Re: [Puppet Users] Re: recursive descent

2013-12-17 Thread ygor
Have you tried experimenting ?Much of my Puppet savvy is from tinkering. 
Try some code. See what works and what does not work. "Sometimes I think the surest sign that intelligent life exists elsewhere in 
the universe is that none of it has tried to contact us."Bill Waterson 
(Calvin & Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/594141407.88154.1387317298820.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: Puppet Dashboard: how to connect?

2013-12-13 Thread ygor
Check with your local admin with access to Red Hat Network. That is their job. 
"Sometimes I think the surest sign that intelligent life exists 
elsewhere in the universe is that none of it has tried to contact us."Bill Waterson (Calvin & Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1601847732.31168.1386971790837.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] examples of puppet yaml output

2013-12-12 Thread ygor
/var/lib/puppet/reportson a puppet master. "Sometimes I think 
the surest sign that intelligent life exists elsewhere in the universe is that 
none of it has tried to contact us."Bill Waterson (Calvin & Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1816672046.12346.1386882350097.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] crapload of files to check permissions and ownership

2013-08-02 Thread ygor
[Please respond to THE LIST and not directly/privately]

OK, then if you want to manage 100+ files, you need to either LIST 100+ files 
or manage the file tree using the 'recurse' parameter.

There is another thread here recently asking about wildcards in file resources. 
 They were told that wildcards do not work for that.

- Original Message -
From: "root" 
To: y...@comcast.net
Sent: Friday, August 2, 2013 3:00:19 PM
Subject: Re: [Puppet Users] crapload of files to check permissions and ownership


Yes, my link is not correct, i meant to link to the puppet cookbook page. 

I do want to mange and change the files. Thanks. 


On Friday, August 2, 2013 2:45:01 PM UTC-4, Ygor wrote: 



Your link is for posting a new message to this group on Google Groups. 

Perhaps you wanted this: 
http://www.puppetcookbook.com/posts/remove-duplicated-file-resource-attributes.html
 

You say you want to check file permission/ownership. 
Do you want to make any changes if things are not how you want them ? 

Subtle, but different. 

Any file managed by Puppet can be controlled. However, Puppet does not 
(directly) do anything to any file it does not manage. 
The above cookbook-example will not set permission/ownership to any file not 
explicitly managed. 

Do you plan to manage all these files in Puppet ? 
If not, another approach is needed. 


“Sometimes I think the surest sign that intelligent life exists elsewhere in 
the universe is that none of it has tried to contact us.” 
Bill Waterson (Calvin & Hobbes) 


From: "root" < clri@gmail.com > 
To: puppet...@googlegroups.com 
Sent: Friday, August 2, 2013 2:29:27 PM 
Subject: [Puppet Users] crapload of files to check permissions and ownership 



Very new to Puppet and I need to create a class that checks the file 
permissions and ownership for 60- 100 files. Some of the files will be named 
differenty or have a different path depending on the OS. I am aware of the 
core_permissions class demonstrated in the Puppet 3.0 Quick Start, and I have 
read "Reduce Duplicated File Attributes" here: 
https://groups.google.com/forum/?hl=en#!newtopic/puppet-users 

That document advocates setting a default set of attributes for the File 
resource, and then nest all the declarations inside one resource statement, 
like so: 

File {
  ensure => "present",
  owner  => "root",
  group  => "root",
  mode   => 644,
}

file {
  "/etc/cobbler/modules.conf":
content => template("cobbler/modules.conf");
  "/etc/cobbler/dhcp.template":
content => template("cobbler/dhcp.template");
  # override the permissions for this one file
  "/etc/cobbler/users.digest":
source => "puppet:///modules/cobbler/users.digest.live",
mode   => 660;
} This looks kind of ugly to me.  Anyone figure out a nicer way to do this?  I 
will only be checking "ensure", "mode", "owner" and "group". I want the class 
to be readable to admins who are new to Puppet, but I don't want to have a 
separate "file" declaration for each file. Thanks. 




-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group. 
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users...@googlegroups.com . 
To post to this group, send email to puppet...@googlegroups.com . 
Visit this group at http://groups.google.com/group/puppet-users . 
For more options, visit https://groups.google.com/groups/opt_out . 


-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Re: Hiera YAML False bug

2013-06-06 Thread Ygor
I may have found the problem:

Add the following block of code  - you will need to have the puppet-forge 
module stdlib installed -- and see what it does

class java::install ( 
$parameters = hiera('java', []), 
) { 

# - start 
include stdlib

if is_hash ( $parameters ) {
notify { "It is a hash" : } 
} else {
 notify { "It is NOT a hash" : } 
}

if $parameters {
$hashkeez = keys ( $parameters )
notify { [ $hashkeez ]:
message => "Key",
 }
}   
# - end

if $parameters['openjdk'] == true { 
if $parameters['enable_v6'] == true and 
$java::params::openjdk_6_jre { 
package { $java::params::openjdk_6_jre: 
ensure => latest, 


On Wednesday, June 5, 2013 4:52:24 PM UTC-4, Ti Leggett wrote:
>
> It seems puppet thinks that variables evaluate to true even when they are 
> explicitly set to false in hiera YAML. 
>
> In my searching it seems like this should be fixed but with hiera 1.2.1 
> and puppet 3.2.1 I'm still seeing this. 
>
> In my YAML I have: 
>
> # Java directives 
> java : 
> enable_jdk : false # Install the JDK as well as the JRE 
> enable_v6  : true  # Install Java 6 
> enable_v7  : false # Install Java 7 
> openjdk: true  # Install OpenJDK 
> sun: false # Install Sun 
>
>
> And in one of my manifests I do something like: 
>
> class java::install ( 
> $parameters = hiera('java', []), 
> ) { 
> if $parameters['openjdk'] == true { 
> if $parameters['enable_v6'] == true and 
> $java::params::openjdk_6_jre { 
> package { $java::params::openjdk_6_jre: 
> ensure => latest, 
> } 
> if $parameters['enable_jdk'] == true and 
> $java::params::openjdk_6_jdk { 
> package { $java::params::openjdk_6_jdk: 
> ensure => latest, 
> } 
> } 
> } 
> … 
>
> No matter what it thinks it should install the JDK package even though the 
> parameter is set to false. I've tried setting it 0, False, n, and N and it 
> always evaluates to true. Is this a known bug and if so is there a 
> workaround? 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] New hiera backend for mysql

2012-03-05 Thread ygor
Sounds like a great idea, but I am still trying to get a basic understanding of 
just puppet and hiera.  I really like the idea of separating the. ode unique 
data from the general manifest, but I would like to see a beginner's guide to 
puppet/hiera.  The other piece that I am very interested in is the hiera-gpg 
for storing things like MySQL passwords and other sensitive junque

-Original Message-
From: Craig Dunn
To: puppet-users
Sent: 2012-03-05 09:18:50 +
Subject: [Puppet Users] New hiera backend for mysql


Hi all,

Over the weekend I came up with a new backend for hiera for looking up 
configuration values directly from a MySQL database that may be useful 
to some

http://www.craigdunn.org/2012/03/introducing-hiera-mysql-mysql-backend-for-hiera/

http://github.com/crayfishx/hiera-mysql

Regards
Craig

-- 
Craig Dunn | http://www.craigdunn.org
Yahoo/Skype: craigrdunn | Twitter: @crayfishX

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Certificate Annoyance: Time Differential

2012-02-27 Thread ygor
A suggestion based on how I deal with this :
I use Cobbler to load the operating system  and do basic configurations. Then I 
hand off to Puppet.  One thing I do with Cobbler is the initial setting of the 
system clock using ntpdate or ntpd -q
Hope this helps

-Original Message-
From: Derek J. Balling
To: puppet-users
Sent: 2012-02-27 10:59:12 +
Subject: [Puppet Users] Certificate Annoyance: Time Differential

We recently had a situation where servers weren't able to use their 
auto-sign'ed certificates because their local clock was months off from 
real-time.  Of course, it was brand-new hardware straight off the dock and 
hadn't yet had a chance to have ntp sync the clock to the correct time because, 
well, puppet is what fires up NTP. :-)

Is there any way to recognize that puppet might be the thing in charge of 
bringing the clocks into sync, and allowing puppet to ignore 
certificate-verification failures that are based solely on the time-delta being 
too high?  It certainly seems like it'd be a useful feature.

D

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Time interval within execution of scripts from the server

2012-02-10 Thread Ygor
http://lmgtfy.com/?q=cron+random+delay

Inserting Random Delay In Cron Jobs
http://www.moundalexis.com/archives/76.php

On Feb 9, 9:00 am, mukulm  wrote:
> Hi,
>
> I have multiple script to be copied & executed from the puppet server
> on the client systems but i want to execute
> each script within a timeframe such as hourly, weekly or monthly from
> the puppet server as i dont want to execute all scripts on the same
> frequency.
>
> Any help will be greatly appreciated.
>
> Thanks
> mukulm

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Managing SSH host private keys

2012-01-27 Thread Ygor
On Jan 26, 1:42 pm, Christopher Wood 
wrote:
> On Thu, Jan 26, 2012 at 06:32:49PM +, Dan White wrote:
> > I am relatively new to both Puppet and ssh-keys,
> > but is it possible for the PuppetMaster to generate all the keys rather 
> > that each client creating their own ?
>
> This might be one of the places where erb (templates) being evaluated on the 
> puppetmaster will help. I'm just speculating, but there's no technological 
> reason why the puppetmaster shouldn't use erb/ruby to fork ssh-keygen and 
> store the result in some local directory. The puppet template can either 
> create a private key, or copy in the results of a previous ssh-keygen run.
>
> I don't see technical obstacles, only security obstacles. You may not want 
> all your ssh private keys stored in one place, for instance.
>
Agreed, My first thought is to be sure a backup of the private keys is
kept current and separate - and possibly in multiple locations.
Any other security considerations one should consider ?

In my current workplace, ssh keys are used for remote machine logins
and the individual user is responsible for maintaining their own
private key.
I am not completely happy with this arrangement, and I am looking for
information to use to make some intelligent suggestions for change.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] n00b question - Does puppet monitor continuously ?

2010-11-16 Thread Ygor
Does something in the puppetmaster run the puppet modules/manifests
periodically ?
Or do I have to set up a cron job or something like that ?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.