Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2013-11-21

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:16 Brew joined #salt
00:16 rgarcia_ joined #salt
00:18 micah_chatt joined #salt
00:19 dwyerj joined #salt
00:22 Katafalkas joined #salt
00:25 druonysus joined #salt
00:25 shinylasers joined #salt
00:27 nocturn joined #salt
00:27 Linz joined #salt
00:29 druonysus joined #salt
00:29 druonysus joined #salt
00:32 JasonSwindle joined #salt
00:39 cachedout joined #salt
00:41 zandy joined #salt
00:42 pipps__ joined #salt
00:44 JulianGindi joined #salt
00:53 pipps_ joined #salt
00:55 franky joined #salt
00:57 modafinil can i make a state that i'm writing default depend on something else (say im writing deploy logic, and i have to ensure github ssh keys are known+authed before i ever try to run)?
01:00 cocoy joined #salt
01:00 franky joined #salt
01:02 kermit joined #salt
01:03 teebes joined #salt
01:03 zandy joined #salt
01:05 StDiluted joined #salt
01:06 amahon joined #salt
01:08 jimallman joined #salt
01:10 honestly yes
01:11 honestly state execution is now guaranteed to be in order of how they're written, unless you use require statements
01:15 mafro joined #salt
01:16 mafro ho salters
01:17 mafro does anyone know how to query pillar data in code on a minion
01:17 honestly {{ pillar.get('key') }}
01:17 mafro I've done stuff with LocalClient on the master, but I pillar data exposed on my minions which I want to access in another script
01:17 teebes joined #salt
01:17 mpanetta joined #salt
01:17 mafro not in SLS files - in a python app
01:23 N3rd2600 joined #salt
01:24 whiteinge LocalClient().cmd('theminion', 'pillar.get', ['nameofpillardata'])
01:25 whiteinge mafro: ^^
01:26 brisbane_bob joined #salt
01:27 mafro whiteinge: thanks - so I need to specify the minion's name in "theminion"
01:27 mafro even though this code is running on the minion itself?
01:27 mafro (just checking really; I could go write some code :O)
01:29 whiteinge Oh, if you're running this on the minion itself you should use the salt-call version which is Caller()
01:29 whiteinge mafro: http://docs.saltstack.com/ref/clients/index.html#salt-caller
01:29 mafro righto I thought it would be something like that
01:29 mafro I've never done custom salt stuff on the minion before
01:29 mafro thanks whiteinge
01:30 whiteinge np!
01:31 StDiluted joined #salt
01:33 canci joined #salt
01:34 brisbane_bob anyone know the equiv of 'mco find'? I just want to know what hosts salt _would_ (or _should_) target - test.ping only tells me which ones actually responded. Anything offline just doesn't show up (after the timeout).
01:35 pipps joined #salt
01:35 zandy joined #salt
01:37 cro brisbane_bob: You could list your salt keys.  You should have one key for each minion.
01:43 shadowsun bleeergh
01:44 brisbane_bob cro: ls: cannot open directory /etc/salt/pki/minion: Permission denied
01:47 mafro joined #salt
01:56 deepakmd_oc joined #salt
02:00 oz_akan_ joined #salt
02:03 oz_akan_ joined #salt
02:11 cro brisbane_bob: ah--sorry, didn't know you needed to run that as someone other than root
02:12 jefferai joined #salt
02:13 Furao left #salt
02:20 brisbane_bob cro: yeah - down the bottom of the pecking order, here!
02:21 brisbane_bob I guess I'll just use dig |grep - but I'd prefer to know what _salt_ thinks
02:22 Zuru joined #salt
02:22 berto- joined #salt
02:27 mannyt joined #salt
02:33 [diecast] joined #salt
02:38 pentabular left #salt
02:44 stefanmonkey joined #salt
02:46 pipps joined #salt
02:48 xl1 joined #salt
02:50 oz_akan_ joined #salt
02:53 Gifflen joined #salt
02:54 ajw0100 joined #salt
02:54 zach_ joined #salt
02:55 mpanetta joined #salt
02:59 Thiggy joined #salt
03:04 cryptomnesia joined #salt
03:08 xt joined #salt
03:09 bemehow joined #salt
03:12 redondos joined #salt
03:12 redondos joined #salt
03:13 ajw0100 joined #salt
03:18 ravibhure joined #salt
03:19 redondos joined #salt
03:21 redondos joined #salt
03:21 cachedout joined #salt
03:23 Thiggy joined #salt
03:23 bhosmer joined #salt
03:25 StDiluted joined #salt
03:27 mannyt joined #salt
03:29 davet joined #salt
03:31 thelorax123 joined #salt
03:31 pipps_ joined #salt
03:45 whiteinge brisbane_bob: you can get that info from salt without root using the external_auth system
03:46 whiteinge http://docs.saltstack.com/topics/eauth/index.html
03:47 whiteinge Whitelist @runner for your user and call  salt-run manage.status  to get the full list of minions
03:48 whiteinge Er. Now that I've said that I don't know if salt-run CLI command has been updated to work with eauth.
03:49 whiteinge I know you can call a runner module from a Python script using eauth, but I'm not sure about the salt-run CLI tool.
03:50 whiteinge If you're interested in seeing the Python script version, I could whip up an example.
03:54 whiteinge (Filed a ticket to get that added: https://github.com/saltstack/salt/issues/8705)
04:06 Gifflen joined #salt
04:08 Linz joined #salt
04:10 ckao joined #salt
04:13 dvogt joined #salt
04:17 junedm joined #salt
04:20 racooper joined #salt
04:39 oz_akan_ joined #salt
04:45 lemao joined #salt
04:55 craig_ joined #salt
05:02 anuvrat joined #salt
05:08 chjohnst_work joined #salt
05:11 danielbachhuber joined #salt
05:13 forrest joined #salt
05:13 linjan_ joined #salt
05:22 zandy joined #salt
05:23 stefanmonkey I have a problem here. when I install the salt-minion on ubuntu 10.04 server x64 follow the doc, apt-get install salt-minion  always "E: Could not perform immediate configuration on 'python-minimal'.Please see man 5 apt.conf under APT::Immediate-Configure for details. (2)"
05:23 stefanmonkey how to fix it?
05:25 forrest uhh that does't sound like a salt error
05:25 __number5__ stefanmonkey: 10.04 is EOL long time ago
05:26 __number5__ stefanmonkey: and it's default python version is 2.5.x, which salt not supported
05:27 forrest not ready to sleep yet cro? :P
05:27 stefanmonkey python is 2.6.5 , I think the problem is apt-get or something else .  I can't find some information about it like faq on the doc , so ...
05:28 forrest here's some blog about a guy encountering a similar issue: http://tkurek.blogspot.com/2013/04/could-not-perform-immediate.html
05:29 forrest another: http://blogs.operationaldynamics.com/andrew/category/software/ubuntu-linux
05:29 forrest maybe those will help? I'm not awesome with ubuntu
05:30 stefanmonkey tks . forrest , I think you are awesome than me at least  . :p
05:30 forrest lol
05:36 pipps joined #salt
05:38 stefanmonkey It's so sweet!  tks forrest again!!   It work !  haha
05:38 forrest stefanmonkey, awesome!
05:51 bemehow joined #salt
05:52 oz_akan_ joined #salt
05:57 mannyt joined #salt
05:58 zandy joined #salt
05:59 pipps_ joined #salt
06:00 Destro joined #salt
06:00 jacksontj joined #salt
06:01 jacksontj_ joined #salt
06:05 piesechki joined #salt
06:07 jalbretsen joined #salt
06:09 pygmael left #salt
06:13 piesechki Hi. In Chef, in my minion equivalent, I can make the ntp client recipe ask chef at runtime for a list of "ntp server" roles, and then populate the ntp client configuration file accordingly. Is there a way to do something similar with Salt?
06:15 danielbachhuber joined #salt
06:20 joehh __number5__, stefanmonkey: unfortunately 10.04 server is still supported. Hence we still do packages for it...
06:28 Gifflen joined #salt
06:44 matanya joined #salt
06:44 danielbachhuber joined #salt
06:46 lemao joined #salt
06:46 danielbachhuber- joined #salt
06:48 danielbachhuber joined #salt
06:49 danielbachhuber- joined #salt
07:03 pentabular1 joined #salt
07:04 jalbretsen joined #salt
07:06 malinoff joined #salt
07:12 xt joined #salt
07:12 pentabular joined #salt
07:19 pentabular left #salt
07:20 tty-1 joined #salt
07:22 ajw0100 joined #salt
07:25 bemehow joined #salt
07:26 Katafalkas joined #salt
07:26 pipps joined #salt
07:28 Katafalkas joined #salt
07:37 totte joined #salt
07:48 TomasNunez joined #salt
07:50 danielbachhuber joined #salt
07:52 giantlock_ joined #salt
07:58 balboah joined #salt
07:59 juasiepo joined #salt
07:59 rmt joined #salt
08:01 slav0nic joined #salt
08:01 carlos joined #salt
08:03 EugeneKay joined #salt
08:05 harobed joined #salt
08:16 elsmorian joined #salt
08:17 carlos joined #salt
08:21 stefanmonkey I have  a problem. on the ubuntu 10.04 server  ,  the python is the 2.6.5 ,   after install of doc  I run the script "sudo apt-get install python-software-properties" ,  the script will auto install python2.7, so the system have  two python environment.  when I apt-get install salt-minion  and run salt-minion then the horrible words :( [ERROR   ] An un-handled exception was caught by salt's global exception handler: NameError: g
08:21 stefanmonkey I guess the python2.6 have the zmq modules and python2.7 don't have  so I make the test root@test204:/usr/lib# python2.6 Python 2.6.5 (r265:79063, Apr 16 2010, 13:57:41)  [GCC 4.4.3] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import zmq >>> quit() root@test204:/usr/lib# python2.7 Python 2.7.3 (default, Sep 26 2013, 20:03:06)  [GCC 4.6.3] on linux2 Type "help", "copyright", "credits" or "
08:22 stefanmonkey >>> import zmq Traceback (most recent call last):   File "<stdin>", line 1, in <module> ImportError: No module named zmq  it seems like very very very very very hard thing to install salt on the ubuntu 10.04.
08:28 Katafalkas joined #salt
08:31 redondos joined #salt
08:33 Katafalkas joined #salt
08:38 malinoff stefanmonkey, as a workaround, you can use debian repository: http://docs.saltstack.com/topics/installation/debian.html
08:38 Tony___ joined #salt
08:40 tty-1 joined #salt
08:42 stefanmonkey wa oh , is there too late?  3:00?
08:47 ajw0100 joined #salt
08:49 SEJeff_work joined #salt
08:50 stefanmonkey tks ,  I just want to use the ubuntu install way , but it is so hard .
08:50 Destro I would like to know if there is anyway to test a state.sls file to see what is missing before executing and overwriting the configurations
08:51 Destro I push configurations using salt '*' state.sls slsfile
08:51 danielbachhuber joined #salt
08:52 malinoff stefanmonkey, Ubuntu way is not the best, as you can see...
08:52 malinoff Destro, salt \* state.sls slsfile test=True
08:52 Destro Thanks :-)
08:56 rickymoorhouse joined #salt
08:56 stefanmonkey Destro: tks ,  I see now .
08:56 stefanmonkey :)
09:00 tomspur joined #salt
09:00 tty-1_ joined #salt
09:04 SEJeff_work joined #salt
09:06 Destro Also working :-)
09:07 Destro And then I just need to verify if pushing configs with state is the best way about it
09:07 Destro Been reading up alot lately about Salt and it seems like the best feature out there
09:08 Destro Meaning got it working, and if there are any other nice things which could be implemented would be appreciated
09:08 Destro Pulling commands from server/Template rendering working and thusfar very useful
09:33 favadi joined #salt
09:33 krak3n` joined #salt
09:44 piesechki joined #salt
09:49 travisfischer joined #salt
09:52 danielbachhuber joined #salt
09:56 bhosmer joined #salt
09:56 lemao joined #salt
10:00 danielbachhuber joined #salt
10:12 SEJeff_work joined #salt
10:20 tinuva joined #salt
10:25 krak3n` joined #salt
10:33 deepakmd_ joined #salt
10:36 junedm joined #salt
10:37 linjan_ joined #salt
10:45 deepakmd_ joined #salt
10:45 kiorky joined #salt
10:45 wpot joined #salt
10:46 kiorky uhm question about salt modules, the file.accumulated one relies on inspecting the current state require_in
10:46 kiorky which seems not to be passed anymore at execution time in the kwargs dict
10:46 kiorky what was changed to do that ?
10:46 kiorky basepi: ^
10:48 kiorky s0undt3ch:
10:48 kiorky ^
10:52 juasiepo joined #salt
10:55 ktenney joined #salt
10:56 kiorky jpcw: s0undt3ch issue is also reported here https://github.com/saltstack/salt/issues/8343
11:01 tty-1__ joined #salt
11:01 danielbachhuber joined #salt
11:06 zz_Cidan joined #salt
11:10 KyleG joined #salt
11:10 KyleG joined #salt
11:11 elfixit joined #salt
11:15 kiorky jpcw: https://github.com/saltstack/salt/issues/8343 & https://github.com/saltstack/salt/issues/8707
11:15 kiorky basepi: s0undt3ch ^
11:16 ConceitedCode joined #salt
11:18 ahale joined #salt
11:25 bhosmer joined #salt
11:26 micko_ joined #salt
11:28 slav0nic joined #salt
11:28 slav0nic joined #salt
11:30 dangerousbeans joined #salt
11:30 hhenkel Hi all, beeing able to do a "salt '*' test.ping" is cool stuff, but is there a way to only print to minions that failed to responed?
11:38 Destro salt '*' test.ping | grep False -B1
11:38 Destro Try that one
11:39 totte joined #salt
11:40 ahale joined #salt
11:40 Guest97547 left #salt
11:40 ktenney joined #salt
11:40 hhenkel Destro: I guess it would be salt -v '*' test.ping |grep -B1 "Minion did not return" if salt has no option for it
11:42 totte joined #salt
11:47 thelorax123 joined #salt
11:52 krak3n` joined #salt
12:02 danielbachhuber joined #salt
12:07 sinh joined #salt
12:11 cron0 joined #salt
12:21 hhenkel I added allow_undefined: true to my minion config as I'm still facing "failed, render error: Undefined jinja variable; line 350 in template" errors.
12:21 hhenkel It seems like it has no effect on the behaviour though. Any advice on this?
12:21 d1rk joined #salt
12:23 hhenkel I was pointed to this issue: https://github.com/saltstack/salt/issues/7625
12:25 mskarbek joined #salt
12:26 blee joined #salt
12:27 sroegner joined #salt
12:28 tty-1 joined #salt
12:48 tty-1_ joined #salt
12:55 dangerousbeans left #salt
13:03 danielbachhuber joined #salt
13:06 amahon joined #salt
13:07 krak3n` joined #salt
13:08 viq joined #salt
13:08 viq joined #salt
13:10 Brew joined #salt
13:15 jY is there a pillar or grain to tell me if i have nginx package installed?
13:15 aleszoulek joined #salt
13:15 MrTango joined #salt
13:25 s0undt3ch kiorky: around?
13:26 wilywonka joined #salt
13:32 zandy joined #salt
13:32 toddejohnson joined #salt
13:33 d1rk_ joined #salt
13:34 krak3n` joined #salt
13:37 Corey joined #salt
13:37 zgre joined #salt
13:38 SEJeff_work joined #salt
13:39 JasonSwindle joined #salt
13:41 jsm joined #salt
13:42 Voziv What does it mean when salt returns with "Service php5-fpm is already enabled, and is dead" ? I get the already enabled part, but I'm unsure about the dead part
13:43 Voziv jY: Trying to switch configurations based on nginx or apache being installed?
13:44 jY Voziv: trying to install diamond collectors based on if nginx is installed or not
13:44 Voziv yeah, I've been looking for the same grain
13:45 jergerber joined #salt
13:45 jslatts joined #salt
13:45 ipmb joined #salt
13:46 kiorky s0undt3ch: yep
13:46 kiorky sorry
13:46 kiorky was méessing with the pull request
13:46 kiorky s0undt3ch: about 8343, how to fix ?
13:46 kiorky s0undt3ch: after, 8710 and 8707 are about the same state but other bugs
13:47 ravibhure joined #salt
13:47 blee_ joined #salt
13:48 s0undt3ch kiorky: __id__, __env__ or any of those arguments must not appear in the function signature
13:48 s0undt3ch kiorky: hence me saying, it's not the right fix
13:48 kiorky s0undt3ch: how to get them ? that s the real question
13:48 s0undt3ch kiorky: can you paste me a sls which is supposed to work?
13:48 kiorky s0undt3ch: here, we really need them as two states are interdependant
13:48 s0undt3ch kiorky: that should be handled elsewhere
13:49 kiorky s0undt3ch: look at 8710
13:49 s0undt3ch kiorky: Thanks
13:49 kiorky s0undt3ch: 871& even
13:49 kiorky s0undt3ch: 8711 even
13:49 kiorky rah /me lost
13:49 kiorky haha
13:50 jY can you call pkg.version in a sls file?
13:51 s0undt3ch kiorky: k, now I have good examples to trigger the issue and find the best solution
13:51 thelorax123 joined #salt
13:52 kiorky s0undt3ch: well, the solution is there
13:52 regilero joined #salt
13:52 kiorky s0undt3ch: the only thing is to get the variable from the right location
13:52 s0undt3ch kiorky: yes, but not the right one
13:52 regilero hello
13:53 KyleG joined #salt
13:53 KyleG joined #salt
13:53 kiorky s0undt3ch: but for the 2 bugs (prepend_.*, and multiple accum.) are just important because without blockreplace is unusabl
13:55 zgre any idea why this works "salt server1 pkg.install pixman.i686" (server is x86_64, but i need some 32bit packages) yet referencing "pixman.i686:" in an sls returns "The following package(s) were not found, and no possible matches were found in the package db: pixman.i686" (.i686 packages which are already installed are successfully detected: "Package zlib.i686 is already installed")
13:55 jergerber joined #salt
13:59 kiorky regilero: https://github.com/saltstack/salt/issues/8710@s
13:59 kiorky regilero: https://github.com/saltstack/salt/issues/8710
14:02 juicer2 joined #salt
14:03 danielbachhuber joined #salt
14:07 brianhicks joined #salt
14:08 iri- joined #salt
14:09 wkf joined #salt
14:11 iri- Hi all. I currently have no salt-based infrastructure and want to start clean with salt-cloud. There are several devs in my organization. I want each of the devs to be able to run salt-cloud from their laptop without needing to use sudo (i.e, touch any directory outside of our configuration git repository which sits in their respective $HOMEs). I want to use `salt-cloud` to provision the master node (ec2, incidentally).
14:11 iri- How do I set this up so that we don't need to touch /etc on our machines?
14:12 iri- I've set SALT_CONFIG_DIR etc, but it still seems to expect to be able to either run as `root` or as the user configured in the salt master config.
14:12 iri- I think something must be wrong with my mental model but I can't figure out what it is.
14:12 mpanetta joined #salt
14:12 iri- Is it expected that anyone invoking salt commands does so from the same machine and has superuser access?
14:14 mpanetta joined #salt
14:14 zgre well I've just tracked my problem as far as legitMultiArchesInSameLib() the function begins with the following comment "this is completely crackrock - if anyone has a better way I am all ears" - nice...
14:14 Ahlee heh
14:15 Ahlee iri-: I'm unfamiliar with salt-cloud, but shouldn't it just be setting root_dir to non-/etc?
14:15 iri- Ahlee: it seems to expect to be able to write to /var/log, too.
14:16 iri- If I set --log-file using salt cloud (which defaults to /var/log/salt/cloud) then it complains that it can't write to /var/log/salt/master
14:16 kiorky s0undt3ch: (sorry to tinker you, but are you nworking on it or is it delayed)
14:16 kiorky s0undt3ch: (was waiting for your input with regilero)
14:16 micah_chatt joined #salt
14:16 iri- (and I don't see an option to change the `master` log file)
14:16 iri- (and also there is no environment variable to control that)
14:17 Ahlee iri-: log_file controls log file location in the master, I'm assuming it's similar
14:19 Gifflen joined #salt
14:19 Bram joined #salt
14:19 NotreDev joined #salt
14:20 iri- I don't understand how salt-cloud relates to the salt-master, actually. Does salt-cloud expect that it is running on the same machine as the master?
14:20 Ahlee iri-: No idea on that. I'm just assuming that config options are similar
14:21 iri- s0undt3ch: so that I stop bothering you on github, is there any chance you could help me understand the relationship between salt-cloud and salt-master? Can I run salt-cloud on multiple machines which are not the master? (And as ordinary unprivileged users?)
14:21 iri- Currently I'm in the situation that I don't have a master so I just want to provision it using salt-cloud from my dev machine.
14:21 iri- left #salt
14:21 iri- joined #salt
14:22 JasonSwindle joined #salt
14:22 iri- And I'd generally like to run orchestration commands from my dev machine. If I have to say "ssh salt salt <blarg>" and have an appropriate .ssh/config that's okay I suppose.
14:22 Ahlee I think, probably incorrectly but hey what can you do, in your situation you'll need a masterless salt config on the dev machines
14:23 iri- Ahlee: which thing is "probably incorrect"? "you think", or "my way of doing it", or..?
14:24 iri- How do most people use salt? They presumably already have a machine which they call the master in the first place, and just give everyone who wants to run it access as the salt user or root?
14:24 Ahlee iri-: I'm basing it entirely off my understanding of a what i do use how to items i don't (master less salt and salt-cloud) would function
14:24 honestly joined #salt
14:25 jY is there an easy way to use environments for a minion.. like i want to test changes on a single server in puppet i can call puppet agent --environment=testing
14:25 iri- How do I make it so that multiple users can independently orchestrate with salt? So that there is a log which is linked to each user, for example.
14:25 Ahlee iri-: for me, yes. I have a master per environment (staging, uat, production) that are gitfs backed for what few states I have, most everyhting I do is via _modules and the API
14:26 Thiggy joined #salt
14:26 Ahlee jY: salt minion.tld env=SomeEnvironment state.sls foo
14:26 timoguin joined #salt
14:27 jY Ahlee: so there's no way to do it on the minion level then?
14:27 jY whats the foo for then?
14:27 Ahlee jY: just a state file
14:28 jY ok
14:28 jY thanks
14:28 Ahlee jY: on the minion you'd use salt-call
14:28 jY okie. thanks
14:30 vejdmn joined #salt
14:33 linjan_ joined #salt
14:33 honestly_ joined #salt
14:38 giantlock_ joined #salt
14:42 jimallman joined #salt
14:44 wkf joined #salt
14:44 honestly joined #salt
14:44 Katafalkas joined #salt
14:45 Katafalkas joined #salt
14:47 mannyt joined #salt
14:48 StDiluted joined #salt
14:51 bhosmer joined #salt
14:52 fxhp joined #salt
14:52 quickdry21 joined #salt
14:54 bhosmer_ joined #salt
15:00 kaptk2 joined #salt
15:04 danielbachhuber joined #salt
15:08 JulianGindi joined #salt
15:09 anuvrat joined #salt
15:13 opapo joined #salt
15:16 bhosmer joined #salt
15:18 Katafalk_ joined #salt
15:19 StDiluted joined #salt
15:19 anitak joined #salt
15:21 cachedout joined #salt
15:23 mapu joined #salt
15:25 lineman60 joined #salt
15:25 bhosmer joined #salt
15:27 forrest joined #salt
15:27 Furao joined #salt
15:28 danielbachhuber joined #salt
15:29 cedwards joined #salt
15:30 danielbachhuber- joined #salt
15:30 bhosmer joined #salt
15:30 Furao retroshare isn't usuable
15:30 Furao I mean the webui
15:30 JasonG_TA joined #salt
15:30 wilywonka joined #salt
15:31 AdamSewell joined #salt
15:31 AdamSewell joined #salt
15:31 Furao woah wrong window :)
15:32 WatfordJohn joined #salt
15:35 kermit joined #salt
15:37 Marion joined #salt
15:39 DredTiger joined #salt
15:39 Marion I am now getting this error : No matching sls found for 'php' in env 'base' : when this salt configuration previously worked.  Any suggestions?  I did not create the vagrant/salt files.
15:39 juasiepo joined #salt
15:40 ipmb_ joined #salt
15:40 forrest Marion, is there either a /srv/salt/php.sls, or /srv/salt/php/init.sls file?
15:41 pass_by_value joined #salt
15:41 KyleG joined #salt
15:41 KyleG joined #salt
15:42 Marion In my roots directory, I do not see a php directory nor a php.sls
15:42 forrest ok, do you have file_roots set in the /etc/salt/master file?
15:42 Marion masterless configuration
15:43 forrest then /etc/salt/minion?
15:43 Marion no, file_roots is not set in my minion file
15:44 forrest ok
15:44 forrest and this occurs on a highstate run?
15:45 smccarthy joined #salt
15:45 Marion yes
15:45 forrest ok, so is there a call to php in your top.sls?
15:45 forrest if so, then you seem to be missing your php state :P
15:46 matanya joined #salt
15:47 JulianGindi joined #salt
15:47 Marion in top.sls, base: '*' has -php, which does not have a directory.  - packages, -users do have a directory.  This configuration had worked previously.  Something must have changed to now get that error.
15:48 forrest right, but when you run the highstate you're calling all of those
15:48 forrest so if php is missing
15:48 forrest then it won't work
15:48 Furao left #salt
15:48 Marion I'm assuming that if the creator did not have a php state, then I can just comment out php in top.sls
15:48 forrest unless there are requirements for php in users and packages
15:50 Marion hmmm … packages has php: pkg.installed: - pkgs: - php5
15:51 ovorp joined #salt
15:51 ipmb joined #salt
15:51 Marion well … I just brought up my VM w/ php commented out in top.sls, and it appeared to boot properly.  I need to test it out.  thanks.  I will search online for examples of setting php state.
15:52 Marion forrest: thanks for your help
15:52 matanya joined #salt
15:53 forrest Marion, yea np. Seems odd that a vagrant image would have that in there but not include the state. Unfortunately this one is a bit old, but maybe you can adapt this: https://github.com/saltstack-formulas/php-formula
15:54 pniederw joined #salt
15:54 Marion thank you
15:55 pniederw are their any guarantees around the order in which state files are executed when doing state.highstate?
15:55 pniederw essentially I'm trying to understand how to deal with cross-file state dependencies
15:55 forrest so pniederw, when you include a state in another state, the included state will run first.
15:56 pniederw I get that. is this *the* way to deal with cross-file dependencies, or are there others?
15:56 Gifflen joined #salt
15:57 wilywonka joined #salt
15:57 _ikke_ All the requisite statements
15:58 matanya joined #salt
15:58 forrest pniederw, you can use requires like any other item. Once you include a state, you can then require items from that state, or require the state itself
15:59 pniederw but when I include B in A, and then do `salt node1 state.sls A`, it will always run whole B as well, right? that's not what I want.
15:59 dranger joined #salt
16:00 forrest yes it will, because A includes B
16:00 forrest what exactly is it that you are looking for?
16:00 donatello joined #salt
16:01 donatello hi all
16:01 forrest hey
16:01 donatello i need some help with using the python api for salt
16:01 donatello what should I set the opts variable to for say salt.runner.RunnerClient(args)?
16:01 pniederw for example, I want to express a `require` on a state in another file, without pulling in all states in that file
16:01 donatello i mean the "opts" argument
16:02 donatello I tried settings opts='/etc/salt/master' - but that doesnt work
16:02 forrest pniederw, you can't do that. You need to include the state so that the secondary state 'sees' the included one, from where you can require it. If you want to do something like that you should break your states up.
16:05 pniederw hmm. another example: I have users.sls and kvm.sls. the latter needs to add all users to the `libvirtd` group. if the two files are run together (e.g. on a fresh machine), users.sls needs to come first. but when I only run `kvm`, I don't want `users` to run (I just want to add the group for the current users). is this doable?
16:06 pniederw e.g. does the order in top.sls matter?
16:06 teskew joined #salt
16:07 bhosmer_ joined #salt
16:07 pniederw I guess I could have a third file that includes both files in the desired order, but that has other problems (for my case).
16:09 pdayton joined #salt
16:09 mapu joined #salt
16:10 CaptTofu joined #salt
16:10 Thiggy joined #salt
16:10 forrest pniederw, I'm pretty sure they run in order in the top.sls, but you'd have to test to be sure, I usually order my stuff via the states themselves so I don't rely on that :\
16:10 rickymoorhouse left #salt
16:14 pniederw ok thanks. I don't want to rely on implementation details.
16:15 matanya joined #salt
16:15 forrest yea np
16:15 regilero pniederw: I'm pretty sure your solution is to make a dedicated state incliding your  users.sls and kvm.sls and maybe using extend on one of the states defined there to add a require or require_in on the state of the second.
16:16 regilero Then on a fresh install you would call this special state which extended your basic states with orders
16:17 forrest yep that's one way to do it for sure regilero
16:18 pniederw what if a file gets referenced multiple times during a state.highstate (e.g. because it's referenced directly in top.sls and also included in some other file)? will it get run twice, or does Salt build a DAG up-front?
16:20 regilero pniederw: requisites are handled after all states are loaded, and they implies reordering of high states, so it should be executed only once
16:21 pentabular joined #salt
16:22 pniederw are there some docs on these higher-level concepts, so that we know what (not) to rely on?
16:22 [diecast] joined #salt
16:23 forrest not really pniederw, it gets mentioned somewhat as you go through things, that's a good idea though. Could you create an issue on github for some docs on that?
16:23 donatello is it possible to call salt runners from external programs via the Python API? I would love to see an example
16:24 harobed_ joined #salt
16:25 pniederw ok, I will. thanks.
16:25 forrest donatello, I don't have a good example of that, you might want to make a post on the mialing list
16:25 forrest *mailing
16:25 matanya joined #salt
16:26 donatello ok thanks forrest
16:26 forrest np
16:27 ipmb_ joined #salt
16:28 shennyg joined #salt
16:29 dave_den donatello: by 'python API', do you mean using the python salt libs, or do you mean via a salt-api call?
16:29 donatello dave_den: I mean using the clients - http://docs.saltstack.com/ref/clients/index.html#runnerclient
16:30 donatello it is not clear how to set the opts argument here. I tried '/etc/salt/master'
16:31 dave_den opts is a dict that contains the master config opts
16:32 dave_den donatello: check the init function here: https://github.com/saltstack/salt/blob/develop/salt/client/api.py#L38
16:32 dave_den that shows how to load opts from config file and init a runnerclient object
16:32 jeffasinger joined #salt
16:33 snuffeluffegus joined #salt
16:34 donatello dave_den: got it! thanks!
16:35 dave_den np. i also just replied to your email  :)
16:36 matanya joined #salt
16:38 jalbretsen joined #salt
16:39 oz_akan_ joined #salt
16:42 pniederw forrest: https://github.com/saltstack/salt/issues/8713
16:42 danielbachhuber joined #salt
16:42 forrest awesome
16:45 KyleG joined #salt
16:45 KyleG joined #salt
16:45 matanya joined #salt
16:47 oz_akan_ joined #salt
16:51 pniederw with include and auto-ordering, is there any point in requiring a state in the included file, or the included file as a whole?
16:51 mgw joined #salt
16:54 StDiluted Hey all, is anyone using Salt in conjunction with Capistrano, or using Salt to deploy a rails app?
16:56 kula that's something eventually on my plate, but i haven't gotten there yet.
16:57 Gifflen joined #salt
16:57 StDiluted ideally I would like to eliminate capistrano as I think having both is making things too complex
16:57 StDiluted but
16:58 matanya_ joined #salt
17:00 worstadmin joined #salt
17:00 troyready joined #salt
17:01 jeffasinger joined #salt
17:03 druonysus joined #salt
17:03 pipps_ joined #salt
17:04 [diecast] joined #salt
17:04 KyleG joined #salt
17:04 KyleG joined #salt
17:05 kiorky s0undt3ch: lost in the netsplit :)
17:05 kiorky ?
17:05 matanya joined #salt
17:07 Chrisje joined #salt
17:08 Thiggy joined #salt
17:09 pentabular1 joined #salt
17:10 bhosmer joined #salt
17:10 jY can you call pkg.version in a sls file?
17:11 Brew joined #salt
17:11 forrest jY, not explicitly like the module, you can do something like: - bar: 1.2.3-4
17:11 forrest if you want to specify the version
17:12 jY forrest: i'm looking for a way to tell if a package is installed if it is.. put this file in place
17:12 forrest if you have multiple, or you can use - version: asdf
17:12 forrest jY, does a require not do what you want?
17:13 bhosmer joined #salt
17:13 jY forrest: i don't think so because i'd be requiring in mutiple sls files which breaks things in my experience for a single node
17:14 forrest why not include the state file that performs the installation in each of those states, then put in the requires?
17:15 s0undt3ch kiorky: nope, other issues of more importance got in the way. It's not forgotten though
17:15 jY forrest: i'll give it a try
17:15 forrest jY, sounds good
17:17 chjohnst_work im here
17:17 chjohnst_work oops
17:21 gscott joined #salt
17:22 gscott Is it possible to use an if statement based on a minion's grain within a managed file?
17:22 zandy joined #salt
17:22 gscott for instance, I have an rsyslog configuration file being managed and I have 4 lines that I only want to exist on minions that have a grain defining them as a webserver
17:23 matanya joined #salt
17:23 harobed joined #salt
17:23 forrest gscott, yep you can do that with jinja2.
17:24 gscott I attempted just putting this in the managed file:
17:24 Chrisje joined #salt
17:24 gscott {% if 'webserver' in grains['purpose'] %}
17:24 davet joined #salt
17:25 gscott and added template:  jinja in the stack file
17:25 gscott but when I attempt to run the state I get an error saying "render error:  unknown tag 'grains'"
17:27 forrest I'm trying to find an example
17:28 amahon joined #salt
17:28 forrest yea that should actually be working...
17:28 gscott that would be awesome.  I've spent all morning trying to find an example
17:28 forrest I'm looking at this one
17:28 forrest https://github.com/saltstack-formulas/powerdns-formula/blob/master/powerdns/config/pdns.conf
17:28 forrest which is kinda old
17:29 gscott weird
17:29 forrest indeed
17:29 cdsrv joined #salt
17:31 cdsrv hi all, this may not be the right way to do it, but the most recent version of halite broke a little, after installing the salt 17.2 update from yum repo. (halite was installed via pip).. FYI
17:31 gscott hahaha i figured it out.  thanks forrest
17:32 gscott the error i got was in reference to a seperate "if" i put in the sls file
17:32 gscott which looked like:  if {% grains['purpose'] == 'webserver' %}
17:32 jimallman joined #salt
17:33 forrest ahh yea
17:34 gscott durnit i wasted half a day on that
17:35 forrest lol
17:37 matanya joined #salt
17:38 Ryan_Lane joined #salt
17:39 thelorax123 joined #salt
17:40 ovorp joined #salt
17:44 matanya joined #salt
17:45 gmoro joined #salt
17:47 bemehow joined #salt
17:47 jalbretsen joined #salt
17:50 thelorax123 joined #salt
17:51 matanya joined #salt
17:53 zandy joined #salt
17:53 clintberry joined #salt
17:53 quantum-x hey all .. trying to use grains in a template to auto-fill the IP adresses of the grain - http://pastebin.com/Jhc3XZcK
17:53 quantum-x It doesn't seem to be working, any insight would be appreciated!
17:53 _ikke_ quantum-x: grains['name_of_grain']
17:54 _ikke_ You don't need to execute a command for that
17:54 quantum-x hm ok
17:54 quantum-x I'd tried salt['grains.get']("ip_interfaces:eth0")[0] // salt['grains.get']("ip_interfaces:eth0")[1] also - but the same result
17:54 _ikke_ And you can do that directly in the template, you don't need to use contexts for that either
17:54 zandy_ joined #salt
17:55 quantum-x _ikke_, ok, do you have a reference or hint of what is a better way to solve the problem? I've been ghoing through the docs, but it's a bit hard to unravel somtimes :)
17:55 _ikke_ quantum-x: I know the feeling
17:55 quantum-x especially between the CLI examples and the state examples :)
17:55 _ikke_ Yeah, you have to differentiate between the to
17:56 _ikke_ quantum-x: In your config file, you can just do something like: {{ grains['ip_interfaces:eth0'][0] }}
17:56 Katafalkas joined #salt
17:56 quantum-x ok, testing
17:57 cdsrv joined #salt
17:57 harobed joined #salt
17:57 quantum-x ah, so i on't even need a context ?
17:57 _ikke_ nope
17:57 harobed joined #salt
17:58 dave_den the semicolon separation for dict keys will not work on grains[]
17:58 cbloss joined #salt
17:58 sinenitore joined #salt
17:58 alunduil joined #salt
17:58 quantum-x ..testing now..
17:58 dave_den you will have to do grains['ip_interfaces']['eth0'][0]
17:58 _ikke_ Yeah, was doubting about that
17:58 quantum-x ah
17:59 dave_den in templates, grains[] is actually a python dict.
17:59 Katafalkas joined #salt
18:03 jetole joined #salt
18:04 quantum-x dave_den / _ikke_ ok - I have the same issue - grains['ip_interfaces']['eth0'][0] returns the same ip as grains['ip_interfaces']['eth0'][1]
18:05 no1spec1al joined #salt
18:05 dpippenger joined #salt
18:05 quantum-x ah man
18:05 dave_den quantum-x: what does "salt <yourminion> grains.get ip_interfaces' return?
18:05 no1spec1al Hey guys. Can anyone tell me how I can use salt to connect to several machines, read /etc/hosts and save it to distinct file per machine. I know targetting but not sure about how I would retreive the data to destinct files
18:06 quantum-x dave_den, it's a bug in salt, right up to 0.17.2
18:06 quantum-x https://github.com/saltstack/salt/commit/7cde8bdc9093fd6ad3a63bc8aaf0305d5c7f8e2b
18:06 quantum-x https://github.com/saltstack/salt/issues/5281
18:06 quantum-x bother
18:06 dave_den quantum-x: that should not affect what you are doing
18:07 bemehow joined #salt
18:08 cdsrv nospecial,
18:08 cdsrv you enable something on the master to allow minions to push files 'back'
18:08 cdsrv then run a copy command.
18:08 quantum-x dave_den, http://pastebin.com/cSxc41Te
18:08 cdsrv one sec, for the exacts.
18:08 dave_den quantum-x: also, that fix has been integrated since 0.15.9
18:08 no1spec1al cdsrv: thanks
18:09 cdsrv so, in the master config, set: file_recv: True
18:09 dave_den quantum-x: are you sure you're reading the output properly?
18:09 quantum-x dave_den, how so ?
18:09 cdsrv then on the saltmaster commandline, run:
18:09 dave_den the two IPs in your pastebin are different.
18:09 cdsrv salt '*' cp.push /path/to/myfile
18:10 no1spec1al cdsrv: thank you very much
18:10 micah_chatt joined #salt
18:10 cdsrv and the minions will send their files back to /var/cache/salt/master/minions/$MINION_ID/path/to/myfile
18:10 cdsrv its beautiful actually..
18:10 cdsrv :)
18:10 no1spec1al cdsrv: yes it is
18:10 no1spec1al :-)
18:11 clintberry this is the coolest thing ever! http://hveem.no/saltvirt
18:11 no1spec1al cdsrv: thanks again
18:11 cdsrv the file_recv feature is disabled by default
18:11 cdsrv np!
18:11 clintberry too bad salt changes so fast that it doesn't work anymore... :-)
18:11 quantum-x dave_den, you know what, I'm an idiot :) i was looking exclusively at the line endings, not the whole IP. Sorry to waste your time
18:11 no1spec1al cdsrv: I need to run but awesome for the help. appreciated.
18:11 cdsrv ttyl!
18:11 quantum-x Is there any way to filter that list be a rex exp to filter out the 10.* IP, ?
18:12 bhosmer joined #salt
18:12 pipps joined #salt
18:14 quantum-x actually dave_den - still doesnt explain why the salt -N prod-lb grains.get ip_interfaces only returns two IPs not 3
18:14 Brew joined #salt
18:15 quantum-x graints.ipv4 does though - how is that rewritten into the context o a state file ?
18:17 dranger joined #salt
18:19 cdcalef joined #salt
18:23 amckinley joined #salt
18:23 redondos joined #salt
18:23 redondos joined #salt
18:27 lineman60 joined #salt
18:27 dvogt joined #salt
18:29 craig joined #salt
18:32 MTecknology The new rtd theme for salt docs is awesome
18:32 JulianGindi joined #salt
18:33 robbyt joined #salt
18:33 matanya joined #salt
18:34 JasonSwindle joined #salt
18:35 craig joined #salt
18:37 cdsrv +1 MTeck, yes. now if only there could be more of it..
18:38 jalbretsen1 joined #salt
18:40 shinylasers joined #salt
18:41 rocksalt joined #salt
18:43 matanya joined #salt
18:44 foxx joined #salt
18:44 foxx joined #salt
18:46 jimallman joined #salt
18:55 zandy joined #salt
18:55 pengunix joined #salt
18:58 ovorp joined #salt
18:59 Katafalk_ joined #salt
19:00 Katafalk_ joined #salt
19:01 whiskybar joined #salt
19:02 mapu joined #salt
19:03 chitown joined #salt
19:07 matanya joined #salt
19:09 pipps_ joined #salt
19:10 druonysus joined #salt
19:10 bemehow joined #salt
19:14 bhosmer joined #salt
19:14 regilero left #salt
19:16 berto- joined #salt
19:16 snave joined #salt
19:19 ovorp joined #salt
19:20 _ikke_ I wonder if salt is a good sollution to do system updates
19:20 [diecast] joined #salt
19:24 Gareth woo. semi-working debian_ip.py
19:34 jalbretsen joined #salt
19:36 pass_by_value joined #salt
19:38 mentat joined #salt
19:39 Katafalkas joined #salt
19:40 snave joined #salt
19:41 mentat potentially dumb question, is there a way to run pkg.upgrade from a sls (for masterless in vagrant or packer)?
19:42 cdsrv joined #salt
19:42 vejdmn joined #salt
19:45 mapu left #salt
19:48 zach Got my XMPP/Jabber -> Salt Bot mostly complete :-)
19:48 zach Sits in a MUC and waits for whitelisted commands to be ran
19:49 Gareth zach: voice commands next.  Jarvis...powered by Salt :)
19:50 zach Hah
19:53 zandy joined #salt
19:53 _ikke_ How suitable is salt for managing system updates?
19:55 jpaetzel joined #salt
19:57 Gifflen joined #salt
19:57 zach I can't recall, is there a way to display just the "Failed|Succeeeded" line on a state run?
19:57 zach or should I just pipe it to grep?
20:03 DredTiger joined #salt
20:03 forrest zach I don't think so
20:03 forrest piping to grep is what I've seen most people do
20:04 zach thought so
20:04 aleszoulek joined #salt
20:04 mgw joined #salt
20:04 zach salt '*' blah |egrep ^'srvrprefix|Suceed|Fail' it is then!
20:10 elfixit joined #salt
20:12 teskew joined #salt
20:15 pentabular1 left #salt
20:15 pipps joined #salt
20:16 cwright zach: also have a look at the —state-output flag to salt
20:17 zach thanks, I'll mess with that a bit
20:27 ovorp joined #salt
20:27 cdsrv hmmm.. looks like latest halite is fine with the latest salt..
20:28 lineman60 joined #salt
20:31 ovorp1 joined #salt
20:33 sgviking joined #salt
20:34 oraqol joined #salt
20:34 Gifflen joined #salt
20:34 oraqol Hi guys, I restarted my salt master now I get these while in debug mode on loop forever:
20:34 oraqol [INFO    ] Clear payload received with command _auth [DEBUG   ] This salt-master instance has accepted 673 minion keys. [INFO    ] Authentication request from server1033
20:35 forrest what does salt-key -l show?
20:35 oraqol attempting
20:36 tdillio joined #salt
20:36 wilywonka joined #salt
20:37 oraqol it shows all my accepted keys
20:37 oraqol they show as green
20:37 tdillio Is it possible to watch multiple files for a service? either by using a glob(*.conf)  or by listing multiple paths?
20:37 oraqol I tried to reinstall the salt master
20:37 oraqol still getting this when I try to ping or cmd.run
20:38 forrest tdillio, try watch_in: http://docs.saltstack.com/ref/states/requisites.html#requisite-and-requisite-in-types
20:38 pass_by_value cdsrv: Sorry for the late reply. I was interested to know what issue you were having with Halite earlier.
20:39 oraqol root@dlt-salt:/home/jgiraldo/export/ganglia/ganglia# salt "*" test.ping [ERROR   ] An un-handled exception was caught by salt's global exception handler: SaltReqTimeoutError: Waited 60 seconds Traceback (most recent call last):   File "/usr/bin/salt", line 10, in <module>     salt_main()   File "/usr/lib/python2.7/dist-packages/salt/scripts.py", line 117, in salt_main     client.run()   File "/usr/lib/python2.7/dist-packages/salt/cli/__
20:40 oraqol File "/usr/lib/python2.7/dist-packages/salt/payload.py", line 193, in send     timeout * tried salt.exceptions.SaltReqTimeoutError: Waited 60 seconds
20:40 pniederw salt-ssh with password only (no pubkey) doesn't seem to work. known issue?
20:41 pniederw getting: Permission denied (publickey,password).
20:41 StDiluted Is anyone using Salt to deploy a Rails app, or using it in conjunction with capistrano somehow?
20:41 pniederw user and passwd are set up correctly in roster
20:42 forrest StDiluted, you should post that on the mailing list, might get more eyes on it since no one answered it before :\
20:42 Katafalkas joined #salt
20:42 StDiluted forrest: *nod* I ask a few times because the crowd here comes and goes.
20:42 StDiluted but yeah, maybe I'll post it on the ML
20:43 dave_den StDiluted: are you having problems, or just asking?
20:43 forrest StDiluted, oh yea I'm not saying don't ask again, just saying it might be worth tossing on the mailing list as well, heh
20:44 dave_den StDiluted: we use capistrano for rails deployments, i have not had time to move our deployments over to pure salt yet
20:46 pentabular joined #salt
20:46 dave_den i currently use salt to configure a deployment server that listens for github callback hooks. when a new commit is pushed to github it kicks off a CI build, then if that CI build passes it starts a capistrano deploy.
20:46 oraqol anybody?
20:46 pentabular left #salt
20:46 jay_ joined #salt
20:47 dave_den oraqol: i am guessing your salt master is running out of resources.
20:47 jay_ Quick question is salt able to launch a windows instance on EC2?
20:48 oraqol Ok, thank you
20:48 JasonSwindle left #salt
20:53 zandy joined #salt
20:54 pniederw anyone got salt-ssh to work without pubkey auth?
20:56 bhosmer_ joined #salt
20:57 harobed_ joined #salt
20:58 Marion joined #salt
20:59 rjc joined #salt
21:00 tdillio forrest: Thanks for the info, I'm having some trouble setting it up though. I'm not sure how I should structure the YAML, Getting: "No function declared in state "watch_in" in sls nginx", http://pastebin.com/mntQK0w2
21:01 forrest can you pastebin your state please?
21:01 Marion left #salt
21:02 ajw0100 joined #salt
21:03 tdillio forrest: I thought that was my "state" 0.o
21:03 cewood joined #salt
21:03 forrest oh sorry I thought that was your output because the spacing was weird, my bad
21:04 tdillio forrest: Ah ok, yeah the YAML syntax highlighting goofed up the spacing, my fault.
21:04 forrest no biggie
21:05 forrest weird, and this gives you an error? seems like it should be working...
21:05 tdillio yup, I get: "Data failed to compile: No function declared in state "watch_in" in sls nginx"
21:06 dave_den tdillio: you need a ' - ' before watch_in
21:06 dave_den and it needs to be indented so that it's under file.managed.
21:06 forrest ahh dave_den nice catch, I totally overlooked it!
21:06 dave_den same indentation as - source
21:07 tdillio ahhh I see, that makes total sense now.
21:08 tdillio thanks for the help :)
21:08 dave_den no prob :)
21:09 dave_den i'm about to rage on vmware fusion
21:10 Katafalkas joined #salt
21:10 forrest dave_den, heh
21:10 forrest you don't love vmware?
21:11 forrest if so, it will only cost you US $9000 to upgrade to the latest vmware fusion, not broken edition
21:11 forrest and we'll tack on vmware 'pointless feature' for only another 1200 dollars per system.
21:11 dave_den it's my only option for developing on my osx laptop, since virtualbox doesn't support nested vm
21:11 forrest :\
21:12 dave_den and their latest update broke the guest shared folders, so my linux guests get truncated or corrupt files over the shared folders
21:12 forrest that sucks
21:12 mpanetta VMware will do a matroshka?  Or however that is spelled? heh
21:13 [diecast] joined #salt
21:13 dave_den nested dolls/vms. same same
21:13 mpanetta I had no idea
21:13 mpanetta That is cool
21:13 dave_den it's the only reason i bought it
21:14 tdillio Can I ask why you are nesting VMs?, just curious, all I can think of is inception when I hear someone doing that.
21:14 mpanetta I assume they are the only one so far that allows such...
21:14 dave_den tdillio: so i can create replicas of cloud infrastructure on my laptop
21:15 pipps_ joined #salt
21:15 dave_den just for easy dev work… if vmware worked properly
21:16 tdillio dave_den: Ahh I see, so for example running openstack, then a bunch of VMs within openstack or something similar?
21:16 dave_den yeah, similar to that, but just straight kvm, no openstack
21:16 snave joined #salt
21:17 dave_den then lxc in kvm for containers
21:18 tdillio I saw a talk on docker at linux con, I tried it in fedora and bugs, bugs everywhere and I haven't looked at containers since but I'll admit I can think of a lot of uses for them... maybe that's what I'll dig into this weekend
21:19 dave_den docker is annoying and useless, but i am biased against it. probably a bit too much
21:19 dave_den :D
21:20 mpanetta LOL I am messing with docker today...
21:20 mpanetta Docker pretty much does not work anywhere except ubuntu right now it seems
21:21 dave_den it's a thin wrapper around lxc and it makes things more complicated rather than less
21:21 * dave_den shakes fist
21:22 nahamu http://smartos.org/
21:22 forrest nahamu, the only person I've seen ever talk about smartos :P
21:22 nahamu haha
21:22 tdillio mpanetta: that is the impression I got too
21:22 forrest had never even heard of it till I was in this IRC.
21:22 mpanetta dave_den: Maybe I should look at lxc directly then eh?
21:22 nahamu forrest: xinkeT uses it too
21:22 mpanetta It is very interesting
21:23 forrest nahamu, hah
21:23 dave_den mpanetta: whatever works, i say. i just personally don't like docker
21:24 nahamu and there's the person on github who contributed a bunch of the patches to get salt to actually work on it.
21:24 dave_den but if it works for you and makes life happy, then use it :)
21:24 forrest nahamu for smartos?
21:24 forrest yea someone came in here having issues on it a while back
21:24 forrest asking about support and such
21:24 torrancew joined #salt
21:25 kiorky support about docker or smartos
21:25 kiorky (i most most of salt's dockeriod module)
21:25 kiorky *write
21:25 mpanetta I'm just playing with it right now
21:25 ajw0100 joined #salt
21:25 kiorky im really tired i should go to dsleep
21:25 kiorky :)
21:25 apergos there's a rewrite to make docker work on fedora
21:25 apergos time to check the status of that again
21:25 torrancew Hi, all, I'm having some issues getting the virt module functioning on an existing kvm hypervisor - the kvm node is listening and the minion on that node is set up (python-libvirt is installed, as well) - are there any settings I need to enable to get salt + libvirt talking?
21:25 mpanetta apergos: Still broken, they just did a koji build last night, I installed it, and bleh
21:25 mpanetta apergos: Maybe you will have better luck
21:26 kiorky personnally at makinacorpus, we are strongly waiting for the DM docker branch to be merged in at it will be tedious to migrate a bunch of audfs based containers
21:26 apergos I"m not looking at the koji build but at the pull request
21:26 apergos this weekend I might have a go at hacking it up some
21:26 kiorky dave_den: its more than a thin layer :p
21:27 kiorky dave_den: upon that, we also are not convinced yet, ip managmenent is a hell, maintainance is also a hell
21:28 kiorky and having machine containers (running /sbin/init as the first process) is just a without-end challenge
21:28 dave_den last i checked, most of the code base is just shelling out to call "lxc …."
21:28 dave_den i'd rather do it myself
21:28 dave_den ;)
21:28 dave_den well, let me rephrase:   i'd rather have salt do it for me
21:28 kiorky dave_den: yep, but with aufs (copy on write) layers setuped there, + push/pull
21:29 mpanetta dave_den: Then maybe someone should write an LXE module for salt? :P
21:30 wilywonka joined #salt
21:30 dave_den mpanetta: there's an lxc module https://github.com/saltstack/salt/blob/develop/salt/modules/lxc.py
21:30 mpanetta Oh well, then problem solved?
21:31 apergos hahaha
21:39 mgw dave_den, kiorky: just jumping in here…. are you suggesting improvements to LXC (I may be doing some more work on it soon, so curious what limitations are most pressing to other users).
21:39 kiorky mgw: our company policy is to stick to docker, so my current issues are more here: https://github.com/dotcloud/docker/issues/2276
21:40 kiorky mgw: :p
21:40 Nazzy joined #salt
21:40 Nazzy joined #salt
21:40 mgw kiorky: ah, ok… I ended up steering away from docker due to limitations
21:41 mgw My use case is more along the lines of using containers as a lighter substitute for VMs
21:41 kiorky mgw: well we are here either mad or fools or sadomasochists i think :)
21:41 kiorky mgw: some same as us :)
21:41 mgw lol, so you're finding docker limited too?
21:41 kiorky indeed
21:42 kiorky and ip managment (no static) is just awfull
21:42 kiorky but after that, you have push/pull and copy on write for free
21:42 dave_den mgw: i don't use the salt lxc module yet, so i have no suggestions so far
21:42 kiorky but you also have omnipresent unstability
21:42 kiorky :)
21:42 kiorky well, that's a moving project, so it will mature.
21:43 mgw kiorky: it was the ip management that killed it for me
21:43 mgw dave_den: are you planning to use it?
21:43 kiorky mgw: that, + saltstack bugs = buy a rope or the sysadmin :)
21:43 quickdry21 joined #salt
21:44 dave_den mgw: i'm in the process of converting my entire infrastructure to salt. eventually i will probably use it
21:44 kiorky mgw: we love to hate, you know :)
21:44 dave_den right now i use openvz in production, since lxc has not been very secure in LTS distros
21:44 kiorky dave_den: if it was me we would have used vserver here.
21:44 mgw dave_den: yeah, there are certainly security inplications of lxc
21:45 mgw it's not virtualization
21:45 kiorky mgw: well, problem of lxc is that it is not a tough confirment that you ll have with vserver for exemple
21:46 mgw exactly
21:46 mgw I use it for isolating already secure environments
21:46 mgw i.e., the risk of even a container being compromised is very low
21:47 kiorky the only thing that concerned me around vserver is the little number of coredevs since 10 years, ...
21:47 kiorky but they just rock like hell ...
21:49 kiorky mgw: after, for the moment, the most painful things with docker is the ip mangement and the read only file in the container + the apparmor reccurent bites
21:51 kiorky mgw: you can even have a look to https://github.com/makinacorpus/vms/tree/master/docker
21:51 kiorky if you want to know how to make full state machines with docker :p
21:51 kiorky (see ubuntu_salt ^^)
21:52 nijotz left #salt
21:52 oraqol Ok so allocating more resources for salt seemed to fix the previous issue, but now I'm getting the following error when I try to run state.highstate:
21:52 oraqol Data failed to compile: ----------     The function "state.highstate" is running as PID 15172 and was started at 2013, Nov 21 16:47:22.452188 with jid 20131121164722452188
21:52 oraqol I can test.ping fine
21:52 oraqol just when I try to highstate
21:53 zandy joined #salt
21:53 VertigoRay Anyone else having issues with pillar_git?  `GitCommandError: 'git pull' returned exit status 1: Your configuration specifies to merge with the ref 'prd' from the remote, but no such ref was fetched.` Yes, there is a prd branch, but I'm not sure why this error calls it a "ref" instead of a branch.
21:54 kiorky s0undt3ch: any chance you there ?
21:54 dave_den oraqol: only one highstate can run at a time. your previous highstate may be hung due to not being able to communicate with the master (depending on your highstate)
21:54 dave_den oraqol: you can use the saltutil module to send commands to your minions to kill a jid
21:54 forrest It's already 11 where he's at kiorky so he might not be around
21:55 Katafalk_ joined #salt
21:57 jdenning joined #salt
21:57 kiorky forrest: im in the same timezone  ^^
21:57 forrest ahh ok
21:58 kiorky forrest: well im so tired i m a bit harsh on my speaking today, i hope i have not been too picky with him :)
21:58 forrest lol
22:00 dranger joined #salt
22:02 oraqol Ok thank you
22:03 pniederw what should I do when the 0.17.2 issue with pkgrepo hits? is there an update available that can be used together with salt bootstrap? I see no tag after v0.17.2
22:03 pniederw on the other hand, it appears that the package distros have a fix, no?
22:04 pass_by_value left #salt
22:09 godber joined #salt
22:11 oraqol Wait the pid mentioned in that error corresponds to the salt-minion process, is this correct?
22:11 oraqol and no state.highstate process shows up in ps aux on the minion
22:12 thelorax123 joined #salt
22:13 godber joined #salt
22:13 torrancew anyone familiar with the virt module?
22:14 dave_den oraqol: salt is threaded, so the pid is probably reported as the thread pid under your main salt-minion process.
22:14 oraqol ok thank you
22:16 dave_den oraqol:  for example:  cat /proc/$(cat /var/run/salt-minion.pid)/task/15172
22:16 oraqol So if I restart the salt-minion d process, it should kill the jid as well, correct?
22:17 dave_den it will kill the pid running that jid
22:17 dave_den yes
22:17 matanya joined #salt
22:18 oraqol Would it be safe to just use cmd.run to restart the salt-minion, or is that frowned upon?
22:19 gmoro joined #salt
22:19 opapo joined #salt
22:20 dave_den yeah, you can do that if your stuff works properly. i would use saltutil to kill the jid, but cmd.run to restart salt-minion should work, in theory
22:21 NotreDev joined #salt
22:22 oraqol But if i used the jid, I'd have to specify each minion manually, correct?  as each one has a different jid
22:22 matanya joined #salt
22:22 dave_den if you started the highstates from your salt master then they all have the same jid.
22:23 oraqol ah yes, i was looking at the jids from two different clusters
22:28 pengunix joined #salt
22:28 Gifflen joined #salt
22:31 matanya joined #salt
22:31 Gifflen joined #salt
22:31 kermit joined #salt
22:33 alunduil joined #salt
22:37 matanya joined #salt
22:43 bemehow joined #salt
22:48 xet7 joined #salt
22:50 oraqol Ok, I restarted the salt-minion process but now I'm getting this when I try to run highstate:
22:50 oraqol [DEBUG   ] Fileserver attempted to read incomplete cache file. Retrying.
22:51 lineman60 joined #salt
22:52 oraqol The command runs but does not output anything to screen, not even an error, just a nextline
22:52 cjh973 i had both masters die on my salt cluster and i'm trying to setup a new master.  all the minions keep saying the public key is cached and quit.  I added the new master into the minion config but it seems to be ignoring it even after a process restart
22:52 pdayton joined #salt
22:53 Ryan_Lane cjh973: you need to delete the cached master key
22:53 cjh973 where i can i nuke that from?
22:53 zandy joined #salt
22:53 dave_den oraqol: your minions may have some partial files in their /var/cache/salt/minion directories
22:53 pdayton joined #salt
22:53 Ryan_Lane /etc/salt/pki/minion/minion_master.pub
22:54 Ryan_Lane cjh973: ^^
22:54 cjh973 ok
22:54 dave_den Ryan_Lane: replied to your email. i see where you;re going with that trebuchet module extension now
22:54 Ryan_Lane thanks
22:54 Ryan_Lane yeah, I thought explaining the system some would help :)
22:54 sroegner joined #salt
22:54 matanya joined #salt
22:54 cjh973 Ryan_Lane: ok i killed that file but it says the same thing
22:55 cjh973 The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticat
22:55 Ryan_Lane I think you need to restart the minion afyer doign so
22:55 cjh973 but yet in salt-key -L there is nothing
22:55 Ryan_Lane *after doing so
22:55 cjh973 ok
22:56 cjh973 same deal
22:56 Ryan_Lane dave_den: ah, yeah, your suggestion is what I was thinking
22:56 Ryan_Lane include a file, which could extend the configuration
22:56 Ryan_Lane but the configuration doesn't allow extend
22:56 dave_den Ryan_Lane: yeah, it could act much like custom grains do, and should be possible to implement
22:56 Ryan_Lane otherwise I could just have people drop something into master.d
22:56 KyleG left #salt
22:57 Ryan_Lane though it would be even cooler to have a master_formulas directory or something
22:57 cjh973 Ryan_Lane: i found it.  the salt multi-master goes in order.  I had a secondary host that has a pending key to accept
22:57 Ryan_Lane ah, ok
22:58 Ryan_Lane assuming I could just drop something into master.d I could install it automatically via deb or rpm
22:58 oraqol oops
22:58 Ryan_Lane but that's less nice for people who want to use salt for everything :)
22:59 dave_den the configuration files are really the only thing in salt not able to extend dynamically
22:59 Ryan_Lane dave_den: btw. it would be awesome just in general if it was possible to use extend/merge/replace for all config
23:00 dave_den so it makes sense and could be pretty cool
23:00 dave_den right
23:00 Ryan_Lane because master.d/minion.d is nice, but it's less useful because things can't be extended
23:00 dave_den i'm out for the night, but i suspect dynamic config modules will get a few +1s
23:00 dave_den see ya tomorrow
23:00 Ryan_Lane this is one of the reasons I kind of wanted config to be done via pillars
23:01 Ryan_Lane dave_den: see ya
23:01 Chrisje joined #salt
23:02 oraqol whats a safe way to clear out the cache files in /var/cache/salt/minion?
23:03 NotreDev joined #salt
23:03 Ryan_Lane maybe this? http://docs.saltstack.com/ref/modules/all/salt.modules.state.html#salt.modules.state.clear_cache
23:04 Ryan_Lane oraqol: ^^
23:05 jslusher joined #salt
23:05 matanya joined #salt
23:05 jslusher does anyone know how I can get a copy of salt to install that will work with salt-cloud?
23:06 oraqol Still a no go, so very strange
23:06 jslusher it's killing me
23:06 forrest jslusher, I thought you got that working yesterday?
23:06 jslusher forrest: so did I
23:06 forrest lol
23:06 cjh973 can you put a timeout on the salt-cmd functions if they hang?
23:07 Ryan_Lane jslusher: are you using ubuntu? debian? red hat?
23:07 jslusher forrest: through pip I installed salt and salt-cloud of versions that used to work together, but I get the same error about being unable to load the ec2 driver
23:07 Ryan_Lane if ubuntu, there's a ppa
23:07 cjh973 nvm i found it :D
23:07 jslusher Fedora
23:07 Ryan_Lane ah
23:07 Ryan_Lane isn't it in EPEL?
23:07 forrest Ryan_Lane, only an old crappy version
23:08 Ryan_Lane ah
23:08 jslusher right, nothing that works with salt-cloud, which I've unfortunately built out a lot of deployment design with
23:08 forrest jslusher, so 0.8.10 (or whatever it was)
23:08 forrest that just gave you the same error as the old one??
23:08 jslusher because it was so convenient that it did the master-minion thing on its own
23:08 jslusher right
23:08 forrest Did you start a discussion on this on the mailing list, or an issue?
23:09 jslusher I haven't. I was commenting on a github discussion about it
23:09 forrest we need some input from the guys maintaing salt-cloud I think, because you're using versions that should work together, lol
23:10 oraqol Still a no go, so very strange
23:11 worstadmin joined #salt
23:12 mpanetta joined #salt
23:12 jslusher forrest: yeah, I just double-checked.
23:12 jslusher forrest: so where would be the most effective place to complain?
23:12 matanya joined #salt
23:13 forrest jslusher, mailing list first
23:13 forrest you're still on 0.17.1 right?
23:13 jslusher 17.2 and 0.8.10
23:13 jslusher using the pip installs
23:14 forrest ahh
23:14 forrest yea do the mailing list first
23:14 forrest see what comes of that
23:14 forrest because it should be working :\
23:14 jslusher forrest: pardon my ignorance, but could you point me in the right direction?
23:14 forrest jslusher, https://groups.google.com/forum/#!forum/salt-users
23:15 jslusher ah. ok. that group.
23:15 snewell joined #salt
23:15 jslusher I thought maybe there was one specifically for salt-cloud
23:15 forrest not as far as I know
23:17 snewell I'm trying to install Postgres on CentOS, and default repo's don't work, so I need to add an exclude statement to /etc/yum.repos.d/CentOS-Base.repo.  What is the best way to do that? salt.states.pkgrepo doesn't seem to have an exclude option...
23:18 forrest snewell, pkgrepo supports kwargs
23:18 forrest so you can put stuff in that isn't explicitly supported
23:19 matanya joined #salt
23:19 snewell forrest: so I just put something like: - exclude: postgresql* ?
23:19 forrest yea give it a shot
23:19 forrest it should work like that
23:20 forrest I'm not sure how it will handle the star though
23:20 forrest it should consider it a string and be fine
23:20 snewell forrest: Great!  Trying it now.  Thanks for the quick response!
23:20 forrest snewell, well, make sure it works before you thank me :P
23:20 kermit joined #salt
23:20 snewell forrest: lol
23:26 snewell_ joined #salt
23:27 brisbane_bob whiteinge: thanks for the hint - but no, 'Whitelist @runner for your user and call  salt-run manage.status to get the full list of minions' fails with AttributeError: 'pwd.struct_passwd' object has no attribute 'gid'
23:29 matanya joined #salt
23:31 brisbane_bob I might open an issue as I think lotsa folk would like an equivalent for 'mco find' that avoids the use of 'ping' to see what 'salt' thinks a target patterm should resolve to - I'm presently using dig|grep|sed
23:41 forrest snewell, did that work?
23:42 snewell still working on it...  I'm new, so I'm slow :D
23:42 forrest no worries
23:53 zandy joined #salt
23:56 zz_Cidan so
23:57 zz_Cidan last night I setup a digital ocean account
23:57 zz_Cidan holy fuck
23:57 forrest ?
23:57 zz_Cidan it smokes... smokkeesss AWS
23:57 forrest Oh yea
23:57 forrest it's the only cloud provider I use now
23:57 zz_Cidan in every test I threw at it
23:57 forrest and it's cheap
23:57 zz_Cidan so cheap
23:58 zz_Cidan we're spending almost 40k/mo at AWS
23:58 zz_Cidan I want to move us to DO now
23:58 forrest There's something about spinning up 3 servers and having salt running on them in under 5 minutes, using them for an hour, then spinning them down and it costing me 5 cents that I can't argue with
23:58 joehoyle joined #salt
23:58 EugeneKay I'm a Linode fan myself, but I keep an AWS account around for the "20 boxes for an hour" jobs.
23:59 forrest EugeneKay, whatever happened with that massive linode security breach?
23:59 EugeneKay I also have a couple ESXi hosts colo'ed(backed by NetApp storage) for my long-term stuff
23:59 zz_Cidan <3 netapp
23:59 zz_Cidan so much
23:59 zz_Cidan best SAN I've ever used
23:59 EugeneKay They fixed the hole, apologized, and they didn't get much out anyway.
23:59 forrest ahh nice
23:59 forrest zz_Cidan, yea for what you pay netapp better be awesome
23:59 zz_Cidan ikr
23:59 EugeneKay Email addresses, hashed passwords and encrypted CC numbers
23:59 zz_Cidan expensive as shit

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary