Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Johan De Wit
On 29/09/14 19:29, Isaac Finnegan wrote: I'd be happy to do this, but we're still running super old (2.6) master. Once we get upgraded, I'll be happy to start capturing. -Isaac On Sep 29, 2014, at 10:27 AM, Dean Wilson wrote: On 29 September 2014 18:20, Andy Parker wrote: We haven't gott

[Puppet-dev] Announce: Puppet Server 0.2.1 Available [Security Release]

2014-09-29 Thread Matthaus Owens
Puppet Server 0.2.1 is a security release. This release addresses CVE-2014-7170. All users of Puppet Server are encouraged to upgrade as soon as possible. ** CVE-2014-7170 ** Local information leakage Due to a packaging bug[1], there is a window between package installation/upgrade and service st

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 1:39 PM, Darin Perusich wrote: > Progress...after making that change to the project.clj and building > it's now failing to start with this error. Hopefully I can dig into > this a bit more tomorrow, but puppetdb has been working fine on this > system. > > ArgumentError: Co

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 1:25 PM, Trevor Vaughan wrote: > Any docs on the configuration files? > Coming this week! :) Keep an eye on the repo. > > Is there a way to update webserver.conf to run a CA on a different port > and, instead of having 'want' in the client_auth section having somethin

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 1:33 PM, Andy Parker wrote: > On Mon, Sep 29, 2014 at 1:00 PM, Josko Plazonic > wrote: > >> Hullo, >> >> On 09/23/2014 12:11 PM, Nate Wolfe wrote: >> >>> As the version number 0.2.0 should imply, Puppet Server is not >>> production ready (yet), but please >>> do try it ou

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Chris Price
On Fri, Sep 26, 2014 at 3:06 AM, Dominic Cleal wrote: > > The only hitch I've had was with the Foreman report processor, which > makes an HTTPS connection to Apache with mod_ssl. On new OSes with > modern mod_ssl versions (e.g. EL7 or Ubuntu 14.04), the report processor > fails to make an HTTPS

Re: [Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Trevor Vaughan
I did check that. I've only got 64GB on this system so it might be a bit tight ;-). The logs didn't turn up anything suspicious but I did find that a kill -HUP took down the process. I'll keep letting it run and see what happens. Thanks, Trevor On Mon, Sep 29, 2014 at 5:27 PM, Chris Price wrot

Re: [Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 2:26 PM, Chris Price wrote: > On Mon, Sep 29, 2014 at 12:44 PM, Trevor Vaughan > wrote: > > Maybe check your memory settings? We currently ship with a pretty large > default heap size, and we don't handle it very gracefully if you don't have > enough RAM. > p.s., see:

Re: [Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 12:44 PM, Trevor Vaughan wrote: > Ugh, it would probably work better if I actually looked at my notes prior > to sending a message instead of trying to go from memory. > > SELinux is fine. > > Sorry for the false alarm. > > I did have the server crash at some point and I'm

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Darin Perusich
On Mon, Sep 29, 2014 at 12:22 PM, Chris Price wrote: > On Mon, Sep 29, 2014 at 7:17 AM, Darin Perusich wrote: >> >> Here's a quick recreation of the steps. This is on OpenSUSE 13.1 with >> OpenJDK 1.7.0_51 >> >> https://gist.github.com/deadpoint/900a2d92911705023986 >> -- >> Later, >> Darin > > >

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Andy Parker
On Mon, Sep 29, 2014 at 1:00 PM, Josko Plazonic wrote: > Hullo, > > On 09/23/2014 12:11 PM, Nate Wolfe wrote: > >> As the version number 0.2.0 should imply, Puppet Server is not production >> ready (yet), but please >> do try it out in your favorite sandbox. >> > > I didn't find so far any featur

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Trevor Vaughan
Any docs on the configuration files? Is there a way to update webserver.conf to run a CA on a different port and, instead of having 'want' in the client_auth section having something like 'need' with the CA having 'none' (or something)? Goal: Run a CA separately from the main daemon using a *sing

Re: [Puppet-dev] Announce: Puppet Server 0.2.0

2014-09-29 Thread Josko Plazonic
Hullo, On 09/23/2014 12:11 PM, Nate Wolfe wrote: As the version number 0.2.0 should imply, Puppet Server is not production ready (yet), but please do try it out in your favorite sandbox. I didn't find so far any feature comparison between puppet server and the regular (purely ruby based) pup

Re: [Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Trevor Vaughan
Ugh, it would probably work better if I actually looked at my notes prior to sending a message instead of trying to go from memory. SELinux is fine. Sorry for the false alarm. I did have the server crash at some point and I'm trying to figure out why that happened. Thanks, Trevor On Mon, Sep

Re: [Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 12:00 PM, Trevor Vaughan wrote: > Well, I've given 0.2.0 a run and, while it seems to function properly, > it's throwing AVCs all over the place. > > Any ETA for a working policy set? > > Also, it's not quite 100% matching the 3.6 language set but I'll have to > play with

[Puppet-dev] Puppet Server 0.2.0 and SELinux

2014-09-29 Thread Trevor Vaughan
Well, I've given 0.2.0 a run and, while it seems to function properly, it's throwing AVCs all over the place. Any ETA for a working policy set? Also, it's not quite 100% matching the 3.6 language set but I'll have to play with that some more to see what's going on. Thanks, Trevor -- Trevor Va

Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Britt Gresham
> > Britt, I had a similar concern about vendoring the code and I think Dean is right. The script should be made as straightforward, simple, and small as possible so that people can understand what it is doing at a glance. I can make the changes to the script to remove the opt parser since ther

Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Isaac Finnegan
I'd be happy to do this, but we're still running super old (2.6) master. Once we get upgraded, I'll be happy to start capturing. -Isaac On Sep 29, 2014, at 10:27 AM, Dean Wilson wrote: > On 29 September 2014 18:20, Andy Parker wrote: >> We haven't gotten any responses to this yet. :( Getting

Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Andy Parker
On Mon, Sep 29, 2014 at 10:27 AM, Dean Wilson wrote: > On 29 September 2014 18:20, Andy Parker wrote: > > We haven't gotten any responses to this yet. :( Getting this information > > will really help in allowing us to target the right places for > performance > > improvements. > > Quite a few of

Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Dean Wilson
On 29 September 2014 18:20, Andy Parker wrote: > We haven't gotten any responses to this yet. :( Getting this information > will really help in allowing us to target the right places for performance > improvements. Quite a few of us on this list run puppet in masterless mode so we might not be th

Re: [Puppet-dev] Puppet Master Profiles

2014-09-29 Thread Andy Parker
On Mon, Sep 22, 2014 at 10:04 AM, Britt Gresham wrote: > Hello, > > We are interested in collecting puppet profile data from the puppet master > in the real world. This data will be used to help us find a direction to go > to increase the throughput of the puppet master master. > > We haven't got

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Chris Price
On Mon, Sep 29, 2014 at 7:17 AM, Darin Perusich wrote: > Here's a quick recreation of the steps. This is on OpenSUSE 13.1 with > OpenJDK 1.7.0_51 > > https://gist.github.com/deadpoint/900a2d92911705023986 > -- > Later, > Darin > Hi Darin, The issue you're seeing is because the "tk-jetty9" depen

[Puppet-dev] Re: How to identify if a optional attribute of resource is present in node configuration on puppet client run

2014-09-29 Thread Henrik Lindberg
On 2014-29-09 7:44, smartway wrote: A optional attribute of a resource defaults to a value which is not supported on one of the platforms. If it defaults to an illegal value via the Resource Defaults mechanism, it will be difficult to look it up. I want add a platform check to block the at

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Darin Perusich
Here's a quick recreation of the steps. This is on OpenSUSE 13.1 with OpenJDK 1.7.0_51 https://gist.github.com/deadpoint/900a2d92911705023986 -- Later, Darin On Mon, Sep 29, 2014 at 8:49 AM, Ken Barber wrote: >> Yes, I'm using 'lein deps' to download the deps locally, which is how >> I also han

Re: [Puppet-dev] Running Beaker tests in a Public CI

2014-09-29 Thread Ken Barber
> I know PuppetLabs themselves use their own Jenkins server with Virtualbox on > it, but for those who want to get beaker stuff up publicly easily and (for > now, free) wercker seems to work pretty well! :) Actually, we generally use VSphere now (I presume you mean just module testing), just FYI.

[Puppet-dev] Running Beaker tests in a Public CI

2014-09-29 Thread Peter M Souter
Hi all! So I saw Gareth's talk on Continuously testing infrastructure talk at Puppetconf, I saw that wercker has docker support. I'd seen a few people hack together docker support in Travis, but it was a bit hacky (https://github.com/lukecyca/travis-docker-example) and whilst there seems to b

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Ken Barber
> Yes, I'm using 'lein deps' to download the deps locally, which is how > I also handle it for PuppetDB also. > > The issue I'm seeing is that when i run 'lein uberjar' the resulting > jar doesn't contain all the classes need to run, jetty and > trapperkeeper are not included. When I attempt to sta

Re: [Puppet-dev] Re: Announce: Puppet Server 0.2.0

2014-09-29 Thread Darin Perusich
On Fri, Sep 26, 2014 at 3:21 PM, Nate Wolfe wrote: >> I'm trying figure out all the dependencies I'm missing. > > > Leiningen has a couple commands that can help with this. When you have a > network connection, `lein deps` will pull down all dependencies and cache > them locally (under ~/.m2). A

[Puppet-dev] How to identify if a optional attribute of resource is present in node configuration on puppet client run

2014-09-29 Thread smartway
A optional attribute of a resource defaults to a value which is not supported on one of the platforms. I want add a platform check to block the attribute, if the attribute is given by user throw a error. Type file for this resource is present in other module which i cannot modify. Is there a w

Re: [Puppet-dev] Is there a way to run puppet-agent on a generic Linux OS

2014-09-29 Thread Martin Alfke
Hi, On 29 Sep 2014, at 04:12, Alick wrote: > > Hi all > > I have a device running on Linux OS ( no RH/Debain/Unbuntu ) ,i wonder to > know if there is a way to port/install puppet-agent on it. As long as ruby is available for the OS you can install puppet also as gem. (gem install puppet