Re: [Puppet Users] How to check if a package exists

2011-04-30 Thread Matthew Black
You can put a requires in the file resource require => Package["packagename"] then it will install the package first then put in the symlink. On Sat, Apr 30, 2011 at 5:12 AM, Sans wrote: > Dear all, > > I'm trying to do this. Say for example, I want this link: "liblcgdm.so > -> liblcgdm.so.1.

Re: [Puppet Users] ruby dsl manifests

2011-06-02 Thread Matthew Black
Thanks for the reply, from what you said it might be better for me to go about it in a different direction. On Thu, Jun 2, 2011 at 1:07 AM, Dan Bode wrote: > you should be able to do something like: > > call_function(:defined, 'Foo['bar']') > > just keep in mind that the defined function (or any

RE: [Puppet Users] Re: How do I enable repositories and install packages

2011-06-03 Thread Matthew Black
It fails because the yum repository by default is requiring the package be signed. If you update the repo configuration, with the option below, you would not need to do a --nogpgcheck with the package install. The only other time that this option would not work is if you are doing a localinstall vi

RE: [Puppet Users] Re: how to do conditional check?

2011-06-13 Thread Matthew Black
After reading the other responses my question to you is what exactly are you attempting to do? -Original Message- From: puppet-users@googlegroups.com [mailto:puppet-users@googlegroups.com] On Behalf Of Sans Sent: Monday, June 13, 2011 5:22 AM To: Puppet Users Subject: [Puppet Users] Re: h

Re: [Puppet Users] Re: how to do conditional check?

2011-06-13 Thread Matthew Black
in correct shape, > otherwise jobs won't run properly. On the other hand, that file > doesn't mean anything at all, if Torque is not install in the first > place. That's why I want to put that check in. Cheers!! > > > > > On Jun 13, 6:50 pm, "Mat

RE: [Puppet Users] Re: how to do conditional check?

2011-06-14 Thread Matthew Black
I haven’t used torque or yaim but what you want to do in a fact is something like this to determine installation. if File.exists?('/path/to/config') end I don’t usually install anything on a system without doing it in puppet, so I don’t typically write facts to find out if something is installed

RE: [Puppet Users] Re: how to do conditional check?

2011-06-14 Thread Matthew Black
bject: [Puppet Users] Re: how to do conditional check? On Jun 14, 6:12 pm, "Matthew Black" wrote: > I haven’t used torque or yaim but what you want to do in a fact is something > like this to determine installation. > > if File.exists?('/path/to/config') > Do

Re: [Puppet Users] Deployment of applications

2011-09-15 Thread Matthew Black
Thats because puppet isn't a tool meant to build applications from source. You could do it but its one of those things where it doesn't make sense. If you need to build from SVN, you might as well look at something like Jenkins that can monitor an SCM and pull out changes and do a bunch of thin

Re: [Puppet Users] Source of external node data?

2011-09-15 Thread Matthew Black
It depends on the job you want to do. My project we use an oracle db backend to store our whole environment information for application deployments. So we have a ruby DSL class that is an entry point where it looks up the node in the database and processes it depending on its function. The sol

Re: [Puppet Users] run puppet service type with specific user

2011-09-24 Thread Matthew Black
Take a look at http://www.yolinux.com/TUTORIALS/LinuxTutorialInitProcess.html I forget exactly the usage of the daemon but you need to include the functions, which is shown at the init script example. If you read that functions file it will give you an idea of how to use it to start up a service a

Re: [Puppet Users] mysql database

2011-10-02 Thread Matthew Black
No that is one of the ways to do it. The alternative is to write your own provider and type. As for whether your method is correct, if it is working for you and scales then its the correct procedure for you. On Sun, Oct 2, 2011 at 11:41 AM, CHEBRIAN wrote: > Hi, > > How to create mysql database

Re: [Puppet Users] RFC: Being able to exclude resources from reporting.

2011-10-04 Thread Matthew Black
I could see a use case for it. When generating the facts.yaml for use with mcollective, the reports are showing always at 1 change because of that even if I set the log level to debug. That file will always change every run because the information stored in facter is changes with each run. I ca

Re: [Puppet Users] Hostname fact doesn't handle hostnames with periods

2011-10-04 Thread Matthew Black
If facter switched to using uname on unix/linux, it would be a problem. If I type uname -n it will spit out the fqdn to me. If I type hostname -s, it gives me the short, the actual hostname. I don't think a switch like that will solve the original issue provided. On Oct 4, 2011, at 6:20 AM, Ken

Re: [Puppet Users] Hostname fact doesn't handle hostnames with periods

2011-10-05 Thread Matthew Black
I think you missed the point I was trying to convey. Anyway you want to try to flip it, you are still going against the grain with using a period in the hostname. Even libc it states what a hostname is and what a fqdn is, see below. So if libc defines a hostname like below, then facter will be t

Re: [Puppet Users] Re: Hostname fact doesn't handle hostnames with periods

2011-10-07 Thread Matthew Black
You are confusing Standards (RFC) and POSIX. They are typically mutually exclusive in their roles. RFC dictates the standards the information should be presented. POSIX dictates the API that the information is obtained. The difference can be plainly seen in message protocols, like smtp. http://nem

Re: [Puppet Users] Exec {rake db:mgirate } not working

2011-10-07 Thread Matthew Black
One thing you might want to try, which could resolve the issue is use cwd meta for exec. I would also split the actions up, like below, with refreshonly meta set to true so it doesnt execute them on every puppet run. You would need a resource that would trigger them, like package install or somethi

Re: [Puppet Users] Puppet for Oracle Enterprise Linux

2011-12-01 Thread Matthew Black
Can you provide the resource defined in the error message? On Thu, Dec 1, 2011 at 8:38 PM, Douglas Garstang wrote: > Finally got the dependancies sorted out, and on the first run on the > client, I am seeing: > > Dec  1 20:37:35 ip-10-123-21-192 puppet-agent[2562]: Failed to apply > catalog: Para

[Puppet Users] file_exists function

2010-11-08 Thread Matthew Black
I am still new to the ruby language and I figured I'd share my file_exists function to see if it is the correct approach and to offer it out there for people who may have the same issue. We build our vhosts based off a template and have come across the need to add in items for specific customers in

RE: [Puppet Users] Re: multiple package installation at same location

2010-11-09 Thread Matthew Black
An alternative is to have puppet push out the contents of the RPM instead of trying to install from RPM. The problem with RPM is its not designed to have two different packages owning the same files, but there are ways around it. You would need to install the RPM via the RPM command with --force to

RE: [Puppet Users] use current array element when declaring multiple resources using an array

2010-11-10 Thread Matthew Black
What you are looking for is a loop which does not exist in puppet, except for templates. I've never tried it but I've speculated it could be possible to create a manifest template and then use puppet to generate that manifest file in a similar fashion you are looking to do. -Original Message

RE: [Puppet Users] Process to upgrade from 0.24.8 to 2.6.x ?

2010-11-10 Thread Matthew Black
There was a big change from 0.25 to 2.6 and I believe you need to upgrade both client and server from what I remember. The best way to do is get a remote execution daemon like func and you could issue a command to all servers like "yum upgrade puppet". -Original Message- From: puppet-user

Re: [Puppet Users] Propagating local config changes from a client to the puppetmaster

2010-12-01 Thread Matthew Black
The issue becomes that while it would offer you a time saver in the short term, it would give you headaches later with security and as you try to expand out your puppet infrastructure, which you will have to do once you reach at the very least 50 hosts. The best solution that I could offer is you w

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
Inside my basenode definiton, which is being inherited by another node definition it is doing realize(User["admin"],Group["admin"]) The strange thing is if remove the specified node definition and just have the basenode it works correctly. On Tue, Feb 1, 2011 at 12:59 PM, Jeff McCune wrote: > H

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
I tried what you suggested and it seems to have made no difference, I am still getting the same error. On Tue, Feb 1, 2011 at 1:30 PM, Jeff McCune wrote: > On Tue, Feb 1, 2011 at 1:20 PM, Matthew Black wrote: >> Inside my basenode definiton, which is being inherited by ano

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
the virtual user in a class? In the > basenode are you including the class that contains the virtual user? > If the virtual user is in a class, can you put a notify resource in > there to make sure the class is included as expected? > > HTH, > > Nan > > On Tue, Feb 1, 2

Re: [Puppet Users] apache vhosts in puppet

2011-03-02 Thread Matthew Black
looks like you're not including the apache class, which has the definition that puppet is complaining about. On Wed, Mar 2, 2011 at 7:58 PM, Tim Dunphy wrote: > hello puppet list!! > > I sincerely appreciate your help in the past and hope you don't mind > me bouncing this scenario off of you. I

Re: [Puppet Users] learning, but puppet does not detect change

2011-03-05 Thread Matthew Black
I think there is some confusion, where is the ntp manifest located? Is it in its own module or the site manifest directory. If its the latter, then you need to import that manifest into the site manifest. If its a module, then you still need to do the import for the module. Try updating your site

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Matthew Black
That process still works, but you need to have a CA puppet master, a non-CA puppet master, and one client for that to work. The client needs to be told where the CA server is though which in that link tells you how to update the puppet.conf. I use this process and it works great, there was some tw

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Matthew Black
certname=pirates.uis.example.com >ca=false >ca_server=puppet-prod.uis.example.com > > > Now starting the puppet master fails with error: > > Could not run: Could not retrieve certificate for > pirates.uis.example.com and not running on a valid certificate > autho

Re: [Puppet Users] Database calls in puppet manifests

2012-01-06 Thread Matthew Black
You can look into creating custom functions in ruby to pull back the data. Additionally you could create the manifests in ruby dsl. On Fri, Jan 6, 2012 at 10:25 AM, Jeff Sussna wrote: > (How) do folks handle situations where puppet variables need to be > populated from dynamic database queries?

Re: [Puppet Users] Re: Compiled catalog arount 70s

2012-01-28 Thread Matthew Black
One more thing to keep in mind, the more templates you are compiling also adds to time. On Sat, Jan 28, 2012 at 11:11 AM, Antidot SAS wrote: > Thx for answering, I really appreciated your investment, you gave some > serious lead to search, I'll see on Monday and let you know if something > comes

Re: [Puppet Users] how to scale puppet with F5 load balancer?

2012-07-07 Thread Matthew Black
The best I was able to do is when you generate the certificate for the puppet master you use dns alt names flag to specify the alternative names for the puppet master. That is the only way I was able to make it work in my environment with the F5. On Sat, Jul 7, 2012 at 6:17 PM, Hai Tao wrote: > H

Re: [Puppet Users] Certificate verify fails without indications

2013-02-13 Thread Matthew Black
What is the versions of the puppet are being used on the client and the server? Assuming master is running on Linux, what distro and release is the master running on? I suspect the openssl might be the issue on the client. On Wed, Feb 13, 2013 at 7:59 AM, Luigi Martin Petrella wrote: > Felix,

Re: [Puppet Users] Certificate verify fails without indications

2013-02-13 Thread Matthew Black
Puppet Enterprise Master on Centos > 6.3, and there wasn't any certificate problems and everything worked. > Today we are trying with the same configuratione, but It appeared the same > validation errore described before > > > > On 13 February 2013 14:12, Matthew Black wrote: &g

Re: [Puppet Users] Certificate verify fails without indications

2013-02-13 Thread Matthew Black
onnect RedHat agent with a Puppet Enterprise Master on >> > Centos >> > 6.3, and there wasn't any certificate problems and everything worked. >> > Today we are trying with the same configuratione, but It appeared the >> > same >> > validation errore described before >

Re: [Puppet Users] semi-standalone puppet mode

2013-02-13 Thread Matthew Black
Without fully understanding your modules and how they interact you can always take a copy of the site manifest and modules with the node and then do something like this puppet apply /etc/puppet/manifests/site.pp --modulepath=/etc/puppet/modules I typically do something similar when testing a modu

Re: [Puppet Users] Run Puppet Against Master with Local node.pp Manifest?

2013-02-13 Thread Matthew Black
You should be versioning all your puppet manifests and modules. You can then write a simple script to pull down the changes. Once you have the files you can have the manfiests and modules folder look exactly like the puppet master and then type something like this to test. puppet apply /etc/puppet

Re: [Puppet Users] Run Puppet Against Master with Local node.pp Manifest?

2013-02-14 Thread Matthew Black
You would not need to pull the entire SVN, puppet modules, to test out one specific module. The only time you would need to have multiple modules is if there is inter-dependency. You do not need to setup a new puppet master or upload files to the puppet master if your purpose is to test out a new

Re: [Puppet Users] Installation from the scratch

2013-02-15 Thread Matthew Black
Is both servers clock in sync? On Fri, Feb 15, 2013 at 4:20 AM, Calero wrote: > Hi all, > > > > I'm trying to understand how puppet works, and my idea is to learn > installing a new environment from the scratch. > > > > I have the following: > > > > Master: > > > > cat /etc/debian_version > > 6.0

Re: [Puppet Users] How to manually create Puppet CA and client certificates using openssl?

2013-02-20 Thread Matthew Black
I think you're trying to over complicate the situation here. Yes its a single point of failure but unfortunately that is not going to change anytime between now and maybe 6 months. You do not need multiple CAs to use multiple puppet masters. The client needs to have the setting ca_server set to t

Re: [Puppet Users] How to manually create Puppet CA and client certificates using openssl?

2013-02-20 Thread Matthew Black
I run an F5 load balancer with SSL termination at the F5 and I dont need to put the CA cert anywhere except the F5. The actual CA signs the certs. The CA cert is only really used to authenticate the client cert. This gives the appearance to my puppet clients that I only have one puppet master when

Re: [Puppet Users] How to manually create Puppet CA and client certificates using openssl?

2013-02-22 Thread Matthew Black
I think you're missing what I'm trying to convey. When you run via Apache or Nginx you are doing SSL termination at the apache and forwarding the requests to a puppetmaster application if you use say passenger. Its not so different than an F5. While I'm not giving you exact details on how to do it

Re: [Puppet Users] How to manually create Puppet CA and client certificates using openssl?

2013-02-22 Thread Matthew Black
have to authorize, by signing the certificate, the client to connect to any puppet master/pool signed by the CA. On Fri, Feb 22, 2013 at 10:31 AM, Matthew Black wrote: > I think you're missing what I'm trying to convey. When you run via > Apache or Nginx you are doing SSL te

Re: [Puppet Users] puppet-dashboard-1.2.22 - unable to get it running under Apache/Passenger

2013-02-22 Thread Matthew Black
It looks like its trying to use a specific rack gem version but you do not have that version installed or you have two versions installed and its picking up the latest. It could be that you also have another passenger application where the versions conflict? (can't activate rack (~> 1.1.0, runtime

Re: [Puppet Users] Ruby Class or other API for controlling puppet/mcollective

2013-06-19 Thread Matthew Black
Not knowing your entire goal but what you could use is the mcollective-client gem in your rails application and have the puppet mcollective agent, which PuppetLabs made, and you can run puppet related commands like you would with "puppet resource". So right now you can do something like "puppet re

Re: [Puppet Users] Module to add another puppetmaster?

2012-12-27 Thread Matthew Black
The fastest way to rapidly scale is to have SSL terminated at the load balancer so you do not need to update the the ssl certificate. The configuration to do it depends on what is being used for the load balancer. If you are using an F5 LTM then you can easily handle the SSL termination at the F5 a

Re: [Puppet Users] Module to add another puppetmaster?

2012-12-28 Thread Matthew Black
gt; in my environment and to the best of my knowledge there is no love from > puppet for them so pool management will still require some key pressing. > > > > > Matthew Black wrote: > > The fastest way to rapidly scale is to have SSL terminated at the load > balancer so