[Puppet Users] Newbie question: how to handle prompts from packages?

2010-01-27 Thread Rachel
For example, I've installed puppet on ubuntu. Say I want to use it to install an ubuntu package like moodle or mysql-server, puppet is hanging in the background waiting for a response to a question. (Installation of these packages normally interacts with the user to ask for passwords, etc) So how

Re: [Puppet Users] Newbie question: how to handle prompts from packages?

2010-01-27 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27/01/10 8:52 PM, Rachel wrote: > For example, I've installed puppet on ubuntu. Say I want to use it to > install an ubuntu package like moodle or mysql-server, puppet is > hanging in the background waiting for a response to a question. > > (Instal

Re: [Puppet Users] Newbie question: how to handle prompts from packages?

2010-01-27 Thread Rachel Willmer
Thanks, that's exactly what I was looking for. Rachel P.S. James, I ordered your book yesterday from Amazon, so hopefully all my other newbie questions will be answered there :-) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this g

[Puppet Users] Re: New Puppet Documentation Site

2010-01-27 Thread Bryan Schneiders
While the new documentation site is "pretty", I agree with the other posts that the font is way too big. I'm using Firefox 3.5.6 in Fedora 12. I find the new documentation site to take much longer to navigate, both between pages and on a page. The load times are fine, the layout is in my opinion

[Puppet Users] Re: New Puppet Documentation Site

2010-01-27 Thread John Lyman
It would be nice if the page titles weren't all "Puppet Docs." When I have multiple pages open in separate tabs, it's difficult to find the page I want. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet

Re: [Puppet Users] Re: New Puppet Documentation Site

2010-01-27 Thread Peter Meier
It would be nice if the page titles weren't all "Puppet Docs." When I have multiple pages open in separate tabs, it's difficult to find the page I want. The best idea is to fill feature requests on: http://projects.reductivelabs.com/projects/puppet-docs I assume it's pretty hard to track fe

[Puppet Users] Using Git to distribute Puppet configs

2010-01-27 Thread John Arundel
Hi, Stephen would never mention it himself, he's too modest, but he's done a great write-up of how he uses Git (or other DVCS) to distribute manifests instead of using a Puppetmaster. It's quite flexible and powerful (you can use a post-receive hook on the remote repos to run Puppet whenever a new

Re: [Puppet Users] Newbie question: how to handle prompts from packages?

2010-01-27 Thread Eric Gerlach
On Wed, Jan 27, 2010 at 09:11:49PM +1100, James Turnbull wrote: > See the responsefile attribute of the package type. > > http://docs.reductivelabs.com/references/stable/type.html#package You can do that now? Oh. That makes me happy, and I love Debian :-) Cheers, -- Eric Gerlach, Net

Re: [Puppet Users] recurse => true

2010-01-27 Thread Anchi Zhang
On Tue, Jan 26, 2010 at 2:15 PM, Anchi Zhang wrote: > > > >>> My fileserver.conf contains >> >>> >> >>> [files-solaris] >> >>> path /etc/puppet/manifests/files/solaris >> >>> allow * >> >>> >> >>> and >> >>> >> >>> puppetmaster# ls /etc/puppet/manifests/files/solaris/etc >> >>> motd ns

Re: [Puppet Users] Using Git to distribute Puppet configs

2010-01-27 Thread Atha Kouroussis
Hi John, I read the blog post and although an interesting approach, I can see several shortcomings, namely: - Lack of external node classifier: how do you control/specify which node applies which modules? - Anything apart from a DVCS to do deployment (i.e. subversion) would be madness. And even

Re: [Puppet Users] up2date + arch

2010-01-27 Thread James Cammarata
On Tue, 19 Jan 2010 13:07:21 -0800 (PST), James wrote: > I'm having an issue using package resources on RHEL 4 systems using > up2date with RHN. I need to ensure that libacl.i386 is installed on a > x86_64 system, however the up2date provider does not seem to like the > yum syntax for specifying

Re: [Puppet Users] recurse => true

2010-01-27 Thread Peter Meier
Something like that will work: node default { include solaris } class solaris { etc_file{['motd','nsswitch.conf','pam.conf','resolv.conf']: } define etc_file(){ file { "/etc/${name}": source => "puppet:///files-solaris/etc/${name}", } } } but this approach is not very puppet-like

Re: [Puppet Users] recurse => true

2010-01-27 Thread Anchi Zhang
> > the reason why I say that it doesn't scale is that for example if the ntp >> file changes you'd like to to restart the ntp service if the ntp config >> changes and so on. Anyway the idea is to organize things that belongs >> together, for example for ntp, the package, the service and the config

Re: [Puppet Users] Using Git to distribute Puppet configs

2010-01-27 Thread Thomas Bellman
Atha Kouroussis wrote: - Lack of external node classifier: how do you control/specify which node applies which modules? You would likely use 'node' statements in your manifests. But I think you can use external_nodes from stand-alone puppet as well. You would of course need to make sure that

Re: [Puppet Users] recurse => true

2010-01-27 Thread Peter Meier
Node and class: node default { include solaris } class solaris { file { "/etc": source => "puppet:///files-solaris/etc", recurse => true, ensure => directory, } } Solaris 10 puppet master trace: notice: Starting Puppet server versio

Re: [Puppet Users] Using Git to distribute Puppet configs

2010-01-27 Thread Nigel Kersten
On Wed, Jan 27, 2010 at 7:59 AM, Atha Kouroussis wrote: > Hi John, > I read the blog post and although an interesting approach, I can see > several shortcomings, namely: > - Lack of external node classifier: how do you control/specify which node > applies which modules? > We don't do things this

Re: [Puppet Users] How do I use a desktop client as puppet master?

2010-01-27 Thread Markus Falb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/01/2010 13:06, Mr Gabriel wrote: > Fully Qualified Domain Name seems to be a requirement for puppet master > server. I was expecting to run into issues say around 2/3 of the way > through, not at step one! > > So I guess my question is, is it po

Re: [Puppet Users] recurse => true

2010-01-27 Thread Anchi Zhang
On Wed, Jan 27, 2010 at 11:06 AM, Peter Meier wrote: > Node and class: >> >> node default { include solaris } >> class solaris { >>file { "/etc": >>source => "puppet:///files-solaris/etc", >>recurse => true, >>ensure => directory, >>

[Puppet Users] err: Could not call list: header too long

2010-01-27 Thread Jason Amato
Getting this error: err: Could not call list: header too long when running puppetca commands on master. There is not a disk space issue. On the puppet master server, /var filled up to 100% during the night. Now it's fine, down to 25% used. I rebooted server too Any fixes? -- You received this

[Puppet Users] Re: err: Could not call list: header too long

2010-01-27 Thread Jason Amato
some debug info: # puppetca -l -d debug: Failed to load library 'shadow' for feature 'libshadow' debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/ dscl does not exist debug: Puppet::Type::User::ProviderP

Re: [Puppet Users] up2date + arch

2010-01-27 Thread Carl Caum
Unfortunately even the yum provider sucks at this too. It may have been fixed recently, but I don't think so since the problem exists in how rpm reports back queries for available packages. I have to solve this with an exec. . You could do something similar to: exec {"install libacl.i386":

[Puppet Users] Re: err: Could not call list: header too long

2010-01-27 Thread Jason Amato
all fixed, had to remove 0 byte file from directory /var/puppet/ssl/ca/requests -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to p

[Puppet Users] Re: err: Could not call list: header too long

2010-01-27 Thread Jason Amato
Yeah, I fixed it! I removed some 0 byte certificate request files in dir /var/puppet/ssl/ ca/requests. That did the trick. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To un

Re: [Puppet Users] up2date + arch

2010-01-27 Thread James Cammarata
On Wed, 27 Jan 2010 11:50:41 -0600, Carl Caum wrote: > Unfortunately even the yum provider sucks at this too. It may have been > fixed recently, but I don't think so since the problem exists in how rpm > reports back queries for available packages. I have to solve this with an > exec. . You co

[Puppet Users] help for simple patch

2010-01-27 Thread Arnauld
Hi, in every classes I created, I defined a variable (named $version) to include a kind of versionning inside them. In puppetd sources, around network/client/master.rb:293 , the 'setclasses' function log the classes in a 'classfile' (here : $statedir/classes.txt). I'd just like to add classes $ve

Re: [Puppet Users] up2date + arch

2010-01-27 Thread Carl Caum
Make extra sure that's true. I found it won't give you an error but the package still won't always be installed. On Jan 27, 2010, at 12:05 PM, James Cammarata wrote: > > On Wed, 27 Jan 2010 11:50:41 -0600, Carl Caum wrote: >> Unfortunately even the yum provider sucks at this too. It may hav

Re: [Puppet Users] help for simple patch

2010-01-27 Thread Peter Meier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > in every classes I created, I defined a variable (named $version) to > include a kind of versionning inside them. > > In puppetd sources, around network/client/master.rb:293 , the > 'setclasses' function log the classes in a 'classfile' (here : > $s

Re: [Puppet Users] help for simple patch

2010-01-27 Thread Scott Smith
On 1/27/10 12:28 PM, Arnauld wrote: Anyone know how to access a variable inside a class ? I and many others have overcome this by using Puppet environments. If I make a change to a module, I simply push out another environment and tell clients that need the change to use that environment. A

[Puppet Users] Re: Disabling automountd on Solaris10.

2010-01-27 Thread Martin Englund
Tanaka-san! On Jan 27, 3:57 am, Nobuchika Tanaka wrote: > [What I want to Know] > 1.What "Unmanageable state 'online*' on service autofs" means? > When svcs(1) shows an asterisk at the end of the state, it means it is in transition. What is happening is that puppet runs "svcadm disable autofs"

[Puppet Users] Re: Disabling automountd on Solaris10.

2010-01-27 Thread Nobuchika Tanaka
Mr.Martin. Thank you for replying. Thanks to your answer, I understand situation of this problem. Until this issue is resolved, I will disable automountd in another way. On Jan 28, 7:34 am, Martin Englund wrote: Nobuchika Tanaka -- You received this message because you are subscribed to the G

[Puppet Users] Comments on #3120 - chained CAs for issuing certs?

2010-01-27 Thread Eric Sorenson
I think my bug writeup on #3120 is less than wonderful but I wanted to point it up to the list here in hope of inspiring further comment. The situation is that I followed first Ohad's doc on PuppetScalability, then Jeff McCune's MultipleCertificateAuthorities writeup, to no avail. I tried both

[Puppet Users] LDAP users/groups are being mis-interpretted by RAL

2010-01-27 Thread Joel Heenan
It seems puppet is getting confused regarding ldap users and groups err: //Node[foo]/class/File[/var/log/httpd]: Failed to retrieve current state of resource: Could not find group readonly at /etc/puppet/svn/manifests/common/common.pp:26 [foo ~]# getent group | grep readonly readonly:*:4002:user1

Re: [Puppet Users] Comments on #3120 - chained CAs for issuing certs?

2010-01-27 Thread Ohad Levy
Hi Eric, I've a working chained CA setup working for a few years now. what exactly were your problems? did you remember to add the top level CA pub key? I'll try to make some time for this issue next week, and to rebuild the ca setup in a lab. on a side note, I'm not 100% sure if it make sense

Re: [Puppet Users] Comments on #3120 - chained CAs for issuing certs?

2010-01-27 Thread Scott Smith
On 1/27/10 5:03 PM, Eric Sorenson wrote: Ultimately I gave up, like Paul L's thread "SSL Makes My Brain Bleed", my brain bled too and I ended up following his hard-fought wisdom from http://groups.google.com/group/puppet-users/msg/89b75ebe91c5985b I.e. Setup one host to be the CA, set ca=false

[Puppet Users] Odd run timing with facter

2010-01-27 Thread Forrie
I have a SunFire Solaris/10 64bit system -- it's older, 1U. I installed ruby via the "pkg-get" script -- then installed the gems puppet and facter. Facter takes a long time to run: real0m17.863s user0m1.582s sys 0m2.188s That seems very unusual. I realize I could (and probably s