Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2013-12-26

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:13 fllr joined #salt
00:24 jfzhu_us joined #salt
00:26 mlen joined #salt
00:28 forresta joined #salt
00:34 fllr joined #salt
00:56 mgw joined #salt
01:06 jfzhu_us Has anyone tried using salt to install the rpmfusion repos?
01:13 nocturn joined #salt
01:17 bhosmer joined #salt
01:24 nocturn joined #salt
01:34 fllr joined #salt
01:35 blarghmatey joined #salt
01:35 bhosmer joined #salt
01:42 favadi joined #salt
01:45 elfixit joined #salt
01:46 esogas joined #salt
01:51 esogas_ joined #salt
01:52 rawzone joined #salt
01:52 favadi joined #salt
01:56 pdayton joined #salt
02:11 sfvivek1 joined #salt
02:20 ninkotech joined #salt
02:20 ninkotech_ joined #salt
02:21 nocturn joined #salt
02:25 sashka_u1 joined #salt
02:26 londo__ joined #salt
02:26 abele_ joined #salt
02:26 patrek_ joined #salt
02:27 eculver_ joined #salt
02:27 scassidy_ joined #salt
02:27 mackstick joined #salt
02:28 minaguib_ joined #salt
02:28 michelle1 joined #salt
02:28 blarghmatey__ joined #salt
02:29 andyshinn` joined #salt
02:29 MSeven joined #salt
02:31 crazysim_ joined #salt
02:31 elfixit1 joined #salt
02:33 cbloss_ joined #salt
02:33 bturner joined #salt
02:34 fllr joined #salt
02:35 Zuru joined #salt
02:37 cbloss joined #salt
02:38 gmoro joined #salt
02:38 sfvivek2 joined #salt
02:39 majoh joined #salt
02:41 bbinet joined #salt
02:43 vmdsch joined #salt
02:44 oz_akan_ joined #salt
02:47 ravibhure joined #salt
02:48 xl1 joined #salt
03:07 psyl0n joined #salt
03:07 ajw0100 joined #salt
03:08 elithrar joined #salt
03:10 Nexpro joined #salt
03:18 asdasdasd joined #salt
03:23 ninkotech_ joined #salt
03:23 ninkotech joined #salt
03:23 bhosmer joined #salt
03:24 ajw0100 joined #salt
03:34 ckao joined #salt
03:45 pdayton joined #salt
03:50 psyl0n joined #salt
03:50 fllr joined #salt
03:54 forresta dave_den, are you around?
03:54 ninkotech_ joined #salt
04:13 ajw0100 joined #salt
04:25 ajw0100 joined #salt
04:29 favadi joined #salt
04:33 oz_akan_ joined #salt
04:38 jfzhu_us joined #salt
04:42 mr_chris joined #salt
04:44 oz_akan_ joined #salt
04:47 rojem joined #salt
04:49 troyready joined #salt
04:53 fllr joined #salt
05:04 ajw0100 joined #salt
05:07 BenCoinanke joined #salt
05:10 BenCoinanke joined #salt
05:11 ajw0100 joined #salt
05:11 bhosmer joined #salt
05:20 ajw0100 joined #salt
05:21 vmdsch joined #salt
05:22 dangra joined #salt
05:27 Gifflen joined #salt
05:28 ajw0100 joined #salt
05:34 pdayton joined #salt
05:35 elfixit joined #salt
05:36 pcurry_nomi joined #salt
05:38 ajw0100 joined #salt
05:43 BenCoinanke joined #salt
05:45 Katafalkas joined #salt
05:46 sfvivek1 joined #salt
05:48 BenCoinanke_m joined #salt
06:16 ninkotech__ joined #salt
06:17 ninkotech joined #salt
06:22 ajw0100 joined #salt
06:29 fllr joined #salt
06:31 Katafalkas joined #salt
06:35 ajw0100 joined #salt
06:41 bhosmer joined #salt
06:44 druonysus joined #salt
06:46 elithrar_ joined #salt
06:55 ajw0100 joined #salt
06:57 elithrar joined #salt
07:01 ajw0100 joined #salt
07:04 Shenril joined #salt
07:06 ninkotech__ joined #salt
07:06 ninkotech joined #salt
07:07 ninkotech__ joined #salt
07:13 ravibhure joined #salt
07:20 ajw0100 joined #salt
07:22 Katafalkas joined #salt
07:23 ravibhure joined #salt
08:01 fllr joined #salt
08:14 MohShami joined #salt
08:21 giantlock_ joined #salt
08:21 nliadm joined #salt
08:23 ermolenkot joined #salt
08:26 MohShami hey guys, trying to integrate salt and git to track all my state information, but salt doesn't seem to find the files in git, any idea what I'm missing?
08:27 MohShami I'm using git and roots as my fileserver_backend and have the URL to the git repo in gitfs_remotes
08:27 ermolenkot Hello! I have some questions about iptables state in salt version 0.17.4. It described in documentation http://docs.saltstack.com/ref/states/all/salt.states.iptables.html and this code exists in develop and master branches on github, but it does not work in salt 0.17.4... there is not this code in 0.17.4 release
08:39 junedm joined #salt
08:39 junedm left #salt
08:46 ermolenkot MohShami, you change some code in gitfs, but salt does not see it? How long did you wait before exec salt-call or something else?
08:47 nliadm joined #salt
08:48 MohShami thanks ermolenkot, I restarted salt master after changing the configuration
08:48 MohShami still nothing
08:50 matanya joined #salt
08:51 terminalmage ermolenkot: it probably isn't there then
08:51 terminalmage we typically add notes to the docs to describe when a given state/module was added
08:51 terminalmage this may have been overlooked
08:54 terminalmage ermolenkot: the iptables state and module do exist, I'm not sure how you can't find them
08:55 terminalmage ermolenkot: https://github.com/saltstack/salt/blob/v0.17.4/salt/states/iptables.py
08:55 terminalmage ermolenkot: https://github.com/saltstack/salt/blob/v0.17.4/salt/modules/iptables.py
08:55 ermolenkot terminalmage, thank you. There is only iptables.append in iptables state :)
08:55 NV MohShami: ftr salt-run fileserver.update is useful to force an update of your gitfs remotes
08:55 NV i haven't had issues with gitfs remotes before - post your master config?
08:56 terminalmage ermolenkot: oh, so you were trying to use a newer state?
08:56 terminalmage in that case, it's likely still a deficiency in the documentation
08:56 ermolenkot terminalmage, yes. I tried to use iptables.flush
08:57 terminalmage ermolenkot: looking at the docs now
08:57 MohShami thanks NV, let me check
08:57 ninkotech joined #salt
08:57 terminalmage ermolenkot: yes, I see many new states added, I will clarify the docs
08:57 ninkotech__ joined #salt
08:57 terminalmage thanks
08:59 MohShami NV, I'm pretty much using the default master file, let me pastebin it for you
09:00 MohShami NV: http://pastebin.com/PqzVgreR all comments and empty lines were removed
09:03 NV git+ssh://git@172.16.33.77:repositories/configuration is wrong
09:03 NV should be git+ssh://git@172.16.33.77/repositories/configuration
09:04 NV also remove the ' - roots' line if you're just using gitfs
09:06 MohShami thanks NV, I'm using both git and roots, but when I issue highstate, the file can't be found in either
09:07 MohShami still the same issue after changing the git URL
09:11 ermolenkot MohShami, did you fogot to put private key for salt to access git?
09:12 MohShami ermolenkot, nope, first thing I checked :)
09:13 MohShami do I need to define anything eother than fileserver_backend and gitfs_remotes?
09:13 MohShami I'm trying to push configuration files for unbound
09:13 MohShami and as soon as I add git to fileserver_backend the state can no longer be found, even if I have it in roots as well
09:14 MohShami I have /usr/local/etc/salt/states/cdns/unbound.sls and /usr/local/etc/salt/states/cdns/config/unbound.conf in the file system as well as git
09:15 ermolenkot MohShami, loop_interval = 60 seconds. you can change it. do you use gitolite in your repo?
09:15 MohShami yes I use gitolite, does that matter?
09:16 MohShami loop_interval should not matter as I restart salt master on every run, just to make sure everything is clean
09:16 MohShami or am I mistaken?
09:20 ermolenkot MohShami, once I tried to use gitfs backend and I work only when I set loop_interval to 5s. I changed my configs and wait before salt-call. Now I use rootfs backend and git hooks :)
09:20 ermolenkot *it works
09:21 MohShami ermolenkot, I thought about setting up a git hook to extract the files, but I'd like to use git directly, feels cleaner
09:22 MohShami No matching sls found for 'cdns.unbound' in env 'base'
09:23 NV MohShami: do you have cdns/unbound.sls or cdns/unbound/init.sls?
09:26 MohShami http://pastebin.com/tA7dKH7r
09:26 MohShami I also have the same structure in git
09:27 ermolenkot MohShami, is there something in /var/cache/salt/master/gitfs? I don't remember correctly where it cached files from git...
09:28 MohShami http://pastebin.com/XYWTwwXS
09:29 MohShami If I remove git from fileserver_backend it works fine, but when I add git (even before or after roots) it no longer works
09:37 MohShami I just checked the cache folder on the minion, I can see the top.sls file, but the minion isn't pulling the state info
09:38 NV MohShami: you on FreeBSD perchance?
09:38 MohShami NV: Yep
09:38 NV :D
09:38 MohShami why the :D? :)
09:38 NV cause freebsd is win
09:39 MohShami I totally concur :)
09:39 MohShami love it and won't use anything else unless I REALLY have to
09:39 NV pkgng makes it even better :D
09:39 NV and bhyve means even your hypervisor for when you do have to run Linux or something silly like that can be FreeBSD too! :D
09:39 MohShami I have my own poudriere server which builds pkgng stuff for me, love it
09:40 MohShami :D
09:41 NV anyway, salt-call cp.list_states
09:41 NV may be useful in troubleshooting
09:41 ninkotech joined #salt
09:41 ninkotech__ joined #salt
09:42 terminalmage MohShami: you'll like our next feature release then
09:42 NV not quite sure what's breaking your setup, i don't have issues at all (although i just use gitfs, no roots combined with it, so it could be that)
09:42 terminalmage I completely rewrote pkgng support
09:42 MohShami terminalmage: awesome, thanks mate :)
09:42 NV terminalmage: I know, I've already pinched the modules from git :D
09:42 terminalmage no prob, there's also a ports state and module too that will be added
09:43 MohShami awesome (Y)
09:43 NV protip - states/_modules/pkgng.py - use the contents from git :D
09:43 MohShami http://pastebin.com/3QXVWncD
09:43 terminalmage NV: nice! please don't hestitate to open issues if you find anything
09:43 NV i think i had to do freebsdpkg and pkg_resource too due to deps
09:43 terminalmage these are still only in git so they're not used in wide circulation
09:43 NV terminalmage: it's working great, or I already would have! I'm no stranger to github tickets :D
09:44 terminalmage NV: yeah there have been some changes, those modules ref a couple functions in salt.utils that are only in git now
09:44 NV well, except for the few i've already reported anyway
09:44 terminalmage NV: yeah I've seen you post a few I think... what is your username?
09:44 terminalmage same?
09:44 NV nvx
09:44 terminalmage yeah I recognize it
09:45 NV one with package names that contain dots, and a bug with port origin names i've participated in
09:45 terminalmage ahh the centos one with java-1.6.0.whatever?
09:45 NV should probably check if they're fixed now and update come to think of it :P
09:45 terminalmage centos/rhel/whatever
09:45 NV ah yeah, might have been centos/rhel
09:45 MohShami should I have a top.sls file in git as well?
09:45 NV at work i use rhel/centos, at home i use freebsd
09:46 terminalmage NV: yeah I fixed that
09:46 terminalmage it should be in 0.17.4
09:46 NV MohShami: you should have one top.sls somewhere - but only one
09:46 NV ah cool
09:46 NV i sort of forget where i run into issues sometimes :P
09:46 NV i think just the port origin name issue was the only pkgng one then
09:46 NV (ie, cat/portname style)
09:47 terminalmage NV: I also refactored how the yum pkg backend handles package naming when installing pkgs from an arch different than that of the OS
09:47 terminalmage i.e. i686 on x86_64 OS
09:47 ermolenkot MohShami, clear cache. restart salt-master, check that your last commit have same hash. try to connect to you git remote manualy. try to use salt-call -l debug on minions side. I think your salt can't connect to git. check master logs %(((
09:47 terminalmage and also we kicked the yum API to the curb
09:48 terminalmage because it's been nothing but a headache
09:48 terminalmage so for the next feature release we'll be using yumpkg5 exclusively
09:50 MohShami ermolenkot: I did exactly that, same thing, git is up to date
09:50 MohShami this is the debug output on the client
09:50 MohShami http://pastebin.com/vQtMWumn
09:51 MohShami I'm seeing a lot of errors on the master
09:52 MohShami 1 second so I can pastebin that
09:53 MohShami this is the master output
09:53 MohShami http://pastebin.com/MftdnZFt
10:14 MohShami any idea what I'm doing wrong?
10:17 NV MohShami: pastebin output of: salt --versions-report ; pkg info | grep -i git
10:17 NV salt --versions-report ; pkg info | grep -i git
10:17 NV bah
10:17 NV also uname -a
10:18 NV also the zfs help jigger is normal
10:19 NV not sure why it runs zfs help (like every goddamn time), but it does it for me too
10:19 MohShami http://pastebin.com/p6eRbdxv
10:19 MohShami yeah I was wondering about that
10:19 NV pkg install git
10:19 NV ;)
10:19 MohShami I was about to ask if I need the git binary :D
10:19 dangra joined #salt
10:20 NV also freebsd10 i assume? or?
10:20 MohShami I wanted to get away with not having to install git on my salt server
10:20 MohShami 9.2
10:21 NV not sure why gitpython doesn't have git as a dependancy, but considering the not found errors, i can only assume its talking about the git binary
10:21 NV and it is git/cmd.py trying to execute a subprocess when the error occurs
10:21 NV (and all my salt masters have the git binary and it works for me :P)
10:22 MohShami :D
10:23 MohShami now having roots and git works, but git alone doesn't, even though I have a top.sls file in the git root
10:26 MohShami looking through the documentation, but I can't find a way to list all states for a minion, is there a state.list or something similar?
10:28 MohShami show_highstate, but it is returning an empty set :(
10:28 NV highstate just shows what's assigned via top
10:29 MohShami that's what I was trying to accomplish
10:29 NV so if you're having issues with top.sls, then show_highstate will have issues too :P
10:29 MohShami I have top.sls in my git repo
10:29 NV salt-run fileserver.update
10:29 NV and try again
10:29 NV that forces a gitfs update
10:29 MohShami was trying to figure out if I can get the top.sls file from git
10:31 MohShami also I'm not seeing any refernce for git in the master debug log
10:33 harobed_ joined #salt
10:44 MohShami new update, I'm starting to get this error "GitPython exception caught while fetching: __init__() takes at least 3 arguments (2 given)" after "Updating fileserver cache"
10:57 vespakoen joined #salt
11:01 fllr joined #salt
11:02 aleszoulek joined #salt
11:04 dw left #salt
11:06 vespakoen Hey guys, I have made all my servers, heck, even my own laptop, "salt managed" and it is great! However, for every project (actually vendor, my customers, myself etc) I have created a new "salt-master"  repository that contains my pillar data, and includes a submodule (the states), I am now thinking of making just 1 "salt-master" project, that loads all  pillar repositories "into itself", now, I am also thinking about making a "base
11:06 vespakoen pillar project" for every type of server, for example "python-django-server", "php-laravel-server" etc, I have read about loading pillar data with a GitFS,  which seems to be exactly what I need, however, I am wondering if these configurations will cascade, and if so, with what strategy. can anyone tell me more about this?
11:13 malinoff vespakoen, http://docs.saltstack.com/ref/syndic.html
11:14 vespakoen interesting
11:17 vespakoen actually, what I am looking for more specifically, is the cascading of pillar data, I basically want to manage just one repository with the "basic configuration stuff", memory limits, errors enabled/disabled, max connections etc etc, and then having sub repositories that can "override" these settings, and add onto them
11:18 vespakoen because now, most of the times when I make a change, I have to get into 8 other projects to edit the same config
11:18 vespakoen also, my salt-states are loaded as a submodule, if I update them somewhere, I have to go into 8 other projects to pull in the latest stuff
11:21 vespakoen I am wishing I will end up with one repository, that basically is a minion/master config that loads some state repositories, and some pillar repositories, and have a "base" pillar repository where other pillar repositories "extend" from
11:22 vespakoen I hope all this blatter makes a little sense
11:22 malinoff vespakoen, I'm not sure, but as I remember, you can't extend pillars right now
11:22 vespakoen http://docs.saltstack.com/ref/pillar/all/salt.pillar.git_pillar.html#module-salt.pillar.git_pillar
11:23 vespakoen I see, maybe I can achieve it with a hack? / create some python code to do it for me?
11:23 ravibhure joined #salt
11:25 malinoff vespakoen, Salt is quite complex in the source codes :)
11:26 vespakoen I can imagine =)
11:26 vespakoen this might help me though: https://github.com/saltstack/salt/issues/4389
11:27 junedm1 joined #salt
11:29 che-arne joined #salt
11:29 psyl0n joined #salt
11:30 malinoff vespakoen, Right now environments are useless btw :)
11:30 vespakoen why is that?
11:31 malinoff vespakoen, Well, you can't inherit environments, you cant combine multiple envs and so on
11:31 vespakoen I see
11:32 vespakoen I wish there was some cascading functionality, I actually am turning up quite some results when googling on the topic
11:32 vespakoen hopefully someone already found a way around it
11:32 junedm joined #salt
11:33 junedm left #salt
11:40 dangra joined #salt
11:44 MZAWeb joined #salt
11:45 malinoff vespakoen, I end up with different masters. Easy to scale, nice failover, simple architecture, separated project-related data and so on
11:46 malinoff Since salt-master is not a HPC service, salt-master node is very cheap :)
11:52 vespakoen Yeh I like the idea, and I think if my "plan" would have worked, I could achieve the same thing, I would just use my "salt master shell", put it on a server, include the "base" pillar and the project's pillar data, all the states, and "wish my client good luck", but on my own computer, I also have the "salt master shell" but include ALL base / project's pillar data, so I can easily manage it from one place
11:52 vespakoen now, salt is speeding things up by abstracting stuff to very basic pillar data, but I end up copying and pasting my config all over the place
11:52 vespakoen and a lot of bugs come forward from this
11:53 malinoff Copy-paste is always a mess
11:53 malinoff So yeah
11:53 malinoff I understand you :)
11:54 vespakoen I guess I will open an issue and see what the world thinks =P
11:55 malinoff vespakoen, opened 4 issues today :D "we need more issues"
11:56 vespakoen lol
12:00 ninkotech joined #salt
12:01 ninkotech__ joined #salt
12:01 fllr joined #salt
12:02 vespakoen actually, I am thinking I could make a little script that compiles/cascades my pillar data into one, and run that command somehow right before it starts executing, hacky, but should work
12:03 malinoff vespakoen, Try it. Maybe, this would be a nice solution that could be merged :)
12:06 bhosmer joined #salt
12:07 giantlock_ joined #salt
12:08 vespakoen http://docs.saltstack.com/ref/pillar/all/salt.pillar.hiera.html
12:08 vespakoen http://projects.puppetlabs.com/projects/hiera
12:08 vespakoen this might be the solution!
12:09 malinoff Lol, using puppet features in salt :D
12:09 malinoff "We need more configuration management tools" :D
12:09 vespakoen yeh the whole puppet thing scares me a bit
12:09 malinoff vespakoen, It is :)
12:10 vespakoen scary? =D
12:10 malinoff vespakoen, Have you seen Ansible?
12:10 malinoff yeah :D
12:10 vespakoen yeh that looks great actually
12:10 vespakoen but sticking with salt for now, since I have invested in it quite a bit already, but will definitely give it a spin for a new project
12:11 malinoff vespakoen, well, it can't do things salt can :) For example, I have AWS AMI that configures itself on the startup and adds itself to the couchbase cluster. You don't have to do anything! You just have to push "Launch instance" button
12:11 malinoff And that's all
12:12 vespakoen automation is great =)
12:25 bhosmer joined #salt
12:26 elithrar joined #salt
12:27 vespakoen this looks quite promising too btw http://docs.saltstack.com/ref/renderers/all/salt.renderers.stateconf.html
12:28 vespakoen time to experiment I guess
12:33 dangra1 joined #salt
12:40 gasbakid joined #salt
12:44 matanya joined #salt
12:47 vespakoen here's my idea, in a picture: https://docs.google.com/file/d/0By9lteNZOBVNbUZER205elJQTGM
12:49 vespakoen does anyone know what would be a good way to set something like this up? or can someone tell me the idea is crazy and I should do it totally different?
12:57 MZAWeb joined #salt
13:03 fllr joined #salt
13:04 mgw joined #salt
13:12 blee joined #salt
13:18 ggoZ joined #salt
13:20 rofl____ joined #salt
13:22 vespakoen actually, it seems I can merge pillar files pretty easily, like described here: http://docs.saltstack.com/topics/conventions/formulas.html
13:23 vespakoen oops, this is the correct link: http://docs.saltstack.com/topics/conventions/formulas.html#map-jinja
13:23 thoht joined #salt
13:27 blee joined #salt
13:29 pengunix joined #salt
13:30 pdayton joined #salt
13:39 ravibhure joined #salt
13:48 mgw joined #salt
13:57 nebuchadnezzar vespakoen: I'm not sure if this could fit your needs, but I start to test reclass to build some hierarchical pillar
13:57 vespakoen how is it working out for you?
13:57 nebuchadnezzar http://reclass.pantsfullofunix.net/concepts.html
13:58 nebuchadnezzar there is a presentation video http://reclass.pantsfullofunix.net/refs.html
13:58 mr_chris joined #salt
13:58 vespakoen cool, thanks
14:01 fllr joined #salt
14:10 cce left #salt
14:12 mgw joined #salt
14:13 bhosmer joined #salt
14:14 JasonSwindle joined #salt
14:15 jfzhu_us joined #salt
14:16 gasbakid_ joined #salt
14:20 gasbakid_ joined #salt
14:22 vejdmn joined #salt
14:23 th3reverend joined #salt
14:24 mpanetta joined #salt
14:25 th3reverend left #salt
14:25 vespakoen nebuchadnezzar, I am sold =D
14:33 smccarthy joined #salt
14:33 diegows joined #salt
14:34 iShming joined #salt
14:35 justBob joined #salt
14:36 fllr joined #salt
14:38 _fllr_ joined #salt
14:43 Sheco joined #salt
14:44 MTecknology joined #salt
14:51 iShming joined #salt
14:51 JasonSwindle Is Erik Johnson here? :)
14:51 JasonSwindle I have a question about "Deploying Django with SaltStack in the Cloud".
14:56 pcurry_nomi joined #salt
14:57 mgw joined #salt
14:59 blarghmatey_ joined #salt
15:00 cachedout joined #salt
15:01 fllr joined #salt
15:06 MTecknology does rhel have anything for managing the firewall that can easily be managed with salt?
15:06 MTecknology My "go to" option for debian will end up being a pain in the bum.
15:06 mpanetta joined #salt
15:07 JasonSwindle MTecknology:  What was your workflow in Deb?
15:10 MTecknology install a templated ferm file (templated with salt + jinja2) and install the package
15:11 MTecknology http://dpaste.com/1524113/
15:11 JasonSwindle I never used ferm……. hmmm
15:12 JasonSwindle I have been having issues with Firewalling in deb, so you may of just helped me. :)
15:13 JasonSwindle Is Erik Johnson here?
15:15 MTecknology JasonSwindle: be patient
15:16 JasonSwindle Just was making sure if the logged in, they saw
15:16 JasonSwindle They may not be here, no rush. :)
15:17 MTecknology just be patient and wait. (find out their nick and watch for it)
15:17 vespakoen JasonSwindle, his nick is terminalmage , he is in the channel, but he is "away "
15:17 dave_den joined #salt
15:17 JasonSwindle Got it, awesome.
15:17 JasonSwindle Thank you :)
15:25 cachedout_home joined #salt
15:28 giantlock_ joined #salt
15:30 timoguin joined #salt
15:30 pengunix joined #salt
15:32 ninkotech__ joined #salt
15:32 timoguin anyone know why pillar.item would work when pillar.get won't?
15:32 timoguin pillar.get won't return a key that i've defined, but pillar.item returns it fine
15:32 cachedout_home joined #salt
15:33 timoguin v0.17.4
15:34 NV timoguin: show exact usage
15:35 timoguin exact usage is via the salt cli:
15:35 timoguin salt 'minion_name' pillar.get saltmaster
15:35 timoguin salt 'minion_name' pillar.item saltmaster
15:35 timoguin pillar.item returns everything as i've defined it. pillar.get returns empty
15:38 pcurry_nomi joined #salt
15:38 NV no idea tbh, that should work
15:40 cachedout_home joined #salt
15:40 sfvivek1 joined #salt
15:40 blarghmatey_ joined #salt
15:41 ruqui joined #salt
15:42 pengunix joined #salt
15:42 sfvivek2 joined #salt
15:43 ruqui I have a firewall managed by salt; I'd like to automatically update the firewall rules every time a new computer is configured via salt, is this possible?
15:45 _ikke_ How are you currently building the rules?
15:45 _ikke_ already quit
15:45 timoguin dang and i was about to help
15:45 ruqui joined #salt
15:46 _ikke_ ruqui: How are you currently building the rules?
15:46 vmdsch joined #salt
15:46 rojem joined #salt
15:46 timoguin ruqui, it's definitely possible
15:47 ruqui the firewall rules are just lines added to a config file
15:48 timoguin are you generating that dynamically, i.e., getting a list of the minions in a template or something?
15:48 kermit joined #salt
15:49 timoguin one way to tackle your problem is to have a reactor on the master that listens for new salt/auth events
15:49 timoguin and fires off the firewall state
15:51 wonhunawks joined #salt
15:52 pdayton joined #salt
15:52 ruqui what I need is to simply add a line in a config file ... the only thing that change is the IP of the new server
15:53 timoguin well what needs to be in that line?
15:53 timoguin a single firewall rule for an IP?
15:55 jkess joined #salt
15:55 jkleckner joined #salt
15:55 ruqui I don't have the exact line here (I don't have access to the current firewall at the moment), but is basically a rule that allows all connections to/from that IP
15:57 timoguin okay, you'll want to use either salt mine or the peering system so you can query for the IP address in the firewall config template
15:57 timoguin http://stackoverflow.com/questions/17158665/how-to-get-a-list-of-all-salt-minions-in-a-template
15:57 timoguin that post shows how to loop through all hosts in the salt mine in a template
15:58 timoguin so that's the first step.
15:58 timoguin to make it automatic when a new machine joins, you'll need to define a reactor: http://docs.saltstack.com/topics/reactor/index.html
16:00 Sheco joined #salt
16:00 iShming robawt: wait $5 instead of $32?  Is that a deal?  https://www.packtpub.com/search?keys=angular&sort=0&types=0&forthcoming=1&available=1&count=20  :-)
16:00 timoguin if you setup your firewall state properly, you should be able to listen for new minions via the 'salt/auth' event tag and then simply run the firewall state when those events hit the master
16:01 diegows joined #salt
16:01 ruqui timeguin, ok , what is the condition I should use to trigger the reactor defined?
16:02 timoguin ruqui, i believe 'salt/auth' is the event tag you want to watch for
16:03 ruqui I mean, I only want to update the config file only when a new computer joins
16:04 timoguin yea you'll need to mess around with it some.
16:04 timoguin in the salt source, look at tests/eventlisten.py
16:05 timoguin that will consume all events on the master and print them to the screen
16:05 timoguin there will be an event fired for minion auth. you may need to look at the data and only fire the event if the data is the initial join
16:06 junedm joined #salt
16:07 NV joined #salt
16:09 fllr joined #salt
16:10 rgbkrk joined #salt
16:10 pass_by_value joined #salt
16:11 junedm joined #salt
16:14 oz_akan_ joined #salt
16:14 timoguin ruqui, okay, so salt/auth fires an event when the key is initially sent, with { 'act': 'pend' }
16:15 timoguin when you accept the key it fires salt/auth with { 'act': 'accept' }
16:15 mpanetta Any salt devs around?  I have a quick(?) question.
16:16 pdayton joined #salt
16:16 schristensen joined #salt
16:18 ruqui timeguin, thank you very much! I was looking at the reactor link you sent me and found and example of triggering when a new minion is accepted with salt-key
16:18 timoguin ruqui, it's worth noting that if you're creating your minions via salt-cloud, it preseeds the minion keys and doesn't fire the salt/auth event
16:18 timoguin instead it fires salt/cloud/*/created events
16:18 timoguin ruqui, good luck. :)
16:19 mpanetta I am trying to figure out where to start adding load balancer support, I am looking in develop branch and wondering how I can get access to a conn (libcloud conn object I believe) from CloudClient
16:20 NVX joined #salt
16:20 ruqui thanks again timeguin, I'm fairly new using salt but your guidance point me to the right direction :)
16:20 xmltok joined #salt
16:21 junedm left #salt
16:25 mgw mpanetta: I've done some dev work on salt, but mostly modules
16:25 mpanetta mgw: I'm not quite sure where to start, I was thinking about making the load balancer stuff external to start with, but a module sounds good as well.
16:26 timoguin yea what he's doing is probably best as a module, but it'll require config options on the master
16:26 timoguin namely it'll need access to the salt-cloud config
16:26 mpanetta I noticed that the develop branch has the salt-cloud stuff integrated in, which makes things nicer for adding lb support.
16:27 mpanetta yes
16:27 timoguin mpanetta, you doing AWS load balancers first?
16:27 mpanetta Rackspace
16:28 mpanetta Since I work there ;)
16:28 mpanetta Apache libcloud seems to support both however
16:30 timoguin yea, i'm not sure how it would be organized either.
16:30 timoguin probably the API level stuff should be in salt/cloud/clouds/ in whatever privider library is used
16:30 timoguin and then a custom module that imports the necessary functions
16:30 mpanetta Hmm makes sense
16:31 timoguin if salt-cloud is configured properly then i think you should be able to cross call any of those modules in a custom module
16:31 gasbakid_ joined #salt
16:32 timoguin maybe the driver level needs functions like get_lb_config and set_lb_config
16:32 mpanetta let me look at the openstack driver.  it may be the most logical place to start
16:32 timoguin yea probably
16:33 timoguin you might also want to hit up #salt-devel
16:33 mpanetta Ah cool, thanks :)
16:35 UtahDave joined #salt
16:36 jsaxon joined #salt
16:36 gasbakid__ joined #salt
16:37 mgw1 joined #salt
16:38 iShming joined #salt
16:40 mgw1 mpanetta: i've not done anything with salt-cloud yet
16:40 mpanetta mgw1: I've used it, that is about it :)
16:40 blarghmatey joined #salt
16:43 tollmanz joined #salt
16:43 NVX joined #salt
16:43 quickdry21 joined #salt
16:43 NV joined #salt
16:45 UtahDave mpanetta: did you have some questions about Salt cloud?  I've used it extensively
16:45 JasonSwindle UtahDave:  Welcome!
16:46 mpanetta UtahDave: Sorta.  I think timoguin has me pointed in the right dir for now.
16:46 UtahDave hey, JasonSwindle!
16:46 UtahDave ok, cool
16:46 martoss joined #salt
16:46 mpanetta Thanks UtahDave :)
16:47 tollmanz Hi all! What would be a good strategy for using Salt to compile a package from source? As an example, I am trying to install nginx with SPDY support, which requires compiling from source. I have the bash commands worked out, but would love some advice about the best way to manage this with Salt.
16:47 vmdsch joined #salt
16:48 martoss1 joined #salt
16:49 UtahDave tollmanz: if you're writing your own custom module, something like this might work for you:
16:49 UtahDave https://gist.github.com/UtahDave/6125409
16:50 martoss2 joined #salt
16:51 tollmanz Thanks UtahDave! I have not gotten into custom modules yet, but will take a look. Would this set me up for a decent maintenance strategy? My concern is with regard to easily updating the package.
16:51 cachedout joined #salt
16:52 timoguin tollmanz, the way i'd handle that is to define the URL to pull the source from in pillar data and have your state utilize that
16:52 timoguin that way when they release a new version you just edit pillar data and re-run the state
16:53 tollmanz timoguin: Oh...I like that idea. That makes a lot of sense.
16:53 UtahDave timoguin++
16:54 tollmanz Thanks folks! I definitely have new direction now.
16:59 harobed_ joined #salt
17:00 gasbakid joined #salt
17:06 diegows joined #salt
17:08 iShming Making some sls files over here.  Wondering about installing and setting up an outbound mail sender through php on a minion.  Not finding the "state" for it.  ?
17:10 jsaxon joined #salt
17:10 jsaxon Don't know why I dropped off.
17:11 jsaxon repeating.  How do I tell my minion to allow the php mail() command succeed?  I'm not seeing a states.sendmail ?
17:11 jsaxon or states.smtp?
17:12 timoguin jsaxon, you'd need to write a state for it.
17:13 timoguin you can use pkg.installed to make sure it's installed, file.managed to put the config files in place, service.running to start the service
17:13 sine_nitore_w joined #salt
17:19 junedm joined #salt
17:21 iShming joined #salt
17:23 junedm1 joined #salt
17:23 junedm1 left #salt
17:26 flebel joined #salt
17:26 iShming timoguin: Got it. Thanks!
17:26 jfzhu_us joined #salt
17:26 timoguin iShming, good. :)
17:28 oz_akan_ joined #salt
17:31 bhosmer joined #salt
17:32 UtahDave joined #salt
17:39 JasonSwindle joined #salt
17:43 junedm joined #salt
17:47 martoss joined #salt
17:49 bhosmer joined #salt
17:55 mgw joined #salt
17:56 druonysus joined #salt
17:59 nliadm where can I put external pillars? the newest docs make reference to 'extension_modules', but that's not in the list of master configuration options
18:01 timoguin nliadm, i'm using the git backend for external pillar
18:01 timoguin ext_pillar:
18:01 timoguin - git: master git+ssh://repo_url.git
18:02 nliadm right, but I want to write my own, where do I put the module
18:02 timoguin ah
18:03 pcurry_nomi joined #salt
18:03 timoguin https://github.com/saltstack/salt/tree/develop/salt/pillar
18:03 timoguin looks like it'd go under there
18:04 nliadm https://salt.readthedocs.org/en/latest/topics/development/external_pillars.html#location it talks about another place, there
18:04 pdayton joined #salt
18:04 nliadm I don't know if that has a default setting or not
18:05 sroegner joined #salt
18:06 oz_akan_ joined #salt
18:06 gasbakid_ joined #salt
18:06 rgbkrk joined #salt
18:07 timoguin nliadm, i *think* that's talking about the _modules directory
18:07 nliadm hm.
18:07 timoguin just add that folder to your states adn it will look there for custom modules by default
18:07 nliadm okay, thanks
18:07 timoguin so looks like you should put it under _modules/pillar
18:14 cdcalef joined #salt
18:14 \ask joined #salt
18:15 eculver joined #salt
18:17 danielbachhuber joined #salt
18:26 pcurry_nomi joined #salt
18:26 MTecknology why, salt? why?  http://dpaste.com/1524280/
18:28 druonysus joined #salt
18:28 druonysus joined #salt
18:36 druonysus joined #salt
18:41 MTecknology Apparently this happens when I create /etc/salt/minion.d/{master,id} instead of sticking those directly in /etc/salt/minion
18:42 pengunix joined #salt
18:42 MTecknology derp... the files need to be .conf
18:43 vespakoen joined #salt
18:46 patrek joined #salt
18:47 martoss joined #salt
18:52 ksk joined #salt
18:52 nkuttler joined #salt
18:52 nkuttler joined #salt
18:54 ede joined #salt
18:57 smccarthy joined #salt
19:04 pcurry_nomi joined #salt
19:12 blarghmatey_ joined #salt
19:18 rojem joined #salt
19:20 forresta joined #salt
19:23 matanya joined #salt
19:25 mgw is anybody managing buildbot setups with salt?
19:27 forresta mgw, looks like thre was some work for salt-cloud done with it if you're looking for a starting place: https://github.com/saltstack/salt-cloud-buildbot
19:27 forresta *there
19:30 mgw Yeah, I saw that
19:30 mgw forresta: ^
19:30 forresta cool
19:32 mgw that seems to be cloud centric… I was thinking more in terms of a salt-formula
19:32 forresta gotcha
19:37 kermit joined #salt
19:38 bhosmer joined #salt
19:39 kermit joined #salt
19:40 matanya joined #salt
19:45 matanya joined #salt
19:50 thrashr888 joined #salt
19:51 matanya joined #salt
19:53 danielbachhuber joined #salt
19:58 gasbakid_ joined #salt
20:07 btaitelb joined #salt
20:09 matanya joined #salt
20:11 gasbakid_ joined #salt
20:21 KoFFiE joined #salt
20:22 Ryan_Lane joined #salt
20:30 KoFFiE joined #salt
20:36 oz_akan__ joined #salt
20:40 ioni joined #salt
20:41 diegows joined #salt
20:44 esogas_ joined #salt
20:45 futurisk joined #salt
20:48 jefferai joined #salt
20:49 oz_akan_ joined #salt
20:52 isomorphic joined #salt
20:52 jY joined #salt
20:59 munderwo joined #salt
21:00 munderwo Hi all, I want to setup a virtualenv using salt on ubuntu. It needs build-essentials and python-devel and I was wondering if there is a way to just say "hey I want you to install these packages" rather than having to create a build-essentials stanza etc.
21:04 munderwo is is there a way to simplify this? http://dpaste.com/1524385/
21:07 bhosmer joined #salt
21:07 timoguin munderwo, yep, one sec
21:09 timoguin munderwo, http://dpaste.com/1524393/
21:09 timoguin that should work
21:11 munderwo ahhh.. much nicer! Also At installation time I need to run a command to setup the environment. I found cmd.run, but I only want to run that if a directory isn't there?
21:13 munderwo actually I think I found it :)
21:14 timoguin cool. :)
21:14 timoguin file.exists state?
21:15 esogas_ joined #salt
21:17 munderwo yeah, I just did cmd.run with the until parameter. … I need to pass stdin into the command? Im basically running a django syncdb and need to put a username, email and password in..
21:17 forresta munderwo, store that data inside pillar, then pass the pillar values via jinja data
21:18 forresta here's an example (granted it isn't cmd.run, but should give you an idea): https://gist.github.com/UtahDave/3785738
21:18 pengunix joined #salt
21:19 tollmanz joined #salt
21:19 munderwo righto, the issue is that I need to pass the user and password into the django syncdb command? so it prompts for it in the cmd.run?
21:19 Katafalkas joined #salt
21:19 forresta oh it's a prompt not a cmd line argument you can pass?
21:19 forresta hmm
21:19 forresta I haven't seen an example where someone does that.
21:20 forresta you might have to run an actual shell script which you've written that can handle that
21:23 timoguin actually there is a django module.
21:24 timoguin https://github.com/saltstack/salt/blob/develop/salt/modules/djangomod.py
21:24 timoguin hmm.... might only be in develop
21:24 timoguin http://docs.saltstack.com/ref/modules/all/salt.modules.djangomod.html#module-salt.modules.djangomod
21:24 timoguin there we go
21:25 timoguin munderwo, you should be able to do django.syncdb and pass the arguments properly
21:25 forresta munderwo
21:25 forresta https://github.com/terminalmage/djangocon2013-sls/blob/master/foo/app.sls#L72
21:25 munderwo ahhhh awsome!
21:25 forresta totally forgot about that, good catch timoguin
21:26 munderwo sweet! I thought there would be something in here that would do it. Seems a reasonably thing to have especially for django
21:30 pcurry_nomi joined #salt
21:33 blarghmatey joined #salt
21:35 tollmanz joined #salt
21:41 simonmcc joined #salt
21:44 nliadm so, _modules/pillar doesn't appear to be a real thing
21:51 JesseC joined #salt
21:53 timoguin nliadm, aw. :(
21:54 timoguin gotta roll. i'll be back later
21:56 markizano joined #salt
21:56 markizano Hi all.
21:56 markizano I'm having an issue with environments and issuing only certain changes to certain states in a specific environment.
21:57 oz_akan_ joined #salt
21:57 markizano My understanding is you can define a gitfs in /etc/salt/master config, we have only a single repository for the pillar, which only has one branch <master>.  We also have a single repository containing 5-6 branches for the states.
21:58 markizano I have been limiting us to just 1 top.sls in the master branch to rule them all.
21:58 pdayton joined #salt
22:01 markizano When I go to run salt-call state.highstate, how do I know which env it's going to execute?
22:01 markizano I *think* it's based on the pillar/top.sls:<environment>, but I'm not 100%
22:03 markizano The docs say that the minion can be configured to participate in only a specific environment based on /etc/salt/minion.
22:04 ajw0100 joined #salt
22:04 markizano I found the environment key, but I get errors about missing sls files in the custom environment, as if a branch was necessary in the pillar??
22:04 berto- joined #salt
22:05 pcurry_nomi joined #salt
22:08 william_20111 joined #salt
22:12 munderwo joined #salt
22:13 munderwo joined #salt
22:14 oz_akan_ joined #salt
22:19 ilush joined #salt
22:20 ilush Hi there!
22:21 ilush I'm trying salt-cloud from Epel repo and it seems to be broken
22:22 ilush ImportError: No module named libcloud.compute.types
22:22 ilush Can somebody guide me how to fix it?
22:22 sfvivek1 joined #salt
22:27 iShming joined #salt
22:33 pcurry_nomi joined #salt
22:36 forresta ilush, what release of salt cloud are you on versus salt?
22:37 ilush salt-cloud - 0.8.8-1; salt - 0.17.2-2
22:37 iShming joined #salt
22:38 forresta Ok, as far as I'm aware you need a newer release of salt cloud for 0.17.2, can you try the more recent release from pip?
22:38 clearclaw joined #salt
22:40 pcurry_nomi joined #salt
22:41 ilush Thanks a lot! I've removed rpm, installed from pip and now it seems to be working
22:41 forresta awesome
22:43 flebel joined #salt
22:43 clearclaw Is there a good/standard/best-practice way to may from a hostname/tag to the cloud provider to use when provisioning the instance (salt-cloud: AWS)?  eg I want hosts of name-type XXX in environment YYY to always be 2x.large, but in environment ZZZ they can be m1.medium etc...
22:44 clearclaw s/may/map/
22:49 forresta clearclaw, not that I've seen people discussiong. It might be worth bringing up on the mailing list.
22:51 pdayton joined #salt
22:54 timoguin joined #salt
22:55 flebel joined #salt
22:56 clearclaw forresta: Thanks.  Would be really nice for cost management.
22:56 forresta yea understandable
22:57 forresta 'yes I need a large instance to run this cron job please.'
22:58 clearclaw Or even: Yeah, DEV gets all small boxes, QA a bit bigger, and PROD actual RealLoadClass systems.
22:58 forresta right
22:59 kermit joined #salt
23:02 terminalmage joined #salt
23:05 drogoh joined #salt
23:06 sirtaj_ joined #salt
23:07 vipul joined #salt
23:07 scassidy joined #salt
23:08 pdayton joined #salt
23:14 bhosmer joined #salt
23:15 oz_akan_ joined #salt
23:16 flebel joined #salt
23:22 pdayton1 joined #salt
23:27 Sheco joined #salt
23:29 rojem joined #salt
23:33 flebel joined #salt
23:38 btaitelb joined #salt
23:46 pdayton joined #salt
23:52 oz_akan_ joined #salt
23:53 berto- joined #salt
23:57 ajw0100 joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary