Re: [Puppet Users] exec only if condition is true

2014-01-16 Thread Gonzalo Servat
Add "refreshonly => true" to the exec definition. GS On 17/01/2014 6:17 pm, "kaustubh chaudhari" wrote: > Hi All, > > I am not a programer or from the same background, trying to explore! > Please excuse if you find this question silly. > > I was to exec a .bat file of if there are any changes to

[Puppet Users] Dashboard running in masterless puppet

2013-11-03 Thread Gonzalo Servat
Hi All, I'm running Puppet in masterless mode and trying to make Puppet dashboard play nice with it in this non-standard setup. I'd love to hear how other people are doing this. The process I have in mind is: 1) Run "puppet apply" from cron on each node 2) Rsync (using --remove-sent-files) the r

Re: [Puppet Users] Re: Managing /etc/hosts without using exported resources

2013-10-14 Thread Gonzalo Servat
Hi Juan, Thanks for your reply. I was going to look into using stored configs with MySQL as per your suggestion, until I saw R.I.Pienaar's email :( Yes, I would certainly use DNS if I could, but unfortunately DNS is not an option in this setup. I think I will have to either parse files (eek) or

[Puppet Users] Managing /etc/hosts without using exported resources

2013-10-13 Thread Gonzalo Servat
Hi All, I am using Puppet 3.2.4 and I'd like Puppet to manage /etc/hosts for me and add "neighbouring hosts" only to /etc/hosts. These hosts are determined to be neighbours based on where they are (city/country). For example ($::city and $::country are custom facts): @@host { $::fqdn: ip

[Puppet Users] Re: Ways to set a global variable

2013-10-10 Thread Gonzalo Servat
posed to setting it statically in hiera. - Gonzalo On Fri, Oct 11, 2013 at 9:53 AM, Gonzalo Servat wrote: > Hi All, > > In hiera, I have something like: > > interfaces: > nic1: > 10G: true > ip: x.x.x.x > netmask: x.x.x.x > nic2:

[Puppet Users] Ways to set a global variable

2013-10-10 Thread Gonzalo Servat
Hi All, In hiera, I have something like: interfaces: nic1: 10G: true ip: x.x.x.x netmask: x.x.x.x nic2: ip: x.x.x.x netmask: x.x.x.x This hiera config is used to build the interface configuration files. Now, if a server has at least ONE NIC with 10

Re: [Puppet Users] Augeas lens dependency on valid config file parsing

2013-03-22 Thread Gonzalo Servat
On Sat, Mar 23, 2013 at 9:47 AM, Gonzalo Servat wrote: > On Fri, Mar 22, 2013 at 9:11 PM, Dominic Cleal wrote: > >> Perhaps ideally, lenses could be bundled with the software responsible >> for the config file formats themselves so they're more easily kept in >> sy

Re: [Puppet Users] Augeas lens dependency on valid config file parsing

2013-03-22 Thread Gonzalo Servat
On Fri, Mar 22, 2013 at 9:11 PM, Dominic Cleal wrote: > Perhaps ideally, lenses could be bundled with the software responsible > for the config file formats themselves so they're more easily kept in > sync. There are a small number of projects that do this (libvirt, > libguestfs, corosync), but

[Puppet Users] Augeas lens dependency on valid config file parsing

2013-03-21 Thread Gonzalo Servat
Hi All, I just ran into a frustrating Augeas problem, which I thought I'd share with you all. We run a cron every morning to fetch the latest RPMs (for the packages we're interested in) from various places such as rpmforge, EPEL, etc. This morning I tried to build a VM and it failed. What happen

Re: [Puppet Users] Re: Hiera question -- accessing a hash from an erb template

2013-02-12 Thread Gonzalo Servat
On Wed, Feb 13, 2013 at 1:41 AM, jcbollinger wrote: > > For some reason, the output in /etc/foo.conf will be '10GB' on its own >> line, instead of 'file_size: 10GB'. Almost as if there is a funny character >> in there? >> >> Any ideas? >> > > > Maybe there's a funny character in there. Seriously.

[Puppet Users] Hiera question -- accessing a hash from an erb template

2013-02-11 Thread Gonzalo Servat
Hi All, Simple question (hopefully). Say I have this: common.yaml: foo: bar: 10GB ... and in the manifest: $config = hiera('foo') file { '/etc/foo.conf': content => template('module/foo.erb') } ... and in foo.erb: file_size: <%= @config['bar'] %> For some reason, the output in /etc/f

Re: [Puppet Users] Re: Dynamic yum.conf 'exclude' line

2013-01-25 Thread Gonzalo Servat
On Sat, Jan 26, 2013 at 1:38 AM, jcbollinger wrote: > > Puppet's architecture does not lend itself to constructing values > iteratively, and what Hiera brings to the table in that area does not apply > to the scenario you describe. There are a couple of ways you might be able > to work around Pup

[Puppet Users] Dynamic yum.conf 'exclude' line

2013-01-24 Thread Gonzalo Servat
Hi All, I have finally switched to using hiera (worthy goal!) and I am looking for a flexible way to manage the 'exclude' line in /etc/yum.conf. I want to be able to specify from different classes RPMs to be excluded in /etc/yum.conf, then build the exclude line from all those classes that set an

Re: [Puppet Users] Re: Puppet 2.7 v 3.0 in the PuppetLabs yum repo

2012-10-13 Thread Gonzalo Servat
On Sun, Oct 14, 2012 at 11:27 AM, Jakov Sosic wrote: > On 10/08/2012 09:21 PM, Jeff McCune wrote: > > I hope this helps and thank you again for reporting this issue, >> > > I think the easiest way of handling this issue is to have different > repositories for different versions of puppet. > I w

Re: [Puppet Users] Answer a question after a command has been run in a init.pp in a module.

2012-10-09 Thread Gonzalo Servat
On Wed, Oct 10, 2012 at 5:26 AM, JGonza1 wrote: > I have the command below in a init.pp file that I run to startup splunk > for the first time but it outputs the license agreement which requires to > input a y or n. Is there a way to input a y after the lincese agreement? > According to http://d

Re: [Puppet Users] Staging environment

2012-09-20 Thread Gonzalo Servat
On Thu, Sep 20, 2012 at 3:37 PM, Garrett Honeycutt wrote: > Hiera[2] is meant to solve this. You might have staging.yaml and > production.yaml that specify values for mysql_innodb_buffer_pool_size. > Another scenario I've found is that we also add certain users if $::environment is production, an

Re: [Puppet Users] Staging environment

2012-09-19 Thread Gonzalo Servat
On Thu, Sep 20, 2012 at 3:37 PM, Garrett Honeycutt wrote: > No need at all to use a different puppet master, you could just use > environments[1]. When you want to test a system again a different > environment, staging in this example, you can run `puppet agent -t > --environment=staging`. > Yep,

Re: [Puppet Users] Staging environment

2012-09-19 Thread Gonzalo Servat
Hi All, Thanks for your feedback. While writing the original email, the subject sounded familiar and that's because I had written about it in the past: https://groups.google.com/d/topic/puppet-users/twLhIwsCRu4/discussion Apologies to those involved in the other thread for not replying, but

[Puppet Users] Staging environment

2012-09-18 Thread Gonzalo Servat
Hi All, In our environment, we use the $::environment variable extensively to determine if the host should have one set of mounts (e.g. production) or a different set of mounts (e.g. qa). This is just one example, but there are many others where the $::environment variable comes into play. The pr

Re: [Puppet Users] erb syntaxes

2012-09-02 Thread Gonzalo Servat
On Mon, Sep 3, 2012 at 1:31 PM, Choon Ming Goh wrote: > Hi guys, > > I'm trying to do the following in my template: > > location <%= location %> { > proxy_pass <%= proxy %>; > <% if scope.lookupvar('nginx::resource::location::proxy_header') then > scope.lookupvar('nginx::resource

Re: [Puppet Users] Thoughts on job listings?

2012-05-30 Thread Gonzalo Servat
On Thu, May 31, 2012 at 7:13 AM, R.I.Pienaar wrote: > > job postings from community members looking for themselves/their employers > with clear direct to employer contact information +1 > > job postings from recruiters -1 > +1 to what R.I.P just said :-) The problem with the weekly digest email

[Puppet Users] Puppet staging server

2012-03-06 Thread Gonzalo Servat
Hi All, I tried to implement a second Puppet server as a "staging" server with the idea of being able to run puppet in dry run mode against this staging server. I ran into some SSL trouble. When I point at the staging server, I get various SSL related errors and I assume it's because the ca cert

Re: [Puppet Users] Re: Mounts occasionally not applied on first run

2012-02-24 Thread Gonzalo Servat
On Sat, Feb 25, 2012 at 2:06 AM, jcbollinger wrote: > > I have not noticed this behavior, but you're a little vague. Yes, I guess I wasn't sure what I could provide in terms of detail so your questions help! When you say that the Mount resources are not applied, what exactly does > that > mean?

[Puppet Users] Mounts occasionally not applied on first run

2012-02-23 Thread Gonzalo Servat
Hi All, Strange problem specifically to do with mounts. When I run Puppet for the first time on a server, occasionally everything will get applied except for mounts, and other times mounts are applied as part of the first run. No errors in /var/log/messages unfortunately. Has anyone else experien

Re: [Puppet Users] Best way to test changes?

2012-02-23 Thread Gonzalo Servat
On Thu, Feb 23, 2012 at 11:09 PM, jimbob palmer wrote: > I'm worried about making bad changes to a module which will impact > lots of hosts. > > How can I avoid this? > > Ideally I'd like every node to run in noop, and then to approve the > changes if they look right. > Hi Jim, We're not current

Re: [Puppet Users] Managing /etc/yum.conf

2012-02-18 Thread Gonzalo Servat
On Fri, Feb 17, 2012 at 5:26 PM, Gary Larizza wrote: > Hey Gonzalo, > > Have you tried Hiera at all? (http://github.com/puppetlabs/hiera and > http://github.com/puppetlabs/hiera-puppet ) With Hiera (and, > specifically the hiera_array() function), you can scour through a hierarchy > to populate

Re: [Puppet Users] Managing /etc/yum.conf

2012-02-16 Thread Gonzalo Servat
On Fri, Feb 17, 2012 at 5:26 PM, Gary Larizza wrote: > Hey Gonzalo, > > Have you tried Hiera at all? (http://github.com/puppetlabs/hiera and > http://github.com/puppetlabs/hiera-puppet ) With Hiera (and, > specifically the hiera_array() function), you can scour through a hierarchy > to populate

[Puppet Users] Managing /etc/yum.conf

2012-02-16 Thread Gonzalo Servat
Hi, It's easy enough to modify, say, the "exclude" variable in /etc/yum.conf with something like: augeas { yum_exclude_kernel: context => '/files/etc/yum.conf/main', changes => 'set exclude kernel*' } However, I'd like a more flexible system where I can "build" the list o

Re: [Puppet Users] puppetd hanging on some nodes

2012-02-14 Thread Gonzalo Servat
On Wed, Feb 15, 2012 at 11:02 AM, Daniel Pittman wrote: > Sorry for not getting back to this sooner. If you are running 2.7.10, > can you try removing the file > `puppet/util/instrumentation/listeners/process_name.rb` and see if > that fixes the problem? > No worries Daniel. Yes. It did fix the

Re: [Puppet Users] Facter displaying multiple IP addresses?

2012-02-12 Thread Gonzalo Servat
On Mon, Feb 13, 2012 at 2:01 PM, Will S. G. wrote: > > Is there a way to display eth{0-5} as well? > You could do a for loop from 0 to N (5?) and check if the variable exists (if has_variable?("ipaddress_eth" + index)) then print it. I'm sure there's probably a nicer way of doing this in Ruby :)

Re: [Puppet Users] puppetd hanging on some nodes

2012-02-09 Thread Gonzalo Servat
On Thu, Feb 9, 2012 at 5:08 PM, Gonzalo Servat wrote: > Damn. Well, at least we eliminated one possible cause. Is there any >> chance you can run with `--debug` enabled on one of the failed >> machines, and see if that points to the right place? Otherwise we >> have to s

Re: [Puppet Users] puppetd hanging on some nodes

2012-02-08 Thread Gonzalo Servat
> > Damn. Well, at least we eliminated one possible cause. Is there any > chance you can run with `--debug` enabled on one of the failed > machines, and see if that points to the right place? Otherwise we > have to start to get into some fairly heavy ways to figure out what is > going on. > OK

Re: [Puppet Users] puppetd hanging on some nodes

2012-02-08 Thread Gonzalo Servat
On Thu, Feb 9, 2012 at 5:44 AM, Daniel Pittman wrote: > RedHat released some update kernels that reintroduced a bug from the > 2.6.13 Linux kernel. You can run any of the code in this gist to > check if your kernel suffers that: https://gist.github.com/441278 > > The C code is obviously a pretty

Re: [Puppet Users] puppetd hanging on some nodes

2012-02-07 Thread Gonzalo Servat
On Wed, Feb 8, 2012 at 3:25 PM, Brian Gallew wrote: > If you are like me, the problem is that the ruby for your platform sucks. > The webstack ruby 1.8.7 for Solaris 10 has a nasty tendency to hang (for > the daemons) and core dump for individual runs. Individual runs out of a > crontab are the

[Puppet Users] puppetd hanging on some nodes

2012-02-07 Thread Gonzalo Servat
Hi All, In my set-up, I've got a cron job that triggers a Puppet run every 20 minutes. I've found that on approximately 13 nodes (out of 166), puppetd just hangs. I have to go in, kill the process, remove /var/lib/puppet/state/puppetdlock, and run puppet again and then it's fine. After a while, i

Re: [Puppet Users] puppet cert list --all shows revoked certificates even though they're not?

2012-01-09 Thread Gonzalo Servat
6-12-12T21:58:43GMT > /CN=demo.puppetlabs.lan > 0x000d 2011-12-13T21:58:55GMT 2016-12-12T21:58:55GMT > /CN=demo.puppetlabs.lan > > With all the info above, you should be able to tell 0xc is revoked, > the server currently have 0xd which is still valid and puppet cert -la > s

Re: [Puppet Users] puppet cert list --all shows revoked certificates even though they're not?

2012-01-09 Thread Gonzalo Servat
Done :) https://projects.puppetlabs.com/issues/11854 On Tue, Jan 10, 2012 at 1:14 PM, Jo Rhett wrote: > I agree. I would open a bug report :) > > On Jan 9, 2012, at 5:26 PM, Gonzalo Servat wrote: > > Thanks for your reply. > > I was expecting to see something like

Re: [Puppet Users] puppet cert list --all shows revoked certificates even though they're not?

2012-01-09 Thread Gonzalo Servat
wrote: > The previous certificate was revoked, and the new one was signed. So what > you are seeing is true… > > On Jan 9, 2012, at 5:11 PM, Gonzalo Servat wrote: > > As per the subject, "puppet cert list --all" is showing a heap of revoked > certificates, even thou

[Puppet Users] puppet cert list --all shows revoked certificates even though they're not?

2012-01-09 Thread Gonzalo Servat
Hi All, As per the subject, "puppet cert list --all" is showing a heap of revoked certificates, even though they're not actually revoked. I can go on any of the revoked clients' host and trigger a Puppet run, and it'll work fine. The only reason why they appear revoked is because the systems were

Re: [Puppet Users] Re: Making a system user member of a Puppet managed group

2012-01-06 Thread Gonzalo Servat
On Thu, Jan 5, 2012 at 10:50 AM, Andreas N wrote: > On Wednesday, January 4, 2012 3:06:27 PM UTC+1, Gonzalo wrote: >> >> >> Otherwise, group membership is managed as a property of Users, ergo >>> you cannot manage it (directly) if you do not manage the users in >>> question. Your only options in

Re: [Puppet Users] Re: Making a system user member of a Puppet managed group

2012-01-04 Thread Gonzalo Servat
On Thu, Jan 5, 2012 at 1:00 AM, jcbollinger wrote: > > It depends on the Group provider, which usually depends on operating > system. If you are using the default Group provider for AIX, OS X, or > Windows, then group membership is managed as an attribute of the group > instead of the user. In t

[Puppet Users] Making a system user member of a Puppet managed group

2012-01-03 Thread Gonzalo Servat
Hi All, I have a particular requirement where a Puppet managed group needs to have several members that are either local and not managed by Puppet (e.g. mysql) or they reside in LDAP. Apart from running an exec call to "groupmems", is there another way to achieve this? Thanks in advance. Gonzalo

Re: [Puppet Users] Class name clashes

2011-12-08 Thread Gonzalo Servat
On Fri, Dec 9, 2011 at 6:50 AM, Adam Gibbins wrote: > On 7 December 2011 23:09, Gonzalo Servat wrote: >> >> Is this how it's supposed to work? >> >> Pretty sure I've done this before and haven't had it do that. > Could you try specifying the namespa

[Puppet Users] Class name clashes

2011-12-08 Thread Gonzalo Servat
Hi All, I have a module called "openvpn" which lives in /etc/puppet/modules/openvpn/. It just sets up generic OpenVPN stuff. I then set-up another class called s_jumpbox::openvpn, which lives in /etc/puppet/services/s_jumpbox/manifests/openvpn.pp. Inside this latter class, I did an "include openv

Re: [Puppet Users] Puppet for Oracle Enterprise Linux

2011-12-01 Thread Gonzalo Servat
Try the EPEL repo -- http://fedoraproject.org/wiki/EPEL. - Gonzalo On Fri, Dec 2, 2011 at 11:07 AM, Douglas Garstang wrote: > On Thu, Dec 1, 2011 at 4:03 PM, Michael Stahnke > wrote: > > Puppet works fine on OEL. You can add yum.puppetlabs.com as a repo > > and use the el based stuff. > > > >

[Puppet Users] Dynamic configuration file

2011-11-28 Thread Gonzalo Servat
Hi All, We use a package called "Torque Scheduler" which is based on a configuration file that defines nodes, the queues they handle, how many slots, etc. The config file format is similar to: unlimited ... node: : ... node: : ... ... node: : ... (a node may or may not be list

Re: [Puppet Users] Re: Is it possible to get a list of all nodes in your manifests and all classes assigned to those nodes programatically in Ruby?

2011-11-21 Thread Gonzalo Servat
I rely on Puppet dashboard to tell me which nodes haven't checked in for a while... :) - Gonzalo On Tue, Nov 22, 2011 at 11:43 AM, Trevor Vaughan wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Thanks for the suggestions guys but I'm giving this one up as too annoying > to bother. >

Re: [Puppet Users] Re: Variables inside node definition

2011-11-18 Thread Gonzalo Servat
On Sat, Nov 19, 2011 at 12:58 AM, jcbollinger wrote: > [..snip..] > > You have a great use case here for external data: instead of using a > node variable to communicate the machine's purpose, you could instead > have class motd look it up via extlookup() or hiera. > Thanks for replying John. I

[Puppet Users] Variables inside node definition

2011-11-17 Thread Gonzalo Servat
Hi All, How would I go about achieving the following? node basenode { include motd } node www inherits basenode { $purpose = "web server" } In the "motd" module, I have a template that formats a standard /etc/motd file and I want to make use of the $purpose variable. When I access scop

[Puppet Users] Re: Adding a parameter to a custom Puppet type/provider

2011-11-14 Thread Gonzalo Servat
the new custom type. The pluginsync feature will then synchronise the files and the new code will be loaded when both daemons are restarted. Restarted puppetmaster and it's now OK. Caused me many hours of grief!! - Gonzalo On Tue, Nov 15, 2011 at 4:48 PM, Gonzalo Servat wrote: >

[Puppet Users] Adding a parameter to a custom Puppet type/provider

2011-11-14 Thread Gonzalo Servat
Hi All, I've downloaded a Puppet module and I'm trying to add a parameter to it by editing lib/puppet/type/.rb. I simply added: newproperty(:pcfree) do desc "My description here" end In the corresponding file in lib/puppet/provider, I do something with :pcfree. Whenever I call t

Re: [Puppet Users] if not contains in template

2011-11-09 Thread Gonzalo Servat
I'm not a Ruby expert, but shouldn't it be <% if scope.lookupvar("::fqdn") !~ /string/ %> ? - Gonzalo On Thu, Nov 10, 2011 at 9:35 AM, Denmat wrote: > Hi, > > that would be '!=' and not '!=~' wouldn't it? > > Den > > On 10/11/2011, at 9:02, "david.gar...@gmail.com" > wrote: > > I can't

[Puppet Users] LSB facts

2011-10-21 Thread Gonzalo Servat
Hi All, In the example42 modules, I noticed the following is done: # Calculate OS version (without using lsb facts) $ossplit=split($operatingsystemrelease, '[.]') $osver=$ossplit[0] I've been using $lsbmajdistrelease in all my configs. Is there any particular reason why I might want to u

Re: [Puppet Users] Different paths based on environment

2011-10-12 Thread Gonzalo Servat
On Thu, Oct 13, 2011 at 2:25 AM, Nigel Kersten wrote: > > Are you saying you're sourcing files from outside the current environment > for the client? > > if you put your files into modules that differ per environment, then > something like: > > puppet:///modules/mymodule/myfile > > will resolve t

Re: [Puppet Users] Different paths based on environment

2011-10-12 Thread Gonzalo Servat
On Wed, Oct 12, 2011 at 7:02 PM, Daniel Maher wrote: > On 10/11/2011 11:14 PM, Gonzalo Servat wrote: > > I am re-doing the Puppet config and trying to come up with a better way >> of solving the multiple environment problem. Sometimes files need to be >> sourced that depend

Re: [Puppet Users] Issues switching over to using environments

2011-10-11 Thread Gonzalo Servat
> ] > } > > This will use the first found file as the source. > > On Oct 11, 2011, at 5:43 PM, Gonzalo Servat wrote: > > Somewhat related to this, is there a way for Puppet to source files in this > manner: > > First: /etc/puppet/modules//$environment/ >

Re: [Puppet Users] Issues switching over to using environments

2011-10-11 Thread Gonzalo Servat
Somewhat related to this, is there a way for Puppet to source files in this manner: First: /etc/puppet/modules//$environment/ Default: /etc/puppet/modules// Just to avoid having the same directory structure under /etc/puppet/$environment/ as Deven has done. Best regards, Gonzalo On Wed, Oct 12,

[Puppet Users] Different paths based on environment

2011-10-11 Thread Gonzalo Servat
Hi All, In our environment, we have production and DR puppet clients that live on different networks. Currently, we do things like "include s_service::prod" or "include s_service::dr", etc. Both of these subclasses would inherit from s_service where common things lie. I am re-doing the Puppet con