Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-01-18

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 jacksontj anyone areound to merge that?
00:04 scott_w joined #salt
00:05 bersace joined #salt
00:09 jacksontj terminalmage: k, added the rename too :)
00:09 jacksontj Oh… that made the diff REALLY ugly :(
00:10 alunduil joined #salt
00:11 terminalmage jacksontj: I'll take a look
00:11 oz_akan_ joined #salt
00:13 jacksontj just pushed fix for jenkins failure
00:14 terminalmage jacksontj: actually I just got called to dinner, I will check on this and merge after I am done
00:14 jacksontj ok :)
00:14 jacksontj no worries :D
00:15 terminalmage thanks again for all the work
00:15 jacksontj np :)
00:15 jacksontj happy to contribute :D
00:15 jacksontj if you guys need help with the yum magics let me know-- we use lots of it ;)
00:17 jacksontj and the tests passed! woohoo!
00:40 kalloc joined #salt
01:02 strgcloud joined #salt
01:04 bhosmer joined #salt
01:15 oz_akan_ joined #salt
01:17 oz_akan__ joined #salt
01:19 kalloc joined #salt
01:25 MTecknology Is 271 states running on one box approaching "a lot"?
01:29 MTecknology basepi: This is turning into a really massive headache for our deployment and about seven projects that launched recently depend on this part going smoothly. If there's ANYTHING I can do to help figure out this issue, PLEASE, let me know what it is.
01:32 EWDurbin MTecknology: i have a few boxes that have over 500 states in a run.
01:32 EWDurbin MTecknology: i broke them down into a highstate every hour
01:32 EWDurbin and only call the important ones via 'state.sls' for an individual deploy
01:33 n8n joined #salt
01:33 EWDurbin it took a while to refactor a few states that "thought" they had a giant dependency tree
01:33 EWDurbin but it's worth it, because the critical things run wicked fast
01:35 MTecknology nice
01:35 Katafalkas joined #salt
01:35 EWDurbin our sudoers and user states are <5s
01:35 EWDurbin networkng and topology stuff is a little slower
01:35 EWDurbin and deploys are still ruby... sooooooooo.....
01:36 EWDurbin whaddya expect
01:37 n8n joined #salt
01:38 EWDurbin MTecknology: you can still be happy, cause i bet ya $0.02 the same thing in chef would take longer
01:40 kalloc joined #salt
01:41 MTecknology EWDurbin: not sure... 3hr per state.highstate for 120 states
01:41 EWDurbin 3 HOURS?!
01:41 MTecknology there's a bug and it's beating the piss out of me
01:42 MTecknology https://github.com/saltstack/salt/issues/9743
01:43 EWDurbin wow MTecknology
01:43 EWDurbin i'm curious if LDAP might be a better solution here
01:43 EWDurbin that's a really large corpus of users and groups
01:44 MTecknology Those 'are' ldap users
01:44 MTecknology AD, but I speak to it with ldap
01:44 EWDurbin happy to be free of AD
01:44 EWDurbin :)
01:45 MTecknology We're actually moving TO it... :(
01:45 EWDurbin whew, yeah i can't help you on this from a salt perspective.
01:45 EWDurbin sorry MTecknology.
01:46 EWDurbin MTecknology: PM me your email and i'll email you a bit of Python/BASH i used once to yank and mirror AD users/groups into openldap
01:46 MTecknology it's a bug somewhere, something needs to be fixed, not sure where
01:46 EWDurbin :-p
01:46 * MTecknology @ubuntu.com
01:46 * EWDurbin nods
01:47 MTecknology I'm public enough... :P
01:47 EWDurbin at a previous job, i despised the whole AD thing so hard i wrote some mirroring infr and some SASL crap
01:47 MTecknology nice
01:47 EWDurbin just so i could setup LDAP auth the "Easy Way" (TM)
01:47 MTecknology we have AD and LDAP and they actually do stay in sync
01:47 Eugene o.O
01:48 EWDurbin also, it allowed meta groups that didn't exist in AD for handling subgroups that corporate IT woudn't support
01:48 EWDurbin which is what it sounds like you're doing
01:48 MTecknology I'm actually excited for AD. LDAP wasn't done properly and is too stuck into this environment to really be ripped out, fixed, or replaced
01:49 EWDurbin oh man, i used to have a screencap of the AD tree at $PREVJOB
01:49 EWDurbin it was way worse than anything i've ever seen
01:49 MTecknology We also got to design AD intelligently from the beginning
01:49 * EWDurbin is internally satisfied to hear that
01:49 MTecknology It's a little bit of a mess, but it's done as well as windows can do anything
01:50 MTecknology AD is honestly the only think about Windows or Microsoft that I actually like
01:50 EWDurbin it's not *bad*
01:50 EWDurbin but it can be truely fucked
01:50 EWDurbin just as much as any directory i suppose
01:51 Whissi MTecknology: You mentioned >30.000 users... does the minion really query for >30.000 users or does the minion only query for the 5 users, which takes so much time?
01:51 MTecknology Whissi: it queries them all
01:51 Whissi Why? :)
01:51 MTecknology dunno, that's the bug
01:51 mgw joined #salt
01:51 EWDurbin thinking it might be "{% for user, attr in pillar['users'].items() %}
01:51 EWDurbin "
01:52 Whissi Can you show us the pillar value?
01:52 Whissi Where does the minion know about the 30k users?
01:52 MTecknology it's joined to AD and can authenticate AD users
01:52 fllr joined #salt
01:52 MTecknology EWDurbin: coming right up
01:52 EWDurbin AHHHHHHH
01:53 EWDurbin so it seems it could be in user.present
01:53 MTecknology it very well could be
01:53 MTecknology the user.present are mostly AD users
01:54 EWDurbin MTecknology: could you $(time getent passwd | wc)
01:54 EWDurbin just out of curiousity
01:54 EWDurbin on some rando-box
01:54 Whissi (with a cold cache)
01:55 EWDurbin great point Whissi
01:55 MTecknology it's in user.present and group.present and before pulling any state files that it hangs like that
01:56 MTecknology http://dpaste.com/1557128/
01:56 MTecknology that only grabbed 1,018 users....
01:57 EWDurbin hrmmmmm
01:57 MTecknology in that bug, there's approx. 3-5 seconds delay between each query
01:58 Whissi pillar['users']... contains what? Only the 3-5 users?
01:58 MTecknology yup
01:59 MTecknology err.... that's the wrong pillar
01:59 davet joined #salt
02:00 EWDurbin okay, salt/states/user.py is a bit too much for me right now
02:00 MTecknology {% for user, attr in pillar['admin-users'].items() %}
02:01 MTecknology ^ ya... I changed that at some point, that's the right pillar
02:01 cocoy1 joined #salt
02:01 Whissi But still only 3-5...
02:01 MTecknology EWDurbin: but... :(   I was hoping you were going to solve it!
02:01 MTecknology ya
02:01 EWDurbin hahah
02:01 EWDurbin i'm happy to take a look
02:01 EWDurbin i have some BIGDATA ldap infra i can play with tomorrow
02:01 EWDurbin but
02:01 EWDurbin Friday
02:02 EWDurbin etc
02:02 EWDurbin etc
02:02 EWDurbin curious now how much less efficient samba is for this
02:02 MTecknology I don't mind the OT from dealing with these insanely long executions
02:02 Whissi MTecknology: And you have also verified (e.g. looked at nslcd) that the minion is *really* querying more than these users (e.g. thousands...)?
02:02 EWDurbin hahaha
02:03 MTecknology Whissi: I just connected to the hanging process with strace and saw that giant pile of stuff very slowly spitting out
02:03 MTecknology We have >30,000 users, but it's possible it's only querying 1k of them like getent showed
02:04 EWDurbin MTecknology: hate to be that guy... and then just drop out
02:04 MTecknology this is interesting....
02:04 EWDurbin but i'm curious what you're trying to acomplish here
02:04 Whissi Yeah, now I understand why EWDurbin said that's maybe caused by user.present
02:04 MTecknology EWDurbin: I have salt 100% deploying servers for me, but more than just deploying the server needs to be done
02:04 EWDurbin :-p
02:04 EWDurbin for sure!
02:05 EWDurbin users and access!
02:05 MTecknology something really interesting is happening.... hold on a minute
02:05 MTecknology well.... a few minutes
02:05 EWDurbin *famous last words*
02:05 EWDurbin ;)
02:05 EWDurbin gotta jet
02:05 MTecknology I think something magic has been noticed
02:05 MTecknology you don't wanna miss this, brah
02:05 EWDurbin wcfb
02:05 MTecknology hm?
02:05 EWDurbin (will check from bar)
02:06 MTecknology ah
02:06 EWDurbin mah phone did an irc once
02:06 EWDurbin ;)
02:06 MTecknology I just got excited
02:19 mgw joined #salt
02:19 MTecknology EWDurbin: Whissi: not cold - http://dpaste.com/1557132/
02:20 MTecknology I'm running user and group on it cold
02:21 ndrei joined #salt
02:21 Whissi 11min from a hot cache is... well.. not good :)
02:23 Dinde joined #salt
02:24 lahwran joined #salt
02:27 MTecknology this is getting more interesting
02:28 MTecknology I'm thinking that the issue is most definitely not salt but rather a system setting
02:28 jfzhu_us joined #salt
02:29 MTecknology granted, I don't think salt should be caching all users
02:32 n8n joined #salt
02:33 MTecknology Whissi: ya- even cold, getent passwd is 3sec, getent group takes 12min
02:33 MTecknology to return 303 lines...
02:33 Whissi Yup, that's the problem.
02:34 ndrei joined #salt
02:35 MTecknology why the crapper is it taking that long?... :P
02:35 Whissi Ask your system administrator :p
02:35 taion809 joined #salt
02:36 Whissi If you are lucky, it is the LDAP server.
02:36 MTecknology Whissi: the ad admin or the linux admin?
02:37 druonysuse joined #salt
02:37 Whissi Try to query the LDAP server directly from this box to see if this is slow too or if it is just nslcd
02:38 Whissi Is there a different between a cold and a hot cache?
02:39 MTecknology doesn't seem to be
02:39 MTecknology I don't know jack about querying ldap...
02:39 Whissi So when you run getent twice... both will take 11min?
02:40 kalloc joined #salt
02:40 MTecknology It didn't reach 11min yet, but seems to
02:41 ajw0100 joined #salt
02:42 n8n joined #salt
02:47 EWDurbin MTecknology sounds like an unsurprising amount of samba overhead
02:47 fllr joined #salt
02:47 MTecknology EWDurbin: this isn't samba
02:47 EWDurbin oh, issue said samba
02:48 EWDurbin youre configured to ldap directly?
02:48 MTecknology yup
02:48 MTecknology nscd and nslcd -- samba uses that
02:51 Whissi MTecknology: nslcd does no caching at all.
02:52 Whissi It is recommended to use nscd, too... nscd will provide caching.
02:52 MTecknology both are on there
02:52 Whissi If both are on, turn on logging for nscd and see if you get cache hits or nit.
02:53 ConceitedCode joined #salt
02:54 gmtech_ joined #salt
02:54 AdamSewell joined #salt
02:55 MTecknology it doesn't look like getent group is going through nscd
02:56 MTecknology getent passwd seems to be - but I could be completely wrong
02:56 Whissi Well, this would be another problem (if nscd isn't used/not caching).
02:56 Whissi However, querying 300 groups shouldn't take 11min.
02:57 Whissi If you don't speak LDAP, ask your LDAP guy for help.
02:57 Whissi I would start with a perl/python script which I would run on the client to query the LDAP server.
02:57 MTecknology LOLOLOL!!!!
02:58 MTecknology our "ldap admin" is the dumbest fucking box of rox the world ever tried to get rid of
03:00 Whissi If you are familiar with Python/Perl... you should be able to do it on your own after reading some tutorials (you really just need to query like nslcd, the details you need to know should be in you nslcd configuration file)
03:02 Whissi But from what you have written I would wonder if the direct query won't show the same problem. And if it shows the same problem, you would have to talk to the LDAP guy.. :>
03:04 MedicalJaneParis would salt break if i turned on two factor auth with google authenticator?
03:05 MedicalJaneParis commands are sent to minions through ssh right?
03:05 gmtech joined #salt
03:06 Whissi Only when you use salt SSH... per default it uses ZeroMQ
03:06 lahwran joined #salt
03:06 MedicalJaneParis what i thought, thanks
03:11 MTecknology Whissi: heh.... nscd -d  running debug-level 5   http://dpaste.com/1557180/
03:11 MTecknology so, nslcd is using nscd, but something ugly there
03:12 Whissi nslcd should never use nscd... the system will use nscd which will use nslcd if I am not wrong :)
03:12 MTecknology oh
03:13 MTecknology then... that is happening?
03:14 MTecknology ldapsearch -H ldap://ad.domain.tld:389 -D 'DOMAIN\mlustfie' -b 'dc=ad,dc=domain,dc=tld' -W '(objectClass=group)'  <-- 17 seconds
03:14 MTecknology almost 18
03:15 MTecknology in nslcd.cond I have   filter group (objectClass=group)
03:15 ndrei joined #salt
03:16 MTecknology Whissi: so... it seems that the issue is nslcd?
03:17 anuvrat joined #salt
03:18 MedicalJaneParis anyone know of any formulas for download/installing packages for debian/ubuntu?
03:18 MTecknology ooooooh.....................
03:18 MTecknology my brain sparked
03:20 Whissi MTecknology: Try to run nslcd in debug mode (--debug)
03:21 MTecknology this too... http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695044
03:23 MTecknology nslcd is spamming the crap outta my screen
03:23 oz_akan_ joined #salt
03:23 ndrei joined #salt
03:23 Whissi MedicalJaneParis: You know https://github.com/saltstack-formulas ?
03:24 MTecknology Whissi: getent group is looking up all members of the groups
03:24 MedicalJaneParis Whissi: yep
03:24 MedicalJaneParis i should clarify, downloading source, configure, etc
03:25 MTecknology Whissi: I found the correct bug... this might be my issue... http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730053
03:26 Whissi MedicalJaneParis: Formulars for working with source packages? Haven't seen one, but I also have never looked for one.
03:26 davet joined #salt
03:31 Whissi MTecknology: It is hard to believe that for example user "foo" should be in group "bar" (like 30k other users) and that nslcd will query all the other users in group "bar"...
03:34 MTecknology Whissi: I'll show ya something potentially very interesting
03:36 MTecknology eventually......
03:37 MTecknology I'm pretty sure youtube ads are no longer placed on videos unless the ad is longer than the video itself
03:38 MTecknology I need to wait 12min before I can show this....
03:39 MTecknology Whissi: pm ok?
03:39 Whissi yup
03:40 kalloc joined #salt
03:56 psyl0n joined #salt
03:57 fllr joined #salt
03:58 n8n joined #salt
04:04 rojem joined #salt
04:04 oz_akan_ joined #salt
04:05 rojem joined #salt
04:05 rojem joined #salt
04:06 rojem joined #salt
04:07 rojem joined #salt
04:07 Linz joined #salt
04:11 ndrei joined #salt
04:17 Dale22 joined #salt
04:19 Dale22 left #salt
04:30 forresta joined #salt
04:39 ajw0100 joined #salt
04:40 kalloc joined #salt
04:44 oz_akan_ joined #salt
04:55 darrend joined #salt
04:56 Psi-Jack joined #salt
05:01 dancat joined #salt
05:08 Sypher joined #salt
05:12 mgw joined #salt
05:35 Katafalkas joined #salt
05:37 beardo_ joined #salt
05:40 kalloc joined #salt
05:42 Marion_ joined #salt
05:50 ml_1 joined #salt
06:00 jfzhu_us joined #salt
06:11 lahwran joined #salt
06:13 zzzirk joined #salt
06:15 davet joined #salt
06:25 Whissi_ joined #salt
06:28 Psyke joined #salt
06:37 fllr joined #salt
06:39 fllr joined #salt
06:51 tinuva joined #salt
06:51 srage joined #salt
07:07 gildegoma joined #salt
07:11 SantaDoge joined #salt
07:22 anuvrat joined #salt
07:37 Jahkeup joined #salt
07:41 oz_akan_ joined #salt
07:57 jeddi joined #salt
08:03 DaveQB joined #salt
08:09 fllr joined #salt
08:11 yaru22 joined #salt
08:14 DaveQB joined #salt
08:18 Katafalkas joined #salt
08:36 fllr joined #salt
08:39 _fllr_ joined #salt
08:41 fllr joined #salt
08:42 oz_akan_ joined #salt
08:49 kalloc joined #salt
08:57 kalloc joined #salt
09:06 harobed_ joined #salt
09:18 njpatel joined #salt
09:18 ndrei joined #salt
09:39 fllr joined #salt
09:40 Teknix joined #salt
09:42 oz_akan_ joined #salt
09:49 xinkeT joined #salt
09:58 Ryan_Lane joined #salt
09:58 Tekni joined #salt
10:01 indymike joined #salt
10:01 tempspace joined #salt
10:02 bersace joined #salt
10:02 n8n joined #salt
10:02 sashka_ua joined #salt
10:03 luminous joined #salt
10:03 nhubbard joined #salt
10:03 rmt joined #salt
10:04 jpihl joined #salt
10:04 rhand joined #salt
10:04 _ikke_ joined #salt
10:07 scott_w joined #salt
10:11 Niru joined #salt
10:14 [vaelen] joined #salt
10:17 nhubbard joined #salt
10:23 Psyke joined #salt
10:39 fllr joined #salt
10:43 oz_akan_ joined #salt
10:45 kalloc joined #salt
10:50 njpatel joined #salt
10:51 yomilk joined #salt
10:52 scott_w joined #salt
10:59 ajw0100 joined #salt
11:24 psyl0n joined #salt
11:26 psyl0n joined #salt
11:34 scott_w joined #salt
11:38 scott_w_ joined #salt
11:39 fllr joined #salt
11:40 zooz joined #salt
11:41 mrwho joined #salt
11:44 oz_akan_ joined #salt
11:45 diegows joined #salt
11:46 oz_akan__ joined #salt
11:53 nkuttler hrm, what's the fastest option to install a local cloud to play with salt-cloud? i was thinking openstack inside kvm/qemu boxes..
11:54 nkuttler if it's too much work i can just spin up 'real' cloud servers, just looking for a few opinions
12:01 n8n_ joined #salt
12:04 martoss joined #salt
12:07 martoss1 joined #salt
12:26 sroegner joined #salt
12:31 martoss joined #salt
12:36 martoss joined #salt
12:37 martoss1 joined #salt
12:39 fllr joined #salt
12:43 harobed joined #salt
12:46 oz_akan_ joined #salt
12:52 elfixit1 joined #salt
12:57 martoss joined #salt
12:58 giantlock joined #salt
12:59 jslatts joined #salt
13:00 gnu-man joined #salt
13:02 zzzirk joined #salt
13:08 apergos joined #salt
13:14 [diecast] joined #salt
13:15 martoss joined #salt
13:15 martoss joined #salt
13:23 cods joined #salt
13:33 martoss joined #salt
13:39 fllr joined #salt
13:42 jslatts joined #salt
13:43 luminous joined #salt
13:47 oz_akan_ joined #salt
13:57 psyl0n joined #salt
13:59 MedicalJaneParis joined #salt
14:08 ConceitedCode joined #salt
14:17 fllr joined #salt
14:21 oz_akan_ joined #salt
14:21 diecast joined #salt
14:23 gnu-man joined #salt
14:39 fllr joined #salt
14:40 scott_w joined #salt
14:40 [diecast] joined #salt
14:44 jslatts joined #salt
14:47 ckao joined #salt
14:58 psyl0n joined #salt
15:01 fllr joined #salt
15:03 fllr joined #salt
15:03 markm joined #salt
15:07 martoss joined #salt
15:27 quickdry21 joined #salt
15:28 marcel joined #salt
15:33 yaru22 joined #salt
15:39 fllr joined #salt
15:42 alekibango joined #salt
15:42 porri joined #salt
15:42 d10n_ joined #salt
15:44 CheKoLyN joined #salt
15:44 darrend_ joined #salt
15:50 marcel left #salt
15:51 martoss joined #salt
15:51 martoss1 joined #salt
15:52 giantlock joined #salt
15:52 sashka_ua joined #salt
15:52 Xiao joined #salt
15:52 analogbyte joined #salt
15:52 lynxman joined #salt
15:52 monokrome joined #salt
15:52 mordred joined #salt
15:52 eightyeight joined #salt
15:52 zz_cro joined #salt
15:52 malinoff joined #salt
15:52 travisfischer joined #salt
15:52 Hefeweizen joined #salt
15:52 fxhp joined #salt
15:52 homelinen joined #salt
15:52 rci joined #salt
15:52 SEJeff_work joined #salt
15:52 terminalmage joined #salt
15:52 ecdhe joined #salt
15:52 MTecknology joined #salt
15:52 joonas joined #salt
15:52 CheKoLyN Hello all,  has anyone had any luck removing the  "salt-cloud"  Warnings about the he new 'default_path' argument
15:53 CheKoLyN ?
15:55 Teknix joined #salt
15:58 giantlock joined #salt
15:58 sashka_ua joined #salt
15:58 Xiao joined #salt
15:58 analogbyte joined #salt
15:58 lynxman joined #salt
15:58 monokrome joined #salt
15:58 mordred joined #salt
15:58 eightyeight joined #salt
15:58 zz_cro joined #salt
15:58 malinoff joined #salt
15:58 travisfischer joined #salt
15:58 Hefeweizen joined #salt
15:58 fxhp joined #salt
15:58 homelinen joined #salt
15:58 rci joined #salt
15:58 SEJeff_work joined #salt
15:58 terminalmage joined #salt
15:58 ecdhe joined #salt
15:58 MTecknology joined #salt
15:58 joonas joined #salt
15:59 oz_akan_ joined #salt
15:59 blast_hardcheese joined #salt
16:00 rojem joined #salt
16:01 oz_akan_ joined #salt
16:07 sroegner joined #salt
16:10 elithrar joined #salt
16:12 vu joined #salt
16:15 ravibhure joined #salt
16:16 fllr joined #salt
16:17 _fllr_ joined #salt
16:29 rojem joined #salt
16:30 jfzhu_us joined #salt
16:36 jfzhu_us1 joined #salt
16:39 fllr joined #salt
16:44 sroegner joined #salt
16:48 ndrei_ joined #salt
17:01 oz_akan_ joined #salt
17:04 srage joined #salt
17:07 mgw joined #salt
17:20 cachedout joined #salt
17:20 AviMarcus joined #salt
17:25 mgw joined #salt
17:37 davet joined #salt
17:43 anuvrat joined #salt
17:50 scott_w joined #salt
17:51 psyl0n joined #salt
17:52 Dale22 joined #salt
17:52 martoss joined #salt
17:54 quickdry21 joined #salt
18:02 oz_akan_ joined #salt
18:04 Whissi joined #salt
18:09 stotch joined #salt
18:09 jeremyBass joined #salt
18:11 harobed joined #salt
18:12 harobed joined #salt
18:14 scott_w joined #salt
18:18 matanya joined #salt
18:19 davet joined #salt
18:20 alekibango joined #salt
18:20 MedicalJaneParis joined #salt
18:25 ajw0100 joined #salt
18:26 njpatel joined #salt
18:29 mgw joined #salt
18:30 martoss joined #salt
18:33 UtahDave joined #salt
18:40 jacksontj joined #salt
18:46 oz_akan_ joined #salt
18:47 MedicalJaneParis does states.user password support ubuntu?
18:47 MedicalJaneParis i assume its just updating /etc/shadow?
18:48 nkuttler i'd assume it does whatever is right, but just try it and see
18:49 nkuttler but i didn't even know you can even set a password..
18:52 mgw joined #salt
18:55 nkuttler MedicalJaneParis: right, there's things like the shadow module etc. you'll have to pick whatever is right for you
18:57 ndrei joined #salt
18:57 steve1 is there a way with jinja to do a regex match?  i.e.: {% if grains[host].re_match(/^prod\d+$/) %}
18:59 kalloc joined #salt
19:01 jacksontj_ joined #salt
19:02 quickdry21 joined #salt
19:03 nkuttler MedicalJaneParis: my bad btw.. i was thinking of the execution module..
19:03 nkuttler steve1: the #pocoo people probably know
19:04 cyrusdavid joined #salt
19:04 alekibango joined #salt
19:07 MedicalJaneParis all good, i'm setting up three-factor auth but trying to figure out how to automate a deploy user with a password
19:07 steve1 thanks nkuttler, will do.
19:07 yano joined #salt
19:08 Marion_ joined #salt
19:09 martoss joined #salt
19:09 Jahkeup joined #salt
19:15 cachedout joined #salt
19:27 martoss joined #salt
19:29 martoss1 joined #salt
19:35 AviMarcus left #salt
19:36 rojem joined #salt
19:41 n8n joined #salt
19:47 aranhoide joined #salt
19:53 aranhoide importing `from salt.client import LocalClient` hijacks the Python default logging for the process
19:53 aranhoide ??
19:54 cachedout joined #salt
19:57 jslatts joined #salt
19:57 forresta joined #salt
19:58 Mua joined #salt
19:59 jacksontj joined #salt
20:01 ajw0100 joined #salt
20:02 alekibango joined #salt
20:11 ndrei joined #salt
20:23 martoss joined #salt
20:24 jslatts joined #salt
20:29 lpmulligan joined #salt
20:33 Thiggy joined #salt
20:36 felixhummel joined #salt
20:38 rojem joined #salt
20:38 cachedout joined #salt
20:39 aleszoulek joined #salt
20:40 mgw joined #salt
20:40 MedicalJaneParis does for loop in sls file support break?
20:41 MedicalJaneParis its jinja by default right?
20:42 oz_akan_ joined #salt
20:42 MedicalJaneParis suppose i can use if and set together
20:46 martoss joined #salt
20:57 hunter joined #salt
21:07 ndrei joined #salt
21:14 jdenning joined #salt
21:19 zzzirk joined #salt
21:20 aleszoulek joined #salt
21:20 forresta joined #salt
21:20 gnu-man joined #salt
21:20 kermit joined #salt
21:20 nocturn joined #salt
21:20 zloidemon joined #salt
21:20 Valdo joined #salt
21:20 shine joined #salt
21:20 sgviking joined #salt
21:20 EWDurbin joined #salt
21:20 austin987 joined #salt
21:20 fivethreeo joined #salt
21:20 fxdgear joined #salt
21:20 Damoun joined #salt
21:20 djinni` joined #salt
21:20 fishpen0 joined #salt
21:20 nebuchadnezzar joined #salt
21:20 dccc joined #salt
21:20 philipsd6 joined #salt
21:20 mattmtl joined #salt
21:22 kermit joined #salt
21:25 scoates is there a way for me to cmd.run with a subshell? like this: http://paste.roguecoders.com/p/f56f2aff76dbc694da667f787f97e10e.txt
21:28 scoates found a workaround, I think
21:30 blast_hardcheese joined #salt
21:32 sroegner joined #salt
21:34 thrashr888 joined #salt
21:37 scoates :stare: CommandExecutionError: Unable to run command: [Errno 12] Cannot allocate memory
21:39 cachedout joined #salt
21:41 nkuttler woah.. aws is a real pita to configure..
21:52 nkuttler how do i actually get the image name from a page like https://aws.amazon.com/marketplace/pp/B00AA27RK4/ref=srh_res_product_title?ie=UTF8&amp;sr=0-2&amp;qid=1390081926124 ?
21:54 higgs001 joined #salt
21:54 nkuttler ah, debian lists them..
21:54 nkuttler but only squeeze..
21:54 scoates having a weird requisite failure. Any ideas, anyone? http://paste.roguecoders.com/p/c998cd3eafc0b381921ca50577d36b0c.txt
21:56 nkuttler scoates: require pkg.installed: foo
21:58 scoates ah. there was a complaint where it failed to install further up. it should already be installed; I see.
21:58 scoates nkuttler: the docs say to use `pkg`
21:58 nkuttler scoates: really? hmmm.. i use pkg.installed and it works for me
21:59 scoates pkg must include pkg.installed or something? <shrug/>
21:59 nkuttler scoates: order in the sls file doesn't really matter, but there's some auto order module or something
21:59 scoates http://docs.saltstack.com/ref/states/requisites.html
21:59 nkuttler scoates: i see
22:02 nkuttler bah.. The image id '[ami-8e826af9]' does not exist..
22:03 martoss joined #salt
22:03 gnu-man joined #salt
22:07 aranhoide joined #salt
22:07 gnu-man_ joined #salt
22:08 joshe joined #salt
22:08 whiteinge joined #salt
22:08 rojem joined #salt
22:09 zz_Cidan joined #salt
22:12 hunter scoates: I must beg to disagree with nkuttler - 0.17 or 0.16 made order important, IE you can now elide most require statements within and SLS file by just ordering them naturally - IE, pkg then config then service
22:13 * scoates nods
22:13 hunter nkuttler: sorry, but that one feature let me be comfortable choosing salt over ansible.
22:14 hunter has anyone seen a pillar external classifier using etcd?
22:16 nkuttler hunter: oh, that could be.. i was basically just maintaining my initial salt installs the last year, haven't kept up to date
22:17 nkuttler so the auto order is enable by default?
22:19 hunter I know it is in 0.17 - It might be in 0.16 - I'd have to check the release notes.
22:20 hunter Release notes say it was the default in 0.17
22:20 hunter http://docs.saltstack.com/topics/releases/0.17.0.html
22:21 nkuttler nice
22:21 nkuttler yeah, ordering was kinda painful when i started ;)
22:22 hunter Like I said I was going to have to try ansible instead when I read that salt had gained that feature.
22:22 hunter I actually like that ansible and salt are so similar in ways - it keeps them both honest
22:23 jeremyBass left #salt
22:28 aranhoide joined #salt
22:32 njpatel joined #salt
22:45 nkuttler at last. success.. spinning up an ec2 minion..
22:49 jeremyBass joined #salt
22:49 jeremyBass hello, what is the best way to inlucde a custom package?
22:49 nkuttler jeremyBass: custom package?
22:51 rojem joined #salt
22:51 jeremyBass @nkuttler Yes like pkg.installed: - pkgs: php but for a custom compiled thing like php ... i have been doing a cmd.run that is stateful, but doing a require: cmd.run: keep failing
22:52 nkuttler jeremyBass: depends on your os. i've hosted my own repos for Debian
22:52 jeremyBass well it's for centos
22:53 jeremyBass i am compiling nginx ..
22:53 nkuttler i don't know much about centos
22:53 elfixit joined #salt
22:55 jeremyBass well so .. what you are saying is if i wanted to do a custom thing like  `pkg.installed: - pkgs: custom_nginx` so i can require like - require:  - pkg: custom_nginx  i would need to host that compiled version?
22:55 nkuttler nono, it's just what i did
22:56 jeremyBass :) not sure if that means your not sure if you did was right or not
22:57 nkuttler http://docs.saltstack.com/ref/states/all/salt.states.pkg.html mentions local packages
22:57 nkuttler i don't think there's a right or wrong here :)
22:57 jeremyBass well i just want to do this the simple easy right way :D
22:58 hunter jeremyBass: I create (or copy from various locations) rpms, create a local yum repo on my net and use salt to add that "repo" to the minions.
22:59 jfzhu_us joined #salt
22:59 hunter I would consider this to be "simple" since I created that repo (actually 3 but ignore that) like 5 years ago and have been using it since.
23:00 nkuttler sigh. aws really doesn't seem to like me. this new instance still hasn't run the bootstrap script after 15 minutes..
23:00 jeremyBass makes sense hearing the short of it.. no idea how hard those steps would be.. seems to me that I would need to also figure out how to take the compiled nginx i make and then get to where you are talking about.
23:00 hunter Requirements are enough disk for the rpms + some metadata files for yum and a httpd service of some sort to shoot them out.
23:00 hunter jeremyBass: hold on
23:00 jeremyBass @hunter can do tk
23:04 jeremyBass wait..
23:05 hunter jeremyBass: https://gist.github.com/hunterm/487aba60a2bbeaa09522
23:05 jeremyBass but a compiled version of nginx would have paths set.. so ... that could lead to an issue later maybe.. right?
23:06 hunter I forgot that I wasn't doing naked createrepo (the yum command to create the metadata about the rpms that yum needs) but the concept is even easier with createrepo.
23:06 jeremyBass yeah i was readding that on http://www.openlogic.com/wazi/bid/296143/Quickly-create-custom-software-packages-with-FPM
23:06 hunter jeremyBass: if you set them to /home/build-user/thingIthoughtof/.sssh yes - if you aren't insane and pick sensible defaults then no.
23:07 hunter jeremyBass: EPEL (and even fedora) all have fairly extensive docs on what to put where. I generally follow that and suggest others do as well
23:08 jeremyBass well true.. sigh.. i want to just do the .sh and have that act the same lol..
23:08 hunter So config stuff goes in /etc/$NAME/$NAME.conf, /var/run/$NAME, /var/lib/cache/$NAME, whatnot.
23:09 hunter Data I like ot see in /srv/$NAME or somethign like that -but the pkg guildlines all say /var/lib/$NAME -- which I generaly use and then symlink that to /srv/$NAME
23:09 rojem joined #salt
23:09 jeremyBass got ya, tk .. makes sense..
23:09 puppet joined #salt
23:09 hunter Honestly its not that hard and you should resist ANY urges to "innovate" here - the are standards for a reason and I follow them even when I don't agree with them completely
23:10 troyready joined #salt
23:10 hunter Locally at this site (and any place I've ever worked) I reserve /usr/local paths for things that are NOT packaged - so rpms should generally NOT create paths there.
23:11 hunter /opt - meh. If you must.
23:11 jeremyBass yeah, all i want to do is have the compiled nginx to be stateful like doing the installed pkg ningx ... probably no way to server a package of github I'd be?
23:11 hunter I wouldn't - githug or the net will be down the next time you plan a maintenance weekend. :)
23:12 rojem joined #salt
23:12 jeremyBass hmm..
23:21 jalbretsen joined #salt
23:23 rojem joined #salt
23:27 lionel joined #salt
23:31 yaru22 joined #salt
23:32 quickdry21 joined #salt
23:38 ConceitedCode joined #salt
23:40 hunter_ joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary