Re: [Puppet Users] 2.6.x Ruby DSL

2010-11-22 Thread Patrick
On Nov 22, 2010, at 10:21 AM, James Turnbull wrote: Although reading the release notes page [4], it looks like I can't rely on cross-version interoperability at all, so it's starting to look like I'm going to have to deploy from source to get the same version everywhere :( This isn't

Re: [Puppet Users] best way to ensure (yum) package repository freshness ?

2010-11-18 Thread Patrick
On Nov 18, 2010, at 12:56 AM, Daniel Maher wrote: Hello, I have run into problems in the past where a package has been added to our yum repository, and a (new) class has been pushed to install that package, but puppet fails because the yum db on the target machine is too stale, and

Re: [Puppet Users] Is anyone using SSL with Dashboard?

2010-11-17 Thread Patrick
On Nov 17, 2010, at 9:42 AM, Kent wrote: I would like to use SSL with Dashboard as a means of controlling access. I've got my Dashboard vhost working with client authentication and a user with the right certificate can view the dashboard. However, my puppetmaster cannot post reports to

Re: [Puppet Users] trying to push a whole directory...

2010-11-17 Thread Patrick
On Nov 17, 2010, at 2:48 PM, Russell Fulton wrote: (note to developers: please 'rescue' this error and provide something meaningful to the user ;) Someone else posted a fix. On the subject of the error itself, this bug is known and fixed in 2.6.x and 0.25.5. If you want more info, look

Re: [Puppet Users] Can't get plugins in modules with environments to work in 2.6

2010-11-17 Thread Patrick
I think I heard somewhere that pluginsync ignores environments. On Nov 17, 2010, at 8:27 PM, John Warburton wrote: Hi All I'm quite prepared to acknowledge I've missed the bleeding obvious here, but I just can't see. Hence the post I am getting the exact same errors as issue 4409

Re: [Puppet Users] Need some help getting up and running: Could not request certificate: Connection refused - connect(2)

2010-11-13 Thread Patrick
On Nov 13, 2010, at 4:53 AM, Edd Grant wrote: 2: Created /etc/puppet/manifests/site.pp which contains the following (taken from the Puppet getting started guide): # site.pp #Configure permissions on the sudoers file file { /etc/sudoers: ownner = root, group = root, mode = 440 } This

Re: [Puppet Users] ERROR OpenSSL::SSL::SSLError: tlsv1 alert unknown ca

2010-11-13 Thread Patrick
On Nov 13, 2010, at 4:48 PM, Marek Dohojda wrote: further research on this: I think the issue is with the certificates. Although I have no idea what. I removed /var/lib/puppet/ssl directory and recreated it. When a client tries to get catalog I get the following error: [2010-11-13

Re: [Puppet Users] Problem with modules

2010-11-11 Thread Patrick
On Nov 11, 2010, at 12:54 AM, Leonko wrote: Hello. I use puppet 2.6.3-rc2 Now I try move my classes to modules. But I got a problem that Puppet does not sees modules. in puppet.conf: [main] logdir = /var/log/puppet rundir = /var/run/puppet ssldir = $vardir/ssl libdir =

Re: [Puppet Users] Re: Managing private key files; content=file vs. binary content.

2010-11-10 Thread Patrick
On Nov 10, 2010, at 6:52 AM, Chris wrote: Hi Thomas On Nov 10, 12:44 pm, Thomas Bendler thomas.bend...@cimt.de wrote: Hi Chris, 2010/11/10 Chris chrisma...@gmail.com [...] file{/path/to/foo.key: source=puppet:///keys/foo.key} , because any valid puppet client could access foo.key.

Re: [Puppet Users] Managing private key files; content=file vs. binary content.

2010-11-10 Thread Patrick
On Nov 10, 2010, at 4:29 AM, Chris wrote: How are other people getting around this? Do you just allow all clients to access all keys? Is there a native type, or an auth.conf trick, that I'm missing? Or a more binary-friendly encoding than JSON/ PSON ? I send a different message with a

Re: [Puppet Users] Could not retrieve catalog from remote server - random

2010-11-10 Thread Patrick
On Nov 10, 2010, at 8:40 AM, PBWebGuy wrote: I have one of 18+ servers in an environment that just started having a problem when attempting to do an update. On the node I enter the command 'puppetd -t --debug --trace'. I don't see anything obvious but the error is: Could not retrieve

Re: [Puppet Users] Re: Managing private key files; content=file vs. binary content.

