Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-02-23

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:01 hasues left #salt
00:04 bluenemo_ joined #salt
00:06 MugginsM joined #salt
00:12 diegows joined #salt
00:18 hasues joined #salt
00:18 hasues left #salt
00:28 roolo joined #salt
00:45 pmcg joined #salt
00:51 mapu joined #salt
01:01 aqua^mac joined #salt
01:18 lpmulligan joined #salt
01:20 MugginsM joined #salt
01:25 kbyrne joined #salt
01:30 AlexStraunoff joined #salt
01:38 thayne joined #salt
01:42 hasues joined #salt
01:47 ajw0100 joined #salt
01:53 lpmulligan joined #salt
01:57 TTimo joined #salt
01:58 bhosmer joined #salt
01:59 subsignal joined #salt
02:02 subsignal joined #salt
02:07 tetDAR joined #salt
02:11 donmichelangelo joined #salt
02:13 murrdoc joined #salt
02:14 edrocks joined #salt
02:17 jdesilet joined #salt
02:22 TTimo joined #salt
02:25 micko joined #salt
02:26 mosen joined #salt
02:29 jhauser_ joined #salt
02:33 Furao joined #salt
02:34 hasues joined #salt
02:34 hasues left #salt
02:42 aurynn anyone else having problems using pip.installed over salt-ssh on ubuntu?
02:45 micko joined #salt
02:47 ilbot3 joined #salt
02:47 Topic for #salt is now Welcome to #salt | SaltConf 2015 is Mar 3-5! http://saltconf.com | 2014.7.2 is the latest | Please be patient when asking questions as we are volunteers and may not have immediate answers | Channel logs are available at http://irclog.perlgeek.de/salt/
02:47 __number5__ aurynn: what's the salt-ssh and ubuntu version you're using? we have issue using salt 2014.x with ubuntu 12.04. need to manually install pip once
02:47 aurynn __number5__, 2014.7 and 14.04
02:47 aurynn pip is definitely installed on the target
02:48 __number5__ that's not the same problem as ours then. what's the error you have?
02:48 aurynn __number5__, "pip.installed is not available"
02:49 __number5__ aurynn: if you running your salt-ssh with `-l debug` can you see any other error before 'pip.installed is not available'?
02:52 aurynn __number5__, looks like upgrading the pip on the target fixes the issue
02:58 Ryan_Lane joined #salt
02:58 bhosmer joined #salt
03:06 neekz0r joined #salt
03:09 TTimo joined #salt
03:12 dude051 joined #salt
03:28 Zachary_DuBois joined #salt
03:35 Furao joined #salt
03:41 dude051 joined #salt
03:42 armguy_ joined #salt
03:43 Zachary_DuBois joined #salt
03:43 dude051 joined #salt
03:51 dude051 joined #salt
04:03 mordonez joined #salt
04:03 Singularo joined #salt
04:14 murrdoc joined #salt
04:17 edrocks joined #salt
04:20 stylica joined #salt
04:23 stylica joined #salt
04:31 dude051 joined #salt
04:34 Furao joined #salt
04:37 joehoyle joined #salt
04:41 khaije|io joined #salt
04:44 khaije|io is there a way to request that salt-ssh use the "-t" option to force terminal allocation?
04:45 khaije|io I'm getting an error when trying to use sudo on a Cent7 machine, presumably its sudo's requiretty config
04:53 dyasny joined #salt
04:54 Terminus_ khaije|io: i checked the manual for salt-ssh and i can't find the -t option. in any case, why not just alias it?
04:54 ndrei joined #salt
04:55 khaije|io you mean something like, alias ssh="ssh -t" ?
04:56 Terminus_ khaije|io: oh... you mean force -t on ssh. i'm not sure how salt-ssh uses ssh.
04:57 lenagi joined #salt
04:57 murrdoc look up roster file for salt ssh
04:57 khaije|io Terminus_: ya, thats what I'm facing.
04:58 khaije|io murrdoc: I've reviewed it. Are you suggesting there's a solution?
04:59 kermit joined #salt
05:01 murrdoc nope
05:01 murrdoc i was wrong
05:02 khaije|io murrdoc: I agree thats where it -should- be
05:02 Terminus_ khaije|io: i just looked at the source and there's a tty option that defaults to false. not sure how to deal with that.
05:05 khaije|io I'll enter a ticket tomorrow/later-today requesting the option be exposed in the roster file
05:07 khaije|io I just cant shake the feeling that I heard someone mention a fix back before I knew what they were referring to.
05:08 khaije|io g'night all
05:08 Furao_ joined #salt
05:11 garthk joined #salt
05:13 MatthewsFace joined #salt
05:15 otter768 joined #salt
05:25 shnguyen hey friends
05:25 shnguyen any1 here?
05:25 aurynn yes
05:25 shnguyen i got a nooby question...how do i copy a file from a master to a minion..?
05:26 aurynn file.managed is what you're looking for
05:26 shnguyen sudo salt minion_hostname cp.get_file /srv/salt/test /tmp isnt working :(
05:26 aurynn with - source: salt://a/path/in/the/state/tree
05:27 shnguyen is there a way i can copy a local file in *any* dir on the salt master to any dir on the minion without using states
05:27 mosen scp
05:27 mosen hehe
05:28 shnguyen lol like..using salt to do it without iniating a ssh connection
05:28 Furao damn google.com.vn had been hijacked and i see some guy face everytime i search for something
05:28 iggy cp.get_file uses salt:// paths.. and on, that would be a huge security issue
05:28 iggy *and no
05:28 shnguyen yeap so i guess i cant use it for temporary files :/
05:28 shnguyen dang
05:31 iggy what are you actually trying to achieve?
05:32 Furao salt file copy is quite one of the slowest thing you can use to copy files, if you need to copy a directory with large or many files you should use something else
05:33 shnguyen basically i generate config files that vary for every run, and i want to get the config file copied to the minions prior to running it
05:33 Furao shnguyen: use file.managed and render a template
05:33 shnguyen i figured it would be a pain to constantly maintain this constantly changing config file in salt://
05:33 clintberry joined #salt
05:35 iggy yeah, use pillar data or something to make a variablized template
05:35 shnguyen thanks, i'll look into that
05:36 iggy and if it's datae that can only be generated on one host, you can use the pillar wheel to push that data from said host to the master
05:37 shnguyen interesting, didnt know about that
05:37 shnguyen thanks for the helpful bits guys
05:57 Ilja joined #salt
05:58 ramteid joined #salt
05:59 Ryan_Lane joined #salt
06:14 aparsons joined #salt
06:16 SamYaple joined #salt
06:17 abele joined #salt
06:18 SamYaple hey guys. new to salt and I feel like I am missing something obvious. I am trying to get the ip addresses from a bridge, but cannot seem to figure out how. `salt '*' network.interfaces` doesn't return the bridges
06:19 Furao maybe something is wrong with network.interfaces
06:19 Furao but i guess you can use network.interface_ip br0
06:20 SamYaple Furao: '"network.interface_ip" is not available.'
06:21 SamYaple yea so something might be wrong
06:28 thayne joined #salt
06:29 SamYaple ah got it. ancient version of salt provided by my distro. policy prevented pulling from the saltstack ppa
06:29 SamYaple thanks Furao
06:31 __number5__ joined #salt
06:32 abele joined #salt
06:41 cbz_ joined #salt
06:42 cbz_ Hello
06:58 colttt joined #salt
07:11 TTimo joined #salt
07:12 dh__ joined #salt
07:13 dh joined #salt
07:14 AndreasLutro joined #salt
07:16 toanju joined #salt
07:16 otter768 joined #salt
07:22 ekkelett Hi folks -- good morning -- I was just wondering, and couldn't quite remember, was there any way I could map multiple name-attributes to one and a same ID with the same state?
07:22 ekkelett i.e., I have three selinux booleans, was there a way I could use one ID for that instead of three?
07:23 Furao you can’t use the same id more than once and you can’t call the same state in the same id
07:24 clintberry joined #salt
07:24 stoogenmeyer_ joined #salt
07:27 ekkelett Furao: yeah, that I thought I knew, but I had a feeling there was a way you could re-map/template it with multiple values
07:27 ekkelett eh, could be the morning coffee talking -- I'll try to see what I was thinking about
07:29 iggy ekkelett: some state modules support a list for specifying options... but it's not universal
07:30 Furao ekkelett: just use a differnt state id such as in a loop, you can dos omething like:
07:30 Furao {% for i in pillar.get(‘mypillar:key’, []) %}
07:30 Furao selinux-{{ loop.index }}:
07:30 Furao ..
07:30 Furao {% endfor %}
07:31 stylica_ joined #salt
07:32 I3olle joined #salt
07:36 aw110f joined #salt
07:39 druonysus joined #salt
07:39 druonysus joined #salt
07:43 aparsons joined #salt
07:46 linjan joined #salt
07:48 slafs joined #salt
07:48 slafs left #salt
07:50 Auroch joined #salt
07:52 krelo joined #salt
07:54 evle joined #salt
07:57 Ilja joined #salt
08:00 hebz0rl joined #salt
08:01 trikke joined #salt
08:08 eseyman joined #salt
08:15 wvds-nl joined #salt
08:15 ekkelett Furao: yeah, that'd be the cleanest. cheers. (thanks too iggy! yeah, like state.pkg)
08:29 Hybrid joined #salt
08:29 wincyj joined #salt
08:30 alanpearce joined #salt
08:35 andygrunwald joined #salt
08:37 intellix joined #salt
08:37 tomspur joined #salt
08:42 kawa2014 joined #salt
08:45 aw110f_ joined #salt
08:57 JlRd joined #salt
08:58 dkrae joined #salt
09:00 bhosmer joined #salt
09:12 TTimo joined #salt
09:17 otter768 joined #salt
09:20 TyrfingMjolnir joined #salt
09:20 Hybrid joined #salt
09:22 Hybrid joined #salt
09:23 andygrunwald joined #salt
09:29 Hybrid joined #salt
09:33 roolo joined #salt
09:36 paulm- joined #salt
09:42 agrunwald_ joined #salt
09:47 jespada joined #salt
09:50 Xevian joined #salt
09:50 bluenemo joined #salt
09:50 bluenemo joined #salt
10:00 andygrunwald joined #salt
10:07 7GHAAYHNJ joined #salt
10:14 TTimo joined #salt
10:16 markm joined #salt
10:24 nethershaw joined #salt
10:28 huddy joined #salt
10:34 I3olle joined #salt
10:34 shorty_mu joined #salt
10:42 teogop joined #salt
10:42 linjan joined #salt
10:49 kbyrne joined #salt
10:50 dkrae joined #salt
11:05 andygrunwald joined #salt
11:06 ujjain joined #salt
11:09 amcorreia joined #salt
11:14 TTimo joined #salt
11:18 otter768 joined #salt
11:22 masterkorp hello
11:22 masterkorp Can mime functions get data from grains »
11:23 bhosmer joined #salt
11:25 dstokes joined #salt
11:26 lbotti joined #salt
11:27 shorty_mu left #salt
11:27 Furao masterkorp: you can expose every function your own (in _modules/bleh.py) or one that come already
11:29 masterkorp yes, but i already expose the data trough grains, can I get them from grains directly on the formula ?
11:34 r4v1 joined #salt
11:35 r4v1 Hey guys, are there any popular python bindings for salt netapi ?
11:36 diegows joined #salt
11:38 ktosiek joined #salt
11:40 Furao r4v1: I wrote one 2 years ago https://gist.github.com/bclermont/5212641 i guess it still works
11:42 roolo joined #salt
11:44 roolo joined #salt
11:45 r4v1 Thanks Furao.
11:47 sypher_ joined #salt
11:55 sypher__ joined #salt
11:57 __number5__ r4v1: https://github.com/saltstack/pepper is kind of offical api client
12:02 flebel joined #salt
12:04 arnoldB hm could someone get the https gitfs remote working salt 2014.7?
12:04 arnoldB I get "GitCommandError: 'Error when fetching: fatal: HTTP request failed' returned exit status 2: None" during "salt-run -l debug fileserver.update"
12:05 Furao joined #salt
12:05 arnoldB using gitpython as provider
12:06 arnoldB great error msg by the way
12:07 arnoldB full command output: https://np.adm.sx/view/8dc003c1
12:07 arnoldB os: debian wheezy
12:08 arnoldB ssh works
12:08 CeBe joined #salt
12:09 Ilja joined #salt
12:12 scottpgallagher joined #salt
12:15 TTimo joined #salt
12:20 babilen arnoldB: That page isn't available
12:21 arnoldB babilen: it is (for me)
12:21 stoogenmeyer__ joined #salt
12:23 andygrunwald joined #salt
12:27 babilen arnoldB: Hmm, for some reason my local unbound is unhappy
12:27 mdasilva joined #salt
12:30 solvik joined #salt
12:30 solvik hi, since i've upgraded my salt i cannot create y rabbitmq users
12:30 solvik i've got an error stacktrace with a "no such file or directory"
12:31 solvik apparently, /usr/sbin/ isn't in my PATH
12:31 solvik so it cannot find /usr/sbin/rabbitmqctl
12:31 solvik any idea how i could make this work.. ?
12:39 r4v1 @__number5__ super!!
12:40 egresh joined #salt
12:41 r4v1 I am going to extend pepper and salt-api to accept/list/delete minion keys. Will someone be interested in something like that?
12:44 JlRd joined #salt
12:52 intellix joined #salt
12:55 r4v1 cherrypy module only has list and gen_keys
12:56 tkharju joined #salt
13:05 bhosmer joined #salt
13:06 paulm- joined #salt
13:07 jeddi joined #salt
13:08 aphoriser joined #salt
13:09 paulm-- joined #salt
13:15 I3olle_ joined #salt
13:19 otter768 joined #salt
13:20 arnoldB r4v1: who wouldn't be interested in that? :)
13:22 intellix joined #salt
13:26 Andre-B joined #salt
13:26 aparsons joined #salt
13:33 dyasny joined #salt
13:33 lbotti joined #salt
13:34 favadi joined #salt
13:41 andygrunwald joined #salt
13:45 ongolaBoy joined #salt
13:46 subsignal joined #salt
13:48 numkem joined #salt
13:57 agrunwald_ joined #salt
13:59 TTimo joined #salt
13:59 bhosmer joined #salt
14:00 jeremyr joined #salt
14:06 lothiraldan joined #salt
14:07 andygrunwald joined #salt
14:07 JDiPierro joined #salt
14:09 hasues joined #salt
14:10 hasues left #salt
14:12 diegows joined #salt
14:12 diegows hi
14:13 lpmulligan joined #salt
14:14 diegows looking for information to enlighten me... I have a sls file that install pip using cmd.run calling easy_install and then it uses pip.installed state to install py modules
14:14 diegows it doesn't work on the first shoot, I have to restart the minion or the pip.installed state never works
14:15 diegows I thought that modules are "imported" on the fly when salt encounters it in a sls fiel
14:15 diegows but looks like no
14:15 bigpup6 joined #salt
14:16 diegows and the "restart" workaround is which mostly confuse mysef
14:21 riftman joined #salt
14:22 hojgaard joined #salt
14:24 mapu joined #salt
14:25 favadi left #salt
14:25 LittUp diegows: hey, i'm *very* new to salt, as in, 2 days experience, but just read this: http://docs.saltstack.com/en/latest/topics/reactor/index.html#syncing-custom-types-on-minion-start
14:25 LittUp the very last line mentions syncing all modules
14:25 primechuck joined #salt
14:25 LittUp but i may be completely wrong ;p
14:25 Deevolution joined #salt
14:27 perfectsine joined #salt
14:28 Brew joined #salt
14:29 hobakill joined #salt
14:29 favadi joined #salt
14:30 hobakill r4v1, yes. for sure.
14:32 felskrone joined #salt
14:33 toastedpenguin joined #salt
14:34 zer0def joined #salt
14:34 dRiN joined #salt
14:36 mpanetta joined #salt
14:37 riftman joined #salt
14:38 racooper joined #salt
14:45 kawa2014 joined #salt
14:47 kawa2014 joined #salt
14:49 dude051 joined #salt
14:50 hobakill do we can a windows 2014.7.2 installer around anywhere? don't see it on the downloads page just yet.
14:51 cberndt joined #salt
14:53 kawa2014 joined #salt
14:54 nahamu hobakill: check http://docs.saltstack.com/downloads/
14:54 nahamu I see minion installers there.
14:55 hobakill nahamu, nice.  thanks.
14:57 hobakill traditionally i've gone here: http://docs.saltstack.com/en/latest/topics/installation/windows.html
14:57 andygrunwald joined #salt
14:59 nahamu hobakill: indeed.
15:00 _JZ_ joined #salt
15:00 nahamu They may not have had a chance to update that page yet...
15:01 nahamu https://github.com/saltstack/salt/blob/develop/doc/topics/installation/windows.rst just needs to be updated.
15:01 nahamu you could open a bug report or a pull request if you like.
15:02 hobakill nahamu, i'll probably do it for 'em. git my github cred back to where it should be. ;)
15:02 nahamu hobakill: indeed. :)
15:04 bluenemo joined #salt
15:09 andrew_v joined #salt
15:10 cberndt joined #salt
15:11 sieve joined #salt
15:11 sieve https://gist.github.com/dgn/da5a85d4e7387cffe90d * ERROR: Failed to run install_centos_check_services()!!!
15:11 sieve Salt cloud is playing up.
15:11 sieve On Centos 6.5
15:15 diegows LittUp, that doesn't help with my current issue but it helps with another one that I have :)
15:20 otter768 joined #salt
15:20 thayne joined #salt
15:21 mntnman joined #salt
15:22 jdesilet joined #salt
15:24 manfred sieve, that isn't salt-cloud, that is salt-bootstrap.  try salt-cloud -u, so that it updates teh bootstrap script, there might have been some changes that need an update of the script for.
15:24 debian112 joined #salt
15:24 Furao joined #salt
15:25 sieve manfred: Already run salt-cloud -u
15:25 sieve manfred: but no joy
15:26 manfred sieve:  can you run with -D in your script_args, and then open a bug with salt-bootstrap?
15:29 sieve manfred: ok, will do
15:29 mntnman Greetings Salt Masters
15:29 jcockhren good morning!!!
15:29 hobakill morning!
15:30 mntnman I would like to propose a question if I may.
15:31 mntnman I am running via salt a remote command on a minion via cmd.run.  What I am trying to do is redirect the output from that command to a file on the master I running from.
15:31 babilen Look at returners
15:31 mntnman If I don't redirect to file I get full output in the terminal.  If I redirect to file, I don't.  I also tried redirecting both stdout and stderr in case
15:32 mntnman returners.  I'm assuming that's a salt object or component.  I'll check it out.  Thanks much.
15:34 andygrunwald joined #salt
15:34 clintberry joined #salt
15:34 babilen Also: --out-file for salt calls. There does not be a "local file" returner, so disregard that idea.
15:34 babilen +seem to be
15:35 mntnman ok really appreciate it.
15:35 joehoyle joined #salt
15:35 spiette joined #salt
15:38 intellix joined #salt
15:42 ben_______ joined #salt
15:42 mntnman babilen:  That did the trick.  Very awesome.  Thanks
15:43 JDiPierro joined #salt
15:51 Andre-B_ joined #salt
15:51 erikols joined #salt
15:51 LittUp diegows: okay great, glad i could be of some sort of help ;p
15:53 denys joined #salt
15:54 pdayton joined #salt
15:54 Ozack-work joined #salt
16:00 remp joined #salt
16:04 sieve manfred: with -D I didnt get anything more interesting out of the package than " * ERROR: Failed to run install_centos_check_services()!!!"
16:05 tligda joined #salt
16:06 elfixit joined #salt
16:09 che-arne joined #salt
16:11 hobakill PR for the windows update if anyone is interested: https://github.com/saltstack/salt/pull/20927
16:12 sidneypotter joined #salt
16:12 nitti joined #salt
16:12 sidneypotter hi. is it possible to use unless requisite with file.*?
16:13 totte joined #salt
16:13 sidneypotter ive seen some discussion and one comment refers that all states should use the global requisities here http://docs.saltstack.com/en/latest/ref/states/requisites.html
16:13 sidneypotter but it doesnt appear to work in my case, using file.recurse
16:14 sidneypotter version 2014.7
16:14 kaptk2 joined #salt
16:15 jcockhren hey everyone! I'm working on a salt handler for the Lita bot. Still under development. https://github.com/sophicware/lita-salt
16:16 jcockhren check it out, star it, watch it, chatops with salt is coming!
16:16 hobakill very cool jcockhren
16:17 intellix joined #salt
16:17 jcockhren I'm putting up the roadmap this afternoon to give people an idea of the planned features. going to be very sexy
16:19 mordonez joined #salt
16:20 mordonez joined #salt
16:20 conan_the_destro joined #salt
16:23 rojem joined #salt
16:23 stoogenmeyer__ joined #salt
16:25 xsteadfastx joined #salt
16:28 chamill joined #salt
16:28 xsteadfastx joined #salt
16:29 dave_den joined #salt
16:29 roolo joined #salt
16:30 jalbretsen joined #salt
16:31 chamill Howdy, I'm having a bit of trouble with the stateconf renderer, if anyone has experience with it. The variable 'sls_dir' doesn't seem to work correctly in init.sls files. For a file in '/a/b/init.sls
16:31 chamill ' it returns 'a' not 'a/b'.
16:31 chamill Anyone know if that's expected behavior
16:31 murrdoc joined #salt
16:32 murrdoc dudes salt conf in a week
16:34 denys joined #salt
16:35 StDiluted joined #salt
16:36 xsteadfastx joined #salt
16:37 xsteadfastx joined #salt
16:38 perfectsine_ joined #salt
16:39 andygrunwald joined #salt
16:43 aparsons joined #salt
16:43 stylica_ joined #salt
16:50 andygrunwald joined #salt
16:50 iggy true story
16:52 ghanima1 joined #salt
16:52 xsteadfastx joined #salt
16:54 iggy chamill: paste a more complete example to gist or something
16:55 chamill sure
16:56 iggy jcockhren: you might want to put a note about what lita is (or a link to it or whatever) in your README
16:56 XenophonF joined #salt
16:57 XenophonF this might be a stupid question, but what does "SLS" mean?
16:57 dave_den salt state
16:59 XenophonF ah ok, the salt state file, which contains salt states
16:59 dave_den yep
16:59 XenophonF thanks
17:01 evilrob_ joined #salt
17:01 saltsrfr180 joined #salt
17:03 sieve salt-cloud is trying all kinds of funny users to try and log into the instance
17:03 dyasny joined #salt
17:04 sieve We have specified "ssh_username: root" in the cloud.profile for that instance
17:05 toastedpenguin joined #salt
17:06 Gilou joined #salt
17:07 mdasilva joined #salt
17:07 dude051 joined #salt
17:07 hebz0rl joined #salt
17:08 dude051 joined #salt
17:08 evilrob joined #salt
17:09 jcockhren iggy: good catch
17:09 jcockhren Yeah the README needs to be finished
17:09 sudarkoff joined #salt
17:10 jcockhren I was snowed in all last week and wanted to get it out there before I lost focus/overdosed on cabin fever
17:11 davet joined #salt
17:12 stylica joined #salt
17:12 stylica joined #salt
17:12 chamill So this is what I'm seeing: https://gist.github.com/anonymous/133aaad6e859f8a785ec
17:13 chamill I'd expect sls_dir in a init.sls file to expand to the folder containing the sls file.
17:13 diegows may be people from Utah is up to re-ask my question :)
17:13 joehoyle joined #salt
17:14 diegows looking for information to enlighten me... I have a sls file that install pip using cmd.run calling easy_install and then it uses pip.installed state to install py modules
17:14 diegows it doesn't work on the first shoot, I have to restart the minion or the pip.installed state never works
17:14 iggy chamill: is it literally /my/sls/init.sls?
17:15 XenophonF diegows: iirc there's a way to get the salt minion to reload itself after making changes like that
17:16 chamill iggy: no, not in my actual usage, but the example will elicit it
17:16 diegows XenophonF, but that's not the usual behavior
17:16 iggy chamill: in that scenario sls/init.sls is equivalent to sls.sls... so /my is correct... try with /my/sls/bar.sls and state.sls my.sls.bar
17:16 diegows in other similar situations, when you install something required by an state module, you don't need to do anything
17:16 diegows if you are doing in the right place
17:17 iggy diegows: reload_modules: True on your cmd.run state
17:17 sieve joined #salt
17:17 sjol joined #salt
17:17 diegows let's try
17:17 diegows :)
17:18 XenophonF diegows: the pip modules etc. need to get loaded into the salt minion process after installation
17:18 chamill iggy: it works with files not named 'init.sls', as expected. I'm just surprised that it works that way for init.sls files, as it makes it no use for the common case of including a file relative to the sls
17:19 XenophonF diegows: because it's already running, you have to explicitly tell python to reload things, or you have to restart the python process
17:20 diegows XenophonF, hmm... ok
17:20 diegows may be there is a special mix with pip
17:20 XenophonF diegows: that's what reload_modules is for (thanks for the reminder, iggy)
17:20 notnotpeter joined #salt
17:21 otter768 joined #salt
17:21 XenophonF diegows: it's like if you had a C program, and while it was running you installed or replaced a shared library
17:21 thedodd joined #salt
17:21 diegows XenophonF, I understand that part
17:21 diegows but
17:21 diegows AFAIK
17:21 iggy pkg.*, pip.*, and some other modules have implicit reload_modules: True so you don't have to specify it every time
17:21 diegows salt modules are loading on demand
17:21 XenophonF that C program will continue running with the old library in memory until it restarts or explicitly loads in the new shlib
17:21 diegows loaded*
17:21 iggy they are not loaded on demand
17:21 diegows are you sure?
17:22 iggy or reloaded on demand
17:22 diegows no
17:22 diegows I mean
17:22 diegows for example
17:22 diegows if you use the mysql module
17:22 diegows you need python-mysqlsdb
17:22 diegows the state/execution module is loaded when salt find it in a recipe
17:22 diegows that's my definition or "on demand"
17:22 diegows :)
17:22 iggy nope
17:23 jespada joined #salt
17:23 XenophonF diegows: if python-mysqldb isn't already installed, then the minion won't be able to do mysql-related stuff
17:23 diegows and when they are loaded, because if I have 150 modules and I use 10... I hope that salt is not loading all the them on each run
17:24 diegows my previos example wasn't correct my be
17:24 XenophonF after installing it, you'll need to get salt to re-run the logic it uses for activating the different salt.module.* and salt.state.* bits
17:24 iggy the minion is a persistent process, it loads stuff on startup... it only reloads modules when necessary
17:24 XenophonF this
17:24 thayne joined #salt
17:24 diegows iggy, are you salt developrer?
17:24 aron_kexp_ joined #salt
17:25 diegows just to know that I have a change that my thoughts are ok :)
17:25 diegows chance*
17:25 iggy I am not
17:26 rojem joined #salt
17:26 XenophonF diegows: for an example please see https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L52 and https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L175
17:26 khaije1 joined #salt
17:26 XenophonF when salt starts up, it runs that __virtual__ function
17:26 dude051 joined #salt
17:26 XenophonF that function only returns true if mysqldb is installed locally
17:27 wincyj joined #salt
17:27 XenophonF and so salt.modules.mysql only gets loaded if mysqldb is installed
17:27 diegows XenophonF, but it doesn't run the module at startup
17:27 diegows it loads the module when you use it
17:27 theologian joined #salt
17:27 diegows that why we have to suffer the monkey patching thing  :)
17:27 XenophonF it runs that __virtual__ function
17:27 XenophonF it runs it at startup
17:27 XenophonF it runs it when the monkey patcher does its thing
17:28 KyleG joined #salt
17:28 KyleG joined #salt
17:28 XenophonF it runs it when you tell salt reload_modules=True
17:28 JDiPierro joined #salt
17:29 diegows XenophonF, ok... I'll do some experiments later when I have mor etime to confirm, but let's use reload_modules: True
17:29 diegows :)
17:30 iggy if you install stuff via cmd.run, you need reload_modules: True... end of story (now whether you want to know specifics of how things work beyond that is a different story)
17:31 micko joined #salt
17:34 numkem Is there any ways for getting salt-master to work with an https proxy for gitfs to work?
17:35 conan_the_destro joined #salt
17:35 aron_kexp_ joined #salt
17:37 cedwards joined #salt
17:37 ughloru joined #salt
17:37 ughloru Hello, can anybody tell me if the winrepo is compatible with using hgfs?
17:37 cedwards left #salt
17:38 aparsons joined #salt
17:38 ughloru That is, can I set "fileserver_backend:\n  - hg" and have "win_repo: salt://win/repo" ?
17:38 quantumriff joined #salt
17:38 sidneypotter hi. is it possible to use unless requisite with file.*?
17:38 sidneypotter ive seen some discussion and one comment refers that all states should use the global requisities here http://docs.saltstack.com/en/latest/ref/states/requisites.html
17:38 ughloru I can't quite get it to work.
17:38 sidneypotter but it doesnt appear to work in my case, using file.recurse
17:38 sidneypotter version 2014.7
17:39 iggy ughloru: if it doesn't work, I'd (search for existing and/or) file a bug
17:40 ughloru iggy: thanks. Searching revealed nothing on the topic. I'm not even sure if it should work, so I don't know if it not working is a bug
17:40 khaije1 last night I was asking how to force terminal allocation w/ salt-ssh, just saw the answer is here: https://github.com/saltstack/salt/issues/8232 and https://github.com/saltstack/salt/issues/8238 ... this comes up when connecting to a host using sudo with a sudo config that includes requiretty.
17:40 steveoliver joined #salt
17:40 iggy sidneypotter: paste an example... that's the easiest way for us to help
17:42 spookah joined #salt
17:42 ughloru If I understand it correctly (and I may well not), win_repo should point to a directory with sls files, defining your packages
17:43 ughloru And win_rep_mastercachefile should point to winrepo.p, which is mutable under the function `salt-run winrepo.genrepo`
17:43 ughloru So winrepo.p can't live on the hg fileserver, because salt-run should be able to change it locally
17:44 ughloru But win_repo should simply be a source of data for winrepo.p, so it should be able to be hosted on the remote fileserver.
17:44 mdasilva joined #salt
17:44 sidneypotter iggy: http://hastebin.com/anivijexar.sm
17:44 sidneypotter top one doesnt work, bottom one does
17:45 ughloru So, if all of that is correct, then I would say that not being able to compose hgfs and winrepo probably is a bug.
17:45 quantumriff I'm wanting to setup a "template" vm running centos 6 in our environment, that we will clone, and assign IP addresses, name, etc to.
17:46 quantumriff if I prep the vm, install salt-minion.. and then at the end, stop the service clear out the /etc/salt/pki stuff, and then power down, will cloning work properly?
17:47 wendall911 joined #salt
17:47 iggy quantumriff: delete /etc/salt/minion_id as well
17:47 quantumriff right.. I knew that.. forgot to type it :)
17:48 quantumriff I'm gettin really tired of setting up cobbler for every single VM were doing by hand..
17:48 quantumriff cloning templates will be our first step.. maybe after I can find some more documenation, I can start using the vsphere stuff in salt-cloud later
17:48 MatthewsFace joined #salt
17:50 diegows reload_modules did the trick for me :)
17:50 diegows but I still want to veify how the load modules process works :)
17:50 wincyj joined #salt
17:51 iggy I think that is proof that it works the way we explained it
17:52 jespada joined #salt
17:53 iggy sidneypotter: just out of curiosity, how does the second one work if the first one fails? What is /usr/lib/vmware-vcli/apps/vm/guestinfo.pl?
17:53 tkharju joined #salt
17:54 lothiraldan joined #salt
17:54 chamill left #salt
17:54 conan_the_destro joined #salt
17:54 steveoliver left #salt
18:01 Ryan_Lane joined #salt
18:02 desposo joined #salt
18:03 dude051 joined #salt
18:03 desposo1 joined #salt
18:04 sjol joined #salt
18:05 aparsons joined #salt
18:05 bhosmer_ joined #salt
18:06 linjan joined #salt
18:07 sidneypotter iggy: sorry, looked away. The test -x command just tests that the executable/script can be executed (permissions etc)
18:07 sidneypotter that particular script is used for connecting the minion to vcenter for some fencing stuff...not really important though
18:08 joehoyle joined #salt
18:08 sidneypotter point is...it works fine on cmd.run function, but has no effect on file.recurse...I'm simply trying to stop the master from having to essentially diff the whole directory to check it is there
18:09 sidneypotter actually noticed the second one isnt working on another minion...i probably need to revisit the drawing board myself
18:09 iggy I get the test -x bit... what exactly is that script though? (i.e. is it a symlink to /root/vspheresdk? in that case it would fail on the top state and succeed on the second)
18:10 dude051 joined #salt
18:11 sidneypotter ah, well...the cmd.run part executes the installer...at which point that script is extracted. so basically, it exists if the file.recurse and cmd.run have both succeeded
18:13 sidneypotter i have to install this prog with the .pl script, so essentially, im trying to stop the master running the installer again in the second instance
18:15 sidneypotter nevermind, seems I need to double check a lot of stuff on the minions, it seems to be rather erratic, cheers anyway
18:18 hobakill join /#ubuntu
18:18 hobakill fragggggggggggggggggggggle sorry
18:19 yuhl_work_ joined #salt
18:22 eliasp ughloru: https://github.com/saltstack/salt/issues/20526
18:27 forrest joined #salt
18:28 hasues joined #salt
18:29 ajw0100 joined #salt
18:31 hasues left #salt
18:32 mdasilva joined #salt
18:48 xt joined #salt
18:48 ktenney joined #salt
18:56 bluenemo joined #salt
18:59 asm_blr joined #salt
19:03 sudarkoff joined #salt
19:09 baweaver joined #salt
19:12 jchen joined #salt
19:13 toastedpenguin joined #salt
19:13 jchen left #salt
19:13 ktenney joined #salt
19:13 TaiSHi Does pkg.upgrade do an update first? (debian-like systems)
19:15 scottpgallagher joined #salt
19:16 XenophonF if refresh=True, assuming i'm reading the source code right
19:16 XenophonF and refresh=True looks like the default
19:16 ckao joined #salt
19:19 toanju joined #salt
19:19 toastedpenguin joined #salt
19:20 jchen joined #salt
19:20 jchen left #salt
19:21 otter768 joined #salt
19:22 TaiSHi XenophonF, thanks for the info
19:22 jtang joined #salt
19:26 toastedpenguin joined #salt
19:26 mntnman left #salt
19:28 dyasny joined #salt
19:31 GabLeRoux joined #salt
19:38 hal58th joined #salt
19:38 XenophonF whelp, i'm about to replace my salt SLS modules with salt-formula
19:39 warpaint joined #salt
19:39 XenophonF i've forked the salt-formula repo - any other gotchas or best practices of which i should be aware?
19:41 ghanima joined #salt
19:42 hal58th joined #salt
19:44 darien joined #salt
19:45 mdasilva joined #salt
19:45 darien Hey guys, I've been googling this but for some reason can't find any solid answers; I'm setting up a netboot configuration and I'd like to manage everything through Salt, but I can't find a good way to get the initial servers into the correct state on first boot
19:46 darien i.e. I want the server, on first boot to have grains updated and the base packages installed
19:46 iggy startup_states?
19:46 iggy there are a few ways to do it
19:46 darien hmm
19:46 darien startup_states seems like what I want
19:46 darien well
19:46 darien I have to sync the grains out first
19:47 darien but I can trigger that easily enough
19:48 iggy grains should sync at the start of a highstate
19:48 sudarkoff joined #salt
19:48 darien the docs say that they do, but that states based on grains won't trigger until after the first highstate
19:48 darien so you have to run highstate to sync grains, then again to trigger state based on those grains
19:49 iggy use a reactor to do the grain sync and then a highstate
19:49 mpanetta Hey guys, I have q quick question... I am trying to install a package repo using: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.pkgrepo.html#module-salt.states.pkgrepo
19:49 mpanetta However that does not say that I can use multiple keys, and this repo has at least 3 possible pub keys...
19:49 mpanetta (cassandra PPA just FYI)
19:50 iggy that's what we did, but we don't do stuff at startup anymore as it was causing other problems (there's no way to decide what is a fresh instance and what is just rebooting)
19:50 mpanetta Is it possible to use multiple keys in a repo using salt?
19:50 mpanetta Or am I just going to have to put cmd.runs in for the other 2?
19:51 iggy what url?
19:52 darien iggy: so if I'm reading this right, reactors are ways to listen for events (e.g. on minions) and perform actions on the master?
19:52 mpanetta iggy: Is that for me?
19:52 mpanetta Here are the instructions: https://wiki.apache.org/cassandra/DebianPackaging
19:52 iggy darien: you can perform actions on any hosts (not just the master)
19:52 darien well
19:53 darien you tell the master to do things on other hosts, I mean
19:54 darien iggy: so theoretically, I could use this to (for example) have a host notify the master when a service comes up, and then have the master update everyone's haproxy configurations accordingly? that kind of stuff?
19:54 iggy mpanetta: looks like a good feature request (but I'd try just the last one first... I'm not even sure there is any repo software that supports multiple gpg keys signing things)
19:55 mpanetta iggy: Apparently they just have random people sign the packages instead of having a specific build key...
19:55 mpanetta bleh
19:55 iggy darien: yes (you can use any of salt's built-in events or fire your own custom ones using http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.event.html#module-salt.modules.event
19:56 darien iggy: hmm… that's great. That's going to complicate the intiial setup, but it feels like it could be worth it
19:56 iggy mpanetta: sounds like a bad idea to use them to begin with... but no, pkgrepo doesn't have that capability so you'll have to cmd.run whatever you need to prep that
19:56 iggy darien: such is the way of things...
19:56 darien yeah
19:56 xt joined #salt
19:57 mpanetta iggy: Yeah, we may have to switch to datastax repo.
19:58 iggy they both look convoluted, but hey, I guess it beats someone in the project actually doing the work...
20:00 baweaver joined #salt
20:01 nitti_ joined #salt
20:01 nitti__ joined #salt
20:03 tkharju joined #salt
20:05 ksalman1 If i am using py renderer for file.managed, for example, how would i pass arguemnts to the py script?
20:05 ksalman1 it seems pillar data isn't available either https://github.com/saltstack/salt/issues/14125
20:06 ksalman1 though he did post a work around which could try but that would mean i'll have to updated the templates.py file on all the minons
20:06 SheetiS ksalman1: pass it in via context?
20:08 iggy how many other people are presenting?
20:08 SheetiS ksalman1: I've done that with the py renderer on file.managed successfully.
20:09 darien mpanetta: it might be easier (and given that this is a Java app, probably not) to maintain your own repo and build/sign your own rebuilds
20:10 ksalman1 SheetiS: okay thanks. Though now that I am thinking about it it would be nice to have access to pillars so i can define "host: role" kind of thing, I guess
20:10 ksalman1 I'll try the context for now
20:11 mpanetta darien: Yeah being a python shop we don't have the stuff set up to build java things...
20:11 mpanetta I just can't believe a project is doing something so stupid...
20:11 aparsons joined #salt
20:11 mpanetta esp one as big as cassandra
20:11 SheetiS ksalman1: I bet you could pass the whole - context:\n  pillar: {{ pillar|json }} as context if you wanted.  Not sure how slow it'd be with a large pillar.
20:12 iggy you could always use aptly's ability to resign things it mirrors (bonus: there's an aptly formula already)
20:12 SheetiS I usually just pass in the parts of the pillar I want to use.  I use |json to get around weird yaml idiosyncrasies when passing.
20:13 mpanetta iggy: That may be interesting
20:13 darien mpanetta: I'm assuming you've never used any other Apache projects before. Like ActiveMQ… :p
20:13 iggy if you haven't don't
20:13 diegows lol
20:13 mpanetta darien: Not yet, we are about to be using zookeeper and one other...
20:13 mpanetta hah!
20:13 iggy activemq has been the biggest pile of garbage
20:13 mpanetta I wish I had that choice
20:14 darien ActiveMQ does what we need it to, because we configured it once and never again
20:14 iggy they have no community
20:14 mpanetta I'm not familiar with it
20:14 darien we just unpack it and symlink in the config and we're done
20:14 iggy the devs don't do shit on the bug tracker
20:14 darien mpanetta: we have a Jenkins environment that uses docker containers to run our unit tests in a serile environment, so I could just add a new docker image to build in
20:14 darien mpanetta: then upload to the repository and (as of today) use events to trigger a repo re-index
20:15 mpanetta Ah cool
20:15 mpanetta We only have a local pip repo, we should set up a local deb/apt repo as well.
20:15 darien it's shockingly trivial
20:15 iggy from the outside it looks like one of two scenarios: A. There's literally only one dev B. It's written by a big company that just does code dumps (like mysql)
20:16 darien mpanetta: I have a Make script that will rebuild all the files necessary (minus the GPG signing), if you want to set up your own apt repo it might save you a lot of reading of outdated wiki articles
20:18 darien iggy: donating a project to the Apache foundation is like confessing your sins on your death bed
20:18 mpanetta darien: Do you have a link?  Would be interesting to see.
20:18 darien you dump a bunch of garbage into the world then poof, you're gone and someone else has to deal with it
20:18 darien mpanetta: let me gist it
20:19 mpanetta iggy: In the cassandra case it is apparently there are multiple devs and any one of them can sign the built package...
20:19 mpanetta So dumb...
20:19 darien aaand take out our API keys…
20:20 iggy darien: I commonly say "Apache... where projects go to die"
20:20 darien iggy: Apache is to big commercial projects what sourceforge was to small, individual projects I guess
20:21 darien mpanetta: https://gist.github.com/danudey/7e7679bfe129ef88d914
20:21 chamill joined #salt
20:21 darien mpanetta: the only assumption here is that it's rebuilding the 'extras' repository, and that there's a 'tmp' directory to store the package cache in
20:21 darien mpanetta: package cache means that you can't update a file in-place, it needs a new version. Other than that, it's worked quite well
20:22 iggy look at aptly
20:22 mpanetta darien: Sweet!  Thank you.
20:22 darien aptly looks also awesome
20:23 * mpanetta looks
20:23 mpanetta Cool
20:23 aurynn joined #salt
20:24 darien and also it works on OS X, which this makefile won't (because Apt won't build on OS X without a lot of work)
20:24 mpanetta I will take both of these ideas and present them to the team once they get back, half of my team is at a conference hah
20:24 mpanetta Now that might be a big + here
20:24 mpanetta We use macs for our development at times...
20:24 darien yeah
20:24 darien I'm actually using apt-ftparchive (via this Makefile) in a Linux VM over NFS
20:25 darien anyway
20:25 darien offtopic
20:25 darien aptly seems better, will probably solve your problem, etc.
20:25 darien but it requires go, which might be a deal-breaker
20:26 mpanetta Not yet heh
20:27 iggy don't talk about go like that!
20:27 mpanetta haha
20:29 darien iggy: you're obviously not supporting Ubuntu 10.04
20:29 darien ;)
20:30 darien hmm, salt.ext.six not found… where would I get that from?
20:30 iggy install python-six
20:31 iggy and no... thank flying spaghetti monster I don't have to support 5 year old (nearly) unsupported distros
20:31 darien ty
20:33 darien iggy: hence my project… upgrading to 14.04, and replacing all of our awful selection of shell scripts, pkgsel/include, and post-install tarballs with a simple salt-based solution
20:34 darien or at least, laying the groundwork
20:38 cberndt joined #salt
20:38 msheiny joined #salt
20:43 chamill left #salt
20:43 TTimo joined #salt
20:47 cwyse Other than adding debug: True.  Is there any better ways of troubleshooting why rest_tornado is not starting up?
20:48 viq joined #salt
20:48 viq joined #salt
20:48 ksalman1 SheetiS: can you give me an example of passing part of the pillar as context to py file?
20:50 jtang joined #salt
20:58 baweaver joined #salt
20:58 SheetiS https://github.com/rfairburn/salt-grains-formula/blob/master/grains/init.sls
20:58 Guest18957 joined #salt
20:59 SheetiS ksalman1: I actually manage my grains as a state rendered with the py renderer (though I could use jinja as of 2014.7), but you can see the context, which is the relevant part.
20:59 MugginsM joined #salt
21:00 mapu joined #salt
21:04 SheetiS then context is a dictionary accessible inside the py rendered template.  I use context['custom_grains'] from inside of my python for example.
21:06 FIY joined #salt
21:06 spiette joined #salt
21:06 smcquay joined #salt
21:07 baweaver Say you had a constant pull on Salt (statistics / aggregator), would that be feasible?
21:07 baweaver More to say, would it be a good way to go about things, or would salt be a bad idea for that one.
21:09 zugzwang joined #salt
21:10 zugzwang guys, whre is __salt__ defined in the code?
21:10 zugzwang how do state python swcripts use __salt__ if its not even imported anywhere?
21:11 FIY I am trying to create group nodes and I am getting this error [WARNING ] Key nodegroups with value None has an invalid type of <type 'NoneType'>, a dict is required for this value
21:12 FIY any idea
21:12 andygrunwald joined #salt
21:12 babilen zugzwang: It's monkey patched into everything (booo)
21:12 ksalman1 SheetiS: ahh.. thanks. I did not realize that I can reference the 'context' dict in the py file
21:13 zugzwang babilen, how do i leanr how this works so that I cant understand better the code? what lib does salt use to do monkeypatching?
21:13 clone1018_ joined #salt
21:14 SheetiS baweaver: something like this? https://speakerdeck.com/ipmb/monitoring-infrastructure-with-saltstack.
21:15 xt joined #salt
21:18 baweaver SheetiS: nice, thanks mate
21:18 chiui joined #salt
21:20 babilen zugzwang: It doesn't use any lib, it simply patches __salt__ (and __grains__ et al) into renderers. Read up on the renderer code if you would like to understand the way it works.
21:20 stylica joined #salt
21:21 zugzwang babilen, I just want to know where a method like this __salt__['aliases.rm_alias'] is located
21:21 Ryan_Lane zugzwang: that's an execution module call
21:21 Ryan_Lane so, it's in salt/salt/modules
21:21 Ryan_Lane so, it's in salt/salt/modules/aliases.py
21:21 Ryan_Lane the function being rm_alias
21:22 otter768 joined #salt
21:22 zugzwang Ryan_Lane, so, inside states, they use the execution modules? now I get it
21:23 babilen zugzwang: http://docs.saltstack.com/en/latest/ref/modules/#cross-calling-modules
21:23 intellix joined #salt
21:24 babilen zugzwang: Yes, states are built on top of execution modules. The functions in the module actually *do* things, while states add logic and tests.
21:24 zugzwang thanks babilen and Ryan_Lane!
21:25 Ryan_Lane yw
21:26 babilen zugzwang: States are the descriptive part that knows what it should achieve, how to achieve it if it hasn't and how to test if it has achieved. Everything that is actually done is done via calls to the corresponding execution module
21:27 TaiSHi Well, cleaned up nginx-formula repo management a bit
21:27 nitti_ joined #salt
21:27 stylica joined #salt
21:28 bash124512 Anyone used to give public access to a file/directory ? :)
21:29 bash124512 used s3*
21:30 zugzwang babilen, thank you. salt is super simple after you understand the basics.
21:31 FIY I need some help with this https://www.refheap.com/61c6b1c7ccb312c567d270aee
21:31 darien bash124512: it's happened. What are you trying to do?
21:32 FIY I cannot highstate using groups
21:32 bash124512 darien : give public access (read) to a file via salt
21:32 darien bash124512: to one person temporarily or to anyone forever?
21:32 Ryan_Lane bash124512: I'm not sure there's any support for that currently
21:33 bash124512 darien : anyone
21:33 bash124512 Tried reading the utils.s3 but seems very complicated :S
21:33 Ryan_Lane it would be nice to have a proper S3 module/state for salt
21:34 Ryan_Lane it would be /really/ cool to have the file state work with S3 as a target :)
21:34 bash124512 Ryan_Lane : the module seems to do the basics and its very well written but utils.s3 I cannot say the same
21:35 Ryan_Lane well, it's because it doesn't use boto
21:35 georgemarshall joined #salt
21:36 nesv joined #salt
21:38 darien I think utils.s3 is designed to do a very minimal number of things
21:38 nesv I've installed salt from the bash script at bootstrap.saltstack.com, and I've installed python-dulwich on an Ubuntu14.04 server, and I'm trying to serve states from gitfs, but I keep getting an error saying "unknown scheme 'ssh' caught while fetching gitfs remote"
21:38 darien hence why it only does a very minimal number of things
21:39 nesv Would someone be able to help me figure out why that error is cropping up? FWIW, I passed "git develop" to the script from bootstrap.saltstack.com
21:40 FIY anyone?
21:41 bash124512 so I guess the answer to my initial question is no. I asked because it has a PUT option and maybe someone figured out how to manipulate acls with that
21:41 babilen FIY: Why do you think that "group5" matches any minion?
21:42 darien FIY: check the syntax here, it might solve your issue: http://docs.saltstack.com/en/latest/topics/targeting/nodegroups.html
21:42 babilen nodegroups?
21:42 FIY babilen I add the host to /etc/salt/master
21:43 FIY this works
21:43 FIY salt -N group5 test.ping
21:43 darien do I have to add reactor configurations to the salt master file? docs say yes, but in my heart of hearts I still have hope
21:43 babilen Ah, so you are using nodegroups! I want one of your crystal balls darien ;)
21:43 darien babilen: I am not, actually. Well, maybe. But no. But I might.
21:44 darien babilen: (I'm rebuilding our salt configuration for a new DC)
21:44 FIY babilen I have problem when I do this salt -N group5 state.highstate
21:44 babilen FIY: The way you have written your top file it matches "group5" against the minion id. You have to be explicit if you want to use nodegroups: http://docs.saltstack.com/en/latest/topics/targeting/compound.html and http://docs.saltstack.com/en/latest/topics/targeting/nodegroups.html
21:44 FIY I get Comment: No Top file or external nodes data matches found
21:44 darien FIY: read the link on nodegroups
21:45 babilen FIY: So you essentially want to use "- match: nodegroup" in the line after "group5"
21:45 karimb joined #salt
21:46 babilen darien: So, how did you know that FIY is using nodegroups ?
21:46 babilen group is a hint, I give you that ;)
21:46 darien babilen: he said he 'cannot highstate using groups'
21:46 darien :p
21:47 FIY its working now :)
21:47 FIY thank you.
21:47 babilen Ah, I missed that. I just saw "I need help with this" :)
21:47 babilen \o/
21:48 FIY babilen thanks for the help
21:48 ahammond user.present fails when attempting to modify the directory of a user when the current directory doesn't exist?
21:48 ahammond with: Comment: These values could not be changed: {'homeDoesNotExist': '/var/lib/zabbix'}
21:48 ahammond is this expected behavior?
21:50 FIY darien can I do the groups in another way?
21:51 darien FIY: there's lots of ways to group hosts
21:51 darien FIY: I'm doing some stuff with writing custom grains to match hosts based on hardware (e.g. RAID controllers)
21:51 nesv Is there any more information I could provide that would help me solve my "unknown scheme 'ssh' caught while fetching gitfs remote" error?
21:52 mosen joined #salt
21:52 FIY darien.. got it.
21:52 iggy nesv: you need the libssh headers installed when you install libgit
21:53 nesv iggy: Does the same hold true if I am using python-dulwich?
21:53 nesv iggy: I set "gitfs_provider: dulwich" in my master config
21:53 iggy that I don't know... never messed with dulwhich
21:54 nesv iggy: Okay. Thank you, I'll try installing that package, and see what happens.
21:55 iggy does dulwich compile anything? or is it entirely python?
21:55 nesv iggy: It's entirely python
21:55 iggy then that shouldn't be your problem
21:56 nesv iggy: hmm
21:57 peters-tx joined #salt
22:02 hal58th ahammond Haven't seen that before. Mind showing us your state? Did you look up your issues on github issues?
22:02 ahammond found it: https://github.com/saltstack/salt/issues/18843
22:02 nesv iggy: My SSH key authentication is set up properly, so I know that's not the issue. I couldn't find anything, using Google, to find anything about that "unknown scheme 'ssh' caught while fetching gitfs remote" error
22:03 wincyj joined #salt
22:03 rojem joined #salt
22:04 ahammond We'll fix the RPM upstream to not create the zabbix user with a non-existant home dir... but this looks pretty lame when I'm trying to explain my choice of salt to my boss. :(
22:05 GabLeRoux out: [DEBUG   ] target /srv/web found, but not a git repository. Since force option is in use, deleting. ctrl^c, someone added force param on a state and used wrong default. almost lost some lovely days of work, lucky me, spotted this right on time
22:06 hal58th Well, it happens ahammond. It's easy to work around some temporary issues with cmd.run. Even when I have a problem with Salt, I just remember how hard it was to troubleshoot CFEngine3. *shudders*
22:07 ahammond hal58th I'm coming from cfengine2 and chef. So yeah, I'm with you on that. Ugly.
22:07 iggy nesv: try something other than dulwich?
22:09 nesv iggy: I think I may.
22:10 nesv iggy: After cruising dulwich's documentation, it supports the "git+ssh://" scheme, and that quelled the "unknown scheme" errors, but running "salt '*' state.highstate" from my master fails.
22:10 nesv Oh well. The day's done, and I will tackle it tomorrow.
22:12 nesv iggy: Thank you for your help. :)
22:12 iggy good to know, thanks for letting us know (so when I see it again maybe I'll remember ;)
22:12 nesv :)
22:14 TaiSHi Is Forrest around ?
22:15 forrest what's up?
22:15 forrest I haven't read anything in the past few hours, been busy
22:16 TaiSHi I'm the one editing nginx formula :P
22:16 forrest Oh yeah
22:16 forrest Anyways, I am pretty sure that option was put in so people could pull from nginx directly
22:16 forrest maybe it's in one of the old closed issues, let me check
22:17 GabLeRoux_ joined #salt
22:17 forrest I'm reading your comment now. I thought there was actually a legit reason for the builds from nginx TaiSHi, but I can't remember.
22:17 TaiSHi I was digging through file edit history and I'm the one who introduced nginx.org repo, I figured later that there was a better way
22:17 TaiSHi You can still build from source
22:18 forrest Oh okay cool, maybe it was you who originally proposed it then :D
22:18 forrest I'll merge in if that's the case, hang on
22:18 TaiSHi Thanks, I'm trying to improve formulas as I use them, not a really good coder yet!
22:19 aquinas joined #salt
22:19 forrest TaiSHi: No worries, it's a good way to work. I'll take 10 okay commits that add functionality and slowly improve, over 1 massive commit that breaks everything/changes tons of stuff.
22:19 TaiSHi heh, I tend to find and fix my errors
22:20 TaiSHi Next: icinga2-formula to include agent config
22:21 badon joined #salt
22:23 forrest Nice
22:23 forrest I haven't touched that one I don't think
22:23 forrest granted, I also forget all the time
22:23 XenophonF joined #salt
22:25 TaiSHi Don't worry, I have to learn how to make icinga2 work properly first :P
22:25 iggy less than a week to get 2015.2 out
22:25 TaiSHi Go go go!
22:25 aurynn so it looks like salt-ssh breaks the dockerio module
22:25 aurynn joy
22:26 iggy I bet masterless does to
22:26 CeBe1 joined #salt
22:26 aurynn not because it has to
22:26 iggy just to mess with people that don't use salt the way flying spaghetti monster intended
22:26 aurynn but because it fucks up the python import path
22:27 aurynn salt in the Intended Way also breaks
22:28 aurynn in its own entertaining ways
22:29 lothiraldan joined #salt
22:30 igorwidl seems like my firewall will timeout connection between minion and salt master to port 4506
22:30 * aurynn sighs and opens a bug
22:33 dennisjac joined #salt
22:35 lnr joined #salt
22:36 dennisjac hi, does anyone know what the file format for the "return.p" files in saltstacks job cache is?
22:36 mapu joined #salt
22:36 aurynn so it looks like it's uploading a copy of six.py
22:36 aurynn which is masking the ability for docker to be imported
22:36 lnr left #salt
22:37 bash124512 TaiSHi : I'm using Icinga 1.7.1. why would I upgrade to 2 ?
22:37 dennisjac i want to write a parser since the salt utilities apparently can only deliver a small subset of the files contained in these files
22:37 dennisjac i mean the data contained in these files
22:38 TaiSHi bash124512: icinga2 introduced an agent, which leaves nrpe out of the equation
22:38 baweaver joined #salt
22:38 bash124512 TaiSHi : why would I waste time to rewrite and learn the agent config ? :D
22:39 bash124512 I mean , nrpe works great
22:39 TaiSHi bash124512: How many servers and time between checks?
22:39 TaiSHi nrpe is a resource hog
22:40 TaiSHi icinga-agent supports thousands of checks per minute
22:40 bash124512 I don't need that unless I do a master slave configuration, which I'm not even sure I can or how
22:41 TaiSHi bash124512: then no need to switch :P I'm doing a new install
22:41 bash124512 my configuration is small amount of servers in many datacenters
22:42 bash124512 and icinga in each one of the dcs
22:42 andrew_v joined #salt
22:42 aurynn Is there a way of controlling what things get bundled in the thin salt environment for salt-ssh?
22:42 TaiSHi Then you have a satellite setup, no need for it
22:43 TaiSHi We'll get reprimanded for talking about that here, this is #salt after all
22:45 bash124512 this is the second time I see you talking about icinga 2 and could not hold myself
22:45 bash124512 :P
22:46 TaiSHi bash124512: I've managed a >700 servers monitored with nrpe, which is why I hate it
22:47 bash124512 I did that too, and there were times I hated nrpe and time I loved it.
22:48 TaiSHi /query me if you want to continue the chat, else we'll get kicked lol
22:48 aurynn answer: yes
22:48 aurynn but, not from a visible interface
22:49 aurynn (figures)
22:49 hal58th1 joined #salt
22:49 hal58th2 joined #salt
22:51 philipsd6 aurynn: I had a little script that patched some stuff for salt-ssh and then ran generate thin. Not sure if this was the best way to do it, but I needed something...
22:54 aurynn philipsd6, it looks like, absurdly, I have to reimplement the machinery of salt-ssh so I can do this
22:56 dl_nz joined #salt
22:59 darien so I created a new grain, and I deployed it on all my servers, but it seems to return the same value on every server
22:59 kermit joined #salt
23:00 darien the grain returns the RAID controller type (Adaptec vs. LSI); on some servers with no raid controller the value is blank, but on every other server the value is 'adaptec'
23:00 darien I'm assuming I'm missing some assumption or other
23:00 Edgan I seem to be seeing this issue, https://github.com/saltstack/salt/issues/15482, but unlike the original user mine does have a release version. http://fpaste.org/189477/47322421/
23:03 stylica_ joined #salt
23:04 pdayton joined #salt
23:04 Laogeodritt Hm... is it possible that web_util.user_exists will not update an existing user in the htpasswd file if the password property is changed? Was this a known issue in 2014.7.1?
23:04 Laogeodritt er, webutil, not web_util
23:06 Ryan_Lane joined #salt
23:09 smcquay joined #salt
23:11 iggy igorwidl: there are keepalive settings you can play with, but yeah, some shitty routers are just shitty and won't handle persistent connections well... the minion should reconnect when it notices the connection drop
23:11 MTecknology Ah, crap. This is apparently the point where I start getting nervous about my presentation
23:11 smcquay joined #salt
23:12 TaiSHi MTecknology: you'll do fine, just imagine them all naked
23:12 rlo joined #salt
23:12 igorwidl i can see keep alives on port 4505 (every 5 minutes or so), but none for port 4506
23:12 rlo hi! is there anyway for me to terminate or stop EC2 instances through salt?
23:12 MTecknology I'm not concerned about fun, just about speaking clear, loud enough, and coming out somewhere decent on time
23:12 TaiSHi rlo: terminate as in delete?
23:13 rlo TaiSHi: yes
23:13 TaiSHi MTecknology: didn't mention fun, just people naked :P
23:13 TaiSHi rlo: salt-cloud -d
23:13 MTecknology I don't want to imagine a room full of guys naked...
23:13 fragamus joined #salt
23:13 iggy darien: paste the code somewhere
23:13 TaiSHi MTecknology: then speak louder son!
23:13 rlo TaiSHi: that will remove the ec2 instance from AWS as well?
23:13 MTecknology :P
23:14 igorwidl when i run refresh pillar on minions that haven't been communicated to for a while they stop responding untill restart. Firewall shows blocked 4506 from minion.. thats all i got..
23:14 darien here's the code: http://pastebin.com/4PtSGrUq
23:14 TaiSHi rlo: salt-cloud will interact with AWS and delete the instance, of course you need to configure cloud first
23:15 TaiSHi MTecknology: will the conference be recorded?
23:15 TaiSHi As much as I would like to, I can't attend
23:15 MTecknology yup, I think all talks are recorded and put on the interwebs
23:15 rlo TaiSHi: thanks! works perfectly
23:15 iggy the email I got says they _may_ be recorded
23:15 MTecknology oh
23:15 darien iggy: I can't really see anything I could be doing wrong in this
23:15 darien iggy: and when I run the code manually on an LSI-enabled box I get the LSI result
23:16 elfixit joined #salt
23:16 TaiSHi Hope they are, will sit on my living room and watch them
23:16 darien but 'salt-call grains.get raid_vendor' on that box shows 'adaptec' anyway
23:16 TaiSHi Seriously MTecknology, you haz ze knowledge
23:16 prwilson joined #salt
23:17 iggy igorwidl: so... your firewall is actively blocking the minions... that sounds like a config problem
23:17 pravka joined #salt
23:17 MTecknology If I have too much time at the end, I can probably ramble about the changes I'm about to roll out. Changing libpam-ldapd/libnss-ldapd -> libpam-sss/libnss-sss/sssd
23:18 pravka is there any way to configure salt to `lazily` render sls?
23:18 pravka i.e. on demand during a highstate, instead of at the beginning
23:18 igorwidl iggy: well, not actively. port 4506 between minion and master is open. MY guess is the firewall times out port 4506 after some time of no activity
23:19 iggy igorwidl: you said the firewall shows them as blocked...
23:19 iggy pravka: nope
23:19 TaiSHi MTecknology: I might have to read up to even understand your talk
23:20 iggy darien: there's got to be a better way than "parsing" lspci output
23:21 MTecknology TaiSHi: nah, it's mostly how insane my environment was and how pretty it is now
23:21 MTecknology and how easily I can roll things out
23:21 darien iggy: I could parse /usr/share/misc/pci.ids manually, but that seems far worse
23:21 igorwidl iggy: well no, i have rule to allow for minions to connect to salt-master port 4506 (and vice versa)
23:22 pravka is there a way to force a refresh of a module that you're using in a state, whose returned value may be `None` at the beginning of a highstate, but is correct its ID is actually applied?
23:22 darien iggy: the code is actually intended to build an entire list of (relevant) PCI devices (ethernet controllers, video controllers, etc), but the raid controller is a big enough configuration factor that I wanted to call it out by hand
23:22 pravka I think `on-demand` rendering would be nice, and while it would potentially slow performance, it could be very useful in some cases
23:22 igorwidl iggy: since there is no traffic to 4506 mhy firewall must be tining it out, and next time i run refrseh pillar, the tcp traffic gets dropped
23:23 TaiSHi MTecknology: if we don't talk before the conf, best of lucks !
23:23 iggy pravka: I wouldn't hold your breath
23:23 otter768 joined #salt
23:24 pravka just curious, why?
23:24 iggy it would be a huge change for questionable benefit
23:24 iggy the correct answer is fix your states to not fail mysteriously at the beginning or move them to the end
23:25 MTecknology TaiSHi: thanks :)   I'll be at the pre-conf
23:26 iggy I'm flying in Saturday (as far as I know, I'm the first one getting to town), so everybody feel free to hit me up as you start rolling into town
23:26 pravka that's not the issue iggy
23:26 pravka I'll give you an example
23:27 pravka if I'm using the official keystone execution module in a state, and I want to get a tenant id and use that id in a state, that module is rendered as part of the state when the highstate begins
23:27 pravka if keystone isn't installed or running, it won't return a value when the state is rendered
23:28 pravka the inclusion of the `module` state module seems rather broken in this regard, without some kind of on-demand rendering
23:29 iggy pravka: that wasn't exactly clear before... try reload_modules: True
23:29 pravka that only works with dependencies.
23:29 pravka aka I install python-keystoneclient, then reload_modules: True refreshes the modules on the minion and the keystone module is available
23:29 iggy I don't know if that re-renders the yaml+jinja, but it should reload the modules
23:29 pravka I'm talking about the underlying functionality of the module
23:29 pravka it doesn't. :)
23:30 iggy use orchestration
23:30 pravka ...I thought that's what salt was for :)
23:31 iggy salt-run state.orchestrate orch.keystone
23:31 iggy I don't know... I still don't see them __radically__ changing the way salt runs to suit an edge case
23:32 pravka hmm, I didn't know about the orchestration runner
23:33 mdupont joined #salt
23:33 iggy that's the only thing I can think of off the top of my head to solve that kind of case, but maybe someone else will chime in
23:35 shaggy_surfer joined #salt
23:35 pravka I mean, it could even be state-by-state rendering
23:35 desposo joined #salt
23:36 pravka it doesn't seem like I'm the only one that would benefit from this, though
23:36 shaggy_surfer Anyone know if salt-cloud is mature enough yet to do things that cloud-formation in amazon does yet?  Checking and I don't see things like create a VPC or ELB and such.?
23:37 shaggy_surfer I know there is a boto module, can this do it?
23:37 shaggy_surfer Looking to automate my ec2 setup in diff regions, like you can do w/ cloud formation but using salt-cloud… like create fw rules, ELB's , auto-scaling groups, VPC's, etc, etc.
23:38 pravka http://docs.saltstack.com/en/latest/ref/states/all/salt.states.boto_elb.html
23:38 pravka http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.boto_vpc.html
23:38 pravka @shaggy_surfer ^^
23:39 shaggy_surfer Perfect. thx @pravka
23:39 pravka that elb module you can use in states, the vpc one you'd have to call using the `module` module within your state
23:40 pravka ah, wait, there's a boto_vpc state module, too :)
23:40 darien oh I found the issue i am dum
23:40 darien gdi
23:41 wincyj joined #salt
23:44 bfoxwell joined #salt
23:45 theologian joined #salt
23:48 SamYaple Hey guys. What is the best practice way of running a command on only one host. For example if I wanted to bootstrap a galera cluster where only the first node must be started differently. Or if I wanted to start an application that must initial a database (but only once).
23:49 SamYaple initialize*
23:51 robawt you could have a salt state in the directory
23:51 robawt bleh/init.sls for all, bleh/initialize.sls for the one
23:51 robawt call bleh.initialize only on the host that needs it
23:52 jdesilet joined #salt
23:52 SamYaple i thought about that, but being new to salt I am unsure of how to run a command on only host from a group (something like web-prod[0])
23:54 robawt you check for something in the salt state then run it if it meets it, use an unless might be a basic but useful way to do it
23:55 hal58th2 robawt's second suggestion is better. In your state file, you can do a IF statement to check for pillar or grain data. Do you need an example on that SamYaple?
23:56 SamYaple hal58th2: yes an example would be appreciated
23:56 stevednd is there a way to run service.restart as a user other than root?
23:56 SamYaple robawt: I can do something like thats .thats ok with me (seems cleaner)
23:59 baweaver joined #salt
23:59 hal58th2 Well SamYaple, the documention is a little thin, but this is an example http://docs.saltstack.com/en/latest/topics/tutorials/states_pt3.html#using-grains-in-sls-modules

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary