Re: [Puppet Users] Analysing some puppetmaster logs to find out what's happening on an agent

2012-04-24 Thread Sharuzzaman Ahmat Raslan
Hi Walter, Ok, I think that narrows it down to cron issue possibility, as you mentioned the other server with the same puppet configurations works well. Reports only generated if puppet is running, even if there are errors. When there are no reports, it could mean that puppet is not running, or

Re: [Puppet Users] Recovering deleted modules

2012-04-24 Thread Luke Bigum
Hi Alex, Agents write their last catalog to disk in /var/lib/puppet/client_yaml/catalog/${hostname}.yaml. If you've got an Agent that hasn't done a Puppet run since you deleted that module, this file will contain the information you're after. It's not the most prettily formatted thing

[Puppet Users] autosign

2012-04-24 Thread C R Ritson
Does autosign work? I have a scratch workstation that may be rebuilt frequently and will therefore acquire a new client certificate. I was hoping that adding its certificate name to /etc/puppet/autosign.conf on the puppetmaster would allow just this one client to have its new certificates

Re: [Puppet Users] autosign

2012-04-24 Thread Luke Bigum
Autosigning certificates work, what you're probably running into is that autosigning does not clear off an old Agent's certificate, so you're getting certificate mismatch errors. Puppet's RESTful API allows you to manage certificates. It's been a long time since I tested this but I have this

[Puppet Users] Re: Creating a system module path (starting with Telly)

2012-04-24 Thread Bill Proud
Sounds good. One problem that I have with the forge is that the extent to which the modules have been tested is not clear to me. Can I take it that the core modules that ship with puppet will have been through a similar testing cycle as puppet itself? On Monday, April 23, 2012 11:03:39 PM

Re: [Puppet Users] help with array in a template.

2012-04-24 Thread Luke Bigum
Very close: % virtualmountpoints.each do |fs| -% [%= fs %] virtualmountpoint%= fs % % end -% I don't understand the Ruby in that, I copied it from someone else ;-) On 24/04/12 09:18, digrouz wrote: Hello guys, I would like to get some help with puppet about using an array in a template.

[Puppet Users] Re: Why latest stable Debian Squeeze package is 2.6.2-5+squeeze4 please ?

2012-04-24 Thread Christophe L
Hello Mike, Sorry for the late feedback. On this page http://docs.puppetlabs.com/guides/installation.html it is written OS Packages If installing from a distribution maintained package, such as those listed on the Downloading Puppet Wiki Page all OS prerequisites should be handled by your

RE: [Puppet Users] autosign

2012-04-24 Thread C R Ritson
Many thanks - this is now working better. What was tripping me up was that if the puppet agent has tried to run, and there is a certificate request on the master, then the next run of the agent either doesn't try to get the coresponding certificate signed or else the auto-signing is silently

Re: [Puppet Users] help with array in a template.

2012-04-24 Thread Nicolas Di Gregorio
I just found my problem, It is in the split in fact I don't have space between the value but carried returns, so if I split to \n, it works. Regards On Tue, Apr 24, 2012 at 10:55 AM, Luke Bigum luke.bi...@lmax.com wrote: Very close: % virtualmountpoints.each do |fs| -% [%= fs %]

Re: [Puppet Users] autosign

2012-04-24 Thread Luke Bigum
Not sure about the first question, are you saying your Agent had a non-autosigned certificate waiting on the Puppet Master, then you configured auto signing on the Master and expected it to work? I think the autosigning is done only when an Agent first connects and it won't sign any pending or

[Puppet Users] Re: help with array in a template.

2012-04-24 Thread digrouz
I just found my problem, It is in the split in fact I don't have space between the value but carried returns, so if I split to \n, it works. Regards On 24 avr, 10:55, Luke Bigum luke.bi...@lmax.com wrote: Very close: % virtualmountpoints.each do |fs| -% [%= fs %] virtualmountpoint%= fs %

[Puppet Users] Re: help with array in a template.

2012-04-24 Thread Krzysztof Wilczynski
Hi, [...] It is in the split in fact I don't have space between the value but carried returns, so if I split to \n, it works. This is slightly worrisome. I encourage you to go with separating values with a comma, not only because it follows style of how other facts return values, but

[Puppet Users] Migrating current installation to use environments

2012-04-24 Thread John Kennedy
Right now all our different environments (test/stage/prod) are being served by the same puppet master. We have tried some things that tend to break puppet which obviously is not good on a production machine. I have been tasked to match our puppet environment with the enterprise environment. I

[Puppet Users] What is the false directory?

2012-04-24 Thread Sans
Dear all, Since last night, Puppet is started creating a directory, named *false* in the present working directory, if I run *puppetd -t* manually on the puppet agent. The directory contents are like this: 8/3/e/5/8/6/5/9/83e586594432759eb7aed007e888a172/contents

[Puppet Users] Re: vcsrepo rake installation?

2012-04-24 Thread Ernest Beinrohr
alright, i was doint it wrong. just enable pluginsync=true on the client. On Apr 19, 5:05 pm, Ernest Beinrohr oer...@axonpro.sk wrote: Hi, I have trouble installing vcsrepo. I cloned vcsrepo onto my Centos6 and when I run rake i get this: (in /etc/puppet/modules/vcsrepo) ** Invoke default

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Peter Bukowinski
Looks like you have an error in your filebucket definition. Did you, perhaps, put quotes around false when you defined the path? -- Peter On Apr 24, 2012, at 8:13 AM, Sans r.santanu@gmail.com wrote: Dear all, Since last night, Puppet is started creating a directory, named false in the

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Sans
Not sure what exactly do you mean; I haven't defined and path with false in it. It appears that the false directory is being created for this file definition: 'facts.yaml': name= '/tmp/facts.yaml', content = inline_template(%= scope.to_hash.reject { |k,v| !(

Re: [Puppet Users] Analysing some puppetmaster logs to find out what's happening on an agent

2012-04-24 Thread Walter Heck
Hiya, On Tue, Apr 24, 2012 at 14:07, Sharuzzaman Ahmat Raslan sharuzza...@gmail.com wrote: Ok, I think that narrows it down to cron issue possibility, as you mentioned the other server with the same puppet configurations works well. Reports only generated if puppet is running, even if there

[Puppet Users] Re: Analysing some puppetmaster logs to find out what's happening on an agent

2012-04-24 Thread jcbollinger
On Apr 23, 9:43 pm, Walter Heck walterh...@gmail.com wrote: Hi all, in an unfortunate incident, I managed to lock myself out of a client's server. Basically an openssh module that by default disabled remote root logins did that on a server that was only accessed by remote root login (no

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Sans
I don't know what exactly you mean: I don't have any path defined with false in it. Just figured out that whenever the content of a file is being modified, the *false* directory is being created with the old file (as content) in it. So, looks like it's actually not modifying the file (in

RE: [Puppet Users] autosign

2012-04-24 Thread C R Ritson
Having read the scary warnings about autosign, I need to think it through some more. However the helpful comments about allowing a client to revoke and delete its OWN certificate will probably useful on their own. Luke said that his addition to auth.conf was not working. It appears that the

[Puppet Users] Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Calimero
Hi, I worked with puppet ( 0.25) back in 2008/2009. We were able to deploy 200 servers from scratch and manage them. It worked fine. I'm now with a new customer and I'm pushing Puppet (and I'm also back to puppet on a side project). We're considering Puppet 2.6 to manage RHEL/CentOS 5 or 6

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Sans
Thanks Peter! Got it now! You were absolutely right - I had *path = 'false' *for filebucket (in the site.pp). But I thought, Puppet recommends to quote around everything (apart from variables). That's not true, I see. Cheers!! On Tuesday, April 24, 2012 2:12:02 PM UTC+1, Sans wrote: I

Re: [Puppet Users] Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Ashley Penney
This was a long email! The answer to your problems is definitely something like Hiera. You make a common.yaml that has all your defaults and then you can overwrite these based on any fact you like, when building the hierarchy. You can make a hierarchy like: fqdn environment common.yaml Then

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Peter Bukowinski
Glad you got it sorted. You've discovered the importance of quoting and *not* quoting. The best practice is to single quote any string that does not contain a variable. If you're using a variable, use double quotes so it gets interpreted properly. Quotes should *not* be used around any of

[Puppet Users] How to increment variable in erb template ?

2012-04-24 Thread AnOnJoe
Hi', I'm looking for a way to increment variable in template (erb file). I tried this, but it didn't work Compteur %= compteur % % compteur = compteur + 1 % Compteur %= compteur % I've got this error : Error 400 on SERVER: Failed to parse template test/test.erb: undefined method `+'

[Puppet Users] Re: How to increment variable in erb template ?

2012-04-24 Thread Krzysztof Wilczynski
Hi, On Tuesday, 24 April 2012 14:38:28 UTC+1, AnOnJoe wrote: Hi', I'm looking for a way to increment variable in template (erb file). I tried this, but it didn't work Compteur %= compteur % % compteur = compteur + 1 % Compteur %= compteur % I've got this error : Error 400 on

[Puppet Users] Parametrized classes, definitions and structure

2012-04-24 Thread Andy Taylor
Hi, I've written a set of Puppet modules to manage servers, but am slightly concerned about the structure I've used as it seems to differ significantly from anything else I've seen in Puppet Forge/elsewhere on the internet. I've made extensive use of definitions so that defaults for modules can

[Puppet Users] Re: How to increment variable in erb template ?

2012-04-24 Thread AnOnJoe
I've got it : Compteur %= compteur % *% compteur = compteur.to_i -%* % compteur += 1 -% Compteur %= compteur % Le mardi 24 avril 2012 15:38:28 UTC+2, AnOnJoe a écrit : Hi', I'm looking for a way to increment variable in template (erb file). I tried this, but it didn't work

[Puppet Users] Re: puppetlabs-firewall: negate operator?

2012-04-24 Thread Mohamed Lrhazi
I also need to figure out how to code this rule: -A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill --checksum-fill is not supported, in puppet-iptables, right? or can arbitrary iptables parameters be passed along somehow? I am using the purge option How would you

Re: [Puppet Users] Puppet and FreeBSD

2012-04-24 Thread Jamie Scott
Have you had any luck with puppeting mysql51-server or mysql55-server ? Everything I've read suggests the $operatingsystem won't work for name on packages and the application tries to keep installing as posted here: https://groups.google.com/forum/?fromgroups#!topic/puppet-users/Yc1Et5dSAHM

[Puppet Users] Re: How to increment variable in erb template ?

2012-04-24 Thread Krzysztof Wilczynski
Hi, \o/ KW On Tuesday, 24 April 2012 15:18:56 UTC+1, AnOnJoe wrote: I've got it : Compteur %= compteur % *% compteur = compteur.to_i -%* % compteur += 1 -% Compteur %= compteur % Le mardi 24 avril 2012 15:38:28 UTC+2, AnOnJoe a écrit : Hi', I'm looking for a way to increment

[Puppet Users] Re: Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Calimero
On 24 avr, 15:34, Ashley Penney apen...@gmail.com wrote: This was a long email! Yeah, I know it might get a few TL;DR but I wanted to provided all relevant information. :)  The answer to your problems is definitely something like Hiera.  You make a common.yaml that has all your defaults and

[Puppet Users] Re: Parametrized classes, definitions and structure

2012-04-24 Thread jcbollinger
On Apr 24, 9:13 am, Andy Taylor andytaylo...@gmail.com wrote: Hi, I've written a set of Puppet modules to manage servers, but am slightly concerned about the structure I've used as it seems to differ significantly from anything else I've seen in Puppet Forge/elsewhere on the internet.

[Puppet Users] Re: Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread jcbollinger
On Apr 24, 8:19 am, Calimero calimero...@evolutive.org wrote: Hi, I worked with puppet ( 0.25) back in 2008/2009. We were able to deploy 200 servers from scratch and manage them. It worked fine. I'm now with a new customer and I'm pushing Puppet (and I'm also back to puppet on a side

Re: [Puppet Users] autosign

2012-04-24 Thread Bill Weiss
Autosign works, but not as you're expecting: it will sign new certificates, but not overwrite existing ones. At least, that's my experience here :) -- Bill Weiss Backstop Solutions Group On 2012/4/24 3:34 AM, C R Ritson c.r.rit...@newcastle.ac.uk wrote: Does autosign work? I have a scratch

Re: [Puppet Users] Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Les Ault
On 04/24/2012 09:19 AM, Calimero wrote: Hi, I worked with puppet ( 0.25) back in 2008/2009. We were able to deploy 200 servers from scratch and manage them. It worked fine. I'm now with a new customer and I'm pushing Puppet (and I'm also back to puppet on a side project). We're considering

Re: [Puppet Users] Re: Analysing some puppetmaster logs to find out what's happening on an agent

2012-04-24 Thread Michael Baydoun
Maybe you could use puppet to configure send to a remote syslog. If that works, you could then add your problem module back, and get visibility to exactly what the client is doing, and any errors it is seeing. Or make some small modification to the existing log file on the remote server, with

[Puppet Users] Re: Parametrized classes, definitions and structure

2012-04-24 Thread Andy Taylor
Thank you very much for your detailed reply John. I hadn't looked at Hiera before, it looks very interesting. On the point of it's not good to include node/site data in manifests, it's kind of essential in my eyes to the setup I am trying to implement. At my company, one server may serve a site

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Nigel Kersten
This should get reported as a bug though. We should probably only accept absolute paths for the 'path' parameter, and false should get interpreted as the boolean. On Tue, Apr 24, 2012 at 6:38 AM, Peter Bukowinski pmb...@gmail.com wrote: Glad you got it sorted. You've discovered the importance

[Puppet Users] Re: centos 6.2 - puppet 2.7.13 - SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert protocol version

2012-04-24 Thread Eric Sorenson
I suspect something is wrong with the underlying ssl libraries on the client with the problem. Does the output of 'rpm -qa | grep ssl' on the non-working client look the same as the client which works? How about ldd -r `rpm -ql ruby-libs | grep openssl.so` ? On Sunday, April 22, 2012 2:19:27

Re: [Puppet Users] Re: Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Ashley Penney
It checks every layer of the hierarchy, so it would look for: fqdn/server1.yaml environment/staging.yaml common.yaml But the important thing to know is it's looking for an actual variable. If you had defined selinux: disabled in common.yaml and nowhere else then it would always reach that file

Re: [Puppet Users] Re: centos 6.2 - puppet 2.7.13 - SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert protocol version

2012-04-24 Thread Christopher Wood
err: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 I've seen that when the clocks on the two hosts were out of sync. Even when I brought the clocks back into sync I found that I had to regenerate the certs to get it working. master: puppet cert --clean

Re: [Puppet Users] Migrate installation to different directory

2012-04-24 Thread JA
Stefan; Thanks for the suggestion. However, we are running puppet via Passenger. So, I assume I need to update the config.ru file. Do you have any suggestions about that? Greatly appreciate your help and advice! On Thu, Apr 19, 2012 at 6:17 PM, Stefan Schulte stefan.schu...@taunusstein.net

Re: [Puppet Users] Migrate installation to different directory

2012-04-24 Thread Nigel Kersten
On Tue, Apr 24, 2012 at 11:18 AM, JA atkins.jac...@gmail.com wrote: Stefan; Thanks for the suggestion. However, we are running puppet via Passenger. So, I assume I need to update the config.ru file. Do you have any suggestions about that? Greatly appreciate your help and advice! Look

Re: [Puppet Users] Migrate installation to different directory

2012-04-24 Thread JA
Thanks! I am (obviously) very new to ruby/rack!! Thanks! On Tue, Apr 24, 2012 at 2:30 PM, Nigel Kersten ni...@puppetlabs.com wrote: On Tue, Apr 24, 2012 at 11:18 AM, JA atkins.jac...@gmail.com wrote: Stefan; Thanks for the suggestion.  However, we are running puppet via Passenger.  So,

[Puppet Users] Announce: Puppet 2.7.14rc3 Available

2012-04-24 Thread Moses Mendoza
Puppet 2.7.14rc3 is a maintenance release candidate for Puppet in the 2.7.x series. Downloads are available: * Source http://downloads.puppetlabs.com/puppet/puppet-2.7.14rc3.tar.gz ## Bug Fixes ## (#13682) Rename Puppet::Module::Tool to Puppet::ModuleTool Without this patch, Puppet will

[Puppet Users] Re: Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Calimero
On 24 avr, 19:10, Les Ault au...@utk.edu wrote: I use facter variables to set dynamic parameters based on the host.  For example I created a module to modify sysctl entries: node dbserver.example.com {    include sysctl    # Modify sysctl values    $shmall = inline_template(%=

[Puppet Users] Re: Moving from Puppet 0.25 to Puppet 2.6+ : global scope/variables

2012-04-24 Thread Calimero
On 24 avr, 19:54, Ashley Penney apen...@gmail.com wrote: It checks every layer of the hierarchy, so it would look for: fqdn/server1.yaml environment/staging.yaml common.yaml But the important thing to know is it's looking for an actual variable.  If you had defined selinux: disabled in

[Puppet Users] Re: RSpec test to verify variable/parameter declaration

2012-04-24 Thread Shantanu
On Apr 23, 5:49 pm, Tim Sharpe t...@sharpe.id.au wrote: So, rspec-puppet can't and won't ever work this way.  What it's testing is the resulting catalogue of Puppet resources that your host executes (the behaviour of Puppet).  Instead of testing that a variable is defined, you should be

[Puppet Users] ordering or chaining for generate() function

2012-04-24 Thread psychobyte
Hi, I need to run a the generate() function (server side) in order to populate a data file for one of my modules. Is there a way to ensure that the generate function is run before a config file is created (the contents of the file doesn't come directly from generate()). Right now I'm

Re: [Puppet Users] What is the false directory?

2012-04-24 Thread Krzysztof Wilczynski
Hi, On Tuesday, April 24, 2012 6:38:27 PM UTC+1, Nigel Kersten wrote: This should get reported as a bug though. We should probably only accept absolute paths for the 'path' parameter, and false should get interpreted as the boolean. +1 KW -- You received this message because you are

[Puppet Users] Can you check a setting set in puppet.conf from within a module

2012-04-24 Thread Peter Foley
Hi List, In a module that I am developing I would like to do different things depending on if storeconfigs is true or false. Is there any way to: if $storeconfigs == true { # Use stored config values } else { # Use non stored config values } Thanks, Peter. -- You

Re: [Puppet Users] Can you check a setting set in puppet.conf from within a module

2012-04-24 Thread Gary Larizza
Hey Peter, You should be able to do $settings::storeconfigs to get that value. On Tue, Apr 24, 2012 at 2:14 PM, Peter Foley pe...@ifoley.id.au wrote: Hi List, In a module that I am developing I would like to do different things depending on if storeconfigs is true or false. Is there any