2010-11-10 Thread Patrick
On Nov 10, 2010, at 11:48 AM, Richard Crowley wrote: On Wed, Nov 10, 2010 at 10:39 AM, Thomas Bendler thomas.bend...@cimt.de wrote: 2010/11/10 Richard Crowley r...@rcrowley.org [...] This works perfectly for PEM-formatted keys because they're ASCII, which is a subset of UTF-8. Binary

Re: [Puppet Users] Restarting services

2010-11-09 Thread Patrick
On Nov 9, 2010, at 6:06 AM, Rob McBroom wrote: On Nov 5, 2010, at 4:20 PM, byron appelt wrote: Is it possible to use a Service resource, but not have puppet start or start the service? I want to declare service resources so that I can easily make sure that puppet will restart them when

Re: [Puppet Users] Re: agent needs to make two runs before master compiles new catalog

2010-11-09 Thread Patrick
On Nov 9, 2010, at 12:50 PM, Kent wrote: Patrick, thanks for the speedy reply once again. I'm using RHEL5 and Puppet 2.6.1, Passenger 2.2.7, Rack 1.1.0. From what I've read in this group and in Puppet Labs docs/wikis, Debian/Ubuntu users do seem to have an easier time generally than

Re: [Puppet Users] Re: agent needs to make two runs before master compiles new catalog

2010-11-09 Thread Patrick
options for puppetmasterd with PUPPETMASTER_EXTRA_OPTS, but to my knowledge there is not a way to do this with puppet.conf. I think that putting this in /etc/puppet/puppet.conf will do the same thing. [master] verbose = true debug = true On Nov 9, 2:02 pm, Patrick kc7...@gmail.com wrote: On Nov 9

Re: [Puppet Users] question about custom facts and environmental variables

2010-11-09 Thread Patrick
On Nov 9, 2010, at 6:01 PM, Edward Bailey wrote: The purpose behind setting up the fact this way is that I thought it would be an easy way to populate servers with extra metadata without having to drop a file and then a fact with some shell code on every server. For example, we have a

Re: [Puppet Users] EC2 with puppet bootstrap notes and scripts

2010-11-08 Thread Patrick
On Nov 7, 2010, at 10:45 PM, Nigel Kersten wrote: On Sun, Nov 7, 2010 at 9:52 AM, Christopher McCrory chris...@gmail.com wrote: Hello... # the hostname data is added via something like: # shell ec2-run-instances ... --user-data myservername ami-123abc # by definition, the first line

Re: [Puppet Users] EC2 with puppet bootstrap notes and scripts

2010-11-08 Thread Patrick
On Nov 8, 2010, at 9:54 AM, Nigel Kersten wrote: On Mon, Nov 8, 2010 at 2:17 AM, Patrick kc7...@gmail.com wrote: On Nov 7, 2010, at 10:45 PM, Nigel Kersten wrote: On Sun, Nov 7, 2010 at 9:52 AM, Christopher McCrory # yes, thrice /usr/sbin/puppetd --no-daemonize --onetime --server

Re: [Puppet Users] Default ownership for static files

2010-11-08 Thread Patrick
On Nov 8, 2010, at 9:36 AM, Markus Falb wrote: On 08.11.10 17:03, R.I.Pienaar wrote: - Markus Falb markus.f...@fasel.at wrote: Hi, I try to serve a file file { /root/test3.txt: ensure = file, source = puppet:///yum/test.txt, } On the puppetmaster this files

Re: [Puppet Users] agent needs to make two runs before master compiles new catalog

2010-11-08 Thread Patrick
On Nov 8, 2010, at 9:10 AM, Kent wrote: Hi all, I'm a new puppet user and new to the forum. I just switched my Puppetmaster to running inside Apache (via Passenger). When I make a change to a resource on the master, it sometimes takes a given node TWO runs before the master will realize

Re: [Puppet Users] EC2 with puppet bootstrap notes and scripts

2010-11-08 Thread Patrick
On Nov 8, 2010, at 12:12 PM, Richard Crowley wrote: 3) One last chance just in case something didn't work, timed out, or I forgot a require. (Finishes in seconds for me) Honestly, you should be discovering such missing requires in your testing process. It's not good practice to simply run

Re: [Puppet Users] EC2 with puppet bootstrap notes and scripts

2010-11-08 Thread Patrick
On Nov 8, 2010, at 11:10 AM, Nigel Kersten wrote: On Mon, Nov 8, 2010 at 10:51 AM, Patrick kc7...@gmail.com wrote: On Nov 8, 2010, at 9:54 AM, Nigel Kersten wrote: On Mon, Nov 8, 2010 at 2:17 AM, Patrick kc7...@gmail.com wrote: On Nov 7, 2010, at 10:45 PM, Nigel Kersten wrote

Re: [Puppet Users] EC2 with puppet bootstrap notes and scripts

2010-11-08 Thread Patrick
On Nov 8, 2010, at 2:03 PM, Richard Crowley wrote: +1. Catalogs that need to converge or are anything but a no-op on their second run should be considered broken. *) My philosophy is this puppet.conf should be managed by puppet. *) Sometimes a run won't be completed correctly unless

Re: [Puppet Users] Re: Failed to retrieve current state of resource: Error 400 on SERVER

2010-11-05 Thread Patrick
On Nov 5, 2010, at 5:52 AM, Maciej Skrzetuski wrote: Hello everyone, I updated puppet to 2.6.2 and with the same configuration I am getting: err: /Stage[main]/Webspheremq/File[/tmp/mq_license/license/ status.dat]: Could not evaluate: Could not retrieve information from source(s)

Re: [Puppet Users] Lenny and lenny-backports

2010-11-05 Thread Patrick
On Nov 5, 2010, at 9:52 AM, Walter Heck wrote: Hi all, I'm runnign debian lenny and that has puppet 0.24.5 in it. Lenny- backports ahs Puppet 2.6.2 in it, which is what I want. How do I make puppet update itself through puppet recipes? I already had it create an /etc/apt/preferences,

Re: [Puppet Users] how to ... extlookup and puppet:///path/to/file

2010-11-04 Thread Patrick
On Nov 4, 2010, at 11:10 AM, jogui wrote: Hi! use case : file { x : source = puppet:///path/to/file } works fine, source is translated. but use case : file { x : source = extlookup('myvar') } set source to puppet:///path/to/file without translation when csv file contains

Re: [Puppet Users] Re: RFC: Make file content specification methods consistent.

2010-11-03 Thread Patrick
On Nov 3, 2010, at 6:38 AM, jcbollinger wrote: On Nov 2, 11:43 am, Nigel Kersten ni...@puppetlabs.com wrote: On Tue, Nov 2, 2010 at 4:32 PM, Patrick kc7...@gmail.com wrote: On Nov 2, 2010, at 9:14 AM, Michael Gliwinski wrote: On Tuesday 02 Nov 2010 15:06:19 Nigel Kersten wrote

Re: [Puppet Users] apt gpg key class + define not working

2010-11-03 Thread Patrick
On Nov 3, 2010, at 12:23 AM, Walter Heck wrote: Hi all, I'm writing a recipe for mariadb. It all works (I think, if you see any mistakes other then my question, feel free to point them out ;) ), except for the gpg key adding. Can anyone tell me what I'm doing wrong? What happens?

Re: [Puppet Users] (RHEL) RHN banning require package

2010-11-03 Thread Patrick Mohr
On Wed, Nov 3, 2010 at 10:37 AM, erikthered j.e.redd...@gmail.com wrote: I'm looking to get around a bit of a problem I've run into with Puppet. On my puppet master, I have this definition: Would that be the best way to handle this issue? Any opinions? I think they best way would be to

Re: [Puppet Users] Re: RFC: Make file content specification methods consistent.

2010-11-03 Thread Patrick
On Nov 3, 2010, at 3:47 PM, jcbollinger wrote: On Nov 3, 11:30 am, Patrick kc7...@gmail.com wrote: This is what I wanted except reversed. I was assuming that find_first() can't open or find files. It can only look at what it returned to it, so the syntax would be: find_first( file

Re: [Puppet Users] Does puppetmaster knows its own configuration parameters?

2010-11-02 Thread Patrick
On Nov 2, 2010, at 9:09 AM, Robert Scheer wrote: On Mon, Nov 01, 2010 at 13:07 -0700, Patrick wrote: This isn't a very good answer, but the variable $servername contains the name of the server the client think's it's connecting to. That may do what you want. This is a very good

Re: [Puppet Users] Re: RFC: Make file content specification methods consistent.

2010-11-02 Thread Patrick
On Nov 2, 2010, at 9:14 AM, Michael Gliwinski wrote: On Tuesday 02 Nov 2010 15:06:19 Nigel Kersten wrote: On Tue, Nov 2, 2010 at 6:34 AM, jcbollinger john.bollin...@stjude.org wrote: On Nov 1, 7:07 pm, Nigel Kersten ni...@puppetlabs.com wrote: It would be great if someone could update the

Re: [Puppet Users] Re: RFC: Make file content specification methods consistent.

2010-11-02 Thread Patrick
On Nov 2, 2010, at 9:43 AM, Nigel Kersten wrote: On Tue, Nov 2, 2010 at 4:32 PM, Patrick kc7...@gmail.com wrote: On Nov 2, 2010, at 9:14 AM, Michael Gliwinski wrote: On Tuesday 02 Nov 2010 15:06:19 Nigel Kersten wrote: On Tue, Nov 2, 2010 at 6:34 AM, jcbollinger john.bollin...@stjude.org

Re: [Puppet Users] Re: require service started at another node

2010-11-01 Thread Patrick
On Nov 1, 2010, at 12:57 AM, Leonko wrote: 1. Make sure that your database service is up early, as resilient as you can make it and rarely restarted. Thank you. Maybe you know method to validate what db is start early. It's very important for me. 2. Make your application

Re: [Puppet Users] RFC: Make file content specification methods consistent.

2010-11-01 Thread Patrick
with my earlier suggestion quoted here: On Oct 30, 2010, at 9:46 AM, Patrick wrote: The best solution I can come up with is this. source - Unchanged because this is used so much. Tries each source in turn and uses the first one that works. Fails if none work. content - Deprecated but kept

Re: [Puppet Users] Re: require service started at another node

2010-11-01 Thread Patrick
On Nov 1, 2010, at 1:14 AM, Leonko wrote: You can say more about it? I do not understand what you say? Can you give your app a babysitter wrapper service? This sounds like it might be useful just for uptime. The idea is that you wrap this app in a service. The wrapper is started,

Re: [Puppet Users] Re: RFC: Make file content specification methods consistent.

2010-11-01 Thread Patrick
On Nov 1, 2010, at 7:31 AM, Nigel Kersten wrote: On Mon, Nov 1, 2010 at 1:21 AM, Patrick kc7...@gmail.com wrote: I really don't think we can deprecate 'content' altogether, as while we're here trying to decide how to make these various chunks of functionality consistent, we also have to keep

Re: [Puppet Users] No report named 'puppet_dashboard'

2010-11-01 Thread Patrick
On Nov 1, 2010, at 4:27 AM, theirpuppet wrote: Hi all. I'm unable to integrate puppet dashboard as I keep getting the following error: No report named 'puppet_dashboard' Relevant configuration (names changed to protect the innocent).. /etc/puppet/puppet.conf [puppetd]

Re: [Puppet Users] Does puppetmaster knows its own configuration parameters?

2010-11-01 Thread Patrick
On Nov 1, 2010, at 10:51 AM, Robert Scheer wrote: Hi, I have set up a puppetmaster test server where I can test new releases of puppet before upgrading our puppetmaster production server. It works, but there is one issue I'd like to solve: The puppet.conf for all nodes (except the

Re: [Puppet Users] Adding Lines to *Existing* Files?

2010-11-01 Thread Patrick
On Nov 1, 2010, at 3:29 PM, nickt wrote: What, if any, is the best way to programatically add lines to an existing file with puppet? What I'm going for precisely is adding lines to either /etc/passwd and /etc/shadow (on Solaris) or /etc/ security/access.conf (on Linux) at run time. Adding

Re: [Puppet Users] puppetd misbehaving on a debian based box.

2010-11-01 Thread Patrick
Just in case you find this error again On Nov 1, 2010, at 4:15 PM, Peter Berghold wrote: undefined method `closed?' for nil:NilClass This error is a bug that is fixes in later versions of puppet. It means, something went wrong (this might be your fault) and the cleanup code failed (this

Re: [Puppet Users] RFC: Make file content specification methods consistent.

2010-10-30 Thread Patrick
On Oct 30, 2010, at 8:45 AM, Nigel Kersten wrote: http://projects.puppetlabs.com/issues/5158 --- Ticket description --- We have four main ways we can specify file content in a file resource. The source parameter The content parameter The file

Re: [Puppet Users] RFC: Make file content specification methods consistent.

2010-10-30 Thread Patrick
On Oct 30, 2010, at 9:52 AM, Nigel Kersten wrote: On Sat, Oct 30, 2010 at 9:46 AM, Patrick kc7...@gmail.com wrote: On Oct 30, 2010, at 8:45 AM, Nigel Kersten wrote: http://projects.puppetlabs.com/issues/5158 --- Ticket description --- We have four

Re: [Puppet Users] Failed to retrieve current state of resource: Error 400 on SERVER

2010-10-26 Thread Patrick
On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote: Hello there, I am very new to puppet and tried to copy some files (namely /etc/ puppet/manifests/files/websphermq/status.dat [on master] to /tmp/ status.dat [on puppet]) from master to the puppets. My setup is as follows: Puppet

Re: [Puppet Users] Failed to retrieve current state of resource: Error 400 on SERVER

2010-10-26 Thread Patrick
On Oct 26, 2010, at 7:00 AM, Felix Frank wrote: I am getting the following error: What is the problem here? What is file_metadata? Is this folder suppose to exist on my master? I don't know what's wrong. That folder doesn't need to be created. It's possible you have a permissions

Re: [Puppet Users] Re: Failed to retrieve current state of resource: Error 400 on SERVER

2010-10-26 Thread Patrick
as the manifest. On 26 Okt., 15:56, Patrick kc7...@gmail.com wrote: On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote: Hello there, I am very new to puppet and tried to copy some files (namely /etc/ puppet/manifests/files/websphermq/status.dat [on master] to /tmp

Re: [Puppet Users] Passenger Problems

2010-10-26 Thread Patrick
On Oct 25, 2010, at 7:45 PM, Daneil Goodman wrote: Hi all, I am trying to use @@sshkey{...} and Sshkey | | to share host keys between compute nodes. It does work! But there is a weird issue. The same host key entry of each node will add into ssh_known_host again after restarted puppet

Re: [Puppet Users] Passenger Problems

2010-10-26 Thread Patrick
On Oct 25, 2010, at 12:50 PM, Taylor Leese wrote: Hi all, I'm new to Puppet and I'm trying to setup a puppet master and a client on Amazon EC2 using Passenger. I've gone through the steps described here (http://docs.puppetlabs.com/guides/passenger.html) and here

Re: [Puppet Users] puppetd + listen=true problem

2010-10-26 Thread Patrick
On Oct 26, 2010, at 12:00 PM, Chad Huneycutt wrote: You need to delete the cert on the client. rm -rf /var/lib/ssl/* I'm not sure if this is the right answer, but I think you meant rm -rf /var/lib/puppet/ssl On Tue, Oct 26, 2010 at 10:48 AM, sanjiv.singh sanjiv.si...@impetus.co.in

Re: [Puppet Users] Re: Passenger Problems

2010-10-26 Thread Patrick
: Patrick, I did run across that thread, but the GitHub site specifically says 2.2.5 is known to work (http://github.com/puppetlabs/puppet/tree/ master/ext/rack) which made me suspicious that it was my fault. At this point I guess there is no harm in trying 2.2.11 (or whatever the latest version

