Re: [Puppet Users] Re: hiera - anything better than empty string?

2013-05-15 Thread Dick Davies
On 15 May 2013 19:33, jcbollinger wrote: > > > On Wednesday, May 15, 2013 10:45:19 AM UTC-5, Dick Davies wrote: > >> >> <%- if yum_proxy_url != false %> >> # use proxy >> proxy=<%=yum_proxy_url %> >> <% end -%> >> >> which is a bit more readable. Not really clear why the : != false part is >> req

Re: [Puppet Users] Holding packages on providers with holdable feature

2013-05-15 Thread Gabriel Filion
Hey there, On 15/05/13 08:24 PM, sjr wrote: > The thing is we would like to be able to specify a version for the > package and tell dpkg to hold it to prevent unwanted upgrades (mainly > because human errors). As I haven't been able to get it working with > current APT provider I would like if wit

Re: [Puppet Users] Puppet, git & security

2013-05-15 Thread Alex Harvey
On Thursday, May 16, 2013 12:48:22 AM UTC+10, jcbollinger wrote: > > > If you want your masters to rely on a revision control system for > manifests, data, or whatever, then it follows that the masters must be > permitted to access that system. If they may not do so across network > segments,

Re: [Puppet Users] puppet/hiera - how to debug errors ?

2013-05-15 Thread denmat
for i in `find ./ -name *.yaml` ;do echo $i ; ruby -e "require 'yaml'; YAML.parse(File.open('$i'))" ;done ./extdata/modules/apache.yaml /usr/lib/ruby/1.8/yaml.rb:176:in `load': syntax error on line 5, col 11: `' (ArgumentError) syntax error on line 5 is as far as the parser goes, the actual error

[Puppet Users] Holding packages on providers with holdable feature

2013-05-15 Thread sjr
Hi Puppet Users :-) I've been looking for information on how to hold packages on Debian because we maintain a bunch of package that are either part of our products or they are not available in Debian repos. The thing is we would like to be able to specify a version for the package and tell dpk

Re: [Puppet Users] Puppet 3.2.0-0.1rc2.el6 SSL problem

2013-05-15 Thread Denmat
So can't help you specifically here, but if you take httpd/passenger out of the picture does it work as expected(ie, stop httpd and run the puppet master --no-daemonize --verbose)? Cheers Den On 16/05/2013, at 0:28, Mike S wrote: > I am having an issue adding new clients to puppet. The maste

[Puppet Users] Join us for a Design Jam on Testing Puppet Changes

2013-05-15 Thread Melinda Campbell
WHAT IS A DESIGN JAM? A hands-on workshop in which we collaborate on solving an Operations challenge. Using a variety of brainstorming activities, we’ll come up with a pile of ideas and spend time filtering and refining these ideas to find a few viable solutions. WHY? We are building our produ

Re: [Puppet Users] Preparing to install Puppet Dashboard on RHEL 5 with newer MySQL

2013-05-15 Thread Dan White
One more thing: Silly me :P MySQL-client also to be able to work with the database locally “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) - Original Message - From: "

[Puppet Users] Preparing to install Puppet Dashboard on RHEL 5 with newer MySQL

2013-05-15 Thread Dan White
When I discovered that I could use the PuppetLabs RPM's to install Puppet Dashboard on my RHEL 5 Puppet Master, I decided to take the plunge. The "newest" Red Hat supplied rpm is mysql-server-5.0.95-5.el5_9 We have been using a customized 5.5.x, built from source. I wanted to see if I could use

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread David Pires
Initially I had the custom function in a helper module and was referencing it from another module. I have now tried adding the function the the only module that is using it. No luck, same error. The custom function has been stripped down to the following: module Puppet::Parser::Functions ne

Re: [Puppet Users] Re: hiera - anything better than empty string?

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 10:45:19 AM UTC-5, Dick Davies wrote: > > On 15 May 2013 15:24, jcbollinger >wrote: > >> >> >> On Wednesday, May 15, 2013 6:29:14 AM UTC-5, Dick Davies wrote: >>> >>> >>> At the minute we've set an empty string, but then templates etc. need to >>> be littered with >>>

[Puppet Users] Re: sensitive data in hiera

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 4:46:45 AM UTC-5, jdt wrote: > > Hello all, > > I was wondering what the possibilities are for storing sensitive data in > hiera. > I read about hiera-gpg and it's increase in catalog compile time, I also > read about puppet-decrypt. > What would you advise to use? A

[Puppet Users] Re: Overwrite anchors in hiera

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 8:43:39 AM UTC-5, Andreas Zuber wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hello > > I'm in the progress of refactoring a lot of our old puppet manifests > to finally get rid of all this global variables (we where young and... ) > > Now some of

[Puppet Users] Re: module dependancy

2013-05-15 Thread joe
In class myapp::install, just require the other class: require Class['pythonpip::install'] before the package statement. On Tuesday, May 14, 2013 12:36:22 PM UTC-6, Matt F wrote: > > I have two modules, and I'm having some dependacy problems: > > 1 - Install python "pip": > > class pythonpip::i

Re: [Puppet Users] Using puppet to append to a bundle

2013-05-15 Thread Keith Brown
So you'd just say manually keep a copy of the file upto date, and deploy based on that? as far as the bundles go, well, if it was all rhel6, that'd be a better option for us, but RHEL5 has the bundle as part of openssl. That one gets updated more often, and would need to roll a package for that

Re: [Puppet Users] Using puppet to append to a bundle

2013-05-15 Thread David Schmitt
On 15.05.2013 18:24, Keith Brown wrote: Hello. Total puppet newbie, and trying to figure out the best way to do this. I have a set of systems that require the SSL bundle at /etc/pki/tls/certs/ca-bundle.ca to have an additional certificate be added. Problem is, these are a mix of RHEL5 and 6 syst

Re: [Puppet Users] Using puppet to install puppet modules

2013-05-15 Thread David Schmitt
On 26.04.2013 12:19, Jonathan Gazeley wrote: I use puppet forge to install various modules on my puppetmaster. I'm thinking about the build process if I build a new puppetmaster. Manually reinstalling the modules is prone to error if I forget which modules I used to have. I looked at this module

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread David Pires
I have tried stripping the custom function (type rvalue) down to returning a string to see if it some other error. No luck, same header error. The test manifest I was using was something like this: The function is simply returning a string of IP addresses from EC2 called get_nodes() I've tried

[Puppet Users] Using puppet to append to a bundle

2013-05-15 Thread Keith Brown
Hello. Total puppet newbie, and trying to figure out the best way to do this. I have a set of systems that require the SSL bundle at /etc/pki/tls/certs/ca-bundle.ca to have an additional certificate be added. Problem is, these are a mix of RHEL5 and 6 systems, so the ca-bundle is handled by tw

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread David Pires
Just ran the template again, 'Syntax OK' Nothing in the masterhttp log. I really don't think its a template issue as all other modules work fine, its only when i add the reference to the function that I get the header error. Maybe its something about the directory structure of my module? I crea

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread Dean Wilson
On Wed, May 15, 2013 at 08:46:57AM -0700, David Pires wrote: > It compiles fine, no errors. Both the master and nodes are Ubuntu 12.04, > puppet version 2.7.11 Only time I've ever seen this message is in broken templates - which I know you've already checked. Last time I saw it was an unmatched '

Re: [Puppet Users] Any working module for LDAP client authentication?

2013-05-15 Thread Craig White
On May 15, 2013, at 3:45 AM, Federico Bonelli wrote: > Hi folks, > > I can't find a _working_ module for setting LDAP authentication through > nsswitch and PAM for Ubuntu. > Does anybody know if such a module exists? > > I'm trying to set up at work a Puppet infrastructure to manage the whole

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread David Pires
It compiles fine, no errors. Both the master and nodes are Ubuntu 12.04, puppet version 2.7.11 On Wednesday, May 15, 2013 11:13:20 AM UTC-4, Nan Liu wrote: > > On Tue, May 14, 2013 at 5:14 PM, David Pires > > wrote: > >> I have a custom function ( >> http://docs.puppetlabs.com/guides/custom_func

Re: [Puppet Users] Re: hiera - anything better than empty string?

2013-05-15 Thread Dick Davies
On 15 May 2013 15:24, jcbollinger wrote: > > > On Wednesday, May 15, 2013 6:29:14 AM UTC-5, Dick Davies wrote: >> >> >> At the minute we've set an empty string, but then templates etc. need to >> be littered with >> >> if ($url_from_hiera != "") { >> do_stuff() >> } >> >> which feels like the s

Re: [Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread Nan Liu
On Tue, May 14, 2013 at 5:14 PM, David Pires wrote: > I have a custom function ( > http://docs.puppetlabs.com/guides/custom_functions.html) working locally > using `puppet apply --modulepath=` and a test manifest. > > The issue I am having is when I run it on a node I get a "wrong header > line f

[Puppet Users] Re: proxy required

2013-05-15 Thread Francesco
Hy I' ve used a Yumrepo resource to set up the repository. I have passed the public key with a file resource. It seems to work now Thank you thank you again Il giorno mercoledì 8 maggio 2013 00:39:53 UTC+2, Francesco ha scritto: > > Hy I m new to puppet. > I 'd like to install epel.repo on a m

Re: [Puppet Users] Using puppet to install puppet modules

2013-05-15 Thread Ashley Penney
On Wed, May 15, 2013 at 10:48 AM, Nikola Petrov wrote: > I can second that. Not sure why puppetlabs decided to invent yet another > package system with it's own problems and metadata definition and > updates specifics > While I'm not disagreeing that this is a pain, I think part of the difficult

Re: [Puppet Users] Using puppet to install puppet modules

2013-05-15 Thread Nikola Petrov
I can second that. Not sure why puppetlabs decided to invent yet another package system with it's own problems and metadata definition and updates specifics -- Nikola On Fri, Apr 26, 2013 at 09:02:53AM -0400, Trevor Vaughan wrote: > I usually package the modules that I want in the native package

Re: [Puppet Users] Puppet, git & security

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 1:00:41 AM UTC-5, Alex Harvey wrote: > > > > On Wednesday, May 15, 2013 2:51:14 PM UTC+10, yersinia.spiros wrote: >> >> Sorry for the top posting. >> >> Imho, i think this is a question that could be asked on the git mailing >> list. >> > > Sorry, my question apparen

[Puppet Users] Re: node definition lenght

2013-05-15 Thread Romain Gales
thank you John, changed to line definition, easier to read. I found one node listed twice, the last one. in this case reg-ex is easy to setup, the names are inventory numbers. Not all PCs have the same software installed. Regards, Romain On Wednesday, 15 May 2013 16:04:53 UTC+2, jcbollinger w

[Puppet Users] Puppet 3.2.0-0.1rc2.el6 SSL problem

2013-05-15 Thread Mike S
I am having an issue adding new clients to puppet. The master is not accepting connections from unauthenticated clients, even though my auth.conf that worked with v3.1.1 has not changed. If I test ssl via curl -k, the puppet master returns "can't convert nil into String" to the client. The h

[Puppet Users] Re: Facter fact appears to be a string and not an array.

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 2:15:14 AM UTC-5, Brent wrote: > > > Would anyone know why I am getting a string as opposed to an array. > > Because all facts are strings. That's the way it has always been, though I understand there's some work underway to provide for more data types in the futur

[Puppet Users] Re: hiera - anything better than empty string?

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 6:29:14 AM UTC-5, Dick Davies wrote: > > Hi, > > starting to use hiera in earnest now (still on puppet 2.6 but planning an > upgrade to 3.x this summer). > > the heirarchy looks for fqdn, then network_eth0, then 'default'. > > Some of our subnets don't want to set htt

[Puppet Users] Re: node definition lenght

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 6:33:59 AM UTC-5, Romain Gales wrote: > > Hi all, > > I have strange thing with a node definition. > i have: > node 'xxx1.sub.domain.com','xxx2.sub.domain.com'.. inherits > default > { > include . > } > the node line now has 1172 characters (+-50 hos

Re: [Puppet Users] Puppet run on node even when not specified in site.pp

2013-05-15 Thread Jeff Zellner
Hi Simon, Puppet only has a concept of 'things I need to do'. What I mean is that removing config from a node does not undo what has been previously configured. You need to explicitly do that yourself with ensure => absent, etc on the configured resources. Cheers, Jeff On May 15, 2013 7:54 AM, "S

[Puppet Users] Any working module for LDAP client authentication?

2013-05-15 Thread Federico Bonelli
Hi folks, I can't find a _working_ module for setting LDAP authentication through nsswitch and PAM for Ubuntu. Does anybody know if such a module exists? I'm trying to set up at work a Puppet infrastructure to manage the whole of our workstations: I previously configured by hand LDAP authentica

[Puppet Users] sensitive data in hiera

2013-05-15 Thread jdt
Hello all, I was wondering what the possibilities are for storing sensitive data in hiera. I read about hiera-gpg and it's increase in catalog compile time, I also read about puppet-decrypt. What would you advise to use? Are there any other plans to support sensitive data natively in hiera?

[Puppet Users] Custom function help: works locally, "wrong header line format" error on master

2013-05-15 Thread David Pires
I have a custom function (http://docs.puppetlabs.com/guides/custom_functions.html) working locally using `puppet apply --modulepath=` and a test manifest. The issue I am having is when I run it on a node I get a "wrong header line format" error on the puppet master and I can't figure out why. I

[Puppet Users] Re: Puppet run on node even when not specified in site.pp

2013-05-15 Thread jcbollinger
On Wednesday, May 15, 2013 6:54:38 AM UTC-5, Simon Flash wrote: > > Hello, > > First of, I am kinda new to puppet and still in the learning-part. To my > problem: I have a site.pp which contains the following part: > > node 'linuxnod10.rosi.local' { include nrpe include nodes_script } > node 'li

[Puppet Users] Overwrite anchors in hiera

2013-05-15 Thread Andreas Zuber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello I'm in the progress of refactoring a lot of our old puppet manifests to finally get rid of all this global variables (we where young and... ) Now some of the settings are used in more then one class. Example for one domain in hiera: sssd::lda

Re: [Puppet Users] example42 puppet-squid

2013-05-15 Thread jcbollinger
On Monday, May 13, 2013 4:39:44 PM UTC-5, Ashley Penney wrote: > > > If you load up the init.pp from this module you'll notice that after the > "class squid" declaration there's no parameters listed for the class. This > is because this is a "old style" module at this point and is just setting

[Puppet Users] Re: RHEL patches broke my puppetd

2013-05-15 Thread jcbollinger
On Tuesday, May 14, 2013 4:37:21 PM UTC-5, dsdtas wrote: > > > > On Monday, May 13, 2013 9:20:54 AM UTC-4, jcbollinger wrote: >> >> >> >> On Friday, May 10, 2013 3:17:00 PM UTC-5, dsdtas wrote: >>> >>> Earlier this week, I applied RHEL patches to a couple of dev server with >>> puppet 0.25.5 and

Re: [Puppet Users] PuppetDB "Failed to submit 'replace facts' command"

2013-05-15 Thread Ken Barber
Justin, Take a look at this: http://projects.puppetlabs.com/issues/19884 My colleague Deepak produced a patch for this problem and it has been merged in, but its not yet released. In the meantime you can work-around the problem by downgrading to JDK 1.6, which seems to do the trick. ken. On Tue

[Puppet Users] Re: Rspec-puppet: what is differences between contain_class, include_class, create_class?

2013-05-15 Thread lazydelphibuilder
I looked at rspec-puppet sources and found that there is only one matcher exists: *include_class* So, I assume that *contain_class* and *create_class* are not part of the rspec-puppet and *should not be used*. (maybe, they're some Ruby functions, or some matchers, that came from RSpec). -- Yo

[Puppet Users] Puppet run on node even when not specified in site.pp

2013-05-15 Thread Simon Flash
Hello, First of, I am kinda new to puppet and still in the learning-part. To my problem: I have a site.pp which contains the following part: node 'linuxnod10.rosi.local' { include nrpe include nodes_script } node 'linuxnod1.rosi.local' { include nrpe include nodes_script } node 'linuxnod2.rosi.l

[Puppet Users] node definition lenght

2013-05-15 Thread Romain Gales
Hi all, I have strange thing with a node definition. i have: node 'xxx1.sub.domain.com','xxx2.sub.domain.com'.. inherits default { include . } the node line now has 1172 characters (+-50 hostnames). I can add any node name but the pc only gets the default catalog, but when I ch

[Puppet Users] hiera - anything better than empty string?

2013-05-15 Thread Dick Davies
Hi, starting to use hiera in earnest now (still on puppet 2.6 but planning an upgrade to 3.x this summer). the heirarchy looks for fqdn, then network_eth0, then 'default'. Some of our subnets don't want to set http_proxy environment variables, the rest do. so default.json has a 'http_proxy_url'

Re: [Puppet Users] Re: PuppetDB: SSL problems

2013-05-15 Thread kl . puppetuser
Hi Ken, thanks for your reply, On Tue, May 14, 2013 at 5:08 PM, Ken Barber wrote: > Can we walk through your certificates again? Can you give the full > verbose output of the following? I put the complete output here: http://pastebin.com/raw.php?i=iW44kACL . Hope this helps. > I get the feelin

Re: [Puppet Users] puppet/hiera - how to debug errors ?

2013-05-15 Thread przemol
Hi Den, I suspected that it was because yaml file. Thank you for the one liner but is it possible to display which line in the yaml file is the problem ? On Wednesday, May 15, 2013 6:29:45 AM UTC+1, denmat wrote: > > Funny this should come up as I got the same error just today. > > Incorrect YA

[Puppet Users] Facter fact appears to be a string and not an array.

2013-05-15 Thread Brent Clark
Good day I wrote my own fact for facter. And as you can see from my copy and paste it appears to be working. disk => ["/dev/sda", "/dev/sdb"] disk_count => 2 The problem I appear to have is. This is the code for my template. <%- @disk.each do |dev| %> disk <%= dev %> <%- end %> And the re

Re: [Puppet Users] PuppetDB Cannot Find Postgresql Driver

2013-05-15 Thread Deepak Giridharagopal
On Tue, May 14, 2013 at 5:18 PM, Tim Schaefer wrote: > Puppet 3.3.1 // CentOS release 6.4 (Final) > > rpm -qa | grep puppet > puppetlabs-release-6-7.noarch > puppet-3.1.1-1.el6.noarch > puppetdb-1.3.0-1.el6.noarch > puppet-server-3.1.1-1.el6.noarch > puppetdb-terminus-1.3.0-1.el6.noarch > > Instal