Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2013-07-17

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 jschadlick left #salt
00:01 scalability-junk nkuttler: may I ask how you pass the requ file into virtualenv ?
00:03 kenbolton joined #salt
00:03 tuxtoti1 joined #salt
00:04 UtahDave joined #salt
00:04 tuxtoti joined #salt
00:04 djn joined #salt
00:05 tuxtoti1 joined #salt
00:05 tuxtoti2 joined #salt
00:05 tpe11etier joined #salt
00:06 nkuttler scalability-junk: pull it from a git repo
00:06 tuxtoti1 joined #salt
00:06 scalability-junk the whole environement?
00:06 nkuttler the git repo contains the project
00:06 tuxtoti1 joined #salt
00:07 nkuttler well i use salt to host django apps, so git repo for the code that contains the req file and create the virtualenv from that
00:07 kchr anyone here using debian and the pkgrepo module with salt, and can pastebin me a template state file? mine seems to blow up the YAML parser...
00:07 scalability-junk yeah but how do you create the venv from the file any default command or just cmd.run some stuff?
00:08 nkuttler scalability-junk: virtualenv.manage
00:09 scalability-junk I see only the virtualenv_mod module
00:09 nkuttler kchr: i just use pkg.installed
00:09 scalability-junk which has only the create function, which doesn't take a requ. file afaik have seen
00:10 nkuttler scalability-junk: http://docs.saltstack.com/ref/states/all/salt.states.virtualenv.html
00:10 scalability-junk ahh it's a state not a module ;)
00:11 scalability-junk nkuttler: thanks
00:11 nkuttler scalability-junk: np
00:12 nkuttler kchr: oh never mind, i misread you... was thinking reprepro..
00:13 scalability-junk what's the difference between modules and salt.states?
00:13 kchr nkuttler: ah... no, i'm trying to manage debian repos through salt states
00:13 scalability-junk there is states/git.py and modules/git.py and they do different things
00:13 kchr but the file i pasted earlier makes the yaml parser throw an exception
00:13 kchr 'list' type not hashable
00:14 kchr but i'm using the same indentation levels and list syntax as in the docs for pkgrepo module..
00:16 mgw UtahDave: is there a way for a pillar sls to include another sls if it exists, but not error out if it fails to include it?
00:17 nkuttler kchr: maybe missing a required field? just a guess..
00:18 kchr nkuttler: well, it's YAML giving the error not salt
00:18 kchr it's a parse error of some sorts
00:18 UtahDave i'm not sure, mgw.  Maybe test for the file existence first?
00:18 kchr nkuttler: http://pastebin.com/F8eq0gYk if you'd like to take a shot
00:20 nkuttler kchr: i read it as the yaml being parsed just fine
00:20 nkuttler kchr: and salt throwing an error
00:20 nkuttler Results of YAML rendering:
00:20 nkuttler {'debian-jessie': {'pkgrepo.managed': [{'humanname': 'Debian GNU/Linux 8.0 (jessie)'}, {'file': 'salt://apt/sources.list.d/jessie.list'}, {'dist': 'jessie'}, {'gpgcheck': 1}]}}
00:22 kenbolton joined #salt
00:22 benkay I can't get Salt to use the mysql.* data in /etc/salt/minion
00:22 benkay and kind of have no clue how to get around this
00:23 benkay (when connecting to a database during a provision to ensure that some databases exist, it throws an error that it can't connect with 'root' and '' as passwords, when those aren't even the values anymore)
00:26 KyleG Just updated to 0.16.0…now salt is returning an error on my extensions.ini file for PHP lol how random
00:26 KyleG https://gist.github.com/kylegato/70f86395bc4cdd587dd4
00:27 kenbolton joined #salt
00:29 dthom91 joined #salt
00:30 benkay for anyone who's curious: changing minion configs requires restarting the minion >.<
00:33 napperjabber joined #salt
00:34 kchr nkuttler: can you help me interpret the "Possibly a missing arguments issue:  ArgSpec(args=['mods
00:34 kchr ', 'env', 'test', 'exclude'], varargs=None, keywords='kwargs', defaults=('base', None, None))" bit?
00:34 kchr sorry for the long/cut row
00:34 tpe11etier joined #salt
00:35 kchr i guess thats the error then
00:35 kchr i see what you mean with the parsing being fine, i muse have read it wrong :)
00:41 aranhoide joined #salt
00:47 Teknix joined #salt
00:49 dthom91 joined #salt
01:05 kenbolton joined #salt
01:05 raydeo joined #salt
01:23 xinkeT joined #salt
01:34 liuyq joined #salt
01:35 samsalt joined #salt
01:35 dthom91 joined #salt
01:35 liuyq joined #salt
01:35 samsalt1 joined #salt
01:42 mgw joined #salt
01:55 maspwr joined #salt
01:59 Jahkeup_ joined #salt
02:03 [diecast] joined #salt
02:03 [diecast] joined #salt
02:05 dthom91 joined #salt
02:16 rroa_ joined #salt
02:19 auser I'm embarrassed to be admitting this, but… I can't quite seem to get nginx to restart
02:20 cocoy joined #salt
02:28 oz_akan_ joined #salt
02:30 Nexpro joined #salt
02:30 saurabhs joined #salt
02:33 mgw joined #salt
02:33 lemao joined #salt
02:34 chadhs joined #salt
02:34 tonthon joined #salt
02:35 erasmas joined #salt
02:37 jalbretsen joined #salt
02:49 aat joined #salt
02:51 maspwr joined #salt
02:56 carmony joined #salt
02:57 napperjabber joined #salt
02:58 raydeo joined #salt
02:59 aat joined #salt
03:01 karlp I' less embarrassed than I should be, but..... are you _sure_ that question relates to salt?
03:05 dthom91 joined #salt
03:08 aat joined #salt
03:11 aat joined #salt
03:11 erasmas joined #salt
03:13 aat joined #salt
03:19 possibilities joined #salt
03:23 chadhs joined #salt
03:24 Rec joined #salt
03:24 possibilities i'm doing something where i start a bunch of processes based on a list stored in a pillar. is there some way that info like ports or pids associated with these processes can be published so it's available on the master?
03:25 aat joined #salt
03:28 rroa_ joined #salt
03:32 avienu joined #salt
03:46 rroa_ joined #salt
03:50 lazyguru joined #salt
03:54 Ryan_Lane joined #salt
03:54 dthom91 joined #salt
04:07 stevedb joined #salt
04:21 oz_akan__ joined #salt
04:23 maspwr joined #salt
04:34 UtahDave joined #salt
04:45 dthom91 joined #salt
04:51 avienu joined #salt
04:53 emocakes joined #salt
04:54 bdf I'm having a bunch of trouble deleting nodes with salt-cloud at the moment
04:55 UtahDave bdf: what's going on ?
04:57 bdf https://pastee.org/jwyr
04:57 bdf keep getting key errors
04:58 bdf it creates the VMs without issue, just doesn't delete them
05:06 oz_akan_ joined #salt
05:07 UtahDave bdf: Ah, yeah, I ran into that issue, too.  deleting with the map is broken
05:07 kstaken joined #salt
05:07 UtahDave you have to delete them like this right now.
05:07 UtahDave salt-cloud -d minoin01 minion02 minion03   ,etc
05:08 bdf still even getting the error with that
05:08 robawt hello all
05:08 robawt is there a best practice to install something via salt with a tar/gz?
05:11 robawt i'm thinking an install script, but that misses the point of a provisioning tool, right?
05:14 __gotcha joined #salt
05:14 __gotcha joined #salt
05:15 dthom91 joined #salt
05:19 robawt n/m
05:19 robawt i found a neat java example
05:19 robawt https://github.com/saltstack-formulas/java/blob/master/java/server_jre.sls for those playing along at home
05:20 auser yep
05:21 auser that's how I do it
05:21 robawt auser: gold user, australlian user, or a user?
05:21 auser haha
05:21 auser I love the breakdown
05:21 auser 'a' user
05:21 * robawt nods
05:21 robawt just curious
05:21 auser like ey-user
05:22 robawt or beastie boys "hey ladies"
05:22 robawt but "aaaaaye ussseerrrrrs"
05:22 robawt sorry, up to no good so I'm a little pumped
05:23 auser no problem
05:24 avienu joined #salt
05:26 robawt hey silly question
05:26 robawt install_method=daily points to github?
05:26 robawt sorry, that's more of a salty-vagrant question
05:33 abele joined #salt
05:33 rroa_ joined #salt
05:34 akoumjian robawt: dailiy option is for ubuntu only, I believe. daily ppa https://github.com/saltstack/salt-bootstrap/blob/develop/bootstrap-salt.sh#L125
05:37 robawt akoumjian: outstanding, thank you!
06:11 Ryan_Lane joined #salt
06:11 Ryan_Lane joined #salt
06:12 agend joined #salt
06:13 pkruithof joined #salt
06:16 dthom91 joined #salt
06:25 emocakes_ joined #salt
06:28 abele Hi! How to enable cache for salt.states.virtualenv? Or it is wrong path?
06:35 __gotcha joined #salt
06:35 __gotcha joined #salt
06:37 az87c joined #salt
06:38 az87c_ joined #salt
06:41 linjan_ joined #salt
06:50 __gotcha_ joined #salt
06:50 __gotcha_ joined #salt
07:05 scalability-junk what is the difference between state/git.py and modules/git.py and the related call for these?
07:07 pmcg_ joined #salt
07:07 scott_w joined #salt
07:08 nkuttler scalability-junk: state vs execution module?
07:08 yml_ joined #salt
07:09 retr0h_ joined #salt
07:09 scalability-junk I think yeah
07:09 scalability-junk git.config_set vs git.update
07:12 whit joined #salt
07:15 nage joined #salt
07:15 nage joined #salt
07:16 dthom91 joined #salt
07:23 Newt[cz] joined #salt
07:24 LucasCozy joined #salt
07:31 isomorphic joined #salt
07:41 carlos joined #salt
07:46 fredvd joined #salt
07:46 squelch joined #salt
07:46 squelch Can you use the mysql state to manage percona
07:47 dthom91 joined #salt
07:55 carlos joined #salt
08:00 ggoZ joined #salt
08:02 viq Is there a way to make salt query machines for what packages they need to update?
08:03 scalability-junk viq: yes
08:03 scalability-junk for apt it would be http://docs.saltstack.com/ref/modules/all/salt.modules.apt.html
08:04 scalability-junk salt '*' pkg.list_upgrades
08:04 viq ah, list_upgrades
08:05 felixhummel joined #salt
08:05 viq Now let me see if that works as well for yum and {free,open}bsd
08:06 viq Does for yum
08:07 viq apparently does not for BSDs
08:07 viq Thanks
08:08 scalability-junk no worries
08:11 squelch Can you use the mysql state to manage percona
08:15 scalability-junk or mariadb :D
08:26 emilisto man, match.grain really doesn't work for me
08:26 emilisto https://gist.github.com/emilisto/71f5d76d1abbdb6c519a
08:26 emilisto very simple example - feels like Im missing something obvious
08:29 squelch junk is that a question or a suggestion? is mariadb better? and does it work with mysql states
08:30 aleszoulek joined #salt
08:34 squelch looks like percona wins
08:39 emocakes joined #salt
08:47 dthom91 joined #salt
08:48 robins joined #salt
08:49 Furao joined #salt
08:51 fredvd joined #salt
08:57 felixhummel joined #salt
08:59 carlos joined #salt
09:09 zooz joined #salt
09:12 frommelmak joined #salt
09:13 isomorphic joined #salt
09:15 scalability-junk squelch: more a question
09:16 nickray joined #salt
09:22 Tekni joined #salt
09:27 whiskybar joined #salt
09:29 krak3n` joined #salt
09:35 sturdy joined #salt
09:38 viq I found https://github.com/akoumjian/salty-vagrant but does anyone have some ready recepie for setting a master in that mix as well?
09:47 jeddi joined #salt
09:48 dthom91 joined #salt
09:51 bemehow joined #salt
10:14 aleszoulek joined #salt
10:18 dthom91 joined #salt
10:19 nickray left #salt
10:21 george_ joined #salt
10:27 Jahkeup_ joined #salt
10:33 rroa_ joined #salt
10:41 backjlack joined #salt
10:42 giantlock joined #salt
10:46 backjlack joined #salt
10:47 * liuyq is away: 我很忙
10:52 bemehow joined #salt
10:54 qba73 joined #salt
11:02 sturdy joined #salt
11:15 Jahkeup_ joined #salt
11:16 diegows joined #salt
11:18 dthom91 joined #salt
11:19 jbunting joined #salt
11:22 Furao automatic /msg #channel on away still exists?
11:22 Furao that's so 1996
11:25 emocakes_ joined #salt
11:26 dzen :D
11:26 jeddi Yeah - I thought current etiquette was to just change your nick to *_away.
11:27 viq ugh
11:27 viq why not just set your status to away
11:27 evilkitty joined #salt
11:27 viq Then anyone who cares can just whois you
11:27 bemehow joined #salt
11:27 evilkitty hi! i need help! lol
11:28 evilkitty probably in more than one way... but i will take help with perl...
11:28 evilkitty lol
11:28 aleszoulek joined #salt
11:28 * viq waits for some useful question to be asked
11:29 Furao at least no one here /msg the song that play in their winamp with colours and fancy ascii art
11:30 viq True, that
11:39 bemehow joined #salt
11:40 abele Hi. How to enable pip cache for virtualenv state?
11:42 bhosmer joined #salt
11:44 mstan joined #salt
11:45 scott_w joined #salt
11:46 jhauser joined #salt
11:48 efixit joined #salt
11:49 dzen pip cache is user wide isn't it ?
11:49 sturdy joined #salt
11:50 backjlack joined #salt
11:54 sturdy joined #salt
11:54 napperjabber joined #salt
11:59 jslatts joined #salt
12:03 shiin joined #salt
12:04 oz_akan_ joined #salt
12:04 squelch how to use mysql state to manage percona!
12:07 Furao abele: I did it in $HOME/.pip/pip.conf
12:08 Furao mysql isn't a database
12:08 blee_ joined #salt
12:10 kenbolton joined #salt
12:10 blee joined #salt
12:10 dzen easy troll is easy
12:13 sturdy joined #salt
12:16 abele Furao: It's for root user?
12:19 dthom91 joined #salt
12:19 Furao abele: yes, but you might want to export HOME=/root if you use sudo and salt-call
12:21 blee_ joined #salt
12:23 davromaniak hello
12:23 davromaniak how can I require a minion to have a specific IP address ?
12:24 davromaniak I try with "- ip_interfaces: {{ grains['ip_interfaces']['eth0'][0] }}" but it doesn't seems to work
12:25 abele Furao: Thanks!
12:26 sturdy joined #salt
12:31 jslatts joined #salt
12:31 mstan question: I see pkg.latest doesn't forward the refresh parameter when calling plg.latest_version, so a database refresh will always be called (and probably called twice for refresh=True and a new version found). Is this normal ?
12:32 mstan (talking about state pkg.latest)
12:32 SpX joined #salt
12:36 MamboKurt joined #salt
12:37 MamboKurt Hi there. Where can i find a description on what will when be downloaded by a minion from the master when a state.highstate is triggered? My setting includes multiple environments and git+roots.
12:38 evilkitty ! Event _start in session 1 raised execption:
12:38 evilkitty ok i figured out my question! I'm trying to run Hailo on ubuntu in pocoirc and everytime i go to run it i get the error "
12:39 evilkitty opps sorry that pasted backwards
12:40 evilkitty and it continues with, can't locate object method "new" via package "Hailo"
12:40 evilkitty how do i go about fixing this?
12:41 viq Can salt manage network devices?
12:43 mikedawson joined #salt
12:44 dthom91 joined #salt
12:47 nkuttler viq: hm, i let it manage the config file..
12:47 viq nkuttler: of what? I'm thinking cosco switches
12:48 viq cisco
12:48 nkuttler viq: no idea about those
12:48 viq Making some research, apparently puppet and chef can do that, bu it's nature I guess ansible possibly could, trying to find out about salt
12:54 evilkitty left #salt
13:04 Jahkeup_ joined #salt
13:05 juicer2 joined #salt
13:05 simonmysun joined #salt
13:06 Jahkeup__ joined #salt
13:10 oz_akan_ joined #salt
13:10 m_george|away joined #salt
13:12 m_george left #salt
13:17 N-Mi joined #salt
13:17 N-Mi joined #salt
13:18 oz_akan_ joined #salt
13:19 davromaniak do you have any idea on how to put a : in a variable with {% set var = %} ? because it crashes when I try {% set int = eth0:0 %}
13:20 EugeneKay "eth0:0"
13:20 Jahkeup_ joined #salt
13:26 toastedpenguin joined #salt
13:27 shiin left #salt
13:27 davromaniak thanks EugeneKay !
13:28 jeffasinger joined #salt
13:29 Khollowa_ joined #salt
13:31 racooper joined #salt
13:31 racooper joined #salt
13:33 aat joined #salt
13:33 racooper joined #salt
13:35 dthom91 joined #salt
13:42 aat joined #salt
13:44 waverider joined #salt
13:47 __gotcha_ joined #salt
13:48 brianhicks joined #salt
13:52 aat joined #salt
13:57 kaptk2 joined #salt
13:59 jslatts joined #salt
14:03 mgw joined #salt
14:03 [diecast] joined #salt
14:03 [diecast] joined #salt
14:07 [diecast] joined #salt
14:08 benkay joined #salt
14:09 kenbolton joined #salt
14:14 lemao How to I create a pillar variable that is constructed from another pillar variable?
14:16 Furao lemao: {% set new_Variable = other_variable + 'more stuff' %}
14:16 Furao or {% set new_var = {'dict_key': other_var } %}
14:16 Furao and define both variable in pillar
14:17 Furao such as : other_var = {{ other_var }}
14:17 Furao replace = with :
14:17 Furao and new_var: {{ new_var }}
14:17 aberant joined #salt
14:17 Furao unless you want the value of an other pillar sls
14:17 Furao which you need to use an ext_pillar module for that
14:20 mgw joined #salt
14:20 dthom91 joined #salt
14:20 kho joined #salt
14:21 kho joined #salt
14:23 anteaya joined #salt
14:25 Jahkeup_ joined #salt
14:29 kenbolton joined #salt
14:29 trinque joined #salt
14:29 stevedb joined #salt
14:30 trinque hi, is there another step after accepting a minion's key?
14:30 waverider joined #salt
14:30 trinque I can see that the minion has connected to the master in the master's log, "Authentication accepted", however I can't initiate commands from the master
14:30 trinque it just times out
14:31 trinque I can initiate commands from the minion by doing salt-call --local
14:31 trinque and I can see the minion on the master if I do salt-key -L
14:31 trinque I should mention that the master is OS X
14:32 lemao Furao: thanks. new_var: {{ new_var }} is what I was looking for
14:32 jbunting joined #salt
14:42 cnelsonsic joined #salt
14:43 kenbolton joined #salt
14:44 kermit joined #salt
14:45 Thiggy joined #salt
14:46 Thiggy Does salt prevent concurrent highstate calls on a minion?
14:46 Thiggy also, I upgraded to 0.16 yesterday and everything went peachy keen. #fistpump
14:47 whit joined #salt
14:50 dthom91 joined #salt
14:50 SEJeff_work Thiggy, sure does
14:50 thingles joined #salt
14:50 napperjabber joined #salt
14:50 Thiggy ok, I figured as much but couldn't find docs supporting that
14:50 Thiggy danke
14:53 zooz joined #salt
14:55 flubber joined #salt
15:00 qba73 joined #salt
15:00 gmoro_ joined #salt
15:01 jbunting joined #salt
15:02 SEJeff_work Thiggy, Just test it. Easy enough
15:05 waverider left #salt
15:08 FreeSpencer joined #salt
15:09 jslatts joined #salt
15:09 Thiggy Hrmm, new weirdness that wasn't happening before the upgrade (but I certainly don't know the upgrade caused it): I'm creating a user/group via state file, but it's creating the home directory with the wrong uid. https://gist.github.com/jthigpen/aa3f80bebb369636a542
15:09 Thiggy The uid of the user is 998, but the home dir gets created with uid 999
15:11 Thiggy and then of course it has lots of hissy fits when the user tries to write logs and such to the dir.
15:11 devinus joined #salt
15:11 dbruns joined #salt
15:13 carmony joined #salt
15:14 mgw joined #salt
15:15 dbruns I'm starting multiple minions (on EC2) that have to talk to each other. Is there a way I can get the private IP as the new instances are created and share them with each other?
15:17 andrew_seattle joined #salt
15:18 dbruns (with saltcloud)
15:21 whit joined #salt
15:21 lingo joined #salt
15:22 benkay joined #salt
15:24 mgw dbruns: I don't think you'll be able to get the IPs until the minion is up
15:25 lazyguru joined #salt
15:25 N-Mi joined #salt
15:26 Furao_ joined #salt
15:26 mgw You can use grains to get the IPs, I'm not sure what the best way would be to share them.
15:27 UtahDave joined #salt
15:30 devinus joined #salt
15:32 timl0101 joined #salt
15:32 avienu joined #salt
15:34 chrisgilmerproj joined #salt
15:35 deanvanevery joined #salt
15:35 squelch so should salt.states.mysql_database/mysql_user work for percona
15:37 kchr hey people. how do you normally maintain package removal/cleaing using salt? say that i would want to replace a certain syslog package with another one; assuming they would not conflict, but you would want the other to replace the existing one. how do you take care of the removal/cleaing?
15:38 kchr am i looking for a one-time package remove/replace state file or do people normally have these removal/replace rules left in the state hierarchy?
15:38 kchr (general workflow question)
15:39 deanvanevery is this where I go to ask salt-cloud questions?
15:39 symroe joined #salt
15:42 symroe Hi all.  We have a set up on EC2 working well so far.  One thing we're stuck on is getting a single role to be assigned a given security group, leaving every other role with the default one (i.e, everything it locked down apart from the load balancer).  We can't figure out how to do this – can anyone help?
15:43 jalbretsen joined #salt
15:43 jslatts joined #salt
15:44 symroe (Using the EC2 provider on 0.16.0)
15:44 UtahDave squelch: I haven't tested on percona, but there's a pretty good chance that it will
15:45 UtahDave deanvanevery: yeah, you can ask salt-cloud questions here.
15:45 squelch UtahDave: thanks, i have tried and it didn't seem to but maybe my mistake
15:46 jacksontj joined #salt
15:46 UtahDave symroe: have you tried using grains to determine that?
15:46 UtahDave squelch: there might be some differences there.
15:47 symroe UtahDave: in the [name].map file?
15:48 UtahDave symroe: oh, I see. You should be able to set that role grain right in the map file.
15:49 symroe So our [example].map looks like this: https://gist.github.com/symroe/6021833
15:50 dthom91 joined #salt
15:51 UtahDave symroe: set the default grain you want in you cloud.providers, then override that on the particular ones on the map file
15:52 deanvanevery I'm trying to query for the public_ips on a minion using salt-cloud, from the man pages I'm not sure how to use the -Q tag, or even if that is the way to go. The salt-cloud docs don't have examples that I've found on this. How can I query for a specific field, or where should I look?
15:53 kleinishere joined #salt
15:54 symroe UtahDave: Hmm, maybe we have a confused setup.  We have cloud, cloud.profiles and example.map.  'cloud' has "EC2.securitygroup: default" in it, and we want a single server to have an additional secruitygroup
15:55 UtahDave deanvanevery: I'm summoning the salt-cloud god for you.  Just a minute
15:56 aat joined #salt
15:56 UtahDave symroe: ok, put that in the cloud.profiles, then.
15:58 carmony joined #salt
15:58 jacksontj joined #salt
15:59 symroe UtahDave: ok thanks, trying that now
16:01 rap424 joined #salt
16:03 redbeard2 joined #salt
16:05 symroe UtahDave: So, just to confirm, is this correct? https://gist.github.com/symroe/6021833 (updated).  This doesn't seem to be working on our setup at the moment
16:06 Thiggy Experiencing a weird pip-related thing. the minion logs show pip install succeeding, but then the next few lines claim the pip install failed, and then it appears to run pip again and then does fail? I'm not sure I'm interpreting this correctly. https://gist.github.com/anonymous/6021973#file-debug-txt-L163
16:07 Thiggy lines 163-170 are the end of first pip and beginning of second pip install (both for same package, uwsgi)
16:07 [diecast] joined #salt
16:08 aranhoide joined #salt
16:09 whit joined #salt
16:10 devinus joined #salt
16:11 nliadm I'm getting "Failed to authenticate" when I try to run salt as root
16:11 t0rrant joined #salt
16:25 jslatts joined #salt
16:26 Gifflen joined #salt
16:31 UtahDave symroe: yeah, I thought that should work.  redbeard2 what do you thing?
