Re: [Puppet Users] Issues referencing a class from another module

2013-10-29 Thread Martin Alfke
Hi Daniel, including modules from other classes is fully supported. You only need to take care on proper module path. What you plan to do sound like the roles and profiles principle. http://www.craigdunn.org/2012/05/239/ hth, Martin On 29 Oct 2013, at 06:23, Daniel Sage wrote: > Hi all, > >

Re: [Puppet Users] Re: Puppet master does not start

2013-10-29 Thread josec . raya
Hi Sean, updating the info, yesterday I removed root from puppet group and that is what I have now: # id uid=0(root) gid=0(root) groups=0(root) # id root uid=0(root) gid=0(root) groups=0(root) # id puppet uid=501(puppet) gid=503(puppet) groups=503(puppet) And I getting the same error: # /et

[Puppet Users] Central configuration for DHCP and DNS

2013-10-29 Thread Steven Jonthen
Hi guys, I need your help: - I want to achieve a role-based Puppet-configuration of the nodes - I want a single file which contains: - All the roles a certain node has - All the DHCP and DNS configuration data for a specific node This central configuration file should be in "yaml"-format.

Re: [Puppet Users] augeas umask and /etc/sysconfig/init

2013-10-29 Thread Sven vd
I have the same problem. The goal is to append "umask 027" without the "=" to the end of the /etc/sysconfig/init file according to NIST rules. However the augeas lens is not made to handle this, only shell vars syntax is allowed. If you want to workaround this via a erb template and you have oth

Re: [Puppet Users] augeas umask and /etc/sysconfig/init

2013-10-29 Thread Dominic Cleal
On 29/10/13 12:07, Sven vd wrote: > I have the same problem. The goal is to append "umask 027" without the > "=" to the end of the /etc/sysconfig/init file according to NIST rules. > However the augeas lens is not made to handle this, only shell vars > syntax is allowed. > If you want to workaround

Re: [Puppet Users] Help with scaling puppetdb/postgres

2013-10-29 Thread ak0ska
Just out of curiosity, what is your catalog duplication rate? On Tuesday, October 29, 2013 3:26:20 AM UTC+1, David Mesler wrote: > > I reconfigured postgres based on the recommendations from pgtune and your > document. I still had a lot of agent timeouts and eventually after running > overnight

Re: [Puppet Users] Help with scaling puppetdb/postgres

2013-10-29 Thread Ken Barber
Hmm. > I reconfigured postgres based on the recommendations from pgtune and your > document. I still had a lot of agent timeouts and eventually after running > overnight the command queue on the puppetdb server was over 4000. Maybe I > need a box with traditional RAID and a lot of spindles instead

Re: [Puppet Users] Issues referencing a class from another module

2013-10-29 Thread Dan White
http://docs.puppetlabs.com/puppet/2.7/reference/lang_classes.html#declaring-a-class-with-require This might be what you are looking for. “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calv

[Puppet Users] Announce: Module puppetlabs/puppetdb 3.0.0 Available

2013-10-29 Thread Ken Barber
A new release of the puppetlabs/puppetdb module is now available on the Forge: http://forge.puppetlabs.com/puppetlabs/puppetdb/3.0.0 This major release changes the main dependency for the postgresql module from version 2.5.x to 3.x. Since the postgresql module is not backwards compatible, this re

[Puppet Users] Re: Issues referencing a class from another module

2013-10-29 Thread jcbollinger
On Tuesday, October 29, 2013 12:23:02 AM UTC-5, Daniel Sage wrote: > > Hi all, > > I'm currently experiencing an issue where a module cannot reference a > class from another module. > > We'd be better able to diagnose the issue if you gave us the error message you receive, but my first guess i

Re: [Puppet Users] Issues referencing a class from another module

2013-10-29 Thread Daniel Sage
Hey all, Thanks for the links posted, I'll take a look at them. My immediate problem however is if I run the code I included above, I get this error: Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find class acme_inc::workstation for puppet-agent.example.com

[Puppet Users] Re: User and group issues

2013-10-29 Thread jcbollinger
On Monday, October 28, 2013 11:03:09 AM UTC-5, box...@gmail.com wrote: > > I am currently in the process of cleaning up some of my puppet config > files in particular some user and some virtual templates: > > I get the following error: > > *"err: Could not retrieve catalog from remote server: Er

[Puppet Users] Custom Windows Fact (match ipaddress)

2013-10-29 Thread cko
Hi everybody, I'm trying to write a custom fact that gets the IP Address of any given NIC if it matches a specific IP range. On Linux i use this (works fine) Facter.add("ip_foo") do setcode do Facter::Util::Resolution.exec("/sbin/ifconfig | /bin/grep '192.168.20[567].' | /bin/awk '{

Re: [Puppet Users] Custom Windows Fact (match ipaddress)

2013-10-29 Thread Josh Cooper
On Tuesday, October 29, 2013, cko wrote: > Hi everybody, > > I'm trying to write a custom fact that gets the IP Address of any given > NIC if it matches a specific IP range. > > On Linux i use this (works fine) > > Facter.add("ip_foo") do >setcode do > Facter::Util::Resolution.exec("/sbi

[Puppet Users] Re: inline_template private method `gets' called for false:FalseClass

2013-10-29 Thread jcbollinger
On Monday, October 28, 2013 11:43:29 AM UTC-5, beyonddc...@gmail.com wrote: > > Hi, > > I am new to Ruby ERB and inline_template. Can anyone spot what's wrong > with this inline_template? > > $moddedContent = inline_template("<%= puts gets(nil).gsub(/one > two three/,\"\") /tmp/bla

Re: [Puppet Users] Puppet exec error on windows 2008 server

2013-10-29 Thread Ringo De Smet
On Tuesday, 24 September 2013 15:59:15 UTC+2, Josh Cooper wrote: > > > > On Tuesday, September 24, 2013, Harsh Desai wrote: > >> Hi >> >> I am stuck at a very basic issue in my the following exec resource. I am >> executing this on windows 2008 R2 server. >> >> When I apply this manifest, puppet

[Puppet Users] Re: User and group issues

2013-10-29 Thread boxrick
I see that makes sense, would you be able to give a quick example of the required syntax? On Tuesday, October 29, 2013 1:58:23 PM UTC, jcbollinger wrote: > > > > On Monday, October 28, 2013 11:03:09 AM UTC-5, box...@gmail.com wrote: >> >> I am currently in the process of cleaning up some of my pu

[Puppet Users] puppetlabs/firewall and fail2ban

2013-10-29 Thread Daniele Sluijters
Hello, A while back I wanted to switch our home-brewed iptables module to the puppetlabs/firewall module but I couldn't figure out how to tell puppetlabs/firewall to leave the fail2ban chains alone. I was curious if someone had solved the issue and had some examples I can work from? -- Daniel

Re: [Puppet Users] Help with scaling puppetdb/postgres

2013-10-29 Thread David Mesler
Resource duplication is 98.7%, catalog duplication is 1.5%. On Tuesday, October 29, 2013 9:06:37 AM UTC-4, Ken Barber wrote: > > Hmm. > > > I reconfigured postgres based on the recommendations from pgtune and > your > > document. I still had a lot of agent timeouts and eventually after > runn

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-10-29 Thread Donald Hoffman
On Oct 29, 2013, at 8:41 AM, Daniele Sluijters wrote: > Hello, > > A while back I wanted to switch our home-brewed iptables module to the > puppetlabs/firewall module but I couldn't figure out > how to tell puppetlabs/firewall to leave the fail2ban chains alone. > > I was curious if someone

Re: [Puppet Users] Help with scaling puppetdb/postgres

2013-10-29 Thread Ryan Senior
1.5% catalog duplication is really low and from a PuppetDB perspective, means a lot more database I/O. I think that probably explains the problems you are seeing. A more typical duplication percentage would be something over 90%. The next step here is figuring out why the duplication percentage

[Puppet Users] deprecation error from puppetlabs/mysql

2013-10-29 Thread msuho
Hi- I've been using the mysql class from puppetlabs in my deploys for about 4 months with no trouble- until today. I was installing a new machine, using puppet 3.2.3. My install contains this snippet of code: class { 'mysql::server': config_hash => { 'root_password' => $m

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-10-29 Thread Daniele Sluijters
Hi, DenyHosts is not an option for me since I can't predict which hosts will be connecting from the outside. Fail2ban solves that issue by looking for odd behaviour instead of asking me to whitelist. Thanks for the suggestion though, -- Daniele Sluijters On Tuesday, 29 October 2013 18:22:04

[Puppet Users] Anyone currently using Puppet environments, gitolite and the Puppet post-receive hook?

2013-10-29 Thread Alex Scoble
Hi All, I'm trying to use gitolite to control who has access to our puppet code in git and running into problems with the Puppet Labs semi-official post-receive hook https://github.com/adrienthebo/puppet-git-hooks/blob/master/post-receive/dynamic-environments I have gitolite working to where I

[Puppet Users] Re: Anyone currently using Puppet environments, gitolite and the Puppet post-receive hook?

2013-10-29 Thread Alex Scoble
My current solution is to have the post-receive hook put the pushed branch to /var/staging/environments and then have a cron job run every minute or so that rsyncs all of the environments (except for production, which will have to be synced manually) to /etc/puppetlabs/puppet/environments and m

[Puppet Users] Re: Issues referencing a class from another module

2013-10-29 Thread Daniel Sage
I just realised that there is a typo in my example. But the problem remains the same, if I've got the following code in acme_inc::workstation # install and set up the nfs client class {'nfs': class => "client", domain => "acme.example.com", } then I get the following erro

Re: [Puppet Users] Re: Role-based puppet

2013-10-29 Thread Chad Huneycutt
In that example, 'role' is a module, and 'role::somerole' is a class in that module: /etc/puppet/modules/role/manifests/somerole.pp: class role::somerole { ... } - Chad On Sat, Oct 26, 2013 at 7:58 AM, Steven Jonthen wrote: > I've a question: > What does this mean/how is this realized?: > '::r

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-10-29 Thread Donald Hoffman
On Oct 29, 2013, at 12:00 PM, Daniele Sluijters wrote: > Hi, > > DenyHosts is not an option for me since I can't predict which hosts will be > connecting from the outside. Fail2ban solves that issue by looking for odd > behaviour instead of asking me to whitelist. > > Thanks for the suggesti

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-10-29 Thread Donald Hoffman
On reading your message, I think you are perhaps confusing the static Linux /etc/host.deny mechanism with the DenyHosts project. See http://denyhosts.sourceforg.net Don On Oct 29, 2013, at 5:32 PM, Donald Hoffman wrote: > On Oct 29, 2013, at 12:00 PM, Daniele Sluijters > wrote: > >> Hi,

[Puppet Users] :merge_behavior: deeper and hiera_hash

2013-10-29 Thread William Leese
Hi, To my surprise hashes passed to class parameters pulled from hiera with :merge_behavior: deeper, are not merged "as expected", where as hiera_hash does work "as expected". Or to rephrase: they behave differently, despite merge_behavior being set. I found a snippet documenting this here: ht

[Puppet Users] Re: Version Controlling Puppet Configs with svn

2013-10-29 Thread Hyunil Shin
Hello. I have the same issue with you, except that I am using Git. Can you describe your solution in more details? As you said that /etc/puppet (in my case, /etc/puppetlabs) has mixed ownership of root, pe-puppet, how can you check-out puppet configuration from the svn server, with preserving pe

[Puppet Users] Re: Version Controlling Puppet Configs with svn

2013-10-29 Thread Pete Cornell
Hello-- It turns out I was overly cautious about changed ownership away from root. As long as you ensure the group owner is the puppet group, you can have mixed ownership for user. My solution was to use the Setgid bit on all directories where puppet manifests are located and change the direc

[Puppet Users] Hiera vs OpenLDAP

2013-10-29 Thread Steven Jonthen
Hi guys, I want to use Hiera with a OpenLDAP-Backend. The OpenLDAP-Backend should contain class parameters. When a agent connects to the puppet master then hiera should extract from the OpenLDAP-Backend which roles and which class-parameters the node has. I've found any useful example in the i