Re: [Puppet Users] Re: Uninstall Puppet and Facter from OSX

2011-11-29 Thread Alexander Fortin
On 11/30/11 4:31 AM, Gary Larizza wrote: Just to add some clarity, The createpackage.sh script in conf/osx actually works quite well, regardless of how old it is. Untar or git clone Puppet from source, make sure you're in the root of the directory, and run: sudo conf/osx/createpackage.sh That

Re: [Puppet Users] Which package repository for puppet installation (rh/centos) ?

2011-11-29 Thread James A. Peltier
- Original Message - | On Tue, Nov 29, 2011 at 6:43 AM, seamie wrote: | | > But if I use EPEL does it invoke many changes in | > standard RH/Centos packages related to packages dependencies ? I am | > considering EPEL or yum.puppetlabs.com repositories (what is a | > difference between th

Re: [Puppet Users] Re: Uninstall Puppet and Facter from OSX

2011-11-29 Thread Gary Larizza
On Tue, Nov 29, 2011 at 10:19 AM, Allister Banks wrote: > As createpackage has not been updated for quite some time, an > alternative method of generating the package has been developed. It > utilizes Apple's Developer Tools/GCC and a project called the Luggage, > which in turn uses make to gene

Re: [Puppet Users] Could find template at /modules//templates

2011-11-29 Thread Diep Pham Van
Thanks for your answer. I misread it. How strange, In the shared directory ($templatedir), we don't need to specify 'module name' But in the folder, we have to specify it. From: Martin Alfke Subject: Re: [Puppet Users] Could find template at /modules//templates Date: Tue, 29 Nov 2011 13:59:16

[Puppet Users] puppetlabs-firewall: hostnames Vs IP addresses

2011-11-29 Thread Mohamed Lrhazi
Hello, The source and destination parameters accept both IP address or a hostname. If using a hostname, the firewall module thinks the rule changed each time it runs reporting: notice: /Firewall[300 allow netbackup traffic from nbmaster2-63.example.com]/source: current_value 192.168.63.42/32, sh

Re: [Puppet Users] Profiling Puppet?

2011-11-29 Thread Justin Lloyd
Turns out I just had to fix the Mcollective/File[plugins-sbin] recipe (second line of the output from my original email) to change 'recurse => inf' (oops) to 'recurse => remote'. It was checking ownership of all 250 files under /usr/sbin just to add in the 3 files mcollective needed in /usr/sbin. T

Re: [Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Mohamed Lrhazi
in case it help someone, I got it too do what I needed this way: # Allow netbackup define allow_netbackup() { firewall { "300 allow netbackup traffic from ${name}": proto => 'tcp', dport => [13724,1556,10102,10082], source => $name, action

Re: [Puppet Users] template does not print variables

2011-11-29 Thread Tim Dunphy
Jacob, Thank you that worked! [root@puppet manifests]# cat motd.pp file { "/etc/motd": group => 'root', owner => 'root', mode => '440', content => template("/etc/puppet/templates/motd.erb") } [root@puppet manifests]# cat /etc/motd memory free = 389.88 MB domain = jokefire.com

Re: [Puppet Users] template does not print variables

2011-11-29 Thread Jacob Helwig
On 2011-11-29 15:37 , Tim Dunphy wrote: > Hello list, > > I am having a problem with template file. Why are variables not > interpolated? > > [root@puppet manifests]# cat /etc/motd > memory free = <%= memoryfree %> > domain = <%= domain %> > operating system = <%= operatingsystem %> > > This

[Puppet Users] template does not print variables

2011-11-29 Thread Tim Dunphy
Hello list, I am having a problem with template file. Why are variables not interpolated? [root@puppet manifests]# cat /etc/motd memory free = <%= memoryfree %> domain = <%= domain %> operating system = <%= operatingsystem %> This is the template file [root@puppet manifests]# cat ../template

Re: [Puppet Users] Profiling Puppet?

2011-11-29 Thread Daniel Pittman
On Tue, Nov 29, 2011 at 15:13, Justin Lloyd wrote: > Cool, nice to know about the evaltrace option. Interestingly, in the ~1000 > lines of output from "puppetd -t --evaltrace", all are < 1 second and all > but about 10 are < 0.1 seconds. The total evaluation time is about 5 seconds > with the othe

Re: [Puppet Users] Profiling Puppet?

2011-11-29 Thread Justin Lloyd
Cool, nice to know about the evaltrace option. Interestingly, in the ~1000 lines of output from "puppetd -t --evaltrace", all are < 1 second and all but about 10 are < 0.1 seconds. The total evaluation time is about 5 seconds with the other ~30 "missing" seconds taking place between these two lines

Re: [Puppet Users] Re: Using puppet+augeas to modify multiple files

2011-11-29 Thread Aaron Grewell
I'm not the OP Nigel, I think you meant Graham. It sounds like Augeas has some capabilities that I just wasn't aware of. In any case Augeas is not something I use if I can avoid it. Templates and concat are my preferred methods for managing config files. Straightforward > clever for the general

Re: [Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread Denmat
Oh dear ... Yes. On 30/11/2011, at 7:57, Craig White wrote: > I hope that you were having a dyslexic moment and really meant to say 8139 > instead of 1839 because then I would have to wonder how it's been working for > me the past few months. > > Craig > > On Nov 29, 2011, at 1:18 PM, Denmat

Re: [Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Mohamed Lrhazi
Cool. Thanks guys. On Tue, Nov 29, 2011 at 5:23 PM, Jacob Helwig wrote: > On 2011-11-29 13:05 , Mohamed Lrhazi wrote: >> Hi, >> >> am trying this rule: >> >> >>     firewall { '100 allow ssh from GUNET': >>       proto       => 'tcp', >>       dport       => '22', >>       source      => ['10.0.0

Re: [Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Jacob Helwig
On 2011-11-29 13:05 , Mohamed Lrhazi wrote: > Hi, > > am trying this rule: > > > firewall { '100 allow ssh from GUNET': > proto => 'tcp', > dport => '22', > source => ['10.0.0.0/8','192.168.0.0/16',], > action => accept, > } > > > and it on

Re: [Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Steve Traylen
On Tue, Nov 29, 2011 at 10:05 PM, Mohamed Lrhazi wrote: > firewall { '100 allow ssh from GUNET': >      proto       => 'tcp', >      dport       => '22', >      source      => ['10.0.0.0/8','192.168.0.0/16',], >      action      => accept, >    } > > > and it only seems to add a rule for the first

Re: [Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Charles Buckley
Hello, While I have never used this particular package, I am curious about that trailing comma: source => ['10.0.0.0/8','192.168.0.0/16',], or source => ['10.0.0.0/8','192.168.0.0/16'], Charles Buckley On Tue, Nov 29, 2011 at 2:05 PM, Mohamed Lrhazi wrote: > Hi, > > am trying th

[Puppet Users] storeconfgs not initializing database

2011-11-29 Thread Darin Perusich
Hello, I'm attempting to setup puppet 2.7.6 to use the storeconfigs but it's failing to create the database and I'm not seeing any error or messages in the logs related to initializing the database. I'm using mysql and have created the user/role and the database and I'm able to connect successfull

Re: [Puppet Users] Including a defined resource in a class

2011-11-29 Thread Phillip Frost
On Nov 29, 2011, at 5:00 PM, beamin melbin wrote: > I've read the documentation over at: > > http://docs.puppetlabs.com/guides/language_guide.html > > I cannot figure out how to include a defined resource. I've tired: > > include User::Admin['beamin'] Defined resources aren't included. They a

[Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread Namrata
Thanks everyone for the clarifications to a puppet newbie aka me :) It is much clear now. It is just that one of my puppet client is a cloud server on Rackspace and while it can connect to the puppetmaster and apply basic configurations(like write a file) from puppetmaster manifest but unable conf

[Puppet Users] Including a defined resource in a class

2011-11-29 Thread beamin melbin
I've read the documentation over at: http://docs.puppetlabs.com/guides/language_guide.html I cannot figure out how to include a defined resource. I've tired: include User::Admin['beamin'] I get: err: Could not retrieve catalog from remote server: Error 400 on SERVER: undefined method `downcase

[Puppet Users] puppetlabs-firewall: source param as array

2011-11-29 Thread Mohamed Lrhazi
Hi, am trying this rule: firewall { '100 allow ssh from GUNET': proto => 'tcp', dport => '22', source => ['10.0.0.0/8','192.168.0.0/16',], action => accept, } and it only seems to add a rule for the first subnet. The second is silently igno

[Puppet Users] How do I require a resource in a definition based on an array parameter?

2011-11-29 Thread beamin melbin
I have a define that looks like this: define user::sys_user($fullname, $uid, $groups, $shell='/bin/bash', $authkey, $authkey_type=rsa) { $username = "sys_${name}" group { $username: gid => $uid, } user { $username: require => Group[

Re: [Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread Craig White
I hope that you were having a dyslexic moment and really meant to say 8139 instead of 1839 because then I would have to wonder how it's been working for me the past few months. Craig On Nov 29, 2011, at 1:18 PM, Denmat wrote: > Hi, > > Just further clarifying what Nan has already said, the cl

[Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread jcbollinger
On Nov 29, 12:29 pm, Namrata wrote: > Thanks Nan. > > So, my puppetmaster should be able to install modules on puppet client > if the port 8139 is open? In short, you don't even need 8139 open. In long: The puppetmaster does not under any circumstances install modules on the client, regardless

Re: [Puppet Users] Profiling Puppet?

2011-11-29 Thread Phillip Frost
On Nov 29, 2011, at 3:15 PM, Justin Lloyd wrote: > Is there any way to profile Puppet recipes? You can try the (undocumented?) options --evaltrace and --summarize to puppet agent. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to th

Re: [Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread Denmat
Hi, Just further clarifying what Nan has already said, the client initiates the connection to the master when it polls in. The master listens on 8140 for those connections. This is all you need for puppet to compile and apply the manifest on the client. If you use the 'puppet kick' command (wh

[Puppet Users] Profiling Puppet?

2011-11-29 Thread Justin Lloyd
Is there any way to profile Puppet recipes? For example, here's a node (hostname changed to protect the innocent) in our nodes.pp: node host002 { include puppet_client_base include subversion::server# sets up the system to be a subversion server include motd # cont

[Puppet Users] RubyCocoa

2011-11-29 Thread Brian Warsing
Hi, I built a primitive type/provider for computergroups on Mac OS X. To implement the standard provider#exists? method, I tried to grab a plist from dscl and compare it with the resource definition. I didn't get very far... err: Could not retrieve catalog from remote server: Error 400 on SERVER:

Re: [Puppet Users] Puppet Artifactory Module

2011-11-29 Thread Denmat
Hi, Artifactory is a another product. It's probably up to yourself to do the research here. Den On 29/11/2011, at 21:31, Pranav wrote: > I want to use Puppet to fetch artifacts from Artifactory, deploy them > and start the required services. How do I achieve it? I did not find > any documenta

[Puppet Users] Re: puppetlabs-firewall: How does it work?

2011-11-29 Thread Mohamed Lrhazi
To clarify why I am asking how does this work...The doc has this intriguing advise: "If you wish to ensure any reject rules are executed last, try using stages..." Isn't the "rule order" integer in the resource name solving that problem? Thanks, Mohamed. On Tue, Nov 29, 2011 at 2:30 PM, Mohamed L

[Puppet Users] puppetlabs-firewall: How does it work?

2011-11-29 Thread Mohamed Lrhazi
Hello, Could someone clarify the philosiphy of this module... I need a way to manage iptables on all my systmes, and trying to imagine how this module would fit in, How does this module work? Does it check each supplied rule, for a node, against its current rules, then insert rule if missing? or

[Puppet Users] Re: Uninstall Puppet and Facter from OSX

2011-11-29 Thread Allister Banks
As createpackage has not been updated for quite some time, an alternative method of generating the package has been developed. It utilizes Apple's Developer Tools/GCC and a project called the Luggage, which in turn uses make to generate the package. It also can be dynamically fed new version numbe

Re: [Puppet Users] Dynamic configuration file

2011-11-29 Thread Christian G. Warden
On Tue, Nov 29, 2011 at 03:23:22PM +1100, Gonzalo Servat wrote: > We use a package called "Torque Scheduler" which is based on a > configuration file that defines nodes, the queues they handle, how many > slots, etc. The config file format is similar to: > > unlimited ... > > node: : ... >

Re: [Puppet Users] Is it possible to conditionally replace a file ?

2011-11-29 Thread Daniel Pittman
On Tue, Nov 29, 2011 at 04:07, Martin Alfke wrote: > On 28.11.2011, at 19:18, Stefan Schulte wrote: >>> [...] > >>> Thanks for responding. >>> I agree, globally customizing the defaults is one way to go, but I am >>> shooting for the second option. >>> >> >> If you do not want the gobal defaults

Re: [Puppet Users] Uninstall Puppet and Facter from OSX

2011-11-29 Thread Alexander Fortin
On 11/29/11 6:12 PM, Nan Liu wrote: > Thanks Nigel, I've followed your suggestion and now I'm running puppet > v2.7.6 installed via gem > > PS I wasn't able to find the createpackage.sh script you suggested though https://github.com/puppetlabs/puppet/tree/master/conf/osx HTH, Yes it does ;

[Puppet Users] Re: Puppet client port to be open

2011-11-29 Thread Namrata
Thanks Nan. So, my puppetmaster should be able to install modules on puppet client if the port 8139 is open? On Nov 29, 10:24 am, Nan Liu wrote: > On Tue, Nov 29, 2011 at 6:19 PM, Namrata wrote: > > Just a quick question. In order for puppet run to execute successfully > > on puppet client (u

Re: [Puppet Users] Which package repository for puppet installation (rh/centos) ?

2011-11-29 Thread Michael Stahnke
On Tue, Nov 29, 2011 at 8:08 AM, Peter Berghold wrote: > > > On Tue, Nov 29, 2011 at 6:43 AM, seamie wrote: >> >> But if I use EPEL does it invoke many changes in >> standard RH/Centos packages related to packages dependencies ? I am >> considering EPEL or yum.puppetlabs.com repositories (what is

Re: [Puppet Users] Puppet client port to be open

2011-11-29 Thread Nan Liu
On Tue, Nov 29, 2011 at 6:19 PM, Namrata wrote: > Just a quick question. In order for puppet run to execute successfully > on puppet client (ubuntu 10.04), the port 8139 on puppet client should > be open and listening correct? Do we also require that port 8140 be > open and running on puppet clien

[Puppet Users] Puppet client port to be open

2011-11-29 Thread Namrata
Hi, Just a quick question. In order for puppet run to execute successfully on puppet client (ubuntu 10.04), the port 8139 on puppet client should be open and listening correct? Do we also require that port 8140 be open and running on puppet client? Thanks. -- You received this message because y

[Puppet Users] Re: Puppet does not connect to ldap at secure port because of ssl certificate signed by cacert.org

2011-11-29 Thread Ganesh Sharma
Hi Den, Sure I can provide the debug information as well, though I could see nothing much. I concatenated cacert's root.crt and class3.crt to /var/lib/puppet/ssl/ ca/ca_crt.pem. That did not help me. In the next post I provide my debug information i.e the output of: puppetmasterd --no-daemonize -

Re: [Puppet Users] ensure => file, creating directories

2011-11-29 Thread Russell Howe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 29/11/11 14:06, jasper.hargrea...@m-w.co.uk wrote: > Hi all, > > Recently upgraded one of our puppet servers from 2.6.4 to 2.7.5, and > > "puppet://puppet/modules/standalone-configs/$folder/$name-$type- > $fqdn", Try

Re: [Puppet Users] Dynamic configuration file

2011-11-29 Thread Nan Liu
On Tue, Nov 29, 2011 at 4:23 AM, Gonzalo Servat wrote: > Hi All, > > We use a package called "Torque Scheduler" which is based on a configuration > file that defines nodes, the queues they handle, how many slots, etc. The > config file format is similar to: > > unlimited ... > > node: : ...

Re: [Puppet Users] Uninstall Puppet and Facter from OSX

2011-11-29 Thread Nan Liu
On Tue, Nov 29, 2011 at 8:53 AM, Alexander Fortin wrote: > On 11/28/11 5:59 PM, Nigel Kersten wrote: >> >> You should, yes. >> >> I'd actually suggest the best thing to do is to run >> "conf/osx/createpackage.sh" to generate a proper Mac pkg out of the >> tarball. That will do some extra things li

Re: [Puppet Users] ensure => file, creating directories

2011-11-29 Thread Nan Liu
On Tue, Nov 29, 2011 at 2:06 PM, jasper.hargrea...@m-w.co.uk wrote: > Hi all, > > Recently upgraded one of our puppet servers from 2.6.4 to 2.7.5, and > we're noticing some rather odd behaviour. > What's always traditionally worked for creating ini files and the > like, is now creating directories

Re: [Puppet Users] Which package repository for puppet installation (rh/centos) ?

2011-11-29 Thread Peter Berghold
On Tue, Nov 29, 2011 at 6:43 AM, seamie wrote: > But if I use EPEL does it invoke many changes in > standard RH/Centos packages related to packages dependencies ? I am > considering EPEL or yum.puppetlabs.com repositories (what is a > difference between them ?). > > > Hi, I've adopted the practi

AW: [Puppet Users] Puppet Setup Difficulty With SuSE

2011-11-29 Thread Bernd Adamowicz
I recently set up our CI system using two Puppet masters and some 50 Puppet agents. If you follow some installation instruction it will not take longer than a day for having set up your first Puppet master and some agents. Once this is done the actual work starts: * create/configure the Puppet

[Puppet Users] ensure => file, creating directories

2011-11-29 Thread jasper.hargrea...@m-w.co.uk
Hi all, Recently upgraded one of our puppet servers from 2.6.4 to 2.7.5, and we're noticing some rather odd behaviour. What's always traditionally worked for creating ini files and the like, is now creating directories instead of files (indeed, replacing my existing files with directories, which h

Re: [Puppet Users] Which package repository for puppet installation (rh/centos) ?

2011-11-29 Thread Luke Bigum
Hello, If you're not managing your own repositories for your own RPMs then second best is the Puppet Labs repo - it will have the latest versions with all the latest bug fixes and features. I'm fairly certain you will need EPEL anyway this for some of the Ruby dependencies (ruby-shadow, rub

Re: [Puppet Users] Could find template at /modules//templates

2011-11-29 Thread Martin Alfke
Hi, On 29.11.2011, at 09:56, Diep Pham Van wrote: > Hi, > I have a problem. > I have a modules name emacs. > Under /modules/emacs, I have: > - templates > - files > - manifests > > I cannot use template file from templates folder, It's say cold not find > template ... > But when I place the te

Re: [Puppet Users] Host home directory from Puppetmaster if users exists

2011-11-29 Thread Kenneth Holter
Thanks for your reply. The files are user-specific, so the suggested approach will not work very well. But it's a neat solution for generic files. Kenneth On Fri, Nov 25, 2011 at 12:10 PM, Richard Clark wrote: > On Fri, Nov 25, 2011 at 08:53:43AM +0100, Kenneth Holter wrote: >> Hi all, >> >> >>

[Puppet Users] Puppet Setup Difficulty With SuSE

2011-11-29 Thread jkinning
Oh where to begin? I work for a company that has not taken our Linux or Unix server configuration management very seriously. We are primarily a Windows shop but long story short upper-management has taken the advice of our Windows Server admins and purchased BigFix which is now IBM Tivoli Endpoint

[Puppet Users] Puppet Artifactory Module

2011-11-29 Thread Pranav
I want to use Puppet to fetch artifacts from Artifactory, deploy them and start the required services. How do I achieve it? I did not find any documentation or demo on this. Regards, Pranav -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To pos

[Puppet Users] Could find template at /modules//templates

2011-11-29 Thread Diep Pham Van
Hi, I have a problem. I have a modules name emacs. Under /modules/emacs, I have: - templates - files - manifests I cannot use template file from templates folder, It's say cold not find template ... But when I place the template file in $templatedir folder, everything works well. How can I

[Puppet Users] Which package repository for puppet installation (rh/centos) ?

2011-11-29 Thread seamie
Hello, For some time I have been looking for some solution to manage more then a few servers. After some time of searching puppet became by choice :-) I'd like to deploy it on some testing servers (RH/Centos). Which repository would you recommend to use as a source of puppet packages ? I guess tha

Re: [Puppet Users] Is it possible to conditionally replace a file ?

2011-11-29 Thread Martin Alfke
On 28.11.2011, at 19:18, Stefan Schulte wrote: >> [...] >> Thanks for responding. >> I agree, globally customizing the defaults is one way to go, but I am >> shooting for the second option. >> > > If you do not want the gobal defaults copied why are you using > managehome => true? > > If you

[Puppet Users] Re: Using puppet+augeas to modify multiple files

2011-11-29 Thread Raphink
Hi Graham, On Nov 28, 9:17 am, Graham Leggett wrote: > On 27 Nov 2011, at 20:04, Graham Leggett wrote: > > > I have a task to convince puppet and augeas to modify multiple postfix > > files, most specifically /etc/postfix/main.cf and /etc/postifx/ > > acceptdomains.cf (and other LDAP related file

Re: [Puppet Users] Skipped schedule resources in reports

2011-11-29 Thread flex
oh, i make a mistake, the schedule resources are not turned from other resources, they are created by default. my puppet is 2.7.6 On Tue, Nov 29, 2011 at 5:49 PM, flex wrote: > i met this problem too, and also don't know why some resource's type > turned into Schedule, are there someone can give

Re: [Puppet Users] Skipped schedule resources in reports

2011-11-29 Thread flex
i met this problem too, and also don't know why some resource's type turned into Schedule, are there someone can give me a reason? On Tue, Sep 6, 2011 at 10:21 PM, Greg Sutcliffe wrote: > Hi all, > > Since upgrading a few test machines from 2.6.7 to 2.7.3, I've noticed > something slightly odd. E

Re: [Puppet Users] All nodes inherits default except for one module

2011-11-29 Thread Hans Schou
Den 2011-11-24 12:07, Denmat skrev: Hi, You might want to try something like: node default { if $hostname != 'nameserver' { include resolve.conf } Thanks. It is also quite easy to get an overview of which modules one server gets 1. Look at the particular node 2. Look at the def

[Puppet Users] Re: how to create a oracle 11g database through puppet module

2011-11-29 Thread Stephan
You can use the exec type to execute commands: http://docs.puppetlabs.com/references/stable/type.html#exec On Nov 28, 12:25 pm, Nani wrote: > Hi > This is Anjan and I am creating a module to create a database for > oracle 11g. I have a problem to execute a cmd > ie sqlplus "/as sysdba" > @/home/

Re: [Puppet Users] Uninstall Puppet and Facter from OSX

2011-11-29 Thread Alexander Fortin
On 11/28/11 5:59 PM, Nigel Kersten wrote: You should, yes. I'd actually suggest the best thing to do is to run "conf/osx/createpackage.sh" to generate a proper Mac pkg out of the tarball. That will do some extra things like set up the right directory ownership for you. The previous install.rb i