Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Alan Barrett
On Thu, 25 Feb 2010, Marcello de Sousa wrote: > "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" If you don't mind errors when you attempt to apply the manifest and the homedir does not exist, then you could make the authorized_keys file depend on something that fails if the ho

Re: [Puppet Users] Re: Issue with '|'

2010-02-26 Thread Michael Gliwinski
On Thursday 25 Feb 2010 23:19:33 Andrew Hamilton wrote: > > unlessIf this parameter is set, then this exec will run unless the > > command returns 0 > > I interpret this to be the return value of the command and not the output > of the command. So if the return value of my command is 0 then the

Re: [Puppet Users] Magazine article comparing CPU usage of Puppet vs. Cfengine

2010-02-26 Thread Marc Fournier
> The version of CFEngine he is running is 3.0.1b3 > (released ??? Jan or Feb '09, sometime, maybe?) > > The version of Puppet he is running is 0.24.7 > (released 16-Dec-2008) > > So, even though this article was just released, I think it was > written a year > ago. The author said these were th

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Michael Gliwinski
On Friday 26 Feb 2010 09:37:28 Alan Barrett wrote: > On Thu, 25 Feb 2010, Marcello de Sousa wrote: > > "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" > > If you don't mind errors when you attempt to apply the manifest and the > homedir does not exist, then you could make the

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Marcello de Sousa
I can't have errors. Reporting is part of our procedure and it gets quite messy if you have errors that should be neglected. Gr, Marcello > -Original Message- > From: puppet-users@googlegroups.com [mailto:puppet- > us...@googlegroups.com] On Behalf Of Michael Gliwinski > Sent: vrijdag 26

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Michael Gliwinski
That sounds like a path to solution indeed :) Thanks for the tip. I'll also be testing it on CentOS 5, hopefully shortly, I'll get back when I have some feedback. On Thursday 25 Feb 2010 23:02:51 Marcello de Sousa wrote: > Dant, > > The ssh_config trick could be indeed the key for a workaround:

Re: [Puppet Users] ensuring a file is copied in before evaluating another class.

2010-02-26 Thread Daniel
I dont think there's a way to enforce this because you need to reload puppetd to activate the changes. If you use puppetrun you could distribute only the tag for your puppet module and restart the service. Hope this helps On Fri, Feb 26, 2010 at 12:53 AM, Greg Retkowski wrote: > Thanks! That soun

Re: [Puppet Users] Augeas type: Removing an entry from /etc/hosts

2010-02-26 Thread Rob McBroom
On Feb 24, 2010, at 6:32 PM, David Lutterkort wrote: > On Tue, 2010-02-23 at 14:02 -0500, Rob McBroom wrote: >> I’d love to hear there’s a way (in 0.24.8). > > I'd wager that the problem was that you were missing an onlyif that > would keep the changes from being applied when the entries are ther

Re: [Puppet Users] Puppetmaster child processes hang

2010-02-26 Thread S H
On Mon, Feb 22, 2010 at 11:18 AM, Scott Smith wrote: > On 2/22/10 7:41 AM, S H wrote: > >> Anything else make sense to check? After about a week I've got 19 >> processes running. >> >> > Are you using Passenger? If not, try it. I've just moved my Puppetmaster behind Passenger and will let you

[Puppet Users] Foreman environments vs. Puppet Environments

2010-02-26 Thread Marcello de Sousa
Does anybody know or have a Howto on how to use "Foreman environments" and their relationship and interaction with "puppet environments" ? If they are not related, is there a way to assign a machine to a "puppet environment" via Foreman's interface ? Cheers, Marcello -- You received this messag

[Puppet Users] Using --no-client option in puppet.conf

2010-02-26 Thread christian
Hey, is there a way to use the puppetd command line option "--no-client" in the puppet.conf file? Things like no-client = true or noclient = true don't seem to work...just want to get rid off the mandatory puppet run after restarting the daemon. christian -- You received this message because y

[Puppet Users] Y[es] on Upgrade whith puppet

2010-02-26 Thread Ghislain Mokolomboka
Hi everyone, I'm newer in use of puppet. I have installed the puppet-master with this manifest site.pp *class update_class { Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin" } exec { "aptitude update && aptitude upgrade -s | mail -s 'Puppet master-update on $mycomputer' tatatat...@yahoo.com": }

Re: [Puppet Users] Using --no-client option in puppet.conf

2010-02-26 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26/02/10 5:58 AM, christian wrote: > Hey, > > is there a way to use the puppetd command line option "--no-client" in > the puppet.conf file? > > Things like no-client = true or noclient = true don't seem to > work...just want to get rid off the ma

[Puppet Users] Using tags in custom classes, and their scope

2010-02-26 Thread RyanC
Hey, Hope someone can help shed some light on this. I'm written a class that installs various software packages that we use in our organisation, and configures them to how we like. I'm trying to use a tag to determine which type of config to apply, so we can just tag a load of nodes with one thing

[Puppet Users] Re: How to conditionally include classes based on environment?

2010-02-26 Thread jcbollinger
On Feb 25, 10:01 am, ascodemus wrote: > I thought also before that this could do the trick, but as indicated > on the web (http://docs.reductivelabs.com/references/stable/ > function.html#generate) the generate executes a command on the puppet > MASTER-server (not on the client), so this does no

Re: [Puppet Users] Foreman environments vs. Puppet Environments

2010-02-26 Thread Ohad Levy
Foreman can manage puppet environment assignments to hosts if you use external nodes mode (http://theforeman.org/wiki/foreman/External_Nodes). Foreman can scan your existing modules assigning the right classes to the relevant environments. there is another environment settings in foreman (e.g. if

[Puppet Users] How to determine what puppetmasterd is using its memory on?

2010-02-26 Thread Trevor Vaughan
Does anyone have any pointers on how to determine where puppetmasterd 0.24.9 is using the bulk of its memory? A couple of gigs of RAM usage is getting a bit excessive. Thanks, Trevor -- Trevor Vaughan Vice President, Onyx Point, Inc (410) 541-6699 tvaug...@onyxpoint.com -- This account not ap

Re: [Puppet Users] Using tags in custom classes, and their scope

2010-02-26 Thread Ohad Levy
while its possible to use tags, I would recommend you using variables (either with external nodes or extlookup). cheers, Ohad On Fri, Feb 26, 2010 at 7:23 PM, RyanC wrote: > Hey, > > Hope someone can help shed some light on this. I'm written a class > that installs various software packages tha

Re: [Puppet Users] How to determine what puppetmasterd is using its memory on?

2010-02-26 Thread Ohad Levy
Thats the main reason why people use passenger (IMHO) that doesnt allow the processes to grow too much; the other alternative is to use something to restart the process if they grow too much (e.g. monit), if you are interested in the internals a bit more, you can read a bit here - http://www.master

Re: [Puppet Users] ensuring a file is copied in before evaluating another class.

2010-02-26 Thread Greg Retkowski
I also tried this in my top-level puppet config: if $defined_after_bootstrap_var { import "definitions/*.pp" } else { import "bootstrap.pp" } However it looks like the 'import definitions/*.pp' is still evaluated even though $defined_after_bootstrap_var isn't defined. Is there a way to condi

Re: [Puppet Users] How to determine what puppetmasterd is using its memory on?

2010-02-26 Thread Trevor Vaughan
Thanks Ohad. I've been meaning to look at Passenger but I haven't had the time. Trevor On Fri, Feb 26, 2010 at 1:27 PM, Ohad Levy wrote: > Thats the main reason why people use passenger (IMHO) that doesnt allow the > processes to grow too much; the other alternative is to use something to > res

Re: [Puppet Users] Y[es] on Upgrade whith puppet

2010-02-26 Thread Dan Bode
HiGhislain, On Fri, Feb 26, 2010 at 5:37 AM, Ghislain Mokolomboka wrote: > Hi everyone, > > I'm newer in use of puppet. > > I have installed the puppet-master with this manifest site.pp > > *class update_class { > > Exec { path => "/usr/bin:/bin:/usr/sbin:/sbin" } > > exec { "aptitude update &&

[Puppet Users] Re: Correct user management across modules

2010-02-26 Thread jcbollinger
On Feb 25, 6:37 am, Michael Gliwinski wrote: > Do you define your virtual users in global scope?  I.e. in site.pp or in some > module/class?  The reason I'm asking is because I had some trouble overriding > parameters of resources (even virtual) declared in another class or especially > a define

[Puppet Users] Re: Correct user management across modules

2010-02-26 Thread jcbollinger
Come to think of it, the issue of using virtual resources is orthogonal to that of overriding resource properties. You don't need to make your users virtual to override their parameters, but you do need to put the override into a subclass of the declaring class. Be sure to include the subclass in

[Puppet Users] ssh_authorized_key - same key, different accounts?

2010-02-26 Thread Alan Sparks
Puppet 0.24.8... I am trying to use ssh_authorized_key to create passwordless logins for a couple of accounts. The important thing to note is I'm trying to get the source ("r...@somehost" below) as part of the key, and the same key needs to be added to two different accounts on the system. It app

Re: [Puppet Users] ssh_authorized_key - same key, different accounts?

2010-02-26 Thread Paul Lathrop
On Fri, Feb 26, 2010 at 11:58 AM, Alan Sparks wrote: > Puppet 0.24.8... I am trying to use ssh_authorized_key to create > passwordless logins for a couple of accounts.  The important thing to > note is I'm trying to get the source ("r...@somehost" below) as part of > the key, and the same key need

[Puppet Users] tidy -- ignoring sockets?

2010-02-26 Thread Alan Sparks
I've a tidy resource for /tmp under 0.24.8, which throws errors each run due to a socket file created by xfs under /tmp/.font-unix/. It's relatively harmless, but it fills the logs with error messages... /var/log/messages.4:Jan 31 04:01:34 vm03 puppetd[15362]: (//Node[vm03]/Tidy::Olderthan[/tmp]/

RE: [Puppet Users] Foreman environments vs. Puppet Environments

2010-02-26 Thread Marcello de Sousa
Hi Ohad, On your forum I've posted a bit more extensive question (http://theforeman.org/boards/2/topics/show/119) just in case this is a bit offtopic here. I'm already using Foreman for a while with external node mode. But I've configured now puppet with environments like this: ==

[Puppet Users] puppet certificate problems

2010-02-26 Thread yurkao
i have puppet distributed site: [*] separate puppet-ca, [*] puppet-master rules distribution point, [*] puppet-master file-server [*] puppet reports and noticed the following : 1. client does not re-requests new certificate on certificate revocation\expiration 2. puppetmaster on rules distrubut

[Puppet Users] Finding the source of errors

2010-02-26 Thread Paul Lathrop
Hello, How are people locating the host that is having problems? Is everyone getting reports via email? I'm only using store, log and unfortunately the log messages don't identify the source host (I haven't investigated the stored reports yet). Curious how others are solving this problem. --Paul