All,
I have puppet watching various services on RHEL systems and restarting
them as necessary.
Quite a while back I wrote some custom scripts as wrappers for various
services so that I can have a "custom" running status. These have
worked for quite a few months, but recently my iptables services
s]/returns: is
notrun, should be 0 (noop)
notice: Finished catalog run in 2.85 seconds
"is notrun"? I am not sure what that means...
On Aug 12, 10:23 am, vagn scott wrote:
> On 08/12/2011 09:32 AM, Chad wrote:
>
> > Any ideas?
>
> For starters, see what
12, 1:39 pm, Stefan Schulte
wrote:
> On Fri, Aug 12, 2011 at 06:32:57AM -0700, Chad wrote:
> > All,
>
> > I have puppet watching various services on RHEL systems and restarting
> > them as necessary.
>
> > Quite a while back I wrote some custom scripts as wrappers f
at doesn't
line up with what I see. The command is pretty straightforward so it
shouldn't be hitting any environment variables with /sbin/iptables
and /bin/egrep... But it's very possible I am missing something
here...
On Aug 12, 4:26 pm, Chad wrote:
> > So puppet actually
works fine. But I can't figure out what would have changed that
still allows me to run it fine but puppet fails.
On Aug 12, 5:10 pm, Tim Mooney wrote:
> In regard to: [Puppet Users] Re: hasstatus not working as expected, Chad...:
>
> > status)
> > /sbin/iptables -L | /
to puppet so please forgive me if I have some idiot mistake. If this
is all set up correctly and properly running the classifier I'll
bombard this post with the contents of my config files.
Thanks in advance
Chad
--
You received this message because you are subscribed to the Google Groups
Well I kind of figured it out (though not how I like).
I had to move these lines
node_terminus = exec
external_nodes = /.foo/bin/puppet_node_classifier.sh
out of my [development] area into my [main] in puppet.conf.
Once I did that I was able to use the external classifier (though I only
want
an that the puppet
backend cannot parse the master/data.pp file? I've stared at it until
my eyes crossed, and I don't see anything wrong. I am going to
simplify my classes and see what I come up with, but I am pretty
baffled at this point.
Thanks for any help,
Chad
--
You rec
I was able to track this down. Apparently
$puppet_master_storedconfigs is either reserved or too long. When I
changed it to $puppet_master_storedcfgs, the catalog compiled. Go
figure.
On Wed, Feb 29, 2012 at 7:09 PM, Chad Huneycutt
wrote:
> I'm really digging hiera, but I have a prob
uestion is, can this work, and if so, what versions should I use?
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this
e the first item.
Hope that helps, or maybe someone else will have something better,
Chad
On Thu, Mar 22, 2012 at 4:13 PM, Guy Matz wrote:
> Hi! I think I've gone through the hiera install process correctly, but
> still getting:
> err: Could not retrieve catalog from remote s
swering
easy questions tedious, you do not have to; someone else can most
likely pick it up
* Opening the floodgates to the easy questions makes it very
obvious what needs to go in the FAQ :-)
I have been helped out so much by the fine folks on IRC that I love it
when I get a chance to help someone out w
I love hiera, but this is my biggest problem with it. There is no
scoping of the hiera name space. I am personally using the naming
convention "__, but it would be great if
hiera took care of that for me magically. A little birdy told me that
they are working on it, so here's hoping.
sn't really puppet's problem?
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-user
y-shadow-1.4.1/README.ja
> [...@obelisk ruby]$
>
> Sounds like either there is a library mismatch or it is not installed
> perhaps? I don't have a ruby-enterprise install here at home - but if
> you can't see anything obvious about your version of the library I can
> check on a m
Thanks for sanity check, Ken. I just copied the library to REE, and
it works fine. Kind of ugly, I guess.
On Wed, May 19, 2010 at 8:04 PM, Chad Huneycutt
wrote:
> lol. The 'shadow' gem is not the shadow password library! it is "a
> zero-configuration YAML RESTful Act
I was able to set config.time_zone in
/config/environment.rb and that fixed the
timezone. Is that not what you are talking about?
- Chad
On Mon, Jun 21, 2010 at 6:10 PM, Rein Henrichs wrote:
> Hi folks,
> Thanks for the dashboard questions. I'm glad people are using dashboard and
uppet"
- Chad
On Thu, Jul 29, 2010 at 1:57 PM, Tom wrote:
> That's what I thought, but it doesn't work. So there's nothing wrong
> with what I'm doing? Perhaps I should file a bug report...
>
>
> Centos 5.5, Puppet 2.6:
>
>
> # ls -ld /etc/puppe
egroups.com.
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>
>
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to pupp
The --no-client flag to puppetd didn't work for you? My understanding
of the bug is just that the client=false option isn't respected, but
if you specify it on the command line, it works fine. Right?
- Chad
On Tue, Sep 7, 2010 at 4:54 PM, CraftyTech wrote:
> Has anyone found a w
ly fine on the master (2.6.2 client). Obviously,
there isn't a lot to go on, so any hints would be greatly appreciated.
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group
Maybe I'm dense, but that bug doesn't seem to be relevant. I just
created #5048; I am not sure that the trace adds much, but hopefully
someone can make something out of it.
Thanks!
- Chad
On Tue, Oct 19, 2010 at 11:01 PM, James Turnbull wrote:
> Chad Huneycutt wrote:
>>
rom server and
> regenerate it with the current key
> Exiting; failed to retrieve certificate and waitforcert is disabled
> .
> .
> .
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post
oops, sorry. Indeed. I typo that all the time, but fortunately we
don't have anything important in /var/lib/ssl here :(
On Tue, Oct 26, 2010 at 3:48 PM, Patrick wrote:
>
> On Oct 26, 2010, at 12:00 PM, Chad Huneycutt wrote:
>
> You need to delete the cert on the client. rm
llective Puppet experience there is to share.
Cheers
Chad
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email
On Wed, Jul 1, 2009 at 10:47 AM, Tim Galyean wrote:
>
> Is there a way to "tell" puppet to do a sort of comparison on the
> files, so that if one does not match the default config it is ignored
> and or not replaced with the default.
A portion of my autofs class:
class autofs {
package { au
is message is
> not the intended recipient, the reader is hereby notified that any
> dissemination, distribution or copying is strictly prohibited.
>
> * P * /*/ Please consider the environment before printing this e-mail /*/
>
>
> >
>
--
Chad M. Huneycutt
--~--~-~-
Well, I just dropped the lenses in /usr/share/augeas/lenses, which I
assume is on the load path higher than /usr/share/augeas/lenses/dist,
where all of the other lenses are. But should I have to do that?
Maybe we can pick up the discussion on the augeas list.
- Chad
On Mon, Aug 3, 2009 at 8:57
pet
(augtool doesn't error out, but the match doesn't occur properly, and
the puppet type fails with a pretty useless error).
Thanks for any help. I am trying to get away from sed/grep, but using
augeas is like pulling teeth!
--
Chad M. Huneycutt
--~--~-~--~~~-
On Tue, Aug 4, 2009 at 7:12 PM, David Lutterkort wrote:
>
> On Mon, 2009-08-03 at 16:03 -0400, Chad Huneycutt wrote:
>> augeas { "/etc/exports-$vmname":
>> context => "/files/etc/exports",
>> changes => [
>
Try:
$listenip = "${ipaddress}_${service_listenif}"
- Chad
On Tue, Aug 11, 2009 at 6:14 AM, Jan Werner wrote:
>
> hi list,
>
> i'd guess the subject could cause some braindamage, i'm sorry for
> that, i did not find a better description for my problem.
&
of the state of the system.
>
> Anyone else already solved this?
>
> Mark
> >
>
--
Sent from my mobile device
Chad M. Huneycutt
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"Puppet Users&
ng as two days and it just doesn't see the change.
>>>
>>> > If one day I decide I need to deploy a new required Gnome key to all
>>> > of my Linux desktops, what's the poper method of making sure that the
>>> > server realizes all the nodes need
-~~
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com
> F
I have a bunch of puppet report files, and I would like to regenerate
the rrd files for those reports. Can anyone tell me what the process
is to do that?
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To po
ass foo ( $bar = hiera('bar') ) {
...
}
And then $bar can be defined in a module-local class (if using puppet
hiera backend), module-local yaml file, site-specific yaml file,
overridden when included, etc, all according to a policy that you
define.
--
Chad M. Huneycutt
--
You receive
works, but is a bit fragile - and will fail
> if I ever want to scale to multiple puppet masters. It looks like this:
> https://gist.github.com/3531206
Here is the script we use to do the same. I am not proud of all the
locking stuff. Not sure if it is necessary or not, but it works.
Ju
"/etc/ssh/ssh_host_rsa_key.pub":
content => $rsahostkeypub,
mode => 0444, owner => root, group => root,
}
file { "/etc/ssh/ssh_host_dsa_key":
content => $dsahostkey,
mode => 0400, owner => root, group => root,
}
file { "/etc/ssh
since I deployed it. For a while I was "exclude"ing puppet
and friends in yum.conf, but that was a real pain. The versionlock
plugin "pins" a package at the version you want, and then you can
update when ready.
- Chad
On Wed, Oct 3, 2012 at 9:16 AM, jcbollinger wrote:
>
&g
For yum-based updates, take a look at the yum versionlock plugin.
Works great here, although you have to specify the entire package name
that you want (I don't think just specifying puppet-2.7 will work).
debian-based distros support pinning, but haven't gotten that going yet.
- Ch
I've found a similar thread here, but it doesn't do quite what I need.
https://groups.google.com/forum/?fromgroups=#!topic/puppet-users/VMloh1KrSew
I have multiple lines of the form below in hosts.allow:
sshd,sshd2: 1.1.1.1
sshd,sshd2: 2.2.2.2
etc.
I'm struggling with the syntax to add yet anoth
> '0444',
owner => 'root',
group => 'root',
}
Hope that helps,
Chad
On Mon, Nov 26, 2012 at 2:47 PM, Jakov Sosic wrote:
> Hi.
>
> I'm wondering is there a way to manage ssh servers, in a way that every
> machine has it's own ke
nvironment configured, I guess it would be harmless to
> rename it to production right?
The [master] section of the config file does not specify an
environment. That is options that apply to the master only. You can
also use [agent] (and probably [cert], [apply], etc.).
--
Chad M. Huneycut
Are you actually including both "named" and "hpc::named" on a single
host? If not, then there will not be a conflict.
- Chad
On Wed, Sep 17, 2008 at 12:41 PM, Evan Hisey <[EMAIL PROTECTED]> wrote:
>
> As understand puppet I should not be able to have two serv
Maybe /var/lib/puppet is owned by root? If so, chown to puppet and try again.
- Chad
On Tue, Oct 21, 2008 at 5:31 AM, Sebastian Vieira <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I reinstalled puppet-server and am now getting these error messages from
> clients:
>
> err: /Fi
s the easiest way to do that?
--
Chad M. Huneycutt
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from t
x27;01'",
> }
> }
>
> # vi /etc/puppet/manifests/templates.pp
> import user
> node basenode {
> $rootpw = "Vale.com-init"
> include user
> }
>
>
>
> >
>
--
Sent from my mobile device
Chad M. Huneycutt
--~--~---
x27;01'",
> }
> }
>
> # vi /etc/puppet/manifests/templates.pp
> import user
> node basenode {
> $rootpw = "Vale.com-init"
> include user
> }
>
>
>
> >
>
--
Sent from my mobile device
Chad M. Huneycutt
--~--~---
anifest
writer could just pull down the file and chown it to themselves...).
- Chad
On Wed, May 6, 2009 at 5:47 PM, Ryan Dooley wrote:
>
> We sort of do this we set a global $password in our site.pp. That
> $password is an MD5 string. My environment is currently all Linux.
>
&g
2009/5/6 Ryan Dooley :
>
> Chad Huneycutt wrote:
>> I am not sure everyone is on the same page:
>>
>> 1. you don't want to have the root password (encrypted or not) showing
>> up in the process listing of your clients.
>
> Well, this is a policy/philo
; [[ $?
> -eq 0 ]] && exit 1'
> debug: Executing 'm4 /etc/mail/sendmail.mc | diff
> --ignore-matching-lines="^# built" - /etc/mail/sendmail.cf; [[ $?
> -eq 0 ]] && exit 1'
> /usr/lib/site_ruby/1.8/puppet/util.rb:286: warning: fork
efreshonly
parameters to ensure that the permissions are set properly initially,
but then how to ensure that the permissions stay correct?
--
Chad M. Huneycutt
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"Puppet U
nitions
in that file, or import other files.
* All module manifest code should be in the module's manifests
directory: '//manifests'. The 'run'
subdirectory you have in your users module cannot be reached unless
you 'import' it manually, which is not a recommended
anything that isn't called common.yaml
>
> So my guess is it's not the variables it's something else.
>
> Anyone got any ideas?
> Or some docs I can dredge through?
hiera generates great traces if you enable it. I *think* you enable
debug on the master to turn it
how about this
pattern:
class somemodule {
if $load_module = true {
include somemodule::load
}
}
class somemodule::load {
// potentially very long module
}
- Chad
On Mon, Dec 17, 2012 at 3:02 PM, Philip Brown wrote:
> Hi folks,
> I've poked around the language
message say 'var/log/...' and not
'/var/log/...' (notice the first /). If that is really what it says,
you may need to modify your logdir setting.
- Chad
On Wed, Jan 30, 2013 at 1:25 PM, Raymond Regnier
wrote:
> Just setup puppet 3.2 with one master and one client
>
>
Disregard. I see the other thread.
On Wed, Jan 30, 2013 at 9:19 PM, Chad Huneycutt
wrote:
> Make sure that whatever user the master runs as (probably user
> 'puppet') has write permissions to /var/log/puppet/.
>
> Note that even if you start the master as root, it will swi
puppet-users+unsubscr...@googlegroups.com.
> To post to this group, send email to puppet-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/puppet-users?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
--
Chad M. Huneycut
Install iptables before running puppet? There is some amount of setup
you will have to do before puppet will run the first time. For
instance, you have to install puppet and the iptables module!
- Chad
On Thu, Jan 31, 2013 at 2:12 PM, Ellison Marks wrote:
> Is it fine after the first
--config
Depending on your OS, you can set this as the default option for the
service in /etc/sysconfig/puppet or /etc/default/puppet.
- Chad
On Thu, Jan 31, 2013 at 8:31 PM, Jason Knudsen wrote:
> Hey guys,
>
> Does anyone know how to change the location of puppet.conf? In my situa
oglegroups.com.
> To post to this group, send email to puppet-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/puppet-users?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
--
Chad M. Huneycutt
--
You received this message be
ments/%{environment}/data
Am I just completely off-base?
--
Chad M. Huneycutt
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@g
bruary 13, 2013 5:17:40 PM UTC-6, Chad Huneycutt wrote:
>>
>> I would like to have a hiera.yaml like so:
>>
>> ---
>> :backends:
>> - yaml
>> :hierarchy:
>> - nodes/%{::hostname}
>> - profiles/%{class_name}
>> - common
>> :yaml
Unfortunately not. I am already using %{module_name}, and it works
fine. But for what I am suggesting to work, I need to know the exact
class where the hiera call is.
- Chad
On Wed, Feb 13, 2013 at 7:49 PM, Brian Lalor wrote:
> Will this help?
> http://docs.puppetlabs.com/puppet/3/ref
;
variable before it interprets the hierarchy. I am going to try to
hack the same thing into the yaml backend, as well as file a bug (or
+1 one) about it.
- Chad
On Thu, Feb 14, 2013 at 2:19 PM, jcbollinger wrote:
>
>
> On Thursday, February 14, 2013 12:08:17 PM UTC-6, Chad Huneycutt wrote:
directly in the dsl and could expose that to hiera.
- Chad
On Thu, Mar 7, 2013 at 3:11 PM, James Ralston wrote:
> We have a small and growing Puppet infrastructure we started a few months
> ago: about 30 modules and 40 hosts.
>
> At this point, all of the modules we have written use p
clude hiera('classes')
}
- Chad
On Wed, Aug 21, 2013 at 1:20 PM, JeremyCampbell
wrote:
>
> I need to define data for roles so I add the 'role' dynamic data source.
>
> - "%{::environment}/%{::clientcert}"
> - "%{::clientcert}"
> - "%
1.2.3.4
That way you have a single profile for all datacenters.
- Chad
On Tue, Sep 3, 2013 at 11:49 AM, Frederiko Costa wrote:
> Excellent.. thanks!
>
> And now sorry for the long email... hopefully I'm clear enough.
>
> I'd also to expose one example that I have here
think the correct way to do this is to roll packages
(rpm, deb, pkg, etc.) and distribute those with puppet, but that might
be a lot of work in your environment.
- Chad
On Fri, Sep 13, 2013 at 3:35 PM, root wrote:
> Very new to Puppet. Tried various ways to do this and I'm not particularly
&
from your data files.
2. Are you sure that hiera is not working? What have you tried, and
what happened when you tried it?
Have you looked at http://docs.puppetlabs.com/hiera/1/index.html ?
There are examples there.
- Chad
On Thu, Sep 19, 2013 at 11:53 AM, Jeremiah Jester
wrote:
> I'
have it log directly to a file to
see it.
Maybe if you use syslog it will help?
- Chad
On Fri, Sep 27, 2013 at 11:16 AM, jamese wrote:
> Hi all,
>
> I'm seeing exactly the same issue. Is there some config setting that can
> prevent this? I'd rather not just redirect all
nclude mymodule::disabled
}
}
- Chad
On Thu, Oct 10, 2013 at 2:13 PM, Jay wrote:
> Thanks Ryan!
>
> I'm looking for something like a "break" statement, which should not proceed
> execution of following resources.
>
> Anyway thanks for the information about futur
In that example, 'role' is a module, and 'role::somerole' is a class
in that module:
/etc/puppet/modules/role/manifests/somerole.pp:
class role::somerole {
...
}
- Chad
On Sat, Oct 26, 2013 at 7:58 AM, Steven Jonthen
wrote:
> I've a question:
> What does
uppet as such
puppet apply --modulepath . site.pp
puppet should find your test module and load the classes automatically.
Hope that help,
Chad
On Thu, Nov 7, 2013 at 10:15 AM, ulrich igor ngouagna kouete
wrote:
> Nobody to help?? :(
>
> Le jeudi 7 novembre 2013 11:42:06 UTC+1, ulrich
If you follow their links, you'll get a much
better understanding.
A full example:
https://ask.puppetlabs.com/question/1655/an-end-to-end-roleprofile-example-using-hiera/
Some thoughts on module design:
http://www.devco.net/archives/2012/12/13/simple-puppet-module-structure-redux.php
- Chad
I have this directory and it's writable. I'm still getting a 406. Was there
anything else I could try? I'm not even sure the relevant parts of
configuration to show. Let's see:
- I got the same error whether I was using the rails built-in server and
now when I'm using apache/passenger
- reports
the resource another name.
- Chad
On Thu, Apr 9, 2015 at 1:26 AM, Gabriel Filion wrote:
> Hello,
>
> A client of mine needs to be able to control which hours during the day
> a certain daemon is running and which hours it is not.
>
> So far I can think of hiera for controlling the
is there something else I'm
missing?
Thanks!
Chad
---
chad.o.thomp...@gmail.com
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet
Thank you! I opened a ticket earlier as well after posting this
(https://tickets.puppetlabs.com/browse/MCO-722) - I didn't see the two that
you posted.
(In the meantime, I'll be trying to work around by installing from source
into the 'libdir' if I can.)
On Friday, September 4, 2015 at 8:15:1
Take a look at this page:
http://docs.puppetlabs.com/hiera/3.0/puppet.html . The section
entitled "Automatic Parameter Lookup" explains how to specify puppet
class parameters in hiera.
- Chad
On Tue, Sep 15, 2015 at 7:23 PM, Chris Jefferies wrote:
>
>
> At my office we us
Can you see the name of the defined type in the template? How about
just deriving $developer from that?
- Chad
On Thu, Oct 29, 2015 at 9:24 AM, jcbollinger wrote:
>
>
> On Thursday, October 29, 2015 at 1:05:16 AM UTC-5, Jakov Sosic wrote:
>>
>> Hi guys.
>>
>> I
rs" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com
>
> .
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/3BE51F3A-023A-46F8-AF09-881F68CA5E92%
received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
>
83 matches
Mail list logo
