Re: [Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-08-31 Thread Ohad Levy
There is an open bug with 0.25.x (and 2.6) which breaks certificate chaining. this works well for the 0.24.x series, and I hope that will work again sometime in the near future with 2.6.x series. I would recommend you at the moment to use one machine as the CA, if you can accept the fact that its

Re: [Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-08-31 Thread Patrick
On Aug 31, 2010, at 10:47 PM, John Warburton wrote: > Hi All > > I am trying to use the section on Centralised Puppet Infrastructure on the > Scaling Puppet page - > http://projects.puppetlabs.com/projects/1/wiki/Puppet_Scalability > > No matter what I do, I always end up with the client con

[Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-08-31 Thread John Warburton
Hi All I am trying to use the section on Centralised Puppet Infrastructure on the Scaling Puppet page - http://projects.puppetlabs.com/projects/1/wiki/Puppet_Scalability No matter what I do, I always end up with the client contacting a puppet server and rejecting the configuration with a dreaded

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Martijn Grendelman
Mathias Gug schreef: >> I am not sure how I said I want to do an update before /every/ package >> install. Once at the start of a Puppet-run, /IF/ one or more packages >> need to be installed, would suffice. > > You may run into a chicken-egg problem. Packages that are configured as > "ensure => l

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Martijn Grendelman
Nigel Kersten schreef: > So I don't have it refreshonly. I'm perfectly happy with apt-get > update etc running on every puppet run. Ah, that explains ;-) But I was hoping that wouldn't be necessary. > Are you using modules and environments? You will need to make sure the > class is included somew

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Mathias Gug
Hi, Excerpts from Martijn Grendelman's message of Tue Aug 31 16:02:43 -0400 2010: > Hi Nigel Kersten, > > >> What I would like, is for Puppet to run `aptitude update` before it > >> installs or upgrades packages. That doesn't seem out of the ordinary to > >> me, but I can't make it work in Puppet

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Nigel Kersten
On Tue, Aug 31, 2010 at 1:41 PM, Darren Chamberlain wrote: > * Martijn Grendelman [2010/08/31 22:02]: >> What I would like, is for Puppet to run `aptitude update` before >> it installs or upgrades packages. That doesn't seem out of the >> ordinary to me, but I can't make it work in Puppet. > > I

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Darren Chamberlain
* Martijn Grendelman [2010/08/31 22:02]: > What I would like, is for Puppet to run `aptitude update` before > it installs or upgrades packages. That doesn't seem out of the > ordinary to me, but I can't make it work in Puppet. I would do the `aptitude update` in cron, outside of puppet, and manag

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Nigel Kersten
On Tue, Aug 31, 2010 at 1:02 PM, Martijn Grendelman wrote: > Hi Nigel Kersten, > > Thank you for your elaborate answer. I am not sure how to proceed, though... > >>> What I would like, is for Puppet to run `aptitude update` before it >>> installs or upgrades packages. That doesn't seem out of the

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Martijn Grendelman
Hi Nigel Kersten, Thank you for your elaborate answer. I am not sure how to proceed, though... >> What I would like, is for Puppet to run `aptitude update` before it >> installs or upgrades packages. That doesn't seem out of the ordinary to >> me, but I can't make it work in Puppet. >> >> The app

Re: [Puppet Users] 0.24.5 puppetmaster, 0.25.4 puppetd, version sheer?

2010-08-31 Thread James Turnbull
Brett Viren wrote: > This feels like a FAQ and sorry if it is, I failed to find an answer. > > I'd like some advice on handling backward compatibility between puppetd > and puppetmaster. > > My puppetmaster is at v0.24.5 using Debian Lenny packages. I tried to > bring up a puppetd client v0.25.4

RE: [Puppet Users] Is it possible to use hierarchic LDAP entries for puppet clients and parentnodes?

2010-08-31 Thread pinto.e...@gmail.com
-Original Message- From: puppetplayer Sent: 23/08/2010, 14:37 To: Puppet Users Subject: [Puppet Users] Is it possible to use hierarchic LDAP entries for puppet clients and parentnodes? Hi all, i want to create a network and customer parentnodes to store network and/or customer specifi

RE: [Puppet Users] Is it possible to use hierarchic LDAP entries for puppet clients and parentnodes?

2010-08-31 Thread pinto.e...@gmail.com
-Original Message- From: puppetplayer Sent: 23/08/2010, 14:37 To: Puppet Users Subject: [Puppet Users] Is it possible to use hierarchic LDAP entries for puppet clients and parentnodes? Hi all, i want to create a network and customer parentnodes to store network and/or customer specifi

[Puppet Users] 0.24.5 puppetmaster, 0.25.4 puppetd, version sheer?

2010-08-31 Thread Brett Viren
This feels like a FAQ and sorry if it is, I failed to find an answer. I'd like some advice on handling backward compatibility between puppetd and puppetmaster. My puppetmaster is at v0.24.5 using Debian Lenny packages. I tried to bring up a puppetd client v0.25.4 (Ubuntu 10.04 packages) but fail

Re: [Puppet Users] Re: Dynamically generate array of system accounts

2010-08-31 Thread Bryan Horstmann-Allen
+-- | On 2010-08-30 15:43:44, Daniel Pittman wrote: | | You probably want to note that this will collect users from, for example, NIS | or LDAP directories when run, not just "local" /etc/passwd users. Different | people

Re: [Puppet Users] Re: Inherit VS include

2010-08-31 Thread Charles Yeomans
On Aug 31, 2010, at 11:48 AM, Nigel Kersten wrote: > On Tue, Aug 31, 2010 at 4:35 AM, Oliver Hookins wrote: >> On Aug 31, 10:09 am, Kenneth Holter wrote: >>> Hello all. >>> >>> Are there any rule of thumb regarding using "inherits" versus "include"? For >>> example, if I'm creating the class "

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Nigel Kersten
On Tue, Aug 31, 2010 at 7:03 AM, Martijn Grendelman wrote: > Hi, > > For the past week, I have been trying to figure out the best way to do > package management with Puppet on an Ubuntu system. I have studied many > solutons I found on the web, but none of them seem to do exactly what I want. > >

Re: [Puppet Users] File selection for template() similar to source

2010-08-31 Thread R.I.Pienaar
- "Jeff McCune" wrote: > You could also do this directly in the ERB template itself using > File.exists? and __FILE__ as a reference point. This feels like a > hack though. > > template() already supports concatenation, so it would be difficult > to > add a feature to "search" for the righ

Re: [Puppet Users] Documentation contribution opportunity - Please help!

2010-08-31 Thread James Turnbull
Daniel Bahena wrote: > I can also chip in when this translation project starts. > > Best regards, So how would people like to contribute documentation in other languages? I can create a structure in the current docs directory tree like: http://github.com/reductivelabs/puppet-docs source/eng/..

Re: [Puppet Users] Executing check times out

2010-08-31 Thread Jeff McCune
On Tue, Aug 31, 2010 at 10:46 AM, Patrick wrote: >> >> The manifest: >>        exec { "create dir": >>                command => "mkdir -p /dir", >>                onlyif  => "test \! -d /dir", >>        } >> >> What am I missing? I know this doesn't address the original question of timeout, but

Re: [Puppet Users] File selection for template() similar to source

2010-08-31 Thread Jeff McCune
On Tue, Aug 31, 2010 at 11:35 AM, Thomas Bellman wrote: > On 2010-08-31 17:21, Marc Zampetti wrote: > >> I cannot do: >> >>  file { "file.conf" : >>           content => [ template("module/file.conf.${hostname}"), >>                               template("module/file.conf.$ >> {groupname}"), >>  

Re: [Puppet Users] Re: Inherit VS include

2010-08-31 Thread Jeff McCune
On Tue, Aug 31, 2010 at 11:48 AM, Nigel Kersten wrote: > I still feel like we don't have a good term for "namespace" children > classes, as in a succinct and accurate term for the relationship > between "syslog" and "syslog::foo". They're not child classes, they're > ... ? How about BFF? Cohorts

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Jeff McCune
On Tue, Aug 31, 2010 at 10:03 AM, Martijn Grendelman wrote: > > What I would like, is for Puppet to run `aptitude update` before it > installs or upgrades packages. That doesn't seem out of the ordinary to > me, but I can't make it work in Puppet. The run stages of puppet 2.6 addresses this need.

Re: [Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Trevor Hemsley
Actually nothing to do with the content of this post but is anyone else getting a lot of mails from puppet-users at least twice? This particular one came through 3 times with the same timestamp and same Message-Id. On 31/08/2010 15:03, Martijn Grendelman wrote: > Hi, > > For the past week, I have

Re: [Puppet Users] Documentation contribution opportunity - Please help!

2010-08-31 Thread Daniel Bahena
I can also chip in when this translation project starts. Best regards, -- Daniel Bahena Twitter: @informatux On Tue, Aug 31, 2010 at 12:47 AM, Jesús Couto wrote: > If an effort to translate the docs to Spanish get under way, I can help. > -- > -- > > Jesús Couto F.

[Puppet Users] Puppet + APT, I am lost...

2010-08-31 Thread Martijn Grendelman
Hi, For the past week, I have been trying to figure out the best way to do package management with Puppet on an Ubuntu system. I have studied many solutons I found on the web, but none of them seem to do exactly what I want. Among other things, I have tried everything that is discussed here: http

Re: [Puppet Users] Re: Inherit VS include

2010-08-31 Thread Nigel Kersten
On Tue, Aug 31, 2010 at 4:35 AM, Oliver Hookins wrote: > On Aug 31, 10:09 am, Kenneth Holter wrote: >> Hello all. >> >> Are there any rule of thumb regarding using "inherits" versus "include"? For >> example, if I'm creating the class "syslog::base" which should servere as a >> building block for

Re: [Puppet Users] File selection for template() similar to source

2010-08-31 Thread Thomas Bellman
On 2010-08-31 17:21, Marc Zampetti wrote: > I cannot do: > > file { "file.conf" : > content => [ template("module/file.conf.${hostname}"), > template("module/file.conf.$ > {groupname}"), > template("module/file.conf")] > } Y

[Puppet Users] File selection for template() similar to source

2010-08-31 Thread Marc Zampetti
I want to be able to have Puppet determine which file to use as the source of a template() call in a manner similar to the source parameter. Basically, I want to have a file resource that will use the most appropriate file for a template. While I can do: file { "file.conf" : source => [

Re: [Puppet Users] Executing check times out

2010-08-31 Thread Patrick
On Aug 31, 2010, at 1:49 AM, Tore wrote: > Hi, > > Just recently two nodes begun to hang, I cant see that there have been > any changes in our manifest. > > Debug output: > [...] > debug: //Node[X]/X[X]/Exec[create dir]: Executing check 'test \! -d / > dir' > debug: Executing 'test \! -d /dir'

[Puppet Users] Re: Inherit VS include

2010-08-31 Thread Oliver Hookins
On Aug 31, 10:09 am, Kenneth Holter wrote: > Hello all. > > Are there any rule of thumb regarding using "inherits" versus "include"? For > example, if I'm creating the class "syslog::base" which should servere as a > building block for syslog clients, should I go for a "class syslog::client > inhe

[Puppet Users] Executing check times out

2010-08-31 Thread Tore
Hi, Just recently two nodes begun to hang, I cant see that there have been any changes in our manifest. Debug output: [...] debug: //Node[X]/X[X]/Exec[create dir]: Executing check 'test \! -d / dir' debug: Executing 'test \! -d /dir' [...] Here it hangs for several minutes, executin the statemen

[Puppet Users] Inherit VS include

2010-08-31 Thread Kenneth Holter
Hello all. Are there any rule of thumb regarding using "inherits" versus "include"? For example, if I'm creating the class "syslog::base" which should servere as a building block for syslog clients, should I go for a "class syslog::client inherits syslog::base { }" or "class syslog::client { inc

Re: [Puppet Users] Documentation contribution opportunity - Please help!

2010-08-31 Thread Jesús Couto
If an effort to translate the docs to Spanish get under way, I can help. -- -- Jesús Couto F. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To un

Re: [Puppet Users] Definitions in External Nodes

2010-08-31 Thread James Turnbull
Alan Sparks wrote: > > If the extlookup() function supported other than just CSV files now, it > would be more attractive. My instance, most of this information has to > be derived in the external node classifier, this would entail some sort > of periodic extraction to generate the extra data sou