Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-10-24

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 ajolo joined #salt
00:07 al joined #salt
00:08 jalaziz joined #salt
00:10 diegows joined #salt
00:13 nitti joined #salt
00:14 murrdoc so __number5__ basically you can check in the recipe.rb with each repo
00:14 bezeee joined #salt
00:14 murrdoc that you need fpm'ed
00:14 murrdoc i like
00:17 __number5__ yep, and quite often I have different recipe of different version of same package, e.g. salt-stable.rb and salt-git.rb
00:26 jergerber joined #salt
00:26 rap424 joined #salt
00:28 murrdoc share cos u care ?
00:28 cmthornton joined #salt
00:30 __number5__ murrdoc: sorry I don't have salt ones, since I'm too lazy I just use salt-bootstrap ;)
00:31 murrdoc showed me a dream
00:31 murrdoc u did
00:31 invsblduck joined #salt
00:31 murrdoc i ll take a crack at i t
00:33 whatapain joined #salt
00:35 whatapain can anyone help confirm if the state.user expire function is working?  i have set expire: 1 to lock an account but it doesn't seem to be making the change.  i expect chage -l <user> to show an expiration of Jan 02, 1970 but it's currently showing never.
00:35 whatapain salt 2014.1.10 (Hydrogen)
00:46 ioio_ joined #salt
00:49 skyler I am having a problem where suddenly my salt master is unreliable. I keep getting errors like this: Source file salt://openssh/files/ssh_config not found
00:49 skyler And the files are there.
00:49 skyler Anyone know why this might be? I have had this happen once before, but I never learned why.
00:50 skyler It seems like there might be some kind of networking problem because my commands are also timing out fairly frequently.
00:51 invsblduck joined #salt
00:52 skyler I also get this occasionally: Failed to authenticate!  This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error ocurred (check disk/inode usage).
00:53 CeBe1 joined #salt
00:53 TheoSLC joined #salt
00:53 TheoSLC Anybody at the SLC meetup?
01:03 CeBe2 joined #salt
01:03 UtahDave MTecknology: use the new master job cache
01:04 aquinas joined #salt
01:04 UtahDave TheoSLC: /me raises hand
01:09 ajolo joined #salt
01:09 MTecknology UtahDave: you happen to have a docs link handy?
01:09 UtahDave MTecknology: http://docs.saltstack.com/en/latest/ref/configuration/master.html#master-job-cache
01:10 TheoSLC UtahDave: Hi Dave
01:10 UtahDave It still uses the returners, but the minions don't return directly to the database. The minions return to the salt master over zmq like usual, then the master puts everything into the db
01:11 UtahDave cachedout just fixed the mysql returner today to work with the master job cache
01:11 * MTecknology hugs UtahDave
01:11 MTecknology I'm now more excited for the next major release.
01:12 UtahDave MTecknology: yeah, it's going to be awesome.  I'm stoked, too
01:12 MTecknology gonna be one massive release notes read
01:13 jalaziz_ joined #salt
01:14 scoates joined #salt
01:15 UtahDave oh yeah. huge.
01:15 fragamus joined #salt
01:21 jonbrefe joined #salt
01:37 malinoff joined #salt
01:43 elfixit joined #salt
01:51 jeddi joined #salt
01:56 to_json joined #salt
01:58 ekristen joined #salt
02:11 mpoole joined #salt
02:15 melinath joined #salt
02:16 anotherZero joined #salt
02:18 floWenoL joined #salt
02:22 otter768 joined #salt
02:28 Ch3LL_ joined #salt
02:38 aparsons joined #salt
02:39 Heartsbane joined #salt
02:39 Heartsbane joined #salt
02:43 aparsons joined #salt
02:43 XenophonF joined #salt
02:44 XenophonF so i'm kind of jumping into the deep end when it comes to using gitfs and salt
02:44 XenophonF i have a new repo named "salt-states"
02:44 to_json joined #salt
02:44 ndrei joined #salt
02:44 XenophonF which has four branches: master, development, testing, and production
02:45 XenophonF i put a top.sls and a basic salt master/minion config into the production branch
02:46 XenophonF the other branches are empty for now
02:46 XenophonF so that's all cool and groovy
02:46 XenophonF so i guess my question now comes down to targeting
02:46 XenophonF how do minions know which environment they're in?
02:47 arthabaska joined #salt
02:47 __number5__ XenophonF: matching in top.sls
02:47 __number5__ http://docs.saltstack.com/en/latest/ref/states/top.html
02:48 XenophonF thanks
02:48 XenophonF so in the dev and test versions of top.sls, I can't really use '*' as a target, can I?
02:49 ikanobori_ joined #salt
02:49 XenophonF for those environments i'd need to target using a minion id or grain or something
02:49 XenophonF right?
02:51 __number5__ have no idea how multiple top.sls works, so I only have only one top.sls in base environment
02:52 XenophonF gotcha
02:57 joehh UtahDave: I see you have plans :)
02:58 joehh what sort of timing are you thinking about?
03:08 jalaziz joined #salt
03:16 dwfreed belak: also, ohai :D
03:17 belak dwfreed: hi. as always. YOU'RE EVERYWHERE.
03:17 dwfreed belak: not really
03:17 dwfreed belak: most of my open IRC windows are queries
03:25 kusams joined #salt
03:27 hasues joined #salt
03:27 hasues left #salt
03:31 XenophonF it would be totally bitchin' if the windows salt minion were included in saltstack/salt-winrepo
03:38 mgw joined #salt
03:45 lowkeyliesmith joined #salt
03:50 ramishra joined #salt
03:52 XenophonF left #salt
03:55 srage_ joined #salt
03:57 n8n joined #salt
03:58 glyf joined #salt
04:02 mosen joined #salt
04:04 UtahDave hey, joehh!  are you still around?
04:04 Katafalkas joined #salt
04:13 kusams joined #salt
04:14 SheetiS joined #salt
04:16 n8n joined #salt
04:20 arthabaska joined #salt
04:22 Ch3LL_ left #salt
04:24 bezeee joined #salt
04:28 UtahDave joehh: ping me when you get a minute
04:38 srage joined #salt
04:40 jonbrefe joined #salt
04:48 ramteid joined #salt
04:54 kusams_ joined #salt
05:05 fragamus joined #salt
05:06 fragamus joined #salt
05:10 n8n joined #salt
05:20 n8n joined #salt
05:22 claytron joined #salt
05:32 jchen so, how would I use the ipsets with iptables in 2014.7.0?
05:32 jchen documentation for iptables state doesn't mention ipset in any way
05:35 arne_ joined #salt
05:36 jchen nvm, the kwargs match the long name for option flags
05:39 n8n joined #salt
05:40 schimmy joined #salt
05:44 schimmy1 joined #salt
05:45 Ryan_Lane joined #salt
05:57 felskrone joined #salt
05:57 joehh UtahDave: guess I missed you - I'll send an email
05:59 kusams joined #salt
05:59 colttt joined #salt
06:02 jhauser joined #salt
06:11 duncanmv joined #salt
06:11 n8n joined #salt
06:13 TyrfingMjolnir joined #salt
06:35 ioio joined #salt
06:40 tomspur joined #salt
06:46 flyboy joined #salt
06:49 rlarkin|2 joined #salt
06:49 dsolsona joined #salt
07:00 fragamus joined #salt
07:00 srage joined #salt
07:00 Katafalkas joined #salt
07:00 ramishra joined #salt
07:00 scoates joined #salt
07:00 CeBe2 joined #salt
07:00 teebes joined #salt
07:00 snuffeluffegus joined #salt
07:00 ]V[ joined #salt
07:00 faulkner joined #salt
07:00 mephx joined #salt
07:00 NV joined #salt
07:00 mattikus` joined #salt
07:00 jagardaniel1 joined #salt
07:00 unpaidbi1l joined #salt
07:00 jacksontj joined #salt
07:00 mirko joined #salt
07:00 rubenb joined #salt
07:00 fxhp joined #salt
07:00 davet1 joined #salt
07:00 TheThing|24-7 joined #salt
07:00 snuffop joined #salt
07:00 teepark joined #salt
07:00 jasonrm joined #salt
07:00 techdragon joined #salt
07:00 jeffrubic joined #salt
07:00 loz-- joined #salt
07:00 programmerq joined #salt
07:00 hintss joined #salt
07:00 honestly joined #salt
07:00 mitsuhiko joined #salt
07:00 rhand joined #salt
07:00 philipsd6 joined #salt
07:00 SaveTheRbtz joined #salt
07:00 zemm joined #salt
07:00 ashb joined #salt
07:00 Damon_ joined #salt
07:00 anteaya joined #salt
07:00 rblackwe joined #salt
07:00 codysoyland joined #salt
07:00 pmcg joined #salt
07:00 dh joined #salt
07:00 bryguy joined #salt
07:00 alainv joined #salt
07:00 tcotav joined #salt
07:00 luminous joined #salt
07:00 dusel joined #salt
07:00 jayne joined #salt
07:00 EntropyWorks joined #salt
07:05 slav0nic joined #salt
07:05 ede joined #salt
07:08 trikke joined #salt
07:10 wpot joined #salt
07:10 ndrei joined #salt
07:10 micko joined #salt
07:10 UtahDave joined #salt
07:10 harkx joined #salt
07:10 eightyeight joined #salt
07:10 aqua^lsn_ joined #salt
07:10 kivihtin joined #salt
07:10 babilen joined #salt
07:10 karunamon joined #salt
07:10 patarr joined #salt
07:10 agj joined #salt
07:10 jforest joined #salt
07:10 gmoro joined #salt
07:10 msciciel_ joined #salt
07:10 jeblair joined #salt
07:10 vu joined #salt
07:10 xDamox joined #salt
07:10 whitepaws_ joined #salt
07:10 nihe joined #salt
07:10 sirtaj joined #salt
07:10 Sacro joined #salt
07:10 keekz joined #salt
07:10 tyler-baker joined #salt
07:10 Obrit joined #salt
07:10 MindDrive joined #salt
07:10 muss joined #salt
07:10 SpX joined #salt
07:10 beardo__ joined #salt
07:10 zsoftich_ joined #salt
07:10 chitown joined #salt
07:10 sxar joined #salt
07:10 renoirb joined #salt
07:10 jmccree joined #salt
07:10 Hipikat joined #salt
07:12 axelis joined #salt
07:12 axelis left #salt
07:16 techdragon joined #salt
07:16 loz-- joined #salt
07:17 rblackwe joined #salt
07:24 bahadir joined #salt
07:29 AirOnSkin Good morning :)
07:29 borat joined #salt
07:31 superted666 Morning
07:31 borat MOrning
07:32 dusel joined #salt
07:32 luminous joined #salt
07:32 dh joined #salt
07:32 Damon_ joined #salt
07:32 ashb joined #salt
07:32 philipsd6 joined #salt
07:32 honestly joined #salt
07:32 TheThing|24-7 joined #salt
07:32 davet1 joined #salt
07:32 rubenb joined #salt
07:32 mirko joined #salt
07:32 jacksontj joined #salt
07:32 jagardaniel1 joined #salt
07:32 mephx joined #salt
07:32 ]V[ joined #salt
07:32 teebes joined #salt
07:32 Katafalkas joined #salt
07:32 ndrei joined #salt
07:32 micko joined #salt
07:32 harkx joined #salt
07:32 eightyeight joined #salt
07:32 aqua^lsn_ joined #salt
07:32 kivihtin joined #salt
07:32 babilen joined #salt
07:32 karunamon joined #salt
07:32 patarr joined #salt
07:32 agj joined #salt
07:32 jforest joined #salt
07:32 gmoro joined #salt
07:32 msciciel_ joined #salt
07:32 jeblair joined #salt
07:32 vu joined #salt
07:32 xDamox joined #salt
07:32 whitepaws_ joined #salt
07:32 nihe joined #salt
07:32 sirtaj joined #salt
07:32 Sacro joined #salt
07:32 keekz joined #salt
07:32 tyler-baker joined #salt
07:32 Obrit joined #salt
07:32 MindDrive joined #salt
07:32 muss joined #salt
07:32 SpX joined #salt
07:32 beardo__ joined #salt
07:32 zsoftich_ joined #salt
07:32 chitown joined #salt
07:32 sxar joined #salt
07:32 renoirb joined #salt
07:32 jmccree joined #salt
07:32 Hipikat joined #salt
07:33 babilen joined #salt
07:35 duncanmv I need to store a jid in a db. Is it a string or a number?
07:35 duncanmv (the json parses it as a string)
07:37 jhauser joined #salt
07:37 fragamus joined #salt
07:37 srage joined #salt
07:37 ramishra joined #salt
07:37 scoates joined #salt
07:37 CeBe2 joined #salt
07:37 snuffeluffegus joined #salt
07:37 faulkner joined #salt
07:37 NV joined #salt
07:37 mattikus` joined #salt
07:37 unpaidbi1l joined #salt
07:37 fxhp joined #salt
07:37 snuffop joined #salt
07:37 teepark joined #salt
07:37 jasonrm joined #salt
07:37 jeffrubic joined #salt
07:37 programmerq joined #salt
07:37 hintss joined #salt
07:37 mitsuhiko joined #salt
07:37 rhand joined #salt
07:37 SaveTheRbtz joined #salt
07:37 zemm joined #salt
07:37 anteaya joined #salt
07:37 codysoyland joined #salt
07:37 pmcg joined #salt
07:37 bryguy joined #salt
07:37 alainv joined #salt
07:37 tcotav joined #salt
07:37 jayne joined #salt
07:37 EntropyWorks joined #salt
07:38 chiui joined #salt
07:38 Katafalkas joined #salt
07:39 georgemarshall joined #salt
07:39 bagackiz joined #salt
07:40 intellix joined #salt
07:40 teebes joined #salt
07:40 ]V[ joined #salt
07:40 mephx joined #salt
07:40 jagardaniel1 joined #salt
07:40 jacksontj joined #salt
07:40 mirko joined #salt
07:40 rubenb joined #salt
07:40 davet1 joined #salt
07:40 TheThing|24-7 joined #salt
07:40 honestly joined #salt
07:40 philipsd6 joined #salt
07:40 ashb joined #salt
07:40 Damon_ joined #salt
07:40 dh joined #salt
07:40 luminous joined #salt
07:40 dusel joined #salt
07:42 AirOnSkin I have a few questions... things that are not yet clear to me when working with Salt
07:42 iwishiwerearobot joined #salt
07:43 AirOnSkin First, how do I configure stuff with salt that only needs to be run once? Things that don't need (or should) be redone evertime I initiate a highstate?
07:47 alex-mesos joined #salt
07:47 holler_ joined #salt
07:50 techdragon joined #salt
07:50 loz-- joined #salt
07:50 cmthornton joined #salt
07:53 Nexpro joined #salt
07:56 jhauser AirOnSkin: look for „Requisites“
07:56 jhauser these are conditions, which determine if a state should be run
07:58 lcavassa joined #salt
07:58 jhauser also you need not to include all states into the top.sls file
08:01 bhosmer joined #salt
08:01 AirOnSkin jhauser: Ok, I generally know what requisites are. So you would define a require for something that's only there one time?
08:01 AirOnSkin A grain maybe?
08:03 Flusher joined #salt
08:04 jhauser „do something only if a result-marker, like a file is not present“
08:05 AirOnSkin jhauser: Ah, I get that. Noted. Can I trouble you for some more questions?
08:06 jhauser i’m using salt parttime :-)
08:08 Outlander joined #salt
08:08 aquinas joined #salt
08:08 AirOnSkin Jhauser: Don't worry, I have confidence in you ;) ...
08:09 AirOnSkin I know that grains are great for managing things that are different on each host, but does that mean that when I define Grains, that I do so for every host?
08:10 wnkz joined #salt
08:11 jhauser normaly yu define grains at the minion, so there are not the same
08:11 jhauser I configure mainly with pillars
08:11 jhauser giving a machine some specific roles for example
08:12 AirOnSkin Right. What about files that are on multiple hosts (let's say httpd.conf) but are quite different on each host (which modules loaded, etc...) how do you manage that?
08:12 jhauser grains in their default state are good to differentiate machines on the os level
08:13 AirOnSkin For example defining an environment? Dev / Test / Prod ?
08:13 jhauser general you have one managed file, which is a jinja-template, with conditions on pillar configs
08:14 jhauser for the environment-case there is a salt mechanism for this, which is not easily approchable
08:14 jhauser salt can layer configs in environments
08:15 jhauser but I habe not seen good examples for their usage and played with them just recently
08:17 jhauser the salt environments are defined in the /etc-configs on the master, basically additional config trees
08:17 VSpike joined #salt
08:17 AirOnSkin you mean file_roots?
08:18 AirOnSkin in /etc/salt/master ?
08:18 jhauser yes
08:19 VSpike The topic is wrong, I notice. 2014.1.13 is the latest
08:19 VSpike Is it my imagination, or does the add method here not actually do anything with a password? https://github.com/saltstack/salt/blob/develop/salt/modules/win_useradd.py
08:20 ifmw joined #salt
08:21 CycloHex joined #salt
08:22 AirOnSkin jhauser: Ok, I got that. Another thing: I've configured a service.sls file which defines for my minions what services should run and which not. When I initiate a highstate, I get errors in the log on the minion saying the service is already dead. This seems strange to me. Shouldn't the log entry rather be: Yay, no changes! Everything's fine?
08:22 wnkz Hi, I have the following setup (https://gist.github.com/wnkz/306063f54dcfb2f228b7) ; do you know how can I set the 'port_bindings' in my state exactly like it is in my pillar ; no parsing ; just output it 'as is' ?
08:22 CycloHex Hello guys, yesterday I asked how to full clear the salt mine.. sadly I had to leave, and my problem isn't resolved :( Anyone here that can get to the rescue? I've tried a mine.update clear=True (no success), tried mine.flush, no success either
08:23 CycloHex wnkz: try prepending the "80/tcp": hostip and hotsport with an '-'
08:24 Furao joined #salt
08:25 wnkz CycloHex: and just call '{{ app.port_bindings }}' in my formula ?
08:26 CycloHex I misunderstood your question, I think.. I thought you wanted the clear text, no need to parse, ust like on your gist, but that your gist didn't parse wellµ
08:26 zlhgo joined #salt
08:27 wnkz CycloHex: yes ; I want the exact same text ; no needs for vars
08:27 wnkz CycloHex: I managed to make this work with something like this https://github.com/saltstack/salt/issues/5480 but.. damn it's ugly
08:28 wnkz CycloHex: "| indent(8)"
08:29 CycloHex why not just use contents: {{ salt['pillar.get']('foo:bar') }} and in the pillar have foo:  bar:  | \n yourtext
08:30 CycloHex don't make contents in the sls multiline if you only give it one line
08:30 CycloHex in the pilla rhowever, make the referenced item multiline.. and it shouold parse fine
08:32 wnkz CycloHex: hmm I think I get what you mean for the pillar, not sure what to make of it in the state file
08:33 wnkz CycloHex: tested like this https://gist.github.com/wnkz/306063f54dcfb2f228b7 ; gives me huge error about 'render error: while parsing a block mapping'
08:34 CycloHex your port bindings are items of docker-apps:foo:port_bindings should they be parsed as one item, or a top-level item 80/tcp with items hostip and hostport?
08:35 alex-mesos joined #salt
08:35 wnkz CycloHex: as one, multiline, item
08:36 TyrfingMjolnir joined #salt
08:37 wnkz CycloHex: to be clear, I'd like to have it exactly how it's written here https://gist.github.com/wnkz/306063f54dcfb2f228b7/2542476f5eee5c9c3b035cdf157986e537c28ccd ; just get the data from a pillar
08:38 CycloHex refresh that page ;) wnkz
08:38 CycloHex wow, it didn't write my full pillar set statement :D wnkz hold on :D
08:39 wnkz CycloHex: I figured 'pillar.get' wouldn't work well :P
08:39 CycloHex weird, pillar.get and what i type behind it gets deleted :s
08:39 wnkz CycloHex: use `` ?
08:40 CycloHex wnkz: doneeeeeee
08:42 N-Mi joined #salt
08:42 wnkz CycloHex: same error :(
08:44 CycloHex wnkz: and if you call the vriable right after port_bindings, don't create a newline, just add it right after it
08:45 AirOnSkin This may be a stupid question, but can you change the colors of the salt output? (<- I'd like to match them to our other colors ^^)
08:45 alex-mes_ joined #salt
08:46 wnkz CycloHex: hmm we're getting close but still having an error
08:47 wnkz CycloHex: https://gist.github.com/wnkz/b35cd310915261397996
08:50 CycloHex wnkz: hmm.. weird that it doesn't also take the  | .. maybe add another | as the firstline of your textblock
08:51 johanek joined #salt
08:54 wnkz CycloHex: not working ; and this is starting to be uglier than the "| indent(8)" technique :P
08:56 CycloHex wnkz: yes, it is.. :D I'd say trying to make it 3 single items, but that's something you didn't want to do, right?
08:57 vincehu joined #salt
08:57 wnkz CycloHex: not really ; for multiple reasons, one being docker state I likely to change and defining ports binding that way is easier as it reads well
08:57 wnkz -I+is
08:58 TyrfingMjolnir joined #salt
08:58 CycloHex Can you paste the error if you execute the code like its on your first gist?
08:58 CycloHex wnkz:
08:59 arthurlutz joined #salt
09:00 johanek hello, i'm trying to use renderers from python to validate state files
09:00 CycloHex anyone here that knows how to fully clear the salt mine? mine.flush didn't work for me, mine.update clear=True didn't work either :(
09:00 johanek but i get an error when trying to use salt.renderers.yaml.render - https://gist.github.com/johanek/9bba906ea4889af6cfe8
09:00 CycloHex http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.py.html
09:01 wnkz CycloHex: https://gist.github.com/wnkz/8ce7c3f042cf2bdd521d
09:02 johanek I want to render jinja+yaml state files and then interrogate them in python - the states aren't python
09:04 CycloHex means your multiline doesn't get closed right. :s
09:05 CycloHex wnkz: Sorry man, don't think I'll be able to help you, since it's hard for me to troubleshoot this, since it's code-specific, and I don't have access to the code, can't test it either
09:05 alex-mesos joined #salt
09:06 wnkz CycloHex: yeah I know ; from what I read in the github issue ; this might be a "problem" with yaml itself ; thank you for your help anyway
09:06 CycloHex wnkz: are you sure everything is included in '"' right?
09:06 CeBe1 joined #salt
09:07 wnkz CycloHex: what you mean ? I also tried to replace every " with '' but doesn't work either ..
09:08 CycloHex My question was whether or not you are sure that you don't miss a double quote or single quote somewhere.. eg "foo", "bar, "baz"
09:08 CycloHex bar misses a double quote
09:09 bhosmer joined #salt
09:10 CycloHex wnkz: FWIW, I've had errors like this before as well, and I also thought it was yaml, but after letting it go for a while and looking back at it after a few days or so, I found my mistake
09:10 CycloHex so in a nutshell: hardcode it in the sls for now, look at it again in a week or so, you'll find out what it is
09:13 jalaziz joined #salt
09:13 kbyrne joined #salt
09:14 wnkz joined #salt
09:19 ggoZ joined #salt
09:30 iwishiwerearobot joined #salt
09:34 Nexpro joined #salt
09:36 tjy joined #salt
09:39 CycloHex I'm trying to deplay a minion over salt-cloud, it gives an error stating that the specified image could not be found, however if I salt-cloud --list-images profile, it lists the image that I'm trying to use.. This used to work flawlessly..
09:39 doktor1g joined #salt
09:43 SpX joined #salt
09:45 doktor1g joined #salt
09:48 Jellyfrog joined #salt
09:50 CycloHex appearantly cloud-images should now be referenced through ID
09:50 CycloHex at least provider digital oceans expects that
09:52 cofeineSunshine yup
09:53 intellix joined #salt
09:53 hobakill joined #salt
09:53 vbabiy joined #salt
09:53 Fl0o joined #salt
09:53 superseb joined #salt
09:53 MK_FG joined #salt
09:53 rawzone joined #salt
09:53 jchen joined #salt
09:53 \ask joined #salt
09:53 juice joined #salt
09:53 PI-Lloyd joined #salt
09:53 andrej joined #salt
09:53 mortis_ joined #salt
09:53 goal joined #salt
09:53 kalessin joined #salt
09:53 jab416171 joined #salt
09:56 teebes joined #salt
09:56 ]V[ joined #salt
09:56 mephx joined #salt
09:56 jagardaniel1 joined #salt
09:56 jacksontj joined #salt
09:56 mirko joined #salt
09:56 rubenb joined #salt
09:56 davet1 joined #salt
09:56 TheThing|24-7 joined #salt
09:56 honestly joined #salt
09:56 philipsd6 joined #salt
09:56 ashb joined #salt
09:56 Damon_ joined #salt
09:56 dh joined #salt
09:56 luminous joined #salt
09:56 dusel joined #salt
09:56 londo_ joined #salt
09:56 Outlander joined #salt
09:58 Katafalkas joined #salt
09:58 kbyrne joined #salt
09:58 jalaziz joined #salt
09:58 aquinas joined #salt
09:58 bahadir joined #salt
09:58 trikke joined #salt
09:58 rlarkin|2 joined #salt
09:58 ioio joined #salt
09:58 nebuchadnezzar joined #salt
09:58 NaPs joined #salt
09:58 rogst joined #salt
09:58 nickg_ joined #salt
09:58 Heggan joined #salt
09:58 Hydrosine joined #salt
09:58 MrThrax joined #salt
09:58 Cottser|away joined #salt
09:58 quantumsummers joined #salt
09:58 agend joined #salt
09:58 Deevolution1 joined #salt
09:58 kaictl joined #salt
09:58 1JTAAQ5CI joined #salt
09:58 sumpos joined #salt
09:58 Alan_S joined #salt
09:58 Gareth joined #salt
09:58 robinsmidsrod joined #salt
09:58 sarlalian joined #salt
09:58 wedgie joined #salt
09:58 repl1cant joined #salt
09:58 winmutt joined #salt
09:58 kossy joined #salt
09:58 eliasp joined #salt
09:58 jcockhren joined #salt
09:58 dstufft joined #salt
09:58 scooby2 joined #salt
09:58 devx_ joined #salt
09:58 hybridpollo joined #salt
09:58 iMil joined #salt
09:58 TaiSHi joined #salt
09:58 Damon joined #salt
09:58 jesusaurus joined #salt
09:58 MaZ- joined #salt
09:58 darvon joined #salt
09:58 thematthewgreen joined #salt
09:58 freelock joined #salt
09:58 Phibs joined #salt
09:58 dcmorton joined #salt
09:58 seb` joined #salt
09:58 Ymage joined #salt
09:58 Eliz joined #salt
09:58 GnuLxUsr joined #salt
09:58 joehh joined #salt
09:58 egalano joined #salt
09:58 evidence joined #salt
09:58 InAnimaTe joined #salt
09:58 drawks joined #salt
09:58 Damoun joined #salt
09:59 kossy joined #salt
10:00 sarlalian joined #salt
10:04 SpX joined #salt
10:06 bzf130_mm joined #salt
10:13 CeBe1 joined #salt
10:16 giantlock joined #salt
10:20 peters-tx joined #salt
10:23 jdmf joined #salt
10:34 CeBe2 joined #salt
10:36 dsolsona joined #salt
10:46 AirOnSkin Does Salt have a problem with files that have 600 permissions? I'm trying to 'watch' /etc/sysconfig/iptables. If the file changes, the daemon should restart. But I get a "The following requisites were not found"
10:46 pdayton joined #salt
10:46 AirOnSkin I can verify that the file is there. The YAML code looks correct as well...
10:50 bernieke I've set up a multi-master (with the same master keys.)
10:51 bernieke And the minions only bind to one of the two masters.
10:51 bernieke so if I execute "salt '*' test.ping" on either master I only get half the minions.
10:51 bernieke is this the expected behaviour?
10:52 bernieke When I change one of the minion configs (just add or remove some empty lines), and restart he minion, it'll bind to the other master. (And report to test.ping there as well, instead of the first master it was bound to.)
10:52 bernieke this with rc3 by the way
10:56 yomilk joined #salt
10:58 bernieke Just to be clear: the minions are split among the two masters, and only answer to commands sent from their master.
11:03 CSa joined #salt
11:06 CycloHex which deamon AirOnSkin
11:06 scottpgallagher joined #salt
11:06 CycloHex AirOnSkin: you should write the watch-statement in your service.running state
11:14 johtso joined #salt
11:14 TheThing joined #salt
11:19 viq AirOnSkin: do you manage /etc/sysconfig/iptables via salt?
11:20 viq AirOnSkin: watch/require are not on _files_, they are on _states_. So sure, you can have the service restarted when the files changes - that is, when salt changes the file.
11:20 gmcwhistler joined #salt
11:24 gmcwhistler joined #salt
11:26 CeBe1 joined #salt
11:29 ramishra joined #salt
11:33 johtso This is really strange.. `sudo salt-call state.sls monolith_apps.monolith` works fine.. but when running highstate with a top file that has this (http://hastebin.com/ihesebawiq.yml) I get "No matching sls found for 'monolith' in env 'base'"
11:34 johtso It does this for some reason.. http://hastebin.com/iwiqoxerep.mel
11:35 CycloHex I had aske dheer a few times about salt_mine, how to clear it.. I managed clearing it.. At first mine.update clear=True didn't work, because the data stored in the mine was from minions that no longer existed.. So now, I created minions with the same id as the data in my mine and then mine.update clear=True cleared my mine... So if you'd like to destroy an instance that has data store din the mine, run a mine update clear=true first..
11:36 johtso Is there something wrong with my top.sls syntax?
11:36 CeBe1 joined #salt
11:36 CycloHex johtso: I don't tink so
11:36 johtso Is there some way I can debug why it's trying to find a monolith.sls sls when it should be looking for monolith_apps.monolith?
11:37 CycloHex do you have a multi-environment setup?
11:37 johtso the really puzzling thing is the fact that there are two other almost identical states that are working fine
11:38 johtso CycloHex: nope, trying to avoid multi environments, and it's definitely using the "base" environment
11:38 johtso I am using gitfs
11:39 CycloHex the monolith.sls doesn't exist?
11:39 johtso no it doesn't, and shouldn't
11:39 CycloHex It finds a monolith.sls and monolith directory
11:40 CycloHex weird.. Dont think I'll be able to help you on this
11:40 viq johtso: did you do "salt-run fileserver.update" ?
11:40 johtso cp.list_master gives me this: http://hastebin.com/cozujahaco.yml
11:41 bhosmer joined #salt
11:41 johtso so the state I want is there, but for some reason when salt interprets my top file, it thinks I want to apply a state named "monolith" which doesn't exist
11:42 viq johtso: you got any includes in monolith_apps/monolith/init.sls ?
11:44 johtso viq: yep
11:45 viq could you show them?
11:46 giantlock joined #salt
11:47 johtso viq: these are the rendered includes I see when running state.sls monolith_apps.monolith (which works fine) http://hastebin.com/icicayaxey.cmake
11:48 viq my suspicion was that you're trying to reference monolith from in there
11:49 johtso hmm.. I might have a require: sls monolith somwhere
11:50 diegows joined #salt
11:55 johtso viq: this is what the init.sls looks like https://gist.github.com/johtso/b2904034b3a3c84d5fae
11:58 viq hm, don't see anything obvious
12:00 johtso viq: going to try stripping it down to a minimal top file
12:01 bernieke Never mind about my multinode question, I just deployed two fresh vms with nothing but salt on them, and there it works fine. So the problem must be with me someplace.
12:01 bernieke *multimaster
12:05 johtso viq: riiight.. so I deleted all of the non master branches from my states and pillar repositories.. restarted the master, and now it's working?
12:06 johtso heeyyyy, it it trying to resolve every top file in every branch?
12:06 johtso including branches with out of date code.. :/
12:06 viq johtso: yes, it does, top files are merged
12:07 johtso I wish salt wouldn't make assumptions about how I want to use git branches
12:07 johtso is there any way to switch of that multi environment branch based behaviour?
12:08 johtso I'd definitely prefer if bad code in my develop branch didn't break my master branch states :)
12:09 viq johtso: looks like with 2014.7 you will have http://docs.saltstack.com/en/latest/topics/tutorials/gitfs.html#environment-whitelist-blacklist
12:10 johtso ah awesome! I'm already using 2014.7
12:16 rattmuff joined #salt
12:19 rattmuff I'm having a hard time finding a good YAML reference where I can find more information about functions like 'startswith()' etc. Anyone have a nice link?
12:21 wnkz how can I see how my state (using pillar data) will be rendered without executing it on my minion(s) ?
12:21 rattmuff wnkz: you can add test=True to run a test state
12:21 rattmuff wnkz: salt 'minion' state.sls mystate test=True
12:22 rattmuff wnkz: if you dont get enough output I think you can change the verbose output level
12:22 wnkz rattmuff: hmm I just want to see my state file after rendering e.g with all variables replaced
12:24 X86BSD joined #salt
12:24 bahadir rattmuff: if you're using .startwith() in an SLS file, that means you're using jinja2 template language. take a look at http://jinja.pocoo.org/docs/dev/templates/
12:25 rattmuff bahadir: thanks, can't belive I got them confused :P
12:26 the_angry_angel joined #salt
12:26 bahadir you can use python code in jinja2 templates, take a look at python reference for method calls. for example; http://www.tutorialspoint.com/python/string_startswith.htm
12:27 X86BSD joined #salt
12:27 rattmuff bahadir: awesome
12:27 the_angry_angel hey guys. quick question im struggling to find an answer with in the docs. is it possible to have the "client" running on a desktop/laptop, and connect to the salt master? i.e. it would be convenient if i could run "salt '*' test.ping" without first having to ssh to the master.
12:27 wnkz rattmuff: in fact, state.show_sls will do the trick ; thank you for your help anyway
12:29 rattmuff wnkz: awesome, thanks
12:30 tempspace good morning!
12:31 tempspace So, if you were going to SaltConf, what talk would you like to attend?
12:32 saggy one basic question- how can I target hosts with just a list of hosts when I can find no pattern
12:33 rattmuff saggy: salt -L 'minion1, minion2, minion3' test.ping
12:33 saggy thank you . there are like 170 of them
12:33 rattmuff saggy: heh
12:33 dsolsona left #salt
12:35 rattmuff saggy: no idea then, perhaps you can give them a grain or find some other common attribute you can target?
12:35 dvestal joined #salt
12:36 saggy unfortunately there is no common attribute- its business driven. this list is very dynamic. setting up grain for no pattern is difficult
12:36 saggy i wish it could take inventory from a file
12:37 tempspace the_angry_angel: So are you looking to execute salt commands across multiple minions without sshing into the master and issuing commands?
12:38 saggy the_angry_angel:use  salt-call
12:38 bernieke rattmuff: salt '*' match.list 'minion1,minion2' test.ping
12:38 saggy bernieke: nice- i will try that
12:39 saggy match.list will be a file with list of hosts?
12:39 the_angry_angel tempspace: yes
12:39 the_angry_angel saggy: I shall check it out, thank you
12:39 tempspace the_angry_angel: that's not what you're looking for
12:39 bernieke saggy: match.list tells salt to take the next argument as a list of minion ids to limit itself to
12:39 tempspace the_angry_angel: salt-call is for executing locally
12:39 ramishra_ joined #salt
12:40 tempspace or through some very special circumstances
12:40 saggy ok
12:40 tempspace the_angry_angel: There is a salt-api that is being worked on that will allow you to do that, and a CLI interface called Pepper https://github.com/saltstack/pepper, but it is considered pre-alpha
12:40 bernieke saggy: but salt -L as rattmuff said works just as fine apparantly
12:41 * bernieke goes and changes hist match.list stuff to -L
12:41 the_angry_angel tempspace: ah i see. thank you.
12:41 saggy bernieke: with hundreds of hosts
12:41 tempspace the_angry_angel: There's also a web interface if that would work
12:42 the_angry_angel tempspace: yeah ive played with halite. was just wondering if there was anything else
12:43 the_angry_angel the api sounds like what im most likely after tbh
12:43 the_angry_angel longer term
12:44 tempspace Yeah
12:45 saggy thank you all - i will give it a shot
12:45 tempspace the_angry_angel: When we want to execute commands from the master, we use a wrapper program that just SSH's in and executes the command
12:45 saltymoli using gitfs, is it possible to have _modules and _states in the git repo synced, or just .sls files?
12:46 rattmuff wnkz: Can i use state.show_sls to view the contents of a file that is  managed by salt and contain jinja variables?
12:47 wnkz rattmuff: I used it from my master, it rendered me my sls file with pprint basically
12:48 bernieke saggy: xargs --show-limits tells me "Maximum length of command we could actually use: 2087846", should suffice for even hundreds of hosts I guess
12:48 tempspace Works well for us, all our dev's use it to provision vm's with salt-coud
12:48 rattmuff wnkz: yes, for me to but I only the the 'source' attribute to the managed file, not the contents of the file
12:48 bernieke I couldn't find anything that would allow you to read the hosts from a file, sorry.
12:50 tempspace is file one line per host?
12:50 arno joined #salt
12:51 wnkz rattmuff: oh for managed file .. hmm I don't know :-/
12:51 tempspace the file that contains the list of hosts that is
12:52 cpowell joined #salt
12:53 tempspace saggy: Sorry, should have tagged you. So you have a list with servers you want to execute against?
12:54 micah_chatt joined #salt
12:54 arno___ joined #salt
12:58 micah_chatt_ joined #salt
12:58 zirpu joined #salt
13:01 saggy tempspace: yes
13:01 ajolo joined #salt
13:02 bhosmer joined #salt
13:02 saggy bernieke: thanks, will try this too
13:02 slav0nic joined #salt
13:03 tempspace saggy: cat hostlist.txt | while read line; do salt "$line" test.ping; done
13:03 zooz joined #salt
13:07 Ahlee You can also read the contents of hte file into a comma seperated list, and specify -L for list match to target all the minions at once, rather than serially targeting them
13:10 Ahlee salt -L $( sed ':a;N;$!ba;s/\n/,/g' hosts ) test.ping
13:11 micah_chatt_ joined #salt
13:12 dsolsona joined #salt
13:13 nitti joined #salt
13:17 dsolsona joined #salt
13:18 rypeck joined #salt
13:20 slav0nic joined #salt
13:20 dsolsona joined #salt
13:21 iwishiwerearobot joined #salt
13:24 yes456 joined #salt
13:25 dsolsona joined #salt
13:28 giantlock joined #salt
13:28 linjan joined #salt
13:29 dvestal joined #salt
13:34 rawkode joined #salt
13:35 racooper joined #salt
13:35 dsolsona joined #salt
13:36 rawkode Afternoon folks
13:37 ekristen joined #salt
13:37 ekristen felskrone: good morning, you around?
13:37 felskrone yup
13:38 ekristen looks like your requirements.txt is out of date
13:38 felskrone oh, is it?
13:38 ekristen python-simplejson doesn’t exist, and there is no req for mysql in there
13:38 ekristen so out of the box the mysql workers do not work
13:39 ekristen felskrone: also are you not concerned about performance with running this on the master?
13:40 felskrone not at all, its running on 6 masters with 3-5000 minions and the hardware its bascially playing with its big toes :-)
13:41 ekristen felskrone: just curious, been looking at the code and and attempting to decide how and if I am going to run it
13:41 ekristen on the surface I like it \
13:41 ekristen actually loooking to containerize it using docker and run the docker container on the master
13:41 felskrone feel free to bug me with your concerns, im always happy to hear if things can be improved
13:42 ghanima joined #salt
13:42 ekristen felskrone: does it install the mysql worker’s by default? the python setup.py of your repo?
13:42 dude051 joined #salt
13:42 ekristen felskrone: it would be cool to see this publish to the pip index too :)
13:42 ashb joined #salt
13:43 dsolsona joined #salt
13:43 ekristen felskrone: one last question — what mysql library does it use? mysqldb isn’t a valid pip option
13:44 felskrone it uses python-mysqldb and python-simplejson which are debian packages, im dont know if there are pip-equivalents
13:44 felskrone -m
13:44 viq what are you guys talking about?
13:44 felskrone requirements for salt-eventsd
13:44 viq ah, I guessed, but wanted to make sure, thanks
13:44 felskrone :-
13:44 to_json joined #salt
13:44 felskrone :-)
13:45 ekristen felskrone: pip for python-mysqldb I think is mysql-python
13:45 ekristen and simplejson I think is just simplejson
13:45 tk75 joined #salt
13:46 felskrone ill update the requirements.txt right away
13:46 Ahlee https://github.com/felskrone/salt-eventsd ?
13:47 ekristen felskrone: :)
13:47 felskrone Ahlee: yes, that one :-)
13:47 vejdmn joined #salt
13:47 ekristen I’m getting ready to test it felskrone
13:47 Ahlee felskrone: nice. this is actaully fantastic
13:47 felskrone im glad you like it :-)
13:48 dsolsona joined #salt
13:49 kt766 joined #salt
13:50 felskrone do i get this right, that the requirements.txt ist just for pip?
13:54 dsolsona joined #salt
13:54 dvestal joined #salt
13:57 _prime_ joined #salt
13:57 debian112 joined #salt
13:58 debian112 anyone using returners?
14:01 ekristen felskrone: yes
14:01 ekristen pip install -r requirements.txt
14:01 ekristen felskrone: https://gist.github.com/ekristen/3a60da6bf186cba26e40
14:02 cpowell joined #salt
14:02 ekristen oh I think i found the problem
14:04 kermit joined #salt
14:04 XenophonF joined #salt
14:04 Fa1lure joined #salt
14:04 XenophonF oh man i wish i'd learned to use gitfs sooner
14:04 XenophonF so awesome
14:05 XenophonF ekristen: in which branch do you put your top.sls?  master?  production?
14:05 ekristen I never use master
14:05 intellix joined #salt
14:05 Yoda-BZH joined #salt
14:05 Yoda-BZH joined #salt
14:05 ekristen whatever branch/environment I’m working on
14:05 krol joined #salt
14:05 felskrone ekristen: were you missing anything else besides mysql-python and simplejson?
14:05 to_json left #salt
14:06 iggy XenophonF: one trick some people use (makes it easier to handle merging between branches) is to put your top.sls in a completely separate repo
14:06 XenophonF ekristen: i have a '*' target that sends what i think of my standard config to all minions.  do you use something similar?
14:07 XenophonF iggy: I was thinking about putting a single top.sls into master/base
14:07 iggy there are probably thousands of ways you could work it
14:07 ekristen XenophonF: I actually take things one step futher and add an environment grain
14:07 XenophonF only issue with that is that my colleagues (who are new to both salt and git) might get confused
14:08 XenophonF ekristen: can you point me toward an example?
14:08 ekristen so the first entry is like ‘environment: dev’ for global matching in that salt environment
14:08 cDR_ joined #salt
14:09 MTecknology salt-ssh will always need to copy down a payload for execution, won't it? It won't ever be able to just use ssh to make connections and run commands remotely?
14:09 ekristen felskrone: your app doesn’t like to die when running in the foreground
14:09 housl joined #salt
14:09 Ancient joined #salt
14:09 felskrone can you please report that as a bug?
14:10 felskrone ive been meaning to handle that more gracefully but did not get to it yet
14:10 jrluis joined #salt
14:10 cDR_ MTecknology: salt-ssh needs python too on the destination host
14:11 felskrone ekristen: we are talking about ctrl+c right?
14:11 ek6 joined #salt
14:11 MTecknology cDR_: thanks
14:11 ekristen felskrone: yeah
14:11 elfixit joined #salt
14:11 MTecknology Unfortunately, I guess that means I'm looking at ansible for these tasks. I guess I could create an ansible server, manage it through salt, and use salt-proxy to tell the ansible server what to send to the endpoints.
14:13 primechuck joined #salt
14:13 cDR_ Would be really awesome if there was a salt module to alter common config options that can parse "keys" and "values"; using file.append/comment feels a bit wrong IMO
14:13 imanc I'm using cron.present but seeing this error: stderr: no crontab for xxxx      - does the cron file have to physically exist before I can use cron.present?
14:14 viq MTecknology: salt-ssh will always need to copy down a payload for execution, won't it? It won't ever be able to just use ssh to make connections and run commands remotely?" - isn't the same the case with ansible?
14:14 nledez joined #salt
14:14 viq cDR_: you mean like augeas?
14:14 ekristen felskrone: hrm can’t seem to get it to write anything ot the database
14:14 MTecknology viq: afaik, no... not from how I read it..
14:15 cDR_ Like in this example "salt \* config.set /etc/ntp.conf server=ntp.pool.org"
14:15 viq MTecknology: AFAIK the way ansible works, it copies over it's python blurb that's configured to "do stuff"
14:15 viq cDR_: augeas. Module exists ;)
14:15 cDR_ wow
14:16 lothiraldan joined #salt
14:16 cDR_ Thanks for the tip, but I see it requires a dependency?
14:17 viq cDR_: well, yes
14:17 krol Hello! Beginner here. Is there a direct way to check if a windows process is running using salt?
14:17 cDR_ But this is wat I was looking for :)
14:18 workingcats joined #salt
14:18 MTecknology viq: ah, that's default, yes. However, it has a "raw" mode that will do strictly remote ssh commands
14:18 viq "man, I wish there was a tool that did this" "yeah, and it's probably 10 years old now" ;)
14:18 viq MTecknology: doesn't salt-ssh as well?
14:18 MTecknology does it?
14:19 viq http://docs.saltstack.com/en/latest/topics/ssh/#raw-shell-calls
14:19 mpanetta joined #salt
14:19 * MTecknology hugs viq
14:20 smcquay joined #salt
14:20 * cDR_ runs salt * pkg.install python-augeas...
14:20 viq hehe
14:21 micah_chatt_ joined #salt
14:23 workingcats cDR_, thanks for saying that
14:23 workingcats that looks brilliant
14:23 TheoSLC joined #salt
14:24 MTecknology Would it make sense to have a dedicated salt-proxy box that has salt-ssh and have salt 'switch80.*' go to that box for salt-ssh execution?
14:24 workingcats now that i opened the tour it looks even brillianter
14:25 djstorm joined #salt
14:25 XenophonF are there any issues going from GitPython to pygit2?  like, do i have to migrate anything, or will Salt just pick up the new backend and go?
14:26 mpanetta joined #salt
14:27 iggy XenophonF: aside from the extra dependencies, no, should be plug-and-pray
14:27 rawkode Is there a way, when using cmd.state.sls in a reactor, to specify a batch size (-b) ?
14:30 iggy I think there's an issue open for that
14:31 toastedpenguin joined #salt
14:34 noeol joined #salt
14:35 pass_by_value joined #salt
14:40 jaimed joined #salt
14:45 ajolo joined #salt
14:47 Deevolution1 If I have a custom pillar that is python (i.e. #!py 'raw' python code) can it refernce other pillar data (i.e. using __pillar__['xyz'])?  It looks like the pillar data is unavailable.  Is there an order that pillars are run in or some way of enforcing that order?
14:47 jergerber joined #salt
14:48 manfred correct, __pillar__ is not available
14:49 manfred i believe they are ordered by top.sls in 2014.7, but I would need to defer to Ryan_Lane when he shows up cause he was the one that opened that bug report
14:52 iggy Deevolution1: the same reason you can't use {{ pillar['foo'] }}  in yaml+jinja pillars
14:52 rallytime joined #salt
14:52 thedodd joined #salt
14:53 jalbretsen joined #salt
14:55 Deevolution1 iggy: (and manfred) Thanks for the answer.  We'll sort out a different way of handling this.
14:56 iggy I tend to think if I'm running into problems like this, I'm doing something wrong
14:57 iggy maybe tell us what your real overall goal is, there might be a better way of handling this
15:00 nbari joined #salt
15:02 nbari hi all, I have some basic questions hoping some one here can help me to clarifythem, 1. if I have 2 file_roots (base/(states|pillars) & development/(state|pillars) the I should have only 1 top.sl for states and other for the pillars right ?
15:03 viq nbari: not necessarily, but you have to keep in mind they will get merged
15:04 viq So yeah, having one would be easier and less confusing
15:04 nbari the problem I am trying to fix, is that I want to use the base/pillars/top.sls in to the developments/pillars/top.sls
15:04 viq "in to the" ?
15:05 nbari I mean use the base/pillars/top.sls as a base and extend it on the development/pillars/
15:05 viq you can have top.sls in both places, and they will get merged
15:06 nbari I have a base/pillars/users.sls and on development/pillars/users.sls I would like to include the base/pillars/users.sls and add more users (using the users module)
15:06 viq I believe that's not how it works, no.
15:07 jxFive joined #salt
15:07 viq A node can be in one environment at a time, and can access stuff only from that environment, I believe.
15:08 nbari mmmm ok
15:09 nbari so basically having a single environment and using some grain rules can help to distinguish between production/develpment machines instead of having multiple enviroments right ?
15:10 viq You could do it that way, yes
15:11 n8n joined #salt
15:11 nbari and if I am right, there should be only one top.sls per enviroment righ ?
15:11 Deevolution1 iggy: Sorry for the delayed response; I have a pillar that pulls together a list of versions; I have a second pillar that bases some of it's decisions on what versions are available.
15:12 viq There's no way to have more than one top.sls per environment  ;)
15:12 nbari ok
15:13 iggy Deevolution1: you should be making decisions in your states
15:13 iggy that's what states are for
15:14 thedodd joined #salt
15:15 __TheDodd__ joined #salt
15:15 eriko joined #salt
15:16 nbari I am getting more confused: http://stackoverflow.com/questions/19307410/setting-up-environments-with-saltstack, where should i put the top.sls ?
15:17 kaptk2 joined #salt
15:17 Deevolution1 iggy: In this case there are no states involved.  There are some execution modules that will use the data, but it ends up being some what clunky that we have to duplicate logic in multiple places or create what are essentially helper execution modules in order to avoid having duplicate logic.  We'd also like to make this set of data available (via pillar) to applications outside salt.
15:17 nbari if my file_root is: base/states/top.sls ?
15:18 teebes joined #salt
15:18 iggy Deevolution1: I'm not sure I really understand what you're up to, but it really sounds like you're using pillars wrong
15:20 wt joined #salt
15:20 jeffspeff joined #salt
15:20 roblarkin joined #salt
15:21 eriko joined #salt
15:21 Deevolution1 iggy: would it be fair to say that no pillar data should be based on any other pillar data?  Just trying to understand the intention of it.
15:21 Deevolution1 iggy:  I suppose our use case is kind of odd.
15:23 iggy fwiw, our pillar data is about 5% of the size of our formulas and contains _no_ dynamic data
15:24 Deevolution1 hmm...
15:24 iggy I didn't even know you could use jinja in pillars until recently
15:24 Deevolution1 I'm not sure how to explain our use case very well here without going into WAAAAY too much detail.
15:25 XenophonF Deevolution1: I have a few cases where I'd like to reuse the same content across multiple pillars.
15:25 Deevolution1 The data we use for configuration of our systems is very dynamic.  And is full of many unique snowflake configurations (not ideal, but necessary for our use cases).
15:26 XenophonF For example, I might want to use the same private key + certificate + CA chain among Postfix, Dovecote, and Apache.
15:26 Deevolution1 XenophonF: That's more or less what we're struggling with at the moment.
15:26 Deevolution1 Good point.
15:26 * MTecknology hugs all of his NaCl friends.
15:26 StDiluted joined #salt
15:27 iggy Deevolution1: I think if I was going to that length pillar wise, I'd probably just go completely dynamic and not mix file and ext pillars
15:27 Deevolution1 XenophonF: We can solve this by moving where this logic lives in the short term, but we're going to get 'bit' by the complexity involved eventually.
15:27 XenophonF so i have something like .../pillar/mail/example/com.sls that has ca-bundle: | ..., certificate: | ..., and  private-key: | ...
15:27 XenophonF and then reference those in the postfix, dovecote, and apache states
15:28 Deevolution1 iggy: At least in the short term, that's how we're going to solve this.
15:28 XenophonF so it looks like mail:example:com:certificate and so forth
15:28 XenophonF but i guess you could also do a jinja include
15:29 iggy XenophonF: but are you referencing that in some other pillar somewhere?
15:29 Deevolution1 XenophonF: That looks like something we can try.
15:29 XenophonF so something like pillar/mail/example/com/certstore.jinja
15:29 XenophonF then in pillar/mail/example/com/init.sls, put {% from "mail/example/com/certstore.jinja" include... %}
15:29 XenophonF kinda like how people use map.jinja
15:29 Deevolution1 Makes sense.
15:30 XenophonF then you could have apache:vhosts:mail.example.com:certificate: {{ certificate }}
15:30 XenophonF or something along those lines
15:30 XenophonF same as a state formula, basically
15:30 XenophonF the states can have their own pillars
15:30 XenophonF the pillars themselves can be formulas
15:30 XenophonF top.sls in both look pretty
15:31 XenophonF everything looks pretty
15:31 XenophonF i like pretty code :)
15:31 Deevolution1 I also like pretty code :)
15:31 iggy but why do you need the same data at 2 places in the pillar?
15:31 XenophonF because the state formulas might call their pillars different things
15:31 iggy then change the states
15:31 XenophonF for example, postfix might want it called postfix:relay:certificate
15:32 XenophonF and apache wants apache:vhosts:mail.example.com:certificate
15:32 XenophonF and dovecote wants dovecote:certificate
15:32 XenophonF esp. if one's using externally developed states
15:33 iggy formulas are meant to be a good starting point
15:33 XenophonF alternatively, one could make all three state formulas refer to the same thing
15:33 iggy not the only way to do something
15:33 XenophonF 6 of one, half-dozen of the other
15:33 XenophonF i'm comfortable with indirection
15:33 iggy you're abusing pillars because of states
15:33 XenophonF LOL
15:34 iggy all that duplicated data isn't free either
15:34 XenophonF alternatively, you could have the same data copied three times over
15:34 XenophonF but then you have to remember to update it three times over
15:34 saggy joined #salt
15:34 iggy I mean for certs it's probably not a big deal
15:34 mgw joined #salt
15:34 iggy but for other data...
15:35 PI-Lloyd joined #salt
15:37 CeBe1 joined #salt
15:37 bezeee joined #salt
15:42 MTecknology If I need to modify sources.list before installing a specific package, what's the best way to do that? I have other states that install packages that don't need the modification and iirc, apt update only runs once by default
15:43 Ozack1 joined #salt
15:43 iggy if you add a repo, it will do an update
15:43 jchen joined #salt
15:44 iggy states.pkgrepo
15:44 lothiraldan joined #salt
15:44 XenophonF does anyone have a winrepo example for the Salt minion itself they'd be willing to share?
15:45 hasues joined #salt
15:45 hasues left #salt
15:46 shookees joined #salt
15:46 lothiraldan joined #salt
15:47 MTecknology iggy: heh... neat, I was using file.managed
15:52 themadcanudist joined #salt
15:53 goal joined #salt
15:53 arno joined #salt
15:54 bhosmer_ joined #salt
15:55 MTecknology Installing mariadb will prompt for stuff... *grumble*
15:56 themadcanudist left #salt
15:57 ipmb joined #salt
15:57 jonbrefe joined #salt
15:57 iggy mysql does too
15:57 iggy there's a module for that
15:58 TheoSLC joined #salt
15:58 hasues joined #salt
15:58 iggy somewhere
15:58 knot joined #salt
15:58 hasues left #salt
15:59 iggy debconf
15:59 * MTecknology wrote that state :D
15:59 miqui joined #salt
15:59 iggy then you should be able to manage it pretty easy ;)
16:00 bezeee joined #salt
16:00 StDiluted joined #salt
16:00 MTecknology yup, just need to install it first to know what options I need. I needed it for installing ferm
16:00 XenophonF on freebsd postfix does that, too
16:00 thematthewgreen joined #salt
16:00 XenophonF quite frustrating
16:01 wnkz I have a 'pip' formula in my 'base' environment ; how can I require it from a formula in another env ?
16:01 iggy everything in base should be available to other envs
16:01 mohae joined #salt
16:02 wnkz iggy: "Specified SLS pip in environment prod is not available on the salt master"
16:02 flebel joined #salt
16:02 n8n joined #salt
16:02 notpeter_ joined #salt
16:02 tligda joined #salt
16:02 wendall911 joined #salt
16:03 MTecknology iggy: I love how almost none of it is what I wrote anymore... but I did write the initial version, and it worked. Now it's that much better. :D   https://github.com/saltstack/salt/blame/develop/salt/modules/debconfmod.py
16:03 housl joined #salt
16:04 eriko joined #salt
16:04 iggy wnkz: *shrug* I guess you can't
16:04 iggy that's probably one of the reasons we aren't using environments
16:05 MTecknology environments are quite lacking at the moment :(
16:05 wnkz it's even worse, it's actually in my prod env
16:06 wnkz but maybe I'm a little tired .. so I'll better double check..
16:06 vejdmn joined #salt
16:07 thayne joined #salt
16:07 peno joined #salt
16:07 wnkz iggy: well that's what I though ; I'm retarded, no worries
16:07 d3vz3r0 joined #salt
16:07 kermit joined #salt
16:09 toastedpenguin joined #salt
16:11 bhosmer_ joined #salt
16:12 pdayton joined #salt
16:13 troyready joined #salt
16:14 badon joined #salt
16:16 yes456 joined #salt
16:17 jngd joined #salt
16:21 rawkode joined #salt
16:22 BrendanGilmore joined #salt
16:22 TheRealBill joined #salt
16:25 rlarkin joined #salt
16:26 KyleG joined #salt
16:26 KyleG joined #salt
16:28 nitti_ joined #salt
16:29 jngd joined #salt
16:30 UtahDave joined #salt
16:30 rlarkin ls
16:31 rlarkin it's gonna be one of those days....
16:32 Ahlee wnkz: you can, however, define hte file_root for prod under base, below it
16:32 Ahlee wnkz: and it will take first match, failing down the train
16:33 wnkz Ahlee: thank you but I found out that I misorganised my formula dir :)
16:34 Ahlee wnkz: no problem.  Environments are strange things.
16:34 Ahlee I wish I was not using them, it'd be rought ripping them out
16:38 aparsons joined #salt
16:38 nitti joined #salt
16:40 bcode joined #salt
16:42 funzo joined #salt
16:42 slav0nic_ joined #salt
16:44 pass_by_value left #salt
16:45 duncanmv joined #salt
16:49 aparsons joined #salt
16:53 rap424 joined #salt
16:53 nitti joined #salt
16:55 workingcats joined #salt
16:56 akafred joined #salt
16:57 stephas joined #salt
16:57 ipmb silly question, what do you call all the files when you've got a fully functioning salt setup?
16:57 ipmb states + pillars
16:58 scoates is there a way to get better output from a failed reactor state than "[ERROR   ] Failed to render …" ?
16:59 iggy ipmb: I don't think there's any special nomenclature for that
16:59 schimmy joined #salt
16:59 geekatcmu "configuration"
17:00 geekatcmu "policy"
17:00 ipmb configuration works I suppose
17:01 robawt greeting salt folk
17:02 schimmy1 joined #salt
17:02 AmrMostafa joined #salt
17:04 Ryan_Lane joined #salt
17:07 XenophonF yo
17:08 fragamus joined #salt
17:09 alex-mesos joined #salt
17:10 badon joined #salt
17:14 pass_by_value joined #salt
17:14 stephas joined #salt
17:15 yes456_ joined #salt
17:16 linjan joined #salt
17:16 doktor1g joined #salt
17:17 zlhgo_ joined #salt
17:20 XenophonF so with winrepo, say I have a package that has both 32- and 64-bit versions
17:20 XenophonF like the Windows Salt minion
17:20 XenophonF would i create two different SLS files?
17:20 XenophonF like, salt32.sls and salt64.sls?
17:21 vbabiy joined #salt
17:21 the_angry_angel XenophonF: that seems to be what the salt-winrepo does, and its what im planning on doing
17:21 the_angry_angel i.e. https://github.com/saltstack/salt-winrepo/blob/7a91e6127fe17a633e1dc945b06a2caa7bdd55e7/vcredist2010_x64.sls and https://github.com/saltstack/salt-winrepo/blob/7a91e6127fe17a633e1dc945b06a2caa7bdd55e7/vcredist2010_x86.sls
17:23 XenophonF the_angry_angel: ah thank you
17:23 the_angry_angel np :) not saying it's the only way of doing it, but it's what seems to be the convention
17:24 XenophonF it's easy enough to do
17:25 XenophonF do you know if the package full_names have to be unique?
17:25 XenophonF like can i have both salt32:2014.1.10:full_name: "Salt Minion 2014.1.10" and salt64:2014.1.10:full_name: "Salt Minion 2014.1.10"?
17:25 the_angry_angel I honestly dont know. ive not tried making them named the same
17:25 XenophonF and do the full_names have to match what's in Add/Remove Programs?
17:26 the_angry_angel the full name doesnt seem to have to match on my test boxes
17:26 XenophonF ah good
17:26 XenophonF OK
17:26 XenophonF gah why i even bother to support 32-bit Windows I don't know
17:26 the_angry_angel tell me about it
17:27 XenophonF the perfectionist in me, I suppose :(
17:27 * the_angry_angel has no choice
17:27 intellix joined #salt
17:27 XenophonF oh, neither do i, not really
17:27 nitti joined #salt
17:27 superseb joined #salt
17:27 XenophonF hell we still have exchange 2003 and windows xp in production
17:27 XenophonF we had windows 98 and windows 2000 in active use until not too long ago
17:28 the_angry_angel bah, that sounds terrifying
17:28 XenophonF it really is
17:28 goodwill XenophonF: there is probably one or two hiding somewhere ...
17:28 XenophonF i wouldn't doubt it
17:28 goodwill XenophonF: there are stragglers ... always stragglers
17:28 XenophonF probably hooked up to some ancient piece of lab kit
17:28 robawt goodwill: under a dusty stack of old books probably :)
17:28 nitti joined #salt
17:28 XenophonF as long as it isn't plugged into my networks, I don't care
17:28 scoates is there a way for my reactor script to access pillar? (I see the inline pillar spoofing bit in the config, but I'd like it to access pillar as data['id'], somehow…)
17:28 XenophonF anyway /rant sorry
17:28 goodwill XenophonF: I once had a client that ran an old dos box (6.22) ...
17:29 goodwill XenophonF: this was pretty recent
17:29 XenophonF LOL that's awesome!
17:29 XenophonF we had these computers with boot sector viruses on them
17:29 goodwill XenophonF: he had a DOS app he still used ... yeah
17:29 XenophonF and we couldn't get them cleaned
17:29 goodwill no more virus definitions for 15 years old virus?
17:29 goodwill XenophonF: I put it in a linux VM in dosbox :)
17:29 XenophonF turned out that what we thought was the BIOS prompt to boot from CD was actually a DOS boot menu installed on the hard drive
17:30 XenophonF dosbox FTW!!!
17:30 robawt goodwill: 15 year old virus definitions belong in a history book
17:30 goodwill robawt: that was before you were alive ;)
17:30 XenophonF hah not only are you putting it into a VM, you're putting it into an emulator running in a VM
17:30 XenophonF THAT is belt-and-suspenders.  Love it.
17:31 XenophonF well, we had the definitions for the 15-year-old virus
17:31 robawt hahaha
17:31 nitti joined #salt
17:31 goodwill I tried freedos ... it would not run in it
17:31 XenophonF but we couldn't clean it from our CD-booted RAM disk because it turns out that the CD was booting from the hard drives on these clunky old computers
17:31 dstokes cmd.run w/ multiple commands and an unless requisite: does the requisite check run for each command/
17:31 XenophonF like, these were gateway PCs that somehow got Windows XP installed onto them
17:32 XenophonF dstokes: the requisite always runs
17:32 XenophonF and then the command may or may not run as a result
17:32 dstokes right,  but does it run for each command in `names` or once for all?
17:32 qux joined #salt
17:32 XenophonF once for the whole state
17:33 yes456 joined #salt
17:33 iggy 15 year old virus... cute nickname for my niece
17:33 stephas joined #salt
17:33 XenophonF if you do salt.call state.highstate |& tee highstate.out, you should see it fire in the output
17:33 jaimed joined #salt
17:33 XenophonF er, salt-call
17:33 XenophonF i didn't know that cmd.run took a names parameter
17:33 XenophonF i assume that's a list of commands to run?
17:33 XenophonF noice!
17:34 goodwill oh noes
17:34 goodwill "In May 2014 Symantec announced the end of life for Symantec pcAnywhere, and according to its FAQ "At this time,Symantec has no plans to introduce a replacement remote control product."
17:34 XenophonF LOL
17:34 goodwill I had a client that was all about it
17:34 goodwill we are talk the version from 90s
17:34 dstokes XenophonF: https://gist.github.com/dstokes/9f3f976568a9116bb836 am i reading this log right? (looks like requisite runs for each command in names)
17:34 goodwill would not use RDP
17:34 nitti joined #salt
17:35 qux hello, world. anyone have time for a nube question wrt Writing Grains ? I've just copied over the example from the website and have verified that the minion now has that python bit at /var/cache/salt.... i do not see the custom grains in gain.ls from the master, though
17:35 XenophonF dstokes: I stand corrected.
17:35 XenophonF well, sit
17:35 stephas joined #salt
17:35 dstokes wonder if that's intended, seems counterintuitive
17:35 XenophonF goodwill: that's nutty
17:35 XenophonF RDP is so very much better
17:36 XenophonF was your customer dialing into pcAnywhere or some insanity like that?
17:36 perfectsine joined #salt
17:37 XenophonF dstokes: i'd have to look at the code but perhaps names is implemented recursively?
17:37 XenophonF so it gets expanded into multiple cmd.run states, each with identical parameters (aside from the name, of course)
17:38 XenophonF hang on a sec let me dig up the code to that state
17:39 dstokes XenophonF: https://github.com/saltstack/salt/issues/16879
17:39 scoates FWIW: in pillar's top '*_master': will match a reactor script running on the master. problem solved for now.
17:39 Ahlee Anybody got a quick example of using jinja templates in states and being able to pass through None ?
17:39 Ahlee i.e. salt['pillar.get']('foo', None), "None" is being passed in as a string of None
17:40 XenophonF Ahlee, I use that all over the place
17:40 XenophonF hang on let me look up an example
17:40 XenophonF dstokes: maybe cmd.script is a better solution
17:40 XenophonF i wonder how the plural parameters are implemented
17:41 XenophonF like cmd.run names, or pkg.installed pkgs
17:41 XenophonF b/c i don't see it in salt/states/cmd.py
17:41 KyleG joined #salt
17:41 KyleG joined #salt
17:41 XenophonF https://github.com/saltstack/salt/blob/develop/salt/states/cmd.py#L552
17:42 Ahlee XenophonF: that'd be amazing, thanks
17:42 SheetiS Ahlee: got an example of what you are trying to do? I typically just use an empty type for whatever I am doing.  if it is a string salt['pillar.get']('foo', ''), or a list salt['pillar.get']('foo', [])
17:42 SheetiS etc
17:43 Ahlee SheetiS: ah, I'll try that.  Right now, I just have a default option on a custom _state method that if only executes if an option is not None
17:43 Ahlee SheetiS: but, having a pillar lookup determine if that's true or false was passing in "None"
17:43 Ahlee which caused if argument: to pass
17:43 nitti joined #salt
17:44 SheetiS {% if salt['pillar.get']('foo', '') %} will evaluate to False and not run the conditional stuff below for example.
17:44 stephas joined #salt
17:44 mpanetta Hrm, odd issue... Is there any way to specify what user salt-cloud connects as when it deploys?  I am trying to use runabove with salt-cloud, but they don't allow direct root access.  You have to sudo as admin...
17:45 nitti joined #salt
17:45 alex-mesos joined #salt
17:45 XenophonF SheetiS: here's my example, https://bpaste.net/show/554b255c8dc5 and https://bpaste.net/show/16a1079b3ced
17:45 timoguin mpanetta: ssh_username is the cloud profile
17:46 XenophonF er, that was meant for Ahlee
17:46 XenophonF sorry
17:46 Ahlee SheetiS: I don't want to have to repeat myself by doing {% if salt['pillar.get']('foo', '') %} - foo: {{ salt['pillar.get']('foo') }}
17:46 mpanetta timoguin: Thanks!
17:46 XenophonF Hang on I have another similar example
17:46 murrdoc joined #salt
17:46 nitti joined #salt
17:47 SheetiS Ahlee: There are definitely ways around that.  is this a single line or a list?
17:47 Ahlee SheetiS: Right now it's single key:value pair, no lists
17:47 Ahlee SheetiS: can't say for certain there will never be lists, but i haven't coded it in a way where it will walk a list
17:47 SheetiS XenophonF: yeah that works becuase 'None' never becomes part of yaml in your example :)
17:48 aparsons joined #salt
17:48 XenophonF Ahlee: here's another example, where I use a jinja if, https://bpaste.net/show/8247eeeac113 and https://bpaste.net/show/74f782469af2
17:48 mpanetta timoguin: That worked perfectly, thanks!
17:48 XenophonF so line 28 of the second paste
17:49 XenophonF i query a pillar and return a False if it doesn't exist
17:49 SheetiS False will behave well in yaml instead of None, so that's a good way to do it.
17:49 kt766 joined #salt
17:49 tafa2 joined #salt
17:50 XenophonF but I use None elsewhere
17:50 Ahlee ok.
17:50 Ahlee Thanks you two, i'll play with these options
17:50 SheetiS As long as whatever is ok with the string of 'None' vs something that requires the NoneType, that should be fine to do.  It's just that yaml transition that can get wonky depending on what you specifically need.
17:50 tafa2 joined #salt
17:51 XenophonF like for example, if i have a map.jinja, i wrap the corresponding state with an {% if mapvar %} {% endif %}
17:51 XenophonF that way if a particular formula isn't supported by that os_family, it won't run automatically
17:51 XenophonF you can see that in the auditd example i gave
17:51 SheetiS XenophonF: That's a good example that would work with False or None
17:51 Ahlee yeah, i'm trying to avoid needing to code against NoneType and None.__class__ = str
17:52 XenophonF as far as repeating {% if salt['pillar.get']('foo', '') %} - foo: {{ salt['pillar.get']('foo') }}
17:52 XenophonF i tend to assign the pillar lookup to a variable
17:52 hasue1 joined #salt
17:53 Ahlee yeah
17:53 teebes joined #salt
17:53 Pixionus have you guys ever seen salt go down on minions?  is it stable enough that my college is correct in saying we don't need to monitor the service to see if it's running?
17:53 XenophonF {% set foo = if salt['pillar.get']('foo', False) %}
17:53 Ahlee ah
17:53 n8n joined #salt
17:53 Ahlee that's not bad either
17:53 Ryan_Lane Pixionus: I personally haven't seen it crash, but I'd still monitor it
17:53 XenophonF then i do something like {{ foo if foo else '' }}
17:53 XenophonF or something along those lines
17:53 mapu joined #salt
17:54 SheetiS Pixionus: I definitely monitor the salt-minion service on all machines that run it.
17:54 SheetiS Anything that I run and want to stay running I monitor
17:54 qux Pixionus, if you normally monitor bits, you should monitor this bit too
17:54 tafa2 joined #salt
17:55 SheetiS even if it NEVER crashes on me
17:55 SheetiS I don't want to have to go find out later that it is not running
17:55 Pixionus Do you monitor it with a daemon or in some other way?
17:55 nitti joined #salt
17:56 Pixionus we run embedded machines and hes saying it would be just bloat.
17:56 XenophonF Ahlee: ok I have a better example for you
17:56 srage_ joined #salt
17:56 ghanima joined #salt
17:56 SheetiS I did a simple check procs by name with nagios.nrpe
17:56 tafa2 joined #salt
17:56 XenophonF https://bpaste.net/show/8e4ece9199a3
17:56 SheetiS do you monitor other things on the embedded machine Pixionus?
17:56 XenophonF Ahlee, that one uses a ternary if inside {{ }}
17:57 XenophonF i know ternary if is frowned upon by some pythonistas
17:57 Pixionus SheetiS: no.  That's the current argument.  We don't and I think we should.
17:58 notbmatt hi all, I've got some practical questions about multi-master setups: namely, is there an in-band method to be able to "use" all minions from any arbitrary master?
17:58 ioio joined #salt
17:58 nitti joined #salt
17:59 cpowell joined #salt
17:59 bmatt that is, if I bring up a new minion, how can I use it as a target from any master?
17:59 tafa2 joined #salt
17:59 SheetiS Pixionus: what do you use for monitoring?  nrpe takes almost no memory if you are using nagios.
18:00 nitti joined #salt
18:01 nitti joined #salt
18:01 SheetiS XenophonF: I love the pythonic ternary in that last link.
18:02 XenophonF hah
18:02 XenophonF it just felt right
18:02 XenophonF concise and to the point
18:02 XenophonF i do the same thing in my perl code all the time
18:02 beneggett joined #salt
18:02 XenophonF especially for debug/verbose logs
18:03 XenophonF print LOG "foo happened" if $debug
18:03 XenophonF anyway
18:03 Ozack1 joined #salt
18:05 SheetiS I must be a bit of a mean admin,  I force _all_ repos in /etc/yum.repos.d disabled statefully so that the only channel people see comes from spacewalk.
18:05 yes456_ joined #salt
18:06 nitti joined #salt
18:07 nitti joined #salt
18:08 aparsons joined #salt
18:10 baconbeckons joined #salt
18:11 baconbeckons paging basepi
18:15 Pixionus SheetiS: not running anything atm.  was thinking of doing something with Zabbix
18:15 nitti joined #salt
18:15 baconbeckons basepi when you’re online, please PM me. i wanted to talk to you about something off-channel
18:17 XenophonF SheetiS: spacewalk is next on my todo list
18:17 tafa2 joined #salt
18:17 XenophonF but because i'm a masochist, i'm trying to get it running under Linux emulation on my FreeBSD Salt master ;)
18:18 bezeee joined #salt
18:18 SheetiS XenophonF: masochist indeed
18:18 SheetiS I have a separate spacewalk vm
18:18 TheRealBill joined #salt
18:19 nitti joined #salt
18:19 sjaredj joined #salt
18:19 CeBe1 joined #salt
18:20 XenophonF SheetiS: i ought to do that but my hypervisors are running a little low on memory
18:20 thedodd joined #salt
18:20 XenophonF i blame all of the bloated windows VMs ;)
18:20 SheetiS Understood and agreed :P
18:21 nitti joined #salt
18:21 SheetiS I did a lot of stuff with vmware at my last gig, but 100% of my salt-managed stuff is in AWS for my current rodeo.
18:21 tafa2 joined #salt
18:21 SheetiS I can just 'throw more VMs at it' right up until the CFO chops my hands off and changes my API key.
18:22 jalaziz joined #salt
18:22 SheetiS well, not really, but I have a little more flexibility than I did when hypervisors were 'full' and I had to request more physical hardware.
18:23 sjaredj stuck on writing a jinja template.  I want to use a variable in a get statement.  It does not like the syntax.  I set the variable {%- set nodename = grains['nodename'] %} then try to use it {%- set hostname = "sudoers.get( {{ nodename }}, {})" %}
18:24 sjaredj been spinning my wheels for a bit trying to figure  it on my own but I am giving up and asking for help
18:24 nitti joined #salt
18:27 brandond_ joined #salt
18:28 __alex joined #salt
18:29 brandond_ hello, #salt. I'm a beginner trying to get started auto-configuring my mac after upgrading to Yosemite. Attempting to install following the docs locks up the machine.
18:29 SpX joined #salt
18:30 XenophonF SheetiS: lol at cfo
18:30 XenophonF SheetiS: at work we're a combo of public-private cloud, AWS and vSphere
18:30 XenophonF i'm running hyperv at home
18:31 XenophonF i've been using salt at home for about 4 months now, and i just got the goahead to deploy at work
18:31 XenophonF which makes me super happy :)
18:31 XenophonF i can't wait to try out salt-cloud
18:31 SheetiS XenophonF:  makes sense.  I'm running the free ESXi 5.5 @ home currently.
18:31 XenophonF it's also next on my list
18:32 dsolsona joined #salt
18:32 holler joined #salt
18:33 jalaziz joined #salt
18:36 tafa2 joined #salt
18:38 cliff-hm joined #salt
18:40 Pixionus what about using salt to monitor and something simple to make sure salt is running.
18:41 tafa2 Pixionus ?
18:44 SheetiS Pixionus: you can do a 'salt-run manage.down', but that's not reliable.  Should really use something outside of salt to monitor.  Even if your monitoring software has an ssh agent that it can then pgrep or whatever for it.
18:44 invsblduck joined #salt
18:45 Pixionus I was going off of this: https://speakerdeck.com/ipmb/monitoring-infrastructure-with-saltstack
18:45 ipmb ha, that's me!
18:46 Pixionus :)
18:46 smcquaid joined #salt
18:46 Pixionus how is it working for you ipmb?
18:46 ipmb still using it to push data to graphite
18:46 Pixionus not sure I understand it all, but I'm still learning.  Just thinking ahead of myself.
18:47 ipmb https://github.com/lincolnloop/salt-stats
18:47 kickerdog joined #salt
18:47 rlarkin what are you using to monitor?  I have also found manage.up and manage.down to be completely random
18:47 ipmb basically we're using it in place of running a separate agent on the box
18:47 ipmb for example, collectd or diamond
18:48 ipmb the built-in carbon returner isn't very robusy imo
18:48 ipmb we use this https://github.com/lincolnloop/salt-stats/blob/master/salt/_returners/carbon_new_return.py
18:48 ipmb *robust
18:49 ipmb here's an example of pulling stats from Nginx https://github.com/lincolnloop/salt-stats/blob/master/salt/_modules/nginx.py
18:49 __alex joined #salt
18:49 AmrMostafa It's not possible for pillar files to reference pillar items tree, right? Like in a given pillar sls: {{ pillar['foo']['bar'] }}
18:51 ipmb Pixionus: we use the scheduler like this: https://dpaste.de/nTBb
18:51 ipmb AmrMostafa: correct
18:52 AmrMostafa ipmb: thanks, I just needed to get my head straight on that as I kept thinking on somehow layering my pillar files which is obviously not how it's intended to be used
18:53 invsblduck joined #salt
18:53 murrdoc joined #salt
18:58 murrdoc whats the correct way to hook up a custom module
18:58 murrdoc i keep getting
18:59 P0bailey joined #salt
18:59 murrdoc - Rendering * failed: Jinja variable 'salt.loaded.int.render.jinja.SaltDotLookup object' has no attribute 'cluster_ops.get_candidate'
18:59 murrdoc i put the cluster_ops.py in _modules of /srv/salt
18:59 murrdoc _modules direcotry
18:59 thehaven joined #salt
19:00 P0bailey joined #salt
19:01 P0bailey joined #salt
19:01 utahcon A good sign I am doing it wrong: I want to run module.run and pass a key of "name" but it obviously conflicts with name for the module I want to run...
19:01 murrdoc help ?
19:01 utahcon so how does one do that?
19:02 timoguin pretty sure you are supposed to pass mname
19:02 SheetiS murrdoc: you'd want to make sure that you do a salt \* saltultil.sync_all, and are you also needing a state for that in addition to a module?
19:03 \ask joined #salt
19:05 sjaredj1 joined #salt
19:08 murrdoc joined #salt
19:09 cpowell joined #salt
19:10 wifininja joined #salt
19:10 housl joined #salt
19:11 mohae joined #salt
19:11 mapu joined #salt
19:12 linjan joined #salt
19:14 utahcon timoguin: close m_name
19:14 utahcon thanks!
19:15 invsblduck joined #salt
19:16 qux well, problem solved
19:16 qux salt-minion -l all
19:16 qux complains that my custom grain file did not end with an expected extension
19:17 qux and refused to load it
19:17 qux mv foo foo.py
19:17 qux all good
19:17 * qux bandages
19:17 qux ok, that's me for the day
19:17 kickerdog1 joined #salt
19:17 qux bon weekend a tous
19:17 qux left #salt
19:21 sjaredj1 left #salt
19:21 sjaredj1 joined #salt
19:21 ckao joined #salt
19:22 sjaredj1 left #salt
19:23 sjaredj joined #salt
19:23 sudarkoff joined #salt
19:26 stephas joined #salt
19:27 apergos left #salt
19:27 Outlander joined #salt
19:29 bezeee joined #salt
19:32 ndrei joined #salt
19:33 murrdoc joined #salt
19:34 beneggett joined #salt
19:35 randyryan joined #salt
19:36 Outlander joined #salt
19:37 randyryan left #salt
19:40 fragamus joined #salt
19:41 fragamus joined #salt
19:46 borat joined #salt
19:47 mpanetta ipmb: Thanks for the links, I have been thinking about using salt to monitor things for the same reason, one single agent to rule them all ;)
19:47 aparsons joined #salt
19:49 arne_ joined #salt
19:49 kickerdog joined #salt
19:51 aparsons_ joined #salt
19:51 n8n joined #salt
19:54 thayne_ joined #salt
19:59 bezeee joined #salt
20:00 intellix joined #salt
20:00 giantlock joined #salt
20:01 tafa2 joined #salt
20:02 colonD joined #salt
20:03 knot joined #salt
20:03 knot joined #salt
20:12 vejdmn joined #salt
20:18 bbnix joined #salt
20:19 whatapain can anyone help confirm if the state.user expire function is working?  i have set expire: 1 to lock an account but it doesn't seem to be making the change.  i expect chage -l <user> to show an expiration of Jan 02, 1970 but it's currently showing never.
20:20 aparsons joined #salt
20:21 kivihtin joined #salt
20:23 aparsons_ joined #salt
20:25 nitti joined #salt
20:27 nitti joined #salt
20:30 jalaziz joined #salt
20:30 smcquay joined #salt
20:31 nitti joined #salt
20:32 nitti joined #salt
20:33 nitti joined #salt
20:36 srage joined #salt
20:38 nitti joined #salt
20:40 Pixionus Thanks ipmb.  I think this will all come in handy.
20:40 ipmb no problem!
20:41 Pixionus do you still use something to monitor the minion process on the minions?
20:41 Pixionus and what kind of system have you deployed on?
20:41 ipmb Ubuntu
20:41 ipmb I suppose you could use it to monitor the minion process
20:41 ipmb If you stop getting data, you know there's a problem
20:42 ipmb I did have one issue with monitoring processes in the past, but I think it's fixed now
20:42 Pixionus but then if it somehow failed, there would be no action to bring it back up
20:42 nitti joined #salt
20:42 ipmb no it's not a process monitor in that way Pixionus
20:42 ipmb we're mostly using it for stats/metrics
20:43 ipmb and something watches the stats/metrics for anomolies
20:43 Pixionus I think Salt is stable enough that we shouldn't have to really worry about it failing, but it is still a critical system component
20:43 ipmb yes, the init system should keep it running
20:43 Pixionus oh I know.  Im saying what do you use to monitor it if you do have a process monitor
20:43 ipmb and if it fails, you probably just want to trigger an alarm
20:44 nitti joined #salt
20:44 ipmb well, we use upstart to keep processes running
20:44 Pixionus So, I am deploying on multiple embedded systems and I recently saw a few where the Salt minion never started or (the log seems to indicate) it started and logged a key rejection before I even go in and started trying ot work with it.
20:45 ipmb I'm not really happy with our monitoring setup at the moment
20:45 ipmb I'm using http://cabotapp.com/ to watch graphite
20:45 ipmb so in this scenario, you'd check that service.status == 1
20:45 ipmb if it doesn't, trigger an alarm
20:46 nitti joined #salt
20:46 ipmb the issue I had before with service monitoring was that salt didn't pass the function arguments to the returner
20:47 nitti joined #salt
20:47 ipmb but I think that's been resolved
20:47 ipmb you'd get service.status = 1 instead of service.status.postgresql = 1
20:48 tafa2 joined #salt
20:48 ipmb the carbon returner here needs to be adjusted for that https://github.com/lincolnloop/salt-stats/blob/master/salt/_returners/carbon_new_return.py#L67-L68
20:49 juanlittledevil joined #salt
20:49 ipmb yep, it was resolved a year ago :) https://github.com/saltstack/salt/issues/7352
20:50 nitti joined #salt
20:52 kickerdog joined #salt
20:54 nitti joined #salt
20:54 Pixionus so what is it that you dislike about your monitoring setup?
20:54 murrdoc joined #salt
20:58 kballou joined #salt
20:58 skyler joined #salt
21:00 juanlittledevil Howdy guys, I've got a quick question about the client ACL. I don't see it documented but does this only work with users? or can I restrict on unix groups?
21:01 ipmb Pixionus: I'm happy with salt pushing to graphite and with something polling graphite for problems
21:01 ipmb cabot is still pretty rough around the edges though
21:04 pass_by_value juanlittledevil: You can append a % to the end of an id to apply permission to a group. Does this help? http://docs.saltstack.com/en/latest/topics/eauth/index.html
21:06 glyf joined #salt
21:08 Pixionus only asked because you said you were not really happy with your monitoring setup atm
21:09 juanlittledevil pass_by_value: yes it does thank you!
21:09 pass_by_value :)
21:12 SpX joined #salt
21:14 fragamus joined #salt
21:14 baconbeckons joined #salt
21:17 aparsons joined #salt
21:18 murrdoc joined #salt
21:22 aboe joined #salt
21:22 aparsons joined #salt
21:24 jdmf joined #salt
21:26 X86BSD joined #salt
21:26 mohae joined #salt
21:30 smcquay joined #salt
21:32 ajolo joined #salt
21:33 kickerdog left #salt
21:33 skyler I get this error when running commands sometimes: Failed to authenticate!  This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error ocurred (check disk/inode usage).
21:33 skyler I got that after running salt-run manage.down
21:33 skyler I ran the same command again and it worked.
21:34 mafro joined #salt
21:38 libertyy joined #salt
21:40 philipsd6 joined #salt
21:44 libertyy i saw that salt-cloud was merged into salt. If i'm using 2014.1.11,should I expect salt-cloud to be available in the command line? Or do i still have to install a separate package for salt-cloud ?
21:46 jcockhren libertyy: it's available on the command line
21:48 libertyy ah, okay, thanks!
21:58 jalaziz_ joined #salt
22:02 kermit joined #salt
22:02 canci joined #salt
22:02 brendangilmor joined #salt
22:03 jalaziz joined #salt
22:05 otter768 joined #salt
22:09 jalaziz joined #salt
22:16 TheThing joined #salt
22:20 CeBe1 joined #salt
22:21 yomilk joined #salt
22:22 yomilk joined #salt
22:22 Ahlee pkg.latest is returning 'No information found for "rpm"', but pkg.upgrade_available correctly returns False
22:22 bo_ joined #salt
22:23 Ahlee hrm. pkg.version returns nothing, despite rpm -qa | grep name returning
22:23 Ahlee theories?
22:31 smcquay joined #salt
22:32 tomcat joined #salt
22:32 tomcat left #salt
22:34 TaiSHi joined #salt
22:34 smcquay_ joined #salt
22:37 beneggett joined #salt
22:39 anotherZero joined #salt
22:39 aparsons joined #salt
22:40 ryuhei joined #salt
22:42 tafa2 joined #salt
22:43 X86BSD_ joined #salt
22:43 peno joined #salt
22:43 mortis_ joined #salt
22:43 Fl0o joined #salt
22:44 beneggett joined #salt
22:44 srage joined #salt
22:44 wt joined #salt
22:44 Ryan_Lane joined #salt
22:45 yomilk joined #salt
22:45 rawzone joined #salt
22:47 MK_FG joined #salt
22:47 notpeter_ joined #salt
22:47 \ask joined #salt
22:49 juice joined #salt
22:49 jab416171 joined #salt
22:50 derelm joined #salt
22:50 tafa2 joined #salt
22:53 ioio_ joined #salt
22:57 cmthornton joined #salt
22:58 der_elm joined #salt
22:59 otter768 joined #salt
23:02 yomilk joined #salt
23:06 rjc joined #salt
23:09 basepi baconbeckons: sorry I forgot to ping you earlier. Feel free to PM me now
23:10 cads joined #salt
23:11 ioio joined #salt
23:15 brandond_ Anyone know how to resolve installation issues on OSX 10.10 Yosemite?
23:22 tligda joined #salt
23:26 ipmb joined #salt
23:29 aparsons joined #salt
23:35 NightMonkey joined #salt
23:38 al0 joined #salt
23:39 wifininja joined #salt
23:51 jalaziz joined #salt
23:52 mordonez joined #salt
23:56 skyler I am having an issue with salt's transport: https://github.com/saltstack/salt/issues/16900.
23:56 skyler In the meantime, I was thinking of using RAET. Does anyone know how to switch to it?
23:59 jonbrefe joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary