Re: [Puppet Users] Puppet agent hangs on "Executing: '/sbin/service nfs start'

2019-08-29 Thread Bret Wortman
It must have been a long day yesterday. I thought this was something Puppet was doing internally. I'm closing in on the root cause now. On Thursday, August 29, 2019 at 1:45:03 AM UTC-4, Dirk Heinrichs wrote: > > Am Mittwoch, den 28.08.2019, 11:49 -0700 schrieb Bret Wortman: > > Debu

[Puppet Users] Puppet agent hangs on "Executing: '/sbin/service nfs start'

2019-08-28 Thread Bret Wortman
! Bret Wortman The Damascus Group LLC -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this

Re: [Puppet Users] Re: Puppet 6 regenerate all certs fails with OpenSSL::X509::StoreError

2018-10-22 Thread Bret Wortman
entify spots that are still wrong or confusing. Please let me know if anything in here doesn't work right for you! Maggie On Mon, Oct 22, 2018, 5:48 AM Bret Wortman mailto:bret.wort...@damascusgrp.com> wrote: Out of curiosity, I updated the server to 6.0.1. No change. On Monday, O

[Puppet Users] Re: Puppet 6 regenerate all certs fails with OpenSSL::X509::StoreError

2018-10-22 Thread Bret Wortman
Out of curiosity, I updated the server to 6.0.1. No change. On Monday, October 22, 2018 at 7:25:10 AM UTC-4, Bret Wortman wrote: > > We had an issue where someone removed our puppet server's ssl directory, > so we need to regenerate all our certs. I'm following the instructions at

[Puppet Users] Puppet 6 regenerate all certs fails with OpenSSL::X509::StoreError

2018-10-22 Thread Bret Wortman
We had an issue where someone removed our puppet server's ssl directory, so we need to regenerate all our certs. I'm following the instructions at https://puppet.com/docs/puppet/6.0/ssl_regenerate_certificates.html but am having difficulties: # puppetserver ca list -a Traceback (most recent

Re: [Puppet Users] Puppet server stopped working

2018-07-19 Thread Bret Wortman
I did, by building a new server. That said, I'd try this advice before starting over: https://puppet.com/docs/puppet/5.5/ssl_regenerate_certificates.html For us it was also a change to move from a monolithic, everything on one server architecture to something a bit more distributed. On Thu, Jul

[Puppet Users] Re: PKIX path validation failed

2018-07-12 Thread Bret Wortman
7 AM UTC-4, Thomas Müller wrote: > > > > Am Dienstag, 10. Juli 2018 20:04:03 UTC+2 schrieb Bret Wortman: >> >> I'm standing up a new replacement puppet server in place of the one we >> trashed a few weeks ago, and am running into a new, interesting issue. >> &g

[Puppet Users] PKIX path validation failed

2018-07-10 Thread Bret Wortman
I'm standing up a new replacement puppet server in place of the one we trashed a few weeks ago, and am running into a new, interesting issue. I'm running puppet and puppetdb on the same server. Postgres is up and running. When I try to run puppet agent -t on a random system, I get this: #

[Puppet Users] PKIX path validation failed

2018-07-10 Thread Bret Wortman
I'm standing up a new replacement puppet server in place of the one we trashed a few weeks ago, and am running into a new, interesting issue. I'm running puppet and puppetdb on the same server. Postgres is up and running. When I try to run puppet agent -t on a random system, I get this: #

[Puppet Users] Puppetserver won't start

2018-07-02 Thread Bret Wortman
After accidentally running puppet agent on our puppet server, the server no longer works. I've run a "yum reinstall puppetserver" on it to no avail. What's happening is that it keeps trying to start but fails for some reason. /var/log/messages shows: : puppet puppetserver: at

Re: [Puppet Users] Puppet server stopped working

2018-07-02 Thread Bret Wortman
and > everything came up working. I’m not sure if that will help you but it > solved our problem. > > > > On Jul 2, 2018, at 7:35 AM, Bret Wortman > wrote: > > I accidentally ran puppet agent on our puppet master and now puppet server > won't start up any more. Mul

[Puppet Users] Re: Puppet server stopped working

2018-07-02 Thread Bret Wortman
pathy /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_us.UTF : On Monday, July 2, 2018 at 8:35:33 AM UTC-4, Bret Wortman wrote: > > I accidentally ran puppet agent on our puppet master and now puppet server > won't start up any more. Multiple reboots have failed

[Puppet Users] Puppet server stopped working

2018-07-02 Thread Bret Wortman
I accidentally ran puppet agent on our puppet master and now puppet server won't start up any more. Multiple reboots have failed to clear the situation and I can't figure out what file changed. Here's the tail end of /var/log/messages | grep puppetserver, minus the datestamps: : puppet

Re: [Puppet Users] Trouble translating Hiera 3 -> 5 config file

2017-05-31 Thread Bret Wortman
option? On Wednesday, May 31, 2017 at 5:56:48 AM UTC-4, Henrik Lindberg wrote: > > On 30/05/17 17:09, Bret Wortman wrote: > > I'm working on upgrading to the Hiera 5 spec and moving away from our > > global config, but to do that I need to first make sure I have a working &

[Puppet Users] Trouble translating Hiera 3 -> 5 config file

2017-05-30 Thread Bret Wortman
I'm working on upgrading to the Hiera 5 spec and moving away from our global config, but to do that I need to first make sure I have a working H5 config file, so I set to translating our current one using the Puppetlabs documentation. I must be missing something critical because a slew of

Re: [Puppet Users] Re: Puppetdb has not logged any new input in past 7 hours

2016-08-18 Thread Bret Wortman
BTW, that fixed it. Thanks! On Wednesday, August 17, 2016 at 8:22:03 PM UTC-4, Bret Wortman wrote: > > I'd love to figure out how that changed on me, because your changes remind > me that it USED to look like that! > > Bret Wortman > http://wrapbuddies.co/ > > On Aug

Re: [Puppet Users] Re: Puppetdb has not logged any new input in past 7 hours

2016-08-17 Thread Bret Wortman
I'd love to figure out how that changed on me, because your changes remind me that it USED to look like that! Bret Wortman http://wrapbuddies.co/ On Aug 17, 2016, 8:01 PM -0400, Wyatt Alt <wy...@puppet.com>, wrote: > Hey Bret, sorry for the gap in communication. Try making thes

Re: [Puppet Users] Re: Need to move puppetdb database -- best approach?

2016-08-17 Thread Bret Wortman
definitely file them away just in case. On Wednesday, August 17, 2016 at 2:41:38 PM UTC-4, Wyatt Alt wrote: > > > > On 8/17/16 6:26 AM, Bret Wortman wrote: > > > On Wednesday, August 17, 2016 at 9:19:34 AM UTC-4, Bret Wortman wrote: >> >> I'll confess that I kn

Re: [Puppet Users] Re: Puppetdb has not logged any new input in past 7 hours

2016-08-17 Thread Bret Wortman
https://gist.github.com/wortmanb/4896962accb5aa24bcb33b893f6ef477 On Wednesday, August 17, 2016 at 2:37:31 PM UTC-4, Wyatt Alt wrote: > > Can you post a gist of your master's full puppet.conf? > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group.

Re: [Puppet Users] Re: Puppetdb has not logged any new input in past 7 hours

2016-08-17 Thread Bret Wortman
> Nothing about the log output you've posted indicates an issue storing > data, so I'm wondering if the problem is with what puppet > explorer/puppetboard are considering an "update". For example maybe reports > got switched off and only reports are considered in that dete

[Puppet Users] Puppetdb has not logged any new input in past 7 hours

2016-08-17 Thread Bret Wortman
My puppetdb instance is up and running but hasn't stored any updates of any kind in the past 7 hours, according to both Puppet Explorer and Puppetboard. The process is running and so is postgres. Puppet configs haven't changed in that time. /var/log/puppetlabs/puppetdb/puppetdb.log shows plenty

[Puppet Users] Re: Puppetdb has not logged any new input in past 7 hours

2016-08-17 Thread Bret Wortman
.x86_64 postgresql95-server-9.5.4-IPGDG.rhel7.x86_64 postgresql95-contrib-9.5.4-IPGDG.rhel7.x86_64 # On Wednesday, August 17, 2016 at 12:37:12 PM UTC-4, Bret Wortman wrote: > > My puppetdb instance is up and running but hasn't stored any updates of > any kind in the past 7 hours, accordin

[Puppet Users] Re: Need to move puppetdb database -- best approach?

2016-08-17 Thread Bret Wortman
I got to looking at the storage issue because it also seems that no new reports have been recorded in over 4 hours, when my nodes have definitely been accessing puppet and completing agent runs during this same time. On Wednesday, August 17, 2016 at 9:19:34 AM UTC-4, Bret Wortman wrote

[Puppet Users] Need to move puppetdb database -- best approach?

2016-08-17 Thread Bret Wortman
I'll confess that I know next to nothing about Postgres databases, so I'm going to ask before I royally mess anything up: what's the best way to relocate my database from one partition to another? I need to move my files from their current location (which seems to be

Re: [Puppet Users] Re: Service entry for puppet agents not working

2016-08-09 Thread Bret Wortman
They matched. Good thought, though. *Bret Wortman* http://wrapbuddies.co/ <http://wrapbuddies.co/> On Tue, Aug 9, 2016 at 9:11 AM, Rob Nelson <rnels...@gmail.com> wrote: > > On Tue, Aug 9, 2016 at 8:51 AM, Bret Wortman <b...@thewortmans.org> wrote: > >>

[Puppet Users] Re: Service entry for puppet agents not working

2016-08-09 Thread Bret Wortman
ce on some systems. Scratching my head. On Monday, August 8, 2016 at 8:40:24 AM UTC-4, Bret Wortman wrote: > > We've been using cron to manage our puppet agents for the past few years > but have discovered some issues where it's running under a different > environment and is having t

Re: [Puppet Users] Re: Service entry for puppet agents not working

2016-08-08 Thread Bret Wortman
The affected node (or, at least, the one I'm looking at) doesn't actually have rundir set. The hunt for a rational explanation and ideal solution goes on. :-) Thanks, Rob! *Bret Wortman* http://wrapbuddies.co/ <http://wrapbuddies.co/> On Mon, Aug 8, 2016 at 12:07 PM, Rob Nelson

[Puppet Users] Re: Service entry for puppet agents not working

2016-08-08 Thread Bret Wortman
as a way to figure out if there was somehow something different in the environments. I think there is. Just need to figure out what it is now. Thanks! On Monday, August 8, 2016 at 8:40:24 AM UTC-4, Bret Wortman wrote: > > We've been using cron to manage our puppet agents for the past few

[Puppet Users] Service entry for puppet agents not working

2016-08-08 Thread Bret Wortman
We've been using cron to manage our puppet agents for the past few years but have discovered some issues where it's running under a different environment and is having trouble completing when run in cron, but it works fine as a daemon or from the command line. So I'm preparing to switch over.

[Puppet Users] Re: File_line only if the file exists

2016-08-02 Thread Bret Wortman
I know that file_line should autorequire the file since it's being managed, so the "require"s aren't strictly necessary. To test for the file's existence, you'll need to write a custom fact. See this for suggestions:

[Puppet Users] Guidelines on setting http_keepalive_timeout

2016-08-02 Thread Bret Wortman
I've got a very, very flaky network and many remote hosts which phone home hourly to pick up puppet updates. Some will complete really quickly, others can take minutes for a do-nothing agent run. My server is 4.3 and clients are mostly 3.8.6 but some are 4.3 as well. A mix of Centos (6 & 7) and

[Puppet Users] Re: How can I install puppetexplorer by hand?

2016-07-13 Thread Bret Wortman
. On Wednesday, July 13, 2016 at 10:04:39 AM UTC-4, Bret Wortman wrote: > > I've got an existing server running Puppet, PuppetDB, puppetboard and a > handful of other apache-based services. As this is our lone Puppet server, > I'm hesitant to use puppet to configure itself as that just seems &

[Puppet Users] How can I install puppetexplorer by hand?

2016-07-13 Thread Bret Wortman
I've got an existing server running Puppet, PuppetDB, puppetboard and a handful of other apache-based services. As this is our lone Puppet server, I'm hesitant to use puppet to configure itself as that just seems problematic should I ever completely hose something up. Anyway, all our apache

Re: [Puppet Users] Re: Question about custom exported resource

2016-06-30 Thread Bret Wortman
Nope. I'm good. This is working like a champ now. Thanks, John! *Bret Wortman* http://wrapbuddies.co/ <http://wrapbuddies.co/> On Thu, Jun 30, 2016 at 9:05 AM, jcbollinger <john.bollin...@stjude.org> wrote: > > > On Wednesday, June 29, 2016 at 8:57:51 AM UTC-5, Bret W

Re: [Puppet Users] Re: Question about custom exported resource

2016-06-29 Thread Bret Wortman
it for the hiera-dependent version. *Bret Wortman* http://wrapbuddies.co/ <http://wrapbuddies.co/> On Wed, Jun 29, 2016 at 9:06 AM, jcbollinger <john.bollin...@stjude.org> wrote: > > > On Tuesday, June 28, 2016 at 9:56:52 AM UTC-5, Bret Wortman wrote: >> >> Here's what I'm

[Puppet Users] Question about custom exported resource

2016-06-28 Thread Bret Wortman
Here's what I'm trying to do, and I know there's a better way most likely involving exported resources, but I haven't done much with them before. I've got two types of nodes deploying custom software which Puppet is setting up for us. Slave nodes have a config file which gets deployed via

Re: [Puppet Users] Git Repo Strategy

2016-06-15 Thread Bret Wortman
I made the conversion a little over a year ago and it's been a dream ever since. The Puppetfiles aren't that hard -- We store each module in its own repo and use branches to determine environments. For each new environment we want to use, we just branch the "puppet" repo which contains the

[Puppet Users] Re: Puppetserver & puppetdb setup: "Path does not chain with any of the trust anchors"

2016-06-15 Thread Bret Wortman
: [unable to get local issuer certificate for /CN=puppet.internal.net] Notice: Failed to connect to puppetdb; sleeping 2 seconds before retry And this just loops. Does this point to a problem with puppetserver or puppetdb? On Wednesday, June 15, 2016 at 10:20:07 AM UTC-4, Bret Wortman wrote

[Puppet Users] Puppetserver & puppetdb setup: "Path does not chain with any of the trust anchors"

2016-06-15 Thread Bret Wortman
I've installed postgresql and it's working with razor just fine. I followed the puppetdb setup instructions for installing it from packages and all looks good *except* that when puppetserver tries to connect to it, the logs show a variety of java stack traces where the root cause appears to be

Re: [Puppet Users] Re-enrolling clients after major version upgrade

2016-06-14 Thread Bret Wortman
Well, I _thought_ it helped. Many systems are connecting fine, others are still getting a different ca.pem file. I suspect for some reason the server is getting its copy overwritten somehow. I'm going to keep an eye on it now. On Tuesday, June 14, 2016 at 10:07:13 AM UTC-4, Bret Wortman wrote

Re: [Puppet Users] Re-enrolling clients after major version upgrade

2016-06-14 Thread Bret Wortman
{ > include "role::${::stype}" > } > else { > include ::puppet_upgrade > } > > Otherwise you could: > > rsync -a --delete /var/lib/puppet/ssl /etc/puppetlabs/puppet/ > > On Tue, Jun 14, 2016 at 06:39:13AM -0700, Bret Wortman wrote: >

[Puppet Users] Re-enrolling clients after major version upgrade

2016-06-14 Thread Bret Wortman
So I'm trying to use Ansible to automate the process of re-enrolling all my systems after the upgrade from 3.8.6 to 4.3, and many (though not all) of my clients are reporting thusly: # *rpm -rf /var/lib/puppet/ssl /etc/puppet/ssl /etc/puppetlabs/puppet/ssl* # *ssh puppet puppet cert list

Re: [Puppet Users] Upgraded Puppet server from 3.8 to 4.5 and Hiera stopped working

2016-06-13 Thread Bret Wortman
-utils", "curl", "nmap", "tcpdump", "unzip", "wget"] > > This is done automatically by the Puppet server when compiling the > manifest, but you need to do it manually on the command line. > > > On 2016-06-13 12:37 PM, Bret Wortma

Re: [Puppet Users] Upgraded Puppet server from 3.8 to 4.5 and Hiera stopped working

2016-06-13 Thread Bret Wortman
Oh, and my hiera version is now 3.0.6. We lag a bit behind on our development & production networks On Monday, June 13, 2016 at 12:37:03 PM UTC-4, Bret Wortman wrote: > > That got me past the error, but I still am getting "nil" no matter what I > ask for. > >

Re: [Puppet Users] Upgraded Puppet server from 3.8 to 4.5 and Hiera stopped working

2016-06-13 Thread Bret Wortman
a 1.3.4 is also quite old -- on a box > with puppet-agent v1.5.1 installed, 'hiera -v' gives me version 3.2.0. > > You probably need to get rid of the hiera package and make sure that > you're using the new version provided by puppet-agent. > > > On 2016-06-13 11:54 AM, Br

[Puppet Users] Upgraded Puppet server from 3.8 to 4.5 and Hiera stopped working

2016-06-13 Thread Bret Wortman
This morning, I upgraded to Puppet 4 using the PC1 repository and even through I have the puppet server running, the Hiera files we rely heavily on aren't being seen. I'm getting false values for everything which really screwed up some of the boxes I was testing with. # hiera -c

[Puppet Users] Odd razor error on freshly set up server

2016-04-12 Thread Bret Wortman
I'm working on setting up a new razor server and have gotten the microkernel boot to work fine. But now, when it tries to provision the new node, I get this: : Filename: bootstrap.ipxe tftp://192.168.1.101/bootstrap.ipxe... ok bootstrap.ipxe : 1626 bytes [script]

[Puppet Users] Re: Can't access custom fact as hash

2015-11-04 Thread Bret Wortman
This is on Puppet open source V3.8.3 server and V3.8.1 client. On Wednesday, November 4, 2015 at 8:08:20 AM UTC-5, Bret Wortman wrote: > > I defined this custom fact, which queries a local tool to determine what > roles a particular system should have assigned to it: > > Facter.a

[Puppet Users] Re: Can't access custom fact as hash

2015-11-04 Thread Bret Wortman
For completeness' sake, the answer was to set stringify_facts = false in puppet.conf's [main] section. On Wednesday, November 4, 2015 at 8:09:36 AM UTC-5, Bret Wortman wrote: > > This is on Puppet open source V3.8.3 server and V3.8.1 client. > > On Wednesday, November 4, 2015 at 8:08

[Puppet Users] Can't access custom fact as hash

2015-11-04 Thread Bret Wortman
I defined this custom fact, which queries a local tool to determine what roles a particular system should have assigned to it: Facter.add(:dgroles) do setcode do roles = {} res_hash = {} results = Facter::Core::Execution.exec("dg-role -b").split("/n")

[Puppet Users] Re: Confused after system upgrade - F22, Puppet 4.1.0-5

2015-10-08 Thread Bret Wortman
Actually, I think my hiera problem may be rleated to this line in my hiera.yaml file: :yaml: :datadir: '/etc/puppet/environments/%{environment}/data' Since I saw that environments changed in Puppet 4. On Thursday, October 8, 2015 at 12:08:35 PM UTC-4, Bret Wortman wrote: > > So I up

[Puppet Users] Confused after system upgrade - F22, Puppet 4.1.0-5

2015-10-08 Thread Bret Wortman
evaluating a Function Call, Could not find data item proxy in any Hiera data file and no default supplied at /path/to/manifests/site.pp:25:10 on node puppetserver.foo.net 3. Has Puppetlabs stopped providing RPMs at their yum server? I haven't seen a full set since F20. Thanks, Bret Wortman -- You

Re: [Puppet Users] Could not retrieve catalog from remote server: end of file reached

2014-10-02 Thread Bret Wortman
Bingo! I set the timeout to 15s on server and agent both (some of our network links are pretty crappy) and now everyone's connecting as before. Thanks for the tip! On Wednesday, October 1, 2014 6:24:07 PM UTC-4, Josh Cooper wrote: On Wed, Oct 1, 2014 at 10:47 AM, Bret Wortman br

[Puppet Users] Could not retrieve catalog from remote server: end of file reached

2014-10-01 Thread Bret Wortman
going wrong here? It's persistent, but again, doesn't happen 100% of the time. And it's only happening on certain agents, so I'm pretty sure it's related to a module somewhere that's doing something wrong, but for the life of me, I can't suss out which module is causing the problem. Bret

Re: [Puppet Users] Could not retrieve catalog from remote server: end of file reached

2014-10-01 Thread Bret Wortman
We're running through Passenger and Apache. Puppetdb back-end. Puppet 3.6.2-1 on F20 on the server, Puppet 3.7.1-1 C6.5 on the client. H. Could the newer client be the problem? On Wednesday, October 1, 2014 1:31:00 PM UTC-4, Henrik Lindberg wrote: On 2014-01-10 19:21, Bret Wortman wrote

Re: [Puppet Users] Could not retrieve catalog from remote server: end of file reached

2014-10-01 Thread Bret Wortman
I guess not. I upgraded the server to match but the problem persists. On Wednesday, October 1, 2014 1:38:16 PM UTC-4, Bret Wortman wrote: We're running through Passenger and Apache. Puppetdb back-end. Puppet 3.6.2-1 on F20 on the server, Puppet 3.7.1-1 C6.5 on the client. H. Could

Re: [Puppet Users] Re: Different modes for directory, contents?

2014-04-18 Thread Bret Wortman
Yep, I saw it this time. I was scanning too quickly the last few times I read that page. Sorry, John. I saw and followed the link, but missed the relevant bit of doco. Thanks again! *Bret Wortman* http://about.me/wortmanbret On Fri, Apr 18, 2014 at 9:39 AM, jcbollinger john.bollin

Re: [Puppet Users] Re: Different modes for directory, contents?

2014-04-17 Thread Bret Wortman
Doesn't this also make the directory itself 644 instead of 755? Maybe I need to play around with it a bit more. *Bret Wortman* http://about.me/wortmanbret On Thu, Apr 17, 2014 at 9:17 AM, jcbollinger john.bollin...@stjude.orgwrote: On Wednesday, April 16, 2014 7:06:53 AM UTC-5, Bret

[Puppet Users] Re: Failed to generate additional resources using 'eval_generate'

2014-03-28 Thread Bret Wortman
Were you able to solve this? It's started happening to me now and I can't for the life of me figure it out On Saturday, March 15, 2014 8:04:01 PM UTC-4, bluethundr wrote: Hey all, I'm getting the following error on only one of my puppet hosts: Error: /File[/var/lib/puppet/facts.d]:

Re: [Puppet Users] Re: How to execute a target action before this one when this one triggers

2014-01-31 Thread Bret Wortman
Here's what I did, and it seems to be working for now: service { 'cups': ensure = running, enable = true, } file { '/etc/cups/printers.conf': require = Package['cups'], ensure = present,

Re: [Puppet Users] Re: How to execute a target action before this one when this one triggers

2014-01-28 Thread Bret Wortman
, as it were. *Bret Wortman* http://about.me/wortmanbret On Tue, Jan 28, 2014 at 9:10 AM, jcbollinger john.bollin...@stjude.orgwrote: On Monday, January 27, 2014 1:50:24 PM UTC-6, Bret Wortman wrote: I'm looking at the case of distributing /etc/cups/printers.conf. When this file

[Puppet Users] How to execute a target action before this one when this one triggers

2014-01-27 Thread Bret Wortman
I'm looking at the case of distributing /etc/cups/printers.conf. When this file changes, I'd like to distribute it. But before placing the new file, cupsd needs to be shut down, and restarted again afterwards. This can be done easily enough using an Exec to shut it down and the existing

[Puppet Users] Variable scoping question

2014-01-17 Thread Bret Wortman
I'm trying to improve my code reuse a bit, and I have some templates that all start with a common case statement to determine a local proxy (I'm simplifying the file slightly for our discussion here): file: proxy.erb % proxy = case @site when a then proxya when b then proxyb when c

[Puppet Users] Re: Variable scoping question

2014-01-17 Thread Bret Wortman
AM UTC-5, Bret Wortman wrote: I'm trying to improve my code reuse a bit, and I have some templates that all start with a common case statement to determine a local proxy (I'm simplifying the file slightly for our discussion here): file: proxy.erb % proxy = case @site when a then proxya

Re: [Puppet Users] How best to distribute yaml file for custom fact?

2013-12-13 Thread Bret Wortman
That seems to do the trick (I went with the site.pp addition). Thanks for your help! *Bret Wortman* http://about.me/wortmanbret On Fri, Dec 13, 2013 at 11:17 AM, Felix Frank felix.fr...@alumni.tu-berlin.de wrote: Hi, I can at least supply a sensible workaround: In your templates

[Puppet Users] How best to distribute yaml file for custom fact?

2013-12-12 Thread Bret Wortman
I have a yaml file I'd like to distribute to my systems, and it contains some identifiers which help determine where that system is (this _can_ be determined from the IP address, but it's so much nicer to use a custom fact -- we're basically assigning names to our various subnets and storing

Re: [Puppet Users] Exported resource resolving oddly

2013-11-21 Thread Bret Wortman
I think you're right. Thanks, John and Ken for helping get me straightened out. *Bret Wortman* http://about.me/wortmanbret On Thu, Nov 21, 2013 at 1:52 PM, jcbollinger john.bollin...@stjude.orgwrote: On Thursday, November 21, 2013 10:29:37 AM UTC-6, Bret Wortman wrote: Wait -- so

Re: [Puppet Users] Exported resource resolving oddly

2013-11-21 Thread Bret Wortman
instead, and changed title to be the actual filename? I'll try that next *Bret Wortman* http://about.me/wortmanbret On Thu, Nov 21, 2013 at 10:53 AM, Ken Barber k...@puppetlabs.com wrote: I'm trying my hand at my first exported resource. In fact, this comes from converting an older

Re: [Puppet Users] Exported resource resolving oddly

2013-11-21 Thread Bret Wortman
The curl command, incidentally, returned nothing on the server, and errored on the client when typed in verbatim. And from the client, when I changed localhost to the name of the puppet master, I got a curl (7): couldn't connect to host error. I'll try Zach's tool next. *Bret Wortman* http

Re: [Puppet Users] Exported resource resolving oddly

2013-11-21 Thread Bret Wortman
of exported resources. I think what I was looking for was virtual, not exported, resources. *Bret Wortman* http://about.me/wortmanbret On Thu, Nov 21, 2013 at 11:15 AM, Bret Wortman b...@thewortmans.org wrote: The curl command, incidentally, returned nothing on the server, and errored

[Puppet Users] Exported resource resolving oddly

2013-11-21 Thread Bret Wortman
I'm trying my hand at my first exported resource. In fact, this comes from converting an older resource to an exported one, which might explain the problem Currently, I have two classes: class yum { File | tag == 'repofile' | ~ Exec['yum clean all'] : } class yum::foo { include

Re: [Puppet Users] Re: Managing account shells with augeas

2013-11-14 Thread Bret Wortman
give this a second try shortly, though. Thanks! *Bret Wortman* http://about.me/wortmanbret On Wed, Nov 13, 2013 at 2:47 PM, David Lutterkort lut...@puppetlabs.comwrote: On Wednesday, November 13, 2013 11:23:15 AM UTC-8, Bret Wortman wrote: Next fun topic for today: our security folks

[Puppet Users] Accessing hash values in defined type

2013-11-13 Thread Bret Wortman
I'm sure this is so simple I'm just not seeing it. I have an array of hashes of filenames modes defined in hiera (the actual problem is a tad more complex, but for simplicity, if I can solve this, I can solve the bigger problem): files: - name: /etc/skel/.bashrc mode: 600 - name:

[Puppet Users] Re: Accessing hash values in defined type

2013-11-13 Thread Bret Wortman
November 2013 12:57:35 UTC, Bret Wortman wrote: I'm sure this is so simple I'm just not seeing it. I have an array of hashes of filenames modes defined in hiera (the actual problem is a tad more complex, but for simplicity, if I can solve this, I can solve the bigger problem): files

[Puppet Users] Managing account shells with augeas

2013-11-13 Thread Bret Wortman
Next fun topic for today: our security folks want to change all the /sbin/nologin and related shells to /dev/null. Augeas seems the perfect tool for this, but I'm having a devil of a time getting close to something that'll work: augeas { 'fix-bad-passwd-shells': context =

[Puppet Users] hiera config oddness

2013-09-30 Thread Bret Wortman
am asking for? It sure feels like I'm picking up an incorrect config file somewhere, but I'm not sure where to look or what logfile to examine next. Thanks! * * *Bret Wortman* http://damascusgrp.com/ http://about.me/wortmanbret -- You received this message because you are subscribed

[Puppet Users] System manifests parse order

2013-09-26 Thread Bret Wortman
doing this now, but have discovered that quite often, the group manifest gets used in preference to the individual manifest. How can I reverse this behavior? Is it even possible? * * *Bret Wortman* http://damascusgrp.com/ http://about.me/wortmanbret -- You received this message because you

Re: [Puppet Users] Re: Array use as loop-type construct?

2013-07-29 Thread Bret Wortman
Oh. I've never really grokked the defined type stuff. I can see now I need to dig in and make sense of it. Thanks, John! * * *Bret Wortman* http://damascusgrp.com/ http://damascusgrp.com/ http://bretwortman.com/ http://about.me/wortmanbret On Mon, Jul 29, 2013 at 1:19 PM, jcbollinger

[Puppet Users] Re: Array use as loop-type construct?

2013-07-24 Thread Bret Wortman
= 1, minute = 20, require = File['backup-script'], } On Tuesday, July 23, 2013 1:32:43 PM UTC-4, Bret Wortman wrote: I'm trying to use a puppet manifest to set up a series of backup jobs on servers which are each running a variety of mysql databases. My manifest currently looks

[Puppet Users] Array use as loop-type construct?

2013-07-23 Thread Bret Wortman
I'm trying to use a puppet manifest to set up a series of backup jobs on servers which are each running a variety of mysql databases. My manifest currently looks something like this, which almost works: class backups () { Cron { ensure = present, user = root, }

[Puppet Users] How to indicate multiple dependency?

2013-05-08 Thread Bret Wortman
{ 'pkg2': } Package['pkg2'] - File['file2'] : : file { 'file2': path = '/path/to/file2', : } There must be a better way that I'm just not seeing. Thanks! Bret Wortman -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from

Re: [Puppet Users] Trouble writing authorized_keys2

2013-05-08 Thread Bret Wortman
Bret Wortman bret.w...@damascusgrp.com javascript: wrote: I've got a situation where a manifest fails when writing one particular key for a user. What I have is a manifest that looks like this: class my::accounts () { Ssh_authorized_key { ensure = present

[Puppet Users] Re: How to indicate multiple dependency?

2013-05-08 Thread Bret Wortman
On Wednesday, May 8, 2013 9:09:34 AM UTC-4, jcbollinger wrote: On Wednesday, May 8, 2013 5:52:44 AM UTC-5, Bret Wortman wrote: What's the right/best way to indicate that a particular entry in a manifest (a file in this case) depends on successful installation of over 30 packages, all

Re: [Puppet Users] How to indicate multiple dependency?

2013-05-08 Thread Bret Wortman
, pmbuko wrote: On May 8, 2013, at 6:52 AM, Bret Wortman bret.w...@damascusgrp.comjavascript: wrote: What's the right/best way to indicate that a particular entry in a manifest (a file in this case) depends on successful installation of over 30 packages, all indicated in the same manifest? I

[Puppet Users] Trouble writing authorized_keys2

2013-05-07 Thread Bret Wortman
! * * *Bret Wortman* http://damascusgrp.com/ http://damascusgrp.com/ http://bretwortman.com/ http://twitter.com/BretWortman -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email

[Puppet Users] How to have one file depend on many packages

2013-05-07 Thread Bret Wortman
Here's a puzzler (though I'm sure the answer is obvious and I'm just not seeing it): I have a manifest where I'm listing about 40-50 packages that I want the system to remove, and a file that I want to create only after successful removal of all the packages. What's the best way to show this

Re: [Puppet Users] Certificate nightmares

2013-02-11 Thread Bret Wortman
6, 2013 10:23:28 AM UTC-8, Bret Wortman wrote: My test node doesn't have its certs either. I've now started puppetmaster in verbose mode: # puppet master --no-daemonize --verbose : : : Info: Could not find certificate for 'nodename.my.net' Info: Could not find certificate

Re: [Puppet Users] Certificate nightmares

2013-02-11 Thread Bret Wortman
It was. I filed it away for future reference! * * * Bret Wortman*** http://bretwortman.com/ http://twitter.com/BretWortman On Mon, Feb 11, 2013 at 7:55 AM, Nikola Petrov nikol...@gmail.com wrote: I think this should be put somewhere in a wiki or the docs. /me referencing this email

[Puppet Users] Re: Best way for conditional dependency?

2013-02-06 Thread Bret Wortman
freeipa-client. That way, the ordering is only in place when you include the user class. On Tuesday, February 5, 2013 11:21:30 AM UTC-7, Bret Wortman wrote: I have a situation where I have a module which manages some user accounts which, if required by a system, need to be physically present

[Puppet Users] Certificate nightmares

2013-02-06 Thread Bret Wortman
I think I really hosed my certificates somehow this morning trying to get PuppetDB and Puppet talking again -- here's where I stand. My Puppet master and PuppetDB are again talking, or at least, aren't complaining about communication. From my puppet master, I can run puppet agent -t, and it

Re: [Puppet Users] Certificate nightmares

2013-02-06 Thread Bret Wortman
not be listening. On Wed, Feb 6, 2013 at 7:44 AM, Bret Wortman br...@thewortmans.orgjavascript: wrote: I think I really hosed my certificates somehow this morning trying to get PuppetDB and Puppet talking again -- here's where I stand. My Puppet master and PuppetDB are again talking, or at least

Re: [Puppet Users] Certificate nightmares

2013-02-06 Thread Bret Wortman
:07:43 PM UTC-5, Bret Wortman wrote: Yeah, It is running (though I had been assuming that -- thanks for prompting me to check!); puppet agent -t works when run on the master, but only there. And I can see the requests hitting in the /var/log/puppet/masterhttp.log file: [2013-02-06 12:04:55

Re: [Puppet Users] Certificate nightmares

2013-02-06 Thread Bret Wortman
My test node doesn't have its certs either. I've now started puppetmaster in verbose mode: # puppet master --no-daemonize --verbose : : : Info: Could not find certificate for 'nodename.my.net' Info: Could not find certificate for 'nodename.my.net' Info: Could not find certificate for

[Puppet Users] Best way for conditional dependency?

2013-02-05 Thread Bret Wortman
I have a situation where I have a module which manages some user accounts which, if required by a system, need to be physically present on that box. I have another module which sets up freeipa-client for all systems. The catch is that when the first module is present, it needs to be installed

[Puppet Users] F18 import error?

2013-01-18 Thread Bret Wortman
Should I be concerned? [root@fs1 ~]# cobbler import --name=F18 --path=rsync://mirrors.kernel.org/fedora/releases/18/Fedora/x86_64/os --arch=x86_64 task started: 2013-01-18_062009_import task started (id=Media import, time=Fri Jan 18 06:20:09 2013) Found a redhat compatible signature: Packages

Re: [Puppet Users] Converting puppet client to servr

2012-12-13 Thread Bret Wortman
the distribution problem, I'll take on keeping these boxes in sync. * * * Bret Wortman*** http://bretwortman.com/ http://twitter.com/BretWortman On Thu, Dec 13, 2012 at 5:15 AM, Luke Bigum luke.bi...@lmax.com wrote: On Wednesday, December 12, 2012 10:35:21 PM UTC, Bret Wortman wrote: Yeah, I

[Puppet Users] Converting puppet client to servr

2012-12-12 Thread Bret Wortman
Is there an easy way to convert a puppet client into being a puppet master? Here's the scenario. I'm using puppet to configure all my systems, and would like it to be able to deploy a new puppet master as well. We have systems worldwide so having local puppet masters is very desirable for

Re: [Puppet Users] Converting puppet client to servr

2012-12-12 Thread Bret Wortman
Yeah, I was starting to think that was the solution. -- Bret Wortman http://bretwortman.com/ http://twitter.com/bretwortman On Wednesday, December 12, 2012 at 5:26 PM, Jakov Sosic wrote: On 12/12/2012 10:04 PM, Bret Wortman wrote: Is there an easy way to convert a puppet client

Re: [Puppet Users] augtool/augeas doesn't work in f17?

2012-12-10 Thread Bret Wortman
On Monday, December 10, 2012 1:51:46 PM UTC-5, Bret Wortman wrote: On Monday, December 10, 2012 8:34:17 AM UTC-5, Dominic Cleal wrote: On 07/12/12 11:56, Bret Wortman wrote: Even in interactive mode, I get nothing out of augtool! What should I look at to see why this is failing? Syslog

[Puppet Users] augtool/augeas doesn't work in f17?

2012-12-07 Thread Bret Wortman
I've installed the augeas rpm (0.10.0-3.fc17.x86_64) to troubleshoot a problem I was having with augeas and ensuring a line existed in /etc/cron.allow. I think something's up because neither the augeas within my manifest nor the augtool are accomplishing much of anything: # augtool print

  1   2   >