Re: [Puppet Users] noop "Out of sync" reporting

2010-09-26 Thread Alan Barrett
On Sun, 26 Sep 2010, James Turnbull wrote:
> Have you also seen the pseudo-Tripwire audit capability introduced in 2.6.0?
> http://www.puppetlabs.com/blog/all-about-auditing-with-puppet/

It would have been nice if this had been documented
somewhere.  The release notes for puppet-2.6.0 at

do not mention "audit".  The metaparameters documentation at
 does
not mention "audit".

--apb (Alan Barrett)

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] noop "Out of sync" reporting

2010-09-26 Thread John Warburton
On 27 September 2010 13:09, James Turnbull  wrote:

>
> Have you also seen the pseudo-Tripwire audit capability introduced in
> 2.6.0?
>
> http://www.puppetlabs.com/blog/all-about-auditing-with-puppet/
>
> That might interest too.
>
> Thanks James

No - I haven't seen the audit capability - but it looks like what I am
needing. It isn't mentioned in the Release Notes. Should I be looking
somewhere else?

Cheers

John

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] noop "Out of sync" reporting

2010-09-26 Thread James Turnbull

John Warburton wrote:

Thanks Dan

The subject line to Feature #3535 wasn't obvious that was what I was
looking for.

I have updated the feature with my reasons we need an out of sync report



John

Have you also seen the pseudo-Tripwire audit capability introduced in 2.6.0?

http://www.puppetlabs.com/blog/all-about-auditing-with-puppet/

That might interest too.

James Turnbull

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] noop "Out of sync" reporting

2010-09-26 Thread John Warburton
Thanks Dan

The subject line to Feature #3535 wasn't obvious that was what I was looking
for.

I have updated the feature with my reasons we need an out of sync report

Regards

John

On 27 September 2010 07:31, Dan Bode  wrote:

> Hi John,
>
> On Tue, Sep 21, 2010 at 10:44 PM, John Warburton wrote:
>
>> Hi All
>>
>> I am looking to report on all servers that are "Out of sync".
>>
>> Currently we run puppet in noop mode hourly, and so we get reports saying
>> there are X resources Out of sync.
>>
>
>
>
>
>> Unfortunately, because it is a noop, puppet reports those X resources out
>> of date as successfully applied, which makes Puppet Dashboard (downloaded
>> the HEAD this morning) think that everything is good and green, which isn't
>> what I was hoping for.
>>
>> - - !ruby/sym applied
>>   - Applied
>>   - 12
>> - - !ruby/sym out_of_sync
>>   - Out of sync
>>   - 12
>>
>> How do others report on "Out of sync", and will/does Dashboard (or
>> Foreman) support reporting noop Out of sync as an warning? My google, and
>> reading of issues/roadmaps were not illuminating
>>
>
> A ticket already exists for this feature. It may be worth noting that a
> differentiation between applied changes as opposed to reported changes (with
> noop) would be useful.
>
> http://projects.puppetlabs.com/issues/3535
>
>
>
>> Thanks
>>
>> John
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Puppet Users" group.
>> To post to this group, send email to puppet-us...@googlegroups.com.
>> To unsubscribe from this group, send email to
>> puppet-users+unsubscr...@googlegroups.com
>> .
>> For more options, visit this group at
>> http://groups.google.com/group/puppet-users?hl=en.
>>
>
>  --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-us...@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com
> .
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>



-- 
John Warburton
Ph: 0417 299 600
Email: jwarbur...@gmail.com

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] best way to include a variable in many modules ?

2010-09-26 Thread Nigel Kersten
On Sun, Sep 26, 2010 at 2:01 PM, Douglas Garstang
 wrote:
> On Sun, Sep 26, 2010 at 9:44 AM, Bruce Richardson 
> wrote:
>>
>> On Thu, Sep 23, 2010 at 08:31:26PM +0100, R.I.Pienaar wrote:
>> > > I have two sites with a small number of machines at each.  Each site
>> > > is
>> > > functionally identical.  I would like to set up a bunch of templates
>> > > for the various services at each site, with a handful of variables
>> > > that
>> > > indicate which site the service is configured for.  What would be
>> > > "best practice" way to accomplish this in Puppet ?
>> >
>> >
>> > You should consider using extlookup.
>> >
>> > http://docs.puppetlabs.com/references/2.6.1/function.html#extlookup
>>
>> Why?  It seems odd to be stepping outside the puppet DSL for something
>> so basic.
>
> The same could be said for puppet's awful variable scoping. Should be
> simple, but it's not. I'd be dead without extlookup.


Doug, have we got any bug reports or feature requests from you about this yet?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] exec and subsribe

2010-09-26 Thread Luc Suryo
Thanks Bruce!

On Sun, Sep 26, 2010 at 9:11 AM, Bruce Richardson wrote:

> On Fri, Sep 24, 2010 at 01:32:15PM -0700, Luc Suryo wrote:
> > Hello
> >
> > simple question ... if 2 or more EXEC subcribes to a file and that file
> is
> > changed would
> > then all the EXECs be run ?
>
> Yes - unless some other condition prevents it (e.g. a failed
> dependency).
>
> > or does it depend whatever the FILE notifies the
> > EXEC?
>
> No.  Notify and subscribe set up the same relationship, just like before
> and require.
>
> --
> Bruce
>
> Remember you're a Womble.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-us...@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com
> .
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>
>


-- 
-ls

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] noop "Out of sync" reporting

2010-09-26 Thread Dan Bode
Hi John,

On Tue, Sep 21, 2010 at 10:44 PM, John Warburton wrote:

> Hi All
>
> I am looking to report on all servers that are "Out of sync".
>
> Currently we run puppet in noop mode hourly, and so we get reports saying
> there are X resources Out of sync.
>




> Unfortunately, because it is a noop, puppet reports those X resources out
> of date as successfully applied, which makes Puppet Dashboard (downloaded
> the HEAD this morning) think that everything is good and green, which isn't
> what I was hoping for.
>
> - - !ruby/sym applied
>   - Applied
>   - 12
> - - !ruby/sym out_of_sync
>   - Out of sync
>   - 12
>
> How do others report on "Out of sync", and will/does Dashboard (or Foreman)
> support reporting noop Out of sync as an warning? My google, and reading of
> issues/roadmaps were not illuminating
>

A ticket already exists for this feature. It may be worth noting that a
differentiation between applied changes as opposed to reported changes (with
noop) would be useful.

http://projects.puppetlabs.com/issues/3535



> Thanks
>
> John
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-us...@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com
> .
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] best way to include a variable in many modules ?

2010-09-26 Thread Douglas Garstang
On Sun, Sep 26, 2010 at 9:44 AM, Bruce Richardson wrote:

> On Thu, Sep 23, 2010 at 08:31:26PM +0100, R.I.Pienaar wrote:
> > > I have two sites with a small number of machines at each.  Each site is
> > > functionally identical.  I would like to set up a bunch of templates
> > > for the various services at each site, with a handful of variables that
> > > indicate which site the service is configured for.  What would be
> > > "best practice" way to accomplish this in Puppet ?
> >
> >
> > You should consider using extlookup.
> >
> > http://docs.puppetlabs.com/references/2.6.1/function.html#extlookup
>
> Why?  It seems odd to be stepping outside the puppet DSL for something
> so basic.


The same could be said for puppet's awful variable scoping. Should be
simple, but it's not. I'd be dead without extlookup.

Doug.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: FreeBSD Puppet 2.6.1 odd core-dump

2010-09-26 Thread Russell Jackson

On 09/21/2010 12:47 PM, FreddieB wrote:

Splendid!
The time was off by months. Apparently FreeBSD's ntpd doesn't handle
this to well (it just quits) so an initial "ntpdate -b" got it back on
track, and after that both nptd and puppet works fine.



I've always set my machines to boot with ntpdate_enable="YES".

--
Russell A. Jackson 
Network Analyst
California State University, Bakersfield

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] best way to include a variable in many modules ?

2010-09-26 Thread Bruce Richardson
On Thu, Sep 23, 2010 at 08:31:26PM +0100, R.I.Pienaar wrote:
> > I have two sites with a small number of machines at each.  Each site is 
> > functionally identical.  I would like to set up a bunch of templates
> > for the various services at each site, with a handful of variables that 
> > indicate which site the service is configured for.  What would be
> > "best practice" way to accomplish this in Puppet ?
> 
> 
> You should consider using extlookup.
> 
> http://docs.puppetlabs.com/references/2.6.1/function.html#extlookup

Why?  It seems odd to be stepping outside the puppet DSL for something
so basic.

-- 
Bruce

If the universe were simple enough to be understood, we would be too
simple to understand it.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] exec and subsribe

2010-09-26 Thread Bruce Richardson
On Fri, Sep 24, 2010 at 01:32:15PM -0700, Luc Suryo wrote:
> Hello
> 
> simple question ... if 2 or more EXEC subcribes to a file and that file is
> changed would
> then all the EXECs be run ?

Yes - unless some other condition prevents it (e.g. a failed
dependency).

> or does it depend whatever the FILE notifies the
> EXEC?

No.  Notify and subscribe set up the same relationship, just like before
and require.

-- 
Bruce

Remember you're a Womble.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Best practice using puppet and SVN in a production environment

2010-09-26 Thread Bruce Richardson
On Sat, Sep 25, 2010 at 07:34:19AM -0700, Christian wrote:
> Hello community,
> 
> As you all know a good infrastructure deployment in production state
> should not involve much technical infrastructure staff anymore.
> Routine work should be able to perform by the users themselfs who
> should not know anything about the infrastructure implementation
> details.

I don't think I agree with this, but nothing in your message makes it
clear what you mean by "users".  What kind of systems are you managing,
what is the relationship between you and the users (are they people in
another department, customers or what?) and what are their skills?

-- 
Bruce

Hierophant: someone who remembers, when you are on the way down,
everything you did to them on the way up.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.