Re: [Puppet Users] puppet terminating - continually forcing itself to stop

2011-07-11 Thread Chris Phillips
On 5 July 2011 16:26, Chris Phillips ch...@untrepid.com wrote: On 5 July 2011 14:24, Martin Alfke tux...@gmail.com wrote: On 07/05/2011 03:19 PM, Brian Gallew wrote: I was seeing the behavior on my Solaris boxes when running Puppet under SMF. The issue, in my case, was that I was trying

[Puppet Users] Re: Explanation of the metric section of a report

2011-07-11 Thread Luke Bigum
puppetd --test --evaltrace may also tell you which resources are taking longer than others, narrowing down the problem. I don't have any large manifests at the moment so I'm not sure if evaluation time is the same as 'do all the work' time. On Jul 9, 5:28 pm, Nigel Kersten ni...@puppetlabs.com

Re: [Puppet Users] Re: A working firewall module

2011-07-11 Thread Ronen Narkis
Just did, Thank you! Ronen On Mon, Jul 11, 2011 at 1:50 AM, Ken Barber k...@puppetlabs.com wrote: Hi Ronen, Making the rules persistent is a matter of running iptables-save afterwards. If you drop this in your top scope it should work: exec { persist-firewall: command = $operatingsystem

[Puppet Users] Re: use puppet to manage user accounts on mysql

2011-07-11 Thread ew
++1 On Jul 10, 7:13 pm, Nigel Kersten ni...@puppetlabs.com wrote: This looks like a good opportunity for the various mysql module authors to all get together and produce one single awesome module :) On Sun, Jul 10, 2011 at 3:49 AM, Andrew Thompson netengr2...@gmail.comwrote: Take a

Re: [Puppet Users] Re: A working firewall module

2011-07-11 Thread Ronen Narkis
Hey Alessandro the module works well, one issue that I had is that once rules were applied the iptables service wasn't restarted, iv dug through the code and indeed saw the notify under rule.pp: concat::fragment{ iptables_rule_$name: target = ${iptables::params::configfile},

Re: [Puppet Users] puppet terminating - continually forcing itself to stop

2011-07-11 Thread Dominic Cleal
On 11/07/11 09:18, Chris Phillips wrote: Coming into work this morning I've seen a bunch of func processes have stopped and puppet is doing nothing at all about it, despite a manifest advising something else: Manifest says - service { funcd: ensure = running, enable

Re: [Puppet Users] Re: A working firewall module

2011-07-11 Thread Al @ Lab42
Thanks for the feedback and the bug report, Ronen. I'll check it.. On Monday, July 11, 2011 3:28:27 PM UTC+2, Ronen wrote: Hey Alessandro the module works well, one issue that I had is that once rules were applied the iptables service wasn't restarted, iv dug through the code and indeed saw

[Puppet Users] err: Could not retrieve catalog from remote server: certificate verify failed

2011-07-11 Thread valigula
Hi All, I have spent couple of days trying to work-out this problem with not luck. I am working on a Linux Fedora 14. I ssh from the server to the client using teh IP with no problem. Client: # puppetd --server puppet --waitforcert 60 --test --verbose info: Creating a new SSL key for bar03

[Puppet Users] Puppet 2.6 + Centos 6.0 + manages_members

2011-07-11 Thread Bardack
Hi all, I encounter a really strange issue which seems to happen only on Centos 5 ... which is not the case. I have a file located in: /etc/puppet/modules/onp_groups/s633.pp: class onp_groups::s633 { group { 's633': gid = 2633, members

Re: [Puppet Users] puppet terminating - continually forcing itself to stop

2011-07-11 Thread Chris Phillips
On 11 July 2011 14:54, Dominic Cleal dcl...@redhat.com wrote: On 11/07/11 09:18, Chris Phillips wrote: Coming into work this morning I've seen a bunch of func processes have stopped and puppet is doing nothing at all about it, despite a manifest advising something else: Manifest says -

Re: [Puppet Users] A working firewall module

2011-07-11 Thread Brian Gupta
On Sun, Jul 10, 2011 at 12:15 PM, Ronen Narkis nark...@gmail.com wrote: Iv been going through a multitude of firewall modules not being able to find a simple module that open and closes ports on Redhat/Centos 5.6 All the modules that iv tried keep open ports multiple times (each time puppet

[Puppet Users] all classes applied to every node

2011-07-11 Thread Zach
Hi all, I'm noticing that all classes I have created are being applied to every node, even ones that don't specifically include them. There is no inheritance occurring that would allow this to happen. I've been reading docs and couldn't find anything about this... Am I missing something

[Puppet Users] How to avoid the use of defined

2011-07-11 Thread Arnaud Gomes-do-Vale
Hi folks, This is a best practices question as much as a technical one. I am trying to redefine variables when I include a specific class. The use case is installing php 5.3 on a few select centos 5 boxes while keeping the default php 5.1 install on others. Here is the relevant part of my apache

[Puppet Users] Registration for PuppetConf is now open!

2011-07-11 Thread James Turnbull
Registration for PuppetConf (http://www.puppetconf.com ) is now open and the first 50 registrants will receive a free copy of Pro Puppet! We've got an awesome lineup of speakers [http://www.puppetconf.com/speakers] speaking on DevOps/Operations, Cloud Computing, and Puppet. The conference

Re: [Puppet Users] Explanation of the metric section of a report

2011-07-11 Thread Haitao Jiang
Nigel Thanks for your reply. I used --evaltrace suggested by Luke and found that all my time spent on File resources, these are jar files that are MB in size. Further question: - If Puppet just check the file metadata before decided on whether to download the file from master or not, why it

Re: [Puppet Users] Bizarre errors from puppetmaster 2.7.1

2011-07-11 Thread Michael Halligan
Verified that this seems to go away in 2.7.2. On Sun, Jul 10, 2011 at 9:48 AM, Nigel Kersten ni...@puppetlabs.com wrote: On Sun, Jul 10, 2011 at 9:22 AM, Jacob Helwig ja...@puppetlabs.comwrote: That does look an awful lot like the storedconfig bug (#4487). The fix prevented this from

Re: [Puppet Users] Explanation of the metric section of a report

2011-07-11 Thread Nigel Kersten
On Mon, Jul 11, 2011 at 10:08 AM, Haitao Jiang jianghai...@gmail.comwrote: Nigel Thanks for your reply. I used --evaltrace suggested by Luke and found that all my time spent on File resources, these are jar files that are MB in size. Further question: - If Puppet just check the file

Re: [Puppet Users] Explanation of the metric section of a report

2011-07-11 Thread Haitao Jiang
Nigel Thanks a lot! Yes, I did find other options of checksum. However, after I changed the checksum type to mtime for jetty jar, Puppet now gave me error and can not recover itself: info: /Stage[main]/Emb/File[/opt/jetty-distribution-7.4.2.v20110526.tar.gz]: Filebucketed

[Puppet Users] Re: Issue with puppet file serving api not parsing yaml content correctly

2011-07-11 Thread Derek
Thanks for everyone's help. I figured out what the issue was over the weekend. It appears that when the ruby script is run in a puppet run, puppet loads the yaml dictionaries specific to puppet. However, when I was testing the script in ruby I was not loading the yaml dictionaries for puppet. This

[Puppet Users] Can't switch checksum method?

2011-07-11 Thread Haitao Jiang
I have a File resource and it was default to use md5 checksum. Now, I want to change it to use md5lite (or mtime, same error), I got following error: Any suggestion on how to get rid of this error (switch the checksum method)? info: FileBucket got a duplicate file

[Puppet Users] Re: use puppet to manage user accounts on mysql

2011-07-11 Thread newguy
Hey Guys Thanks for this help but I am stuck at a point which might sound lame but is creating problem, I got the above stated mysql puppet riseup module in my module path but I fail to understand where should I write this: mysql_user { username@host: ensure = present,

Re: [Puppet Users] err: Could not retrieve catalog from remote server: certificate verify failed

2011-07-11 Thread Denmat
Hi, Yep it could be. Does --server 'puppet' resolve to the puppet master? For SSL to work you need the following: * port 8140 open * certnames to valid and matching DNS resolution (or what is specified in puppet.conf if declared). * clock to be synced. Use openssl s_client to verify and

Re: [Puppet Users] all classes applied to every node

2011-07-11 Thread Denmat
Hi, Sounds like they are being included somewhere in your manifest. I've had similar issues when one of my tests was failing, eg: if $something { include someclass } else { include otherclass } You can try to look at the --graph option to see if that helps track it down. See the FAQ for more

[Puppet Users] Re: err: Could not retrieve catalog from remote server: certificate verify failed

2011-07-11 Thread valigula
Hi, thanks for your reply. The server name resolves to the puppetmaster ( i added the entry in the /etc/hosts ) , the openssl also works, but does not when i use the key. Still investigating. Thanks On 11 jul, 23:03, Denmat tu2bg...@gmail.com wrote: Hi, Yep it could be. Does --server

Re: [Puppet Users] Re: Issue with puppet file serving api not parsing yaml content correctly

2011-07-11 Thread Nigel Kersten
On Mon, Jul 11, 2011 at 11:36 AM, Derek dtam...@gmail.com wrote: Thanks for everyone's help. I figured out what the issue was over the weekend. It appears that when the ruby script is run in a puppet run, puppet loads the yaml dictionaries specific to puppet. However, when I was testing the

[Puppet Users] Puppet Job - NYC

2011-07-11 Thread rsn.hyperion
Please excuse the commercial job posting! Reliant Security uses puppet to manage many thousands of the small security appliances we provide to some of the leading retailers in the US and Europe. We are looking for puppet centric sysadmin/engineer with the following: * Strong knowledge of

Re: [Puppet Users] Re: A working firewall module

2011-07-11 Thread Ken Barber
Jonathan Boyett provided a patch for this problem: https://github.com/puppetlabs/puppetlabs-firewall/commit/a7faff6f5b0de882bc720c8eb652d37b85a6b2a8 Looks like the crux of it was a Ruby 1.8.5 compatibility issue: https://github.com/puppetlabs/puppetlabs-firewall/issues/3 Thanks. ken. On Mon,

[Puppet Users] How does checksum=mtime work or does it really work?

2011-07-11 Thread Haitao Jiang
Does checksum = mtime really work? I have a file that was checksum by md5 and I want to change to checksum = mtime, but Puppet gave me following error, which was really confusing: -- Jul 11 15:00:55 vm1 puppet-agent[6820]:

[Puppet Users] Re: Issue with puppet file serving api not parsing yaml content correctly

2011-07-11 Thread Derek Tamsen
Thanks. Unfortunately, it seems I will need to wait until we upgrade puppet as version 0.25.4 does not seem to have 'puppet/util/zaml'. -- Derek On Jul 11, 2:56 pm, Nigel Kersten ni...@puppetlabs.com wrote: On Mon, Jul 11, 2011 at 11:36 AM, Derek dtam...@gmail.com wrote: Thanks for everyone's

Re: [Puppet Users] Re: Issue with puppet file serving api not parsing yaml content correctly

2011-07-11 Thread Nigel Kersten
On Mon, Jul 11, 2011 at 4:17 PM, Derek Tamsen dtam...@gmail.com wrote: Thanks. Unfortunately, it seems I will need to wait until we upgrade puppet as version 0.25.4 does not seem to have 'puppet/util/zaml'. Then I'm more confused :) does require 'puppet' require 'yaml' just do the right

[Puppet Users] Selecting repos

2011-07-11 Thread tu2Bgone
Hi all, Got an issue which is starting to annoy me. How do people currently select repos from which to install particular packages? Currently we have a base centos, (enabled by default), and several others that I want to enable and disable for particular packages, like being able to use

Re: [Puppet Users] Re: use puppet to manage user accounts on mysql

2011-07-11 Thread Gabriel Filion
On 11-07-11 04:43 PM, newguy wrote: I made a directory in modules named mysql and put the rise up module in there and I included this module in the nodes.pp that sounds about right. You should be able to create mysql users by adding the first part into the desired nodes (think of it as a

Re: [Puppet Users] Can't switch checksum method?

2011-07-11 Thread Patrick
On Jul 11, 2011, at 12:09 PM, Haitao Jiang wrote: I have a File resource and it was default to use md5 checksum. Now, I want to change it to use md5lite (or mtime, same error), I got following error: Any suggestion on how to get rid of this error (switch the checksum method)? info:

Re: [Puppet Users] A Question about mixing Puppet with other things

2011-07-11 Thread Dan White
Thanks for responding, but this does not help me answer my questions. On Jul 10, 2011, at 4:26 AM, Ohad Levy wrote: On Thu, Jul 7, 2011 at 9:47 PM, Dan White y...@comcast.net wrote: In Pro Linux System Administration Mr. Turnbull discusses Cobbler and Puppet In Pro Puppet he discusses

Re: [Puppet Users] Re: Checking for free disk space on mountpoint?

2011-07-11 Thread Victor Hooi
Ken, Currently, the existing processes we have are quite ad-hoc, and developers are often responsible for deployment, which is done by hand. I'm hoping Puppet will automate the process, provide better standardisation, and segregate development away from deployment/production. All the things

Re: [Puppet Users] Can't switch checksum method?

2011-07-11 Thread Haitao Jiang
Patrick Thanks. Related information: Puppet 2.6.8 for both master and client, Webrick. file { /opt/jetty-distribution-7.4.2.v20110526.tar.gz: ensure = present, checksum = md5, source = puppet:///emb/jetty-distribution-7.4.2.v20110526.tar.gz, notify = Exec [tar

[Puppet Users] Running puppet client on OS X

2011-07-11 Thread treydock
What is the preferred method for running the puppet client in OS X? So far all methods I've tried seem to default to running the client as the root user. Should this be changed to run as a puppet user? Should I explicitly define puppet as the user in puppet.conf? As a test I ran puppetd --test

Re: [Puppet Users] Re: Checking for free disk space on mountpoint?

2011-07-11 Thread vagn scott
On 07/11/2011 10:37 PM, Victor Hooi wrote: As long as we have more the x bytes available when we install things, we know we'll be fine. Here is a proof of concept. With a little tweaking you should be able to test for an absolute amount of free space on any mounted volume. Hope that helps,

Re: [Puppet Users] Can't switch checksum method?

2011-07-11 Thread Haitao Jiang
I upgraded Puppet (master/client) to 2.7.1, the issue still there: Jul 11 21:59:50 vm1 puppet-agent[11641]: (/Stage[main]/Emb/File[/opt/jetty/contexts/emb-context.xml]/ensure) change from absent to file failed: Could not rename temporary file /opt/jetty/contexts/emb-context.xml.puppettmp_5668 to

Re: [Puppet Users] Can't switch checksum method?

2011-07-11 Thread Patrick
It talks about mtime in the log, but has md5lite in the manifest. Is that a typo? On Jul 11, 2011, at 10:03 PM, Haitao Jiang wrote: I upgraded Puppet (master/client) to 2.7.1, the issue still there: Jul 11 21:59:50 vm1 puppet-agent[11641]:

Re: [Puppet Users] Re: Checking for free disk space on mountpoint?

2011-07-11 Thread Patrick
On Jul 11, 2011, at 7:37 PM, Victor Hooi wrote: Ken, Currently, the existing processes we have are quite ad-hoc, and developers are often responsible for deployment, which is done by hand. I'm hoping Puppet will automate the process, provide better standardisation, and segregate

Re: [Puppet Users] Can't switch checksum method?

2011-07-11 Thread Haitao Jiang
I tried both md5lite and mtime, no difference, same issue: File written to disk did not match checksum; discard canges What I can do to fix or debug this? Thanks Haitao On Mon, Jul 11, 2011 at 10:07 PM, Patrick kc7...@gmail.com wrote: It talks about mtime in the log, but has md5lite in