Re: [Puppet Users] Re: Puppet x64 msi not installing files

2016-01-28 Thread Bjoern Meier
hi,

I didn't suggest anything like this. Take a virtuell machine, try to 
install without UAC. By the way: if you think turning off UAC just for an 
admin-install is a security issue, then: there are other issues as well.

So, if you get install puppet without UAC, you have the coice: turning UAC 
off for this install or repackage. Yes, the puppet packaging is quite 
awful, but: we haven't any other.

Am Donnerstag, 28. Januar 2016 08:59:16 UTC+1 schrieb Gary Greene:
>
> Yes, UAC is turned on on this machine. Turning it off is not really an 
> option, since compromising system security for the ability for us to manage 
> systems is not an option.
>
> On 19 January 2016 at 01:10, Bjoern Meier  > wrote:
>
>> Hi,
>>
>> do you have UAC active? I get this with active UAC.
>>
>>
>> Am Freitag, 15. Januar 2016 00:12:19 UTC+1 schrieb Gary Greene:
>>>
>>> I’ve got a user on Windows 10 x64 Pro that we’ve been having some issues 
>>> with the puppet install on his machine. To fix, I tried upgrading the 
>>> client from 3.8.3 to 3.8.4 from the Puppet Open Source downloads for 
>>> Windows x64. 
>>>
>>> When running the install, everything _appears_ to install, and the 
>>> Windows Installer throws no error, but when I look at his filesystem, the 
>>> files that I expect to be in C:\Program Files\Puppet Labs\ are not present 
>>> at all. 
>>>
>>> The logs all state that the MSI install completed without issue, but as 
>>> I said, the files never show up. 
>>>
>>> Has anyone else seen this? And if so, what’s the workaround for this so 
>>> I can ensure that the rest of the Windows fleet aren’t going to be an issue 
>>> upgrading to the latest release? 
>>>
>>> -- 
>>> Gary L. Greene, Jr. 
>>> ==
>>>  
>>>
>>> Volunteer developer of the KDE F/OSS project and Project Lead for 
>>> AltimatOS 
>>> http://www.kde.org/ http://www.altimatos.com/ 
>>> Please refrain from sending me proprietary binary documents (Doc, Xls, 
>>> Ppt) 
>>>   Use a free office suite with standards approved formats like 
>>> LibreOffice. 
>>> http://www.libreoffice.org/ 
>>> ==
>>>  
>>>
>>>
>>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Puppet Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to puppet-users...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/puppet-users/50db9bf2-bb55-4df0-a088-ab7072534216%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/5a8390d1-7244-4d82-abbf-993909c10baa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] Re: Puppet x64 msi not installing files

2016-01-28 Thread Bjoern Meier
hi,

I didn't suggest anything like this. Take a virtuell machine, try to 
install without UAC. By the way: if you think turning off UAC just for an 
admin-install is a security issue, then: there are other issues as well.

So, if you get install puppet without UAC, you have the choice: turning UAC 
off for this install or repackage. Yes, the puppet packaging is quite 
awful, but: we haven't any other.

