Re: [Puppet Users] high-level module organization

2012-03-20 Thread Walter Heck
We usually create separate modules for those things anyway, they are just really small. What might be a single package {'blah': ensure => present} now, might grow into something bigger later. We stick to that paradigm even for things where we know chances are near 0 that that will ever happen. Sli

Re: [Puppet Users] Suggestion - puppet preload stage?

2012-03-20 Thread Gary Larizza
On Wed, Mar 21, 2012 at 1:11 PM, Amos Shapira wrote: > Hello, > > I encounter issues regarding puppet "self update" that I'm sure are > not uncommon: > 1. When puppet version updates it doesn't restart to run the rest of > the manifest with the new version. > 2. When a new provider is installed (o

[Puppet Users] Suggestion - puppet preload stage?

2012-03-20 Thread Amos Shapira
Hello, I encounter issues regarding puppet "self update" that I'm sure are not uncommon: 1. When puppet version updates it doesn't restart to run the rest of the manifest with the new version. 2. When a new provider is installed (or extra configuration is done to enable an existing provider), pupp

Re: [Puppet Users] More complicated user management?

2012-03-20 Thread Robin Lee Powell
On Tue, Mar 20, 2012 at 01:27:45AM -0700, Robin Lee Powell wrote: > > I feel like this should be way easier than it seems to be. -_- > > Let's say I have users alice, bob, carol, ... > > Different users get added on different servers. > > On all servers, any users *not* selected should be remo

Re: [Puppet Users] ENC with Hiera

2012-03-20 Thread Gary Larizza
On Tue, Mar 20, 2012 at 9:44 PM, Pablo Fernandez wrote: > ** > > Thanks, > > > > Yes, I was thinking about something like: > > > > :hierarchy: > > - %{fqdn} > > - %{secundary_group} > > - %{primary_group} > > - %{productname} > > - all > > > > So, each machine goes and picks up the information fro

Re: [Puppet Users] Simple hiera-puppet usage

2012-03-20 Thread Gary Larizza
On Tue, Mar 20, 2012 at 9:32 PM, Pablo Fernandez wrote: > ** > > Thanks for the hint! > > > > Let me ask you a couple of questions: > > - Does the "puppetbackend::data" have to be imported by the node? > No, not if you're using Hiera. It just needs to be named appropriately and placed in the cor

[Puppet Users] Re: spaceship operator with a regex!?

2012-03-20 Thread jcbollinger
On Mar 20, 8:29 am, Peter Berghold wrote: > OK... this is similar to something that I've been scratching my head over... > > Given something like > > @@file { "blah: ${hostname}": } > > and > > @@file {"foo: ${hostname}": ...} > > I'm going to have a bunch of exported resources > > On one s

[Puppet Users] Re: node inheritance

2012-03-20 Thread jcbollinger
On Mar 20, 9:57 am, Garrett Honeycutt wrote: > I would strongly encourage you to never use inheritance with nodes and > only to use inheritance within a given module[1]. > > Instead of > > node default { >   include baseline} > > node app inherits default { >   include appstuff > > } > > I would

[Puppet Users] Re: override parametrized classes

2012-03-20 Thread jcbollinger
On Mar 20, 11:49 am, Felice Pizzurro wrote: > Hi all, > > In my datacenter I've a configuration like this: > > class apache2 ($max_fork=100, $monitor=true) { >     # some implementation that utilize $max_fork and $monitor > variables > > } > > class mysql ($max_conn=200, $monitor=true) { >     #

Re: [Puppet Users] high-level module organization

2012-03-20 Thread Denmat
Hi, For common files that aren't easily grouped I currently manage them is a base module that everyone gets. They get their own class or define and are called like so: class blah { Include base base::sysctl {"vm.swappiness": value => 10 } } Cheers, Den On 21/03/2012, at 4:35, Sco

[Puppet Users] Re: Disable polling interval

2012-03-20 Thread Afroz Hussain
Thanks everyone.. On Mar 19, 8:02 pm, Adam Heinz wrote: > Have you looked into using the 'schedule' type to prevent the restarts > from happening during business hours? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, se

Re: [Puppet Users] import manifest inside subdirectory

2012-03-20 Thread Peter Bukowinski
On Mar 20, 2012, at 12:47 PM, Pablo Fernandez wrote: > Hi, > > I am trying to import some manifests manually (outside the modules tree) and > it does not seem to work fine. I have the files: > manifests/site.pp > manifests/data/file1.pp > > Inside site.pp I do: > import "data/file1.pp" > >

Re: [Puppet Users] Odd issue with "puppet apply" in Virtual box

2012-03-20 Thread Nan Liu
On Tue, Mar 20, 2012 at 10:23 AM, Jonathan Proulx wrote: > Hi, > > I have a modules directory that I've mounted as a virtualbox shared > folder from my workstation (where I'm doing development) on a > VirtualBox guest which I hop to make ,many virtual box guests so I can > test against a variety o

[Puppet Users] high-level module organization

2012-03-20 Thread Scott Merrill
How are folks organizing their Puppet modules? For things that fit the trifecta (http://projects.puppetlabs.com/projects/puppet/wiki/Core_Types_Cheat_Sheet/) it makes sense (to me) to make them top-level citizens in my /etc/puppet/modules directory. This constitute things like Postfix, ntp, snmp,

Re: [Puppet Users] multi-line key/value pairs in Puppet Dashboard?

2012-03-20 Thread Scott Merrill
Thanks, Jeff and Luke, for the replies! After reviewing Luke's suggestion and thinking things through a little more, I think this is the right way to go for us. I hadn't really considered the long-term ramifications of putting configuration declarations in both Puppet manifests and in Dashboard. M

[Puppet Users] Odd issue with "puppet apply" in Virtual box

2012-03-20 Thread Jonathan Proulx
Hi, I have a modules directory that I've mounted as a virtualbox shared folder from my workstation (where I'm doing development) on a VirtualBox guest which I hop to make ,many virtual box guests so I can test against a variety of OS versions. Which seemed a good idea at the time, but puppet in t

[Puppet Users] OpenSUSE weirdness.

2012-03-20 Thread Douglas Garstang
I'm having some weird issues with puppet 2.7.6 on OpenSUSE. When I run puppet in the foreground, it's all fine. However, when I run it as a service, all that get's logged is: abc:/var/log/puppet # cat puppet.log Tue Mar 20 10:11:57 -0700 2012 Puppet (warning): iconv doesn't seem to support UTF-8/

Re: [Puppet Users] extlookup can't match key.

2012-03-20 Thread Douglas Garstang
On Tue, Mar 20, 2012 at 9:55 AM, Nan Liu wrote: > On Tue, Mar 20, 2012 at 9:33 AM, Douglas Garstang > wrote: >> On Tue, Mar 20, 2012 at 8:03 AM, Douglas Garstang >> wrote: >>> On Tue, Mar 20, 2012 at 7:33 AM, Douglas Garstang >>> wrote: On Mon, Mar 19, 2012 at 5:53 PM, Gary Larizza wrote:

Re: [Puppet Users] extlookup can't match key.

2012-03-20 Thread Nan Liu
On Tue, Mar 20, 2012 at 9:33 AM, Douglas Garstang wrote: > On Tue, Mar 20, 2012 at 8:03 AM, Douglas Garstang > wrote: >> On Tue, Mar 20, 2012 at 7:33 AM, Douglas Garstang >> wrote: >>> On Mon, Mar 19, 2012 at 5:53 PM, Gary Larizza wrote: On Tue, Mar 20, 2012 at 11:35 AM, Douglas

[Puppet Users] override parametrized classes

2012-03-20 Thread Felice Pizzurro
Hi all, In my datacenter I've a configuration like this: class apache2 ($max_fork=100, $monitor=true) { # some implementation that utilize $max_fork and $monitor variables } class mysql ($max_conn=200, $monitor=true) { # some implementation that utilize $max_conn and $monitor variables }

[Puppet Users] mcollective/puppetd & RHEL SELinux alert

2012-03-20 Thread Stefan Heijmans
Hello, We are running Puppet 2.7.11-2 on RHEL57 x86_64 with MCollective (on client and server); On the client; # rpm -qa|grep -e puppet -e mcollective mcollective-common-1.2.1-1.el5 puppet-2.7.11-2.el5 mcollective-1.2.1-1.el5 # with kernel; Linux 2.6.18-274.18.1.el5 #1 SMP Fri Jan 20 15:11:18

[Puppet Users] import manifest inside subdirectory

2012-03-20 Thread Pablo Fernandez
Hi, I am trying to import some manifests manually (outside the modules tree) and it does not seem to work fine. I have the files: manifests/site.pp manifests/data/file1.pp Inside site.pp I do: import "data/file1.pp" And that doesn't work. But if I rename data/file1.pp by data_file1.pp, and pla

Re: [Puppet Users] extlookup can't match key.

2012-03-20 Thread Douglas Garstang
On Tue, Mar 20, 2012 at 8:03 AM, Douglas Garstang wrote: > On Tue, Mar 20, 2012 at 7:33 AM, Douglas Garstang > wrote: >> On Mon, Mar 19, 2012 at 5:53 PM, Gary Larizza wrote: >>> >>> >>> On Tue, Mar 20, 2012 at 11:35 AM, Douglas Garstang >>> wrote: I have a 2.7.6 server and a 2.6.4 cli

Re: [Puppet Users] Re: node inheritance

2012-03-20 Thread Alessandro Franceschi
Let me disagree :-) Actually I found the nodes' inheritance model an easy to grasp, mantain and manage way to set and override variables according to whatever grouping logic. I've used it for almost 5 years, in several different Puppet setups of different scales and it has always fit well. * Giv

Re: [Puppet Users] extlookup can't match key.

2012-03-20 Thread Douglas Garstang
On Tue, Mar 20, 2012 at 7:33 AM, Douglas Garstang wrote: > On Mon, Mar 19, 2012 at 5:53 PM, Gary Larizza wrote: >> >> >> On Tue, Mar 20, 2012 at 11:35 AM, Douglas Garstang >> wrote: >>> >>> I have a 2.7.6 server and a 2.6.4 client. I'm trying to use ext_lookup. >>> >>> site.pp: >>> $extlookup_da

Re: [Puppet Users] Re: node inheritance

2012-03-20 Thread Garrett Honeycutt
On 3/19/12 3:55 PM, Alessandro Franceschi wrote: > Just a quick note, not strictly related to your question > Be careful when including classes with nodes' inheritance: if you set a > variable, for example, in the node "web" that is used by classes > included in the baseline class, that variable' v

Re: [Puppet Users] Puppet master on Centos 5.4 box

2012-03-20 Thread thinkwell
Ahah. That's my mistake - gem install puppet - it is, then. > > at the point you install rvm and with it various ruby versions then all of > the ruby gems that you install cannot be from centOS packaging but rather > would have to be using the specific ruby version and gem version. > > T

Re: [Puppet Users] extlookup can't match key.

2012-03-20 Thread Douglas Garstang
On Mon, Mar 19, 2012 at 5:53 PM, Gary Larizza wrote: > > > On Tue, Mar 20, 2012 at 11:35 AM, Douglas Garstang > wrote: >> >> I have a 2.7.6 server and a 2.6.4 client. I'm trying to use ext_lookup. >> >> site.pp: >> $extlookup_datadir = "/etc/puppet/manifests/extdata" >> $extlookup_precedence = ["

RE: [Puppet Users] Re: "SSLv3 read server certificate B: certificate verify failed." -- Not time related

2012-03-20 Thread Kinzel, David
Take a look at bug 8858 and 9084. But have some suggested "fixes" to see if you are hitting them. If you are running the client and master on the same server thought (and both are using the same cert) this may not be the case. From: puppet-users@googl

Re: [Puppet Users] Re: mcollective bits

2012-03-20 Thread R.I.Pienaar
- Original Message - > From: "Matt Warren" > To: "Puppet Users" > Sent: Tuesday, March 20, 2012 1:47:46 PM > Subject: [Puppet Users] Re: mcollective bits > > On Mar 19, 1:45 pm, Douglas Garstang wrote: > > I've always found the mcollective docs > > athttp://docs.puppetlabs.com/mcollec

[Puppet Users] Re: mcollective bits

2012-03-20 Thread Matt Warren
On Mar 19, 1:45 pm, Douglas Garstang wrote: > I've always found the mcollective docs > athttp://docs.puppetlabs.com/mcollective/reference/basic/gettingstarted... > very confusing. > > What _exactly_ goes on the client (i.e. the remote system)? The docs > talk about editing both the server.cfg and

[Puppet Users] Re: 32bit and 64bit version of a package

2012-03-20 Thread jcbollinger
On Mar 19, 8:29 pm, Alan Laird wrote: > > The issue I'm chasing is that I need to install a 32bit libstdc++ to > support a vendor supplied rpm and I already have the 64bit libstdc++ > installed. So the vendor RPM doesn't correctly identify its requirements? That's quite strange, as the RPM bu

Re: [Puppet Users] spaceship operator with a regex!?

2012-03-20 Thread Peter Berghold
OK... this is similar to something that I've been scratching my head over... Given something like @@file { "blah: ${hostname}": } and @@file {"foo: ${hostname}": ...} I'm going to have a bunch of exported resources On one system I want to instantiate all the "blah:" and on another "foo:"

Re: [Puppet Users] Using puppet cert generate on a client -- why doesn't this work?

2012-03-20 Thread Felix Frank
Hi, i cannot really get my head around your scheme, but it strikes me as potentially very dangerous. You expect puppet to handle the very certificates that are the basis for puppet operation? I get a vague sense of a chicken-egg problem. I think that all your certification needs should be handle

Re: [Puppet Users] persistent facts

2012-03-20 Thread Felix Frank
Hi, On 02/28/2012 04:58 PM, Craig White wrote: > Object: to get a custom fact that lets me know the last time a Ubuntu system > had run 'upgrade' (ie apt-get upgrade or aptitude [safe-|full-]upgrade) > > One-liner: (will probably still need some adaptation but so far, I am doing) > tac /var/log/

Re: [Puppet Users] ENC with Hiera

2012-03-20 Thread Pablo Fernandez
Thanks, Yes, I was thinking about something like: :hierarchy: - %{fqdn} - %{secundary_group} - %{primary_group} - %{productname} - all So, each machine goes and picks up the information from the more specific to the more generic group. So, I guess if the fqdn.yaml file is not there,

Re: [Puppet Users] Simple hiera-puppet usage

2012-03-20 Thread Pablo Fernandez
Thanks for the hint! Let me ask you a couple of questions: - Does the "puppetbackend::data" have to be imported by the node? - Is the name static, or can I name it "myclass::mydata", and use ":datasource: mydata"? - When you call hiera() inside the module, does it go to other modules to search f

[Puppet Users] Secure hostname/Serial number through puppet before signing certs

2012-03-20 Thread mukulm
Hi, I want to apply a security check on hostnames in my domain (abc.example.com) so that puppet should verify the hostname or serial number through "dmidecode -s system-serial-number" instead of "facter| grep -i serial" so that if any node in the domain changes the hostname of the system then also

[Puppet Users] Re: Puppet equivalent for mysql['tunable'] in chef

2012-03-20 Thread Christophe L
Thank you ! Best regards, Christophe On 19 mar, 23:18, Adam Heinz wrote: > puppet 2.6+, derived fromhttps://github.com/camptocamp/puppet-mysql > >   $mycnf = $::operatingsystem ? { >     /RedHat|Fedora|CentOS/ => "/etc/my.cnf", >     default => "/etc/mysql/my.cnf", >   } > >   augeas { $mycnf: >

Re: [Puppet Users] multi-line key/value pairs in Puppet Dashboard?

2012-03-20 Thread Luke Bigum
I can't help with your Dashboard problems, but can suggest an alternative to file fragments that you might find easier to work with. I would use a Defined Type wrapped around Augeas where the $namevar of the Defined Type is the name of the systctl.conf key. This way if you tried to turn ipv6 on

[Puppet Users] More complicated user management?

2012-03-20 Thread Robin Lee Powell
I feel like this should be way easier than it seems to be. -_- Let's say I have users alice, bob, carol, ... Different users get added on different servers. On all servers, any users *not* selected should be removed. So far, it seems like virtual resources handle this, and I've experimented w