Re: [Puppet Users] ssh_authorized_key pattern-list

2022-09-11 Thread Ian Mortimer
On Sat, 2022-09-10 at 08:26 -0700, Saad Butto wrote: > I found that too but it defers you to SSH options. It doesn't say how > to use from= with puppet ssh_authorized_key resource. Options is an array. Most commonly used options are from and command. Something like this in hiera is what we use:

Re: [Puppet Users] ssh_authorized_key pattern-list

2022-09-04 Thread Ian Mortimer
On Wed, 2022-08-31 at 14:03 -0700, Saad Butto wrote: > I couldn't find the ssh_authorized_key attribute that can help > achieve that. > > Can someone please help me find a way to do it using puppet > ssh_authorized_key resource? https://puppet.com/docs/puppet/5.5/types/ssh_authorized_key.html

Re: [Puppet Users] Newbie wants to know your favourite distro for Puppet Server

2021-06-16 Thread Ian Mortimer
On Wed, 2021-06-16 at 05:44 -0700, Jarod Schoen wrote: > I went CentOS 7.9 because some body of people is saying that version > 8 is beleaguered already... I dont know who to believe. You probably don't want to install CentOS 8 on any production server. It will be replaced at the end of the year

Re: [Puppet Users] puppet in epel

2018-04-08 Thread Ian Mortimer
On Thu, 2018-04-05 at 07:27 -0700, Michael Di Domenico wrote: > does anyone know who or how puppet gets into epel?  the packages for > puppet/facter in epel are woefully out of date. There's a request in bugzilla for an update to facter but hasn't had a response yet:  https://bugzilla.redhat.

Re: [Puppet Users] Augeas: Skipping because no files were changed

2015-07-07 Thread Ian Mortimer
On Tue, 2015-07-07 at 07:33 -0700, Chris Lee wrote: > I am trying to add two new options to grub.conf using augeas. > The code is as follows: > > augeas { 'grub.conf/8250_LAR': > tag => chris1, > incl=> '/boot/grub/grub.conf', > lens=> 'Grub.lns', >

Re: [Puppet Users] Augeas: Skipping because no files were changed

2015-07-07 Thread Ian Mortimer
On Tue, 2015-07-07 at 07:33 -0700, Chris Lee wrote: > I am trying to add two new options to grub.conf using augeas. > The code is as follows: > > augeas { 'grub.conf/8250_LAR': > tag => chris1, > incl=> '/boot/grub/grub.conf', > lens=> 'Grub.lns', >

Re: [Puppet Users] Share data between custom functions/resources/providers?

2015-03-06 Thread Ian Mortimer
On Sat, 7 Mar 2015, Nick Howes wrote: Thanks Felix; all good points. I'll probably start off with define & exec to drive `firewall-cmd` then, and see how that turns out. There's a puppet-firewalld package in the Fedora and Epel repos which installs Jiri Popelka's firewalld module. -- Ian

Re: [Puppet Users] Partial management of /etc/hosts.allow / Augeas and Arrays

2015-01-18 Thread Ian Mortimer
On Fri, 2015-01-16 at 08:27 -0800, Barry Gestwicki wrote: > > 3.) Augeas / Type - This seems to be my best option thus far. > However, I've ran in to a bit of a snag in how to get an array to work > with Augeas resource declarations within a defined type. When I > execute the sample code below,

Re: [Puppet Users] Using augeas to insert two lines unless they alrdy exist

2014-05-22 Thread Ian Mortimer
On 05/22/14 18:21, Erling Ringen Elvsrud wrote: I try to accomplish this with Puppet / Augeas: Insert: Match User banner "none" at the end of /etc/ssh/sshd_config unless the two lines are alredy present. > ... I appreciate if anyone can post a suggested solution for this task. set /fi

Re: [Puppet Users] Renew puppet agent certificate

2014-05-19 Thread Ian Mortimer
On 05/19/14 22:30, prunkd...@gmail.com wrote: I'am search for the best way to reconnect a puppet client when I reinstall the entire operating system of the host. In a lab where rebuilds are frequent, I keep a copy of each hosts certificates and keys on the file server and copy them from an NFS

Re: [Puppet Users] Re: Augeas lens to change an arbitrary line in a file?

2014-04-23 Thread Ian Mortimer
On 04/23/14 18:29, Joachim Schrod wrote: I don't understand why the match regex must match the line value. Your match needs to be: match => '^(% )*/DEFAULTPAPERSIZE \(a4\)', It has to match the line value, otherwise on the next puppet run your modified line won't match and puppet will insert

Re: [Puppet Users] Puppet resources or plain script?

2014-01-31 Thread Ian Mortimer
On Sat, 1 Feb 2014, zerozerouno...@gmail.com wrote: Actually, I have to work with custom config files, too. But they use standard .ini and .conf file structure, with [sections] and parameter=value pairs. Does augeas need custom templates to be developed in this case, too? I hoped it could work f

Re: [Puppet Users] Re: I need a virtual exported resource, or something similar

2014-01-13 Thread Ian Mortimer
create_resources which will create a resource for each hash. -- Ian i.morti...@uq.edu.au Ian Mortimer Tel: +61 7 3346 8528 Science IT University of Queensland -- You received this message because you are subscribed to the Google Groups &q

Re: [Puppet Users] Augeas and custom lenses?

2012-11-06 Thread Ian Mortimer
enses/dist or to rebuild augeas-libs, is there any other way to distribute modifications of existing lenses or completely new lenses? It would be nicer to put them in /usr/share/augeas/lenses/local but that doesn't work (or didn't the last time I tried). -- Ian i.morti...@uq

Re: [Puppet Users] Re: exec onlyif not working properly

2011-07-24 Thread Ian Mortimer
On Sun, 2011-07-24 at 02:03 -0400, vagn scott wrote: > the idiom is to use a trivial character class: > > unless => "/bin/ps -aux | /usr/bin/grep '/[d]ata/service'", Or use pgrep which never matches itself: /usr/bin/pgrep -f '/data/service' -- Ian -- You received this message because you

Re: [Puppet Users] Re: What to do if something is not required on the clients?

2011-04-19 Thread Ian Mortimer
On Wed, 2011-04-20 at 07:37 +1000, Sans wrote: > if I know that I definitely don't want httpd to > be installed on the system at the first place, then why should I care > about all the packages (maybe installed by default) that need httpd - What happens if an update of a required package introduc

Re: [Puppet Users] Re: What to do if something is not required on the clients?

2011-04-18 Thread Ian Mortimer
On Mon, 2011-04-18 at 23:22 +1000, jcbollinger wrote: > (I am fairly sure that > this is why the yum Package provider uses "rpm -e" instead of "yum > remove" in the first place.) Except that installing or removing packages with rpm is now deprecated: http://illiterat.livejournal.com/7834.html

Re: [Puppet Users] keeping a service running properly

2011-03-16 Thread Ian Mortimer
On Wed, 2011-03-16 at 18:15 +1000, Felix Frank wrote: > Well you *would* roll your changed init script using puppet, so that's > not a problem. Except it would be an old init script, not necessarily compatible with the updated package. > I do that, but it sometimes worries me that possible desir

Re: [Puppet Users] keeping a service running properly

2011-03-13 Thread Ian Mortimer
On Fri, 2011-03-11 at 19:44 +1000, Stefan Schulte wrote: > What are the reasons that your service is running but not the way you > like? Mostly it does but occasionally after a network or power outage terminals reboot before they can contact the server which leaves ypbind running but not bound to

Re: [Puppet Users] keeping a service running properly

2011-03-13 Thread Ian Mortimer
On Fri, 2011-03-11 at 15:50 +1000, Ben Hughes wrote: > Is there no reason you can't just make the init script output what you > want, A yum update would undo any changes to the init script. > Otherwise the exec{} seems the path of least resistance. Seems like it. Thanks for the reply -- Ian

[Puppet Users] keeping a service running properly

2011-03-10 Thread Ian Mortimer
Hi The service in this case is ypbind but it could apply to other services. The problem is that `service ypbind status' returns 0 if the service is running even if it's not bound to the domain. Replacing hasstatus with `status => "/usr/bin/ypwhich"' doesn't fix it either because puppet will then