Re: [Puppet Users] How-To Question: Installing a service that does not come in an RPM ?

2011-10-18 Thread Nathan Clemons
The one thing that I'll mention is that you want to use hasstatus = true
whenever possible, I've found, at least on older versions of Puppet
(0.25.x). Sometimes the logic it tries to use otherwise doesn't quite work,
but using the /etc/init.d/servicename status check seems to work fine.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, Oct 18, 2011 at 1:40 PM, Christopher Wood 
christopher_w...@pobox.com wrote:

 On Tue, Oct 18, 2011 at 08:21:34PM +, Dan White wrote:
  Are there any exapmples out there that show an intelligent way to do this
 ?

 http://docs.puppetlabs.com/references/stable/type.html#service

 That makes it sound like as long as you have the right init script (or
 platform-specific variant thereof) installed, puppet will do the right
 thing.

  My searches are not turning up anything useful
 
  “Sometimes I think the surest sign that intelligent life exists elsewhere
 in the universe is that none of it has tried to contact us.”
  Bill Waterson (Calvin  Hobbes)
 
  --
  You received this message because you are subscribed to the Google Groups
 Puppet Users group.
  To post to this group, send email to puppet-users@googlegroups.com.
  To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
  For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.
 
 

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] How-To Question: Installing a service that does not come in an RPM ?

2011-10-18 Thread Nathan Clemons
If it's a straightforward compilation, you should be able to do this with a
set of chained execs.

For instance, a file resource to push the tarball, then an exec to extract
it (which depends on the tarball), an exec to configure it (which depends on
the previous exec), and an exec to install it (which depends on the
configuration exec), and a service (which depends on the install exec).

Using names for the exec steps (rather than just the command as the name,
use a custom name and specify the command parameter), you should be able to
overwrite the configuration exec in a sub-class appropriately.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, Oct 18, 2011 at 6:11 PM, Dan White y...@comcast.net wrote:

 Thanks for the opinion.
 I understand your concern, but I have a need to do exactly that.

 Making a long story short, RPM's do not work for this need unless you
 consider a relocatable package
 http://www.rpm.org/max-rpm/s1-rpm-reloc-building-relocatable.html
 and I have seen some serious objections to this particular rpm-extension.

 I need to install multiple instances of a service, some are as simple as
 drop tarball, unroll, run a config script, but at least one needs
 instance-specific parameters compiled into it.

 I want to automate it.  If not puppet, I am open to suggestion, but I have
 a Cobbler/Puppet combo running very nicely (so far) on RHEL5 boxes, and any
 alternative needs to play nice with that environment.

 On Oct 18, 2011, at 5:10 PM, Craig White wrote:

  I've always thought that if you wanted, consistent, repeatable
 methodology for install/remove/upgrade that the native packaging is always
 the way to go and does exactly that with tarballs.
 
  I don't think Puppet is the way to drop tarballs  config  make 
 make install because so many things will break along the way.
 
  Craig
 
  On Oct 18, 2011, at 1:56 PM, Dan White wrote:
 
  RHEL 5, and the packages in question come as tar-balls that have to be
 unrolled into place and then compiled/configured.  Not your simple yum
 install..., sad to say.
 
  - Russell Van Tassell russel...@gmail.com wrote:
  It might be helpful to include the O/S you're asking about, possibly
 with
  the package... sometimes it's a matter of just changing/adding a
  respository. Sometimes it might be a little more involved.
 
 
  On Tue, Oct 18, 2011 at 1:21 PM, Dan White y...@comcast.net wrote:
 
  Are there any exapmples out there that show an intelligent way to do
 this ?
 
  My searches are not turning up anything useful
 
 
  “Sometimes I think the surest sign that intelligent life exists
 elsewhere in the universe is that none of it has tried to contact us.”
  Bill Waterson (Calvin  Hobbes)
 
  --
  You received this message because you are subscribed to the Google
 Groups Puppet Users group.
  To post to this group, send email to puppet-users@googlegroups.com.
  To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
  For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.
 
 
  --
  Craig White ~
 craig.wh...@ttiltd.com
  1.800.869.6908 ~~
 www.ttiassessments.com
 
  Need help communicating between generations at work to achieve your
 desired success? Let us help!
 
  --
  You received this message because you are subscribed to the Google Groups
 Puppet Users group.
  To post to this group, send email to puppet-users@googlegroups.com.
  To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
  For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.
 

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] file server not right directory?

2011-10-12 Thread Nathan Clemons
Try:

  file { /etc/mysql:
 ensure = directory,
 mode = 0755,
 owner = root,
 group = root,
  }

  file { /etc/mysql/my.cnf:
source = puppet:///modules/mysql-server/my.cnf,
owner = mysql, group = mysql,
mode  = 644,
notify = Service[mysql],
require = File[/etc/mysql]
  }

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, Oct 12, 2011 at 2:49 PM, olympus stance olympus.sta...@gmail.comwrote:

 Hi Jacob,

 My init.pp file is a symbolic link to the mysql-server.pp in the classes
 directory. It looks like this:

 ---
 class mysql-server {

   package { mysql-server: ensure = installed }
   package { mysql-client: ensure = installed }
   service { mysql:
  enable = false,
  require = Package[mysql-server],

   }

   file { /etc/mysql/my.cnf:
 source = puppet:///modules/mysql-server/my.cnf,
 owner = mysql, group = mysql,
 mode  = 644,
 notify = Service[mysql],
   }



   exec { run-mysqld:
 path = [/bin, /usr/sbin],
 command = /usr/sbin/mysqld ,
   }

   exec { set-mysql-password:
 path = [/bin, /usr/bin],
 command = mysqladmin -uroot password secret,
   }


   exec { set-nagios-password:
 path = [/bin, /usr/bin],
 command = /usr/bin/mysql -u root  -e \CREATE USER 'nagios'@'%'
 IDENTIFIED BY 'secret';\,
   }


 }
 ---


 It looks like it does indeed try to create the my.cnf file before mysql
 gets installed. How can i rectify that

 Thanks!!


 On Wed, Oct 12, 2011 at 5:37 PM, Jacob Helwig ja...@puppetlabs.comwrote:

 On Wed, 12 Oct 2011 14:33:47 -0700, John Bower wrote:
 
  Hello,
 
  I'm trying to share a file between the client and the server.
 
  On the server the file is located at: /etc/puppet/modules/mysql-server/
  files/my.cnf
 
  the code that references to this file is as follows:
 
file { /etc/mysql/my.cnf:
  source = puppet:///modules/mysql-server/my.cnf,
  owner = mysql, group = mysql,
  mode  = 644,
  notify = Service[mysql],
}
 
  Essentially, I want the client to store the my.cnf file to /etc/mysq/
  my.cnf
 
  However i keep getting this error:
  err: /Stage[main]/Mysql-server/File[/etc/mysql/my.cnf]/ensure: change
  from absent to file failed: Could not set 'file on ensure: No such
  file or directory - /etc/mysql/my.cnf.puppettmp_9888 at /etc/puppet/
  modules/mysql-server/manifests/init.pp:15
 
 
 
  i tried setting  source = puppet:///modules/mysql-server/files/
  my.cnf,
 
 
  But that did not make a difference. Please help.
 

 Does /etc/mysql exist on the client machine?

 --
 Jacob Helwig


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users]

2011-09-29 Thread Nathan Clemons
*sigh* And how did these spammers know I was so flat-chested?

Seriously, can you guys enlighten us as to what's being done to prevent spam
coming in on the list? It's been pretty prevalent lately. I'm not sure if
Google Groups just doesn't cut it or what, but I'm hoping you guys have some
plans in mind.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Sep 29, 2011 at 7:05 AM, Mark Ardiente mark_k...@yahoo.com wrote:

 http://biggerbras.ca/store/site.php?html50

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] fighting packaging

2011-08-12 Thread Nathan Clemons
Isn't there an adminfile option to the package resource that will let you
pass responses as if it were an interactive session? Not sure if it's
supported for the apt provider, but worth looking into if you haven't
already.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Aug 12, 2011 at 9:53 AM, Craig White craig.wh...@ttiltd.com wrote:

 Clearly not a problem caused by puppet but something I can't apparently
 deploy with puppet unless someone has an idea.

 Trying to automate a way to deploy mod_mono for apache

 from CLI, the problem seems obvious...

 apt-get install -y --assume-yes libapache2-mod-mono mono-apache-server
 libmono-firebirdsql1.7-cil

 a massive pile of packages installs and it finally arrives at the truth
 moment:

 Configuration file `/etc/apache2/mods-available/mod_mono.conf'
  == File on system created by you or by a script.
  == File also in package provided by package maintainer.
   What would you like to do about it ?  Your options are:
Y or I  : install the package maintainer's version
N or O  : keep your currently-installed version
  D : show the differences between the versions
  Z : background this process to examine the situation
  The default action is to keep your current version.
 *** mod_mono.conf (Y/I/N/O/D/Z) [default=N] ?

 So it appears that the same target, mod_mono.conf is being created both by
 script and a file in the package itself and it appears that all of the '-y'
 or '--assume-yes' logic in the command itself will not allow an install to
 progress without an interactive answer to the question - the answer to which
 is essentially meaningless because I can control the file anyway with
 puppet.

 Anyone have an idea how to defeat well intentioned but defective packager
 logic?

 --
 Craig White ~~  craig.wh...@ttiltd.com
 1.800.869.6908 ~~~ www.ttiassessments.com

 Need help communicating between generations at work to achieve your desired
 success? Let us help!

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: Managing sudo via puppet using #includedir

2011-08-01 Thread Nathan Clemons
These are the perms we're using for that functionality:

dr-xr-x--- 2 root root 4096 Jul  7 18:09 /etc/sudoers.d

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Mon, Aug 1, 2011 at 2:49 PM, treydock treyd...@gmail.com wrote:

 From the sudoer docs it mentioned making the files in /etc/sudoers.d
 be 440, but what about the folder?  Here's the perms on /etc/sudoers.d

 drwxr-xr-x   2 root root 4096 Jul 26 19:16 .
 drwxr-xr-x. 64 root root 4096 Jul 26 19:16 ..
 -r--r-   1 root root   53 Jul 26 19:16 zabbix-puppet

 - Trey

 On Aug 1, 3:47 pm, Len Rugen lenru...@gmail.com wrote:
  It's working here for RHEL 5  6.  Check the owner and perms of
 sudoers.d,
  that's probably not your problem, but it's the only one we've had.

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] require = Class

2011-06-30 Thread Nathan Clemons
Are both of the .pp files being imported in site.pp / init.pp?

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Jun 30, 2011 at 5:19 PM, brijesh bridgepa...@gmail.com wrote:

 Hi

 I have been trying to use class dependency and had no luck so far.
 following are the two classes i am trying to use

 [root@puppet]#cat libreoffice.pp

 class libreoffice {

  case $hostname {
  foo: { package { libreoffice: ensure = present, require =
 Class[foo1] } }
 }
 }

 [root@puppet]#cat foo.pp

 class foo1 {
  package { openoffice.org-core:
ensure = absent,
  }
 }

 When i run puppetd on client i get the error message
  Could not retrieve catalog from remote server: Error 400 on SERVER:
 Could not find class foo1 at /etc/puppet/manifests/classes/
 libreoffice.pp:18 on node

 Do i need to do anything else in order to use require = Class?

 Any help would be appreciated

 Thanks

 Brijesh



 Do i need

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Puppet client do-overs

2011-06-30 Thread Nathan Clemons
What problem do you have with puppetstoreconfigclean.rb? The problem I
usually have is that I forget it has to be run as root on the puppetmaster,
I keep thinking I need to run it on the client machine.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Jun 30, 2011 at 9:59 AM, Craig White craig.wh...@ttiltd.com wrote:

 I am pulling in the 'client' intended version of puppet.conf on my
 puppetmaster system - probably because I had a package that required a class
 it shouldn't have and I have fixed that (I think - hard to test) but even
 after killing off all puppetd processes, clearing out
 /var/lib/puppet/client_yaml/* and /var/lib/puppet/state/* and restarting
 puppetd they just seem to reload the specific mod_puppet classes that it
 shouldn't. Perhaps it is a stored config and I've tried running
 puppetstoredconfigclean.rb without any success (user stupidity for not
 knowing what this host file is supposed to look like).

 How can I get a fresh start with a client so it operates only on the
 classes it is configured to use?

 Craig

 --
 Craig White ~~  craig.wh...@ttiltd.com
 1.800.869.6908 ~~~ www.ttiassessments.com

 Need help communicating between generations at work to achieve your desired
 success? Let us help!

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] struggling with precedence/declarative language

2011-06-28 Thread Nathan Clemons
Did the error change, at least? If so, can you post the new error?

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, Jun 28, 2011 at 11:23 AM, Craig White craig.wh...@ttiltd.comwrote:


 On Jun 28, 2011, at 11:14 AM, Cosimo Streppone wrote:

  On Tue, 28 Jun 2011 20:01:20 +0200, Craig White craig.wh...@ttiltd.com
 wrote:
 
  The error:
  err: Could not retrieve catalog from remote server: Error 400 on SERVER:
 Invalid parameter mode at
 /etc/puppet/modules/firebird/manifests/service.pp:17 on node ubuntu2.ttinet
 
  class firebird::service {
   exec { Create symlink for /var/fbdata:
 ...
 mode= 755,
 ...
   }
 
  Maybe exec resources, like your Create symlink ...
  do not want a mode parameter?
 
 duh, of course it is irrelevant and I removed it - don't know what I was
 thinking.

 It didn't solve the issue though

 Craig

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: Different users within same exec

2011-06-26 Thread Nathan Clemons
I agree with Daniel... if USER 1 is creating FOLDER 1 which is owned by
root... why is COMMAND 1 not being run by the user root?

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Sun, Jun 26, 2011 at 11:01 AM, ssk1287 kulkarni.swar...@gmail.comwrote:

 Consider the following scenario.

 I have a PROCESS 1 triggered by COMMAND 1 which is run by USER 1 that
 creates a folder FOLDER 1 which is owned by the root as it should be
 accessible to all users of the system. Now, before I run COMMAND 1, I
 need to run a command COMMAND 2 that clean ups this FOLDER 1 that was
 created during the previous run so as to have a fresh start. Since
 FOLDER 1 is owned by root, I need to run COMMAND 2 as a root user but
 my COMMAND 1 is run by USER 1.

 On Jun 25, 1:56 pm, Daniel Pittman dan...@puppetlabs.com wrote:
  Nope.  If you feel strongly that there should be, you can drop in a
  feature request or submit a patch, and we would be happy to consider
  it.  Generally, though, it seems like a very strange requirement.  I
  can't imagine why you would need to do those operations as different
  users, although I absolutely believe you when you say that you do.
 
  It would be very helpful, so, if you could explain what the root cause
  of that need is.  :)
 
  Daniel
 
  On Sat, Jun 25, 2011 at 06:54, ssk1287 kulkarni.swar...@gmail.com
 wrote:
   That is exactly what I ended up using. Isn't there a more puppetty
   way of doing this ?
 
   On Jun 24, 5:41 pm, Nathan Clemons nat...@livemocha.com wrote:
   Use su -c cmd user?
   --
   Nathan Clemonshttp://www.livemocha.com
   The worlds largest online language learning communityOn Fri, Jun 24,
 2011 at 3:06 PM, ssk1287 kulkarni.swar...@gmail.com wrote:
I have the following exec in my manifest :
 
exec { some_exec:
   path = [ /bin,/usr/bin,/usr/local/bin ],
   command = EXECUTE COMMAND 1,
   onlyif = EXECUTE COMMAND 2,
   logoutput = on_failure
 }
 
I want that the COMMAND 1 should be executed by USER 1 and
COMMAND 2 should be executed by USER 2. Is there a way to do it
 ?
I tried giving the users parameter, but that seems to apply to
 both
the commands.
 
Thanks in advance,
 
--
You received this message because you are subscribed to the Google
 Groups
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
   http://groups.google.com/group/puppet-users?hl=en.
 
   --
   You received this message because you are subscribed to the Google
 Groups Puppet Users group.
   To post to this group, send email to puppet-users@googlegroups.com.
   To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
   For more options, visit this group athttp://
 groups.google.com/group/puppet-users?hl=en.
 
  --
  ⎋ Puppet Labs Developer –http://puppetlabs.com
  ✉ Daniel Pittman dan...@puppetlabs.com
  ✆ Contact me via gtalk, email, or phone: +1 (877) 575-9775
  ♲ Made with 100 percent post-consumer electrons

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Turn off client autoupdate

2011-06-24 Thread Nathan Clemons
Just disable the puppet agent / puppetd (depending on your version) in
chkconfig / update-rc.d / etc.

Further runs would then be done via ssh, either manually or via a
distributed ssh command like ralsh, pdsh, clusterssh, etc.

This is what we do at Livemocha; we're actually in the process of switching
over to using MCollective to trigger Puppet runs.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 24, 2011 at 1:47 AM, Sergey V. Arlashin sergey...@gmail.comwrote:

 By default puppet node connects to server periodically and looks if
 there is something execute. I'm wondering is it possible to make
 puppet clients not connect to server themselves? So that it would be
 possible to update a node only with puppetrun nodename.

 ---
 WBR, Sergey

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] ssh_authorized_key and NIS user

2011-06-24 Thread Nathan Clemons
I'm wondering if the User provider has the capability to look up accounts
via NIS. It's been a long time since I've used NIS, however, so I don't know
if this is the problem for sure.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 24, 2011 at 6:41 AM, Andreas Kuntzagk 
andreas.kuntz...@mdc-berlin.de wrote:

 I'm wondering if my description was not clear enough or nobody knows an
 answer to this. Did I stumble across a bug here and should open a ticket?

 regards, Andreas


 Andreas Kuntzagk wrote:

 Hi,

 I have this resource definition:

 ssh_authorized_key { nagios@login2:
key   = [REDACTED]
   user= nagios,
   type= ssh-dss,
   require = Service['nis'],
 }

 This nagios user comes from NIS, yp.conf and nsswitch.conf are handled by
 puppet and configured before the key. I still get an User does not exist.

 daemon.log:
 ...
 Jun 17 14:00:57 node016 puppet-agent[1109]: 
 (/Stage[main]/All/File[/**localhome/nagios/]/ensure)
 created
 Jun 17 14:12:53 node016 puppet-agent[1109]: (/Stage[main]//Ssh_authorized_
 **key[root@node002]/ensure) created
 Jun 17 14:15:14 node016 puppet-agent[1109]: 
 (/Stage[main]//File[/etc/**idmapd.conf]/content)
 content changed '{md5}**3e94f238294cc61b047e7ae50115df**fc' to '{md5}**
 6d9c69f38eca81ab0f879c2771d5d5**43'
 Jun 17 14:15:14 node016 puppet-agent[1109]: (/Stage[main]//Service[idmapd]
 **/ensure) ensure changed 'stopped' to 'running'
 Jun 17 14:15:14 node016 puppet-agent[1109]: (/Stage[main]//Service[idmapd]
 **) Triggered 'refresh' from 1 events
 Jun 17 14:15:41 node016 puppet-agent[1109]: (/Stage[main]/All/File[/etc/*
 *yp.conf]/ensure) defined content as '{md5}**
 9c23d37f431c0788c212d3c0ab8a48**af'
 Jun 17 14:15:58 node016 puppet-agent[1109]: (/Stage[main]/All/All::Append_
 **if_no_such_line[sudoers_**nagios_smartctl]/Exec[/bin/**echo 'nagios
 ALL=(root) NOPASSWD: /usr/sbin/smartctl'  '/etc/sudoers']/returns)
 executed su
 ccessfully
 Jun 17 14:17:03 node016 puppet-agent[1109]: (/Stage[main]//Package[nis]/*
 *ensure) ensure changed 'purged' to 'latest'
 Jun 17 14:17:39 node016 puppet-agent[1109]: (/Stage[main]/All/File[/etc/*
 *nsswitch.conf]/content) content changed '{md5}**
 295c15c4bdac80e50b37689ef08f35**9c' to '{md5}**
 250a1851aec43bcc5f73e8a01b2141**bd'
 Jun 17 14:17:43 node016 puppet-agent[1109]: (/Stage[main]/All/Service[nis]
 **) Triggered 'refresh' from 4 events
 Jun 17 14:17:50 node016 puppet-agent[1109]: (/Stage[main]//Ssh_authorized_
 **key[nagios@login2]/ensure) created
 Jun 17 14:17:50 node016 puppet-agent[1109]: (/Stage[main]//Ssh_authorized_
 **key[nagios@login2]) Could not evaluate: User 'nagios' does not exist
 Jun 17 14:18:06 node016 puppet-agent[1109]: (/Whit[last]) Dependency
 Ssh_authorized_key[nagios@**login2] has failures: true
 ...

 This is Ubuntu 10.04 with puppet 2.6.8

 regards, Andreas


 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to puppet-users+unsubscribe@**
 googlegroups.com puppet-users%2bunsubscr...@googlegroups.com.
 For more options, visit this group at http://groups.google.com/**
 group/puppet-users?hl=enhttp://groups.google.com/group/puppet-users?hl=en
 .



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Turn off client autoupdate

2011-06-24 Thread Nathan Clemons
Under 0.25, we do puppet --onetime --no-daemonize.

I'm not sure if that syntax changed in 2.6.x and above.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 24, 2011 at 7:14 AM, sergey sergey...@gmail.com wrote:

 And how is it possible to connect to puppet client via ssh? I mean I
 usually issue puppetrun nodename and then puppetmaster  connects to puppet
 client on the client node. What should I do in case of ssh connect?

 ---
 WBR, Sergey

 On Jun 24, 2011, at 6:10 PM, Nathan Clemons wrote:

 Just disable the puppet agent / puppetd (depending on your version) in
 chkconfig / update-rc.d / etc.

 Further runs would then be done via ssh, either manually or via a
 distributed ssh command like ralsh, pdsh, clusterssh, etc.

 This is what we do at Livemocha; we're actually in the process of switching
 over to using MCollective to trigger Puppet runs.

 --
 Nathan Clemons
 http://www.livemocha.com
 The worlds largest online language learning community



 On Fri, Jun 24, 2011 at 1:47 AM, Sergey V. Arlashin 
 sergey...@gmail.comwrote:

 By default puppet node connects to server periodically and looks if
 there is something execute. I'm wondering is it possible to make
 puppet clients not connect to server themselves? So that it would be
 possible to update a node only with puppetrun nodename.

 ---
 WBR, Sergey

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Enable yum repositories as needed

2011-06-24 Thread Nathan Clemons
There's an open bug concerning this very issue, in regards to being able to
specify which repos to use when installing an rpm using the package
resource.

http://projects.puppetlabs.com/issues/2247

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 24, 2011 at 12:27 PM, Craig White craig.wh...@ttiltd.comwrote:


 On Jun 24, 2011, at 11:48 AM, James A. Peltier wrote:

  Hi All,
 
  I'm new to puppet and I'm having some difficulty enabling and disabling
 yum repositories on an as needed basis and I was wondering if you all might
 be able to provide me with some assistance.  I've been able to get puppet to
 configure a yum repository, I'm going to use EPEL as an example here but I'd
 like it for all, by creating a class called epel.pp containing
 
  class epel {
   yumrepo { epel: descr = Extra Packages for Enterprise Linux
 \$releasever - \$basearch, baseurl = 
 http://mirror.its.sfu.ca/mirror/CentOS-Third-Party/epel/\$releasever/\$basearch;,
 gpgcheck = 1, gpgkey = 
 http://mirror.its.sfu.ca/mirror/CentOS-Third-Party/epel/RPM-GPG-KEY-EPEL;,
 enabled=0 }
  }
 
  and it does create and populate the /etc/yum.repos.d/epel.repo file with
 this information.  Now I want to be able to install ganglia-gmond
 automatically from this repository but I can't figure out how to enable and
 disable the repo afterwards?  Can anyone please provide an example of how
 something like this may be accomplished?
 
 I've been at this for less than a week and primarily concentrating on
 ubuntu, not RHEL/CentOS so take this with a grain of salt

 You have to be careful when installing packages from another repo but
 generally, you just keep the EPEL repo disabled and instead of using the
 built-in package command, you would want to 'exec' something like...

 exec('/usr/bin/yum --enablerepo=epel install -y ganglia-gmond') and I would
 also note that you have to ensure that the rpm-gpg key is installed for the
 epel repo BEFORE that command is executed - I believe you already provided
 the gpg-key URL to us.

 something like this should work (adapt for rpm/yum and note that rpm stores
 keys in /etc/pki/rpm-gpg)...

 class apt {
  package { apt:
ensure = installed,
}
  file{/etc/apt/sources.list:
ensure  = present,
owner   = root,
group   = root,
mode= 0444,
content = template(apt/sources.list.erb),
require = Package[apt],
  }
  exec{/usr/bin/apt-get update:
refreshonly = true,
subscribe   = File[/etc/apt/sources.list],
require = File[/etc/apt/sources.list],
  }
  # MongoDB Key
  apt::key { 7F0CEB10:
keyid  = 7F0CEB10,
ensure = present,
  }
 }
 define apt::key($keyid, $ensure, $keyserver = keyserver.ubuntu.com) {
  case $ensure {
present: {
  exec { Import $keyid to apt keystore:
path= /bin:/usr/bin,
environment = HOME=/root,
command = gpg --keyserver $keyserver --recv-keys $keyid  gpg
 --export --armor $keyid | apt-key add -,
user= root,
group   = root,
unless  = apt-key list | grep $keyid,
logoutput   = on_failure,
  }
}
absent:  {
  exec { Remove $keyid from apt keystore:
path= /bin:/usr/bin,
environment = HOME=/root,
command = apt-key del $keyid,
user= root,
group   = root,
onlyif  = apt-key list | grep $keyid,
  }
}
default: {
  fail Invalid 'ensure' value '$ensure' for apt::key
 }
  }
 }

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Different users within same exec

2011-06-24 Thread Nathan Clemons
Use su -c cmd user?
--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 24, 2011 at 3:06 PM, ssk1287 kulkarni.swar...@gmail.com wrote:

 I have the following exec in my manifest :

 exec { some_exec:
path = [ /bin,/usr/bin,/usr/local/bin ],
command = EXECUTE COMMAND 1,
onlyif = EXECUTE COMMAND 2,
logoutput = on_failure
  }

 I want that the COMMAND 1 should be executed by USER 1 and
 COMMAND 2 should be executed by USER 2. Is there a way to do it ?
 I tried giving the users parameter, but that seems to apply to both
 the commands.

 Thanks in advance,

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Questions for puppet 2.6.8 client certificate management

2011-06-17 Thread Nathan Clemons
I could be wrong, as I'm still on 0.25 myself, but I think you want the
--waitforcert seconds option.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 17, 2011 at 5:49 AM, TJ Yang tjyang2...@gmail.com wrote:

 How do I initiate a certificate request without going into non-daemon mode
 ?

 According to Pro Puppet book, so far the only way I know that can
 trigger a certficate request with puppet master is like this

  puppet agent --server=puppetmaster.test.com --no-daemonize --verbose

 but doing so will break my intention of automation I need to create a
 puppet client package. A control-C is needed to terminate the process.
 I have puppetmaster configured to be auto grant and sign certificate
 requests. and I like puppet client can auto issue a request which will
 be granted and start itself up when running
 /etc/init.d/puppetagent268  start


 Is there a command  puppet cert --clean puppetagent1.test.com for
 puppet agent ?
 For now I have to go into $ssldir subdirectory to manually cleanup
 existing certificate.

 --
 T.J. Yang

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Problem in wordpress moodule.

2011-06-17 Thread Nathan Clemons
Simple question, but does wordpress.tar.gz exist in /var/www/ ?

I would expect that you would want your tar exec to depend on whatever is
deploying the wordpress tar.gz file (another Exec or a File resource), so
that you know it's there before you try to use it.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 17, 2011 at 6:14 AM, lucas.brig...@ymail.com 
grillobri...@gmail.com wrote:

 Hi!

 I'm doing a module for the puppet for WordPress will implement.

 I'm having problems with this line:

 exec { tar -vzxf ${downdir}wordpress.tar.gz:
 path =
 [/usr/local/bin,/opt/local/bin,/usr/bin,/usr/sbin],
 }


 And the error generated is this:

 err: /Stage[main]//Node[lucas.com.br]/Wordpress::Install[ ]/Exec[tar -vzxf
 /var/www/wordpress.tar.gz]/returns: change from notrun to 0 failed: tar
 -vzxf /var/www/wordpress.tar.gz returned 1 instead of one of [0] at
 /etc/puppet/modules/wordpress/manifests/install.pp:40



 Can anyone help me?





 --
 Lucas Pereira Brígida
 www.codebroken.wordpress.com

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: Puppet recipe to copy and execute a shell file

2011-06-17 Thread Nathan Clemons
You want:

file { blah:
  ...
}
exec {blah2:
  ...
  require = File['blah']
}

That way you ensure the file is created before you try to run the exec.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 17, 2011 at 10:43 AM, Annie Rana annier...@gmail.com wrote:

 Hi,

 Thanks much for help. Some how I managed to execute the original shell
 script using command in exec command='sh /tmp/QoS/QoS.sh' and I used path
 parameter as well path='/sbin:/sbin/ipatbles:/bin:/usr/bin' but I have to
 run file and exec recipes separately one after another otherwise exec is
 executed first if both are placed in one recipe and causing file not found
 error. Is there any way to define the sequence of execution?

 Regards,

 Annie


 On Fri, Jun 17, 2011 at 4:50 PM, Luke Bigum luke.bi...@lmax.com wrote:

 Wouldn't have worked anyway, change print to echo and I forgot #!/
 bin/bash... That's what I get for writing code from memory ;)

 That's strange, I just put this in my Puppet server:

 node 'puppetmaster' {
   file { '/etc/shell_file':
ensure = present,
owner = 'root',
group = 'root',
mode = '0755',
 source = 'puppet:///modules/puppet/shell_file',
   }

  exec { '/etc/shell_file': require = File['/etc/shell_file'] }
 }

 [root@co1puppet01 live]# cat ../../modules/live/puppet/files/
 shell_file
 #!/bin/bash
 export LAN=eth1
 export WAN=eth0

 CMD=tc filter add dev ${WAN} parent 1:0 prio 4 protocol ip u32 match
 ip tos 0x880xff classid 1:12
 OUT=$($CMD)
 RET=$?
 echo Command '$CMD' returned $RET 21  /tmp/QoS.out
 echo Command '$CMD' output '$OUT' 21  /tmp/QoS.out

 CMD=iptables -t mangle -A FORWARD -i ${LAN} -o ${WAN} -p udp --sport
 2345 -j TOS --set-tos 0x28
 OUT=$($CMD)
 RET=$?
 echo Command '$CMD' returned $RET 21  /tmp/QoS.out
 echo Command '$CMD' output '$OUT' 21  /tmp/QoS.out

 CMD=iptables-save
 OUT=$($CMD)
 RET=$?
 echo Command '$CMD' returned $RET 21  /tmp/QoS.out
 echo Command '$CMD' output '$OUT' 21  /tmp/QoS.out

 [root@puppetmaster live]# puppetd --test
 info: Caching catalog for puppetmaster
 info: Applying configuration version '1308324915'
 notice: /Stage[main]//Node[puppetmaster]/Exec[/etc/shell_file]/
 returns: executed successfully
 notice: Finished catalog run in 1.04 seconds

 [root@puppetmaster]# cat /tmp/QoS.out
 Command 'tc filter add dev eth0 parent 1:0 prio 4 protocol ip u32
 match ip tos 0x880xff classid 1:12' returned 1
 Command 'tc filter add dev eth0 parent 1:0 prio 4 protocol ip u32
 match ip tos 0x880xff classid 1:12' output ''
 Command 'iptables -t mangle -A FORWARD -i eth1 -o eth0 -p udp --sport
 2345 -j TOS --set-tos 0x28' returned 2
 Command 'iptables -t mangle -A FORWARD -i eth1 -o eth0 -p udp --sport
 2345 -j TOS --set-tos 0x28' output ''
 Command 'iptables-save' returned 0
 Command 'iptables-save' output '# Generated by iptables-save v1.3.5 on
 Fri Jun 17 15:48:48 2011
 *mangle
 :PREROUTING ACCEPT [3642:790381]
 :INPUT ACCEPT [2591:636935]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [2551:866979]
 :POSTROUTING ACCEPT [2551:866979]
 COMMIT
 # Completed on Fri Jun 17 15:48:48 2011
 # Generated by iptables-save v1.3.5 on Fri Jun 17 15:48:48 2011
 *filter
 :INPUT ACCEPT [2637:639987]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [2588:875945]
 COMMIT
 # Completed on Fri Jun 17 15:48:48 2011'

 I'm running out of ideas. You don't have noexec on /tmp do you? No,
 you said you could run it as root... Anyone else?

 On Jun 17, 4:31 pm, Annie Rana annier...@gmail.com wrote:
  Hi Luke,
 
  I replaced my shell script with the one you wrote. Same old error
 message
  appeared again 'change from notrun to 0 failed: /tmp/QoS/QoS.sh returned
 1
  instead of o at /etc/puppet/manifests/site.pp'
  . Your script didn't generate any log at client machine. Now I am sure
 about
  one thing that there is no issue with the shell script itself. The exec
  command is having hiccup even before executing the shell. I even tried
  command paremeter in exec but no use. Do you know anyother way to
 execute
  bash shell in puppet?
 
  Thanks much,
 
  Annie
 
  On Fri, Jun 17, 2011 at 4:30 PM, Annie Rana annier...@gmail.com
 wrote:
   Hi Luke,
 
   I replaced my shell script with the one you wrote. Same old error
 message
   appeared again 'change from notrun to 0 failed: /tmp/QoS/QoS.sh
 returned 1
   instead of o at /etc/puppet/manifests/site.pp'. Your script didn't
 generated
   any log at client machine. Now I am sure about one thing that there is
 no
   issue with the shell script itself. The exec command is having hiccup
 even
   before executing the shell. I even tried command paremeter in exec but
 no
   use. Do you know anyother way to execute bash shell in puppet?
 
   Thanks much,
 
   Annie
 
   On Fri, Jun 17, 2011 at 4:06 PM, Luke Bigum luke.bi...@lmax.com
 wrote:
 
   I'm out of ideas and I'd resort to hacking the script a bit to get
   some debugging output. Try just this in QoS.sh to try identify what's
   failing:
 
   export

Re: [Puppet Users] puppet CA expired

2011-06-16 Thread Nathan Clemons
What's the length of time on the CA cert?

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Jun 16, 2011 at 10:40 AM, Jacob Helwig ja...@puppetlabs.com wrote:

 On Tue, 14 Jun 2011 17:01:20 +0200, j...@squirk.org wrote:
 
  hi,
 
my puppet CA expired. Anyone knows how to solve the problem and extend
  the validity of the CA ? I mean without recreating one and going on each
  node to change the certs (that is what puppet is made to prevent, going
  to each node ^^)
 
 
  regards,
  Jean.
 

 Pretty sure you can't actually extend the validity of the CA cert.

 Unfortunately, I don't think there's much that can be done at this point
 without touching each node.

 I did open up #7962[1] so we can work out exactly what the safety net
 should look like to help prevent this from happening to other people.

 [1] http://projects.puppetlabs.com/issues/7962

 --
 Jacob Helwig

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (GNU/Linux)

 iQGcBAEBAgAGBQJN+kAOAAoJEHJabXWGiqEBAQ8L/RVhorA/f49gilPW26X82BID
 aGYWFajNg5oBI1OtrieA9J//qNe9HRUUy8xWhq+S+B69FoQ4hU6ocfTH1eXDB8BN
 NM1rwuuqLpTvn1Gguxs3qTMPNyUEqMwugesH1XE7MOUH7XE10SgWqZwBpVpiJBPe
 cMctwUbgN6CfLD1F+wWKfuv9n1L4NvS5AcXj2WjgHbAjAAZx50m3gGIni5U6gF4+
 GTRRxABtAEv0atsvUUO8kxecBhR1N+ZCbQAhk5PcJnKD5CW+7vqxxoC+K0D7BZNZ
 bRKk69IyG/ZFZnMbnzPNdYY2Ol9HE4ClnyydUq7r4uNdG5DbLg5sCPSgZXgAJRzt
 l5N3k4uNSWmnRco5zFmRAxV7YfzSu6o8ZueC07yiu8EeGDpEVWPg29esqUSm7Uqw
 47s2uENGJ2mRr/NfN96YsMjPm2+leKUa37/YcQTdfswdQdkCNGyt/kt5fmncSnYX
 n2DwQ1CmHNQp1gf3wUzSqsIJmlEBKfgSQnTbIyAHBQ==
 =oopZ
 -END PGP SIGNATURE-



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] puppet CA expired

2011-06-16 Thread Nathan Clemons
Thanks. I think having to go out across the board once every 5 years is
quite acceptable, although advance warning from the master that it's going
to happen would definitely be a good thing.

Jean: Kudos to running Puppet for 5 years! :)

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Jun 16, 2011 at 11:09 AM, Jacob Helwig ja...@puppetlabs.com wrote:

 5 years, IIRC.

 --
 Jacob Helwig

 On Thu, 16 Jun 2011 11:03:49 -0700, Nathan Clemons wrote:
 
  What's the length of time on the CA cert?
 
  On Thu, Jun 16, 2011 at 10:40 AM, Jacob Helwig ja...@puppetlabs.com
 wrote:
 
   On Tue, 14 Jun 2011 17:01:20 +0200, j...@squirk.org wrote:
   
hi,
   
  my puppet CA expired. Anyone knows how to solve the problem and
 extend
the validity of the CA ? I mean without recreating one and going on
 each
node to change the certs (that is what puppet is made to prevent,
 going
to each node ^^)
   
  
   Pretty sure you can't actually extend the validity of the CA cert.
  
   Unfortunately, I don't think there's much that can be done at this
 point
   without touching each node.
  
   I did open up #7962[1] so we can work out exactly what the safety net
   should look like to help prevent this from happening to other people.
  
   [1] http://projects.puppetlabs.com/issues/7962
  

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (GNU/Linux)

 iQGcBAEBAgAGBQJN+kbcAAoJEHJabXWGiqEBIgAL/0RX6X/eUll4EZCCZWWaEdby
 +fL9LQvyEPV/IiKeafpbn3Kct3FKIFEgMWOH7xubgp0x36u7jMCmDh4MXiFGOEPL
 BzNyLxPhkTQPG6Ml44INaiQ6wshdIlqFe3HfjtxlQZP/CSVBbPMBIcVwpgaAA6n8
 sJidtfSYPfltbaRB2XMKpIg+ltMG4SEJvCndPBumPZjbrOKsOd4HHcL4MGdp7ump
 ryPj2E9+PXFZ/TZ+oNPSn30v0fX1om/UCHqUelkr6/SJls9P68VWsM7hVIB5Jc4P
 3MwhBWHOzKV+8C7KZsQcUW3qywRCIF3Rb/APM8Ikol7A/fMYQJYvD5QgeVBygoPx
 jwoPoIZAVaxuCXMyOvvaPegsoc0qAk09RlYQXX8EhzwM7NyiatTVojQCZTfecEnO
 diDRs5U/rpjZ2gxrMIGkJMImRKGIDl9e7D+ez1IwY0XyR6b2vYbroeKP8PTG/L/C
 PU6U6MQnzLQ6Eovl+JOifRVZA3+U1nCxNK3ErAopvw==
 =mnf2
 -END PGP SIGNATURE-



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] functions and environments

2011-06-16 Thread Nathan Clemons
Or what you might want to do is to create a specific common directory for
code that should be shared, and per-environment directories which contain
code that should not be shared. If you find that something should no longer
be common, you then move it into the per-env directories as appropriate.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Thu, Jun 16, 2011 at 12:42 PM, Aaron Grewell aaron.grew...@gmail.comwrote:

 If you want your environments to never be able to affect one another then
 your module paths should not contain any common directories.


 On Thu, Jun 16, 2011 at 12:33 PM, Gabriel Filion lelu...@gmail.comwrote:

 I got further into the problem thanks to your help.. but there's
 something else now.

 On 11-06-15 12:36 PM, Nigel Kersten wrote:
   Functions get executed master side, so even though they get
  delivered to
   the node, they need to be accessible on the master.
 
  oh, ok.. so I'd need to have that new plugin used by the master
 first?
 
   What version of Puppet are you running on the master and nodes?
 
  master: 0.25.4
  node: 0.25.4
 
 
  Ah. For that version, you'll need to make sure the function is in the
  libdir of the puppet master, as I believe that functions from
  environments weren't accessible to the master in 0.25.x

 that seems to have worked. I copied the files in the master's lib dir
 and it got further. However, I'm now stuck on another weirdness between
 environments:

 I get an error about some resource that gets redefined between the
 init.pp from the production environment and another manifest from the
 development environment called moduledir.pp

 in the puppet master's config I have:

 [main]
 logdir=/var/log/puppet
 vardir=/var/lib/puppet
 rundir=/var/run/puppet
 ssldir=/var/lib/puppet/ssl
 environment=production

 [...]

 [development]

 modulepath=/etc/puppet/modules-development:/etc/puppet/modules:/usr/share/puppet/modules


 I was expecting the declaration in the [development] section to mean
 that if modules are found in the first directory, then the other dirs
 are not inspected.. But apparently this is not the case.

 This could lead to some nasty bugs when testing things out with such a
 mixed environment.
 Is there a work around to make the other module of the same name in the
 /etc/puppet/modules directory not influence the development environment?

 --
 Gabriel Filion

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] array in template

2011-06-15 Thread Nathan Clemons
Do you have any machines which show the 32-bit machines as i686? I know at
least 32-bit Ubuntu will use that:

nathan@vervain:~$ arch
i686
nathan@vervain:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=10.04
DISTRIB_CODENAME=lucid
DISTRIB_DESCRIPTION=Ubuntu 10.04.2 LTS
nathan@vervain:~$

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, Jun 15, 2011 at 5:35 AM, romuald FREBAULT kurgan...@gmail.comwrote:

 thanks for your answer, i finally wrote

 % if architecture == i386 %
 stuff
 %else%
 stuff
 %end%


 2011/6/14 Ken Barber k...@puppetlabs.com

 Try:

 % if [x86_64,amd64].include?(architecture) %
 ... do stuff ...
 % end %

 ken.

 On Tue, Jun 14, 2011 at 11:30 AM, romuald FREBAULT kurgan...@gmail.com
 wrote:
  Hi,
 
  I have a recipe that deploy a nrpe_local.cfg.
  In my template, i want to deploy diffrent lines between 32 and 64 bits.
 
  We have hosts uder redhat and debian,.
  When i write % if architecture == i386 -%
  no problem, the lines are well deployed on redhat and debian, but for
 the 64
  bits, redhat call the architecture x86_64 and debian amd64...
  i tried to make an array like this
  % if architecture == x86_64, amd64 -%
  or like this
  % if architecture == x86_64, amd64 -%
  or
  % if architecture == x86_64 | amd64 -%
 
  and many other tries, but i couldn't get it to work...
 
  does anyone knows how i could solve my problem?
 
  --
  You received this message because you are subscribed to the Google
 Groups
  Puppet Users group.
  To post to this group, send email to puppet-users@googlegroups.com.
  To unsubscribe from this group, send email to
  puppet-users+unsubscr...@googlegroups.com.
  For more options, visit this group at
  http://groups.google.com/group/puppet-users?hl=en.
 

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] puppet clients

2011-06-14 Thread Nathan Clemons
I will also mention that there are now a few books on Puppet. I'm currently
reading through Pro Puppet by James Turnbull (who wrote the original Pulling
Strings with Puppet book), and it's quite good. The original book was a bit
light on some details, Pro Puppet really dives in and shows how all the
pieces fit together.

http://www.apress.com/catalogsearch/result/?q=puppetsubmit=Go

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, Jun 14, 2011 at 10:02 AM, Craig White craig.wh...@ttiltd.comwrote:


 On Jun 14, 2011, at 9:35 AM, R.I.Pienaar wrote:

  The error message says:
 
  err: Could not parse for environment production: Syntax error at '.';
 expected '}' at /etc/puppet/manifests/nodes.pp:2 on node ubuntu2.ttinet
 
  and your file in question:
 
  # cat nodes.pp
   node 'ubuntu.ttinet' {
 include ntp.
   }
 
 
  So what's on line 2? a . at the end, and the error tells you it did not
 expect the ..
 
  Did you remove the .?
 
  --
  You received this message because you are subscribed to the Google Groups
 Puppet Users group.
  To post to this group, send email to puppet-users@googlegroups.com.
  To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
  For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.
 

 
 the period was indeed a typo but I had to remove the ',' (comma) as well to
 make it work. It finally worked! I guess you always need the commas except
 when they toss you errors.

 I'm sure I will have more questions but I will exhaust Google and the
 documentation first. I've been able to install packages now and see somewhat
 where this is leading.

 Thanks all

 Craig

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Creating Users and Hashing it's password.

2011-06-08 Thread Nathan Clemons
What I do is set the password on one host, and then copy the hash out of
/etc/shadow into the Puppet definition to be set on the other hosts.

By default the Puppet providers expect that the password field will be
hashed as used on the system, not plaintext.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, Jun 8, 2011 at 12:08 PM, vella1tj vella...@gmail.com wrote:

 Hi everyone I would like to first of all say thanks to anyone willing
 to help me.

 I was tasked with creating a Admin account using puppet to push to all
 of our Macs that we have deployed around the Campus.

 user {'sysop':
#uid   = 500,
#groups  = 'admin',
comment= 'Sysop',
ensure= present,
home  = '/home/sysop',
shell   = '/bin/bash',
managehome  = true,
password= 'Haven't figured out the best way to hash
 a password and put it in here.,
}

 That's what I have so far, I don't believe I understand how Hash works
 completely. The way I understand it is it will have a hash in the
 password field and it will compare it to other hashes to match what
 the password would be. So what I was hoping to get help on (or
 anything i've done wrong or you would recommend me doing different) is
 how do i set a resource for the hash do i put it in my files directory
 and then point it to there is there anything special I have to do
 so puppet understands that it's hash.

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] backup files whith bad arborescence

2011-06-03 Thread Nathan Clemons
I think this is done because file systems can bog down with too many files
(or directories) inside one directory. By breaking down the hierarchy like
they do, they help keep performance optimal.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Fri, Jun 3, 2011 at 1:01 AM, florian grandjean.flor...@gmail.com wrote:

 Hello,
 I want to say if it's regular when i backup config file with
 filebucket, the save create more folder.

 Example :
 root@client:~# tree /var/testBackup/
 /var/testBackup/
 ├── 0
 │   └── 9
 │   └── 6
 │   └── 9
 │   └── 3
 │   └── f
 │   └── f
 │   └── d
 │   └── 09693ffd352436e900afd719c5a5a8b3
 │   ├── contents
 │   └── paths
 ├── 2
 │   └── 5
 │   └── 5
 │   └── f
 │   └── 3
 │   └── c
 │   └── 2
 │   └── e
 │   └── 255f3c2e42515586e807f1a39ae58cf2
 │   ├── contents
 │   └── paths

 It's possible to create this tree ?

 /var/testBackup/
 ├── 255f3c2e42515586e807f1a39ae58cf2
 │   └── contents
 │   └── paths


 Thanks

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] How do I enable repositories and install packages

2011-06-01 Thread Nathan Clemons
The package resource type will allow you to install packages via Yum, but
does not (last I checked) support specifying repos to enable/disable (which
I'd dearly love if it was added).

Which means you either get to write your own extension to package to add
that functionality, or use exec.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, Jun 1, 2011 at 9:19 AM, hyzhang hyzh...@jcvi.org wrote:

 Hi,

 My shell script is as below. How do I translate them to puppet
 language? I think I can use exec directly. But is there a better way?

 /usr/bin/yum clean all
 /bin/echo -e \n/usr/bin/yum -y --enablerepo=base,rpmforge install
 mplayer mplayer-skins
 /usr/bin/yum -y --enablerepo=base,rpmforge install mplayer mplayer-
 skins

 /usr/bin/yum clean all
 /bin/echo -e \n/usr/bin/yum -y --nogpgcheck install RealPlayer
 AdobeReader_enu flash-plugin
 /usr/bin/yum -y --nogpgcheck install RealPlayer AdobeReader_enu flash-
 plugin

 /usr/bin/yum clean all
 /bin/echo -e \n/usr/bin/yum -y --enablerepo=base install pidgin
 /usr/bin/yum -y --enablerepo=base install pidgin

 Thanks,
 -Haiyan

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: Open Source Team planning meeting summary

2011-06-01 Thread Nathan Clemons
I'd suggest looking into http://projects.puppetlabs.com/issues/3238 if you
have a chance. It's been open a long time and is an inconvenience when using
stored configs.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, May 31, 2011 at 5:08 PM, Jacob Helwig ja...@puppetlabs.com wrote:

 On Thu, 26 May 2011 09:38:28 -0700, Jacob Helwig wrote:
 
  As promised yesterday, here are the results of our first planning
  meeting.
 
  Right now, we're loosely following a Scrum style of development. With
  the current one-week iteration's backlog outlined below.
 
   * #2128 - Allow arbitrary fact as node_name identifier
 
   * #7224 - Bad english: hostname was not match with the server
 certificate
 
   * #4416 - Resources cannot be used on the run where they are synced
 
   * Package type V2 (apt)
 
   * Package type V2 (dpkg)
 
   * Package type V2 (aptitude)
 
  We're trying to work on things that we know have annoyed people using
  Puppet. We are very open to any suggestions on what to add to the
  following iterations, so please vote on tickets in Redmine[1], and
  comment on these updates.
 
  The Package type V2 items don't currently have any tickets in Redmine,
  but the goal will be to clean up the current package type in the hopes
  of having a clean, modern and well tested type, and set of providers
  that people can use as a reference when writing their own.  If the
  experiment in refactoring the package type, and the apt, aptitude, and
  dpkg providers goes well, we plan on continuing on to the rest of the
  providers.
 
  In addition to the iteration backlog, #7670 and #7681 have become
  priorities that we will be addressing as soon as we can.
 
   * #7670 - operatingsystem fact incorrect after clear on Ubuntu
 
   * #7681 - Regression, arrays and variables
 
  [1] http://projects.puppetlabs.com
 

 Just a quick reminder that we're going to have our planning meeting
 tomorrow.  If you'd like to influence what we end up prioritizing for
 ourselves for the coming week, please speak up.

 #7670, and #7681 have both been fixed, and merged into the appropriate
 branches to be released.

 I've had one suggestion of working on #650 (Puppet replaces conf
 directories when they are symlinks).

 Right now, the back-log looks the same as it did last wednesday due to
 the two blockers popping up, and the long holiday weekend here in the
 States.

 --
 Jacob Helwig

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.10 (GNU/Linux)

 iQGcBAEBAgAGBQJN5YLwAAoJEHJabXWGiqEBTBoMAIgU7JXHtexP2CCfphlIdca+
 oqz5WHH9aJd97mCfHvVAsKiTReY98ugtX9b4Z+1SG3Q7wQTkD4m8uw6ZoITQJwRu
 WgyztfxqZlnvdPZne+bE2XLljAMyehZimxn2sd/gbDxbVHlW0CmP4/8Hz831OlZY
 lChS3UX1SEwSDNEbhjdVpMP5Scse+BGTkTcNevWiFknDpNSEpkGEVNY4J6UFYWhT
 n3MdNw5kToB9DTpDGlG6RbKzjTKJB5eOjDjPerdhxNj0HacFI36qzi6DcSeY7CpQ
 /egZLOTps6Q4ftGxM6YKOXdyeqHSQiLGbBaIYhzEy5PqR3s2fe5FN2f9Aqzrn1LU
 +8R8vo56EGole+Ty1QG75yIHcb2f0OF4ekMIMA4EwDGq/vJkYlppGuBp64k9BR/l
 EadeGbvSRxVKjiuyAUgi/78sKzJ5TN9fX1tULnGC2ud3OFK+cc4s/lgSJMMe7bqz
 s+3pEeUmhj0fVGnEFsaGivnn3swcCiPzSfycZwt7KA==
 =0EHz
 -END PGP SIGNATURE-



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] enabling of 'thin_storeconfigs'

2011-05-25 Thread Nathan Clemons
So if Nagios configs are the only thing you use stored configs for, thin
stored configs will work just fine?

If so, I forsee a switch in our future. :)

Also, since you mentioned it... how difficult is it to upgrade from 0.25 to
2.6 / 2.7? I've been curious to upgrade but for the most part everything's
been working fine so I've been holding off. Will I need to rewrite parts of
my config? (I'm not doing much fancy, mostly user/service/package/file
management with a side of Nagios.)

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, May 25, 2011 at 10:16 AM, Gabriel Filion lelu...@gmail.com wrote:

 On 11-05-22 05:22 AM, Brice Figureau wrote:
  On 22/05/11 01:10, Gabriel Filion wrote:
  Hello,
 
  I found out that a puppetmaster I manage is currently not using the
  thin_storeconfigs option and suggested to the other admins that we use
  this in order to reduce puppet run times a little.
 
  Thin storeconfigs won't reduce your puppet agent run time, only the
  master compilation time.

 thanks for the precision. still there's a little gain in comparison. I
 would probably gain more performance in upgrading from 0.25.5 to 2.6.x,
 but that will come later since it requires more effort.

  Is it recommended to purge the [mysql] database once the option is
  enabled on the puppetmaster?
 
  I don't think so. The next run with thin_storeconfigs should get rid of
  all the extraneous data.

 great, that's good to know.

  p.s. on another note: I can't grasp the advantage of not using
  thin_storeconfigs. Since we'll be parsing the manifests on every change
  anyway, having all info replicated into a database doesn't seem to bring
  us anything. Is there any use case where not using this option would
  make sense?
 
  Having all the data in the database can help write inventory
  applications. If you don't have such application, thin storeconfig is
  way better. On another hand, if you don't use exported
  resources/collection, you really don't care about storeconfigs at all
  and you should disable it altogether.

 thanks to everyone for details on this subject. since we currently don't
 use the extra info (and don't plan to use it in the near future), but do
 use exported resources (nagios configs, ssh keys), using storeconfigs
 with thin_storeconfigs will fit just great.

 --
 Gabriel Filion

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Client updates

2011-05-25 Thread Nathan Clemons
Mcollective with mc-puppet should work if you patch it to not daemonize
(you'll need to adjust the timeouts as well, of course). Errors running will
bubble up to the list of nodes that failed the run.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, May 25, 2011 at 10:20 AM, Douglas Garstang
doug.garst...@gmail.comwrote:

 On Wed, May 25, 2011 at 10:16 AM, Brian Cully bcu...@gmail.com wrote:

 On May 25, 2011, at 1:12 PM, Douglas Garstang wrote:

  I probably waste quite a bit of time each week restarting the puppet
 client, and logging systems, and tailing the messages file, to see if my
 puppet changes worked. Is there a better way? How do people normally do
 this?

 I use monit to keep the puppet agent running in case it craps out,
 and puppet dashboard to keep an eye on all my nodes.


 Looking for a non GUI option.

 Doug.

  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Client updates

2011-05-25 Thread Nathan Clemons
Mcollective hides successes and only shows you failures, keeping the signal
to noise ratio very high.

If you run puppet without daemonizing, anything that causes the config to
not be applied successfully is going to show up as an error.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, May 25, 2011 at 10:30 AM, Douglas Garstang
doug.garst...@gmail.comwrote:

 On Wed, May 25, 2011 at 10:26 AM, Nathan Clemons nat...@livemocha.comwrote:

 Mcollective with mc-puppet should work if you patch it to not daemonize
 (you'll need to adjust the timeouts as well, of course). Errors running will
 bubble up to the list of nodes that failed the run.


 Failed both for syntax errors AND dependency errors? Don't know what
 you mean by 'bubble up'.

 Doug.


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Client updates

2011-05-25 Thread Nathan Clemons
It depends on how you use it. In our environment, we don't leave the Puppet
daemon running. We only do on-demand runs... that way changes only happen
when we push them out.

Your mileage obviously may vary, but if you're looking for tight control,
that's something to consider.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Wed, May 25, 2011 at 10:39 AM, Douglas Garstang
doug.garst...@gmail.comwrote:

 On Wed, May 25, 2011 at 10:35 AM, Nathan Clemons nat...@livemocha.comwrote:

 Mcollective hides successes and only shows you failures, keeping the
 signal to noise ratio very high.

 If you run puppet without daemonizing, anything that causes the config to
 not be applied successfully is going to show up as an error.


 Yes, but then, when there is an error, the daemon stops running. Assuming
 you had nagios checking for that, you've still got to wait for the nagios
 alert to find out, and in the mean time, the guy who is on call this week,
 who gets the texts is going to be even more pissed than he already is for
 getting alerts at 3am.

 Doug.


  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Re: Puppetmaster leaving files open with too many files open error

2011-05-24 Thread Nathan Clemons
http://projects.puppetlabs.com/issues/3238 is the issue I was thinking of,
but 3693 is probably a duplicate of that.

These bugs have been open a really long time. Outside of lowering the MySQL
timeout value, are there any workarounds for this problem? I can't really
understand how Zynga can be managing as many hosts via Puppet as they do
without being affected by a bug like this, unless they're not using stored
configs (which would surprise me).

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, May 24, 2011 at 2:42 PM, Todd Zullinger t...@pobox.com wrote:

 treydock wrote:
  What is the current issue number?  The only one I could find that
  mentions the same problem is this ,
 http://projects.puppetlabs.com/issues/7203.

 https://bugzilla.redhat.com/show_bug.cgi?id=572722 and
 http://projects.puppetlabs.com/issues/3693 are both relevant here.

 I'd love to see a fix in either the rails activerecord component or in
 puppet.  Seeing that older puppet versions worked with the rails stack
 in EPEL, it seems like it should be possible to make that work again
 with some changes to puppet.

 --
 ToddOpenPGP - KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
 ~~
 It is strangely absurd to suppose that a million human beings
 collected together are not under the same moral laws which bind them
 separately.
-- Thomas Jefferson



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] installing puppet client

2011-05-24 Thread Nathan Clemons
Yeah, a for loop with ssh is probably your best bet to get moving with
puppet initially.

Longer term you may want to consider pairing Puppet with something like
Marionette, but configuring Marionette is easier once you have Puppet in
place... it's a bit of chicken and egg. Ideally you pick some tools to
manage your servers before you grow to that size, but if not, then you need
to spend some time installing tools to manage that level of servers. The
piper must be paid.

Here at Livemocha we have some 100+ servers and using Puppet and Marionette
has been invaluable. We do some administration with a python script that
replaced our for ssh loop, but a large part of the heavy lifting is done via
Puppet. Since we don't run Puppet in daemon mode, most of the time we use
the script is to kick off a Puppet run manually, which we're migrating to
using Marionette for (but sometimes it's nice to see all of the output, even
if it takes longer without parallelization).

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, May 24, 2011 at 4:03 PM, John Warburton jwarbur...@gmail.comwrote:

 On 24 May 2011 23:55, CHEBRIAN ksd@gmail.com wrote:

 how to install puppet client thru puppet master .

 My requirement is to install puppet client nearly 400 client servers.

 its difficult to install puppet client in all the servers by apt-
 get .

 As others have said, a for loop ssh if you have root trust to your 400
 servers

 As an FYI, we have 5.5K servers, and the way we are installing puppet is
 doing a server rebuild (with puppet) - so the puppet client is installed at
 jumpstart/kickstart time

 As you can imaging, it will be time consuming. I think you might just have
 to accept the initial hit of work for the puppet goodness that will follow

 Regards

 John

  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] How can i copy a directory

2011-05-23 Thread Nathan Clemons
Try looking into the recurse = true parameter.

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Mon, May 23, 2011 at 3:05 AM, Sumith Sudhakaran sumit...@gmail.comwrote:

 HI

 How can i copy a directory from puppet master to client

 I have tried this, but its giving error. I am using redhat 5.6 and puppet
 2.6.8

 file { /usr:
 ensure = directory,
 owner = root,
 group = root,
 mode = 777,
 content = template(/usr/local/sbin/),

 Please help me..
 --
 *  Regards***

 * Sumith** *

  --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Abstracting filebucket source?

2011-05-17 Thread Nathan Clemons
That did the trick perfectly. I thought you always had to specify the puppet
server in the puppet URL, I didn't realize you could leave that off and have
it autodetected.

Thank you!

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community



On Tue, May 17, 2011 at 4:35 AM, Felix Frank 
felix.fr...@alumni.tu-berlin.de wrote:

 On 05/17/2011 03:46 AM, Nathan Clemons wrote:
  I have two puppet configurations, one for the office and one for
  production. We have some directories in common (both for files and for
  classes) using SVN externals. So the format is like:
 
  puppet-common
 * files
 * classes
  puppet-prod
 * files
 * files/common - puppet-common/files
 * manifests
 * manifests/classes
 * manifests/common - puppet-common/classes
  puppet-office
 * files
 * files/common - puppet-common/files
 * manifests
 * manifests/classes
 * manifests/common - puppet-common/classes
 
  However, I'm now running into a situation where I want to have a file
  installed in the home directory of a user created in one of the common
  classes. I can define the source to match the puppet URL of one of the
  servers, but I'd rather dynamically generate that so it works on both
  environments. How can I reference the puppetmaster dynamically from
  inside the manifests?
 
  Thanks!

 Hmm, I don't think you're talking about the filebucket at all, but the
 fileserver instead.

 I believe you could just use puppet:///path/to/file URLs and have the
 puppet agent use whatever puppet master generated the catalog.

 But then, I didn't really understand your situation nor problem, sorry.

 Regards,
 Felix

 --
 You received this message because you are subscribed to the Google Groups
 Puppet Users group.
 To post to this group, send email to puppet-users@googlegroups.com.
 To unsubscribe from this group, send email to
 puppet-users+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/puppet-users?hl=en.



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Abstracting filebucket source?

2011-05-16 Thread Nathan Clemons
I have two puppet configurations, one for the office and one for production.
We have some directories in common (both for files and for classes) using
SVN externals. So the format is like:

puppet-common
   * files
   * classes
puppet-prod
   * files
   * files/common - puppet-common/files
   * manifests
   * manifests/classes
   * manifests/common - puppet-common/classes
puppet-office
   * files
   * files/common - puppet-common/files
   * manifests
   * manifests/classes
   * manifests/common - puppet-common/classes

However, I'm now running into a situation where I want to have a file
installed in the home directory of a user created in one of the common
classes. I can define the source to match the puppet URL of one of the
servers, but I'd rather dynamically generate that so it works on both
environments. How can I reference the puppetmaster dynamically from inside
the manifests?

Thanks!

--
Nathan Clemons
http://www.livemocha.com
The worlds largest online language learning community

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.