[Puppet Users] Re: Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Nikolay Sturm
On Apr 14, 11:35 am, Dick Davies wrote: > I'm getting a lot of 'connection reset' errors all of a sudden on our > 0.24.8 puppetmaster. > I'm assuming that's a load issue? Probably, I had the same problem recently and solved it by serializing puppetd runs. It works by restarting my puppetd process

Re: [Puppet Users] Re: Puppet high-availability

2010-04-14 Thread Atha Kouroussis
Hi, You can generate the generate the puppetmaster certificate using the certname and/or certdnsnames options and assign that name to the VIP in a heartbeat cluster. Once the certificate is generated on one server, copy it to the other. Cheers, Atha On Apr 14, 2010, at 17:01 , SyRenity wrote:

[Puppet Users] require inside define

2010-04-14 Thread Jim Bala
If I understand the docs correctly, the 'require' inside this define should be satisfied before 'User' is evaluated. Except that's not what's happening; instead, 'User' is being evaluated first and then the require is being satisfied. Am I missing/misunderstanding something about how this should

[Puppet Users] Re: Puppet high-availability

2010-04-14 Thread SyRenity
Hi. I actually considered this, but DRBD seems heavy for read-only information, which puppet manifests are. Maybe just using heartbeat both for DNS and Puppet, but as I'm defining both DNS servers on Puppet clients anyhow, it seems redundant. Are there considerations against this approach? Rega

Re: [Puppet Users] Re: virtual resources

2010-04-14 Thread Roy Nielsen
On 4/14/10 3:51 AM, Ken wrote: @file { $myarray: ensure => directory, tag => "myfiles" ... } File<| tag == "myfiles" |> Or I think this will work also, probably close to your first requirement: @file { $myarray: ensure => directory, } realize(File[$myarray]) Hello

Re: [Puppet Users] Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Patrick
On Apr 14, 2010, at 8:44 AM, Jeff McCune wrote: > On Wednesday, April 14, 2010, Dick Davies wrote: >> I'm getting a lot of 'connection reset' errors all of a sudden on our >> 0.24.8 puppetmaster. >> I'm assuming that's a load issue? >> >> Number of nodes has been stable for a month or so, but a

[Puppet Users] Re: Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Ken
+1 on the passenger ... we wouldn't survive without it. We are running 0.25.4 as well. In regards to the nodes hitting the puppetmaster at the same time - I presume you've looked at the 'splay' option? There is a gotcha at the moment however: http://projects.puppetlabs.com/issues/3321 Vote if y

[Puppet Users] Re: Jeff McCune joins Puppet Labs

2010-04-14 Thread Ken
Such good news you had to say it twice eh? Congrats Jeff. On Apr 14, 5:09 pm, Luke Kanies wrote: > Hi all, > > I'm pleased to announce that Jeff McCune will be joining Puppet Labs   > and moving to Portland, OR in May. > > Jeff has been a critical part of Puppet's great support for OS X,   > hav

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Trevor Hemsley
Sounds like an ideal candidate for using DRBD and heartbeat to run active/standby puppet masters. On 14/04/2010 15:34, Michael DeHaan wrote: > It would do for active/passive though.How about setting up an > alias for ca that moved when the ca wasn't accessible (using > --certname), and load ba

[Puppet Users] Jeff McCune joins Puppet Labs

2010-04-14 Thread Luke Kanies
Hi all, I'm pleased to announce that Jeff McCune will be joining Puppet Labs and moving to Portland, OR in May. Jeff has been a critical part of Puppet's great support for OS X, having developed much of the initial functionality. He was also the main driver in a lot of the configuration

[Puppet Users] Jeff McCune joins Puppet Labs

2010-04-14 Thread Luke Kanies
Hi all, I'm pleased to announce that Jeff McCune will be joining Puppet Labs and moving to Portland, OR in May. Jeff has been a critical part of Puppet's great support for OS X, having developed much of the initial functionality. He was also the main driver in a lot of the configuration

Re: [Puppet Users] Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Jeff McCune
On Wednesday, April 14, 2010, Dick Davies wrote: > I'm getting a lot of 'connection reset' errors all of a sudden on our > 0.24.8 puppetmaster. > I'm assuming that's a load issue? > > Number of nodes has been stable for a month or so, but a lot of them > were rebooted at the same time > yesterday

Re: [Puppet Users] Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Peter Meier
I was thinking of bumping to 0.25.3 (latest EPEL, puppetmaster then nodes), and then switching over to Passenger. Is that a sensible approach? Thanks! yes, but I would go for 0.25.4 (You'll find EPEL rpms for them) or wait a little and get 0.25.5. both versions contain numerous fixes and 0.2

[Puppet Users] Time to scale up? : Could not call fileserver.describe: #

2010-04-14 Thread Dick Davies
I'm getting a lot of 'connection reset' errors all of a sudden on our 0.24.8 puppetmaster. I'm assuming that's a load issue? Number of nodes has been stable for a month or so, but a lot of them were rebooted at the same time yesterday so they rain down requests on the poor (untuned, webrick based)

[Puppet Users] Re: mount order

2010-04-14 Thread ed-rfmd
Thank You. I'm just getting started with puppet and this will be a great help. Ed On Apr 13, 4:57 pm, Peter Meier wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 04/13/2010 10:08 PM, ed-rfmd wrote: > > > Is there a way to control the order of the mounts? > > We have a few second

Re: [Puppet Users] Replacing a puppet server

2010-04-14 Thread Christopher Johnston
Can you describe how to set this up? On Wed, Mar 31, 2010 at 11:23 AM, Ohad Levy wrote: > LOhit, > > The main two things to take into account are: > >1. keep your manifests elsewhere, IMHO puppetmasters always gets RO >copy of your puppet data (e.g. from a VCS). >2. Solve the SSL he

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Christopher Johnston
I have two servers in every site that are dedicated for infrastructure servers, but they run in active/passive state with a VIP IP that floats between the two of them. That IP is used for DNS, Cobbler, Puppet, ftp, http, etc etc. What I would like is to have SSL certs work between the two nodes b

Re: [Puppet Users] Design issue (or: problem with virtual resources)

2010-04-14 Thread Frederik Wagner
On Wed, Apr 14, 2010 at 4:06 PM, Frederik Wagner wrote: > Hi Jeff, > > thanks for your ideas! > > On Wed, Apr 14, 2010 at 3:12 PM, Jeff McCune wrote: >> On Wed, Apr 14, 2010 at 8:33 AM, Frederik Wagner >> wrote: >>> >>> So far so good. Now my problem emerges, when a module depends on an >>> ot

[Puppet Users] Re: Puppet high-availability

2010-04-14 Thread SyRenity
HAProxy requires one additional server in midst, while I prefer to not have such dependency. On Apr 14, 5:57 am, Scott Smith wrote: > On 4/13/10 3:26 PM, SyRenity wrote: > > > Hi. > > > I asked this question in past on this list, and now working to set it > > running. > > > My idea is to have 2 P

Re: [Puppet Users] SuSE and zypper

2010-04-14 Thread Alpár Török
Alpar Torok 2010/4/14 James Turnbull : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 14/04/10 9:26 PM, Alpár Török  wrote: >> 2010/4/14 James Turnbull : >> Alpar wrote: > Hi, > > I found the zypper provider mentioned on this list in another thread, > but it failes with

[Puppet Users] Re: DNS recipes

2010-04-14 Thread SyRenity
Thanks, will give it a look. On Apr 14, 11:23 am, David Schmitt wrote: > On 4/14/2010 12:09 AM, SyRenity wrote: > > > Hi. > > > Are there any DNS recipes for puppet? > > > Thanks. > > I've got a bind/zones module at > >    http://git.black.co.at/?p=module-bind > > It's a bit resource-intensive, a

[Puppet Users] Re: DNS recipes

2010-04-14 Thread SyRenity
DNS server, preferable named, or any other lightweight one. On Apr 14, 2:26 am, Patrick wrote: > On Apr 13, 2010, at 3:09 PM, SyRenity wrote: > > > Hi. > > > Are there any DNS recipes for puppet? > > > Thanks. > > DNS server or client?  If server, what server? -- You received this message becau

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Michael DeHaan
It would do for active/passive though.How about setting up an alias for ca that moved when the ca wasn't accessible (using --certname), and load balance the puppet serving parts since there's no race issues there. --Michael On Wed, Apr 14, 2010 at 10:06 AM, David Schmitt wrote: > On 4/14/2

Re: [Puppet Users] Could not set file on ensure: undefined method `[]' for nil:NilClass

2010-04-14 Thread Peter Meier
Hi notice: Starting Puppet client version 0.22.4 can you try with a more recent version? the current supported versions are imho 0.24.x and 0.25.y (where x or y is the latest version of that branch). cheers pete -- You received this message because you are subscribed to the Google Group

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Christopher Johnston
The environments that I am dealing with are very stripped down and self contained (no NFS or shared storage to attach to). I have considered using rsnapshot to keep the certificates in sync. I am going to look for the email that Ohad mentions from lohit on how to deal with certificates. -Chris

Re: [Puppet Users] Total newbie question: customization of configuration files managed by a Puppet server

2010-04-14 Thread jerome moliere
2010/4/14 Michael DeHaan > On Wed, Apr 14, 2010 at 6:37 AM, jerome moliere > wrote: > > Hi, > > excuse me if this question is a stupid one > > I'm about convincing my customers to use Puppet before this, I 'd like > > to make a POC with part from the current complexity ... > > Like any compa

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread David Schmitt
On 4/14/2010 3:42 PM, Michael DeHaan wrote: On Tue, Apr 13, 2010 at 7:39 PM, Christopher Johnston wrote: How to deal with ssl certs, I have a similar situation where I have two puppetmasters per site and I would like to see them both handle serving puppet data at anytime from a VIP (primary/f

Re: [Puppet Users] Tags in Puppet

2010-04-14 Thread David Schmitt
Hi Mark, what you are doing is basically possibl. You just need to get the Syntax right. I've added the necessary changes inline below. If you follow this pattern, you'll also note that this maps directly to the possibilities of an external node script should you need one in the future.

Re: [Puppet Users] Design issue (or: problem with virtual resources)

2010-04-14 Thread Frederik Wagner
Hi Jeff, thanks for your ideas! On Wed, Apr 14, 2010 at 3:12 PM, Jeff McCune wrote: > On Wed, Apr 14, 2010 at 8:33 AM, Frederik Wagner > wrote: >> >> So far so good. Now my problem emerges, when a module depends on an >> other module. This should be version independent (and even better >> ind

Re: [Puppet Users] Total newbie question: customization of configuration files managed by a Puppet server

2010-04-14 Thread Michael DeHaan
On Wed, Apr 14, 2010 at 6:37 AM, jerome moliere wrote: > Hi, > excuse me if this question is a stupid one > I'm about convincing my customers to use Puppet before this, I 'd like > to make a POC with part from the current complexity ... > Like any company (I guess) , we have different envrionm

Re: [Puppet Users] Tags in Puppet

2010-04-14 Thread Michael DeHaan
I'm not sure about tagging nodes versus tagging resources like a class. That all being said, I don't think the right modelling here is to use tags to determine behavior. Rather I'd have something like: class autofs class autofs::server inherits autofs class autofs::laptop inherits autofs and t

[Puppet Users] Could not set file on ensure: undefined method `[]' for nil:NilClass

2010-04-14 Thread Tim
Hi, I'm just starting to use puppet and I've encountered the error below. I've looked in the puppet FAQ and googled around a bit but can't work out what's going wrong here: notice: Starting Puppet client version 0.22.4 info: Facts have changed; recompiling info: Caching configuration at /var/lib/

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Michael DeHaan
On Tue, Apr 13, 2010 at 7:39 PM, Christopher Johnston wrote: > How to deal with ssl certs, I have a similar situation where I have two > puppetmasters per site and I would like  to see them both handle serving > puppet data at anytime from a VIP (primary/failover) type of operation. > How about s

Re: [Puppet Users] Re: virtual resources

2010-04-14 Thread Roy Nielsen
Thanks Ken, I'll give it a shot. Regards, -Roy On 4/14/10 3:51 AM, Ken wrote: @file { $myarray: ensure => directory, tag => "myfiles" ... } File<| tag == "myfiles" |> Or I think this will work also, probably close to your first requirement: @file { $myarray: ensure =>

Re: [Puppet Users] Design issue (or: problem with virtual resources)

2010-04-14 Thread Jeff McCune
On Wed, Apr 14, 2010 at 8:33 AM, Frederik Wagner wrote: > > So far so good. Now my problem emerges, when a module depends on an > other module. This should be version independent (and even better > independent of the module name). For example: > I have a generic nas-::virtual module, which provid

Re: [Puppet Users] SuSE and zypper

2010-04-14 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 14/04/10 9:26 PM, Alpár Török wrote: > 2010/4/14 James Turnbull : > Alpar wrote: Hi, I found the zypper provider mentioned on this list in another thread, but it failes with the flowing error : Package[kvm]/ensure: cha

[Puppet Users] Tags in Puppet

2010-04-14 Thread Mark Nelson
Hello I am trying to use tags to differentiate between machines that are servers and machines that are clients. I am using the tag statement within the node definition as shown below - node shadow inherits default { tag("server") } The default node is defined as follows - node defa

[Puppet Users] Design issue (or: problem with virtual resources)

2010-04-14 Thread Frederik Wagner
Hello .*, sorry this is a bit lengthy: I'm in the progress of setting up a puppet system for our Linux cluster (SLES) and have a 'small' design question, since I'm not able to realize my ideas with capabilities of puppet as I have them in mind. At least up to now. The general setup looks like th

[Puppet Users] heads up: plusignment on users groups is potentially dangerous

2010-04-14 Thread ant
I just logged a bug http://projects.puppetlabs.com/issues/3556 which details an issue, where doing: User["sysadmin", "pleb"] { groups +> "wwwadm" } unexpectedly gives user pleb ALL of sysadmin's groups... It created a bit of a security issue for me here, as a bunch of plebs were suddenly grante

Re: [Puppet Users] SuSE and zypper

2010-04-14 Thread Alpár Török
[..] >> > > I tried multiple versions that i could get my hand on. I just tested > with that one, but i get the same error. Does it have some kind of > external dependency?  I am running a SuSE Studio JeOS. PS: I realizes that Suse has a ruby-zypp package, but it seems to makes no difference. --

Re: [Puppet Users] SuSE and zypper

2010-04-14 Thread Alpár Török
2010/4/14 James Turnbull : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Alpar wrote: >> Hi, >> >> I found the zypper provider mentioned on this list in another thread, >> but it failes with the flowing error : >> >> Package[kvm]/ensure: change from 0.11.0-4.5.2 to true failed: Could >> not

Re: [Puppet Users] Cron question

2010-04-14 Thread Darvin Denmian
Hello, # puppetmasterd --version 0.25.4 Thanks ! On Tue, Apr 13, 2010 at 6:53 PM, Atha Kouroussis wrote: > Hi, > Quick question: what puppet version are you running? IIRC, one of the early > 0.25 versions had an issue with the cron type. Its been resolved in 0.25.4. > > Cheers, > Atha > > On A

Re: [Puppet Users] SuSE and zypper

2010-04-14 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alpar wrote: > Hi, > > I found the zypper provider mentioned on this list in another thread, > but it failes with the flowing error : > > Package[kvm]/ensure: change from 0.11.0-4.5.2 to true failed: Could > not update: undefined method `zypper' for

[Puppet Users] Total newbie question: customization of configuration files managed by a Puppet server

2010-04-14 Thread jerome moliere
Hi, excuse me if this question is a stupid one I'm about convincing my customers to use Puppet before this, I 'd like to make a POC with part from the current complexity ... Like any company (I guess) , we have different envrionments: - development - staging - production... Applications are dep

[Puppet Users] SuSE and zypper

2010-04-14 Thread Alpar
Hi, I found the zypper provider mentioned on this list in another thread, but it failes with the flowing error : Package[kvm]/ensure: change from 0.11.0-4.5.2 to true failed: Could not update: undefined method `zypper' for # at Is the latest provider broken? Is there interest in making this work

[Puppet Users] Re: virtual resources

2010-04-14 Thread Ken
> @file { $myarray: >   ensure => directory, >   tag => "myfiles" >   ... > > } > > File <| tag == "myfiles" |> Or I think this will work also, probably close to your first requirement: @file { $myarray: ensure => directory, } realize(File[$myarray]) -- You received this message because you

Re: [Puppet Users] Puppet high-availability

2010-04-14 Thread Bruce Richardson
On Tue, Apr 13, 2010 at 07:57:25PM -0700, Scott Smith wrote: > On 4/13/10 3:26 PM, SyRenity wrote: >> Hi. >> >> I asked this question in past on this list, and now working to set it >> running. >> >> My idea is to have 2 Puppet servers, who are also the DNS servers. >> Each one would have itself as

Re: [Puppet Users] DNS recipes

2010-04-14 Thread David Schmitt
On 4/14/2010 12:09 AM, SyRenity wrote: Hi. Are there any DNS recipes for puppet? Thanks. I've got a bind/zones module at http://git.black.co.at/?p=module-bind It's a bit resource-intensive, and I really need to refresh it a bit soon. But, it is working. Best Regards, David -- dasz.at

[Puppet Users] Re: virtual resources

2010-04-14 Thread Ken
Not sure if this works - using the expression: var == array doesn't really make sense when you think about it as its trying to directly compare a string with an array (which should fail). If there was an 'in' expression it would make more sense. Of course this is academic. Because you could just t