Re: [Puppet Users] Chicken-Egg Dilemma with network interfaces

2015-01-30 Thread Christopher Wood
Possibly something like this? If you've already tried this, what was the result? file { '/etc/sysconfig/network-scripts/ifcfg-eth0': # stuff here } exec { '/sbin/ifup eth0': refreshonly => true, subscribe => File['/etc/sysconfig/network-scripts/ifcfg-eth0'], notify => Service['mysql'], }

Re: [Puppet Users] Chicken-Egg Dilemma with network interfaces

2015-01-31 Thread Christopher Wood
like the chicken said, Launchpad, 'You knew the job was dangerous > when you took it' ! " > > “Sometimes I think the surest sign that intelligent life exists elsewhere in > the universe is that none of it has tried to contact us.” (Bill Waterson: > C

[Puppet Users] size of fileserver files?

2015-02-03 Thread Christopher Wood
I've read through tickets.puppetlabs.com bug reports and can't find anything, asking here before I go down that road. Have any of you had trouble with large files served from the puppetmaster fileserver? If you had any issues how big were the files and what was your puppetmaster version (3.7.2

Re: [Puppet Users] size of fileserver files?

2015-02-03 Thread Christopher Wood
se would probably sound more reassuring if I explained them in business jargon, ahem.) >Thanks, > >Trevor >On Tue, Feb 3, 2015 at 1:33 PM, Christopher Wood ><[1]christopher_w...@pobox.com> wrote: > > I've read through [2]tickets.puppetlabs.co

[Puppet Users] representing undef in hiera?

2015-02-09 Thread Christopher Wood
How would I represent an undef in hiera such that a class parameter will be populated as undef? Like this, but in hiera: #class testing::cwood1 ( $param1 = undef ) { class testing::cwood1 ( $param1 ) { if str2bool($param1) { notify { 'mn': message => "param1 is ${param1}" } } }

Re: [Puppet Users] Re: representing undef in hiera?

2015-02-10 Thread Christopher Wood
On Tue, Feb 10, 2015 at 06:52:05AM -0800, jcbollinger wrote: >On Monday, February 9, 2015 at 10:37:39 AM UTC-6, Christopher Wood wrote: >  > > I'm dealing with a config file template where most options are always > turned off. I'm also trying to get our

Re: [Puppet Users] Newbie questions -- do you use PuppetDB and Facter with Foreman?

2015-02-10 Thread Christopher Wood
Not sure how typical we are, but it feels pretty standard for a medium-sized installation. Just starting out I had a puppetmaster and some agents, so two lines of this list. The rest came later. puppetmasters behind a load balancer facter (this is standard, yes) hiera hiera-eyaml puppetdb Puppet

Re: [Puppet Users] Re: representing undef in hiera?

2015-02-13 Thread Christopher Wood
On Wed, Feb 11, 2015 at 06:49:57AM -0800, jcbollinger wrote: >On Tuesday, February 10, 2015 at 9:48:50 AM UTC-6, Christopher Wood wrote: > > On Tue, Feb 10, 2015 at 06:52:05AM -0800, jcbollinger wrote: > >    On Monday, February 9, 2015 at 10:37:39 AM UTC-6, C

Re: [Puppet Users] Re: representing undef in hiera?

2015-02-13 Thread Christopher Wood
On Thu, Feb 12, 2015 at 12:11:01PM -0800, ess wrote: >On Monday, February 9, 2015 at 11:37:39 AM UTC-5, Christopher Wood wrote: > > How would I represent an undef in hiera such that a class parameter will > be populated as undef? > >John's doing a bet

Re: [Puppet Users] using heredoc in an erb template with hiera

2015-02-18 Thread Christopher Wood
I tend to go for the lazy way, create my complicated string in something like a perl data structure where the language understand here docs and then dump it out to yaml. That way I have a set of yaml that I can copy into my hiera data. It ends up hideous but usable (note line breaks): --- key:

Re: [Puppet Users] Continuous Availability

2015-02-19 Thread Christopher Wood
I'm not up on the latest fashionable buzzwords, possibly this might be useful: https://docs.puppetlabs.com/guides/scaling_multiple_masters.html On Wed, Feb 18, 2015 at 09:54:47PM -0800, Rajesh Kunwar wrote: >I am trying to setup CA environment or puppet. How do i approach for the >solutio

Re: [Puppet Users] Puppet MultiMaster open source

2016-04-20 Thread Christopher Wood
Yes it is. We have one bigip virtual server for the CA (with a single host behind it) and one virtual server per datacenter location with some compile-only masters. Each agent has both ca_server and server set in their configuration at build time. We use the puppetserver and puppet-agent rpms f

Re: [Puppet Users] Puppet MultiMaster open source

2016-04-20 Thread Christopher Wood
https://docs.puppet.com/puppetserver/2.2/external_ca_configuration.html#disabling-the-internal-puppet-ca-service I use that line and have puppetized builds for puppetmasters anyway. Albeit that setting the Subject Alternative Name for the outside of the load balancer takes slightly more effort t

Re: [Puppet Users] Puppet install failure

2016-04-26 Thread Christopher Wood
On Tue, Apr 26, 2016 at 12:37:38PM -0700, Paul Trepanier wrote: >Hi Folks, >..on CentOS 7 > ># rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm ># yum install puppet-server ># puppet resource package puppet-server ensure=latest >After doing this, there

Re: [Puppet Users] Puppet install failure

2016-04-26 Thread Christopher Wood
s.puppet.com/puppet/ >Would have been nice if they explained this in README.txt... >Paul > >On Tuesday, April 26, 2016 at 2:46:13 PM UTC-5, Christopher Wood wrote: > > On Tue, Apr 26, 2016 at 12:37:38PM -0700, Paul Trepanier wrote: > >    Hi Folks

Re: [Puppet Users] puppet 4 environments git feedback?

2016-05-19 Thread Christopher Wood
On Thu, May 19, 2016 at 11:39:30AM -0400, Rob Nelson wrote: >Doug, > >If all your git repositories are local filestores, that's probably a >pretty reasonable workflow. However, most people use some form of >dedicated service as their git origins, that reside external to the local >

Re: [Puppet Users] Puppet and SVN

2016-05-23 Thread Christopher Wood
On Mon, May 23, 2016 at 03:51:58PM +1000, Alex Samad wrote: > How hard is it to retro fit SVN / GIT onto a puppet install. > > I am building from scratch, working through the doco. > > Was thinking once I have a friendly setup then I would look at putting > that into SVN/GIT. Do yourself a huge

Re: [Puppet Users] Puppet and SVN

2016-05-23 Thread Christopher Wood
git. or is the way you think > about the DB that different ? > > Could you point a good starting point to read up on this ? > > Thanks > Alex > > On 24 May 2016 at 07:16, Christopher Wood wrote: > > On Mon, May 23, 2016 at 03:51:58PM +1000, Alex Samad wrote: >

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-27 Thread Christopher Wood
All the custom facts here in /etc/facter/facts.d have worked just fine across the facter 2.4.4 -> facter 3.1.6 upgrade. https://docs.puppet.com/facter/3.1/custom_facts.html On Fri, May 27, 2016 at 12:28:50PM -0700, dkoleary wrote: >Hey; >I'm drafing some custom facts that I would like to

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-28 Thread Christopher Wood
Just to confirm that's a typo below? You have an "s" in facter. /etc/facter/facts.d On Fri, May 27, 2016 at 03:15:11PM -0700, dkoleary wrote: > Thanks for the response. I'm pretty sure I tried /etc/faster/facts.d; but, > I'll confirm that. > > Thanks again. > > -- > You received this messag

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-28 Thread Christopher Wood
facts. >2016-05-28 08:16:04.007756 DEBUG puppetlabs.facter - fact "env" does not >exist. >It looks like facter, run as a non-root user, is limited to personal home >directories.  So, rephrasing the original question: is there some way to >tell non-r

[Puppet Users] facter 3 behaviour change in vlan interface legacy facts

2016-06-01 Thread Christopher Wood
This is something I found after upgrading a number of puppet agents from 3.8.5 to 4.4.2 using the puppet-agent-1.4.2-1.el6.x86_64.rpm rpm on CentOS 6. The legacy fact names around vlan interfaces are not the same as the facter2 versions of those facts. facter < 3: ipaddress_eth0_413 facter >=

Re: [Puppet Users] how to escape %{ in hiera

2016-06-06 Thread Christopher Wood
I ran into this too, use the literal function. $ grep -rh literal hieradata/ testing::cwood1::param3: "%{literal('%')}{::hostname}" testing::cwood1::param3: "%{literal('%')}{::hostname}" https://docs.puppet.com/hiera/3.1/variables.html#the-literal-lookup-function On Mon, Jun 06, 2016 at 06:20:46

Re: [Puppet Users] Trigger apt-get update if packages are to be installed

2016-06-06 Thread Christopher Wood
Back when I was doing this on Debian/Ubuntu I ended up doing the apt-get update on every agent run. This didn't stress the apt proxy (far from it) and made sure the agent had an up to date view of apt every time no matter what. This would also cover if somebody uses ensure=>latest or ensure=>1.2

Re: [Puppet Users] Git Repo Strategy

2016-06-10 Thread Christopher Wood
On Fri, Jun 10, 2016 at 05:57:13AM -0700, Funsaized wrote: >Hello, > >I am relatively new to puppet and am trying to develop a good workflow in >conjunction with git/github to keep a better version control system. The >version of puppet that I am working with and has been implement

Re: [Puppet Users] Re-enrolling clients after major version upgrade

2016-06-14 Thread Christopher Wood
To your specific issue, it looks like your agent's CA cert doesn't match the issuer of the new puppetmaster's CA cert ("unable to get local issuer certificate"). If I recall correctly, an agent without a CA cert will download one from the puppetmaster the first time and thereafter check it. You

Re: [Puppet Users] Load Balancer for Puppet Master

2016-06-24 Thread Christopher Wood
I handle ssl on the actual compile masters with SAN certs and it works just fine. Define "better"? On Thu, Jun 23, 2016 at 12:20:44PM -0700, Braian Fabián Leiva wrote: >I'm trying to setup a Load Balancer in front of some Compile Masters and >the Puppet docs says that I can achieve that e

[Puppet Users] near-identical puppetdb queries, dissimilar outputs

2016-07-03 Thread Christopher Wood
This is with puppetdb 3.2.4 running on java 1.8 on CentOS 6. Does this behaviour sound familiar to anybody? This query (query1) produces fact paths limited to the named facts from the "stype" of "pmail" in the "environment" of "mail". https://gist.github.com/christopherwood/aec60bc751828ccfcaa0

Re: [Puppet Users] encrypting hiera data?

2016-07-08 Thread Christopher Wood
Puppet at least plugs it in their blog. https://puppet.com/blog/encrypt-your-data-using-hiera-eyaml We've had lots of good uses for it in production. On Fri, Jul 08, 2016 at 06:29:31AM -0700, dkoleary wrote: >Hey; >I've come to the point where I need to encrypt a password in hiera data.

Re: [Puppet Users] Re: hiera-eyaml not decrypting?

2016-07-08 Thread Christopher Wood
Same, all files here are eyaml. On Fri, Jul 08, 2016 at 11:04:11AM -0700, Andrew Grimberg wrote: > Our team completely dropped the yaml backend as we always ended up with > weird issues of hiera not always finding the yaml. Doesn't matter if we > don't actually have anything encrypted in the eyaml

Re: [Puppet Users] Recommended/Suggested R10k Deployment Strategy

2016-07-27 Thread Christopher Wood
On Wed, Jul 27, 2016 at 08:18:37AM -0700, dsdwcal wrote: >Hmm ok thanks for the speedy reply! > >In implementing R10k, we've recently transitioned from a monolithic module >repo to individual module repos. As such, our /etc/puppet/modules folder >used to be managed by a single git

Re: [Puppet Users] Service entry for puppet agents not working

2016-08-08 Thread Christopher Wood
On Mon, Aug 08, 2016 at 05:40:24AM -0700, Bret Wortman wrote: >We've been using cron to manage our puppet agents for the past few years >but have discovered some issues where it's running under a different >environment and is having trouble completing when run in cron, but it >works

Re: [Puppet Users] How to refer to exported resource parameters in a template

2016-08-08 Thread Christopher Wood
On Mon, Aug 08, 2016 at 11:28:55AM -0700, Matthew Pounsett wrote: >I'm using puppet 4.4.1.  I have a case where I need the IP addresses of >all the servers that fit a certain set of criteria to appear in a YAML >list in a config file on a particular host. Been there for an activemq.xml

Re: [Puppet Users] R10k Deploy single module first time

2016-08-16 Thread Christopher Wood
You can incrementally check r10k syntax with: r10k r10k deploy (etc.) In your case maybe one of these? Try it and see, I never use these. r10k deploy module modulename r10k deploy module --environment myenv modulename On Tue, Aug 16, 2016 at 08:14:14AM -0700, broncosd183 wrote: >Hello, > >

Re: [Puppet Users] Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-17 Thread Christopher Wood
It sounds like these might help: https://puppet.com/blog/git-workflows-puppet-and-r10k http://garylarizza.com/blog/categories/r10k/ Seems like you would benefit from having all teams work from branches of current production and merge back, rather than maintaining a semi-permanent dev branch sh

Re: [Puppet Users] Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-18 Thread Christopher Wood
On Wednesday, August 17, 2016 at 3:52:31 PM UTC-5, Christopher Wood wrote: > > It sounds like these might help: > > [1]https://puppet.com/blog/git-workflows-puppet-and-r10k > > [2]http://garylarizza.com/blog/categories/r10k/ > > Seems like you would benefi

Re: [Puppet Users] Re: Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-20 Thread Christopher Wood
Lots about hiera data in this thread, how about modules? Having a common environment for the common modules and using basemodulepath helps some, but it's not everything. On Sat, Aug 20, 2016 at 05:50:12AM -0700, Chadwick Banning wrote: >This is an issue I run into pretty regularly. If your P

Re: [Puppet Users] Re: Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-22 Thread Christopher Wood
g a common environment for the >common modules" that sounds like you would need to apply multiple puppet >environments to a node to get the full config...one "common" environment >and one with "non-common" configuration...and I don't think this

[Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
While trying to figure out the reduce function with notice/notify I happened across this thing. It looks like an unquoted array in the notify resource's message only appears as its first array item. Not sure if it's a bug. I couldn't find any documentation to say if this was intended and I could

Re: [Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
On Fri, Sep 16, 2016 at 06:17:48PM +0100, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 16 September, 2016 19:10:23 > > Subject: [Puppet Users] notify resource dif

Re: [Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
On Fri, Sep 16, 2016 at 06:44:36PM +0100, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 16 September, 2016 19:39:21 > > Subject: Re: [Puppet Users] notify reso

Re: [Puppet Users] Moment of duhh.... Trying to wrap my head around some condition statements.

2016-09-27 Thread Christopher Wood
This is one of the first custom facts I wrote, you would likely want to improve on it based on the guide. However it has worked for us for a few years now. Enjoy? This lives in inventory/lib/facter/hpsrl.rb. if FileTest.exists?("/usr/sbin/dmidecode") # Add remove things to query here query =

Re: [Puppet Users] Moment of duhh.... Trying to wrap my head around some condition statements.

2016-09-28 Thread Christopher Wood
On Tue, Sep 27, 2016 at 02:59:17PM -0400, markbergman...@gmail.com wrote: > In the message dated: Tue, 27 Sep 2016 13:38:16 -0400, > The pithy ruminations from Christopher Wood on > condi > tion statements.> were: > => This is one of the first custom facts I wrote, you

[Puppet Users] paragraphing hiera yaml

2016-10-28 Thread Christopher Wood
Here's a Friday sort of question. All the yaml emitters don't add the extra space that I can add as a person editing a file to make things more readable. Or to be more accurate, I can't manage it myself and I can't find one that does. Consider the readability of the two examples below when thin

Re: [Puppet Users] paragraphing hiera yaml

2016-10-31 Thread Christopher Wood
On Sun, Oct 30, 2016 at 08:57:39AM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 28 October, 2016 19:45:42 > > Subject: [Puppet Users] paragraphi

Re: [Puppet Users] paragraphing hiera yaml

2016-10-31 Thread Christopher Wood
On Sun, Oct 30, 2016 at 03:38:31PM -0400, Garrett Honeycutt wrote: > On 10/28/16 1:45 PM, Christopher Wood wrote: > > Here's a Friday sort of question. > > > > All the yaml emitters don't add the extra space that I can add as a person > > editing a file t

Re: [Puppet Users] What is the limit of nodes mcollective and activemq can maintain?

2016-11-03 Thread Christopher Wood
(inline) On Thu, Nov 03, 2016 at 05:22:39PM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Dayton Jones" > > To: "puppet-users" > > Sent: Thursday, 3 November, 2016 18:13:01 > > Subject: [Puppet Users] What is the limit of nodes mcollective and activemq > > can mainta

Re: [Puppet Users] puppet does not like ~ in file name

2016-11-10 Thread Christopher Wood
I can reproduce this using puppet 4.4.2 from puppet-agent 1.4.2, definitely seems like a bug. You can "cd ~user" in a bash shell so I wonder if somebody somewhere made something which works similarly. I'd be interested in watching the bug you file because I'm nosy. $ cat /tmp/x.pp file { '/tmp/

Re: [Puppet Users] puppet does not like ~ in file name

2016-11-10 Thread Christopher Wood
I reproduced this with 4.8.0 and filed a ticket. https://tickets.puppetlabs.com/browse/PUP-6914 Seems like it's a ruby thing? https://ruby-doc.org/core-2.1.8/File.html#method-c-expand_path https://github.com/puppetlabs/puppet/blob/master/lib/puppet/type/file.rb Usual disclaimer, not a programm

[Puppet Users] type/provider for in-kernel networking?

2016-11-22 Thread Christopher Wood
I am digging around the forge and there are a few modules managing networking via ifupdown/net-tools/initscripts. I haven't yet found any types/providers using iproute2 (/sbin/ip). Do any of you know of such a module if it exists? As background, I'm staring at a horrifying set of hardware-specif

Re: [Puppet Users] Puppet managing thousands of resources

2017-01-11 Thread Christopher Wood
Out of gruesome interest, 5000 resources of what? Assuming I'm remembering the path correctly, something like this would count it up, modify for your local case (assuming no puppetdb at your place) to search for resource types: python -m json.tool /var/lib/puppet/client_data/catalog/`hostname -

Re: [Puppet Users] Puppet managing thousands of resources

2017-01-11 Thread Christopher Wood
On Wed, Jan 11, 2017 at 09:40:00PM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Wednesday, 11 January, 2017 22:33:22 > > Subject: Re: [Puppet Users] Puppet m

Re: [Puppet Users] Escape codes in collection types

2017-02-02 Thread Christopher Wood
This thing is nice that way: https://github.com/drwahl/puppet-git-hooks I recommend using the pre-receive hook on the server side. That way you can skip awkward conversations about how people should go the extra mile and exceed expectations by installing git hooks locally. Instead you get to ha

Re: [Puppet Users] User Management from LDAP / freeipa

2017-02-06 Thread Christopher Wood
The defined function is more about whether something is defined in the catalog, if I recall correctly. https://docs.puppet.com/puppet/latest/function.html#defined This sounds like something for a custom fact which returns a list of users found on the system. You may have to do an ldapsearch fro

Re: [Puppet Users] Puppet Language Style Guide update

2017-02-13 Thread Christopher Wood
Same budget for tools here. I get along just fine with a combination of puppet-mode for emacs and the pre-commit hook from David Walhstrom's puppet-git-hooks project. https://github.com/voxpupuli/puppet-mode https://github.com/drwahl/puppet-git-hooks (Although I obviously recommend you install

[Puppet Users] [PuppetDB] records not being expired from puppetdb?

2017-02-21 Thread Christopher Wood
Our security department raised that point that some nodes present in puppetdb are not for current or recently decommissioned servers. Does anybody have a spare hint as to why these nodes haven't become expired over the last few months of not being servers, or where I can look for more informati

Re: [Puppet Users] [PuppetDB] records not being expired from puppetdb?

2017-02-22 Thread Christopher Wood
ult. The reports are deleted after 14 days by default > (report-ttl setting), which would explain why you can see node data but no > reports. > > Wyatt > > > On 02/21/2017 11:05 AM, Christopher Wood wrote: > >Our security department raised that point that some nodes presen

Re: [Puppet Users] Re: apt/yum.downloads.puppetlabs.com CDN & rsync deprecation

2017-04-24 Thread Christopher Wood
Not sure about the rest of you, but since I have no contract with Puppet Inc. specifying the maintenance of rsync services I would shrug and move to using apt-mirror. I've used it before and it's nearly drop-in. https://apt-mirror.github.io/ https://packages.debian.org/jessie/apt-mirror https://

[Puppet Users] separating puppetdb and postgresql

2017-04-24 Thread Christopher Wood
I am attempting to use the Puppet puppetdb and postgresql modules from the forge to have postgresql live on a separate server from puppetdb itself. It's not going brilliantly as I'm not understanding how to inform the postgresql module about what version of postgresql is in use for a versioncmp

Re: [Puppet Users] separating puppetdb and postgresql

2017-04-25 Thread Christopher Wood
(inline) On Tue, Apr 25, 2017 at 07:52:19AM +0200, Angel L. Mateo wrote: > Hello, > > I have this same configuration working without any problem. > > El 24/04/17 a las 23:08, Christopher Wood escribió: > >I am attempting to use the Puppet puppetdb and postgresql modul

Re: [Puppet Users] How to create init-scripts and immediately use them in a service?

2017-05-19 Thread Christopher Wood
Lots of different ways, it might make for lighter defines if you used some tags and chaining. Or even use the puppet4 iteration, for some reason defines puzzle a number of folks at work here. class upstart { $upstartreload = '/sbin/initctl reload-configuration' exec { $upstartreload: ref

Re: [Puppet Users] migrate from puppetmaster 3.4.3 -> 4.8.2

2017-06-04 Thread Christopher Wood
While I am not the authority on the matter, it looks like the answer is no, and the activerecord terminus is not part of puppet 4. https://tickets.puppetlabs.com/browse/PUP-4627 https://docs.puppet.com/puppet/4.8/lang_exported.html https://docs.puppet.com/puppet/4.8/configuration.html#storeconfig

Re: [Puppet Users] Apply every time for no reason = acceptable?

2017-06-05 Thread Christopher Wood
Consider possibly these cases (which I have seen): i) You are trying to track down an oddity in your puppet codebase, something like a file_line resource and exec resource both managing the same file. ii) You are trying to find a non-puppetized job which is fighting with puppet to decide the pa

Re: [Puppet Users] havina an issue regarding puppet agent run

2017-06-07 Thread Christopher Wood
I think you wanted /pdb/meta/v1/version? This and the other puppetdb documentation may help: https://docs.puppet.com/puppetdb/4.4/api/query/v4/query.html https://docs.puppet.com/puppetdb/4.4/api/meta/v1/version.html (Obviously pick your puppetdb version in the drop-down at the top of the page.)

[Puppet Users] same hiera data across multiple profiles

2017-06-12 Thread Christopher Wood
How do you typically organize your data lookups when you want to use the same hiera data across multiple profiles, themselves possibly used across multiple roles? A cut down example with fake names: class role::mailserver { include ::profile::http include ::profile::smtp } class role::webs

Re: [Puppet Users] Officiel master puppet and source Puppet agent

2017-06-14 Thread Christopher Wood
Probably not 100% what you're looking for, but you might get some use out of the Debian puppet sources. They have packages for various ARM architectures too. https://packages.debian.org/search?keywords=puppet On Wed, Jun 14, 2017 at 06:03:17AM -0700, Fairouz el ouazi wrote: >HI , >   Is

Re: [Puppet Users] same hiera data across multiple profiles

2017-06-14 Thread Christopher Wood
. Note >that if these profiles need to get the parameters of the ssl_certs class >they can be accessed via $profile::ssl_certs::parameter_name. > >Hope that helps. > >On Mon, Jun 12, 2017, 9:57 AM Christopher Wood ><[1]christopher_w...@pobox.com>

Re: [Puppet Users] same hiera data across multiple profiles

2017-06-14 Thread Christopher Wood
smtp::ssldata as needed? Maybe it >isn't even needed if you are loading component modules like apache and >postfix, as you could just `include apache` and set `apache::somesslparam: >value1` and `postfix::differentsslparamname: value2` and not have to embed > th

Re: [Puppet Users] Dependency conundrum

2017-06-15 Thread Christopher Wood
Sounds like tags and chaining, did something similar for upstart. file { '/usr/lib/systemd/system/patcher-client.service': notify => Service['patcher-client'], tag=> ['reload systemd'], } File <| tag == 'reload systemd' |> ~> Exec['systemctl daemon-reload'] Exec['systemctl daemon-reload']

[Puppet Users] passing a regex as a class parameter

2017-06-27 Thread Christopher Wood
A little oddity I stumbled across while getting things wrong about somebody's pastebin entry in #puppet on freenode. This thing: class classname ( Regexp $param, ) { notice('yes') } class { 'classname': param => /^.$/, } Does this with puppet 4.10.2: $ puppet apply /tmp/z.pp Error: Eval

Re: [Puppet Users] passing a regex as a class parameter

2017-06-27 Thread Christopher Wood
After more discussion in #puppet on freenode, this thing: https://tickets.puppetlabs.com/browse/PUP-7735 On Tue, Jun 27, 2017 at 11:44:26AM -0400, Christopher Wood wrote: > A little oddity I stumbled across while getting things wrong about somebody's > pastebin entry in #puppet

Re: [Puppet Users] PuppetDB low catalog-duplication rate Puppet DB 4.3.0

2017-06-28 Thread Christopher Wood
I had a broadly similar issue in that I had a low catalog duplication rate and I had to change some puppet manifests around to fix that. Back in 2015 I was doing this to get mcollective plugin sources for the file resource: source => regsubst(keys($plugins), '^', 'puppet:///modules/mco/plugins/

Re: [Puppet Users] Re: PuppetDB - High CPU Large number of KahaDB files and very little work going to postgresql

2017-07-05 Thread Christopher Wood
I'm wondering if that puppetdb instance's queue would grow if it wasn't also doing normal agent runs. Maybe pause puppet agent runs until puppetdb is caught up? Puppetdb may not be happy doing its regular work plus this cleanup. You could stop the puppetserver service(s) for the cheap way to ac

Re: [Puppet Users] Trigger apt-get update if packages are to be installed

2017-07-07 Thread Christopher Wood
Not sure what their solution was, but mine was (back when puppeting Debian/Ubuntu) to run apt-get update on every run, but make sure to also run apt-cacher-ng to be an apt proxy on the local network. That sped things up. On Fri, Jul 07, 2017 at 07:23:17AM -0700, Klavs Klavsen wrote: >Did you

Re: [Puppet Users] Puppet Packet Rate?

2017-07-07 Thread Christopher Wood
The answer is that it depends on your catalogs and what you're ramming through them. You might get a squinty rule of thumb measurement from figuring out the size of uploaded facts/report, downloaded catalog/files, add some more for random discussion traffic, divide by the number of seconds an ag

[Puppet Users] puppet functions in EPP templates?

2017-07-26 Thread Christopher Wood
Would somebody mind passing a spare clue regarding the correct syntax? I already know this works in an erb template: <%= scope.call_function('test1::test1', ['input one!!']) %> However this fails in an epp template: <%= test1::test1('input two!!') %> Unfortunately, that's about as far as I got

Re: [Puppet Users] puppet functions in EPP templates?

2017-07-26 Thread Christopher Wood
tmp/tt2': content => epp('test1/two.epp'), } We'll please attribute this to an unusual moment of dimness. On Wed, Jul 26, 2017 at 09:50:11AM -0400, Christopher Wood wrote: > Would somebody mind passing a spare clue regarding the correct syntax? > > I already know t

[Puppet Users] querying unrealized/inactive resources in the catalog?

2017-09-14 Thread Christopher Wood
Is there a document somewhere that describes the visilibity of an unrealized and inactive resource in the downloaded catalog and puppetdb catalog? I thought I would be able to retrieve inactive resources from somewhere in puppetdb, but I can't and that could be just me. It would suit me perfect

[Puppet Users] pdk and puppetlabs-ntp Gemfile on non-windows?

2017-10-26 Thread Christopher Wood
I'm not sure if this is an issue, or something I'm doing, since I'm trying to use Ubuntu debs on patched-up Debian 9. The question: Is this PEBKAC or what? To wit, I get a fatal error when attempting "pdk validate -d" and "pdk test unit -d" at 1215f02 of the puppetlabs-ntp module. This happens i

Re: [Puppet Users] pdk and puppetlabs-ntp Gemfile on non-windows?

2017-10-31 Thread Christopher Wood
error. Please remove the Gemfile.lock and try again. > >Cheers, David >On Thu, Oct 26, 2017 at 5:19 PM Christopher Wood ><[1]christopher_w...@pobox.com> wrote: > > I'm not sure if this is an issue, or something I'm doing, since I'm >

Re: [Puppet Users] multiple puppetdb, single postgres

2017-11-02 Thread Christopher Wood
Running two puppetdb in front of a single postgresql here and it's fine. The puppetservers use one puppetdb for everything and the second puppetdb is for monitoring and interactive use. The only hiccoughs are when trans-oceanic links blip. The puppetdb instances are managed using puppet and at

Re: [Puppet Users] force dist-upgrade once on each puppet run and update on each package to be installed?

2017-12-05 Thread Christopher Wood
I found that a single "apt-get update" exec before any packages were managed was useful enough. Out of interest, what is the use case that needs "apt-get update" before every package is installed? Lately here the "yum upgrade" is a daily thing with some incremental canarying as the month goes o

Re: [Puppet Users] puppet lookup could not find directory environment

2017-12-05 Thread Christopher Wood
Twofold: "fqdn" is usually a puppet fact, I suspect you wouldn't find that if you grepped your hiera data. Try these as root on any node: facter fqdn facter -p | less If you do have a hiera key called "fqdn", you can try looking it up on any host which has your environments in the usual place

Re: [Puppet Users] puppet lookup could not find directory environment

2017-12-05 Thread Christopher Wood
(inline) On Tue, Dec 05, 2017 at 11:23:32AM -0800, dkoleary wrote: >On Tuesday, December 5, 2017 at 1:10:44 PM UTC-6, Christopher Wood wrote: > > Twofold: > > "fqdn" is usually a puppet fact, I suspect you wouldn't find that if you > grepped y

[Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
Is the source for /etc/sysconfig/puppetserver in the puppetserver rpm stored in any public-facing git repository? If so, where? More details: I was reading the tuning guide (it's augment time again) and it occurred to me to read the commit messages for this file to see how Puppet figured out th

Re: [Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
ppetlabs/ezbake/blob/master/resources/puppetlabs/lein-ezbake/template/foss/ext/default.erb >On Wed, Jan 3, 2018 at 9:56 AM Christopher Wood ><[2]christopher_w...@pobox.com> wrote: > > Is the source for /etc/sysconfig/puppetserver in the puppetserver rpm > stored

Re: [Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
n the project.clj for puppetserver here: > https://github.com/puppetlabs/puppetserver/blob/5.1.x/project.clj#L113-L114 > > On Wed, Jan 3, 2018 at 12:09 PM, Christopher Wood > wrote: > > That turned out to be even more interesting, thank you! > > > > On Wed, Jan 03, 2018 a

Re: [Puppet Users] How to make puppetlabs yum repository mirror

2018-01-18 Thread Christopher Wood
rsync://rsync.puppet.com/ Dig around in there. On Thu, Jan 18, 2018 at 09:11:16PM +0800, Yan Xiaofei wrote: > Hello > > I used to rsync from rsync://yum.puppetlabs.com/. But it did not works any > more. > How can I make local mirror from yum.puppetlabs.com. > > Thanks very much! > Xiaofei > >

Re: [Puppet Users] puppet-lint & Syntax

2018-02-20 Thread Christopher Wood
Taking a stab at this... The puppet parser will always be the authoritative source for one's puppet code validation since that is what will be parsing the code via agent or server. It will introduce any number of bugs and inconsistencies and delay to have puppet-lint keep up with what puppet do

[Puppet Users] fqdn_rand() output will change in 5.4.0, non-FIPS too

2018-02-26 Thread Christopher Wood
This part of the release notes: https://puppet.com/docs/puppet/5.4/release_notes.html#fips-support "When running Puppet 5.4.0 on a FIPS-enabled platform, Puppet modifies its default digest_algorithm and supported_checksum_types settings to exclude MD5, which is not a FIPS-compliant algorithm. B

[Puppet Users] hiera key questions, key naming and per-file keys

2018-03-01 Thread Christopher Wood
As background, for "reasons" I am looking at individual domains in hiera as keys. I do have questions beyond "why would I even". A) hiera lookup key format I notice that if I use puppet lookup to test things I get similar behaviour as using lookup() from a manifest, a key with dots in it is tru

Re: [Puppet Users] hiera key questions, key naming and per-file keys

2018-03-02 Thread Christopher Wood
(inline) On Thu, Mar 01, 2018 at 11:36:40PM +0100, Henrik Lindberg wrote: > On 01/03/18 16:03, Christopher Wood wrote: > > As background, for "reasons" I am looking at individual domains in hiera as > > keys. I do have questions beyond "why would I even".

Re: [Puppet Users] Style regarding param data types

2018-03-07 Thread Christopher Wood
Somebody in the office here loves their complicated restrictive parameters. Those go in type aliases which cuts down a bit on the class parameter width. https://puppet.com/docs/puppet/5.4/lang_type_aliases.html On Wed, Mar 07, 2018 at 11:17:19AM -0500, Gabriel Filion wrote: > Hiya! > > I'm wond

[Puppet Users] PuppetDB catalog-hash-conflict-debugging substitute

2018-04-06 Thread Christopher Wood
Once upon a time I successfully used catalog-hash-conflict-debugging to find an unsorted thing being different in every catalog and that was very helpful. Recently catalog duplication (in the PuppetDB dashboard) has dropped about 10% and the setting is gone from PuppetDB in 5.2.0. https://ticke

Re: [Puppet Users] error de conection

2018-04-13 Thread Christopher Wood
I haven't had that experience with puppet, but I have had it with other services. Assuming you've gone through things like checking load, logs (for the puppetserver/puppet master), continuous ping, strace, and so on, I recommend that you capture packets on either side. Checking timestamps may s

Re: [Puppet Users] puppet "package" resource type for multi-file installer

2018-04-19 Thread Christopher Wood
Sounds like this thing would be useful? https://forge.puppet.com/puppet/archive On Wed, Apr 18, 2018 at 07:55:40PM -0700, Ty Young wrote: >I'm still ramping up on Puppet 5.4.0, but I'm stuck on something. > >I have a customer needing to automate installation of a software package >on

Re: [Puppet Users] PuppetDB: manually import reports

2018-04-19 Thread Christopher Wood
To challenge an assumption, what are you gaining from having more than one puppet infrastructure (puppetservers+puppetdb)? Could you perhaps handle your dev stuff with another environment or set of puppetservers under the same CA with the same puppetdb? Is there any reason for a separate puppet

Re: [Puppet Users] Unable to run source using 'exec' resource

2018-04-22 Thread Christopher Wood
I'm not really sure what's going on (bit rusty in bash), but the following things to check on come to mind. /bin/sh may not be linked to bash, and "export THING=whatever" is a bashism. It could be that "THING=whatever; export THING" will work better for you. However you're likely using somethin

Re: [Puppet Users] Could not retrieve file metadata ... end of file reached

2015-03-05 Thread Christopher Wood
It seems like other people have had this issue, and maybe it's when the puppetmaster process restarts in the middle of somebody's agent run? https://projects.puppetlabs.com/issues/3019 https://projects.puppetlabs.com/issues/4808 In your place I would probably do the following: a) turn up the lo

Re: [Puppet Users] Node key merging/overloading - node inheritance vs hiera

2015-03-09 Thread Christopher Wood
On Sun, Mar 08, 2015 at 11:55:03AM -0700, Bostjan Skufca wrote: >Hi, >I am currently looking to move away from node inheritance towards hiera, >and I have a question how to achieve merge/overloading functionality with >hiera. If I read these questions correctly, first look into the

<    1   2   3   4   5   >