Re: [Puppet Users] Re: Who uses the rrd graphing support?

2011-05-12 Thread Ohad Levy
On Thu, May 12, 2011 at 5:49 AM, Nigel Kersten wrote: > On Tue, May 10, 2011 at 7:04 PM, Nigel Kersten > wrote: > > reports = rrdgraph > > > > http://docs.puppetlabs.com/references/2.6.8/report.html#rrdgraph > > > > Is this widely used? We're trying to work out whether this is a > > feature that

Re: [Puppet Users] Security of Puppet ACLs..

2011-05-12 Thread Patrick
On May 11, 2011, at 9:59 AM, Matt Wise wrote: > Can hostB make an arbitrary call to the puppet master requesting > "puppet:///passwd" even if its not a defined resource for that host? Simply: Yes Ways to stop this: 1) Include the file in "source" instead which embeds the file in the catalog.

Re: [Puppet Users] how to add same ssh_key to two diff accounts

2011-05-12 Thread Felix Frank
On 05/11/2011 05:36 PM, Arnau Bria wrote: >> If you're keen to get it anyway, you may want to open a ticket. > I think I've already asked here... but I have an example where that > feature is really interesting: we have some user pool, aout 1000 > users, and I'd like to distrbute one key to all tho

Re: [Puppet Users] Re: extending puppet without hacking puppet

2011-05-12 Thread Felix Frank
On 05/11/2011 01:50 AM, John Lyman wrote: > You can set "noop => true" in the package resource and puppet won't > actually change it, just log that it wants to change it. > > package { "httpd": > name=> "httpd", > ensure => "latest", > noop => true, > } Yes, but this will still not ins

Re: [Puppet Users] Security of Puppet ACLs..

2011-05-12 Thread Felix Frank
On 05/12/2011 09:44 AM, Patrick wrote: > > On May 11, 2011, at 9:59 AM, Matt Wise wrote: > >> Can hostB make an arbitrary call to the puppet master requesting >> "puppet:///passwd" even if its not a defined resource for that host? > > Simply: Yes > > Ways to stop this: > 1) Include the file in

Re: [Puppet Users] how to add same ssh_key to two diff accounts

2011-05-12 Thread Arnau Bria
On Thu, 12 May 2011 09:59:21 +0200 Felix Frank wrote: > On 05/11/2011 05:36 PM, Arnau Bria wrote: > >> If you're keen to get it anyway, you may want to open a ticket. > > I think I've already asked here... but I have an example where that > > feature is really interesting: we have some user pool,

Re: [Puppet Users] Re: Who uses the rrd graphing support?

2011-05-12 Thread Chris Phillips
On 12 May 2011 08:01, Ohad Levy wrote: > > >> Anyone using it at all? >> > I used too.. but the alternatives were much more appalling... > That's quite an impressive typo! Chris -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this

Re: [Puppet Users] Re: Who uses the rrd graphing support?

2011-05-12 Thread R.I.Pienaar
- Original Message - > Anyone using it at all? > > I used too.. but the alternatives were much more appalling... > > > That's quite an impressive typo! I used to, then it broke in some release and I disabled it, never felt the need to re-enable it. -- You received this message becau

puppet-users@googlegroups.com

2011-05-12 Thread Martin Alfke
Hi, Büro 2.0 [1] invites to a Grill&Barbecue on Friday evening due to Linuxtag [2]. Drinks and Food will be available. The Büro 2.0 team kindly asks for donations to cover expenses. I have added a puppet meetup[3]. Looking forward to seeing you. Address: Büro 2.0 Weigandufer 45 12059 Berlin

Re: [Puppet Users] Re: Who uses the rrd graphing support?

2011-05-12 Thread joel.merr...@gmail.com
On Thu, May 12, 2011 at 4:02 AM, Nigel Kersten wrote: > I'd much prefer it if we could concentrate on Puppet providing awesome > data sets for tools to graph rather than supporting something like the > rrdgraph functionality. Having to install the supporting libraries all > over the place doesn't

[Puppet Users] Re: Puppet Master System Requirements

2011-05-12 Thread treydock
I'm on the extremely small scale end from what has been previously described, but this could prove useful to those who want to manage a small number of hosts and are curious how little they need to run Puppet. I've just begun using Puppet, and so only have 10 hosts right now, but here's what I'm r

Re: [Puppet Users] Sending an email if an action happens

2011-05-12 Thread Silviu Paragina
On 11.05.2011 18:06, Calum wrote: On 11 May 2011 15:49, Ohad Levy wrote: You can use tagmail report, or use something like foreman to do it for you. Ohad Thanks - I'll look into those. I was more meaning something like: file { "/etc/ntp.conf": owner => root,

Re: [Puppet Users] Sending an email if an action happens

2011-05-12 Thread Nan Liu
On Thu, May 12, 2011 at 5:13 AM, Silviu Paragina wrote: > On 11.05.2011 18:06, Calum wrote: >> >> On 11 May 2011 15:49, Ohad Levy  wrote: >>> >>> You can use tagmail report, or use something like foreman to do it for >>> you. >>> Ohad >> >> Thanks - I'll look into those. >> >> I was more meaning s

Re: [Puppet Users] Sending an email if an action happens

2011-05-12 Thread Calum
On 12 May 2011 11:13, Silviu Paragina wrote: > You almost gave yourself the answer. :) Check the refreshonly parameter for > the exec type ;) Perfect. Just what I wanted. The reporting looked too much for what we wanted, for now, anyway. Many thanks. -- You received this message because you ar

Re: [Puppet Users] Re: extending puppet without hacking puppet

2011-05-12 Thread Nan Liu
On Thu, May 12, 2011 at 3:06 AM, Felix Frank wrote: > On 05/11/2011 01:50 AM, John Lyman wrote: >> You can set "noop => true" in the package resource and puppet won't >> actually change it, just log that it wants to change it. >> >> package { "httpd": >>   name    => "httpd", >>   ensure  => "late

[Puppet Users] Re: multiple resources overrides

2011-05-12 Thread jcbollinger
On May 11, 4:27 pm, Jeff McCune wrote: > On Wed, May 11, 2011 at 12:17 AM, Julien Garet wrote: > > > Hello, > > I am facing a strange behaviour with exported resources overriding in > > 0.25.5 (CentOS). I am using nagios with exported resources. In my base > > class, I define a hostgroup by defa

[Puppet Users] Re: Sending an email if an action happens

2011-05-12 Thread jcbollinger
On May 12, 5:13 am, Silviu Paragina wrote: > On 11.05.2011 18:06, Calum wrote: > > > > > On 11 May 2011 15:49, Ohad Levy  wrote: > >> You can use tagmail report, or use something like foreman to do it for you. > >> Ohad > > Thanks - I'll look into those. > > > I was more meaning something like:

Re: [Puppet Users] Re: Sending an email if an action happens

2011-05-12 Thread Ohad Levy
On Thu, May 12, 2011 at 4:19 PM, jcbollinger wrote: > > > On May 12, 5:13 am, Silviu Paragina wrote: > > On 11.05.2011 18:06, Calum wrote: > > > > > > > > > On 11 May 2011 15:49, Ohad Levy wrote: > > >> You can use tagmail report, or use something like foreman to do it for > you. > > >> Ohad > >

[Puppet Users] variable scope for templates

2011-05-12 Thread andreash
I have the following nodes definitions: node basenode { include hosts include ntp include resolvconf } node 'dom1.mydomain.com' inherits basenode { $ntp_role = "SERVER" } node 'stove1.mydomain.com' inherits basenode { $ntp_role = "CLIENT" } in the ntp class, the ntpd.conf file templat

[Puppet Users] Variable scoping / best practice

2011-05-12 Thread Luke Baker
Hey there, I have the following class that defines an array: class iptables::hyperion { system_ips [ 'ip', 'ip', 'ip', ... ] } To use this variable in a template, I'm setting it to a 'local' variable in the node definition: node 'mynode' inherits basenode { include iptable

Re: [Puppet Users] variable scope for templates

2011-05-12 Thread Dan Bode
Hi, the issue is related to how scoping works for nodes in Puppet. The variable defined in your child nodes is not accessible from within the basenode node and is thus not available in its included classes. In order for the variable to be availble to the template, you would have to move the incl

Re: [Puppet Users] how to add same ssh_key to two diff accounts

2011-05-12 Thread Stefan Schulte
On Wed, May 11, 2011 at 05:36:26PM +0200, Arnau Bria wrote: > I think I've already asked here... but I have an example where that > feature is really interesting: we have some user pool, aout 1000 > users, and I'd like to distrbute one key to all those users. Why the > trivial workaround, I could d

[Puppet Users] Re: multiple resources overrides

2011-05-12 Thread Nick Fagerlund
On May 12, 6:10 am, jcbollinger wrote: > Speaking of deterministic evaluation, just how stable is it going to > be?  That is, it's one thing for ordering to be consistent for a > particular set of manifests, but what will happen when the manifests > are modified?  How will ordering be affected b

[Puppet Users] Re: multiple resources overrides

2011-05-12 Thread Nick Fagerlund
On May 12, 11:32 am, Nick Fagerlund wrote: > You can read more about the design here... Wow, self, way to not post that link. http://projects.puppetlabs.com/issues/6911 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group,

[Puppet Users] puppet client not receiving cert

2011-05-12 Thread Tim Dunphy
hello list!! I'm having an issue where a client is not receiving it's cert [root@ec2-50-16-98-245 ~]# puppetd -t --waitforcert 15 --server puppet.example.net info: Creating a new SSL key for ec2-xx-xx-xx-xxx.compute-1.amazonaws.com warning: peer certificate won't be verified in this SSL sessio

[Puppet Users] Re: puppet client not receiving cert

2011-05-12 Thread Saurval
Hi Tim, Perhaps I am missing something in your output. There may be some actions implied that you took but where not shown. So excuse me if I am misunderstanding something. Did you take any actions on the server side while you were running 'puppetd -t --waitforcert 15 --server puppet.example.ne

Re: [Puppet Users] Re: Who uses the rrd graphing support?

2011-05-12 Thread Iain Sutton
+1 from us too On 12/05/2011, at 7:40 PM, "joel.merr...@gmail.com" wrote: > On Thu, May 12, 2011 at 4:02 AM, Nigel Kersten wrote: >> I'd much prefer it if we could concentrate on Puppet providing awesome >> data sets for tools to graph rather than supporting something like the >> rrdgraph func

Re: [Puppet Users] Re: puppet client not receiving cert

2011-05-12 Thread Tim Dunphy
Hello Marius, Thank you very much indeed for your prompt reply! It seems that I was under the impression that autosigning had been turned on on the puppet server. I see now that I was mistaken. Best regards, and be well good sir! tim On Thu, May 12, 2011 at 4:41 PM, Saurval wrote: > Hi Tim, >

Re: [Puppet Users] Re: Disabling optional services

2011-05-12 Thread Iain Sutton
For syslog-ng, we used the following and it seems to work: case defined(Package["syslog-ng"]) { false: { service { "syslog": enable => false } } } package { "syslog-ng": ensure => installed, provider => yum }

[Puppet Users] Custom facts in modules

2011-05-12 Thread g h
I am having trouble getting custom facts to be read in my puppet config. Also, for some reason the facter command is looking in the "./ facter" directory when I run it; so if I run facter from within my module directory's lib folder, I can get the output. How can I get facter to read modules? Re

[Puppet Users] array being concatenated

2011-05-12 Thread tjmaszc
Having issues trying to create the same symlink for multiple web sites. This is my class: class assoc_symlinks { $assocs=[ "asecs", "mgsa", "athe" ] define create_assoc_symlinks() { file {"/www/domains/${name}.press.jhu.edu/cgi-bin/ membership_directory.cgi": ensure => symlink,

Re: [Puppet Users] Custom facts in modules

2011-05-12 Thread Patrick
On May 12, 2011, at 1:44 PM, g h wrote: > I am having trouble getting custom facts to be read in my puppet > config. Also, for some reason the facter command is looking in the "./ > facter" directory when I run it; so if I run facter from within my > module directory's lib folder, I can get the

Re: [Puppet Users] array being concatenated

2011-05-12 Thread Nigel Kersten
On Thu, May 12, 2011 at 6:21 PM, tjmaszc wrote: > Having issues trying to create the same symlink for multiple web > sites.  This is my class: > > class assoc_symlinks { >  $assocs=[ "asecs", "mgsa", "athe" ] > >  define create_assoc_symlinks() { >    file {"/www/domains/${name}.press.jhu.edu/cgi-

Re: [Puppet Users] Security of Puppet ACLs..

2011-05-12 Thread Larry Ludwig
4) reference the file via the facter 'uniqueid' -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googleg

Re: [Puppet Users] Security of Puppet ACLs..

2011-05-12 Thread Matt Wise
Thats an interesting one for a few points.. how is the uniqueid generated? On May 12, 2011, at 6:15 PM, Larry Ludwig wrote: > 4) > > reference the file via the facter 'uniqueid' > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. >

[Puppet Users] Puppet Dashboard on Freebsd 8.2

2011-05-12 Thread Panaman
Is anyone running the puppet dashboard on freebsd 8.2 I am kinda a newb to freebsd but managed to get puppet installed with apache and mysql. But I haven't actually figured out how to get the dashboard to install. -- You received this message because you are subscribed to the Google Groups "Pupp

[Puppet Users] Thoughts about extlookup: http://blog.wl0.org/2011/05/thoughts-about-extlookup-in-puppet/

2011-05-12 Thread Simon J Mudd
Hi, I have been trying to improve the coding of some of my puppet recipes and had some trouble so wrote this: http://blog.wl0.org/2011/05/thoughts-about-extlookup-in-puppet/ Comments on the web seem to indicate that extlookup() solves "all problems" but I don't really see that and hence have prop

[Puppet Users] Re: Passenger issues running Puppet

2011-05-12 Thread denmat
Hi, sorry for the late reply but have a look at my config.ru cat /usr/share/puppet/rack/puppetmasterd/config.ru # a config.ru, for use with every rack-compatible webserver. # SSL needs to be handled outside this, though. # if puppet is not in your RUBYLIB: # $:.unshift('/opt/puppet/lib') $0 = "