane: "tcp 0 0 0.0.0.0:8140 0.0.0.0:* LISTEN 1510/ruby1.8" | ||
| [2010/08/08 06:26:48] <Volcane> shoot^: pretty weird | ||
| [2010/08/08 06:27:16] <Volcane> shoot^: and show what puppetd --test do pls | ||
| [2010/08/08 06:27:34] <shoot^> Volcane, puppetd --test on the client, or on the server? | ||
| [2010/08/08 06:28:01] <Volcane> client | ||
| [2010/08/08 06:28:05] <shoot^> Volcane, http://pastebin.com/Pgd4zb6u | ||
| [2010/08/08 06:28:52] <shoot^> Volcane, with host 'puppet' it seemed to work :S | ||
| [2010/08/08 06:29:22] <Volcane> if you set the server name to puppet you mean? the hostname of the OS? | ||
| [2010/08/08 06:29:50] <shoot^> hostname of OS + server name on client | ||
| [2010/08/08 06:30:32] <Volcane> I'm guessing you created certs at some point on the master with a weird cername or something | ||
| [2010/08/08 06:34:00] <Volcane> probably worth deleting everything in the ssl dirs on both machines | ||
| [2010/08/08 06:34:13] <shoot^> Volcane, aye, I just tried that | ||
| [2010/08/08 06:34:19] <Volcane> and making sure your OS isnt starting up the puppetmasterd with weird options | ||
| [2010/08/08 06:38:37] <shoot^> Volcane - in puppet.conf, what is the correct way to define the server name? | ||
| [2010/08/08 06:39:22] <Volcane> just leave it empty and it defaults to 'puppet' | ||
| [2010/08/08 06:39:24] <Volcane> thats the best | ||
| [2010/08/08 06:39:39] <Volcane> but that doesnt mean you OS has to be set to have a hostname of puppet | ||
| [2010/08/08 06:39:42] <shoot^> Volcane, it works at its defaults | ||
| [2010/08/08 06:40:00] <shoot^> so what if my server is a fully-qualified domain name? | ||
| [2010/08/08 06:40:10] <madduck> Volcane: ipaddress_wan => 77.109.139.83,77.109.139.94,1.2.3.4 | ||
| [2010/08/08 06:40:54] <Volcane> shoot^: then add a cname - its much better to do that if you ever need to change hostnames you dont need to rebuild all your ssl certs | ||
| [2010/08/08 06:41:04] <Volcane> madduck: nice | ||
| [2010/08/08 06:43:51] <shoot^> Volcane - you are right. As long as the default ('puppet') is used, it seems to work fine | ||
| [2010/08/08 06:44:08] <shoot^> but that means I always need a /etc/hosts entry for puppet on the client, right? | ||
| [2010/08/08 06:44:10] <Volcane> shoot^: the configs you showed me didnt suggest you were changing the puppet config to talk to a different server | ||
| [2010/08/08 06:44:27] <shoot^> Volcane, the configs were server side :) | ||
| [2010/08/08 06:44:31] <Volcane> shoot^: no, thats why resolv.conf has a search option and why CNAMEs exist | ||
| [2010/08/08 06:45:41] <shoot^> Volcane - ah, of course | ||
| [2010/08/08 06:45:42] <shoot^> many thanks! | ||
| [2010/08/08 06:46:08] <shoot^> simplechat, thanks to you too :) | ||
| [2010/08/08 06:46:30] <simplechat> all sorted? | ||
| [2010/08/08 06:47:03] <shoot^> sorted... until next time ;) | ||
| [2010/08/08 06:47:16] @ Quit: kolla: Remote host closed the connection | ||
| [2010/08/08 06:49:56] <simplechat> :) | ||
| [2010/08/08 06:50:59] <simplechat> hey? | ||
| [2010/08/08 06:51:09] <simplechat> grrr, windows stealing focus sucks | ||
| [2010/08/08 06:53:34] <madduck> Volcane: #4498 | ||
| [2010/08/08 06:53:34] <gepetto> madduck: Volcane: #4498 is http://projects.puppetlabs.com/issues/show/4498 "Facter - Bug #4498: ipaddress* facts do not include secondary IPs - Puppet Labs" | ||
| [2010/08/08 07:01:32] @ RedPepper left channel #puppet ("Verlassend") | ||
| [2010/08/08 07:16:15] @ Quit: ]oestewart: Ping timeout: 264 seconds | ||
| [2010/08/08 07:16:42] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 07:22:48] @ rmiller4pi8 joined channel #puppet | ||
| [2010/08/08 07:42:04] @ BRMatt joined channel #puppet | ||
| [2010/08/08 07:44:17] <BRMatt> Hi there, what's the difference between node classes and node groups in the puppet dashboard? | ||
| [2010/08/08 08:00:07] @ alban2 joined channel #puppet | ||
| [2010/08/08 08:01:57] @ rmiller4pi81 joined channel #puppet | ||
| [2010/08/08 08:03:08] @ kuttan_ left channel #puppet () | ||
| [2010/08/08 08:03:57] @ Quit: rmiller4pi8: Ping timeout: 246 seconds | ||
| [2010/08/08 08:04:04] @ Quit: alban21: Ping timeout: 276 seconds | ||
| [2010/08/08 08:06:27] @ alban21 joined channel #puppet | ||
| [2010/08/08 08:06:45] @ Quit: rmiller4pi81: Ping timeout: 245 seconds | ||
| [2010/08/08 08:07:44] @ rmiller4pi8 joined channel #puppet | ||
| [2010/08/08 08:08:39] @ alcy joined channel #puppet | ||
| [2010/08/08 08:08:51] @ Quit: alban2: Ping timeout: 246 seconds | ||
| [2010/08/08 08:11:28] @ rmiller4pi81 joined channel #puppet | ||
| [2010/08/08 08:12:14] @ Bass10 joined channel #puppet | ||
| [2010/08/08 08:12:15] @ Quit: rmiller4pi8: Ping timeout: 260 seconds | ||
| [2010/08/08 08:14:40] @ Quit: ]oestewart: Ping timeout: 240 seconds | ||
| [2010/08/08 08:16:37] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 08:34:40] @ Quit: cliff-hm: Ping timeout: 258 seconds | ||
| [2010/08/08 08:35:36] <madduck> ARGH! | ||
| [2010/08/08 08:36:38] <madduck> puppetd -t works fine, but the running puppetd daemon, when it wakes up, either says | ||
| [2010/08/08 08:36:41] <madduck> puppetd[8127]: Could not run Puppet configuration client: Could not retrieve local facts: uninitialized constant Facter::Util::IP | ||
| [2010/08/08 08:36:44] <madduck> or something about interning a string | ||
| [2010/08/08 08:37:34] @ zirpu joined channel #puppet | ||
| [2010/08/08 08:39:00] <madduck> uhuh! | ||
| [2010/08/08 08:39:01] <madduck> content changed '{md5}d85db128a7a76dbc4fd75648b5b360f6' to '{md5}d85db128a7a76dbc4fd75648b5b360f6' | ||
| [2010/08/08 08:39:05] <madduck> smart puppet! | ||
| [2010/08/08 08:51:15] <simplechat> wait | ||
| [2010/08/08 08:51:18] <simplechat> wtf? | ||
| [2010/08/08 08:55:04] @ Quit: elementai: Ping timeout: 276 seconds | ||
| [2010/08/08 08:55:21] @ Quit: simplechat: Quit: Leaving | ||
| [2010/08/08 09:01:12] <shoot^> Volcane, are you still around? | ||
| [2010/08/08 09:01:35] @ elementai joined channel #puppet | ||
| [2010/08/08 09:03:51] @ GaViT joined channel #puppet | ||
| [2010/08/08 09:05:54] @ Quit: puppet001: Quit: Page closed | ||
| [2010/08/08 09:07:16] @ Quit: elementai: Ping timeout: 240 seconds | ||
| [2010/08/08 09:09:36] @ Quit: ]oestewart: Ping timeout: 240 seconds | ||
| [2010/08/08 09:11:35] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 09:13:15] @ elementai joined channel #puppet | ||
| [2010/08/08 09:15:13] @ kolla joined channel #puppet | ||
| [2010/08/08 09:17:56] @ Quit: GaViT: Ping timeout: 240 seconds | ||
| [2010/08/08 09:17:59] @ Quit: f3ew: Ping timeout: 265 seconds | ||
| [2010/08/08 09:21:31] @ f3ew joined channel #puppet | ||
| [2010/08/08 09:27:28] <Naresh> anything to watch out for with puppet 2.6.0 + postgresql (async_storeconfig) + activemq ? | ||
| [2010/08/08 09:35:05] @ Quit: jhunter: Ping timeout: 245 seconds | ||
| [2010/08/08 09:36:52] @ jhunter joined channel #puppet | ||
| [2010/08/08 09:42:54] @ zorzar_ joined channel #puppet | ||
| [2010/08/08 09:46:52] @ Quit: zorzar__: Ping timeout: 276 seconds | ||
| [2010/08/08 09:55:01] @ mikey_p joined channel #puppet | ||
| [2010/08/08 09:57:55] @ Quit: mikey_p: Client Quit | ||
| [2010/08/08 09:58:07] @ littleidea joined channel #puppet | ||
| [2010/08/08 09:58:26] @ mikey_p joined channel #puppet | ||
| [2010/08/08 10:00:48] <jameswhite> if I have a file{ } that requires and exec, and that exec has an onlyif that returns 1, shouldn't the file not copy? | ||
| [2010/08/08 10:03:15] @ Quit: jaredrhine: Quit: Leaving. | ||
| [2010/08/08 10:04:00] @ Quit: Naresh: Ping timeout: 246 seconds | ||
| [2010/08/08 10:08:58] <alcy> jameswhite, yeah why what's wrong | ||
| [2010/08/08 10:11:13] @ Quit: bug: Quit: bug | ||
| [2010/08/08 10:17:26] @ Quit: Demosthenes: Quit: leaving | ||
| [2010/08/08 10:20:12] @ gebi joined channel #puppet | ||
| [2010/08/08 10:24:05] @ cyrus_mc joined channel #puppet | ||
| [2010/08/08 10:25:21] <cyrus_mc> Using the package resource, is there a way to check if a package is installed but instead of installing it, generate a message/error that can be sent in a report stating that X package is required. | ||
| [2010/08/08 10:26:28] @ alexine_dsouza joined channel #puppet | ||
| [2010/08/08 10:31:00] <shoot^> Folks, I keep getting "err: Could not request certificate: SSL_connect returned=1 errno=0 state=SSLv3 read finished A: sslv3 alert handshake failure" when attempting to connect to my puppet master, using mongrel and apache. Both client and server are running 0.25.5 on differnet Ubuntu 10.04 boxes, and work just fine with webrick, Any suggestions? | ||
| [2010/08/08 10:33:01] @ \ask joined channel #puppet | ||
| [2010/08/08 10:33:59] <cyrus_mc> Using the package resource, is there a way to check if a package is installed but instead of installing it, generate a message/error that can be sent in a report stating that X package is required. | ||
| [2010/08/08 10:34:03] @ Quit: alban21: Read error: Connection reset by peer | ||
| [2010/08/08 10:34:31] <alcy> shoot^, use the openssl s_client command to connect to the server, that will tell more about the problem | ||
| [2010/08/08 10:36:45] @ Quit: gebi: Ping timeout: 245 seconds | ||
| [2010/08/08 10:36:53] @ alban2 joined channel #puppet | ||
| [2010/08/08 10:37:40] <jameswhite> alcy: it's probably something I'm doing then, I just needed to know if that's how it "should work" thanks. | ||
| [2010/08/08 10:39:40] <shoot^> alcy, http://pastebin.com/r70ESPSR | ||
| [2010/08/08 10:42:51] @ Quit: cyrus_mc: Ping timeout: 246 seconds | ||
| [2010/08/08 10:43:33] <alcy> shoot^, do certificates exist under /var/lib/puppet/certificates ? what about apache/mongrel ssl configuration, are you sure its right ? | ||
| [2010/08/08 10:44:31] <shoot^> alcy, they do exist in /var/lib/puppet/certificates on the serverside... I *think* apache/mongrel is correct (mongrel instances are loading and apache is firing up without issue) | ||
| [2010/08/08 10:44:39] <shoot^> alcy, shall I pastebin my apache config? | ||
| [2010/08/08 10:45:31] <shoot^> alcy, certificates are absent on the client though | ||
| [2010/08/08 10:46:31] <alcy> shoot^, past the apache config relevant to the puppet master | ||
| [2010/08/08 10:46:49] <alcy> paste | ||
| [2010/08/08 10:50:55] <shoot^> alcy http://pastebin.com/cQ05jpBA | ||
| [2010/08/08 10:51:44] <shoot^> alcy, the only dubious section (as far as I understand) is SSLCARevocationFile - but if I comment that out (afaik, Puppet should function without), the errors persist | ||
| [2010/08/08 10:53:32] @ sako joined channel #puppet | ||
| [2010/08/08 10:53:39] <alcy> shoot^, you said clients don't have certificates. but in the apache config you have sslverifyclient set to "require" | ||
| [2010/08/08 10:54:16] <alcy> that could possibly be a problem | ||
| [2010/08/08 10:54:17] <shoot^> alcy, ahh, so if it is set to require, a client cannot request a certificate form the server? | ||
| [2010/08/08 10:55:11] <shoot^> alcy, heck | ||
| [2010/08/08 10:55:14] <shoot^> alcy, that was it | ||
| [2010/08/08 10:55:26] <alcy> I would guess certificates need to be in place first, signed by the ca authority (your server) and only then they can communicate | ||
| [2010/08/08 10:57:10] <shoot^> alcy, thank you so much :d | ||
| [2010/08/08 10:57:12] <shoot^> ^ :D | ||
| [2010/08/08 10:57:34] <alcy> shoot^, np | ||
| [2010/08/08 11:05:17] <sako> hey guys, so.. i have a puppet source code in front of me.. for a project.. | ||
| [2010/08/08 11:05:39] <sako> i have things split up into puppet/files/, puppet/manifests, puppet/modules, etc. | ||
| [2010/08/08 11:06:14] <sako> is there docs that run down how these files are executed? | ||
| [2010/08/08 11:08:22] <sako> like what file runs first etc.. | ||
| [2010/08/08 11:08:40] @ bug joined channel #puppet | ||
| [2010/08/08 11:11:29] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 11:12:40] @ Quit: BRMatt: Ping timeout: 276 seconds | ||
| [2010/08/08 11:13:29] @ mclarke joined channel #puppet | ||
| [2010/08/08 11:20:04] @ littleidea joined channel #puppet | ||
| [2010/08/08 11:22:59] @ Quit: mikey_p: Quit: mikey_p | ||
| [2010/08/08 11:34:33] @ gebi joined channel #puppet | ||
| [2010/08/08 11:34:46] @ Quit: ]oestewart: Ping timeout: 276 seconds | ||
| [2010/08/08 11:35:09] <sako> how would i do node specific configuration? | ||
| [2010/08/08 11:35:23] <sako> for example i have a node "admin.prod.com" | ||
| [2010/08/08 11:35:39] <sako> and i want to have certain crons added to just this server and not the other nodes | ||
| [2010/08/08 11:36:11] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 11:37:08] <sako> can i "inherit" from other classes? | ||
| [2010/08/08 11:37:30] <sako> like have a base crontab class and inherit that one and add on the few specific crons | ||
| [2010/08/08 11:37:35] <sako> or would that be subclassing | ||
| [2010/08/08 11:37:40] <sako> i got my oop all mixed up | ||
| [2010/08/08 11:38:07] <alcy> sako, http://docs.puppetlabs.com/ pretty much everything in there. check out the basic tutorial...should answer most of your queries | ||
| [2010/08/08 11:38:19] <sako> heading there now | ||
| [2010/08/08 11:38:21] <sako> thanks :) | ||
| [2010/08/08 11:38:51] @ gniks joined channel #puppet | ||
| [2010/08/08 11:39:00] <sako> alcy: where would i look for things like subclassing/inheritance | ||
| [2010/08/08 11:39:05] <sako> like the example above.. | ||
| [2010/08/08 11:40:27] <alcy> sako http://docs.puppetlabs.com/guides/language_tutorial.html | ||
| [2010/08/08 11:40:32] @ Quit: sdog: Quit: Leaving. | ||
| [2010/08/08 11:40:54] @ sdog joined channel #puppet | ||
| [2010/08/08 11:41:05] <sako> nice extends | ||
| [2010/08/08 11:41:09] <sako> love it! | ||
| [2010/08/08 11:41:14] <sako> thanks alcy | ||
| [2010/08/08 11:41:35] <sako> and thanks for the docs/tutorial, will help me more than just this question :) | ||
| [2010/08/08 11:42:10] <sako> also a random question.. on ubuntu, i don't think the latest puppet is on there.. you guys recommend compiling it? | ||
| [2010/08/08 11:42:19] <sako> or is there another better way to get the package for debian based distros? | ||
| [2010/08/08 11:42:22] <sako> like a backport or something | ||
| [2010/08/08 11:45:03] @ Quit: p3rror: Ping timeout: 248 seconds | ||
| [2010/08/08 11:45:30] <alcy> sako, as a start you don't need to worry about versions unless your distro is too ancient with very old releases. | ||
| [2010/08/08 11:48:16] @ sdog left channel #puppet () | ||
| [2010/08/08 11:51:44] @ Quit: bug: Quit: bug | ||
| [2010/08/08 11:56:03] @ Quit: \ask: Remote host closed the connection | ||
| [2010/08/08 11:56:30] <sako> so if i have a $var in templates.pp node "prod.site.com" { $cloude = 'prod' } | ||
| [2010/08/08 11:56:47] <sako> can i access $cloud from somewhere else? | ||
| [2010/08/08 11:58:01] <sako> i have a folder services/s_admin/manifests/init.pp that i need to do something like if $cloud == 'prod' do something | ||
| [2010/08/08 12:00:31] @ Quit: mattock: Ping timeout: 258 seconds | ||
| [2010/08/08 12:00:31] @ p3rror joined channel #puppet | ||
| [2010/08/08 12:03:29] @ Quit: alcy: Quit: KVIrc Insomnia 4.0.0, revision: 3900, sources date: 20100125, built on: 2010-02-15 08:27:55 UTC http://www.kvirc.net/ | ||
| [2010/08/08 12:04:24] @ \ask joined channel #puppet | ||
| [2010/08/08 12:07:17] @ mikey_p joined channel #puppet | ||
| [2010/08/08 12:09:08] @ alban21 joined channel #puppet | ||
| [2010/08/08 12:10:49] @ jmccune joined channel #puppet | ||
| [2010/08/08 12:11:11] @ Quit: mclarke: Quit: mclarke | ||
| [2010/08/08 12:12:15] @ Quit: alban2: Ping timeout: 248 seconds | ||
| [2010/08/08 12:12:49] <madduck> i have a definition and it instantiates a file resource from a template. I want to let one of the parameters take a string or an array of strings, which would result in an iteration. how? | ||
| [2010/08/08 12:13:28] <madduck> i am thinking something along the lines of "if param.type == string then param = [ param ] end" somewhere | ||
| [2010/08/08 12:13:36] <madduck> but where, and how does one do this in puppet or erb? | ||
| [2010/08/08 12:15:33] @ Quit: jmccune: Ping timeout: 260 seconds | ||
| [2010/08/08 12:25:31] @ Quit: ]oestewart: Ping timeout: 265 seconds | ||
| [2010/08/08 12:30:17] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 12:42:07] @ Quit: p3rror: Ping timeout: 248 seconds | ||
| [2010/08/08 12:52:09] @ Quit: mrsprinkles: Quit: mrsprinkles | ||
| [2010/08/08 12:53:08] @ mclarke joined channel #puppet | ||
| [2010/08/08 12:54:00] @ fluxdude joined channel #puppet | ||
| [2010/08/08 12:54:09] @ Quit: sako: Quit: leaving | ||
| [2010/08/08 12:54:09] @ Quit: fluxdude: Changing host | ||
| [2010/08/08 12:54:09] @ fluxdude joined channel #puppet | ||
| [2010/08/08 12:55:26] @ p3rror joined channel #puppet | ||
| [2010/08/08 12:55:32] @ jmccune joined channel #puppet | ||
| [2010/08/08 12:59:16] @ lak joined channel #puppet | ||
| [2010/08/08 12:59:43] @ Quit: Roksteady: Ping timeout: 260 seconds | ||
| [2010/08/08 13:00:36] @ Quit: yannL: Remote host closed the connection | ||
| [2010/08/08 13:02:23] @ ckauhaus joined channel #puppet | ||
| [2010/08/08 13:04:23] @ Quit: jmccune: Ping timeout: 260 seconds | ||
| [2010/08/08 13:09:37] @ Quit: ckauhaus: Quit: Leaving. | ||
| [2010/08/08 13:13:13] @ Quit: lak: Quit: lak | ||
| [2010/08/08 13:19:06] @ jab_doa joined channel #puppet | ||
| [2010/08/08 13:19:59] @ lak joined channel #puppet | ||
| [2010/08/08 13:25:31] @ Quit: e1mer: Quit: captured by martians | ||
| [2010/08/08 13:26:09] @ Quit: SpacePope: Ping timeout: 260 seconds | ||
| [2010/08/08 13:27:08] @ SpacePope joined channel #puppet | ||
| [2010/08/08 13:28:50] @ Quit: nul0op: Ping timeout: 265 seconds | ||
| [2010/08/08 13:42:00] @ nul0op joined channel #puppet | ||
| [2010/08/08 13:48:34] @ Quit: ]oestewart: Ping timeout: 276 seconds | ||
| [2010/08/08 13:48:52] @ Quit: fluxdude: Ping timeout: 276 seconds | ||
| [2010/08/08 13:49:01] @ ]oestewart joined channel #puppet | ||
| [2010/08/08 13:51:36] @ Quit: fcami: Quit: gone | ||
| [2010/08/08 13:51:44] @ fcami joined channel #puppet | ||
| [2010/08/08 14:00:04] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 14:03:49] @ Determinist joined channel #puppet | ||
| [2010/08/08 14:14:55] @ Quit: nexx: Quit: quit | ||
| [2010/08/08 14:26:36] @ bug joined channel #puppet | ||
| [2010/08/08 14:29:49] @ Quit: adrian_broher: Quit: Verlassend | ||
| [2010/08/08 14:30:22] @ BRMatt joined channel #puppet | ||
| [2010/08/08 14:30:58] @ sammi joined channel #puppet | ||
| [2010/08/08 14:33:35] @ clochette joined channel #puppet | ||
| [2010/08/08 14:33:37] @ Quit: clochette: Client Quit | ||
| [2010/08/08 14:41:24] @ fredden joined channel #puppet | ||
| [2010/08/08 15:08:20] @ Quit: kolla: Remote host closed the connection | ||
| [2010/08/08 15:12:31] @ olgagirl joined channel #puppet | ||
| [2010/08/08 15:13:48] @ Quit: olgagirl: Client Quit | ||
| [2010/08/08 15:20:13] @ Quit: ewdafa: Ping timeout: 276 seconds | ||
| [2010/08/08 15:25:47] @ Quit: BRMatt: Ping timeout: 260 seconds | ||
| [2010/08/08 15:25:52] @ cyrus_mc joined channel #puppet | ||
| [2010/08/08 15:26:14] <cyrus_mc> Using the package resource, is there a way to check if a package is installed but instead of installing it, generate a message/error that can be sent in a report stating that X package is required. | ||
| [2010/08/08 15:26:17] @ Quit: sammi: Remote host closed the connection | ||
| [2010/08/08 15:26:25] @ sammi joined channel #puppet | ||
| [2010/08/08 15:27:59] @ sammi left channel #puppet () | ||
| [2010/08/08 15:31:36] @ littleidea joined channel #puppet | ||
| [2010/08/08 15:43:19] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 15:45:24] @ Quit: lak: Quit: lak | ||
| [2010/08/08 15:54:20] @ kolla joined channel #puppet | ||
| [2010/08/08 15:54:28] @ Quit: jens_: Remote host closed the connection | ||
| [2010/08/08 16:06:03] @ Quit: cyrus_mc: Ping timeout: 264 seconds | ||
| [2010/08/08 16:17:05] @ cyrus_mc joined channel #puppet | ||
| [2010/08/08 16:21:23] @ bobinabottle joined channel #puppet | ||
| [2010/08/08 16:21:28] @ Quit: bobinabottle: Client Quit | ||
| [2010/08/08 16:21:39] @ bobinabottle joined channel #puppet | ||
| [2010/08/08 16:23:41] @ Quit: bobinabottle: Read error: Connection reset by peer | ||
| [2010/08/08 16:23:55] @ bobinabottle joined channel #puppet | ||
| [2010/08/08 16:26:24] @ Quit: Determinist: Quit: Leaving... | ||
| [2010/08/08 16:27:24] @ Quit: herdingcat: Quit: Leaving | ||
| [2010/08/08 16:34:36] @ Quit: cyrus_mc: Ping timeout: 246 seconds | ||
| [2010/08/08 16:48:08] @ samc joined channel #puppet | ||
| [2010/08/08 16:52:20] <samc> Hi all, wondering if someone could give me a hand with a puppet template ... I'm trying to do some stuff conditionally based on the class a machine is in, but I'm not able to get it to work for me | ||
| [2010/08/08 16:52:25] <samc> here's what I've tried - http://pastebin.com/v6GvEUip | ||
| [2010/08/08 16:52:48] @ MarkN1 left channel #puppet () | ||
| [2010/08/08 16:52:50] <samc> however it's only ever the 'else' clause that seems to be running, even when the host is in the management class | ||
| [2010/08/08 16:52:57] <samc> any suggestions? :D | ||
| [2010/08/08 16:57:18] @ dgillies joined channel #puppet | ||
| [2010/08/08 17:05:22] @ freshtonic joined channel #puppet | ||
| [2010/08/08 17:09:19] @ Quit: p3rror: Ping timeout: 248 seconds | ||
| [2010/08/08 17:10:07] @ spacex joined channel #puppet | ||
| [2010/08/08 17:12:08] @ PaulWay[w] joined channel #puppet | ||
| [2010/08/08 17:14:11] @ Quit: nb: Read error: Operation timed out | ||
| [2010/08/08 17:14:15] @ Quit: aaronyy: Read error: Operation timed out | ||
| [2010/08/08 17:17:03] @ Quit: colyte: Quit: ZNC - http://znc.sourceforge.net | ||
| [2010/08/08 17:17:09] @ Quit: aforgue: Ping timeout: 240 seconds | ||
| [2010/08/08 17:17:57] @ aaronyy joined channel #puppet | ||
| [2010/08/08 17:18:02] @ aforgue joined channel #puppet | ||
| [2010/08/08 17:18:09] @ Quit: jbartus: Ping timeout: 240 seconds | ||
| [2010/08/08 17:18:52] @ jbartus joined channel #puppet | ||
| [2010/08/08 17:19:03] @ colyte joined channel #puppet | ||
| [2010/08/08 17:25:13] @ nb joined channel #puppet | ||
| [2010/08/08 17:29:11] @ Quit: spheromak: Quit: leaving | ||
| [2010/08/08 17:52:07] @ cyrus_mc joined channel #puppet | ||
| [2010/08/08 17:52:55] @ Quit: spacex: Quit: Leaving. | ||
| [2010/08/08 17:54:06] @ Quit: ceren: Quit: ceren | ||
| [2010/08/08 17:55:17] @ p3rror joined channel #puppet | ||
| [2010/08/08 17:57:03] @ Quit: cyrus_mc: Ping timeout: 264 seconds | ||
| [2010/08/08 18:02:52] @ walrus joined channel #puppet | ||
| [2010/08/08 18:10:44] @ cliff-hm joined channel #puppet | ||
| [2010/08/08 18:40:20] <jameswhite> samc, when that happens to me I throw a <% classes.each do |current_class| -%><%= current_class %><% end -%> in there to make sure I'm not crazy | ||
| [2010/08/08 18:40:46] <jameswhite> I've found class load order matters | ||
| [2010/08/08 18:41:34] <jameswhite> like if that template segment is attempted when half of the classes have been included, only the first half will be active | ||
| [2010/08/08 18:41:41] <jameswhite> but ymmv | ||
| [2010/08/08 18:44:23] <samc> jameswhite: ahhhh, that makes sense | ||
| [2010/08/08 18:44:23] <samc> hmm | ||
| [2010/08/08 18:45:05] <samc> considering doing it with the hostname instead .. it's not quite as elegant but there'll only ever be one host that'll match the first section :) | ||
| [2010/08/08 18:45:10] <samc> thanks for the info anyway | ||
| [2010/08/08 18:46:39] @ Quit: jab_doa: Quit: Verlassend | ||
| [2010/08/08 18:52:18] @ cyrus_mc joined channel #puppet | ||
| [2010/08/08 18:52:39] @ Quit: cyrus_mc: Client Quit | ||
| [2010/08/08 18:53:55] @ Quit: yeled: Ping timeout: 260 seconds | ||
| [2010/08/08 18:54:55] @ yeled joined channel #puppet | ||
| [2010/08/08 19:12:31] @ Quit: carlasouza: Ping timeout: 248 seconds | ||
| [2010/08/08 19:14:00] @ e1mer joined channel #puppet | ||
| [2010/08/08 19:14:03] @ Quit: e1mer: Changing host | ||
| [2010/08/08 19:14:03] @ e1mer joined channel #puppet | ||
| [2010/08/08 19:15:23] @ zerd joined channel #puppet | ||
| [2010/08/08 19:15:58] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 19:17:16] @ Quit: alexine_dsouza: Read error: Connection reset by peer | ||
| [2010/08/08 19:22:23] @ Quit: yeled: Ping timeout: 260 seconds | ||
| [2010/08/08 19:23:06] @ yeled joined channel #puppet | ||
| [2010/08/08 19:23:40] @ Quit: mikey_p: Quit: mikey_p | ||
| [2010/08/08 19:36:19] @ Quit: gebi: Ping timeout: 276 seconds | ||
| [2010/08/08 19:36:34] @ e1mer joined channel #puppet | ||
| [2010/08/08 19:37:12] @ carla joined channel #puppet | ||
| [2010/08/08 19:38:32] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 19:56:48] @ e1mer joined channel #puppet | ||
| [2010/08/08 20:00:29] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 20:04:37] @ spacex joined channel #puppet | ||
| [2010/08/08 20:11:14] @ Quit: carla: Quit: damn power loss =/ | ||
| [2010/08/08 20:12:12] @ e1mer joined channel #puppet | ||
| [2010/08/08 20:16:55] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 20:38:26] @ e1mer joined channel #puppet | ||
| [2010/08/08 20:40:45] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 20:57:21] @ e1mer joined channel #puppet | ||
| [2010/08/08 20:58:55] @ ceren joined channel #puppet | ||
| [2010/08/08 20:59:53] @ littleidea joined channel #puppet | ||
| [2010/08/08 21:00:47] @ nmi_ joined channel #puppet | ||
| [2010/08/08 21:02:27] @ Quit: e1mer: Read error: Connection reset by peer | ||
| [2010/08/08 21:03:12] @ Quit: nmi_: Client Quit | ||
| [2010/08/08 21:10:01] @ Quit: ceren: Quit: ceren | ||
| [2010/08/08 21:10:04] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 21:11:42] @ Naresh joined channel #puppet | ||
| [2010/08/08 21:11:45] @ Quit: cliff-hm: Ping timeout: 258 seconds | ||
| [2010/08/08 21:12:05] @ ceren joined channel #puppet | ||
| [2010/08/08 21:12:32] @ Quit: gniks: Quit: Leaving. | ||
| [2010/08/08 21:19:07] @ Quit: Bass10: Ping timeout: 276 seconds | ||
| [2010/08/08 21:20:39] @ littleidea joined channel #puppet | ||
| [2010/08/08 21:20:40] @ Quit: ceren: Quit: ceren | ||
| [2010/08/08 21:40:22] @ Quit: littleidea: Quit: littleidea | ||
| [2010/08/08 21:40:33] @ jmccune joined channel #puppet | ||
| [2010/08/08 21:50:28] @ Quit: jmccune: Ping timeout: 258 seconds | ||
| [2010/08/08 21:54:45] @ alcy joined channel #puppet | ||
| [2010/08/08 21:57:34] <alcy> this error is strange ? http://pastie.org/1081171 it says I cannot redefine resource in xyz.pp because it is already defined in xyz.pp ?! | ||
| [2010/08/08 21:58:42] @ gniks joined channel #puppet | ||
| [2010/08/08 22:01:20] <alcy> any clue folks ? | ||
| [2010/08/08 22:04:21] @ abien joined channel #puppet | ||
| [2010/08/08 22:10:29] <alcy> its an exec resource inside a define that issues a sleep command for 5 seconds. | ||
| [2010/08/08 22:10:34] @ Quit: doubleukay: Ping timeout: 240 seconds | ||
| [2010/08/08 22:12:39] @ doubleukay joined channel #puppet | ||
| [2010/08/08 22:19:35] @ gm1959 joined channel #puppet | ||
| [2010/08/08 22:20:43] @ ckauhaus joined channel #puppet | ||
| [2010/08/08 22:20:47] <gm1959> what's the right way to 'if defined <module-type>' in a erb-style template. specifically, this is for a set of includes for a nagios nrpe file if and only if the node is a 'database style' node | ||
| [2010/08/08 22:23:56] @ ewdafa joined channel #puppet | ||
| [2010/08/08 22:29:45] <gm1959> would it be something like if classes.includes? <class-name> | ||
| [2010/08/08 22:35:38] @ e1mer joined channel #puppet | ||
| [2010/08/08 22:36:57] @ ceren joined channel #puppet | ||
| [2010/08/08 22:37:25] @ yannL joined channel #puppet | ||
| [2010/08/08 22:41:47] @ tessier_ is now known as tessier | ||
| [2010/08/08 22:42:53] @ Quit: ckauhaus: Ping timeout: 252 seconds | ||
| [2010/08/08 22:44:37] @ nexx joined channel #puppet | ||
| [2010/08/08 23:03:06] @ mattock joined channel #puppet | ||
| [2010/08/08 23:03:28] @ Quit: fredden: Remote host closed the connection | ||
| [2010/08/08 23:03:58] @ ckauhaus joined channel #puppet | ||
| [2010/08/08 23:07:07] @ Quit: devicenull: Read error: Connection reset by peer | ||
| [2010/08/08 23:07:45] @ Quit: nul0op: Ping timeout: 265 seconds | ||
| [2010/08/08 23:21:41] @ PaulWay[w] left channel #puppet ("I must go, there are too many tangrams on this channel.") | ||
| [2010/08/08 23:22:12] @ littleidea joined channel #puppet | ||
| [2010/08/08 23:23:01] @ mclarke left channel #puppet () | ||
| [2010/08/08 23:35:03] @ Quit: spacex: Quit: Leaving. | ||
| [2010/08/08 23:36:32] @ sdog joined channel #puppet | ||
| [2010/08/08 23:39:09] @ Quit: sdog: Changing host | ||
| [2010/08/08 23:39:10] @ sdog joined channel #puppet | ||
| [2010/08/08 23:39:54] @ Quit: ckauhaus: Quit: Leaving. | ||
| [2010/08/08 23:42:01] @ pmorillo joined channel #puppet | ||
| [2010/08/08 23:42:03] @ mikey_p joined channel #puppet | ||
| [2010/08/08 23:43:09] @ jmccune joined channel #puppet | ||
| [2010/08/08 23:52:40] @ Quit: jmccune: Ping timeout: 240 seconds |
Generated by irclog2html.py 2.8 by Marius Gedminas - find it at mg.pov.lt!