Re: [Puppet Users] Re: Resolving/ Expanding module puppet:/// URI in exec line

2011-05-04 Thread Martin Alfke
Hi Edd, puppet insists in unique resources. Therefore you can not define the file resource for tar archive twice. Another option would be to fetch the file via exec (wget/curl/scp), create a flagfile afterwards and remove the archive after extraction. Additionally you can set the unless

RE: [Puppet Users] templates on puppetmaster, shipped via scp to clients

2011-05-04 Thread Russell Howe
Subject: [Puppet Users] templates on puppetmaster, shipped via scp to clients Hi folks, I can't run puppet client on my nodes. I want to fake facter info to process templates and ship them via scp to my nodes. Is it possible? Strategies? I think puppet just uses the erb program to

RE: [Puppet Users] Re: Resolving/ Expanding module puppet:/// URI in exec line

2011-05-04 Thread Russell Howe
On 05/03/2011 08:37 PM, Edd Grant wrote: Hi Martin, Have tried this out and have noticed that the copied .gz file is left in /usr/share/java after unpacking. Is this so bad? I would probably do something like: $tarball_dir = /usr/local/src $maven_version = 1.2.3 file {

[Puppet Users] Puppetmaster revokes just signed certificates

2011-05-04 Thread M C
Hi, I have this problem: when I make a new request and sign the client's certificate, then i get a revoked certificate error: err: Could not retrieve catalog from remote server: sslv3 alert certificate revoked I am using same version of puppet on master and clients, tried many times, dates are

Re: [Puppet Users] Puppetmaster revokes just signed certificates

2011-05-04 Thread Ohad Levy
On Wed, May 4, 2011 at 2:09 PM, M C mcsof...@gmail.com wrote: Hi, I have this problem: when I make a new request and sign the client's certificate, then i get a revoked certificate error: err: Could not retrieve catalog from remote server: sslv3 alert certificate revoked I am using same

[Puppet Users] puppet not working after switch to passenger - permissions issue?

2011-05-04 Thread Andreas Kuntzagk
Hi, as suggested on the list I switched from the standalone puppetmaster to Passenger. I have passenger installed now and edited the apache config as far as I understood. I restarted apache. Now when I run an agent I get: /var/lib/gems/1.8/bin/puppet agent --server node002 --test err: Could

Re: [Puppet Users] Puppetmaster revokes just signed certificates

2011-05-04 Thread M C
Thank you, it solved! Goodbye, Matteo 2011/5/4 Ohad Levy ohadl...@gmail.com On Wed, May 4, 2011 at 2:09 PM, M C mcsof...@gmail.com wrote: Hi, I have this problem: when I make a new request and sign the client's certificate, then i get a revoked certificate error: err: Could not

Re: [Puppet Users] chicken and the egg.. pushing custom facter plugins for use within puppet..

2011-05-04 Thread Disconnect
Although good advice (pluginsync is win) that still doesn't solve the chicken/egg problem - puppet won't evaluate the new facts on the first run. We work around it by checking the existence of the fact/value before using it. Not ideal but it works. (And on brand new hosts, we run puppetd -t

Re: [Puppet Users] chicken and the egg.. pushing custom facter plugins for use within puppet..

2011-05-04 Thread Nan Liu
On Wed, May 4, 2011 at 10:01 AM, Disconnect dc.disconn...@gmail.com wrote: Although good advice (pluginsync is win) that still doesn't solve the chicken/egg problem - puppet won't evaluate the new facts on the first run. Pluginsync should occur before facter executes and facts get submitted to

Re: [Puppet Users] Re: Resolving/ Expanding module puppet:/// URI in exec line

2011-05-04 Thread Patrick
On May 3, 2011, at 11:37 AM, Edd Grant wrote: Hi Martin, Have tried this out and have noticed that the copied .gz file is left in /usr/share/java after unpacking. I tried adding another file resource to delete it but because this points to the same filepath as the initial resource puppet

[Puppet Users] Re: Force resigning of existing certificates

2011-05-04 Thread Jake - USPS
I responded to this last night but don't see my reply still this morning so I'm going to respond again. I had a question about if the CA and CRL being signed for 5 years is static or also controlled by ca_ttl. If they are 5y regardless/ static, is there some sort of action I need to take when

[Puppet Users] Re: Force resigning of existing certificates

2011-05-04 Thread Jake - USPS
So does that mean those will be update as well (if ca_ttl is set before they are generated) or are they 5y regardless and using anything higher then 5y does not matter? Or are you just throwing a fact out there and it doesn't matter to me and I'll be OK? Thanks, Jake On May 3, 3:30 pm, Ohad

[Puppet Users] Disable class by exception (not disable service in a class)

2011-05-04 Thread Chris Phillips
Hi, I don't know if I'm just not getting it, but I'm struggling to find the way to elegantly disable a class in its entirety. I am aware of the foo::disabled conventions, but these are about the disabling of the end service defined by the class, not the class itself. I'm looking to have an most

Re: [Puppet Users] Re: Force resigning of existing certificates

2011-05-04 Thread Nigel Kersten
On Wed, May 4, 2011 at 2:39 PM, Jake - USPS jacob.m.mcc...@usps.gov wrote: I responded to this last night but don't see my reply still this morning so I'm going to respond again. For some reason Google Groups thought your message was spam. I just sent it through. I had a question about if

[Puppet Users] Re: templates on puppetmaster, shipped via scp to clients

2011-05-04 Thread Judd Maltin
Thanks Russell and Felix! That makes plenty of sense - the puppet client can do all the manifest and template processing that puppetmaster can do, plus it has access to facter facts. On May 4, 6:31 am, Russell Howe rh...@moonfruit.com wrote: Subject: [Puppet Users] templates on puppetmaster,

RE: [Puppet Users] Re: templates on puppetmaster, shipped via scp to clients

2011-05-04 Thread Russell Howe
Sent: 04 May 2011 16:07 To: Puppet Users Subject: [Puppet Users] Re: templates on puppetmaster, shipped via scp to clients Thanks Russell and Felix! That makes plenty of sense - the puppet client can do all the manifest and template processing that puppetmaster can do, plus it has

Re: [Puppet Users] Conditionals

2011-05-04 Thread Nigel Kersten
On Wed, May 4, 2011 at 8:01 AM, Felix Frank felix.fr...@alumni.tu-berlin.de wrote: Can I somehow pass variables or other tokens around the catalogue and make conditional decisions in other modules based on them? Excellent question. You more or less can, but you shouldn't. Scoping issues

[Puppet Users] Re: Adding multiple sudoer files to sudoers.d

2011-05-04 Thread takrishnan
Thanks Nan! Can I use the define directly within a node specification? For example: node abc { include sudoers::config {group1:} } node xyz inherits abc { include sudoers::config {group2:} } Anandha On Apr 29, 10:04 am, Nan Liu n...@puppetlabs.com wrote: On Fri, Apr 29, 2011 at

[Puppet Users] Data Sources CSV files vs Database

2011-05-04 Thread rjl
Hi all, Presently, I am managing my external data via CSV files. These files are manually changed as required. I would like to have a UI that updates a database (probably postgres) and then have puppet retrieve its external data directly from the database. Has anyone done this? Does this make

[Puppet Users] Puppet-dashboard not linking to filebucket or diffs

2011-05-04 Thread treydock
In my puppet-dashboard when a change is made to files and it shows the MD5 sums I am never presented a link to view the file or any diffs of those files. I assume that the text between '[' and ']' is supposed to be the link but it's just plain text. This is when viewing individual reports in

[Puppet Users] Passenger Error during the evaluation of config/environment.rb

2011-05-04 Thread PBWebGuy
I have been through all of the instructions for setting up a PuppetMaster using Passenger. At the present time, when I access Passenger I receive the Passenger Error page with the message The application has exited during startup (i.e. during the evaluation of config/environment.rb). I've looked

[Puppet Users] Re: Could not autoload inventory_active_record: uninitialized constant ActiveRecord

2011-05-04 Thread George
Turned out the problem was multiple ruby versions. I tried to install Rails 3, which in turn tried to install Activerecord 3, which required ruby 1.8.7 which I installed. I cleaned up ruby-1.8.7, installed Rails 2.3.4 and its associated components, and now this works. On Apr 29, 9:11 pm, George

Re: [Puppet Users] Re: How to setup database for Inventory Service

2011-05-04 Thread James Turnbull
Alessandro Franceschi wrote: Thank you for the feedback. I've momentarily postponed the inventory setup but, for the chronicle, just inserting the query you posted didn't work out of the box. I'll get back on this when sorted out other things. Al Al You should also be able to do: [master]

Re: [Puppet Users] Passenger Error during the evaluation of config/environment.rb

2011-05-04 Thread Denmat
Hi, I haven't tested puppet/passenger with those versions of passenger/rake but they appear high to me. I use 2.1x of passenger and 1.1 of rake (cant remember exact versions). Higher versions did not work. This may or may not be your particular issue as I currently run 2.6.4 of puppet.

[Puppet Users] variables inside a template for my hp ilo device

2011-05-04 Thread Corey Osman
I am writing a hp ilo module to automatically assign a static ip that is derived from the IP of the system which is fed in via facter. I basically just need to change the network the ilo is connected to. The ruby code works great inside the irb console. However, puppet doesn't seem to be

Re: [Puppet Users] Can puppet client make immediate pull after a file's content change by user?

2011-05-04 Thread vagn scott
It sounds like you are solving the wrong problem. Why do your users have root privs? If they need root for some things, use sudo to give them only what they need. Or use suid/sgid mechanisms to allow community access to certain resources. If you need to lock down specific files look at the

[Puppet Users] Re: Can puppet client make immediate pull after a file's content change by user?

2011-05-04 Thread treydock
It's not ideal but this could very easily be achieved by with Zabbix. With Zabbix you can have a check, running for example every 30 seconds, that runs a checksum on a specific file. Then a trigger that is activated if the last known checksum varies from the current checksum, here's an example

Re: [Puppet Users] Re: Adding multiple sudoer files to sudoers.d

2011-05-04 Thread Nan Liu
On Wed, May 4, 2011 at 12:24 PM, takrishnan takrish...@yahoo.com wrote: Can I use the define directly within a node specification? For example: node abc {      include sudoers::config {group1:} } Defines result in a custom resource type, and the sytax is the same as any other puppet

Re: [Puppet Users] Data Sources CSV files vs Database

2011-05-04 Thread Nan Liu
On Wed, May 4, 2011 at 12:51 PM, rjl rjlin...@gmail.com wrote: Hi all, Presently, I am managing my external data via CSV files. These files are manually changed as required. Are you using extlookup function to retrieve the CSV configuration data? I would like to have a UI that updates a

[Puppet Users] Re: chicken and the egg.. pushing custom facter plugins for use within puppet..

2011-05-04 Thread Michael Dodwell
We work around it by checking the existence of the fact/value before using it Is this done in the template file or somewhere else? Can you please supply dummy code as an example? Thanks On May 5, 12:01 am, Disconnect dc.disconn...@gmail.com wrote: Although good advice (pluginsync is win)

[Puppet Users] virtualized resource collections

2011-05-04 Thread tu2Bgone
Hi all, I'm trying to figure out how to automatically configure my nodes with amanda backup client. What I want to achieve is that the server have an entry created in the /etc/amanda/(Daily|Weekly|Monthly)/disklist.conf file on the server. The disklist.conf file lists entries like so: