Re: [Puppet Users] Managing a few resources on a few systems

2011-11-18 Thread Christopher Wood
inline On Fri, Nov 18, 2011 at 07:26:45AM -0800, Jake - USPS wrote: > We have an environment of thousands of servers. Up to this point we > have been using puppet to manage resources common to all systems (ntp, > ssh, etc) which are managed automatically (without manually assigning > class/module

Re: [Puppet Users] BigIP and Puppet

2011-11-18 Thread Christopher Wood
On Fri, Nov 18, 2011 at 12:05:02PM -0800, Jeff Gutierrez wrote: > Has anyone successfully puppetized BigIP (F5)? > > I'm specifically trying to figure out a path in making our BigIP > instances be under puppet so all the VIPs, pools, profiles, etc. are > all under puppet control. My requirements a

Re: [Puppet Users] Different cron behaviour?

2011-11-22 Thread Christopher Wood
On Tue, Nov 22, 2011 at 03:48:31PM +0100, Bernd Adamowicz wrote: > Is there anything special about the cron resource? I have a configuration > like this: > > cron { sync-stored-config: > command => "/some/command.sh", > user => "icinga", > hour => "*", > minute => "15,45", > }

Re: [Puppet Users] Is there a way...

2011-12-01 Thread Christopher Wood
(Take all this with a grain of salt, perhaps I'm inexperiencedly rhubarbing on.) You don't necessarily need to configure your packages in the same module that you install them in. You can have a generic module for installing packages, which is included by more specific configuration modules. I

Re: [Puppet Users] Running puppet agent and master from cron jobs

2011-12-04 Thread Christopher Wood
On Sun, Dec 04, 2011 at 07:51:28AM -0800, bel wrote: > I see that there's a thread from September asking a very similar > question ("Official puppetlabs position on cron vs puppet as a > service?"). I want to ask what should I take into account when making > this decision? > > Just some background

Re: [Puppet Users] Re: Is puppet right for us?

2011-12-08 Thread Christopher Wood
On Thu, 8 Dec 2011 09:48:51 -0800, Nigel Kersten wrote: On Thu, Dec 8, 2011 at 9:29 AM, Luke wrote: Ok a better way to word this can puppet allow us to isolate down the environment so that dev can make changes to their own environment but not QA, Prod etc. Yes. In Puppet these are called "

Re: [Puppet Users] Re: how to link items together -- all happen together?

2011-12-12 Thread Christopher Wood
On Mon, Dec 12, 2011 at 11:33:37AM -0800, Daniel Pittman wrote: > On Fri, Dec 9, 2011 at 22:20, Jo Rhett wrote: > >> On Dec 8, 1:07 pm, Jo Rhett wrote: > >>> I've found some problems due to the extremely random ordering puppet > >>> does.  It is necessary for some of these items to all happen to

Re: [Puppet Users] LDAP Authentication and puppet?

2011-12-13 Thread Christopher Wood
On Tue, Dec 13, 2011 at 09:58:06AM -0700, Craig White wrote: > > On Dec 12, 2011, at 5:42 PM, Wolf Noble wrote: > > > Hi Peter, > > > > we used a different method here for linux hosts. > > We put the groups we want to grant access to in /etc/security/access.conf ; > > ala: We use puppet to tem

Re: [Puppet Users] File keeps changing on each puppet run using a hash variable and a template

2011-12-13 Thread Christopher Wood
On Tue, Dec 13, 2011 at 12:07:46PM -0200, Wagner Sartori Junior wrote: >Hi, >I have a hash variable defined on a node: >� � � � $vips = { >� � � � � � � � wha => { >� � � � � � � � � � � � '[1]vip1.mycompany.net' => { >� � � � � � � � � � � � � � � � name => '[2]wha.mycompan

[Puppet Users] courier imap/pop not refreshing

2012-01-13 Thread Christopher Wood
The courier-imap (and courier-pop) services on my lab VMs don't actually get refreshed after puppet drops in the config files. I suspect it's something about the lack of /etc/init.d/courier-pop status, coupled with that I have the wrong pattern. Could anybody offer any hints of what I'm doing wr

Re: [Puppet Users] install require a lower version of glibc-common

2012-07-06 Thread Christopher Wood
On Fri, Jul 06, 2012 at 10:21:52AM -0700, Hai wrote: >I got a strange error when I installed puppet on CentOS 6.2, that it asks >for a glibc-common = 2.12-1.7.el6 while I have >glibc-common-2.12-1.47.el6.x86_64 installed. > >why 2.12-1.47 cannot be used? Sounds like you might want

Re: [Puppet Users] The Puppet Way to handle slow resources? (newbie)

2012-07-10 Thread Christopher Wood
(inline) On Tue, Jul 10, 2012 at 11:39:58AM -0700, Dave Anderson wrote: > Hi > > I have a resource that is slow to come into service and I have other > resources that are dependent on the service in order to be configured. I've > been searching for the "puppet way" to do this, but all the optio

Re: [Puppet Users] how to conditionally add users to a virtualized group?

2012-07-12 Thread Christopher Wood
I use nss-pam-ldapd and pam_ldap depending on the system, using an ldap filter to allow only certain groups per system. I prefer nss-pam-ldapd. nss-pam-ldapd: CentOS 6 Debian 6 Ubuntu 10.04 pam_ldap: CentOS 5 FreeBSD 9 (Solaris is more like pam_ldap in configuration, but fairly unique.) The

Re: [Puppet Users] how to conditionally add users to a virtualized group?

2012-07-16 Thread Christopher Wood
(inline) On Mon, Jul 16, 2012 at 11:19:02AM -0700, Jo Rhett wrote: >On Jul 16, 2012, at 8:42 AM, Felix Frank wrote: > > I cannot, of course, but I do sympathize with Jo's notion that in order > to solve the apparently small problem of making resource overrides > scale, he is no

Re: [Puppet Users] Hiera vs LDAP

2012-07-18 Thread Christopher Wood
(inline, verbosely rhubarbing for the audience not the poster) On Wed, Jul 18, 2012 at 05:09:42PM -0400, Trevor Vaughan wrote: > So, I was following the thread "how to conditionally add users to a > virtualized group?" and had a bit of a realization that I'm not quite > sure why Hiera is a better

Re: [Puppet Users] Adding file dependencies to existing service

2012-07-23 Thread Christopher Wood
(inline) On Mon, Jul 23, 2012 at 02:09:01PM -0700, Justin wrote: >Hi all, >I'm trying to configure Puppet to allow the creation of multiple memcached >instances on a system. However, I'm running into the message that only >subclasses can override parameters. Perhaps I'm going about

Re: [Puppet Users] manifest variable with sed - problem

2012-07-25 Thread Christopher Wood
On Wed, Jul 25, 2012 at 08:47:14AM -0700, Markus Rekkenbeil wrote: > Hello, > > i have a problem in my sudo manifest file, because in the variable $name > comes sometimes usernames like user.lastname, but i need for sudo > (includedir /etc/sudoers.d/) file names with no dots (like user_lastnam

Re: [Puppet Users] cwd dot folders

2012-07-25 Thread Christopher Wood
On Tue, Jul 24, 2012 at 05:16:01PM -0700, Nikolaos Hatzopoulos wrote: >Hi, > >I am trying to >exec { myexectest: >    path    => "/bin:/usr/bin:/usr/sbin", >    cwd => "/home/user/.ssh", >    command =>"echo test > test.txt", >    onlyif   => "test -f te

Re: [Puppet Users] manifest variable with sed - problem

2012-07-25 Thread Christopher Wood
On Wed, Jul 25, 2012 at 04:43:31PM +, Kinzel, David wrote: > >From: puppet-users@googlegroups.com [mailto:puppet-users@googlegroups.com] > >On Behalf Of Christopher Wood > > [snip] > > >You could use an inline template to run the substitution via ruby.

Re: [Puppet Users] a complete solution for puppet

2012-07-25 Thread Christopher Wood
Sounds like you should be talking to your managers about buying Puppet Enterprise. On Wed, Jul 25, 2012 at 02:00:37PM -0700, Hai Tao wrote: > Hi, > > I notice that many components of puppet do not scale well and are not > intended for large environment. For example, stored config and > inventory

Re: [Puppet Users] a complete solution for puppet

2012-07-25 Thread Christopher Wood
to buying than building may be better off with a different situation than mine. > On Wed, Jul 25, 2012 at 2:02 PM, Christopher Wood > wrote: > > Sounds like you should be talking to your managers about buying Puppet > > Enterprise. > > > > On Wed, Jul 25, 2012 at

Re: [Puppet Users] a complete solution for puppet

2012-07-27 Thread Christopher Wood
k in less often. There's a ton more of these scaling items. In short: scaling puppet is about more than puppet. The puppet component is ready to compile a catalog from your manifests and send it to the node, yes. Every other layer has to be ready to scale up in support of that goal. >

Re: [Puppet Users] Intermittent freeze on select when running standalone

2012-07-29 Thread Christopher Wood
(inline) On Sun, Jul 29, 2012 at 04:54:24PM -0600, Joe Topjian wrote: >Hi David, > >On Sun, Jul 29, 2012 at 4:28 PM, david c <[1]david.c@gmail.com> wrote: > > So it looks (without an in depth comparison) to be this bug in the bug > tracking tool. > [2]http://projects.p

Re: [Puppet Users] two modules require the same module

2012-07-30 Thread Christopher Wood
On Mon, Jul 30, 2012 at 08:28:34AM -0700, lth wrote: >I have two modules both of which require a 3rd module.  The problem of >course is that if I use both modules on a node, I end up with a "Duplicate >declaration" error of the third module. >What's the right way to handle two modul

Re: [Puppet Users] two modules require the same module

2012-07-30 Thread Christopher Wood
On Mon, Jul 30, 2012 at 08:48:24AM -0700, lth wrote: >On Monday, July 30, 2012 11:34:22 AM UTC-4, Christopher Wood wrote: > > Then the module3 class is only evaluated once. Remember dependencies if > you need module3 evalated before other stuff. > >Thanks for

Re: [Puppet Users] NFS mounts with puppet creates error

2012-07-31 Thread Christopher Wood
(inline) On Tue, Jul 31, 2012 at 05:23:00AM -0700, Axel Bock wrote: >Hi group, > >I am managing an NFS mount with puppet. And it does not work, and >seriously I really don't see how this can work out nicely. First I make >sure with a file {} class that the directory I want to moun

Re: [Puppet Users] unable to install on Ubuntu 12.04

2012-08-06 Thread Christopher Wood
Any particular reason that "apt-get install puppet" doesn't work for you? On Mon, Aug 06, 2012 at 05:21:25PM -0700, alike wrote: >This is my first time to install puppet and it's quite frustrating to me. > If anyone can help me out that would be great. >My current installation failed w

Re: [Puppet Users] Scope Confusion!

2012-08-07 Thread Christopher Wood
On Tue, Aug 07, 2012 at 11:25:32AM -0700, Douglas Garstang wrote: > As usual, I'm confused about scope in puppet. This puppet 2.7.1. > > In my classes below, the bottom class, company::web::content, requires > the file resource '/usr/local/company'. However, that resource is > defined two includes

Re: [Puppet Users] using classes like functions

2012-08-13 Thread Christopher Wood
Reposting my answer to a similar thread: https://groups.google.com/d/msg/puppet-users/xAhvtWetin4/cw4OOuNfCcIJ Short version: use a define. http://docs.puppetlabs.com/guides/language_guide.html#defined-resource-types On Mon, Aug 13, 2012 at 05:17:13PM -0700, Kevin G. wrote: >I'm pretty sure

Re: [Puppet Users] Declare the same resource with different parameters

2012-08-16 Thread Christopher Wood
Short version: use a define. http://docs.puppetlabs.com/guides/language_guide.html#defined-resource-types But did you mean to have unbalanced quotes here? There's an extra single quote. file { "/myappbase/applis/conf"': Regardless of whether you use a define or a class, you can't define the s

[Puppet Users] how to override provider binary choice?

2012-08-16 Thread Christopher Wood
Question: How do I override binary selection in providers? I'd like to use /opt/jre(someversion)/bin/keytool, not /usr/bin/keytool. Details (long): In this nifty thing: http://forge.puppetlabs.com/puppetlabs/java_ks The provider uses keytool in the $PATH: require 'puppet/util/filetype' Pup

Re: [Puppet Users] Automate puppet agent runs

2012-08-20 Thread Christopher Wood
http://docs.puppetlabs.com/guides/rest_api.html#run On Mon, Aug 20, 2012 at 11:48:44AM -0700, Mike Carr wrote: >We are building a system that has a front end for a user to request a >host, the use can select what they want on the host. Our application will >build/apply the correct prof

Re: [Puppet Users] Automate puppet agent runs

2012-08-20 Thread Christopher Wood
, don't you already have certs in the puppetmaster's CA? Perhaps you could leverage those. >On Monday, August 20, 2012 11:54:44 AM UTC-7, Christopher Wood wrote: > > [1]http://docs.puppetlabs.com/guides/rest_api.html#run > > On Mon, Aug 20, 2012 at 11:48

Re: [Puppet Users] FreeBSD $PACKAGESITE from -STABLE to -RELEASE

2012-08-27 Thread Christopher Wood
I use some package defaults: case $::operatingsystem { freebsd, solaris: { Package { provider => $operatingsystem ? { 'freebsd' => 'freebsd', 'solaris' => 'pkgutil', }, source => $operatingsystem ? { 'freebsd' => 'http://repos.me/pub/FreeBSD/ports/a

Re: [Puppet Users] Re: thoughts on puppet 2.7 vs 3.0

2012-08-29 Thread Christopher Wood
In your position I would consider it well worth waiting for puppet 3. On Wed, Aug 29, 2012 at 09:01:05AM -0700, Jason Antman wrote: >I saw that, thanks. I'm looking for more of an opinion on what route other >people would take... > >On Wednesday, August 29, 2012 10:57:40 AM UTC-4, San

Re: [Puppet Users] Puppet visudo/ sudoers help

2012-08-29 Thread Christopher Wood
You learn from use one of these: http://forge.puppetlabs.com/modules?q=sudo On Wed, Aug 29, 2012 at 02:13:34PM -0700, Tony Caffe wrote: >I understand but that is not what I asked for help. I would like some help >on making or writing the code needed to add users to visudo. >On Wednesd

Re: [Puppet Users] Re: permission denied errors on /var/lib/puppet stuff during puppetd -t

2012-09-02 Thread Christopher Wood
Unfortunately, that rather depends on how much money is available to spend on a solution. (Unpleasant, but true.) I'm going to have difficulty persuading my manager that I should stop my tasks for a few weeks to learn and implement selinux on several Linux-based platforms. From his perspective,

Re: [Puppet Users] Puppet smoking crack?

2012-09-05 Thread Christopher Wood
(inline) On Wed, Sep 05, 2012 at 02:04:59PM -0700, Douglas Garstang wrote: > Couple of questions. Firstly, what's the plugin error about? > > puppet agent --onetime --test --verbose Could you also try with --debug? > info: Retrieving plugin > err: /File[/var/lib/puppet/lib]: Could not evaluate:

Re: [Puppet Users] Puppet smoking crack?

2012-09-05 Thread Christopher Wood
On Wed, Sep 05, 2012 at 03:01:42PM -0700, Douglas Garstang wrote: > On Wed, Sep 5, 2012 at 2:23 PM, Christopher Wood > wrote: > > (inline) > > > > On Wed, Sep 05, 2012 at 02:04:59PM -0700, Douglas Garstang wrote: > >> Couple of questions. Firstly, what's th

Re: [Puppet Users] AW: Issue with large directory content

2012-09-12 Thread Christopher Wood
I don't have enough information to say. You might want to run the master and agent in debug mode to get more output, though. puppet agent --debug --verbose --no-daemonize Also, 100 GB? Any particular reason why you're not installing this using a content distribution system or a large number of

Re: [Puppet Users] Puppet cron job class stamps file with date-time. How?

2012-10-04 Thread Christopher Wood
In this case the text appears to be a hardcode in a couple of providers: $ grep -r managed\ manually `pwd` /usr/lib/ruby/1.8/puppet/provider/parsedfile.rb:# HEADER: by puppet. While it can still be managed manually, it /usr/lib/ruby/1.8/puppet/provider/cron/crontab.rb:# HEADER: While it can stil

Re: [Puppet Users] Puppet cron job class stamps file with date-time. How?

2012-10-04 Thread Christopher Wood
service to restart. > On Oct 4, 2012, at 12:19 PM, Christopher Wood wrote: > > In this case the text appears to be a hardcode in a couple of providers: > > $ grep -r managed\ manually `pwd` > /usr/lib/ruby/1.8/puppet/provider/parsedfile.rb:# HEADER: by

Re: [Puppet Users] Puppet Forge: Are my expectations misaligned?

2012-10-14 Thread Christopher Wood
On Sun, Oct 14, 2012 at 11:53:41AM -0700, Felipe Salum wrote: >I would love to see puppet forge as we have the distribution >repositories.. Modules audited, tested and maybe fixed (SNIP) Sounds like you just volunteered. -- You received this message because you are subscribed to the Goo

Re: [Puppet Users] Disabling root user

2012-10-23 Thread Christopher Wood
I don't believe you'll be able to remove the root user without massive system breakage due to how it's an essential system account. For example, your PID 1 likely runs as root. Perhaps try something like this untested fragment, given how the star is sometimes used to disable a password: user {

Re: [Puppet Users] reportdir ignored

2012-10-26 Thread Christopher Wood
Is there any particular reason you're not mounting a new volume under /var/lib/puppet/reports? That way you only have to customize at the disk/filesystem level, not in your application config. (I don't know why puppet might be doing this.) On Fri, Oct 26, 2012 at 03:23:43PM +0100, Frank wrote:

Re: [Puppet Users] shouldn't this be considered a bug?

2012-11-05 Thread Christopher Wood
To the best of my knowledge, it is resources that can be applied in any order, not scoped variables. Your puppet agent will create these files in any order, given that the file resources have no require/before dependencies: node myserver { file { '/tmp/1': content => "123\n", } file {

Re: [Puppet Users] How do I check content of a file in puppet

2012-12-27 Thread Christopher Wood
You might be better off putting together a custom fact about this. Then you can check fact(s) on the host(s) without trying to manage-but-not-manage something inside puppet. On Thu, Dec 27, 2012 at 11:15:14AM -0800, pdiddy wrote: >How do I check content of a file in puppet? >ex: I want t

Re: [Puppet Users] How do I check content of a file in puppet

2012-12-27 Thread Christopher Wood
2012 at 12:01:08PM -0800, pdiddy wrote: >Understood, but is it possible to get it done via puppet? I've management >requirement. > >On Thursday, December 27, 2012 2:52:31 PM UTC-5, Christopher Wood wrote: > > You might be better off putting together a custom

Re: [Puppet Users] How do I check content of a file in puppet

2012-12-27 Thread Christopher Wood
n would be to describe the state of the sshd_config file the > way it should be and enforce that. > > Reporting options on that are normal puppet reports. > > Cheers, > Den > > On 28/12/2012, at 7:23, Christopher Wood wrote: > > > Metaphorically, your manageme

Re: [Puppet Users] Problem: Managing F5 BIG-IP Network Devices with Puppet

2013-01-08 Thread Christopher Wood
(inline) On Tue, Jan 08, 2013 at 08:30:23AM -0800, MrTeleBird wrote: >Hello everyone! > >I am facing a problem by configuring the F5 Big-IP Module: > > [1]http://puppetlabs.com/blog/managing-f5-big-ip-network-devices-with-puppet/ > >I installed GEM f5-icontrol on both, the master

[Puppet Users] f5 module usage/debugging tips?

2013-01-17 Thread Christopher Wood
The question: how can I get extra debugging/troubleshooting information to figure out why my F5 resources aren't applying? I see my "puppet device" command claiming to have applied an f5_node and f5_rule, but the irule and node respectively do not appear in the device's config. I have already t

Re: [Puppet Users] f5 module usage/debugging tips?

2013-01-17 Thread Christopher Wood
(inline) On Thu, Jan 17, 2013 at 03:27:40PM -0600, Nan Liu wrote: >On Thu, Jan 17, 2013 at 2:59 PM, Christopher Wood ><[1]christopher_w...@pobox.com> wrote: > > The question: how can I get extra debugging/troubleshooting information > to figure out why m

Re: [Puppet Users] f5 module usage/debugging tips?

2013-01-17 Thread Christopher Wood
On Thu, Jan 17, 2013 at 03:48:08PM -0600, Nan Liu wrote: >On Thu, Jan 17, 2013 at 3:37 PM, Christopher Wood ><[1]christopher_w...@pobox.com> wrote: > > Usually when I make a change via the gui or tmsh I see the change > reflected in the text config right

Re: [Puppet Users] Re: Puppet F5 module

2013-02-06 Thread Christopher Wood
If you look into the F5 ruby gem installed with the F5 puppet module, it contains the wsdl files for LTM 10. I'm running LTM 11 and have this method. It sounds like you may be running LTM 9? On Wed, Feb 06, 2013 at 08:05:53AM -0800, MrTeleBird wrote: >Hi, well I think the problem is that the

Re: [Puppet Users] f5 module usage/debugging tips?

2013-02-11 Thread Christopher Wood
ckage to use is likely going to be job 1. (If the list has any feedback to the above, I'm very much all ears.) On Thu, Jan 17, 2013 at 05:07:36PM -0500, Christopher Wood wrote: > On Thu, Jan 17, 2013 at 03:48:08PM -0600, Nan Liu wrote: > >On Thu, Jan 17, 2013 at 3:37 PM, Christo

Re: [Puppet Users] f5 module usage/debugging tips?

2013-02-11 Thread Christopher Wood
On Mon, Feb 11, 2013 at 12:40:12PM -0800, Nan Liu wrote: >On Mon, Feb 11, 2013 at 8:27 AM, Christopher Wood ><[1]christopher_w...@pobox.com> wrote: > > (Following up to my own post for posterity's sake, see [2]xkcd.com/979.) > > Short form: for m

Re: [Puppet Users] f5 module usage/debugging tips?

2013-06-11 Thread Christopher Wood
the 10.2.0.2 f5 gem and was >able to create the node successfully so it looks the Puppet is doing >something funny. >Any help would be greatly appreciated. >Thanks, >Jeff > >On Tuesday, February 12, 2013 8:31:04 AM UTC+11, Christopher Wood wrote: > >

Re: [Puppet Users] puppetdb query result exceeding the default of 20000, only 14 nodes should it be?

2013-09-25 Thread Christopher Wood
On Wed, Sep 25, 2013 at 02:25:50PM +0100, Ken Barber wrote: (SNIP) > http://puppetdb1.vm:8080/dashboard/index.html. Since Puppet doesn't > put a limit on # of resources per node, its hard to say if your case > is a problem somewhere. It does however sound exceptional but not > unlikely (I've seen

Re: [Puppet Users] Pushing LDAP data into Puppet-template

2013-11-01 Thread Christopher Wood
You would be better off using puppet to manage your ldap-backed dhcp server. That way data changes aren't dependent on when your puppet agent run happens. On Fri, Nov 01, 2013 at 01:17:27PM -0700, ytmp123 wrote: >Hi guys, > >I'm trying to find a way how to push LDAP-Data into a Puppet te

Re: [Puppet Users] Issuing web request (REST) from puppet manifest

2013-11-13 Thread Christopher Wood
Generically, this sounds like you're trying to retrieve some external information and hiera is still a better option. In hiera you would have your backend fetching data from $someplace, wherever that place is (ldap, yaml, etc.). Maybe even write yourself a new backend. More specifically, discus

Re: [Puppet Users] style of puppet run

2013-11-25 Thread Christopher Wood
On Mon, Nov 25, 2013 at 11:04:40AM -0800, Stuart Cracraft wrote: >Hi, >The style in which I want to run Puppet is: > 1) The agent daemon does not take any actions but is running > so that it detects any changes to managed files, directories, >services, > packages, et

Re: [Puppet Users] Re: get a *structured* version of the puppet agent output

2013-11-26 Thread Christopher Wood
(inline) On Tue, Nov 26, 2013 at 10:43:31AM -0800, Stuart Cracraft wrote: >We have this exact same requirement. >Enforce a non-changing policy on the cloud, avoid automatic >drift-prevention, await errors and reports, >track down cause, fix root cause, apply puppet manifests to rig

Re: [Puppet Users] Unpleasant puppetlabs experience

2013-12-06 Thread Christopher Wood
(inline) On Thu, Dec 05, 2013 at 05:35:13PM -0800, Philip Brown wrote: >https://projects.puppetlabs.com/issues/14368#change-101086 > >Summary: > >(We dont need to improve our public documentation, because people can go >BUY documentation for puppet) > >I can understand chang

Re: [Puppet Users] What types of Information Can Puppet Automate?

2013-12-11 Thread Christopher Wood
You can 'gem install puppet' as a regular user (from your rvm'ed gem) and then run facter as yourself. I've used gem-installed facter while testing 'puppet device' against a load balancer and everything puppet worked just fine. On Wed, Dec 11, 2013 at 01:48:24PM -0800, Angelika Modawal wrote: >

Re: [Puppet Users] One big manifest?

2013-12-20 Thread Christopher Wood
Looks like you might want to start here: http://docs.puppetlabs.com/puppet/latest/reference/modules_fundamentals.html Also check up on how to do hiera lookups from within puppet3. Other than that, structuring your modules tends to be a bit site-dependent. On Fri, Dec 20, 2013 at 08:38:03AM -080

Re: [Puppet Users] I need a virtual exported resource, or something similar

2014-01-09 Thread Christopher Wood
(inline) On Thu, Jan 09, 2014 at 06:49:35AM -0800, Stephan wrote: >Hi All, > >So here's my use case: > >I've got an application with multiple environments, say live, qa and dev, >and each environment has multiple servers. The actual application requires >an NFS mount mounted

Re: [Puppet Users] I need a virtual exported resource, or something similar

2014-01-09 Thread Christopher Wood
On Thu, Jan 09, 2014 at 07:12:31AM -0800, Stephan wrote: >On Thursday, January 9, 2014 2:59:15 PM UTC, Christopher Wood wrote: > > Could you maybe use "mgmtnfs-${environment}-${fqdn}" (or add more > unique-ish suffix strings) in the resource title?

Re: [Puppet Users] puppet jobs list?

2014-02-01 Thread Christopher Wood
No idea on job boards these days, but in 2008 I was hired as a systems administrator based on my application to a job posted on workopolis.com. (I hadn't heard of puppet at that point.) I notice that places I read like http://highscalability.com offer sponsored Job Openings posts, for example:

Re: [Puppet Users] learning, but puppet does not detect change

2014-02-05 Thread Christopher Wood
(inline) On Wed, Feb 05, 2014 at 05:51:37AM -0800, Sudheendra S.N wrote: >Even i am observing same problem. Puppet Version : 2.7.25 >I just tried to create a file in /tmp folder, but after executing puppet >agent --test --server --debug, i could not see any file created >in /tmp.

Re: [Puppet Users] Using the user

2014-02-21 Thread Christopher Wood
Common user authentication is a fairly common, solved problem. You'd probably be better off setting up an ldap backend to pam or something than messing about with passwords. There are any number of modules on the puppet forge to crib from (search for ldap). On Fri, Feb 21, 2014 at 12:25:41PM -0

[Puppet Users] How do you manage iptables packet length?

2014-02-24 Thread Christopher Wood
Taking this iptables rule as an example: iptables -A INPUT -p icmp -m length --length 3:65535 -j DROP If you manage that sort of thing using puppet, how do you do it? (The snazzy http://forge.puppetlabs.com/puppetlabs/firewall doesn't currently do packet length, as near as I can tell. It do

[Puppet Users] debugging puppet/hiera-eyaml decryption problems?

2014-02-26 Thread Christopher Wood
I am getting this error with a manifest run in puppet: Feb 26 12:05:46 cwt1 puppet-master[30680]: Hiera eyaml backend: Unable to decrypt hiera data. Do the keys match and are they the same as those used to encrypt? Unfortunately I get that same line with no additional details with "puppet mast

Re: [Puppet Users] Re: debugging puppet/hiera-eyaml decryption problems?

2014-02-27 Thread Christopher Wood
Here's a sample value. Apart from the length it looks much like yours. (But your encrypted value appears on a separate line, but possibly word wrap.) testing::cwood::param: ENC[PKCS7,MIIBiQYJKoZIhvcNAQcDoIIBejCCAXYCAQAxggEhMIIBHQIBADAFMAACAQAwDQYJKoZIhvcNAQEBBQAEggEARs4upyGGGEl1Q3HJdh1Rov+IkQO07

Re: [Puppet Users] Re: debugging puppet/hiera-eyaml decryption problems?

2014-02-27 Thread Christopher Wood
x27;t work either: hiera-eyaml 2.0 trollop 2.0 highline 1.6.20 I don't have the ruby or packaging expertise to see why this worked, but now things function similarly with /usr/bin/hiera and inside the puppet master. On Thu, Feb 27, 2014 at 09:44:02AM -0500, Christopher Wood wrote: > Her

Re: [Puppet Users] controlling argument passed to ENC script for AWS

2014-02-27 Thread Christopher Wood
(inline) On Thu, Feb 27, 2014 at 03:57:21PM -0600, John Pyeatt wrote: >I am trying to use one puppetmaster to support multiple AWS VPCs. In other >words, I am trying to have one puppetmaster support multiple independent >networks. > >The problem with this is that it is possible fo

Re: [Puppet Users] Puppet module template mentioned at contributor summit

2014-03-03 Thread Christopher Wood
We could have been talking in my cube. My points when I'm discussing this with coworkers generally go like so... If you use this: class { name: } You will only be able to declare that name once. If you declare classes like this: include ::name include ::name::otherclass Then you will be able

Re: [Puppet Users] Puppet module template mentioned at contributor summit

2014-03-03 Thread Christopher Wood
(inline) On Mon, Mar 03, 2014 at 06:24:47PM +, Robin Bowes wrote: >Hi Christopher, >On 3 Mar 2014, at 17:55, Christopher Wood <[1]christopher_w...@pobox.com> >wrote: > > We could have been talking in my cube. My points when I'm discussing >

Re: [Puppet Users] LDAP and Local user conflicts

2014-03-04 Thread Christopher Wood
(inline) On Tue, Mar 04, 2014 at 10:50:34AM -0800, Stephen Ward wrote: >Hi! >In our environment servers have admin user accounts created locally by >puppet.  However, we also have accounts (which use the same user name but >different id) in LDAP/AD etc.  This is not normally an iss

[Puppet Users] Monitoring an apache/passenger puppetmaster setup?

2014-03-05 Thread Christopher Wood
How do you monitor your apache/passenger-fronted puppetmaster to find out when it's down? As backstory, we have a chaos monkey sort of cron job randomly kill-9'ing random processes and monit checking services to make sure they stay up. (Sadly the chaos monkey part probably won't make it into pr

Re: [Puppet Users] Have to run puppet agent twice to install LDAP and ssh keys.

2014-03-07 Thread Christopher Wood
(inline) On Fri, Mar 07, 2014 at 09:39:44AM -0600, Kenton Brede wrote: >I've got a module that installs and configures LDAP for user >authentication.� I've got another module that creates user directories and >another that assigns ssh keys. > >Using runstages I force the "ldap" mo

Re: [Puppet Users] Have to run puppet agent twice to install LDAP and ssh keys.

2014-03-10 Thread Christopher Wood
On Mon, Mar 10, 2014 at 06:35:12AM -0700, jcbollinger wrote: >On Friday, March 7, 2014 11:38:20 AM UTC-6, Christopher Wood wrote: > > (inline) > > On Fri, Mar 07, 2014 at 09:39:44AM -0600, Kenton Brede wrote: > >    I've got a module that installs an

Re: [Puppet Users] Have to run puppet agent twice to install LDAP and ssh keys.

2014-03-10 Thread Christopher Wood
absent to directory failed: Could not set 'directory' on >ensure: Could not find user user1 at 9:/etc/puppet/modules/ >users/manifests/admin_homedir_define.pp > Anyway.  I think I'm going to give up on this and just do a "puppet agent >-t --tags ldap_aut

Re: [Puppet Users] How to delete all files in a dir except for 2?

2014-03-14 Thread Christopher Wood
Try something like: file { '/commands': ensure => directory, recurse => true, purge => true, } That will nuke any file not managed by puppet. Be careful of interactions with stuff like yumrepo, of course. On Fri, Mar 14, 2014 at 08:55:17AM -0700, Jasmine Lognnes wrote: >Hello =) >

Re: [Puppet Users] puppetdb question !!!

2014-03-30 Thread Christopher Wood
After copying these facts into /etc/facter/facts.d, are you kicking off another puppet agent run? Facts get sent to the master on each agent run, not before. http://docs.puppetlabs.com/guides/custom_facts.html#viewing-fact-values On Sun, Mar 30, 2014 at 07:35:54PM +0530, Rakesh Kathpal wrote: >

Re: [Puppet Users] Enumerating Puppet Arrays

2014-04-02 Thread Christopher Wood
Check out defined types. For a faked together example: define make_it_so::make_one_thing_so { cron { $title: command => "/path/$title", user=> 'deploy', hour=> '*/4', minute => '0', } } http://docs.puppetlabs.com/learning/definedtypes.html Then add a data structure

Re: [Puppet Users] Puppet - NFS read only

2014-04-07 Thread Christopher Wood
NFS will set the directory's user/group to the user/group of the mounted export, not the local directory's user/group. In your example below what happens is: file resource sets the uid/gid mount resource mounts an export with a different uid/gid as read-only (ro in your mount options) file res

Re: [Puppet Users] Re: Please Help with HAProxy + Puppet

2014-04-09 Thread Christopher Wood
Not that I've ever had this issue, but it might be helpful to check that storeconfigs is set on the puppetmaster and the simplest of exported resources are functioning. Maybe try with ssh host keys? @@sshkey { $::fqdn: host_aliases => $::hostname, key => $::sshrsakey, targ

Re: [Puppet Users] Re: Please Help with HAProxy + Puppet

2014-04-09 Thread Christopher Wood
Having been there, definitely give the puppetlabs puppetdb module a go: http://forge.puppetlabs.com/puppetlabs/puppetdb Puppetdb and storeconfigs are easier than they look, and once these are set up you'll get the result you want. On Wed, Apr 09, 2014 at 03:10:47PM -0700, ryr...@gmail.com wrote

Re: [Puppet Users] Installing multiple packages (via apt) on one command line...

2014-04-22 Thread Christopher Wood
Do you have a link for this #2128? All I can find are these: http://projects.puppetlabs.com/issues/2128 https://tickets.puppetlabs.com/browse/PUP-2128 I'm nosy about the why. If you need to map the package to the provider this seems like the perfect opportunity for create_resources(), but there'

Re: [Puppet Users] Enable puppet agent by default

2014-04-29 Thread Christopher Wood
(inline) On Tue, Apr 29, 2014 at 11:10:10AM -0400, Garrett Honeycutt wrote: > On 4/29/14, 10:45 AM, Matt Zagrabelny wrote: > > Hi! > > > > On Tue, Apr 29, 2014 at 9:13 AM, Marc wrote: > >> Hello > >> > >> I am trying puppet 3.5.1 on a Debian Jessie. > >> > >> How can I enable Puppet by default o

Re: [Puppet Users] puppet sub-folders

2014-04-29 Thread Christopher Wood
Sounds like it's time for you to start using modules: http://docs.puppetlabs.com/puppet/latest/reference/modules_fundamentals.html For interest's sake, my manifest has only a two-line site.pp. Everything else is modules or hiera. Yumrepo <| |> -> Package <| |> hiera_include('hclasses') On Tue,

Re: [Puppet Users] puppet sub-folders

2014-04-29 Thread Christopher Wood
The answer is a qualified "yes", since little chunks of functionality are going to be easier for you to maintain than a single large module. Later on you can look into hiera and other useful stuff. On Tue, Apr 29, 2014 at 12:13:56PM -0700, Jason Hatman wrote: > I'm using modules right now.

Re: [Puppet Users] Enable puppet agent by default

2014-05-01 Thread Christopher Wood
(inline) On Wed, Apr 30, 2014 at 08:21:15AM -0700, jcbollinger wrote: >On Tuesday, April 29, 2014 10:15:35 AM UTC-5, Christopher Wood wrote: > > Can't hosts already stagger their agent checkin times by using per-host > runinterval settings? > >No.

Re: [Puppet Users] Enable puppet agent by default

2014-05-02 Thread Christopher Wood
On Fri, May 02, 2014 at 07:37:48AM -0700, jcbollinger wrote: >On Thursday, May 1, 2014 9:42:39 AM UTC-5, Christopher Wood wrote: > > (inline) > > On Wed, Apr 30, 2014 at 08:21:15AM -0700, jcbollinger wrote: > >    On Tuesday, April 29, 2014 10:15:35 AM UT

Re: [Puppet Users] Is --noop supposed to override noop param?

2014-05-12 Thread Christopher Wood
I get the same behaviour in 3.4.3, however: "The noop setting allows you to globally enable or disable noop mode, but it will not override the noop metaparameter on individual resources." http://docs.puppetlabs.com/references/latest/metaparameter.html#noop No-op being false means that yes-op is

Re: [Puppet Users] Multiple PuppetMasters, one PuppetDB

2014-05-14 Thread Christopher Wood
(inline) On Wed, May 14, 2014 at 09:15:49AM +, Cassiano Leal wrote: > Hi, > > I'd like to ask for advice on certificate trust in a scenario with multiple > puppet masters. > > I'm in a position where I have roughly 50 environments, each with their own > puppetmaster, running their own CAs.

Re: [Puppet Users] Craig Dunn's Roles/Profiles/Components & Conflicts

2014-05-15 Thread Christopher Wood
(inline) On Wed, May 14, 2014 at 10:22:02PM -0700, mjuszc...@gmail.com wrote: >Hi all, >We use the roles/profiles/components model originally suggested by Craig >Dunn fairly heavily.  In our case: > > * The role is a business name, like "Application X App Server" > * The pro

Re: [Puppet Users] Craig Dunn's Roles/Profiles/Components & Conflicts

2014-05-15 Thread Christopher Wood
(inline) On Thu, May 15, 2014 at 11:45:21AM -0700, Ramin K wrote: > On 5/14/2014 10:22 PM, mjuszc...@gmail.com wrote: > >Hi all, > > > >We use the roles/profiles/components model originally suggested by Craig > >Dunn fairly heavily. In our case: > > > > * The role is a business name, like "Appli

Re: [Puppet Users] Craig Dunn's Roles/Profiles/Components & Conflicts

2014-05-20 Thread Christopher Wood
On Fri, May 16, 2014 at 11:12:15AM -0700, Ramin K wrote: > On 5/15/2014 12:14 PM, Christopher Wood wrote: > >(inline) > > > >On Thu, May 15, 2014 at 11:45:21AM -0700, Ramin K wrote: > >> > >>I'd also like to disagree slightly with Christopher who

Re: [Puppet Users] Re: Craig Dunn's Roles/Profiles/Components & Conflicts

2014-05-20 Thread Christopher Wood
On Tue, May 20, 2014 at 10:54:15AM -0700, Jesse Cotton wrote: >We're aware of most of this and agree with most of this. However when >you always call include, you lose the ability to say a particular >hiera variable is attached to the profile. For example >If you def

<    1   2   3   4   5   >