[Puppet Users] How do I prevent logging of secure data?

2014-02-24 Thread Larry Fast
By default puppet will report the changes to any files it updates. If the file includes any secure data like passwords or private encryption keys, that also shows up in the logs. Is there any way to block this level of logging for individual files? Disabling it for all files is also

[Puppet Users] Re: Use the same resource in two dependent classes

2014-02-17 Thread Larry Fast
Declaring the Service as a Virtual Resource might help but I'm not sure how you inject B's dependencies. http://docs.puppetlabs.com/guides/virtual_resources.html It might just require a Notify inside B. On Monday, February 17, 2014 3:41:14 AM UTC-8, zerozer...@gmail.com wrote: Hi, I have

Re: [Puppet Users] How do I quiesce a puppetmaster before reconfiguring it?

2014-02-09 Thread Larry Fast
graceful-stop seems to be a modest improvement but its not a panacea. AFAIK it only ensures that open connections are not dropped. A puppet run seems to involve multiple connections. At best this only completes individual transactions before shutdown. Also, when I look at this problem in a

[Puppet Users] How do I quiesce a puppetmaster before reconfiguring it?

2014-02-08 Thread Larry Fast
If I need to do any maintenance on my puppetmaster I would like to ensure that I don't break any partially completed puppet runs. Is there any way to quiesce the puppetmaster before shutting down the service? I run my puppetmaster on top of apache passenger. If I execute service httpd stop it

[Puppet Users] can puppet manage puppet agents or puppetmasters?

2014-02-08 Thread Larry Fast
https://ask.puppetlabs.com/question/4694/updating-puppet-agents/ I'm looking at this thread from ask.puppetlabs and so far the the only answer seems to be - don't use puppet to manage puppet. I'm asking the broader community because I'm still naively hopeful that puppet can manage its own

[Puppet Users] Re: Does eyaml CLI have options to specify the private/public key paths?

2014-02-07 Thread Larry Fast
Thanks James. --help should have been blindingly obvious but it slipped my flu infested mind. Cheers! -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to

[Puppet Users] Creating new eyaml entries when private key is not available

2014-02-07 Thread Larry Fast
Our plan for eyaml is that operations owns and protects the private key. So developers only have access to the public key and after creating new encrypted values cannot decrypt them. Unless I'm missing something, developers won't be able to use 'eyaml edit' because it requires the private

[Puppet Users] Re: Does eyaml CLI have options to specify the private/public key paths?

2014-02-07 Thread Larry Fast
And now I see why I hadn't found --help helpful. In 2.0.0 eyaml --help does not give a dump of options. You have to run eyaml cmd --help to see a list of options for that command. Don't know if that's good or bad. IMO it would be nice to see more information in top level help. -- You

[Puppet Users] hiera-eyaml doesn't seem to work with the hiera_hash() function

2014-02-06 Thread Larry Fast
I just started evaluating hiera-eyaml and hit a glitch. It seems that any attempt to read a hash in an eyaml file using hiera_hash(), produces an error: Error 400 on SERVER: Resolution type is hash but parsed_answer is a Hash The error occurs even if the hash does not contain any encrypted

[Puppet Users] Re: hiera-eyaml doesn't seem to work with the hiera_hash() function

2014-02-06 Thread Larry Fast
Correction: I'm running puppet 3.2.3. I will upgrade to 3.4.2 to see if the problem goes away. On Thursday, February 6, 2014 10:22:07 AM UTC-8, Larry Fast wrote: I just started evaluating hiera-eyaml and hit a glitch. It seems that any attempt to read a hash in an eyaml file using

[Puppet Users] Re: hiera-eyaml doesn't seem to work with the hiera_hash() function

2014-02-06 Thread Larry Fast
Correction: I'm running puppet 3.2.3. I will upgrade to 3.4.2 to see if the problem goes away. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to

[Puppet Users] Re: hiera-eyaml doesn't seem to work with the hiera_hash() function

2014-02-06 Thread Larry Fast
Correction: I was running puppet 3.2.3. I upgraded my server to 3.4.2 and the problem is still there. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [Puppet Users] Passenger-Rack error 500: no such file to load -- rack

2013-08-13 Thread Larry Fast
Thanks Denmat, It was probably crosstalk between gems and RPMs. Turns out that the rubygems RPM was missing some files. Likely cause was accidentally installing and uninstalling rubygems via non-rpm. Reinstalling the RPM fixed the problem. For the benefit of others, here's how we found the

[Puppet Users] Passenger-Rack error 500: no such file to load -- rack

2013-08-12 Thread Larry Fast
I have a puppetmaster running within passenger+rack. It has been running properly for almost a year and decided to stop working on the weekend. Now I'm getting the Purple Ruby (Rack) application could not be started screen with Error: no such file to load -- rack Application:

[Puppet Users] What are the expected return codes for provider methods param() param()=

2013-07-07 Thread Larry Fast
I'm getting unexpected behavior from my provider methods. Here's the example. parameter p resource[ :p ] = 'hello' def p() return 'hello' end def p()= return true # Does the return value even matter? end Problem 1: p()= is getting called. Given that the return from p() matches the

[Puppet Users] Can a type-provider 'require' other files? Do all files in the type-provider tree get sent to the agent?

2013-07-03 Thread Larry Fast
I'm turning an existing ruby script into a type-provider pair. My first desire was to simply 'require' the original ruby file in the new provider file. Unfortunately my ruby file doesn't get downloaded from master to agent. Is there something reasonably simple I can do to ensure that this

[Puppet Users] Re: Can a type-provider 'require' other files? Do all files in the type-provider tree get sent to the agent?

2013-07-03 Thread Larry Fast
Thanks, yes it was that simple. It would have worked first time if I just had put the file in the provider folder instead of the type folder. Doh! Cheers, Larry -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and

[Puppet Users] How can an ENC get the --environment value specified on a puppet agent commandline?

2013-06-18 Thread Larry Fast
Is there any way to pass puppet run details to an ENC. Most importantly I want to know the Environment value the puppet Agent is asking for. More generally is it possible to query the puppet configuration values? One thought I had is to turn the puppet config into FACTS. Then the ENC can get

Re: [Puppet Users] New to hiera

2013-05-06 Thread Larry Fast
I'm curious to your opinion on point # 3, are you talking about OS packages or your organizations app version? If the latter, I was thinking of using hiera, maybe with a backend other than yaml such as redis, to store the version of the app, that way like you said it could be used in

Re: [Puppet Users] New to hiera

2013-05-05 Thread Larry Fast
this. Cheers, Larry Fast -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users

Re: [Puppet Users] Re: Practices: what _not_ to manage with Puppet?

2013-05-05 Thread Larry Fast
What about the larger processes involved in incremental updates? Eg. sequencing your updates so that the service keeps running. I'm considering using Jenkins to orchestrate sequencial activity. -- You received this message because you are subscribed to the Google Groups Puppet Users

Re: [Puppet Users] What do YOU do to catch undefined variables

2013-05-03 Thread Larry Fast
On Friday, May 3, 2013 2:12:41 AM UTC-7, David Schmitt wrote: On 02.05.2013 22:43, Larry Fast wrote: I'm still a puppet newbie and these days I'm struggling with undefined variables. At least once a week I hit an error message like this: Error: Failed to apply catalog

Re: [Puppet Users] What do YOU do to catch undefined variables

2013-05-03 Thread Larry Fast
...finger slipped... Thanks David, I started using geppetto as well. Yes, my error count has dropped significantly. The other thing I discovered is that hiera(name) produces a very clear error if the name doesn't exist. So I moving toward that as well. Cheers larry -- You received this

[Puppet Users] What do YOU do to catch undefined variables

2013-05-02 Thread Larry Fast
I'm still a puppet newbie and these days I'm struggling with undefined variables. At least once a week I hit an error message like this: Error: Failed to apply catalog: '' is not qualified and no path was specified. Please qualify the command or specify a path. IMO, the core issue is

[Puppet Users] Re: High-level design question concerning Hiera with Puppet

2013-05-02 Thread Larry Fast
}/%{project}/%{role_name}-role/common - %{environment}/%{project}/%{module_name} - %{environment}/%{location}/%{module_name} - %{environment}/%{module_name} - %{environment}/common Cheers Larry Fast -- You received this message because you are subscribed to the Google Groups Puppet Users

[Puppet Users] Re: How do I automagically remove old versions of jar files?

2013-04-29 Thread Larry Fast
Thank you all. Yes, tidy should be exactly what I need. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to

[Puppet Users] What's my syntax problem: Could not match 'c:/tmp' ?

2013-04-29 Thread Larry Fast
I assume I have a syntax problem of some kind. I created a class file and puppet complains on line 4. If I remove that block of code it complains about the next block. What silly little mistake have I made? The error reported for the code example below is: Could not match ‘george’,

[Puppet Users] How do I automagically remove old versions of jar files?

2013-04-24 Thread Larry Fast
I keep running into the following upgrade pattern. Previous Puppet run declared: file { my_jar.1.2.3.jar: ... } New puppet run declares: file {my_jar.2.4.6.jar: ... } But the new puppet run doesn't delete the older versions of this jar file. Is there a standard puppet pattern for

[Puppet Users] Re: multi-puppetmaster CA setup problem

2013-04-23 Thread Larry Fast
RESOLVED The multi-puppetmaster-single-CA documentation is complete but a bit scattered. Here the short list of what I needed to do for puppetmasters running apache-passenger. pm1 = CA pm2 = non-CA puppetmaster - needs to reference pm1 as the ca_server - disable local ca in [master] -

[Puppet Users] multi-puppetmaster CA setup problem

2013-04-22 Thread Larry Fast
I'm getting errors when following this webpage to setup a second puppetmaster (pm2) while using pm1 as the CA: http://docs.puppetlabs.com/guides/scaling_multiple_masters.html#centralize-the-certificate-authority and I'm using option 1: Direct agent nodes to the CA Master As far as I can tell,

Re: [Puppet Users] Windows Puppet waits for CR, then warns Facter::Util::Resolution.exec with a shell built-in is deprecated

2013-04-17 Thread Larry Fast
Solution: Find the .rb files that contained Facter::Util::Resolution.exec and ... Facter.add(my_function) do confine :kernel = [ 'Linux' , 'SunOS' , 'FreeBSD' , 'Darwin' ] ... Thanks everyone! -- You received this message because you are subscribed to the Google Groups Puppet Users

Re: [Puppet Users] Windows Puppet waits for CR, then warns Facter::Util::Resolution.exec with a shell built-in is deprecated

2013-04-16 Thread Larry Fast
. The error did not indicate a source file. And Pluginsync does not indicate the source module for any of the files it loads. Not even in debug mode. Cheers, Larry Fast -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from

[Puppet Users] what's the syntax for converting the yaml of facts into a hash table?

2013-04-14 Thread Larry Fast
Hope I'm not being too thick about this but I'm having trouble creating a Hash from my server's Facts. I've tried the following: facts = File.read( #{puppetdir}/yaml/facts/#{certname}.yaml ) factH = YAML.load( facts ) # fails factH = YAML.load( facts ).to_hash # fails It

[Puppet Users] Re: what's the syntax for converting the yaml of facts into a hash table?

2013-04-14 Thread Larry Fast
Starting to get some clarity but still need help. Using YAML to load Facts produces the YAML object below. But I'm still not clear on how to access the contents. myFacts = YAML.load( facts.yaml ) print myFacts.inspect ### output: #YAML::Object:0x7f550d6c6858 @class=Puppet::Node::Facts,

Re: [Puppet Users] Re: what's the syntax for converting the yaml of facts into a hash table?

2013-04-14 Thread Larry Fast
Oh yes, I forgot the first line of my snippet. But I still don't have a working syntax for reading the facts from that object. facts = File.read(filename) myFact = YAML.load( facts ) print myFacts.inspect #YAML::Object:0x7f550d6c6858 @class=Puppet::Node::Facts,

[Puppet Users] facter doesn't load from /ect/facter/facts.d

2013-04-13 Thread Larry Fast
I'm trying to load custom facts via /etc/facter/facts.d/* according to instructions on http://docs.puppetlabs.com/guides/custom_facts.html#structured-data-facts I must have missed a setting somewhere because I get nothing. The first clue may be that /etc/facter didn't exist. I had to create

Re: [Puppet Users] facter doesn't load from /ect/facter/facts.d

2013-04-13 Thread Larry Fast
From that page: External facts are only available in Facter 1.7 and later. I expect you need to either upgrade or install the stdlib module. Thanks for that. I knew I missed something. ... but tell me more about the stdlib option. I'm a bit leery of depending on the first RC of facter 1.7.

Re: [Puppet Users] facter doesn't load from /ect/facter/facts.d

2013-04-13 Thread Larry Fast
-puppetlabs-stdlib-puppet-labs-standard-library-part-2/ https://puppetlabs.com/blog/module-of-the-week-puppetlabsstdlib-puppetlabs-standard-library-part-3/ I find it very useful. Hope you do as well. On Apr 13, 2013, at 5:27 PM, Larry Fast wrote: From that page: External facts are only available

[Puppet Users] Windows Puppet waits for CR, then warns Facter::Util::Resolution.exec with a shell built-in is deprecated

2013-04-12 Thread Larry Fast
Windows NuBQ: I'm running windows with a clean install of puppet and an empty node definition. puppet agent -t pauses with no prompt. When I hit enter, I get this warning: Using Facter::Util::Resolution.exec with a shell built-in is deprecated. Most built-ins can be replaced with native

[Puppet Users] Can an ENC see the incoming environment value or other agent options? 3.0.1

2013-04-12 Thread Larry Fast
Using puppet 3.0.1, can exec ENC see the incoming environment value? Perhaps indirectly from a log or report somewhere? -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an

[Puppet Users] example42 mcollective - setting version produces an error

2013-04-10 Thread Larry Fast
When I define the mcollective_version variable using hiera I get the following error. There is no indication where the problem has occurred. Error: Failed to apply catalog: You cannot specify more than one of content, source, target If I set this variable in code it pretents to work but I

[Puppet Users] Re: example42 mcollective - setting version produces an error

2013-04-10 Thread Larry Fast
I'm guessing that the problem is in example42/mcollective/manifests/init.pp... class mcollective ( $install_dependencies = params_lookup( 'install_dependencies' ), $stomp_host = params_lookup( 'stomp_host' ), $stomp_port = params_lookup( 'stomp_port' ), $stomp_user

[Puppet Users] Re: What's your hiera tree look like?

2013-03-21 Thread Larry Fast
Hi Andy, I guess my most important request for Hiera 2 is diagnostic information. It's probably a broader request for better diagnostics in puppet as a whole. Here's what I dream of ... 1. The ability to run Puppet on the puppetmaster using the cached Facts from a server. 2. A postmortem

[Puppet Users] What's your hiera tree look like?

2013-03-19 Thread Larry Fast
My Hiera tree is turning into a chaotic mess. I'm guessing that my tree structure is one problem source. So I'm wondering how other real users have setup hiera. Here are the core problems that are giving me headaches. # I need to version control my modules separately but hiera data is

[Puppet Users] Can puppet report the console output from service foo status?

2013-03-01 Thread Larry Fast
I have an odd problem. The first time I install my new package, puppet comes back with Execution of '/sbin/service chirp_fe start' returned 1: When I run this command manually and on all subsequent puppet runs it succeeds. So I'm looking for a way to capture the console output from the