Am Donnerstag, 28. Januar 2016 08:59:16 UTC+1 schrieb Gary Greene:
>
> Yes, UAC is turned on on this machine. Turning it off is not really an 
> option, since compromising system security for the ability for us to manage 
> systems is not an option.
>
> On 19 January 2016 at 01:10, Bjoern Meier  > wrote:
>
>> Hi,
>>
>> do you have UAC active? I get this with active UAC.
>>
>>
>> Am Freitag, 15. Januar 2016 00:12:19 UTC+1 schrieb Gary Greene:
>>>
>>> I’ve got a user on Windows 10 x64 Pro that we’ve been having some issues 
>>> with the puppet install on his machine. To fix, I tried upgrading the 
>>> client from 3.8.3 to 3.8.4 from the Puppet Open Source downloads for 
>>> Windows x64. 
>>>
>>> When running the install, everything _appears_ to install, and the 
>>> Windows Installer throws no error, but when I look at his filesystem, the 
>>> files that I expect to be in C:\Program Files\Puppet Labs\ are not present 
>>> at all. 
>>>
>>> The logs all state that the MSI install completed without issue, but as 
>>> I said, the files never show up. 
>>>
>>> Has anyone else seen this? And if so, what’s the workaround for this so 
>>> I can ensure that the rest of the Windows fleet aren’t going to be an issue 
>>> upgrading to the latest release? 
>>>
>>> -- 
>>> Gary L. Greene, Jr. 
>>> ==
>>>  
>>>
>>> Volunteer developer of the KDE F/OSS project and Project Lead for 
>>> AltimatOS 
>>> http://www.kde.org/ http://www.altimatos.com/ 
>>> Please refrain from sending me proprietary binary documents (Doc, Xls, 
>>> Ppt) 
>>>   Use a free office suite with standards approved formats like 
>>> LibreOffice. 
>>> http://www.libreoffice.org/ 
>>> ==
>>>  
>>>
>>>
>>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Puppet Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to puppet-users...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/puppet-users/50db9bf2-bb55-4df0-a088-ab7072534216%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/bf6ccd9c-70ff-46f4-a177-e0105a04d496%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] How to install tomcat silenlty using puppet on Windows 7

2016-01-28 Thread Maruti Gangumolu
Thanks Dirk! It worked. I'm still facing with module class file. When I'm 
invoking site.pp -> nodes.pp -> init.pp manifest files I'm getting an error 
that apache class is not found. Could you please help me with it?

# Manage apache tomcat v8 application server
class apache {
 package { 'Tomcat8' :
  ensure => present,
  source => 'C:/Maruti/Puppet/apache-tomcat-8.0.30.exe',
  install_options => ['/S','/D=C:\Maruti\Puppet\apache-tomcat-8'],
  description => 'Installing tomcat v8.0.30 on windows system', 
 }
}



Thanks,
Maruti.

On Friday, January 22, 2016 at 2:52:53 PM UTC+5:30, Dirk Heinrichs wrote:

> Am 21.01.2016 um 19:04 schrieb Maruti Gangumolu:
>
>   install_options => ['/VERYSILENT'],
>
>
> I have: install_options => ['/S'],
>
> HTH...
>
> Dirk
> -- 
>
> *Dirk Heinrichs*, Senior Systems Engineer, Engineering Solutions
> *Recommind GmbH*, Von-Liebig-Straße 1, 53359 Rheinbach
> *Tel*: +49 2226 159 <#> (Ansage) 1149
> *Email*: d...@recommind.com 
> *Skype*: dirk.heinrichs.recommind
> www.recommind.com
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/49dfc910-4a35-4edc-87f1-686d44f9dfeb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] New Docker module features, compose and network

2016-01-28 Thread Gareth Rushgrove
Hi All

I've just added a couple of features to the Puppet Docker module,
specifically to use Docker Compose alongside Puppet and to configure
Docker networks.

https://github.com/garethr/garethr-docker#networks
https://github.com/garethr/garethr-docker#compose

Thanks to Scott Coulton for some of the earlier work on these.

These features are in master now and I'll hopefully ship a 5.1 release
of the module shortly. I'd love any feedback on them from folks who
might be using Puppet and Docker.

Cheers all

Gareth



-- 
Gareth Rushgrove
@garethr

devopsweekly.com
morethanseven.net
garethrushgrove.com

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAFi_6yLv1t0UzvUsUOZGOxmc0bD2Y7SE9CYt7Y74W7NaRxK7aQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Alex Harvey
Hi all,

I am interested in the future of the Librarian-puppet project - to find out 
how many people are still using it, and if there are people out there who 
actually prefer it over R10K.

I recently looked into R10K for a few projects I was working on, and I 
found it to be surprisingly complicated.  It had many features I didn't 
seem to need, features that overlap with features provided by 
Jenkins/Bamboo, and appeared designed with a view to helping people deploy 
code in complex ways, help them to test short lived branches on Puppet 
masters, etc.  This might have made sense once, but if you're doing all 
your development in a test-driven fashion in Vagrant/Rspec-puppet/Beaker, I 
can't see a need for R10K's features, and concluded it was mainly just a 
lot harder to understand than Librarian-puppet.  I do see that it performs 
better, but again, Librarian-puppet has never been a bottleneck.

Other views most appreciated.

With best regards,
Alex

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/639366f5-0fc8-47f8-a1ed-541c79dbc07c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread R.I.Pienaar


- Original Message -
> From: "Alex Harvey" 
> To: "puppet-users" 
> Sent: Thursday, January 28, 2016 3:40:15 PM
> Subject: [Puppet Users] librarian-puppet vs R10K

> Hi all,
> 
> I am interested in the future of the Librarian-puppet project - to find out
> how many people are still using it, and if there are people out there who
> actually prefer it over R10K.
> 
> I recently looked into R10K for a few projects I was working on, and I
> found it to be surprisingly complicated.  It had many features I didn't
> seem to need, features that overlap with features provided by
> Jenkins/Bamboo, and appeared designed with a view to helping people deploy
> code in complex ways, help them to test short lived branches on Puppet
> masters, etc.  This might have made sense once, but if you're doing all
> your development in a test-driven fashion in Vagrant/Rspec-puppet/Beaker, I
> can't see a need for R10K's features, and concluded it was mainly just a
> lot harder to understand than Librarian-puppet.  I do see that it performs
> better, but again, Librarian-puppet has never been a bottleneck.

The extra features you dont need are optional.  But one day when you need them
it might be handy that they exist?

r10k doesnt do dependencies on its own and thats a pain, I prefer it but wish
it did handle dependencies

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/155451295.221949.1453992341016.JavaMail.zimbra%40devco.net.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Error: Cannot start Windows Service. Access denied

2016-01-28 Thread Alex M
Hi,
i have Puppet v3.7.2 and same agent on Windows Server 2012 R2.
Now i'm training to maintain Windows Services. For that i created new 
manifest:

# cat /etc/puppet/modules/disablesmb/manifests/init.pp
class disablesmb {

service { 'Audiosrv':
ensure => running,
enable => true,
}

but when i run agent on Windows i get an error:

C:\>puppet agent --test
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for test1.domain.company.com
Info: Applying configuration version '1453991644'
Error: Cannot start Audiosrv, error was: Execution of 
'C:/Windows/system32/net.exe start Audiosrv' returned 2: System error 5 has 
occurred.

Access is denied.
Wrapped exception:
Execution of 'C:/Windows/system32/net.exe start Audiosrv' returned 2: 
System error 5 has occurred.

Access is denied.
Error: /Stage[main]/Disablesmb/Service[Audiosrv]/ensure: change from 
stopped to running failed: Cannot start Audiosrv, error was: Execution of 
'C:/Win
dows/system32/net.exe start Audiosrv' returned 2: System error 5 has 
occurred.

Access is denied.
Notice: Finished catalog run in 0.14 seconds

if i run it manually a get same error:

C:\>net.exe start Audiosrv
System error 5 has occurred.

Access is denied.

what is wrong?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/855b3a53-1dd0-4f80-b456-a96299f67c05%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Making a "role" fact work

2016-01-28 Thread gareth . humphries . ig
Hi All,

I'm trying to add a new fact to puppet, which is the role the host has - 
I'm using the popular roles/profiles methodology, so all nodes have exactly 
one role:: class.  I want to get the  into a fact.

I've managed to get it working easily enough, but either not automatically 
or only on subsequent puppet runs (ie not the first).  This makes perfect 
sense, given the work flow of collect-facts -> compile catalog -> 
send-catalog-to-host.

My next attempt is to write a server-side function that can analyse the 
catalog after it's been built, extract the class names, find one that 
matches /^role::/ and bob's your uncle.

I'm having trouble getting started though - can anyone help me out with how 
I might get access to the catalog?  Is there a variable I can lookup, or a 
function or something?

Is the catalog even available, or are functions run before compilation?  Is 
there any way I can access a list of classes being applied?


I don't want to require something be done by developers (for example, 
putting the logic it in role.pp and require all roles to inherit that), as 
that leaves too much room for mistakes.  I really want it to be 
automatically done on all hosts, and available from the first run.


I'm not married to parsing the catalog - the end goal here is just getting 
the fact - any other ideas welcome.



Thoughts?

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/30a90fe7-61cc-483f-a7d4-e674d7df49c5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Hiera subkeys lookup should be configurable

2016-01-28 Thread Adrian Muraru
Hi guys,

Hiera 3 apparently breaks old yaml configuration where keys are containing 
"." char.
I filed https://tickets.puppetlabs.com/browse/HI-496.
Is it just me seeing this issue?

thanks,
adrian

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/45559d39-40e1-48f1-bbd6-f4cf272bb6fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Steve Traylen
On Thu, 2016-01-28 at 06:40 -0800, Alex Harvey wrote:
> Hi all,
> 
> I am interested in the future of the Librarian-puppet project - to
> find out how many people are still using it, and if there are people
> out there who actually prefer it over R10K.
> 
There's another one to consider
https://github.com/cernops/jens
it recently got an update to accept hook calls from gitlab. We get
our git pushes deployed in 0.4s now. 


> I recently looked into R10K for a few projects I was working on, and
> I found it to be surprisingly complicated.  It had many features I
> didn't seem to need, features that overlap with features provided by
> Jenkins/Bamboo, and appeared designed with a view to helping people
> deploy code in complex ways, help them to test short lived branches
> on Puppet masters, etc.  This might have made sense once, but if
> you're doing all your development in a test-driven fashion in
> Vagrant/Rspec-puppet/Beaker, I can't see a need for R10K's features,
> and concluded it was mainly just a lot harder to understand than
> Librarian-puppet.  I do see that it performs better, but again,
> Librarian-puppet has never been a bottleneck.
> 
> Other views most appreciated.
> 
> With best regards,
> Alex

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1453995036.31188.4.camel%40cern.ch.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Christopher Wood
The requirement to "deploy code in complex ways" sounds like an "enterprise" 
thing. On the one hand, these companies may have few spare cycles for 
synchronizing configurations across disparate customer-facing products. On the 
other hand, there can be certain strategically important environments whose 
change managment is subject to agreements with major customers and operate on a 
different set of timelines. On the third hand, there can be a myriad of 
currently-unknown reasons why you would need the flexibility to do something 
complicated.

Not to say that r10k versus other things (monolithic repositories for one) 
haven't been a subject of intense debate here too, they have. My current 
thinking is that we can more maintainably use a subset of r10k functionality 
than bolt stuff on to a simpler system on an ad-hoc basis.

I think of things like ldap/r10k/radius as items which it really helps to 
already have when you start getting large and complicated problems.

On Thu, Jan 28, 2016 at 06:40:15AM -0800, Alex Harvey wrote:
>Hi all,
>I am interested in the future of the Librarian-puppet project - to find
>out how many people are still using it, and if there are people out there
>who actually prefer it over R10K.
>I recently looked into R10K for a few projects I was working on, and I
>found it to be surprisingly complicated.  It had many features I didn't
>seem to need, features that overlap with features provided by
>Jenkins/Bamboo, and appeared designed with a view to helping people deploy
>code in complex ways, help them to test short lived branches on Puppet
>masters, etc.  This might have made sense once, but if you're doing all
>your development in a test-driven fashion in Vagrant/Rspec-puppet/Beaker,
>I can't see a need for R10K's features, and concluded it was mainly just a
>lot harder to understand than Librarian-puppet.  I do see that it performs
>better, but again, Librarian-puppet has never been a bottleneck.
>Other views most appreciated.
>With best regards,
>Alex
> 
>--
>You received this message because you are subscribed to the Google Groups
>"Puppet Users" group.
>To unsubscribe from this group and stop receiving emails from it, send an
>email to [1]puppet-users+unsubscr...@googlegroups.com.
>To view this discussion on the web visit
>
> [2]https://groups.google.com/d/msgid/puppet-users/639366f5-0fc8-47f8-a1ed-541c79dbc07c%40googlegroups.com.
>For more options, visit [3]https://groups.google.com/d/optout.
> 
> References
> 
>Visible links
>1. mailto:puppet-users+unsubscr...@googlegroups.com
>2. 
> https://groups.google.com/d/msgid/puppet-users/639366f5-0fc8-47f8-a1ed-541c79dbc07c%40googlegroups.com?utm_medium=email&utm_source=footer
>3. https://groups.google.com/d/optout

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20160128162936.GA15474%40iniquitous.heresiarch.ca.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] Error: Cannot start Windows Service. Access denied

2016-01-28 Thread Josh Cooper
On Thu, Jan 28, 2016 at 6:48 AM, Alex M 
wrote:

> Hi,
> i have Puppet v3.7.2 and same agent on Windows Server 2012 R2.
> Now i'm training to maintain Windows Services. For that i created new
> manifest:
>
> # cat /etc/puppet/modules/disablesmb/manifests/init.pp
> class disablesmb {
>
> service { 'Audiosrv':
> ensure => running,
> enable => true,
> }
>
> but when i run agent on Windows i get an error:
>
> C:\>puppet agent --test
> Info: Retrieving pluginfacts
> Info: Retrieving plugin
> Info: Caching catalog for test1.domain.company.com
> Info: Applying configuration version '1453991644'
> Error: Cannot start Audiosrv, error was: Execution of
> 'C:/Windows/system32/net.exe start Audiosrv' returned 2: System error 5 has
> occurred.
>
> Access is denied.
> Wrapped exception:
> Execution of 'C:/Windows/system32/net.exe start Audiosrv' returned 2:
> System error 5 has occurred.
>
> Access is denied.
> Error: /Stage[main]/Disablesmb/Service[Audiosrv]/ensure: change from
> stopped to running failed: Cannot start Audiosrv, error was: Execution of
> 'C:/Win
> dows/system32/net.exe start Audiosrv' returned 2: System error 5 has
> occurred.
>
> Access is denied.
> Notice: Finished catalog run in 0.14 seconds
>
> if i run it manually a get same error:
>
> C:\>net.exe start Audiosrv
> System error 5 has occurred.
>
> Access is denied.
>
> what is wrong?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/855b3a53-1dd0-4f80-b456-a96299f67c05%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>

Most likely you are not running with elevated privileges, which is required
in order to manage services (and most other things you're going to want to
do with puppet).

Josh

-- 
Josh Cooper
Developer, Puppet Labs

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CA%2Bu97ukzDz6gp0NPaxvwenEfCF91zPAUdYqFEa8mp78VZ4kqqg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] Error: Cannot start Windows Service. Access denied

2016-01-28 Thread Alex M
but when run as Administrator i receive an error:

C:\>puppet agent -t
Info: Caching certificate for test1.domain.company.com
Error: Could not request certificate: The certificate retrieved from the 
master does not match the agent's private key.
Certificate fingerprint: 

To fix this, remove the certificate from both the master and the agent and 
then start a puppet run, which will automatically regenerate a certficate.
On the master:
  puppet cert clean test1.domain.company.com
On the agent:
  1a. On most platforms: find C:/ProgramData/PuppetLabs/puppet/etc/ssl 
-name test1.domain.company.com.pem -delete
  1b. On Windows: del 
"C:/ProgramData/PuppetLabs/puppet/etc/ssl/test1.domain.company.com.pem" /f
  2. puppet agent -t

Exiting; failed to retrieve certificate and waitforcert is disabled


when i did all requirements, then i receive an error:

C:\>puppet agent -t
Exiting; no certificate found and waitforcert is disabled

In smart-proxies i have no any certificates


четверг, 28 января 2016 г., 17:32:28 UTC+1 пользователь Josh Cooper написал:
>
>
>
> On Thu, Jan 28, 2016 at 6:48 AM, Alex M  > wrote:
>
>> Hi,
>> i have Puppet v3.7.2 and same agent on Windows Server 2012 R2.
>> Now i'm training to maintain Windows Services. For that i created new 
>> manifest:
>>
>> # cat /etc/puppet/modules/disablesmb/manifests/init.pp
>> class disablesmb {
>>
>> service { 'Audiosrv':
>> ensure => running,
>> enable => true,
>> }
>>
>> but when i run agent on Windows i get an error:
>>
>> C:\>puppet agent --test
>> Info: Retrieving pluginfacts
>> Info: Retrieving plugin
>> Info: Caching catalog for test1.domain.company.com
>> Info: Applying configuration version '1453991644'
>> Error: Cannot start Audiosrv, error was: Execution of 
>> 'C:/Windows/system32/net.exe start Audiosrv' returned 2: System error 5 has 
>> occurred.
>>
>> Access is denied.
>> Wrapped exception:
>> Execution of 'C:/Windows/system32/net.exe start Audiosrv' returned 2: 
>> System error 5 has occurred.
>>
>> Access is denied.
>> Error: /Stage[main]/Disablesmb/Service[Audiosrv]/ensure: change from 
>> stopped to running failed: Cannot start Audiosrv, error was: Execution of 
>> 'C:/Win
>> dows/system32/net.exe start Audiosrv' returned 2: System error 5 has 
>> occurred.
>>
>> Access is denied.
>> Notice: Finished catalog run in 0.14 seconds
>>
>> if i run it manually a get same error:
>>
>> C:\>net.exe start Audiosrv
>> System error 5 has occurred.
>>
>> Access is denied.
>>
>> what is wrong?
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Puppet Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to puppet-users...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/puppet-users/855b3a53-1dd0-4f80-b456-a96299f67c05%40googlegroups.com
>>  
>> 
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> Most likely you are not running with elevated privileges, which is 
> required in order to manage services (and most other things you're going to 
> want to do with puppet).
>
> Josh
>
> -- 
> Josh Cooper
> Developer, Puppet Labs
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/ba6fdbee-58c2-45e7-b982-3fad2b4fce8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Re: Making a "role" fact work

2016-01-28 Thread Gareth Humphries
Follow-up - I've managed to extract the node definition which includes the 
top level classes ("settings" and "role") - I'm presently working on how to 
extract the data I need from that.

I lookup the node with:
  node=Puppet::Node.indirection.find( lookupvar('fqdn') )

Which works, and if i pp() it I can see it has an attribute: 
@known_resource_types=TypeCollection{:hostclasses=>["", "settings", 
"role::gareth"], ..., ... }

So, now I just need to figure out the syntax to extract that data from 
within my function.  Getting closer!



On Thursday, January 28, 2016 at 3:17:00 PM UTC, Gareth Humphries wrote:
>
> Hi All,
>
> I'm trying to add a new fact to puppet, which is the role the host has - 
> I'm using the popular roles/profiles methodology, so all nodes have exactly 
> one role:: class.  I want to get the  into a fact.
>
> I've managed to get it working easily enough, but either not automatically 
> or only on subsequent puppet runs (ie not the first).  This makes perfect 
> sense, given the work flow of collect-facts -> compile catalog -> 
> send-catalog-to-host.
>
> My next attempt is to write a server-side function that can analyse the 
> catalog after it's been built, extract the class names, find one that 
> matches /^role::/ and bob's your uncle.
>
> I'm having trouble getting started though - can anyone help me out with 
> how I might get access to the catalog?  Is there a variable I can lookup, 
> or a function or something?
>
> Is the catalog even available, or are functions run before compilation? 
>  Is there any way I can access a list of classes being applied?
>
>
> I don't want to require something be done by developers (for example, 
> putting the logic it in role.pp and require all roles to inherit that), as 
> that leaves too much room for mistakes.  I really want it to be 
> automatically done on all hosts, and available from the first run.
>
>
> I'm not married to parsing the catalog - the end goal here is just getting 
> the fact - any other ideas welcome.
>
>
>
> Thoughts?
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/7adc0f33-1cda-4e7a-a341-0a1287e54f09%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Re: Making a "role" fact work

2016-01-28 Thread Gavin Williams
Gareth

I've been working through the same issue internally here for a new Cloud 
based platform, and came up with the solution of pre-loading the machine 
with the role at the point the machine is provisioned. 
Then when it first checks in with Puppet it's already for the fact 
present... 

Might be another option?

Cheers
Gav

On Thursday, 28 January 2016 15:17:00 UTC, Gareth Humphries wrote:
>
> Hi All,
>
> I'm trying to add a new fact to puppet, which is the role the host has - 
> I'm using the popular roles/profiles methodology, so all nodes have exactly 
> one role:: class.  I want to get the  into a fact.
>
> I've managed to get it working easily enough, but either not automatically 
> or only on subsequent puppet runs (ie not the first).  This makes perfect 
> sense, given the work flow of collect-facts -> compile catalog -> 
> send-catalog-to-host.
>
> My next attempt is to write a server-side function that can analyse the 
> catalog after it's been built, extract the class names, find one that 
> matches /^role::/ and bob's your uncle.
>
> I'm having trouble getting started though - can anyone help me out with 
> how I might get access to the catalog?  Is there a variable I can lookup, 
> or a function or something?
>
> Is the catalog even available, or are functions run before compilation? 
>  Is there any way I can access a list of classes being applied?
>
>
> I don't want to require something be done by developers (for example, 
> putting the logic it in role.pp and require all roles to inherit that), as 
> that leaves too much room for mistakes.  I really want it to be 
> automatically done on all hosts, and available from the first run.
>
>
> I'm not married to parsing the catalog - the end goal here is just getting 
> the fact - any other ideas welcome.
>
>
>
> Thoughts?
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/a49ccf41-f4d8-428b-8637-d0de1afed92e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] Warning: Local environment: "production" doesn't match server specified node environment

2016-01-28 Thread Matt Zagrabelny
Hi Alfredo,

Thanks for the reply.

On Wed, Jan 27, 2016 at 4:47 PM, Alfredo De Luca
 wrote:
> Hi Matt.
> AFAIK production is the default environment assigned to all the nodes.

Sure.

> try
> puppet config print environment

Yep, production:

# puppet config print environment
production

So how do I get the warning to go away?

Warning: Local environment: "production" doesn't match server
specified node environment "apt", switching agent to "apt".

Any ideas?

-m

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/CAOLfK3UAMWc4dEWsspDnkGNkbiEYKSR5vN-CmxTFbP0RhfLAtQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Garrett Honeycutt
On 1/28/16 9:40 AM, Alex Harvey wrote:
> Hi all,
> 
> I am interested in the future of the Librarian-puppet project - to find
> out how many people are still using it, and if there are people out
> there who actually prefer it over R10K.
> 
> I recently looked into R10K for a few projects I was working on, and I
> found it to be surprisingly complicated.  It had many features I didn't
> seem to need, features that overlap with features provided by
> Jenkins/Bamboo, and appeared designed with a view to helping people
> deploy code in complex ways, help them to test short lived branches on
> Puppet masters, etc.  This might have made sense once, but if you're
> doing all your development in a test-driven fashion in
> Vagrant/Rspec-puppet/Beaker, I can't see a need for R10K's features, and
> concluded it was mainly just a lot harder to understand than
> Librarian-puppet.  I do see that it performs better, but again,
> Librarian-puppet has never been a bottleneck.
> 
> Other views most appreciated.
> 
> With best regards,
> Alex

Hi Alex,

I generally implement both for customers. Though I use Dan Bode's
librarian-puppet-simple which purposely does not handle dependencies. I
spoke at a couple Puppet Camp's regarding dealing with modules and here
are slides[1] explaining the pro's and con's of the different approaches.

R10k is great, even with a build pipeline, because the caching feature
really speeds up the build jobs over librarian-puppet, which will need
to download the git repo's each time.

I maintain a bunch of modules that you might consider as common or base
to an OS such as SSH, NTP, PAM, hosts, timezone, NFS, etc as well as
code for modeling PuppetDB, Puppet agents and masters that are tracked
in a Puppetfile[2]. Since that has its own life cycle outside of the
clients' and does not need git branch to environment mapping it is
maintained with librarian-puppet-simple.

I've also used r10k to build Puppet platform as a service for large
enterprises that have many products and teams with their own distinct
environments. This allows many teams to leverage each others work while
giving them their own autonomy with regards to number of environments,
testing abilities, module versions and release schedules.

[1] -
http://www.slideshare.net/gh/2014-multiple-approaches-to-managing-puppet-modules-puppet-camp-seattle

[2] - https://github.com/ghoneycutt/puppet-modules

Best regards,
-g

-- 
Garrett Honeycutt
@learnpuppet
Puppet Training with LearnPuppet.com
Mobile: +1.206.414.8658

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/56AA68D0.4070304%40garretthoneycutt.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Alex Harvey


On Friday, January 29, 2016 at 6:15:41 AM UTC+11, Garrett Honeycutt wrote:
>
>
> Hi Alex, 
>
> I generally implement both for customers. Though I use Dan Bode's 
> librarian-puppet-simple which purposely does not handle dependencies. I 
> spoke at a couple Puppet Camp's regarding dealing with modules and here 
> are slides[1] explaining the pro's and con's of the different approaches. 
>

Thanks.  Your slides are just what I needed to see.  And I didn't know 
about librarian-puppet-simple and I'm glad I do now.  Yes, dependency 
resolution is indeed a mixed blessing.  When you say you implement both do 
you mean you use librarian-puppet-simple on the CI side of the pipeline and 
R10K on the deployment to Puppet masters side?
 

>
> R10k is great, even with a build pipeline, because the caching feature 
> really speeds up the build jobs over librarian-puppet, which will need 
> to download the git repo's each time. 
>

It may be a documentation problem that I'm struggling with.  You don't 
happen to know of any code or documentation that shows how to R10K in the 
build pipeline?  By the way, Librarian-puppet does support caching via 
$LIBRARAN_PUPPET_TMP, which can point to a long-lived directory on the CI 
server.  So, actually, Librarian-puppet has never been a bottleneck for me, 
and unnoticeable relative to the time it takes all the tests to run.


> I've also used r10k to build Puppet platform as a service for large 
> enterprises that have many products and teams with their own distinct 
> environments. This allows many teams to leverage each others work while 
> giving them their own autonomy with regards to number of environments, 
> testing abilities, module versions and release schedules. 
>

I'd love to know more about this. :) 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/4677fe0e-4a21-4635-9333-2a2c99f516ec%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] librarian-puppet vs R10K

2016-01-28 Thread Alex Harvey


On Friday, January 29, 2016 at 2:31:14 AM UTC+11, Steve Traylen wrote:
>
>
> There's another one to consider 
> https://github.com/cernops/jens 
> it recently got an update to accept hook calls from gitlab. We get 
> our git pushes deployed in 0.4s now.  
>

Thanks I'll keep it in mind!

>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/384059a2-15e6-4996-b139-4f3c908dea76%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.