Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-02-11

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 mgw joined #salt
00:01 redzaku joined #salt
00:16 Ryan_Lane joined #salt
00:17 primechuck joined #salt
00:25 maddog joined #salt
00:26 Ryan_Lane joined #salt
00:29 Ryan_Lane joined #salt
00:30 timoguin joined #salt
00:33 MatthewsFace joined #salt
00:37 GabLeRoux joined #salt
00:38 nickdew joined #salt
00:43 subsignal joined #salt
00:47 redzaku joined #salt
00:49 Morbus joined #salt
00:53 subsigna_ joined #salt
00:54 subsign__ joined #salt
00:55 ocdmw joined #salt
00:55 gamingrobot left #salt
00:59 timoguin joined #salt
01:02 otter768 joined #salt
01:04 ajw0100 joined #salt
01:06 nitti joined #salt
01:06 jdowning joined #salt
01:07 subsignal joined #salt
01:10 dude051 joined #salt
01:15 marcel joined #salt
01:18 aqua^mac joined #salt
01:18 dude051 joined #salt
01:19 joehh ecdhe: What are you trying to achieve?
01:19 joehh are there patches you want to make, additional local states/modules, etc?
01:20 joehh more up to date packages (2015.x)?
01:20 joehh I'm currently planning some changes to debian/ubuntu packaging and looking for what people are trying to acheive?
01:20 joehh Would instructions on how to patch released packages be useful?
01:22 lpmulligan joined #salt
01:27 notnotpeter octagonal/murrdoc: Thanks for your help yesterday.  I was able to get environment independent pillars going using reclass.  So now dev's can git branch and toggle environments in their vagrant without messing up production (and their pillars still work)
01:27 I3olle_ joined #salt
01:27 notnotpeter I did open an issue to support a wildcard pillar_roots setting: https://github.com/saltstack/salt/issues/20581
01:28 murrdoc the reclass guy is on this chan
01:28 murrdoc if he responds he will appreciate teh love
01:29 yomilk joined #salt
01:31 elfixit joined #salt
01:34 notnotpeter I'm happy it solved my problem, but using reclass is definitely hacky as all get out.  I got regexes going so I can have many hosts point at only a handful of configs.  Sadly reclass poops itself if you don't have a file at nodes/minion_id.yaml (0 byte file = AOK).  It's almost enough to make me just throw up my hands. Cause now before I spin a new minion I have to touch a file for that nodename for it to get any pillar data.
01:38 subsigna_ joined #salt
01:41 Diaoul joined #salt
01:41 subsign__ joined #salt
01:44 subsignal joined #salt
01:45 mapu joined #salt
01:46 CeBe1 joined #salt
01:48 neekz0r joined #salt
01:48 _1_robbie314 joined #salt
01:49 pdayton joined #salt
01:49 I3olle joined #salt
01:51 jalaziz joined #salt
01:51 subsignal joined #salt
01:52 nickdew joined #salt
01:53 lnxnut joined #salt
01:56 teebes joined #salt
01:59 ocdmw joined #salt
02:03 joehh notnotpeter: what aspect is hacky? we are considering using it and are just about to start a trial?
02:03 joehh we'll be working in an environment with a smallish number of very differently configured hosts
02:04 joehh so not looking for regexps etc of hostnames
02:05 rudi_s I'm a little confused about reclass. Is there any tutorial or introduction available? The docs are sadly a little lacking. Basically what I want is to put hosts matching regexps (or just lists of hosts) into specific groups. How can this be done?
02:06 otter768 joined #salt
02:06 rudi_s For example I want a group server and put the hosts a, b, c in this group (by writing that fact in one place, e.g. server = a b c). Or all machines matching www.* should be in the webserver group.
02:09 JDiPierro joined #salt
02:09 badon_ joined #salt
02:10 rgarcia_ joined #salt
02:12 schlueter joined #salt
02:12 clintberry joined #salt
02:13 Cottser|away joined #salt
02:13 subsigna_ joined #salt
02:20 rudi_s Hm, that seems to work with class_mappings: in the reclass-config.yml file. But if I want 1:1 group to state mappings, this gets quite complicated. I have to create a file for every node (almost all are empty in my setup) and then one for every class which just contains applications: name-of-class. Is there a simpler way?
02:20 badon joined #salt
02:21 JlRd joined #salt
02:21 rudi_s I'd like reclass to "auto-generate" classes and nodes and only for class which require e.g. parameters (i.e. pillar data) I'd create a class file in classes.
02:22 rudi_s *same for clients which require special settings.
02:25 teebes joined #salt
02:33 MatthewsFace joined #salt
02:46 mage_ joined #salt
02:49 thedodd joined #salt
02:49 Guest7_ joined #salt
02:54 jalaziz joined #salt
02:54 bash124512 joined #salt
02:59 timoguin joined #salt
03:06 ocdmw joined #salt
03:06 UForgotten joined #salt
03:06 ajw0100 joined #salt
03:07 jdowning joined #salt
03:18 Guest7 joined #salt
03:19 Guest7 joined #salt
03:23 mosen joined #salt
03:23 favadi joined #salt
03:25 davet joined #salt
03:39 bash124512 joined #salt
03:40 neekz0r joined #salt
03:49 pdayton joined #salt
03:54 bhosmer joined #salt
03:55 yetAnotherZero joined #salt
03:59 timoguin joined #salt
04:01 marfri joined #salt
04:04 atree joined #salt
04:07 TheThing__ joined #salt
04:08 TheThing__ quick question, what's the best way to combine pkg.installed with unless?
04:09 ajw0100 joined #salt
04:09 TheThing__ the pkg.installed isn't checking it properly so it downloads the package on each run. I can check if it's installed by using test -f /path/to/file
04:09 TheThing__ but I have no idea how to insert it into pkg.installed
04:09 ocdmw joined #salt
04:09 mosen in requisites i think theres a custom check
04:10 mosen hmm never mind, its only from 2014.7.0, its called check_cmd
04:11 mosen sorry TheThing__ I have not tried unless yet
04:11 TheThing__ ahh, think I found it
04:11 TheThing__ I can do check_cmd
04:12 TheThing__ uhh
04:12 TheThing__ I think
04:12 TheThing__ http://docs.saltstack.com/en/latest/ref/states/requisites.html#unless <--- there we go \o/
04:13 TheThing__ works PERFECTLY
04:13 TheThing__ thanks for that "requisites" and "check_cmd"
04:13 TheThing__ found it thanks to those terms :D
04:14 pdayton joined #salt
04:15 mosen haha well i didnt know how to use them, but at least i could give yo uthe terms
04:25 TheThing__ yeah, knowing the terms in salt is so important to know what to search for :b
04:26 evle1 joined #salt
04:26 misham joined #salt
04:30 TheThing__ alright, almost done with my postgresql state file
04:32 forrest joined #salt
04:33 forrest Does anyone know who 'sivir': https://github.com/sivir is on github?
04:33 forrest he's pushing to master on a formula, from an unknown root system
04:33 forrest which is not cool
04:38 subsignal joined #salt
04:40 stolitablrrr joined #salt
04:41 alexhayes joined #salt
04:42 mikkn joined #salt
04:42 hax404 joined #salt
04:43 meefs joined #salt
04:44 jpaetzel joined #salt
04:44 Rockj joined #salt
04:45 DorfOnGolf joined #salt
04:45 stej joined #salt
04:49 stej joined #salt
04:52 Furao joined #salt
04:52 schlueter1 joined #salt
04:59 timoguin joined #salt
05:07 jdowning joined #salt
05:08 dude051 joined #salt
05:09 dude051 joined #salt
05:15 jopecko joined #salt
05:16 pdayton joined #salt
05:21 schlueter joined #salt
05:24 kermit joined #salt
05:28 felskrone joined #salt
05:43 nullptr` joined #salt
05:47 GabLeRoux joined #salt
05:47 ramteid joined #salt
05:55 Madhurranjan joined #salt
05:59 timoguin joined #salt
06:02 GabLeRoux joined #salt
06:06 EWDurbin joined #salt
06:07 TheThing__ thank you mosen \o/ I managed to finish creating postgresql installation state file: https://github.com/nfp-projects/salt-states/commit/4ef6822151a3f9b57fad4f23cccf7e1962919b0f
06:08 mosen TheThing__: ahh great
06:08 mosen TheThing__: theres no formula good enough?
06:08 TheThing__ the formula doesn't rely on the postgresql repo
06:08 TheThing__ and installs old version
06:08 TheThing__ I need 9.4 for JSON support
06:08 TheThing__ I might maybe do a pull request to add centos repo support
06:08 TheThing__ but..........
06:08 TheThing__ working in saltstack is just sooo slow xD
06:09 mosen ahh ok
06:09 TheThing__ and I'm already overclocking my brain with coding mithril + koa so adding a completely different methology on top of that is tiresome :b
06:12 Madhurranjan joined #salt
06:12 neogenix joined #salt
06:13 otter768 joined #salt
06:14 jalaziz joined #salt
06:19 favadi joined #salt
06:23 stanchan joined #salt
06:23 Ryan_Lane joined #salt
06:24 calvinh joined #salt
06:29 Ryan_Lane joined #salt
06:30 FRANK_T joined #salt
06:31 calvinh joined #salt
06:33 calvinh_ joined #salt
06:45 clintberry joined #salt
06:46 krelo joined #salt
06:50 calvinh joined #salt
06:54 BigBear joined #salt
06:56 calvinh_ joined #salt
06:56 ociuhandu joined #salt
06:57 bash124512 joined #salt
06:57 felskrone joined #salt
06:59 timoguin joined #salt
07:01 colttt joined #salt
07:06 TyrfingMjolnir joined #salt
07:08 jdowning joined #salt
07:09 mage_ joined #salt
07:09 CeBe joined #salt
07:11 hojgaard joined #salt
07:16 linjan joined #salt
07:18 bash1245_ joined #salt
07:22 Madhurranjan joined #salt
07:23 ddd joined #salt
07:23 ddd ddd
07:25 bash124512 joined #salt
07:29 jonasbjork joined #salt
07:31 _mel_ joined #salt
07:31 misham joined #salt
07:32 AndreasLutro joined #salt
07:34 flyboy joined #salt
07:35 Ryan_Lane joined #salt
07:40 badon joined #salt
07:40 krelo joined #salt
07:43 favadi1 joined #salt
07:49 calvinh joined #salt
07:51 GabLeRoux joined #salt
07:51 kawa2014 joined #salt
07:53 sastorsl left #salt
07:53 yomilk joined #salt
07:55 chiui joined #salt
07:56 GabLeRoux joined #salt
07:57 Auroch joined #salt
07:59 timoguin joined #salt
08:04 hotsnow joined #salt
08:10 hebz0rl joined #salt
08:11 fredvd joined #salt
08:11 GabLeRoux joined #salt
08:13 monkey66 joined #salt
08:13 eseyman joined #salt
08:14 pdayton joined #salt
08:14 otter768 joined #salt
08:16 KermitTheFragger joined #salt
08:17 ttrumm joined #salt
08:17 ttrumm Hi how can i configure sal-api to use CA cert aswell?
08:19 Madhurranjan joined #salt
08:20 intellix joined #salt
08:23 badon joined #salt
08:32 slafs joined #salt
08:32 slafs left #salt
08:50 tkharju joined #salt
08:54 [LF] joined #salt
08:55 Madhurranjan joined #salt
08:55 dkrae joined #salt
08:55 CeBe joined #salt
08:56 bash124512 joined #salt
08:59 timoguin joined #salt
09:02 yomilk joined #salt
09:04 nullptr`` joined #salt
09:05 ocdmw joined #salt
09:09 jdowning joined #salt
09:12 aquinas joined #salt
09:17 Grokzen joined #salt
09:26 Madhurranjan joined #salt
09:27 Bateau_ joined #salt
09:28 I3olle joined #salt
09:28 calvinh joined #salt
09:31 karimb joined #salt
09:32 CeBe1 joined #salt
09:33 Xevian joined #salt
09:33 paulm- joined #salt
09:35 BigBear joined #salt
09:36 paulm-- joined #salt
09:45 dalibro joined #salt
09:47 amcorreia_ joined #salt
09:47 dRiN joined #salt
09:49 jtang_ joined #salt
09:49 N-Mi joined #salt
09:50 kwatoko joined #salt
09:56 bhosmer_ joined #salt
09:57 malinoff joined #salt
09:59 timoguin joined #salt
10:00 GabLeRoux joined #salt
10:04 GabLeRoux_ joined #salt
10:06 bash1245_ joined #salt
10:07 FRANK_T joined #salt
10:11 I3olle joined #salt
10:12 trikke joined #salt
10:14 DolourousEdd joined #salt
10:15 FRANK_T joined #salt
10:15 otter768 joined #salt
10:15 DolourousEdd Anyone know if there is a way to use the ip_interfaces grain to select minions to target? I.e. i want to be able to do "run this on all minions on network X"
10:24 giantlock joined #salt
10:31 johtso joined #salt
10:33 donmichelangelo joined #salt
10:34 badon_ joined #salt
10:37 monkey66 joined #salt
10:38 BigBear joined #salt
10:45 pf_moore joined #salt
10:49 wnkz joined #salt
10:52 bhosmer joined #salt
10:53 eliasp DolourousEdd: see http://docs.saltstack.com/en/latest/topics/targeting/ and http://docs.saltstack.com/en/latest/topics/targeting/compound.html
10:55 eliasp DolourousEdd: matching by ip_interfaces is probably not possible, as ip_interfaces returns a list of IPs for each device… I think compound matching by grains is only possible in a straightforward way for grains which return a string
10:55 eliasp DolourousEdd: but then again, the S (Subnet/IP address) compound matcher might just do what you want
10:56 DolourousEdd It does exactly what i want, thankyou!
10:56 DolourousEdd Completely missed those docs
10:59 timoguin joined #salt
11:07 tkharju joined #salt
11:10 jdowning joined #salt
11:13 micah_chatt joined #salt
11:14 evle joined #salt
11:14 micah_chatt_ joined #salt
11:29 ilbot3 joined #salt
11:29 Topic for #salt is now Welcome to #salt | SaltConf 2015 is Mar 3-5! http://saltconf.com | 2014.7.1 is the latest | Please be patient when asking questions as we are volunteers and may not have immediate answers | Channel logs are available at http://irclog.perlgeek.de/salt/
11:30 calvinh joined #salt
11:34 yidhra joined #salt
11:35 drawsmcgraw joined #salt
11:37 calvinh_ joined #salt
11:39 calvinh_ joined #salt
11:40 ociuhandu joined #salt
11:40 iwishiwerearobot joined #salt
11:43 CeBe joined #salt
11:45 calvinh joined #salt
11:45 ociuhandu joined #salt
11:50 CeBe joined #salt
11:50 flyboy82 joined #salt
11:53 ocdmw joined #salt
11:53 GabLeRoux joined #salt
11:54 bhosmer joined #salt
11:54 flyboy82 joined #salt
11:56 shoma joined #salt
11:57 zerthimon joined #salt
11:58 shoma Hi guys, how do I install module from salt-contrib (the managed way, not just copying the files), like 'puppet module' command?
11:58 zerthimon egil: Hi, have you been able to solve the problem with salt minions disconnects ?
11:59 timoguin joined #salt
12:00 egil zerthimon: I wouldnt call it solved, but I use keepalive settings to make sure minions keeps the connection open
12:00 zerthimon egil: hmm keepalive settings didn't help me
12:01 egil zerthimon: how low did you set it?
12:02 egil I need to have keepalive_idle at 60
12:02 zerthimon egil: tcp_keepalive: True   tcp_keepalive_idle: 60  tcp_keepalive_cnt: 9  tcp_keepalive_intvl: 60
12:03 egil zerthimon: try these;: http://paste.linuxmint.com/view/yxs8/
12:06 schlueter joined #salt
12:08 zerthimon egil: thanks, I'll try
12:08 egil zerthimon: have u checked the issue on github?
12:08 zerthimon egil: is there an issue for that ?
12:09 egil zerthimon: yes, hold on
12:10 egil zerthimon: there's not that much to go on in the issue, but I think that more details from more users would be welcome
12:10 egil zerthimon: https://github.com/saltstack/salt/issues/20240
12:12 zerthimon egil: thanks, I'll comment my observations there
12:13 egil zerthimon: good, and also, like suggested: You can check your minion to see if it thinks port 4506 and 4505 is ESTABLISHED
12:16 otter768 joined #salt
12:16 yomilk joined #salt
12:16 shoma Hi guys, how do I install module from salt-contrib (the managed way, not just copying the files), like 'puppet module' command?
12:22 bhosmer joined #salt
12:22 markm joined #salt
12:28 claudiu joined #salt
12:29 BigBear joined #salt
12:32 pdayton joined #salt
12:35 eagleyoung joined #salt
12:35 zerthimon joined #salt
12:36 eagleyoung left #salt
12:38 giantlock joined #salt
12:38 jerematic joined #salt
12:41 jdowning joined #salt
12:41 JlRd joined #salt
12:45 CeBe joined #salt
12:51 istram joined #salt
12:52 dude051 joined #salt
12:54 markm joined #salt
12:55 BigBear joined #salt
12:58 dude051 joined #salt
12:58 ocdmw joined #salt
13:02 wnkz joined #salt
13:03 GabLeRoux joined #salt
13:03 pdayton joined #salt
13:06 DolourousEdd left #salt
13:09 monkey66 left #salt
13:12 redzaku joined #salt
13:15 lothiraldan joined #salt
13:15 wincus joined #salt
13:21 lpmulligan joined #salt
13:24 schlueter1 joined #salt
13:25 mpanetta joined #salt
13:26 favadi1 joined #salt
13:29 rome_390 joined #salt
13:30 rome_390 joined #salt
13:31 bhosmer joined #salt
13:32 rome_390 joined #salt
13:32 schlueter joined #salt
13:33 rome_390 joined #salt
13:34 calvinh joined #salt
13:35 rome_390 joined #salt
13:38 nene joined #salt
13:38 Ox joined #salt
13:39 mindscratch joined #salt
13:40 mindscratch What's the name for a collection of sls files? Is that called a forumla?
13:40 mindscratch for example: /foo/top.sls, /foo/docker/init.sls, /foo/orchestration/deploy.sls  ...that combination of stuff, is called...
13:43 XenophonF joined #salt
13:43 XenophonF left #salt
13:43 jdowning joined #salt
13:48 jdowning joined #salt
13:51 bhosmer joined #salt
13:51 subsignal joined #salt
13:52 subsignal joined #salt
13:53 ocdmw joined #salt
13:53 jrluis joined #salt
13:54 hasues joined #salt
13:55 babilen mindscratch: There isn't a proper term for that. "formula" implies other things that are documented in http://docs.saltstack.com/en/latest/topics/development/conventions/formulas.html
13:56 mindscratch babilen: ok
13:57 babilen I mean we don't even have a proper name for "SLS files" ;)
13:57 jalaziz joined #salt
13:58 bhosmer joined #salt
13:59 FRANK_T https://www.refheap.com/756b610199681a2e7e870fe23    <--------- I need some advice
13:59 FRANK_T I am trying to copy a file to different OS version eg. Centos-3 Centos-6
13:59 FRANK_T using {% if grains['osfinger'] = 'Centos-6' %}
14:00 FRANK_T It's not working for me any ideas?
14:00 phx CentOS-6?
14:00 jeremyr joined #salt
14:00 bbradley left #salt
14:00 FRANK_T yes
14:01 FRANK_T I'm targeting OS version
14:01 phx FRANK_T, salt $minion grain.get osfinger
14:01 phx FRANK_T, compare the value returned by the minion to the one you are testing it against
14:03 hasues FRANK_T: Also, the previous post was mentioning a difference in case.
14:04 stej joined #salt
14:04 hotsnow joined #salt
14:04 FRANK_T hasues?
14:04 Beard joined #salt
14:05 hasues FRANK_T: Your post said "Centos-6", and phx mentioned "CentOS-6", the OS was not capitalized in yours; not sure if that makes a difference.  But do the grain.get.
14:06 FRANK_T CentOS-6
14:06 FRANK_T that's the output
14:06 hasues k
14:06 FRANK_T Still getting error.
14:06 Beard_ joined #salt
14:06 FRANK_T {% if grains['osfinger'] = 'CentOS-6' %}    <======================
14:06 phx i can't recall whether that's = or == in jinja
14:06 phx but i would do ==
14:06 hasues Right
14:07 hasues I think = is assignment
14:07 phx me too
14:07 FRANK_T Done!
14:07 FRANK_T It is working now!
14:07 FRANK_T thanks guys
14:08 lothiraldan joined #salt
14:10 lnxnut joined #salt
14:11 JDiPierro joined #salt
14:12 tomh- joined #salt
14:13 JDiPierro joined #salt
14:13 hasues left #salt
14:14 hasues joined #salt
14:14 hasues left #salt
14:14 subsigna_ joined #salt
14:16 otter768 joined #salt
14:17 primechuck joined #salt
14:17 subsign__ joined #salt
14:19 mapu joined #salt
14:22 cpowell joined #salt
14:24 bhosmer joined #salt
14:24 Furao joined #salt
14:24 nitti joined #salt
14:26 paulm- joined #salt
14:28 paulm-- joined #salt
14:29 Pooogles joined #salt
14:31 BigBear joined #salt
14:33 calvinh joined #salt
14:34 bash1245_ Can I require a file that is absent ?
14:35 pdayton joined #salt
14:36 timoguin joined #salt
14:38 racooper joined #salt
14:39 bhosmer joined #salt
14:42 babilen bash1245_: Sure
14:43 babilen Or rather: You can define a requisite on a state that ensures that a file is absent
14:46 micah_chatt joined #salt
14:46 hasues joined #salt
14:46 hasues left #salt
14:46 JDiPierro joined #salt
14:48 Tyrm joined #salt
14:48 micah_chatt_ joined #salt
14:48 tkharju joined #salt
14:49 tkharju joined #salt
14:51 hasues joined #salt
14:51 hasues left #salt
14:51 Sebastian_ joined #salt
14:53 timoguin joined #salt
14:57 amatas joined #salt
15:02 redzaku joined #salt
15:02 gladiatr joined #salt
15:02 Puckel_ joined #salt
15:04 bhosmer joined #salt
15:05 lietu joined #salt
15:06 andrew_v joined #salt
15:09 calvinh_ joined #salt
15:11 schlueter joined #salt
15:13 claudiu joined #salt
15:16 davet joined #salt
15:18 AirOnSkin joined #salt
15:18 kawa2014 joined #salt
15:20 lietu joined #salt
15:24 pdayton joined #salt
15:25 atree joined #salt
15:27 bhosmer joined #salt
15:28 kaptk2 joined #salt
15:30 mohae joined #salt
15:32 Ahlee anybody have a clever way of pushing their salt return results to graphite as events?
15:34 teebes joined #salt
15:35 jopecko joined #salt
15:36 clintberry joined #salt
15:37 ocdmw joined #salt
15:38 smithd joined #salt
15:39 murrdoc joined #salt
15:42 bhosmer joined #salt
15:42 jcsp joined #salt
15:43 iggy FRANK_T: one way to avoid such errors.... {% if foo is bar %}
15:44 iggy Ahlee: I have a custom module that does it, but it has some infinite recursion loop somewhere
15:47 smithd joined #salt
15:51 shoma Hi guys, how do I install module from salt-contrib (the managed way, not just copying the files), like 'puppet module' command?
15:51 iggy there isn't a way
15:52 iggy for the most part salt-contrib is "a good starting point"
15:53 _JZ_ joined #salt
15:53 phx shoma, most of the formulas are on github. so you can just put a github url into your file_roots :)
15:54 iggy are we talking salt-contrib or formulas?
15:58 chris-m joined #salt
15:58 chris-m happy wednesday everyone!
15:58 chris-m running into this error message: Attempt to authenticate with the salt master failed
15:59 chris-m this is coming from a salt-syndic that is deployed in a dmz.    he is talking to another syndic (outside of the dmz) via network routing in F5.
15:59 conan_the_destro joined #salt
16:01 redzaku joined #salt
16:01 TyrfingMjolnir joined #salt
16:02 murrdoc telnet outside-dmz-salt port-u-use
16:03 jhauser joined #salt
16:05 qybl joined #salt
16:06 chris-m hi murrdoc
16:06 jalaziz joined #salt
16:06 chris-m assume I read the salt-syndic architecture correctly.  a syndic can talk to another syndic who can talk to mom
16:07 schlueter joined #salt
16:08 ksj hi, I have a map of package names imported from a map.jinja file. I can access those items by doing e.g. {{ pkgmap.vim }}. However, I want this in a loop so I can do {{pkgmap.packagename }} where packagename is a variable. What syntax do I need for this?
16:09 linjan joined #salt
16:09 eliasp ksj: {% for vimpkg in pkgmap.vim %} … {{ vimpkg }} … {% endfor %}
16:09 bhosmer joined #salt
16:10 ksj eliasp: thanks, but I don't want to loop over the packages in the map. I want to loop over a separate list of packages
16:11 ksj {% for package in pillar['my-packages']['all-packages'] %} \n {{ pkgmap.[package] }}:
16:11 chris-m @murrdoc - can only telnet (with port) successfully from dmz to external.    not from external to dmz
16:11 eliasp ah then simply {{ pkgmap[package] }} should work
16:11 eliasp without the . between pkgmap and [package]
16:12 GabLeRoux_ joined #salt
16:12 bbradley joined #salt
16:13 lnxnut joined #salt
16:15 ksj eliasp: thanks, yes, that works great. Is there any way to get salt to dump the objects as it sees them?
16:15 ksj I have to rely on the python errors, but often they're just "critical" and no information. I'd like to see how salt views that jinja map, and other structures I create
16:17 eliasp ksj: you could use http://jinja.pocoo.org/docs/dev/templates/#pprint or use "state.show_*"
16:17 otter768 joined #salt
16:18 SheetiS joined #salt
16:18 berserk joined #salt
16:18 ksj eliasp: thanks, I'll take a look
16:22 dude051 joined #salt
16:24 VSpike joined #salt
16:25 Grokzen joined #salt
16:25 chris-m @murrdoc - does the path need to be two/way?   I thought it was sufficient to setup the network path (one-way) DMZ -> ext
16:26 VSpike If I want to add my /etc/salt to git, perhaps with the intention of using it to bring up a redundant master, is there anything I should specifically exclude?
16:26 VSpike Wondering about /etc/salt/minion_id (on the master) for example
16:27 ksj eliasp: I get 'state.show_*' is not available. Also, the jijna pprint will just pretty print to the state/pillar file right? But that doesn't really help me as it still won't be outputted in the logs/debug
16:27 timoguin joined #salt
16:27 murrdoc chris-m:  i think data goes both ways on the two ports
16:28 chris-m @murrodc bi-directional?  not asynchronous?
16:28 eliasp ksj: with 'state.show_*' I meant the various functions available in the 'state' execution module: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.state.html#salt.modules.state.show_highstate
16:28 schlueter1 joined #salt
16:28 eliasp ksj: so you could simply do something like "salt your-minion salt.show_highstate" to see the raw result which _would_ be applied to your minion
16:28 murrdoc chris-m:  sorry, i dont know much more
16:29 ksj eliasp: ok, sorry, was being dumb. I thought the syntax didn't look right. I'll take a look through those docs thanks
16:29 chris-m murrdoc - that's quite alright.  you helped me.      thx.    on this same note.    I see a few files under /work/infra/salt/2014.7.1/etc/salt/pki/minion
16:30 felskrone joined #salt
16:30 chris-m should the minion.* be the key for the localhost and the syndic_master.pub be the (ext) syndic?
16:32 redzaku joined #salt
16:36 ahus1 joined #salt
16:37 meylor joined #salt
16:37 viq joined #salt
16:37 rgarcia_ joined #salt
16:39 bhosmer_ joined #salt
16:39 ahus1 I stumbled across .travis.yml in the root of https://github.com/saltstack/salt . I tried to set it up in my forked repo, but it seems to fail. I wonder if it is obsolete, or if it is worth to be fixed.
16:41 cotton joined #salt
16:42 ocdmw joined #salt
16:43 VSpike Hm, is committing the master private key a to private bitbucket repo a bad idea?
16:44 TyrfingMjolnir joined #salt
16:45 OGuilherme joined #salt
16:49 linjan joined #salt
16:50 Grokzen joined #salt
16:50 thedodd joined #salt
16:51 jalbretsen joined #salt
16:52 StDiluted joined #salt
16:52 Godfath3r joined #salt
16:55 wincus left #salt
17:00 iggy about as bad as putting any other encryption key in someone else's infrastructure
17:00 tligda joined #salt
17:00 iggy to some people the trade-off is worth it
17:00 jcsp joined #salt
17:01 iggy I mean we already have to regen all our SSL keys every couple months for heartbleed-du-jour... what's one more regen in the grand scheme of things
17:01 VSpike Yes. It does feel a bit too much like the keys to the kingdom though :)
17:02 johtso errr.. why did this actually install the package with test=True? sudo salt-call pkg.install "salt-master" refresh=True test=True
17:02 iggy well, in that case, someone would have to gain control of bitbucket servers, steal your key, gain control of your DNS (to reroute your minions to another server), and then they'd be pretty well placed
17:03 nitti joined #salt
17:03 slafs joined #salt
17:04 slafs left #salt
17:04 iggy johtso: states have test settings, modules do not ?
17:04 GabLeRoux joined #salt
17:04 johtso iggy: oh.. right
17:05 davet joined #salt
17:05 johtso I wonder if a warning would be useful
17:05 johtso as I can imagine this being a mistake a user might make
17:05 iggy 2015.2 does
17:05 smithd_ joined #salt
17:05 iggy (it's actually very picky about args that it doesn't know)
17:09 davet joined #salt
17:12 eliasp uh, I should finally finish my patches to make LDAP pillars properly usable without this weird = based attribute scheme…
17:13 aparsons joined #salt
17:13 jalaziz joined #salt
17:15 aparsons joined #salt
17:17 aparsons joined #salt
17:18 puredevotion joined #salt
17:19 lnxnut joined #salt
17:19 puredevotion hi. I'm starting to play around with Salt. Does anyone have a Phabricator formula laying around I can try out?
17:20 jeremyMcM joined #salt
17:21 KyleG joined #salt
17:21 KyleG joined #salt
17:21 jeremyMcM Hello #Salt
17:22 lnxnut_ joined #salt
17:23 jeremyMcM I have a question about how I should do /srv/salt layout. Would anyone care to help?
17:23 theologian joined #salt
17:25 I3olle joined #salt
17:25 giantlock joined #salt
17:25 smcquay joined #salt
17:25 jeremyMcM What is the best way to lay out the /srv/salt stuff so that I can clone git repos like https://github.com/SS-archive/salt-states and mix in stuff from other repos?
17:26 lpmulligan joined #salt
17:29 murrdoc ss archive
17:29 bhosmer joined #salt
17:30 murrdoc have u looked at file roots and gitfs ?
17:30 bash124512 joined #salt
17:30 murrdoc read up https://github.com/saltstack-formulas and http://docs.saltstack.com/en/latest/topics/development/conventions/formulas.html
17:31 budman joined #salt
17:31 murrdoc might help u understand how to use community solutions
17:32 jeremyMcM murrdoc: Thanks! I saw the saltstack-formulas in Google results, but it wasn't obvious that was what I needed to study up.
17:33 davet joined #salt
17:35 lnxnut joined #salt
17:35 spookah joined #salt
17:37 malinoff joined #salt
17:40 rojem joined #salt
17:41 neogenix joined #salt
17:43 jeffspeff joined #salt
17:44 hal58th joined #salt
17:45 nullptr joined #salt
17:47 bhosmer joined #salt
17:48 ocdmw joined #salt
17:49 ocdmw joined #salt
17:50 pdayton joined #salt
17:52 Grokzen joined #salt
17:55 riftman joined #salt
17:56 bhosmer_ joined #salt
18:01 GabLeRoux joined #salt
18:04 Ryan_Lane joined #salt
18:08 redzaku joined #salt
18:08 GabLeRoux joined #salt
18:09 iwishiwerearobot joined #salt
18:10 chris-m @murrdoc - can a syndic talk to another syndic?
18:10 chris-m if so, what is required to be configured on the higher-level syndic?
18:11 bhosmer joined #salt
18:14 GabLeRoux joined #salt
18:16 desposo joined #salt
18:18 otter768 joined #salt
18:21 sk_0 joined #salt
18:21 felskrone joined #salt
18:21 sjol_ joined #salt
18:23 ocdmw joined #salt
18:23 intellix joined #salt
18:25 jeremyMcM If I wanted to create a state for selinux enforcement, which is only effective on reboot, how can I avoid a reboot in the middle of state.highstate run?
18:26 primechuck joined #salt
18:27 jeremyMcM how can I avoid rebooting in the middle of state.highstate run?
18:27 jalaziz joined #salt
18:27 stanchan joined #salt
18:31 rihannon joined #salt
18:34 forrest joined #salt
18:36 ajw0100 joined #salt
18:36 cberndt joined #salt
18:36 iggy how were you planning on doing the reboot to begin with?
18:38 neogenix joined #salt
18:39 heewa joined #salt
18:39 bhosmer joined #salt
18:40 TTimo joined #salt
18:41 stanchan_ joined #salt
18:42 JDiPierro joined #salt
18:42 shoma joined #salt
18:44 _stej joined #salt
18:52 sophomeric joined #salt
18:53 murrdoc setup a reboot state
18:53 aparsons joined #salt
18:53 murrdoc and use listen_in to notify it when u need rebootings
18:58 bash124512 joined #salt
19:01 josephleon joined #salt
19:01 sophomeric I'm looking into using multiple levels of masters connected with the syndic services. It's not really clear to me what the correct way to position the syndics and minions is though.
19:01 sophomeric If MasterA is above MasterB via syndic, should MasterB's minion be connected to MasterB or MasterA?
19:02 forrest sophomeric: They should be connected to masterB
19:02 murrdoc do u attach minions to syndic masters ?
19:02 murrdoc i keep syndics as pure syndics
19:02 murrdoc not syndic + master
19:03 sophomeric murrdoc: I do
19:03 Auroch joined #salt
19:04 sophomeric a box that's a pure syndic seems like a waste of hardware :)
19:04 sophomeric forrest: thanks
19:04 forrest sophomeric: Yeah if it seems like a waste of hardware, maybe you don't need MasterA if there are no MasterA minions?
19:05 ckao joined #salt
19:05 hebz0rl_ joined #salt
19:05 sophomeric Potentially. It's a large installation, still poking things.
19:06 murrdoc syndics are tiny ass vms
19:06 murrdoc i might put salt-pad on them
19:07 bytemask joined #salt
19:07 sophomeric I'm having many problems with getting multi-master working right, and backing up to see if some of the basic functionality and communications are working as expected
19:07 sijis joined #salt
19:08 jalaziz joined #salt
19:08 sophomeric I read in some doc that the syndic is basically seen as a minion to the master it's connected to, so it made me wonder if syndic + minion connected to the same master would be an issue (possibly same id, etc)>
19:09 bhosmer__ joined #salt
19:10 CeBe1 joined #salt
19:11 Ahlee iggy: do you parse the events at return time?
19:12 Ahlee i'm debating if it's better to troll through the return and do it, define another return to enrich at run time, or something else
19:12 murrdoc syndic is not a minion
19:12 murrdoc syndic is a mom
19:12 murrdoc master of masters
19:12 loggyer joined #salt
19:12 murrdoc no lie, i call my syndic hosts saltmom0**.pop
19:13 Grokzen joined #salt
19:14 loggyer Guys can i have an ID declaration be required for a requisite reference ?
19:14 loggyer not being able to find anything in docs
19:14 murrdoc state: id
19:14 sijis is there a way to kill all jobs on a syndic master? not exactly sure wha'ts going on but after a reboot, the server hits 100% cpu. i'm not seeing a pattern (yet).
19:15 sophomeric syndic seems more like just a relay to me, or a communication pipe. Since it really only connects one end to another, not multiple ends like 'masters' would imply.
19:15 loggyer murrdoc: that results in an error, cannot find the id
19:15 Auroch joined #salt
19:16 loggyer murrdoc: this is what i've written so far, http://pastebin.com/LCy8Tw0m
19:17 murrdoc try service:monitoring_pkgs ?
19:19 loggyer murrdoc: is there a way i can just tell it to require sense from the list
19:19 loggyer that worked though. thanks :)
19:22 chris-m that's funny murrdoc :)
19:22 Ox joined #salt
19:22 Ox left #salt
19:23 chris-m the syndic is just like a cli :)   but I need the one from the dmz talking to the outside one (aside from the two-way network connectivity).  is there any setup required on the higher-level syndic?
19:23 chris-m the keys are there.  Is there any config?
19:24 iggy Ahlee: https://gist.github.com/iggy/645f9ffd1d0bf77e58d6
19:24 iggy as an example
19:25 abe_music joined #salt
19:25 ocdmw joined #salt
19:25 Ahlee iggy: I owe you the first two beers at saltconf.
19:26 CeBe joined #salt
19:26 iggy you'll probably have to change the mine bit in the httplib connection args... that's just how we do everything
19:27 Ahlee yeah, no problem
19:27 Ahlee that's definitely better than what i was going to do
19:27 spookah i thought salt lake city was pretty dry.. can you get a beer?
19:27 meylor if i want to run a command on the master, post a 'state.highstate'
19:27 meylor do you use runners?
19:27 Ahlee spookah: yes
19:28 Ahlee spookah: They have odd laws around strength, but there are good breweries there we found last year
19:28 iggy the "if fun in []" bit was where I was trying to track down the infinite recursion thing... I think if you are just careful about what tags the reactor triggers it's fine
19:28 iggy they actually have a pretty in depth page about it online
19:29 spookah Ahlee: nice!
19:30 sophomeric forrest: to be clear though, in my original question I was asking about the minion of MasterB itself, and not the minions of MasterB in general.
19:30 Ahlee iggy: thanks man, much appreciated
19:31 sijis on the clients i'm seeing a lot of 'saltutil.find_job with jid 20150211191437819814' ... what could be related to that?
19:31 sijis its not the same jid
19:32 iggy sijis: that is the master checking to see if the minion is done yet
19:33 sijis iggy: does it keep polling until a response is returned?
19:33 iggy if you are trying to figure out what the job is, lookup that jid's output, should get you started in the right direction
19:33 iggy yes
19:33 teebes joined #salt
19:33 notnotpeter joehh: I can't speak to reclass for use with states as I'm only using it for pillars.  In general the process was quite straight forward (create a yml file per node, create yml files with classes which apply to multiple nodes).  I just was kind of bummed about how it handled minions which were not explicitly configured.  If it supported a fallback default configuration I probably be happy.
19:34 sijis iggy: look it up with what? salt-run jobs.print_job <jid>?
19:34 sijis iggy: os is there a better one to run
19:34 iggy that's it I think
19:35 madduck notnotpeter: it does, or did I not push the class mappings stuff yet??
19:35 madduck notnotpeter: it's hackish but I have not found a better way either
19:36 madduck joehh: reclass supports states just like it supports pillar. the latter is called parameters; whatever you put into the list of "applications" will turn up in top (states) for a node
19:36 notnotpeter Madduck: When did you push those changes.  Last changes I'm seeing on github are from two months ago.
19:36 arnoldB basepi: there's some spam on the salt-users ML. could you please blacklist the spammer?
19:37 madduck it's woefully unmaintained at the moment
19:37 madduck but it *works* ;)
19:37 madduck 1.2.2     2013-12-27
19:37 madduck Recurse classes obtained from class mappings (closes: #16)
19:38 chiui joined #salt
19:38 madduck http://reclass.pantsfullofunix.net/operations.html#wildcard-regexp-mappings
19:39 klauern joined #salt
19:39 murrdoc cool
19:39 ocdmw joined #salt
19:39 notnotpeter madduck: Oh yeah, I totally got that working. I was just bummed that need a node file (even an empty one) for every minion or else it pukes.
19:39 madduck oh yeah, that
19:39 madduck the problem here is the enumeration
19:40 madduck you can ask reclass about a node anything you want with mappings up and down
19:40 madduck but I have not found a good way to make reclass know about all nodes other than creating files
19:40 madduck albeit empty
19:41 madduck i mean, sure, we could introduce syntax like www{000..999}.example.org somewhere
19:41 madduck but where? and first i'd like to move the mappings elsewhere too
19:41 madduck but then again, files are cheap and your shell can create them and their existence is cached and so…
19:42 danemacmillan Hi everyone--I'm very new to SaltStack, and I was hoping I could get some questions answered. My OS of choice is CentOS. The default RPMs that yum pulls from are usually not enough, so I add my own. Is it possible to tell salt to download a given list of rpms, and then to install the versions of software from those?
19:43 notnotpeter madduck: Yeah, what I've got now is a shell script which touched files for the attached minion list from salt-key . But it makes using salt-cloud harder, because I have to touch a file before I can spin a minion.
19:44 madduck notnotpeter: patches are totally welcome, though I am very weary about "hacks" if you know what I mean
19:44 egil danemacmillan: yes
19:44 madduck which is largely why reclass is a bit stuck: it works, but there are good feature requests and minor bugs. To fix them, however, would ideally require some deeper work
19:44 egil danemacmillan: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.pkg.html
19:44 madduck so it's the yak-shaving problem.
19:45 madduck and I am alone on this for the moment, and I don't have any funding anymore
19:45 notnotpeter Me too. My use of reclass is already pretty hacky (just using it to get a flattened set of pillars across environments).  If I come up with something, I'll submit a patch.
19:45 madduck and no time for a hobby…
19:45 madduck notnotpeter: ideally, of course, Salt just understood that reclass is the way to go and implement it in core ;)
19:46 madduck but I'd rather they'd actually fix some of the real, and really old *serious* problems instead.
19:46 notnotpeter hahaha...yeah, I can't believe they've gone this long with such terrible envrionment support.
19:46 kermit joined #salt
19:47 danemacmillan egil: Real curious to people when they first started. How long did it take to create your base SLS files--including reading the documentation?
19:49 BigBear joined #salt
19:49 diegows joined #salt
19:50 cheus joined #salt
19:52 egil danemacmillan: I can only speak for myself. I started with trying salt-cloud and then abandoned salt for a couple of months before returning right now.
19:52 TTimo joined #salt
19:52 danemacmillan egil: What brought you back?
19:52 sijis iggy: when i run jobs.print_job (besides a list of machiens).. the functions all seem to be saltutil.find_job
19:53 sijis i'm not seeing anything expected, like 'cmd.run xxxx' or whatever
19:53 kwatoko joined #salt
19:53 iggy sijis: jobs.lookup_jid
19:54 egil danemacmillan: I guess the question should actually be, why I abandoned it in the first place, my problem was that I was totally focused on using salt-cloud to do what I wanted, which didn't work against my provider
19:55 egil danemacmillan: after spending some time trying to get some other solutions running instead, I realised that I wanted something that I could use several places and against several providers, so I started using salt again and just bootstrapping my cloud-instances instead
19:58 iwishiwerearobot joined #salt
19:58 sijis is the jid from this number: Got return from <server> for job <jid>?
19:58 sijis i'm looking at hte master. should i look from the minion side
19:58 jalaziz joined #salt
19:58 murrdoc yeah jid is from install/installPKGNew.orig
19:58 murrdoc oops
19:58 murrdoc cmd+v fail
19:59 berserk joined #salt
19:59 prwilson joined #salt
20:00 sijis ah. 'User <user> executing command <cmd> with jid <jid>'
20:01 lpmulligan joined #salt
20:01 ajw0100 joined #salt
20:04 sijis the lookup_jid doesn't appear to show what was executed against the systems
20:04 sijis it appears that its onl ythe results
20:09 ajw0100 joined #salt
20:09 [LF] joined #salt
20:11 aparsons joined #salt
20:12 giantlock joined #salt
20:17 joehoyle joined #salt
20:17 clintber_ joined #salt
20:18 clintbe__ joined #salt
20:19 otter768 joined #salt
20:24 whiteinge Gareth: ping. should schedules added via `schedule.add` persist across minion restarts? my testing indicates no. if not, should they? if not, i'd like to add a warning to that docstring.
20:25 Gareth whiteinge: That way I coded it, they shouldn't...unless you run schedule.save
20:25 Gareth warning in the docstring would be a good thing.
20:25 * whiteinge pulls the docs back up and facepalms
20:25 whiteinge Gareth: wundebar. i'll get that added. thank you!
20:26 Gareth whiteinge: no worries :)
20:28 Brew joined #salt
20:41 cheus joined #salt
20:43 ocdmw joined #salt
20:44 pdayton joined #salt
20:44 7YUAABMC8 joined #salt
20:44 7YUAABMC8 anyone here?
20:44 jalaziz joined #salt
20:49 I3olle joined #salt
20:51 smithd_ joined #salt
20:53 babilen 7YUAABMC8: No, you are alone
20:53 nikogonzo so ronery
20:54 huleboer joined #salt
20:56 7YUAABMC8 my gf is doing cam shows, I have her username but shes offline so i cant confirm its her - I want to check her email to see if its registered on the site - is there a way?
21:01 danemacmillan lol
21:02 I3olle joined #salt
21:03 murrdoc salt 'username' test.ping
21:03 7YUAABMC8 murrdoc is that something I can use? Im not a hacker...
21:04 Ozack-work joined #salt
21:04 murrdoc no clue
21:04 basepi arnoldB: Thanks for pointing that out. We got him banned and deleted the threads.
21:05 aurynn 7YUAABMC8, how about you not be a creepy stalker? That'd also be good.
21:05 7YUAABMC8 left #salt
21:06 danemacmillan I kind of wish he stuck around.
21:07 aurynn Some people have a hard time facing the truth.
21:07 murrdoc girlfriend with cams ?
21:07 danemacmillan I want to know how he decided upon this channel for sage gf advice.
21:09 jalaziz joined #salt
21:11 danemacmillan I like that he's in ##security asking the same thing, minus the gf detail, and offering BTC for good advice in exchange.
21:11 babilen m(
21:11 aurynn remind him he's still a stalker, and that we're watching
21:11 aurynn :)
21:14 hybridpo1lo joined #salt
21:15 jrluis joined #salt
21:19 bantone left #salt
21:23 lpmulligan joined #salt
21:25 zer0def joined #salt
21:30 bash124512 Can I do - watch: - /etc/nginx/sites-enabled/*/*
21:30 bash124512 ?
21:31 murrdoc make it a file.directory and watch that
21:32 bash124512 my mistake , I would just write - file: /etc/nginx/sites-enabled/*/*
21:32 bash124512 only one star works but I dunno about 2 :)
21:32 murrdoc u could listen
21:33 murrdoc so all the file.manageds that add stuff to * or */* can notify the nginx server
21:33 babilen bash124512: You require states *not* files, remember that. If you have a matching state and that state has changes then yeah .. you are golden
21:34 bash124512 thnx both
21:36 conan_the_destro joined #salt
21:38 v0rtex joined #salt
21:42 mosen joined #salt
21:46 smcquay joined #salt
21:46 iwishiwerearobot joined #salt
21:48 armguy_ joined #salt
21:48 TTimo joined #salt
21:49 ocdmw joined #salt
21:49 BigBear joined #salt
21:51 Ozack-work joined #salt
21:52 andrej joined #salt
21:52 spookah joined #salt
21:53 fragamus joined #salt
21:57 bhosmer joined #salt
21:58 aurynn discovering that salt-run doesn't like being run in a standalone mode
21:58 desposo joined #salt
21:59 desposo joined #salt
22:00 huleboer joined #salt
22:01 bash124512 is there any conflict when I try to install different packages in different sls files ? I mean would it understand that the package manager is being used ?
22:01 bash124512 and possibly try later :)
22:01 bash124512 like when its available again ..
22:04 malcium joined #salt
22:08 jalaziz joined #salt
22:11 josephleon joined #salt
22:12 atree joined #salt
22:13 Nazzy does anyone use node groups?
22:13 manfred bash124512:  it will only run one state at a time
22:13 eliasp no… I'm still waiting for them to be dynamicially configurable outside of the master's config
22:13 manfred bash124512:  so you won't have it trying to run two yum or apt-get commands at the same time
22:14 manfred Nazzy:  I don't really see a use for them anymore.  iirc they existed before pillars and grains
22:14 druonysuse joined #salt
22:14 druonysuse joined #salt
22:14 manfred Nazzy:  now you can do the same thing that they do in node groups, by setting up a pillar and the top.sls and target on the pillar
22:14 manfred and you get all the compound stuff that you get with nodegroups, but you don't have to restart the master
22:16 Nazzy this might go some way to explaining why people haven't noticed that they don't actually work as advertised lol
22:16 manfred probably
22:17 huleboer joined #salt
22:18 aurynn well, that's a bug
22:18 eliasp does anyone actually use the LDAP ext pillars with their weird key/value scheme for attributes? I'm currently adding support for regular/arbitrary attributes and wonder whether I should keep the current functions in place or replace them…
22:19 gladiatr the thought of using LDAP for a pillar source makes me want to cut myself.
22:19 Nazzy as a rule, backward compatibility is important
22:20 manfred ^^
22:20 manfred if it made it into an official release, don't break it
22:20 otter768 joined #salt
22:20 eliasp ok, will then just add functionality and leave it to the core devs to possibly phase out the current functionality over time
22:22 aurynn so, using the salt-runner with orchestrate and telling it to use an ssh roster fails, because the opts dict that's passed in to the SSH client doesn't respect .get()
22:25 gladiatr aurynn, in what way is it not being respected?  (your keys are old and you smell like old soup!)
22:26 aurynn gladiatr, https://github.com/saltstack/salt/blob/2014.7/salt/client/ssh/__init__.py#L204
22:27 prwilson joined #salt
22:27 aurynn gladiatr, that the .get() there doesn't act like a normal dict
22:27 aurynn self.opts.get("timeout") is returning None, but it's not falling through to the second value
22:28 manfred it is an ordered dict, it should be a None if timeout isn't specified
22:28 murrdoc haha
22:28 murrdoc old soup
22:28 murrdoc thats cold
22:29 aurynn manfred, yes, that;s fine. That's not the problem.
22:29 aurynn salt.config.DEFAULT_MASTER_OPTS['timeout'] is *not* None
22:29 aurynn But the .get() isn't returning that
22:29 manfred i don't know that it would.
22:29 manfred hold on
22:29 aurynn >>> {}.get(None, "bar")
22:29 aurynn 'bar'
22:29 aurynn ^- expected dict behaviour
22:30 aurynn this is not what I'm seeing
22:30 manfred but you self.opts.get('timeout') doesn't define a second value
22:30 manfred where is that in the code?
22:30 manfred the opts.get?
22:30 aurynn yes
22:30 aurynn like 202
22:30 aurynn *line
22:31 gladiatr aurynn, just because, put log.debug('opts passed to class SSH: {0}'.format(opts)) at the top of the __init__ function, restart your master and see what comes out in the log files
22:31 manfred ahh, ok i got it.
22:31 gladiatr btw, what version are you running?
22:31 aurynn oh
22:31 aurynn ohhhh
22:31 aurynn argh
22:31 aurynn python
22:31 gladiatr yeeeesss... python :D
22:31 gladiatr (what did it do this time?)
22:31 aurynn >>> print {"foo": None}.get("foo", "Bar")
22:31 aurynn None
22:32 aurynn ffffffffff
22:32 gladiatr lol
22:32 manfred yar, cause it is defined
22:32 aurynn yeah
22:32 manfred gross.
22:32 aurynn thanks, python
22:32 gladiatr s'ok.  we tell no one.
22:32 aurynn okay
22:32 aurynn so
22:32 gladiatr your secret is as safe as it can be on IRC
22:32 aurynn now I have to figure out where to define timeoute
22:32 aurynn -e
22:32 gladiatr /etc/salt/master?
22:32 aurynn it's defined there :\
22:33 gladiatr ohh.
22:33 aurynn I wonder if there's something about the salt-run that isn't doing what I expect
22:33 gladiatr runners are a different beast--can't give you any specifics--one sort of module I haven't written yet.
22:34 gladiatr so you're instantiating an SSH object from a runner that you're working on?
22:34 aurynn state.orchestrate is
22:35 lothiraldan joined #salt
22:36 tristianc joined #salt
22:36 gladiatr aurynn, what does your orchestrate definition look like?
22:36 aurynn gladiatr, it's very minimal, I'm just testing.
22:38 timoguin joined #salt
22:39 gladiatr aurynn, gotcha.  So the thing you need to remember about orchestration states is that everything is being fired on the master.  I'm not an orchestration master, but I'll show you what was shown to me.
22:40 aurynn right. What I'm not getting is why the timeout isn't propagating through from the config.
22:40 gladiatr gimme a sec here
22:40 Tyrm joined #salt
22:41 jalaziz joined #salt
22:41 aurynn ah
22:41 aurynn this is why
22:41 malcium joined #salt
22:41 murrdoc i have no context
22:42 murrdoc but i do want to know why
22:42 aurynn SO
22:42 * murrdoc continues on popcorn
22:42 murrdoc uh hmm
22:42 lpmulligan joined #salt
22:42 aurynn Walking back up the stack trace, state.orchestrate is passing an explicit timeout=None default down the line
22:43 gladiatr http://bit.ly/1z8TjdS
22:43 gladiatr http://bit.ly/1z8TjdS
22:43 gladiatr http://bit.ly/1z8TjdS
22:43 gladiatr http://bit.ly/1z8TjdS
22:43 gladiatr ugh
22:43 gladiatr sorry about that
22:43 aurynn unless your orchestrate SLS file provides a -timeout: something
22:43 gladiatr interesting
22:43 murrdoc so it doesnt get it from __opts__
22:43 murrdoc intersting
22:43 aurynn no
22:43 aurynn __opts__' timeout is clobbered at
22:44 CommanderRikker joined #salt
22:44 murrdoc .. ?
22:44 aurynn https://github.com/saltstack/salt/blob/2014.7/salt/client/__init__.py#L1452
22:44 aurynn sorry
22:44 aurynn was grabbing the ref
22:45 aurynn so if you don't pass an explicit timeout you're clobbered by None and get a None because of python dict handling inside the SSH runner.
22:45 aurynn so it stacktraces because it can't combine values
22:45 TTimo has anyone here successfully mounted volumes in docker containers using salt? e.g. docker.running and docker.installed ?
22:45 sijis is ther a way to kill/stop the "An extra return was detected from minion <hostnane>, please verify the minion, this could be a replay attack"
22:46 brianfeister joined #salt
22:46 murrdoc aurynn:  interesting thats a salt-ssh thing
22:46 murrdoc or do u see that in salt-minon
22:46 murrdoc too ?
22:46 aurynn murrdoc, I haven't tried salt-minion yet
22:47 aurynn well, now there's a new error, at least
22:47 __TheDodd__ joined #salt
22:47 murrdoc i am surprised its not overrideable from the roster file at least
22:47 aurynn the roster file one is ignored
22:47 aurynn *has* to be in the orchestrate SLL
22:47 aurynn SLS
22:47 murrdoc that sounds like a bug ?
22:47 aurynn it is
22:48 murrdoc open a ticket for them
22:48 murrdoc they ll let u kow if its by design or an oops
22:48 atree left #salt
22:48 Tyrm joined #salt
22:48 atree joined #salt
22:49 tristianc joined #salt
22:49 aurynn yah, will do
22:49 aurynn this is a variety of "discovering that defaults don't" :)
22:51 murrdoc good catch
22:55 zz_Cidan joined #salt
22:57 rojem joined #salt
22:57 primechuck joined #salt
22:58 ocdmw joined #salt
22:59 brianfeister joined #salt
23:01 josephleon joined #salt
23:01 brianfei_ joined #salt
23:02 druonysuse joined #salt
23:06 andrej A new colleague asked an interesting question: is it possible to find out on a minion which states were applied to it when?
23:07 iggy andrej: if you archive the job log... nothing specific built into salt
23:08 gladiatr andrej, return data
23:09 kellnola joined #salt
23:09 bhosmer joined #salt
23:10 lothiraldan joined #salt
23:12 joehh madduck: thanks for that - reclass seems to be solving our needs really nicely - thanks
23:12 desposo joined #salt
23:14 steverweber_ joined #salt
23:23 Nazzy https://github.com/saltstack/salt/issues/20610 <--- wow that took some time to test case and write up
23:25 primechuck joined #salt
23:27 iwidlinski joined #salt
23:31 notnotpeter madduck: I created a pull request to enable reclass providing default pillar data when it doesn't have a node def for a particular minion: https://github.com/madduck/reclass/pull/43
23:34 alexhayes joined #salt
23:35 alexhayes Does anyone know if there are guidelines/recommendations to documenting .sls files? Is that something folks are even doing?
23:35 iwishiwerearobot joined #salt
23:35 malcium joined #salt
23:36 istram joined #salt
23:40 Tyrm joined #salt
23:41 Tyrm joined #salt
23:45 defenestratexp joined #salt
23:45 StDiluted joined #salt
23:46 bfoxwell joined #salt
23:47 CommanderRikker What do you mean "documenting"?
23:48 notnotpeter alexhayes: I tend to try use self descriptive state names wherever possible and use implicit name declarations sparingly. Makes sls files a little longer, but makes it easier when you're defining requires/watch clauses.  I also am very likely to use comments if I do something which is non-intuitive (using file.recurse without clean, complicated unless/onlyif test logic)
23:48 ALLmightySPIFF joined #salt
23:49 CommanderRikker I'm sure there are others here that are more involved than I.  The only best practices I know are here:
23:49 CommanderRikker http://docs.saltstack.com/en/latest/topics/best_practices.html
23:50 CommanderRikker And none of that gets into adding comments to your own files.
23:51 chitown i also make my state names decriptive... eg srv/salt/foo/bar.sls -> foo_bar_specific_state:
23:51 murrdoc eugh
23:51 murrdoc :D
23:51 murrdoc a-z0-9-
23:51 murrdoc no underscores man
23:52 murrdoc vim doesnt recognize it as separate words
23:52 notnotpeter Aren't spaces even legal for state names?
23:52 chitown lol... ya... there is a REALLY stupid reason for that
23:52 chitown yes, spaces work... dots... lots of things
23:52 chitown but, as you said. vim doesnt recognize it as a single word
23:52 murrdoc i prefer the -
23:52 chitown which throws off the yaml highlighting
23:52 murrdoc over the _
23:53 chitown dashes throws off my highlighting
23:53 murrdoc word ?
23:53 chitown again; very stupid reason :)
23:53 murrdoc salt.vim works fine for me
23:53 notnotpeter Yeah, I find the combination of Jinja2 and YAML usually kills the highlighting right quick.
23:53 murrdoc with the highlighting and everything
23:53 chitown i updated it about 2 months ago..
23:53 tokyo_jesus joined #salt
23:53 chitown oh... i just grabbed the yaml pkg from vim
23:53 chitown not a salt specific one
23:54 chitown but, not the point :)
23:54 Xopher joined #salt
23:54 murrdoc https://github.com/saltstack/salt-vim
23:54 chitown having very descriptve state names has saved me some hassle
23:54 chitown also, i have lots of comments
23:54 murrdoc {## for the win ##}
23:54 murrdoc comment it like u would python code
23:55 chitown it hasnt really bitten me yet.. other than keeping jinja and yaml comments diff
23:55 chitown # ....
23:55 chitown yaml ^^^
23:55 chitown that said... that may be a good point; always use jinja comments and you wont be thrown off
23:55 tokyo_jesus I'm having trouble with a custom grain module. It works when I do salt-call —grains on a minion, but the values don't show up when I query from master. Any hints?
23:56 chitown one quirk; when running w/log level debug, you will see yaml comments but not jinja ones
23:56 bash124512 joined #salt
23:56 chitown tokyo_jesus: i had the same problem... iirc, i had to restart the minion
23:57 chitown i think i tried saltutil.sync_grains and it didnt help
23:57 gladiatr tokyo_jesus, chitown, I believe saltutil.refresh_modules also does the trick
23:57 chitown ya, that sounds familiar
23:57 notnotpeter doesn't grains.items perform an explicit refresh before showing results?
23:57 murrdoc saltutil. clear_cache and sync_grains
23:58 gladiatr murrdoc, that re-runs the grains loader?
23:58 murrdoc i think so
23:59 murrdoc assuming u are loading stuff in from /etc/salt/grains
23:59 gladiatr Nah.  These would be grains module in /srv/salt/_grains
23:59 timoguin joined #salt
23:59 tokyo_jesus Yeah
23:59 murrdoc oh thats sync_modules
23:59 chitown ya, custom grains messed me up, too
23:59 gladiatr the man ^^
23:59 chitown +1

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary