Re: [Puppet Users] Best practices: client/server VS Git

2014-02-21 Thread Dirk Heinrichs
Am 20.02.2014 16:15, schrieb Julien Deloubes:

 For the moment i see 2 ways for Puppet to synchronize nodes:
 -Puppet client/server way with a puppetmaster node
 -Decentralized way, with node pull their configuration from a Git repo
 and make a puppet apply on their own.

 Can you told me what is the pro/cons for this two methods?
 And for a large scale of node which is the preferred one?

It depends on your use case. We, for example, use a mixture of both in a
software development project. All nodes are connected to the master to
receive their basic configuration. But we have certain software on
certain nodes which should only be updated on demand, so we use the
puppet apply approach for this in addition to the standard configuration.

HTH...

Dirk
-- 

*Dirk Heinrichs*, Senior Systems Engineer, Engineering Solutions
*Recommind GmbH*, Von-Liebig-Straße 1, 53359 Rheinbach
*Tel*: +49 2226 159 (Ansage) 1149
*Email*: d...@recommind.com mailto:d...@recommind.com
*Skype*: dirk.heinrichs.recommind
www.recommind.com http://www.recommind.com



http://www.recommind.com

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/53070A26.4080100%40recommind.com.
For more options, visit https://groups.google.com/groups/opt_out.
inline: Logo.gif

Re: [Puppet Users] Hash iteration order in a template not consistent

2014-02-21 Thread Andre Nathan
On Thursday, February 20, 2014 12:06:15 PM UTC-3, jcbollinger wrote:

 File a ticket if you wish, but personally, I'm inclined to say that 
 *any*reliance on iteration order of a hash is dodgy. If iteration order 
 matters 
 then you need to take proactive measures to ensure that you reliably get 
 the (an) order that works for you.


Well, it's not a case of order being important. I don't care about the 
order, but it should always be the same. Otherwise, when you build a 
configuration file from a template, that file gets changed every time 
Puppet runs, because the directives are reordered.

Thanks,
Andre

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/11e3d5d2-9e98-472a-9ae5-cfb8b7d7a9d7%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: apache / passenger how do you update puppet on the server in EL6.4?

2014-02-21 Thread jmp242
And to fully close this out - I ended up with a strange configuration going 
from Foreman 1.1 - 1.4 and Puppet 3.1.x - 3.4.2...

In Passanger.conf

Change:

   PassengerRuby /usr/bin/ruby193-ruby

To:

/usr/bin/ruby

 

And in the virtual host definitions add:
PassengerRuby /usr/bin/ruby193-ruby

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/111b1163-48bd-4f2e-9b3f-c83f9474209e%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Module and class names confusion

2014-02-21 Thread Anton Patiev
Hello everyone!

This may be a stupid question since i'm relatively new in Puppet, but I 
haven't found an answer.

I have external module, named, for example, 'ntp' and my own module 
'profile', which contains class with the same name. When i try to apply my 
configuration, puppet says 'Could not find class profile::base::ntp'. What 
am i doing wrong?

Example:

modules/profile/manifests/base/ntp.pp

class profile::base::ntp {
include ::ntp
# some specific code
}

modules/profile/manifests/base.pp

class profile::base {
include profile::base::ntp # -- error occurs here
}

I will be very grateful for any assistance.

--
Best regards,
Anton Patiev


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/d6d68fd6-2eb3-44ea-ab5f-7d7d194c9da2%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] mco ping command from linux puppet master is unable to fetch information about windows servers.

2014-02-21 Thread Pradeep Reddy
Problem Description:-
---
1) mco agent from windows is unable to communicate to linux puppet master. 
 Both the mco agent in windows and mco server in linux are at 2.4.1 
versions.
Below are the errors in the mcollective.log. Below logs are getting 
generated when mco ping command is executed from linux puppet master server.
*
W, [2014-02-20T18:46:15.703125 #1596]  WARN -- : runner.rb:78:in `rescue in 
block in run' Failed to handle message: incompatible marshal file format 
(can't be read)
format version 4.8 required; 66.65 given - TypeError

W, [2014-02-20T18:46:15.703125 #1596]  WARN -- : runner.rb:79:in `rescue in 
block in run' 
C:/marionette-collective-2.4.1/plugins/mcollective/security/psk.rb:22:in 
`load'
C:/marionette-collective-2.4.1/plugins/mcollective/security/psk.rb:22:in 
`decodemsg'
C:/marionette-collective-2.4.1/lib/mcollective/message.rb:178:in `decode!'
C:/marionette-collective-2.4.1/lib/mcollective/runner.rb:133:in `receive'
C:/marionette-collective-2.4.1/lib/mcollective/runner.rb:59:in `block in 
run'
C:/marionette-collective-2.4.1/lib/mcollective/runner.rb:57:in `loop'
C:/marionette-collective-2.4.1/lib/mcollective/runner.rb:57:in `run'
C:/marionette-collective-2.4.1/lib/mcollective/windows_daemon.rb:17:in 
`service_main'
C:/Ruby193/lib/ruby/gems/1.9.1/gems/win32-service-0.8.4/lib/win32/daemon.rb:305:in
 
`mainloop'
C:/Ruby193/lib/ruby/gems/1.9.1/gems/win32-service-0.8.4/lib/win32/daemon.rb:206:in
 
`mainloop'
C:/marionette-collective-2.4.1/lib/mcollective/windows_daemon.rb:9:in 
`daemonize_runner'
C:/marionette-collective-2.4.1/bin/mcollectived:43:in `main'
D, [2014-02-20T18:46:15.703125 #1596] DEBUG -- : activemq.rb:329:in 
`receive' Waiting for a message from ActiveMQ
*

Steps Followed to install mco agent in windows server 2008 R2 64 bit:-
-

1)  Installed windows puppet agent 3.4.2.  Puppet Master is in Linux 
box(i.e RHEL 6.4 64 bit) with 3.4.2 version.
2)  In puppet master, installed following mcollective version:-Marionette 
Collective version 2.4.1
3)  In puppet windows client, installed puppetlabs/marionette-collective 
2.4.1.zip.(i.e from 
https://github.com/puppetlabs/marionette-collective/tags)
4)  Installed  the following before mcollective.
a) Ruby 1.9.3-p484 from rubyinstaller.org
b) C:\Users\Administratorgem list
*** LOCAL GEMS ***
 bigdecimal (1.1.0),ffi (1.9.3 x86-mingw32),io-console 
(0.3),json (1.5.5),minitest (2.5.1),rake (0.9.2.2),rdoc (3.9.5),stomp 
(1.2.2),sys-admin (1.6.2, 1.5.6 x86-mingw32), win32-api   
 (1.5.1 universal-mingw32, 1.4.8 x86-mingw32),win32-dir 
(0.3.7),win32-process (0.5.5),win32-security (0.1.2),win32-service (0.8.4, 
0.7.2 x86-mingw32),windows-api (0.4.2, 
 0.4.1),windows-pr (1.2.3, 1.2.1)
c) Followed the remaining procedure, mentioned in read.md of 
marionette-collective 2.4.1.zip file.
*

Could some one guide me, whether the process followed is correct for making 
a successful connection between mco client installed in windows with Linux 
Puppet master with mco server.

Guide me if there is any alternate way for making successful communication 
between mco agent in windows to linux puppet master with mco server.

Regards,
Pradeep.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/b117d478-f3b6-4b6c-a920-07b6eba37fb7%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Puppet apply hangs when trying to use puppet.conf manifest attribute

2014-02-21 Thread jcbollinger


On Thursday, February 20, 2014 8:45:58 PM UTC-6, Alan Castro wrote:

 Hi,

 I've been trying to use puppet apply with no manifest argument, so that it 
 uses the manifest defined on my environment in my puppet.conf. 
 For my suprise, it didn't work.

 I simply don't understand why the modulepath works and the manifest 
 doesn't..
 Well, on my research I found this issue: 
 https://projects.puppetlabs.com/issues/10538. 



The bottom line is basically that not only is what you are asking for not a 
supported use case, but it conflicts with existing documented behavior 
(reading a manifest from stdin when no manifest name is given).  It is 
unlikely to be implemented in the requested form.

 

 Is there any way that this can get looked up again? 



You can certainly file a new ticket, referencing the existing, rejected one 
and asking for reconsideration.  The user who filed (Redmine) ticket 10538 
followed up with a suggestion to add a command-line option to specify that 
the desired start manifest should be obtained from puppet.conf.  That might 
be a direction to pursue.


John

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/dc9bfec0-b294-4dcb-b9e9-856c4620e7dd%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Puppet client removing yum / rpm cache?

2014-02-21 Thread jcbollinger


On Thursday, February 20, 2014 5:03:53 PM UTC-6, Christopher Opena wrote:

 Howdy folks,

 I've got some weird behavior from one of my puppet clients (actually the 
 client running on the puppet master), where running the agent somehow 
 destroys either the yum cache or the rpm db.  Directly after running the 
 agent I get the following message from yum (without modifying yum.conf or 
 any of the .repo files in /etc/yum.repos.d/):

 # yum list installed
 YumRepo Error: All mirror URLs are not using ftp, http[s] or file.
  Eg. $releasever is not a valid release or hasnt been released yet/
 removing mirrorlist with no valid mirrors: 
 /var/cache/yum/x86_64/$releasever/base/mirrorlist.txt
 Error: Cannot find a valid baseurl for repo: base

 Prior to running the puppet agent, yum was working perfectly.  I was able 
 to fix the above problem by reinstalling the centos-release package, but 
 even after doing so a 'yum list installed' and 'rpm -qa' listed the 
 centos-release package as *the only package installed* (clearly others were 
 installed but the db probably got corrupted).

 Restart the puppet agent, and the error with $releasever resumed, and 
 centos-release was shown as not installed by both yum and rpm.

 Looking through the puppet agent log (/var/log/puppet/puppet.log), I only 
 found this in the startup procedure:

 Thu Feb 20 14:26:50 -0800 2014 Puppet (notice): Caught TERM; calling stop
 Thu Feb 20 14:26:51 -0800 2014 Puppet (notice): Reopening log files
 Thu Feb 20 14:26:51 -0800 2014 Puppet (notice): Starting Puppet client 
 version 3.4.2
 Thu Feb 20 14:26:52 -0800 2014 /File[/var/lib/rpm]/ensure (notice): removed
 Thu Feb 20 14:26:52 -0800 2014 /File[/var/lib/yum]/ensure (notice): removed
 Thu Feb 20 14:26:55 -0800 2014 Puppet (err): Could not prefetch package 
 provider 'yum': Execution of '/usr/bin/python 
 /usr/lib/ruby/site_ruby/1.8/puppet/provider/package/yumhelper.py' returned 
 1: Loaded plugins: fastestmirror

 So it looks like directly after the client starts, it removes(?) 
 /var/lib/rpm and /var/lib/yum and then yum stops working again (with the 
 same $releasever) error.



Wow.

 

  The odd thing is that we have several other nodes that are having the 
 exact same modules applied and experiencing zero issues, so something odd 
 is going on with this particular node (which is also the master).

 Anyone experience anything like this or have any ideas what could be 
 causing the puppet runs to basically destroy the yumdb?



I have never heard of such behavior.

The problem likely is not directly related to your manifests, because it 
looks like the agent is removing the rpm and yum databases before it starts 
applying the catalog.  I would start by looking for differences between the 
puppet configuration files (puppet.conf) on the master and on a node that 
does not experience the problem.  Focus on differences in the [main] and 
[agent] sections, if there are any.

It is also possible that your Puppet installation is corrupted or 
compromised, though the likelihood of the latter seems remote.  It is 
unfortunate that destruction of /var/lib/rpm will make those alternatives 
harder to evaluate.


John

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/ab0f3c82-cacb-458d-a76b-33943495b85a%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Getting rid of YAML?

2014-02-21 Thread jcbollinger


On Thursday, February 20, 2014 4:41:33 PM UTC-6, JonY wrote:

 Looks like my server updated to 3.4.2.  Since then I've started seeing 
 these occasional messages like:

 Feb 20 14:19:05 puppet-master[5626]: YAML in network requests is 
 deprecated and will be removed in a future version. See 
 http://links.puppetlabs.com/deprecate_yaml_on_network
 Feb 20 14:19:05 puppet-master[5626]:(at 
 /usr/lib/ruby/site_ruby/1.8/puppet/network/http/handler.rb:304:in 
 `decode_params')

 Does this mean I'll be able to start using JSON or XML in my ENC scripts? 



The master is complaining about YAML in the inbound request from an agent.  
You should stop seeing the message if you update the relevant agents to a 
sufficiently recent version.

The message is not related to ENC output, but inasmuch as JSON is very 
nearly a subset of YAML, you should be able to have your ENC output JSON 
now, provided that you don't tickle one of the few inconsistencies.  Not so 
much XML.


John

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/258b2284-5ef6-49a2-a96b-27dec2bf9d10%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Getting rid of YAML?

2014-02-21 Thread JonY

On Friday, February 21, 2014 8:10:23 AM UTC-8, jcbollinger wrote:



 On Thursday, February 20, 2014 4:41:33 PM UTC-6, JonY wrote:

 Looks like my server updated to 3.4.2.  Since then I've started seeing 
 these occasional messages like:

 Feb 20 14:19:05 puppet-master[5626]: YAML in network requests is 
 deprecated and will be removed in a future version. See 
 http://links.puppetlabs.com/deprecate_yaml_on_network
 Feb 20 14:19:05 puppet-master[5626]:(at 
 /usr/lib/ruby/site_ruby/1.8/puppet/network/http/handler.rb:304:in 
 `decode_params')

 Does this mean I'll be able to start using JSON or XML in my ENC scripts? 



 The master is complaining about YAML in the inbound request from an 
 agent.  You should stop seeing the message if you update the relevant 
 agents to a sufficiently recent version.

 The message is not related to ENC output, but inasmuch as JSON is very 
 nearly a subset of YAML, you should be able to have your ENC output JSON 
 now, provided that you don't tickle one of the few inconsistencies.  Not so 
 much XML.


 John




All of my agents are running 3.4.0.  (or so they are told to). Is there 
some way to find out where this anomalous request is coming from? A $DEBUG 
setting or equivalent?

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/69e6fa25-106b-4b6d-a296-72186f5841fa%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Get subdirectories by fact

2014-02-21 Thread jcbollinger


On Thursday, February 20, 2014 9:21:02 AM UTC-6, Daniel K. wrote:

 Hello everyone,

 i am trying to write my first custom fact but i don't know how. I didn't 
 find any good instructions or list of functions i can use.



Well, the first place to look for docs would be among PL's online facter 
docs: http://docs.puppetlabs.com/guides/custom_facts.html.
 


 What i want to do is the following:

 On our machines we have the directory /work, There is a list of all 
 possible subdirectories, but no machine has all of them.
 Depending on the existence of the subdirectories i have to create files. 
 Now all i need is a fact that gives me all subdirectories of /work but 
 only depth=1.

 e.g.
 /work
|_ Sub_a
|_ Sub_b
 |_ Sub_b_c

 I would only need Sub_a and Sub_b returned by the fact.

 Does anyone know how to do it?



This shouldn't be too hard.  Supposing you do it as a Ruby plugin, the Ruby 
code might look something like this:

work_dirs.rb:
=

Facter.add('work_dirs') do
  setcode do
begin
  Dir.entries('/work').select {|entry| File.directory?(entry) 
}.join(',')
rescue SystemCallError = not_a_directory
  ''  
end
  end
end


The fact value for your example would be 'Sub_a,Sub_b', which you would 
need to split inside Puppet if you need them in array form.  (Puppet and 
Facter do not currently support arrary-valued facts.)


John

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/90e38836-d5ce-45a8-98b5-1b9580f564c5%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Host is missing hostname and/or domain

2014-02-21 Thread JonY
I have 36 (seemingly) identical machines deployed from a single manifest. 
For some reason I'm getting this error in my logs for a subset of them. 

/etc/hosts:

127.0.0.1 hostname hostname.fqdn localhost


Where else should I look?

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/fe77a309-5c59-452b-bcce-542d8ff53289%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Style and Formatting Best Practice

2014-02-21 Thread Erik Dalén
Personally I prefer the second style in both cases. That is also what
vim-puppet will do when autoindenting files.


On 20 February 2014 17:51, Charles McLaughlin mclaughli...@gmail.comwrote:

 Hello,

 I'm trying to develop Puppet style guidelines at my job and would like
 some feedback and opinions on a few patterns.

 Example 1 - notice the difference in ) indention
 (often we have many parameters, which is why we're in the habit of
 listening them on a separate)

 class foo {
   $param
   ) {
   class { 'bar':
 blah = $param,
   }
 }

 Versus:

 class foo {
   $param
 ) {
   class { 'bar':
 blah = $param,
   }
 }

 Example 2 - notice the indentation of the required Files

 class foo {
   package { 'bar':
 requires = [ File[1],
   File[2] ]
   }
 }

 Versus:

 class foo {
   package { 'bar':
 requires = [
   File[1],
   File[2]
 ]
   }
 }

 Thanks,
 Charles

  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to puppet-users+unsubscr...@googlegroups.com.
 To view this discussion on the web visit
 https://groups.google.com/d/msgid/puppet-users/cd426918-0dc6-4c61-b866-cbf750384c52%40googlegroups.com
 .
 For more options, visit https://groups.google.com/groups/opt_out.




-- 
Erik Dalén

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAAAzDLfQaBd6-iNT0VY0B4xcg88Rr4VMwrRra_mdrn5tRDW9eA%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: how to require a md5sum before installing?

2014-02-21 Thread Andy Spiegl
 Tell me more about your goal!
 
 What you really need!?
 
 Are your client Windows or Linux ?

Most of them are Linux, but many user workstations are Windows.
I am trying to set up puppet to update the most security crucial
programs on these Windows machines: Java, Flash, Firefox, Thunderbird,
putty, vlc and puppet itself of course.

I've got a separate module for each which grab installer files from a
samba share.  The share is readonly but we have a bad feeling about it
and would like to introduce an extra layer of security.  Like checking
the md5sum of the file before running the installer on the clients.

The module you mentioned (gini-archive) sounds very practical, but if
I distribute md5sum.exe to the windows clients using the same puppet
method, I don't really gain security. :-)

Thanks,
 Andy.


-- 
 If you take USABLE from UNSTABLE you get NT.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20140221175402.GA12818%40spiegl.de.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: how to require a md5sum before installing?

2014-02-21 Thread Rafael Cristaldo
Hi Andy...

I think i got your idea

I use this module ARCHIVE with Linux workstations, and the módule I created
was to install our ERP system, so i use the ARCHIVE do download the package
tar.gz from our FTP server, for example:

url = 'http://ftp.company.com/puppet/system.tar.gz'

So, with this tarball, i have the system.tar.gz.md5, where i did with the
command on linux md5sum to create the md5 file.
With THIS the ARCHIVE module make all to me!!

It download the tarball, extract it to the target /usr/local , check with
MD5 and install my ERP.

You are using samba to distribute the programs .exe, so you can create the
md5 file, and use the ARCHIVE module to install the package...

Take a look at this module with your module...


2014-02-21 14:54 GMT-03:00 Andy Spiegl puppet.a...@spiegl.de:

  Tell me more about your goal!
 
  What you really need!?
 
  Are your client Windows or Linux ?

 Most of them are Linux, but many user workstations are Windows.
 I am trying to set up puppet to update the most security crucial
 programs on these Windows machines: Java, Flash, Firefox, Thunderbird,
 putty, vlc and puppet itself of course.

 I've got a separate module for each which grab installer files from a
 samba share.  The share is readonly but we have a bad feeling about it
 and would like to introduce an extra layer of security.  Like checking
 the md5sum of the file before running the installer on the clients.

 The module you mentioned (gini-archive) sounds very practical, but if
 I distribute md5sum.exe to the windows clients using the same puppet
 method, I don't really gain security. :-)

 Thanks,
  Andy.


 --
  If you take USABLE from UNSTABLE you get NT.




-- 




*Rafael Cristaldo*

*Analísta de Suporte *


*FPTI - Parque Tecnológico ItaipuLPIC-3 Senior Level Linux Certification*
*LPI ID; LPI000238085 Cod: *4ackegjqlx

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAOe8SRjiiAM7uG-AQXZCOgRw2GZo6nx2ExTNnYhvD0nFLjUMLw%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Using same script for multiple services fails

2014-02-21 Thread Guy Knights
I'd like to use the same init script (via upstart) for multiple service
definitions, and I thought that if I gave them different titles but the
same name paramter (eg. script name) it should allow that. However, I get a
duplicated definition error.

eg.

 * service { gamedeploy-backend:*
*name   = 'gamedeploy',*
*ensure = running,*
*provider   = upstart,*
*start  = /sbin/initctl start gamedeploy
GAME=${game_deploy['title']} COMPONENT=backend ENVIRONMENT=${::environment}
DELAY=${game_deploy['delay']},*
*stop   = '/sbin/initctl stop gamedeploy COMPONENT=backend',*
*status = '/sbin/initctl status gamedeploy COMPONENT=backend',*
*hasrestart = false,*
*subscribe  =
[File['gamedeploy_init_script'],File['gamedeploy_script']],*
*require= [File['/var/log/deploy'],Account['deployment']],*
*  }*

*  service { gamedeploy-frontend:*
*name   = 'gamedeploy',*
*ensure = running,*
*provider   = upstart,*
*start  = /sbin/initctl start gamedeploy
GAME=${game_deploy['title']} COMPONENT=frontend
ENVIRONMENT=${::environment} DELAY=${game_deploy['delay']},*
*stop   = '/sbin/initctl stop gamedeploy COMPONENT=frontend',*
*status = '/sbin/initctl status gamedeploy COMPONENT=frontend',*
*hasrestart = false,*
*subscribe  =
[File['gamedeploy_init_script'],File['gamedeploy_script']],*
*require= [File['/var/log/deploy'],Account['deployment']],*
*  }*

Is there any way I can get this to work in Puppet, or will I have to create
multiple copies of the same script with different filenames?

Thanks,
Guy
g...@eastsidegamestudio.com

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CA%2BgQdWCGp40w4iGDcaSvR8rEFw0c%2BTuO86z8ULe18W7iazGdhg%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: how to require a md5sum before installing?

2014-02-21 Thread Andy Spiegl
Hi Rafael,

 It download the tarball, extract it to the target /usr/local , check
 with MD5 and install my ERP.
Windows doesn't have md5sum functionality built in.  I have to get
md5sum.exe to the machine somehow.

The ARCHIVE module uses curl, rm, tar, unzip, ...
Lots of unix tools. :-(

Thanks,
 Andy.

-- 
 It's like shearing a pig – lots of screams but little wool.  (Putin, 2013)

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20140221181906.GA17710%40spiegl.de.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Style and Formatting Best Practice

2014-02-21 Thread Kaito Kumashiro
On Thursday, 20 February 2014 23:51:07 UTC+1, Charles McLaughlin wrote:

 class foo {
   package { 'bar':
 requires = [
   File[1],
   File[2]
 ]

This format makes changes a bit easier. For example, when you want to 
remove one or more File(s) in Vim ('dd'). Last array element should end 
with a comma:

requires = [
  File[1],
  File[2],
]


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/84d6af1c-8012-4425-a836-de1ebda89ab3%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: Server Groups - How to ?

2014-02-21 Thread Kaito Kumashiro
On Wednesday, 19 February 2014 11:57:59 UTC+1, kaustubh chaudhari wrote:

 I wish to group Windows server and Linux server in Windows server group 
 and Linux server group respectively.
 Is there a way to do that for more that 3000 servers ? adding individual 
 will be tedious job.

I see two solutions:

1. Prepare a list of nodes using some script and paste it into text field 
in Dashboard.
2. INSERT nodes into *node_group_memberships* table in Dashboard database 
(I'm not sure how Dashboard will react to this).

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/6e742170-34bb-4c90-8362-25d2b9b8aedd%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Using existing CA certificate for Puppet CA service.

2014-02-21 Thread maks N
Hi to all.

I have CA with root certificate rootCA.pem, and intermediate CA 
certificate puppetRootCA.pem (signed by rootCA.pem) for Puppet 
infrastructure. I want that Puppet CA subsystem use certs and keys 
puppetRootCA.pem and puppetRootCA.key.
In documentation written (in section Supported External CA Configurations 
): These configurations are all-or-nothing rather than mix-and-match. When 
using an external CA, the built in Puppet CA service must be disabled and 
cannot be used to issue SSL certificates.
Is it possible to use puppetRootCA.pem with enabled ca = true in 
puppet.conf?

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/b37e5b44-7c52-48ba-a813-178d37e2bc54%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Using the user

2014-02-21 Thread Joe Bond
Hello:

I've been able to add users and groups without any issue on a bunch of test 
machines, but I'm wondering if there is a way to check if a password has 
already been set for a user before overwriting it.  Searching for common 
words like 'user' and 'password' brings up a bazillion hits, and the type 
reference page doesn't seem to have the functionality I want, so I thought 
I'd post.

Here is how a user is created:

user { Joe:
ensure  = 'present',
uid = '3657',
gid = '5002',
shell   = '/bin/csh',
home= '/home/Joe',
managehome  = 'true',
password= 'some_hash',
comment = 'Joe',
}

Now, if someone changes their password on that machine and I then update 
the password file using puppet, then of course the password hash will be 
overwritten.  This is not the behavior I want -- I'd like the existing 
password hash to remain unchanged if it is already there.

Is there any way to do this using the user type?  Maybe I'm thinking about 
this problem the wrong way?  I'm a bit stuck.

Thanks,

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/476ba24b-9349-4e27-89ff-0e34f3b36b7e%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Cannot see puppet master node in Dashboard

2014-02-21 Thread Nick Hobart
I've set up an open source puppet master on:

open-master.company.local

I've also set up the open source Dashboard running (seemingly) fine on port 
3000. 

However, I do not see the puppet master listed in the nodes. Any ideas/help 
would be greatly appreciated. 

Thanks.

https://lh3.googleusercontent.com/-Wy4rZ-u_Rl0/UwesaKBbB-I/F6I/ZpkUMT2MqtM/s1600/nodes.PNG

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/a4a89cc5-0b1d-4d81-85db-023c873e2f82%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Using the user

2014-02-21 Thread Christopher Wood
Common user authentication is a fairly common, solved problem. You'd probably 
be better off setting up an ldap backend to pam or something than messing about 
with passwords. There are any number of modules on the puppet forge to crib 
from (search for ldap).

On Fri, Feb 21, 2014 at 12:25:41PM -0800, Joe Bond wrote:
Hello:
 
I've been able to add users and groups without any issue on a bunch of
test machines, but I'm wondering if there is a way to check if a password
has already been set for a user before overwriting it.  Searching for
common words like 'user' and 'password' brings up a bazillion hits, and
the type reference page doesn't seem to have the functionality I want, so
I thought I'd post.
 
Here is how a user is created:
 
    user { Joe:
    ensure  = 'present',
    uid = '3657',
    gid = '5002',
    shell   = '/bin/csh',
    home    = '/home/Joe',
    managehome  = 'true',
    password    = 'some_hash',
    comment = 'Joe',
    }
 
Now, if someone changes their password on that machine and I then update
the password file using puppet, then of course the password hash will be
overwritten.  This is not the behavior I want -- I'd like the existing
password hash to remain unchanged if it is already there.
 
Is there any way to do this using the user type?  Maybe I'm thinking about
this problem the wrong way?  I'm a bit stuck.
 
Thanks,
 
--
You received this message because you are subscribed to the Google Groups
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an
email to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit

 [1]https://groups.google.com/d/msgid/puppet-users/476ba24b-9349-4e27-89ff-0e34f3b36b7e%40googlegroups.com.
For more options, visit [2]https://groups.google.com/groups/opt_out.
 
 References
 
Visible links
1. 
 https://groups.google.com/d/msgid/puppet-users/476ba24b-9349-4e27-89ff-0e34f3b36b7e%40googlegroups.com
2. https://groups.google.com/groups/opt_out

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20140221214445.GA10188%40iniquitous.heresiarch.ca.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Arrays and case statements

2014-02-21 Thread Kim Scarborough
So I have a bunch of linux servers in different groups. Each server's group 
is defined as a custom fact. I want to set an array variable based on the 
server's group membership, so I have code like this:

case $servergroup {
MAMMAL:  { $foo = ['horse', 'cow', 'dog'] }
REPTILE: { $foo = ['gator', 'frog'] }
BIRD:{ $foo = ['finch', 'chicken'] }
}

This works fine. The problem is that now I have a server that needs to be 
in two groups. I know I can convert a custom fact into an array like this:

$slist = split($servergroup, ',')

But I don't know how to have each value in the array be processed through 
the case statement. I tried this (using the future parser):

each($slist) |$val| { case $val {
MAMMAL:  { $foo = ['horse', 'cow', 'dog'] }
REPTILE: { $foo = ['gator', 'frog'] }
BIRD:{ $foo = ['finch', 'chicken'] }
}
}

But I just get an error.

(There's another issue, which is that I'll want the $foo array to append to 
the previous value rather than overwrite, but I'll deal with that after 
getting over this hurdle).

Is what I'm trying possible? Am I going about this totally the wrong way?

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/389e93a2-1655-43dc-bde8-79a595f83684%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Arrays and case statements

2014-02-21 Thread Eugene Vilensky
On Fri, Feb 21, 2014 at 3:47 PM, Kim Scarborough chow...@gmail.com wrote:
 Is what I'm trying possible? Am I going about this totally the wrong way?

Check out how classifying your data using Hiera can resolve and simplify this:
http://docs.puppetlabs.com/hiera/1/index.html#why-hiera

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAEUKkZ-Z-jm8YLH41nPqoTfHwbGxGpeDpN66F9BrF9kh6O0FSg%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Arrays and case statements

2014-02-21 Thread Kim Scarborough
On Friday, February 21, 2014 7:09:43 PM UTC-6, Trammael wrote:

 Check out how classifying your data using Hiera can resolve and simplify 
 this: 
 http://docs.puppetlabs.com/hiera/1/index.html#why-hiera 


Wow, that's hard to understand (at least for me). Will that still work with 
an array in a fact? Like, if in 
http://docs.puppetlabs.com/hiera/1/hierarchy.html#example, $environment 
is an array? 

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/4c372ef6-c863-4f5b-a08f-08d3a0c08cad%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.