Hi all,
I've followed http://reductivelabs.com/trac/puppet/wiki/UsingMongrel
for configuring my puppet with mongrel.
Al seems to work fine, except that, after a reinstall of 40 nodes atone
time, I got many kind of errors like:
-------------------------------------------------------------------------
err: Could not request certificate: Certificate retrieval failed: .tmp
file already exists for /var/lib/puppet/ssl/ca/serial; Aborting locked
write. Check the .tmp file and delete if appropriate
-------------------------------------------------------------------------
info: Creating a new certificate request for td029.pic.es
info: Creating a new SSL key
at /var/lib/puppet/ssl/private_keys/td029.pic.es.pem notice: Got signed
certificate err: Connection timeout calling puppetmaster.getconfig:
execution expired err: Could not retrieve catalog: Connection Timeout
warning: Not using cache on failed catalog
-------------------------------------------------------------------------
info: Creating a new certificate request for td035.pic.es
info: Creating a new SSL key
at /var/lib/puppet/ssl/private_keys/td035.pic.es.pem err: Could not
request certificate: Certificate retrieval failed: .tmp file already
exists for /var/lib/puppet/ssl/ca/serial; Aborting locked write. Check
the .tmp file and delete if appropriate
Not sure if there are more... but seems that puppetmasterd is getting
crazy...
I took the second conf example:
# grep . /etc/httpd/conf.d/mongrel.conf
Listen 8140
ProxyRequests Off
LoadModule ssl_module modules/mod_ssl.so
<Proxy balancer://puppetmaster>
BalancerMember http://127.0.0.1:18140
</Proxy>
<VirtualHost *:8140>
SSLEngine on
SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
SSLCertificateFile /var/lib/puppet/ssl/certs/gridinstall.pic.es.pem
SSLCertificateKeyFile
/var/lib/puppet/ssl/private_keys/gridinstall.pic.es.pem
SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
SSLVerifyClient optional
SSLVerifyDepth 1
SSLOptions +StdEnvVars
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e
<Location />
SetHandler balancer-manager
Order allow,deny
Allow from all
</Location>
ProxyPass / balancer://puppetmaster:8140/
ProxyPassReverse / balancer://puppetmaster:8140/
ProxyPreserveHost on
</VirtualHost>
]# grep -v "#" /etc/sysconfig/puppetmaster|grep .
PUPPETMASTER_MANIFEST=/etc/puppet/manifests/site.pp
PUPPETMASTER_LOG=/var/log/puppet/puppetmaster.log
PUPPETMASTER_PORTS=( 18140 18141 18142 18143 )
PUPPETMASTER_EXTRA_OPTS="--servertype=mongrel"
And puppet is running as:
puppet 2848 12.8 3.1 147100 131852 ? Rsl 11:52 1:56 /usr/bin/ruby
/usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
--servertype=mongrel --logdest=/var/log/puppet/puppetmaster.log
--servertype=mongrel --masterport=18140
--pidfile=/var/run/puppet/puppetmaster.18140.pid
puppet 2866 0.0 0.5 37204 21260 ? Ssl 11:52 0:00 /usr/bin/ruby
/usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
--servertype=mongrel --logdest=/var/log/puppet/puppetmaster.log
--servertype=mongrel --masterport=18141
--pidfile=/var/run/puppet/puppetmaster.18141.pid
puppet 2884 0.0 0.5 37196 21256 ? Ssl 11:52 0:00 /usr/bin/ruby
/usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
--servertype=mongrel --logdest=/var/log/puppet/puppetmaster.log
--servertype=mongrel --masterport=18142
--pidfile=/var/run/puppet/puppetmaster.18142.pid
puppet 2902 0.0 0.5 37196 21260 ? Ssl 11:52 0:00 /usr/bin/ruby
/usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
--servertype=mongrel --logdest=/var/log/puppet/puppetmaster.log
--servertype=mongrel --masterport=18143
--pidfile=/var/run/puppet/puppetmaster.18143.pid
root 3042 0.0 0.0 3912 664 pts/0 R+ 12:07 0:00 grep puppet
(notice that only one server has used some cpu time, the first one).
Anyone could help me to find the main reason why puppet is behaving
lke this?
TIA,
Arnau
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---
