Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2013-07-25

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 [diecast] joined #salt
00:04 evax_ joined #salt
00:04 david_a joined #salt
00:05 looped joined #salt
00:06 jschadlick left #salt
00:06 darrend joined #salt
00:10 logix812 joined #salt
00:16 KyleG joined #salt
00:17 go8ose_ joined #salt
00:18 avienu joined #salt
00:19 dthom91 joined #salt
00:25 mgw joined #salt
00:30 StDiluted joined #salt
00:43 sturdy joined #salt
00:47 cxz when will a salt state module exist for s3?
00:47 aat joined #salt
00:49 JasonSwindle joined #salt
00:49 JasonSwindle UtahDave:  Hey!
00:49 UtahDave howdy!
00:51 jpeach joined #salt
00:52 JasonSwindle Maybe you know or someone does….. but I am going to have a many node, dev | stag | prod with web | lb | database | caching servers.  I want to do grains at the minion level in the minion config….. but I do not want to have to hand place the minion config or hand build the nodes either.  How can I hand out the correct minion config and build then via Salt-Cloud?
00:54 JasonSwindle We are talking like 21 minion between all of the different types of nodes and envs
00:55 spudbook joined #salt
00:55 mannyt joined #salt
00:55 Linz joined #salt
00:56 Linz joined #salt
00:56 p3rror joined #salt
00:56 JasonSwindle And I cannot seem to find a good way to do it.
00:57 avienu joined #salt
00:57 JasonSwindle Any advice anyone?
00:58 UtahDave JasonSwindle: Are you using a map file to build these servers out?
00:58 UtahDave JasonSwindle: If you're using a map file, you can specify grains that each minion should have and Salt Cloud will place them for you
00:59 JasonSwindle Been looking into a map in Salt-Cloud
00:59 JasonSwindle UtahDave:  Is that the only real option?
00:59 jfalco joined #salt
01:00 UtahDave you can also use your salt master to remotely set grains
01:00 UtahDave salt '<db minion>' grains.setval role dbserver
01:01 kstaken joined #salt
01:01 UtahDave You can also write your own grains in python. If there is some way for your python grain to determine what its grains should be, then that would work.
01:02 JasonSwindle Ok
01:02 JasonSwindle I am going to try the grains in Salt-Cloud Map
01:04 JasonSwindle It seems like the less error pone path, and faster to market
01:06 Furao joined #salt
01:07 robertkeizer joined #salt
01:07 UtahDave ok, let me know how it goes, man
01:08 JasonSwindle THanks, will do.
01:08 JasonSwindle I hear Salt-UI is getting love at the hackathon this weekend?
01:09 JasonSwindle source: https://github.com/saltstack/salt-ui
01:09 nmistry joined #salt
01:12 emocakes joined #salt
01:13 go8ose_ joined #salt
01:13 robertkeizer left #salt
01:14 Nexpro joined #salt
01:15 robertkeizer joined #salt
01:17 UtahDave JasonSwindle: yep!
01:20 liuyq joined #salt
01:30 nmistry joined #salt
01:31 Linz_ joined #salt
01:33 FSP_Dan joined #salt
01:35 DanGarthwaite joined #salt
01:38 Pontifier joined #salt
01:38 kenbolton joined #salt
01:41 auser joined #salt
01:41 auser hey all
01:42 Pontifier Hi all, I'm trying to get minion peer communication to work, but I'm not getting any responses back when I do 'salt-call publish.publish \* test.ping'
01:47 auser did you set it up in your config file Pontifier
01:48 Pontifier I uncommented the part of /etc/salt/master that should allow minions to run anything
01:51 Pontifier I uncommented both the peer: and peer_run: .*: -.* sections
01:54 Pontifier salt-run jobs.list_jobs shows commands from the master, but not the minions
01:54 blee joined #salt
01:56 Pontifier /var/log/salt/master shows an error:
01:57 Pontifier [salt.master][error] Received function minion_pub which is unavailable on the master, returning False
01:58 spudbook joined #salt
02:04 kstaken joined #salt
02:06 DanGarthwaite joined #salt
02:10 cxz_ joined #salt
02:11 Pontifier I've got another question about pillars too...
02:12 Pontifier Is it possible to manage per-machine keys and certificates using pillars?
02:13 isomorphic joined #salt
02:13 DanGarthwaite Yes.  Others are doing this already.
02:14 jessep joined #salt
02:14 DanGarthwaite In what context are you managing keys?
02:14 mgw joined #salt
02:15 Pontifier I was going to generate ssl certificates for postgresql servers
02:15 DanGarthwaite Yep.  Pass the pillar into a jinja template seems to be a common pattern.
02:15 Lue_4911 joined #salt
02:18 Pontifier I was hoping for something similar to file.managed in the SLS files, but with machine specific names
02:19 Pontifier -sources that is
02:19 Pontifier as i understand it everything under salt:// is available to all minions
02:20 DanGarthwaite The point of pillar is to hide away data from other minions.
02:20 Pontifier yeah.. that's why i was hoping that I could put secure files under pillar
02:22 DanGarthwaite You can either put the entire contents of the file in pillar, or just the private parts.
02:24 napperjabber joined #salt
02:24 DanGarthwaite Imagine making a file:  pg_hba.tmpl that contained one line:   {{ content }}
02:24 DanGarthwaite Then in the state file:
02:25 DanGarthwaite -  defaults:
02:25 DanGarthwaite content: {{ pillar['pg_hba'] }}
02:33 jessep joined #salt
02:37 mgw joined #salt
02:40 spudbook joined #salt
02:42 faeroe_ joined #salt
02:42 faeroe_ anyone who uses gitfs; what do you set the file_roots to?
02:46 [diecast] joined #salt
03:05 blee joined #salt
03:11 raydeo joined #salt
03:22 napperjabber joined #salt
03:28 go8ose_ joined #salt
03:43 Nexpro joined #salt
03:48 rfgarcia joined #salt
03:56 xl1 joined #salt
04:14 Lue_4911 joined #salt
04:16 FL1SK joined #salt
04:20 cxz joined #salt
04:20 cxz_ joined #salt
04:25 Pontifier left #salt
04:41 go8ose_ joined #salt
04:42 koolhead17 joined #salt
04:42 koolhead17 joined #salt
04:50 cxz joined #salt
04:51 cxz_ joined #salt
04:53 jessep joined #salt
04:54 Nexpro1 joined #salt
05:02 yanivyalda joined #salt
05:04 Singularo joined #salt
05:04 Singularo Anybody got DigitalOcean working right with salt-cloud ? I can launch machines etc, but it always ssh's in as root and prompts for the password after the launch.
05:05 joonas I wonder if UtahDave knows about that :)
05:16 * Singularo looks in channel logs..
05:17 s0undt3ch_ joined #salt
05:20 cxz_ joined #salt
05:21 Singularo Ahah - http://russell.ballestrini.net/create-your-own-fleet-of-servers-with-digital-ocean-and-salt-cloud/
05:22 Singularo Thanks UtahDave, joonas ;-)
05:22 jalbretsen joined #salt
05:22 dthom91 joined #salt
05:22 malinoff joined #salt
05:23 malinoff Hi, can anybody help me? I want to run a shell command every time the file is changing. I have this:
05:23 malinoff someid:
05:23 malinoff cmd.run:
05:23 malinoff - name: command
05:23 malinoff - watch:
05:23 malinoff - file: /tmp/file.txt
05:24 malinoff But it fails with comment: The following requisites were not found: watch: {'file': '/tmp/file.txt'}
05:25 malinoff I've tried to use cmd.wait, but it fails just like cmd.run
05:33 Furao malinoff: run -> wait
05:33 malinoff Furao: >I've tried to use cmd.wait, but it fails just like cmd.run
05:33 Furao and you don't have a state called /tmp/file.txt
05:33 mmilano joined #salt
05:35 malinoff Hm. Can i just watch changes on /tmp/file.txt file and on each change run a command without describing that state?
05:37 joonas Singularo: ah yes, sorry I forgot that blog post :)
05:38 Furao malinoff: require/watch is in the following format {{ state name }}: {{ module name }}
05:38 Furao you have to have a /tmp/file.txt: - file.managed
05:39 Furao to make salt know if /tmp/file.txt had been changed
05:39 Furao check github.com/bclermont/states for hundred of examples of that
05:40 Singularo Yeah, I grabbed a bunch of repos from github with states in them for examples ;-)
05:40 malinoff Well, the problem is that i need to push a file from a minion to the master IF that file was changed. Can i do that?
05:41 Furao with module.wait
05:41 malinoff Now my cmd.run looks like this: salt-call publish.publish 'host' cp.push /tmp/somefile
05:42 Furao I can't think of a worst way to do that :)
05:42 malinoff Whats the best way? :)
05:42 brims joined #salt
05:44 Furao malinoff: https://gist.github.com/bclermont/2c2cb35417dc25490dcc
05:44 Furao just fixed a bug
05:45 malinoff Thanks :)
05:46 Furao salt-call publish.publish is very expensive compared to module.watch
05:46 Furao module.wait
05:47 malinoff Ah, i missed one thing. Watching file is on a minion.
05:50 rfgarcia joined #salt
05:50 malinoff I have a build server that makes .deb packages. I have symlink that links to the latest package - and i want to push this package (simply just cp.push symlink) each time i have new package (build server will update symlink).
05:52 Furao you sure you want master to serve files?
05:53 Furao you should have an http frontend on your .deb build server
05:53 Furao and maybe reprepro to have a real apt repo
05:53 Furao (I mean serve those files)
05:56 malinoff Repo will be used later, now i just need to make a working solution.
05:56 malinoff And no, i don't want to serve files on master,  is there any way to push this package right to other minion?
05:57 middleman_ joined #salt
05:58 Furao source: http://{{ pillars['build_server_ip'] }}/whatever.deb :)
05:59 Furao it's better if you pull instead of push, as you won't have to have salt make sure .deb is built on minion #1 before installing it on minion #2
05:59 Furao engrish alert
06:00 auser joined #salt
06:01 auser hey all
06:01 Furao o/
06:02 malinoff Can i use minion hostname in source?
06:02 malinoff Like 'salt' for the master
06:02 Furao malinoff: in source?
06:02 malinoff Yes, smth like source: 'minion:/tmp/file' ?
06:03 Furao no
06:03 Furao http isn't good enough for you? :)
06:03 malinoff This serves has no web-interface
06:03 malinoff server*
06:04 Furao you can't do everything with just salt
06:04 malinoff I know
06:04 malinoff Thanks anyway
06:05 Furao maybe you'll save time by switch directly to a real repo server
06:07 malinoff This is the first thing i will push to my chief
06:07 Furao Ubuntu or debian?
06:10 middleman_ joined #salt
06:11 Furao I mean, your baseline distro
06:15 Singularo left #salt
06:22 dthom91 joined #salt
06:27 apergos left #salt
06:37 Xeago joined #salt
06:49 unicoletti_ joined #salt
06:53 dthom91 joined #salt
06:57 s0undt3ch joined #salt
07:00 Guest11881 joined #salt
07:02 ml_ joined #salt
07:08 felskrone joined #salt
07:09 carlos joined #salt
07:12 FL1SK joined #salt
07:15 kenbolton joined #salt
07:17 aleszoulek joined #salt
07:23 abele joined #salt
07:25 go8ose_ joined #salt
07:26 auser anyone else see this error when running highstate on n > 1 minions: ZMQError: Operation cannot be accomplished in current state?
07:44 malinoff Furao: debian and CentOS
07:45 kenbolton joined #salt
07:54 felskrone joined #salt
08:03 pwistrand joined #salt
08:07 felixhummel joined #salt
08:13 Xeago joined #salt
08:14 felixhummel joined #salt
08:18 qba73 joined #salt
08:21 carmony joined #salt
08:22 bemehow joined #salt
08:40 bud joined #salt
08:40 bud Hello all.
08:41 bud I am using @UtahDave approach to set up users - https://gist.github.com/UtahDave/3785738
08:43 bud I have the following state /srv/salt/users/init.sls - http://pastebin.com/vswwxw2H
08:43 bud I receive the following error: "Data failed to compile: The state "lastresort" in sls users is not formed as a list"
08:45 FL1SK joined #salt
08:45 bud Nevermind :).
08:46 bud The problem was that {{ user }}_public_key was two spaces indented.
08:49 kstaken joined #salt
08:49 jessep joined #salt
08:51 whiskybar joined #salt
08:54 dthom91 joined #salt
09:04 scott_w joined #salt
09:11 krak3n` joined #salt
09:24 dthom91 joined #salt
09:33 Nexpro joined #salt
09:36 cocoy1 joined #salt
09:40 FL1SK joined #salt
09:42 felixhummel hi! i have a self-made debian package i need to install, but do not have the time to set up a custom repo. how would you go about that?
09:44 felixhummel please ignore my question. it's pkg.installed with "sources" parameter of course.
09:45 woyerbse joined #salt
09:47 woyerbse left #salt
09:47 woyerbse joined #salt
09:48 carlos joined #salt
09:52 kenbolton joined #salt
09:59 ggoZ joined #salt
09:59 FL1SK joined #salt
10:16 carmony joined #salt
10:24 pwistrand joined #salt
10:26 pwistran_ joined #salt
10:27 evax joined #salt
10:29 woyerbse joined #salt
10:30 xl2 joined #salt
10:35 lemao joined #salt
10:35 FL1SK joined #salt
10:39 sturdy joined #salt
10:48 drawsmcgraw joined #salt
10:53 p3rror joined #salt
10:58 sturdy joined #salt
10:59 TJ- joined #salt
11:03 david_a joined #salt
11:16 Odd_Bloke joined #salt
11:18 giantlock joined #salt
11:22 xl1 joined #salt
11:25 dthom91 joined #salt
11:28 logix812 joined #salt
11:34 mikedawson joined #salt
11:34 eightyeight joined #salt
11:36 eightyeight joined #salt
11:40 krak3n` joined #salt
11:54 napperjabber joined #salt
11:55 dthom91 joined #salt
11:59 lynxman joined #salt
12:00 blee joined #salt
12:02 felixhummel joined #salt
12:03 [diecast] joined #salt
12:10 emocakes joined #salt
12:13 helderco joined #salt
12:16 KennethWilke joined #salt
12:20 mirrorbox joined #salt
12:21 sturdy joined #salt
12:23 lynxman joined #salt
12:35 krak3n` joined #salt
12:39 lynxman joined #salt
12:39 lynxman joined #salt
12:41 younqcass joined #salt
12:43 lynxman joined #salt
12:43 lynxman joined #salt
12:44 woyerbse joined #salt
12:46 mikedawson joined #salt
12:49 dthom91 joined #salt
12:50 zooz joined #salt
12:50 lynxman joined #salt
12:50 lynxman joined #salt
12:51 anteaya joined #salt
12:58 Fah joined #salt
13:04 svx joined #salt
13:05 diegows joined #salt
13:09 SkyRocknRoll joined #salt
13:09 SkyRocknRoll Hello Guys
13:09 drawsmcgraw Howdy
13:10 SkyRocknRoll Hi drawsmcgraw: Our company doesnot have any configuration management. We are planning to put configuration management
13:10 SkyRocknRoll what is good about salt stak ?
13:10 drawsmcgraw Simple. Easy. Hackable.
13:11 drawsmcgraw I've dealt with Puppet (too complicated), Chef, and Salt
13:11 drawsmcgraw Not *in depth*, just cursory
13:11 drawsmcgraw For us (a bunch of Windows machines), it came down to Chef & Salt
13:11 drawsmcgraw I'm glad we went with Salt mostly for it's simplicity.
13:11 SkyRocknRoll drawsmcgraw: awww!!!
13:12 drawsmcgraw Also, because it's in Python (and the guys do a great job of making it easy to contribute), it's easy to hack and change/add features
13:12 drawsmcgraw As an example, we needed to run Powershell scripts
13:12 drawsmcgraw Wasn't long before we found the proper hooks. Submitted, and the feature was in the next release
13:12 drawsmcgraw So.... You can add 'Community' to the list as well
13:13 SkyRocknRoll drawsmcgraw: cool.
13:13 drawsmcgraw Chef is great, too, in my experience. But I don't think the organization behind it is quite as approachable as Salt
13:13 juicer2 joined #salt
13:13 drawsmcgraw For example, UtahDave regularly hangs in this chat room during the day
13:13 drawsmcgraw And that's all the propaganda I have for that :)
13:13 SkyRocknRoll drawsmcgraw: you are using community or enterprise edition of salt ?
13:14 drawsmcgraw Grab a copy, try something out. The docs are plentiful and thorough
13:14 drawsmcgraw community
13:14 drawsmcgraw We're still just starting out. Lots of problems we're working to solve.
13:14 SkyRocknRoll drawsmcgraw: hmmm...
13:14 froolie joined #salt
13:15 aat joined #salt
13:15 SkyRocknRoll Thanks drawsmcgraw :)
13:16 * SkyRocknRoll doing git clone https://github.com/saltstack/salt.git
13:16 drawsmcgraw glad to help. Come back a bit later. There's usually more activity around here
13:16 drawsmcgraw enjoy!
13:19 timl0101 joined #salt
13:19 drawsmcgraw SkyRocknRoll: Also, be sure to grab the vim files (salt-vim on Github). They make reading/writing state files sooper easy
13:19 Gifflen joined #salt
13:19 Xeago can I hop along in the conversation
13:19 Xeago I am an employee at a small company
13:20 Xeago currently they manage all the servers by hand, its only 2
13:20 Xeago we are expanding soon and I required them to use a tool for this, they told me to figure out
13:20 Xeago we run ruby on rails, postgres, redis
13:20 Xeago (and the webservers)
13:21 Xeago can I have more opinions about puppet/chef/salt/others
13:21 napperjabber joined #salt
13:22 robertkeizer joined #salt
13:24 cron0 joined #salt
13:24 toastedpenguin joined #salt
13:26 drawsmcgraw Xeago: The last alternative that I'm aware of is Ansible
13:26 drawsmcgraw My TL;DR for Ansible is that it sounds great for small homes/labs but may have some trouble scaling to larger data centers
13:28 drawsmcgraw Regardless of which platform you choose, you'll still need to do the cerebral work of figuring out the automation for your system
13:28 drawsmcgraw That is, auto-creation of a dev environment, deploying the application, etc...
13:29 drawsmcgraw Once you get that part down, you can see where whichever platform fits your needs (managing services, config files, user accounts, install/updating software, etc...)
13:29 drawsmcgraw Puppet & Chef are written in Ruby (as are their modules/recipes)
13:29 drawsmcgraw Salt is in Python but you don't have to know any Python to use it
13:29 drawsmcgraw It's also, in my opinion, simpler
13:31 _jps joined #salt
13:32 ipmb joined #salt
13:34 middleman_ joined #salt
13:35 m_george|away joined #salt
13:36 helderco hmm…. I have an undefined alias error in an exclude_pat, can anyone help? http://pastebin.com/rQEueTSD
13:37 helderco I want to exclude a file that ends in .ronn
13:37 brianhicks joined #salt
13:37 _jps joined #salt
13:38 racooper joined #salt
13:39 helderco It works if I add single quotes arround that expression, but the docs don't have them http://docs.saltstack.com/ref/states/all/salt.states.file.html#salt.states.file.recurse
13:42 az87c joined #salt
13:42 az87c_ joined #salt
13:45 ipmb joined #salt
13:52 Khollowa_ joined #salt
13:55 SEJeff_work joined #salt
13:55 SpX joined #salt
13:56 spudbook_ joined #salt
14:02 JasonSwindle joined #salt
14:05 kermit joined #salt
14:08 LucasCozy Hello, is there a way to use a grain entry directly in a watched file ? (and how call the entry?) Didn't find suitable documentation about that.
14:11 SpX joined #salt
14:21 cnelsonsic joined #salt
14:21 mannyt joined #salt
14:22 jslatts joined #salt
14:27 robertkeizer joined #salt
14:30 robertkeizer joined #salt
14:31 JasonSwindle Anyone here use SaltCloud or work on it?
14:31 andrew joined #salt
14:31 teskew joined #salt
14:32 lemmings Xeago: IMHO: Ansible is Linux only and ssh based. Promissing, but limited by design. some people swear by it
14:33 kaptk2 joined #salt
14:33 lemmings Xeago: puppet... well, try a run with the learning puppet VM. IMHO, too complicated for simple things, other sysadmins also state that it can be tricky when the configs get more elaborate
14:34 lemmings Xeago: Chef... I kinda like it, but the internet seems to think that it loses to puppet in almost every benchmark
14:34 blink__ joined #salt
14:34 lemmings Xeago: salt... seems more flexible, easier to config and even tne architecture seems great for scaling and stuff. So far, my favourite
14:35 lemmings Xeago: but the best option is always.. try them. see what you can do with each in a day. By that metric, I'm sure salt will come ahead
14:37 chrisgilmerproj joined #salt
14:38 Xeago lemmings: thanks for your opinion!
14:42 JasonSwindle Anyone use or work on Salt-Cloud?
14:42 terminalmage lemmings: ansible has some good ideas, salt has gotten ideas from ansible (salt-ssh) and ansible has gotten ideas from salt (fireball mode, which uses zeromq). I think they're good for each other.
14:43 terminalmage JasonSwindle: I haven't done anything specifically with it. All the devs follow the salt-users mailing list, so if you're not getting anyone in here, you might want to ask your question there
14:44 JasonSwindle terminalmage: Yeah…… most likely too early for Dave and the gang to be in as well.  Thanks
14:44 terminalmage yeah they should be around shortly
14:48 lemmings terminalmage: didn't know ansible had a zeromq module. Didn't when I looked at it. I rather liked ansible
14:48 terminalmage yeah fireball mode is new
14:49 lazyguru joined #salt
14:50 avienu joined #salt
14:53 teskew i use salt-cloud extensively
14:53 backjlack joined #salt
14:54 woyerbse joined #salt
14:55 krak3n` joined #salt
14:57 mmilano joined #salt
14:59 jpeach joined #salt
15:02 jessep joined #salt
15:03 mmilano left #salt
15:05 StDiluted joined #salt
15:13 StDiluted morning all
15:13 mjulian joined #salt
15:13 lemmings terminalmage: so... thoughts on salt vs andible? :D
15:14 whiskybar joined #salt
15:14 LucasCozy I use a managed file. I tell with Jinja template a variable to my file. But a would define it from a grains entry. And if I call 'myvar: {{grains[myentry]}} ' I have the error 'dict object has no element'
15:15 JasonSwindle Howdy StDiluted
15:15 StDiluted hey JasonSwindle
15:15 LucasCozy I'd try with " or ' , it didn't work
15:15 viq lemmings: in our case ansible was ruled out due to direction of the connections
15:15 LucasCozy but works with ' myvar: "toto" '
15:16 LucasCozy Morning StDiluted, even it's evening at home.
15:16 terminalmage lemmings: I haven't experimented with ansible all that much
15:16 StDiluted lol, hey there Lucas. Where are you in the world?
15:17 LucasCozy Connected from France.
15:17 mannyt_ joined #salt
15:17 StDiluted Cool. New Mexico, USA here.
15:17 LucasCozy And you ? West coast?
15:17 Furao_ joined #salt
15:17 LucasCozy Ok! Nice to meet you.
15:17 jeddi joined #salt
15:17 StDiluted Same!
15:18 terminalmage LucasCozy: from what I've seen, one advantage is the lack of a need for a client on the boxes you want to manage, and another is the ability to write your "playbooks" in any language, so long as they output JSON
15:19 terminalmage however, I think Salt's host targeting is better, and I like the requisite system
15:19 terminalmage whereas ansible always runs things sequentially
15:20 Joel_re joined #salt
15:20 StDiluted Lucas, on your grains replacement issue, are you trying to populate a pillar with grains info?
15:20 terminalmage lemmings: the best thing to do in order to decide which CM solution is right for you is to pick a task that is important to you, and try to accomplish it using salt, ansible, puppet, chef, etc.
15:21 terminalmage ultimately, you should go with whatever works best for your use case
15:21 _____sing_and_sh joined #salt
15:22 LucasCozy I try to define a string in configuration file, who is take from the grains info. Seems to have no pillar here.
15:22 jschadlick1 joined #salt
15:22 StDiluted Lucas: I see, you're just trying to substitute grains info with jinja
15:22 LucasCozy I'm using context call from jinja.
15:22 LucasCozy yes.
15:23 StDiluted have you tried myvar: {{ grains['my entry'] }}
15:23 StDiluted with the ticks
15:24 StDiluted Ah i see you tried with ' and "
15:24 StDiluted hm
15:24 StDiluted and the configuration file has template: jinja in your state?
15:24 yogi_ joined #salt
15:25 LucasCozy StDiluted, maybe you're right. I test.
15:26 StDiluted Lucas: this works for me
15:26 StDiluted salt://bashrc/.bashrc-{{ grains['ec2_region'] }}
15:26 StDiluted in an els file
15:26 StDiluted sls
15:26 StDiluted damn you colloquy
15:27 yogi_ I cannot connect to my salt master after I have switched to a non root user , master ports are open - I can telnet to the ports .. I have changed the ownership to the user. Is there something I have missed ..
15:28 kula joined #salt
15:29 LucasCozy StDiluted, Yes was that.I forgot ' in [] just call right.
15:29 LucasCozy like grains['myentry'] and it's works.
15:29 StDiluted cool
15:29 nickray joined #salt
15:29 LucasCozy Thank's for your fresh mind^^
15:30 Gifflen Has anyone has issues with salt-cloud when using the parallel option with a map
15:30 tomeff joined #salt
15:30 timl0101 joined #salt
15:30 jimallman joined #salt
15:30 Gifflen Its tossing a strange python error
15:30 Gifflen Demonic processes are unable to have children
15:32 zach joined #salt
15:33 devinus joined #salt
15:34 lemmings terminalmage: yeah, that's what I did, but since ansible had no win support, I overlooked it
15:34 terminalmage lemmings:
15:34 terminalmage lemmings: ahh
15:35 Khollowa_ joined #salt
15:35 JasonSwindle teskew: Ping, see abive
15:35 lemmings terminalmage: windows
15:35 terminalmage windows support is getting better and better with salt, we have some great community members helping to improve it
15:35 JasonSwindle *above….. maybe you can help on this Salt-cloud question?
15:35 lemmings terminalmage: it's this os... kinda like a lame linux clone, but with only one windows manager
15:36 joeTSUNAMI joined #salt
15:36 terminalmage lemmings: :)
15:36 jalbretsen joined #salt
15:36 lemmings still haven't tied any windows stuff, really, but i'm a salt noob
15:36 joeTSUNAMI Hi guys! Is there a way to set selinux file context in a state?
15:36 lemmings but since you mentioned targetting... what's the best way to define roles?
15:37 lemmings I have a local grain defined in /etc/salt/minion but it seems... weak
15:37 terminalmage joeTSUNAMI: http://docs.saltstack.com/search.html?q=selinux&amp;check_keywords=yes&amp;area=default
15:37 terminalmage lemmings: pillar is designed for this
15:38 terminalmage the key difference between grains and pillar is that grains are loaded on minion startup
15:38 joeTSUNAMI ah, thanks.. i didn't see it as an option here: http://docs.saltstack.com/ref/states/all/salt.states.selinux.html#module-salt.states.selinux
15:38 terminalmage joeTSUNAMI: yeah, there are states and execution modules
15:38 terminalmage the modules do all the work
15:39 joeTSUNAMI i'm about 4 days into learning and am pretty stoked!
15:40 mmilano joined #salt
15:40 joeTSUNAMI how would this translate into a state?
15:40 joeTSUNAMI salt.modules.file.set_selinux_context(path, user=None, role=None, type=None,range=None)
15:40 terminalmage lemmings: static grains can also work for this, but are less flexible
15:40 terminalmage but if the role doesn't change much, that doesn't matter
15:40 lemmings terminalmage: I know... but what's the best practice here? You have to target the pillar later too...
15:41 terminalmage lemmings: it all depends on what you want to do
15:41 terminalmage what are you doing differently for hosts with different roles
15:41 terminalmage ?
15:41 lemmings in this case, iptables configs, for instance
15:41 krak3n` joined #salt
15:42 terminalmage ok, so one approach is to create different SLS files for the different roles
15:42 lemmings also, if it's in pillar and a config pulls a grain, won't there be dependecy issues?
15:42 lasi joined #salt
15:42 terminalmage and run the appropriate SLS for that role
15:43 lemmings i had a {{ if role in grains... kinda thing defined
15:43 terminalmage lemmings: I don't follow... why would there be a dependency issue?
15:43 lemmings if a sls/template does something depending on the state of a grain and you set the grain via pillar, which runs first?
15:44 terminalmage you don't set grains via pillar
15:44 terminalmage they are two separate things
15:44 terminalmage grains are static information loaded at minion start
15:44 terminalmage pillar data is calculated on the fly
15:44 lemmings so you set roles on a pillar alone and query pillar?
15:45 terminalmage that's one way of doing it. do the roles change often?
15:45 terminalmage or are they mostly static?
15:45 JasonSwindle Has anyone has issues with salt-cloud when using the parallel option with a map.  Its tossing a strange python error; "Demonic processes are unable to have children"
15:46 StDiluted There are a lot of ways to do what you're trying to do, but it depends on your environment, I think is what the problem is, lemmings
15:47 terminalmage lemmings: if the roles don't change, the easiest way of managing them would be to put them in /etc/salt/grains
15:47 terminalmage http://docs.saltstack.com/topics/targeting/grains.html?highlight=static%20grains#grains-in-etc-salt-grains
15:48 DanGarthwaite joined #salt
15:48 terminalmage then you could get the role in jinja using {{ grains.get('role', 'defaultrolegoeshere') }}
15:49 terminalmage and you could do grain matching in your top.sls using 'role:webserver'
15:51 terminalmage lemmings: http://dpaste.com/1317161/
15:54 toastedpenguin joined #salt
15:56 JasonSwindle Has anyone has issues with salt-cloud when using the parallel option with a map?  It is tossing a strange python error; "Demonic processes are unable to have children"
16:02 druonysus joined #salt
16:02 druonysus joined #salt
16:03 mannyt joined #salt
16:06 lemmings static
16:06 lemmings but can change
16:07 lemmings terminalmage: my main problem is this
16:07 lemmings iptables modules adds the same rule everytime it's run
16:07 lemmings (else I'm have something like install apache, open iptables for 80 and 443)
16:07 StDiluted iptables states are being worked on this weekend at the salt sprint
16:08 lemmings ...
16:08 lemmings so I might just wait and do this
16:08 lemmings :D
16:08 StDiluted up to you
16:08 lemmings no other way
16:08 lemmings can't figure out how to accumulate roles
16:09 helderco joined #salt
16:09 StDiluted what do you mean?
16:09 lemmings something like "if webserver open 80 but if also dns server, open 53", for instance
16:10 StDiluted so are you having trouble assigning multiple roles to your servers?
16:10 avienu joined #salt
16:11 StDiluted JasonSwindle: I'm betting that is a bug, based on reading this and others like it: http://mail.python.org/pipermail/python-list/2011-March/600063.html
16:11 lemmings I'll ex+plain
16:11 lemmings check http://dpaste.com/1317186/
16:12 lemmings you have a pillar, an sls and a template there
16:12 StDiluted JasonSwindle, I'm guessing that somewhere in salt-cloud, *.daemon=False needs to be set
16:12 StDiluted looking, lemmings
16:13 JasonSwindle StDiluted: Let me read
16:14 scotticus joined #salt
16:15 StDiluted I'm betting in here around line 177: https://github.com/saltstack/salt-cloud/blob/develop/saltcloud/cloud.py
16:17 StDiluted lemmings, so the problem is that you then want to open 53 for a DNS server without opening all the other bits again?
16:19 StDiluted maybe a pillar with a list of ports to open for each role, and then aggregate them? Or an external pillar that takes roles as arguments and returns a lost of ports to open for your iptables state?
16:20 Khollowa_ joined #salt
16:22 scotticus is it possible to template conf files that get referenced in a file.managed.source section?
16:22 KyleG joined #salt
16:24 Linz joined #salt
16:26 Ryan_Lane joined #salt
16:28 lasi joined #salt
16:28 racooper scotticus,  does this have your answer? http://docs.saltstack.com/ref/states/all/salt.states.file.html
16:31 kstaken joined #salt
16:32 opapo joined #salt
16:33 scotticus racooper: looks like it so far :)
16:33 scotticus thanks
16:36 scotticus racooper: i'm not sure that is what i need.  i have a bunch of apache vhost confs i'd like to automatically generate.
16:37 scotticus without having to actually have individual conf files.
16:37 lemmings StDiluted: can you aggregate pillar values?
16:40 Lue_4911 joined #salt
16:41 StDiluted I don't see why you couldn't, they are just variables
16:41 UtahDave joined #salt
16:42 StDiluted hey UtahDave
16:43 racooper joined #salt
16:44 lemmings StDiluted: how?
16:45 felskrone joined #salt
16:45 felskrone hi
16:46 andrew_seattle joined #salt
16:47 froolie left #salt
16:50 mgw joined #salt
16:52 lemmings felskrone: howdy
16:56 UtahDave howdy, StDiluted!
16:56 koolhead17 joined #salt
16:56 StDiluted lemmings: I'm not sure what the best way would be
16:57 StDiluted I don't see why you couldn't have multiple if 'role' in 'roles' clauses in your sls file though
16:57 arapaho joined #salt
16:58 jessep joined #salt
16:58 jschadlick joined #salt
16:59 jdenning joined #salt
17:00 CaptTofu joined #salt
17:00 CaptTofu howdy all
17:00 mr_chris How do you get Jinja to do string comparisons with regular expressions? I'm having a difficult time finding it in the docs.
17:00 mr_chris Howdy CaptTofu! How's Lt. Tempeh?
17:00 CaptTofu how do you use salt-cp - I want to do "salt-cp /path/somefile host:/path/to/whatever/" ?
17:00 lemmings thing is, you can have something like "if something in roles, do A"
17:00 CaptTofu doesn't seem I can include the path and only can include the dest host
17:00 lemmings but A will be a resulting yaml definition a
17:01 lemmings and you can't concatenate yaml like that, methinks
17:03 dthom91 joined #salt
17:03 jesusaurus CaptTofu: im pretty sure you want: salt-cp host /local/path /remote/path
17:04 emocakes joined #salt
17:05 jpeach joined #salt
17:10 kenbolton joined #salt
17:16 auser joined #salt
17:17 BKC joined #salt
17:19 lemmings must continue this tomorrow... still, great news about an iptables module sprint
17:22 logix812_ joined #salt
17:27 helderco How should you configure pillar in masterless mode?
17:27 devinus joined #salt
17:29 EugeneKay By running a master on localhost. :v
17:35 Fah left #salt
17:36 kenbolton joined #salt
17:36 cron0 joined #salt
17:39 druonysus joined #salt
17:39 druonysus joined #salt
17:43 devinus joined #salt
17:46 az87c joined #salt
17:47 chrisgilmerproj is debian.salstack.com having trouble?
17:49 jpeach joined #salt
17:50 Ryan_Lane joined #salt
17:54 sciyoshi1 joined #salt
17:54 LucasCozy chrisgilmerproj, webpage not responding here;
17:54 chrisgilmerproj so i'm not crazy, that's good
17:55 UtahDave Hm.  Sorry, let me go check on that
17:55 chrisgilmerproj thanks
17:57 chrisgilmerproj looks better now
17:57 UtahDave Sorry about that!
17:58 chrisgilmerproj no problem
17:58 chrisgilmerproj i appreciate the fast response
17:58 backjlack joined #salt
17:58 UtahDave You're very welcome
17:59 Joel_re joined #salt
18:04 dthom91 joined #salt
18:13 JasonSwindle joined #salt
18:14 Ryan_Lane joined #salt
18:20 saurabhs joined #salt
18:22 chrisgilmerproj hey, how do I set the id for a minion to use "socket.gethostname()" instead of "socket.getfqdn()"?
18:22 kamal_ chrisgilmerproj: recompile salt from scratch
18:22 kamal_ s/scratch/source/
18:23 chrisgilmerproj hehe
18:23 chrisgilmerproj nice
18:23 chrisgilmerproj i might be able to use `hostname`?
18:23 chrisgilmerproj and have it execute?
18:23 UtahDave chrisgilmerproj You could set that in a custom grain
18:23 DanGarthwaite chrisgilmerproj:  It is a sticking point for me, too.  I set the minion ID in /etc/minion.d/local.conf on all minions.
18:24 DanGarthwaite Then use that as authoritative all over the place.
18:24 chrisgilmerproj basically all my company tools use the hostname and not the fqdn, which is maybe not great but its legacy
18:25 DanGarthwaite echo -e 'id: host\nmaster: salt\n' > /etc/salt/minion.d/local.conf && ./bootstrap.sh stable
18:26 DanGarthwaite salty-vagrant does similar as well.
18:28 auser joined #salt
18:29 auser hey all
18:29 chrisgilmerproj interesting
18:29 chrisgilmerproj well cool
18:33 chrisgilmerproj so the /etc/salt/minion.d/local.conf file is just normally picked up?  Or do i have to set it somewhere?
18:34 dthom91 joined #salt
18:35 mortis joined #salt
18:36 Xeago joined #salt
18:36 djn joined #salt
18:37 mmilano joined #salt
18:42 auser joined #salt
18:44 devinus joined #salt
18:45 berto- joined #salt
18:47 JasonSwindle Can grains be set in Vagrant-Salt?
18:48 UtahDave JasonSwindle: yeah, I'm sure you can.  akoumjian, how would you do that?
18:49 JasonSwindle UtahDave:  My current Vagrantfile https://gist.github.com/JasonSwindle/0ed8ee2720c8c4d77191
18:49 JasonSwindle I would love to be able to set the grains to per config.vm.define
18:49 auser hey all
18:49 UtahDave hey, auser!!
18:51 helderco JasonSwindle: do you want to set grains or pillars?
18:51 JasonSwindle Grains
18:51 auser so… I'm still having a bug hang around where nginx isn't getting restarted as a service, even though salt thinks it is
18:51 auser thanks for dinner again last night UtahDave, we had a blast
18:51 UtahDave Yeah, that was a lot of fun!
18:53 UtahDave auser: is there an open issue on the nginx service bug?
18:54 helderco I'm looking for a way to set pillar data in Vagrantfile, but can't figure it out.
18:54 auser not yet, was curious if anyone else has seen it or if it is just me… but it's been around since 0.15.1
18:54 auser I'll file one
18:55 UtahDave yeah, I think JasonSwindle was actually having issues with this yesterday.
18:55 JasonSwindle auser:  What OS?
18:55 JasonSwindle auser:  I was having an issue with Ubuntu 13.04
18:55 auser JasonSwindle: rad! Ubuntu 13.04
18:55 auser haha
18:55 auser nice
18:55 auser did ya solve it?
18:55 brianhicks joined #salt
18:56 JasonSwindle I moved to 12.04, and I also put in an upstart script
18:56 racooper joined #salt
18:56 JasonSwindle https://gist.github.com/JasonSwindle/afa999e609e02e36bbff
18:59 joeTSUNAMI How do I fix this? "selinux.list_sebool" is not available.
18:59 racooper which distro?
18:59 joeTSUNAMI i thought it was due to missing policycoreutils-python
18:59 joeTSUNAMI RHEL
18:59 joeTSUNAMI 6
19:00 cnelsonsic joined #salt
19:00 auser JasonSwindle: I'm using an upstart script… okay
19:01 joeTSUNAMI it works on one box, but not the other.. both rhel 6.4
19:01 racooper you're right joeTSUNAMI , I believe it's semanage that the script requires which is in policycoreutils-python
19:02 joeTSUNAMI right, i verified it's on both boxes..
19:03 joeTSUNAMI fixed! .. restart minion after installing the policycoreutils-python package
19:03 DredTiger joined #salt
19:05 KyleG joined #salt
19:06 DredTiger Howdy
19:07 DredTiger Has anyone come across anything that does for saltstack what blueprint does for puppet, chef and cfengine?
19:07 DredTiger https://github.com/devstructure/blueprint
19:09 Avatar[01] joined #salt
19:09 JasonSwindle UtahDave:  Did you have any luck finding if Grains can be set in Vagrant Salt?
19:10 auser DredTiger: this won't help you any, but I made one a long time ago pre-chef
19:11 auser for my old company… not sure if I still have it
19:11 ipmb joined #salt
19:11 auser I should dig it up and make one for salt
19:11 auser that'd be a fun project
19:12 drawsmcgraw We're using the GitFS backend for managing our salt states. What is a good (best?) method to handle scenarios where we lose connection to that Git server?
19:12 UtahDave JasonSwindle: So a quick look through the docs shows you can specify a custom minion config.  You could create a config that defines grains in it.
19:12 DredTiger It looks like someone has recently added bcfg2 support to blueprint
19:12 drawsmcgraw I know we'd want a local copy, but what's the best way for that? Stand up a local git server and use it as a mirror? Something else?
19:12 UtahDave it also says you can set pillar from the config, so I'm trying to see if it will allow for grains as well
19:12 JasonSwindle Do you still have that link open?
19:13 UtahDave drawsmcgraw: The salt-master caches the git repo, so Salt will continue on happily using the cache until the git server comes back up
19:13 UtahDave JasonSwindle: https://github.com/saltstack/salty-vagrant#minion-options
19:16 JasonSwindle UtahDave:  it does not want to see to work under "config.vm.define"
19:16 JasonSwindle only config.vm.provision
19:17 JasonSwindle Example, https://gist.github.com/JasonSwindle/0ed8ee2720c8c4d77191 akoumjian
19:17 Gifflen Anyone have an idea as to what would cause minions to become unresponsive in salt (ssh directly still works) for the period of a few minutes after the initial highstate.
19:17 DanGarthwaite chrisgilmerproj: Yes, it will just be picked up.
19:18 aat joined #salt
19:18 logix812 joined #salt
19:18 david_a joined #salt
19:18 soukihei joined #salt
19:18 baoboa joined #salt
19:18 jetblack joined #salt
19:18 Zethrok joined #salt
19:18 mattt joined #salt
19:18 goodwill joined #salt
19:18 djinni` joined #salt
19:18 bejer joined #salt
19:18 mollerstrand joined #salt
19:18 LordOfLA joined #salt
19:18 durnik joined #salt
19:18 mirko joined #salt
19:18 Micromus_ joined #salt
19:18 spacedentist joined #salt
19:18 nkuttler joined #salt
19:18 heckman joined #salt
19:18 utahcon joined #salt
19:18 bawnzai joined #salt
19:18 whiteinge joined #salt
19:18 melinath joined #salt
19:18 minaguib_ joined #salt
19:18 cce joined #salt
19:18 bdf joined #salt
19:19 drawsmcgraw UtahDave: We just ran a test and it looks like the Salt Master only caches the files-in-question
19:19 drawsmcgraw That is, the entire repo wasn't cached. Only the state file & script that we wanted to run
19:21 JasonSwindle akoumjian: Are you here?
19:21 cowmix joined #salt
19:21 druonysus joined #salt
19:21 mgw joined #salt
19:21 UtahDave joined #salt
19:21 DanGarthwaite joined #salt
19:21 Guest7506 joined #salt
19:21 napperjabber joined #salt
19:21 blee joined #salt
19:21 eightyeight joined #salt
19:21 aleszoulek joined #salt
19:21 isomorphic joined #salt
19:21 rcassidy joined #salt
19:21 keith4 joined #salt
19:21 dzen_ joined #salt
19:21 AlcariTh1Mad joined #salt
19:21 zirpu joined #salt
19:21 mordred joined #salt
19:21 EWDurbin joined #salt
19:21 kcb joined #salt
19:21 carxwol joined #salt
19:21 z0rkito joined #salt
19:21 Liebach joined #salt
19:21 Psi-Jack joined #salt
19:21 puppet joined #salt
19:21 freelock_ joined #salt
19:22 yogi_ joined #salt
19:22 drawsmcgraw joined #salt
19:22 brims joined #salt
19:22 lemmings joined #salt
19:22 StDiluted hey there auser
19:22 DanGarthwaite joined #salt
19:22 auser hey hey StDiluted!
19:24 JasonSwindle UtahDave:  You make it back after that wave?
19:24 UtahDave :)  yep!   wheeeeeeee
19:26 faeroe joined #salt
19:27 JasonSwindle UtahDave:  I cannot seem to do minion_config per network
19:27 jslatts joined #salt
19:27 saurabhs joined #salt
19:28 JasonSwindle UtahDave: https://gist.github.com/JasonSwindle/0ed8ee2720c8c4d77191 <-
19:28 Newt[cz] joined #salt
19:29 UtahDave ah, I'm sorry, JasonSwindle. I really don't have any experience with or much knowledge of salty-vagrant.
19:29 craig_ joined #salt
19:29 UtahDave if akoumjian doesn't respond soon, I'd recommend asking on the mailing list
19:29 Sacro joined #salt
19:29 JasonSwindle Ah, and it looks like akoumjian is not around
19:29 JasonSwindle ok
19:29 UtahDave I'm really not much help with salty-vagrant yet.  :(
19:29 loz_hurst joined #salt
19:30 Zurullo joined #salt
19:30 nmistry joined #salt
19:32 Ryan_Lane joined #salt
19:33 StDiluted I'll be exploring salty vagrant here pretty soon, i guess
19:34 Gifflen @UtahDave Any idea as to what would cause minions to become unresponsive in salt (ssh directly still works) for the period of a few minutes after the initial highstate?
19:34 faeroe_ joined #salt
19:34 Gifflen They are responsive after the initial deploy as well
19:34 joeTSUNAMI in user.present, to set the password you have to set a hash. how do i hash it?
19:34 Gifflen but there is like a 5 minute downtime after the first highstate
19:34 UtahDave Gifflen: how many minions are you talking about?
19:34 jpcw joined #salt
19:34 LucasCozy joined #salt
19:34 LucasCozy joined #salt
19:34 Gifflen 3
19:34 Gifflen nothing crazy
19:34 dthom91 joined #salt
19:34 stevetodd joined #salt
19:35 vmdsch joined #salt
19:35 helderco joined #salt
19:35 _jps joined #salt
19:35 m_george|away joined #salt
19:35 basepi joined #salt
19:35 Nazzy joined #salt
19:35 chutzpah joined #salt
19:35 coolj joined #salt
19:35 Nitron joined #salt
19:35 ede joined #salt
19:35 sw_ joined #salt
19:35 fxhp joined #salt
19:35 marcinkuzminski joined #salt
19:35 akshayms joined #salt
19:35 pmcg joined #salt
19:35 cjh_ joined #salt
19:35 UtahDave joeTSUNAMI: there's an example here: http://docs.saltstack.com/ref/modules/all/salt.modules.shadow.html#salt.modules.shadow.set_password
19:35 UtahDave Gifflen: when minions initially start up and are accepted by the master, it does take a few moments for all the authentication to finish
19:35 UtahDave but it shouldn't be minutes.
19:35 UtahDave Gifflen: what command are you executing?
19:36 joeTSUNAMI UtahDave: Thanks. How do i know what salt will work on the system that i'm pushing to?
19:36 Gifflen I provision the servers from a map with salt-cloud
19:37 Gifflen The deploy everything works fine no issues salt '*' test.ping returns expcted resultes immediates
19:37 Gifflen then calling salt '*' state.highstate
19:37 p3rror joined #salt
19:37 Gifflen The highstates execute normally. then the same test.ping shows no results for a few minutes
19:37 UtahDave joeTSUNAMI: you can use any salt you want.
19:38 UtahDave Gifflen: what OS?
19:38 Gifflen They are all Ubuntu 12.04
19:38 StDiluted JasonSwindle, any luck with your daemonic processes error?
19:39 UtahDave yeah, that's kind of odd. What are you doing in your highstate?
19:39 Gifflen Pretty stock configs. Originally thought it was a firewall issue but we reviewed them. And they all come back up normally without any intervention after a few mintues
19:39 JasonSwindle StDiluted:  Moved on past it, working on GITFS on a master
19:39 StDiluted lemmings, sorry I had to duck out earlier. What I was saying is that you could use an external pillar to join up the ports you want to open
19:39 StDiluted ah
19:39 Gifflen all 3 servers show the same, one is a redis server, one is an nginx/uwsgi/django stack and one is a postgresql server
19:40 _vimalloc I'm trying to do a mysql_user.present: with the connection host specified as 127.0.0.1, and I'm getting an error back that says "Can't connect to MySQL server on '10.19.0.4". Any idea where it may have gotten that ip from?
19:40 Gifflen after the initial highstate and they come back to being seen by salt any further highstates don't reproduce the problem
19:40 StDiluted UtahDave, a few people have now run into a salt-cloud error of 'Daemonic processes are unable to have children' when using parallel maps. I think it is because of around line 177 on https://github.com/saltstack/salt-cloud/blob/develop/saltcloud/cloud.py
19:40 Gifflen only the first one and it resolves itself in time
19:42 StDiluted UtahDave: I don't know enough about python to fix it, but it looks like this is the same issue and a possible resolution: http://mail.python.org/pipermail/python-list/2011-March/600063.html
19:42 Gifflen When I saw that demonic error it only happens when using both a map file, parrallel execution and start_action set to use highsate
19:42 Gifflen removing highstate resolved the problem but they manually had to be called
19:43 StDiluted right
19:43 UtahDave that's interesting.  is there an open issue on salt-cloud on that, StDiluted?
19:43 faeroe_ joined #salt
19:44 StDiluted UtahDave: I don't know, I've just seen a few people mention it in here in the last couple days
19:44 StDiluted JasonSwindle, did you open a ticket on that?
19:44 JasonSwindle I have not yet….. we have so many moving parts right now, it is hard to tell if user error or salt-cloud
19:45 JasonSwindle We may loop back on that once our time-line is not so rushed
19:46 faeroe_ I'm setting up gitfs - I am getting this error in the master log: Error when fetching: fatal: remote error:' returned exit status 2
19:46 faeroe_ anyone run into this?
19:46 devinus joined #salt
19:46 JasonSwindle StDiluted:  We think it was something with salt-call and calling a highstate in the config.  Gifflen knows more about it
19:46 bhosmer joined #salt
19:48 Gifflen To reproduce the issue: create a map, have start_action: state.highstate set in /etc/salt/cloud , run salt-cloud -m /your/map -P
19:48 Gifflen Breaks when it gets to the point of bootstrapping salt
19:49 Gifflen the actual cloud portion of bringing the servers up works with no issues
19:51 jessep joined #salt
19:51 UtahDave Gifflen: have you updated your bootstrap?
19:52 UtahDave salt-cloud -U   (I think)
19:52 Gifflen we installed from git directly
19:52 Gifflen but I'll try that
19:53 Gifflen I'm going to attempt to rekick these servers back in a few
19:53 akoumjian JasonSwindle: Sorry, just got back. Somebody have a question?
19:54 JasonSwindle Yes, I am trying to either do something wrong or something Salty Vagrant cannot do
19:55 akoumjian What are you expecting and what is actually happening?
19:55 JasonSwindle akoumjian:  https://gist.github.com/JasonSwindle/0ed8ee2720c8c4d77191#file-vagrantfile-L32
19:55 JasonSwindle I want to have minion configs per config.vm.define :SOMETHING
19:55 squelch joined #salt
19:56 JasonSwindle I am setting grains per minion config
19:56 squelch hey. Anyone know why I'm getting this:
19:56 squelch Specified SLS packages in environment base is not available on the salt master
19:56 david_a joined #salt
19:56 akoumjian JasonSwindle: I'm not sure I understand. That option lets you specify a file on the host machine that will get copied over to the minion
19:56 druonysus joined #salt
19:56 druonysus joined #salt
19:56 JasonSwindle But I have 3 minons
19:56 JasonSwindle *minions in the VagrantFile
19:57 JasonSwindle I want a different config per server type on the VagrantFile
19:57 david_a joined #salt
19:57 DanGarthwaite joined #salt
19:58 akoumjian JasonSwindle: So in each vm block you need to point to a different file on your host machine with the grains you want
19:59 JasonSwindle I tried on line 32, web.minion_config = "salt/minion"
19:59 JasonSwindle That failed
19:59 akoumjian JasonSwindle: You need to put a provision block inside each of your vms
19:59 JasonSwindle Ah, let me try that….
20:00 dave_den jinja template rendering is done on the master, right?
20:01 dave_den i'm trying to use the 'map' filter which is in jinja 2.7, but salt-common from the salt repo installed python-jinja2 2.6. i installed jinja2 2.7 from pip and restarted the salt master, but still getting a 'no "map" filter'.
20:02 squelch pillars work on masterless salt right?
20:02 JasonSwindle squelch:  Yes
20:03 squelch i keep getting that error - Specified SLS data in environment base is not available on the salt master
20:04 squelch i have -
20:04 squelch pillar_roots:
20:04 squelch base:
20:04 squelch - /srv/pillar/base
20:04 squelch nd in /srv/pillar/base i have data.sls
20:05 squelch any ideas :(
20:06 dave_den do you have a /srv/pillar/top.sls?
20:07 squelch yep -
20:07 squelch base:
20:07 squelch '*':
20:07 squelch - data
20:09 dave_den salt-call --local -l debug pillar.data
20:09 dave_den ?
20:09 squelch _errors:
20:09 squelch - Specified SLS data in environment base is not available on the salt master
20:09 squelch info:
20:10 squelch dev data
20:10 squelch master:
20:10 squelch ----------
20:10 squelch acceptance_wait_time:
20:10 squelch 10
20:10 JasonSwindle Will GITFS handle submodules?
20:10 JasonSwindle or tags?
20:11 dave_den squelch: not sure… pretty sure i had a salty-vagrant masterless setup a while ago that had local pillar data available
20:11 squelch hmm, annoying.
20:12 akoumjian squelch: Have you confirmed that the pillar files are available on the vm and that you are pointing to the correct pillar root?
20:13 Gifflen @UtahDave Updated the bootstrap. Still having the issue of the minions dissapearing for a few minutes after the initial highstate
20:14 squelch akoumjlan: the files are definitely there, and as far as i know
20:15 kermit joined #salt
20:18 squelch i've basically copied the docs
20:20 JasonSwindle Will GITFS handle submodules or git tags?  The docs do not over this at all…..
20:21 akoumjian squelch: Does your /srv/pillar/base have a top.sls in it?
20:21 akoumjian squelch: Your base file_root and pillar_root folder need a top.sls in it.
20:21 juicer2 How does one run a single state on a minion? manually from the master for example. salt 'system*' statename?
20:21 squelch oh doman
20:21 jschadlick joined #salt
20:21 squelch dahm
20:21 squelch DAM!
20:21 akoumjian squelch: looks like it's in the parent folder :-)
20:25 devinus joined #salt
20:26 squelch akoumjlan: thank you.. dumb mistake
20:26 berto- joined #salt
20:27 StDiluted juicer2: salt 'targeted-host' state.sls state
20:27 kermit joined #salt
20:29 juicer2 StDiluted: Thanks.
20:29 StDiluted sure
20:31 qba73 joined #salt
20:38 emocakes joined #salt
20:42 emocakes joined #salt
20:50 giantlock joined #salt
20:51 jschadlick joined #salt
20:52 Ryan_Lane joined #salt
20:52 jesusaurus is anyone here running multiple pillar environments?
20:52 jesusaurus im running into some strange behaviour
20:53 jesusaurus basically, adding the new environmets to the top file and running a refresh_pillar causes pillar.raw to suddenly be empty :(
20:54 jesusaurus has anyone seen similar behaviour?
20:56 mgw joined #salt
21:00 Newt[cz] joined #salt
21:00 StDiluted I haven't jesusaurus, but I'm not running multiple env.
21:02 jesusaurus yay, i found the issue
21:02 jesusaurus a typo in the top file was causing a completely silent failure
21:04 UtahDave jesusaurus: yeah, I was going to mention that usually means there's a malformed top.sls
21:04 nmistry joined #salt
21:15 chrisgilmerproj i'm curious why salt using its own command parser, it seems like some standard command line argument usage doesn't work
21:16 chrisgilmerproj ex: '-C"G@host:name"' doesn't work but '-C "G@host:name"' does
21:16 chrisgilmerproj the space here is what i'm interseted in
21:17 kenbolton joined #salt
21:18 UtahDave chrisgilmerproj: I'm not privy to all the reasons, but it has a lot to do with the fact that some commands relate directly to the salt command you're invoking, and others relate to the underlying commands that you're passing arguments down to.
21:18 chrisgilmerproj gotcha
21:18 zooz joined #salt
21:18 chrisgilmerproj i'm sure if it bugs me enough i can patch it and contribute back
21:19 UtahDave Yeah, we would love help with that.
21:20 dthom91 joined #salt
21:21 rberger joined #salt
21:21 dave_den if i have pillar data like this: http://pastebin.com/C79FaG2M  how would you go about gathering all of the archs per codename into a string and strip out any dupes. I.e., for wheezy i want to get a final string of 'i386 amd64 mach'. Doing this in jinja is mystifying me.
21:22 dave_den and ideally without the jinja map filter...
21:25 devinus joined #salt
21:27 pentabular joined #salt
21:28 * pentabular gives basepi a nickel for a hug
21:35 KyleG UtahDave: I have a compound matcher setup in my top.sls which is named "* and not as*" do you know if I can addon like this: * and not as* OR director* - Or would it be * and not as* and not director*
21:37 squelch to setup multiple environments in the top file, e.g. /srv/salt/dev, does dev needs its own top.sls file
21:37 KyleG looks like i can use or
21:38 squelch are there any examples anywhere for multiple environments
21:38 rberger joined #salt
21:38 pentabular squelch: good Q. I don't think you use multiple top files, just multiple state trees
21:38 pentabular ex. in the docs… ?
21:39 looped http://docs.saltstack.com/ref/states/top.html breaks down dev/qa etc..
21:39 squelch i've pretty much copied the docs and it doesn't work
21:39 pentabular http://docs.saltstack.com/ref/states/top.html?highlight=prod
21:39 pentabular or just http://docs.saltstack.com/ref/states/top.html
21:39 squelch from the docs:
21:39 squelch Note
21:39 squelch The top files from all defined environments will be compiled into a single top file for all states. Top files are environment agnostic.
21:40 pentabular yeah..
21:40 pentabular wasn't sure
21:40 pentabular afk
21:40 squelch but if i set set file_roots - base: /srv/salt/base and move top.sls to base, salt doesn't pick it up
21:41 sturdy joined #salt
21:43 chrisgilmerproj any idea how to target a space-delimeted list of hostnames?
21:43 chrisgilmerproj like -L"host1 host2" as opposed to -L "host1,host2"
21:45 UtahDave squelch: I'd recommend just using one top file that sits in your base environment
21:46 UtahDave squelch: that should work. If salt isn't picking up /srv/salt/base/top.sls, then either your pillar isn't compiling correctly or there's a bug
21:47 UtahDave chrisgilmerproj: I think Salt needs the commas. We'd have to add a feature to allow for the spaces, I belive
21:47 UtahDave believe
21:48 KyleG UtahDave: Do you know if I can do this: https://gist.github.com/kylegato/5e81f208c3757a1fea61
21:48 chrisgilmerproj I think I could patch a check to see if commas were in the string, otherwise try split()
21:48 chrisgilmerproj https://github.com/saltstack/salt/blob/develop/salt/utils/parsers.py#L1039
21:49 squelch UtahDave: Okay, so how would i go about setting up dev and prod environments.
21:50 UtahDave KyleG: no, you can't do that.  Each of those state declarations is becomes a key in a python dict. the keys have to be unique
21:50 KyleG okay
21:50 UtahDave chrisgilmerproj: cool
21:50 KyleG That's going to make it really big haha
21:50 KyleG We have like 15 RMQ users
21:52 UtahDave KyleG: If you use  - names\n - thename1\n - thename2  ,etc,  then you can just have one config for all of them
21:52 UtahDave Of course, I don't know that you can set the individual passwords that way.
21:52 KyleG ah yeah that's the problem
21:52 KyleG No biggy
21:52 KyleG It's better than manually creating them like I am now, hah
21:52 StDiluted maybe a for loop, with an index value and a pillar full of passwords?
21:53 KyleG StDiluted: Oh, so now you think it's okay to be logical! How dare you!
21:53 StDiluted pillar full of username/password values
21:53 KyleG lol :P
21:53 StDiluted haha, well, I like to work smart, not hard.
21:53 KyleG Definitely agree with you there
21:53 StDiluted tis why I use Salt to begin with
21:54 KyleG I'm a proponent for working smater, not harder. Good to see others live by a similar mantra
21:54 UtahDave joined #salt
21:54 KyleG smarter*
21:54 KyleG smart fail. lol
21:54 StDiluted SMRT
21:54 KyleG SMATER
21:54 KyleG its like po-tater
21:54 UtahDave joined #salt
21:55 StDiluted http://www.youtube.com/watch?v=DhrfhjLd9e4
21:55 jgood joined #salt
21:55 KyleG StDiluted: I'm embarrassed to say this, but I haven't used pillar too much, do you have any examples? I assume I can put the users+passwords into a file and then for-loop it somehow
21:56 KyleG haha
21:56 KyleG homer.
21:56 felskrone joined #salt
21:56 StDiluted That was only 11 years ago
21:56 StDiluted hehehe
21:57 KyleG It may shock you, but I was 11 years old 11 years ago, lol
21:57 auser joined #salt
21:58 StDiluted not shocked. I'm an old guy at 37. ;)
21:58 napperjabber joined #salt
21:58 KyleG ah, you're still young. My girlfriend is 32. lol
21:58 StDiluted Still act like I'm 13. 2 nerd guns on my desk right now.
21:58 KyleG hell yeah!
21:58 StDiluted nerf*
21:58 KyleG Rackspace is like that
21:58 StDiluted same thing really
21:58 KyleG Nerf guns everywherrr
21:58 StDiluted my girlfriend is 26. ;)
21:59 KyleG niceeee ;D haha
21:59 auser so is mine StDiluted
21:59 lazyguru joined #salt
22:00 StDiluted I'm a believer in age is just a number.
22:00 StDiluted ;)
22:00 KyleG same
22:00 KyleG Although, I always get a lot of shit working with older people lol. my boss said it best "If you told me when I graduated college that I'd be working with these elementary school kids in 10 years, I would've laughed at you"
22:01 StDiluted are you at Racksapce?
22:01 KyleG Nah, not since 2010
22:01 KyleG I work for a company called Wiredrive
22:01 KyleG Rackspace -> Self Employed -> HostGator -> Dreamhost -> Wiredrive (This is my journey, glad to be out of hosting by the way lol)
22:02 KyleG I forgot Grab Games after Dreamhost, but that was a short stint. Startup ran out of money quickly when a game flopped.
22:02 JasonSwindle joined #salt
22:03 KyleG anyways, I'll see what I can figure out with these pillars if you don't have any examples off hand
22:03 chrisgilmerproj submitted a pull request for that space delimited list of hosts for targeting
22:03 chrisgilmerproj https://github.com/saltstack/salt/pull/6317
22:04 UtahDave chrisgilmerproj: cool!  Thanks!
22:05 StDiluted oh sorry i didn't see your request about the pillars
22:05 StDiluted one sec
22:05 chrisgilmerproj doing what i can
22:05 chrisgilmerproj hope its the right solution
22:05 chrisgilmerproj if not i'll re-work it
22:06 UtahDave chrisgilmerproj: We'll run it through out test suite and I'm sure tom will want to look it over, but an initial glance looks good to me!
22:06 chrisgilmerproj oh yeah, should have written a test for it!
22:06 chrisgilmerproj :)
22:06 StDiluted KyleG: http://docs.saltstack.com/topics/tutorials/pillar.html
22:06 StDiluted check that out
22:08 auser does anyone use bootmachine?
22:08 quantumsummers|c joined #salt
22:11 JasonSwindle Is salt '*' state.clear_cache the only "cache" to clear?
22:13 KyleG yeah I'm there already
22:14 KyleG thanks StDiluted, I'm sure I can figure this out ;P
22:15 druonysus joined #salt
22:15 druonysus joined #salt
22:16 auser hm
22:17 jpadilla joined #salt
22:19 druonysuse joined #salt
22:22 robertkeizer joined #salt
22:25 StDiluted KyleG: something like: https://gist.github.com/gists
22:25 StDiluted err
22:26 StDiluted https://gist.github.com/dginther/6084341
22:26 KyleG yeah
22:26 KyleG I'm creating a rabbitmq/users pillar file
22:26 KyleG with users:
22:26 KyleG then user: password
22:26 KyleG so I can do that forloop
22:26 KyleG It seems thats the way to do it
22:26 StDiluted yeah, that would work, I think
22:26 StDiluted that way the pillar has the sensitive info
22:26 psb joined #salt
22:26 StDiluted and you can edit it in one place
22:26 KyleG yeah I like that a lot
22:26 KyleG huge
22:35 _ilbot joined #salt
22:35 Topic for #salt is now Welcome to #salt - http://saltstack.org | 0.16.0 is the latest | Please be patient when asking questions as we are volunteers and may not have immediate answers - Channel logs are available at http://irclog.perlgeek.de/salt/
22:36 pentabular joined #salt
22:40 mackstick joined #salt
22:41 younqcass joined #salt
22:53 chrisgilmerproj anyone in here an expert with sudoers files?
22:53 chrisgilmerproj i'm trying to allow a user to run all salt commands as the salt user
22:54 chrisgilmerproj but i get a "Failed to authenticate, is this user permitted to execute commands?" error
22:54 JasonSwindle joined #salt
22:54 chrisgilmerproj ADMINS  SALT = (salt) SALTCMDS
22:55 chrisgilmerproj and I'd like to run "salt \* test.ping" instead of "sudo -u salt salt \* test.ping"
22:56 chrisgilmerproj the only user in my "client_acl" is also "salt" because I want all my users defined in my sudoers file
22:59 pentabular joined #salt
23:00 Xeago joined #salt
23:00 UtahDave chrisgilmerproj: look at the client_acl option in the master config
23:00 UtahDave That allows you to let specific users have specific right on specific minions
23:00 UtahDave specifically.    :)
23:00 mackstick joined #salt
23:01 chrisgilmerproj :)
23:01 StDiluted this SLS is complaining about an include, anyone have any ideas? https://gist.github.com/dginther/6084548
23:01 chrisgilmerproj its not so much that as if my user, cgilmer, runs a salt command then i'd like the sudoers file to pick up that i'm allowed to run the salt command as though I'm the salt user
23:01 chrisgilmerproj maybe that's not salty though
23:03 chrisgilmerproj i just have a lot of admins already in my sudoers file and i'd rather not put them all in the conf file under client_acl as well.
23:05 UtahDave chrisgilmerproj: no, that's totally reasonable.
23:06 KyleG chrisgilmerproj: A lot of users in the sudoers file? Why not LDAP and just use groups.
23:06 chrisgilmerproj mainly because we don't control that kind of access in ldap
23:06 KyleG ah
23:06 JasonSwindle KyleG: Do you have an example of using LDAP in salt?
23:07 chrisgilmerproj and i'd like to keep all the stuff in the same place
23:07 KyleG JasonSwindle: No I don't, my LDAP is managed by hand, for security reasons we don't manage LDAP via salt. Our developers have access to our salt repo.
23:07 JasonSwindle ah
23:07 joehh joined #salt
23:08 StDiluted gnight all
23:08 KyleG gnite StDiluted
23:11 KyleG So I've got /usr/local/etc/salt/pillars/rabbitmq/users.sls and /usr/local/etc/salt/pillars/rabbitmq/vhosts.sls - I've also got an init.sls inside of pillars/rabbitmq/ https://gist.github.com/kylegato/50ae1d72a0eac9b5680b
23:11 KyleG Am I doing this wrong....
23:12 KyleG I want to use the power of Pillars so badly :[
23:12 qba73 joined #salt
23:16 mgw joined #salt
23:18 jeddi joined #salt
23:21 dthom91 joined #salt
23:24 younqcass joined #salt
23:26 cxz joined #salt
23:41 lempa joined #salt
23:49 pentabular joined #salt
23:52 jschadlick left #salt
23:58 mmilano left #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary