[Puppet Users] Puppet staging server

2012-03-06 Thread Gonzalo Servat
Hi All, I tried to implement a second Puppet server as a "staging" server with the idea of being able to run puppet in dry run mode against this staging server. I ran into some SSL trouble. When I point at the staging server, I get various SSL related errors and I assume it's because the ca cert

Re: [Puppet Users] Re: Developers having access to deploy

2012-03-06 Thread Thomas Rasmussen
Seems as though instantlinux is deploy'ing a customized OS, however we are dealing with mix of different OS'es (This has to work at least on Linux and Solaris), so doesn't seem like an option Thomas On Tuesday, March 6, 2012 3:26:19 PM UTC+1, Chuck Anderson wrote: > > Check out InstantLinux as

Re: [Puppet Users] Setting password hash for virtual users?

2012-03-06 Thread Denmat
Hi, Most likely you need to have ruby-shadow installed on the client. Den On 07/03/2012, at 12:11, Dominik Zyla wrote: > On Wednesday, 7 March 2012 at 01:38, Forrie wrote: >> I read that this doesn't always work on every OS. However, I'm on >> RHEL, and from what I'm reading the following shou

Re: [Puppet Users] Setting password hash for virtual users?

2012-03-06 Thread Dominik Zyla
On Wednesday, 7 March 2012 at 01:38, Forrie wrote: > I read that this doesn't always work on every OS. However, I'm on > RHEL, and from what I'm reading the following should correctly set / > etc/shadow: > > > @user { "myuser": > require => Group['staff'], > ensure => present, > uid => '2345', >

[Puppet Users] Setting password hash for virtual users?

2012-03-06 Thread Forrie
I read that this doesn't always work on every OS. However, I'm on RHEL, and from what I'm reading the following should correctly set / etc/shadow: @user { "myuser": require=> Group['staff'], ensure => present, uid=> '2345', gid=> '90',

[Puppet Users] Resources Loop

2012-03-06 Thread Robert Smith
Hello, I'm fairly new to Puppet. I'm trying to setup some Nagios checks for systems that have additional vhosts or aliases assigned to them (Nagios is already setup and running without issue). In my node manifest, I have defined: $nagios_http_alias_check = ["foo1","foo2","foo3"] And in my a

[Puppet Users] Re: Wrong header line format errors

2012-03-06 Thread Forrie
I answered my own question. It seems there was a missing ' or " in one of the configs -- reported in the HTTP log. But the error itself doesn't tell me much. Thanks. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send

[Puppet Users] Wrong header line format errors

2012-03-06 Thread Forrie
I've not made any changes to the config recently, only keeping Puppet and ruby 1.8 up-to-date. Recently, I noted my systems are logging this ambiguous error: Could not retrieve catalog from remote server: wrong header line format I say ambiguous as a google search shows serveral things t

Re: [Puppet Users] Re: Best practices for excluding certain modules from certain nodes

2012-03-06 Thread Romeo Theriault
Thank you both for your great replies. They've both given me a great lead on which direction to head in. I haven't had the time to fully flesh out how I'm going to handle this yet but I know I'll be trying to stay away from parametrized classes for the time being. I'll also be trying to use hiera a

[Puppet Users] Re: Issue with pe-dashboard-workers

2012-03-06 Thread mich...@linuxexam.com
I don't get it, but a clean uninstall (including db files in /var/lib/mysql) followed by a reinstall seems to have worked. Thanks for listening. On Tuesday, March 6, 2012 10:19:37 AM UTC-8, mic...@linuxexam.com wrote: > > I've almost gotten PE running -- > > Based on tips from a recent Webinar,

Re: [Puppet Users] Live Mangement

2012-03-06 Thread Gary Larizza
Do you have more than one mcollectived instances in the process table? `ps aux | grep [m]collective` I've seen this before when I had started two instances of the mcollectived daemon. On Tue, Mar 6, 2012 at 1:51 PM, FirstName LastName wrote: > > Hi > > somehow one of my nodes is showing up twi

[Puppet Users] Complex architecture deployment [new of puppet]

2012-03-06 Thread gioppoluca
I'm new of puppet and I'd like to know if it is possible to implement this use case with puppet/mcollective/foreman etc. I've a cloudstack environment with different domains. I want to allow users to add to their own domain "virtual application bundles" that are a topology of VM based on different

[Puppet Users] Live Mangement

2012-03-06 Thread FirstName LastName
Hi somehow one of my nodes is showing up twice under Live Management. Any ideas why this is happening? or has ayone seen this before? I've searched and its usually a problem of node not showing up instead of showing up twice. Julie -- You received this message because you are subscribed to th

Re: [Puppet Users] Applying specific file within list of files in a class

2012-03-06 Thread Dan White
http://docs.puppetlabs.com/references/stable/type.html#file source If you specify multiple file sources for a file, then the first source that exists will be used. This allows you to specify what amount to search paths for files: file { "/path/to/my/file": source => [

[Puppet Users] Re: Inherited node tagging

2012-03-06 Thread jcbollinger
On Mar 6, 11:39 am, Pablo Fernandez wrote: > Dear all, > > I have observed a behavior that doesn't seem (to me) to match the > documentation. Specially, about tagging, the doc says: > > " > Automatic Tagging > All language statements enclosed in a node, define or class structure (read > more abo

[Puppet Users] Re: Puppet in NFS fools Facter

2012-03-06 Thread Forrie
On another system, same NFS mounts, the "facter virtual" reports the correct information, that system is running: 2.6.18-194.3.1.el5 The system that doesn't correctly report is: 2.6.18-274.18.1.el5 I don't know if that really matters. -- You received this message because you are subscribed

[Puppet Users] Re: Puppet in NFS fools Facter

2012-03-06 Thread Forrie
Interestingly, the command "facter serialnumber" correctly pulls that it's a VMware system: # /local/bin/facter serialnumber VMware-56 4d 00 7e e8 3b e8 c9-85 7f 4e XX XX XX XX XX -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this

[Puppet Users] Re: Puppet in NFS fools Facter

2012-03-06 Thread Forrie
Nothing was copied over. The NFS mount code was built and then exported; 32- and 64-bit respectively. The code was built from scratch and installed with the appropriate locally mounted prefix (in this case, /local). I'm on RHEL 5.x and we only have /proc/self/status which doesn't seem to indicat

Re: [Puppet Users] Puppet/foreman redundant servers? Cluster, recovery etc

2012-03-06 Thread Dominik Zyla
On Tuesday, 6 March 2012 at 19:56, Elizabeth Schwartz wrote: > What are the best practices for achieving a maximally redundant and > scalable environment? What are you doing? > > We're rolling out Puppet with Foreman, mysql, Passenger, on a RHEL6 > VMWare box. Configs are stored in SVN and Jenkins

[Puppet Users] Applying specific file within list of files in a class

2012-03-06 Thread Gmoney
We push a number of standard files to deploy across all our servers, one of these files /etc/sysctl.conf , whihc is unique based on whether the server is a VM or a physical host. What is the best practice of pushing one unique file, which maintaining the push of the entire class of files? I am no

Re: [Puppet Users] Re: Duplicate definition + parameterized classes + class scope

2012-03-06 Thread Justin Lloyd
John, I'm running into some snags of my own and your explanations have been helpful. However, I'd like to ask if you can comment a bit more on the emphasis Puppet Labs has on parameterized classes versus include. For one, I'm thinking of modules available via github. Take the puppetlabs/mcollectiv

[Puppet Users] Puppet/foreman redundant servers? Cluster, recovery etc

2012-03-06 Thread Elizabeth Schwartz
What are the best practices for achieving a maximally redundant and scalable environment? What are you doing? We're rolling out Puppet with Foreman, mysql, Passenger, on a RHEL6 VMWare box. Configs are stored in SVN and Jenkins. Right now we've got those first four things running on the same sin

[Puppet Users] Issue with pe-dashboard-workers

2012-03-06 Thread mich...@linuxexam.com
I've almost gotten PE running -- Based on tips from a recent Webinar, I've started on a minimal RHEL 6 system, and have installed the PE 2.03 packages. Once I set up /etc/ hosts (DNS will come later), I started the PE services. Given past problems (possibly just me), I was pleasantly surprised tha

Re: [Puppet Users] Re: Avoiding duplicate definitions

2012-03-06 Thread Bruce Richardson
On Tue, Mar 06, 2012 at 09:53:57AM -0800, jcbollinger wrote: > > If you decide to use such a wrapper anyway, then you should use it > absolutely everywhere, including updating all third-party modules you > employ. I think it's better, though, to just let the compilation > failures happen -- use t

[Puppet Users] Statement from Puppet Labs regarding Github Compromise

2012-03-06 Thread Michael Stahnke
Over the weekend, we saw github[1] had been attacked, and potentially malicious code was pushed onto the rails project. This was concerning to us at Puppet Labs as we host nearly 100% of our code with github. Our course of action ran as follows: 1. We first checked our Rails based applications f

[Puppet Users] Re: Avoiding duplicate definitions

2012-03-06 Thread jcbollinger
On Mar 6, 6:02 am, Bruce Richardson wrote: > You have a choice of altering the third party code or your own.  You > will keep encountering this problem if you use third party modules.  I > guess you could do create your own safe package wrapper, something like > this: > > define safepackage ( $

[Puppet Users] Inherited node tagging

2012-03-06 Thread Pablo Fernandez
Dear all, I have observed a behavior that doesn't seem (to me) to match the documentation. Specially, about tagging, the doc says: " Automatic Tagging All language statements enclosed in a node, define or class structure (read more about puppet control structures [[Language Tutorial]] ) will a

Re: [Puppet Users] File checksum

2012-03-06 Thread Nan Liu
On Tue, Mar 6, 2012 at 9:17 AM, Luke Baker wrote: > I want to to ensure a file, and if the content changes a subscribed exec > should fire. > >     file { "/etc/opt/microsoft/scx/ssl/scx-host-$fqdn.pem": >         checksum => "md5", >     } Try adding audit => checksum to the file. Though I recal

[Puppet Users] Re: File class overwritten by other classes

2012-03-06 Thread jcbollinger
On Mar 5, 11:33 am, Pablo Fernandez wrote: > Dear Puppeteers, > > After many hours of reading manuals, books and google, I'm starting to thing > there is no right way to edit files in puppet, and I must be wrong. A massive > work is ahead (puppetizing our whole cluster) and I would like to start

[Puppet Users] File checksum

2012-03-06 Thread Luke Baker
I want to to ensure a file, and if the content changes a subscribed exec should fire. file { "/etc/opt/microsoft/scx/ssl/scx-host-$fqdn.pem": checksum => "md5", } exec { "/etc/init.d/scx-cimd restart": subscribe => File["/etc/opt/microsoft/scx/ssl/scx-host-$fqdn.pe

[Puppet Users] Re: Duplicate definition + parameterized classes + class scope

2012-03-06 Thread jcbollinger
On Mar 6, 8:51 am, "chris_sny...@sra.com" wrote: > Crap.  I'm trying to dump Bcfg2 and move to something reasonable.  But so > far, all my initial assumptions and patterns for Puppet fail.  I think in > terms of heirarchy and inheritence for my systems (all nodes install a core > set of packages

Re: [Puppet Users] system poweroff/shutdown module

2012-03-06 Thread Dominik Zyla
On Tuesday, 6 March 2012 at 14:30, Darin Perusich wrote: > Hello, > > I was wondering if anyone's written a shutdown/poweroff module to take > down some or all of the systems managed by puppet? A quick google > search didn't come up with anything so i figured I'd ask before > reinventing the wheel

[Puppet Users] Re: Duplicate definition + parameterized classes + class scope

2012-03-06 Thread jcbollinger
On Mar 6, 7:53 am, "chris_sny...@sra.com" wrote: > I don't understand Puppet Language.  How can you take object-oriented > constructs such as 'class' and 'inheritance' and then not allow things like > multiple instances of a class, albeit with differing parameters. That would be a travesty, bu

[Puppet Users] Re: Duplicate definition + parameterized classes + class scope

2012-03-06 Thread jcbollinger
On Mar 5, 2:23 pm, "chris_sny...@sra.com" wrote: > I apologize if this horse has already been beaten to death, but I'm > new here and very, very confused. I'm just starting to work with > Puppet and I can not make heads or tails of the language: specifically > how to use parameterized classes.

Re: [Puppet Users] Duplicate definition + parameterized classes + class scope

2012-03-06 Thread Craig White
On Mar 6, 2012, at 7:51 AM, chris_sny...@sra.com wrote: > Crap. I'm trying to dump Bcfg2 and move to something reasonable. But so > far, all my initial assumptions and patterns for Puppet fail. I think in > terms of heirarchy and inheritence for my systems (all nodes install a core > set of

Re: [Puppet Users] Re: Developers having access to deploy

2012-03-06 Thread Craig White
On Mar 5, 2012, at 11:51 PM, Thomas Rasmussen wrote: > Thanks for the replies, I can see that there is no "easy" setup to allow what > I'm looking for :-( I will be looking a bit more on the External Node > Classifier to see if this will solve my problem. > > We will be using puppet to fully a

Re: [Puppet Users] Fetch ldap authorized_keys from ldap, copy to puppets local filesystem for needed users

2012-03-06 Thread Craig White
On Mar 6, 2012, at 3:24 AM, Emilien wrote: > Hello, > > I'm trying to set up the following environment: > > Ldap containing > users as posixaccount (uid, home directory, and an attribute > containing their ssh public key). > machines with an attribute indicating which users or user groups a

Re: [Puppet Users] Duplicate definition + parameterized classes + class scope

2012-03-06 Thread chris_sny...@sra.com
Crap. I'm trying to dump Bcfg2 and move to something reasonable. But so far, all my initial assumptions and patterns for Puppet fail. I think in terms of heirarchy and inheritence for my systems (all nodes install a core set of packages, some have exceptions for those core set of packages, et

Re: [Puppet Users] Duplicate definition + parameterized classes + class scope

2012-03-06 Thread Bruce Richardson
On Tue, Mar 06, 2012 at 05:53:57AM -0800, chris_sny...@sra.com wrote: > I don't understand Puppet Language. How can you take object-oriented > constructs such as 'class' and 'inheritance' and then not allow things like > multiple instances of a class, albeit with differing parameters. Defined

[Puppet Users] Re: @@file tricks..

2012-03-06 Thread jcbollinger
On Mar 5, 3:33 pm, Peter Berghold wrote: > Folks, > > I haven't tried this yet, but I certainly intend to. > > If I set up an exported file definition such that: > > @@file{'munin-node-file': >            content=> template('blah'), >            path => "/etc/munin.d/${hostname}.cfg" > > } > > a

Re: [Puppet Users] Re: Developers having access to deploy

2012-03-06 Thread Chuck Anderson
Check out InstantLinux as a front-end to puppet: http://www.instantlinux.net/ On Mon, Mar 05, 2012 at 10:51:12PM -0800, Thomas Rasmussen wrote: > Thanks for the replies, I can see that there is no "easy" setup to allow > what I'm looking for :-( I will be looking a bit more on the External Node

[Puppet Users] Re: net ads join

2012-03-06 Thread Adam
Thanks for all of the input. Yeah this code is part of a larger manifest, and no its not verbatim what I have written, but for the topic I figured it would get the jist of what I was trying to do across (and it seems to have done that). You know, I don't know if I just tried the grep only... for

Re: [Puppet Users] Duplicate definition + parameterized classes + class scope

2012-03-06 Thread Pablo Fernandez
It must be some kind of "sales department" decision, you name things to be attractive, not because they represent reality. On Tuesday 06 March 2012 05:53:57 chris_sny...@sra.com wrote: > I don't understand Puppet Language. How can you take object-oriented > constructs such as 'class' and 'inheri

Re: [Puppet Users] Duplicate definition + parameterized classes + class scope

2012-03-06 Thread chris_sny...@sra.com
I don't understand Puppet Language. How can you take object-oriented constructs such as 'class' and 'inheritance' and then not allow things like multiple instances of a class, albeit with differing parameters. Defined resource types don't help me as they don't have inheritance (which is somet

[Puppet Users] system poweroff/shutdown module

2012-03-06 Thread Darin Perusich
Hello, I was wondering if anyone's written a shutdown/poweroff module to take down some or all of the systems managed by puppet? A quick google search didn't come up with anything so i figured I'd ask before reinventing the wheel. The primary scenario I'm thinking of is there's an extended power o

[Puppet Users] Re: Autoloading issue when adding type to existing module

2012-03-06 Thread olizilla
Ok, I know standalone isn't the coolest way to run puppet, but I don't feel like I have a node I can sensibly assign as the master. Regardless, this seems like a significant issue. Is it something stupid I'm doing, has anyone else had this problem? Do nodes cache catalogs? What's going on? ...

Re: [Puppet Users] Avoiding duplicate definitions

2012-03-06 Thread Bruce Richardson
On Mon, Mar 05, 2012 at 11:27:46PM -0800, Thomas Sturm wrote: > Both solutions don't help when taking this git module from github, > because we'd have to change it, it would no longer be an atomic piece > of logic one can just take and use unchanged. Is there some kind of > best practice for this p

[Puppet Users] Long config retrieval on nodes

2012-03-06 Thread Andrew Stangl
Hi all, hoping someone may have encountered a problem similar to this before: On my customer's EC2 based infrastructure, we have implemented the nodeless, truth driven module outlined by Jordan Sissel here http://www.semicomplete.com/blog/geekery/puppet-nodeless-configuration. It's quite an eff

[Puppet Users] Fetch ldap authorized_keys from ldap, copy to puppets local filesystem for needed users

2012-03-06 Thread Emilien
Hello, I'm trying to set up the following environment: Ldap containing users as posixaccount (uid, home directory, and an attribute containing their ssh public key). machines with an attribute indicating which users or user groups are allowed to ssh to the box What I'd like to do is the foll

Re: [Puppet Users] require custom ruby code in custom function

2012-03-06 Thread Dominik Zyla
On Monday, 5 March 2012 at 11:37, flex wrote: > hi, all: > > i want to require my own ruby class in a custom function, now i put the ruby > file in the same directory with custom function, and require it in the > function file like this: > > require File.join([File.expand_path(File.dirname(__FI