Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-12-08

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:27 bhosmer joined #salt
00:39 yomilk joined #salt
00:45 sluzorz joined #salt
00:49 sluzorz having an issue extending an SLS, would someone be able to help me out? https://gist.github.com/sjlu/c1c6980ed639f4f06df8
00:53 robinsmidsrod joined #salt
00:55 otter768 joined #salt
01:06 cwyse joined #salt
01:11 aurynn anyone successfully used the Docker state module with a private registry?
01:11 aurynn I'm getting errors with .pushed
01:12 aurynn I don't know what the error is
01:12 aurynn but I'm definitely getting it!
01:15 dynamicudpate joined #salt
01:16 aqua^mac joined #salt
01:24 N-Mi_ joined #salt
01:24 N-Mi_ joined #salt
01:26 speed145a joined #salt
01:27 kickerdog joined #salt
01:41 asyncsrc joined #salt
01:42 bhosmer joined #salt
01:46 asyncsrc Hi there.  I had a quick question about reactors.  I have a git server minion with a post-receive hook (that gets called whenever someone checks in something to a particular repository) that I was hoping might be able to trigger the 'git.latest' state to be called on a different minion where I want the contents from a particular git repo deployed to.  I have a reactor entry
01:46 asyncsrc under /etc/salt/master to listen for cilearn_pull tag and then run a particular *.sls file with -tgt remote_minion_id.  However, running salt-call on the git server minion does not appear to be working as expected (i.e., i get local: True), and nothing changes on the remote minion, so I wasn't sure if this was possible, or perhaps I'm going about it the wrong way
01:47 asyncsrc I've tried using the eventlisten.py and running salt-master with -l debug, but nothing seems to stand out as 'oh yea, that's the problem'.. other than the eventlisten output always showing the git server as the -tgt value instead of what I have set in the reactor salt file
02:01 malinoff joined #salt
02:07 otter768 joined #salt
02:19 capricorn_one joined #salt
02:28 potens joined #salt
02:36 snuffeluffegus joined #salt
02:38 bbradley_ joined #salt
02:45 Leonw joined #salt
02:50 Kraln joined #salt
02:50 neilf______ what is the best way to check if a user exists in salt? I am not managing the user via salt though.
02:56 _ikke_ joined #salt
02:59 glyf joined #salt
03:09 jtanner joined #salt
03:10 Mso150_f_e joined #salt
03:11 gzcwnk joined #salt
03:11 gzcwnk anyone in pls?
03:13 malinoff neilf______, {% if not __salt__['pw_user.info']('someuser') %} # user does not exist {% endif %}
03:13 malinoff gzcwnk, what's the question?
03:14 gzcwnk I am trying to repalce a resolv.con with file.managed but it isnt happening yet is says success, but the old file stays
03:14 gzcwnk so how can I force a replacement?
03:15 glyf joined #salt
03:16 smkelly moo
03:16 malinoff gzcwnk, if salt says success with no changes, it means that the file is already in desired state
03:17 gzcwnk but it isnt as teh content is wrong
03:17 gzcwnk its teh old content not the new one I need
03:17 bbradley_ left #salt
03:17 malinoff gzcwnk, check paths, permissions, logs
03:17 malinoff gzcwnk, probably you have a typo and you're writing somewhere else
03:18 gzcwnk i cant see how as its so simple
03:19 malinoff gzcwnk, e.g. you've specified /etc/resolv.con instead of /etc/resolv.conf
03:20 gzcwnk taht was my typo here
03:20 potens joined #salt
03:20 gzcwnk makes no sense why it says succeeded either
03:21 malinoff gzcwnk, because that file is present on that path, just check ls -l /etc/resolv.con
03:22 malinoff salt created that for you (because you told to, of course)
03:27 potens joined #salt
03:40 yomilk_ joined #salt
03:45 capra_ibex joined #salt
03:47 mapu joined #salt
04:35 dooshtuRabbit joined #salt
04:35 Outlander joined #salt
04:41 yomilk joined #salt
04:47 pdayton joined #salt
04:49 StDiluted joined #salt
05:01 ajolo joined #salt
05:02 tkharju joined #salt
05:15 capra_ibex joined #salt
05:21 gyre007 joined #salt
05:30 TyrfingMjolnir joined #salt
05:36 TyrfingMjolnir joined #salt
05:40 dooshtuRabbit joined #salt
05:40 debia joined #salt
05:48 Renat joined #salt
06:06 ITChap joined #salt
06:06 TyrfingMjolnir joined #salt
06:10 otter768 joined #salt
06:13 yomilk_ joined #salt
06:19 rcsheets joined #salt
06:22 kickerdog joined #salt
06:32 flebel joined #salt
06:36 jnials joined #salt
06:38 linjan_ joined #salt
06:38 linjan joined #salt
06:42 linjan joined #salt
06:43 ramishra joined #salt
06:51 ganes joined #salt
06:51 ganes hi
06:53 ganes What are all the Cloud platforms that saltstack supports
06:56 catpigger joined #salt
07:00 ganes joined #salt
07:01 ganes What are all the Cloud platforms that saltstack supports
07:02 hojgaard joined #salt
07:10 akafred joined #salt
07:10 slafs joined #salt
07:10 slafs left #salt
07:12 malinoff joined #salt
07:16 dheeraj-gupta-4 joined #salt
07:19 shookees joined #salt
07:22 viq joined #salt
07:23 capra_ibex joined #salt
07:29 fxdgear joined #salt
07:33 jhauser joined #salt
07:39 douardda joined #salt
07:40 __gotcha joined #salt
07:43 yomilk joined #salt
07:45 flyboy joined #salt
07:47 debia_ joined #salt
07:51 monkey66 joined #salt
07:52 monkey66 left #salt
07:52 moderation joined #salt
07:53 Renat Hello! Anybody have experience with passing netapi token to the python requests library?
07:56 monkey661 joined #salt
08:02 kelulut joined #salt
08:02 tomspur joined #salt
08:02 ndrei joined #salt
08:03 kelulut hello. how do i set salt minion timeout?
08:03 felskrone joined #salt
08:06 kelulut is it timeout in /etc/salt/master?
08:06 babilen It is indeed or "-t $TIMEOUT"
08:06 monkey66 joined #salt
08:07 babilen I just tend to set show_jid: True and then use "salt-run jobs.lookup_jid $JID" later or run with "-v" though
08:08 monkey66 left #salt
08:08 kelulut sometimes \* test.ping gives "Minion did not return" when all other services are OK
08:08 kelulut thanks for your input babilen
08:08 xMopxShell joined #salt
08:08 oyvjel joined #salt
08:10 ndrei joined #salt
08:11 otter768 joined #salt
08:11 lb1a joined #salt
08:14 kelulut joined #salt
08:16 Auroch joined #salt
08:18 anders__ joined #salt
08:20 Renat I'm tried using x-auth-token and cookies variants, but both gives me {u'status': None, u'return': u'Please log in'}
08:31 ganes What are all the Cloud platforms that saltstack supports
08:31 Learning joined #salt
08:31 ganes i need help
08:31 flebel joined #salt
08:31 Learning Hi, can someone explain SaltStack to me like im 5?
08:32 malinoff Learning, http://docs.saltstack.com/en/latest/topics/tutorials/walkthrough.html
08:38 snuffeluffegus joined #salt
08:40 mick3y bonjour
08:40 mick3y Learning: it's like puppet, but on steroids. and much less annoying
08:41 mick3y Learning: you have a master, which contains states definitions, and you have minions which do whatever master tells them to do
08:41 Learning So whats the general use for saltstack?
08:42 mick3y Learning: it depends - it's very flexible
08:42 Learning Well, what do you use it for
08:42 mick3y Learning: we use it to manage vatrious services within our infrastructure and do post-rpovisioning configuration
08:42 mick3y Learning: looking into deploying our products with it now
08:44 nethershaw The general case is configuration management. Deploy a minion, it gets a dictionary full of whatever arbitrary things you want it to be aware of, and it executes them.
08:44 Mso150_f_e joined #salt
08:44 JlRd joined #salt
08:44 nethershaw The process is stateful, so things can depend on other things having happened correctly. Or not. As you see fit.
08:54 ganes hi
08:54 ganes i would like to know saltstack states storage apart from git-hub??
08:55 ganes like https://github.com/saltstack
08:55 ganes any other common repository for already developed states or .sls files list
08:55 ganes ??
09:05 babilen ganes: https://github.com/saltstack-formulas/ comes to mind (not sure if you were referring to that already), https://github.com/bechtoldt has some (quite opinionated ones, matter of taste) and there are a bunch of others. Anything in particular you are looking for?
09:05 babilen (sorry, both are on github - any particular reason why they shouldn't be on GH?)
09:10 oyvjel joined #salt
09:15 kawa2014 joined #salt
09:15 sieve joined #salt
09:16 sieve joined #salt
09:16 sieve joined #salt
09:17 sieve joined #salt
09:17 babilen bouncy sieve
09:18 ganes babilen:
09:18 ganes in git hub less no of scripts only available  for saltstack
09:19 ganes not like chef ... t consists many no of cookbooks!!!
09:20 ganes git hub is the only storage provided by saltstack org??
09:20 babilen official github formulas are available on github, yes
09:21 babilen And why would saltstack want to/should  make chef cookbooks available?
09:22 ganes actually i working on chef currently!1 but recently i started to learn chef
09:22 wnkz joined #salt
09:22 ganes sorry
09:22 ganes actually i working on chef currently!1 but recently i started to learn saltystack!!!1
09:23 ganes i expected large no scripts available for saltstack like chef
09:23 ganes but not like that
09:24 ninkotech joined #salt
09:24 ganes thats what i need to know any communty or any blogs consists more scripts
09:25 ganes can u tell What are all the Cloud platforms that saltstack supports ??
09:26 aurynn 'tis in the docs
09:26 ganes is it where ??
09:27 felskrone joined #salt
09:27 malinoff http://docs.saltstack.com/en/latest/topics/cloud/ 7.3.1.5
09:32 felskrone joined #salt
09:33 Outlander joined #salt
09:36 ganes thanks
09:42 Rhomber joined #salt
09:42 Rhomber Hey guys
09:43 Rhomber does anyone have any pointers for creating a custom salt-cloud provider?
09:43 Rhomber do I just make a .py in the correct namespace and referrer to that name?
09:45 bhosmer joined #salt
09:46 oyvjel joined #salt
09:46 __gotcha joined #salt
09:52 shookees joined #salt
09:52 shookees joined #salt
09:54 sieve Im having a little trouble with salt-mine. https://gist.github.com/mooperd/036fd9352c7946fbbf15
09:54 sieve I cannot work out the jinja to pick up the stuff in the mine
09:59 sieve Also the value that I want seems to be nested
10:01 alanpearce joined #salt
10:10 ingwaem joined #salt
10:10 eMBee good evening
10:12 otter768 joined #salt
10:14 eMBee i am trying to create a htpasswd user, but i can't get the examples in http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.htpasswd.html to work. i keep getting 'webutil.useradd' is not available. am i missing something?
10:14 sieve joined #salt
10:17 sieve babilen: Do you have a little time to help me with a bit of mine?
10:17 sieve https://gist.github.com/mooperd/036fd9352c7946fbbf15
10:18 aparsons joined #salt
10:21 babilen sieve: I showed you that already in my examples. (.values()|first|first or now addrs|first)
10:22 rbjorklin I haven't been able to find good, working, recommended way of upgrading all salt minions. Would this be crazy? salt '*' cmd.run 'curl -L https://bootstrap.saltstack.com | sh -s -- -P git v2014.7.0 && service salt-minion restart'
10:23 aparsons joined #salt
10:26 babilen rbjorklin: I just use "pkg.install salt-minion refresh=True" (which sort of relies on the fact that you installed salt from your repos) -- I have the feeling that you did not.
10:30 Outlander joined #salt
10:31 rbjorklin babilen: That looks nice but Ubuntu 12.04 does not provide a very recent version and I'm relying on features from 2014.7.0. Also the python-requests package has known bugs/incompatibilities
10:44 rbjorklin babilen: Would it be possible to install and run Salt in a virtualenv so that it does not depend on system libraries and salt dependencies can be freely upgraded?
10:44 sieve babilen: yes, I think I have my head around that but the data seems to be somehow nested:
10:44 sieve {% for ip in salt['mine.get']('*', 'network.ip_addrs', ['eth0']) %
10:45 sieve master:
10:45 sieve ----------
10:45 sieve master:
10:45 sieve - 172.31.28.152
10:49 robinsmidsrod joined #salt
10:54 seanod joined #salt
10:55 seanod Anyone up for helping me debug a weird salt problem?
10:55 seanod I have a few minions working with my current scripts
10:55 seanod but the latest I have added fails with...
10:55 seanod "Got a bad pillar from master, type str, expecting dict"
10:55 seanod and on the master log I see
10:55 seanod "LoaderError: The renderer yaml_jinja is unavailable"
10:55 seanod I've checked and both boxen have jinja2 and yaml installed
10:56 seanod so I'm a little stumped
10:56 babilen rbjorklin: I thought saltstack offered a PPA for Ubuntu -- http://docs.saltstack.com/en/latest/topics/installation/ubuntu.html
10:57 babilen sieve: Yes, so you don't want "for ip in" but the aforementioned "for server, addrs in ... addrs|first"
10:58 brayn joined #salt
10:59 rbjorklin babilen: Crud... I completely missed that...
10:59 rbjorklin babilen: Thanks for the pointer though!
11:01 seanod huh, actually I just re-ran on a node I setup previously, its failing now as well
11:02 robinsmidsrod joined #salt
11:02 xsteadfastx joined #salt
11:03 CeBe joined #salt
11:03 babilen seanod: I'd argue that the unavailability of the yaml_jinja renderer is the origin of your problems. Question is: Why?
11:04 seanod babilen, looks that way
11:04 babilen Wait, shouldn't that be "jinja_yaml" ?
11:04 babilen As in "#!jinja|yaml"
11:05 babilen Ah, no the "yaml_jinja" renderer is correct, but I don't quite understand that naming scheme.
11:06 seanod babilen, has to be something to do with it
11:06 seanod babilen, weird thing is, even if I comment out the one state thats using jinja, it still seems to be coming up
11:07 seanod if I fire up python on the box and import jinja2 and yaml, they come in just fine
11:08 viq seanod: did you try restarting master?
11:08 babilen It's simply the default renderer and as salt people are lazy none of the SLS files specify "#!jinja|yaml" as renderer
11:10 seanod babilen, gah, that worked!
11:10 seanod babilen, I wonder what had gone wrong with it
11:10 babilen restarting the master you mean?
11:10 lothiraldan joined #salt
11:10 seanod viq, thank you, failed to consider something that simple
11:10 seanod babilen, yip, no idea what was wrong, but after a restart all is well
11:10 babilen It's the first thing I try
11:10 babilen (restart master/minion that is)
11:10 seanod I'll bear that in mind for the future
11:11 seanod (I had restarted the minion multiple times, but I guess my head was focused on the new machine)
11:11 viq seanod: you said pillars, pillars are rendered on master, as opposed to states that are rendered on minions
11:12 viq Thus restarting master is something to keep in mind there
11:12 seanod viq, gotcha, pretty new to salt, dont have a good mental model of it yet
11:12 seanod viq, appreciate the help
11:12 viq :)
11:14 robins joined #salt
11:18 robinsmidsrod joined #salt
11:24 bhosmer joined #salt
11:25 Micromus_ joined #salt
11:27 giantlock joined #salt
11:28 robins joined #salt
11:30 felskrone joined #salt
11:35 racingferret joined #salt
11:35 Outlander joined #salt
11:38 racingferret Hi guys, is this the right channel to post general salt questions?
11:40 viq racingferret: yes
11:40 racingferret OK, cool
11:40 HACKING-FACEBOOK joined #salt
11:42 robinsmidsrod joined #salt
11:44 racingferret so I have the following state: http://pastebin.com/8UyZXxdv
11:45 racingferret I have just realised that partition.mklabel and partition.mkpart are both modules, not states
11:46 racingferret Unfortuantely, they don't work in the example above.  Is there another way to do that in an automated fashion?
11:48 robinsmidsrod joined #salt
11:48 viq racingferret: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.module.html  ?
11:48 viq and maybe http://docs.saltstack.com/en/latest/ref/states/all/salt.states.blockdev.html
11:49 shorty_mu joined #salt
11:50 robinsmidsrod joined #salt
11:52 racingferret ahh, perfect!
11:52 monkey661 joined #salt
11:52 racingferret viq: much appreciated!
11:56 robinsmidsrod joined #salt
11:58 sieve babilen: thanks for all your help. I got to it in the end
12:00 aqua^mac joined #salt
12:01 pf_moore_ joined #salt
12:01 babilen sieve: Wonderful, well done!
12:03 pf_moore joined #salt
12:10 Sypher http://docs.saltstack.com/en/latest/topics/tutorials/salt_bootstrap.html <-- why does that state that Debian only supports git installs while there are Debian packages at http://debian.saltstack.com/?
12:12 LittUp joined #salt
12:12 otter768 joined #salt
12:25 moapa Hm. I beleive I have some caching issue on my master.. salt 'minion' grains.get roles show very outdated data
12:25 moapa I've updated the grain roles on my minion and restarted salt-minion, my master still show old values
12:26 HACKING-FACEBOOK joined #salt
12:28 thawes joined #salt
12:28 wnkz joined #salt
12:30 HACKING-FACEBOOK joined #salt
12:31 ndrei joined #salt
12:34 agend joined #salt
12:34 hobakill joined #salt
12:34 hobakill join #kde
12:34 hobakill sorry
12:35 glyf joined #salt
12:41 sieve I am running salt '*' state.highstate but I'm getting "Minion did not return. [No response]"
12:41 sieve The minion is still doing stuff
12:42 sieve I can see it in the minion debug log
12:43 lothiraldan joined #salt
12:43 viq sieve: that's why I always run with -v, and often with -t 30
12:47 ndrei joined #salt
12:48 hobakill running salt-master 2014.7.0 and ever since the update i've noticed my master having its CPU pegged more often than not with the salt-master -d process taking up the bulk of the cycles. oddly, even a stop/start doesn't get rid of the issue. any one else having this problem?
12:52 giantlock joined #salt
12:53 CeBe joined #salt
13:00 babilen sieve: Just set "show_jid: True" in your master config and run "salt-run jobs.lookup_jid $JID" to get information about that job once it has completed. You can check running jobs with "salt-run jobs.active".
13:03 ze- Hey. is there a way to configure a minion to only accept a very few kind request from the master ?
13:08 saffe joined #salt
13:13 ndrei joined #salt
13:26 N-Mi_ joined #salt
13:29 aquinas joined #salt
13:29 monkey66 joined #salt
13:31 Leonw joined #salt
13:36 ericof joined #salt
13:37 _JZ_ joined #salt
13:40 saffe_ joined #salt
13:41 dRiN joined #salt
13:43 hcl2 joined #salt
13:43 sroegner joined #salt
13:49 aqua^mac joined #salt
13:52 lothiraldan joined #salt
13:56 jeddi joined #salt
14:02 gngsk joined #salt
14:04 mapu joined #salt
14:13 giantlock joined #salt
14:13 williamthekid_ joined #salt
14:13 otter768 joined #salt
14:20 lothiraldan joined #salt
14:22 elfixit joined #salt
14:24 cpowell joined #salt
14:27 mpanetta joined #salt
14:28 anders__ Hi all. After a time of idling (not running salt) when I run for instance 'salt '*' pillar.get foobar' only some of the minions reply. Re-running the command directly often return result from all the clients. Is there anything that could be done to make all minions always be "up"?
14:30 Ahlee What version of salt and zeromq?
14:31 dude051 joined #salt
14:31 anders__ salt 2014.1.10 (Hydrogen). What is zeromq?
14:32 hcl2 left #salt
14:32 Ahlee zeromq is the communication protocol used, old version of zeromq (2.x) have known disconnect issues, hence why I asked
14:32 anders__ zeromq3-3.2.4-1.el6.x86_64
14:32 Ahlee ok, 3 is new enough
14:33 yetAnotherZero joined #salt
14:34 Ahlee my understanding was heartbeating was added a long time ago
14:34 Ahlee if memory serves, 2014.1.10 had some bugs
14:36 eliasp see: https://github.com/saltstack/salt/issues/15415
14:36 anders__ Ok. So this is not a "feature" and it should work? In that case I will try with the latest release.
14:36 Ahlee thank you eliasp, that certainly sounds like the same issue
14:36 eliasp fix in https://github.com/saltstack/salt/pull/15722
14:37 alanpearce joined #salt
14:37 karimb joined #salt
14:37 anders__ Ah, perfect. Thank you very much for fast reply and hopefully a solution.
14:38 Deevolution joined #salt
14:38 nitti joined #salt
14:39 clinta joined #salt
14:39 sieve joined #salt
14:39 sieve joined #salt
14:40 sieve joined #salt
14:40 sieve joined #salt
14:41 sieve joined #salt
14:43 rtuin joined #salt
14:45 rtuin Hi all, I'm trying to set an acl on a directory with salt (standalone minion, ubuntu 14.04), and found salt.modules.linux_acl. Though it only describes how to run from the CLI, what's the best way to use this in a state def?
14:47 thawes joined #salt
14:49 eliasp rtuin: until there's a proper ACL state, you could hack your way around it and use http://docs.saltstack.com/en/latest/ref/states/all/salt.states.cmd.html
14:50 rtuin eliasp: that's helpful, thank you!
14:50 rtuin Is there an ACL state in the making, that you know of?
14:50 jeremyr joined #salt
14:51 viq eliasp: there's also http://docs.saltstack.com/en/latest/ref/states/all/salt.states.saltmod.html
14:51 eliasp yeah, saltmod makes more sense, you're right…
14:51 eliasp rtuin: ^^
14:51 eliasp rtuin: looks like 'develop' has now an ACL state: https://github.com/saltstack/salt/pull/17575
14:52 rtuin can that be used on a standalone minion?
14:58 saravanans joined #salt
15:01 mpanetta joined #salt
15:02 _JZ_ joined #salt
15:04 sieve I have to update the version of python six before the docker stuff will work
15:05 sieve but I have to restart the minion after updating six
15:05 sieve else none of the docker functions work
15:05 sieve "     Comment: State 'docker.installed' found in SLS 'native' is unavailable"
15:05 sieve Is there a way around this
15:06 sieve I am guessing you cant restart the minion in the state file
15:08 housl joined #salt
15:08 oyvjel joined #salt
15:09 dude051 joined #salt
15:10 dude051 joined #salt
15:12 cads joined #salt
15:17 iamtew joined #salt
15:20 repl1cant joined #salt
15:22 thawes joined #salt
15:31 mdasilva joined #salt
15:32 mdasilva morning all
15:32 sjaredj joined #salt
15:34 ben38 joined #salt
15:36 lothiraldan joined #salt
15:37 UtahDave joined #salt
15:37 aqua^mac joined #salt
15:38 mick3y hah. after changing state_output to cahnges i can only lookup job result for one host
15:38 ben38 Q: is this active https://github.com/SS-archive/salt-states ?
15:38 ben38 looking for nodeJS states
15:39 eliasp looks quite outdated
15:39 eliasp ben38: https://github.com/saltstack-formulas/node-formula
15:40 conan_the_destro joined #salt
15:40 ben38 thanks!
15:43 racooper joined #salt
15:46 Valdo joined #salt
15:48 KennethWilke joined #salt
15:49 keyser joined #salt
15:50 StDiluted joined #salt
15:52 sjaredj left #salt
15:52 keyser_ joined #salt
15:53 UtahDave joined #salt
15:55 SheetiS joined #salt
15:56 rypeck joined #salt
15:58 jonbrefe joined #salt
16:00 kbyrne joined #salt
16:03 voxxit joined #salt
16:04 skarn joined #salt
16:04 kermit joined #salt
16:05 bhosmer joined #salt
16:08 jonbrefe1 joined #salt
16:14 ajolo joined #salt
16:14 otter768 joined #salt
16:27 patrek joined #salt
16:28 ericof joined #salt
16:29 Ozack1 joined #salt
16:30 CeBe1 joined #salt
16:32 RedundancyD joined #salt
16:32 alanpearce joined #salt
16:33 nafg_ joined #salt
16:36 rawkode joined #salt
16:37 linjan joined #salt
16:42 jimklo joined #salt
16:45 sjlu joined #salt
16:46 sjlu is there a way to reference a file on the master's server local fs? instead of using the current dir with salt://
16:51 saravanans joined #salt
16:52 viq sjlu: you can reference anything defined in file_roots
16:52 sjlu ah, so you can't reference anything that's not in file_roots?
16:52 lz-dylan sjlu: the location of salt:// is set in your /etc/salt/master file. you could: append another directory to it, change it, or symlink a file into your /srv/salt (or whatever you're targeting with salt://). there might be other options, too -- what are you looking to accomplish?
16:53 lz-dylan ^^ reference to /etc/salt/master is the file_roots viq mentioned
16:53 sjlu sounds godo
16:53 sjlu good*
16:56 lz-dylan if you want to do something fancy, you can use a git repo within file_roots, among other things
16:57 viq I specifically set it up at work so both states and pillars are _only_ in git
16:58 shorty_mu left #salt
16:58 sjlu ^ I should probably do that
16:59 nitti_ joined #salt
16:59 sjlu do you have separate repos for states and pillars? or can you use the same one?
17:01 eliasp sjlu: you need separate ones
17:04 theologian joined #salt
17:06 dude051 joined #salt
17:06 iggy with 2014.7 you should be able to do one repo (using pygit2 and gitfs_root)
17:07 ericof joined #salt
17:07 grantmcwilliams joined #salt
17:10 speed145a joined #salt
17:10 eliasp iggy: but does external_pillars also support gitfs_root? I'm not sure…
17:13 dude051 joined #salt
17:13 Outlander joined #salt
17:14 iggy no, but it has it's own setting for that (root=)
17:14 babilen That works with gitpython too
17:15 iggy does it? nice
17:15 iggy I thought I had read somewhere that it was just pygit (and maybe dulwhich)
17:15 babilen I tested it in vagrant and it did ... why do you think that it shouldn't? I haven't *really* tested it in detail (had other things to do) so I might have just assumed that it worked
17:16 iggy I... not sure... I originally missed the note about that being 2014.7 only and wasted a day trying to get it to work on 2014.1
17:17 iggy so I may have jumped to that conclusion doing all that at some point
17:17 iggy (but I really did think I specifically read that somewhere)
17:17 iggy moral of the story... I'm not to be trusted
17:17 KyleG joined #salt
17:17 KyleG joined #salt
17:17 glyf joined #salt
17:18 bfoxwell joined #salt
17:19 Dw_Sn joined #salt
17:19 linjan joined #salt
17:21 Dw_Sn hey everyone. I have a question, I have RedHat based systems and Debian based system, I ned to create a simple state where it will install ntp package on both systems , pkg name is ntp on both and service name is ntpd on redhat based systems, I have been trying to use os_family grains but did not work exactly as expected, any idea of a simple solution ?
17:21 viq Dw_Sn: look up how formulas do map.jinja
17:21 eliasp Dw_Sn: have a look at how formulas are built
17:21 eliasp Dw_Sn: ready-made solution for you: https://github.com/saltstack-formulas/ntp-formula
17:24 hal58th joined #salt
17:24 Dw_Sn eliasp: cool !
17:26 aqua^mac joined #salt
17:29 murrdoc joined #salt
17:30 troyready joined #salt
17:30 rtuin joined #salt
17:31 aparsons joined #salt
17:34 sieve joined #salt
17:35 viq whee, 'dontLogTCPWrappersConnects yes' in snmpd.conf and syslog became that much quieter
17:35 murrdoc morning
17:37 yetAnotherZero joined #salt
17:37 grantmcwilliams Asked this in the google-groups but haven't figured it out yet. Is there a salt-cloud equivalent to Vagrants config.vm.synced_folder?  The machine I'm deploying into AWS with isn't available to the AWS VM so using the normal salt:// filesystem won't work for getting the initial salt states onto the new Master. With Vagrant I'd just sync the local folder and run salt-call on the VM.
17:41 murrdoc no clue, i use s3fs to serve files in aws
17:41 murrdoc and also cron + masterless setup
17:41 murrdoc so one cron pulls down state files everyday, and applies safe states every night
17:41 murrdoc sorry grant
17:42 grantmcwilliams Thanks, we use a private github repo but I don't really want my private key in the VM AMI in order for it to pull down it's state files. Even if I could "seed" the VM with the private key and have it do a git pull I'd be off and running.
17:43 murrdoc is it one repo ?
17:43 murrdoc you could technically make a deployment key
17:43 murrdoc not tied to anyones account
17:43 iggy don't remember that much about aws, but gce has a metadata key that's equivalent to a startup script
17:44 iggy I just stuff the master spinup commands in that and off it goes
17:44 UtahDave joined #salt
17:44 grantmcwilliams With Vagrant I can do cloud-init to seed the VMs too. It's unclear to me how salt-cloud gets certain information across to the VM. I see it  using SFTP to put the deploy scripts and minion config/keys on the VM so I assume it can put anything there but the functionality doesn't seem to be in place for general data.
17:44 nosleep77 joined #salt
17:45 iggy hmmm, I think that might have been one of the reasons we dumped salt-cloud
17:45 iggy (that and it just seems a little _too_ picky about working on gce)
17:45 skarn joined #salt
17:45 grantmcwilliams AWS uses cloud-init for stuffing values in the VM on provisioning. Salt-cloud lets you specify which AWS public key to use and I assume AWS seeds the VM as I can specify a different pub key than whats in the VM and it works. It doesn't seem like salt-cloud passes much more to AWS.
17:47 grantmcwilliams I was even thinking of placing the key in a grain (since this one salt-master is the only VM that would have access to it's own grains) since salt-cloud lets me set the grains upon provisioning. I could then pull it out on the other side with the deploy script. It's hack but if I could get the priv key over there I could just git pull the states.
17:48 grantmcwilliams I'm sure this is the worst way of doing this but I'm running out of ideas without going back to Vagrant or building the private key into the AMI.
17:48 clinta joined #salt
17:49 spookah joined #salt
17:50 ericof joined #salt
17:50 desposo joined #salt
17:51 conan_the_destro joined #salt
17:52 iggy it's definitely a complex problem to solve in salt-cloud (as everything is expected to work in a majority of the providers out of the gate)
17:53 smcquay joined #salt
17:53 jxFive joined #salt
17:55 grantmcwilliams Once my initial salt-master is up and running it's easy after that as any subsequent VMs would be provisioned by it and it would be accessible to them via salt. The initial salt-master is the issue. I can really see needing salt-cloud to sync a directory like Vagrant. Perhaps I should do a feature request.
17:56 forrest joined #salt
17:57 UtahDave grantmcwilliams: salt-cloud has a new feature in develop where you can specify files to lay down when creating the vm
17:58 grantmcwilliams Hoorah! UtahDave.
17:58 grantmcwilliams When will that be available?
17:59 iggy if previous timelines mean anything... Novemeber or so
17:59 eliasp :)
17:59 UtahDave grantmcwilliams:  https://github.com/saltstack/salt/pull/16886
17:59 grantmcwilliams I was trying to dig through the salt-cloud code to figure out how much work it would be to specify a file to send or sync a directory. It seems that it wouldn't be that hard since it was already using SFTP or rsync (depending) to push files across.
17:59 Gareth morning morning
18:00 UtahDave Hey, I'm trying to configure a firewall to allow salt-cloud to connect to Amazon's api endpoints, such as  ec2.us-west-1.amazonaws.com
18:00 UtahDave Does anyone know if the IP for  ec2.us-west-1.amazonaws.com is very static? or if there's a published location to get the proper ip from?
18:01 Ryan_Lane joined #salt
18:02 iggy sweet, that got backported to 2014.7 (so should be in 2014.7.1)
18:02 grantmcwilliams I think it would be dangerous to rely on the IP of a region. I'm not sure if it moves or not but I think that the AWS tools uses DNS.
18:04 Gareth UtahDave: knowing Amazon I wouldn't be surprised if that name wasn't static.
18:05 mdasilva joined #salt
18:05 Gareth UtahDave: what kind of firewall is it?  iptables?
18:05 UtahDave Gareth: no, it's a network firewall in a datacenter
18:05 UtahDave this customer's data center is locked down extremely tight
18:06 Gareth UtahDave: Can you just use the name?  Most firewalls support using the name and they'll resolve it, adding the returned IPs into the rules.
18:07 murrdoc joined #salt
18:08 eliasp Gareth: but some firewalls also really mess it up and will resolve it upon the creation of the rule instead of periodically refreshing it…
18:08 troyready joined #salt
18:09 eliasp Gareth: but the last time I've seen something like this was ~10 years ago, so it might be better nowadays ;)
18:09 gladiatr joined #salt
18:09 spookah joined #salt
18:13 grantmcwilliams Just traced aws cli. It's doing a DNS request for the region IP. I'm not sure what to say, maybe it's static (probably is). I guess if you can't use DNS in the firewall than you have no other choice.
18:13 cpowell joined #salt
18:13 eliasp control the firewall via a syndic minion and make it update the IP every "n" hours ;)
18:14 shaggy_surfer joined #salt
18:15 murrdoc you know how you can have multiple masters, can you have multiple syndics
18:15 otter768 joined #salt
18:15 faust joined #salt
18:16 rap424 joined #salt
18:17 Mso150 joined #salt
18:19 UtahDave Hm. Ok. Thanks for the input, everyone
18:20 douardda joined #salt
18:20 dude051 joined #salt
18:24 Gareth eliasp: true, most that I know of don't periodically refresh it.
18:25 UtahDave also, all the security people I've spoken to have a heart attack with the thought of letting someone else's dns server control which ports are open on your firewall.
18:25 zlhgo joined #salt
18:26 eliasp yeah, sure… this should probably only happen with trusted records/DNSSEC
18:26 eliasp so it boils down to the usual comfort vs security balance thing
18:27 monkey66 left #salt
18:27 eliasp maybe the best thing then to do is, to set up some kind of monitoring/periodic checks which create a notification in case there are DNS changes or the communication with Amazon doesn't work anymore
18:27 eliasp then a manual process could be triggered then
18:27 eliasp s/then$//g
18:28 GnuLxUsr joined #salt
18:36 ndrei joined #salt
18:36 Ryan_Lane joined #salt
18:37 pressureman joined #salt
18:40 UtahDave eliasp: yeah, good idea. We'll probably do something like that.
18:40 glyf joined #salt
18:40 ph8 joined #salt
18:45 beneggett joined #salt
18:48 oyvjel1 joined #salt
18:50 spookah joined #salt
18:51 UtahDave joined #salt
18:52 UtahDave left #salt
18:53 Mso150 joined #salt
18:54 kickerdog1 joined #salt
18:55 GnuLxUsr joined #salt
18:58 hal58th1 joined #salt
18:59 CeBe1 joined #salt
19:03 murrdoc joined #salt
19:04 beneggett joined #salt
19:05 Hell_Fire joined #salt
19:06 cheus joined #salt
19:08 mcm0245 joined #salt
19:09 mcm0245 Howdy all. I have a saltmaster with a gitfs backend for states. Everything comes out of the master branch in git, but recently we've wanted to test some things, and so we created a branch in git, and assigned a few hosts to states from there in the master's top.sls.
19:10 eliasp mcm0245: always keep your top.sls in a seperate repo/location, as the top.sls from all environments will be merged before they're evaluated
19:11 eliasp mcm0245: otherwise you'd always have to keep your top.sls in sync between different branches to prevent unexpected/weird results
19:11 mcm0245 With that, is there anyway to override a config from base from within my testing branch? If I have say master:apache/server.sls install and activate an apache module, can I have a testing:apache/server.sls override to not install that module?
19:11 mcm0245 eliasp: Right. I only have a single top.sls in the master branch. So all good there
19:12 eliasp mcm0245: and no top.sls in any other branches? are you sure? because this would mean you removed it manually in the other branches and you'll have to repeat this on every rebase/merge…
19:13 mcm0245 eliasp: Yep. It was removed. This is just a branch for testing, so we don't expect to merge. The states assigned from base are working just fine, and the additional state defined from the testing branch to that one host is also fine. My only issue is that in my testing I want to not do some stuff that is included in the base states, so I'd like to somehow override.
19:13 eliasp ok
19:14 glyf joined #salt
19:14 eliasp well, it sounds like you're currently assigning states to this minion in different environments… you could re-assign for the time of these tests the minion to only the dev environment and keep it out of base/master
19:15 eliasp then you'd get exclusively what's in the dev branch
19:15 StDiluted joined #salt
19:15 mcm0245 In case specifics help, I have an apache state that sets up our webservers. I'd like to test migrating from mod_php to fastcgi. So in my testing state, I'd like to override the bits that enable mod_php and just not do that
19:15 aqua^mac joined #salt
19:16 eliasp mcm0245: your branch is branched/based off master? so it's master + modifications to use fastcgi instead?
19:16 mcm0245 eliasp: Cool. I'm okay with that. Just wanted to see if there was an alternative
19:16 garthk joined #salt
19:16 druonysus joined #salt
19:16 druonysus joined #salt
19:17 mcm0245 eliasp: Correct. We have apache/init.sls that includes apache/server.sls and apache/php.sls. Then we created a fastcgi branch, where we made an apache/fastcgi.sls file. I was hoping I could just overload one of the IDs from apache/php.sls to make it a noop
19:17 eliasp well, you actually can…
19:17 eliasp make it a no-op, but then you'd still get state name duplicates which doesn't go well with Salt ;)
19:18 eliasp the 'test' state provides no-ops
19:18 mcm0245 Yeah. We've had problems with the state names duplicates and salt not doing a highstate
19:18 eliasp that's why putting this minion into just the other branch is probably the most easiest solution now
19:19 mcm0245 eliasp: Then that's what I'll do. Thanks!
19:20 beneggett joined #salt
19:21 CeBe2 joined #salt
19:31 jeremyr joined #salt
19:33 beneggett joined #salt
19:38 jhauser joined #salt
19:41 cpowell joined #salt
19:41 giantlock joined #salt
19:43 shaggy_surfer joined #salt
19:43 cpowell_ joined #salt
19:50 scarcry joined #salt
19:50 Ryan_Lane joined #salt
19:53 mapu joined #salt
19:56 murrdoc joined #salt
19:59 cpowell joined #salt
19:59 boredatwork joined #salt
20:04 linjan joined #salt
20:06 anotherZero joined #salt
20:08 kaptk2 joined #salt
20:13 generous joined #salt
20:16 otter768 joined #salt
20:18 racooper joined #salt
20:20 kickerdog joined #salt
20:22 bfoxwell joined #salt
20:23 Ozack1 joined #salt
20:25 smcquay joined #salt
20:25 notnotpeter Hi folks, I think I found a regression in 2014.7 where pillar data passed on the command line to state.sls no longer works.
20:26 notnotpeter It works perfectly with my 2014.1 minions, but the same command on 2014.7 acts as if the pillar data were not passed at all
20:26 iggy are you trying to overwrite something that's already set?
20:27 notnotpeter No. If I run salt-call pillar.item pillar_var it's empty
20:28 notnotpeter not empty, it's not present as a pillar item.
20:28 iggy okay... the only thing I could think of is the ordering of flattening pillars changed and you might be hitting that, but it doesn't sound like it
20:28 Outlander joined #salt
20:28 iggy open an issue I guess
20:29 iggy well... check to see if one is open already first
20:35 hal58th joined #salt
20:38 notnotpeter In a related matter, I can't actually downgrade from 2014.7 because the PPA only has 0.17.5+ds-1 and 2014.7.0+da-2trusty1, no 2014.1 version (like say the functioning 2014.1.13+ds-1trusty1)
20:38 notnotpeter Anyone know who maintains the Ubuntu PPA?
20:39 iggy it should say who uploaded the package on the page
20:43 dooshtuRabbit joined #salt
20:44 mdasilva joined #salt
20:44 slafs joined #salt
20:45 slafs left #salt
20:47 hal58th joined #salt
20:51 ekristen joined #salt
20:53 mdasilva joined #salt
20:58 Valdo joined #salt
21:04 TheThing joined #salt
21:04 aqua^mac joined #salt
21:05 Mso150 joined #salt
21:07 nafg_ Hello
21:07 anotherZero joined #salt
21:07 nafg_ I'm using salt-ssh with yaml+jinja
21:07 nafg_ I would like that in the course of provisioning, it will run a command locally
21:07 nafg_ Is the jinja processed on the "master" or the "minon"?
21:07 nafg_ Is the jinja processed on the "master" or the "minion"?
21:08 mdasilva joined #salt
21:08 hal58th Jinja is always rendered on the minion.
21:08 aurynn jinja is processed on the master
21:08 aurynn er
21:08 nafg_ And can the pillar have jinja and is it the same answer
21:08 aurynn ignore me
21:08 aurynn because I am wrong
21:08 nafg_ :(
21:08 nafg_ hal58th: even the pillar? or can it have jinja
21:09 hal58th I believe pillar can also use Jinja. Again it would render on the minion
21:09 aurynn Jinja in pillar can't access pillar data, though
21:09 nafg_ thx
21:10 nafg_ yeah...
21:10 gildegoma joined #salt
21:10 hal58th Correct, you can't use pillar data for jinja templating in pillar. I do use grains though
21:10 nafg_ Can I pass in settings on the command line that could parameterize states?
21:10 slafs joined #salt
21:10 rtuin_ joined #salt
21:10 slafs left #salt
21:10 nafg_ /formulas
21:11 nafg_ like extra pillar values
21:11 hal58th nafg_ parmatize formulas? Formulas area really just states in the long run and I believe you can… Let me see
21:11 nafg_ hal58th: what i want to do is run my build tool first, and
21:11 nafg_ it will output a certain file name,
21:11 mdasilva joined #salt
21:12 nafg_ which I only know in advance approximately, b/c it has the version in it, which is managed in the build configuration
21:12 nafg_ so i would like to say copy a file with name like target/**/myapp-*.jar
21:13 nafg_ of course I could make my build tool update a pillar file
21:13 dvestal joined #salt
21:13 nafg_ that could work, i suppose
21:13 hal58th nafg_ Hmmmm, let's see what I can recommend. Give me a minute
21:13 nafg_ and it could invoke salt-ssh for that price
21:14 nafg_ too
21:14 nafg_ thanks!
21:14 murrdoc joined #salt
21:17 Dw_Sn joined #salt
21:17 glyf joined #salt
21:18 iggy I'd say mine, but that doesn't work with salt-ssh
21:18 hal58th nafg_ run sudo salt-call sys.doc and look at the documentation for state.single and state.sls. That should give you a hint
21:19 Ryan_Lane basepi: https://github.com/saltstack/salt/issues/18813 <-- that's causing me some issues
21:19 hal58th nafg_ not sure you can update a pillar file easily from a minion. My only thought is to use a git backend.
21:20 nafg_ hal58th: salt-ssh
21:20 hal58th nafg_ you are on your own there my friend :)
21:21 dooshtuRabbit1 joined #salt
21:22 mdasilva joined #salt
21:22 jhauser joined #salt
21:25 ingwaem joined #salt
21:26 Emantor joined #salt
21:30 desposo1 joined #salt
21:30 eliasp any Gentoo users around who could give this a try?: https://github.com/saltstack/salt/pull/18814
21:30 eliasp Whissi: Kelsar: ^^
21:32 ingwaem joined #salt
21:34 rtuin joined #salt
21:35 ckao joined #salt
21:40 mdasilva joined #salt
21:43 Outlander joined #salt
21:44 davedash joined #salt
21:55 shaggy_surfer joined #salt
21:56 beneggett joined #salt
21:56 akafred joined #salt
21:56 mdasilva joined #salt
21:58 beneggett joined #salt
21:59 * Heartsbane blames whiteinge.
22:00 mdasilva joined #salt
22:01 kballou joined #salt
22:02 yomilk joined #salt
22:09 * cedwards blames Heartsbane
22:10 mpanetta Is it bad that I saw 'Heartsbane' and thought another vulnerability has come up?
22:13 eliasp mpanetta: well, there's now Poodle#2: https://www.imperialviolet.org/2014/12/08/poodleagain.html
22:14 mpanetta Oh man
22:14 eliasp this time in TLS
22:14 * whiteinge uses Salt to patch his servers against the Heartsbane problem
22:14 eliasp ;)
22:14 mpanetta lol
22:16 jcockhren "Heartsbane" even sounds like an exploit
22:17 wt joined #salt
22:17 otter768 joined #salt
22:17 wt why are a ton of my minions marked as down (salt-run manage.down)?
22:17 wt and which ones are down change all the time
22:18 wt Is there anything one can to to stabilize that list?
22:18 iggy happens to all of us I think
22:18 wt also, it seems that my cpu usage climbs when running
22:19 wt I use gitfs. Could that be a problem?
22:19 wt 2014-12-08 22:06:11,035 [root                                       ][ERROR   ] Unable to checkout branch prod: 'git checkout origin/prod' returned exit status 128: fatal: Unable to create '/var/cache/salt/master/pillar_gitfs/36e614ed288b2ad4ec04f1a110686acf79fb717918e8d8d9c08f905c37472ace/.git/index.lock': File exists.
22:19 wt If no other git process is currently running, this probably means a
22:19 wt git process crashed in this repository earlier. Make sure no other git
22:19 wt process is running and remove the file manually to continue.
22:19 wt I am getting a lot of the above error message.
22:20 wt Is there a trick to fix that?
22:20 Cottser|away joined #salt
22:20 wt iggy, how do you deal with it?
22:20 iggy run everything a few times in a row
22:20 wt It seems to happen in  about 1 day for me
22:21 wt salt seems to do a lot of fighting with itself
22:21 wt I am trying to keep the faith, but this is getting frustrating.
22:21 iggy I'm hoping raet will help when it's done
22:22 iggy salt's pluses definitely outweigh any negatives for us... that's probably not true for everyone
22:22 thawes joined #salt
22:22 wt I really like salt when it works.
22:23 wt however, I am running out of workarounds
22:23 wt like I can't restart the master without locking up minions
22:23 teepark I just set up my first cloud provider (linode) using valid creds and creating a new ssh key pair, but I'm getting "The cloud driver, 'linode', configured under the 'pixinote-linode' cloud provider alias was not loaded since 'linode.get_configured_provider()' could not be found. Removing it from the available providers list" consistently now
22:24 teepark new to salt-cloud -- what is this really saying? because thre is a function "get_configured_provider" in salt/cloud/clouds/linode.py
22:25 Pixionus joined #salt
22:26 wt raet doesn't exist in the epel6 packages
22:27 wt teepark, that probably means that some needed module is not installed.
22:27 troyready joined #salt
22:28 teepark wt: thanks. apache-libcloud. should've been obvious, but on a different box the issue of missing it had manifested differently
22:29 TheThing joined #salt
22:29 wt salt does a bunch of conditional module imports...it's hard to figure out sometimes.
22:29 garthk joined #salt
22:31 thawes joined #salt
22:35 thawes joined #salt
22:35 karimb joined #salt
22:37 wt ok, the salt-master (and other binary) startup code is super convoluted
22:38 badon joined #salt
22:38 wt The mixins on the OptionParsers are super hard to understand.
22:41 kermit joined #salt
22:44 housl joined #salt
22:44 nafg joined #salt
22:46 __gotcha joined #salt
22:46 dude051 joined #salt
22:48 Outlander joined #salt
22:53 aqua^mac joined #salt
22:54 Heartsbane Wow, I have a vulnerability named after me
22:54 Heartsbane somehow that is not my fault
23:07 GyroTech joined #salt
23:07 yomilk joined #salt
23:07 wt ok, so every salt-master worker tries to update the gitfs backends independently
23:08 wt with very little coordination
23:08 wt that seems bad
23:08 GyroTech Hi all, does anyone have experience with salt-virt + LVM? I am trying to deploy an image, but it looks as if salt-virt will only work with image files as black devices, and not LVM logical volume as a direct block device...
23:08 TheThing_ joined #salt
23:09 tmh_ joined #salt
23:15 wt omg, this thing actually works much better when
23:15 wt when I disable the gitfs backend
23:16 dstokes anybody have experience w/ the salt jinja filters?
23:16 iggy wt: I've seen someone else mention that (although I've not seen it myself)
23:16 iggy wt: worth opening/searching an issue to see what's up
23:19 dstokes nvm, feature i'm trying is not in latest stable
23:19 dstokes #facepalm
23:20 beneggett joined #salt
23:21 wt iggy, It's pretty clear from the code that all the salt-masters do the same thing
23:21 wt including all the backend work (like updating fileserver backend caches)
23:21 wt I don't see a way for them to coodinate.
23:22 wt This seems pretty bad.
23:23 iggy you were just saying the code was super convuluted, and now it's easy pretty clear
23:23 wt The code is convoluted. That doesn't mean I can't force my way through it.
23:23 debian112 joined #salt
23:24 wt I am assuming the mixins and the metaclasses for setting up the arg parsing are correct.
23:25 debian112 anyone using autosign?
23:30 Steve7314 in my dev environment, I can no longer use salt.  as root, I'm getting "Failed to authenticate" errors.  I inadvertently deleted my /etc/salt/pki/master/minions_denied directory, but I recreated it.  Not sure if it's related, but that's the only change that I can think of.
23:31 Steve7314 I have rebooted the minions and the master.  disk/inode usage is normal.
23:31 wt well, nevermind, maybe it's not so clear
23:31 Steve7314 any ideas?
23:31 basepi Ryan_Lane: I see you've since fixed it? Sorry for my slow reply.
23:31 Ryan_Lane yep! no worries :)
23:31 Ryan_Lane I realized it was a simple fix
23:31 wt but what is clear is that if I disable gitfs completely (filesystem and pillar backends), I get a much more stable and responsive master
23:32 wt and manage.down appears to be stable
23:33 debian112 I am having autosign problems after upgrading to 2014.7?
23:33 debian112 web[0-9].eng.(west|east).domain.com
23:33 wt debian112, I am running autosign
23:33 wt I haven't seen any issues
23:34 debian112 is an example of my file
23:34 debian112 wt: this looks  right?
23:34 debian112 it's been working for a while
23:34 debian112 then just stopped any idea?
23:34 wt Where is that file?
23:35 wt is that a key?
23:35 wt debian112, you do mean autosigning host keys, right?
23:35 debian112 yes
23:37 Ryan_Lane joined #salt
23:39 debian112 joined #salt
23:39 debian112 sorry wt: I got kicked out:
23:41 debian112 location here: http://paste.debian.net/135563/
23:42 wt Where is that file?
23:42 wt oh
23:42 wt you saw that
23:42 debian112 http://paste.debian.net/135563/
23:42 debian112 wt is there
23:43 wt are you trying to autosign keys for hosts?
23:43 wt Do I understand you correctly?
23:43 skarn joined #salt
23:43 debian112 yes, so I would put a regex in the file:
23:43 debian112 and any host in that regex range gets autosigned
23:43 wt that file doesn't look useful
23:44 debian112 web[0-9].eng.(west|east).domain.com
23:44 wt I just have "auto_accept: True" in my master config
23:44 debian112 content is like that
23:45 wt The contents of the file?
23:45 debian112 web[0-9].eng.(west|east).domain.com
23:45 debian112 that
23:46 wt oh, you're trying to use autosign_file?
23:46 debian112 yes
23:46 debian112 autosign_file: /etc/salt/autosign.conf
23:46 wt ok
23:46 wt that link you gave doesn't look like what I would expect in that file.
23:47 debian112 the link is not the file
23:47 wt ok
23:47 debian112 for some reason the chat was not allowing me to send the path via chat
23:47 debian112 so I just sent the link
23:48 debian112 the file has this in it: web[0-9].eng.(west|east).domain.com
23:48 wt try /say if you need to start with a "/" in irc
23:48 wt /root
23:48 wt for example
23:48 spookah or put a space in front of the / like the rest of the lazy people
23:48 wt /root
23:49 wt I guess that works too...thanks spookah
23:49 Steve7314 nevermind on my issue.  inodes on the master was the problem.  cleared my cache, rebooted, and it's all better.
23:49 spookah np =]
23:54 wt I don't actually use that functionality. However, it looks like it would work.
23:55 wt Is the file ownership correct?
23:55 dean joined #salt
23:57 linuser joined #salt
23:59 nethershaw joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary