Re: [Puppet Users] large files hierarchy - per module or monolithic?
On Mon, Mar 22, 2010 at 10:50 PM, John Warburton jwarbur...@gmail.com wrote: The issue isn't organising puppet, but dealing with a global team of 50 people who may or may not really understand what they are dealing with I was thinking that rather than find out too late that someone has tried to manage the same file in muliple modules, I was wondering if putting all file sunder the same tree might make it a little easier for less adept puppet users? You shouldn't find out until too late though? If you have duplicate resources in your manifests, they should fail to compile. Do you use VCS $Id$ tags? I find those make it reasonably clear when a file has been pushed centrally. John On 23 March 2010 13:17, Ohad Levy ohadl...@gmail.com wrote: Why not simply using inheritance? or alternativly, have a source search order? e.g. find the first files it find. in moduleA, modubleB, common if you really need to manage different parts of the file in different modules, you might want to look for volcane concat module. cheers, Ohad On Tue, Mar 23, 2010 at 8:23 AM, John Warburton jwarbur...@gmail.com wrote: Hi All I've done a small scale puppet (130 servers) implementation per the book and had my files hierarchy under each module: modules/module1/files modules/module2/files modules/module3/files etc This worked fine because we only had a small number of people working on the project and a small number of files to manage. I am now looking at massively upscaling to have puppet run on thousands of servers, with a global admin staff of about 50, and manage more than 6000 files (variants and unique instances). In a previous life, I've used cfengine with a large file hierarchy spread over multiple modules and had to manage issues where differing modules wanted to manage the same file. Identifying the issue, and refactoring modules took a lot of time and effort - and that was with an admin team of 5 all in the same office. I am thinking that a monolithic module (call it ALL_FILES) that managed all files and templates will be the way to go, so that it is more visible if a file is already being managed, given the size and spread of admins: modules/ALL_FILES/files Does anyone have any opinion or experiences they wish to share? Thanks John -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- John Warburton Ph: 0417 299 600 Email: jwarbur...@gmail.com -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- nigel -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Templates : about puppet syntax
Yes i intended to pass a variable to a class through node definition.
Could you please show me an example of the syntax please ?
Message initial
De: Michael DeHaan mich...@reductivelabs.com
Reply-to: puppet-users@googlegroups.com
À: puppet-users@googlegroups.com
Sujet: Re: [Puppet Users] Templates : about puppet syntax
Date: Mon, 22 Mar 2010 16:40:36 -0400
Modules can't currently take parameters (I think you intend to really
pass parameters to a class, not a module, right?); they can however make
use of variables, whether set by an external nodes classifier or in
site.pp.
Parameterized classes, however, are coming soon and would do what you
want. For now I'd just use a variable.
--Michael
On Mon, Mar 22, 2010 at 3:33 PM, Smain Kahlouch smain...@gmail.com
wrote:
Hi,
I just have a question about puppet syntax.
I would like to give a parameter to my ldap module.
In the node definition i would like to specify the domain.
Example :
ldapnode {
include ldap::master::domain(domain.tld)
}
And in the manifest :
define ldap::master::domain() {...}
but i don't know how to do it.
Could you please help me ?
Regards,
Grifith
--
You received this message because you are subscribed to the
Google Groups Puppet Users group.
To post to this group, send email to
puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to puppet-users
+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
--
You received this message because you are subscribed to the Google
Groups Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to puppet-users
+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] large files hierarchy - per module or monolithic?
On Tue, Mar 23, 2010 at 2:40 PM, Nigel Kersten nig...@google.com wrote: Do you use VCS $Id$ tags? I find those make it reasonably clear when a file has been pushed centrally. I find the $id$ tags sometimes to be anonying, as if someone is checking out the files via https or ssh the file url changes and hence trigger puppet to replace the file... cheers, Ohad -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Re: certificates
Thanks a lot, it's more clear now :) But I have another ssl question... When a client try to establish a connection with the master, is there a double check ? I mean, does the client verify the master authenticity and reciprocally ? --Arnauld -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Templates : about puppet syntax
On Mon, Mar 22, 2010 at 7:33 PM, Smain Kahlouch smain...@gmail.com wrote:
I would like to give a parameter to my ldap module.
In the node definition i would like to specify the domain.
Example :
ldapnode {
include ldap::master::domain(domain.tld)
}
And in the manifest :
define ldap::master::domain() {...}
but i don't know how to do it.
Could you please help me ?
Do you mean something like:
node ldapnode {
$domain = domain.tld
include ldap::master::domain
}
.
class ldap::master::domain {
# ... use value of $domain here
}
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Source and Template file defaults
Douglas Garstang wrote:
On Mon, Mar 22, 2010 at 7:15 PM, Ohad Levy ohadl...@gmail.com wrote:
Hmm.. Puppet does not support going over multiple templates like it does in
plain files.
maybe there is even a feature request for it ;)
Aw crap. I've been told that twice in the last few days. Is there
another way I could emulate this functionality, because I really
really need it.
You could do it like this:
$templ = file(/config/foo/xyzzy.$fqdn.erb,
/config/foo/xyzzy.default.erb)
$content = inline_template($templ)
file {
/my/file: content = $content;
}
Unfortunately, the file() function requires paths to be specified with
an absolute path, and doesn't look up paths either via the fileserver.conf
modules (like puppet:/// URLs do), or modules in your manifests (like the
template() function do). So, it can be done, but it's not very nice.
/Bellman
--
You received this message because you are subscribed to the Google Groups Puppet
Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] [Puppet-Users] Exported resources doesn't seem to work
Hey, I'm trying to use the simple ssh known host example in the puppet wiki to get exported resources working...but somehow it fails. I'd say my problem is similar to this one: http://groups.google.com/group/puppet-users/browse_thread/thread/ec35aa873f81b759/0ac29daa7aacd86c?lnk=gstq=exported+resources#0ac29daa7aacd86c But that one was nearly one year ago and seemed to be fixed... I'm using Version 0.25.4 on OpenSuse 11.1 and I run into the same problems...I have entries in fact_names. fact_values and hosts but the other tables like resources are empty. Puppetmasterd reports: debug: Scope(Class[allgemein::knownhost]): Collected 1 Sshkey resource in 0.00 seconds debug: Scope(Class[allgemein::knownhost]): Collected 0 Sshkey resources in 0.00 seconds debug: Scope(Class[allgemein::knownhost]): Collected 0 Sshkey resources in 0.00 seconds I followed step by step the manual to configure stored configs, etc... I use mysql as database and this are the packages I installed via repository: libmysqlclient_r15-5.0.67-12.16.1 libmysqlclient15-5.0.67-12.16.1 mysql-client-5.0.67-12.16.1 mysql-5.0.67-12.16.1 ruby-mysql-2.7.4-1.101 I'm rather new to puppet so I can't tell that in previous versions exported resources worked for me. When i ran puppetmaster in debug mode I also saw this warning: This method is deprecated and will be removed on the next release. Use 'publish' instead But I can't tell where that comes from...Maybe the message shows up because I'm using the ssh::auth module? I appreciate any help christian -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Will a 0.25 client work w/ 0.24 server?
I'm using the latest stable build of 0.24 on my servers. The puppetmaster runs on 0.24 as well. Prior to upgrading, I would like to test 0.25 to make sure all is well. When trying to connect a 0.25 client to my puppetmaster, it doesn't do anything. No certs were handed. Command Line syntax: puppetd --server PUPPETMASTER --waitforcert 60 --test I go on the puppetmaster server and run puppetca --list and see nothing. On the client, I get the following messages... warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Will a 0.25 client work w/ 0.24 server?
No. On Tue, Mar 23, 2010 at 8:11 AM, sdotsen samnang@gmail.com wrote: I'm using the latest stable build of 0.24 on my servers. The puppetmaster runs on 0.24 as well. Prior to upgrading, I would like to test 0.25 to make sure all is well. When trying to connect a 0.25 client to my puppetmaster, it doesn't do anything. No certs were handed. Command Line syntax: puppetd --server PUPPETMASTER --waitforcert 60 --test I go on the puppetmaster server and run puppetca --list and see nothing. On the client, I get the following messages... warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- nigel -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Will a 0.25 client work w/ 0.24 server?
Simple answer, don't do it. :) Do yourself a favour and upgrade the server first. Older versioned clients can connect to a server running newer version. -LOhit On Tue, Mar 23, 2010 at 8:41 PM, sdotsen samnang@gmail.com wrote: I'm using the latest stable build of 0.24 on my servers. The puppetmaster runs on 0.24 as well. Prior to upgrading, I would like to test 0.25 to make sure all is well. When trying to connect a 0.25 client to my puppetmaster, it doesn't do anything. No certs were handed. Command Line syntax: puppetd --server PUPPETMASTER --waitforcert 60 --test I go on the puppetmaster server and run puppetca --list and see nothing. On the client, I get the following messages... warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. warning: peer certificate won't be verified in this SSL session. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.compuppet-users%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- LOhit -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Package Providers for OD X Server
We are running puppetmasterd on a Mac OS X server (10.5) with passenger. We only manage clients, not servers. I'm actually working a paper I will deliver in May at the National Lab IT Summit on how we implemented puppet at Los Alamos. I'm working no on getting it all working with a 10.6 server. Life is s much easier now that I can run server in a VM. How did I ever live without snapshots? --- Thanks, Allan Marcus 505-667-5666 On Mar 15, 2010, at 2:12 PM, Gary Larizza Jr. wrote: Hi Everyone, I'm curious to see how many people are running puppetmasterd on OS X Server. I'm trying to cement a recipe for my puppetmasters (10.5 Servers), and I'm finding that many modules port over well but certain things fall short due to the Mac's package providers. Visiting here -- http://docs.reductivelabs.com/references/stable/type.html#package It looks like appdmg, pkgdmg, and darwinport are the most viable providers for OS X. Appdmg and pkgdmg are great for .pkg or application-encapsulated disk images - but what are people doing when they need to install something from source - such as Nagios or NRPE? Are you using the darwinport provider and pulling NRPE from there? Maybe creating your own custom .pkg installer? Pulling an NRPE tarball from a puppetmaster and running a series of execs? Before I experiment, I'm interested to see how others have tackled that question. Thanks! -Gary -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. smime.p7s Description: S/MIME cryptographic signature
[Puppet Users] Changing multiple files
Hello,
I am trying to check for each enabled repo in /etc/yum.repos.d/ that
the gpgcheck is set to 1. I wanted to do this with Augeas, but I
cant seem to get it to work. I tried something like the following but
it does not work.
augeas{ /etc/yum.repos.d-gpgcheck :
context = match /files/etc/yum.repos.d//*[enabled
='1'],
changes = set gpgcheck 1,
}
Anyone have any ideas on how to accomplish this?
Thank you
John Searles
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Quiesce Puppet?
ls -l /var/lib/puppet/state/puppetdlock (path may vary..) If its 0 bytes, either you ran out of disk space or its --disable'd. If its got a pid, that is the puppet daemon pid that is running an update. If it is missing, either puppet is not running at all or it is not running an update. On Fri, Mar 19, 2010 at 5:44 PM, Douglas Garstang doug.garst...@gmail.comwrote: On Fri, Mar 19, 2010 at 2:33 PM, Alan Sparks aspa...@doublesparks.net wrote: Douglas Garstang wrote: Is there a way to quiesce the puppet daemon, such that it stays running, but does not run updates, until instructed again to do so? We have puppet deploying our software, and would like to quiesce puppetd so that it doesn't restart services etc until after the upgrade is done. Doug. Use puppetd --disable and puppetd --enable. I... guess... that will do. Not ideal though as it stops puppet from running new updates by making it think it's already running. It also doesn't log to syslog that it's currently disabled, so it makes it tough to see if it's been running for a long time and is completely borked, or just locked for an upgrade. Doug -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.compuppet-users%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] templatedir for environment or for module?
I am confused about the template dir in the module/{modulename}/ dir
Does the autoloader look in /env1/modules/{modulename}/templates/
automatically, or do I need to refer to the template by its full path?
http://projects.reductivelabs.com/projects/puppet/wiki/Puppet_Templating
states that a tempaltedir needs to be defined for the environment, not the
module.
I'm confused.
---
Thanks,
Allan Marcus
505-667-5666
On Mar 22, 2010, at 5:24 PM, Allan Marcus wrote:
hello,
Is this directory structure for modules still recommended, or is there a
better way?
http://projects.reductivelabs.com/projects/puppet/wiki/Module_Organisation
We are thinking of having a directory for each environment, then broken down
as recommended here:
http://projects.reductivelabs.com/projects/puppet/wiki/Puppet_Best_Practice
So in practice, it might look like
Environments
/env1
/env1/manifests/site.pp
/env1/manifests/templates.pp
/env1/manifests/nodes.pp
/env1/modules/{modulename}/files/
/env1/modules/{modulename}/manifests/init.pp
/env1/modules/{modulename}/manifests/class1.pp
/env1/modules/{modulename}/manifests/definition1.pp
/env1/modules/{modulename}/manifests/class2.pp
/env1/modules/{modulename}/plugins/
/env1/modules/{modulename}/templates/
/env2
...
/env3
...
Does this look right?
---
Thanks,
Allan Marcus
505-667-5666
smime.p7s
Description: S/MIME cryptographic signature
Re: [Puppet Users] templatedir for environment or for module?
if a template exists in modules/foo/templates/bar.erb
you refer to it as
template(foo/bar.erb)
in manifests.
On Tue, Mar 23, 2010 at 10:12 AM, Allan Marcus al...@lanl.gov wrote:
I am confused about the template dir in the module/{modulename}/ dir
Does the autoloader look in /env1/modules/{modulename}/templates/
automatically, or do I need to refer to the template by its full path?
http://projects.reductivelabs.com/projects/puppet/wiki/Puppet_Templating
states that a tempaltedir needs to be defined for the environment, not the
module.
I'm confused.
---
Thanks,
Allan Marcus
505-667-5666
On Mar 22, 2010, at 5:24 PM, Allan Marcus wrote:
hello,
Is this directory structure for modules still recommended, or is there a
better way?
http://projects.reductivelabs.com/projects/puppet/wiki/Module_Organisation
We are thinking of having a directory for each environment, then broken down
as recommended here:
http://projects.reductivelabs.com/projects/puppet/wiki/Puppet_Best_Practice
So in practice, it might look like
Environments
/env1
/env1/manifests/site.pp
/env1/manifests/templates.pp
/env1/manifests/nodes.pp
/env1/modules/{modulename}/files/
/env1/modules/{modulename}/manifests/init.pp
/env1/modules/{modulename}/manifests/class1.pp
/env1/modules/{modulename}/manifests/definition1.pp
/env1/modules/{modulename}/manifests/class2.pp
/env1/modules/{modulename}/plugins/
/env1/modules/{modulename}/templates/
/env2
...
/env3
...
Does this look right?
---
Thanks,
Allan Marcus
505-667-5666
--
nigel
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Quiesce Puppet?
On Sun, Mar 21, 2010 at 10:03 PM, John Warburton jwarbur...@gmail.com wrote: We run puppet from a wrapper via cron that (among other things) looks to see if the server is in maintenance mode ( test -f /.maint ) Puppet only runs if that file exists. The wrapper complains if the maint file is 24 hours old How do you make puppet not run if the file exists INSIDE puppet though? Doug. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Changing multiple files
On Tue, Mar 23, 2010 at 10:21 AM, jsearles jsear...@gmail.com wrote:
Hello,
I am trying to check for each enabled repo in /etc/yum.repos.d/ that
the gpgcheck is set to 1. I wanted to do this with Augeas, but I
cant seem to get it to work. I tried something like the following but
it does not work.
augeas{ /etc/yum.repos.d-gpgcheck :
context = match /files/etc/yum.repos.d//*[enabled
='1'],
changes = set gpgcheck 1,
}
Anyone have any ideas on how to accomplish this?
Hi John,
Have you seen this...
http://docs.reductivelabs.com/references/stable/type.html#yumrepo ?
You may want to manage all yum repos with puppet and use 'purge' to remove
repos that aren't puppet managed (that are user created outside of Puppet),
making sure you include the repos you need from the distribution.
--Michael
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Puppet is part of Google Summer of Code this year
As posted previously to Twitter, though I don't think I emailed it out, Puppet is part of Google Summer of Code this year. We don't know yet how many student slots we're going to get, but we've asked for 2 right now. If you know of students who would like to work on Puppet (and get paid!) (not by us!) (thank you Google!), please let us know. We have some ideas of our own but are also open to suggestions as long as they are generally widely usable by a lot of people. There's a huge amount of investment into mentoring a project to manage a Ms. Pacman machine, as amazingly cool as that might be :) If you're a student and would like to propose a project, you can email me off list with your ideas. http://socghop.appspot.com/ We have a starter list here: http://projects.reductivelabs.com/projects/gsoc/wiki --Michael -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Re: Changing multiple files
Thanks for the suggestion Michael, but I am not able to control what
yum repos are in the directory. This is more of a check to make sure
if a repo is there and is enabled that the gpgcheck is also enabled.
John
On Mar 23, 4:08 pm, Michael DeHaan mich...@reductivelabs.com wrote:
On Tue, Mar 23, 2010 at 10:21 AM, jsearles jsear...@gmail.com wrote:
Hello,
I am trying to check for each enabled repo in /etc/yum.repos.d/ that
the gpgcheck is set to 1. I wanted to do this with Augeas, but I
cant seem to get it to work. I tried something like the following but
it does not work.
augeas{ /etc/yum.repos.d-gpgcheck :
context = match /files/etc/yum.repos.d//*[enabled
='1'],
changes = set gpgcheck 1,
}
Anyone have any ideas on how to accomplish this?
Hi John,
Have you seen
this...http://docs.reductivelabs.com/references/stable/type.html#yumrepo?
You may want to manage all yum repos with puppet and use 'purge' to remove
repos that aren't puppet managed (that are user created outside of Puppet),
making sure you include the repos you need from the distribution.
--Michael
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Failed to retrieve current state of resource messages
I've sent one in for this... we're running the client every 30 minutes
via cron, and we probably get ten reports a day (per node) just like
this one. It started once we went from EPEL's v0.24 to v0.25. I've
sent one message like this to the group, but didn't get a response.
Tue Mar 23 12:06:43 -0400 2010 ///File[/etc/init.d/] (err):
Failed to retrieve current state of resource: end of file reached
Could not retrieve file metadata for puppet:///modules//: end
of file reached at /etc/puppet/modules//manifests/init.pp:45
The stanza that it's referencing is:
file { /etc/init.d/:
owner = root,
group = root,
mode= 700,
source = puppet:///modules//,
}
Any ideas?
Thanks for the help.
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Quiesce Puppet?
The /.maint file is managed manually by the sys admin team - totally independent of puppet - that's the point John On 24 March 2010 07:14, Douglas Garstang doug.garst...@gmail.com wrote: On Sun, Mar 21, 2010 at 10:03 PM, John Warburton jwarbur...@gmail.com wrote: We run puppet from a wrapper via cron that (among other things) looks to see if the server is in maintenance mode ( test -f /.maint ) Puppet only runs if that file exists. The wrapper complains if the maint file is 24 hours old How do you make puppet not run if the file exists INSIDE puppet though? Doug. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Failed to retrieve current state of resource messages
Are you using webrick, mongrel, or passenger?
Sent from my iPhone
On Mar 23, 2010, at 5:32 PM, Kent Rankin rankin.k...@gmail.com wrote:
I've sent one in for this... we're running the client every 30 minutes
via cron, and we probably get ten reports a day (per node) just like
this one. It started once we went from EPEL's v0.24 to v0.25. I've
sent one message like this to the group, but didn't get a response.
Tue Mar 23 12:06:43 -0400 2010 ///File[/etc/init.d/] (err):
Failed to retrieve current state of resource: end of file reached
Could not retrieve file metadata for puppet:///modules//: end
of file reached at /etc/puppet/modules//manifests/init.pp:45
The stanza that it's referencing is:
file { /etc/init.d/:
owner = root,
group = root,
mode= 700,
source = puppet:///modules//,
}
Any ideas?
Thanks for the help.
--
You received this message because you are subscribed to the Google
Groups Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com
.
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
.
--
You received this message because you are subscribed to the Google Groups Puppet
Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Ensure NFS mounts fails
I've got an NFS mount with ensure = mounted set. Puppet properly adds the mount to fstab and it mounts on boot; however on every subsequent run I get the following error: err: //mod-ssf3/Mount[nfs_var_www]/ensure: change from present to mounted failed: Execution of '/bin/mount -o vers=3,rsize=32768,wsize=32768,tcp,noatime,nocto,hard,intr,timeo=60,retrans=2,actimeo=30 / var/www/' returned 32: mount.nfs: /var/www is already mounted or busy Manually executing the mount command above returns consistent results: mount.nfs: /var/www is already mounted or busy This is accurate -- the fs is properly mounted, and shouldn't be remounted. My suspicion is that the 32, being a non-zero return is tripping up the mount provider, but I'm surprised that I can find little on this around the web. I found two associated bugs: http://projects.reductivelabs.com/issues/761 http://projects.reductivelabs.com/issues/2731 2731 in particular looked promising, except for the fact that I have SELinux disabled on the host in question -- so it's not that. Can anyone recommend a solution? The only thing I've found that quiets the error is passing remount as an option, something I really don't want to do every time Puppet runs. Eric Shamow Manager, Systems Operations Group Advance Internet -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Failed to retrieve current state of resource messages
I've made no changes, so I'm assuming that it's webrick. Would this
impact that?
On Tue, Mar 23, 2010 at 8:22 PM, Christopher Johnston
chjoh...@gmail.com wrote:
Are you using webrick, mongrel, or passenger?
Sent from my iPhone
On Mar 23, 2010, at 5:32 PM, Kent Rankin rankin.k...@gmail.com wrote:
I've sent one in for this... we're running the client every 30 minutes
via cron, and we probably get ten reports a day (per node) just like
this one. It started once we went from EPEL's v0.24 to v0.25. I've
sent one message like this to the group, but didn't get a response.
Tue Mar 23 12:06:43 -0400 2010 ///File[/etc/init.d/] (err):
Failed to retrieve current state of resource: end of file reached
Could not retrieve file metadata for puppet:///modules//: end
of file reached at /etc/puppet/modules//manifests/init.pp:45
The stanza that it's referencing is:
file { /etc/init.d/:
owner = root,
group = root,
mode = 700,
source = puppet:///modules//,
}
Any ideas?
Thanks for the help.
-- You received this message because you are subscribed to the Google
Groups Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
