Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-09-04

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:01 ipmb joined #salt
00:01 warmwaffles oh god I'm an idiot
00:01 warmwaffles after searching for an hour I was using the wrong variable
00:01 warmwaffles CARRY ON
00:01 UtahDave Ryan_Lane:  ah, thanks. That's great info.  We should add that to the docs
00:01 mosen hah
00:03 EWDurbin_ joined #salt
00:03 mapet_ joined #salt
00:03 JordanTesting_ joined #salt
00:05 goki__ joined #salt
00:05 modafinil_ joined #salt
00:06 ikanobori_ joined #salt
00:06 NotreDev joined #salt
00:06 chutzpah joined #salt
00:06 kaiyou joined #salt
00:06 TTimoT joined #salt
00:06 codekobe___ joined #salt
00:06 octarine_ joined #salt
00:07 mhubbard_ joined #salt
00:07 vbabiy_ joined #salt
00:07 smcquay_ joined #salt
00:09 __alex joined #salt
00:09 flebel_ joined #salt
00:09 scarcry joined #salt
00:09 stolitablrrr_ joined #salt
00:09 floWenoL joined #salt
00:09 yetAnotherZero joined #salt
00:09 philipsd6_ joined #salt
00:09 smcquay_ joined #salt
00:11 MTecknol1gy joined #salt
00:11 honestly_ joined #salt
00:11 svx joined #salt
00:11 rnts_ joined #salt
00:11 mackstic1 joined #salt
00:12 Fa1lure joined #salt
00:12 aparsons joined #salt
00:12 lazybear joined #salt
00:12 kedo39 joined #salt
00:12 ze- joined #salt
00:12 brucewang joined #salt
00:12 icebourg joined #salt
00:12 forrest joined #salt
00:12 jesusaurus joined #salt
00:12 dN0t joined #salt
00:13 al joined #salt
00:13 ecdhe joined #salt
00:14 conan_the_destro joined #salt
00:14 wm-bot4 joined #salt
00:14 rigor789|away joined #salt
00:21 Ryan_Lane1 joined #salt
00:26 to_json joined #salt
00:31 bre528 joined #salt
00:32 tristanmatthews joined #salt
00:37 tristanmatthews Hi All, so I have been using a weird (probably wrong) method to update pip on ubuntu 12.04. When trying to put it in salt I'm getting a weird error so wondering if anyone knows how I should be doing it.
00:38 tristanmatthews hmm that didn't give me a new line, but the 3 commands: sudo apt-get install python-pip sudo pip install -U setuptools sudo pip install -U pip
00:38 tristanmatthews will get pip to update its self. When I try getting salt to pip install setup tools I get: There was no error installing package 'setuptools' although it does not show when calling 'pip.freeze'.
00:38 brucewang tristanmatthews: the way I used is apt-get install python-setuptools then, easy_install pip
00:38 tristanmatthews has anyone see that before?
00:39 tristanmatthews k
00:39 tristanmatthews I'll try that then, thanks
00:39 brucewang n[
00:39 brucewang no worries
00:40 Singularo joined #salt
00:41 skyler Okay, I have a strange problem: when I add watch_in to a pkg.installed that requires some sls's it breaks. Without watch_in it works. https://gist.github.com/skylerberg/78f00f2928ee933cf19b
00:42 skyler The gist provides the failing output when I include watch_in, and the working output when I do not include watch_in.
00:42 skyler The sls files and pillars are also included.
00:42 skyler both mysql and apache are using saltstack-formulas.
00:44 vbabiy joined #salt
00:44 thayne joined #salt
00:44 __number5__ skyler: what does apache-restart module do?
00:46 skyler __number5__: It just restarts apache: https://github.com/saltstack-formulas/apache-formula/blob/master/apache/init.sls
00:46 tristanmatthews brucewant: works great, thanks again.
00:47 tristanmatthews um, brucewang sorry for the type...
00:47 druonysuse joined #salt
00:48 sectionme joined #salt
00:48 __number5__ skyler: if you run salt show_sls your_main_sls with require_in , any error?
00:50 kingel joined #salt
00:51 skyler __number5__: No errors.
00:52 ze- joined #salt
00:54 Fa1lure joined #salt
00:57 warmwaffles joined #salt
00:58 rome_ joined #salt
01:00 DaveQB joined #salt
01:11 TyrfingMjolnir joined #salt
01:11 otter768 joined #salt
01:11 druonysus joined #salt
01:16 avienu joined #salt
01:16 Ryan_Lane joined #salt
01:30 Outlander joined #salt
01:30 oz_akan joined #salt
01:30 ramishra joined #salt
01:31 Outlander joined #salt
01:33 diegows joined #salt
01:36 TTimo joined #salt
01:42 skullone anyone here run openstack?
01:45 NotreDev anyone using the dockerio module - I can’t figure out how to rebuild images -> install new containers based on the newly built image -> and run the new containers. my build process works just once, then i have to manually delete images and containers...
01:45 manfred skullone: yes
01:45 manfred NotreDev: so, you don't need to rebuild images, make another image in the chain
01:45 NotreDev manfred: my dockerfile is changing, why isn’t that automatically updating where the tag points?
01:45 manfred are you changing which image you're building the dockerfile off of?
01:46 NotreDev http://pastebin.com/dsUysKau
01:47 skullone manfred: did you roll it yourself, or use a distribution?
01:47 NotreDev i’ve rolled it myself
01:47 NotreDev the image builds fine
01:47 NotreDev it runs fine
01:47 manfred skullone: i have rolled it out manually, and used devstack
01:47 NotreDev i just can’t change where the tag poitns
01:47 tedski did optional_groups break recently in salt.states.user?
01:48 manfred NotreDev: that i don't know then
01:48 NotreDev manfred: is it not common practice to update an image?
01:48 sectionme joined #salt
01:48 manfred not to the same image name?
01:48 manfred {% set i_name = 'dfee/circle-freeswitch' %}
01:48 manfred {% set image = pillar.docker[i_name] %}
01:49 manfred i think you need to update that one to the one that you then tag it as
01:49 manfred so that you have
01:49 manfred <base>
01:49 manfred <first image>
01:49 manfred <second image>
01:49 manfred in a row
01:49 tedski nevermind :(  pebkac
01:49 manfred instead of rebuilding the first image each time, move to the second image and chain them all together
01:50 hoathem joined #salt
01:50 manfred ¯\(°_o)/¯
01:50 manfred that was how I was going to do it
01:50 hoathem hi
01:50 NotreDev alright
01:50 hoathem oh. very good
01:51 hoathem sid20212@gateway/web/irccloud.com/x-gajeydjhfiwyhcdn
01:51 NotreDev manfred: maybe my problem is that i’m naming my images and not tagging them?
01:51 manfred that may be it
01:51 hoathem very good chating
01:51 hoathem easy
01:51 manfred my docker experience is limited
01:53 ramishra joined #salt
01:54 gzcwnk joined #salt
01:55 snuffeluffegus joined #salt
01:58 wardtm joined #salt
01:59 gzcwnk is there anyway to look at where a minion is "hanging"? while running a high.state on it?
02:01 manfred yes, login to the minion
02:01 warmwaffles other than --log-level debug
02:01 manfred check the log
02:01 warmwaffles or trace
02:01 luminous joined #salt
02:01 manfred you can't see that while the highstate is running
02:01 gzcwnk nothing in the log
02:02 luminous joined #salt
02:02 manfred you would only see stuff on the master if you did it
02:02 gzcwnk im logged into the minion
02:02 manfred you want salt-call state.highstate -l debug on the minion
02:02 warmwaffles ^^^
02:02 warmwaffles I was implying that, sozzy
02:02 manfred sure, change the loglevel to debug, in the minion so that you can tail /var/log/salt/minion
02:03 gzcwnk Ok I have a PID and its still running
02:03 knot joined #salt
02:04 gzcwnk it seems to have stopped
02:04 bofhit joined #salt
02:04 gzcwnk at turning off iptables
02:07 mgarfias how do i add an iam profile to my salt-cloud cfg?
02:09 xcbt joined #salt
02:11 gzcwnk i can see where its hanging but not why
02:18 gzcwnk the sls works on other servers but not this one, that just makes no sense
02:18 gzcwnk :/
02:19 NotreDev i’m running salt v2014.1.10. that’s pretty hold, huh?
02:19 NotreDev *old
02:20 melinath joined #salt
02:20 gzcwnk tahts what I just updated to
02:20 gzcwnk I might backdate to .7 to see if it then works
02:21 NotreDev hmm
02:22 NotreDev best way to install the new release?
02:22 bhosmer joined #salt
02:22 NotreDev nevermind. found it
02:23 vbabiy joined #salt
02:23 scarcry joined #salt
02:25 ramishra joined #salt
02:32 TyrfingMjolnir joined #salt
02:33 gzcwnk saltminions on 2014.1.7 are not comaptible with 2014.1.10?
02:33 gzcwnk server?
02:37 NotreDev ok the code in the develop branch for docker is much further along then that of the RC. will the next RC be updated to reflect these changes?
02:39 kingel joined #salt
02:40 icebourg joined #salt
02:40 MTecknology joined #salt
02:40 dccc joined #salt
02:44 TyrfingMjolnir joined #salt
02:49 sectionme joined #salt
02:53 Nexpro joined #salt
02:57 bruce-one joined #salt
02:59 rome joined #salt
03:02 TyrfingMjolnir joined #salt
03:04 bhosmer joined #salt
03:07 vbabiy joined #salt
03:16 jnials joined #salt
03:17 pdayton joined #salt
03:27 tkharju1 joined #salt
03:29 bhosmer joined #salt
03:30 SheetiS joined #salt
03:40 ajolo joined #salt
03:42 n8n joined #salt
03:48 tkharju1 joined #salt
03:51 thayne joined #salt
03:56 schimmy joined #salt
03:56 yomilk joined #salt
03:58 kermit joined #salt
04:07 jnials joined #salt
04:15 jnials joined #salt
04:16 Singularo joined #salt
04:18 Ryan_Lane joined #salt
04:19 troyready joined #salt
04:25 vbabiy joined #salt
04:26 smcquay joined #salt
04:27 ajolo joined #salt
04:28 kingel joined #salt
04:31 mosen joined #salt
04:31 vbabiy joined #salt
04:32 vbabiy joined #salt
04:36 bnikolau1 Anyone know how is hosting http://saltstarters.org/ ? sites down, bad gateway
04:38 TTimo joined #salt
04:48 felskrone joined #salt
04:48 kedo39 joined #salt
04:48 lazybear joined #salt
04:51 ramishra joined #salt
04:51 warmwaffles joined #salt
04:56 ramishra_ joined #salt
04:59 jnials joined #salt
04:59 ramishra joined #salt
05:00 rome joined #salt
05:00 ramishra joined #salt
05:00 sectionme joined #salt
05:04 vbabiy joined #salt
05:05 vbabiy joined #salt
05:09 kingel joined #salt
05:13 jalaziz joined #salt
05:25 TheThing joined #salt
05:30 jdmf joined #salt
05:31 lahwran joined #salt
05:45 schimmy joined #salt
05:46 kingel joined #salt
05:47 oyvjel joined #salt
05:53 kingel joined #salt
05:54 TyrfingMjolnir joined #salt
05:58 mikkn joined #salt
06:03 scalability-junk joined #salt
06:06 cruatta joined #salt
06:06 hjst joined #salt
06:06 yomilk joined #salt
06:08 shalkie joined #salt
06:12 lcavassa joined #salt
06:14 thayne joined #salt
06:21 favadi joined #salt
06:23 warmwaffles joined #salt
06:30 xcbt joined #salt
06:31 kingel joined #salt
06:34 kingel_ joined #salt
06:35 n8n joined #salt
06:39 kingel joined #salt
06:41 TTimo joined #salt
06:42 TyrfingMjolnir joined #salt
06:44 Sweetsha1k joined #salt
06:51 sectionme joined #salt
06:54 duncanmv joined #salt
06:55 melinath joined #salt
06:57 kingel joined #salt
06:59 CeBe joined #salt
07:00 rome joined #salt
07:05 kingel joined #salt
07:07 icebourg joined #salt
07:07 thayne joined #salt
07:08 mariusv joined #salt
07:09 mariusv joined #salt
07:09 jhauser joined #salt
07:10 tomspur joined #salt
07:10 tomspur joined #salt
07:17 Furao joined #salt
07:19 goodwill joined #salt
07:23 chiui joined #salt
07:24 intellix joined #salt
07:25 ramishra joined #salt
07:26 ramishra joined #salt
07:29 kingel joined #salt
07:32 icebourg joined #salt
07:35 kingel joined #salt
07:44 Flusher joined #salt
07:44 yomilk joined #salt
07:44 fredvd joined #salt
07:45 slav0nic joined #salt
07:47 ianmcshane joined #salt
07:51 ianmcshane joined #salt
07:57 scott_w joined #salt
07:59 ianmcshane joined #salt
08:05 dh__ joined #salt
08:11 n8n joined #salt
08:12 PI-Lloyd joined #salt
08:13 kingel joined #salt
08:15 n8n joined #salt
08:18 ikanobori joined #salt
08:23 ramishra joined #salt
08:24 ramishra joined #salt
08:24 warmwaffles joined #salt
08:32 bhosmer joined #salt
08:32 jtratner joined #salt
08:33 jtratner Hi all - I'm trying to follow the GCE setup docs and the config files appear to be working however when I try running salt-cloud -p all_settings someinstance everything hangs at the point where it's trying to ssh in
08:34 jtratner any ideas what I might be doing wrong?
08:34 jtratner (this is after it successfully connects to port 22)
08:35 linjan joined #salt
08:36 MrTango joined #salt
08:41 wm-bot4 joined #salt
08:43 TTimo joined #salt
08:43 workingcats_ joined #salt
08:45 PI-Lloyd jtratner: have you run "sudo salt-cloud -u" to update/create the bootstrap script?
08:53 ramishra joined #salt
08:53 PI-Lloyd jtratner: also check the firewall rules to ensure port 22, 4505, and 4506, to/from the saltmaster are open - and also that the ssh username/key are in the google console in the global metadata
08:54 PI-Lloyd or add it to the instance metadata in the cloud profile
08:56 linjan joined #salt
09:01 rome joined #salt
09:06 mihait_ joined #salt
09:06 thunderbolt joined #salt
09:07 che-arne joined #salt
09:18 urtokk joined #salt
09:20 sm1ly joined #salt
09:20 sm1ly re2all
09:21 sm1ly quys, trying to use in init.sls thins string {% if grains['host'] == '*mysql?.*' %} doesnt work. why?
09:25 warmwaffles joined #salt
09:28 intellix joined #salt
09:31 che-arne joined #salt
09:32 giantlock joined #salt
09:42 babilen sm1ly: Do you *really* use "*mysql?.*" as hostname? That rather looks like a regular expression to me.
09:42 babilen (it literally matches those two strings)
09:42 sm1ly babilen, yap. it works only with wmysql1 or ejmysql1
09:42 sm1ly how I can match with grains?
09:43 babilen So, you want to match every minion whose hostname contains mysql[a-zA-Z0-9] ?
09:44 sm1ly i need to match ejmysql[1-7] and wmysql[1-7] in one string. i can write salt '*mysql?.*' test.ping and it works. so i need the same in grains.
09:45 sm1ly can I?
09:45 babilen "In grains" ? I guess that you are writing a state in which you want to express the same in Jinja.
09:47 babilen And jinja is not capable of regular expression IIRC
09:49 sm1ly babilen, http://pastebin.com/6U1KbQY5
09:49 sm1ly like this one
09:50 babilen I'd recommend a better pastebin such as http://refheap.com, http://paste.debian.net or or http://codepad.org, but don't fret, I understood what you want to do, but jinja has no built-in matcher for regular expressions.
09:51 babilen See http://jinja.pocoo.org/docs/dev/templates/#list-of-builtin-filters
09:54 sm1ly hm... thx, try to understand
09:56 yomilk joined #salt
10:01 sm1ly babilen, so its look like, I cant do this match ?
10:02 ianmcshane joined #salt
10:05 bhosmer joined #salt
10:10 deepz88 joined #salt
10:14 TheThing joined #salt
10:16 TheThing joined #salt
10:21 tkharju1 joined #salt
10:25 sm1ly babilen, so I have no way match something in init.sls with grains else I write if elif 14 times?
10:26 warmwaffles joined #salt
10:41 mortis_ when upgrading one or many packages in an sls-file, how can i use "watch" to restart the service without specifying every packges in the watch-function? can i point it to my group of packages in some way?
10:41 CeBe1 joined #salt
10:42 mortis_ like if i have mypkgs: pgk.latest: names this and that and those, can i somehow say : watch: mypkgs
10:44 TTimo joined #salt
10:45 blarghmatey joined #salt
10:52 viq mortis_: I think so. Also in packages you can have watch_in: my_other_state
10:53 mortis_ viq: ah cool
10:53 ramishra joined #salt
10:59 kingel joined #salt
11:00 martoss joined #salt
11:02 rome joined #salt
11:04 avienu joined #salt
11:05 N-Mi joined #salt
11:05 N-Mi joined #salt
11:05 kingel joined #salt
11:12 zions joined #salt
11:12 sectionme joined #salt
11:13 zions Hi
11:14 zions I'm trying to run a custom salt-runner I wrote. When I try to run it, I get a message which says Funciton 'my_runner.function' is unavailable
11:14 geekmush3 joined #salt
11:15 babilen sm1ly: You sure can, but not with what jinja offers you right away. There are various approaches to consider: Set a (custom?) grain on the boxes that you want to target/mark and build your jinja logic around that, use a custom module to check hostnames against regular expressions and call that from within jinja or you can write the whole state in Python (py or pydsl renderer) and make use of Python's re module
11:16 sm1ly babilen, ok, thx, I understand
11:20 borvoh joined #salt
11:22 ramishra joined #salt
11:26 warmwaffles joined #salt
11:27 hobakill joined #salt
11:28 martoss joined #salt
11:42 istram joined #salt
11:46 mechanicalduck joined #salt
11:46 dh__ joined #salt
11:47 nebuchad` joined #salt
11:48 grepory_ joined #salt
11:49 TamCore_ joined #salt
11:49 kevin1 joined #salt
11:50 homelinen_ joined #salt
11:50 rspectre joined #salt
11:50 rmnuvg_ joined #salt
11:50 hop joined #salt
11:50 Damianz_ joined #salt
11:50 Ove__ joined #salt
11:50 vividloop joined #salt
11:50 vividloop joined #salt
11:50 juice_ joined #salt
11:51 majoh joined #salt
11:51 homelinen joined #salt
11:51 jerryc joined #salt
11:51 crashmag_ joined #salt
11:51 mike25de joined #salt
11:51 kavakava joined #salt
11:51 denstark joined #salt
11:51 njs126 joined #salt
11:51 stevednd joined #salt
11:51 vmdsch joined #salt
11:51 ThomasJ|d joined #salt
11:52 _ikke_ joined #salt
11:57 diegows joined #salt
11:57 lietu joined #salt
12:12 linjan joined #salt
12:17 dh joined #salt
12:18 blarghmatey joined #salt
12:23 dccc joined #salt
12:23 snuffeluffegus joined #salt
12:27 warmwaffles joined #salt
12:27 brooksgarrett Has anyone else noticed salt-cloud is unable to destroy EC2 instances?
12:34 vejdmn joined #salt
12:35 Kraln joined #salt
12:37 sectionm1 joined #salt
12:39 jeffrubic joined #salt
12:41 Setsuna666 joined #salt
12:43 ndrei joined #salt
12:46 TTimo joined #salt
12:48 shoma joined #salt
12:49 shoma hey guys, how do I fail the highstate from with the sls file? like fail() function in puppet...
12:51 bhosmer joined #salt
12:53 sectionme joined #salt
12:54 cpowell joined #salt
12:54 babilen shoma: Individual states can fail ... Could you elaborate on what you are trying to do?
12:55 bhosmer_ joined #salt
12:56 miqui joined #salt
12:58 oz_akan joined #salt
13:01 jkaye joined #salt
13:01 rome joined #salt
13:02 giantlock joined #salt
13:13 shoma babilen: I'm trying to explicity fail the highstate if for example "grains.ip_interfaces['bond0']" is not defined.
13:13 shoma babilen: similar to puppet fail() func. (https://docs.puppetlabs.com/references/latest/function.html#fail)
13:17 rome joined #salt
13:20 dude051 joined #salt
13:23 lietu seriously, argh .. who can with a straight face claim salt-cloud is stable? it has not even the basic error checks (does my configuration file exists, does the file that I'm trying to read a certificate from exist) and all it's error messages are worse than hebrew, they're bad technical ones that have no relation to the real world at all
13:23 rome joined #salt
13:24 TheThing joined #salt
13:24 lietu accidentally created my cloud, cloud.profiles etc. files under /root, tried to run salt-cloud -PH -m servers.map, what happens? error? no .. the thing freezes, have to hit ctrl-z and killall -9 salt-cloud to get away from it, ctrl+c does nothing
13:24 mpanetta joined #salt
13:25 lietu forgot to copy the certificate for my google cloud service account to the location I said in the config, error? sure, about 10-20 lines of stack trace about invalid arguments passed to GoogleAuthError or some such thing, not a simple red line saying "file not found /etc/salt/key.pem"
13:26 Ahlee Hate to be that guy, but file issues on github so those improvements can be made
13:26 racooper joined #salt
13:26 Ahlee those seem like valid and sane requests
13:26 Ahlee from somebody that doesn't use salt-cloud, at least :)
13:26 lietu had disks left in my google compute engine from previous VMs, those apparently blocked creation of new ones, and salt-cloud got confused .. what did the error say? the resource was not found", "bool object has no attribute pop" and stacktraces
13:26 lietu yea, I know, but seriously .. gah
13:27 lietu mind boggling amount of time wasted due to horrible error checks and error messages in salt-cloud it makes me want to rant
13:27 Ahlee salt doesn't have rough edges so much as it's lined with knives
13:27 nitti joined #salt
13:28 mpanetta joined #salt
13:29 hobakill lietu: i'm with you on salt-cloud even though i'm just starting on it. documentation shows CamelCase but actual config in 2014.1.10 doesn't work unless config file is all lowercase.
13:29 ramishra joined #salt
13:30 lietu oh yeah, the documentation is horrid .. salt-cloud's own docs say you should install salt-cloud directly via pip or something, and everything else on the planet says "no no, don't do that, it's stupid .. just install salt the normal way, it's bundled"
13:31 lietu anyway, now to the last issue I have not been able to figure out: now that salt-cloud finally seems to work and creates me my instances, they are visible with salt-key -L and with gcloud compute instances list, etc. .. if I run salt '*' cmd.run 'uname -a' it just hangs .. last time I tried this it didn't hang for very long, but then returned nothing, which I interpret as it wasn't able to connect to any of the minions .. how would I debug this?
13:31 lietu centos6 machines
13:31 lietu oh .. now after a couple of minutes that thing finally said something, which actually seems even understandable: failed to authenticate, is this user permitted to execute commands?
13:33 Ahlee lietu: salt -v '*' cmd.run 'uname -a'
13:33 Ahlee get the job id back
13:33 Ahlee likely it's taking > 5 seconds (default salt timeout) for them to respond
13:33 Ahlee so the job id is generated and the async return will come in when it can
13:33 lietu it took minutes for that to return
13:33 Ahlee maybe salt-cloud's timeout is differnet
13:33 lietu without -v
13:33 Ahlee does salt-cloud use salt-ssh or does it connect over zeromq?
13:33 lietu well, last time I tried that I think it was more like 5ssec
13:34 Ahlee -v just gives you the job id
13:34 Ahlee so then you can run salt-run jobs.lookup_jid <jid>
13:34 rome joined #salt
13:34 lietu no idea what it uses, haven't gotten that far yet...
13:34 Ahlee you can also get the last job you executed with salt-run jobs.list_jobs
13:34 sectionme joined #salt
13:34 Ahlee you'll need to be root or a wheel user (salt wheel, not group wheel) to use the jobs runner
13:34 ramishra joined #salt
13:35 lietu I'm running all of this as root for now
13:35 Ahlee nevermind, i'm mistaking @wheel in my configs for being a salt config, it's just referencing the wheel group
13:35 Ahlee sorry
13:35 Ahlee anyway.  salt-run jobs.list_jobs should show you the JID of your uname -a
13:35 Ahlee which you can then lookup
13:36 lietu that command returns {}
13:36 lietu it has been "running" for a minute or two now
13:36 lietu ah, now it timed out
13:36 Ahlee well, "progress"
13:37 lietu put salt-run jobs.list_jobs in watch, says {} all the time after I started a new one
13:37 lietu .. new salt -v '*' cmd.run 'uname -a', that is
13:38 Ahlee ok, so that probably means no jid was generated, which may mean no minions are being targeted with your '*' target which doesn't make sense
13:38 lietu if I manually set the timeout to be 5 seconds with salt -t 5, it still doesn't exit after 5 or 10 or 25 seconds
13:39 Ahlee yeah, timeouts are strange with the underlying async
13:39 Ahlee -t only means "wait this long for a return from the minions" - unsure how that reacts when using salt-ssh or what communication method salt-cloud uses
13:39 Ahlee as I'd guess salt-cloud is making a lot of curl requests to whatever cloud provider
13:40 lietu at this point I don't think salt-cloud should be involved, salt-cloud set up the VMs and installed salt on it, that should be it's job .. then it's left to the "usual salt" to work from there
13:41 Ahlee makes sense
13:41 Ahlee do you have port 4505/4506 open to your minions?
13:41 lietu ah
13:41 Ahlee from your master?
13:41 lietu found out why the thing hangs
13:41 lietu "service salt-master restart" told me it wasn't running for whatever reason
13:41 lietu after restarting it, it now returns in a reasonable amount of time, with no output at all
13:42 lietu and now -v says executing with jid etc.
13:42 soasme joined #salt
13:42 lietu and it's listed on jobs.list_jobs
13:42 soasme left #salt
13:42 lietu aaand the output says "minion did not return"
13:42 lietu now let me check the port
13:43 sysadmin75 joined #salt
13:43 ramishra joined #salt
13:44 ndrei joined #salt
13:44 lietu seems to work, confirmed with nc
13:46 lietu I can nc -l 450(5|6) on master, and on a minion echo foo | nc salt 450(5|6) and get the message
13:47 TTimo joined #salt
13:51 justyns joined #salt
13:52 johtso joined #salt
13:52 racooper joined #salt
13:53 quickdry21 joined #salt
13:53 rome joined #salt
13:56 rome joined #salt
13:58 lietu erm .. how odd
13:59 lietu the VM which seems to have an accepted key, doesn't seem to have salt installed at all
14:04 lietu ah, I think it's because salt-cloud didn't manage to SSH into the instances, as the centos images don't come with PermitRootLogin enabled by default (which is good) .. hmm
14:05 ajprog_laptop joined #salt
14:05 hobakill correctify me if i'm wrong (jerry springer!!!) but salt-cloud for vsphere is new to 2014.7.0, correct? i can't provision salt-minions in vcenter/vmware currently right?
14:06 disdain__ joined #salt
14:06 SheetiS joined #salt
14:06 blackhelmethacke joined #salt
14:07 ramishra_ joined #salt
14:07 jayne_ joined #salt
14:08 kingel_ joined #salt
14:08 pviktori_ joined #salt
14:09 sirtaj_ joined #salt
14:09 lietu ah wth .. deleted all the pre-existing keys from the master, restarted the minion on one of the vms, accepted the key, still "minion did not return"
14:10 luminous_ joined #salt
14:10 Heartsbane_ joined #salt
14:10 aquinas__ joined #salt
14:10 luminous_ joined #salt
14:16 ianmcshane joined #salt
14:16 peno_ joined #salt
14:17 Damianz joined #salt
14:17 Damianz joined #salt
14:17 to_json joined #salt
14:17 nyx_ joined #salt
14:17 ianmcshane joined #salt
14:18 nyx_ I have a minion's config under salt control and want to restart the minion when the config changes but don't want to interrupt a highstate... how best to do this?
14:18 Jarus joined #salt
14:20 rallytime joined #salt
14:20 ianmcshane joined #salt
14:20 babilen nyx_: You should be able to restart the minion just fine simply by watching it in the service state (well, you'd probably want watch_in)
14:20 nyx_ babilen: ok that's what we have now, but I worried that would restart the minion mid-highstate
14:21 ndrei joined #salt
14:21 ianmcshane joined #salt
14:21 babilen nyx_: https://github.com/saltstack-formulas/salt-formula/blob/master/salt/minion.sls is an example
14:21 babilen (in fact that's the official formula for managing salt from salt)
14:21 diegows joined #salt
14:21 joehh joined #salt
14:21 babilen nyx_: Would it be a problem if the minion restarted mid highstate? Does this have to happen as the last action of the highstate for some reason?
14:22 packeteer joined #salt
14:22 dccc joined #salt
14:22 ecdhe joined #salt
14:22 nyx_ babilen: well I figured if it did it would lose the job's context and then... unknown.  so yea I figured best to delay till the end.
14:22 rhand joined #salt
14:22 repl1cant joined #salt
14:22 babilen It's perfectly fine
14:23 go|dfish joined #salt
14:23 nyx_ babilen: ok thanks, that matches what we've observed so far.
14:23 babilen In fact i even restart the master while running a highstate on itself and that doesn't trip it up :)
14:24 ckao joined #salt
14:24 AirOnSkin joined #salt
14:24 nyx_ come to think of it I think we do as well heh.
14:25 masterkorp Guys how do you do multi machine testing with salt formulas ?
14:25 peters-tx joined #salt
14:26 AirOnSkin Hey guys, quick question: The bootstrap script (https://github.com/saltstack/salt-bootstrap) has an option: -k  Temporary directory holding the minion keys which will pre-seed the master.
14:26 AirOnSkin If I wanted to use this option, would I define /root/.ssh/ or what? I don't quite understand it ...
14:27 murrdoc joined #salt
14:28 murrdoc can the init.sls in a state have matching similar to the top.sls
14:33 babilen AirOnSkin: These are minion keys not ssh keys (i.e. the keys you'd find in /etc/salt/pki/master/*) -- The master and minions use these for authentication and encryption.
14:33 ramishra joined #salt
14:33 17SAA4J9Y joined #salt
14:33 Damianz_ joined #salt
14:33 borvoh joined #salt
14:33 kingel joined #salt
14:33 17SAA4CVU joined #salt
14:33 17SAA4BHZ joined #salt
14:33 mhubbard_ joined #salt
14:33 17SAA33C8 joined #salt
14:33 brooksgarrett joined #salt
14:33 Heartsbane joined #salt
14:33 Deevolution joined #salt
14:33 jforest joined #salt
14:33 17SAA2COQ joined #salt
14:33 17SAA0L4J joined #salt
14:34 babilen murrdoc: It can't. You can, naturally, write additional logic in jinja, python or whatever templating language you use for your init.sls, but it is not matched in the same way as top.sls is.
14:34 babilen In fact you would want to target *different* init.sls to your minions from your top.sls
14:35 murrdoc yeah but that leads to big-ish top.slss
14:35 murrdoc sls*
14:35 johngrasty joined #salt
14:36 cb joined #salt
14:36 jforest joined #salt
14:36 murrdoc the enviroment i am working on, lets say,  has about 20+ server types
14:36 mschiff joined #salt
14:36 mschiff joined #salt
14:37 Deevolution joined #salt
14:37 Emantor joined #salt
14:37 murrdoc would you make the top.sls have 20+ matches ?
14:37 abele joined #salt
14:37 wiqd_ joined #salt
14:39 neilf___ joined #salt
14:39 copelco joined #salt
14:40 jamesn joined #salt
14:40 SheetiS joined #salt
14:41 murrdoc or what would you recommend
14:41 rome joined #salt
14:43 Deevolution joined #salt
14:44 pdayton joined #salt
14:45 vejdmn1 joined #salt
14:48 jamesn does cmd.run support use_vt=True on Windows?  It's not working for me with the command: salt myhost cmd.run use_vt=True 'ping localhost'
14:48 Furao joined #salt
14:49 deepz88 joined #salt
14:49 masterkorp Guys how do you do multi machine testing with salt formulas ?
14:49 mhedgpeth joined #salt
14:49 stan_k joined #salt
14:52 ndrei joined #salt
14:54 blackhelmethacke manfred: Your explanation of state vs execution yesterday has exponentially expanded my capability with salt. Thanks again for the time.
14:55 manfred you are quite welcome :)
14:55 ihasn joined #salt
14:56 ihasn anyone have issues with salt-minion logs on windows?
14:57 * Gareth gives manfred agold star
14:58 Ahlee ihasn: no, once their enabled.
14:58 rome joined #salt
14:58 ihasn Ahlee: there is an enable option?
15:00 murrdoc manfred:  got gist ?
15:00 murrdoc of said explanation
15:00 manfred of what?
15:00 manfred oh
15:00 manfred uhhh
15:00 manfred maybe
15:00 manfred blackhelmethacke: when did we talk?
15:00 manfred yesterday during the day or evening?
15:01 Ahlee ihasn: On windows minions, logging is not enabled out of the box.  Enable log_file and log_level_logfile options
15:01 darless joined #salt
15:01 murrdoc not an actual gist link but you know the main point or part the conversation
15:01 blackhelmethacke yesterday
15:02 manfred murrdoc: yeah, i was just going to copy my logs
15:02 blackhelmet manfred: maybe 2 days
15:02 JasonSwindle joined #salt
15:02 manfred yeah, it was on the 2nd
15:04 manfred murrdoc: http://paste.gtmanfred.com/fe1EG/
15:04 kingel joined #salt
15:05 tmh1999 joined #salt
15:06 masterkorp Guys i need urgent input
15:06 masterkorp i am making a test suite for salt
15:06 ndrei joined #salt
15:06 masterkorp but i am having a big big challenge
15:06 masterkorp which is: the name
15:07 Ahlee kosher
15:07 Ahlee 'cause who needs googleability
15:08 dude051 joined #salt
15:08 econnell joined #salt
15:09 perfectsine joined #salt
15:09 masterkorp that is actually a decent name
15:09 masterkorp also, who has a problem against D ? :p
15:09 ihasn Ahlee: i just double checked and i have the following set and not commented out log_file: C:\salt\var\log\salt\minion                  log_level_logfile:trace   the log file gets created but nothing is sent to the log
15:10 davet joined #salt
15:10 Ahlee log_file: /var/log/salt/minion
15:10 Ahlee yes, that's a unix path
15:10 Ahlee but, that will translate to C:\salt\var\log\salt\minion
15:11 ihasn well look at that.  thanks
15:12 blarghmatey joined #salt
15:13 metaphore joined #salt
15:13 UtahDave joined #salt
15:14 ihasn Ahlee: appricate the help
15:16 Ahlee Not a problem
15:16 CatPlusPlus joined #salt
15:18 davet1 joined #salt
15:18 conan_the_destro joined #salt
15:21 wendall911 joined #salt
15:28 hobakilllll joined #salt
15:28 jamesn is it possible to read the current state data from a custom execution module:
15:29 TTimo joined #salt
15:32 UtahDave what do you mean by "current state data"?
15:33 NotreDev joined #salt
15:34 murrdoc joined #salt
15:35 favadi joined #salt
15:35 jamesn UtahDave: whether a state has been successfully executed
15:36 UtahDave after the fact?
15:37 jamesn I have an execution module that I think needs to depend on a state having executed on the client, so I'd like to check for that.
15:37 jamesn I'm making a cygwin.run execution module to run a command under cygwin, and I have a state that installs cygwin.
15:38 jamesn I'm sure there's a better way to do that - I'm open to suggestions.
15:41 perfectsine joined #salt
15:42 masterkorp Ahlee: thanks, i choose that name
15:44 UtahDave jamesn: well, you could create a state that executes your custom module, but requires your cygwin state to have executed correctly
15:47 jamesn UtahDave: I think I'll table that for now, I don't think I understand how to do that well enough.
15:48 jamesn next question: does cmd.run support use_vt=True on Windows, or how can I get something similar working to stream command output?
15:48 UtahDave jamesn: It's quite easy, actually. Let me put together a simple example
15:48 morganfainberg left #salt
15:49 pdayton joined #salt
15:50 giantlock joined #salt
15:50 jtratner joined #salt
15:51 thayne joined #salt
15:52 masterkorp Guys, do you hate D ? :p
15:54 UtahDave jamesn: my initial look at the code seems to indicate that it will work on Windows
15:55 jamesn UtahDave: well, it works, but it doesn't stream output before the command finishes, which I thought was the purpose of use_vt?
15:55 UtahDave I'm not familiar with use_vt, but so far Salt doesn't have the ability to stream output until the command finishes
15:56 tligda joined #salt
15:57 jamesn UtahDave: hmm, ok, I might try to hack together something using the event system then
15:57 UtahDave good idea. I've done that quite a bit
15:59 yomilk joined #salt
15:59 masterkorp is the salt-users mailing list the right place to disquss ideas about salt related tools ?
16:00 iggy pretty cool that my new employer is not only cool with me pushing my changes back upstream, but they prefer it
16:00 iggy so lot's of formula changes/features/fixes coming over the next couple weeks
16:01 iggy and hopefully at some point more core salt stuff
16:01 masterkorp iggy: +1, keep a dedicated employee happy and he will give you good results
16:01 honestly iggy: pushing stuff upstream means the community maintains it and not you so your employer saves money :P
16:01 troyready joined #salt
16:02 iggy preaching to the choir on that one
16:02 UtahDave iggy: that's great!  thanks!
16:02 UtahDave iggy: who is your awesome employer?
16:02 meteorfox joined #salt
16:03 iggy On Center Software
16:03 iggy (unconfirmed)
16:03 Supermathie joined #salt
16:03 iggy I mean, it's not really a secret, but I'm not really in a position to speak for them
16:03 iggy get me?
16:05 snuffeluffegus joined #salt
16:05 Supermathie Question: when a salt minion runs a job, does that run in a separate interpreter? Separate thread? Interested in the answer for both *nix and Windows.
16:05 ianmcshane joined #salt
16:05 melinath joined #salt
16:07 Ahlee It's the same interpreter, but I can never remember which uses threading
16:09 ndrei joined #salt
16:10 KyleG joined #salt
16:10 KyleG joined #salt
16:10 Ahlee Supermathie: on windows, multiprocessing defaults to False, and i know *nix does the opposite, but i don't spend enough time with it to remember how python handles fork vs thread
16:12 Supermathie ahhh that explains the weird results I'm getting ok
16:12 Ahlee I know UtahDave has expounded on the differences here in the past if you care to search the IRC logs
16:14 Supermathie Yeah I need to turn that on - I'm doing things like changing users in Windows so I need separate processes I think
16:14 Ahlee I do'nt think you want to enable that, actually
16:14 ajprog_laptop joined #salt
16:15 Ahlee you'll be entering no man's land, at least
16:15 Supermathie http://irclog.perlgeek.de/salt/2014-08-04#i_9131196
16:15 Supermathie ah ok
16:15 Supermathie oh it *does* use threading on Windows, OK.
16:16 Zachary_DuBois joined #salt
16:16 Supermathie os.getpid() was returning the same thing on Windows so I didn't think it was threading at all
16:17 UtahDave Supermathie: jobs run in a separate thread on Windows and in a separate process on *nix
16:18 Supermathie anyone know offhand how to retrieve the thread id in Windows from python?
16:18 UtahDave cool, iggy.
16:18 possibilities joined #salt
16:18 Supermathie UtahDave, thanks, yeah where you talked about it before.
16:19 Ahlee sorry UtahDave, I tried.  One of these days.
16:19 iggy don't judge the company by the current website... we've got a new product launching next month that's "in the cloud"
16:19 UtahDave :)  I really appreciate the help, Ahlee
16:19 iggy (which is why I'm here now)
16:19 UtahDave iggy: nah, that's cool, man.
16:20 * robawt highfives UtahDave
16:20 iggy at least they took my suggestion to dump puppet and go with salt :) makes me happy
16:20 Supermathie Ahlee, hey  you helped :) (if that's what you were referring to)
16:21 UtahDave hey, robawt!
16:22 Supermathie there we go: win32api.GetCurrentThreadId()
16:24 dude051 joined #salt
16:25 Eugene Does anybody know of a state tree for Snort?
16:32 jergerber joined #salt
16:33 UtahDave Eugene: I haven't
16:35 icebourg joined #salt
16:37 rlarkin joined #salt
16:38 dstokes are there any good walkthroughs on writing custom states / modules? docs are kinda lean
16:38 chrisjones joined #salt
16:40 linjan joined #salt
16:42 manfred dstokes: it is the same as writing a regular state or module, you just put it in /srv/salt/{_modules,_states}
16:42 manfred dstokes: http://docs.saltstack.com/en/latest/ref/modules/
16:42 manfred dstokes: http://docs.saltstack.com/en/latest/ref/states/writing.html
16:42 dstokes manfred: looking for more info on cross-calling modules, best practices for org, options for error handling etc.
16:43 dstokes using existing modules in source now. maybe need to do my own writeup..
16:43 forrest joined #salt
16:44 iggy yeah, I have yet to see anything along those lines
16:44 iggy would be a welcome addition
16:45 rap424 joined #salt
16:46 nitti_ joined #salt
16:47 CeBe1 joined #salt
16:48 Gareth morning morning
16:48 forrest what up Gareth
16:48 shoma joined #salt
16:49 aparsons joined #salt
16:49 Gareth forrest: not too much.  wfh day today :)
16:49 forrest nice
16:49 Gareth forrest: how about you?
16:49 forrest Gareth, ready for a nap!
16:50 gothix joined #salt
16:50 Gareth A nap sounds good...was really dark here this morning, had to wake up.
16:50 forrest heh, yeah not as dark today as yesterday
16:50 aparsons joined #salt
16:52 SheetiS mmm nap... WTB
16:52 drawks anyone have any good examples of salt states used for managing disk partition/format/mount ?
16:52 * iggy perks up
16:53 SheetiS drawks: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.mount.html for mounts
16:54 SpeeR joined #salt
16:54 ajolo joined #salt
16:55 kermit joined #salt
16:55 SheetiS http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.parted.html for partition stuff at least a module.  Not sure about a corresponding state, but the module stuff could be called in a state I guess.
16:55 drawks yeah I was looking more for an example of how someone has handled the full state for provisioning storage.
16:56 schimmy joined #salt
16:56 drawks seems like doing it wrong could lead to heartbreak. i.e. unintentional reformatting or the like
16:57 chrisjones joined #salt
16:57 drawks a decent state that is idempotent would be nice
16:59 jkaye joined #salt
16:59 TheThing joined #salt
17:01 drawks aa
17:01 linjan joined #salt
17:03 SheetiS drawks:  I mainly manage an AWS infrastructure and have very few machines that have separate EBS volumes (which can be defined in salt-cloud), so I can't help too much unfortunately as I've not done much automagic partition management via states.
17:03 SheetiS s/much/any
17:03 drawks heh, thanks anyhow
17:04 ntropy_ joined #salt
17:05 vbabiy joined #salt
17:08 schimmy1 joined #salt
17:12 smcquay joined #salt
17:17 murrdoc joined #salt
17:18 xcbt joined #salt
17:19 TyrfingMjolnir joined #salt
17:19 dude051 joined #salt
17:27 shaggy_surfer joined #salt
17:29 murrdoc joined #salt
17:29 roberto_ joined #salt
17:29 roberto_ howdy
17:30 forrest hey roberto_
17:30 roberto_ quick question regarding require in state.sls
17:30 roberto_ how do I tell salt that this statement requires a directory
17:30 roberto_ ?
17:31 roberto_ file: /foo/bar
17:31 forrest roberto_, so you have a file.directory that exists in the same state right?
17:31 forrest that creates the directory?
17:31 Supermathie like this, roberto_ ?
17:31 Supermathie c:/salt/conf/minion.d/minion-nd.conf:
17:31 Supermathie file.managed:
17:31 Supermathie - source: salt://win/files/minion-nd.conf
17:31 Supermathie - makedirs: true
17:31 UtahDave joined #salt
17:31 Supermathie makedirs may be what you need
17:32 roberto_ awesome
17:32 seamusabshere joined #salt
17:32 roberto_ thanks
17:32 forrest that's if you want to make the directories before the file is laid down, if you want to just require a directory (for a script or something), create the directory with file.directory, and then just use require: \n - file: name
17:32 seamusabshere hey, do i always run "salt" from the salt master?
17:33 forrest seamusabshere, you don't have to
17:33 forrest seamusabshere, you can run it from the minion with salt-call if you want to pull data from the master, or salt-call --local if you want to use only local minion data
17:33 seamusabshere what if i'm on a developer laptop?
17:34 forrest is the laptop salted?
17:34 seamusabshere should we keep like a company salt master or should i treat the laptop as a master or should i go masterless...
17:34 forrest seamusabshere, don't use a laptop
17:34 forrest that's bad security
17:34 bhosmer joined #salt
17:34 perfectsine joined #salt
17:34 seamusabshere forrest: btw, thanks for your immediate responses
17:35 seamusabshere i'm in charge of taking our devops to the next level here
17:35 forrest seamusabshere, using a master depends on your setup, it's not as fast as masterless, but it can be better depending on your setup
17:35 forrest seamusabshere, yeah np, there's no one hovering at my desk yet today
17:35 seamusabshere currently we use "vagrant up" "vagrant provision"
17:35 murrdoc vagrant provision can call salt
17:35 forrest murrdoc, ++
17:36 seamusabshere should i use salt or vagrant-aws to provision ec2?
17:36 jkaye joined #salt
17:36 seamusabshere and/or virtualbox vms?
17:36 seamusabshere (there are SO MANY CHOICES in devops theses days, it's the hardest thing)
17:36 forrest seamusabshere, totally depends on how you guys want to work, if you want to run vagrant in ec2, go for it. I've never done that. You can also use salt-cloud to do provisioning. The real question is what is your goal in the end?
17:37 rome joined #salt
17:38 ntropy_ left #salt
17:38 ntropy joined #salt
17:38 murrdoc yeah what are you trying to do
17:38 seamusabshere goals (1) developer can provision dev, staging, prod from his/her laptop (2) dev is virtualbox+coreos+docker (3) staging and prod are ec2+coreos+docker
17:39 seamusabshere (4) minimize the number of tools in use
17:40 forrest are the dev instances being provisioned locally on their system?
17:40 seamusabshere yes
17:40 murrdoc ooh
17:40 Ryan_Lane joined #salt
17:40 forrest ok, so unless salt is installed on every user's laptop (something I would recommend against for privacy and security), that will be problematic
17:40 murrdoc that sounds fun
17:40 murrdoc how about
17:41 murrdoc use packer to make dev vagrants
17:41 murrdoc or docker
17:41 murrdoc in the vagrant instances run masterless salt
17:41 murrdoc in the aws stuff
17:41 Supermathie privacy? screw that - they're corporate resources. :D
17:41 murrdoc if u use packer u can bake out your instances
17:41 forrest yeah I like that idea murrdoc, masterless minions, you can provide a pre-populated set of repos if there is an image, and people can update.
17:42 murrdoc or write boto stuff to make your vms and setup masterless salt on it
17:42 chitown is there a way to just list all of the mine data available to a minion?
17:42 Supermathie Actually we were pondering something like salt on laptops for management/inventory/etc purposes for some of our clients. Really trying to get them away from a workgroup setup :/
17:42 forrest Supermathie, I've proposed salt on laptops in the past, I just don't like the security implications.
17:42 murrdoc that salt shouldnt be the one used for dev vagrants is all
17:42 seamusabshere i guess i'm thinking of "salt" as more of a build tool
17:43 forrest not to mention the fact you could invade any user's privacy, which should still be respected.
17:43 seamusabshere err
17:43 seamusabshere like make
17:43 seamusabshere you know
17:43 seamusabshere i change some code in an app repo
17:43 murrdoc yeah but it wont make the vm
17:43 seamusabshere i run "salt top development"
17:43 seamusabshere sure, i can provide the vms
17:44 seamusabshere (http://beta.release.core-os.net/amd64-usr/current/coreos_production_virtualbox.README)
17:44 murrdoc right
17:44 seamusabshere (just boot up one of those on virtualbox)
17:44 Supermathie forrest, there are easier ways to do things remotely / read info anyways. But in such a scenario you could restrict the minion to only run certain approved jobs... but still, more trouble than it's worth probably.
17:44 Supermathie sigh if only vagrant supported libvirt/kvm… I might actually use it.
17:45 seamusabshere (fwiw i think salt users can be in charge of locking down dev laptops)
17:45 forrest in a masterless setup it's fine
17:46 seamusabshere i'm pretty sure githubbers can deploy production from their laptops
17:46 forrest they're using hubot for that, which is their IRC bot
17:46 forrest that's different
17:46 forrest the IRC bot is connecting to their central deployment system
17:46 seamusabshere ah ok, so they basically have a company salt master ?
17:46 forrest I don't think they use salt
17:46 forrest since they're a ruby shop
17:47 seamusabshere i mean, effectively
17:47 forrest maybe? I don't know.
17:47 forrest I've never looked into their deploy system
17:47 seamusabshere i feel like my salt fundamentals are still very weak
17:47 forrest At this point I think you should start by setting up a small salt instance to play with as a proof of concept
17:48 seamusabshere what is the like "just do it" command? that would tell it to just "build top"?
17:48 forrest state.highstate
17:48 forrest runs whatever the top file says
17:48 seamusabshere salt state.highstate
17:48 forrest salt 'target' state.highstate reads the top file and applies the associated states to the matching minions
17:48 ianmcshane joined #salt
17:48 seamusabshere or salt-call --local state.highstate, which will look for /srv/salt instead of going out to 'salt' (the host)
17:49 forrest well, even when using highstate from the master it still looks at /srv/salt, that command you have is just for minions
17:49 aparsons joined #salt
17:50 ianmcshane joined #salt
17:50 seamusabshere ok so, among other things, if i was using a laptop as salt master, it would have to be running zeromq and all of my dev/staging/prod servers would have to be connected to it? that does seem like a bad idea
17:51 forrest right
17:51 seamusabshere does "masterless" just mean read from /srv/salt?
17:51 lahwran joined #salt
17:52 forrest no, it just means there is no master providing information the minion, you're just running the minion by itself, there is no central hub they all connect to
17:54 drawks so in masterless is there no such thing as pillars?
17:54 forrest drawks, yes
17:54 perfectsine joined #salt
17:54 forrest drawks, I run this app on a masterless setup
17:54 forrest https://github.com/gravyboat/hungryadmin-sls/
17:55 ianmcshane joined #salt
17:55 kingel joined #salt
17:56 CheKoLyN joined #salt
17:56 ianmcshane joined #salt
17:56 aparsons joined #salt
17:57 nitti joined #salt
17:57 felskrone joined #salt
17:58 seamusabshere forrest: would you explain the difference between the "salt" and "pillars" dirs there?
17:58 KevinMGranger salt holds states, pillars hold data
18:01 jalaziz joined #salt
18:01 pjs joined #salt
18:02 XenophonF1 joined #salt
18:02 xcbt joined #salt
18:03 lahwran joined #salt
18:04 ianmcshane joined #salt
18:04 thayne joined #salt
18:05 XenophonF1 left #salt
18:07 XenophonF joined #salt
18:09 forrest seamusabshere, like KevinMGranger said, the pillar directory contains data and settings that I want to provide a value for (keep in mind this is an older app, so it uses some old style conventions), where as the salt directory contains my states which will take actions, and use the pillar data I've created to set variables or other items.
18:10 seamusabshere ah ok, thanks Kevin and forrest
18:10 seamusabshere so is like "set hungryadmin_venv = salt['pillar.get']('hungryadmin:venv')" old syntax?
18:11 forrest that call itself is not, but my overactive usage of set probably is
18:12 forrest in most newer stuff I'd probably just use {{ salt['pillar.get']('hungryadmin:user', 'default_user') }} instead of referencing {{ hungryadmin_user }}
18:13 forrest I just haven't changed it because I'd have to basically rewrite the tutorial
18:14 karthee joined #salt
18:14 aparsons joined #salt
18:16 jdmf joined #salt
18:18 seamusabshere gotcha
18:19 drawks is there a decent repository of non-trivial state files somewhere?
18:20 forrest drawks, https://github.com/saltstack-formulas ?
18:20 forrest you can look at ones like zookeeper
18:20 rome joined #salt
18:20 ianmcshane joined #salt
18:20 QuinnyPig Is there a salt state that will manage a yum or apt repository? I'm not talking clientside, I'm talking about calling createrepo and whatnot to build/maintain the repository.
18:20 snuffeluffegus joined #salt
18:20 drawks after having a real simple time getting package installations working yesterday I'm having a real bear of time figuring out how to do this disk/partition/raid/fs/mount management stuff
18:21 UtahDave QuinnyPig: I think forrest was working on an aptly state
18:21 forrest QuinnyPig, there isn't currently, I've started work on an aptly one though: https://github.com/gravyboat/aptly-formula/tree/master/aptly
18:22 forrest QuinnyPig, it works in the current state, if you comment out the gpg key section, that was the only part I hadn't already written, so I didn't have it done.
18:22 gurpgork joined #salt
18:23 forrest keep in mind aptly is still pretty new, so there are some dumb things that I've worked around.
18:23 forrest QuinnyPig, if you want to make the gpg stuff work, it would be all set I believe.
18:24 jdmf joined #salt
18:24 _chrish_ joined #salt
18:25 gurpgork joined #salt
18:25 seamusabshere would it be reasonable to (1) get a coreos vm running with vagrant, (2) run salt bootstrap in a docker container to create a "local" salt master, somehow make my /srv/salt avail to it(3) create a bunch of docker containers, one per app/service, each just running salt-minion to configure themselves?
18:25 aparsons joined #salt
18:26 seamusabshere that way i centralize package management on salt (at a space cost cause i'm not really optimizing my use of docker images)
18:26 seamusabshere and, from the coreos machine, i can call like "salt 'appname*' state.highstate"
18:26 ndrei joined #salt
18:27 oz_akan joined #salt
18:27 kermit joined #salt
18:28 ekristen joined #salt
18:29 sctsang joined #salt
18:29 smcquay_ joined #salt
18:29 CeBe1 joined #salt
18:30 ekristen basepi: looks like s0undt3ch isn’t on IRC at the moment?
18:30 forrest ekristen, he usually is, did you message him directly?
18:30 ekristen what is his username on irc?
18:30 forrest ekristen, same thing
18:30 ekristen thought so, I don’t see him on the list of users,
18:30 forrest ekristen, just message him, he'll respond when he either gets to work, or has time.
18:30 forrest ekristen, in this channel you mean? Or freenode?
18:31 ekristen this channel, didn’t check freenode
18:31 forrest ekristen, he never joins this channel
18:31 troyready joined #salt
18:31 ekristen thanks forrest
18:32 perfectsine joined #salt
18:32 forrest ekristen, np, he's in portugal and works nights, so he might not be around for a few hours
18:32 ekristen forrest: alright thanks
18:32 forrest yar
18:35 ndrei joined #salt
18:35 perfectsine joined #salt
18:39 aparsons joined #salt
18:41 ajolo joined #salt
18:42 ndrei joined #salt
18:46 aparsons joined #salt
18:47 aparsons joined #salt
18:48 chiui joined #salt
18:49 spookah joined #salt
18:55 felskrone joined #salt
19:00 jdmf joined #salt
19:04 kingel joined #salt
19:04 perfectsine joined #salt
19:04 wangofett joined #salt
19:05 wangofett Does anyone know how to start a background process with the Windows salt minion? I'm trying to start nginx on windows, but when I run `cmd.run 'start /b nginx' cwd='/path/to/nginx'` it just hangs
19:05 basepi ekristen: I don't think he idles in here.  Try #salt-devel
19:06 wangofett nginx starts
19:06 wangofett and I can ctrl+c
19:06 jkaye joined #salt
19:06 wangofett but... it won't run in the background
19:07 nahamu why would you do that with cmd.run from the command line?
19:07 ekristen @basepi thanks, I messaged him directly, he seems to be AFK at the moment
19:07 wangofett nahamu: as opposed to...?
19:07 nahamu also, I think you'll want to set up nginx to run as a service.
19:08 wangofett nginx doesn't run on Windows as a service... sadly
19:08 wangofett does Salt handle services that aren't services? From what I grokked it just uses the underlying service mechanism
19:09 ekristen wangofett: it uses underlying services mechanism
19:09 nahamu then it seems like you may have assembled a collection of parts that don't run very well together...
19:09 blackhelmet Is there any reason windows states can't use pillar data?
19:09 wangofett nahamu: hence, the reason I'm trying to use cmd.run ;)
19:10 hoodow joined #salt
19:10 blackhelmet I know jinja is still a work in progress, but what about using cmd.run with pillar data as arguments?
19:10 nahamu https://www.google.com/search?q=windows+run+anything+as+service
19:11 zenwryly joined #salt
19:12 wangofett hmmmmmm, that looks promising
19:12 nahamu I would figure out how to run nginx as a service, then have salt manage that service.
19:12 kingel joined #salt
19:12 zenwryly I have a config file in a directory alread put in place by a state and I need to copy it into place, so it's not coming from salt://...
19:12 rome joined #salt
19:12 zenwryly Is there a way to copy a file into place using the file state or something else?
19:15 felskrone joined #salt
19:17 jkaye joined #salt
19:17 aparsons joined #salt
19:17 lexelby joined #salt
19:17 murrdoc joined #salt
19:19 lexelby I'm looking at salt with an eye toward replacing mcollective.  In mcollective, I'm able to create a keypair to identify a user or automated script and then set up ACLs for what actions those callers can perform.  Salt seems to have the ability to control functions that a user can access, but I can't see how to use this in a non-interactive way, e.g. from scripts.  Is this possible?
19:20 jtratner joined #salt
19:20 dude051 joined #salt
19:20 lexelby Example: I'd like some cron job on some host to be able to run one specific function (and optionally, on some subset of hosts).
19:20 jtratner hi all - are there any guides to reading salt state docs? Specifically, I'm not clear how to translate arguments the Python function arguments into yaml - e.g. here - http://docs.saltstack.com/en/latest/ref/states/all/salt.states.supervisord.html
19:21 aparsons joined #salt
19:21 jtratner does that mean that "running" can talk name, restart, update, runas and user as arguments?
19:24 aparsons joined #salt
19:24 jtratner I guess I'm just asking if it translates 1:1 - I find it a little confusing
19:25 kballou joined #salt
19:26 BrendanGilmore joined #salt
19:26 perfectsine joined #salt
19:28 kingel joined #salt
19:28 dude051 joined #salt
19:29 sysadmin75 left #salt
19:34 scarcry joined #salt
19:38 marco_en_voyage joined #salt
19:40 jpaetzel joined #salt
19:41 aparsons joined #salt
19:42 aparsons_ joined #salt
19:43 to_json1 joined #salt
19:43 drawks joined #salt
19:52 n8n joined #salt
19:53 forrest lexelby, take a look at http://docs.saltstack.com/en/latest/ref/clientacl.html and see if maybe that does what you need? I'm not 100% sure if it will though
19:53 ericof joined #salt
19:56 drawks hrm. so salt.states.module documentation is a little unclear to me. if i want to run a module dependent on the return of another module how do i write that in a state?
19:57 ckao joined #salt
19:57 perfectsine joined #salt
19:58 forrest drawks, you mean call the module in a state?
19:58 maboum joined #salt
19:58 blarghmatey joined #salt
19:59 aparsons joined #salt
20:00 aparsons_ joined #salt
20:00 drawks yeah, well maybe it's easier if i just say what specifically I'm trying to do. I'd like to partition some disks only in the case that they have no label or have a label with no partitions defined
20:01 forrest oh I  see
20:01 drawks it seems like salt.modules.parted will be at least part of the solution
20:01 drawks and salt.states.module
20:02 drawks and i /imagine/ the wait and mod_watch portions of salt.states.module are used for the triggering logic
20:02 drawks but i have no clue how those are meant to be plumbed together
20:02 possibilities joined #salt
20:02 drawks forrest: does that make sense? Is it possible?
20:02 forrest drawks, Hmm, yeah that's a tough one. I feel like someone did this before
20:03 forrest but I can't remember...
20:03 aparson__ joined #salt
20:03 forrest drawks, I think it's possible, but it will take some work to make happen. If I remember correctly last time someone had to use a combo of cmd.watch and cmd.run to do it, where they were checking for values or something, but I can't remember :(
20:04 drawks i don't even really understand how the watch, wait, run stuff is meant to be plumbed together. the docs are not the most clear/verbose on the topic
20:04 forrest drawks, yeah they could be much better with more examples that's for sure!
20:08 ndrei joined #salt
20:11 kingel joined #salt
20:13 pdayton joined #salt
20:15 jdmf joined #salt
20:16 cpowell joined #salt
20:17 aparsons joined #salt
20:18 xcbt joined #salt
20:19 bhosmer joined #salt
20:23 longdays joined #salt
20:23 bmcorser joined #salt
20:24 thayne joined #salt
20:24 longdays hey guys. I have a salt minion whos key has been accepted by the master. The master server can ping the minion directly as they are on the same network but when I run 'salt minionname test.ping' i get no response.
20:24 longdays the salt master can run a test ping to the hundred or so other machines in the system no problem. Any ideas?
20:24 forrest longdays, are the master and minion the same release of salt?
20:24 drawks is the minion running?
20:25 longdays minion is running as seen in ps
20:25 jalaziz joined #salt
20:26 longdays salt-call --version on the minion is
20:26 longdays .10
20:26 longdays the newest
20:26 longdays is the best way to check the master version via salt-call --version also?
20:26 forrest yep
20:26 forrest well, if it's running a minion
20:27 murrdoc joined #salt
20:28 forrest longdays, on the master just du salt --version
20:28 deepz88 joined #salt
20:28 lpmulligan joined #salt
20:30 anitak joined #salt
20:31 jhauser joined #salt
20:31 aparsons joined #salt
20:31 longdays master is 2014.1.6 so I am going to run an upgrade here
20:31 anitakrueger hey guys…I've been wondering if anybody has been working on a saltstack integration with hipchat by any chance? I would like to notify people for certain salt events...
20:32 forrest longdays, keep in mind there might be communication issues if the versions don't match
20:32 forrest longdays, I'd suggest to just install the minion with the older release
20:32 Ryan_Lane anitakrueger: that would be nice. I don't know of a current module to do so
20:32 forrest longdays, bad to do an update like that later in the day :D
20:32 longdays Ah, yeah good point
20:32 longdays haha
20:32 longdays yeah
20:33 Ryan_Lane anitakrueger: salt modules are easy to write, though, if you wanted to have a go at it
20:33 smcquay joined #salt
20:33 anitakrueger lol, I know :)
20:33 anitakrueger I've been thinking about it
20:33 forrest anitakrueger, not that I'm aware of, I opened an issue for this last year: https://github.com/saltstack/salt/issues/8682
20:33 anitakrueger just thought I'd ask here first
20:33 forrest so if you do it, please update the issue!
20:34 jdmf joined #salt
20:34 forrest UtahDave has some comments in there about some old prototyping
20:34 Ryan_Lane I could definitely use this :)
20:34 anitakrueger well…I need some sort of notification mechanism…was trying to use the pagerduty module, but I really don't want to create incidents for random stuff
20:37 xcbt joined #salt
20:37 pssblts joined #salt
20:38 Gareth Having a returner that talks to hipcat would be a good approach.
20:38 longdays joined #salt
20:39 steve1 joined #salt
20:39 philipsd6_ I would think the best way to provide this integration is via salt-api.
20:41 steve1 In an auto-scaling world, where minions will auto-start and auto-die, would it make sense to use the same minion PKI key on all minions to avoid having to "salt-key —accept" each newly created minion?  Or is that a bad idea?
20:41 shaggy_surfer joined #salt
20:42 wangofett steve1: I don't know that it would even work...
20:42 philipsd6 It's a bad idea to use the same PKI key, in my opinion.
20:43 wangofett steve1: *maybe* create a pool of PKs to distribute
20:43 philipsd6 you'll have to decide your security model, but you can use auto_accept: True in the master config file.
20:44 philipsd6 but there also seems to be support for rule based key acceptance: autosign_file, autoreject_file...
20:44 mechanicalduck_ joined #salt
20:44 philipsd6 but you can also set up a reactor based system that listens for new minions, and then performs some logical verification before accepting the key
20:45 aparsons joined #salt
20:46 viq joined #salt
20:47 steve1 I haven't delved into reactor stuff yet.  I'll look that up, and the autosign_file and autoreject_file rules.  haven't seen those yet either.  Thanks for the tips, philipsd6
20:47 philipsd6 I haven't used them myself, I just found them in the master config file this morning when I did another bootstrap on a dev system. :)
20:48 wangofett nice ;)
20:48 steve1 do most systems just use salt-cloud to spin up new instances, instead of something like AWS auto-scaling-groups?
20:48 wangofett learning some good things myself, lurking in here
20:48 nitti_ joined #salt
20:49 philipsd6 Back to your point anitakrueger -- I've been doing some HipChat integration setup just recently on an internal server beta, and I'm looking at this stack:
20:49 rome_ joined #salt
20:50 philipsd6 salt-api / rest_tornado (Websockets) / HipChat-Chatty
20:52 aparsons joined #salt
20:53 philipsd6 But we don't have salt doing anything in our $company yet, so it's a _very_ low priority.
20:55 blarghmatey joined #salt
20:56 toastedpenguin joined #salt
20:57 aparsons joined #salt
20:58 jamesn Is salt.event.fire_master threadsafe?
20:59 blackhelmet Are there any saltstack employees here?
21:00 forrest they are around blackhelmet, not sure if anyone is presently at their desk, if you have a question we can try to get it answered.
21:00 forrest jamesn, I don't remember :(
21:01 blackhelmet I'm doing a presentation at an upcoming con. I used saltstack for the server provisioning (horizontal scale). need to know if using the saltstack logo on a diagram slide is an issue
21:01 Ozack2 joined #salt
21:01 forrest blackhelmet, it shouldn't be, in fact Salt actually has high quality images, let's ask, basepi are you around?
21:02 basepi Maybe
21:02 forrest basepi, blackhelmet is doing a presentation at an upcoming con, he wants to confirm using the saltstack logo is ok, on top of that, can you provide him the high quality scaling version?
21:02 forrest I can't remember if it's on the site somewhere
21:02 forrest but I know I've seen whiteinge hand it out
21:03 oz_akan joined #salt
21:03 basepi I should have it, let me do some looking
21:03 forrest basepi, awesome thanks!
21:04 blackhelmet Thank you both!
21:04 forrest blackhelmet, yeah of course, what con are you presenting at, and what is your talk on?
21:04 spookah joined #salt
21:04 blackhelmet HP Protect, on scaling dynamic security scanning programs
21:04 forrest oh cool
21:04 forrest Are you going to put the slides up on slidedeck or something?
21:05 blackhelmet For the POC I used Salt to scale out and manage rule definitions, installs, etc on the windows nodes
21:05 blackhelmet I don't quite know yet
21:05 blackhelmet HP collects all the decks and posts them on their site
21:05 forrest blackhelmet, oh nice, are you able to publish the repo? I know a lot of the windows guys would love some more projects for examples.
21:05 blackhelmet I'll be glad to kick a link
21:05 basepi Nice
21:05 blackhelmet Ha, I would have loved more examples :)
21:06 forrest blackhelmet, yeah, if you have it on github that would be awesome, then I can star it :P
21:06 dcmorton joined #salt
21:06 blackhelmet Waiting to hear back from corp on whether we can opensource
21:06 aparsons joined #salt
21:06 thayne joined #salt
21:06 forrest blackhelmet, that would be sick
21:06 blackhelmet If we can't, I'll be happy to very specifically help someone recreate
21:07 forrest blackhelmet, awesome that would be good. More Windows examples would be amazing. You could even write a formula on it depending on how crazy you want to get :D
21:07 blackhelmet So far it's just a couple states that manage the rule packs and a win-repo to install and license the software
21:08 basepi blackhelmet: http://cl.ly/282t21161R29
21:08 basepi svg and eps versions in that zip
21:08 blackhelmet Awesome, thanks!
21:08 * basepi nods
21:08 intellix joined #salt
21:08 forrest blackhelmet, sounds like a formula to me!
21:08 murrdoc yes formulas ftw
21:08 forrest basepi, are those on the repo somewhere? I can never remember..
21:09 basepi Nah, I went and fetched them out of an internal e-mail
21:09 basepi We need to get a media kit up again
21:09 forrest basepi, yeah I thought there was one at some point
21:10 rome_ joined #salt
21:11 che-arne joined #salt
21:15 geekmush1 joined #salt
21:15 aparsons joined #salt
21:16 murrdoc does salt have a good mongodb formula
21:16 murrdoc nope
21:16 murrdoc :D
21:16 murrdoc <3 mongo
21:17 * drawks is going absolutely crazy trying to figure out how this conditional stuff is meant to work
21:17 forrest murrdoc, https://github.com/saltstack-formulas/mongodb-formula ?
21:17 forrest murrdoc, not good enough?
21:17 murrdoc with mongo (i could be wrong) you can use config management to a point
21:18 murrdoc the formula btw is pretty good
21:18 murrdoc like you cant add nodes to a mongo cluster with commands
21:18 murrdoc you have to generate a json config and pass it into the mongodb client
21:19 aparsons joined #salt
21:20 Ryan_Lane I have a horrible config file where a daemon will change exactly one line in the file, but I need the rest of the file to be managed. anyone know how I can handle this?
21:21 Ryan_Lane blockreplace?
21:21 kermit joined #salt
21:22 manfred Ryan_Lane: have you messed with block-replace yet?
21:22 jalaziz joined #salt
21:22 Ryan_Lane I haven't
21:23 manfred i was looking at it yesterday, in the end, you can specify what content to add into the file using contents: | or whatever it is in the yaml file, but you can specify beginning marker and end marker
21:23 manfred so in the future, if you change something it will just drop everything between those markers, and replace it in the file
21:24 manfred it is pretty slick
21:25 Ryan_Lane hm. that may work. I'll need to see how this daemon messes with the file
21:28 ianmcshane joined #salt
21:28 drawks heh, yet another issue filed.
21:28 drawks I'm on fire :)
21:29 gurpgork joined #salt
21:31 snuffeluffegus joined #salt
21:32 delinquentme joined #salt
21:32 delinquentme join #ubuntu-server
21:32 delinquentme so im having exceptional difficulty getting this command to run consistently: # salt $MINION_NAME-01 cp.push /etc/munge/munge.key
21:34 wangofett joined #salt
21:36 Rasathus joined #salt
21:40 melinath joined #salt
21:41 murrdoc1 joined #salt
21:42 drawks so, i've got another wierd question. for modules that have virtualnames such as pkg what happens when the minion has multiple valid providers of the module's methods?
21:42 nitti joined #salt
21:43 drawks I mean for package managment that seems an unlikely situation, but I do see that the mdadm module is defined as a virtualname "raid" and it is totally sane that a system might have more than one raid provider.
21:43 MindDrive joined #salt
21:43 drawks i.e. uses mdadm software raid for some devices attached to the motherboard but has one or more hardware adaptors that also have hardware raid
21:43 CeBe joined #salt
21:44 justyns drawks, I don't remember for sure but I think I saw something about a "provider" option when using those modules
21:44 drawks is the virtualname overloading meant to only select a single underlying module? Or is the interface meant to interleave them
21:45 justyns this is what I was thinking of: http://docs.saltstack.com/en/latest/ref/states/providers.html
21:46 drawks ah cool
21:47 jkaye joined #salt
21:47 murrdoc joined #salt
21:51 perfectsine joined #salt
21:51 Ryan_Lane sigh.
21:51 Ryan_Lane the daemon that messes with the file rewrites the entire file
21:51 Ryan_Lane and strips comments
21:51 murrdoc joined #salt
21:52 bezeee joined #salt
21:52 Ryan_Lane is there any way to manage a file and just ignore a single line?
21:55 scoates anyone know if the 2014.7 branch is currently bootstrappable (with master)? I get http://paste.roguecoders.com/p/1aaa84e776415450567700d6a6428bd0.txt (Debian 7.5)
21:56 SpeeR is there a way to use a wildcard in the jinja, trying for something like this....  {% if grains['host'] == 'sweb*' %}    and the minions host is sweb01a
21:56 scoates SpeeR: `if grains['host'].startswith('sweb')` should work
21:57 SpeeR perfect that did it, thanks scoates!
21:58 scoates sure
22:01 Gareth Ryan_Lane: manage it how?
22:01 Ryan_Lane I don't know. this makes me want to stab these developers right in their face
22:01 Ryan_Lane it's obvious they have no idea what config management is
22:02 KyleG joined #salt
22:02 KyleG joined #salt
22:02 Gareth so the daemon in question is rewriting it's configuration file?
22:03 Ryan_Lane yes
22:03 Ryan_Lane but only a single line of it
22:03 Ryan_Lane http://wiki.splunk.com/Community:Splunk2Splunk_SSL_DefaultCerts
22:03 Ryan_Lane because they hate people, obviously
22:03 Gareth oh. splunk.  all bets are off.
22:03 Gareth "Here by monsters."
22:03 Gareth s/by/be/
22:04 scoates Ryan_Lane: potentially dumb approach, but can you make it +r-w ?
22:05 fredvd joined #salt
22:05 Gareth Ryan_Lane: what is the line it's rewriting?
22:05 Ryan_Lane sslPassword
22:05 Ryan_Lane it implies it won't in a certain location, but it lies
22:08 Gareth so it requires an SSL certification with a password?
22:08 Ryan_Lane yep. and it hashes whatever clear-text password you add
22:09 TheThing joined #salt
22:09 Gareth Im guessing it doesn't work if you but the password in there already hashed?
22:09 forrest Ryan_Lane, that tweet about splunk is funny
22:10 Ryan_Lane it doesn't :(
22:10 Ryan_Lane tried that
22:10 Ryan_Lane I don't know how it's hashing it
22:10 gzcwnk hmm, where can I submit bugs?
22:10 murrdoc multiple block replaces will suck
22:10 murrdoc but will work
22:10 Ryan_Lane forrest: heh
22:10 wangofett how do I get more information about failed states?
22:10 forrest gzcwnk, https://github.com/saltstack/salt/issues/new
22:10 Ryan_Lane I have serious doubts I'll get a response from them
22:10 forrest gzcwnk, please search for the bug first to make sure it doesn't exist.
22:11 forrest wangofett, did you already run -l debug?
22:11 murrdoc ryan what bout doing a replace: False
22:11 wangofett I mean for previously run jobs
22:11 aparsons joined #salt
22:11 gzcwnk the problem is knowing what to search for, i have not seen this one in older versions of salt
22:12 tcotav @Ryan_Lane: http://answers.splunk.com/answers/33385/splunk-hashes-the-sslpassword-making-it-so-that-the-key-file-cant-be-read   # does this help?
22:13 tcotav (almost feel like I should've pastebin'd that damn url...)
22:13 wangofett forrest: -l debug also doesn't provide any info
22:13 Ryan_Lane heh
22:15 forrest wangofett, alright at that point I'd go onto the minion, restart it in debug mode, then run salt-call state.sls state.state -l debug
22:15 forrest and see if you get anything that way the debug should then drop to the command line, and to the minion log
22:15 forrest so it should be giving you all the  way down to the system calls
22:16 forrest wangofett, unless this is windows
22:16 forrest in which case I can't help
22:17 Ryan_Lane tcotav: hm. I can standardize the secret, which would let me have a consistent hash
22:17 aparsons joined #salt
22:19 forrest Ryan_Lane, that would be too easy
22:19 tcotav @Ryan_Lane: it was all I could find/figure
22:20 drawks can you target minions based on pillar in top.sls? I don't see any examples of how to do that in the docs
22:20 forrest Ryan_Lane, just fix splunk
22:20 forrest duh
22:20 drawks oh duh I see
22:20 drawks I have bad reading comprehension
22:20 Ryan_Lane yeah, that does actually work
22:20 forrest drawks, ? Targeting by pillar? I'm confused.
22:21 drawks http://docs.saltstack.com/en/latest/ref/states/top.html#other-ways-of-targeting-minions
22:21 tcotav fixing splunk or standardizing? ;-)
22:21 Ryan_Lane standardizing
22:21 drawks it's right there I just misread it
22:21 forrest drawks, oh ok, I thought you wanted to do something else, my bad
22:21 Ryan_Lane splunk is proprietary, so I can't change it :(
22:21 forrest pro-pro-proprietary software?? What is this evil
22:21 drawks splunk is a huge pain in the ass
22:21 tcotav yeah, I was just giving you grief.  we use it here too.
22:21 drawks also way over priced
22:22 tcotav ^
22:22 tcotav BUT its pretty dang awesome to use
22:22 wangofett forrest: yeah... windows :P
22:22 forrest wangofett, well you can try those things then, I guarantee nothing!
22:22 drawks we tested it for about a year and then tossed it because they have no concept of event value vs total throughput
22:22 drawks also their "packaging" was terrible
22:23 drawks I ended up tearing it all apart and making custom debian packages
22:23 KyleG "splunk is proprietary, so I can't change it "
22:23 KyleG WRONG
22:23 KyleG you can write plugins or attach scripts. Do you know python/bash? Then you can change splunk.
22:23 Ryan_Lane hahaha
22:23 KyleG i <3 splunk so much
22:23 KyleG it's changed how we do business and ops
22:23 KyleG seriously great
22:23 drawks kibana is catching up to splunk
22:23 KyleG feed all our important logs and metrics into there
22:23 drawks and it's free
22:23 Ryan_Lane I can't change how they're managing their config files
22:23 KyleG drawks: In my testing, I found ES requires MUCH MORE CPU+Disk IO+Disk space than Splunk does.
22:23 tcotav I don't admin it -- I'm just a user of splunk.  we depend on it pretty heavily for ops/dev
22:23 KyleG Much more.
22:24 KyleG Like 3 physical ES servers to every 1 splunk server
22:24 drawks if i fed all our important log files into splunk the license would cost millions of dollars
22:24 murrdoc yeah ES is cool and all
22:24 KyleG if you're big enough to afford it then cool
22:24 drawks hardware is the cheapest part of splunk
22:24 KyleG EA uses splunk for all of their CoD video game metrics
22:24 drawks so saying it uses less hardware is a real misstep in the valuation
22:25 KyleG Etsy uses Splunk, and they're huge open source proponents  (http://www.splunk.com/view/SP-CAAAGH3)
22:25 drawks 1 quarter of splunk license buys a 10 machine elastic search cluster with 40TB of pci-e flash storage and 2TB of ram
22:25 murrdoc yeah
22:25 KyleG drawks: OpEx of managing those 10 ES clusters.
22:25 iggy reimann is the way I'm leaning these days
22:25 tcotav we use ES for other stuff
22:25 KyleG all those #s add up
22:25 murrdoc now lets add managing those servers
22:25 KyleG I tested kibana, and I had weird ass issues with indexes among other high usage I noticed
22:25 KyleG murrdoc: Exactly
22:25 drawks 10 additional servers in a 2000+ machine system is negigable
22:26 KyleG It's not if it's part of a critical component of your infrastructure
22:26 murrdoc how do u rotate your es indexes
22:26 tcotav well, its more another app silo and a critical one, drawks
22:26 KyleG i don't.
22:26 drawks i really liked using splunk, but the cost is just ridic
22:26 KyleG i dropped ES once I found it to require MUCH more time to manage than Splunk
22:27 KyleG Idk why some sys admins insist against paying for good software
22:27 KyleG just because you can save money, does not mean it's the right solution.
22:27 drawks they maintain some 1:1 mapping of index volume to license cost. even though in nearly any high volume environment the relative value of events goes down with total volume
22:27 KyleG Sometimes it's worth it to save that money
22:27 KyleG by buying the software and cashing in on dat opex savings
22:28 drawks i'm not against paying. we use plenty of commercial software, but for what splunk wanted us to pay we could seriously hire 6-12 FTE
22:28 KyleG did you hire 6-12 FTE?
22:28 drawks a couple
22:29 tcotav you can maybe buy a small splunk then with the leftover monies
22:29 drawks i'm not saying it isn't an answer for some people
22:29 KyleG so you hired like 10% of what you saved
22:29 drawks but just not an answer for everyone
22:29 drawks saying that we should buy it because you did is a gross over simplification of all the factors
22:29 KyleG i would never say buy it because I did
22:29 KyleG I'm saying it's the better product
22:29 KyleG ES is inferior in every way
22:30 KyleG that's why I'm saying you should do it
22:30 drawks cost aside it is a nicer piece of software to use
22:30 pppingme joined #salt
22:30 KyleG not because I did
22:30 drawks but big picture it isn't.
22:30 murrdoc ES ?
22:30 KyleG Elastic Search
22:30 murrdoc why is it nicer piece of software ?
22:30 drawks splunk
22:30 drawks but ELK is pretty dope
22:31 drawks and getting doper by the day
22:31 forrest What happened to salt? WHERE IS THE SALTINESS??
22:31 forrest WHAT HAVE YOU DONE TO THE CHANNEL! :D
22:31 KyleG forrest: You can't make es food without salt
22:31 KyleG hah
22:31 drawks splunk hates salt ;)
22:31 murrdoc there is plenty saltiness in some of these opinions :)
22:31 forrest well, a lot of people hate splunk
22:31 Tahm We're having the new version of editor wars :D
22:31 KyleG es…esponol…spanish food…salt…my puns.
22:31 KyleG espanol*
22:32 drawks i'd talk more about salt if there were more easy answers to my problems :)
22:32 KyleG whenever I've had _serious_ issues with salt, it's never been easy to find an answer
22:32 murrdoc oh ryan, how are you mathing your aws nodes in top.sls
22:32 drawks I still have no clue how to do the conditional logic for managing partitions in my states
22:32 KyleG I've learned the code base quite well lol
22:32 murrdoc grains or hostnames or aws data
22:32 Ryan_Lane murrdoc: http://ryandlane.com/blog/2014/08/26/saltstack-masterless-bootstrapping/
22:32 KyleG drawks: It's outlined here http://docs.saltstack.com/en/latest/topics/tutorials/states_pt3.html
22:33 Ryan_Lane I turn the hostname into grains
22:33 Ryan_Lane then I match on the grains
22:33 Ryan_Lane I generate the hostnames from autoscale group tags
22:33 murrdoc autoscale group tags
22:33 murrdoc got it
22:33 Ryan_Lane there's a default autoscale group tag
22:33 Ryan_Lane beware that tags can take a while to propagate sometimes
22:33 drawks KyleG: if the answer is on that page I haven't found it because I've read that thing multiple times now
22:34 Ryan_Lane I've seen it take 2+ minutes
22:34 Ryan_Lane though it usually happens before the instance is finished launching (before cloud-init)
22:35 drawks the logic I want is something like. if block device exists and it has no partitions then create a new label and create the partitions. i suspect i'd need to use salt.states.module and salt.modules.parted to accomplish this
22:35 drawks but the actions need to be absolutely idempotent
22:35 steve1 Ryan_Lane:  how do you get ASG tags into hostnames?
22:36 Ryan_Lane steve1: I have a naming convention for resources
22:36 Ryan_Lane service-service_instance-region (where service_instance is like environment - production, staging, etc.)
22:36 Ryan_Lane I have a custom grain that gets the tag via boto
22:37 Ryan_Lane it parses it and turns it into grains
22:37 steve1 ah, so you're using an external thingy (salt-cloud?) to look for the new instance and do things to them?
22:37 drawks KyleG: do you know how to accomplish such a thing?
22:37 Ryan_Lane steve1: I wrote a bunch of execution and state modules for boto
22:37 deepz88 joined #salt
22:38 steve1 gotcha
22:38 Ryan_Lane steve1: http://ryandlane.com/blog/2014/08/26/saltstack-masterless-bootstrapping/ <-- see the beginning for the list of states
22:39 aparsons joined #salt
22:40 dirtyob joined #salt
22:40 Ryan_Lane (that also shows exactly how I'm creating the autoscale groups, and how I'm doing the bootstrapping)
22:42 murrdoc1 joined #salt
22:48 delinquentme joined #salt
22:49 manfred Ryan_Lane: question, for disabling state runs, you wanted that on your masterless minions right?
22:49 Ryan_Lane yep
22:49 Ryan_Lane it would be ideal if it worked the same in either situation, though
22:49 Ryan_Lane master or masterless
22:49 Ryan_Lane a consistent interface is always ideal ;)
22:50 manfred and this is salt-call --local or not? do you use salt-key at all?
22:50 Ryan_Lane correct
22:50 Ryan_Lane no salt-key
22:50 Ryan_Lane I may add a master later for remote execution
22:50 aquinas joined #salt
22:50 manfred damn
22:50 manfred so
22:50 manfred what I wanted to do was use salt-key to just 'disable' the minion instead of deleting it
22:51 Ryan_Lane that's not the same thing I want at all ;)
22:51 Ryan_Lane ideally I'd still be able to do module calls
22:51 Ryan_Lane just not state runs
22:51 manfred yeah, that was what I wanted to do
22:51 manfred it would only disable the state system, everything else would still work
22:51 Ryan_Lane if you disabled the key?
22:51 Ryan_Lane that would also stop remote execution, wouldn't it?
22:52 manfred that wasn't what I was planning on doing
22:52 manfred i wanted to make that configurale
22:52 manfred to say, just disable states... or disable everything
22:52 Ryan_Lane yeah, I think doing it via the key isn't the right approach :)
22:53 manfred ok
22:53 Ryan_Lane some internal grain like system would be best
22:54 manfred ¯\(°_o)/¯
22:54 fredvd joined #salt
22:54 manfred meh was just thinking about it when I got off work
22:54 jkaye joined #salt
22:55 DaveQB joined #salt
22:56 brendangilmor joined #salt
22:56 capriciouseducat joined #salt
22:56 muzammilr joined #salt
22:57 muzammilr can i use cp.get_file to do substations on the file before/after it gets copied over to minion like what cp.get_template does ?
22:58 manfred how are you doing it with cp.get_template?
23:00 muzammilr sudo salt '*' cp.get_template salt://initd.sh /memcached/bin/init.sh port=1234 memory=1024
23:02 manfred so, the whole point of the template is to replace the variables, the file one doesn't afaik
23:02 manfred http://www.reddit.com/r/linux/comments/2fhwaq/anybody_tried_centos_7/
23:02 manfred bah...
23:02 manfred this link https://github.com/saltstack/salt/blob/develop/salt/modules/cp.py#L162
23:02 forrest no one has tried centos7
23:02 forrest NO ONE
23:02 ndrei joined #salt
23:03 manfred forrest: that was my response to the first time the thread popped up
23:03 Outlander joined #salt
23:03 muzammilr manfred: i was afraid of that, thx for clear it out.
23:03 manfred muzammilr: you could the file.manage that the file.managed state uses maybe?
23:04 manfred muzammilr: https://github.com/saltstack/salt/blob/2014.1/salt/modules/file.py#L2513
23:04 muzammilr let me give it a try
23:04 manfred where you can define contents='{}'
23:04 manfred but that uses the cp.cache_file https://github.com/saltstack/salt/blob/2014.1/salt/modules/file.py#L2553
23:05 manfred so the file gets cached on the minion in /var/cache/salt/minion
23:05 manfred and then the cp.cache_file grabs what the file path is iirc, and then moves it into plac
23:05 manfred e
23:05 muzammilr manfred: and that is bad ?
23:05 manfred no?
23:05 manfred i was just describing how it worked
23:05 muzammilr okey got it
23:05 manfred so it doesn't pull it directly from the master like cp.get_file does, that would have happened before
23:06 manfred but yeah, file.manage_file should work
23:06 manfred https://github.com/saltstack/salt/blob/2014.1/salt/states/file.py#L1285 it is what is used by the file.managed state
23:07 muzammilr ok
23:09 yomilk joined #salt
23:10 nitti joined #salt
23:13 skyler joined #salt
23:14 drawks hrm... bogus, the states.mdadm module doesn't work with mdadm on the current debian wheezy since it always defaults to version 1.2 metadata and always prompt that stupid "may not be suitable as a boot device" warning regardless of what options you pass it
23:14 rypeck joined #salt
23:15 forrest lol
23:15 drawks ah, if you pass it the metadata version explicitely it doesn't warn.
23:15 drawks mdadm is stupid
23:15 manfred yes
23:15 forrest yes ++
23:16 audreyr joined #salt
23:22 aquinas joined #salt
23:23 aquinas_ joined #salt
23:26 * drawks opens another issue on github
23:26 forrest drawks, go go go!
23:26 forrest drawks, the more issues fixed here, hopefully the fewer issues in 2014.7!
23:26 blarghmatey joined #salt
23:27 mosen joined #salt
23:28 n8n joined #salt
23:33 aparsons_ joined #salt
23:37 Pixionus joined #salt
23:38 TTimo joined #salt
23:40 shawnjgoff joined #salt
23:41 shawnjgoff The network state documentation has examples with an "ipv6" key, but I can't tell what it does.
23:41 shawnjgoff Is there a way to add an ipv6 address to an interface?
23:42 manfred shawnjgoff: it looks like it is just passed to the network.py module
23:42 manfred https://github.com/saltstack/salt/blob/develop/salt/modules/network.py#L103
23:43 manfred looks like it might only be used by openbsd though
23:44 manfred ¯\(°_o)/¯
23:45 shawnjgoff Hm. The module has an ip_addrs6 method. I wonder if the state has a key. I'm not quite sure if modules and states are related yet.
23:48 yomilk joined #salt
23:49 rome joined #salt
23:49 shaggy_surfer joined #salt
23:50 xcbt joined #salt
23:51 n8n joined #salt
23:53 longdays joined #salt
23:55 BrendanGilmore joined #salt
23:57 ajprog_laptop joined #salt
23:59 rome joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary