[Puppet Users] application installation and custom types

2009-04-22 Thread Benoit DECHERF
Hi, We are using puppet to deploy our application. On each server, we can have several instances of the application. For example: An application is a tomcat webapp. We can deploy the webapp on several tomcat instances, and we also can deploy the webapp several times on each tomcat (to have one ins

[Puppet Users] Re: puppet, openvz, hundreds of files, hundreds of sockets

2009-04-22 Thread Robin Sheat
On Thursday 23 April 2009 04:50:10 Justin B Newman wrote: > It appears that the client application opens a tcp socket for every > one of those files when it runs, as it computes the checksum. When it > hits 1024 sockets open, it is unable to open additional sockets. This I had exactly the same p

[Puppet Users] Re: Subscribe should override creates for exec resources?

2009-04-22 Thread Graham Stratton
On 22/04/2009, at 5:50 PM, Graham Stratton wrote: > On 22/04/2009, at 5:26 PM, Graham Stratton wrote: > >> I'm clearly missing something here. I thought that if I had a >> subscribe attribute on an exec resource, then that resource would run >> regardless on any creates/unless, but that is not wha

[Puppet Users] Syntax checking hook when using git?

2009-04-22 Thread Mark Plaksin
Hi: We want to switch our Puppet config repository from SVN to Git. Our SVN repository has a pre-commit hook that does a syntax check. If the check fails, the commit fails. With SVN that hook runs on the server so it's easy to have (the correct version of) the puppet binary there for the hook

[Puppet Users] Re: puppetd no longer doingautomatic runs after updating to 0.24.8

2009-04-22 Thread Robert Foreman
FYI: I ran into this exact same issue today. I upgraded before seeing/finding this thread. So it seems puppet for RHEL4 from EPEL is currently broke until they update Facter. On Tue, Apr 21, 2009 at 9:10 PM, Daniel Dekok wrote: > > Building a rpm of the facter 1.5.5rc1, using the EPEL 1.5.4 spec

[Puppet Users] Re: iptables anyone?

2009-04-22 Thread Peter Meier
Hi >> Have a look at http://github.com/camptocamp/puppet-iptables/tree/master >> It's work in progress (and currently stalled). It works for me on a >> dozen redhat 5.x hosts. > > I just started playing with this. It seems pretty convenient. One > question though, how do you ensure iptables is i

[Puppet Users] Re: iptables anyone?

2009-04-22 Thread seph
Marc Fournier writes: > Have a look at http://github.com/camptocamp/puppet-iptables/tree/master > It's work in progress (and currently stalled). It works for me on a > dozen redhat 5.x hosts. I just started playing with this. It seems pretty convenient. One question though, how do you ensure ip

[Puppet Users] Re: Puppet doesnt run

2009-04-22 Thread Avi Miller
manowar wrote: > facter (1.5.4) seems to run fine when it's called from the command > line on its own, and as mentioned called from cron does the job. Yes, those both work -- however, Facter as called by Puppet still hangs. It was pretty tricky to debug, but after being taught how to strace th

[Puppet Users] Re: Puppet doesnt run

2009-04-22 Thread manowar
Thanks Avi, facter (1.5.4) seems to run fine when it's called from the command line on its own, and as mentioned, puppetd --test called from cron does the job. But I'll give 1.5.5 RC1 a try and see if that helps. Stu --~--~-~--~~~---~--~~ You received this messa

[Puppet Users] puppet, openvz, hundreds of files, hundreds of sockets

2009-04-22 Thread Justin B Newman
Greetings! I have a puppet server and client, both running version 0.24.5. They are running atop debian/lenny, in openVZ containers. (As such, I can (and to some degree must) readily monitor tcp socket counts and buffer sizes). I have the following in a class file: file { "/usr/local/

[Puppet Users] Re: Useful Puppet/Facter CDP/cdpr hack

2009-04-22 Thread Brent Chapman
If by "auto provisioning", you mean automated configuration of your network devices (switches, routers, etc.), then you might be interested in our new open source tool, the Netomata Config Generator (NCG), just released to public beta last week. Here's the brief description from the tool's web pag

[Puppet Users] Re: Useful Puppet/Facter CDP/cdpr hack

2009-04-22 Thread Steven Nemetz
Thanks. This is a great idea and starting point for me to get this information added into our inventory for auto provisioning. Steven > -Original Message- > From: puppet-users@googlegroups.com [mailto:puppet-us...@googlegroups.com] > On Behalf Of Joel Krauska > Sent: Wednesday, April 22

[Puppet Users] Re: ssh_authorized_key completely ignoring "require"

2009-04-22 Thread seph
On Apr 22, 11:04 am, seph wrote: > I'm also seeing this. I'm not sure what --graph is an option to, not my > puppet. Ah, I found --graph. It's just not in the help files. If I don't have a user, then I get the aforementioned errors, and no graphs. If I create the user ahead of time, I get graph

[Puppet Users] Re: ssh_authorized_key completely ignoring "require"

2009-04-22 Thread seph
I'm also seeing this. I'm not sure what --graph is an option to, not my puppet. First, some version info. This is an ubuntu hardy machine with a current puppet: r...@mta-system:~# dpkg -s puppet | grep Vers Version: 0.24.8-1 r...@mta-system:~# dpkg -s facter | grep Vers Version: 1.5.1-0

[Puppet Users] Re: iptables anyone?

2009-04-22 Thread Marc Fournier
> About to start looking at managing iptables on our CentOS 5.2 systems, > anyone know if a type/solution already exists for this? Have a look at http://github.com/camptocamp/puppet-iptables/tree/master It's work in progress (and currently stalled). It works for me on a dozen redhat 5.x hosts.

[Puppet Users] Re: Exported Resources with keyword undef

2009-04-22 Thread Peter Meier
Hi > In this case, $contact_groups is not defined, so 'undef' allows you to > ignore this attribute. It work fine in nagios_service but in > @@nagios_service this attribute is put into the mysql database and > collected by the central server as if this attribute value is the > string "undef". >

[Puppet Users] Re: Subscribe should override creates for exec resources?

2009-04-22 Thread Robin Sheat
On Wednesday 22 April 2009 19:50:11 Graham Stratton wrote: > That's rather unfortunate for my use-case, though. I want an exec to > run until a file has been created or whenever a config file is > updated. But that's not quite perfect, so maybe this will force me to > fix things more! I had

[Puppet Users] Re: Puppet doesnt run

2009-04-22 Thread Avi Miller
On 22/04/2009, at 5:29 PM, manowar wrote: > Apologies if this is covered elsewhere. I've had a hunt through > Google, Redline, and the FAQs but dont see it. Actually, I sent an email about this yesterday: I think you are hitting the same Facter bug that I did with EL4. Essentially, Facter ha

[Puppet Users] Exported Resources with keyword undef

2009-04-22 Thread Mathieu Bornoz
Hello ! I'm using a lot of nagios_ commands in my puppet manifests and I saw a problem when using 'undef' in exported resources : Here is a simple example : define nagios::service::distributed ($ensure=present, $service_description, $host_name=false, $contact_groups=false) { nagios_service {

[Puppet Users] Denying unauthenticated client localhost(127.0.0.1) access to fileserver.list

2009-04-22 Thread florian.engelmann
Hello, we configured puppet with mongrel and apache as load balancer on a debian heartbeat2 cluster. puppetmasterd is running on both nodes and only the puppetmaster ip is switching. We start 10 mongrel servers and we load balance only to 127.0.0.1:18140 - 18149 not to the other clusternode. We use

[Puppet Users] Puppet doesnt run

2009-04-22 Thread manowar
Hi guys, Apologies if this is covered elsewhere. I've had a hunt through Google, Redline, and the FAQs but dont see it. Puppet 0.24.8 (and 24.7 on teh same box) starts up fine, but then just sits there, regardless of what I set runinterval to be. Puppet Server debug output stops at: debug: Cre

[Puppet Users] Re: Subscribe should override creates for exec resources?

2009-04-22 Thread Graham Stratton
On 22/04/2009, at 5:26 PM, Graham Stratton wrote: > > I'm clearly missing something here. I thought that if I had a > subscribe attribute on an exec resource, then that resource would run > regardless on any creates/unless, but that is not what I'm seeing. > > I created a minimal test, shown bel

[Puppet Users] Useful Puppet/Facter CDP/cdpr hack

2009-04-22 Thread Joel Krauska
(since I sent two complaints to the list just now, I feel the need to be constructive) If you use Cisco networking gear, you might be familiar with CDP. CDP is a Cisco proprietary protocol that issues packets from a Cisco switch to all attached devices. When you're on a Cisco device, you can de

[Puppet Users] Frequent stating of template files

2009-04-22 Thread Joel Krauska
Puppet-dev folks, I think I have found a bug in 0.24.4's puppetmasterd. I was tracing puppetmaster and found that it was running stat on my template files at a very significant rate. (in the many many hundreds of times/second ballpark). I realize it makes sense for the puppetmaster to look for

[Puppet Users] Subscribe should override creates for exec resources?

2009-04-22 Thread Graham Stratton
Hi all, I'm clearly missing something here. I thought that if I had a subscribe attribute on an exec resource, then that resource would run regardless on any creates/unless, but that is not what I'm seeing. I created a minimal test, shown below. As you can see: - The file 'trigger' was chan

[Puppet Users] Re: Should we really expect puppetd to die randomly? (Was: Puppet watching puppet)

2009-04-22 Thread Jean-Baptiste Quenot
2009/4/21 Luke Kanies : > And, for the record, I think this got a lot better in 0.24.8 (or maybe > 0.24.7?).  We found a few cases where errors could propagate far > enough to kill the client, and I think we've eradicated nearly all of > them. I'll try to switch to 0.24.8, as I'm using 0.24.4 ri

[Puppet Users] Re: Should we really expect puppetd to die randomly? (Was: Puppet watching puppet)

2009-04-22 Thread Joel Krauska
Luke, I was the guy who brought up puppet client fails last June at the SF meetup. The memory footprint of the puppetd client in idle mode (between triggers) was enough of a reason to dump the always-on client, but I also found that they crashed regularly whenever there was any difficulty contac