Re: [Puppet Users] Re: recursive descent

[ygor]

Have you tried experimenting ?br /Much of my Puppet savvy is from tinkering. 
br /br /Try some code. See what works and what does not work. br /br 
/Sometimes I think the surest sign that intelligent life exists elsewhere in 
the universe is that none of it has tried to contact us.br /Bill Waterson 
(Calvin  Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/594141407.88154.1387317298820.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [Puppet Users] Re: Puppet Dashboard: how to connect?

[ygor]

Check with your local admin with access to Red Hat Network. That is their job. 
br /br /Sometimes I think the surest sign that intelligent life exists 
elsewhere in the universe is that none of it has tried to contact us.br 
/Bill Waterson (Calvin  Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1601847732.31168.1386971790837.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [Puppet Users] examples of puppet yaml output

[ygor]

/var/lib/puppet/reportsbr /on a puppet master. br /br /Sometimes I think 
the surest sign that intelligent life exists elsewhere in the universe is that 
none of it has tried to contact us.br /Bill Waterson (Calvin  Hobbes)

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1816672046.12346.1386882350097.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [Puppet Users] crapload of files to check permissions and ownership

[ygor]

[Please respond to THE LIST and not directly/privately]

OK, then if you want to manage 100+ files, you need to either LIST 100+ files 
or manage the file tree using the 'recurse' parameter.

There is another thread here recently asking about wildcards in file resources. 
 They were told that wildcards do not work for that.

- Original Message -
From: root clri.c0t...@gmail.com
To: y...@comcast.net
Sent: Friday, August 2, 2013 3:00:19 PM
Subject: Re: [Puppet Users] crapload of files to check permissions and ownership


Yes, my link is not correct, i meant to link to the puppet cookbook page. 

I do want to mange and change the files. Thanks. 


On Friday, August 2, 2013 2:45:01 PM UTC-4, Ygor wrote: 



Your link is for posting a new message to this group on Google Groups. 

Perhaps you wanted this: 
http://www.puppetcookbook.com/posts/remove-duplicated-file-resource-attributes.html
 

You say you want to check file permission/ownership. 
Do you want to make any changes if things are not how you want them ? 

Subtle, but different. 

Any file managed by Puppet can be controlled. However, Puppet does not 
(directly) do anything to any file it does not manage. 
The above cookbook-example will not set permission/ownership to any file not 
explicitly managed. 

Do you plan to manage all these files in Puppet ? 
If not, another approach is needed. 


“Sometimes I think the surest sign that intelligent life exists elsewhere in 
the universe is that none of it has tried to contact us.” 
Bill Waterson (Calvin  Hobbes) 


From: root  clri@gmail.com  
To: puppet...@googlegroups.com 
Sent: Friday, August 2, 2013 2:29:27 PM 
Subject: [Puppet Users] crapload of files to check permissions and ownership 



Very new to Puppet and I need to create a class that checks the file 
permissions and ownership for 60- 100 files. Some of the files will be named 
differenty or have a different path depending on the OS. I am aware of the 
core_permissions class demonstrated in the Puppet 3.0 Quick Start, and I have 
read Reduce Duplicated File Attributes here: 
https://groups.google.com/forum/?hl=en#!newtopic/puppet-users 

That document advocates setting a default set of attributes for the File 
resource, and then nest all the declarations inside one resource statement, 
like so: 

File {
  ensure = present,
  owner  = root,
  group  = root,
  mode   = 644,
}

file {
  /etc/cobbler/modules.conf:
content = template(cobbler/modules.conf);
  /etc/cobbler/dhcp.template:
content = template(cobbler/dhcp.template);
  # override the permissions for this one file
  /etc/cobbler/users.digest:
source = puppet:///modules/cobbler/users.digest.live,
mode   = 660;
} This looks kind of ugly to me.  Anyone figure out a nicer way to do this?  I 
will only be checking ensure, mode, owner and group. I want the class 
to be readable to admins who are new to Puppet, but I don't want to have a 
separate file declaration for each file. Thanks. 




-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group. 
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users...@googlegroups.com . 
To post to this group, send email to puppet...@googlegroups.com . 
Visit this group at http://groups.google.com/group/puppet-users . 
For more options, visit https://groups.google.com/groups/opt_out . 


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.

[Puppet Users] Re: Hiera YAML False bug

[Ygor]

I may have found the problem:

Add the following block of code  - you will need to have the puppet-forge 
module stdlib installed -- and see what it does

class java::install ( 
$parameters = hiera('java', []), 
) { 

# - start 
include stdlib

if is_hash ( $parameters ) {
notify { It is a hash : } 
} else {
 notify { It is NOT a hash : } 
}

if $parameters {
$hashkeez = keys ( $parameters )
notify { [ $hashkeez ]:
message = Key,
 }
}   
# - end

if $parameters['openjdk'] == true { 
if $parameters['enable_v6'] == true and 
$java::params::openjdk_6_jre { 
package { $java::params::openjdk_6_jre: 
ensure = latest, 


On Wednesday, June 5, 2013 4:52:24 PM UTC-4, Ti Leggett wrote:

 It seems puppet thinks that variables evaluate to true even when they are 
 explicitly set to false in hiera YAML. 

 In my searching it seems like this should be fixed but with hiera 1.2.1 
 and puppet 3.2.1 I'm still seeing this. 

 In my YAML I have: 

 # Java directives 
 java : 
 enable_jdk : false # Install the JDK as well as the JRE 
 enable_v6  : true  # Install Java 6 
 enable_v7  : false # Install Java 7 
 openjdk: true  # Install OpenJDK 
 sun: false # Install Sun 


 And in one of my manifests I do something like: 

 class java::install ( 
 $parameters = hiera('java', []), 
 ) { 
 if $parameters['openjdk'] == true { 
 if $parameters['enable_v6'] == true and 
 $java::params::openjdk_6_jre { 
 package { $java::params::openjdk_6_jre: 
 ensure = latest, 
 } 
 if $parameters['enable_jdk'] == true and 
 $java::params::openjdk_6_jdk { 
 package { $java::params::openjdk_6_jdk: 
 ensure = latest, 
 } 
 } 
 } 
 … 

 No matter what it thinks it should install the JDK package even though the 
 parameter is set to false. I've tried setting it 0, False, n, and N and it 
 always evaluates to true. Is this a known bug and if so is there a 
 workaround? 



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [Puppet Users] New hiera backend for mysql

[ygor]

Sounds like a great idea, but I am still trying to get a basic understanding of 
just puppet and hiera.  I really like the idea of separating the. ode unique 
data from the general manifest, but I would like to see a beginner's guide to 
puppet/hiera.  The other piece that I am very interested in is the hiera-gpg 
for storing things like MySQL passwords and other sensitive junque

-Original Message-
From: Craig Dunn
To: puppet-users
Sent: 2012-03-05 09:18:50 +
Subject: [Puppet Users] New hiera backend for mysql


Hi all,

Over the weekend I came up with a new backend for hiera for looking up 
configuration values directly from a MySQL database that may be useful 
to some

http://www.craigdunn.org/2012/03/introducing-hiera-mysql-mysql-backend-for-hiera/

http://github.com/crayfishx/hiera-mysql

Regards
Craig

-- 
Craig Dunn | http://www.craigdunn.org
Yahoo/Skype: craigrdunn | Twitter: @crayfishX

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Re: [Puppet Users] Certificate Annoyance: Time Differential

[ygor]

A suggestion based on how I deal with this :
I use Cobbler to load the operating system  and do basic configurations. Then I 
hand off to Puppet.  One thing I do with Cobbler is the initial setting of the 
system clock using ntpdate or ntpd -q
Hope this helps

-Original Message-
From: Derek J. Balling
To: puppet-users
Sent: 2012-02-27 10:59:12 +
Subject: [Puppet Users] Certificate Annoyance: Time Differential

We recently had a situation where servers weren't able to use their 
auto-sign'ed certificates because their local clock was months off from 
real-time.  Of course, it was brand-new hardware straight off the dock and 
hadn't yet had a chance to have ntp sync the clock to the correct time because, 
well, puppet is what fires up NTP. :-)

Is there any way to recognize that puppet might be the thing in charge of 
bringing the clocks into sync, and allowing puppet to ignore 
certificate-verification failures that are based solely on the time-delta being 
too high?  It certainly seems like it'd be a useful feature.

D

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

[Puppet Users] Re: Time interval within execution of scripts from the server

[Ygor]

http://lmgtfy.com/?q=cron+random+delay

Inserting Random Delay In Cron Jobs
http://www.moundalexis.com/archives/76.php

On Feb 9, 9:00 am, mukulm smilemukul2...@gmail.com wrote:
 Hi,

 I have multiple script to be copied  executed from the puppet server
 on the client systems but i want to execute
 each script within a timeframe such as hourly, weekly or monthly from
 the puppet server as i dont want to execute all scripts on the same
 frequency.

 Any help will be greatly appreciated.

 Thanks
 mukulm

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

[Puppet Users] Re: Managing SSH host private keys

[Ygor]

On Jan 26, 1:42 pm, Christopher Wood christopher_w...@pobox.com
wrote:
 On Thu, Jan 26, 2012 at 06:32:49PM +, Dan White wrote:
  I am relatively new to both Puppet and ssh-keys,
  but is it possible for the PuppetMaster to generate all the keys rather 
  that each client creating their own ?

 This might be one of the places where erb (templates) being evaluated on the 
 puppetmaster will help. I'm just speculating, but there's no technological 
 reason why the puppetmaster shouldn't use erb/ruby to fork ssh-keygen and 
 store the result in some local directory. The puppet template can either 
 create a private key, or copy in the results of a previous ssh-keygen run.

 I don't see technical obstacles, only security obstacles. You may not want 
 all your ssh private keys stored in one place, for instance.

Agreed, My first thought is to be sure a backup of the private keys is
kept current and separate - and possibly in multiple locations.
Any other security considerations one should consider ?

In my current workplace, ssh keys are used for remote machine logins
and the individual user is responsible for maintaining their own
private key.
I am not completely happy with this arrangement, and I am looking for
information to use to make some intelligent suggestions for change.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

[Puppet Users] n00b question - Does puppet monitor continuously ?

[Ygor]

Does something in the puppetmaster run the puppet modules/manifests
periodically ?
Or do I have to set up a cron job or something like that ?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.