[Puppet Users] Re: augeas - add to beginning of file

2011-02-25 Thread luke.bigum
On Feb 24, 5:28 pm, cyrus matthewcer...@gmail.com wrote: Hi: Using augeas, how do you add a comment to the beginning of a file. I know you can use ins but you need to specify a path to insert before or after. In my case I can't with 100% certainty say I will no what the first line. Hi

Re: [Puppet Users] external_nodes setting with Environments

2011-02-25 Thread Dave Augustus
On 02/23/2011 10:15 PM, Douglas Garstang wrote: So... in puppet.conf on the puppet master, there's the external_nodes setting, which defines the location of the external nodes script. If I am using multiple environments, I guess I have to have ONE set of external nodes since external_nodes in

Re: [Puppet Users] any workarond recommendation for bug #3910 ?

2011-02-25 Thread Thomas Bellman
On 2011-02-25 00:23, Nigel Kersten wrote: On Thu, Feb 24, 2011 at 3:05 PM, Thomas Bellman bell...@nsc.liu.se wrote: So if you *do* have different plugins in different environments, and those contain secrets the wrong client must not know, then I believe you *are* screwed, because I don't

Re: [Puppet Users] external_nodes setting with Environments

2011-02-25 Thread Thomas Bellman
On 2011-02-25 13:27, Dave Augustus wrote: I have added the following in my puppetmaster.conf file: [production] manifest = $vardir/env/production/manifests/site.pp modulepath = $vardir/env/production/modules:$vardir/env/common/modules [test] manifest =

[Puppet Users] Re: Config Deployment: baseline manifest to all hosts, different sudoers,autofs..etc(manifest) to hosts, by hostname?

2011-02-25 Thread Jed
At the least, can someone be so kind as to tell me the term to search about -- i've googled a bit, and I think node override is what im after? On Feb 24, 9:16 am, Jed jedbl...@gmail.com wrote: Hi all, I think this has been asked in one form or another, but my problem so far is i'm not sure of

Re: [Puppet Users] Re: Config Deployment: baseline manifest to all hosts, different sudoers,autofs..etc(manifest) to hosts, by hostname?

2011-02-25 Thread Brian Gallew
For the way you are doing thing, the easiest answer is: use templates. Here is an example from my sshd_config.erb file that may be of use to you: - CUT HERE - pps = cprt_classes.split(',') rescue [] my_login_groups = ['root', 'wheel', 'sysadmin']

[Puppet Users] Re: Make puppet clients look at a domain name rather than an IP?

2011-02-25 Thread Phillip B Oldham
On Feb 16, 2:40 pm, Nigel Kersten ni...@puppetlabs.com wrote: Where does it say this Phillip? We must have some unclear documentation. http://docs.puppetlabs.com/guides/configuring.html#configure-dns-optional It is quite confusing... I struggled for a moment getting a puppet- master daemon

[Puppet Users] Re: Config Deployment: baseline manifest to all hosts, different sudoers,autofs..etc(manifest) to hosts, by hostname?

2011-02-25 Thread jcbollinger
You can use regex matches against your nodes' facts, $hostname for example, to select classes or resources to include. Actually, you can do this at at least two levels: At node level: node /wwwfe/ { include base_line include wwwfe } OR node default { include base_line } node /wwwfe/

Re: [Puppet Users] Signing certificates

2011-02-25 Thread Mark Stanislav
Based on 'time out range' seems that you need to do an NTP sync. -Mark On Feb 25, 2011, at 10:51 AM, Ace wrote: I am trying to connect a solaris puppet client version 2.6.4 to a linux puppet master server. I am getting a starnge message as below and the puppetca on the master is not able to

[Puppet Users] Signing certificates

2011-02-25 Thread Ace
I am trying to connect a solaris puppet client version 2.6.4 to a linux puppet master server. I am getting a starnge message as below and the puppetca on the master is not able to see the client certificate. [root@ /]$ puppetd --test --server warning: peer certificate won't be verified in

[Puppet Users] Re: manifest doesn't get applied

2011-02-25 Thread jcbollinger
On Feb 24, 10:52 am, Tim Dunphy bluethu...@gmail.com wrote: Also I should have mentioned that both services start by hand with an exit code of 0 (echo $?) Do the initscripts depend on any environment variables that they do not set themselves? When run by Puppet, the scripts will have a much

[Puppet Users] Re: Signing certificates

2011-02-25 Thread Ace
Time is in sync on both client and master. Both are running NTP. On Feb 25, 10:53 am, Mark Stanislav mark.stanis...@gmail.com wrote: Based on 'time out range' seems that you need to do an NTP sync. -Mark On Feb 25, 2011, at 10:51 AM, Ace wrote: I am trying to connect a solaris puppet

[Puppet Users] Re: manifest doesn't get applied

2011-02-25 Thread jcbollinger
On Feb 24, 10:17 am, Tim Dunphy bluethu...@gmail.com wrote: class dbservices {    $pgapps = [ postgresql84-server,postgresql84 ]    package { $pgapps: ensure  = installed }    $mysqlapps = [ mysql-server,mysql,php-mysql ]    package { $mysqlapps: ensure  = installed }    service {

[Puppet Users] Re: manifest doesn't get applied

2011-02-25 Thread jcbollinger
On Feb 24, 10:52 am, Tim Dunphy bluethu...@gmail.com wrote: Also I should have mentioned that both services start by hand with an exit code of 0 (echo $?) Do the dbserver scripts depend on something else environmental, such as some other service being up? The network service springs to mind

[Puppet Users] hostname not match with the server certificate error

2011-02-25 Thread Phillip B Oldham
Hi all I'm trying to set up a separate puppet master and client on EC2. I've used two instances of CentOS5.4 with nothing other than the base install and have installed puppet via the ruby gems. Puppet is at 2.6.4 on both machines. I've been following the guide to get a basic configuration

Re: [Puppet Users] external_nodes setting with Environments

2011-02-25 Thread Douglas Garstang
On Fri, Feb 25, 2011 at 5:10 AM, Thomas Bellman bell...@nsc.liu.se wrote: On 2011-02-25 13:27, Dave Augustus wrote: I have added the following in my puppetmaster.conf file: [production] manifest = $vardir/env/production/manifests/site.pp modulepath =

[Puppet Users] Variable scopes and overriding

2011-02-25 Thread Mohamed Lrhazi
In my site.pp I have a var set to false then I include a per_host module, which sets it for some host, to true, the intent if for this new value to be used * thereafter* I put I few notice statement in my manifests, and it seems my var that get start as false, gets set to true in my per-host

[Puppet Users] Re: Config Deployment: baseline manifest to all hosts, different sudoers,autofs..etc(manifest) to hosts, by hostname?

2011-02-25 Thread Jed
Thanks so much guys, I really really appreciate you taking the time to respond to my question. I've been reading quite a bit , but could not really find out how to do this I'll give these method a try and report back Thanks again! On Feb 25, 10:51 am, jcbollinger

Re: [Puppet Users] Re: Signing certificates

2011-02-25 Thread Stefan Schulte
Maybe the puppet master already has signed a request from your host (maybe older from an older installation)? Try on master: puppet cert --list --all | grep clienthostname On Fri, Feb 25, 2011 at 08:02:29AM -0800, Ace wrote: Time is in sync on both client and master. Both are running NTP.

[Puppet Users] Re: Signing certificates

2011-02-25 Thread Ace
puppet cert --list --all | grep clienthostname The above command does not list the client host key. I have done a puppet cert --clean clienthostname in any case. The timezones on both client and server are the same. On Feb 25, 3:47 pm, Stefan Schulte stefan.schu...@taunusstein.net wrote: Maybe

[Puppet Users] Exported Resources and Environments

2011-02-25 Thread Christopher Webber
I am running 0.24.8 clients and a 2.5.5 master. When I moved to separate environments I noticed that the exported resources did not respect environment boundaries. For example, an exported nagios_host resource that was exported by a node in the dev environment showed up in the production nagios

Re: [Puppet Users] Re: ssh_authorized_key runs every time

2011-02-25 Thread Stefan Schulte
On Thu, Feb 24, 2011 at 01:57:14PM -0800, mark risher wrote: Thanks, but I do have those parameters; I was trying to keep my quote short. Here's the full monty: # create an ssh key for this user ssh_authorized_key { $username.$ssh_public_key: ensure = present,

Re: [Puppet Users] Re: Signing certificates

2011-02-25 Thread Stefan Schulte
On Fri, Feb 25, 2011 at 12:53:22PM -0800, Ace wrote: puppet cert --list --all | grep clienthostname The above command does not list the client host key. I have done a puppet cert --clean clienthostname in any case. The timezones on both client and server are the same. Does running with

Re: [Puppet Users] Exported Resources and Environments

2011-02-25 Thread Stefan Schulte
On Fri, Feb 25, 2011 at 12:58:40PM -0800, Christopher Webber wrote: I am running 0.24.8 clients and a 2.5.5 master. When I moved to separate environments I noticed that the exported resources did not respect environment boundaries. For example, an exported nagios_host resource that was

[Puppet Users] Re: Variable scopes and overriding

2011-02-25 Thread Nick Fagerlund
Yeah, that's probably not going to get you where you need to be. Scope in Puppet goes like this: * When you declare a variable in a scope, it is local to that scope. * Every scope has one and only one parent scope. * If it's a class or node that inherits from a base class/node, its parent

Re: [Puppet Users] Re: manifest doesn't get applied

2011-02-25 Thread Tim Dunphy
Hello list!! Your help is invaluable and genuinely appreciated!! Here is the manifest as things stand now: class dbservices { class postgres { $pgapps = [postgresql84-server,postgresql84] package { $pgapps: ensure = installed } user { postgres:: uid = 26,

[Puppet Users] Re: Signing certificates

2011-02-25 Thread Ace
Running in the --no-daemonize mode for both client and master does not show anything interesting. Whats interesting is that I can have linux puppet clients connect to the linux master but none of the solaris clients work. More interesting is that I can connect to the Solaris master with the

[Puppet Users] Re: [Puppet-dev] RFC: Database-backed inventory service plan

2011-02-25 Thread Matt Robinson
On Wed, Feb 23, 2011 at 2:04 PM, Nick Lewis n...@puppetlabs.com wrote: Our current plan for the inventory service is to provide active_record termini for the facts and inventory indirections. This is to support fast look-up of facts, and search of nodes based on their facts. However, there are

[Puppet Users] Re: manifest doesn't get applied

2011-02-25 Thread jcbollinger
On Feb 25, 3:34 pm, Tim Dunphy bluethu...@gmail.com wrote: class  mysql {       $mysqlapps = [mysql-server,mysql,php-mysql]       package { $mysqlapps: ensure  = installed }       user { mysql:       uid = 27,       ensure = present       }       group { mysql:       gid = 27,      

Re: [Puppet Users] Re: Variable scopes and overriding

2011-02-25 Thread Mohamed Lrhazi
Thanks a lot Nick for the detailed response. Not sure I fully understand yet. I dont think I can use option one because the external classifier would does not have access to the clients facts. I will read about parametrized classes and learn to use them, though I dont yet see how they can solve my

[Puppet Users] Test driven manifests?

2011-02-25 Thread Darren Worrall
Firstly, forgive me if I get my terminology mixed up. Being sold on the virtues of TDD, I have a growing itch to test our puppet manifests. Now by this I dont mean testing, say, the mechanics of a define to test that the right things *happen*, I mean being able to say that given a collection of

[Puppet Users] WeatherBill: Operations Engineer - San Francisco

2011-02-25 Thread Gary Jong
Operations Engineer WeatherBill, Inc San Francisco, CA WeatherBill is a successful start-up in the heart of San Francisco with an open and flat-structured environment that is revolutionizing how the world deals with weather risk and peril through sophisticated parametric modeling that can be used

Re: [Puppet Users] Config Deployment: baseline manifest to all hosts, different sudoers,autofs..etc(manifest) to hosts, by hostname?

2011-02-25 Thread Mike Becker
Currently puppet supports regex matching on node names also puppet looks if a node is named default and applies this manifest but there is also an inherit where nodes can inherit another one (but only one!) so it might help to split your manifests up to different nodes and inherit them either to

Re: [Puppet Users] Test driven manifests?

2011-02-25 Thread Dan Bode
On Fri, Feb 25, 2011 at 9:24 AM, Darren Worrall d...@darrenworrall.co.ukwrote: Firstly, forgive me if I get my terminology mixed up. Being sold on the virtues of TDD, I have a growing itch to test our puppet manifests. Now by this I dont mean testing, say, the mechanics of a define to test

Re: [Puppet Users] Re: Variable scopes and overriding

2011-02-25 Thread Nan Liu
On Fri, Feb 25, 2011 at 3:25 PM, Mohamed Lrhazi lrh...@gmail.com wrote: Thanks a lot Nick for the detailed response. Not sure I fully understand yet. I dont think I can use option one because the external classifier would does not have access to the clients facts. I will read about