Re: [Puppet Users] ignoring changes to a file

2014-03-05 Thread Thomas Müller
On Wed, 05 Mar 2014 06:41:45 -0800 wrote kaustubh chaudhari: One of my application requires me to copy a config file after installation the application. This needs to be done only once after installation However this config file is managed by a central server and keeps on getting updated

Re: [Puppet Users] ignoring changes to a file

2014-03-05 Thread Thomas Müller
On Wed, 05 Mar 2014 07:32:59 -0800 wrote kaustubh chaudhari: Thanks Alexzender and Thomas for the reply. This is partially useful. The requirement is i need to copy it first basically overwrite it once and then ignore all the changes. Any clue how this can be achieved! create the

Re: [Puppet Users] ignoring changes to a file

2014-03-05 Thread Thomas Müller
On Wed, 05 Mar 2014 07:57:18 -0800 wrote kaustubh chaudhari: Hey Thomas, Thats the tricky part! The location where i want to copy this file is created by setup. Its a windows application. So i will have to copy the file(overwrite) it after the package installation and than ignore any

[Puppet Users] integration with agent-side password management tool

2014-08-07 Thread Thomas Müller
Hi We have some requirement to integrated with a password management tool. We only have access to the credentials on the agent-side and we may not put them into a fact. two possible solutions come to mind: - we could create ruby functions to query the credentials. If they could be used in

[Puppet Users] Puppet server getting closed source?

2014-09-02 Thread Thomas Müller
Hi Just heard some rumors on the floor that future Puppet products will only be available as closed source. Is there some official statement from Puppetlabs? - Thomas -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this

Re: [Puppet Users] very basic beginner problem

2014-10-20 Thread Thomas Müller
my site.pp is: ... node 'mel-integ02..com' { include test } node 'mel-integ04..com' { } ... The test file doesn't exist on mel-integ02. When I try to apply it I get the following output and the test file still doesn't exist. # puppet apply site.pp Notice: Compiled catalog

Re: [Puppet Users] Best way to do custom facts based on 3rd party data

2014-10-23 Thread Thomas Müller
Hi Kimo I'm using puppet enterprise 3 with hiera and roles/profiles. I'm trying to find a good way to handle some facts (namely role) being generated on the master and sourced based on the underlying hypervisor. I.e., if the node is running on EC2 then the role would be from a tag, for

[Puppet Users] Howto: SELinux, Puppet and Passenger (EPEL) on RHEL6

2014-10-23 Thread Thomas Müller
Hi I've managed to run Puppet 3.7.1 with Passenger from EPEL on RHEL6. It needs a SELinux Module (or extension of the existion modules) and a Wrapper-script for a type transition from Passenger to Puppetmaster. I've documented the 2 files here:

[Puppet Users] Re: Adding then removing SW - best practices?

2014-10-27 Thread Thomas Müller
Am Sonntag, 26. Oktober 2014 13:18:44 UTC+1 schrieb JonY: Let's say that I'm deploying a steady stream of identical hosts. Each has some piece of SW on it that's managed by Puppet. I continue to (regularly) add to and maintain this group over time. Day comes when this SW is no longer

[Puppet Users] Re: Puppet directory environments mysteriously breaking -- help?

2014-10-28 Thread Thomas Müller
Am Montag, 27. Oktober 2014 22:43:07 UTC+1 schrieb Victor Danilchenko: Hi all, I am running a puppetmaster setup on CentOS. We have out production environment working fine. However, I am trying to migrate from puppet 3.4, and from config environments to directory environments. I got my

Re: [Puppet Users] Firewall rule proto default

2014-12-15 Thread Thomas Müller
And from a quick look at lib/puppet/type/firewalls.rb I see: newproperty(:proto) do desc -EOS The specific protocol to match for this rule. By default this is *tcp*. EOS newvalues(*[:tcp, :udp, :icmp, :ipv6-icmp, :esp, :ah, :vrrp, :igmp, :ipencap, :ospf, :gre, :cbt, :all].collect do

[Puppet Users] Re: Force resigning of existing certificates

2014-12-15 Thread Thomas Müller
Am Dienstag, 9. Dezember 2014 23:32:40 UTC+1 schrieb heeyoung kim: Hello, I want to know how to resign old signed certificate on puppet master when agents rebuild OS and request CSR. I have over 200 workstations rebuilding frequently, so it is not effect to clean agents' certificate

[Puppet Users] Re: issue with hiera.eyaml file

2014-12-15 Thread Thomas Müller
Am Donnerstag, 13. November 2014 22:55:27 UTC+1 schrieb Spriya: Hi All, I am having an issue Cannot load backend eyaml: cannot load such file -- highline/import. when running this command: *sudo -u pe-puppet /opt/puppet/bin/hiera -c /etc/puppetlabs/puppet/hiera.yaml --debug

[Puppet Users] Re: Package ensure present but install older version if missing (not latest in repo)?

2014-12-19 Thread Thomas Müller
You could define a versionlock ( yum plugin available in the rhel/centos repo) for the specific package versions. - Thomas -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an

Re: [Puppet Users] Re: File 'replace = false' doesn't match my expectations...

2015-02-02 Thread Thomas Müller
Am Dienstag, 20. Januar 2015 20:28:33 UTC+1 schrieb Marc: Using 'replace = false' should not trigger a checksum operation but given the time it takes with big files I think it does. Does it make sense to perform checksum when 'replace' is set to false? what about setting checksum = none?

[Puppet Users] Re: Requiring a subclass?

2015-02-09 Thread Thomas Müller
Am Freitag, 6. Februar 2015 22:45:30 UTC+1 schrieb guymatz: Hello! Is there a way to set the dependency for a resource that is a subclass? I have an accounts module, and within that is accounts::account which contains declarations to create user, group, etc. . . . I would like to do

[Puppet Users] Re: SSL Cert automation for service

2015-01-07 Thread Thomas Müller
Am Montag, 5. Januar 2015 02:46:35 UTC+1 schrieb Tom Noonan: Hello, list: I'm looking for information/tutorials on using Puppet to generate SSL certs for a service managed by Puppet, not Puppet itself. What I would like to do is give Puppet access to internal CA keys and have it

Re: [Puppet Users] run beaker tests on a live system

2015-05-06 Thread Thomas Müller
I discovered that rspec is able to have tags on describe/context/it and filter it with maybe rspec --tag liveacceptance:true to only include the relevant tests. You would definitely want to be careful on how to structure your tests. Any tests with `apply_manifest` or the like

[Puppet Users] Re: Using puppet for the configuration of a custom appliance

2015-04-08 Thread Thomas Müller
Am Montag, 6. April 2015 22:09:41 UTC+2 schrieb varun umesh: I am planning to use puppet for the configuration of a custom network appliance. My main problem is i am unable to install puppet on the appliance, as it is not supported. I have access to the rest api's exposed by the

[Puppet Users] Re: Puppet 4.0: Evaluation Error: Error while evaluating a Function Call, Could not find data item classes in any Hiera data file and no default supplied

2015-05-20 Thread Thomas Müller
Am Mittwoch, 20. Mai 2015 10:31:14 UTC+2 schrieb Danny Roberts: I have built a new Puppet master to test Puppet 4. I have installed the server itself and used r10k to put my code on the server but when doing a puppet client run on the master I get this error: root@puppet:~# puppet agent

[Puppet Users] Re: Adding users to MySql from Active Directory

2015-05-20 Thread Thomas Müller
Hi Allan I see that it's possible to use the MySql module to create users and manage grants. And, it's also possible to have Puppet authenticate against Active Directory. What do you mean by authenticate puppet against active directory? I'm not seeing a simple way to bridge between

[Puppet Users] Re: Error: Failed to submit 'deactivate node' command

2015-05-20 Thread Thomas Müller
Am Mittwoch, 20. Mai 2015 07:15:07 UTC+2 schrieb Vincent Weathers: This may have been asked before, but I'm having problems clearing out nodes from puppetdb. Some background info: OS: [root@puppet-sys puppet]# cat /etc/redhat-release Scientific Linux release 6.6 (Carbon) Puppet

[Puppet Users] Re: Puppet 4.0: Evaluation Error: Error while evaluating a Function Call, Could not find data item classes in any Hiera data file and no default supplied

2015-05-20 Thread Thomas Müller
Reading the puppet 4.1.0 releasenotes there is some bugfix for hiera_include included: https://tickets.puppetlabs.com/plugins/servlet/mobile#issue/PUP-4334 -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop

[Puppet Users] Howto: easily create rpms from ruby gems for use with puppet-agent AIO

2015-06-05 Thread Thomas Müller
hi For those using rpm's to install gem's I want to share my script to create rpm's from gems - for example to use r10k - with the new puppet-agent aio package on el6: https://gist.github.com/vinzent/57c1448403e68aaf1650 it should work on el5, el7 and maybe even on debian/ubuntu with -t deb

[Puppet Users] Re: r10k: modules folder content deleted

2015-06-09 Thread Thomas Müller
argh. of course it's the non-existent puppetfile what was my problem. added a Puppetfile only containing the moduledir: puppetfile_modules and all is fine! - Thomas Am Dienstag, 9. Juni 2015 10:23:46 UTC+2 schrieb Thomas Müller: Hi ! I'd like to move to r10k (1.5.1) for the environment

[Puppet Users] r10k: modules folder content deleted

2015-06-09 Thread Thomas Müller
Hi ! I'd like to move to r10k (1.5.1) for the environment deployment for our new puppet master setup. Right now we have the complete environment in an git branch. Later on we maybe move to the Puppetfile/modules approach. Our modules live in the modules/ subfolder. r10k removes the content

[Puppet Users] Snippet: Apache vHost to proxy to central CA and local puppet server

2015-06-09 Thread Thomas Müller
hi If you have a centralized ca you can proxy the certificate traffic to the central puppet ca service (1). And forward all the other traffic to the local puppet server (2, 3). The snippet requires puppetlabs-apache module 1.4.1 as it won't include the proxy template with $proxy_pass_match

Re: [Puppet Users] Open Source 4.0 version identifier vs. very different rpm and dpkg package versions

2015-06-18 Thread Thomas Müller
FWIW I find this argument pretty compelling and would like to advance the version number of the next release of puppet-agent to '4.something'. Our current thinking is that this will be a matched to the puppet version, with an extra digit on the end of the version number that indicates

[Puppet Users] Re: puppet 4: webserver configuration

2015-06-16 Thread Thomas Müller
I would configure a apache in front of puppetserver (sample vhost: https://groups.google.com/forum/#!topic/puppet-users/ECZ4-9XD7e0) to serve other content. I suppose that the puppet server is not thought as a general purpose webserver. - Thomas Am Montag, 15. Juni 2015 18:42:12 UTC+2

[Puppet Users] Re: Snippet: Apache vHost to proxy to central CA and local puppet server

2015-06-16 Thread Thomas Müller
seems the URL schema of the certificate service is not the same as with puppet 3. ^/([^/]+/certificate.*)$ needs to be ^/(puppet-ca/.*)$ - Thomas Am Dienstag, 9. Juni 2015 08:34:52 UTC+2 schrieb Thomas Müller: hi If you have a centralized ca you can proxy the certificate traffic

[Puppet Users] Re: custom fact in custom facts resolves to nil

2015-05-27 Thread Thomas Müller
Am Mittwoch, 27. Mai 2015 08:36:39 UTC+2 schrieb ashe...@gmail.com: Hi, is it possible to use custom facts inside other custom facts? With facter -p the custom fact is listed ( e.g.): the -p / --puppet flag for facter is deprecated. use of puppet facts will be required.

[Puppet Users] Re: custom fact in custom facts resolves to nil

2015-05-27 Thread Thomas Müller
Am Mittwoch, 27. Mai 2015 11:26:35 UTC+2 schrieb Thomas Müller: Am Mittwoch, 27. Mai 2015 08:36:39 UTC+2 schrieb ashe...@gmail.com: Hi, is it possible to use custom facts inside other custom facts? With facter -p the custom fact is listed ( e.g.): the -p / --puppet flag for facter

[Puppet Users] Re: puppetserver 2.0.0: out of memory with Xmx3g and 1 client

2015-05-28 Thread Thomas Müller
it seems it was caused by an 15 line custom function which worked for the last few years. replaced it by some stdlib funcntions and now it works. other lessons learned: - run puppet-lint on all manifests (and take advantage of the new nice --fix option) - fixes a lot of problems in old code -

[Puppet Users] Re: Load balancing Puppet Server

2015-05-26 Thread Thomas Müller
Am Montag, 11. Mai 2015 18:16:21 UTC+2 schrieb Joao Morais: Hello list. I'm using open source Puppet 3.7.4 with Puppet Server 1.0.2 and I'm evaluating how to load balance two or more Puppet Servers, specially about centralizing the CA. Is the doc

[Puppet Users] puppetserver 2.0.0: out of memory with Xmx3g and 1 client

2015-05-26 Thread Thomas Müller
hi I've started trying to run our puppet3 environments on puppet4 (puppet-agent 1.1.0 with puppetserver 2.0.0). It failed with some out of memory problem. I've started with 1g and increased it up to 3g - same error. It's a standalone RHEL6 Vm with total 4GB memory and only itself as client

Re: [Puppet Users] Getting data out of hiera?

2015-07-21 Thread Thomas Müller
Systemd services do not have access the normal environment variables that are present in yor shell. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [Puppet Users] Getting data out of hiera?

2015-07-21 Thread Thomas Müller
Are you saying that my test is no good because it is using the environment from the shell? yes systemd does not send provide /etc/profile.d environment to its services. just don't use FACTER_ env variables. Use facter-dot-d or a custom fact in a puppet module. - Thomas -- You

Re: [Puppet Users] Re: Could not evaluate: Could not find command '/var/lib/puppet/concat/bin/concatfragments.rb'

2015-07-13 Thread Thomas Müller
It needs to copy a script once - which it can't do if it was never ran without noop. after that the noop mode should work. Am Montag, 13. Juli 2015 15:40:57 UTC+2 schrieb Charlie-Jane Costello: Yeah, I've just tried running the code again without --noop and it worked fine. On Monday,

Re: [Puppet Users] Getting data out of hiera?

2015-07-21 Thread Thomas Müller
you need to adjust the hiera hierarchy. To adjust it you need a top scope variable (e.g. pod_prefix) (https://docs.puppetlabs.com/puppet/latest/reference/lang_scope.html#top-scope ) to be used in hiera.yaml configuration file. you could also make a custom fact

[Puppet Users] puppet collectors plus own data

2015-07-20 Thread Thomas Müller
Hi thomas Saz/ssh seems to use the standard sshkey type to export the host keys. Code: https://github.com/saz/puppet-ssh/blob/master/manifests/hostkeys.pp Seems you can export the non-puppet managed keys on a puppet managed node to get it distributed. Thomas -- You received this message

[Puppet Users] Confine a custom fact by file existence

2015-10-22 Thread Thomas Müller
Hi I know it's possible to confine a fact by other facts like "confine :operatingsystem => :Fedora". But i have a fact which requires a binary from a rpm package which is only installed by puppet. For the first puppet run tries to execute the not-yet installed binary and fails. is it

[Puppet Users] Re: Using Package and Yumrepo together? Why is yumrepo creating a corrupt .repo file?

2015-11-13 Thread Thomas Müller
Am Freitag, 13. November 2015 02:40:30 UTC+1 schrieb Stefan Lasiewski: > > Hello Everyone, > > I am running Puppet 3.8 on CentOS 6. I'm trying to install a yum > repository from an RPM package, as well as modify the contents of the .repo > file after the package is installed. > > My example

Re: [Puppet Users] Ordering agent runs

2015-10-08 Thread Thomas Müller
Am Mittwoch, 7. Oktober 2015 23:21:59 UTC+2 schrieb Xav Paice: > > On 07/10/15 08:20, Rick Lindal wrote: > > Thanks for the link Martin. We are using open source. > > sounds like it will be made available later on: "Language changes used to model applications will be available as part of Open

[Puppet Users] Scheduled changes to SSL certs

2015-10-16 Thread Thomas Müller
You could use the strftime function from stdlib instead of generate. I don't know a better way as comparing dates in a conditional. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from

[Puppet Users] Re: slashes or dashes for module names in metadata.json ?

2015-10-17 Thread Thomas Müller
Am Samstag, 17. Oktober 2015 00:54:15 UTC+2 schrieb Vince Skahan: > > Confused - I've seen both used in PL docs, and both used in various tools > and examples. > > If I'm identifying the puppetlabs stdlib into my metadata.json file as a > dependency, as an example: > >- do I call it

Re: [Puppet Users] Re: Puppet 3.8 to 4.2 migration issue...

2015-10-14 Thread Thomas Müller
I would recommend you to run puppet-lint against all your manifests. It will detect other possible problems. - Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an

[Puppet Users] Re: parser=future ; puppet version 3.8; how to find/validate removed/deprecated features in current code all errors at once.

2015-09-21 Thread Thomas Müller
Am Montag, 21. September 2015 05:08:58 UTC+2 schrieb rhpupp...@gmail.com: > > We are using puppet 3.8. I'm currently testing our existing modules > compatibility with puppet 4 using parser = future option in puppet.conf. > When i run puppet agent against to this master server, it is showing

[Puppet Users] Designing modules with long running tasks

2015-12-02 Thread Thomas Müller
I don't think puppet is a good fit for what you trie to do. Puppet is more about configuration and less for long running tasks. I would recommend to write the list of files to be downloaded as a configfile for a cronjob which reads it and starts/restarts your service itself. -Thomas -- You

[Puppet Users] Re: Puppetmaster compiles old catalogs

2015-12-12 Thread Thomas Müller
Am Sonntag, 6. Dezember 2015 15:27:21 UTC+1 schrieb César: > > Hi all, > > we're seeing every now and then an odd behaviour with Puppet catalog > compilation. Basically, we modify and save the node manifests and a few > seconds later we trigger a catalog run to apply the changes. > However,

[Puppet Users] Re: Best way to do cross-module dependencies

2015-12-11 Thread Thomas Müller
Am Montag, 7. Dezember 2015 23:59:47 UTC+1 schrieb Dan Mahoney: > > Hey all, > > Everything I've done thusfar in creating my own custom modules has drilled > some basics into my head -- these are right from the puppet web docs: > > "A module’s classes, defined types, and plugins *should all be

[Puppet Users] Re: SELinux context warnings, how-to fix ?

2015-12-01 Thread Thomas Müller
Am Montag, 30. November 2015 18:15:59 UTC+1 schrieb Remy: > > Hi, > > We moved from 3.1 to 3.8 and we faced some warnings regarding SELinux all > of the sudden: > > Nov 30 14:48:22 nodename puppet-agent[9865]: Failed to set SELinux context > system_u:object_r:usr_t:s0 on /usr/sap/home/username

[Puppet Users] Re: SELinux context warnings, how-to fix ?

2015-12-01 Thread Thomas Müller
sorry for the maths inbetween. this did not show up in the google editor. :) Am Dienstag, 1. Dezember 2015 09:23:44 UTC+1 schrieb Thomas Müller: > > > matchpathcony=a+bsin(c+dx > y=a+bsin(c+dx) > -- You received this message because you are subscribed to the Google Groups "

[Puppet Users] Re: How can i send a complete file from on agent to another agent......?

2015-11-23 Thread Thomas Müller
Am Montag, 23. November 2015 14:23:52 UTC+1 schrieb mahmad@gmail.com: > > Any one can share code which take file from client side and send complete > file to another agent? Please help me out? > IMHO: Puppet is not a file transfer tool. But maybe you could use exported resources

[Puppet Users] Re: Puppet-in-Docker

2016-06-04 Thread Thomas Müller
Hi Gareth > > > * You want to run Puppet on something like CoreOS, PhotonOS or Atomic > where containers are the defacto way of installing software > * You want a full local development environment (including on WIndows > or OSX) with minimal overhead > > The Dockerfiles and various build

[Puppet Users] Re: Monitoring Puppet with Zabbix

2016-01-18 Thread Thomas Müller
Am Donnerstag, 10. Dezember 2015 16:10:24 UTC+1 schrieb hoize: > > Hello! > > Is there a way to monitor puppet runs with zabbix? > Here is what i want to monitor: > - a host's puppet run is more than 20 minutes ago > not related but interesting: why you are running puppet that often? > - a

[Puppet Users] Facter - custom fact regex

2016-01-14 Thread Thomas Müller
IMHO the fact "network" is a default fact from facter >= 3. i would change the name. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[Puppet Users] Puppet file type - wrong selinux fcontext detected

2016-02-01 Thread Thomas Müller
I've seen this if puppet agent service was already running when the fcontext got added with semanage. Afterwards file resources applied the old contexts. This behaviour could be reproduced for all puppet runs started from the deamon. Puppet runs started from the shell with --test did apply the

[Puppet Users] Re: puppet exec is not working

2016-02-29 Thread Thomas Müller
Am Montag, 29. Februar 2016 20:20:25 UTC+1 schrieb moons...@gmail.com: > > Hi All, > > I following code is not working. Not sure why. > > exec { "file_system_cleanup": > command => "touch /root/file_system_cleanup.log", > path=>

[Puppet Users] Re: Referencing hash values within module

2016-01-22 Thread Thomas Müller
Hi Mike Am Donnerstag, 21. Januar 2016 23:20:38 UTC+1 schrieb Mike Reed: > > ... check the values by running a facter -p, which results in something > like: > > nvidia_installed => false > video_card_id => 17c2 > class => workstation > ... > > if ($::is_virtual == true) and ($::class ==

[Puppet Users] Re: How to install tomcat silenlty using puppet on Windows 7

2016-01-22 Thread Thomas Müller
I don't think this is a puppet issue. I suspect /VERISILENT is wrong. Try googling for tomcat and silent install. And read the docs too about package type on windows: https://docs.puppetlabs.com/puppet/3.6/reference/resources_package_windows.html . I guess "tomcat-8" isn't correct. - Thomas

[Puppet Users] Re: Purge puppet's reports

2016-01-22 Thread Thomas Müller
Am Donnerstag, 21. Januar 2016 12:45:59 UTC+1 schrieb Tiago Delboni: > > Hi, I'm revisiting this topic. > > Wasn't garbage collector supposed to clean up the old reports and leave > the last "report-ttl" on disk? Or this is valid only for the reports stored > in the PuppetDB's database? > I

[Puppet Users] Updating facts for a client in PuppetDB independently from the master

2016-02-17 Thread Thomas Müller
wouldnt next puppet run replace your out of band added fact? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view

RE: [Puppet Users] Pasword retrievel from external source on node

2016-03-10 Thread Thomas Müller
I'm too interested in how people manage credentials without having it in the catalog. Recently i stumbled upon a puppetlabs blogpost about conjur. There is also a video of a presentation at puppetconf 2015 about this. Managing credentials out of band ("out of puppet") seems like a good way to

Re: [Puppet Users] Pasword retrievel from external source on node

2016-03-19 Thread Thomas Müller
Am Donnerstag, 10. März 2016 17:01:36 UTC+1 schrieb Craig Dunn: > > > > On Thu, Mar 10, 2016 at 3:09 PM, Thomas Müller <tho...@chaschperli.ch > > wrote: > >> I'm too interested in how people manage credentials without having it in >> the

[Puppet Users] Re: Puppet Enterprise + SELinux

2016-03-24 Thread Thomas Müller
Am Donnerstag, 24. März 2016 14:31:01 UTC+1 schrieb jcbollinger: > > > > On Thursday, March 24, 2016 at 4:16:17 AM UTC-5, Thomas Müller wrote: >> >> Hi >> >> Does Puppet Enterprise support running puppet agent selinux confined? >> >> Seems at least

[Puppet Users] Puppet Enterprise + SELinux

2016-03-24 Thread Thomas Müller
Hi Does Puppet Enterprise support running puppet agent selinux confined? Seems at least EL6 and EL7 provide types but it seems pe-agent is not using them as they are started in initrc_t (EL6) or unconfined_service_t (EL7). I can't find documentation about this topic on docs.puppetlabs.com .

[Puppet Users] Quiet all notifies for one module

2016-03-08 Thread Thomas Müller
What about setting a different vardir for puppet apply runs than for your puppet agent runs? So you would get yor own copy. Not tested but something like: puppet apply --vardir /var/lib/puppet-apply ... - Thomas -- You received this message because you are subscribed to the Google Groups

[Puppet Users] How to control who can add/update permissions in sudoers

2016-05-19 Thread Thomas Müller
Look for assert_private in puppetlabs-stdlib module. Maybe its what you are looking for. Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[Puppet Users] Re: How to Read New Files Dynamically with Hiera?

2016-04-14 Thread Thomas Müller
Am Donnerstag, 14. April 2016 18:32:24 UTC+2 schrieb o...@soluto.com: > > Hi, > We need to manage many keys in Hiera. Since many people should be able to > edit the keys and in order to avoid a complete mess I was thinking to work > with many different files. The problem is that I don't know

[Puppet Users] Re: Strategies for "boring" packages

2016-04-19 Thread Thomas Müller
Am Dienstag, 19. April 2016 03:07:34 UTC+2 schrieb J.T. Conklin: > > At work, we've written about 120 modules in our puppet code repository. > About two dozen are "interesting", in that they have lots of parameters > and configuration that is specific to our environment. The balance are >

[Puppet Users] Re: Centos 7 authentication with puppet

2016-08-09 Thread Thomas Müller
> > One of the packages is responsible for configuring systems to allow > certain users ssh access. > a file '/etc/custom_txt_file' manually created on system with contents of: > ' a tag' > > puppet reads that tag and if it finds match it adds certain AD group to > /etc/pam_allowed_groups as

[Puppet Users] Re: Function best approach

2016-08-09 Thread Thomas Müller
Am Dienstag, 19. Juli 2016 18:50:45 UTC+2 schrieb Salty Old Cowdawg: > > Let me preface everything I'm about to say by saying I only started > seriously coding in Ruby about a year ago. I've been a Perl guy since 1989 > and C/C++ and friends for longer than that so I'm not a total newbie.

[Puppet Users] Re: File_line help (regex?)

2016-08-09 Thread Thomas Müller
Am Dienstag, 19. Juli 2016 17:36:36 UTC+2 schrieb mike r: > > trying to make sure my grub conf file contains a string, > > > cat /etc/default/grub > > GRUB_DISABLE_SUBMENU=true > GRUB_TERMINAL_OUTPUT="console" > *GRUB_CMDLINE_LINUX="crashkernel=auto audit=1 rd.lvm.lv >

[Puppet Users] User Management from LDAP / freeipa

2017-02-06 Thread Thomas Müller
IMHO sounds like a job for pam_mkhomedir (https://linux.die.net/man/8/pam_mkhomedir) and not for puppet. - Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email

[Puppet Users] Use of 'hiera.yaml' version 3 is deprecated. It should be converted to version 5

2017-02-06 Thread Thomas Müller
This is a new deprecation introduced with puppet 4.9.0 (puppet-agent 1.9.0). A related bug: https://tickets.puppetlabs.com/browse/PUP-7171 I too can't find docs to the new format . - Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To

Re: [Puppet Users] Puppet Language Style Guide update

2017-02-14 Thread Thomas Müller
I'm using vim with syntastic for code checks while editing. For git hooks checks I use overcommit - a flexible git hook manager. This is not a GUI but works great. :-) Thomas https://github.com/vim-syntastic/syntastic https://github.com/brigade/overcommit -- You received this message because

[Puppet Users] Re: How to reference NFS shares in a file resource

2017-01-15 Thread Thomas Müller
Am Freitag, 13. Januar 2017 18:23:31 UTC+1 schrieb Warron French: > > Hi, I need to understand how to properly write some puppet code that will > take files off of an NFS share on serverA and place them on my clients via > a puppet module. > > My NFS server is *serverA.home*, providing

Re: [Puppet Users] Best way to set variables based on packages installed on client?

2016-09-16 Thread Thomas Müller
Am Donnerstag, 15. September 2016 14:53:57 UTC+2 schrieb HPUX_PUPPET: > > ... > > This post was mainly about seeing if Puppet / Factor had been tweaked over > the years to pull lists of installed RPMs given Red Hat Satellite 6 using > Puppet as part of their software management and server

[Puppet Users] Re: Issue with lvm, "Invalid parameter unless_vg(:unless_vg)"

2016-10-03 Thread Thomas Müller
Am Montag, 3. Oktober 2016 14:36:22 UTC+2 schrieb Stephen O'Kane: > > Hi, >I keep getting this error when running a installation using puppet. > > Physical_volume[/dev/disk/by-id/virtio-6c2cd884-c21b-4bff-b-part1]: Could > not evaluate: Invalid parameter unless_vg(:unless_vg) > > My

[Puppet Users] Re: Role vs hiera

2016-10-27 Thread Thomas Müller
Am Dienstag, 18. Oktober 2016 20:34:25 UTC+2 schrieb Ugo Bellavance: > > Hi, > > I've seen tutorials where they add the role as a fact in an client and > then can use the role for hiera data. Is there a better way to do so (ie > without having to configure anything on the client)? > you could

[Puppet Users] Encrypting password with custom provider

2016-11-08 Thread Thomas Müller
You could use the datacat module. It runs the template on the client instead of on the puppet master. https://forge.puppet.com/richardc/datacat/types -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop

Re: [Puppet Users] paragraphing hiera yaml

2016-11-05 Thread Thomas Müller
Am Samstag, 5. November 2016 13:29:13 UTC+1 schrieb Thomas Müller: > > > > Am Mittwoch, 2. November 2016 15:10:41 UTC+1 schrieb Craig Dunn: >> >> >> >> On Fri, Oct 28, 2016 at 7:45 PM, Christopher Wood <christop...@pobox.com> >> wrote: >> &g

Re: [Puppet Users] paragraphing hiera yaml

2016-11-05 Thread Thomas Müller
Am Mittwoch, 2. November 2016 15:10:41 UTC+1 schrieb Craig Dunn: > > > > On Fri, Oct 28, 2016 at 7:45 PM, Christopher Wood > wrote: > >> >> >> So how would I auto-magically auto-paragraph hiera yaml to make it >> friendlier for more people, while still keeping it

Re: [Puppet Users] Single Enterprise Puppet Master to support 2 Control Repos

2016-11-28 Thread Thomas Müller
Am Montag, 28. November 2016 19:06:55 UTC+1 schrieb Rob Nelson: > > This will work but I would caution against it. Only recently has per > environment segregation been implemented and there are still some issues > present (I believe most fixes showed up in 4.8.0 but not sure). You don't >

[Puppet Users] Puppet Community Roles and Profiles

2017-01-11 Thread Thomas Müller
Hey Joe Roles and profiles isnt tied to puppet enterprise. Works great with non-enterprise edition. Original blogpost about the concept: http://www.craigdunn.org/2012/05/239/ Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To

[Puppet Users] Re: writing custom fact -> return value not as expected

2017-01-13 Thread Thomas Müller
Am Dienstag, 10. Januar 2017 17:44:23 UTC+1 schrieb Denny: > > Hi there, > > probably a pretty easy to answer question. > > I want to try out adding custom facts. My first custom fact should be > "lastrebootdate" > > My code looks like this: > > Facter.add(:lastrebootdate) do > setcode do >

[Puppet Users] Re: Regex auto-escape

2017-01-13 Thread Thomas Müller
Am Donnerstag, 12. Januar 2017 20:23:48 UTC+1 schrieb Ugo Bellavance: > > Hi, > > I've been working on a public module that manage text entries that have > SELinux contexts in them. I added basic support to some of the regex > special characters that may be used in SELinux contexts and here's

Re: [Puppet Users] Could not find resource, but it's there.

2017-01-09 Thread Thomas Müller
Wouldnt it work anyways (if manifest order or not) because the file typeauto-reqires its parents? https://docs.puppet.com/puppet/latest/types/file.html#file-description -Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe

Re: [Puppet Users] Single Enterprise Puppet Master to support 2 Control Repos

2016-12-03 Thread Thomas Müller
Am Samstag, 3. Dezember 2016 18:40:58 UTC+1 schrieb Eric Sorenson: > > Hi Thomas, have you tried the `puppet generate type` workflow described on > that doc to avoid the problems with environment bleed-through? You said you > failed w/the elasticsearch module and I'm wondering if that is

[Puppet Users] RPM's with prein scriptlets

2016-12-28 Thread Thomas Müller
The silly rpms I came across which require userinput to accept a license had a "silent" mode by creating a file somewhere in /tmp before installing the rpm ... Or just use rpmrebuild (available from epel for EL) and remove the code. - Thomas -- You received this message because you are

[Puppet Users] Re: Puppet Module Gem Dependency

2017-01-02 Thread Thomas Müller
HI Bryan > I'm updating a module that will require a ruby gem (e.g. xml-simple) for > one of the custom providers. How does Puppet make sure that the gem is > available and installed when the module is installed? Does a *puppet > module install* also install any dependent gems? How does it

[Puppet Users] Puppetserver & content logging

2016-12-21 Thread Thomas Müller
hi I thought about capturing catalog requests with puppetserver to gather data for a simple load test. I've configured another logback logfile* with pattern %fullRequest%n%n%fullResponse - it then logs headers but no content. logback docs** talk about enabling a TeeFilter to enable those. Is

[Puppet Users] Re: Node classification groups for Puppet Community edition?

2016-12-23 Thread Thomas Müller
Am Freitag, 23. Dezember 2016 02:13:50 UTC+1 schrieb Joe: > > Hi Guys, new to puppet. Wondering if htere are node classification groups > for puppet community edition or if these are only available in the > Enterprise version? > this is a puppet enterprise feature. for opensource you could

[Puppet Users] Re: Puppetserver & content logging

2016-12-23 Thread Thomas Müller
Hi Jeremy Am Mittwoch, 21. Dezember 2016 22:31:34 UTC+1 schrieb Jeremy Barlow: > > I don't think there's any way to register the TeeFilter without making > changes to the library, trapperkeeper-webserver-jetty9 > , that > Puppet

[Puppet Users] Re: Integrating Puppet (v3.8) with Vault as the Puppet Master CA?

2017-03-09 Thread Thomas Müller
Read https://docs.puppet.com/puppet/4.9/config_ssl_external_ca.html about external ca support within puppet. There is no plug-and-play support for your idea. - Thomas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this

[Puppet Users] Re: Hiera brainstorming

2018-05-07 Thread Thomas Müller
Hi Robert I personally think these are too many levels. Instead introducing complexity by levels I would suggest you to implement a review process (like: pull-requests with mandatory reviews) to prevent disallowed settings to even hit production. This also will help you to share knowledge

[Puppet Users] Re: Class composition + parameterization

2018-05-07 Thread Thomas Müller
Am Montag, 7. Mai 2018 09:21:20 UTC+2 schrieb a...@example42.com: > > Actually you don't have to inherit, you can (and should) just have > something like: > > class dk_oracle_java::install { > include dk_oracle_java > package { 'oracle-java8-installer': > ensure =>

[Puppet Users] To node or not to node in site.pp

2018-04-27 Thread Thomas Müller
Hi I can have the following manifests/site.pp in the environment: include ::role_loader or node default { include ::role_loader } They both produce the same catalog - there is just a Node['default'] resource added with the latter form. Are there any hidden benefits/drawbacks

[Puppet Users] Re: pxp broker that are not compile masters?

2018-05-04 Thread Thomas Müller
Am Donnerstag, 3. Mai 2018 22:38:42 UTC+2 schrieb Bill Sirinek: > > Is it possible to have a pxp broker that is not a compile master? > is any non-puppet enterprise puppet user using pxp-brokers? - Thomas -- You received this message because you are subscribed to the Google Groups "Puppet

[Puppet Users] Re: Exec type and backgrounded processes

2018-05-23 Thread Thomas Müller
Am Dienstag, 22. Mai 2018 16:37:37 UTC+2 schrieb jcbollinger: > > > > On Tuesday, May 22, 2018 at 1:38:08 AM UTC-5, Thomas Müller wrote: >> >> Hi >> >> If I define: >> >> exec { '/bin/sleep 300 &': >> timeout => 10, >>

  1   2   >