Re: [Puppet Users] Managing known_hosts

2010-03-12 Thread Todd Zullinger
Douglas Garstang wrote: >>> http://docs.reductivelabs.com/references/stable/type.html#sshkey > > WHat about known_hosts??? For /etc/ssh/ssh_known_hosts, using exported resources is quite handy: http://reductivelabs.com/trac/puppet/wiki/ExportedResources Something like: # Collect ssh keys and

[Puppet Users] inheriting ssh_authorized_key

2010-03-12 Thread Bob Belnap
Hello, I'm trying to reuse an ssh_authorized_key, but I'm having some problems. There was a recent thread about using the same key for different users, but I didn't see any resolution there. My issue is a bit different. I'm currently using this key: class ssh_keys::all { class bob {

Re: [Puppet Users] disable ssl

2010-03-12 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/03/10 2:58 PM, Christopher Johnston wrote: > Reason I am asking is I am having a bunch of SSL issues in production > right now, I need to disable SSL until I get things fixed. > You can't disable SSL as client/server relies on it. What are yo

Re: [Puppet Users] disable ssl

2010-03-12 Thread Christopher Johnston
Reason I am asking is I am having a bunch of SSL issues in production right now, I need to disable SSL until I get things fixed. On Fri, Mar 12, 2010 at 5:57 PM, Dan Bode wrote: > > > On Fri, Mar 12, 2010 at 2:53 PM, Christopher Johnston > wrote: > >> Is there a way to disable SSL all together

Re: [Puppet Users] disable ssl

2010-03-12 Thread Dan Bode
On Fri, Mar 12, 2010 at 2:53 PM, Christopher Johnston wrote: > Is there a way to disable SSL all together for testing? I would use the puppet executable for testing/evaluation. It removes the need to even have a server. > -Chris > > -- > You received this message because you are subscribed to

[Puppet Users] disable ssl

2010-03-12 Thread Christopher Johnston
Is there a way to disable SSL all together for testing? -Chris -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsub

Re: [Puppet Users] Managing known_hosts

2010-03-12 Thread Douglas Garstang
On Fri, Mar 12, 2010 at 10:47 AM, Douglas Garstang wrote: > Oh, yes, right... duh... thanks. > > Definitely better than append_if_no_such_line() which dumps the key to the > log. > > On Fri, Mar 12, 2010 at 9:54 AM, Peter Meier wrote: >> Hi >> >>> I have multiple modules that need to use ssh int

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Patrick
On Mar 12, 2010, at 3:30 AM, DieterVDW wrote: > The problem is, I -am- using apt! > Those files are downloaded and installed using apt, I just want puppet > to make sure they are owned by a certain user and group. > That's the only thing puppet needs to do. > I didn't read the bug report before

Re: [Puppet Users] Re: Exec doesn't work with Ubuntu Server 10.04 (Lucid Lynx) 64bit

2010-03-12 Thread Nigel Kersten
On Fri, Mar 12, 2010 at 12:55 PM, James Turnbull wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 13/03/10 7:34 AM, Nigel Kersten wrote: >> For those people following along at home on this issue, Lucas Nussbaum >> chased it up on behalf of Debian and has just gotten a patch uploaded

Re: [Puppet Users] Re: Exec doesn't work with Ubuntu Server 10.04 (Lucid Lynx) 64bit

2010-03-12 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/03/10 7:34 AM, Nigel Kersten wrote: > For those people following along at home on this issue, Lucas Nussbaum > chased it up on behalf of Debian and has just gotten a patch uploaded > to Debian that resolves this problem. > > http://redmine.ruby-

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Russ Allbery
Thomas Mueller writes: > Am Fri, 12 Mar 2010 03:30:59 -0800 schrieb DieterVDW: >> On Mar 12, 11:21 am, Patrick wrote: >>> Puppet doesn't handle a folder with lots of files well. It handles >>> large files even worse. The standard advice is "Try putting the files >>> in a package and distributi

Re: [Puppet Users] multiple environments different manifests not working: solved!

2010-03-12 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/03/10 2:11 AM, Hubert Krause wrote: > Hello list, > > Am Wednesday 10 March 2010 11:07:14 schrieb Hubert Krause: >> I was running Puppet server in version 0.24.8 on Srerver and 0.24.4 up to >> 0.24.8 on client and configured multiple environment

Re: [Puppet Users] (* Checking puppet managed servers for success *)

2010-03-12 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 13/03/10 1:58 AM, Ed Greenberg wrote: > Is there any centralized way to look at the puppetmaster server and see > (a) when did we last hear from each puppet managed machine and (b) were > there any errors (out on the managed machine) in the run? >

Re: [Puppet Users] Re: Exec doesn't work with Ubuntu Server 10.04 (Lucid Lynx) 64bit

2010-03-12 Thread Nigel Kersten
For those people following along at home on this issue, Lucas Nussbaum chased it up on behalf of Debian and has just gotten a patch uploaded to Debian that resolves this problem. http://redmine.ruby-lang.org/issues/show/2739 On Mon, Mar 1, 2010 at 8:44 AM, Nigel Kersten wrote: > On Mon, Mar 1,

Re: [Puppet Users] Managing known_hosts

2010-03-12 Thread Douglas Garstang
Oh, yes, right... duh... thanks. Definitely better than append_if_no_such_line() which dumps the key to the log. On Fri, Mar 12, 2010 at 9:54 AM, Peter Meier wrote: > Hi > >> I have multiple modules that need to use ssh into remote servers >> without being prompted for a password, and therefore

Re: [Puppet Users] Custom augeas schema question

2010-03-12 Thread James Cammarata
On Fri, 12 Mar 2010 11:59:01 -0600, James Cammarata wrote: > I've created a custom augeas schema to handle up2date sources, and I'm > using puppet to deploy it; followed by the use of augeas to add lines to > the /etc/sysconfig/rhn/sources file. I do have a requirement on all augeas > lines that

[Puppet Users] Custom augeas schema question

2010-03-12 Thread James Cammarata
I've created a custom augeas schema to handle up2date sources, and I'm using puppet to deploy it; followed by the use of augeas to add lines to the /etc/sysconfig/rhn/sources file. I do have a requirement on all augeas lines that the File["rhnsources.aug"] be deployed first, however I just notice

Re: [Puppet Users] Managing known_hosts

2010-03-12 Thread Peter Meier
Hi I have multiple modules that need to use ssh into remote servers without being prompted for a password, and therefore multiple places that I need to manage/add to a known_hosts file for. If I simply put a copy of known_hosts in the files/ directory of the module, and push it out, any other mo

[Puppet Users] Managing known_hosts

2010-03-12 Thread Douglas Garstang
Having an issue with appending ssh keys to the known_hosts file on systems. I have multiple modules that need to use ssh into remote servers without being prompted for a password, and therefore multiple places that I need to manage/add to a known_hosts file for. If I simply put a copy of known_hos

[Puppet Users] Re: Using Puppet for application deployment

2010-03-12 Thread Pete Emerson
Interesting, I'll read that paper, thanks. For our setup the version of software is exposed in the puppet_node_classifier which connects to a database. Additionally, the version of the configuration files and which puppet environment to use are available as well. To do an upgrade, I change the ver

[Puppet Users] Re: tidy -- ignoring sockets?

2010-03-12 Thread lschiere
I see this from ssh-agent socket files, in the 0.25.4 version, because it cannot back up files of type socket. This persists even though I have set backup => false, in the tidy block. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to t

Re: [Puppet Users] (* Checking puppet managed servers for success *)

2010-03-12 Thread Carl Caum
Look at The Foreman or Puppet Dashboard http://theforeman.org/ http://reductivelabs.com/2009/12/14/a-tour-of-puppet-dashboard-0-1-0/ On Mar 12, 2010, at 8:58 AM, Ed Greenberg wrote: > Is there any centralized way to look at the puppetmaster server and see (a) > when did we last hear from each p

[Puppet Users] (* Checking puppet managed servers for success *)

2010-03-12 Thread Ed Greenberg
Is there any centralized way to look at the puppetmaster server and see (a) when did we last hear from each puppet managed machine and (b) were there any errors (out on the managed machine) in the run? Thanks, -- You received this message because you are subscribed to the Google Groups "Puppe

Re: [Puppet Users] multiple environments different manifests not working: solved!

2010-03-12 Thread Hubert Krause
Hello list, Am Wednesday 10 March 2010 11:07:14 schrieb Hubert Krause: > I was running Puppet server in version 0.24.8 on Srerver and 0.24.4 up to > 0.24.8 on client and configured multiple environments. The desired behavior > is to have different sets of manifests and modules for my two > environ

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Brice Figureau
On Fri, 2010-03-12 at 06:18 -0800, DieterVDW wrote: > On Mar 12, 2:48 pm, Brice Figureau > wrote: > > Yes it is, because it happens in the "file serving" code as part of > > getting information about a given file. This part of the process doesn't > > know getting the checksum is unnecessary (in fa

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
On Mar 12, 2:48 pm, Brice Figureau wrote: > Yes it is, because it happens in the "file serving" code as part of > getting information about a given file. This part of the process doesn't > know getting the checksum is unnecessary (in fact this is the same code > that is used to serve file metadata

[Puppet Users]

2010-03-12 Thread Peter Meier
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Trevor Vaughan
You, sir, are a saint. On Fri, Mar 12, 2010 at 8:48 AM, Brice Figureau wrote: > On Fri, 2010-03-12 at 05:42 -0800, DieterVDW wrote: >> On Mar 12, 2:21 pm, Brice Figureau >> wrote: >> > It is checksumming every file. >> >> Aha. This is a known issue? > > At least to me :-) > >> Is there a bugrepo

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Brice Figureau
On Fri, 2010-03-12 at 05:42 -0800, DieterVDW wrote: > On Mar 12, 2:21 pm, Brice Figureau > wrote: > > It is checksumming every file. > > Aha. This is a known issue? At least to me :-) > Is there a bugreport for this? I think so: http://projects.reductivelabs.com/issues/3170 and http://projects

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
On Mar 12, 2:21 pm, Brice Figureau wrote: > It is checksumming every file. Aha. This is a known issue? Is there a bugreport for this? Possibly a patch? Is it normal no debug information is shown during this process? -- You received this message because you are subscribed to the Google Groups

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
Hi, I must admit I'd really like to like puppet, so I'm a bit agitated by this issue, and won't rest till I know the cause :) . Sorry for the information overload, hope you don't mind. First of all, I've followed Martin's suggestion and simplified my config. This is my configuration in it's entir

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Thomas Mueller
Am Fri, 12 Mar 2010 03:30:59 -0800 schrieb DieterVDW: > On Mar 12, 11:21 am, Patrick wrote: >> Puppet doesn't handle a folder with lots of files well. It handles >> large files even worse. The standard advice is "Try putting the files >> in a package and distributing them using apt." Another c

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Brice Figureau
On Fri, 2010-03-12 at 03:30 -0800, DieterVDW wrote: > On Mar 12, 11:21 am, Patrick wrote: > > Puppet doesn't handle a folder with lots of files well. It handles > large files even worse. The standard advice is "Try putting the files > in a package and distributing them using apt." Another commo

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Trevor Vaughan
Yep, you're right, seconds not minutes. That's what I get for answering e-mails pre-caffeine. Did you try spitting out a --debug to a file and then post-analyzing that? Trevor On Fri, Mar 12, 2010 at 7:55 AM, DieterVDW wrote: > Also, whatever Puppetd is doing then, it seems to be unnecessary.

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Martin Wheldon
Hi, Is this directory the only resource you are managing or are there others. If not then try disabling all other resources and see if you still get the same issue? Best Regards Martin Wheldon On Fri, Mar 12, 2010 at 12:55 PM, DieterVDW wrote: > Also, whatever Puppetd is doing then, it seems t

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
Also, whatever Puppetd is doing then, it seems to be unnecessary. If I execute puppetd -tv and wait until all files have been chown'd, and then hit CTRL-C and run puppetd again, the second time, puppetd finishes in about a minute. The total process of running puppetd twice takes about 4 minutes .

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
Aren't the time values in seconds? Because I can't match the "Total: 54.78" line to the "notice: Finished catalog run in 1877.06 seconds" . Also, the strange thing is that the actual changing of owner and group happens pretty fast. I see these messages passing during +- 20s for all files: notice:

Re: [Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread Trevor Vaughan
So, it looks like 30 minutes is being taken up in the Package type and 19 in the File type. The Package type probably won't eat up much CPU at all as it's just fetching and installing packages (unless they are some huge packages). You seem to be trying to recursively manage *something* using the

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
Some more information from the (undocumented) --summarize option I just discovered: Changes: Total: 4271 Resources: Applied: 4271 Out of sync: 2138 Scheduled: 4435 Total: 115 Time: Config retrieval: 1.36 Exec: 0.77 File: 19.23 Filebucket: 0.00 Host: 0.00 Package: 31.99 Schedule: 0.00 Service: 1.42

[Puppet Users] Re: Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
On Mar 12, 11:21 am, Patrick wrote: > Puppet doesn't handle a folder with lots of files well. It handles large > files even worse. The standard advice is "Try putting the files in a package > and distributing them using apt." Another common answer is to try combining > exec and rsync. I end

[Puppet Users] Re: Problems with service resource

2010-03-12 Thread Antonio Xanxess
Christian, thanks for the clarification. After analyzing the problem I have clear that the configuration I had in mind no sense either : D I've solved the problem, so the subject of debate for me is settled. Thank you very much! Greetings! -- You received this message because you are subscribed

[Puppet Users]

2010-03-12 Thread Peter Meier
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at

Re: [Puppet Users] Using Puppet for application deployment

2010-03-12 Thread Jesús Couto
I was asking about this months ago and was pointed to http://dev2ops.org/storage/downloads/FullyAutomatedProvisioning_Whitepaper.pdfas an example and explanation of why Puppet was not "good" for application deployment, better at being part of a stack of apps to achieve it. Not that I understand it

Re: [Puppet Users] Puppet 100% CPU usage

2010-03-12 Thread Peter Meier
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at

Re: [Puppet Users] Puppet 100% CPU usage

2010-03-12 Thread Patrick
On Mar 12, 2010, at 1:18 AM, DieterVDW wrote: > I just want this resource to make sure that all files in the directory > are owned by user and group $username. > /some/data/dir contains 300M in 6000+ files. > Puppet doesn't handle a folder with lots of files well. It handles large files even

[Puppet Users] Puppet 100% CPU usage

2010-03-12 Thread DieterVDW
Hi, I've been experimenting with Puppet for a few days now, and I really like it. But! I'm having real CPU usage problems. Puppet is still happily eating away 100% CPU for almost an hour at a time, with no apparent things happening. (puppetd -tv --trace --debug, but nothing appearing in the conso

[Puppet Users] Re: Problems with service resource

2010-03-12 Thread Antonio Xanxess
Sorry, i put ONLY the code here: custom_functions.pp: ... define superservice ( $initscript, $filecontrol ) { $modelo = modelo_suscribe("$filecontrol") package { $title: ensure => installed } service { $initscript: ensure => true, enable => true, sub

[Puppet Users] Re: Problems with service resource

2010-03-12 Thread Antonio Xanxess
Sorry, to copy the code has emerged a small error: custom_functions.pp: define superservice ($initscript, $filecontrol) { On 12 mar, 09:51, Antonio Xanxess wrote: > Hi Christian, thanks for the comment. I will explain more carefully > the case so all of the data. > My goal is to happen to sub

[Puppet Users] Re: Problems with service resource

2010-03-12 Thread Antonio Xanxess
Hi Christian, thanks for the comment. I will explain more carefully the case so all of the data. My goal is to happen to subscribe clause with a variable proper syntax, because the resource service I have defined as a function. For my needs I created a specific function, make the process of generat