At this point, however, I'm hoping that one of the PuppetLabs guys will
jump in to either explain why I'm wrong or confirm that it's a bug.
Any PuppetLabs guys reading? I realize they are all busy people, and it
may take a while. It's all good.
--
You received this message because you are su
Hi,
Haven't got details in front of me but check the puppet docs on passenger - I
think you haven't set the right perms on your config.ru - should be owned by
puppet.
Cheers
Den
On 12/07/2012, at 4:28, Hai Tao wrote:
> The welcome page should only display when there is no webpage to
> displ
Puppet users and groups are fiddly. My current not implemented thinking is to
use ldap and manage pam_groups via puppet on the hosts to get the granularity.
More thinking out loud than anything else.
Den
On 12/07/2012, at 6:03, Jo Rhett wrote:
> I'm fighting with a ticklish issue. We have s
I use nss-pam-ldapd and pam_ldap depending on the system, using an ldap filter
to allow only certain groups per system. I prefer nss-pam-ldapd.
nss-pam-ldapd:
CentOS 6
Debian 6
Ubuntu 10.04
pam_ldap:
CentOS 5
FreeBSD 9
(Solaris is more like pam_ldap in configuration, but fairly unique.)
The
Dear all,
I would like to ask you, does anybody here have experience with Puppet
under CRAY systems, or BlueGeneQ? It would be nice to hear some
experiences with this, if any.
Thanks!
Pablo
--
You received this message because you are subscribed to the Google Groups "Puppet
Users" group.
To
I started doing some experiments with the configuration option
'thin_storeconfigs=true' by adding this option to one of my Puppet masters.
However, I could not determine any change in behavior. I expected to have the
resources collected faster, but Puppet still takes some 15min to do the job. So
Hi,
Thin_storeconfig stores less detail in the database, that won't necessarily
speed it up but will reduce its footprint.
The actual differences I'm a bit fuzzy on.
Den
On 12/07/2012, at 18:29, Bernd Adamowicz wrote:
> I started doing some experiments with the configuration option
> 'thin_
Hi Everyone,
First, thanks for all the great feedback!
Chris, I'll take a look at exported resources. I don't have a problem with
MCollective per se, I just don't want to add a bunch of other software if
there's a "native puppet" way to solve the problem. From what I've seen,
Puppet itself isn
Thanks for the corroboration. At least I know I'm not crazy.
This needs to be reported as a bug. I'm not sure how to go about it, though.
It seems you know more about this than I do. Do you think you could report
it?
On Wednesday, 11 July 2012 22:35:21 UTC+2, Romeo Theriault wrote:
>
> On Tue,
There was no current cert. It was a new host. The cert was generated using
the FQDN..
On Thursday, 12 July 2012 04:42:51 UTC+2, Pete wrote:
>
> Hi,
>
> Your config looks about right.
> Did you drop the current cert and request and sign a new one?
>
> On 11 July 2012 19:14, Kmbu wrote:
> > Hi
Hi,
On 07/11/2012 08:02 PM, Rastio Hodul wrote:
> Hi,
> I'm new to Puppet.
>
> I'm writing the script that installs LAMP+Drupal.
>
> At the end of the script I need to setup a cron. But for that I need to
> read certain key that has been generated during install.
> So I'm trying use generate() f
Hi,
On 07/11/2012 10:03 PM, Jo Rhett wrote:
> So I tried to get smarter, and put logic to add the group to each member
> under the appropriate class
> Class users::dev inherits users {
> User['jrhett'] { groups +> ['dev'] }
> }
>
> This works… almost. It works for all instances where the user is
Hi,
On 07/12/2012 10:01 AM, Pablo Fernandez wrote:
> Dear all,
>
> I would like to ask you, does anybody here have experience with Puppet
> under CRAY systems, or BlueGeneQ? It would be nice to hear some
> experiences with this, if any.
>
> Thanks!
> Pablo
I believe that hardware matters less,
I just did another test on another new agent. Same behaviour. The value of
certname does not feature in the log at all. Here is the debug level agent
log. I've replaced the actual FQDN with . There's no reference to the
value set in certname. Seems that it's completely ignored.
debug: Failed to
Thin stored configs only store exported resources in the database Instead
of all resources. There may be more differences though.
Sent from my galaxy tab
On Jul 12, 2012 6:01 PM, "Denmat" wrote:
> Hi,
>
> Thin_storeconfig stores less detail in the database, that won't
> necessarily speed it up b
I've been trying to wrap my head around ENCs.
Kelsey Hightower gave me some very useful info in IRC the other day, but
there are still some things I can't quite get my head around.
>From what I can tell, an ENC allows you to assign classes and parameters
(top scope variables) to a given node or
On Wednesday, July 11, 2012 3:03:14 PM UTC-5, Jo wrote:
>
> I'm fighting with a ticklish issue. We have some groups and users that
> only belong on some systems. So we made all users virtual and then realize
> them in classes specific to those system types. This works quite well for
> the us
Hi Tim
I had a similar question in
https://groups.google.com/forum/?fromgroups#!topic/puppet-users/fhHYT3LkBoE
but spent a while figuring out and testing what is possible. Hopefully
this will help you or someone work their way around a corner.
Puppet Environments
* Common modules, environmen
On Thursday, July 12, 2012 3:29:15 AM UTC-5, badamowicz wrote:
>
> I started doing some experiments with the configuration option
> 'thin_storeconfigs=true' by adding this option to one of my Puppet masters.
> However, I could not determine any change in behavior. I expected to have
> the reso
Pablo,
If your Cray systems are running Cray Linux, then it is possible Puppet
will run in your environment, though we have yet to test this ourselves at
Puppet.
Cheers,
Dominic Maragia
On Thu, Jul 12, 2012 at 1:01 AM, Pablo Fernandez wrote:
> Dear all,
>
> I would like to ask you, does anybod
On Thursday, July 12, 2012 3:29:15 AM UTC-5, badamowicz wrote:
>
> Should [thin_storeconfigs] instead be placed in the client's configuration
> to make them export only the @@-resources?
>
No, (thin_)storeconfigs is a function of the master, at catalog compilation
time.
John
--
You receive
I dealt with a case that had a Cray XT4 using Redhat Linux
specifically. More or less since the hardware and OS was just like any
other platform we support, it wasn't a problem and we supported it.
If you are using Cray Linux - I believe its based on the SuSE Linux
platform (and we do support SLES
Hello, I have been stumped by an authentication / certificate problem
and would like to know if anyone has resolved a similar issue.
My fresh install of Puppet Master 2.7.18 on Debian 6 works normally
when run standalone, using 'puppet master --verbose --no-daemonize'.
When using nginx-passenger
Are you sure you want to be using the passenger_set_cgi_param nginx
directive and not proxy_set_header?
The problem definitely seems to be Puppet not picking up the values
that should be set in the HTTP_X_CLIENT_VERIFY and HTTP_X_CLIENT_DN
request headers.
-Jeff
On Thu, Jul 12, 2012 at 7:34 AM,
I see this also if the time on the client is too far out of sync with the
time on the server. set the time to within a few seconds of the server
first, then try again.
On Tuesday, July 10, 2012 12:39:13 PM UTC-5, Ganesh Ganesh wrote:
>
> Hi Guys,
>
> I am trying to executed sign client to serve
I know when I was setting this up
(http://z0mbix.github.com/blog/2012/03/01/use-nginx-and-passenger-to-power-your-puppet-master/),
the main gotcha I came up against was the permissions of the config.ru file
have to be the same as your puppet user. I can't remember what error this
caused though
Hello Jeff,
Thank you for your reply. It pointed me in the right direction.
Regarding 'proxy_set_header', I don't believe this directive has an
effect on passenger. For passenger, I believe the
'passenger_set_cgi_param' directive must be used instead.
My mistake was using the wrong parameter.
Nan is a Puppet Labs guy. One of our best :)
His warning about dynamic scoping is something to take seriously. That's not a
gratuitous error message - dynamic scoping causes all kinds of problems and has
been scheduled for deprecation for a while now, and that's coming in the next
major release
Is there a way to get a list of all the classes available from the puppet
master?
I have 2 goals for this - one is documentation in a human readable form,
and the other is potentially importing that data into dashboard.
I did find some info on the rest API
(http://docs.puppetlabs.com/guides/re
I do have a config.ru under /etc/puppet/rack, and it is owned by
puppet. And that is the only config.ru I have.
Under /usr/share/puppet-dashboard/public, there is no config.ru. But
there is a
/usr/share/puppet-dashboard/vendor/rails/railties/dispatches/config.ru.
In the procedure I followed, it
note, I also have a /usr/share/puppet/ext/rack/files/config.ru file.
On Thu, Jul 12, 2012 at 9:04 AM, Hai Tao wrote:
> I do have a config.ru under /etc/puppet/rack, and it is owned by
> puppet. And that is the only config.ru I have.
>
> Under /usr/share/puppet-dashboard/public, there is no config
In regard to: [Puppet Users] Re: The Puppet Way to handle slow resources?...:
Chris, I'll take a look at exported resources. I don't have a problem with
MCollective per se, I just don't want to add a bunch of other software if
there's a "native puppet" way to solve the problem. From what I've se
Hi Guys,
I an trying to remove puppetca revoke certification i got openssl error
[root@dvtelx3bayxit55 ~]# puppetca --revoke all
notice: Revoked certificate with serial # Inventory of signed certificates
# SERIAL NOT_BEFORE NOT_AFTER SUBJECT
0x0001 2012-07-11T17:29:51GMT 2017-07-11T17:29:51GMT /C
That's great if you have centralized and co-hosted infrastructure and are
willing to accept the dependancy. Given that this is a small need for a small
number of users on a very small amount of systems (like 3 out of hundreds)
without a centralized backbone between them, implementing LDAP makes
On Jul 12, 2012, at 4:30 AM, Felix Frank wrote:
> On 07/11/2012 10:03 PM, Jo Rhett wrote:
>> So I tried to get smarter, and put logic to add the group to each member
>> under the appropriate class
>> Class users::dev inherits users {
>> User['jrhett'] { groups +> ['dev'] }
>> }
>>
>> This works…
On Jul 12, 2012, at 6:46 AM, jcbollinger wrote:
> If it is the case that each user always has the same potential secondary
> groups, and you need to narrow the actual secondary groups to those that are
> actually present, then I think you could do it without too much pain. The
> main ingredient
On Tuesday, 10 July 2012 03:18:47 UTC+2, Henrik Lindberg wrote:
>
> On 2012-09-07 19:07, Kelsey Hightower wrote:
> > You'll need hiera-puppet, which contains the parser functions. Puppet
> 3.0.0 should bring in both Hiera and hiera-puppet as deps.
> >
> Thanks,
> that is a good start. My issue
One way to approach this (for documentation) is to build a file
resource backed by a template. The template would contain something
like the following. It prints out all the classes defined in that
agents catalog.
<% classes.each do |klass| -%>
The class <%= klass %> is defined
<% end -%>
This ex
Crap, I forgot to mention my source:
http://docs.puppetlabs.com/guides/templating.html#access-to-defined-tags-and-classes
On Thu, Jul 12, 2012 at 1:08 PM, Ryan Coleman wrote:
> One way to approach this (for documentation) is to build a file
> resource backed by a template. The template would cont
Comments inline.
On Thursday, July 12, 2012 3:08:10 PM UTC-5, Ryan Coleman wrote:
>
> One way to approach this (for documentation) is to build a file
> resource backed by a template. The template would contain something
> like the following. It prints out all the classes defined in that
> agent
On Thu, Jul 12, 2012 at 8:54 AM, llow...@oreillyauto.com
wrote:
> Is there a way to get a list of all the classes available from the puppet
> master?
We've actually addressed this more directly in the upcoming Telly
branch, where we've extended the resource_type REST API to make this
simpler:
ht
- Original Message -
> From: "Ryan Coleman"
> To: puppet-users@googlegroups.com
> Sent: Thursday, July 12, 2012 9:08:55 PM
> Subject: Re: [Puppet Users] How can I list classes available on the puppet
> master?
>
> Crap, I forgot to mention my source:
> http://docs.puppetlabs.com/guides
http://docs.puppetlabs.com/man/doc.html
I use a command like this:
puppet doc --outputdir /apache/htdocs/puppetmaster --mode rdoc
--manifestdir /etc/puppet/manifests --modulepath /etc/puppet/modules
And I get a fantastic web-tree describing every class on my PuppetMaster
It does require you to
It's pretty ghetto, but we've used this script before, which I can confirm
still works on Puppet 2.7.17:
http://www.devco.net/archives/2010/02/26/what_does_puppet_manage_on_a_node-2.php
cheers,
Walter
On Fri, Jul 13, 2012 at 4:22 AM, R.I.Pienaar wrote:
>
>
> - Original Message -
> > Fr
PuppetDB 0.9.2 is the third beta release on the road to 1.0. Changes
include new features and bug fixes. For details on changes
in this release, please see the release notes below.
# Downloads
Available in native package format at
http://yum.puppetlabs.com
http://apt.puppetlabs.com
Source (sam
Comments inline
On Thursday, July 12, 2012 3:29:27 PM UTC-5, Ygor wrote:
>
> http://docs.puppetlabs.com/man/doc.html
>
> I use a command like this:
>
> puppet doc --outputdir /apache/htdocs/puppetmaster --mode
> rdoc --manifestdir /etc/puppet/manifests --modulepath /etc/puppet/modules
>
> And
Here's a little script that finds all .pp files in an environment
parse them an print all the found classes.
I didnt test if it works for .pp files with more than 1 class in them
Just point it at your module path and environment at the top
require 'puppet'
require 'find'
Puppet.setting
On Mon, Jul 09, 2012 at 06:48:41AM -0700, Kmbu wrote:
> Hello folks..
>
> I suddenly found the crontab on one of my puppet clients overwritten. It
> had many entries, including one created by Puppet. Suddenly during one run
> it was overwritten, keeping only the Puppet entry and removing everyth
On Thursday, July 12, 2012 1:42:28 PM UTC-5, Jo wrote:
>
> On Jul 12, 2012, at 6:46 AM, jcbollinger wrote:
>
> If it is the case that each user always has the same potential secondary
> groups, and you need to narrow the actual secondary groups to those that
> are actually present, then I think
On Thursday, July 12, 2012 10:52:23 AM UTC-5, Eric Shamow wrote:
>
> Nan is a Puppet Labs guy. One of our best :)
>
> His warning about dynamic scoping is something to take seriously. That's
> not a gratuitous error message - dynamic scoping causes all kinds of
> problems and has been schedule
On Thursday, July 12, 2012 8:27:16 AM UTC-5, llo...@oreillyauto.com wrote:
>
> I've been trying to wrap my head around ENCs.
>
> Kelsey Hightower gave me some very useful info in IRC the other day, but
> there are still some things I can't quite get my head around.
>
> From what I can tell, an E
On Jul 12, 2012, at 2:42 PM, jcbollinger wrote:
>
>
> On Thursday, July 12, 2012 8:27:16 AM UTC-5, llo...@oreillyauto.com wrote:
> I've been trying to wrap my head around ENCs.
>
> Kelsey Hightower gave me some very useful info in IRC the other day, but
> there are still some things I can't q
you don't need a config.ru for puppet-dashboard public folder, I just
switched to apache passenger for dashboard, it's working without the
config.ru file.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To view this discussion on the web
On Thursday, July 12, 2012 4:42:12 PM UTC-5, jcbollinger wrote:
>
>
>
> On Thursday, July 12, 2012 8:27:16 AM UTC-5, llo...@oreillyauto.com wrote:
>>
>> I've been trying to wrap my head around ENCs.
>>
>> Kelsey Hightower gave me some very useful info in IRC the other day, but
>> there are still
what version of dashboard you are running?
can you provide your httpd configuration for dashboard?
Thanks.
On Thu, Jul 12, 2012 at 2:50 PM, Clay wrote:
> you don't need a config.ru for puppet-dashboard public folder, I just
> switched to apache passenger for dashboard, it's working without
That is an (admittedly unhelpful) error which means that the name you gave
does not match any certificates the CA knows about. Give it the actual
certname rather than 'all'.
On Thursday, July 12, 2012 10:52:57 AM UTC-7, Ganesh Ganesh wrote:
>
> Hi Guys,
>
> I an trying to remove puppetca revok
On Jul 12, 2012, at 2:26 PM, jcbollinger wrote:
> I would avoid that variation on this approach if at all possible. You would
> sidestep multiple pitfalls if you could determine up front, based on node
> name and facts, which groups are supposed to be present, instead of
> attempting to determi
You could do something like this, it's not the cleanest in the world(I
barely ever use sed anymore), but as something quick and dirty:
curl -k -H "Accept: yaml" https://puppet:8140/mgmt/resource_types/class |
more | grep " name: " | sed -e 's/^ *name: //;s/&id.* //' | sort | uniq
It'll have som
I'd like to be able to get a list of all of the classes being applied to
my nodes and insert this as a list into mcollective's facts.yaml file. The
reason for this is that I have a couple post-commit hooks that parse out
changes to specific modules/classes for changelog purposes and I'm
conside
1.2.10 is a maintenance release of Puppet Dashboard.
It includes contributions from Will Hopper and Moses Mendoza.
Thanks to Aaron Patterson for the security content in commit
e17269f.
This release is available for download at:
https://downloads.puppetlabs.com/dashboard/puppet-dashboard-1.2.10.tar
- Original Message -
> From: "Nick Cammorato"
> To: puppet-users@googlegroups.com
> Sent: Thursday, July 12, 2012 5:35:28 PM
> Subject: [Puppet Users] Using catalog inventory/Puppet::Resource::Catalog?
>
> I'd like to be able to get a list of all of the classes being applied
> to my nod
I'm running puppet dashboard 1.2.9 , just followed document at
http://docs.puppetlabs.com/dashboard/manual/1.2/bootstrapping.html#running-dashboard-in-a-production-quality-server
,
[root@puppet conf.d]# grep -v ^# dashboard-vhost.conf
Listen 3000
ServerName puppet.domain.com
that is almost exactly what I have , except I put the mod_passenger.so
to /var/lib instead of /var/lib64.
LoadModule passenger_module
/usr/lib/ruby/gems/1.8/gems/passenger-3.0.13/ext/apache2/mod_passenger.so
PassengerRoot /usr/lib/ruby/gems/1.8/gems/passenger-3.0.13
PassengerRuby /usr/bin
On Jul 12, 2012, at 4:07 PM, William Hopper wrote:
> *(#11849) Add rake task to install cron job to clean up database reports
>
> This commit adds a rake task to install a monthly cron
> job to clean up old database reports, as suggested in official
> Puppet Labs documentation. This allows u
So this is turning it into a small coding contest =). I needed
something similar to this, and there's a pretty easy way to do this
with the puppet resource_type face.
require 'puppet'
require 'puppet/face'
Puppet::Face[:resource_type,:current].search('*').find_all {|x|
x.type==:hostclass}.collect
Hi Everyone,
I just upgraded to this on my ubuntu puppetmaster and I am having
issues starting the server.
I am running the openjdk-6-jre
After some digging i found the options the start script was using and
tried to start the daemon manually
It gives me this error.
start-stop-daemon --start --ch
You will need to generate the certificate with the name you want to
use other wise it will use the fqdn.
Try using --certname=name_you_want on the command line when you
request the certificate.
On 12 July 2012 21:04, Kmbu wrote:
> There was no current cert. It was a new host. The cert was generat
Side note. I downgraded to the old version and it still works so not
as urgent now.
On 13 July 2012 10:54, Peter Brown wrote:
> Hi Everyone,
>
> I just upgraded to this on my ubuntu puppetmaster and I am having
> issues starting the server.
> I am running the openjdk-6-jre
> After some digging i
Ouch...I'll take a look at this now! What version of Ubuntu are you
on? I'll bring up a VM and try to reproduce this.
deepak
On Fri, Jul 13, 2012 at 10:54:10AM +1000, Peter Brown
wrote:
> Hi Everyone,
>
> I just upgraded to this on my ubuntu puppetmaster and I am having
> issues starting the s
On 13 July 2012 11:59, Deepak Giridharagopal wrote:
> Ouch...I'll take a look at this now! What version of Ubuntu are you
> on? I'll bring up a VM and try to reproduce this.
Thanks Deepak.
Ubuntu 12.04 (kubuntu actually but same diff)
I noticed my jre was updated today as well.
my openjdk-6-jre
Oh on a whim i installed openjdk-7 and got the same results.
On 13 July 2012 12:12, Peter Brown wrote:
> On 13 July 2012 11:59, Deepak Giridharagopal wrote:
>> Ouch...I'll take a look at this now! What version of Ubuntu are you
>> on? I'll bring up a VM and try to reproduce this.
>
> Thanks Deep
On Fri, Jul 13, 2012 at 12:12:32PM +1000, Peter Brown
wrote:
> On 13 July 2012 11:59, Deepak Giridharagopal wrote:
> > Ouch...I'll take a look at this now! What version of Ubuntu are you
> > on? I'll bring up a VM and try to reproduce this.
>
> Thanks Deepak.
>
> Ubuntu 12.04 (kubuntu actually
On 13 July 2012 13:05, Deepak Giridharagopal wrote:
> On Fri, Jul 13, 2012 at 12:12:32PM +1000, Peter Brown
> wrote:
>> On 13 July 2012 11:59, Deepak Giridharagopal wrote:
>> > Ouch...I'll take a look at this now! What version of Ubuntu are you
>> > on? I'll bring up a VM and try to reproduce t
So I was trying to install puppetmaster-passenger in the server
machine and configure it to communicate with the agent. My server
machine and client machine are both running on Ubuntu 11.04. I
installed puppetmaster-passenger through apt-get and in /etc/apache2/
sites-available/puppetmaster file, i
Op vrijdag 13 juli 2012 02:05:29 UTC+2 schreef Jo het volgende:
>
> Where is the documentation for this feature? How do I invoke it?
>
> The maintaining page still just says to create a cron job.
>
the maintaining page also mentions;
If you run ‘rake reports:prune’ without any arguments, it
75 matches
Mail list logo
