Thank you! For me, it was in /usr/share/puppet/ext/rack/ The following fixed it: chown puppet:puppet /usr/share/puppet/ext/rack/config.ru
-eathernet On Saturday, 17 March 2012 07:05:39 UTC+10, Justin Lloyd wrote: > > Finally found the answer in this thread: > http://groups.google.com/group/puppet-users/browse_thread/thread/5bc799ee96bf74bd?pli=1 > > On the puppet master server, /etc/puppet/rack/config.ru was owned by > root:root instead of puppet:puppet. My puppet class isn't enforcing that, > but hmm, that would be a chicken and egg problem, most likely. > > > On Fri, Mar 16, 2012 at 1:19 PM, Justin Lloyd <[email protected] > <javascript:>> wrote: > >> Well I've somehow managed to get it down to just the error on the >> masterhttp.log file: >> >> Could not prepare for execution: Got 1 failure(s) while initializing: >> change from absent to file failed: Could not set 'file on ensure: >> Permission denied - /var/log/puppet/masterhttp.log >> >> There's obviously something wrong with the file permissions but I don't >> know what. >> >> # cd /var/log/puppet >> # ls -al >> total 12 >> drwxr-x--- 2 puppet puppet 4096 2012-03-14 17:21 . >> drwxr-xr-x 17 root root 4096 2012-03-16 06:25 .. >> -rw-rw---- 1 puppet puppet 2977 2012-03-14 17:22 masterhttp.log >> # >> >> We also don't have SELinux configured. Only thing installed is >> libselinux1. >> >> Apache2 runs as www-data but I think it was like that prior to this >> problem. >> >> /var is not read-only. I did think of that and verified it before my >> initial post. >> >> >> On Thu, Mar 15, 2012 at 5:39 AM, jcbollinger <[email protected] >> <javascript:>> wrote: >> >>> >>> >>> On Mar 14, 2:00 pm, Justin Lloyd <[email protected]> wrote: >>> > I'm suddenly getting the below errors from Rack during puppetd -t >>> > (excerpted from the pink HTML output and cleaned for readability): >>> > >>> > Could not prepare for execution: Got 10 failure(s) while initializing: >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/yaml; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/rrd; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/reports; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/facts; >>> > change from absent to file failed: Could not set 'file on ensure: >>> > Permission denied - /var/log/puppet/masterhttp.log; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/ssl; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/state; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/lib; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/bucket; >>> > change from absent to directory failed: Could not set 'directory on >>> ensure: >>> > Permission denied - /var/lib/puppet/server_data >>> > >>> > I'm not sure what I may have changed that would cause this now. >>> Thoughts? >>> >>> >>> The agent (i.e. puppetd) needs to run privileged. It sounds like you >>> are starting it manually, so are you running it as root or via sudo? >>> >>> Alternatively, if your master is running SELinux in enforcing mode, >>> then it is possible that starting the agent manually does not confer >>> the same privileges that running it as a service does. You can test >>> this by switching to permissive mode. >>> >>> Or is /var [on a] read-only filesystem? That's a long shot, because >>> such a situation would probably cause a lot of other problems system- >>> wide. >>> >>> >>> John >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Puppet Users" group. >>> To post to this group, send email to [email protected] >>> <javascript:>. >>> To unsubscribe from this group, send email to >>> [email protected] <javascript:>. >>> For more options, visit this group at >>> http://groups.google.com/group/puppet-users?hl=en. >>> >>> >> >> >> -- >> “We don’t need to increase our goods nearly as much as we need to scale >> down our wants. Not wanting something is as good as possessing it.” -- >> Donald Horban >> > > > > -- > “We don’t need to increase our goods nearly as much as we need to scale > down our wants. Not wanting something is as good as possessing it.” -- > Donald Horban > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/49535da1-433d-4ad7-9075-0e27d075cc49%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
