Re: [Puppet Users] Monitor puppet runs on clients with nagios

2010-11-17 Thread James Turnbull
Brian Gallew wrote: > I've been thinking about this myself, and I've come up with a few > possibilities. > Brian You might want to also have a look at: http://projects.puppetlabs.com/issues/4339 James -- Puppet Labs - http://www.puppetlabs.com C: 503-734-8571 -- You received this message b

Re: [Puppet Users] Monitor puppet runs on clients with nagios

2010-11-17 Thread Brian Gallew
I've been thinking about this myself, and I've come up with a few possibilities. 1) Leverage the reports on the puppet master. This could be done with a daemon that watched /var/lib/puppet/reports, for instance. 2) Leverage the reports on the puppet clients. Each puppet run could ship the report

Re: [Puppet Users] Can't get plugins in modules with environments to work in 2.6

2010-11-17 Thread Patrick
I think I heard somewhere that pluginsync ignores environments. On Nov 17, 2010, at 8:27 PM, John Warburton wrote: > Hi All > > I'm quite prepared to acknowledge I've missed the bleeding obvious here, but > I just can't see. Hence the post > > I am getting the exact same errors as issue 4409

Re: [Puppet Users] trying to push a whole directory...

2010-11-17 Thread Patrick
On Nov 17, 2010, at 2:48 PM, Russell Fulton wrote: > > (note to developers: please 'rescue' this error and provide something > meaningful to the user ;) Someone else posted a fix. On the subject of the error itself, this bug is known and fixed in 2.6.x and 0.25.5. If you want more info, loo

[Puppet Users] Can't get plugins in modules with environments to work in 2.6

2010-11-17 Thread John Warburton
Hi All I'm quite prepared to acknowledge I've missed the bleeding obvious here, but I just can't see. Hence the post I am getting the exact same errors as issue 4409 ( http://projects.puppetlabs.com/issues/4409) when trying to use a type in a module in an environment When the type is in /modules

Re: [Puppet Users] Multiple CA / Puppet master environment

2010-11-17 Thread Scott Smith
Oh, that's for sharing the puppetmaster SSL keypair between each other, that's all. On Nov 17, 2010 3:53 PM, "Nigel Kersten" wrote: > On Wed, Nov 17, 2010 at 1:29 PM, Scott Smith wrote: >> nfs mount the puppetmaster ssl dir. seperate puppetca (set on clients) play >> with it and you'll figure it

Re: [Puppet Users] trying to push a whole directory...

2010-11-17 Thread Eric Sorenson
On Nov 17, 2010, at 2:48 PM, Russell Fulton wrote: >source => '/home/sensors/Rules/raw', This needs to be a puppet:// url which matches up to an appropriate 'mount' in your server's /etc/puppet/fileserver.conf: # fileserver.conf [sensors] path = /home/sensors allow = * # end f

[Puppet Users] trying to push a whole directory...

2010-11-17 Thread Russell Fulton
Hi Folks I'm a relative newbie to puppet (been playing about a month)... I am trying to push out a directory containing a bunch of files to a number of machines and thought I could do this using the recurse attribute: file { "/home/snort/Rules/raw": mode=> "750",

[Puppet Users] more errors with pushig out directories

2010-11-17 Thread kiwi
I am having grief with another directory -- almost identical set up as previous message. This time I am getting err: /Stage[main]/Monitor/File[/home/snort/conf/pp]: Failed to generate additional resources using 'eval_generate': Error 400 on SERVER: Not authorized to call search on /file_metadata/

Re: [Puppet Users] bootstrapping facts

2010-11-17 Thread Nigel Kersten
On Wed, Nov 17, 2010 at 1:05 PM, byron appelt wrote: > I am using a fact inside of a template. The problem I am running into > is that the bootstrap run of puppet fails with the following error: > > err: Could not retrieve catalog from remote server: Error 400 on > SERVER: Failed to parse template

Re: [Puppet Users] Centralised source repository for Puppetforge

2010-11-17 Thread Igal Koshevoy
On Wed, Nov 17, 2010 at 8:30 AM, lisa wrote: > Is there a centralized git (or other SCM) repository for user- > contributed Puppet modules? That is, does Puppetlabs operate a > repository on github or elsewhere so that users can be granted commit > access for specific modules which they contribute

Re: [Puppet Users] Multiple CA / Puppet master environment

2010-11-17 Thread Nigel Kersten
On Wed, Nov 17, 2010 at 1:29 PM, Scott Smith wrote: > nfs mount the puppetmaster ssl dir. seperate puppetca (set on clients) play > with it and you'll figure it out :) Why do you need to nfs mount the puppetmaster SSL dir in this case Scott? There's no state to be shared if you're operating with

Re: [Puppet Users] Sr Unix Admin needed

2010-11-17 Thread Mohamed Lrhazi
We are committed to deploying puppet and using it as our main tool for managing all our systems but we are far from having fully deployed it... The person we would hire would be expected to join all our efforts, not just puppet deployment and management, but of course, puppet knowledge and exp

[Puppet Users] Re: Multiple CA / Puppet master environment

2010-11-17 Thread donavan
On Nov 17, 6:57 am, CraftyTech wrote: > Would there be any issues with stored configs? should I either a) > Point both masters to the same PuppetDB server (MySql), or b) Setup a > two way replication between the masters, and connect them individually > to their respective PuppetDB's.. Storeconfig

Re: [Puppet Users] Re: Stopping a service before a package upgrade

2010-11-17 Thread Daniel Pittman
Mohit Chawla writes: > On Wed, Nov 17, 2010 at 10:50 PM, byron appelt wrote: > >> The package I am trying to update is running under monit, which will start >> it back up if not shut down via monit, which the package itself cannot >> do. Is there a recommended way to handle this sort of situation

Re: [Puppet Users] Sr Unix Admin needed

2010-11-17 Thread Daniel Pittman
Mohamed Lrhazi writes: > Sorry to use this list for a job ad... > > I work for a prestigious University in Washington, DC... and we are > looking, pretty urgently, for a senior Unix admin to join our team... > > Please contact me if you live in the area and are seriously > interested, and are ser

Re: [Puppet Users] Multiple CA / Puppet master environment

2010-11-17 Thread John Warburton
I rsync my ssl dir from CNAMES puppet-ca.example.com to puppet-ca2.example.com every 5 mins All clients configuration is set up such that ca_server = puppet-ca.example.com If puppet-ca goes down, I swing the pppet-ca CNAME to the puppet-ca2 server Note that to make this work I use the same singl

Re: [Puppet Users] Multiple CA / Puppet master environment

2010-11-17 Thread Scott Smith
nfs mount the puppetmaster ssl dir. seperate puppetca (set on clients) play with it and you'll figure it out :) On Nov 11, 2010 9:18 AM, "luke.bigum" wrote: > Hi, > > Does anyone know if this document is up to date (besides the comment > at the top saying it's not): > > http://projects.puppetlabs.

[Puppet Users] Re: Multiple CA / Puppet master environment

2010-11-17 Thread CraftyTech
Does anyone use multiple puppetmasters with storedconfigs? On Nov 17, 8:57 am, CraftyTech wrote: > Would there be any issues with stored configs? should I either a) > Point both masters to the same PuppetDB server (MySql), or b) Setup a > two way replication between the masters, and connect them

[Puppet Users] bootstrapping facts

2010-11-17 Thread byron appelt
I am using a fact inside of a template. The problem I am running into is that the bootstrap run of puppet fails with the following error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to parse template base_gateway/ublip_gw.monitrc.erb: Could not find value for 'g

Re: [Puppet Users] centos add user failed

2010-11-17 Thread Nan Liu
On Wed, Nov 17, 2010 at 4:00 AM, Leonko wrote: > Hello, I have problem with creating user under centos: > > part of my class: > >   user {jboss: >           ensure   => present, >           home    => "$jboss_home", >           shell   => "/bin/bash", >           groups => jboss, >        } If it

Re: [Puppet Users] Is anyone using SSL with Dashboard?

2010-11-17 Thread Patrick
On Nov 17, 2010, at 9:42 AM, Kent wrote: > I would like to use SSL with Dashboard as a means of controlling > access. I've got my Dashboard vhost working with client authentication > and a user with the right certificate can view the dashboard. > However, my puppetmaster cannot post reports to Da

Re: [Puppet Users] Re: Stopping a service before a package upgrade

2010-11-17 Thread Mohit Chawla
Hi, On Wed, Nov 17, 2010 at 10:50 PM, byron appelt wrote: > The package I am trying to update is running under monit, which will > start it back up if not shut down via monit, which the package itself > cannot do. Is there a recommended way to handle this sort of > situation? > A puppet provider

[Puppet Users] Is anyone using SSL with Dashboard?

2010-11-17 Thread Kent
I would like to use SSL with Dashboard as a means of controlling access. I've got my Dashboard vhost working with client authentication and a user with the right certificate can view the dashboard. However, my puppetmaster cannot post reports to Dashboard any longer because it cannot speak SSL to t

[Puppet Users] Re: Stopping a service before a package upgrade

2010-11-17 Thread byron appelt
The package I am trying to update is running under monit, which will start it back up if not shut down via monit, which the package itself cannot do. Is there a recommended way to handle this sort of situation? -Byron On Nov 16, 5:35 pm, Daniel Pittman wrote: > byron appelt writes: > > Is there

[Puppet Users] Centralised source repository for Puppetforge

2010-11-17 Thread lisa
Is there a centralized git (or other SCM) repository for user- contributed Puppet modules? That is, does Puppetlabs operate a repository on github or elsewhere so that users can be granted commit access for specific modules which they contribute? I should think not given the number of discrete rep

[Puppet Users] Sr Unix Admin needed

2010-11-17 Thread Mohamed Lrhazi
Sorry to use this list for a job ad... I work for a prestigious University in Washington, DC... and we are looking, pretty urgently, for a senior Unix admin to join our team... Please contact me if you live in the area and are seriously interested, and are seriously a Senior Unix person. Mohamed

[Puppet Users] Re: Controlling Package Version

2010-11-17 Thread Andy
To All, Thanks so much for the input. We have plans on mirroring the repositories that we need to control the production package versions and another mirror for testing/development that will contain upstream versions. The usage of the "ensure => latest" parameter makes sense to us in this context.

Re: [Puppet Users] Lexical Scope: How does it work?

2010-11-17 Thread Dan Bode
On Wed, Nov 17, 2010 at 4:27 AM, Nick Moffitt wrote: > Let me start by saying that I am a fan of lexical scoping as a way of > increasing confidence in your execution models. I am hoping to move > from the now thoroughly debunked "wackyscope" model that used to plague > many programming language

[Puppet Users] Re: pkgutil package provider (solaris)

2010-11-17 Thread Rudy Gevaert
On Nov 16, 3:52 pm, Peter Bonivart wrote: > I have it checked into SVN so it will be in v2.3 but I haven't set a > release date for it yet. Is it a showstopper for you? In that case I > could roll a v2.2.1 for you with this. Not for me personally. We will take this importunity to upgrade our p

[Puppet Users] Re: Multiple CA / Puppet master environment

2010-11-17 Thread CraftyTech
Would there be any issues with stored configs? should I either a) Point both masters to the same PuppetDB server (MySql), or b) Setup a two way replication between the masters, and connect them individually to their respective PuppetDB's.. Thanks, On Nov 15, 1:13 am, DaveQB wrote: > I too have

[Puppet Users] Re: No changes being applied to clients 2.6.3rc3

2010-11-17 Thread Josh
Debug output: r...@fc-pupm01:/etc/puppet$ puppetd --server fc-pupm01 --verbose -- waitforcert 60 --environment=fcprod --debug --test debug: Puppet::Type::User::ProviderPw: file pw does not exist debug: Puppet::Type::User::ProviderUser_role_add: file roledel does not exist debug: Puppet::Type::Use

[Puppet Users] No changes being applied to clients 2.6.3rc3

2010-11-17 Thread Josh
Hi, I'm having a problem where no changes are getting applied to any of my puppet clients since upgrading from 0.25.3 to 2.6.3rc3. I'm using Passenger 2.2.2 and Ruby 1.8.7. I don't see any errors in Apache's logs nor Puppet's logs. The below is an output of when I try a a manual run from one of

[Puppet Users] Re: centos add user failed

2010-11-17 Thread Leonko
Sorry. Problem realy only in Upper -G. By-hand with -g work fine! On 17 ноя, 15:00, Leonko wrote: > Hello, I have problem with creating user under centos: > > part of my class: > >    user {jboss: >            ensure   => present, >            home    => "$jboss_home", >            shell   => "/b

[Puppet Users] Lexical Scope: How does it work?

2010-11-17 Thread Nick Moffitt
Let me start by saying that I am a fan of lexical scoping as a way of increasing confidence in your execution models. I am hoping to move from the now thoroughly debunked "wackyscope" model that used to plague many programming languages over to proper lexical scoping in my puppet configs. I'm jus

[Puppet Users] centos add user failed

2010-11-17 Thread Leonko
Hello, I have problem with creating user under centos: part of my class: user {jboss: ensure => present, home=> "$jboss_home", shell => "/bin/bash", groups => jboss, } and in log I see: err change from absent to present failed: C

Re: [Puppet Users] Filebucket log messages include file content

2010-11-17 Thread Chris May
Hi Nan, On Wed, Nov 17, 2010 at 12:12 AM, Nan Liu wrote: > On Mon, Nov 15, 2010 at 7:38 AM, Chris wrote: > > So; on to the question: Can I stop 0.24 clients from printing out file > > contents when taking to a 2.6 master ? It's a bit of a security issue > > when the files contain passwords or o

[Puppet Users] Re: Using custom facts in Puppet

2010-11-17 Thread JWBoerma
On Nov 16, 6:06 pm, Matthew Macdonald-Wallace wrote: > On Tue, 2010-11-16 at 07:33 -0800, JWBoerma wrote: > > Right now i am at a loss, since i cannot see what I'm doing wrong > > Does anyone have any experience with this? > > > thanx in advance. > > Can you send the output from the following comm