Re: [Puppet Users] Re: Passenger Problems

2010-10-26 Thread Patrick
On Oct 26, 2010, at 1:00 PM, Taylor Leese wrote: Patrick, Any idea if people are using versions 2.2.5 in the wild successfully? I tried to revert back to 2.2.2 previously, but I received a number of compilation errors when running passenger-install- apache2-module so it seems like moving

Re: [Puppet Users] Re: Passenger Problems

2010-10-26 Thread Patrick
I love this package, but I had some conflicts with my existing puppetmaster configuration. This is what I did (probably very overkill) that fixed all the conflicts. I haven't had this trouble with new servers. I've only had this problem with servers that had puppet+passenger configured

Re: [Puppet Users] Installing Software via Puppet

2010-10-25 Thread Patrick
On Oct 25, 2010, at 8:20 AM, Maciej Skrzetuski wrote: Hello there, I would like to install software on my puppets. I have two installation options: - RPMs lying on the master - silent installation routine lying on the master What is the standard/pattern for puppet to install software

Re: [Puppet Users] Templates VS static files

2010-10-25 Thread Patrick
On Oct 25, 2010, at 8:12 AM, Alaric wrote: Hi folks, This may be a totally dumb question, but hey.. sometimes I'm dumb recently I've been rocking template's like a crazy person.. and I'm wondering, is there any reason why I shouldn't use templates for *all* files I want to

Re: [Puppet Users] Re: Templates VS static files

2010-10-25 Thread Patrick
On Oct 25, 2010, at 1:55 PM, donavan wrote: On Oct 25, 11:13 am, R.I.Pienaar r...@devco.net wrote: In this scenario puppetd will use the old catalog BUT it will still fetch files with source from the master. This is also possible during your VCSs 'update' if /etc/puppet is a workdir. This

Re: [Puppet Users] autosign by IP address range

2010-10-22 Thread Patrick
On Oct 22, 2010, at 10:39 AM, dagrundy wrote: Hello All. I read in an earlier post at http://markmail.org/search/?q=autosign+issues#query:autosign%20issues+page:1+mid:we6jrbn7hdjnhrie+state:results that as of puppet v24.4, autosigning did not support IP addresses. I am running v25.5.

Re: [Puppet Users] Puppet master reparsing every 24 hours

2010-10-21 Thread Patrick
On Oct 21, 2010, at 3:13 AM, Trevor Hemsley wrote: About a year ago there was a discussion about why a puppetmaster process was reparsing /etc/puppet/puppet.conf every 24 hours. The conclusion of that was that it was down to a backup package called Netbackup which was resetting the atime

Re: [Puppet Users] puppetd 0.25.4 with puppetmaster 0.24.8?

2010-10-21 Thread Patrick
On Oct 21, 2010, at 8:48 AM, Ed Greenberg wrote: OK, so I upgraded the puppetmaster server to lucid, which got me the puppetmaster 0.25.4. I am still having issues signing up a new lucid client, and I've foudn this in the client's log: Oct 21 15:32:53 edglucid1 puppetd[27061]: Could not

Re: [Puppet Users] puppetd 0.25.4 with puppetmaster 0.24.8?

2010-10-21 Thread Patrick
On Oct 21, 2010, at 2:20 PM, Nigel Kersten wrote: On Thu, Oct 21, 2010 at 10:13 AM, Patrick kc7...@gmail.com wrote: On Oct 21, 2010, at 8:48 AM, Ed Greenberg wrote: OK, so I upgraded the puppetmaster server to lucid, which got me the puppetmaster 0.25.4. I am still having issues

Re: [Puppet Users] Disabling Puppet

2010-10-21 Thread Patrick
On Oct 21, 2010, at 2:30 PM, Douglas Garstang wrote: Having some issues disabling puppet. I want to use scripts to update RPM's, and obviously you need to quiesce puppet first. The pid file directory is empty: [pax] app01 ~:# ls -l /var/run/puppet/ total 0 Puppet is stopped: [pax]

Re: [Puppet Users] Re: how to set Ruby path?

2010-10-21 Thread Patrick
This often means that an exec is hanging. On Oct 21, 2010, at 3:16 PM, bobics wrote: Thanks Sandor, that worked for me. Unfortunately I'm still seeing Puppet intermittently hang. I'll investigate the issue some more and create a new thread if needed. On Oct 20, 1:54 am, Sandor Szuecs

Re: [Puppet Users] puppetd 0.25.4 with puppetmaster 0.24.8?

2010-10-21 Thread Patrick
On Oct 21, 2010, at 2:59 PM, Nigel Kersten wrote: On Thu, Oct 21, 2010 at 2:27 PM, Patrick kc7...@gmail.com wrote: On Oct 21, 2010, at 2:20 PM, Nigel Kersten wrote: On Thu, Oct 21, 2010 at 10:13 AM, Patrick kc7...@gmail.com wrote: On Oct 21, 2010, at 8:48 AM, Ed Greenberg wrote

Re: [Puppet Users] Re: best practice for removing a module maintained resources from a system ?

2010-10-20 Thread Patrick
On Oct 20, 2010, at 8:00 AM, Martin Langhoff wrote: On Mon, Oct 18, 2010 at 9:13 AM, jcbollinger john.bollin...@stjude.org wrote: I'm guessing you mean you have written sub-*classes* to do that job. That is indeed the Puppet way to do it, and I don't find it at all ridiculous. As a

Re: [Puppet Users] puppetd 0.25.4 with puppetmaster 0.24.8?

2010-10-20 Thread Patrick Mohr
Always upgrade the puppetmaster first. Clients will usually not work with a server that has an older major version. I've found that using the lucid (10.4) deb files in karmic (9.10) works fine if You get all the related ones. When ever you upgrade puppet, also upgrade facter. On Wed, Oct 20,

Re: [Puppet Users] alternate hostnames, keys, and certs

2010-10-16 Thread Patrick
--hostcert=/etc/puppet/ssl/certs/macaddr-001f5bf823f8.pem --certname=macaddr-001f5bf823f8 So, things seem to be working the way I want now. Thanks to everyone for their advice, particularly Nigel and Patrick. Now that I have this working, I am thinking I would prefer to use this method

Re: [Puppet Users] alternate hostnames, keys, and certs

2010-10-15 Thread Patrick
On Oct 14, 2010, at 10:23 PM, Don Jackson wrote: I'd like to extend my use of puppet to manage my desktop/notebook macs. As others have noted, the hostname of the mobile machines tends to change frequently, so basing the node name (in my site.pp) and the corresponding cert and private

Re: [Puppet Users] Re: [Puppet-dev] ANNOUNCE: Puppet 2.6.2 released!

2010-10-15 Thread Patrick
On Oct 15, 2010, at 7:05 AM, Todd Zullinger wrote: Ben wrote: I did a server and all client upgrade to your 2.6.1 package from your 0.25.5 package without any problems w/ your packaging. Install, init scripts, etc all work fine. And now the upgrade to 2.6.2 looks good after 5 whole

Re: [Puppet Users] First boot with Puppet

2010-10-14 Thread Patrick
We done it 2 different ways: *) Pull and run a shellscript that sets puppet to run when the computer first boots up. Or instead of running the shell script, run something like this: get private_keys/bootstrap.pem (Pseudocode) get signed/bootstrap.pem (Pseudocode) get public_keys/ca.pem

Re: [Puppet Users] puppet node names

2010-10-14 Thread Patrick
puppet.config should be the fqdn of the node that created that request. Does facter fqdn give you puppet.config on that node? Does puppetd --genconfig | grep certname give you puppet.config on that node? On Oct 14, 2010, at 3:13 PM, john maclean wrote: What gives with the hostname config

Re: [Puppet Users] Re: [0.25.5] Default provider

2010-10-13 Thread Patrick
Yes. Check if it's a client or server error. Try On Oct 13, 2010, at 1:39 AM, Tim Stoop wrote: Hi Patrick, On Oct 12, 10:34 pm, Patrick kc7...@gmail.com wrote: I think this means the plugin(the .rb files) are getting found or aren't all getting found. What's the complete local path

Re: [Puppet Users] Variable of define is used more than once

2010-10-13 Thread Patrick
On Oct 13, 2010, at 8:44 AM, Stu Teasdale wrote: On Wed, Oct 13, 2010 at 10:37:03AM -0400, Disconnect wrote: - lenny (stable) http://packages.debian.org/lenny/puppet (admin): centralised configuration management for networks 0.24.5-3: all - lenny-backports

Re: [Puppet Users] err: Could not retrieve catalog: Could not parse for environment production: Could not find file /etc/puppet/manifests/site.pp warning: Not using cache on failed catalog

2010-10-13 Thread Patrick
On Oct 12, 2010, at 2:04 AM, spacelee wrote: I change my ubuntu to mac os, and rsync my puppet file to the puppet server. I run puppetd -tv in the client, and then this error happens puppetd -tv err: Could not retrieve catalog: Could not parse for environment production: Could not find file

Re: [Puppet Users] Exec in 2.6 and environment variables

2010-10-13 Thread Patrick
On Oct 13, 2010, at 2:16 PM, Carl Caum wrote: Hello everyone. I'm running in to trouble setting/changing environment variables for exec resources in 2.6.2. If the environment variable exists before I try to run the command, puppet can't seem to change it. For example, exec {foo:

Re: [Puppet Users] [0.25.5] Default provider

2010-10-12 Thread Patrick
On Oct 12, 2010, at 5:56 AM, Tim Stoop wrote: Hi all, To start, using puppet 0.25.5 on Debian Lenny with Ruby 1.8.7.72-3lenny1. I'm giving ruby a shot and am trying to build my own types for several applications and modify available types found on the 'net for our usage. However, I

Re: [Puppet Users] modifiying facts that facter collects

2010-10-12 Thread Patrick
The phrase you're looking for to add facts to a single machine is custom facts. (Google it) If you want to push them out automatically using puppet, try adding facts. (Google it) On Oct 12, 2010, at 4:20 PM, David Grundy wrote: Hello All. Is there some way to create new facts for facter

Re: [Puppet Users] Re: How to update a package using puppet and a .deb file

2010-10-11 Thread Patrick
You really want to do that. It's much easier to maintain. Here's a tutorial for a really simple repository if you want it: http://nerdica.com/?p=43 On Oct 11, 2010, at 7:58 AM, Tim C wrote: Thanks Jacob.. I'll try this out. I was also thinking about hosting our own apt repo and then we

Re: [Puppet Users] Re: Using puppet to update itself

2010-10-10 Thread Patrick
On Oct 10, 2010, at 3:29 AM, donavan wrote: On Oct 8, 1:18 pm, Disconnect dc.disconn...@gmail.com wrote: We just use packages: package { puppet: ensure = latest } Seconded, mostly. We target specific versions, and test in a lab first, but self upgrades work. We've gone through up, and

Re: [Puppet Users] puppet push mode

2010-10-07 Thread Patrick
On Oct 7, 2010, at 12:40 AM, Felix Frank wrote: On 10/07/2010 04:48 AM, Patrick wrote: On Oct 6, 2010, at 5:20 PM, Mohamed Lrhazi wrote: On Wed, Oct 6, 2010 at 7:33 PM, James Louis jgloui...@gmail.com wrote: if an instance of puppetd is already running then you'll get that error message

Re: [Puppet Users] tidy resource logging conflict

2010-10-06 Thread Patrick
On Oct 6, 2010, at 6:06 AM, Bruce Richardson wrote: One of the nice features of using the Tidy resource to prune a directory hierarchy in puppet is that any File resources you create within that tree will not be touched. However, the tidy resource *will* log that it is tidying them. This

Re: [Puppet Users] puppet push mode

2010-10-06 Thread Patrick
On Oct 6, 2010, at 5:20 PM, Mohamed Lrhazi wrote: On Wed, Oct 6, 2010 at 7:33 PM, James Louis jgloui...@gmail.com wrote: if an instance of puppetd is already running then you'll get that error message when you try to start up another instance. also there may be a puppetd.pid left from the

Re: [Puppet Users] puppetd memory consumption

2010-10-05 Thread Patrick
This is huge. Are you serving a lot of big files or templates? On Oct 5, 2010, at 4:01 AM, Angelos Oikonomopoulos wrote: Hello all, I'm playing with a new puppet setup (2.6.1 on debian stable with ruby 1.8) and I've run into a problem with puppetd consuming ridiculous amounts of memory.

Re: [Puppet Users] Can a hacker take over by impersonating puppetmaster?

2010-10-05 Thread Patrick
On Oct 5, 2010, at 5:55 PM, Mohamed Lrhazi wrote: On Mon, Oct 4, 2010 at 7:17 PM, Nan Liu n...@puppetlabs.com wrote: Correction. The puppet agent fetches the CA cert and it verifies the puppet master cert is signed by the CA cert. If not, the agent will not communicate with puppet master due

Re: [Puppet Users] How do you ensure safety from errors/bugs in large deployments?

2010-10-05 Thread Patrick
On Oct 5, 2010, at 6:05 PM, Mohamed Lrhazi wrote: Hello all, This is not a puppet proper issue of course.. but I was wondering if any of you could share some thoughts... When you deploy a system like Puppet at a large park of systems, you instantly increase the efficacy of mistakes and

Re: [Puppet Users] Augeas type to edit/append to /etc/pam.d/sshd

2010-10-04 Thread Patrick
On Oct 4, 2010, at 9:00 AM, luke.bigum wrote: Hi all, I'm trying to do something that should be pretty simple but can't figure it out. I want to append a line to /etc/pam.d/sshd if a line with a certain module doesn't exist. What I would like to work is this: augeas {

Re: [Puppet Users] Exec dependent on directory

2010-09-29 Thread Patrick
On Sep 28, 2010, at 9:17 AM, Dan Urist wrote: I have the following test code in a manifest: file { '/tmp/testdir': ensure = directory, owner = root, group = root, mode = 0755, checksum = mtime; } exec { 'testdir_updated': command = 'touch

Re: [Puppet Users] Re: Setup 2.6 + apache, passenger

2010-09-29 Thread Patrick
On Sep 29, 2010, at 4:58 AM, Gavin wrote: On 10 September 2010 18:54, Stefan Schlesinger s...@ono.at wrote: On Sep 10, 2010, at 15:47 , Gavin wrote: File does not exist: /usr/share/puppet/rack/puppetmasterd/public/ production. Actually I think I can reproduce your problem when I turn

Re: [Puppet Users] err: Could not request certificate: sslv3 alert handshake failure error

2010-09-29 Thread Patrick
On Sep 29, 2010, at 8:31 AM, Nan Liu wrote: On Wed, Sep 29, 2010 at 8:01 AM, Tim tkedwa...@fastmail.com.au wrote: I've setup the puppetmaster to start 5 processes each listening on a different port, with an Apache server in front. This works fine for existing clients, however when I try to

Re: [Puppet Users] Best practice using puppet and SVN in a production environment

2010-09-25 Thread Patrick
On Sep 25, 2010, at 7:34 AM, Christian wrote: Hello community, As you all know a good infrastructure deployment in production state should not involve much technical infrastructure staff anymore. Routine work should be able to perform by the users themselfs who should not know anything

Re: [Puppet Users] Proposal to remove redundant info in source = parameters

2010-09-25 Thread Patrick
On Sep 25, 2010, at 10:02 AM, Nigel Kersten wrote: On Fri, Sep 24, 2010 at 12:34 PM, Nan Liu n...@puppetlabs.com wrote: On Fri, Sep 24, 2010 at 11:20 AM, Nigel Kersten nig...@google.com wrote: eg the proposal is that if you don't specify the protocol, server address, modules prefix, module

Re: [Puppet Users] Proposal to remove redundant info in source = parameters

2010-09-25 Thread Patrick
On Sep 25, 2010, at 10:23 AM, Nigel Kersten wrote: On Sat, Sep 25, 2010 at 10:10 AM, Patrick kc7...@gmail.com wrote: On Sep 25, 2010, at 10:02 AM, Nigel Kersten wrote: On Fri, Sep 24, 2010 at 12:34 PM, Nan Liu n...@puppetlabs.com wrote: On Fri, Sep 24, 2010 at 11:20 AM, Nigel Kersten nig

Re: [Puppet Users] Proposal to remove redundant info in source = parameters

2010-09-25 Thread Patrick Mohr
On Sat, Sep 25, 2010 at 10:33 AM, Nigel Kersten ni...@explanatorygap.netwrote: On Sat, Sep 25, 2010 at 10:27 AM, Patrick kc7...@gmail.com wrote: On Sep 25, 2010, at 10:23 AM, Nigel Kersten wrote: On Sat, Sep 25, 2010 at 10:10 AM, Patrick kc7...@gmail.com wrote: On Sep 25, 2010, at 10

Re: [Puppet Users] Turning off client bucket

2010-09-24 Thread Patrick
It can be turned off in the file resource itself. That means you can do it for all files if you default that value (assuming you don't override if in a resource). Just put this in your site.pp. This code might have typos in it, but gets the point across: File { filebucket = none, }

Re: [Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Patrick
On Sep 24, 2010, at 5:34 AM, Kikanny wrote: Thanks guys! I upgraded puppet from 0.25.4 to 2.6.1. Now when I try to run puppetd on the same machine as puppemasterd, I get the following error message: err: Could not retrieve catalog from remote server: getaddrinfo: Name or service not known

Re: [Puppet Users] Puppet performance on Ubuntu Lucid with mod_passanger

2010-09-24 Thread Patrick
On Sep 24, 2010, at 5:03 AM, jtournier wrote: Hi, i'm actually using puppet+mongrel for 630 servers. Performances are correct, but we need to reboot the puppetmaster every 3 hours because of memory problems :-( I decided to migrate to a configuration puppet+apache2+passanger on a

Re: [Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Patrick
the following when I say ping puppet ping: unknown host puppet So I haven't defined puppet as a hostname somewhere or something? On Sep 24, 12:38 pm, Patrick kc7...@gmail.com wrote: On Sep 24, 2010, at 5:34 AM, Kikanny wrote: Thanks guys! I upgraded puppet from 0.25.4 to 2.6.1. Now when I try

Re: [Puppet Users] obtaining stdout information from client configuration executions

2010-09-24 Thread Patrick
On Sep 24, 2010, at 3:52 AM, Tim Lank wrote: puppet-users: I'm trying to find a way to obtain the stdout (and stderr) output from individual puppet client configuration runs. I'd like a central storage of this information if possible. In short, I'd like to know what the client

Re: [Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Patrick
, 12:55 pm, Patrick kc7...@gmail.com wrote: Try putting puppet as an alias to your server in /etc/hosts (DNS is a better long term solution, but /etc/hosts is usually easier). The test it again. If that doesn't work, test it with ping to make sure ping puppet works. On Sep 24, 2010, at 9

Re: [Puppet Users] obtaining stdout information from client configuration executions

2010-09-24 Thread Patrick
like this in a script called by cron (after redirecting the output): puppetd --verbose --onetime --no-deamonize On Fri, Sep 24, 2010 at 12:55 PM, Patrick kc7...@gmail.com wrote: On Sep 24, 2010, at 3:52 AM, Tim Lank wrote: puppet-users: I'm trying to find a way to obtain the stdout

Re: [Puppet Users] Re: Users with puppet

2010-09-22 Thread Patrick
On Sep 22, 2010, at 1:56 PM, Radek wrote: I chose to manage users with puppet. The only thing I did not like was password management. I did not want to put user's password in the manifest files. Instead I execute two commands when a user is created (only once): set an empty password (usermod

Re: [Puppet Users] Can a require use an OR ?

2010-09-22 Thread Patrick
On Sep 22, 2010, at 6:14 PM, Luc Suryo wrote: Hi Jeff well the thing is a client uses openvpn_client.conf and the server openvpn_server.conf (our setup) so i wanted to do service { openvpn : ensure = runnning, require = [ Package[openvpn], File[

<    1   2   3   4   5   6   7   >