Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-04-14

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 KyleG joined #salt
00:00 KyleG joined #salt
00:01 TyrfingMjolnir joined #salt
00:13 jeremyfelt joined #salt
00:16 fragamus joined #salt
00:17 bhosmer joined #salt
00:21 mgw joined #salt
00:23 srage joined #salt
00:25 srage joined #salt
00:26 bhosmer joined #salt
00:30 elfixit joined #salt
00:30 jeddi joined #salt
00:39 Eugene w00t. It's been a while since I've tried; pleasantly surprised that `salt '*' cmd.run "yum update -y"` doesn't vomit anymore.
00:43 Gareth Eugene: why use cmd and not the pkg module?
00:45 Eugene Because pkg.uptodate is not in 2014.1.0
01:00 stotch joined #salt
01:02 TyrfingMjolnir joined #salt
01:02 bhosmer joined #salt
01:03 elfixit joined #salt
01:09 kickerdog left #salt
01:11 bhosmer joined #salt
01:16 thayne joined #salt
01:20 bhosmer joined #salt
01:21 jeremyfelt joined #salt
01:22 mgw joined #salt
01:25 zain_ joined #salt
01:25 Vishnevskiy joined #salt
01:26 Vishnevskiy Hello, I was wondering what is the general convention for setting up a master's box? Is it possible to have a master enforce its own state?
01:26 Vishnevskiy aka users allowed to access the master box
01:32 fllr joined #salt
01:33 TyrfingMjolnir joined #salt
01:34 jalaziz joined #salt
01:36 rawvnode_ joined #salt
01:39 Eugene Vishnevskiy - a machine which is a Master can also be its own Minion, yes.
01:40 Vishnevskiy so would I install the minion on that box too
01:40 Vishnevskiy and just have states for the master's minion?
01:40 Eugene Yup, no different than any other.
01:40 Eugene You will need to keep in mind that operations which reboot a Minion(eg, kernel updates) would also reboot the Master
01:40 Eugene Especially if you have a state which affects the Master process itself ;-)
01:41 Eugene As for security, my professional advice follows the principle of least privilege: if users don't have a reason to have access to a box, keep 'em off it.
01:41 Eugene I lock access to my Master machine to only "super administrator" users, which is myself and one other person :-p
01:41 Eugene And shell access to the rest of my infrastructure is minimal.
01:42 Vishnevskiy makes sense =)
01:44 Vishnevskiy thanks for the advice
01:50 anitak joined #salt
02:06 sssslang left #salt
02:12 Cidan joined #salt
02:12 smcquay joined #salt
02:23 xl1 joined #salt
02:23 silenth joined #salt
02:27 silenth does anyone here have experience with salt-cloud?
02:28 mgw joined #salt
02:30 TyrfingMjolnir joined #salt
02:40 mgw joined #salt
02:40 faldridge joined #salt
02:53 Leech joined #salt
02:55 Gordonz joined #salt
02:59 dccc joined #salt
03:00 bhosmer joined #salt
03:02 fllr joined #salt
03:03 Leech joined #salt
03:07 thayne joined #salt
03:08 Leech joined #salt
03:15 Guest52362 silenth: yeah, I use it every day
03:16 ckao joined #salt
03:30 acabrera joined #salt
03:34 jchen joined #salt
03:38 acabrera joined #salt
03:42 smcquay joined #salt
03:42 Gordonz joined #salt
03:44 fllr joined #salt
03:51 mgw joined #salt
03:52 andrej Is there a (good?) reason that shadow.set_password doesn't modify the password again information?
03:52 andrej s/again/aging/
03:53 AdamSewell joined #salt
03:57 acabrera joined #salt
03:59 napper joined #salt
04:06 catpig joined #salt
04:13 googolhash joined #salt
04:21 elfixit joined #salt
04:30 Ryan_Lane joined #salt
04:33 Guest82659 I'm new to salt, and am trying to set up gitfs. I'm getting a strange error I can't quite figure out how to get past in my log when I start up my salt-master. The config options and error are at: https://gist.github.com/anonymous/4da3da0d4fe3eef78334 -- any ideas?
04:33 Guest82659 err
04:33 ixokai joined #salt
04:37 elfixit joined #salt
04:41 faldridge joined #salt
04:49 bhosmer joined #salt
05:02 viod joined #salt
05:04 viod joined #salt
05:17 MK_FG joined #salt
05:22 rushm0r3 joined #salt
05:24 fllr joined #salt
05:25 fllr joined #salt
05:26 jeremyBass1 joined #salt
05:27 jeremyBass1 left #salt
05:30 CeBe joined #salt
05:32 fllr joined #salt
05:41 anuvrat joined #salt
06:19 southquist Does anyone know about a good tool for validating yaml syntax, that can be used from CLI and maybe used together with jenkins?
06:27 wedgie joined #salt
06:27 bhosmer joined #salt
06:30 Nazca joined #salt
06:30 Nazca joined #salt
06:32 faldridge joined #salt
06:32 fllr joined #salt
06:34 thayne joined #salt
06:37 bhosmer joined #salt
06:43 ldlework joined #salt
07:00 harobed joined #salt
07:01 Kenzor joined #salt
07:05 arapaho joined #salt
07:07 ndrei joined #salt
07:08 it_dude joined #salt
07:09 gildegoma joined #salt
07:14 epcim joined #salt
07:18 kiorky joined #salt
07:30 machmalabala left #salt
07:31 ndrei joined #salt
07:32 fllr joined #salt
07:34 \ask joined #salt
07:36 thehaven joined #salt
07:42 anuvrat joined #salt
07:47 \ask joined #salt
07:51 viod joined #salt
07:55 Flusher joined #salt
08:02 topochan joined #salt
08:03 anuvrat joined #salt
08:16 \ask joined #salt
08:25 gildegoma joined #salt
08:25 bhosmer joined #salt
08:26 ndrei joined #salt
08:28 hola joined #salt
08:32 anuvrat joined #salt
08:32 fllr joined #salt
08:34 bram_ joined #salt
08:34 bram_ hey guys, I'm getting a traceback with a postgres state
08:35 bram_ can someone have a look, here's the error http://dpaste.com/1779074/
08:36 bram_ and here's my salt state: http://dpaste.com/1779076/
08:39 che-arne joined #salt
08:50 aleszoulek joined #salt
08:53 Nexpro joined #salt
08:54 giantlock_ joined #salt
09:01 micko joined #salt
09:07 bram_ hey guys is there a way to run a state before everything else?
09:07 bram_ I want to change my locale before doing anything else
09:07 bram_ looks like my postgres problems are related to locale problems
09:08 bhosmer joined #salt
09:15 KunFouFou joined #salt
09:15 SnGk joined #salt
09:16 SnGk Hi Everybody and bots ;-)
09:17 SnGk I'm new learner of SaltStack and i'm searching for 2 complementary things:
09:18 SnGk 1) is there solution to generate a random password when creating users throught SaltStack (I don't need to know the value because of the second thing)
09:19 SnGk 2) is there a solution to desactivate the password for an account, not the account itself (example with !x in /etc/password)
09:20 SnGk My needs are to allow an account to connect through ssh with key (that's already OK) but giving them a long password not active because I'll use libpam-ldap for having password for sudo.
09:20 derelm joined #salt
09:20 SnGk Could somebody help me ?
09:22 ph8 joined #salt
09:22 ph8 hi all
09:22 ph8 loving salt so far. My dream feature would be tail -f support, is there a way to achieve this?
09:23 xmj ph8: what do you want to achieve?
09:25 ph8 i want to watch a log file in real time
09:26 ph8 i have a syslog/forwarded syslog setup but it still requires page refreshes to watch the logs
09:26 ph8 my life would be easier if i could do it in salt, at least in the interim
09:32 fllr joined #salt
09:32 topochan joined #salt
09:33 SnGk I'm new learner of SaltStack and i'm searching for 2 complementary things:
09:33 SnGk 1) is there solution to generate a random password when creating users throught SaltStack (I don't need to know the value because of the second thing)
09:33 SnGk 2) is there a solution to desactivate the password for an account, not the account itself (example with !x in /etc/password)
09:33 SnGk My needs are to allow an account to connect through ssh with key (that's already OK) but giving them a long password not active because I'll use libpam-ldap for having password for sudo.
09:33 SnGk Could somebody help me ?
09:37 mgw joined #salt
09:42 bram_ SnGk, PasswordAuthentication no ?
09:43 donatello joined #salt
09:43 donatello is it possible to send commands to unaccepted minions?
09:44 donatello i basically need a way to verify a minion's identity
09:45 devx_ joined #salt
09:46 Mr_N joined #salt
09:46 AlcariTheMad joined #salt
09:46 ampex joined #salt
09:47 drogoh joined #salt
09:47 redondos joined #salt
09:47 rhand_ joined #salt
09:47 jcsp donatello: that's kind of a catch-22.
09:48 ze- joined #salt
09:48 jcsp although we've had a similar request come up internally at my day job
09:48 donatello jcsp: yeah, i am having machines launched by aws auto scale groups - these machines automatically need to register with salt. since they generate their own keys, its not clear how to do this.
09:49 jcsp I've thought about adding a mechanism to salt where minion join requests would come with a metadata blob, that way if you had an external token from your provisioner you could pass it through as authority.
09:49 jcsp nothing like that exists today though afaik
09:49 donatello jcsp: hmm. any workaround ideas?
09:51 jcsp you could hack something into the minion id, if you don't mind dirtying it — e.g. you could write an /etc/salt/minion from provisioner that set id to "987fgfs987-myminion" where the garbage is an authorizing token of some kind, then have a script on the master that auto-accepts anything with a valid authorizing token in the minion ID.
09:51 jcsp or you could have some external entity just manually take the public key from the minion and put it in the right place on the master
09:52 ikanobori the latter sounds pretty ok
09:52 jcsp or you could lock down your firewall and then enable auto-accept on the master so that anyone can join
09:52 hardwire joined #salt
09:53 jcsp auto-accept aka "no security" ;-)
09:53 kent joined #salt
09:55 donatello jcsp: another way, that i am playing around with - pre-generate keys pairs and store on S3. put the aws minions in an iam role, that allows access to the s3 bucket where the keys are stored. when it comes up, it picks a key in the bucket and tries to register with the minion. the salt master, has a cronjob that checks unaccepted key fingerprints and accepts it if the finger print is found in the pregenerated keys
09:55 donatello the autosign_file option looks promising - but its not possible to put key fingerprints there :(
09:56 donatello register with the master** - typo
09:56 jcsp are fingerprints a must?  copying the whole public key wouldn't be such a huge overhead
09:57 donatello i was thinking of a way to do this without the cronjob - if the master can use the autosign_file to accept minions on what keys they came with, this would be ok to do.
09:59 jcsp I guess you'd end up with a cronjob anyway for generating the autosign_file content from the S3 bucket
10:00 jcsp oh, I've just realised that autosign_file is minion IDs not keys, yuck!  never mind that
10:00 donatello yeah, having just minion IDs there, kind of sucks.
10:01 jcsp I think your idea to use S3 is reasonable, although I'd just copy the salt-generated IDs into S3 on minion startup, rather than pre-generating anything
10:02 Auroch joined #salt
10:02 otsarev joined #salt
10:02 donatello jcsp: ah that's a good idea :) i think i'm going to do that
10:03 viod joined #salt
10:03 donatello when an unaccepted minion comes up, just check the s3 bucket for the pubkey and accept it. Sounds good
10:11 masterkorp Hello
10:11 masterkorp is there any sls for iptables configuration ?
10:13 yomilk joined #salt
10:13 bhosmer_ joined #salt
10:14 Auroch left #salt
10:16 jalaziz joined #salt
10:18 SnGk left #salt
10:19 Auroch joined #salt
10:20 millz0r joined #salt
10:20 millz0r yo
10:20 millz0r any of you ever got that
10:20 millz0r TypeError: argument of type 'bool' is not iterable
10:20 millz0r ?
10:21 millz0r im getting this randomly after running cmd.run
10:21 millz0r the cmd is running git fetch -p
10:21 millz0r what is interesting, only certain grains settings cause it to crash, otherwise it runs fine
10:21 millz0r left #salt
10:22 millz0r joined #salt
10:23 topochan joined #salt
10:24 martoss joined #salt
10:24 martoss Hey folks, how do I check if I'm still connected to my master (from the minion)?
10:28 Auroch joined #salt
10:32 millz0r I think you need to do it other way round
10:32 fllr joined #salt
10:33 Auroch left #salt
10:34 Auroch joined #salt
10:38 bram_ hey everyone, how do I fiugure out if a certain patch applied on patch is included in 2014.1.1? In particular this one: https://github.com/saltstack/salt/issues/2771
10:39 bram_ or rather https://github.com/saltstack/salt/commit/4c5bf0b00be414793efa22482fa1bde1fdb14be4
10:39 Auroch_ joined #salt
10:39 bram_ ah, I just answered my own question :) it's on that page that this one is in the v2014.1.1 version
10:40 Auroch joined #salt
10:43 Auroch left #salt
10:43 cow_ joined #salt
10:43 Auroch joined #salt
10:44 Shenril joined #salt
10:55 martoss millz0r, yeah but then my master requires a ssh connection to restart the minions.
10:55 millz0r does it?
10:55 millz0r you're using ssh-salt?
10:56 xunil joined #salt
10:56 millz0r what are you trying to do btw martoss ?
10:57 martoss I have a master with changing IP addresses and my minions hang every time I get reassigned a new address.
10:57 millz0r hmm
10:58 millz0r thats an interesting setup
10:58 martoss another option for me would be to restart them on regular basis via cron.
10:58 millz0r did you try messing with hosts file?
10:58 martoss in what way?
10:58 millz0r so 'salt-master' always points to your server?
10:58 grosjean c/lose
10:58 grosjean left #salt
10:58 millz0r not sure if you can configure minion to use it this way, but it works on my setup (with static IPs though)
10:59 millz0r 10.9.1.10  salt
10:59 millz0r a line like that in hosts file
10:59 martoss uhm, so it has a dyndns address, salt master thus always resolved to the current address (within lifetime of the dns record)
10:59 millz0r I see
10:59 millz0r I'd probably go with cron restarting minions
10:59 martoss ah, that brings me to an idea: I could monitor the dyndns address of salt master and if it changes restart the minion.
10:59 martoss :-)
11:00 millz0r yea you can do that :)
11:00 martoss didn't had thad idea in mind...
11:04 ndrei joined #salt
11:10 hhenkel Hi all, I'm currently struggling with a file source uri "salt://". Where do I have to put the file so it is found?
11:12 dRiN joined #salt
11:13 martoss hhenkel: its relative to your file_root
11:14 martoss so if you have salt://service/postfix/main.cf its in /srv/salt/service/postfix/main.cf if /srv/salt is your file root.
11:16 hhenkel martoss: okay, that is what I expected....any idea if that is the same for using gitfs? Or if there is a restriction of the depth of the directories?
11:17 hhenkel martoss: I currently got it like that for a "dev" branch but I keep getting the error that the file is not found.
11:20 gildegoma joined #salt
11:24 hhenkel martoss: okay, nevermind. It seems like I managed to add an unnecessary quote at the end of the line.... :(
11:24 eliasp is there a way to execute Python code using "cmd.exec_code" on Windows using the Python27 DLL shipped with Salt without having to install a separate Python interpreter…
11:24 eliasp I'd like to test some one-liners during development directly this way
11:30 martoss hhenkel, not one that i am aware of
11:32 fllr joined #salt
11:34 _fllr_ joined #salt
11:36 _fllr_ joined #salt
11:43 ph8 xmj: think the tail -f via salt sounds impossible?
11:43 xmj ph8: what is it you want to achieve?
11:46 masterkorp is there any sls for iptables configuration ?
11:46 ph8 i want to watch a log file in real time
11:46 ph8 xmj ^
11:49 eliasp masterkorp: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.iptables.html
11:49 xmj ph8: with *salt* ?!??!?!?
11:49 masterkorp thans
11:50 TyrfingMjolnir joined #salt
11:54 ph8 xmj: ideally
11:54 xmj that does not even make sense. to me.
11:55 ph8 i mean yes eventually i'd like to put some nice syslog forwarding etc in place, but for now i just want to tail one log file on one minion
11:55 topochan joined #salt
11:55 ph8 i spend a lot of my time pressing up and enter to see the last 50 lines of log
11:55 ph8 because my BOFH has only given us developers salt access to our integration environment machines
11:57 xmj tell your BOFH to stfu and give you root ssh access already.
11:57 xmj or better
11:57 xmj use salt to deploy your ssh key to /root/authorized_keys, disable all those nice configurations that actually make sense in /etc/ssh/sshd_config, restart sshd, and gain root.
11:57 eliasp ph8: well, if you have salt access, you most likely have enough permissions to get yourself SSH access there ;)
11:57 yomilk joined #salt
11:57 xmj It's not *rocket* science, are you a SysAdmin or what.
11:58 rocket joined #salt
11:59 mortis its not tragic, you have merlins magic!
12:04 ph8 #lolbro
12:04 ph8 i don't think that's what my BOFH wants me to do :p
12:04 Leech joined #salt
12:04 jakubek guys what is best aproach to manage a lot of different envs. its better to put everything into git repository and create branch for every env or there is better way to do this?
12:05 bhosmer_ joined #salt
12:05 anitak joined #salt
12:06 xmj ph8: sucks to be him for giving you access to a daemon that's running as ROOT
12:06 eliasp jakubek: one branch per env is the most simple approach although I'd recommend to use a different repo for top.sls
12:06 xmj 'tis like.. dude.. you don't trust me with ssh access.. yet you give me access to the Configuration Management System that's steering it.
12:07 jakubek i have two clients (4 nodes each) they are using the same state file and configuration files. now I want to change or add something to servers of one client without touching second client. my idea is to create branch for every client and then edit everything in proper brnach
12:07 eliasp jakubek: http://docs.saltstack.com/en/latest/topics/tutorials/gitfs.html#branches-environments-and-top-sls-files
12:08 jakubek eliasp: but there its called env (production, dev, test) but what abaout clients (these are not envs), should i take the same approach?
12:09 eliasp jakubek: that's what you use targetting in your top.sls for: http://docs.saltstack.com/en/latest/topics/targeting/
12:09 eliasp and http://docs.saltstack.com/en/latest/ref/states/top.html
12:09 jakubek i'm using targeting of course :)
12:09 jakubek but somethimes you need to add only one line per client
12:09 eliasp there you can define which env addresses which minions and which state is applied to which minion
12:09 jakubek and I dont want to use if's
12:10 jakubek in sls or configs
12:10 eliasp jakubek: sure, then just create a new branch off the existing one, add this branch in your top.sls and specify whatever else you want to do with this client then
12:10 eliasp jakubek: in this case, a client-specific branch might actually be the way to go…
12:11 eliasp jakubek: or use Pillars instead to get client-specific configuration values
12:11 eliasp jakubek: I think Pillars are generally the best approach to this…
12:11 eliasp jakubek: only in some corner-cases the branching might make more sense
12:15 jakubek im trying to think how to show you my situation :-)
12:16 rome joined #salt
12:19 rome joined #salt
12:19 jakubek now i have situation that i'm using puillars (with settings per client) and also using states and configs (same for all). but now i know that for client1 i need to add some feature to nginx (i will not need this feature for other clients, and i dont want to create ifs in sls or in config).
12:23 jakubek if i will use pillar and set nginx_enable_feature: 1 in client1 pillar. and also i will need to add nginx_enable_feature: 0 in other
12:25 eliasp jakubek: no, you won't… just create your state in a way to only act on feature == 1, otherwise do nothing…
12:25 eliasp no need to add a special case for the feature == 0 case…
12:27 srage_ joined #salt
12:27 eliasp that's a simple {% if pillar['foo'] == True %} your feature {% endif %}
12:27 _mel_ joined #salt
12:32 fllr joined #salt
12:37 rome joined #salt
12:37 jakubek eliasp: i'm not sure if its the best way. i need to rethink it.
12:37 eliasp jakubek: what kind of feature do you want to enable client-specific in your nginx state?
12:39 jakubek eliasp: at this moment im doing it like you said with if's but i found some problem with that ;-)
12:39 epcim joined #salt
12:41 eliasp jakubek: if you use branches just for such a single feature, you'll always have to take care to keep your branches in sync… probably much more error-prone than a single {% if …%} block …
12:41 jakubek but i cant when you are creating one generic config file for everyone it will have like M of ifs inside ;-)
12:42 eliasp jakubek: either that (but I don't see a problem with these ifs…)… or include another conf file which handles all the specific cases…
12:42 jakubek ah and its not only one if, firstly you need to check if this variable exsits in pillar then you can check if its true or not
12:43 jakubek eliasp: including other file it's also an option
12:45 goldstar joined #salt
12:45 eliasp jakubek: yes, either using Salt's/Jinja's "include" or native nginx includes…
12:46 jslatts joined #salt
12:46 goldstar I have a central log server, a spacewalk server, a production and a dev server. Can one salt master be used to manage the states of all these servers ?
12:46 eliasp goldstar: sure
12:47 eliasp goldstar: depending on the amount of states and data attached to them, you might be able to manage hundreds of servers with a single master…
12:48 jakubek eliasp: but it's not scarry when you add something to nginx.conf and then you need to test=True on all client servers to check if it worked or not?
12:48 jakubek and the you need to analyze output
12:48 jakubek when you have 2 clients its not a big deal
12:48 jakubek but when you have 300 servers
12:48 eliasp jakubek: well, that's why you have something like a dev, test, staging and base (production) environment…
12:48 goldstar eliasp: thanks. So I can just create the states and use whichever ones I need on the minion I presume
12:48 _mel_ joined #salt
12:49 asciihatingcat ph8, i agree with what the others said about the sanity of the policies, but then make the BOFH copy the log files to somewhere where you can run tail yourself
12:50 asciihatingcat or use salt to set that up
12:50 mike25ro hey guys: how are you managing BOND interfaces? so far i had only vms in salt.. now i need to add physical machines... and bond the interfaces. Does anyone has an example on how to do it?
12:50 eliasp goldstar: assigning states to minions (clients) is done via "targetting": http://docs.saltstack.com/en/latest/topics/targeting/ and http://docs.saltstack.com/ref/states/top.html
12:50 eliasp mike25ro: that's supported using the network state: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.network.html
12:50 jakubek eliasp: but are you creating different branches for those envs (prod, test..)?
12:50 mike25ro eliasp: thanks buddy
12:51 eliasp jakubek: exactly… and you only merge towards base (production), but never backwards
12:51 Leech joined #salt
12:51 eliasp jakubek: so the merge direction is always dev → test → staging → base (production)
12:52 eliasp jakubek: from dev, you might branch off more branches like "feature-development-foo" or "experiment-bar"
12:52 eliasp jakubek: which you'll then merge back into "dev" to get them into "test"
12:53 eliasp jakubek: once they succeeded in a basic test environment, you test them in a "staging" environment which is basically a replicate of your base (production) environment, but just without the regular consumers/end-users accessing it
12:53 jakubek yeah
12:53 jakubek sounds reasonable
12:54 jakubek i will try to go this way
12:54 jakubek ;-)
12:54 jakubek because now im only on production ;-)
12:56 eliasp jakubek: oh… and make your life easier by providing your top SLS through a separate repo and not through your regular SLS repo, as top.sls will be merged together from all environments (branches) before being evaluated which makes the whole situation a bit difficult… the official docs even recommend not to have a top SLS in other branches then "base" (production) which is practically impossible to do with the
12:56 eliasp established git-workflows
12:56 ph8 thanks asciihatingcat and xmj
12:56 xmj lol
12:56 xmj cheers.
12:57 asciihatingcat thank you for letting us rant about someone ;)
12:57 xmj asciihatingcat: the thing with BOFHs is, they need the occasional showwing that it is not okay to do $x
12:57 ekristen joined #salt
12:57 jakubek eliasp: ATM i have one repo for salt and pillar dirs ;-)
12:57 asciihatingcat xmj, not just BOFHs ^^
12:57 gadams999 joined #salt
12:58 xmj asciihatingcat: evil persons in general, yeah
12:58 ekristen is there anything special I need to do to make the docker states work?
12:58 eliasp ekristen: what tells you they're not working? any traceback? anything else?
13:03 mike25ro is there a way to deploy/change the root password - but without having the pass in clear text on the salt master?
13:04 eliasp mike25ro: deploy the hash
13:04 eliasp mike25ro: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.shadow.html#salt.modules.shadow.set_password
13:05 mike25ro eliasp: duuh.. i am an idiot
13:05 eliasp :)
13:05 mike25ro eliasp: thanks!
13:06 mike25ro eliasp: ... how can i do that .. deploy the hash from a state? i see that there is a module... can i call the module in a state?
13:08 eliasp mike25ro: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.user.html#salt.states.user.present
13:08 eliasp mike25ro: modules are what's used by States as the backend to carry out the actual operation…
13:08 ekristen eliasp: just says that state is not available
13:09 eliasp ekristen: running an outdated minion?
13:11 ekristen eliasp: 2014 something on the version, need to go look, by even 0.17.4 I think has docker states
13:11 mike25ro thanks eliasp
13:12 diegows joined #salt
13:13 rocket joined #salt
13:14 gadams999 left #salt
13:15 gadams999 joined #salt
13:16 bram_ joined #salt
13:19 rome joined #salt
13:21 asciihatingcat xmj, nah, evil people you feed to your cat. so it absorbs their evil, thereby becoming more evil itself (if still possible)
13:22 mike25ro asciihatingcat: what? i am not following you :)
13:23 mgw joined #salt
13:23 mnaser joined #salt
13:27 mpanetta joined #salt
13:28 timoguin joined #salt
13:29 bram_ when I try to run "sudo sh install_salt.sh -D git develop" I get http://dpaste.com/1779275/ ... looks like git is broken?
13:30 bram_ (installing requests by hand)
13:31 quickdry21 joined #salt
13:32 eliasp bram_: does the same happen for the v2014.1.1 tag?
13:32 eliasp bram_: so does this only happen for HEAD/master?
13:32 bram_ eliasp, nope
13:32 Gordonz joined #salt
13:32 Networkn3rd joined #salt
13:32 fllr joined #salt
13:33 bram_ eliasp, I get this with salt bootstrap, installing the git version. If I install requests by hand it works fine.
13:33 asciihatingcat mike25ro, well unless you're with the NSA you shouldn't be following me ;)
13:33 vbabiy joined #salt
13:34 bram_ eliasp, I was asked to try something out with the git version, so I'm trying the git version
13:34 eliasp bram_: ok, but I was more referring to whether this is a general git issue (v2014.1.1 vs master from git) or just an issue specific to HEAD/master
13:35 danielbachhuber joined #salt
13:35 bram_ I can't really answer that as I have no idea what salt-bootstrap is actually getting... :-/
13:36 Ahlee so yeah, cmd.run and test=True should probably throw a mutex error and exit
13:36 eliasp bram_: looks like you're missing https://pypi.python.org/pypi/requests
13:37 bram_ eliasp, as I said, when I installed it by hand all was fine
13:37 bram_ i.e. installed requests by hand
13:38 eliasp hmm, requirements.txt already contains "requests", so I wonder why it isn't pulled in/found in your case
13:38 eliasp bram_: what command do you use to install via salt-bootstrap?
13:38 bram_ don't mean to be snappy, I'm just struggling really badly with postgres - it keeps installing and thinking the wrong locale is installed so I'm trying to get it working with about a zillion tricks, but nothoing works
13:38 bram_ eliasp, "-D git develop"
13:39 rushm0r3 joined #salt
13:39 Gordonz joined #salt
13:40 eliasp bram_: which distribution/version?
13:40 bram_ i.e. if you install postgres before setting your localte to be utf-8 it initializes all its template databases with some ascii encoding, thus disabling you to easily create utf-8 dbs. And salt keeps calling apt-get with the C locale instead of the one I want it to use.
13:41 bram_ eliasp, ubuntu precise, 64bit
13:42 bigl0af joined #salt
13:43 bram_ I just found an error in my postgres installation though... destroying my virtual box again and trying again from zero :/
13:43 cando_attitude joined #salt
13:44 eliasp bram_: snapshots would save you a lot of time in case you're not using them already…
13:45 bram_ elias: hmm, perhaps a good point, perhaps I should also stop installing everything on each spinup
13:45 bram_ basically trying to get this working: http://dpaste.com/1779299/
13:45 bram_ the env-bit is the important bit...
13:46 eliasp bram_: hmm, the bootstrap-script installs python-requests on Ubuntu: https://github.com/saltstack/salt-bootstrap/blob/develop/bootstrap-salt.sh#L1534
13:46 Auroch joined #salt
13:46 eliasp no idea then why it fails
13:47 eliasp bram_: you might want to use LC_COLLATE and LC_CTYPE instead off LC_ALL which might cause unwanted side-effects…
13:48 eliasp so don't set LC_ALL unless you really need to and use LC_COLLATE and LC_CTYPE instead
13:48 ggoZ joined #salt
13:48 eliasp bram_: see also: http://www.postgresql.org/docs/9.2/static/app-initdb.html
13:48 fllr joined #salt
13:48 Auroch Hi anybody
13:48 bram_ eliasp, well the basic problem is that when installing postgres thge wrong locale is set, causing postgres to install all the templates in a non-utf fashion
13:48 vejdmn joined #salt
13:49 eliasp bram_: that's why you should use LC_COLLATE and LC_CTYPE ans env variables
13:49 bram_ setting the collate and ctype then causes other problems in the postgres salt state
13:49 eliasp ah, ok
13:49 gadams999 I see that 2014.1.1 is the latest version. Any idea when it will hit EPEL?
13:49 eliasp what kind of other problems?
13:49 mike25ro asciihatingcat: i can be a weird stocker (not sure of the right spelling) :)
13:49 Auroch Is there a solution to generate a random password when creating users throught SaltStack (I don't need to know the value) because I also search how i can disable the login with password like putting !x in /etc/password
13:49 m_ joined #salt
13:50 _fllr_ joined #salt
13:50 bram_ eliasp, the first time salt runs the db is created fine, the second time salt runs it errors, let me find the precise error message (afaic it;'s a bug in the postgress db state code)
13:51 bram_ eliasp, the second time I run highstate I get: "Database X has wrong parameters which couldn't be changed on fly"
13:51 s0undt3ch joined #salt
13:52 cando_attitude good morning everyone, I think I have gotten the syntax wrong for the ec2 module grains and the salt mine...
13:52 cando_attitude salt \* mine.send \* ec2_public-hostname
13:52 cando_attitude That just returns "false" for all minion
13:53 cando_attitude anyone have any idea what the proper prefix for ec2_ grains should be for the mine?
13:53 bhosmer_ joined #salt
13:54 srage joined #salt
13:55 Networkn3rd joined #salt
13:57 Auroch Is there a solution to generate a random password when creating users throught SaltStack. I don't need to know the value generated because I also search how i can disable the login with password like putting !x in /etc/password
13:59 rome joined #salt
13:59 AdamSewell joined #salt
13:59 AdamSewell joined #salt
14:00 eliasp Auroch: https://github.com/saltstack/salt/issues/10271
14:00 acabrera joined #salt
14:00 eliasp Auroch: besides that, you could try to achieve this using Jinja templating + Jinja filters… I don't know if there's a Jinja filter which can do hashing
14:02 eliasp Auroch: besides that, it should be rather trivial to create a new module which inherits the existing user module and just adds a "random_pass" method or so…
14:05 Auroch eliasp: thanx a lot for the first link, I think this is secure enough for me because this a hash so if i'm not wrong, it's only one way cryptography and in my idea nobody have to use it.
14:06 Auroch eliasp: and for the possibility to disable it in /etc/password like !x have you got an idea ?
14:07 eliasp Auroch: seems to be not supported yet by the shadow module http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.shadow.html
14:07 Auroch eliasp: In fact I need to create a user with a login it can't use because it connect only trough SSH with key and use it's own password stored in ldap trough libpam-ldap.
14:07 eliasp Auroch: well, then don't create this user locally at all
14:08 eliasp Auroch: that's what you've got LDAP for
14:08 eliasp Auroch: you can store the SSH keys in LDAP as well
14:08 wendall911 joined #salt
14:08 kermit joined #salt
14:08 rocket I am trying to set a user password and it have a $ in the password.  It appears that the $ is being dropped .. I tried using single quotes.. has anyone else run into this issue?
14:09 eliasp Auroch: http://code.google.com/p/openssh-lpk/
14:10 Auroch eliasp: OK i can give it a try if you think it's a better way.
14:11 eliasp Auroch: if you're not able to integrate the openssh-lpk patch into your environment, create just the homedirs using Salt and deploy the authorized_keys file there…
14:11 dwiden_ joined #salt
14:11 eliasp Auroch: then make sure that the homedir is set accordingly in the attributes of your LDAP user records
14:12 dwiden_ in salt 2014.1.1, file.managed/recurse sometimes fail for windows minions.  I recall hearing that this would be fixed in 2014.1.2.  Does anyone know when that will be released?
14:12 Auroch eliasp: excellent, it's so simple in fact. I don't know why I was searching for complex solution when your last proposal is the more simple and elegant.
14:13 gildegoma left #salt
14:13 ajprog_laptop joined #salt
14:13 Auroch eliasp: Thanx a lot for time, link and reply !
14:14 eliasp dwiden_: maybe ask again in and hour or two once Utah is awake and online ;)
14:14 dwiden_ eliasp: thank you, I forget I'm an early riser + on the east coast
14:14 jeddi joined #salt
14:14 Shenril joined #salt
14:18 seanz joined #salt
14:20 faldridge joined #salt
14:21 seanz Greetings. I'm sprinting on salt at PyCon, and I'm wondering about why this check is done:
14:21 seanz https://github.com/SeanZicari/salt/blob/develop/salt/scripts.py#L106
14:21 seanz whiteinge or another core dev. I notice it's done a lot, but I'm not sure why. I'd like to maybe add a comment as to why. Or maybe I missed another location where there's a comment...
14:22 cando_attitude hmm, even if I try this it still comes back with false...
14:23 cando_attitude ~# salt \* mine.send \* ec2_public-hostname grain
14:23 opapo joined #salt
14:23 cando_attitude there used to be a command to see the whole structure of grains from a minion ... can't find it now, anyone remember it?
14:24 cando_attitude still just trying to find the right prefix to put the ec2_ grains in the mine
14:25 srage joined #salt
14:25 ekristen anyone have experience with docker salt states and working with a private registry?
14:26 acabrera joined #salt
14:27 _mel_ joined #salt
14:28 cando_attitude hmmm, is it simply that the mine doesn't get grains?
14:30 whyzgeek hi guys I upgraded from .86 to 2014 version and now when I run salt >host< state.highstate I don't get any returns. Any ideas?
14:31 arrose_ joined #salt
14:32 Ahlee whiteinge: terminalmage: ping
14:32 cando_attitude whyzgeek: are the minion and master on the same version?
14:32 jvasallo joined #salt
14:34 rocket I am trying to set a user password and it have a $ in the password.  It appears that the $ is being dropped .. I tried using single quotes.. has anyone else run into this issue?
14:34 hhenkel Hi all, I'm currently struggling with "pkgrepo.managed". I always get an error like: "State pkgrepo.managed found in sls roles.common.repositories.sles_11 is unavailable"
14:38 pydanny joined #salt
14:42 Auroch joined #salt
14:42 oeuftete joined #salt
14:45 ix_ joined #salt
14:46 Vishnevskiy joined #salt
14:48 cnelsonsic joined #salt
14:48 s0undt3ch left #salt
14:50 krichardson joined #salt
14:53 mindKMST joined #salt
14:54 clone1018 joined #salt
14:55 clone1018 Hey, how can I specify "install package x from y custom repo" in Salt's SLS format?
14:56 [diecast] joined #salt
14:56 yusuket joined #salt
14:56 alunduil joined #salt
14:59 thayne joined #salt
14:59 thedodd joined #salt
15:00 diegows joined #salt
15:00 napper joined #salt
15:01 jeremyBass joined #salt
15:01 mike25ro guys can anyone help with a jinja question?  .. i have a jinjamap.munin.server.green   and red  ... the problem is that i have a pillar ... that has the value of green or red... so i must evaluate .. something like  jinjamap.munin.server.PILLARVAR ... is this possible?
15:02 rushm0r3 joined #salt
15:03 mike25ro is it possible to eval(jinjamap.munin.server. + pillar[]
15:03 mike25ro ?
15:04 vejdmn joined #salt
15:04 kaptk2 joined #salt
15:05 MFA joined #salt
15:05 toastedpenguin left #salt
15:05 srage joined #salt
15:05 tyler-baker joined #salt
15:06 toastedpenguin joined #salt
15:06 doddstack joined #salt
15:07 srage_ joined #salt
15:10 fllr joined #salt
15:10 kedo39 joined #salt
15:10 mike25ro anyone? ?:)
15:11 it_dude joined #salt
15:12 freenod joined #salt
15:14 jalbretsen joined #salt
15:15 napper joined #salt
15:17 ghanima joined #salt
15:17 kballou joined #salt
15:17 cando_attitude hmmm, this doesn't work either (returns blanks)
15:17 cando_attitude ~# salt \* mine.get \* grains.item ec2_public-hostname
15:18 ghanima hello all question... I was wondering if anyone knows anything about the following bug https://github.com/saltstack/salt/issues/10275
15:18 ckao joined #salt
15:18 ghanima just looking for a status as to if this is still actively being worked on
15:19 Gordonz joined #salt
15:19 napper joined #salt
15:19 sroegner joined #salt
15:19 ipalreadytaken joined #salt
15:21 ipalreadytaken joined #salt
15:23 kballou joined #salt
15:23 kuffs joined #salt
15:24 it_dude joined #salt
15:24 napper joined #salt
15:24 sroegner anybody using SLES 11.3?
15:26 sroegner i am having some problems with services - service.enabled always returning 'Enable is not available on this minion'
15:27 maber joined #salt
15:28 redbeard2 joined #salt
15:29 redbeard2 left #salt
15:29 napper joined #salt
15:31 swissknife joined #salt
15:32 swissknife Hi , how to deploy an execution module just in a specific minion ? thks
15:33 tligda joined #salt
15:34 whyzgeek cando_attitude: yes
15:34 fxhp swissknife - Dynamic Module Distribution will deploy the file to all minions
15:34 whyzgeek they are on the same version
15:34 whyzgeek I upgraded all
15:34 scoates basepi: how late are you guys sprinting, today? I got stuck on some stuff this morning, but I'm going to try to come for a bit if you're still going strong.
15:34 fxhp swissknife: http://docs.saltstack.com/en/latest/ref/file_server/dynamic-modules.html
15:34 cando_attitude whyzgeek: hmmm, at the end of my debugging I'm afraid. I've only seen that when I update one but not the others.
15:35 herlo joined #salt
15:35 herlo akoumjian: ping
15:36 swissknife fxhp - but it looks an overkill , I want to selectively assign exec modules to the hosts where these exex modules need to be run
15:36 whyzgeek cando_attitude: intrestingly sall-call on client works fine
15:37 fxhp swissknife: it isn't overkill, it is the prefered "standard" way to do it
15:37 whyzgeek but one thing I noticed this new version of salt is slower than the old one
15:37 whyzgeek can it be because of timeout?
15:37 cando_attitude whyzgeek: did for me too, actually.
15:37 clone1018 Hey, does anyone know how I can specify "install package x from y custom repo" in Salt's SLS format?
15:37 gadams999 joined #salt
15:38 fxhp swissknife: you could create a salt state and use targeting to install execution modules in the proper place on the proper minions, or you could be lazy and let Salt do it they way it likes, automatically for you.
15:38 mindKMST joined #salt
15:38 dangra joined #salt
15:39 cando_attitude clone1018: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.pkg.html
15:39 whyzgeek cando_attitude: intresting... is there any way to list all minions versions?
15:39 fxhp swissknife: the more you deviate from the "standard" way, the less valuable your setup will be, in my opionion.
15:39 clone1018 cando_attitude: I'm looking at it but I can't figure out what name to give fromrepo
15:39 mikemar10 joined #salt
15:40 swissknife fxhp : the state solution looks more reasonable ; it's confusing to spread around code that's out of scope for the other minions
15:40 cando_attitude whyzgeek: salt \* cmd.run 'rpmquery salt-minion'
15:40 cando_attitude whyzgeek: maybe, something like that?
15:41 srage joined #salt
15:41 bhosmer_ joined #salt
15:41 kuffs salt \* grains.item salt_version or something like that, I forget which grain it is specifically
15:42 whyzgeek cando_attitude: salt \* cmd.run "/usr/bin/salt-minion --version" gave me the same result for all
15:43 fxhp swissknife - You are not spreading out code, you are extending Salt.
15:44 fxhp swissknife - I use Salt extensively, I don't use every execution module, I don't actively remove SVN execution module from minions that don't use SVN for instance.
15:47 basepi scoates: probably until about 1600, have to grab dinner and be at Montreal Python user group by 1800.
15:48 scoates ok, cool. just realized I'll need to leave before that anyway… SpaceX launch that the kid'll be interested in (-:
15:48 themadcanudist joined #salt
15:48 scoates (and more stuff just came up… Mondays.)
15:49 themadcanudist hey folks. anyone here with experience using salt-ssh and familiar with the system it uses to compile stuff on master and ship to minions?
15:50 gildegoma joined #salt
15:50 meteorfox joined #salt
15:52 davet joined #salt
15:52 elfixit joined #salt
15:54 rglen joined #salt
15:54 redondos joined #salt
15:55 jvasallo joined #salt
15:55 it_dude joined #salt
15:55 srage_ joined #salt
15:56 pjdelport left #salt
15:59 yomilk joined #salt
16:00 kermit joined #salt
16:01 KyleG joined #salt
16:01 KyleG joined #salt
16:04 bemehow joined #salt
16:07 jergerber joined #salt
16:07 Gordonz joined #salt
16:11 ckao joined #salt
16:13 stephanbuys joined #salt
16:14 TheRealBill_here joined #salt
16:18 freenod joined #salt
16:21 themadcanudist hey guys, anyonej familiar with salt-ssh?
16:21 quickdry21 joined #salt
16:21 rachbelaid joined #salt
16:21 rachbelaid left #salt
16:22 gildegoma joined #salt
16:23 ravibhure joined #salt
16:24 thayne joined #salt
16:25 ldlework left #salt
16:27 [diecast] joined #salt
16:29 jnials joined #salt
16:30 philipsd6 themadcanudist: I've been experimenting a bit with it. What's your specific question?
16:30 themadcanudist well, it does the compilation on the master, which in my case is desirable. Are you familiar with that process?
16:30 KyleG1 joined #salt
16:30 themadcanudist ie. I believe it ships an execution tar over ssh to the minion, instead of syncing all the .sls files and running there.
16:31 philipsd6 I don't believe that's correct.
16:31 themadcanudist no eh?
16:32 possibilities joined #salt
16:32 themadcanudist philipsd6: do you know how the process works? Am i grossly mistaken? I looked at the code and there was reference to this execution tar, etc?
16:32 philipsd6 well, it does compile a salt-thin.tgz and ship that over, unpack it and run salt-call on the ssh target. But the states are still locally evaluated.
16:32 themadcanudist ah, yeah
16:33 wedgie joined #salt
16:33 wedgie joined #salt
16:33 themadcanudist that's what I suspected. Someone was alluding to different behaviour and pointed me in that direction
16:33 philipsd6 i.e. grains['fqdn'] should evaluate to the minion's hostname, not the masters.
16:33 philipsd6 if it doesn't, that's a bug.
16:33 themadcanudist is there any mechanism to do all compiling on master and shipping to minion so .sls files are never shipped to minion?
16:33 themadcanudist philipsd6: definitely! That part I undertstand.
16:34 themadcanudist I'm a puppet user, so I know the diff in the two paradigms and the limitations/advantages of both
16:34 themadcanudist Someone alluded to something called "State Packages", but I can't find that anywhere in code or documentation
16:34 themadcanudist said that this does something similar to puppet
16:34 philipsd6 if you compiled all your sls files on the master, then shipped it over to the ssh target, what would you expect grains['fqdn'] to resolve to?
16:35 philipsd6 I am not an expert by any means, and I'm only somewhat familiar with puppet, so I'm not sure what you're trying to accomplish.
16:35 herlo left #salt
16:35 themadcanudist philipsd6: Yeah, there would have to be an infrastructure in place to be able to fill in that detail on the minion afterwards.
16:35 themadcanudist just inquiring if what I was told held any water
16:36 themadcanudist philipsd6: yeah, so puppet does this, by requesting "grains" from client, then compiling on the master, then ships a catalog of resources back to client for it to execute
16:36 philipsd6 in the case of salt-ssh, the master wouldn't necessarily have any knowledge of the target, so it can't fill in grains['fqdn'] with the target's info.
16:36 themadcanudist right
16:36 jeremyfelt joined #salt
16:36 viod left #salt
16:37 philipsd6 in the typical case of salt (non-ssh) the master could have knowledge of the grains and fill it in, but I'm not aware of any mechanism for keeping all the states local to the master.
16:38 themadcanudist fair enough.
16:40 whyzgeek I had to rollback my salt upgrade salt-0.16.3-1.el6.noarch works fine but salt-2014.1.0-1.el6.noarch.rpm failed me!
16:40 whyzgeek anybody has the same issue?
16:41 topochan joined #salt
16:41 timoguin whyzgeek, what's the issue?
16:41 vbabiy joined #salt
16:42 zain_ joined #salt
16:43 whyzgeek timoguin: salt \* state.highstate doesn't produce any output
16:44 timoguin are your master/minions the same version?
16:44 whyzgeek timoguin: yes, I removed everything and tested with a single master and minion
16:44 whyzgeek still the same
16:44 whyzgeek running centos 6.4
16:45 timoguin i'd try adding a --timeout=300 to see if the CLI is just timing out on a long-running job
16:45 whyzgeek timoguin: I tried with 30 and it was the same issue
16:45 whyzgeek didn't try with 300
16:46 whyzgeek but why the new version should be slower?!
16:46 timoguin i'm not saying it should. just troubleshooting.
16:46 timoguin maybe run the master and minion in debug and see if that gives any clues
16:46 jaimed joined #salt
16:47 gadams999 joined #salt
16:49 whyzgeek timoguin: I tried all that, I couldn't find anything useful. I even tried not upgrading the zmq
16:49 whyzgeek it can be something wrong with dependencies
16:49 whyzgeek but downgrade immediately fixed the problem
16:50 timoguin what about the debug output when you try to run highstate? are there no errors?
16:52 whyzgeek timoguin: nothing that could catch my attention. salt-call on the remote machine ran fine with new version
16:53 whyzgeek it can be some dependency issue
16:53 whyzgeek but I don't know what it is
16:53 timoguin i'm not sure. i don't have the issues on my Ubuntu machines
16:53 whyzgeek well this is rpm package, so it can well be some packaging bug
16:55 chrisjones joined #salt
16:57 KyleG joined #salt
16:58 mgw joined #salt
17:00 rushm0r3 joined #salt
17:02 Vishnevskiy1 joined #salt
17:03 fragamus joined #salt
17:06 KyleG joined #salt
17:06 KyleG joined #salt
17:07 bemehow joined #salt
17:08 tligda joined #salt
17:08 Darnoth joined #salt
17:12 aw110f joined #salt
17:13 Ryan_Lane joined #salt
17:14 TheRealBill_here joined #salt
17:17 ajw0100 joined #salt
17:18 Networkn3rd joined #salt
17:19 scoates I'm not going to make it downtown today, basepi. Bummer.
17:19 basepi =(
17:19 shanky_ joined #salt
17:19 shanky_ hi
17:19 scoates someone look at my PR anyway, please (-:
17:20 basepi scoates: haha, NEVER!  It will languish for YEARS!
17:20 napper joined #salt
17:20 basepi scoates: I expect Tom should be on soon to merge pull reqs from the weekend.  I'm trying to catch up on issue triage right now.....PyCon got me way behind.
17:20 scoates (2.8 joke)
17:21 Vishnevskiy joined #salt
17:21 scoates cool cool. no pressure. I was just going to come down to the sprint to lobby that (-:
17:22 gildegoma joined #salt
17:22 Gareth morning.
17:22 Vishnevskiy left #salt
17:23 jchen is there a release timeline available somewhere?
17:24 UtahDave joined #salt
17:29 vejdmn joined #salt
17:32 ghanima joined #salt
17:33 it_dude joined #salt
17:34 ghanima I hall was wondering if anyone knows anything about the following bug
17:34 ghanima I was wondering if anyone knows anything about the following bug https://github.com/saltstack/salt/issues/10275
17:37 gadams999 joined #salt
17:37 napper joined #salt
17:38 cando_attitude well, I'm finally a bit closer
17:38 cando_attitude another properly placed semi-colon and the minion fired up, I actually didn't know it went down :(
17:38 cando_attitude but now I get an interesting output
17:39 cando_attitude so when I get the salt mine from \* \*, each computer seems to report everyone's salt mine
17:39 cando_attitude ~# salt \* mine.get \* grains.item
17:40 cando_attitude gives a list with for instance the ldap-dev1: with the first nest being jetty-dev:
17:40 cando_attitude is that the right behavior?
17:41 cando_attitude it seems every computer has the mine from every other computer
17:43 Gareth UtahDave: morning.
17:46 UtahDave hey, Gareth!
17:46 travisfischer joined #salt
17:50 Gareth UtahDave: hows it going?
17:50 UtahDave Pretty good!  Back in San Francisco for the week again.
17:51 druonysus joined #salt
17:51 druonysus joined #salt
17:51 conan_the_destro joined #salt
17:51 Gareth cool :)
17:54 seanz basepi: I've got a pull request for issue 11496: https://github.com/saltstack/salt/pull/11981
17:57 jvasallo joined #salt
18:00 whyzgeek timoguin: the timeout trick worked! thanks for that! But why is the new version slower than old?
18:00 whyzgeek the old version comes back pretty fast
18:01 timoguin whyzgeek, no clue. that depends on your states
18:03 whyzgeek timoguin: ya I guess so, I noticed that the time between getting the jobid until getting the config dicts takes a long time on the minion
18:03 CeBe joined #salt
18:04 nlb joined #salt
18:04 aw110f_ joined #salt
18:05 vbabiy joined #salt
18:06 arthabaska joined #salt
18:06 chrisjones joined #salt
18:06 mpanetta joined #salt
18:07 pydanny joined #salt
18:14 * Gareth loads up basepi's PyCon talk
18:14 gildegoma joined #salt
18:17 googolhash joined #salt
18:18 UtahDave Gareth: Hey, what's the url for that?
18:18 basepi Gareth: that's dangerous
18:18 basepi also, that URL is funny
18:19 basepi http://pyvideo.org/video/2574/decorators-a-powerful-weapon-in-your-python-arse
18:19 Gareth UtahDave: Direct YouTube video link since the pyvideo page wasn't working for me, suspect flash block nonsense: https://www.youtube.com/v/9oyr0mocZTg?enablejsapi=1&amp;version=3&amp;playerapiid=jkjqsxjyeu991329501397499132950
18:19 kermit joined #salt
18:19 doddstack joined #salt
18:20 UtahDave lol  dangit, I was trying to make a joke, Gareth!
18:20 basepi hehe, don't worry, i linked the arse URL for all to laugh at.  ;)
18:20 Gareth I've failed.
18:20 * Gareth hangs head in shame
18:20 Gareth I didn't even notice that :)
18:21 cando_attitude so, how would I get a grains item into an sls file, or more importantly a for loop that puts a configuration for each computer with a certain roll based on the IP of each computer
18:21 cando_attitude the reason I ask is that grains.item doesn't seem to give me a simple output
18:21 cando_attitude I'm trying to shorten it to just a list of IP's from the mine
18:22 cando_attitude for each computer with a roll "tomcat"
18:23 mpanetta joined #salt
18:26 bhosmer joined #salt
18:28 srage joined #salt
18:36 UtahDave :)
18:41 mikemar10 joined #salt
18:42 stephanbuys joined #salt
18:44 Gareth basepi: great talk!
18:47 davet joined #salt
18:47 ghanima question: when querying grains by the module grains.ls how quick is that operation does it always query the node or is that information cached after a saltutil.sync_grains operation
18:47 basepi Gareth: thanks!  it's pretty obvious i was nervous, but I think it came together pretty well.  much more positive feedback than I was expecting.  =)
18:47 bhosmer joined #salt
18:48 timoguin basepi, we're always our own worst critics. :)
18:50 ekristen anyone have experience with salt and docker?
18:51 Gareth basepi: A bit yeah...but I think everyone gets nervous about talking, some are just better at hiding it than others :)
18:51 basepi timoguin: definitely.
18:52 basepi Gareth: ya, and I usually show it less, but then they put me in the keynote room, in front of 400+ people
18:52 basepi i'm used to presenting in front of 40+
18:52 Gareth hah
18:53 vejdmn joined #salt
18:56 jalaziz joined #salt
18:57 AdamSewell I'm running Ubuntu 12.04 with salt version 2014.1.1 however, when I do salt-cloud --version - it's giving me 0.8.9. Does anyone know how I can upgrade salt-cloud to get the latest version that's built in with salt 2014?
19:10 ghanima I am doing some performance execution analysis and I am running the following from the salt master sudo salt -G 'thor_role:b2bserver' test.ping... It takes about 9 seconds to return back to the prompt... However it takes about  2 seconds to return the results of the grain
19:10 ghanima there seems to be a pause introduced somewhere but not sure how to trace this
19:10 ghanima has anyone observed this before
19:10 thedodd joined #salt
19:11 timoguin AdamSewell, salt-cloud was merged into salt with 2014.1. there are now cloud modules and states
19:11 timoguin salt-cloud 0.8.11 will still work side-by-side with it though. i installed it with pip
19:12 AdamSewell timoguin, maybe i don't understand how to use the new salt-cloud then
19:13 timoguin also, salt-cloud is at version 0.8.11 in the saltstack ppa, so you should be able to upgrade it with apt
19:13 timoguin here are the cloud module docs: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.cloud.html
19:13 timoguin basically you can run that module on any minion that has all the normal cloud configurations
19:14 timoguin and another: http://docs.saltstack.com/en/latest/topics/cloud/salt.html
19:17 gadams999 any timing where EPEL will be updated with 2014.1.1?
19:18 AdamSewell timoguin, is it possible to run these commands on the master rather than the minions?
19:18 Ahlee how do you split a pillar that's a dict, since dicts don't have a split?  Or do i need to create it as a list and not a dict
19:19 timoguin AdamSewell, with my setup i have my master as a minion of itself, so i didn't have to do any extra setup with the upgrade
19:19 AdamSewell hrm
19:19 AdamSewell never thought of that
19:19 timoguin you should also be able to use the runner module on the master
19:20 thedodd joined #salt
19:20 stevednd joined #salt
19:21 themadcanudist basepi: were you around when I was asking about salt-ssh?
19:22 stevednd Is there a builtin state for generating a key for a user? Everything I can find is just for setting an existing pubkey on a minion.
19:22 basepi themadcanudist: if i was, i wasn't listening.
19:22 basepi ;)
19:23 MZAWeb joined #salt
19:23 MTecknology I'm missing something... isn't it possible to tell salt to hold a specific verision of a package so aptitude upgrade won't change what salt installed?
19:23 goodwill joined #salt
19:23 themadcanudist i just wanted to canvas you. Does salt-ssh include the .sls files in the execution tar it fires across to the minions or is it some sort of special compiled package that the minions run through (sort of like puppet)?
19:24 thedodd joined #salt
19:25 stevednd MTecknology: can't you pass '- version: 1.2.3' to pkg.installed? the docs say you can't use it if using pkgs or sources though
19:26 MTecknology I thought so. I haven't tested it, but that's how I read it.
19:26 bemehow joined #salt
19:27 themadcanudist basepi: or if it just wraps the fileserver info and includes it in the bundle its shipping?
19:27 themadcanudist basepi: which i believe is the more likely of the scnearios, given salt's framework
19:28 MTecknology ooooh
19:28 MTecknology stevednd: you're right
19:28 basepi themadcanudist: pretty sure it actually compiles a lowstate and all files referenced by the lowstate and send to the minion
19:28 themadcanudist basepi: so that means there is no .sls data shipped over, as opposed to 0mq method which ships everything over, correct?
19:28 basepi themadcanudist: It installs the required files into the local file_roots of the "minion" so that the state run can run
19:28 * themadcanudist nods
19:28 basepi themadcanudist: I think that is correct
19:29 basepi themadcanudist: but I haven't spent enough time with it to be 100% sure
19:29 MTecknology Apparently the complaint is that sometimes debian repos will get rid of old packages and this guy wants to hold the old version for new servers so when a new server is brought up, they get the old version of php that's no longer available in repos.
19:29 seanz basepi UtahDave: Would you mind looking over my comment here: https://github.com/saltstack/salt/issues/11098#issuecomment-40407619
19:29 MTecknology I have no idea how to handle that beyond sticking all of the packages in a local repo
19:29 elfixit joined #salt
19:30 kuffs MTecknology: that honestly sounds like the most sane solution
19:30 themadcanudist basepi: thanks, that's hugely appreciated! Is salt-ssh the only way to leverage that type of beahviour? Is there a way to mimic this using the standard 0mq framework. I want to NOT send over the .sls files to minion.
19:30 MTecknology kuffs: !!!
19:30 MTecknology you're here!
19:30 kuffs hai~~
19:30 basepi themadcanudist: I don't think there's really a way at the moment, but Tom wants to get it added.
19:31 MTecknology hi :)
19:31 basepi seanz: looking
19:31 seanz basepi: Thanks.
19:31 kuffs I'm here in Montreal hacking with the crew
19:31 themadcanudist basepi: That makes sense. I believe Tom is the one who mentioned something like this @ pycon.
19:31 MTecknology and then I discovered snapshot.debian.org
19:31 kermit joined #salt
19:32 basepi themadcanudist: Probably.  I think I listened in on that conversation.  The logic itself is in salt/client/ssh/state.py but will need to be modified for general use.
19:32 themadcanudist ah nice. =)
19:32 basepi themadcanudist: You should maybe create an issue so we don't forget.
19:32 themadcanudist Not a problem
19:33 catpig hi, i'm trying to have all services controlled by salt on debian and i was wondering if there's a clean way for this.. best i could think of so far is to make a negative version to every service .sls but that seems a bit messy
19:33 fragamus joined #salt
19:33 basepi seanz: commented
19:33 basepi seanz: and so did you!
19:33 themadcanudist basepi: Thanks, as always!
19:34 basepi themadcanudist: np!
19:34 catpig i tried using "order: 1" on the service.disabled state, and "order: last" on the service.running state, but that wants to turn off mysql on systems that are supposed to have it running
19:35 seanz basepi: Yah, I've been developing it in my head. I'm going to examine some more output and think through how it would look in csv.
19:36 bhosmer joined #salt
19:37 ajw0100 joined #salt
19:38 basepi seanz: you might consider this one:  https://github.com/saltstack/salt/issues/11891
19:39 herlo joined #salt
19:40 possibilities joined #salt
19:41 zain_ joined #salt
19:44 stevednd anyone have any idea, or suggestions on generating a private key for a user?
19:45 jchen joined #salt
19:45 herlo left #salt
19:47 gadams999 joined #salt
19:48 UtahDave seanz: I think you're right on the csv
19:49 seanz UtahDave: I've been examining output from commands like ls and some dpkg commands (trying to go through the salt modules randomly to get an idea of overall output types.
19:49 seanz So far I haven't seen anything that wouldn't work in csv format.
19:50 seanz One thing I've noticed is that there will need to be a little more data in the CSV output than there was in raw.
19:52 ghanima figured out my performance problem... I had some minion's that I had down.. that i needed to reboot... just curious does anyone know what is the default timeout before the master decides to give up on a minion
19:52 timoguin ghanima, default is 5 seconds
19:52 bemehow joined #salt
19:52 timoguin stevednd, just use cmd.run to shell out to ssh-keygen like this: ssh-keygen -f file.rsa -t rsa -N ''
19:53 UtahDave seanz: Yeah, there's going to be some data duplication to make csv work, but that's just part of the data format.
19:53 ghanima Also if I add a new configuration file in /etc/salt/minion.d is there a way to get the minions to restart and refresh the config or do I have to do a full app restart on the minion
19:53 ghanima timoguin: I presume that is per node
19:53 ghanima or is that per job
19:54 timoguin per job i think, but i could be wrong
19:55 seanz UtahDave: Do you know of use cases where CSV is better than JSON output?
19:55 seanz I was only able to think of one, and most times JSON is perfectly fine.
19:56 UtahDave seanz: Mostly where people want to fiddle with it in excel or import it into another application that accepts csv
19:57 ghanima How does one refresh a minion config
19:58 seanz UtahDave: That's valid enough. It's very reasonable to assume there are a number of programs that would accept CSV but not JSON.
19:58 Ahlee Having issues with dict's in pillar, can somebody tell me what i have wrong here? https://gist.github.com/jalons/9580849f8814d8415bed
19:59 seanz UtahDave: Though if the raw output is what's available to the outputter, it's going to be a problem to generate header names dynamically.
19:59 Ahlee other than the mixing of gets
19:59 seanz I'm learning about outputters now.
19:59 beardo joined #salt
20:01 stevednd timoguin: that's what I was going to fall back to. I just wanted to make sure there wasn't already some builtin way to do it that I was missing.
20:01 stevednd thanks
20:02 vejdmn joined #salt
20:02 timoguin stevednd, seems like it'd be a nice addition to the ssh module or the ssh_auth state.
20:03 it_dude joined #salt
20:06 jaimed joined #salt
20:08 it_dude_ joined #salt
20:12 kiorky basepi: any chance you there?
20:15 basepi kiorky: sorta
20:15 basepi busy, but here
20:16 travisfischer joined #salt
20:16 kiorky basepi: hehe, do you know someone who practise saltssh
20:16 kiorky basepi: im wondering if pillar is known to work
20:16 kiorky basepi: because i cant get it to work here
20:17 themadcanudist kiorky: THere's some open bugs about this, i believbe
20:17 kiorky (ive not investiguated that further as i got wiped by production problems :=))
20:17 themadcanudist https://github.com/saltstack/salt/issues/10421
20:17 kiorky themadcanudist: well, it is just non working at all here
20:17 tligda joined #salt
20:17 themadcanudist https://github.com/saltstack/salt/issues/11650
20:17 basepi kiorky: I can't remember for sure, but Pillar may not work yet.
20:18 kiorky basepi: what i dont understand is that everything is coded
20:18 kiorky it just does not work :(
20:19 kiorky basepi: even is sls, i cant access pillar
20:19 kiorky basepi: i have only master opts
20:19 kiorky basepi: let me retry, but it was where i was friday
20:19 basepi kiorky: Hrm, that's strange.  Perhaps file an issue?  Or search existing issues?  I don't have time to look into it right now, I'm still in Montreal for PyCon
20:20 kiorky basepi: okay, yep, i read all those issues, and you were on all of these, thats my reason on tinkering you with that :)
20:20 basepi kiorky: heh, I comment on most issues, too many to remember.  =)
20:21 seanz Can someone point me to where the docs are for creating a custom outputter? I think I've seen such a doc before, but I'm not finding anything now.
20:21 basepi kiorky: I comment, but I don't always work on them.
20:21 catpig who was it that i was talking to about getting current salt on prehistoric (lenny) debian the other?
20:21 catpig well i found some instructions
20:21 kiorky seanz: just open a bunch and inspire yourself
20:21 kiorky seanz: salt/ouputters/*py
20:21 seanz kiorky: Thanks.
20:21 kiorky seanz: https://github.com/saltstack/salt/tree/develop/salt/output
20:22 kiorky seanz: you will see, it's trivial.
20:22 seanz kiorky: Thanks very much.
20:23 kiorky catpig: for old servers, im experimenting with saltssh
20:23 kiorky (and so saltthin)
20:23 kiorky catpig: but you need to have an enough python for that, which is not a problem if you dont have it, you just compile i
20:23 kiorky *it
20:26 catpig kiorky, thats basically the instructions, how to install py27 and the other deps from source ;)
20:27 linuxlewis joined #salt
20:29 fridiculous joined #salt
20:30 rgbkrk joined #salt
20:31 meteorfox joined #salt
20:34 goldstar how do I use different httpd config files for different minions ?
20:37 xmj salt zombie eats GRAAAAAAAAAAAAAINS
20:37 xmj Apologies. Couldn't resist.
20:37 ghanima goldstar: create a config per grain and associate the grain to the server you want to deploy to
20:37 ggoZ joined #salt
20:38 meteorfox joined #salt
20:39 gothix ghanima, what if you have multiple things that include differnet stuff - like one apache for prod and one for dev and also different users and directory permissions
20:39 gothix ghanima, how is the best way to keep that stuff straight
20:40 thayne joined #salt
20:41 gothix would i create some sort of profile and have the profile include all the pieces and different sls files
20:43 goldstar ghanima: feels a little hack-ish if Im to be honest
20:43 ghanima gothix: others might disagree with me but I would use grains, and I would set up a state topfile that represents environment and than doo a grain assignment that represents webserver
20:44 catpig i'm very new to salt but i'd also do what ghanima said
20:44 catpig also you can split up your apache conf into includes and then manage each of those files with salt. or ofc is salt has "direct support" you could use that
20:44 ghanima goldstart: but bottom you are going to have to do a static assignment and classify your hosts first and then define a workflow of how each class should run
20:45 ghanima sorry that meant to say bottom line
20:45 catpig yep, salt doesn't make differences go away
20:46 catpig hooray just added my first lenny
20:47 catpig you can also put things like 'osrelease:6.[.\d]+': in your top file if applicable, e.g. that one matches all version 6.x(.x) of the distro
20:47 sommarnatt joined #salt
20:47 ghanima I see there is a batch-size command however is there a way to send a batch size in a way that it won't just be first in first out... let say I need to run a command on 10 hosts at a time however I need to wait foor that command to fully finish executing before submitting the batch i.e all 10 have to be successful before any new hosts jobs are submitted
20:56 bemehow joined #salt
21:01 whiteinge Ahlee: (slow reply) did you get an answer to your ping from earlier?
21:05 travisp joined #salt
21:05 travisp Anyone using salt-cloud with rackspace? Can't seem to find my "tenant" id.
21:08 travisp nvm, found it :)
21:11 elfixit joined #salt
21:12 jaimed joined #salt
21:14 schimmy joined #salt
21:15 vortec joined #salt
21:16 vortec hi, is someone here familiar with salts build system? i issued a pull request on github, now it's been building for >20 minutes, i read somewhere that jenkins is supposed to pick my repository up, what is going on there?
21:16 andrej Is there a (good?) reason that shadow.set_password doesn't modify the password change/aging information?
21:17 vortec and you actually use salt on the build server to build salt? :)
21:18 Ahlee whiteinge: yes
21:18 Ahlee whiteinge: thanks
21:22 cewood joined #salt
21:24 ipalreadytaken joined #salt
21:24 andrej ugh ... why would anyone think that directly modifying /etc/shadow is *more* *secure* than using usermod? Or chpasswd, for that matter?
21:29 freenod joined #salt
21:34 undefinednull joined #salt
21:39 it_dude joined #salt
21:39 ipalreadytaken joined #salt
21:42 FL1SK joined #salt
21:47 jvasallo joined #salt
21:47 tligda joined #salt
21:52 TheRealBill_here joined #salt
21:53 napper joined #salt
21:54 nextdoorwarren joined #salt
21:55 Israfil joined #salt
21:55 Israfil Hi
21:56 Israfil I’m just getting started with salt.  Can anyone point me to some sample config files that I can use to deploy a dev box?  I want something that I can start from.
21:56 JesseCW joined #salt
21:59 travisp joined #salt
22:00 bhosmer joined #salt
22:00 Gareth Israfil: some good examples here: https://github.com/saltstack-formulas
22:01 Israfil Thanks!
22:01 jvasallo joined #salt
22:01 Israfil Gareth: Thanks!
22:01 UtahDave joined #salt
22:03 travisp Sometimes when I run a command such as 'salt MINION state.highstate' the console pauses for a while and then eventually returns, with no output displayed. If I wait a while and try again it will return with success. Anyone know why this happens?
22:03 jaimed joined #salt
22:05 themadcanudist joined #salt
22:07 Gareth Israfil: no worries.
22:07 themadcanudist left #salt
22:09 jvasallo joined #salt
22:13 pydanny joined #salt
22:18 nextdoorwarren joined #salt
22:19 darless_ joined #salt
22:20 TyrfingMjolnir joined #salt
22:23 BigEndianBecause joined #salt
22:27 Leech joined #salt
22:27 BigEndianBecause Good afternoon.  I've got salt 0.16.2 running on my salt master and I'm trying to manage ssl certificates and keys directly from pillars.  I am able to use file.managed with the contents: hash. However,  that removes the newlines from the ssl certificates.  Does anyone have a recommendation on how I could manage my files from pillar data in a "salty" way?
22:28 andrej I just submitted a new issue ... https://github.com/saltstack/salt/issues/11994
22:28 BigEndianBecause I was trying to avoid using templates for everything.
22:29 TyrfingMjolnir joined #salt
22:30 napper joined #salt
22:35 faldridge joined #salt
22:38 _FL1SK joined #salt
22:40 quickdry21 joined #salt
22:40 Ryan_Lane joined #salt
22:44 ajprog_laptop joined #salt
22:45 jaimed joined #salt
22:46 adizam joined #salt
22:52 elfixit joined #salt
22:55 Gareth did docs.saltstack.com just drop offline?
22:56 BigEndianBecause I notice that salt 0.17 supports direct pillar data in file.managed.  Does anyone have any suggestions on what to do with the older 0.16.2 version of salt?
22:56 mpanetta joined #salt
22:57 mgw joined #salt
22:59 whiteinge Gareth: uh. looks like
22:59 whiteinge crap
22:59 TyrfingMjolnir joined #salt
23:00 whiteinge Gareth: back up. thanks for the quick notice
23:00 Gareth no worries :)
23:02 bhosmer joined #salt
23:03 doddstack joined #salt
23:03 TyrfingMjolnir joined #salt
23:03 Corey Hooray build failures!
23:06 AdamSewell joined #salt
23:07 Math` joined #salt
23:08 connie joined #salt
23:10 rushm0r3 joined #salt
23:11 __number5__ docs.saltstack.com offline?
23:12 whiteinge yeah, again. that box just went unresponsive...
23:12 __number5__ whiteinge: maybe should just mirror http://salt.readthedocs.org/en/latest/ :P
23:14 Corey whiteinge: Computers are hard. It's okay.
23:15 whiteinge i need a computer person! anyone know a computer person?!
23:18 pydanny joined #salt
23:19 terminalmage BigEndianBecause: are you talking about contents_pillar?
23:19 terminalmage if you are, the solution is to upgrade. this ability did not exist in any way, shape, or form prior to when it was added
23:19 ghanima curious I trying to see if I can get any better performance from what  my setup... Right now I have 300 minion pointing to 1 master.  I have the threads up to 10
23:20 Leech hi, how can I edit sshd_config to set: PermitRootLogin no ?
23:20 ghanima I tried to setup to 50
23:22 ghanima but the loadavg on my master jumped to 50 on the master
23:22 ghanima just curious
23:22 ghanima is there a ratio to worker threads to nodes
23:22 meteorfo_ joined #salt
23:23 garthk joined #salt
23:25 BigEndianBecause @terminalmage,  thanks.  That's what I was afraid of :-)
23:26 BigEndianBecause left #salt
23:26 alunduil joined #salt
23:26 rome joined #salt
23:27 ixokai I'm new to salt, and am trying to set up gitfs. I'm getting a strange error I can't quite figure out how to get past in my log when I start up my salt-master. The config options and error are at: https://gist.github.com/anonymous/4da3da0d4fe3eef78334 -- any ideas?
23:27 l0x3py joined #salt
23:27 manfred UtahDave: Ryan_Lane: did you ever hear back on a python3 eta?
23:27 Ryan_Lane manfred: nope
23:27 manfred lame
23:28 Ryan_Lane I'll just open an issue
23:28 silviud joined #salt
23:29 Ryan_Lane https://github.com/saltstack/salt/issues/11995
23:30 Ryan_Lane ugh. I really wish the readthedocs documentation would disappear
23:30 KyleG I hate the new documentation format
23:30 KyleG too much white
23:30 fllr joined #salt
23:30 KyleG my ADHD brain needs separation of data
23:31 KyleG but the salt site is like "white background black text read it all naow"
23:33 silviud hi - what's the best way to disable some of the built in modules on a minion ?
23:35 ghanima silviud: there is a disable_modules key
23:35 ghanima that you put in the minion config
23:35 ghanima example
23:35 ghanima disable_modules:
23:36 ghanima - module1
23:36 ghanima - module2
23:36 silviud http://docs.saltstack.com/ref/configuration/minion.html#disable-modules
23:36 silviud got it - thanks a bunch!
23:37 silviud one more quick question - if I want to integrate it with chef - what;s the best way to do it ? make a pull request or send a patch ?!
23:39 whiteinge silviud: pull request would be great. we'd love chef integration
23:40 Dinde joined #salt
23:42 ghanima whiteinge: I think you were the one a few days ago to answer a question in regards to puppet and facter
23:42 ghanima are you aware of this bug
23:43 silviud will do - thanks!
23:44 napper joined #salt
23:44 whiteinge ghanima: sorry, need a sec...
23:44 meteorfox joined #salt
23:44 jchen womp womp docs page is broken: http://docs.saltstack.com/topics/ssh/
23:45 jchen 301 redirect loop
23:46 ghanima https://github.com/saltstack/salt/issues/10275
23:46 whiteinge jchen: thanks. will be fixed momentarily
23:47 alekibango joined #salt
23:47 meteorfox joined #salt
23:50 fllr joined #salt
23:52 sgviking joined #salt
23:53 xDamox joined #salt
23:55 xDamox Hello All, with the iptables state is it possible to invert arguments e.x. iptables -A INPUT ! -s 127.0.0.1 --dport 1234 -j DROP ?
23:58 cyrusdavid joined #salt
23:58 zain_ joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary