Re: [Puppet Users] Puppetdb will setting gc-interval to 0 disable it

2013-01-23 Thread Erik Dalén
One of the largest indexes was not needed and removed in the latest version of puppetdb. So you might want to try out that version to reduce the index sizes. On Jan 22, 2013 8:41 PM, "Chuck" wrote: > We didn't notice anything on Sunday. We have a decent number of resources > that effect all node

RE: [Puppet Users] facter : Bug #10261

2013-01-23 Thread GRANIER Bernard (MORPHO)
Ok thanks for your answer Cordialement, Bernard Granier CE Plateforme Système bernard.gran...@morpho.com 01 58 11 32 51 -Original Message- From: puppet-users@googlegroups.com [mailto:puppet-users@googlegroups.com] On Behalf Of Josh Cooper Sent: Tuesday, January 22, 2013 6:23 PM To: pupp

Re: [Puppet Users] Re: Error: Could not request certificate: Connection refused - connect(2)

2013-01-23 Thread Diogo Martinez
Hi Doug Sorry my bad English. I executed this commands: 1. puppet cert clean - 2. rm -rf $(puppet agent --configprint ssldir) Do you run master init shell script? 2013/1/22 Doug > > Hi Diogo > > I have this same issue. > > I don't quite understand your message, could you please hel

Re: [Puppet Users] PuppetDB HA

2013-01-23 Thread ak0ska
I assume that each PuppetDB instance maintains its own message queue, and commands sent by the master wait in these queues. In that case, is the following scenario possible: - the master sends facts for a node to PuppetDB through the load balancer - the load balancer gives the task to PuppetDB1 -

[Puppet Users] How to apply a single class from an agent with puppet v3?

2013-01-23 Thread Schofield
Is it possible to apply a single class in the context of the catalog to a puppet agent? The puppet run has grown lengthy and I would like to run just the puppet class I am working on. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view th

Re: [Puppet Users] PuppetDB HA

2013-01-23 Thread Ken Barber
> I assume that each PuppetDB instance maintains its own message queue, and > commands sent by the master wait in these queues. Yes, today this is true. > In that case, is the following scenario possible: > - the master sends facts for a node to PuppetDB through the load balancer > - the load bal

Re: [Puppet Users] Puppetdb will setting gc-interval to 0 disable it

2013-01-23 Thread Ken Barber
I believe Erik is talking of the removal of the idx_catalog_resources_tags in 1.0.5 - is this correct Erik? https://github.com/puppetlabs/puppetdb/blob/master/src/com/puppetlabs/puppetdb/scf/migrate.clj#L224-L229 This is an index on the catalogue_resources table, and the 'tags' column. ken. On

Re: [Puppet Users] Puppetdb will setting gc-interval to 0 disable it

2013-01-23 Thread Ken Barber
> We didn't notice anything on Sunday. We have a decent number of resources > that effect all nodes. This may explain the ocasional performance issues. Sure, more specifically you'll get catalog replaces in the database if you have resources that are always 'changing'. This might be a dynamic pa

[Puppet Users] Problem with Puppet upgrade 2.7 => 3.0 on Centos 5 using puppetlabs dependencies repo.

2013-01-23 Thread Pascal Schmiel
Hi, I have a problem with puppet upgrade from 2.7 to 3.0 on centos 5. I have included the puppet dependencies repo for el5 (http://yum.puppetlabs.com/el/5/dependencies/x86_64/) to upgrade my ruby version to 1.8.7. However a "yum install ruby" will give me ruby 1.8.5 from the centos base repo. If

Re: [Puppet Users] Problem with Puppet upgrade 2.7 => 3.0 on Centos 5 using puppetlabs dependencies repo.

2013-01-23 Thread Dan White
Use both repos with the puppetlabs repo at a higher priority (Google: yum priority) “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) - Original Message - From: "Pasc

[Puppet Users] VMware investment in Puppet Labs

2013-01-23 Thread Luke Kanies
Hi all, I'm proud to announce that VMware has invested $30 million in Puppet Labs: http://puppetlabs.com/blog/vmware-invests-30-million-in-puppet-labs/ This investment is about continuing to enable us to invest and grow, staying on the track of being a great, independent company. Just like whe

Re: [Puppet Users] Security considerations for basing decisions on facts

2013-01-23 Thread Wolf Noble
On Jan 22, 2013, at 3:04 PM, jcbollinger wrote: > > > On Tuesday, January 22, 2013 7:08:09 AM UTC-6, Boyan Tabakov wrote: > Hello, > > Let's consider the scenario when a client node in a puppet environment > gets compromised. > > In case some of the puppet modules make decisions based on agent fa

[Puppet Users] Re: What exactly does "notice: Finished catalog run in XX seconds" mean?

2013-01-23 Thread jcbollinger
On Tuesday, January 22, 2013 7:55:55 PM UTC-6, Nikhil Joshi wrote: > > I see that line in the agent node's log. Is that the time taken by the > Puppet Master to compile the manifests into a catalog? Or is that the rime > taken by the agent to "apply" the catalog on the node? > It certainly inc

[Puppet Users] Re: struggling with vcsrepo, git, latest

2013-01-23 Thread A Bhuvaneswaran
On Monday, November 21, 2011 10:00:37 PM UTC-8, jwag wrote: > > I am working with 2.7.3, latest vcsrepo from github. Trying to get a > git workarea kept up to date (latest). > The call: > > vcsrepo { "puppetm:git:co": > ensure => latest, > pro

[Puppet Users] Re: How to apply a single class from an agent with puppet v3?

2013-01-23 Thread jcbollinger
On Wednesday, January 23, 2013 7:25:33 AM UTC-6, Schofield wrote: > > Is it possible to apply a single class in the context of the catalog to a > puppet agent? The puppet run has grown lengthy and I would like to run > just the puppet class I am working on. > The command puppet agent --tag

[Puppet Users] Running an exec after another exec fails

2013-01-23 Thread Jist Anidiot
I'm using puppet to manage /etc/sysctl.conf on my RHEL 6 boxes. I'm doing something very similar to http://projects.puppetlabs.com/projects/1/wiki/puppet_augeas#/etc/sysctl.conf The problem is sysctl -p on RHEL 6 gives: error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key error: "ne

Re: [Puppet Users] Windows Puppet File Resource Getting Puppet Server's UNIX File Permissions

2013-01-23 Thread Rich Siegel
I am only speaking for windows permissions: > >> >> But if you push the directory with recurse => true, what permissions >> would files get in that case? Permissions of the file on the master, or >> default permission for that scope? >> > On Windows the answer is the permissions on the endpoi

Re: [Puppet Users] Puppetdb will setting gc-interval to 0 disable it

2013-01-23 Thread Chuck
On Wednesday, January 23, 2013 8:20:34 AM UTC-6, Ken Barber wrote: > > > We didn't notice anything on Sunday. We have a decent number of > resources > > that effect all nodes. This may explain the ocasional performance > issues. > > Sure, more specifically you'll get catalog replaces in the

[Puppet Users] Sanity Check Request: Environments in /etc/puppet/puppet.conf

2013-01-23 Thread Dan White
It just struck me that any environment blocks in /etc/puppet/puppet.conf have meaning ONLY on the puppet master. Is that accurate ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin &

[Puppet Users] Re: Security considerations for basing decisions on facts

2013-01-23 Thread Jist Anidiot
On Tuesday, January 22, 2013 4:04:22 PM UTC-5, jcbollinger wrote: > > > > You are correct that that only the identity of the client node is > authenticated by Puppet, and even that only insomuch as the client can be > relied upon to protect its SSL certificate. The $hostname fact cannot be > re

Re: [Puppet Users] ssh::auth and other ways of managing ssh keys

2013-01-23 Thread Jist Anidiot
> Thoughts? > (1) https://github.com/boklm/puppet-sshkeys > (2) https://github.com/vurbia/puppet-sshauth > (3) https://github.com/ashleygould/puppet-sshauth > (4) > http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns#detailed-usage > > > I checked out all of these and I

Re: [Puppet Users] Re: Security considerations for basing decisions on facts

2013-01-23 Thread Ramin K
On 1/23/2013 12:22 PM, Jist Anidiot wrote: On Tuesday, January 22, 2013 4:04:22 PM UTC-5, jcbollinger wrote: You are correct that that only the identity of the client node is authenticated by Puppet, and even that only insomuch as the client can be relied upon to protect its SSL ce

[Puppet Users] Why is there no forge module for Puppetlabs-dhcp

2013-01-23 Thread Peter
Hi List, I have checked the puppet forge and searched for DHCP however I cannot find a forge module for puppetlabs-dhcp. Is this best way to install the puppetlabs-dhcp module by using a git clone? Thanks, Peter -- You received this message because you are subscribed to the Google Groups "

Re: [Puppet Users] Why is there no forge module for Puppetlabs-dhcp

2013-01-23 Thread Ryan Coleman
A member of the Puppet Labs operations team is the primary contributor to that source code and has released it to the Forge under his name. http://forge.puppetlabs.com/zleslie/dhcp Enjoy! On Wed, Jan 23, 2013 at 2:17 PM, Peter wrote: > Hi List, > > I have checked the puppet forge and searched

Re: [Puppet Users] Re: Terrible exported resources performance

2013-01-23 Thread Daniel
This is now reported here: http://projects.puppetlabs.com/issues/18804 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/ZpyFiFkYjawJ. To post to this group,

Re: [Puppet Users] puppetlabs-products yum checksum failing

2013-01-23 Thread Kristopher Spring
I'm getting these errors when trying to provision a Centos 6.3 box: puppetlabs-products/primary_db | 70 kB 00:00 http://yum.puppetlabs.com/el/6/products/x86_64/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Trying other mirror.

Re: [Puppet Users] Why is there no forge module for Puppetlabs-dhcp

2013-01-23 Thread Peter
Cool, good to know! Hovering over the Project URL it does show it linking to the PuppetLabs-DHCP Github location. It is a bit confusing however I can live with it now I know! Thanks for the quick reply! Peter. On Thursday, 24 January 2013 09:20:31 UTC+11, Ryan Coleman wrote: > > A member of t

Re: [Puppet Users] Why is there no forge module for Puppetlabs-dhcp

2013-01-23 Thread Ryan Coleman
On Wed, Jan 23, 2013 at 2:37 PM, Peter wrote: > Cool, good to know! > > Hovering over the Project URL it does show it linking to the > PuppetLabs-DHCP Github location. > > It is a bit confusing however I can live with it now I know! > Sorry about that! We can certainly make that less confusing f

[Puppet Users] Puppetlabs-dhcp - Failed to parse template dhcp/dhcp.pool.erb, undefined method each

2013-01-23 Thread Peter
Hi List, After installing the puppetlabs-dhcp module and trying to run the tests/init.pp file I receive and error see below for sequence: puppet module install zleslie/dhcp Notice: Preparing to install into /etc/puppet/modules ... Notice: Downloading from https://forge.puppetlabs.com ... Notice

[Puppet Users] Re: Running an exec after another exec fails

2013-01-23 Thread jcbollinger
On Wednesday, January 23, 2013 1:19:28 PM UTC-6, Jist Anidiot wrote: > > I'm using puppet to manage /etc/sysctl.conf on my RHEL 6 boxes. > > I'm doing something very similar to > http://projects.puppetlabs.com/projects/1/wiki/puppet_augeas#/etc/sysctl.conf > > The problem is sysctl -p on RHEL 6

Re: [Puppet Users] passenger-install-apache2-module fails

2013-01-23 Thread Tony Caffe
Ok well It never finished working in the end. I have just been to busy to mess with it. So I now have passenger installed and my versions are as follows: ruby 1.8.7 (2011-06-30 patchlevel 352) [x86_64-linux] CentOS release 6.3 (Final) Apache/2.2.15 (Unix) rubygem-passenger-3.0.19-1.el6.x86_64 mo

Re: [Puppet Users] Re: Error: Could not request certificate: Connection refused - connect(2)

2013-01-23 Thread Douglas Nethery
Not at all! Thanks for your help. End to end for anyone else with this issue: Stopping puppetd on the client, deleting the ssl dir on the client, restarting puppetd on the client, resigning the cert request on the master with puppetca, and puppetrun from master to host fixed it. On 23 January 2

[Puppet Users] Augeas file line edit please help

2013-01-23 Thread kdo
what i thought would be a simple edit using augeas is turning out to not be so straight forward, can anyone please help ? the plan is to edit sendmail.cf and change the default DS to DShostname.domain class mail { $key = DS service { 'sendmail':; } augeas {

[Puppet Users] Re: Augeas file line edit please help

2013-01-23 Thread kdo
might be easier to just use sed in a exec statement to replace all occurances of DS with DShostname.domain Ex: sed 's/DS/c DShostname.domain' /etc/mail/sendmail.cf On Thursday, January 24, 2013 2:28:34 PM UTC+10, kdo wrote: > > what i thought would be a simple edit using augeas is turning out t

[Puppet Users] puppet agent returns zero even when fails to execute a catalog

2013-01-23 Thread xin zhang
I am running below command to connect puppet master puppet agent --certname testcertname --no-daemonize --onetime --server server_host_name --verbose it outputs error like: Error: Execution of '/usr/bin/yum -d 0 -e 0 -y install dnsmasq' returned 1: Error: Cannot find a valid baseurl for repo:

Re: [Puppet Users] puppet agent returns zero even when fails to execute a catalog

2013-01-23 Thread Matthaus Owens
You can pass the --detailed-exitcodes flag to puppet agent to get non-zero exit codes. Here's the description from the puppet-agent man page: --detailed-exitcodes Provide transaction information via exit codes. If this is enabled, an exit code of '2' means there were changes, an exit code of '4' m