[Puppet Users] Re: pupptboard Could not reach PuppetDB error

2015-03-20 Thread Tim Dunphy
Hey guys, I was able to find out the cause of the problem. I had SELinux enabled! Once I gave the 'setenforce 0' command, puppetboard starts working and filling in with data. So, I've been googling around for a little while, and still haven't found anything useful. Does anyone know the correct SE

[Puppet Users] pupptboard Could not reach PuppetDB error

2015-03-20 Thread Tim Dunphy
Hey all, I just had to setup puppetdb on a new host. And everything seemed to go smoothly using the python pip install method. But when I load up the page with the puppetbaord on it, I see an 'internal server error' message on the web page. Tailing the apache error log gives me this: [Fri Mar 2

Re: [Puppet Users] Re: Firewall rules by subnet

2015-03-20 Thread Wil Cooley
One other option would be to use `has_ip_network` from puppetlabs/stdlib. On Fri, Mar 20, 2015 at 1:59 PM Wil Cooley wrote: > On Fri, Mar 20, 2015 at 8:45 AM Gary Jackson wrote: > >> Sadly, they are not. What I probably want is one of two things for my >> case statement: >> >> 1. The bitwise AN

Re: [Puppet Users] Re: Firewall rules by subnet

2015-03-20 Thread Wil Cooley
On Fri, Mar 20, 2015 at 8:45 AM Gary Jackson wrote: > Sadly, they are not. What I probably want is one of two things for my case > statement: > > 1. The bitwise AND of the ipaddress and netmask facts. > 2. Pull apart the interfaces fact and use the network_*iface* fact for > the first interface i

[Puppet Users] Am I seeing PUP-3863?

2015-03-20 Thread Wil Cooley
PUP-3863 claims to be for future-parser with versions 3.7.3 & .4, but I'm seeing it with both 2.7.25 and 3.7.4, both with hiera 1.3.4 (and, for 2.7, hiera-puppet 1.0.0). Should I not be surprised? Is there another ticket that I'm missing maybe? The crux of the issue for me, aside from the verity o

[Puppet Users] Re: Storeconfigs with puppetdb in nodeless configuration not working

2015-03-20 Thread Michael Pawlak
Does anybody have any insight into this? On Thursday, March 19, 2015 at 10:14:59 PM UTC-7, Michael Pawlak wrote: > > Hello Puppeteers, > > We currently have implemented a nodeless (role base using LDAP) and > masterless (git pulls) puppet infrastructure at work. This aspect seems to > work just

[Puppet Users] Re: Firewall rules by subnet

2015-03-20 Thread Gary Jackson
Sadly, they are not. What I probably want is one of two things for my case statement: 1. The bitwise AND of the ipaddress and netmask facts. 2. Pull apart the interfaces fact and use the network_*iface* fact for the first interface in that list. Can I do either of these things without resorting

[Puppet Users] Re: Firewall rules by subnet

2015-03-20 Thread Anthony Clark
If your primary interfaces are consistently named, you can create if or case statements based on the network_eth0 and netmask_eth0 facter facts. https://docs.puppetlabs.com/puppet/latest/reference/lang_conditional.html On Friday, March 20, 2015 at 11:30:20 AM UTC-4, Gary Jackson wrote: > > I'd

[Puppet Users] Firewall rules by subnet

2015-03-20 Thread Gary Jackson
I'd like to use different puppetlab/firewall rules based on the subnet of the host. I'm not concerned about multi-homed hosts, which will be handled as a special case. How do I go about doing this? -- You received this message because you are subscribed to the Google Groups "Puppet Users" grou

[Puppet Users] Augeas editing of fstab

2015-03-20 Thread Anthony Clark
Hi there, I'm trying to add the nobarrier option to our XFS mount options in /etc/fstab using Augeas. I've tried this: augeas { 'fstabxfsnobarrier': context => '/files/etc/fstab', changes => [ 'rm /*[vfstype="xfs"]/opt', 'ins opt after vfstype="xfs"', 'set /*[vfstype="xfs"]/opt[last()] "defau

Re: [Puppet Users] Re: Tracking services that need to be restarted

2015-03-20 Thread Christopher Wood
On Fri, Mar 20, 2015 at 06:17:55AM -0700, jcbollinger wrote: >On Thursday, March 19, 2015 at 9:31:51 AM UTC-5, Nick Howes wrote: > > Hi, > I've been wondering about what to do when configuration files change on > services that I don't want to automatically restart. It's simple e

Re: [Puppet Users] Re: How can I diagnose hopeless performance.

2015-03-20 Thread Peter Berghold
On Fri, Mar 20, 2015 at 4:18 AM jamese wrote: > Try running puppet with "--debug" and "--evaltrace" to see where it's > taking the time. > I'd be looking at DNS as that is often the culprit for unexplained things. > > -- > A tale I tell is where Puppet was taking three or more minutes to even be

[Puppet Users] Re: How can I diagnose hopeless performance.

2015-03-20 Thread jcbollinger
On Friday, March 20, 2015 at 3:18:15 AM UTC-5, jamese wrote: > > Try running puppet with "--debug" and "--evaltrace" to see where it's > taking the time. > I'd be looking at DNS as that is often the culprit for unexplained things. > DNS issues can indeed cause long runtimes when requests time

[Puppet Users] Re: Tracking services that need to be restarted

2015-03-20 Thread jcbollinger
On Thursday, March 19, 2015 at 9:31:51 AM UTC-5, Nick Howes wrote: > > Hi, > > I've been wondering about what to do when configuration files change on > services that I don't want to automatically restart. It's simple enough to > make it automatically restart by having the file notify the servi

[Puppet Users] Re: Should package {...} check if identical package is declared before?

2015-03-20 Thread jcbollinger
On Thursday, March 19, 2015 at 8:56:38 AM UTC-5, tan...@gmail.com wrote: > > I've encountered the problem where 2 modules declare the identical > package. > > I wonder why package { .. } doesn't check if the package is already > declared, and the redundant declaration can be ignored. > > Will

[Puppet Users] Re: How can I diagnose hopeless performance.

2015-03-20 Thread jamese
Try running puppet with "--debug" and "--evaltrace" to see where it's taking the time. I'd be looking at DNS as that is often the culprit for unexplained things. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and

[Puppet Users] Re: How to structure puppet control

2015-03-20 Thread jamese
It can be fiddly to get puppet to manage it's own master, but if you write your manifest so that you can use it with "puppet apply" then you can bootstrap your master from the same code you use to keep the master config in place when its live. Just remember to back up the /var/lib/puppet/ssl/c

[Puppet Users] Re: Tracking services that need to be restarted

2015-03-20 Thread jamese
I have had a similar problem with the MySQL service. I don't want that to automatically restart when the config file changes, so I wrote a fact that checks that start time of the mysqld process compared to the last modified time of the config file and returns true or false, depending whether th