Re: [Puppet Users] Help with scaling puppetdb/postgres

2013-10-30 Thread ak0ska
Also looking at the reports (Foreman, PuppetDB) might give a clue of what is changing. On Tuesday, October 29, 2013 7:32:54 PM UTC+1, Ryan Senior wrote: > > 1.5% catalog duplication is really low and from a PuppetDB perspective, > means a lot more database I/O. I think that probably explains th

[Puppet Users] RPM Warning

2013-10-30 Thread Thomas Bendler
Hello @all, I noticed that I got rpm based warnings on my EL5 boxes: Warning: Failed to match rpm line ... I know there is a ticket that adress the problem (don't know the ticket number out of my head), but as far as I know with the current rpm version from yum.puppetlabs.com this should already

[Puppet Users] Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production"

2013-10-30 Thread AVE1810
Hi, When I run puppet agent --test --environment 42A, I have the following warning : Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production". ... The puppet manifest for the environment "42A" isn't applied. The puppet vers

[Puppet Users] Re: Custom Windows Fact (match ipaddress)

2013-10-30 Thread cko
Still no effect. Facter::Util::Resolution.exec("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe ipconfig | Select-String -pattern '192.168.20[567]' | %{$_.line.split()} | FINDSTR 192.168.20[567]") Is there anything else i need to escape? On Tuesday, October 29, 2013 3:07

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-10-30 Thread Daniele Sluijters
Hi, Ah indeed, I misread the puppetlabs-denyhosts module. I had a look at the DenyHosts project but that seems limited to SSH alone. My fail2ban has rules that scan logs of our web servers, mail etc. -- Daniele Sluijters On Wednesday, 30 October 2013 01:39:56 UTC+1, Don Hoffman wrote: > > On

[Puppet Users] Re: Hiera vs OpenLDAP

2013-10-30 Thread Luke Bigum
This one perhaps? https://github.com/hunner/hiera-ldap The example is for Users, doesn'tlook difficult to adapt the search to get a list of servers. How you model the classes and class parameters in LDAP might be trickier. Maybe your LDAP structure would look something like this (which doesn't

[Puppet Users] Re: Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production"

2013-10-30 Thread Daniele Sluijters
Hi, Have you tried --environment=42A? -- Daniele Sluijters On Wednesday, 30 October 2013 09:47:13 UTC+1, AVE1810 wrote: > > Hi, > > When I run puppet agent --test --environment 42A, I have the following > warning : > Warning: Local environment: "42A" doesn't match server specified node > envi

[Puppet Users] Re: Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production"

2013-10-30 Thread AVE1810
Yes, it doesn't work. I have the same error Le mercredi 30 octobre 2013 10:51:32 UTC+1, Daniele Sluijters a écrit : > > Hi, > > Have you tried --environment=42A? > > -- > Daniele Sluijters > > On Wednesday, 30 October 2013 09:47:13 UTC+1, AVE1810 wrote: >> >> Hi, >> >> When I run puppet agent --

[Puppet Users] Re: Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production"

2013-10-30 Thread james . eckersall
Hi, I believe the following link should resolve this problem for you. https://groups.google.com/forum/#!topic/foreman-users/p5w0if2AGlo J On Wednesday, 30 October 2013 08:47:13 UTC, AVE1810 wrote: > > Hi, > > When I run puppet agent --test --environment 42A, I have the following > warning : >

Re: [Puppet Users] Re: Hiera vs OpenLDAP

2013-10-30 Thread Johan De Wit
Are you using ldap as your ENC ? If so, all settings defined in the puppet ldap schema are available as global vars in your manifest. Unfortunately, class parameters are not supported (at the moment), so maybe the ldap part in the puppet code could be extended to support that. I heard more pe

[Puppet Users] Custom providers and feature confinement

2013-10-30 Thread David Campos
Hello all, I have been searching through previous posts and documentation and I have not been able to find out what is happening with my provider... I have declared a custom provider that depends on a custom feature (in fact, in a set) that are not present at the machine but installed during t

[Puppet Users] Re: Warning: Local environment: "42A" doesn't match server specified node environment "production", switching agent to "production"

2013-10-30 Thread AVE1810
Yes, it resolve my problem. Thank you. Best regards Le mercredi 30 octobre 2013 11:43:33 UTC+1, james.e...@fasthosts.com a écrit : > > Hi, > > I believe the following link should resolve this problem for you. > > https://groups.google.com/forum/#!topic/foreman-users/p5w0if2AGlo > > J > > On Wed

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Glenn Sarti
Hi Josh, After a lot of digging around, I think I have partial solution; NOTE - This is my first attempt at writing ruby so I expect there are some issues with what I've written. I only had a single host (Server 2008 R2 64bit) to test this on, but I believe the changes I've made are generic

Re: [Puppet Users] Upgrading a .msi package through Puppet

2013-10-30 Thread Lorenzo Jesús Cubero
Thanks Rob for guiding me. The ensure => latest feature is not ready yet, because it requires an upgradeable provider. What seems to be solved is ensure => '0.0.1'. At the link you provide they made the windows provider versionable. (That requires facter version => 1.7.3-rc1) I managed to ap

[Puppet Users] Re: :merge_behavior: deeper and hiera_hash

2013-10-30 Thread jcbollinger
On Tuesday, October 29, 2013 9:21:05 PM UTC-5, William Leese wrote: > > Hi, > > To my surprise hashes passed to class parameters pulled from hiera with > :merge_behavior: deeper, are not merged "as expected", where as hiera_hash > does work "as expected". > > Or to rephrase: they behave differe

[Puppet Users] Re: Issues referencing a class from another module

2013-10-30 Thread jcbollinger
On Tuesday, October 29, 2013 5:44:07 PM UTC-5, Daniel Sage wrote: > > I just realised that there is a typo in my example. But the problem > remains the same, if I've got the following code in acme_inc::workstation > > # install and set up the nfs client > class {'nfs': > class => "

[Puppet Users] Re: User and group issues

2013-10-30 Thread jcbollinger
On Tuesday, October 29, 2013 10:31:56 AM UTC-5, box...@gmail.com wrote: > > I see that makes sense, would you be able to give a quick example of the > required syntax? > > Here is a simple example. If you have more than a tiny number of users and/or groups, however, or if they change with any

Re: [Puppet Users] Re: Version Controlling Puppet Configs with svn

2013-10-30 Thread Puppet List
To address permission issues I run a rsync server on the puppet server with a module that specifies owner and group Jenkins ci then takes checks out svn commits and rsyncs them up. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe f

[Puppet Users] git & puppet, modules & manifests (oh-my)

2013-10-30 Thread dkoleary
Hey; I am a recent convert to puppet and git and have become a huge fan so the concept on keeping modules under git/vcs control is well and truly accepted. I'm not clear on how to keep the /etc/puppet/manifests in sync with the modules, however. Case in point: I have two puppet instances run

[Puppet Users] err: Could not retrieve catalog; skipping run

2013-10-30 Thread shlo . afgin
Hi, I install puppet 2.6.18, test it and it was working okay. Then I install Apache and Passenger on the Puppet server. I run on a puppet agent: puppet agent —test And I got the error: "warning: Not using cache on failed catalog err: Could not retrieve catalog; skipping run" In the p

[Puppet Users] Puppet agent fails when executed via mcollective

2013-10-30 Thread Gregor Zupan
I have configured that my puppet agents are executed twice a night. For urgent updates I have mcollective and I can run them manually (or at least I thought so). I am experiencing problems when puppet agent is executed via mcollective: mco puppet runonce -I XXX.com * [ ===

Re: [Puppet Users] git & puppet, modules & manifests (oh-my)

2013-10-30 Thread Werner Flamme
dkoleary [30.10.2013 14:55]: > Hey; [..] > Doing this, though, I occasionally have to update the > /etc/puppet/manifests/nodes.pp file to include additional testing modules. > When I switch back to the master branch on dev, I have to re update that > file manually. It seems there should be a

Re: [Puppet Users] git & puppet, modules & manifests (oh-my)

2013-10-30 Thread dkoleary
Hey; Thanks for the reply. Yes; having it under git control would be optimal. I tried having a separate repo for /etc/puppet/manifests (and still have it); however, when I switch between testing and master, I still have to remember to switch on the manifests repo. I'm a UNIX admin. We're la

Re: [Puppet Users] Custom Windows Fact (match ipaddress)

2013-10-30 Thread Josh Cooper
The second issue is that findstr is a shell builtin, so you have wrap the entire command in: cmd.exe /c You may have to quote the original command and adjust the interior quotes accordingly. Josh On Wednesday, October 30, 2013, cko wrote: > Still no effect. > > > Facter::Util::Resolution.exec

[Puppet Users] facter-1.7.3 and puppet-3.3.1 on OS X Mavericks 10.9

2013-10-30 Thread Paul Tötterman
Hi, Is anyone else getting this: $ facter /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/ruby/2.0.0/rubygems/core_ext/kernel_require.rb:45:in `require': cannot load such file -- facter/application (LoadError) from /System/Library/Frameworks/Ruby.framework/Versions/2.0/usr/lib/

Re: [Puppet Users] Best practice to manage multi-OS for the same module?

2013-10-30 Thread DEGREMONT Aurelien
Le 26/10/2013 16:18, Jason Antman a écrit : Aurélien, I'm a fan of the params.pp pattern, as is used in a lot of puppetlabs' own modules. Most of the current modules use parameterized classes, so if you're using a less-capable ENC (like the current Puppet Dashboard / Console, ironically) you'll

[Puppet Users] Re: Hiera vs OpenLDAP

2013-10-30 Thread Steven Jonthen
Hi guys, First of all thank you for your hints. I would have suggestion: What if we'd use Hiera with a LDAP-Backend. Hiera would automatically look up the class-variables in LDAP, wouldn't it? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group.

Re: [Puppet Users] Upgrading a .msi package through Puppet

2013-10-30 Thread Rob Reynolds
I am curious if you have also looked at the other package providers that are out there - http://forge.puppetlabs.com/modules?q=windows+package I can tell you that the chocolatey provider does allow ensure => latest. Also the version on github is being improved to add source in addition to other thi

[Puppet Users] moving to ENC - how to get all current classes and params

2013-10-30 Thread Jeff Behl
I'm looking to use an external node classifier (ENC) in our environment. What's the easiest way to programmatically get currently applied classes (and class parameters) for all hosts, with the goal of dumping it into a database for later retrieval by the ENC script? Nodes are currently classi

[Puppet Users] register question

2013-10-30 Thread Paras pradhan
Hi, When I register to master using: puppet agent --server puppetmaster --waitforcert 60 --test , it does register but also runs: puppet agent -t internally. I *only* need to register to master. is it possibie? Thanks Paras. -- You received this message because you are subscribed to t

[Puppet Users] Pass aggregate hash to class to declare several defined types

2013-10-30 Thread Nathan Nobbe
Hi, A bit of background, I'm trying to move from node inheritance to hiera. With node inheritance I could declare defined types at several levels, for example, say for all of preproduction I'd like a yum repository *manifests/pre-prod.pp* class preprod { yumrepo { 'preprod-repo': ... } } The

[Puppet Users] Geppetto with Subversion

2013-10-30 Thread John Zimmerman
I'm trying to use Geppetto 4 to develop puppet modules and check them in and out of subversion. I've got a subversion repositories setup via web dav. The Cloudsmith FAQ seems a bit vague. I've not used Eclipse much at all and am not sure how the subversion integration works. I saw a really

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Glenn Sarti
> > * A side effect of not running the daemon from a CMD.EXE was that the > call to get to runinterval was failing. I suspect this is due to STDOUT > not being available anymore. So I used the well worn method of pipe the > output to a file and read that instead (Lines 60-79). I still need t

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Glenn Sarti
I also noticed there is a puppetres.dll and puppetres.mc file so I'll investigate that and use it for the EventLog stuff. https://github.com/puppetlabs/puppet/tree/master/ext/windows/eventlog -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To

[Puppet Users] Re: Version Controlling Puppet Configs with svn

2013-10-30 Thread Hyunil Shin
Thank you very much. I want to know more in your method. As result, anyway, when you do fresh checkout, the files are like 664 petec petec site.pp 664 petec petec x and petec is included in pe-puppet. Am I right? Also, I don't understand what setgid do. Does setgid affect only execution? I

[Puppet Users] Re: :merge_behavior: deeper and hiera_hash

2013-10-30 Thread William Leese
On Wednesday, October 30, 2013 10:08:14 PM UTC+9, jcbollinger wrote: > > Per the docs, the :merge_behavior setting affects how hashes are merged in > a "hash merge lookup". Not every hiera lookup is a hash merge lookup, and > whether a query is of that kind does not depend on the type of the da

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Glenn Sarti
Well that was easier than I expected * daemon.rb now defaults to logging in the Event Log and optionally to the windows.log file * The ImagePath string now looks like; "C:\Program Files (x86)\Puppet Labs\Puppet Enterprise\sys\ruby\bin\ruby.exe" -rubygems -C"C:\Program Files (x86)\Puppet Labs

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Josh Cooper
On Wed, Oct 30, 2013 at 8:41 PM, Glenn Sarti wrote: > Well that was easier than I expected > > * daemon.rb now defaults to logging in the Event Log and optionally to the > windows.log file > This should resolve https://projects.puppetlabs.com/issues/21641. Can you submit a PR for this issue? >

Re: [Puppet Users] Why does the Puppet-Agent on Windows use a batch file?

2013-10-30 Thread Josh Cooper
On Wed, Oct 30, 2013 at 6:06 PM, Glenn Sarti wrote: > * A side effect of not running the daemon from a CMD.EXE was that the >> call to get to runinterval was failing. I suspect this is due to STDOUT >> not being available anymore. So I used the well worn method of pipe the >> output to a file

Re: [Puppet Users] Upgrading a .msi package through Puppet

2013-10-30 Thread Josh Cooper
Hi Lorenzo, On Wed, Oct 30, 2013 at 11:54 AM, Rob Reynolds wrote: > I am curious if you have also looked at the other package providers that > are out there - http://forge.puppetlabs.com/modules?q=windows+package > I can tell you that the chocolatey provider does allow ensure => latest. > Also

[Puppet Users] Re: Version Controlling Puppet Configs with svn

2013-10-30 Thread Pete Cornell
No, when I do fresh checkouts the files are 664 petec pe-puppet site.pp and directories will be 774 petec pe-puppet Yes, petec is a member of pe-puppet group. Setgid, or Set Group ID, will make the directory and files created within it keep the ownership of the group you assign it instead

Re: [Puppet Users] Re: config print seems to be broken

2013-10-30 Thread Josh Cooper
On Mon, Sep 23, 2013 at 9:19 AM, Dan White wrote: > It still works this way: > > [root ~]# puppet agent --configprint ssldir > /var/lib/puppet/ssl > [root ~]# puppet master --configprint ssldir > /var/lib/puppet-master/ssl > > You are better off specifying the application, e.g. master, and the --

[Puppet Users] Re: Pass aggregate hash to class to declare several defined types

2013-10-30 Thread Nathan Nobbe
Solved it with create_resources. On Wednesday, October 30, 2013 4:58:44 PM UTC-6, Nathan Nobbe wrote: > > Hi, > > A bit of background, I'm trying to move from node inheritance to hiera. > With node inheritance I could declare defined types at several levels, for > example, say for all of preprod

Re: [Puppet Users] AD user add to local windows group?

2013-10-30 Thread Josh Cooper
On Wed, Jun 12, 2013 at 8:06 AM, Jon wrote: > Has there been any advancement with this bug? A fix has been merged into the master puppet branch in preparation for the 3.4.0 release[1]. I encourage you to give it a try. Josh [1] https://projects.puppetlabs.com/issues/17031 -- Josh Cooper Dev

Re: [Puppet Users] "puppet module install simondean/iis" gives error "Error: cert already in hash table"

2013-10-30 Thread Josh Cooper
On Fri, Sep 20, 2013 at 7:36 AM, Rainer Weinhold wrote: > i just downloaded 3.3 for windows (w7,x64) and got the same error. > > output : > > C:\Program Files (x86)\Puppet Labs\Puppet\bin>puppet module install > simondaen/iis --debug --trace > Notice: Preparing to install into M:/.puppet/modules

[Puppet Users] Re: register question

2013-10-30 Thread Rahul Khengare
Hi Paras, Whenever puppet agent requested catalog from puppet master then it first check the certificate information present or not(agent registered or not). At time of first run puppet agent request for certificate and skip the execution of puppet manifests catalog, This happen until puppe