[Puppet Users] custom type skip array element on munge

2013-11-01 Thread Vasil Mikhalenya
Hi all, is there any way to completely ignore some array element when munging custom_type { "name": groups => ["gr1", "gr2", "gr3"], } In case of any array member is not exists on system, I want to remove it from resource[:groups] But this code: newproperty(:groups, :array_matching => :all)

Re: [Puppet Users] puppetlabs/firewall and fail2ban

2013-11-01 Thread Jonathan Gazeley
Have a look at pam_shield. It can protect any services that use PAM for authentication (i.e. ssh, authenticated mail, but not web). It can use either null-routing or iptables rules for blocking. If you set it to use null-routing then it doesn't interfere with puppetlabs/firewall - we are using

Re: [Puppet Users] What's the best practice to manage software updates using puppet ?

2013-11-01 Thread Jason Antman
We use largely the same solution as Jo but with an ENC. Packages that we really don't care about are usually just ensure => present, so every machine built from a given release should have the same version (upgrades because of dependencies aside), or ensure => latest in the rare case that we'v

Re: [Puppet Users] facter-1.7.3 and puppet-3.3.1 on OS X Mavericks 10.9

2013-11-01 Thread Hannes Juutilainen
It's the same issue as this: https://projects.puppetlabs.com/issues/18205 It seems to be fixed already but not included in the current release version. Building Puppet and Facter from source resolves this issue so I'd expect it to be fixed in near future. -- Hannes Juutilainen On 30.10.2013,

[Puppet Users] Dynamic Environments, r10k, gitolite and Non-environment Puppet Config

2013-11-01 Thread Simon Young
Hi all, Apologies if this has been dealt with before, but I haven't managed to find an answer yet. I have a working "dynamic environments" setup: * A gitolite repository (on a dedicated host) with multiple branches - one for each environment. * I use r10k ro deploy the environments on the mast

[Puppet Users] Re: Installing and using a Puppet-Module

2013-11-01 Thread Simon Young
It's a good question, but I'm not sure this is possible. If the module isn't installed before compilation, then any resource types defined by ths module will be absent and the catalog won't compile. Are you trying to use puppet to install itself? If so, then the snake may be eating its own tail

[Puppet Users] Re: Geppetto with Subversion

2013-11-01 Thread Simon Young
Hi John, I'm also new to Geppetto (using version 3.2.0), but I've found the built-in help to be really useful for configuring version control. I'm using Git, so a little different, but all the VCS options are under Window -> Preferences -> Team. If you expand Team, click on SVN then click on th

[Puppet Users] Facts and Stored Configs

2013-11-01 Thread Richie Rees
So finally playing with PuppetDB and have to say its impressive. Planning on extending it slightly to be a CMDB. With that in mind, we produce test systems for developers to test the equipment they are developing on. So these systems are rapidly deployed then torn down. A requirement has been g

Re: [Puppet Users] facter-1.7.3 and puppet-3.3.1 on OS X Mavericks 10.9

2013-11-01 Thread Paul Tötterman
> > It's the same issue as this: https://projects.puppetlabs.com/issues/18205 > Thank you for digging it up for me. Somehow google just failed me. > It seems to be fixed already but not included in the current release > version. Building Puppet and Facter from source resolves this issue so I'

[Puppet Users] Re: Unable to generate certificate on Puppet Agent through Master

2013-11-01 Thread Brendan Murtagh
To add on to Dan's steps which I used as a base. For PE 2.8.3, I had to do: (AGENT) sudo rm -rf /etc/puppetlabs/puppet/ssl/* (MASTER) puppet cert clean myserver.domain.com (AGENT) sudo puppet agent -t (MASTER) puppet cert list # confirmed new request was pending (MASTER) sudo /etc/init.d/pe-

Re: [Puppet Users] Group ensure value doesn't work like user ensure value

2013-11-01 Thread jcbollinger
On Friday, November 1, 2013 12:50:03 AM UTC-5, Doug_F wrote: > > Dominic, > > You may be running into some circular reasoning in how you are trying to > setup the group/user. The user if GID is supplied will require the group. > By linking the user as a dependency of the group causes puppet to

[Puppet Users] Re: need help !!!

2013-11-01 Thread jcbollinger
On Thursday, October 31, 2013 9:03:08 AM UTC-5, Rakesh K wrote: > > Can someone please help or let me knw if you need any info from side ? > > For an urgent issue you should consider seeking paid support from PuppetLabs. Volunteer forumites do not tend to respond well to demands for urgent att

[Puppet Users] Re: Facts and Stored Configs

2013-11-01 Thread Richie Rees
Ok scratch that I have just read about "Executable Facts" so I can write a program that will recursively look in the directory structure for the configuration files than pass back the config options as key pairs so this will even track changes over time. Got to hand it to puppetdb its an awesom

[Puppet Users] Re: I'm to a dead end

2013-11-01 Thread jcbollinger
On Thursday, October 31, 2013 4:39:15 AM UTC-5, Valentin Todorov wrote: > > Hi all, > > I am new to Puppet and now I do some test with 2 Virtual Machines running > Centos 6.4 and puppet 3.3.1 > And I manage to sign the client cert, but still I can not get any file > updated on the client VM. >

[Puppet Users] Re: Dynamic Environments, r10k, gitolite and Non-environment Puppet Config

2013-11-01 Thread Simon Young
Turns out there was a very simple solution to this: Create a new modules for the files, and deploy via r10k as part of the default environment. Puppet Master manage thyself... Simon. On Friday, 1 November 2013 11:51:31 UTC, Simon Young wrote: > > Hi all, > > Apologies if this has been dealt wi

Re: [Puppet Users] facter-1.7.3 and puppet-3.3.1 on OS X Mavericks 10.9

2013-11-01 Thread Hannes Juutilainen
I don't know anything about the release plan or schedule (perhaps someone from Puppet Labs could chime in)… Looks bad though: https://projects.puppetlabs.com/issues/21868 — Hannes On 1.11.2013, at 15.16, Paul Tötterman wrote: > It's the same issue as this: https://projects.puppetlabs.com/iss

[Puppet Users] Running Puppet with Ruby 1.9.3 on RHEL/Centos 6.4

2013-11-01 Thread foley
My apologies in advance if this is a solved problem (which I hope it is), but I've been looking for answers for a while and haven't found anything substantive. Our standard OS version is moving from CentOS 5.8 to CentOS 6.4. We're simultaneously getting ready to move from puppet 2.7 to 3.x. A

[Puppet Users] Monitoring services

2013-11-01 Thread Yasha Zislin
Hello, I have multiple instances of a service running on linux server. This service has status, restart, start and stop init scripts. One of the instances keeps dying for unknown reasons (probably network related). I have puppet configured to monitor the service but it doesnt consider it to be

Re: [Puppet Users] Monitoring services

2013-11-01 Thread Nikola Petrov
You better use another tool for this that will "provision" your process. There are many examples for this: http://smarden.org/runit/ http://upstart.ubuntu.com/cookbook/ http://mmonit.com/monit/ maybe more. I am currently using upstart and it is maybe one of the easiest to setup and integrates wit

[Puppet Users] Augeas JSON example?

2013-11-01 Thread John Simpson
Greetings. I'm trying to find a few concrete examples of how to use augeas within a Puppet module, to make changes to a JSON file. I've been googling for the past hour and a half, and while I have found several pages which provide reference-type documentation, I have yet to see a single usable

[Puppet Users] Pushing LDAP data into Puppet-template

2013-11-01 Thread ytmp123
Hi guys, I'm trying to find a way how to push LDAP-Data into a Puppet template. My problem is: I want to install a DHCP-Server with the help of a puppet-manifest. All the data for this DHCP-Server is stored in a LDAP-Server. So I also want to put the "dhcpd.conf" together out of all the LDAP-D

Re: [Puppet Users] Pushing LDAP data into Puppet-template

2013-11-01 Thread Christopher Wood
You would be better off using puppet to manage your ldap-backed dhcp server. That way data changes aren't dependent on when your puppet agent run happens. On Fri, Nov 01, 2013 at 01:17:27PM -0700, ytmp123 wrote: >Hi guys, > >I'm trying to find a way how to push LDAP-Data into a Puppet te

[Puppet Users] package conflict resolution method:

2013-11-01 Thread Tom Noonan
Hello, list: I have two puppet modules that are unrelated to each other, but both have (unrelated) Python scripts that parse YAML. As such, both have a block like the following in their manifests for the PyYAML script dependency: package { 'PyYAML': ensure => installed,

Re: [Puppet Users] package conflict resolution method:

2013-11-01 Thread Ryan Coleman
On Fri, Nov 1, 2013 at 2:03 PM, Tom Noonan wrote: > Can the list please advise on what best practice is in this > case? > Hi Tom, The puppetlabs/stdlib module includes the ensure_packages() and ensure_resource() functions. Both are intended for expressing common resources which will onl

Re: [Puppet Users] package conflict resolution method:

2013-11-01 Thread Tom Noonan
That looks like a good solution, thanks! On Fri, 1 Nov 2013 14:11:44 -0700 Ryan Coleman wrote: > On Fri, Nov 1, 2013 at 2:03 PM, Tom Noonan wrote: > > > Can the list please advise on what best practice is in this > > case? > > > > Hi Tom, > > The puppetlabs/stdlib module includes the

Re: [Puppet Users] Monitoring services

2013-11-01 Thread Jason Antman
Yasha, What distribution are you running? Is there any chance that you've specified somewhere a non-default provider for the Service type? I'm confused... this doesn't seem to be a Puppet issue to me. You include "hasstatus => true"... so Puppet should restart the service if your init script retu

Re: [Puppet Users] package conflict resolution method:

2013-11-01 Thread Jason Antman
Tom, I've actually been working with similar issues lately (and am in the process of working on a virtualenv module). I have a python module that includes classes for the common dependencies (i.e. "require python::pyyaml") and have been pretty happy with that pattern so far, but if you want, I be

[Puppet Users] python virtualenv module

2013-11-01 Thread Jason Antman
Hello, community, I work for a python/Django shop (we run supposedly one of the largest Django apps out there), and we're just starting to use Puppet for handling python stuff (and hopefully application deploys, eventually). We're currently using a hacked up version of Mozilla RelEng's excellent a

[Puppet Users] How to determine puppet environment when using passenger

2013-11-01 Thread Derek Cole
Hello, I am trying to figure out what the best way to use puppet when I am using passenger. I noticed that if I log in as my normal user on Ubuntu 12.04, and run "puppet config print" it gives me the incorrect configuration than what I think I am running when I am using apache/passenger/puppet

Re: [Puppet Users] Monitoring services

2013-11-01 Thread Yasha Zislin
Jantman, The problem is that init status script does return 0 when puppet checks the service. Since I have one of the two instances of service running, init script returns 0 and that's not cool. Multiple instances just run with different parameters like interface. So when you look at ps auxf, y

Re: [Puppet Users] Monitoring services

2013-11-01 Thread Jason Antman
Yasha, Interesting. When it says the status has changed from stopped to running, it should be calling the restart command. Can you post the puppet agent --debug output somewhere, either attached or pastebin/etc.? And perhaps the init script itself? So you're using one init script for multiple ins

Re: [Puppet Users] How to determine puppet environment when using passenger

2013-11-01 Thread Jason Antman
Derek, In most circumstances, yes, you should be running puppet commands as root (via sudo). Running via sudo seems to be the standard, and the best practice, in Linux environments. You could use some other methods if you have a... unusual... environment, but running puppet commands as a normal us

Re: [Puppet Users] python virtualenv module

2013-11-01 Thread Sirtaj Singh Kang
On 11/2/2013 3:31 AM, Jason Antman wrote: [snip] package installation - but the module (or at least our version of it) doesn't handle requirements files, and uses a define to pip install packages, so a given package can only be installed in one venv on a node. I have a hacked-up python virtual

Re: [Puppet Users] Pushing LDAP data into Puppet-template

2013-11-01 Thread ytmp123
Hi, what do you exactly mean? I only want to know how to extract DHCP-Information out of the LDAP-Server and use them in a Puppet-template. I don't know how to do it in a most efficient way? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. T