Re: [Puppet Users] Re: recursive descent
Have you tried experimenting ?Much of my Puppet savvy is from tinkering. Try some code. See what works and what does not work. "Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us."Bill Waterson (Calvin & Hobbes) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/594141407.88154.1387317298820.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net. For more options, visit https://groups.google.com/groups/opt_out.
Re: [Puppet Users] Re: Puppet Dashboard: how to connect?
Check with your local admin with access to Red Hat Network. That is their job. "Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us."Bill Waterson (Calvin & Hobbes) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/1601847732.31168.1386971790837.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net. For more options, visit https://groups.google.com/groups/opt_out.
Re: [Puppet Users] examples of puppet yaml output
/var/lib/puppet/reportson a puppet master. "Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us."Bill Waterson (Calvin & Hobbes) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/1816672046.12346.1386882350097.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net. For more options, visit https://groups.google.com/groups/opt_out.
Re: [Puppet Users] crapload of files to check permissions and ownership
[Please respond to THE LIST and not directly/privately] OK, then if you want to manage 100+ files, you need to either LIST 100+ files or manage the file tree using the 'recurse' parameter. There is another thread here recently asking about wildcards in file resources. They were told that wildcards do not work for that. - Original Message - From: "root" To: y...@comcast.net Sent: Friday, August 2, 2013 3:00:19 PM Subject: Re: [Puppet Users] crapload of files to check permissions and ownership Yes, my link is not correct, i meant to link to the puppet cookbook page. I do want to mange and change the files. Thanks. On Friday, August 2, 2013 2:45:01 PM UTC-4, Ygor wrote: Your link is for posting a new message to this group on Google Groups. Perhaps you wanted this: http://www.puppetcookbook.com/posts/remove-duplicated-file-resource-attributes.html You say you want to check file permission/ownership. Do you want to make any changes if things are not how you want them ? Subtle, but different. Any file managed by Puppet can be controlled. However, Puppet does not (directly) do anything to any file it does not manage. The above cookbook-example will not set permission/ownership to any file not explicitly managed. Do you plan to manage all these files in Puppet ? If not, another approach is needed. “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) From: "root" < clri@gmail.com > To: puppet...@googlegroups.com Sent: Friday, August 2, 2013 2:29:27 PM Subject: [Puppet Users] crapload of files to check permissions and ownership Very new to Puppet and I need to create a class that checks the file permissions and ownership for 60- 100 files. Some of the files will be named differenty or have a different path depending on the OS. I am aware of the core_permissions class demonstrated in the Puppet 3.0 Quick Start, and I have read "Reduce Duplicated File Attributes" here: https://groups.google.com/forum/?hl=en#!newtopic/puppet-users That document advocates setting a default set of attributes for the File resource, and then nest all the declarations inside one resource statement, like so: File { ensure => "present", owner => "root", group => "root", mode => 644, } file { "/etc/cobbler/modules.conf": content => template("cobbler/modules.conf"); "/etc/cobbler/dhcp.template": content => template("cobbler/dhcp.template"); # override the permissions for this one file "/etc/cobbler/users.digest": source => "puppet:///modules/cobbler/users.digest.live", mode => 660; } This looks kind of ugly to me. Anyone figure out a nicer way to do this? I will only be checking "ensure", "mode", "owner" and "group". I want the class to be readable to admins who are new to Puppet, but I don't want to have a separate "file" declaration for each file. Thanks. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com . To post to this group, send email to puppet...@googlegroups.com . Visit this group at http://groups.google.com/group/puppet-users . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users. For more options, visit https://groups.google.com/groups/opt_out.
[Puppet Users] Re: Hiera YAML False bug
I may have found the problem: Add the following block of code - you will need to have the puppet-forge module stdlib installed -- and see what it does class java::install ( $parameters = hiera('java', []), ) { # - start include stdlib if is_hash ( $parameters ) { notify { "It is a hash" : } } else { notify { "It is NOT a hash" : } } if $parameters { $hashkeez = keys ( $parameters ) notify { [ $hashkeez ]: message => "Key", } } # - end if $parameters['openjdk'] == true { if $parameters['enable_v6'] == true and $java::params::openjdk_6_jre { package { $java::params::openjdk_6_jre: ensure => latest, On Wednesday, June 5, 2013 4:52:24 PM UTC-4, Ti Leggett wrote: > > It seems puppet thinks that variables evaluate to true even when they are > explicitly set to false in hiera YAML. > > In my searching it seems like this should be fixed but with hiera 1.2.1 > and puppet 3.2.1 I'm still seeing this. > > In my YAML I have: > > # Java directives > java : > enable_jdk : false # Install the JDK as well as the JRE > enable_v6 : true # Install Java 6 > enable_v7 : false # Install Java 7 > openjdk: true # Install OpenJDK > sun: false # Install Sun > > > And in one of my manifests I do something like: > > class java::install ( > $parameters = hiera('java', []), > ) { > if $parameters['openjdk'] == true { > if $parameters['enable_v6'] == true and > $java::params::openjdk_6_jre { > package { $java::params::openjdk_6_jre: > ensure => latest, > } > if $parameters['enable_jdk'] == true and > $java::params::openjdk_6_jdk { > package { $java::params::openjdk_6_jdk: > ensure => latest, > } > } > } > … > > No matter what it thinks it should install the JDK package even though the > parameter is set to false. I've tried setting it 0, False, n, and N and it > always evaluates to true. Is this a known bug and if so is there a > workaround? > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Re: [Puppet Users] New hiera backend for mysql
Sounds like a great idea, but I am still trying to get a basic understanding of just puppet and hiera. I really like the idea of separating the. ode unique data from the general manifest, but I would like to see a beginner's guide to puppet/hiera. The other piece that I am very interested in is the hiera-gpg for storing things like MySQL passwords and other sensitive junque -Original Message- From: Craig Dunn To: puppet-users Sent: 2012-03-05 09:18:50 + Subject: [Puppet Users] New hiera backend for mysql Hi all, Over the weekend I came up with a new backend for hiera for looking up configuration values directly from a MySQL database that may be useful to some http://www.craigdunn.org/2012/03/introducing-hiera-mysql-mysql-backend-for-hiera/ http://github.com/crayfishx/hiera-mysql Regards Craig -- Craig Dunn | http://www.craigdunn.org Yahoo/Skype: craigrdunn | Twitter: @crayfishX -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Re: [Puppet Users] Certificate Annoyance: Time Differential
A suggestion based on how I deal with this : I use Cobbler to load the operating system and do basic configurations. Then I hand off to Puppet. One thing I do with Cobbler is the initial setting of the system clock using ntpdate or ntpd -q Hope this helps -Original Message- From: Derek J. Balling To: puppet-users Sent: 2012-02-27 10:59:12 + Subject: [Puppet Users] Certificate Annoyance: Time Differential We recently had a situation where servers weren't able to use their auto-sign'ed certificates because their local clock was months off from real-time. Of course, it was brand-new hardware straight off the dock and hadn't yet had a chance to have ntp sync the clock to the correct time because, well, puppet is what fires up NTP. :-) Is there any way to recognize that puppet might be the thing in charge of bringing the clocks into sync, and allowing puppet to ignore certificate-verification failures that are based solely on the time-delta being too high? It certainly seems like it'd be a useful feature. D -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Re: Time interval within execution of scripts from the server
http://lmgtfy.com/?q=cron+random+delay Inserting Random Delay In Cron Jobs http://www.moundalexis.com/archives/76.php On Feb 9, 9:00 am, mukulm wrote: > Hi, > > I have multiple script to be copied & executed from the puppet server > on the client systems but i want to execute > each script within a timeframe such as hourly, weekly or monthly from > the puppet server as i dont want to execute all scripts on the same > frequency. > > Any help will be greatly appreciated. > > Thanks > mukulm -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] Re: Managing SSH host private keys
On Jan 26, 1:42 pm, Christopher Wood wrote: > On Thu, Jan 26, 2012 at 06:32:49PM +, Dan White wrote: > > I am relatively new to both Puppet and ssh-keys, > > but is it possible for the PuppetMaster to generate all the keys rather > > that each client creating their own ? > > This might be one of the places where erb (templates) being evaluated on the > puppetmaster will help. I'm just speculating, but there's no technological > reason why the puppetmaster shouldn't use erb/ruby to fork ssh-keygen and > store the result in some local directory. The puppet template can either > create a private key, or copy in the results of a previous ssh-keygen run. > > I don't see technical obstacles, only security obstacles. You may not want > all your ssh private keys stored in one place, for instance. > Agreed, My first thought is to be sure a backup of the private keys is kept current and separate - and possibly in multiple locations. Any other security considerations one should consider ? In my current workplace, ssh keys are used for remote machine logins and the individual user is responsible for maintaining their own private key. I am not completely happy with this arrangement, and I am looking for information to use to make some intelligent suggestions for change. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
[Puppet Users] n00b question - Does puppet monitor continuously ?
Does something in the puppetmaster run the puppet modules/manifests periodically ? Or do I have to set up a cron job or something like that ? Thanks. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.