I hate this bug. This is actually just cosmetic. There are two easy ways to
fix it.
1) Set puginsync to false on every client. (Using puppet)
2) Setup an plugin folder.
I recommend just using 1 for now, and dealing with it later since it's just a
cosmetic bug until you try to use plugins.
A
On Apr 25, 2010, at 11:32 AM, Yann wrote:
> Hello, I am trying to create a VM using puppet and vmbuilder. I've got
> the following declaration (now very simplified):
>
> define virtual_machine ($ip) {
>exec {"create_vm_${name}":
>command => "/usr/bin/vmbuilder kvm ubuntu -d CNDR -v -
On Apr 24, 2010, at 3:26 AM, Christian Kauhaus wrote:
> Am 24.04.2010 01:02, schrieb Douglas Garstang:
>> I need to pass sensitive options, ie passwords, on the command line,
>> and don't want them to appear in log files.
>
> I think doing so is generally a bad idea. Command line arguments are
>
On Apr 23, 2010, at 7:15 AM, CraftyTech wrote:
> On Apr 23, 7:24 am, Daniel Pittman wrote:
>> CraftyTech writes:
>>> I'm new to puppet, and I'd like to know: Is there a formal best practices
>>> guide for syncing { /etc/passwd, shadow, group, hosts} across clients from
>>> the master?
>>
>> Yo
ool. Will this passthrough CA requests? Here's an example:
Lets call the first puppetmaster CA.
Call the second puppetmaster Backup.
A client with a default puppet.conf that doesn't have a valid cert connects to
Backup. Will the client get a valid cert that will work on both mas
On Apr 21, 2010, at 3:59 PM, Brian Lam wrote:
> I apologized ahead of time if this post shouldn't go here but I having
> been knocking my heading for the last two days trying to get over the
> following error while trying to "clone" my primary puppetmasterd
> because we have outgrown one puppetmas
On Apr 21, 2010, at 12:01 PM, Kim Gert Nielsen wrote:
>
> On Apr 21, 2010, at 8:50 PM, Patrick wrote:
>
>>
>> Is restarting puppet using itself supported? I had always assumed it wasn't.
>>
>
> I got the example long time ago from example42 and they
On Apr 21, 2010, at 5:51 AM, Ken wrote:
> More data is needed I think.
>
> Can you run puppetd --no-daemonize --debug in 'screen' or by piping
> the output somewhere? It may give you a better clue.
First, it think your saying that the client is crashing or hanging.
My advice would be to do th
On Apr 21, 2010, at 11:43 AM, Kim Gert Nielsen wrote:
>
> On Apr 21, 2010, at 2:51 PM, Ken wrote:
>
>> More data is needed I think.
>>
>> Can you run puppetd --no-daemonize --debug in 'screen' or by piping
>> the output somewhere? It may give you a better clue.
>>
>
> debug: Service[puppet](
On Apr 21, 2010, at 11:30 AM, Jewels wrote:
> I have a problem I can't figure out. I was having cert problems with a
> host - it seemed to have multiple host names (mot likely from dns
> changes in the past) and all the certs were valid. Although it was
> giving an error about a cert I could not
On Apr 18, 2010, at 1:55 AM, Daniel Pittman wrote:
>> Any ideas as to why ruby-devel was not able to install properly during first
>> run?
>
> Nope. I can tell you right now that it isn't a puppet problem, though.[1]
>
> The problem is that puppet executed ...
>
>/usr/bin/yum -d 0 -e 0 -y
google.com/group/puppet-users/browse_thread/thread/60413b96a3bd3843/fbe7aafe140a0b0b?hl=en&lnk=gst
-Patrick
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To u
ng puppetd --test thru rc.local and since my puppetmaster is
> configured to autosign, hence I need this first run of puppetd --test to get
> the job done. As entire setup is automated so I can't wait for multiple runs
> of puppet before everything gets installed properly. I
On Apr 14, 2010, at 8:44 AM, Jeff McCune wrote:
> On Wednesday, April 14, 2010, Dick Davies wrote:
>> I'm getting a lot of 'connection reset' errors all of a sudden on our
>> 0.24.8 puppetmaster.
>> I'm assuming that's a load issue?
>>
>> Number of nodes has been stable for a month or so, but a
On Apr 13, 2010, at 3:09 PM, SyRenity wrote:
> Hi.
>
> Are there any DNS recipes for puppet?
>
> Thanks.
DNS server or client? If server, what server?
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to pup
On Apr 13, 2010, at 3:26 PM, SyRenity wrote:
> Hi.
>
> I asked this question in past on this list, and now working to set it
> running.
>
> My idea is to have 2 Puppet servers, who are also the DNS servers.
> Each one would have itself as the puppet hostname.
> Both of the servers will pull the
It looks to me like yum itself is broken. Try installing something using the
yum command-line client.
On Apr 12, 2010, at 7:24 PM, dbs wrote:
> Okay, I'm stymied. I set up a rule to kick a new .repo file out to
> my
> clients into /etc/yum.repos.d/ called 'lwm.repo'.
>
> The rule says:
> clas
On Apr 8, 2010, at 11:11 PM, chakkerz wrote:
> G'day all
>
> I've got the following two lines in my site.pp:
>
> # Define the bucket
>filebucket { main: server => puppet }
>
> # Specify it as the default target
>File { backup => main }
>
> Which I added based on something in t
so with a
> require => File["/etc"],
>
> That way your /etc/ from your preferred source is there, and
> subsequent files can write into it.
>
> Now ... i don't recall if the recursive replace removes everything
> first, but i think it does, which really i
t;
+1 to this. Almost all the computers I manage have pretty simple
configurations, but it's nice to know that with 4 commands I can wipe
everything and bring it back to a known state. I use a tftpinstall+preseeding
for ubuntu. Then puppet finishes the job. My usecase is probably differen
es anytime without being dependant on external servers).
>
> Is this what you want? Any suggestions for improvements?
>
It sounds like we have very different ideas how this should work.
For me, an ideal module would use the the schedule argument, and not have
anything to do with cron.
On Apr 4, 2010, at 3:14 AM, Peter Meier wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>>augeas{"samba-global2":
>>context => "/files/etc/samba/smb.conf/
>> target[.='global']",
>>changes => [
>>"set workgroup MSHOME",
>
I second this. Puppet will load the whole file into ram, and puppet never
deallocates memory. It's almost always better to move big files by putting
them into a package or using an "Exec" type with "creates."
On Apr 7, 2010, at 10:21 AM, Daniel Kerwin wrote:
> Not sure about a limit but pupp
le to help you much unless you have at least
--verbose turned on.
I ended up solving the problem the other way. I pulled the Lucid puppet and
factor packages backwords. I did have a backup ready though.
> On 5 avr, 05:18, Patrick wrote:
>> On Apr 4, 2010, at 8:29 PM, h3 wrote:
>>
. If it can't, make sure they connect
sequentially.
On Apr 4, 2010, at 10:23 PM, jatinderg...@gmail.com wrote:
> Around 70
> Sent via BlackBerry by AT&T
>
> -Original Message-
> From: Patrick
> Date: Sun, 4 Apr 2010 22:22:10
> To:
> Subject: Re: [Pup
s version on
> fly if needed. So maybe I need to use that tool you are talking about ?
>
How many is "a bunch"? 5, 30, 100, 1000?
>
> -Original Message-
> From: Patrick
> Date: Sun, 4 Apr 2010 21:43:45
> To:
> Subject: Re: [Puppet Users] How to push
On Apr 4, 2010, at 7:00 PM, JT wrote:
> I am trying push configuratioin from the server. Here is the simple
> config
>
> node 'client.master.com' {
> package { 'curl': ensure => present
> }
> }
>
> -bash-3.2#puppet site.pp
> dnsdomainname: Unknown host
> Could not find default node or by name w
On Apr 4, 2010, at 8:29 PM, h3 wrote:
> I have a puppet master running on a Ubuntu Hardy. I have some other
> Ubuntu servers and clients ranging from hardy to karmic that works
> fine.
>
> Now I've setuped a fresh Lucid Lynx install (10.04) and I can't get a
> certificate for it:
>
> Client:
>
On Apr 4, 2010, at 3:14 AM, Peter Meier wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>>augeas{"samba-global2":
>>context => "/files/etc/samba/smb.conf/
>> target[.='global']",
>>changes => [
>>"set workgroup MSHOME",
>
On Apr 4, 2010, at 3:14 AM, Peter Meier wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>>augeas{"samba-global2":
>>context => "/files/etc/samba/smb.conf/
>> target[.='global']",
>>changes => [
>>"set workgroup MSHOME",
>
After upgrading to puppet 0.25.4, I have not been able to get Augeas
recipes to work if the path has a space. Here's an example:
class samba-server {
augeas{"samba-global2":
context => "/files/etc/samba/smb.conf/
target[.='global']",
changes => [
esudo-code):
Exec { "wget http://servername/ruby-enterprise_1.8.7-2010.01_amd64.deb":
creates => "/root/puppet-setup/ruby-enterprise_1.8.7-2010.01_amd64.deb",
working_path => "/root/puppet-setup/",
}
-Patrick Mohr
On Apr 2, 2010, at 5:23 AM, Marce
On Mar 19, 2010, at 5:05 PM, Douglas Garstang wrote:
> On Fri, Mar 19, 2010 at 4:51 PM, Patrick wrote:
>>
>> On Mar 19, 2010, at 4:36 PM, Douglas Garstang wrote:
>>
>>> I've already broken it down as much as I can. The bottom class is
>>> calli
On Mar 19, 2010, at 4:36 PM, Douglas Garstang wrote:
> I've already broken it down as much as I can. The bottom class is
> calling the same definition 10 times to set up 10 instances of jboss
> on a single system, and another definition is running 10 times to
> setup 10 instances of tomcat on the
On Mar 19, 2010, at 4:19 PM, Douglas Garstang wrote:
> My node manifests are getting rather large.
>
> Is there a way I can inline include a file into a node manifest? I'd
> like to break the node manifest into smaller parts. Note, this is NOT
> a module include I am looking for.
I don't know ho
On Mar 18, 2010, at 12:24 PM, Thomas wrote:
> Looking into it more, I think I found the root of the problem. The
> following is a snippet from my puppet configuration:
>
> # create /var/log/mysql/archived_logs
> file { "archived_logs":
> path=> "/var/log/mysql/archive
that gets configured
> on my system?
>
>require => [ Class["yum"],
>
> On Tue, Mar 9, 2010 at 5:51 PM, Patrick wrote:
>
> On Mar 9, 2010, at 5:26 AM, Christopher Johnston wrote:
>
> > For example I have a yum module that sets y
On Mar 15, 2010, at 8:26 AM, Ohad Levy wrote:
> ssl has nothing to do with mongrel or passenger, as ssl is handled in apache
> (or ngnix).
>
> as far as it goes for SSL, you have two options:
> 1. a single CA
> 2. CA chain hierarchy.
>
> the first option is simple, one of your puppetmasters wi
On Mar 12, 2010, at 3:30 AM, DieterVDW wrote:
> The problem is, I -am- using apt!
> Those files are downloaded and installed using apt, I just want puppet
> to make sure they are owned by a certain user and group.
> That's the only thing puppet needs to do.
>
I didn't read the bug report before
On Mar 12, 2010, at 1:18 AM, DieterVDW wrote:
> I just want this resource to make sure that all files in the directory
> are owned by user and group $username.
> /some/data/dir contains 300M in 6000+ files.
>
Puppet doesn't handle a folder with lots of files well. It handles large files
even
On Mar 10, 2010, at 6:54 AM, Brian Keifer wrote:
>
> On Mar 9, 2010, at 5:50 PM, Patrick wrote:
>
>>
>> On Mar 9, 2010, at 1:59 PM, Brian Keifer wrote:
>>
>>>
>>> On Mar 9, 2010, at 4:57 PM, Patrick wrote:
>>>
>>>>
>>
On Mar 9, 2010, at 1:59 PM, Brian Keifer wrote:
>
> On Mar 9, 2010, at 4:57 PM, Patrick wrote:
>
>>
>> On Mar 9, 2010, at 6:36 AM, Brian Keifer wrote:
>>
>>>
>>> On Mar 9, 2010, at 12:17 AM, Dan Bode wrote:
>>>
>>>>
On Mar 9, 2010, at 11:41 AM, Mathew Binkley wrote:
> Hi everyone. I am trying to manage several different packages using
> Puppet. For the sake of maintainability, each package is installed in
> its own separate puppet directory. Each package would have a separate
> install_package.pp script a
get between 3 and 9 of these errors each time, always a different subset of
> my files. These same files serve properly to my other two clients.
>
> I don't get it.
This might be related to http://projects.reductivelabs.com/issues/3083. Try
using "puppetca --list --all" on the serve
On Mar 9, 2010, at 5:26 AM, Christopher Johnston wrote:
> For example I have a yum module that sets yum configs up, but obviously I
> have other modules that depend on the installation of that yum module in
> order to use it to install rpms.
I do the same thing with apt. To solve this, I set
of the command I
>> would probably go with
>>
>> unless => "test -e MYFILE"
>>
>> If you use "test" you could also do more sophisticated things like
>> require the presence of a real file with "-f" an
On Mar 4, 2010, at 2:16 PM, James Turnbull wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On 4/03/10 1:35 PM, Patrick wrote:
>> You can find the SSL problem at
>> http://projects.reductivelabs.com/issues/3083. I can't upgrade
>> until it'
On Mar 4, 2010, at 12:11 PM, James Turnbull wrote:
> On 4/03/10 11:55 AM, Douglas Garstang wrote:
>> All I can is Ugh.
>>
>> I'm avoiding 0.25 like the plague. The last time I tried to use it, I
>> simply couldn't the SSL keys to work, and from what I read, others did
>> too. Were those problems
On Mar 4, 2010, at 11:55 AM, Douglas Garstang wrote:
> All I can is Ugh.
>
> I'm avoiding 0.25 like the plague. The last time I tried to use it, I
> simply couldn't the SSL keys to work, and from what I read, others did
> too. Were those problems fixed?
>
> Doug.
The problem that most people w
On Mar 4, 2010, at 7:29 AM, Allan Marcus wrote:
> A file that this command creates. If this
>parameter is provided, then the command will only be run
>if the specified file does not exist::
>
>exec { \"tar xf /my/tar/file.tar\":
>
On Mar 4, 2010, at 3:07 AM, Tim wrote:
> I'm an idiot..
>
> I had actually hard coded $servername into the source statement
>
> source => "puppet://$servername/users/authkeys/$name".
>
> Once I had swapped that out for the other interface name, everything
> else started to work fine!
>
Why
On Mar 1, 2010, at 6:02 PM, foilpan wrote:
> thanks nigel and james. i'm actually reading notes passed along by
> another list member, watching the macworld 2008 presentation from
> nigel and jeff, and have the "pulling strings" book here for
> reference.
>
> i needed ruby 1.9.1 for a class i to
On Feb 25, 2010, at 11:23 AM, Marcello de Sousa wrote:
> Patrick,
>
> If you do that you would put all the public keys together, wouldn't you ?
> That means users would be able to login as any other user. That is of course
> not what you want.
>
> We need to deploy a
What about deploying the keys to /etc/skel? Would that be enough for what you
want?
On Feb 25, 2010, at 8:47 AM, Marcello de Sousa wrote:
> Hi Andrew,
>
>>> "IF homedir exists => deploy .ssh/authorized_keys , else do nothing"
>>> As far as I know this is not possible with puppet.
>>
>> Marce
The only explanation that I can find that explains the problems that I and a
few other user have been having is that 0.25.x adds a security feature that
makes it needed during the creation of client certificates. (Either that or
during the signing or retrieval of the certificates.) It could be
On Feb 22, 2010, at 9:34 PM, Nobuchika Tanaka wrote:
>
> err: Could not resolve 10.72.150.56: undefined method `include?' for
> nil:NilClass
> err: Could not resolve 10.72.150.56: undefined method `include?' for
> nil:NilClass
> info: Could not find certificate for 'sol10tst1'
> err: Could not re
eard that's fixed in 0.25.x.
-Patrick Mohr
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...
try for
> the client.
>
> Does that help?
>
That's very helpful. I've been pulling my hair out trying to figure
out what's wrong. Our clients are behind a NATed VPN that the server
can't see through. (Long story. Don't ask.) This should be enough
information
puppet or something else?
I'm hoping that if I can figure out what works for you, I'll have a
place to start.
-Patrick
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-us...
This probably isn't exactly what you're looking for, but that's covered at
http://reductivelabs.com/trac/puppet/wiki/MultipleCertificateAuthorities along
with other stuff to increase security. I haven't done it myself, but it would
be a bit of work.
-Patrick
On Feb 7, 20
On Feb 5, 2010, at 11:38 AM, Patrick wrote:
>
> 2) DNS: My setup was small and simple, so I've been using dnsmasq for DNS and
> DHCP. Dnsmasq doesn't support cnames so the auto-generated cert name on the
> puppetmaster doesn't work. I suggest that all autogenera
would be a shell script that uses ssh to login
to the server as root and does the same thing using the openssl command.
5) Error ambiguity: sometimes it's hard to tell if an error is happening on the
client-side or server-side.
-Patrick
--
You received this message because you are subscribed
Thought this might interest the list:
the video of the excellent talk by Teyo Tyree at www.devopsdays.org is
now available:
video - http://blip.tv/file/3023407
slides - http://www.devopsdays.org/ghent09/programme
Enjoy!
--
You received this message because you are subscribed to the Google G
FYI: for those looking for examples and more discussions.
I've put my collection of infrastructure testing links online:
http://www.jedi.be/blog/2009/11/12/collection-of-test-driven-infrastructure-links/
--~--~-~--~~~---~--~~
You received this message because yo
for what it's worth:
for a while I was experimenting with cucumber to test scripts running
on linux machines. And yes , IMHO it is the way to go .
It worked well with the behavior testing just a you guys described.
still just as in regular development, bdd can be complemented with
tdd.
The way i
be installed even a earlier version was
not installed before.
Are there maybe better tools for our case?
Patrick
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this
Bruce Richardson wrote:
> On Tue, Mar 17, 2009 at 10:48:23AM +0100, Patrick Debois wrote:
>
>>> The only sure way to control what is pushed/pulled to your systems is to
>>> maintain a local package mirror. Then you can make sure that only
>>> the packages y
Bruce Richardson wrote:
> On Tue, Mar 17, 2009 at 09:15:59AM +0100, Patrick Debois wrote:
>
>> Sorry if this might be slightly off topic here. But it might be you have
>> encountered a similar problem.
>>
>
> The only sure way to control what is pushe
ans update until the latest version, and i find it a hassle to specify
each version of the package everytime it changes.
Sorry if this might be slightly off topic here. But it might be you have
encountered a similar problem.
Thanks
Patrick
--~--~-~--~~~---~--
Lets say that one defines a group resource sans the ensure=>"present"
statement, and also neglects to put any require=>Group["foo"] statements
into any other resources. Will this resource have any effect?
-Patrick
P.S.
I realize now after typing up the question that th
601 - 670 of 670 matches
Mail list logo
