Re: [Puppet Users] Re: RFC: Refactoring the mount provider.

+1 for using one resource type with different parameters. On 04/19/2011 10:22 PM, Forrie wrote: > +1 here for this. > > Having said that, I think mingling the setting in there with the two > basic types would be essential to keep this simple. All the heavy > lifting should go on automatically

Re: [Puppet Users] Puppetmaster best practice for multiple zones

On 20 April 2011 01:49, James Bailey wrote: > Hello, > > sorry if this is a stupid question but I currently have inherited > three "security zones" LAN, DMZ and PROD. I currently have Puppet and > Foreman running in the LAN zone on a host called puppet-lan and I am > starting to manage the LAN ba

Re: [Puppet Users] "Listing" the keys in a hash as an array

On Wed, Apr 20, 2011 at 7:46 AM, Miki Shapiro wrote: > Thanks guys > > I ended up breaking up what Felix&Ohad suggested into two lines to make it > work: > $keycsv= inline_template("<%= netifcfg.keys.join(',') %>") > $keys = split ($keycsv,',') > Yep, it's a 'hack' (sorry, Ohad, w

[Puppet Users] Re: is it possible to take definition parameters from a database?

> for every $p1 and $p2 in valueTable in mypuppetDB: >    apache:addvhost {"abc$p1$p2": param1=>$p1, param2=>$p2} I corrected the title as abc$p1$p2 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us

Re: [Puppet Users] Puppetmaster best practice for multiple zones

Am 19.04.2011 18:13, schrieb James Bailey: > I am bit stuck however for how best I can managed the remaining two > zones. Do create another two puppetmasters and configure them to use > the existing storeconfigs DB I am currently using. Or do I have two > additional standalone puppetmasters? If

Re: [Puppet Users] "Listing" the keys in a hash as an array

Thanks guys I ended up breaking up what Felix&Ohad suggested into two lines to make it work: $keycsv= inline_template("<%= netifcfg.keys.join(',') %>") $keys = split ($keycsv,',') Yep, it's a 'hack' (sorry, Ohad, workaround ;)), but it saves me having to add puppet functions into

Re: [Puppet Users] "Listing" the keys in a hash as an array

On Tue, Apr 19, 2011 at 8:08 PM, Nigel Kersten wrote: > On Tue, Apr 19, 2011 at 6:28 PM, Miki Shapiro wrote: > >> $keys = split(",", inline_template("<%= netifcfg.keys.join(',') %>")) > > Honestly, I'd put this together as a Puppet function at this point, as > that's just resulting in something r

Re: [Puppet Users] "Listing" the keys in a hash as an array

On Tue, Apr 19, 2011 at 6:28 PM, Miki Shapiro wrote: > $keys = split(",", inline_template("<%= netifcfg.keys.join(',') %>")) Honestly, I'd put this together as a Puppet function at this point, as that's just resulting in something rather unmaintainable. http://docs.puppetlabs.com/guides/custom_

Re: [Puppet Users] Re: What to do if something is not required on the clients?

On Tue, Apr 19, 2011 at 9:31 PM, Ian Mortimer wrote: > On Wed, 2011-04-20 at 07:37 +1000, Sans wrote: > > > if I know that I definitely don't want httpd to > > be installed on the system at the first place, then why should I care > > about all the packages (maybe installed by default) that need h

Re: [Puppet Users] RFC: Refactoring the mount provider.

On 23 March 2011 10:21, Nigel Kersten wrote: > On Tue, Mar 22, 2011 at 4:05 PM, Stefan Schulte > wrote: > > > So splitting the mounttype can lead to better reports when puppet sync > > mountpoint and entry in fstab seperatly. Because I'm lazy I'll propably > > write a define (maybe I will call i

Re: [Puppet Users] Re: What to do if something is not required on the clients?

On Wed, 2011-04-20 at 07:37 +1000, Sans wrote: > if I know that I definitely don't want httpd to > be installed on the system at the first place, then why should I care > about all the packages (maybe installed by default) that need httpd - What happens if an update of a required package introduc

Re: [Puppet Users] "Listing" the keys in a hash as an array

I must be doing something wrong... As suggested by Ohad: Manifest says: $keys = inline_template("<%= netifcfg.keys %>") exec { "/bin/echo keys are $keys and netifcfg is $netifcfg": logoutput => true } Output says: notice: /Stage[main]/Base::Network-common/Exec[/bin/echo keys are bond0bond1 and n

Re: [Puppet Users] randomize minute

I end up doing this: http://projects.puppetlabs.com/projects/1/wiki/Writing_Your_Own_Functions and works well, I was hoping not to have to write a function, but then realized I need to get node's facter ipaddress, add the 4 of the octet and a % 60 and we are set :-) but thanks for the tip, add

Re: [Puppet Users] "Listing" the keys in a hash as an array

I must be doing something wrong... As suggested by Ohad: Manifest says: $keys = inline_template("<%= netifcfg.keys %>") exec { "/bin/echo keys are $keys and netifcfg is $netifcfg": logoutput => true } Output says: notice: /Stage[main]/Base::Network-common/Exec[/bin/echo keys are bond0bond1 and n

Re: [Puppet Users] Handling unmanaged resources and their files/configs

On Tue, Apr 19, 2011 at 11:38:35AM -0700, Forrie wrote: > Is there a simple way to remove the unmanaged data so we can keep > the systems clean. Setting the resource to ensure => absent will remove them. Or are you after something more? -- Ben Hughes || http://www.puppetlabs.com/ -- You recei

Re: [Puppet Users] is there a definition of the abstract service type

On Tue, Apr 19, 2011 at 04:24:18AM -0700, Tim Coote wrote: > Is there a canonical definition of the service type abstraction, or is > the definition just how the implementation behaves? What happens when you do: $ puppet resource service xinetd That should hopefully give you the output for that

Re: [Puppet Users] randomize minute

Luc Suryo said: > Hello > > I.m trying to get a 'static random' base on a node's ip address and > use that number as the minute for a crontab > so each node will get a number between and 59 > > The things is the number is generated by the puppet master and so all > node get the same value... > >

[Puppet Users] randomize minute

Hello I.m trying to get a 'static random' base on a node's ip address and use that number as the minute for a crontab so each node will get a number between and 59 The things is the number is generated by the puppet master and so all node get the same value... my current code : random_minute =

Re: [Puppet Users] Re: Inventory service and dashboard 1.1.0 rc1

On Tue, Apr 19, 2011 at 12:32 PM, Prateep wrote: > Forget that. I discovered that there were remnants of the old puppet > version still installed on my master after upgrade. > > Working fine now! > > > On Apr 19, 4:27 pm, Prateep wrote: > > Hi, > > > > I'm seeing exactly the same problem. I ha

Re: [Puppet Users] Script to find potential puppet clients

On Tue, Apr 19, 2011 at 5:44 PM, Corey Osman wrote: > Has anybody written a script that will scan the network to find systems not > running puppet and ultimately send an email with the findings? > > > > > > I was thinking I can do this by just scanning for port 8141 or is it 8139? > This would

Re: [Puppet Users] Script to find potential puppet clients

How about scan the network and collect IPs that are UP... then check puppets facts db for missing IPs ? On Tue, Apr 19, 2011 at 5:44 PM, Corey Osman wrote: > Has anybody written a script that will scan the network to find systems not > running puppet and ultimately send an email with the finding

[Puppet Users] Puppet environment can't be used in extlookup (precedence)

Anyone able to explain why "$fqdn" works and "$environment" doesn't in: $extlookup_precedence=["%{fqdn}","%{environment}","common"] How to reproduce it: - - In "/etc/puppet/manifests/site.pp" : $extlookup_datadir = "/etc/puppet/manifests/extdata" $extlookup_precedenc

Re: [Puppet Users] does puppet allow to a client specify a value in a configuration file?

Hi, Well depending on what you're trying to do exactly there are some ways to get around it. But this comes back to the essence of puppet, it is not just a deployment tool but it is used to describe and assert the configuration state you want on your node. A file that is volatile to wanted cha

[Puppet Users] Re: Installing port on FreeBSD

One last somewhat unrelated question, but one that might help someone with a similar setup: How do I ensure that nss_ldap is installed only after 'sudo', as otherwise, installing nss_ldap from ports would trigger the openldap and sudo packages, which I don't want. "require => Package['port-sudo']

[Puppet Users] Re: Installing port on FreeBSD

One last somewhat unrelated question, but one that might help someone with a similar setup: How do I ensure that nss_ldap is installed only after 'sudo', as otherwise, installing nss_ldap from ports would trigger the openldap and sudo packages, which I don't want. "require => Package['port-sudo']

[Puppet Users] Re: Installing port on FreeBSD

One last somewhat unrelated question, but one that might help someone with a similar setup: How do I ensure that nss_ldap is installed only after 'sudo', as otherwise, installing nss_ldap from ports would trigger the openldap and sudo packages, which I don't want. "require => Package['port-sudo']

[Puppet Users] Re: Installing port on FreeBSD

One last somewhat unrelated question, but one that might help someone with a similar setup: How do I ensure that nss_ldap is installed only after 'sudo', as otherwise, installing nss_ldap from ports would trigger the openldap and sudo packages, which I don't want. "require => Package['port-sudo']

[Puppet Users] Script to find potential puppet clients

Has anybody written a script that will scan the network to find systems not running puppet and ultimately send an email with the findings? I was thinking I can do this by just scanning for port 8141 or is it 8139? This would assume listen=true is setup on all the existing clients though. I

[Puppet Users] Re: What to do if something is not required on the clients?

On Apr 19, 2:48 pm, jcbollinger wrote: > > > If I understand you correctly, how do one know about the packages that > > depend on a certain package? > > Well that's part of a deeper problem, isn't it?  If you don't know > what packages you might end up removing or why they're installed in > the fi

[Puppet Users] does puppet allow to a client specify a value in a configuration file?

hi everybody, In the server side we define a template for a configuration file. Our client pulls configuration file from the server without knowing any template is used or not, it just takes the catalog and puts the changes to the file. However, if a client wants to add an extra value to its confi

[Puppet Users] is it possible to take definition parameters from a database?

hello everybody, I really wonder that can we use a database for our definition calls. assume that we have a definition which is used for adding virtual hosts to apache configuration file like below: apache:addvhost {"abc": param1=>value1, param2=>value2} There may be thousands of lines like abov

[Puppet Users] Re: RFC: Refactoring the mount provider.

+1 here for this. Having said that, I think mingling the setting in there with the two basic types would be essential to keep this simple. All the heavy lifting should go on automatically in the background. A sysadmin should only have to change the mount to "rw" or "ro" and have Puppet do the

Re: [Puppet Users] How do you implement "revert changes'

Thanks Felix But how is Filebucket currently used? Is there a "puppet agent --restore" functionality that I missed? On Tue, Apr 19, 2011 at 3:20 AM, Felix Frank wrote: > On 04/18/2011 11:22 PM, Mohamed Lrhazi wrote: >> I forgot to think about a little detail, while introducing Puppet to >> o

[Puppet Users] Handling unmanaged resources and their files/configs

We have resources that, from time to time, are selected to be removed (unmanaged). When it comes to ssh keys, fstab... this leaves a lot of stuff behind that we don't want. Is there a simple way to remove the unmanaged data so we can keep the systems clean. Thanks. -- You received this messa

Re: [Puppet Users] editing property files

Property files are pretty common in Java land. They are a key/value store. Formatted as key=value with optional #comment lines. Yes, probably like a .plist file. I've done some iOS programming... seem to remember that, but mostly use XCode which hides the underlying file format pretty well. David

Re: [Puppet Users] editing property files

On Apr 18, 2011, at 6:08 AM, David Kavanagh wrote: > I assumed this would be simple. I thought about using augeas, but don't want > to pull that in if I don't really need it. Is there a built-in resource that > I could use to edit property files that I'm missing? > Thanks, > David What's a pro

Re: [Puppet Users] Re: svn update on puppetmaster via commit hook on another server

- Original Message - > > I have a similar issue. I simply run a cronjob on the master every 5 > minutes to do the svn update. I do this with mcollective. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send em

[Puppet Users] Re: svn update on puppetmaster via commit hook on another server

I have a similar issue. I simply run a cronjob on the master every 5 minutes to do the svn update. On Apr 19, 3:36 pm, Andreas Paul wrote: > Hello there, > > I'm trying to get SVN working with puppet, but what I need to do is a remote > svn update on the puppetmaster server, so that puppet us

[Puppet Users] Re: Inventory service and dashboard 1.1.0 rc1

Forget that. I discovered that there were remnants of the old puppet version still installed on my master after upgrade. Working fine now! On Apr 19, 4:27 pm, Prateep wrote: > Hi, > > I'm seeing exactly the same problem.  I have 2.6.7 on both the master > and client.  Any ideas? > > Prateep >

[Puppet Users] Puppetmaster best practice for multiple zones

Hello, sorry if this is a stupid question but I currently have inherited three "security zones" LAN, DMZ and PROD. I currently have Puppet and Foreman running in the LAN zone on a host called puppet-lan and I am starting to manage the LAN based systems with them. I am bit stuck however for how be

[Puppet Users] Puppetmaster best practice for multiple zones

Hello, sorry if this is a stupid question but I currently have inherited three "security zones" LAN, DMZ and PROD. I currently have Puppet and Foreman running in the LAN zone on a host called puppet-lan and I am starting to manage the LAN based systems with them. I am bit stuck however for how be

Re: [Puppet Users] Puppet Crashing, libldap error?

Ok, for what its worth, I think I solved this a while back.. but I ran into it again the other day, and couldn't remember the fix. I found this thread again while searching around — so I figure I should update it so that everyone knows what went wrong. We are using not only local files, and LD

Re: [Puppet Users] Re: What to do if something is not required on the clients?

On Tue, Apr 19, 2011 at 7:46 AM, jcbollinger wrote > > > On Apr 19, 8:26 am, Felix Frank > wrote: >> On 04/19/2011 03:18 PM, jcbollinger wrote: > > [...] > >> > The bottom line as far as our discussion goes, however, is that it is >> > *intentional* that the yum Package provider fails to remove p

[Puppet Users] Re: How to create multi-option yum repo file?

On Apr 18, 7:03 pm, Sans wrote: > On Apr 18, 6:11 pm, jcbollinger wrote: [...] > > If the file exists before the Puppet run, then Puppet will not split > > it up, but when Puppet creates a new repo definition it always goes > > into its own file.  You could, however, concatenate the resulting >

[Puppet Users] Re: What to do if something is not required on the clients?

On Apr 19, 8:26 am, Felix Frank wrote: > On 04/19/2011 03:18 PM, jcbollinger wrote: [...] > > The bottom line as far as our discussion goes, however, is that it is > > *intentional* that the yum Package provider fails to remove packages > > on which other installed packages depend, and that th

[Puppet Users] Re: Inventory service and dashboard 1.1.0 rc1

Hi, I'm seeing exactly the same problem. I have 2.6.7 on both the master and client. Any ideas? Prateep On Mar 18, 6:48 pm, Jacob Helwig wrote: > On Thu, 17 Mar 2011 21:32:29 -0700, Luke Baker wrote: > > > I just set up the latest dashboard release candidate in hopes of > > trying out the ne

[Puppet Users] Re: What to do if something is not required on the clients?

On Apr 19, 6:08 am, Sans wrote: > On Apr 18, 2:22 pm, jcbollinger wrote:> [ . ] > > > 1) The dependent package is managed by Puppet.  In this case, you must > > ensure it absent too, else you cannot achieve a consistent > > configuration.  You will either get Puppet failures or flip-flops >

[Puppet Users] svn update on puppetmaster via commit hook on another server

Hello there, I'm trying to get SVN working with puppet, but what I need to do is a remote svn update on the puppetmaster server, so that puppet uses the latest configuration. The puppetlabs wiki page uses a simple svn update /etc/puppet in the post-commit hook script, but that implies that the

Re: [Puppet Users] Re: What to do if something is not required on the clients?

On 04/19/2011 03:18 PM, jcbollinger wrote: > > > On Apr 18, 8:57 pm, Ian Mortimer wrote: >> On Mon, 2011-04-18 at 23:22 +1000, jcbollinger wrote: >>> (I am fairly sure that >>> this is why the yum Package provider uses "rpm -e" instead of "yum >>> remove" in the first place.) >> >> Except that

[Puppet Users] Re: What to do if something is not required on the clients?

On Apr 18, 8:57 pm, Ian Mortimer wrote: > On Mon, 2011-04-18 at 23:22 +1000, jcbollinger wrote: > > (I am fairly sure that > > this is why the yum Package provider uses "rpm -e" instead of "yum > > remove" in the first place.)   > > Except that installing or removing packages with rpm is now dep

Re: [Puppet Users] Certificate request does not match existing certificate

Am Mon, 18 Apr 2011 14:28:57 -0700 schrieb Sylvain: > Hello there, > > I have a problem while I'm trying to puppetize a client, I get this > error: > err: Could not request certificate: Certificate retrieval failed: > Certificate request does not match existing certificate; run 'puppetca > --clea

[Puppet Users] is there a definition of the abstract service type

Hullo I'm a puppet neophyte and I'm a bit confused about the service type. I've just run up the learning vm and when I try: puppet resource service I don't seem to get any of the services controlled by xinetd, nor even xinetd itself. This doesn't sound right to me as it will cause future issues

Re: [Puppet Users] [SOLVED] Bake custom function in order to heck for a files existence (on the puppetmaster)

I was using the wrong path so the function seems to work as expected :) On 04/19/2011 10:06 AM Jan wrote: > Hi guys, > > I just try to cook up some ruby code to check for a files existence on the > puppetmaster. I tried to bake a custom function in order to be able to use > it in connection with

[Puppet Users] Re: What to do if something is not required on the clients?

On Apr 18, 2:22 pm, jcbollinger wrote: > [ . ] > > 1) The dependent package is managed by Puppet.  In this case, you must > ensure it absent too, else you cannot achieve a consistent > configuration.  You will either get Puppet failures or flip-flops > between whether httpd is installed or n

[Puppet Users] Puppet apply with ENC and storeconfigs

I'm probably doing something wrong, but please sanity check this. I'm trying to use "puppet apply" locally on my Puppetmasters. They have storeconfigs configured in the [main] section, as well as the ENC config set up in [main]. When puppet apply is run in this way, I can see storeconfigs being ac

Re: [Puppet Users] "Listing" the keys in a hash as an array

On 04/19/2011 09:09 AM, Ohad Levy wrote: > > > On Tue, Apr 19, 2011 at 8:42 AM, Miki Shapiro > wrote: > > clunky and could probably be written better. > > My 2 questions are: > 1. Can I somehow get a list of keys from the hash itself (a list > tha

Re: [Puppet Users] Could not find dependency Package[] for Package

> class audio-video { > # In this example we are not being picky about ordering of > installation of libxine1-ffmpeg > $packagelist = ["vlc", "amarok", "libxine1-ffmpeg"] > > package { $packagelist: > ensure => installed, > } > } > > Although it is not operationally important I prefer

RE: [Puppet Users] Dependencies between nodes

> -Original Message- > From: puppet-users@googlegroups.com > [mailto:puppet-users@googlegroups.com] On Behalf Of Michael.Lausch > Sent: 17 April 2011 09:56 > To: Puppet Users > Subject: [Puppet Users] Dependencies between nodes > > Hi, > I'm just getting my feet wet with puppet and I want

Re: [Puppet Users] Re: Deleted zypper repo not re-created on subsequent puppetd runs

Hi, That seems ok, but I'm still not seeing anything from zypprepo in the debug output which leads me to think it's being included for some reason. I just tried removing the repos on SLED and SLES test systems and the repo files were recreated without any intervention. I'm wondering about your

[Puppet Users] Re: Deleted zypper repo not re-created on subsequent puppetd runs

Apologies. It's working now but I'm not sure why. I created a new repository module init.pp from scratch, walking through examples again and it's working correctly. Diff between the 2 init.pp files I can't see anything. Maybe in some small way this may help others with general troubleshooting. Mi

[Puppet Users] Re: Deleted zypper repo not re-created on subsequent puppetd runs

I think this should fill in the blanks. Because this is a test environment I've stripped down the config to what I believe to be close to minimum. PUPPETMASTER: # puppet --version 2.6.5 /etc/puppet/puppet.conf: # The configuration file for master. # The default

[Puppet Users] Bake custom function in order to heck for a files existence (on the puppetmaster)

Hi guys, I just try to cook up some ruby code to check for a files existence on the puppetmaster. I tried to bake a custom function in order to be able to use it in connection with an if statement in my manifests. I've read the page about how to write custom functions .. http://projects.puppetla

Re: [Puppet Users] Re: What to do if something is not required on the clients?

On 04/19/2011 03:57 AM, Ian Mortimer wrote: > On Mon, 2011-04-18 at 23:22 +1000, jcbollinger wrote: > >> (I am fairly sure that >> this is why the yum Package provider uses "rpm -e" instead of "yum >> remove" in the first place.) > > Except that installing or removing packages with rpm is now d

Re: [Puppet Users] Certificate request does not match existing certificate

On 04/18/2011 11:44 PM, Sylvain wrote: > Hello there, > > I have a problem while I'm trying to puppetize a client, I get this > error: > err: Could not request certificate: Certificate retrieval failed: > Certificate request does not match existing certificate; run > 'puppetca > --clean puppetclie

Re: [Puppet Users] "Listing" the keys in a hash as an array

On Tue, Apr 19, 2011 at 8:42 AM, Miki Shapiro wrote: > clunky and could probably be written better. > > My 2 questions are: > 1. Can I somehow get a list of keys from the hash itself (a list that will > behave like an array that I can feed into a defined type) instead of > "manually" defining $a

Re: [Puppet Users] How do you implement "revert changes'

On 04/18/2011 11:22 PM, Mohamed Lrhazi wrote: > I forgot to think about a little detail, while introducing Puppet to > our environment :) > > For each change to production systems, one has to submit a script > detailing what changes will be made and how to revert them back.. I > was wondering if a

Re: [Puppet Users] editing property files

On 04/18/2011 10:55 PM, Denmat wrote: > Hi, > > Don't think so. You can use Augeas for editing config files in place, > templates for adding in values on the fly or source files for direct > copies. > > I don't know of others but someone else on the list might know cooler > tricks. > > Cheers,