[Puppet Users] apt-get update - exit status 100

2009-02-26 Thread Keith Edmunds
We have "apt-get update" run from Puppet when /etc/apt/sources.list changes. Sometimes the command exits with status=100. This seems to be a soft or transient error, but I've not been able to find any details of what it actually means. Has anyone else experienced this? --~--~-~--~~--

[Puppet Users] Re: apt-get update - exit status 100

2009-02-26 Thread Nicolas Szalay
Le jeudi 26 février 2009 à 10:52 +, Keith Edmunds a écrit : > We have "apt-get update" run from Puppet when /etc/apt/sources.list > changes. Sometimes the command exits with status=100. This seems to be a > soft or transient error, but I've not been able to find any details of > what it actuall

[Puppet Users] Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Kyle Cordes
I had this problem affect at least one server overnight; there might be more. I put in a new version of puppet and puppetmaster, and had to step away before getting things all the way working. I left it in a state where the puppetmaster was not running, but some puppetd were running. (versio

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Kyle Cordes
Kyle Cordes wrote: > Apparently, puppetd tries quite vigorously to connect. It generated > 10GB of syslog and daemon.log overnight, full of this: > Feb 26 07:45:10 tr11 puppetd[14683]: : Certificate retrieval failed: > Could not connect to puppet on port 8140 A more enlightened syslogd on a

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Mike Renfro
Kyle Cordes wrote: > 70,000 times per minute, is a bit too often to attempt to connect ;-) Look for "-w 0" in the puppetd arguments, common in Debian and Ubuntu packages. Change it to something like "-w 120" to make it only check for certificates every 2 minutes. I've had the exact same thing

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Kyle Cordes
Mike Renfro wrote: > Look for "-w 0" in the puppetd arguments, common in Debian and Ubuntu > packages. Change it to something like "-w 120" to make it only check for > certificates every 2 minutes. I've had the exact same thing happen in Ouch. This seems like: a) a really awful choice for t

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Paul Lathrop
On Thu, Feb 26, 2009 at 6:58 AM, Kyle Cordes wrote: > Ouch. This seems like: > > a) a really awful choice for the Debian / Ub packages Yep. > b) a feature that Puppet would be much better off without. > > > I can't imagine a compelling use case for a "pound on the server > continuously" setting

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Kyle Cordes
Paul Lathrop wrote: >> I can't imagine a compelling use case for a "pound on the server >> continuously" setting; and I'm not surprised, with some years of > Just because you can't imagine it, doesn't mean it doesn't exist. I > use -w 0 intentionally and happily, and there is a compelling use ca

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Paul Lathrop
On Thu, Feb 26, 2009 at 8:49 AM, Kyle Cordes wrote: > I am sure there is a good use for some aspect of the -w 0 feature; the > part I don't think there is a good use for, is writing 70,000 entries > per minute to syslog, or for trying to connect in a tight loop for 12 > hours.  I am sure there is

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Mike Renfro
On 2/26/2009 11:14 AM, Paul Lathrop wrote: > On Thu, Feb 26, 2009 at 8:49 AM, Kyle Cordes wrote: >> I am sure there is a good use for some aspect of the -w 0 feature; the >> part I don't think there is a good use for, is writing 70,000 entries >> per minute to syslog, or for trying to connect in

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Kyle Cordes
Paul Lathrop wrote: > You may be right. On the other hand, powerful tools *often* provide > ways of shooting oneself in the foot. One might make a similar I heartily agree; what I am looking at is the difference between: a) it is possible to type "sudo rm -rf /" b) making rm default to a path

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Paul Lathrop
On Thu, Feb 26, 2009 at 9:38 AM, Mike Renfro wrote: > > On 2/26/2009 11:14 AM, Paul Lathrop wrote: >> On Thu, Feb 26, 2009 at 8:49 AM, Kyle Cordes wrote: >>> I am sure there is a good use for some aspect of the -w 0 feature; the >>> part I don't think there is a good use for, is writing 70,000 e

[Puppet Users] Re: Could not request certificate -> big logs, full /var, failure

2009-02-26 Thread Paul Lathrop
On Thu, Feb 26, 2009 at 9:58 AM, Kyle Cordes wrote: > I heartily agree; what I am looking at is the difference between: > > a) it is possible to type "sudo rm -rf /" > > b) making rm default to a path of "/" and default -r -f options ON, and > include it in sudoers by default. > > > Obviously B i

[Puppet Users] Gentoo provider rewrite

2009-02-26 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all Gentoo people A number of people have had issues with the current Gentoo package provider. There is a re-write available that uses equery instead of eix. You can see the branch and a patch at: http://projects.reductivelabs.com/issues/1658

[Puppet Users] Re: directory creation - difference in operation between RHEL5 and Solaris

2009-02-26 Thread chakkerz
no good with just ensure => directory, on solaris i get it to create the file (so no change): r...@puppetsun:~# rm -rf /var/log/sysinfo r...@puppetsun:~# /opt/csw/bin/puppetd -vt | grep sysinfo notice: //Node[default]/defaultnode/shared-default/sysinfo/File[/var/ log/sysinfo]/ensure: created r..

[Puppet Users] Re: directory creation - difference in operation between RHEL5 and Solaris

2009-02-26 Thread chakkerz
Despite originally appearing to not work, it actually does. I modified the wrong part of the file. Thanks for that AJ. ... no i have to get solaris to be able to access the files in modules and i'll be ready to deploy :D chakkerz --~--~-~--~~~---~--~~ You receive

[Puppet Users] exporter resource to push out nss-db files

2009-02-26 Thread Geoff Crompton
In http://groups.google.com/group/puppet-users/browse_thread/thread/1dc2dbac1f6cc0de?hl=en I was asking about pushing passwd.db out to clients, and James pointed me to Exported Resources. I've read up on Exported Resources, but I'm not getting where I want. The wiki has http://reductivelabs.com

[Puppet Users] Re: Package rpm parameters

2009-02-26 Thread Todd Zullinger
Steven Nemetz wrote: > Is there a way to pass parameters to rpm with the package type? > > I have some rpms that need to be installed with --nodeps What sort of packages do you need to do this with? It sounds like broken packages (which often come from proprietary vendors that don't know how to p

[Puppet Users] too many open files

2009-02-26 Thread chakkerz
Hello there i'm getting a stack of the follwoing errors: err: Could not call fileserver.list: # err: //Node[default]/defaultnode/shared-default/homedirectories/File[/ etc/pam_ssh/eric]: Failed to generate additional resources during transaction: Too many open files - socket(2) err: //Node[defaul

[Puppet Users] Re: too many open files

2009-02-26 Thread chakkerz
i sounds extremely exactly like http://projects.reductivelabs.com/issues/1844 --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To

[Puppet Users] management of files in a directory i already deployed in same class

2009-02-26 Thread hOOlä'gOO khän
here's most of my class, if I comment out the bottom 3 clauses , the 3 key files get copied. otherwise it doesn't get copied. what am i doing wrong ? class openvpn { file {"/etc/openvpn/keys": ensure => exists , ensure => present , ensure => d

[Puppet Users] Re: puppetmasterd & mongrel port binding

2009-02-26 Thread FLEMING PETER-PRC368
I have the same problem but don't have a puppet.conf just puppetmasterd.conf. Puppetmaster always tries to bind to the default port, here is the command I'm running: /usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp --servertype=mongrel --masterport=18140 --pidfile=/var/run/pup

[Puppet Users] Re: err: Could not retrieve configuration

2009-02-26 Thread Joshua Lenmarc
Fixed. This was due to lacking uuidtools and builder gems on the server. On Fri, Feb 27, 2009 at 4:56 AM, Lenmarc wrote: > I get this error when I try to run puppetd: > > err: Could not retrieve configuration: Uncaught exception no such file > to load -- uuidtools in method puppetmaster.getconfi

[Puppet Users] err: Could not retrieve configuration

2009-02-26 Thread Lenmarc
I get this error when I try to run puppetd: err: Could not retrieve configuration: Uncaught exception no such file to load -- uuidtools in method puppetmaster.getconfig # puppetd --listen --verbose --ignorecache --server server.corp.com ** Ruby version is not up-to-date; loading cgi_multipart_eo

[Puppet Users] Re: Package rpm parameters

2009-02-26 Thread Steven Nemetz
The packages are ok (straight CentOS 4), but the OS is our own dialect (modified from CentOS 4). So, I end up with some packages that depend on others only to create a directory or a config file that puppet will be doing anyways. I don't want to install the dependence because it installs other stu

[Puppet Users] Re: management of files in a directory i already deployed in same class

2009-02-26 Thread Bjørn Dyresen
On Feb 27, 2009, at 4:00 AM, hOOlä'gOO khän wrote: > > here's most of my class, if I comment out the bottom 3 clauses , the 3 > key files get copied. otherwise it doesn't get copied. what am i > doing wrong ? > > class openvpn { > file {"/etc/openvpn/keys": > ensure => exis

[Puppet Users] Re: management of files in a directory i already deployed in same class

2009-02-26 Thread Bjørn Dyre Dyresen
2009/2/27 Bjørn Dyresen > > On Feb 27, 2009, at 4:00 AM, hOOlä'gOO khän wrote: > > >> here's most of my class, if I comment out the bottom 3 clauses , the 3 >> key files get copied. otherwise it doesn't get copied. what am i >> doing wrong ? >> >> class openvpn { >> file {"/etc/openvpn/key