[Puppet Users] Re: reduced "verbose" output

2011-02-15 Thread donavan
On Feb 15, 1:27 pm, David Bishop wrote: > Does this sound reasonable?  Is it currently possible (and if so, > pointers are welcome!)?  If I could make my trained developer monkey do > the actual work, would patches implementing this be accepted? You may also be interested in the --summarize optio

[Puppet Users] Re: Keeping a directory clean at top level

2011-02-15 Thread donavan
On Feb 15, 10:04 am, Rich Rauenzahn wrote: > Say we have a directory called /FOO-- we want to only have in it what > puppet puts into it. ... > puppet resource file /tmp/empty_me ensure=directory purge=true > source=/tmp/empty recurse=true recurselimit=1 force=true I use this pattern myself, so

Re: [Puppet Users] Re: Passenger, Puppet/ nodes.pp ignored with external nodes script?

2011-02-15 Thread Ben Hughes
On Tue, Feb 15, 2011 at 07:12:57PM -0800, trey85stang wrote: > Thanks Ben, that is simple enough. Other people have had success with putting HAProxy in front of Apache/Passenger stacks too. Which is simpler in terms of structure, but more components. -- ben -- You received this message becau

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Patrick
I think you're saying that it's close enough that it shouldn't matter. In the context of this thread, there's a huge difference though. If the puppet client is in a DMZ, (and can't connect to the puppetmaster) it needs the catalog to be pushed to the client. Not just the server telling the cl

[Puppet Users] Re: Passenger, Puppet/ nodes.pp ignored with external nodes script?

2011-02-15 Thread trey85stang
Thanks Ben, that is simple enough. On Feb 15, 8:38 pm, Ben Hughes wrote: > On Tue, Feb 15, 2011 at 06:30:29PM -0800, trey85stang wrote: > > while I am at it,  what is the best way to load balance between > > multiple servers using passenger?  a dedicated load balancer or can > > the balancing be

Re: [Puppet Users] Re: Passenger, Puppet/ nodes.pp ignored with external nodes script?

2011-02-15 Thread Ben Hughes
On Tue, Feb 15, 2011 at 06:30:29PM -0800, trey85stang wrote: > while I am at it, what is the best way to load balance between > multiple servers using passenger? a dedicated load balancer or can > the balancing be done within passenger like mongrel? As you're using Passenger you could get Apach

[Puppet Users] Re: Passenger, Puppet/ nodes.pp ignored with external nodes script?

2011-02-15 Thread trey85stang
while I am at it, what is the best way to load balance between multiple servers using passenger? a dedicated load balancer or can the balancing be done within passenger like mongrel? On Feb 15, 8:11 pm, trey85stang wrote: > Hey All,  I'm  still experimenting with a puppet backend for 6000 > hos

[Puppet Users] Passenger, Puppet/ nodes.pp ignored with external nodes script?

2011-02-15 Thread trey85stang
Hey All, I'm still experimenting with a puppet backend for 6000 hosts. I have switched from mongrel to a passenger backend on a single puppetserver. Afterwards any node that is not defined in the external nodes script, is now rejected even if they have an entry in my nodes.pp manifest. With the

[Puppet Users] Re: Fileserving recursion

2011-02-15 Thread PeterBurkholder
Thanks for trying to help, Trevor. On Feb 15, 8:31 pm, Trevor Vaughan wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > The the puppet user read everything under this directory space on the server? Yes, the puppet user can read everything. I've just triple-checked by running $ sudo -

Re: [Puppet Users] Trigger an event after a puppet run

2011-02-15 Thread Jeff McCune
On Tue, Feb 15, 2011 at 11:03 AM, Rus Hughes wrote: [snip] > > require 'puppet' > > Puppet::Reports.register_report(:nagios) do >    Puppet.settings.use(:reporting) >    desc "Sends reports directly to Nagios" > >    def process >      begin >        exec "/usr/lib/nagios/eventhandlers/submit_pupp

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread James Louis
in spite of this not actually being a "push" mechanism if it walks like a duck. it would be nice if the documentation and previous discussions on this were more clear or even better if it's not a "push" then the it should be "redefined" within puppet world. IMHO On Tue, Feb 15, 2011 at 4:07 PM, Da

Re: [Puppet Users] Re: Fileserving recursion

2011-02-15 Thread Trevor Vaughan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The the puppet user read everything under this directory space on the server? On 02/15/2011 10:46 AM, PeterBurkholder wrote: > In my haste to catch my train I forgot a few points. > > 1) I've tried now with 2.6.4 and had the same problem > 2) I've us

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Trevor Vaughan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is completely possible. Look at the threads on pushing out pre-compiled configurations. You do lose some features, such as pulling from the puppet filestore unless that's OK with you. Trevor On 02/15/2011 02:16 PM, Kristopher wrote: > I would

[Puppet Users] Error 400 on SERVER: Could not intern from yaml: can't convert Symbol into String

2011-02-15 Thread Patrick
System information: Distro: Ubuntu 10.4.x Ruby: ruby-enterprise-1.8.7-2010.02 Puppetmaster: 2.6.1 Puppetclient: 2.6.1 Dashboard: 1.0.4-1 I was running a puppet run manually like this: # puppetd --test --verbose This is the log for the run: notice: Ignoring --listen on onetime run info: Retrievi

Re: [Puppet Users] Inter-Module Dependency

2011-02-15 Thread Daniel Pittman
On Tue, Feb 15, 2011 at 17:11, Gabriel Filion wrote: > On 11-02-15 05:25 PM, Nan Liu wrote: >> You can also create class level dependency so it is less tightly >> coupled to a specific resource which may benefit you in the long run >> should you need to refactor dns_config class. >> >> class rando

Re: [Puppet Users] Inter-Module Dependency

2011-02-15 Thread Gabriel Filion
On 11-02-15 05:25 PM, Nan Liu wrote: > You can also create class level dependency so it is less tightly > coupled to a specific resource which may benefit you in the long run > should you need to refactor dns_config class. > > class random_app { > require dns_config > ... > } hmm this actuall

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-15 Thread Daniel Pittman
On Tue, Feb 15, 2011 at 14:39, Matthew Pounsett wrote: > On 2011/02/14, at 12:21, Daniel Pittman wrote: > >> I think this discussion totally deserves a feature/bug report in redmine, >> because both positions are reasonable. They do point to a hole where our >> specifation seems vague, and where

Re: [Puppet Users] Re: Unable to use facts

2011-02-15 Thread Mohamed Lrhazi
Not sure where I got 'host" from... replaced with with "hostname" and that works! On Tue, Feb 15, 2011 at 6:09 PM, Mohamed Lrhazi wrote: > I just run into the same issue the fact "host" is not found inside > a template: > > In a template I have: > > <% if host == "balmoral" -%> > ... > <% en

[Puppet Users] Problem with yumhelper.py and python version

2011-02-15 Thread Jay N.
I have this ouput when I do a "yum check-update" which is the command which is run in the yumhelper.py : Loaded plugins: rhnplugin, security This system is not registered with RHN. RHN support will be disabled. Skipping security plugin, no data compat-dapl.i386 2.0.13-4.el

Re: [Puppet Users] Re: Unable to use facts

2011-02-15 Thread Mohamed Lrhazi
I just run into the same issue the fact "host" is not found inside a template: In a template I have: <% if host == "balmoral" -%> ... <% end -%> I get error: Error 400 on SERVER: Failed to parse template gu_iptables/iptables.conf.erb: Could not find value for 'host' Any luck with this? T

[Puppet Users] ldap.conf modification problem

2011-02-15 Thread Jay N.
Hi Puppet Users, In my configuration, I modify in the "pre" stage the ldap.conf file which is originally generic and useless. Then, in the main stage, I try to modify the ownership of files with ldap users and groups and I have an error "Cannot find user/group". I have done several tests : - jus

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-15 Thread Matthew Pounsett
On 2011/02/14, at 12:21, Daniel Pittman wrote: > Hey. > > I think this discussion totally deserves a feature/bug report in redmine, > because both positions are reasonable. They do point to a hole where our > specifation seems vague, and where we *should* have made a decision: right > now we

Re: [Puppet Users] Inter-Module Dependency

2011-02-15 Thread Nan Liu
On Tue, Feb 15, 2011 at 2:09 PM, Daniel Pittman wrote: > On Tue, Feb 15, 2011 at 11:05, Derek J. Balling wrote: > > […] >> So I've got two modules, one for "random_app" and one for "dns_config". >> "dns_config" has a file resource "resolv.conf" which is just what the name >> implies. >> >> I wa

Re: [Puppet Users] Inter-Module Dependency

2011-02-15 Thread Daniel Pittman
On Tue, Feb 15, 2011 at 11:05, Derek J. Balling wrote: […] > So I've got two modules, one for "random_app" and one for "dns_config". > "dns_config" has a file resource "resolv.conf" which is just what the name > implies. > > I want service 'foo' in my random_app module to subscribe to dns_confi

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Daniel Pittman
Other people answered other parts of this, but to be totally clear: 'puppet kick' is *NOT* a push mechanism for puppet. It is a mechanism to trigger the regular, pull-based, puppet run on a specific machine. In the bigger picture I would strongly suggest you just open the single port used for pu

[Puppet Users] reduced "verbose" output

2011-02-15 Thread David Bishop
We're starting to integrate mcollective into our puppet usage here at work, and we've discovered a (heretofore unknown) need for more logging "levels". Using the puppetd mcollective agent, we would like to kick off single puppet runs. What we're hoping for is that we could take the output from pup

[Puppet Users] ERB Templates :: defined?("var")

2011-02-15 Thread CraftyTech
Hello All, I'm using puppet 0.25.5, and I'm having issues with an ERB template and its syntax. Instead of declaring a var true or false, I'd like to do something if the variable is defined, otherwise ignore. So here's what I have in my template: <% if defined?("VAR") and VAR == "ABC" th

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread James Louis
My experience is having "listen = true" in the puppet conf and starting the client with --no-client does prevent the puppet pull. This works for me so that I can issue a puppet kick on the server to only serve changes when I want to. On Tue, Feb 15, 2011 at 2:54 PM, Nan Liu wrote: > On Tue, Feb

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Nan Liu
On Tue, Feb 15, 2011 at 11:21 AM, Kristopher wrote: > I would like to confirm that the following is not possible: > I have servers I would like to manage via puppet in my DMZ, I have my > puppet server in the trusted zone of my network. Due to this > arrangement (which cannot be changed due to oth

[Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-15 Thread mark risher
Nan's suggestion worked. I thought I'd tried these steps but maybe not in the right order. Thank you, Nan! Here were the steps: mrisher@lab2:~$ sudo /etc/init.d//puppetmaster stop * Stopping puppet configuration management tool master server [ O

Re: [Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Adam Gibbins
On 15 February 2011 19:21, Kristopher wrote: > I would like to confirm that the following is not possible: > I have servers I would like to manage via puppet in my DMZ, I have my > puppet server in the trusted zone of my network. Due to this > arrangement (which cannot be changed due to other serv

[Puppet Users] New Puppet Labs Employee: Randall Hansen

2011-02-15 Thread Nigel Kersten
I'm happy to announce we've recently added Randall Hansen as our Director of User Experience at Puppet Labs. He's on IRC as 'soh', and in his own words... I got hooked on human-computer interaction in 1986, writing Pascal programs to help dad navigate a Tandy 1000SX. I followed a twisty path thr

[Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Kristopher
I would like to confirm that the following is not possible: I have servers I would like to manage via puppet in my DMZ, I have my puppet server in the trusted zone of my network. Due to this arrangement (which cannot be changed due to other services running on the puppet master) puppet clients cann

[Puppet Users] Puppet on a purely push basis no possible?

2011-02-15 Thread Kristopher
I would like to confirm that the following is not possible: -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr.

[Puppet Users] Inter-Module Dependency

2011-02-15 Thread Derek J. Balling
I tried looking in the language tutorial for this, but I couldn't find a reference for how to do it, but I'm sure it must be possible. So I've got two modules, one for "random_app" and one for "dns_config". "dns_config" has a file resource "resolv.conf" which is just what the name implies. I w

[Puppet Users] Re: Active Directory join, stages, and AD accounts issues

2011-02-15 Thread Monkeys Typing
On Feb 12, 10:16 pm, Daniel Pittman wrote: > On Fri, Feb 11, 2011 at 12:01, Nigel Kersten wrote: > > On Fri, Feb 11, 2011 at 11:52 AM, Monkeys Typing > > wrote: > >> I have an exec in my samba module to join the new servers to the > >> domain, a simple "net ads join -U adminaccount". > > >> I s

[Puppet Users] Keeping a directory clean at top level

2011-02-15 Thread Rich Rauenzahn
Say we have a directory called /FOO-- we want to only have in it what puppet puts into it. I want to remove any symlinks, empty directories, or files in it that don't belong -- but only one level deep. If the subdirectory has content, I don't want it removed -- ideally, I'd like a failure. This i

Re: [Puppet Users] Trigger an event after a puppet run

2011-02-15 Thread Rus Hughes
On Tue, Feb 15, 2011 at 4:51 PM, Nigel Kersten wrote: > On Tue, Feb 15, 2011 at 6:55 AM, Rus Hughes wrote: >> Hi, >> >> We'd like to run puppet regularly in noop then trigger an event after >> the run depending on the results, namely to hook puppet in to our >> Nagios implementation so that if an

Re: [Puppet Users] Trigger an event after a puppet run

2011-02-15 Thread Nigel Kersten
On Tue, Feb 15, 2011 at 6:55 AM, Rus Hughes wrote: > Hi, > > We'd like to run puppet regularly in noop then trigger an event after > the run depending on the results, namely to hook puppet in to our > Nagios implementation so that if anything changes for any reason we > receive an alert. > > We al

Re: [Puppet Users] troubles with require parametre

2011-02-15 Thread Nigel Kersten
On Tue, Feb 15, 2011 at 7:43 AM, tortuegeniale wrote: > Hi all, > > Getting some troubles installing bind: > err: Could not run Puppet configuration client: Could not find user > bind It looks to me like you don't have a User 'bind' on the target system, and you haven't defined one in the above

[Puppet Users] trouble with retrieving information from current source

2011-02-15 Thread rredeno2
I'm rather new to puppet and I've been trying to get a module to work on the client servers. Right now I'm trying to get http://forge.puppetlabs.com/ghoneycutt/pam to run. When I try to run it I get these two errors: err: //pam/File[/etc/pam.d/sshd]: Failed to retrieve current state of resource:

[Puppet Users] Trigger an event after a puppet run

2011-02-15 Thread Rus Hughes
Hi, We'd like to run puppet regularly in noop then trigger an event after the run depending on the results, namely to hook puppet in to our Nagios implementation so that if anything changes for any reason we receive an alert. We already have puppet configured to send out puppet reports via email

Re: [Puppet Users] puppetrun :: "HTTP-Error: 500 Internal Server Error" (w/ Passenger)

2011-02-15 Thread CraftyTech
How do I make sure "puppetrun" is using the same configuration directory Passenger is using? when I run "/usr/sbin/puppetrun --configprint confdir" all I get is "finished" as the end result... and nothing else... has anyone experience this before? I'm running: CentOS 5.4 httpd-2.2.3-31.el5.ce

[Puppet Users] Re: Fileserving recursion

2011-02-15 Thread PeterBurkholder
In my haste to catch my train I forgot a few points. 1) I've tried now with 2.6.4 and had the same problem 2) I've used 'ensure => directory,' and variations of 'recurse => true', 'recurse => remote' to no effect 3) The 'secrets' directory is created, but nothing recursive copied into it 4) The fi

[Puppet Users] troubles with require parametre

2011-02-15 Thread tortuegeniale
Hi all, Getting some troubles installing bind: I'm working on debian squeeze, both client and server are 2.6.2, mod_passenger added. in my class definition: class conf_bind_nshost { include motd motd::register{"${name}": } #Register in motd module package { "bind9": ensure => "1:9.7.2.

[Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-15 Thread mark risher
sorry, /etc/hosts. It was a typo in my bug report, I used the correct filename on the client itself. The routing issue is not the culprit -- puppetd is clearly able to reach the puppetmasterd server -- so we're stuck somewhere inside either what the client says or what the server responds with. S

[Puppet Users] Fileserving recursion

2011-02-15 Thread PeterBurkholder
Good morning, I am missing something, probably something obvious, in making file serving recursion work. I've boiled this down to a simple site.pp, and I still can't get a recursive copy to work, although a single file works fine. I'm using puppet 2.6.5 on both the master and the client, and th

Re: [Puppet Users] Defines, Realization and Variables

2011-02-15 Thread Felix Frank
On 02/11/2011 03:42 PM, li...@truthisfreedom.org.uk wrote: > Hi all, > > I'm running puppet 0.25.5 and I'm running into an issue with virtual > defines for setting up my NGinx Vhosts. > > The define is as follows: > > class nginx{ > > ... > > > # Setup a resource to create the configuration f

Re: [Puppet Users] dot in file path

2011-02-15 Thread Felix Frank
On 02/11/2011 12:13 AM, Rohan McGovern wrote: > dragonfly said: >> I wish to have puppet copy a file to /etc/cron.hourly/ on target >> machines, however when puppetmaster attempts to build the catalog it >> complains about a syntax error in both nodes.pp as well as in the >> manifest init.pp for th

Re: [Puppet Users] Re: array of arrays in manifests?

2011-02-15 Thread Felix Frank
On 02/10/2011 11:00 PM, Mohamed Lrhazi wrote: > Sorry am confused... it's end of day > > This does seem to flatten my array: > > $myarray = [ ["a","b"],["c","d"] ] > > While this does not: > > $myarray1=["a","b"] > $myarray2=["c","d"] > > $myarray = [ $myarray1,$myarray2 ] > > Thanks. Ye

[Puppet Users] Re: Master-less : What do I lose?

2011-02-15 Thread Geoff
I'm an advocate of both camps. I use puppet in standalone mode when I'm demonstrating puppet to a new client. It's lightweight, I can use NFS or a CM repository to provide the recipes to a server and run it standalone post kickstart. It's the perfect mode for small scale repeatable system builds. Q

Re: [Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-15 Thread Basil Kurian
@ Mark >> Thanks for the suggestion. I set the /etc/host but that doesn't appear /etc/host or /etc/hosts ?? Is that a typo ? On 15 February 2011 10:49, mark risher wrote: > Thanks for the suggestion. I set the /etc/host but that doesn't appear > any different from specifying --server xyz on

Re: [Puppet Users] Re: [Puppet-dev] Collections and Realizing Resources

2011-02-15 Thread Felix Frank
> realize(User[1], User[2], User[10]) > > > ah, but your collection syntax requires that you have to know the gid of > the resources you are realizing :) > > There are certainly cases where the collection syntax is easier, but I > feel that the vast majority of virtual resource realizat