hello list
I am having a strange occurrence where I can run puppet on a client
successfully and have it install httpd and php and a few other
packages. The first run everything goes ok and everything installs
perfectly the first run. But if I delete the packages (using yum
remove foo) and run puppet again I get gpg key errors and the packages
fail to install.
## puppet errors
err: /Stage[main]/Apache/Package[php-mcrypt.i386]/ensure: change from
absent to present failed: Execution of '/usr/bin/yum -d 0 -e 0 -y
install php-mcrypt.i386' returned 1: warning: rpmts_HdrFromFdno:
Header V3 DSA signature: NOKEY, key ID cf4c4ff9
Public key for php-mcrypt-5.2.17-1.1.w5.i386.rpm is not installed
err: /Stage[main]/Apache/Package[php-pear.noarch]/ensure: change from
absent to present failed: Execution of '/usr/bin/yum -d 0 -e 0 -y
install php-pear.noarch' returned 1: warning: rpmts_HdrFromFdno:
Header V3 DSA signature: NOKEY, key ID cf4c4ff9
Public key for php-pear-1.9.2-1.w5.noarch.rpm is not installed
err: /Stage[main]/Apache/Package[php-soap.i386]/ensure: change from
absent to present failed: Execution of '/usr/bin/yum -d 0 -e 0 -y
install php-soap.i386' returned 1: warning: rpmts_HdrFromFdno: Header
V3 DSA signature: NOKEY, key ID cf4c4ff9
Public key for php-soap-5.2.17-1.1.w5.i386.rpm is not installed
err: /Stage[main]/Baseapps/Package[keychain]/ensure: change from
absent to present failed: Could not find package keychain
err: /Stage[main]/Apache/Package[php.i386]/ensure: change from absent
to present failed: Execution of '/usr/bin/yum -d 0 -e 0 -y install
php.i386' returned 1: warning: rpmts_HdrFromFdno: Header V3 DSA
signature: NOKEY, key ID cf4c4ff9
here is my apache class manifest
class apache {
$packagelist =
["httpd.$architecture","httpd-devel.$architecture","webalizer.$architecture","php.$architecture","php-common.$architecture","php-devel.$architecture","php-xmlrpc.$architecture","php-gd.$architecture",
"php-pear.noarch", "php-pdo.$architecture",
"php-mcrypt.$architecture", "php-mhash", "php-mysql.$architecture",
"php-cli.$architecture", "php-soap.$architecture",
"php-xml.$architecture"]
package { $packagelist:
ensure => "installed"
}
package {
"mod_ssl.$architecture":
require => Package["httpd.$architecture"],
ensure => "installed"
}
exec {
"create httpd dir"
:
command => "/bin/mkdir -p /etc/httpd"
,
creates => "/etc/httpd"
;
"create apache module dir":
command => "/bin/mkdir -p /usr/lib/httpd/modules"
,
creates => "/usr/lib/httpd/modules/mod_file_cache.so"
;
"create apache module link"
:
command => "/bin/ln -s /usr/lib/httpd/modules /etc/httpd/modules"
,
require => Exec["create apache module dir"]
,
creates => "/etc/httpd/modules"
;
"create apache log dir"
:
command => "/bin/mkdir -p /var/log/httpd/logs"
,
creates => "/var/log/httpd/logs"
;
"create apache error log"
:
command => "/bin/touch /etc/httpd/logs/error_log"
,
require => Exec["create apache log dir"]
,
creates => "/etc/httpd/logs/error_log"
;
"create apache log link"
:
command => "/bin/ln -s /var/log/httpd/logs /etc/httpd/logs"
,
require => Exec["create apache log dir"]
,
creates => "/etc/httpd/logs"
;
"create apache run dir"
:
command => "/bin/mkdir -p /var/run/httpd"
,
creates => "/var/run/httpd"
;
"create apache run link"
:
command => "/bin/ln -s /var/run/httpd /etc/httpd/run"
,
require => Exec["create apache log dir"]
,
creates => "/etc/httpd/run"
;
"create httpd conf dir"
:
command => "/bin/mkdir -p /etc/httpd/conf"
,
creates => "/etc/httpd/conf"
;
"create httpd vhost conf dir"
:
command => "/bin/mkdir -p /etc/httpd/conf.d"
,
creates => "/etc/httpd/conf.d"
;
"create chrome docroot"
:
command => "/bin/mkdir -p /var/www/chrome/current"
,
creates => "/var/www/chrome/current"
;
"create ssl cert dir"
:
command => "/bin/mmkdir -p /etc/pki/tls/certs/"
,
creates => "/etc/pki/tls/certs/"
;
"create ssl key dir"
:
command => "/etc/pki/tls/private"
,
creates => "/etc/pki/tls/private"
;
}
tidy {
"/etc/httpd/conf.d/ssl.conf"
:
age => '0s'
,
}
file {
"/etc/php.ini"
:
owner => root
,
group => root
,
mode => 440
,
source => "puppet:///modules/apache/php.ini"
;
"/etc/pki/tls/certs/www.chromebagsstore.com.crt"
:
owner => root
,
group => root
,
mode => 644
,
require => Exec["create ssl cert dir"]
,
source => "puppet:///modules/apache/krome/cert.txt"
;
"/etc/pki/tls/private/www.chromebagsstore.com.key"
:
owner => root
,
group => root
,
mode => 440
,
require => Exec["create ssl key dir"]
,
source => "puppet:///modules/apache/krome/key.txt"
;
"/usr/lib/httpd/modules/mod_file_cache.so"
:
owner => root
,
group => root
,
mode => 766
,
require => Exec["create apache module dir"]
,
source =>
"puppet:///modules/apache/krome/httpd/modules/mod_file_cache.so"
;
"/etc/httpd/conf/httpd.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => Exec["create httpd conf dir"]
,
source => "puppet:///modules/apache/krome/httpd/conf/httpd.conf"
;
"/usr/lib/httpd/modules/mod_auth_basic.so"
:
owner => root
,
group => root
,
mode => 766
,
source =>
"puppet:///modules/apache/krome/httpd/modules/mod_auth_basic.so"
;
"/etc/httpd/conf.d/000-ssl.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => Exec["create httpd conf dir"]
,
source => "puppet:///modules/apache/krome/httpd/conf.d/000-ssl.conf"
;
"/etc/httpd/conf.d/001-chrome-ssl.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => [ Tidy[ "/etc/httpd/conf.d/ssl.conf" ],
Exec["create httpd conf dir"]]
,
source =>
"puppet:///modules/apache/krome/httpd/conf.d/001-chrome-ssl.conf"
;
"/etc/httpd/conf.d/002-chrome.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => [ Tidy[ "/etc/httpd/conf.d/ssl.conf" ],
Exec["create httpd conf dir"]]
,
source =>
"puppet:///modules/apache/krome/httpd/conf.d/002-chrome.conf"
;
"/etc/httpd/conf.d/php.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => [ File[ "/etc/php.ini" ], Exec["create httpd conf dir"]]
,
source => "puppet:///modules/apache/krome/httpd/conf.d/php.conf"
;
"/etc/httpd/conf.d/proxy_ajp.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => Exec["create httpd conf dir"]
,
source => "puppet:///modules/apache/krome/httpd/conf.d/proxy_ajp.conf"
;
"/etc/httpd/conf.d/welcome.conf"
:
owner => root
,
group => root
,
mode => 440
,
require => Exec["create httpd conf dir"]
,
source => "puppet:///modules/apache/krome/httpd/conf.d/welcome.conf"
;
}
$requires = [ Exec["create httpd dir"], Exec["create apache module
dir"], Exec["create apache module link"], Exec["create apache log
dir"], Exec ["create apache error log"], Exec ["create apache log
link"], Exec ["create apache run dir"], Exec["create apache run
link"], Exec["create apache run dir"], Exec["create apache run link"],
Exec["create httpd conf dir"], Exec["create httpd vhost conf dir"],
Exec["create chrome docroot"], File["/etc/php.ini"],
File["/usr/lib/httpd/modules/mod_file_cache.so"],
File["/etc/httpd/conf/httpd.conf"],
File["/usr/lib/httpd/modules/mod_auth_basic.so"],
Tidy["/etc/httpd/conf.d/ssl.conf"],
File["/etc/httpd/conf.d/000-ssl.conf"],
File["/etc/httpd/conf.d/002-chrome.conf"],
File["/etc/httpd/conf.d/php.conf"],
File["/etc/httpd/conf.d/proxy_ajp.conf"],
File["/etc/httpd/conf.d/welcome.conf"],
Package["httpd.$architecture"]]
service { "httpd":
enable => "true",
ensure => "running",
hasrestart => "true",
hasstatus => "true",
require => $requires
}
}
Has anyone ever seen a situation like this?
thanks in advance!
--
GPG me!!
gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
