Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Jacob Weber
That's disappointing. I'm going to have to re-think my permission scheme. But thanks for the info. JW On Friday, April 25, 2014 2:31:22 PM UTC-7, Brian Coca wrote: > > it would require a major change to how template/file/assemble/etc work. In > template's case the file is actually generated on

Re: [ansible-project] Powering EC2 instances on/off

2014-04-25 Thread Gustavo Hexsel
Just as a side-note, I was able to get the wait_for mode to work for ssh with a bit of fiddling (so you don't have to wait with 2 tasks): - hosts: 127.0.0.1 connection: local gather_facts: false vars_files: - env.yaml tasks: - name: Wait for SSH to come up after the reboot wa

[ansible-project] Re: yum enablerepo won't do multiple repositories

2014-04-25 Thread mtovey
Done! Except I see that the test formatting (*bold*) didn't carry across. But I think there is still enough information there that someone can figure out what i meant. Thanks, Mark On Monday, April 21, 2014 4:58:04 PM UTC-7, mto...@go2uti.com wrote: > > Is anyone else having issues with th

Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Brian Coca
it would require a major change to how template/file/assemble/etc work. In template's case the file is actually generated on the master and copied to the target machine. ansible tries to make the change as atomic as possible (that is why it needs write to the dir) to make sure no other process rea

Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Jacob Weber
I see, thanks. Could this be considered a bug? There may be cases where you want a user to have write permission on a file, but not the whole directory. On Friday, April 25, 2014 2:24:27 PM UTC-7, Brian Coca wrote: > > Yes, template writes a new file and moves it into place. > > > -- > Brian C

Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Brian Coca
Yes, template writes a new file and moves it into place. -- Brian Coca Stultorum infinitus est numerus 0111011100100110010101101110001001110111011000010110011101010010011100110110110101110111001001110111 Pedo mellon a minno -- You received this message becau

Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Jacob Weber
Hi Michael. My user does have permission to write the file -- he just doesn't have permission to create files in the parent directory, and Ansible is complaining about that. When the "template" task updates an existing file, does it delete and re-create the file? JW On Friday, April 25, 201

Re: [ansible-project] tags: all?

2014-04-25 Thread Peter Gehres
Aha. Thanks for being the magic index of all open issues :-) https://github.com/ansible/ansible/pull/7039 for anyone wondering. On Fri, Apr 25, 2014 at 1:36 PM, Michael DeHaan wrote: > Nope, there's no magic "all" right now. There is already a suggestion > for this though (and maybe a pull r

Re: [ansible-project] Powering EC2 instances on/off

2014-04-25 Thread Michael DeHaan
Using local ./library content is fine, but please don't run a fork with extra packages added if you are going to ask questions about them -- or at least identify that you are when you do. It can make Q&A very confusing when people ask about things that aren't merged. On Fri, Apr 25, 2014 at 2:31

Re: [ansible-project] transport=smart, SFTP failures and ssh connections

2014-04-25 Thread Michael DeHaan
A pull request would be welcome! Thanks! On Fri, Apr 25, 2014 at 4:18 PM, Hans Lellelid wrote: > I like the idea of having sftp vs scp be configurable for paramiko. We > don't use sftp in our infrastructure (except in a few cases), so having an > scp option for paramiko would be nice. (Lots

Re: [ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Michael DeHaan
The template module will need permissions to be able to write the template, however the template module is smart enough to not replace the file if the md5sum of the template has not changed. IIRC, in some cases of sudo usage from non-root an md5sum isn't possible and it will need to try to overwri

Re: [ansible-project] Re: Playbooks for users with different permissions

2014-04-25 Thread Michael DeHaan
"Would I need to set sudo=no on the playbook, and then sudo=yes on each task that needs it?" This is quite reasonable. (sudo: no, not sudo=no, BTW) On Fri, Apr 25, 2014 at 12:31 PM, Adam Morris wrote: > > The simple solution is not not put sudo=anything in the playbook. Those > users needing

Re: [ansible-project] lookup plugins eating exceptions?

2014-04-25 Thread Michael DeHaan
Lookup plugins not raising exceptions is a known issue at the moment -- though I'm not positive there's a ticket. Please see if there is one and if not please file it. On Fri, Apr 25, 2014 at 10:34 AM, Scott Anderson wrote: > I had to add some try/catch logic in template.py to discover that t

Re: [ansible-project] rsync works but synchronize errors

2014-04-25 Thread Michael DeHaan
io.c errors are beyond our control as far as I'm aware. You may wish to just use the recursive copy options instead. On Thu, Apr 24, 2014 at 6:06 PM, Brian Grossman wrote: > Both sides are running centos 6.4. > > Would that io.c problem apply if rsync by itself works? > > Brian > > On Wednesd

Re: [ansible-project] new module locale_gen fails with "Is the package "locales" installed?"

2014-04-25 Thread Michael DeHaan
"However I have confirmed that the locales package is indeed installed." Is it installed on the remote node? That's where it's needed. On Thu, Apr 24, 2014 at 5:16 PM, ayounggun wrote: > Hi all > > Can anyone see what I'm doing wrong? I'm trying to generate and set the > system's locale wit

Re: [ansible-project] tags: all?

2014-04-25 Thread Michael DeHaan
Nope, there's no magic "all" right now. There is already a suggestion for this though (and maybe a pull request). One option is to tag such steps with "common" and always include common. On Fri, Apr 25, 2014 at 2:47 PM, Peter Gehres wrote: > Is there any way to have something run for all

Re: [ansible-project] transport=smart, SFTP failures and ssh connections

2014-04-25 Thread Hans Lellelid
I like the idea of having sftp vs scp be configurable for paramiko. We don't use sftp in our infrastructure (except in a few cases), so having an scp option for paramiko would be nice. (Lots of CentOS 5.x in infrastructure, so paramiko is still desired.) Here is a custom paramiko plugin that

Re: [ansible-project] Re: Powering EC2 instances on/off

2014-04-25 Thread Scott Anderson
On Apr 25, 2014, at 3:08 PM, James Carroll wrote: > I'm fairly new to Ansible. How do I get your code into my Ansible install so > I can use it? I run from source. I keep all of my new/modified modules in a library directory under where my play books are. Ansible will find the libraries the

[ansible-project] Re: Powering EC2 instances on/off

2014-04-25 Thread James Carroll
I'm fairly new to Ansible. How do I get your code into my Ansible install so I can use it? I run from source. Thanks! James On Monday, April 21, 2014 12:29:03 PM UTC-4, cove_s wrote: > > Hi folks, > > We’re trying to implement a system where we can power environments on and > off AWS whe

Re: [ansible-project] Powering EC2 instances on/off

2014-04-25 Thread Scott Anderson
On Apr 25, 2014, at 2:31 PM, ghex...@gmail.com wrote: > So, I'm curious, for the case where you want to start "stopped" EC2 > instances, what's the current recommended approach? > > I've kind of ignored this task for now, managing that by hand (it's just > our dev env, but it's still a c

[ansible-project] tags: all?

2014-04-25 Thread Peter Gehres
Is there any way to have something run for all tags? For example, ec2_facts should always be run when working with hosts in AWS even if you want to use a tag to limit the tasks that you are running. -- Peter Gehres Site Reliability Engineer | AppDynamics, Inc. www.appdynamics.com | AS62897 --

Re: [ansible-project] Powering EC2 instances on/off

2014-04-25 Thread ghexsel
So, I'm curious, for the case where you want to start "stopped" EC2 instances, what's the current recommended approach? I've kind of ignored this task for now, managing that by hand (it's just our dev env, but it's still a couple of dozen instances at least). I'm almost about to pull Sco

[ansible-project] template requires write permission on parent directory?

2014-04-25 Thread Jacob Weber
I'm using the "template" task to modify a file that I own, and have write permissions on. I'm not using sudo; I'm just running it as my own user. But I get an error "Destination [parent-dir] not writable." I'm guessing it's deleting and re-creating the file. Is there any way to avoid this, or d

[ansible-project] Re: yum enablerepo won't do multiple repositories

2014-04-25 Thread James Martin
Mark, Thanks for digging into the issue. Would you mind updating the github ticket with this new information? Thanks! James On Thursday, April 24, 2014 12:17:19 PM UTC-4, mto...@go2uti.com wrote: > > > I saved the tmp file on a target server and looked through it to try to > see what is hap

[ansible-project] Unable to login with credentials used to create mongo user

2014-04-25 Thread hugo lassiege
Hi, I've open an issue on Github (https://github.com/ansible/ansible/issues/7157) about mongo_user module. I'm trying to use mongo_user to create some users. However, I'm unable to login with the credentials specified. I use the following commands : - name: add Mongo admin mongodb_user: dat

[ansible-project] Re: apt: upgrade=[safe|full|dist] seems to ignore "default_release" parameter

2014-04-25 Thread Ralph
Anybody able to confirm this pretty please? I also tried: - name: Initial safe-upgrade of the system (from wheezy-backports) apt: upgrade=safe default_release=wheezy-backports update_cache=yes *state=latest* No matter what I keep getting the "OK" (as if there's nothing to do), whereas the a m

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Petros Moisiadis
On 04/25/14 19:52, Adam Morris wrote: > Which is where you use the "dependency" part for real. Override the > templates files using ramon's technique and then use Dependency to > call that task BEFORE you call your own tasks. Ramon's technique would work great in some cases but would not work if

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread 'Petros Moisiadis' via Ansible Project
On 04/25/14 17:48, Strahinja Kustudić wrote: > I can see your suggestion being useful, but for now, you just have to > think of roles as group of similar tasks and that is all, don't think > of them as classes in an OO language. I don't see that this will > change any time soon. > Actually, from u

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Adam Morris
On Friday, April 25, 2014 12:01:16 AM UTC-7, Ernest0x wrote: > > > What you suggest could be useful only if you just want to override some > templates and/or files. But you may also want your 'extend' role to have > some new tasks of its own, so that they are run after the invocation of the

[ansible-project] Re: Playbooks for users with different permissions

2014-04-25 Thread Adam Morris
The simple solution is not not put sudo=anything in the playbook. Those users needing to run with sudo can use command line flags to turn that on... It sounds like you have two separate sets of tasks... So why not use a pair of roles? If you have split your playbooks up into individual tasks

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Strahinja Kustudić
I can see your suggestion being useful, but for now, you just have to think of roles as group of similar tasks and that is all, don't think of them as classes in an OO language. I don't see that this will change any time soon. On Friday, April 25, 2014 4:39:49 PM UTC+2, Ernest0x wrote: > > On 0

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Petros Moisiadis
On 04/25/14 17:09, Strahinja Kustudić wrote: > You are complicating things with all this, think of it a lot simpler. > Regarding your example you can solve #1 in two ways: > > 1. Don't set hosts file with a template, but using lineinfile > 2. Don't change the hosts file in common role, since from t

[ansible-project] lookup plugins eating exceptions?

2014-04-25 Thread Scott Anderson
I had to add some try/catch logic in template.py to discover that there was an issue with the template I was using in lookup('template'). The plugin was just returning empty string due to the template error. Are the lookup plugins supposed to eat exceptions? Regards, -scott -- You received t

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Strahinja Kustudić
You are complicating things with all this, think of it a lot simpler. Regarding your example you can solve #1 in two ways: 1. Don't set hosts file with a template, but using lineinfile 2. Don't change the hosts file in common role, since from the looks of it, it is not "common" enough On Frida

Re: [ansible-project] Re: Looping over a set of host in a playbook?

2014-04-25 Thread Sébastien Han
No one? On Wednesday, April 23, 2014 3:34:47 PM UTC+2, Sébastien Han wrote: > > I don't know :/ > > -- > Regards, > Sébastien Han. > > > On Wed, Apr 23, 2014 at 11:40 AM, Strahinja Kustudić < > strahin...@nordeus.eu> wrote: > >> I don't understand, it's like it is not recognizing the *hostvars*key

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Petros Moisiadis
On 04/25/14 13:28, Ramon de la Fuente wrote: > Hi, > > I understand the suggestion about adding more variables to your templates to > be able to steer with variables; and I understand defaults - this is exactly > how we try to build roles for galaxy. The problem lies with roles beyond your > own

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Ramon de la Fuente
Hi, I understand the suggestion about adding more variables to your templates to be able to steer with variables; and I understand defaults - this is exactly how we try to build roles for galaxy. The problem lies with roles beyond your own control - i.e. roles by other people where you want to

Re: [ansible-project] Overriding a template provided by a common role when invoked by a another role through dependency

2014-04-25 Thread Petros Moisiadis
On 04/24/2014 09:53 PM, ra...@future500.nl wrote: > Hey Ernest0x, > > I don't think the dependencies currently stand to mean "extend" in the > OO sense. All it means is "I depend on some othe role, so make sure > that role is run before me". Each role is still an independent one. I > believe this i