16:31 UtahDave nliadm: are you using eauth with pam?
16:31 aranhoide anyone tried salmon?
16:32 nliadm UtahDave: yeah. but it gives the same error if I do "sudo -s" and try
16:32 UtahDave nliadm: I think it will work if you turn off eauth with pam
16:32 nliadm I just upgraded the master to 0.16.0
16:33 symroe UtahDave, redbeard2, ok, odd it doesn't I guess.  Not sure what to try next.  I need to leave now, but i'll stay online and if you do manage to think of something, can you ping me?  Thanks both
16:33 redbeard2 symroe: you'll want to switch over to the new provider config format as per http://salt-cloud.readthedocs.org/en/latest/topics/config.html
16:33 newyorker joined #salt
16:34 newyorker Is it possible to only run part of a salt file only the first time a machine is provisioned?
16:34 symroe redbeard2: ah, ok, I'll have a go at that, thanks
16:35 newyorker (E.g., download a file & unzip only the first time salt runs?)
16:36 KyleG joined #salt
16:37 mgw joined #salt
16:37 UtahDave newyorker: often you can use the 'onlyif' or 'unless' options to check for the existence of files and then run if the test passes
16:37 hazzadous joined #salt
16:38 newyorker UtahDave: I already use 'unless' but it doesn't seem to work: http://pastebin.com/Xh6bUNr0
16:38 wifigi joined #salt
16:39 newyorker Unfortunately it just runs the command every time salt is updated, regardless of whether a /var/www/wordpress directory exists
16:39 UtahDave newyorker: have you tried removing the double quotes?
16:40 newyorker UtahDave: good question... I'll try that now
16:41 wifigi I am trying to deploy a salt-syndic-controlled topology, but for some reason I can't get the root master to communicate with both a salt-syndic and a salt-minion on the same machine, I am using Salt 0.16.0 and Ubuntu Server 12.04. I have a discussion open in the mailing list but no one's had a substantial answer: https://groups.google.com/forum/#!topic/salt-users/_dr_OOIzzJY
16:42 UtahDave wifigi: We've never tested in that configuration before.
16:42 UtahDave I'd have to do some testing on that./
16:45 rlb if you're using startup_states on a minion, how does that interact/conflit with any relevant state matches on the master (i.e. via top.sls)?
16:45 UtahDave wifigi: why do you want all three on the same box?
16:45 rlb Should you be careful not to have overlap, or does one or the other "win", etc.?
16:46 UtahDave rlb: no, they work together fine, depending on how you have your states set up
16:46 UtahDave rlb: if you have   startup_states: highstate,  then a regular highstate from the top.sls is run
16:46 UtahDave if you specify a specific sls file, then it just runs that and not a highstate.
16:47 wifigi UtahDave: I want to be able to have a sort of tree heirarchy to test the load capacity and overhead of using salt-syndic
16:47 jacksontj joined #salt
16:47 wifigi I would like to be able to control the sub-masters as if they were minions
16:48 wifigi I thought that was the whole point of salt-syndic, to be able to centralize control
16:48 santagada_ joined #salt
16:49 mgw1 joined #salt
16:51 whiteinge clone1018: salt-api v0.8.2 is live
16:52 rlb UtahDave: ok, so to be more concrete, say I have an sls_list on the minion that includes states bar and baz, and in top.sls on the master, I have a (perhaps vestigal) grain match for the same minion that selects baz -- what states actually get applied to the minion?  Is it just baz for highstate, and bar and baz when the minion starts up (i.e. depends on the context)?
16:52 UtahDave wifigi: yeah, but we haven't tested running a higher master, syndic and a minion all on the same box.
16:53 UtahDave rlb: they are entirely separate.
16:53 blee joined #salt
16:53 UtahDave salt doesn't execute a highstate unless you tell it too
16:54 rlb right -- so at startup, startup_states: will fire, and if I run highstate explicitly, top.sls will apply?
16:54 UtahDave the startup state will only execute the states you specify in sls_list.  nothing else. It doesn't even look at the top.sls
16:54 UtahDave rlb: that's correct
16:54 wifigi UtahDave: The highest master has only the master on it. Is there any reason you couldn't (theoretically )run all three on the submaster?
16:54 UtahDave wifigi: oh, I see.
16:55 UtahDave wifigi: I misunderstood
16:55 UtahDave you should be able to run a minion on the same box as a syndic.
16:56 wifigi Sorry, I probably could have worded it better. My problem is I can't communicate from a top master to both a syndic and a minion running on the lower master. I can alternate between them - the top master only communicates with whichever one was restarted last
16:56 rlb OK, thanks, and wrt startup_states, if a minion is running, but not approved, does key approval trigger the startup_states, or does the minion still have to be restarted?
16:56 ak_ joined #salt
16:57 UtahDave rlb:  it has to be restarted once it is authenticated.
16:57 wifigi UtahDave: I can run them together fine, but when running in debug mode, I can see that the root master will only ever send commands (like test.ping) to one - the other one will think it is connected but never receive commands.
16:57 UtahDave wifigi: have you opened an issue on this?
16:57 wifigi (them being the syndic and the minion on the lower master)
16:57 ak_ I was wondering if I can run SaltStack on Jython interpreter rather than on CPython. If you can send me some pointers I really appreciate it.  There are some usecases to reuse Legacy Java code, as well as good intention to stay  on one platform (Java) rather than having two platforms.  Thanks
16:57 wifigi I have a discussion in the mailing list but I haven
16:58 wifigi *haven't looked into submitting a bug report
16:58 wifigi I wasn't sure if it was a bug or if I was doing something wrong
16:58 UtahDave wifigi: oh, so are you specifically trying to send a command to the syndic itself?
16:58 blee_ joined #salt
16:58 wifigi UtahDave: No, I want to send it both, just running a typical "salt '*' test.ping"
16:58 UtahDave ak_: I don't know if anyone has tested it on Jython.  Have you tried it yet?
16:58 wifigi But both do not receive the command
16:59 UtahDave wifigi: Oh, you don't ever send a command directly to the syndic.
16:59 UtahDave Just to the minion
16:59 ak_ not yet, I wanted to know if anyone tried before
16:59 clone1018 how long will it take to get in repos whiteinge?
16:59 wifigi UtahDave: I know that (sorry I'm doing a bad job of explaining)
16:59 wifigi My post has it better I think: https://groups.google.com/forum/#!topic/salt-users/_dr_OOIzzJY
17:00 wifigi The salt-syndic does not receive the command to pass to the minion that it is controlling
17:00 wifigi OR the salt-minion on the submaster does not respond
17:00 UtahDave wifigi: ok
17:01 wifigi So basically I'm trying to find a way to get both
17:01 whiteinge clone1018: iirc, you're on ubuntu? i'm uploading to launchpad as we speak and kaptk2 is working on the rpm right now as well
17:01 UtahDave wifigi: would you mind opening an issue on this?  Please include as many details as possible
17:01 clone1018 awesome and yes whiteinge
17:01 rlb UtahDave: OK -- and one thing I thought I saw the other day -- it looked like in one case, restarting a minion *immediately* after approval didn't trigger the startup state (though on other minions it did).  I wondered if adding a brief sleep between approval and the restart might help, but also wondered if that result was surprising, expected, or likely an indication of something else wrong here.
17:02 UtahDave rlb: yeah, that's expected.  When you restart a minion it takes a few seconds to be fully ready to go
17:03 rlb UtahDave: you mean it's expected that I might need to sleep a bit after a salt-key --accept on the master and a salt-minion restart execution on the minion, in order to make sure startup_states works?
17:03 stevedb joined #salt
17:03 wifigi UtahDave: Could you point me to where I'm supposed to file issues? I can't seem to find it on SaltStack.org
17:04 rlb i.e. effectively need "salt-key --accept K; sleep 3; now_run_minion_restart"?
17:04 cjh_ anyone using salt to manage a sendmail configuration?
17:04 cjh_ the sendmail conf file needs to be transformed by m4 after being updated and i'm not sure how to make salt do that
17:04 UtahDave rlb: yeah, I'd give it 2 or 3 seconds to make sure the minion is ready
17:05 UtahDave github.com/saltstack/salt/issues
17:05 wifigi UtahDave: I think I found it - do you want issues submitted on GitHub? https://github.com/saltstack/salt/issues
17:05 UtahDave wifigi: yep!
17:05 wifigi Haha
17:05 UtahDave :)
17:05 cjh_ i suppose i could manually transform it and have salt push out the compiled file.  that would work
17:07 rroa_ joined #salt
17:08 benkay joined #salt
17:08 mgw joined #salt
17:09 UtahDave off to lunch
17:11 jpadilla joined #salt
17:14 enduro joined #salt
17:15 enduro joined #salt
17:16 mgw joined #salt
17:17 enduro I'm wondering is anyone has run into salt-cloud returning Killed when trying to create a new Ubuntu instance on AWS. Any help would be appreciated.
17:19 dzen Is there some project on which we can connect to an asset management ? (as an inventory database)
17:20 jacksontj joined #salt
17:20 jkleckner joined #salt
17:22 shane Question...  I've got the Windows repository set up with a couple of packages.  I can do the install via pkg.install.  When I try to do the state.highstate, it fails (if I add -t 30 to avoid the timeout).  Is there something simple I'm missing?
17:27 newyorker UtahDave: the quotes didn't make a difference, but I found out that a previous rule was deleting the /var/www directory, so it was always the case that /var/www/wordpress didn't exist. Thanks for the help, regardless :)
17:31 godber joined #salt
17:33 aat joined #salt
17:38 stevedb joined #salt
17:40 Ryan_Lane joined #salt
17:41 devinus joined #salt
17:42 whiteinge clone1018: https://launchpad.net/~saltstack/+archive/salt/+build/4802508
17:43 UtahDave shane: can you pastebin your top.sls and state formula?
17:43 UtahDave newyorker: ah, ok.
17:44 UtahDave hey, newyorker, are you going to go the Salt Sprint at Columbia University?
17:44 newyorker UtahDave: a Salt Sprint? I'm intrigued! one sec, I'm gonna check it out
17:45 UtahDave http://sprint.saltstack.com/
17:45 StDiluted joined #salt
17:45 UtahDave sprint.saltstack.com
17:45 UtahDave We'd love to have you there. it's going to be a lot of fun.
17:45 * jesusaurus looks forward to the sprint
17:46 newyorker UtahDave: ooh, that sounds fun! I might be busy that weekend but I might be able to move plans around
17:46 StDiluted UtahDave: we're on the eventbrite page but not on the locations page on saltstack.com
17:46 UtahDave cool!
17:46 shane UtahDave: http://pastie.org/private/jts7owo6d4sln8fzraqpkg
17:47 UtahDave StDiluted: Ah, I'll get that fixed.  Thanks for pointing that out!
17:47 shane I just started playing with salt yesterday, so don't worry about hurting my feelings if I'm doing dumb stuff.
17:47 kula newyorker: i'm working on getting us snacks!
17:49 mikecb joined #salt
17:50 [diecast] joined #salt
17:51 UtahDave shane: what's the output of   salt -G 'os:Windows' pillar.data      ?
17:53 dbruns joined #salt
17:53 jesusaurus is anyone here using the mysql module? I can't seem to get it to work, salt tells me the function is not available
17:54 deanvanevery joined #salt
17:55 clone1018 whiteinge: so hey, now that it's fixed, how often does that happen? I'm making a business that'll rely hugely on salt-api
17:55 shane UtahDave: http://pastie.org/private/szrqcmrif3drixz61hdhq
17:56 UtahDave jesusaurus: that usually means you're missing a module that's required in the __virtual__ function in the salt mysql module
17:56 UtahDave shane: what version of salt do you have on the master and the minion?
17:57 shane root@salt:/srv/salt# salt --version
17:57 shane salt 0.16.0
17:57 shane The Windows version should also be the same (from http://saltstack.com/downloads/Salt-Minion-0.16.0-win32-Setup.exe & AMD64)
17:58 jesusaurus UtahDave: ah, thanks. I totally overlooked the dependency in the module documentation
17:59 UtahDave jesusaurus: you're welcome!
18:00 UtahDave shane: what's the error you're getting?
18:00 shane State: - pkg
18:00 shane Name:      7zip
18:00 shane Function:  installed
18:00 shane Result:    False
18:00 shane Comment:   The following packages failed to install/update: 7zip=9.22.
18:00 shane Changes:
18:01 shane btw, sometimes I actually have to do -t 60 to get the error message
18:01 Corey shane: NO.
18:01 Corey Pastebin!
18:01 shane sorry
18:02 UtahDave shane: yeah, the timeout is still required on Windows
18:03 LGSilva joined #salt
18:03 LGSilva hey guys. Is there a way to pad a string with spaces in jinja?
18:04 mgw is sync_all known to be broken with master running develop?
18:04 mgw https://gist.github.com/mgwilliams/48d15aaeb33e82e6240c
18:04 shane btw, the master is Debian Wheezy, and one minion is XP, the other Win2k8R2
18:05 UtahDave shane, when did you download the windows installer? I pushed out a replacement a few days ago that fixed a few bugs
18:05 shane http://pastie.org/private/nun3x18fninalnb2dpf4kw
18:05 shane UtahDave: downloaded and installed yesterday afternoon
18:05 shane Is there a command I can run on the minions to get you the build info?
18:05 UtahDave ok that should be fine.
18:07 UtahDave shane: Is it actually installing the software package but just returning incorrectly?
18:07 UtahDave mgw: I'm not aware of that issue. Can you open an issue on that?
18:08 mgw UtahDave: my mistake :-)
18:08 mgw Not sure exactly what happened, but I have symlinks to certain modules/runners/etc in /srv/salt pointing to my checkoout of salt, for dev purposes
18:09 mgw I had switched branches and forgotten
18:09 mgw so I had a mismatch
18:09 UtahDave doh!   :)
18:09 jslatts joined #salt
18:09 shane UtahDave: I just did uninstall on both packages, ran the highstate, and verified that the packages did get installed.  The output still says failed.
18:10 UtahDave ok, could you open an issue on that Shane? I think I saw that problem in the past, but I thought it had gotten fixed.
18:10 shane k
18:11 shane BTW, is my approach to making packages for x86 & AMD64 correct or is there something more preferred?
18:12 auser joined #salt
18:12 dthom91 joined #salt
18:13 mikedawson joined #salt
18:13 devinus joined #salt
18:14 ipmb joined #salt
18:15 jslatts joined #salt
18:16 brianhicks joined #salt
18:29 m_george|away joined #salt
18:30 LGSilva hey guys. Is there a way a minion can query the master about the ip address for eth0 on all other minions?
18:31 LGSilva something like this: salt '*' network.ip_addrs eth0 but that will run on the minion
18:35 hazzadous joined #salt
18:35 druonysus joined #salt
18:36 spmurray joined #salt
18:37 aleszoulek joined #salt
18:38 spmurray hey all, Im seeing an exception thrown when using the git module inside an extmod -- "NameError: global name '__salt__' is not defined" (line 61 in salt/modules/git.py
18:38 spmurray sound familiar to anyone?
18:40 thingles joined #salt
18:48 spmurray oof, just looked up how __salt__ is populated via module loader
18:48 spmurray ive been importing the module directly
18:49 m_george left #salt
18:50 StDiluted UtahDave, thanks for getting us on the location space. Can you make sure the time zone gets posted?
18:52 cron0 joined #salt
18:53 deanvanevery joined #salt
18:55 santagada_ joined #salt
18:58 kenbolton joined #salt
19:02 auser hey all
19:03 jslatts joined #salt
19:06 Gifflen joined #salt
19:06 * scalability-junk is still trying to figure out how to implement a dynamic multitier architecture...
19:07 scalability-junk ...probably using dns entries like db-master.something and then propagate these dns entries to the webservers via their host files to make fast updates and failovers possible.
19:07 StDiluted hey auser
19:07 scalability-junk anyone has some suggestions, or proof of concepts?
19:07 scalability-junk I'm more in the mood of disussion right now than implementing something totally wrong.
19:07 younqcass joined #salt
19:09 brad_ joined #salt
19:09 rsimpkins joined #salt
19:10 brad_ I belive I want to make a salt state(is this the best way in salt) to install a program that is installed inside a tar.gz file and then needs to be excuted and then delete the tar.gz when I am done, this is vmware tools that I am trying to install in case that helps, thanks
19:10 devinus joined #salt
19:11 younqcass I'd like to run a script after all mysql users are created.  But the script seems to run before i'd like it to.
19:11 KennethWilke joined #salt
19:11 StDiluted auser, regarding your post about environment based clusters, how do the nginx and mysql states differ between environments, is that pillar related?
19:11 timl0101 joined #salt
19:11 younqcass Is the require state nested inside cmd?
19:12 auser StDiluted: I strictly use pillars to separate out the data, while I share states
19:12 auser if you want a different setup, you can use a state
19:12 dthom91 joined #salt
19:13 auser man, does `watch_in` setup an environment that restarts?
19:13 StDiluted so in /srv/salt/dev/pillars/db.sls you could keep database info for dev and /srv/salt/prod/pillars/db.sls you could keep database info for prod?
19:13 auser er a service, that is
19:13 pkruithof joined #salt
19:13 auser yep
19:13 auser exactly
19:14 auser that's how I've done it for 3 production deployments
19:14 StDiluted ok. And you keep version info in pillars as well, to separate version sif needed
19:14 scalability-junk auser: may I ask how do you propagate ip and master db changes for example?
19:14 auser Sure, I use a state (sec)
19:15 clone1018 whiteinge: Not getting the changes yet :(
19:15 StDiluted scalability-junk: are you asking how to update say.. ip addresses in a list of load balanced servers when a new instance is launched?
19:15 auser Oh, need to make a new state, sec.
19:15 scalability-junk StDiluted: yeah
19:16 scalability-junk be it a new database server or a new webserver for the loadbalancer etc.
19:16 StDiluted I think there's a couple ways to go about that, but I haven't gotten to that part yet. I will be needing to do that soon though. You can have the minions communicate to each other, or you could maybe use the reactor to do something like that
19:17 scalability-junk reactor -> diving in :D
19:17 auser scalability-junk: I use nginx as a load balancer, fyi
19:18 kermit joined #salt
19:19 auser scalability-junk: https://github.com/saltstack-formulas/hosts
19:19 auser in my nginx file, I use `informer` to find what roles are needed
19:20 auser and set my balancer to react on those
19:20 scalability-junk ok cool I'll take a look at those
19:21 auser informer is in the repo, but shouldn't be there
19:21 younqcass how do you add a requisite to a cmd state? is it possible?
19:21 _vimalloc joined #salt
19:22 Linz joined #salt
19:22 bemehow joined #salt
19:24 druonysus joined #salt
19:24 druonysus joined #salt
19:25 kenbolton joined #salt
19:27 kermit joined #salt
19:28 stevedb joined #salt
19:31 StDiluted younqcass: what are you trying to do exactly
19:32 younqcass I'm trying to run a bash script that imports sql dbs.. but id like to run it after all my users are present
19:33 auser ah
19:33 auser yeah, you can do require younqcass
19:34 StDiluted well, I would do that using unless: -  mysql: -  user_exists:  - user
19:36 StDiluted hm, though, that won't solve the require, that will just fail if the user isn't there
19:36 StDiluted so maybe a require would be better
19:37 giantlock joined #salt
19:37 younqcass cmd.script:
19:37 younqcass - source: salt://leo_db/leo_import.sh
19:37 younqcass - require:
19:37 younqcass - mysql_user.present: dbuser
19:38 younqcass do I need the .present?
19:39 rbstewart younqcass: no, just mysql_user
19:39 devinus joined #salt
19:40 rbstewart younqcass: that's assuming that you have a separate mysql_user.present state elsewhere though.
19:43 younqcass How do you know when you can use dot notation?
19:43 younqcass i've seen things like - service.running mysqld
19:44 younqcass StDiluted is the unless code salt specific?
19:44 conan_the_destro hello I was wondering why I am gettign this error message when trying to create a mysql user: State mysql_user.present found in sls mysql_server is unavailable
19:45 kenbolton joined #salt
19:45 rbstewart younqcass: I'm curious, what was the context for "service.running mysqld"?
19:46 rbstewart younqcass: http://pastebin.com/r2mAiT74
19:46 jslatts joined #salt
19:46 saurabhs joined #salt
19:47 defunctzombie joined #salt
19:47 rbstewart conan_the_destro: care to paste your code? Perhaps it's a syntax thing.
19:47 robawt1 joined #salt
19:47 younqcass rbstewart: http://pastebin.com/Hg7qiFqe
19:47 joonas joined #salt
19:48 conan_the_destro rbstewart: I can try and clean it up to paster however it isn't a complete syntax failure. If I re-run it it works
19:50 conan_the_destro rbstewart: http://pastebin.com/SmeHWMv5
19:50 jbunting joined #salt
19:50 pt|Zool joined #salt
19:50 robawt joined #salt
19:51 esrax joined #salt
19:53 jpadilla joined #salt
19:53 rbstewart conan_the_destro: if it works the 2nd time, it's usually a race condition
19:53 conan_the_destro that was my thought, hence why I put it last. very odd
19:53 rbstewart according to the docs, "order: last" is overridden by require statements.
19:54 conan_the_destro d'oh
19:57 kermit joined #salt
20:02 bearzk_ joined #salt
20:03 StDiluted Anyone familiar with the debconf states?
20:05 kenbolton joined #salt
20:06 rbstewart younqcass: AFAIK that paste needs another "ID Declaration", at least, to work. You can't declare a state inside a require, although it'd be convenient.
20:06 novel joined #salt
20:07 whiteinge clone1018: looks like the initial build succeeded, now it's copying the binaries to packages for other releases
20:07 clone1018 ah
20:07 clone1018 I guess I don't understand how this works :P
20:08 whiteinge me neither. launchpad is hard to work with :-/
20:08 younqcass rbstewart: did you another ID of dbmkr?
20:08 druonysus joined #salt
20:08 whiteinge clone1018: what ubuntu release are you running?
20:09 whiteinge clone1018: (re: your question about how often this happens) are you asking about breakage due to salt changes or updates in general?
20:09 clone1018 13.04 32bit edition
20:09 robawt wuddup whiteinge
20:10 zooz joined #salt
20:10 clone1018 whiteinge: salt-api was completely un-usable for about 2 weeks during this time, anyone who does package upgrades would have had this problem would they not?
20:10 rbstewart younqcass: say again? (I'm referring to "ID Declaration" in https://salt.readthedocs.org/en/v0.16/ref/states/highstate.html#large-example)
20:11 clone1018 I'm looking to deploy salt-master and salt-api out on about 400+ servers and I'd rather it not randomly break for the customers :p
20:11 whiteinge clone1018: ok. that package should be available shortly...possibly now
20:12 jslusher joined #salt
20:12 david_a joined #salt
20:12 whiteinge you're right, anyone who did a package upgrade of salt would have seen the same breakage
20:12 clone1018 The following packages will be upgraded: salt-api
20:12 clone1018 woo!
20:12 whiteinge ah, good
20:13 dthom91 joined #salt
20:13 auser joined #salt
20:13 jslusher I just installed salt-cloud on a salt master. I've been able to launch AWS instances from it, and the master sees and accepts its keys automatically, but when I run a test.ping against them, it can't hit them.
20:13 auser jslusher: did you open the ports on your security group?
20:14 StDiluted jslusher: firewall/security group must allow ICMP
20:14 jslusher would those ports need to be opened if the ip is internal?
20:14 StDiluted auser: how do you refer to an environment's pillar?
20:14 whiteinge this is the first time this kind of breakage has happened (for salt-api at least). i've started a conversation here to include salt-api as part of testing salt itself
20:14 whiteinge it came as a surprise and it shouldn't have
20:15 auser StDiluted: you don't need to be explicit
20:15 auser if you set it up the way the article says, they'll be included for you
20:15 auser based on the grain environment
20:15 auser environment based grain
20:15 StDiluted yeah, I'm pulling env grain from a tag on EC2
20:16 rbstewart I want to change which minions are targeted in an overstate without modifying the overstate file. Any suggestions?
20:16 StDiluted what's the point of using separate pillar roots and whatnot if it's not specific, and it's all about targeting, just personal organization?
20:17 StDiluted I am so confused about environments
20:17 clone1018 whiteinge: awesome, thanks again
20:17 auser no no no
20:17 auser I mean you don't have to be explicit in the state
20:18 auser in your state, you can just depend on the pillar to have the 'right' environment
20:18 auser like, you don't have to do: salt://{{ env }}/things/and/stuff
20:18 auser just point it to your pillar
20:18 jslusher asuser: the security group does allow for ports 4505, 4506 and ICMP
20:19 devinus joined #salt
20:19 auser then, because you have it setup that the development environment will be included for you
20:19 scalability-junk auser: what do you mean by point to your pillar?
20:19 auser scalability-junk: http://www.saltstat.es/posts/environment-based-clusters.html
20:19 scalability-junk just say salt://project/things/and/stuff? instead of salt:/project/dev/...
20:19 auser yep
20:19 jslusher auser: the security group does allow for ports 4505, 4506 and ICMP
20:20 auser it would be unscalable otherwise
20:20 scalability-junk auser: thanks great
20:20 auser you'd have to modify your states constantly
20:20 auser jslusher: can you pint with --log_level debug
20:20 jslusher auser: I'm using the internal IPs if that makes a difference
20:20 auser it does, I use internal IPs too
20:20 auser I don't use salt-cloud though
20:21 scalability-junk another question. Mostly I see one project setups, but I have a lot of client projects I would want to manage, would I sort of try to have one top file per project or just have on top file and then have on each environment different '*' regexps or so to determine the project?
20:21 scalability-junk '*project*' in base, dev and prod for example?
20:21 scalability-junk and '*project2*' in base and prod for exampleß
20:21 scalability-junk ?
20:22 auser not sure I understand
20:22 auser you can just have one top.sls in your project
20:22 auser set your file_roots to have a base
20:22 auser and put your top.sls there
20:22 jslusher auser: I was under the impression the security groups were just for public IPs.
20:22 auser they are
20:22 rbstewart younqcass: sorry, should have read that paste closer. http://pastebin.com/UGxeJT15
20:23 auser are you on the master?
20:23 auser what does your salt-key -L say?
20:24 scalability-junk auser: let's say I have 2 projects gitserver and one wordpress site for example
20:24 auser sure
20:24 scalability-junk I would declare both in the top.sls file or?
20:24 auser I handle this with roles: http://www.saltstat.es/posts/role-infrastructure.html
20:24 auser maybe that will help?
20:26 scalability-junk auser: a bit yeah. so you have one top file and just use grains or hostnames to determine their project and then assign their specific functions
20:26 scalability-junk '*wordpress*': -something
20:26 auser yep, that's how I do it (which is why I wrote that article)
20:26 auser yep
20:26 auser I use grains to handle that
20:26 scalability-junk '*gitserver*': -semething else
20:26 auser grains.setval roles [wordpress]
20:26 auser for example
20:27 scalability-junk ok I'll probably use hostnames for that, roles seems more like db, webserver etc. roles inside different projects.
20:27 scalability-junk thanks slowly it clears up
20:27 scalability-junk about the autodiscovery before you use the informer for that
20:27 mgw1 joined #salt
20:28 scalability-junk but couldn't it be done with searching grains within the pillar files?
20:28 scalability-junk say the pillar file includes all db servers for projectx via '*db*projectx*' and then the data is used within the mysql settings for example?
20:31 jacksontj joined #salt
20:33 qba73 joined #salt
20:37 rbstewart auser: I'm trying to take an overstate and run it on multiple sets of boxes (set A, then B without touching A again, etc.)
20:38 jslusher auser: http://pastebin.com/UCdg5NDy
20:38 auser rbstewart: okay?
20:38 jslusher auser: seems like ports related issue since it can only see itself
20:38 rbstewart but can't figure out how, w/o changing the overstate targeting or the minion ids for each set.
20:39 jslusher auser: but it was working earlier this morning, which is troubleing
20:39 auser yeah, what does your /etc/salt/master look like?
20:39 auser rbstewart: you want to change the targeting?
20:39 StDiluted_ joined #salt
20:39 auser try setting it with the ip, not the DNS name
20:40 dthom91 joined #salt
20:41 novel joined #salt
20:41 jslusher auser: are you saying that to me?
20:42 jslusher auser: the master file is untouched actually
20:42 auser yes jslusher
20:42 auser it may be because it launched in a new az?
20:42 auser maybe
20:42 jslusher completely default
20:44 KyleG joined #salt
20:44 jslusher auser: I'm able to ssh from the master to one of the minions
20:45 jslusher auser: and ping it for that matter
20:45 younqcass is it possible to require a mysql_grant state?
20:45 jslusher manually though
20:46 auser hm
20:46 auser all new instances?
20:46 jslusher auser: new as of this morning
20:46 jslusher created by salt-cloud
20:46 rbstewart younqcass: yes, totally. Put up a paste and I'll walk you through it.
20:46 jshare joined #salt
20:47 jslusher auser: and the weirdest part is that it was working earlier
20:47 jslusher auser: I just tried creating a brand new instance with the same results
20:47 auser well… first question… what did you change?
20:47 auser :)
20:49 jslusher auser: the only thing I changed was adding a couple more profiles for salt-cloud
20:49 jslusher auser: I also closed some ports on the security group it was using
20:50 jslusher auser: which I since re-opened
20:50 auser does any other command fail?
20:50 auser like
20:50 auser salt-run manage.up?
20:50 jslusher auser: let me try
20:51 younqcass rbstewart: thanks http://pastebin.com/9kadwaxq
20:51 jslusher auser: I get the following as the output:
20:51 jslusher auser: ip-10-236-161-180.ec2.internal
20:51 jslusher auser: which is the master itself
20:51 jslusher auser: not sure what I'm supposed to get from that one
20:52 isomorphic joined #salt
20:52 mgw joined #salt
20:53 auser nothing else came back?
20:54 rbstewart younqcass: looks mostly good. What error messages are you getting?
20:54 jslusher auser: right, just that one line
20:54 auser how many instances do you have running?
20:56 jslusher auser: at least two others
20:56 jslusher I've been creating and destroying them through the morning
20:58 younqcass rbstewart:sorry it looks like I missed the s in mysql_grants
21:01 conan_the_destro joined #salt
21:03 whit joined #salt
21:03 aleszoulek joined #salt
21:03 rbstewart younqcass: np. would you like a refactoring example using jinja to simplify things?
21:05 younqcass rbstewart: sure, one more thing though…let say i want to run the script based on whether an application is installed or something.. what is salt making its decision on?
21:05 younqcass rbstewart: what would be the return for a successful grep or locate command?
21:05 jslusher auser: nmap doesn't show the ports 4505 and 4506 as being open against one of the listed minions
21:05 andrew_ joined #salt
21:06 auser can you nc to 'em?
21:06 auser nc -zv [IP] 4505
21:09 rbstewart younqcass: not totally sure. Would have to check the source. For installed packages salt probably checks the system package manager.
21:09 jslusher auser: got a 'connection refused for that
21:09 jslusher auser: the -z option would take for whatever reason
21:09 jslusher so:
21:09 jslusher sudo nc -v 10.28.81.153 4505
21:09 jslusher Ncat: Version 6.25 ( http://nmap.org/ncat )
21:09 jslusher Ncat: Connection refused.
21:09 auser okay, so is the salt-minion actually running?
21:10 auser the daemon
21:11 benkay joined #salt
21:11 jslusher auser: http://pastebin.com/mNgC6ZjK
21:11 rbstewart younqcass: stopping the salt-minion then run in the foregorund can be informative, e.g. "sudo stop salt-minion; sudo salt-minion --log-level debug"
21:11 auser on your master
21:11 auser does `salt-key -L` show that key as accepted?
21:12 jslusher auser: that's really strange since on the master it's listed as having accepted the minion's key
21:12 jslusher auser: I should double check that
21:12 auser try restarting the salt-minion daemon; I wonder if it recreated one on accident
21:12 younqcass rbstewart: can i use that if I'm using a masterless config with vagrant?
21:16 aranhoide joined #salt
21:16 nineteeneightd joined #salt
21:16 spicyWith joined #salt
21:20 jslusher auser: I tried that and it didn't help. I also tried deleting the key from the master and deleting the key from the minion and then restarting the minion
21:21 jslusher auser: now the master doesn't see any key at all
21:21 auser on your master
21:21 auser ls /etc/salt/pki/master/minions
21:22 diegows joined #salt
21:23 rbstewart younqcass: http://pastebin.com/MwrfkCj9
21:23 jslusher auser: sudo ls /etc/salt/pki/master/minions
21:23 jslusher ip-10-236-161-180.ec2.internalsaltcloud-test-dev-2
21:24 rbstewart whoops, forgot a require statement on the service.running... but you get the idea.
21:24 jslusher auser: the first one is the master itself, the only minion it can talk to. the second is the only key I have yet to delete
21:24 younqcass rbstewart: thats pretty darn awesome… do I need to install anything to run this?
21:24 auser sec, brb
21:28 jslatts joined #salt
21:31 rbstewart younqcass: no, jinja is built into salt.
21:31 UtahDave joined #salt
21:33 sifusam joined #salt
21:34 scalability-junk auser: I assume you don't use pillars with hostname/id searches for data discovery as you haven't said crap or wow to the approach :D
21:35 bemehow joined #salt
21:36 devinus joined #salt
21:37 auser scalability-junk: which approach?
21:37 scalability-junk say the pillar file includes all db servers for projectx via '*db*projectx*' and then the data is used within the mysql settings for example?
21:38 scalability-junk aka discovering servers with grains within pillar files
21:40 sifusam join #wellaware
21:40 sifusam apoligies for the spam
21:40 sifusam disregard
21:43 jslusher auser: I found the problem
21:44 auser oh just jslusher
21:44 auser what was it?
21:46 whit joined #salt
21:46 jslusher auser: I had altered the security group of the master. I took away ports 4505 and 4506
21:47 jslusher auser: thinking that it would only affect the public interface
21:47 jslusher auser: but apparently that's not the case
21:47 auser interesting
21:47 auser glad you found it
21:49 jslusher auser: thanks for humoring me
21:50 auser sure
21:50 auser :)
21:50 jslusher auser: incidentally, do you know of a way to set rules specifically for internal IPs without opening ports for the external?
21:50 auser you can use the CIDR, right?
21:51 jslusher auser: I was thinking of setting it to allow only from 10.0.0.0, but I was sure if all internal AWS IPs were in that subnet
21:51 auser no, but there are several of them
21:51 younqcass rbstewart: I'm getting 'No function declared in state "mysql_database" in sls', I put the paste in an included file do I need to put the jinja/yaml description at the top
21:52 auser but you can depend on them being that way
21:53 jslusher auser: I'm not sure I understand CIDR
21:54 auser you can set specific ranges of ips with CIDR
21:54 jslusher auser: based on the explanation, it seems like a large subnet
21:55 jslusher auser: such as 10.23.192..0/18 having a whole lot of IPs because you're allowing for the third octet to be masked only partially
21:55 auser yep
21:56 jslusher auser: ok. yeah, I get that
21:56 jslusher auser: so everything that AWS would possible IP would at least start with 10.?
21:56 auser or 176.
21:56 jacksontj joined #salt
21:56 auser <~ I'm pretty sure
21:56 sturdy joined #salt
21:57 jslusher auser: I suppose I could account for those as well as 192 and be private
21:57 auser yeah
21:58 jslusher auser: cool. I'll o that. thanks again
21:58 auser np
21:58 younqcass rbstewart: looks like it might be -present  under mysql_grants.
22:01 rbstewart younqcass: oh, whoops. yeah, you got it.
22:03 jacksontj joined #salt
22:09 efixit joined #salt
22:10 StDiluted if I am making a state that requires mysql to be installed, should I include the mysql state (separate state) at the beginning of this state?
22:10 kermit joined #salt
22:14 tuttles joined #salt
22:19 logix812 joined #salt
22:27 bensix2 joined #salt
22:30 jeddi StDiluted: what?
22:30 jeddi StDiluted: and - probably yes.
22:30 jeddi StDiluted: if you're makinga  state that has a requirement that pkg.mysql is present, then you should -require it, i think.  is that what you mean?
22:31 StDiluted well
22:31 jeddi StDiluted: though having said that, not having this in place is only going to bite you if you re-use this on a new machine (and then only on the first of two iterations of salt highstate), and/or a rebuild.
22:31 StDiluted I have a package which depends on mysql being installed
22:31 StDiluted but i have a separate mysql state
22:31 jeddi then yeah - that's pretty much the definitive use case for 'require:'
22:32 jeddi by 'mysql state' do you mean pkg.present?
22:32 StDiluted pkg.installed
22:32 StDiluted plus a bunch of other stuff
22:33 jeddi yeah - i use a require: \n  - pkg: mysql-server   (or whatever your distro equiv is)
22:33 StDiluted but it seemed like referring to another state wasn't possible from within a state, unless you include: it?
22:33 StDiluted ok
22:33 jeddi try it.  but i'm pretty sure that the entire state of the nation, as it were, is compiled at run time, and so it can satisfy that requirement.
22:34 jeddi StDiluted: do you mean you'll be trying to instantiate a specific state, rather than doing a highstate against this machine?
22:34 StDiluted eventually a high state
22:34 jeddi if that's the case, i can't speak for the potential results.  i tend to stick with ensuring highstates are idempotent and robust with each change i make to my sls files.
22:34 StDiluted i suppose to test i can just state.sls mysql icinga
22:34 isomorphic joined #salt
22:34 jeddi oh.  icinga.  that's on my list :)
22:34 StDiluted nice
22:35 jeddi of things to try to work out whether i want to use them, i mean :)
22:35 StDiluted i like it
22:35 StDiluted in conjunction with check_mk
22:36 KyleG +1 for check_mk - I like it a lot
22:36 StDiluted WATO is great
22:36 KyleG Indeed it is, plus the dashboard is useful
22:37 StDiluted yeah, I am making use of multisite and the config sync is really great as well
22:37 defunctzombie joined #salt
22:41 KyleG1 joined #salt
22:41 jacksontj joined #salt
22:42 pmcg joined #salt
22:43 saurabhs1 joined #salt
22:43 druonysuse joined #salt
22:43 benkay_ joined #salt
22:45 abele_ joined #salt
22:45 eskp joined #salt
22:45 eskp joined #salt
22:46 dthom91 joined #salt
22:46 defunctzombie_ joined #salt
22:48 Ryan_Lane joined #salt
22:50 younqcass joined #salt
22:51 kermit joined #salt
22:52 jshare hello, i have a question about the documentation for salt-virt
22:52 jshare which is: is the documentation cut off?  It looks like it stops mid-concept:  http://salt.readthedocs.org/en/v0.16/topics/tutorials/cloud_controller.html#using-salt-virt
22:53 Corey jshare: That's a common question about the salt-virt documentation, but in fact you'll notice that
22:54 Jahkeup_ joined #salt
22:55 SEJeff_work :)
22:55 Ryan_Lane joined #salt
22:56 jshare so, are there any well known alternative docs then?
22:57 Corey Yeah, that's definitely a site or doc bug.
23:02 tuttles left #salt
23:03 aat joined #salt
23:08 Ryan_Lane joined #salt
23:13 dzen joined #salt
23:14 carxwol joined #salt
23:15 Valdo joined #salt
23:17 jlaffaye joined #salt
23:18 dthom91 joined #salt
23:21 StDiluted Any ideas why I would be getting an error about no matching els found in env base when it's definitely there on the salt server?
23:22 StDiluted sls
23:30 chrisgilmerproj left #salt
23:34 oz_akan_ joined #salt
23:42 napperjabber joined #salt
23:42 symroe joined #salt
23:55 efixit joined #salt
23:57 mgw joined #salt
23:57 avienu joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary