Re: [Puppet Users] calling_module vs module_name ?

2013-04-03 Thread Nikola Petrov
Calling module can serve you well if you have a reusable define that is defined in module that is not the same from the one that it is used in. I hope this makes sense... Most of the time I won't recommend this for a hierarchy as it can be hard to reason about it... Best, Nikola On Tue, Apr 02,

Re: [Puppet Users] before and after not being honoured

2013-04-03 Thread Nikola Petrov
I think that this is because classes are not applied but are declared. Check the anchor pattern and declare that an puppet::start is declared before the file. I can give you more info when you actually give us the puppet class itself. You can find more info about the anchor pattern here

Re: [Puppet Users] Re: Catalog compilation, puppetdb and ssl

2013-04-03 Thread Mohit Chawla
Hey Ken, that definitely cleared some misconceptions, thanks ! I now know what the problem was. First, I assumed that the client must've the same certificate as in puppetdb's truststore. I didn't realize that any cert signed by that CA should be able to make calls. In our scenario, where we have

Re: [Puppet Users] Custom facts not working

2013-04-03 Thread Codfather
Worth noting that if you set this environment variable in one of your shell environment config files , like .bashrc, you would need to export it. Like this export FACTERLIB=/var/lib/puppet/lib/facter regards Nick On Monday, 3 October 2011 12:14:30 UTC+2, Stefan Schulte wrote: On Mon, Oct

[Puppet Users] Re: Installing Microsoft Visual Studio 2010 with Puppet?

2013-04-03 Thread Amos Shapira
Thanks Josh. Yes a colleague who spiked our Puppet on Windows has already discovered Chocolatey and I intend to try to use it if I have to implement this myself. Alas so far I haven't found a ready-made package for Visual Studio 2010 but perhaps I can start from the package for Studio 2012.

[Puppet Users] Re: tagging within defined type, then collecting fails

2013-04-03 Thread william . leese
accidentally just replied to author? again: so changed everything as suggested, but still no luck. site.pp: --- node /mag-lab04/ inherits mag-lab { include os_common Os_common::Users::Virtualuser | tag == 'ops' | realize Os_common::Users::Virtualuser['tjones'] } ...realize works, collector

[Puppet Users] Re: Grouping hosts for stage deployment

2013-04-03 Thread ForumUser
Thanks for the link - it seems interesting :-) But in general: how do you guys cope with big infrastructure and especially control the impact a human error made on large number of nodes ? What is you experience in this topic ? Thanks in advanced Seamie On Tuesday, 2 April 2013 17:27:01 UTC+1,

Re: [Puppet Users] ssh_authorized_key errors in RHEL6

2013-04-03 Thread Keith Burdis
The permissions of /tmp should be 1777 so that all users can create files but the sticky bit is set. Setting the sticky bit ensures that files and directories under /tmp can only be renamed or deleted by the user that owns them. - Keith On 3 April 2013 00:41, Kubes

Re: [Puppet Users] Re: Catalog compilation, puppetdb and ssl

2013-04-03 Thread Ken Barber
Yes, in this way it behaves a lot like the puppet masters. Don't forget to check out certificate-whitelist (http://docs.puppetlabs.com/puppetdb/1.1/configure.html#certificate-whitelist) this gives you the ability to only allow certain hosts to connect if you desire it. On Wed, Apr 3, 2013 at 7:41

Re: [Puppet Users] Re: Catalog compilation, puppetdb and ssl

2013-04-03 Thread Mohit Chawla
Ah nice, thanks for pointing that out. On Wed, Apr 3, 2013 at 3:13 PM, Ken Barber k...@puppetlabs.com wrote: Yes, in this way it behaves a lot like the puppet masters. Don't forget to check out certificate-whitelist (

Re: [Puppet Users] Multiple sources for puppet configuration?

2013-04-03 Thread gh
On 4/2/13 7:48 PM, Thomas A. Fine wrote: Hi, As we gradually spread puppet management to all of our systems, we've run across a group that's managed by us, but also semi-self-managed, and they'd set up puppet to manage some of their own software configurations (they provide an outward

[Puppet Users] Re: Template function does not show warnings if variable not defined

2013-04-03 Thread Alexander Kulbiy
Hello John, Thanks very much for your help. I stated to think about such solution, but I thought it might be some built-in function... While I'm going to use such function I have another question about funtions: is there any way to understand name of template from where my function is called?

[Puppet Users] Re: Installing Microsoft Visual Studio 2010 with Puppet?

2013-04-03 Thread Rich Siegel
A fellow maintainer of chocolatey has packaged it here i think based on public downloads: https://github.com/mwrock/Chocolatey-Packages I have not yet open sourced our choco repo but I can probably sanitize the vstudio package and publish it if you like . It won't work without having the

[Puppet Users] Encrypt Passwords in Manifests

2013-04-03 Thread jim
Hello all I mainly use Puppet for managing windows hosts, and what to know they best way to either encrypt passwords in manifests or where to store them so they are encrypted and reference them as in a variable etc ? (if that makes sense) e.g. class roles::base::users { user {

[Puppet Users] Re: Dependency Cycle Question

2013-04-03 Thread jcbollinger
On Tuesday, April 2, 2013 2:09:41 PM UTC-5, beyonddc...@gmail.com wrote: Hi All, I am new to Puppet and have a question on dependency cycle. I am currently applying my resource directly using the command prompt on Windows 'puppet apply --noop init.pp'. When I try to test it, I

[Puppet Users] Re: Multiple sources for puppet configuration?

2013-04-03 Thread jcbollinger
On Tuesday, April 2, 2013 12:48:57 PM UTC-5, Thomas A. Fine wrote: Hi, As we gradually spread puppet management to all of our systems, we've run across a group that's managed by us, but also semi-self-managed, and they'd set up puppet to manage some of their own software configurations

[Puppet Users] defining roles (and hiera)

2013-04-03 Thread Kubes
What is the best means to assign nodes to a role I have review http://www.craigdunn.org/2012/05/239/ also view a post recently with people posting their hirea configs and most of them used a role or server_role, etc In our environment, servers(node) are named by roles, eg:

[Puppet Users] Re: before and after not being honoured

2013-04-03 Thread jcbollinger
On Tuesday, April 2, 2013 11:13:23 AM UTC-5, Dave Bell wrote: Hi, I'm running puppet 3.1.1 I have something similar to the following configuration. class my_roles::puppet_master { file { '/etc/default/puppetmaster': ensure = present, source =

[Puppet Users] Re: puppet kick question

2013-04-03 Thread jcbollinger
On Tuesday, April 2, 2013 7:52:15 AM UTC-5, MrTeleBird wrote: Hello, I have basically two questions regarding *puppet kick* (old puppetrun) when calling a puppet kick host1.com host2.com host3.com : first question) does puppet kick deploy the catalogue on the three hosts serially or

Re: [Puppet Users] Custom facts not working

2013-04-03 Thread jcbollinger
On Wednesday, April 3, 2013 2:44:22 AM UTC-5, Codfather wrote: Worth noting that if you set this environment variable in one of your shell environment config files , like .bashrc, you would need to export it. Like this export FACTERLIB=/var/lib/puppet/lib/facter True, but it's even

Re: [Puppet Users] Encrypt Passwords in Manifests

2013-04-03 Thread Keith Burdis
If you use hiera try Craig Dunn's hiera-gpghttp://www.craigdunn.org/2011/10/secret-variables-in-puppet-with-hiera-and-gpg/ . - Keith On 3 April 2013 14:18, jim stra...@gmail.com wrote: Hello all I mainly use Puppet for managing windows hosts, and what to know they best way to either

[Puppet Users] Re: Dependency Cycle Question

2013-04-03 Thread beyonddc . storage
Hi John, Your explanation should be correct. I believe the registry_key is behaving like the file resource since I was able to replace the problem using a file resource instead. You are also correct that the registry_key has autorequire implemented. The registry_key resource is downloaded

Re: [Puppet Users] Rspec with rspec-hiera-puppet

2013-04-03 Thread Maarten Thibaut
Hi Justin, I have just forked rspec-hiera-puppet on github, reverting some code changes made in version 1.0.0 by the original author. Tests work for me with this code, can you test this out? One way is to do a bundle to get the (broken) version installed, then go to your gems dir, move away

[Puppet Users] Windows Remote Desktop Services Custom Facts HELP, please

2013-04-03 Thread jim
Hello all, I recently posted a question about a Windows Feature Remote Desktop Services (formaly known as Terminal Services) https://groups.google.com/forum/?fromgroups=#!searchin/puppet-users/remote$20desktop/puppet-users/q71sP3TZZXQ/ymuAMqX5OTsJ the basic problem is fresh installed version

[Puppet Users] puppetlabs-firewall usage questions

2013-04-03 Thread Dan White
Puppet 3.x on RHEL 5 I am trying to use this module, but I think I am missing something in the setup. From https://github.com/puppetlabs/puppetlabs-firewall it says: With the latest version, we now have in-built persistence, ...you need some basic setup to define pre post rules.

Re: [Puppet Users] puppetlabs-firewall usage questions

2013-04-03 Thread Ken Barber
I am trying to use this module, but I think I am missing something in the setup. From https://github.com/puppetlabs/puppetlabs-firewall it says: With the latest version, we now have in-built persistence, ...you need some basic setup to define pre post rules. resources { firewall:

Re: [Puppet Users] puppetlabs-firewall usage questions

2013-04-03 Thread Dan White
Excellent ! How about if I do it this way: class my_fw { resources { firewall: purge = true } Firewall { before = Class['my_fw::post'], require = Class['my_fw::pre'], } class { ['my_fw::pre', 'my_fw::post']: } class { 'firewall': } } Then all I need do is put class

[Puppet Users] Managing Directory entries in httpd.conf with Puppet.

2013-04-03 Thread Cesar Covarrubias
So I am working on deploying Puppet for our environment, and I have hit a snag. We have a few applications hosted on Apache, each with different Directory entries. There is no way to standardize them across all of our application pools and they often overlap. I know I can have a custom

[Puppet Users] Re: Managing Directory entries in httpd.conf with Puppet.

2013-04-03 Thread windowsrefund
You don't You'd manage a static httpd.conf which includes from a conf.d directory containing site-specific configs. At the end of the day you want a define that allows you do work like this psuedo code: http:site { thisawesomesiteisenabledbydefault:; thisisold: ensure = absent; } --

Re: [Puppet Users] Puppet in Novell Zenworks ZCM 11

2013-04-03 Thread Konrad Scherer
On 03/27/2013 04:47 PM, stewart wrote: Hello.. I'm in charge of setting up a ZCM server to replace an older ZLM instance. One of the reasons given for sticking with Novell and the new version is that puppet is used as the linux engine for applying policies. Unfortunately when that decision

[Puppet Users] Where to keep server side custom function .rb files so they are not sync'd to client nodes?

2013-04-03 Thread Schofield
I have some utility functions that are currently defined in the lib/puppet/parser/functions folder of a module. These function .rb files get unnecessarily sync'd to client nodes since we have pluginsync enabled to distribute unrelated custom facts. Is there a standard or best practice

[Puppet Users] puppetlabs-firewall bug (Issue 144)

2013-04-03 Thread Dan White
From my iptables-save output: -A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment 000b allow established or related sessions -j ACCEPT Then from puppet resource firewall Error: Could not run: Parameter name failed on Firewall[RELATED,ESTABLISHED]: Invalid value

[Puppet Users] Using single hiera hash for two create_resources, and mounting filesystems

2013-04-03 Thread Kubes
I am trying to use the same hiera hash to create the mount point and mounts. (Would be nice if mount could create the mount points using 3.1.1) My plan was to define create_mount_points and use create_resources with the same hash, and just though away what I dont use maybe there is a

Re: [Puppet Users] Encrypt Passwords in Manifests

2013-04-03 Thread Vladimir Rutsky
Hello! On 03.04.2013 17:18, jim wrote: Hello all I mainly use Puppet for managing windows hosts, and what to know they best way to either encrypt passwords in manifests or where to store them so they are encrypted and reference them as in a variable etc ? (if that makes sense) e.g. class

[Puppet Users] Announce: PuppetDB 1.2.0 Available

2013-04-03 Thread Matthaus Owens
PuppetDB 1.2.0 is now available for download! This is a backward compatible feature release of PuppetDB. Please note: Packages are now provided for Fedora 18, but are no longer provided for Ubuntu 11.04 Natty Narwhal, which is end-of-life. Due to work being done to integrate PuppetDB with Puppet

[Puppet Users] Announce: Hiera 1.2.0 Available

2013-04-03 Thread Matthaus Owens
Hiera 1.2.0 is a feature release in the 1.x series with new features and bug fixes. Downloads are available at: * Source: https://downloads.puppetlabs.com/hiera/hiera-1.2.0.tar.gz RPMs are available at https://yum.puppetlabs.com/el or /fedora Rubygem available at http://rubygems.org/gems/hiera

Re: [Puppet Users] Announce: Hiera 1.2.0 Available

2013-04-03 Thread Brian Lalor
On Apr 3, 2013, at 8:39 PM, Matthaus Owens matth...@puppetlabs.com wrote: Hiera 1.2.0 is a feature release in the 1.x series with new features and bug fixes. Can Hiera be upgraded independently of the version of Puppet being used? -- Brian Lalor bla...@bravo5.org -- You received this

[Puppet Users] Re: Managing Directory entries in httpd.conf with Puppet.

2013-04-03 Thread joe
Simple answer: don't. Use apache's conf.d construct to manage virtual hosts for each so they can contain their own config. See the puppetlabs apache module: https://github.com/puppetlabs/puppetlabs-apache On Wednesday, April 3, 2013 10:57:30 AM UTC-6, Cesar Covarrubias wrote: So I am working

[Puppet Users] Re: Announce: Hiera 1.2.0 Available

2013-04-03 Thread Ellison Marks
Since I can imagine a situation that I might want to use the deep merge functionality on some lookups but not on others, Is it currently possible to specify the type of merge to do in the hiera_hash call? If not, is that a planned feature? On a slightly related note, is the function

Re: [Puppet Users] Encrypt Passwords in Manifests

2013-04-03 Thread Gabriel Filion
Hi there, On 04/03/2013 09:18 AM, jim wrote: I mainly use Puppet for managing windows hosts, and what to know they best way to either encrypt passwords in manifests or where to store them so they are encrypted and reference them as in a variable etc ? (if that makes sense) e.g. class