Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-03-18

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:02 p0rkbelly joined #salt
00:04 I3olle joined #salt
00:09 aparsons joined #salt
00:09 druonysus joined #salt
00:11 yomilk joined #salt
00:11 bhosmer_ joined #salt
00:12 nahamu does salt use RFC1700 broadcast traffic for anything?
00:12 bhosmer joined #salt
00:14 iggy not that I've ever seen
00:14 murrdoc i dont even know what that is
00:15 iggy there could conceivably be some module that it was tied to that might, but base salt, 99.999% sure the answer is no
00:17 nahamu maybe zeromq does?
00:17 iggy it uses 4505/4506
00:18 nahamu someone else saw his salt process attempt to an address under 0.0.0.0/8
00:19 bhosmer_ joined #salt
00:19 iggy I've never seen anything like that
00:21 baweaver joined #salt
00:21 nahamu well, if he manages to reproduce it I'll help him poke further.
00:21 nahamu thanks iggy!
00:22 iggy if it is, I'd consider that a bug, so do let us know
00:26 mikaelhm joined #salt
00:30 crane joined #salt
00:36 baweaver joined #salt
00:38 amcorreia joined #salt
00:39 active8 joined #salt
00:40 kindkid joined #salt
00:42 iggy all my plans rest on the base of pi figuring out what to do about the schedule persistance stuff
00:42 murrdoc :D
00:42 murrdoc based pi needs to come through
00:42 murrdoc wonder if base of pi knows that based is hip hop lingo for respected person
00:43 diegows joined #salt
00:45 murrdoc Gareth:  u got mail @ gmail, holler
00:47 nilptr joined #salt
00:54 Ryan_Lane joined #salt
01:07 timoguin murrdoc: all hail the based pi
01:07 murrdoc timoguin:   all hail the based pi
01:08 murrdoc ./topic all hail the based pi
01:08 desposo joined #salt
01:08 iggy all hail... _| ̄|○
01:08 murrdoc on that bombshell
01:08 murrdoc g night
01:08 timoguin WELL
01:15 skullone is anyone using Hiera as an external pillar source with success?
01:16 jespada joined #salt
01:17 JoshuaX joined #salt
01:21 iggy salt-formula/salt/gitfs/dulwich.sls done (gitpython and pygit left) then raet
01:30 timoguin pygit should be fun.
01:30 timoguin really necessary though, as it's not the easiest to install.
01:30 otter768 joined #salt
01:37 ekristen joined #salt
01:40 JoshuaX ~.
01:41 renoirb joined #salt
01:42 malinoff joined #salt
01:49 scbunn joined #salt
01:53 jespada_ joined #salt
01:56 joehoyle1 joined #salt
01:57 jespada__ joined #salt
02:08 ob_ joined #salt
02:08 mapu joined #salt
02:12 catpiggest joined #salt
02:13 kindkid left #salt
02:15 catpig joined #salt
02:16 CeBe1 joined #salt
02:22 michelangelo joined #salt
02:23 Jaloren joined #salt
02:23 Jaloren has anyone seen an error like this when calling service.start on red hat
02:23 Jaloren 2015-03-18 02:22:16,178 [salt.loaded.int.module.cmdmod               ][ERROR   ] Command '/sbin/service soa\ e start' failed with return code: 5
02:23 Jaloren i don't understand where that exit is coming from....the service init script doesn't set that itself
02:23 Jaloren and ifi execute it manually it does not error out like that
02:24 Jaloren the return code 5 is really weird
02:27 scbunn joined #salt
02:32 evle joined #salt
02:34 forrest joined #salt
02:37 otter768 joined #salt
02:41 MatthewsFace joined #salt
02:51 favadi joined #salt
03:04 skullone does your service need a tty to start?
03:09 izibi joined #salt
03:18 mosen joined #salt
03:38 clintberry joined #salt
03:39 StDiluted joined #salt
03:39 Furao joined #salt
03:43 TyrfingMjolnir joined #salt
03:48 JoshuaX joined #salt
03:49 borgstrom joined #salt
04:01 Aikar [ERROR   ] Command 'git config branch.master.remote' failed with return code: 1
04:01 Aikar getting this and google isnt being helpful
04:02 Furao run with log level all
04:02 Furao or do it manualy: cd /where/your/repois; git config branch.master.remote
04:03 Aikar git doesnt output anything but $? does confirm 1 code
04:04 hal58th joined #salt
04:07 Aikar hmm wiping out dir fixed it
04:08 Aikar but another repo is doing same thing
04:08 enarciso joined #salt
04:08 Furao when that occurs, look for kernel out of memory
04:09 Furao ok probably not that
04:09 Furao maybe something wrong in $HOME/.git*
04:09 Aikar free -m shows 124
04:10 Aikar neither vagrant or salt has any .git in home
04:10 Aikar root*
04:11 Aikar hmm, file ownership issue?
04:12 Aikar not sure how root could ever be denied though
04:13 Aikar command passes as www-data but not root or vagrant
04:14 Aikar now im royally confused
04:14 Aikar now it passes as vagrant
04:14 StDiluted joined #salt
04:16 Aikar ah, i have a wrapper around git that im apparently breaking return codes on - good to know to fix that... bypassing wrapper still fails
04:16 Aikar except on my deleted and recreated repo
04:17 Aikar so thats checking which remote is set to track for master right?
04:17 Aikar why is salt not reparing that state
04:17 Aikar repairing*
04:18 thayne joined #salt
04:18 Aikar hmm
04:20 Aikar i guess this is a question of git internals, but i have been modifying .git/config remote url as i have a conflict with the host where my home machine uses my personal account and not work account so i have to switch it to https protocol, seems like salt isnt liking that and isnt fixing the state?
04:23 bfoxwell joined #salt
04:23 Aikar yeah git push -u origin master fixed it
04:23 Aikar wonder what broke the ref, and why does salt consider that such a failure
04:24 Furao exit code != 0
04:24 Aikar right but thats something salt could 'repair state' of
04:24 Furao unix standard that mean failure
04:24 Furao repair state?
04:24 Aikar the git repo isnt in the state salt wants it
04:24 Aikar if it sets the upstream tracking itself, it could repair that
04:26 catpig joined #salt
04:26 Aikar git branch --set-upstream-to=origin/master
04:26 Aikar fixes the bad state I was in
04:26 bhosmer_ joined #salt
04:31 teepark left #salt
04:31 teepark joined #salt
04:36 mikaelhm joined #salt
04:39 Furao well it look it’s trying tobut it can’t get the config for a specific key
04:40 Aikar right, and when that config fails, it should then repair that config
04:40 Aikar i just created an issue about it
04:40 Aikar cause this is a recoverable error
04:43 nilptr joined #salt
04:45 Ghost7414 joined #salt
04:50 nilptr joined #salt
05:00 mikaelhm joined #salt
05:00 jdesilet joined #salt
05:01 scbunn joined #salt
05:15 CheKoLyN joined #salt
05:40 theologian joined #salt
05:42 evle1 joined #salt
05:46 ramteid joined #salt
05:53 nilptr joined #salt
06:02 Furao joined #salt
06:05 otter768 joined #salt
06:09 nilptr joined #salt
06:16 lietu joined #salt
06:22 bhosmer_ joined #salt
06:23 jalaziz joined #salt
06:33 krelo joined #salt
06:41 malinoff joined #salt
06:41 nexsja^ joined #salt
06:44 sieve joined #salt
06:46 theologian joined #salt
06:53 I3olle joined #salt
06:57 AndreasLutro joined #salt
06:58 evle joined #salt
07:00 vstoniest joined #salt
07:02 Plotek joined #salt
07:14 oblio joined #salt
07:15 Auroch joined #salt
07:22 Andre-B joined #salt
07:24 test__ joined #salt
07:24 test__ left #salt
07:25 JoshuaX joined #salt
07:28 joshfu joined #salt
07:31 flyboy joined #salt
07:32 KermitTheFragger joined #salt
07:34 joshfu joined #salt
07:36 cberndt joined #salt
07:38 joshfu Does anyone know if it safe to clear /var/cache/salt or what is the safe way to do it?
07:38 mattiasr joined #salt
07:40 krelo joined #salt
07:40 Furao joshfu: stop salt process and rm -rf it
07:40 Furao and don’t rm -rf /var/cache/salt
07:40 Furao but rm -rf /var/cache/salt/minion/*
07:40 Furao and master
07:41 Furao i do it frequently to invalidate cache
07:41 joshfu Furao thanks will give it a shot
07:42 joshfu the master is at 1.5 gigs, and I think it is causing salt-run jobs.list_jobs to be super slow
07:45 Furao retention of jobs is months? :)
07:45 Furao by default it’s 24 hours
07:45 joshfu Furao I’ll check that, maybe someone changed it
07:45 joshfu thanks
07:46 Furao don’t trust humans: manage your minion with salt and make sure no one mess with your configs :)
07:49 joshfu Looks like they are all from today.
07:50 Furao reactor loop?
07:50 joshfu lol ya
07:50 joshfu i see it now
07:51 joshfu is it not a good idea to sync a grain with the reactor?
07:52 Furao sync grain?
07:52 Furao pillars you mean?
07:52 joshfu ya looks like we are running saltutil.sync_grains
07:52 joshfu on minion start, or that is the idea
07:52 Furao ah that!
07:52 dRiN joined #salt
07:53 Furao that is synching grains modules
07:53 rofl____ whats the status on 2015.2 ?
07:53 joshfu but seems to be running more frequently than that
07:53 Furao 2014.7.2 had been released in ppa yesterday
07:53 Furao so good luck with 2015.2
07:54 Furao maybe a minion die and respawn
07:54 Furao minion send bunch of events at startup and your reactor sync_all on one of these event?
07:55 dopesong joined #salt
07:56 trikke joined #salt
07:58 Auroch joined #salt
08:00 saltuser joined #salt
08:00 nilptr joined #salt
08:01 hebz0rl joined #salt
08:02 joshfu Furao thanks for your help, I am not sure what exactly we were trying to do, im going to dig into more tomorrow
08:05 Furao i didn’t know you guys used salt
08:05 dopesong_ joined #salt
08:06 otter768 joined #salt
08:07 lb1a joined #salt
08:08 kawa2014 joined #salt
08:13 ajw0100 joined #salt
08:15 TinuvaMac joined #salt
08:16 nexsja^ joined #salt
08:19 eseyman joined #salt
08:28 slav0nic joined #salt
08:28 slav0nic joined #salt
08:30 Andre-B joined #salt
08:33 __gotcha joined #salt
08:34 lietu- joined #salt
08:36 jhauser joined #salt
08:38 babilen joined #salt
08:38 babilen joined #salt
08:38 narkoz` joined #salt
08:39 narkoz` Hi all, I'm trying to deploy a war binary to Tomcat using the manager. This has worked many times before but now I'm getting Failed to create HTTP request (message shown as one letter per line). Does anyone have an idea why? Google wasn't really helpful
08:41 scarcry_ joined #salt
08:41 catpigger joined #salt
08:44 felskrone joined #salt
08:44 scarcry joined #salt
08:45 dewdrop joined #salt
08:52 illern_ joined #salt
08:54 intellix joined #salt
08:59 JlRd joined #salt
09:00 dopesong_ joined #salt
09:01 dopesong_ joined #salt
09:02 badon_ joined #salt
09:05 sieve joined #salt
09:07 cberndt joined #salt
09:10 I3olle joined #salt
09:11 Vynce joined #salt
09:13 Hydrosine joined #salt
09:25 JlRd joined #salt
09:26 favadi joined #salt
09:31 Andre-B_ joined #salt
09:31 linjan joined #salt
09:33 jrluis joined #salt
09:34 TyrfingMjolnir joined #salt
09:37 badon_ joined #salt
09:38 AirOnSkin joined #salt
09:41 paulm- joined #salt
09:41 dopesong joined #salt
09:46 cberndt joined #salt
09:47 AirOnSkin Can I match pillar data in the top file?
09:49 sieve joined #salt
09:50 Dw_Sn joined #salt
09:51 Dw_Sn what is the syntaix to have nodegroup which includes 2 defined groups ? N@group1,group2 only detects the 1st group
09:52 Dw_Sn nvm adding N@group2 works
09:52 devweasel joined #salt
09:55 AirOnSkin What's the difference between these two syntaxes? {{ pillar['pkgs']['vim'] }} & {{ salt['pillar.get']('pkgs:apache', 'httpd') }}
09:56 malinoff AirOnSkin, you may have not 'vim' key in 'pkgs' dict, so the former will raise KeyError, and the latter will return 'httpd'
09:57 babilen AirOnSkin: Sure you can match pillars in top.sls
09:58 deyandyankov joined #salt
10:01 nilptr joined #salt
10:02 AirOnSkin malinoff: I see. Thanks
10:03 AirOnSkin babilen: I was a bit quick with my question... I found it a few seconds later as well -.-
10:03 babilen good :)
10:04 peters-tx joined #salt
10:05 nilptr joined #salt
10:05 cberndt joined #salt
10:06 otter768 joined #salt
10:12 aquassaut joined #salt
10:16 fredvd joined #salt
10:24 illern_ joined #salt
10:26 __gotcha joined #salt
10:32 giantlock joined #salt
10:35 NV joined #salt
10:42 sieve I am trying to find a method to be able to calculate hostnames, fqdns and kerberos realms in salt.
10:43 babilen calculate a hostname?
10:43 emirozer joined #salt
10:43 sieve babilen: https://gist.github.com/mooperd/ab0c917304ebb02faf07
10:43 babilen go on ...
10:43 sieve babilen: the hostname should be the salt id
10:43 salt-007 joined #salt
10:44 salt-007 Hi is a lower salt minion version compatible with a higher salt master version
10:44 babilen The minion id is typically set to the fqdn, I wouldn't recommend to make the hostname the fqdn
10:44 sieve I want to use these variables in other states but I cannot find away to make these things available to other states.
10:44 salt-007 as per the website it is compatible
10:44 babilen salt-007: To a certain degree
10:44 salt-007 but i have a master on debian 7 and minion on debian 6
10:45 salt-007 with minion running lower version
10:45 nilptr joined #salt
10:45 salt-007 and most of the commands are not supported
10:45 babilen salt-007: And you are installing from the saltstack repository?
10:45 babilen http://docs.saltstack.com/en/latest/topics/installation/debian.html
10:45 salt-007 yes i installed it from deb http://debian.saltstack.com/debian squeeze-saltstack main
10:46 sieve babilen: we are using salt cloud with aws so the ids are not matching the fqdn.
10:46 babilen So, which versions do you have on each and what is the exact problem you are trying to solve
10:46 Hydrosine joined #salt
10:46 babilen sieve: Okay - are you looking for the salt mine mayhaps?
10:46 sieve babilen: in any case, the issue it making these values available to other states so I do not have to do this string mangling in each state.
10:47 losh joined #salt
10:47 sieve babilen: I think I could be looking for the salt mine indeed however I am really not sure if I can then, once the data is in the salt mine extract the data for a host.
10:47 babilen sieve: I'd either write an execution module that you can call in these states, an external grain or put this information in the salt mine (or combinations thereof)
10:47 N-Mi_ joined #salt
10:47 sieve babilen: that is, can we put a grain in the salt mine and then extract that grain from the mine for use in a configuration for the same minion?
10:48 babilen sieve: Yes, you can do that. That is more or less what the mine is for.
10:49 salt-007 babilen : salt master runs version   2014.7.2+ds-1~bpo70+1
10:49 babilen I'd start with a custom grain and take it from there
10:49 salt-007 and minion runs  2014.7.1+ds-3~bpo60+1
10:49 sieve babilen: do you have an example?
10:49 babilen salt-007: Yes, that shouldn't be too much of a problem (squeeze packages for .2 will come soon)
10:49 babilen sieve: http://docs.saltstack.com/en/latest/topics/targeting/grains.html#writing-grains
10:49 sieve {% for server, addrs in salt['mine.get']('???????', 'network.ip_addrs', expr_form='grain').items() %}
10:49 sieve {{ addrs[0] }}
10:49 sieve {% endfor %}
10:49 babilen Yes, that is an example
10:50 sieve It seems the mine allows us to say "provide ip addresses for these machines defines by this glob or grain"
10:50 sieve but not "provide the ip address for the minion we are working with right now"
10:51 babilen well ... you do know the minion's id, don't you?
10:51 babilen (hint: grains['id'])
10:52 sieve babilen: sure, but that does not solve the problem. I would still have to have this bit of code in every state where I wanted to use these values
10:52 salt-no0b joined #salt
10:52 babilen "11:49:07 babilen > I'd start with a custom grain and take it from there"
10:52 sieve I would still have to extract the grains['id'] in every state and run some string manipulations
10:53 sieve babilen: I guess your right there
10:53 babilen I don't understand your problem .. I mentioned three ways to tackle this of which you can combine any combination
10:53 sieve babilen: Ill have a look
10:53 babilen no, my left!
10:53 babilen I mean you will, certainly, have to compute it somewhere
10:53 sieve babilen: I think Im not explaining the problem effectively
10:53 bhosmer joined #salt
10:54 salt-no0b from where does salt get status.diskstats from? it works well on Kvm and for openvz it returns null, any idea why ?
10:54 sieve I guess a custom grain would be a great place to keep this info. Get each minion to work out its hostname and fqdn
10:55 babilen sieve: And you can use a custom execution module in there and even put that information in the mine if you need it on other minions
10:58 prime joined #salt
11:01 __gotcha joined #salt
11:03 JoshuaX joined #salt
11:05 bluenemo joined #salt
11:05 bluenemo joined #salt
11:15 sieve hmm, I cannot find the grain that produces the salt id
11:20 Morbus joined #salt
11:31 paulm- How can you use file.replace to just remove a line instead of replacing it with a blank line. i.e. how can I stop it appending a new line?
11:37 jespada joined #salt
11:45 deyandyankov joined #salt
11:54 ndrei joined #salt
11:56 N-Mi_ joined #salt
11:57 murrdoc joined #salt
12:00 devweasel joined #salt
12:02 slav0nic joined #salt
12:06 redbeard2 joined #salt
12:06 redbeard2 left #salt
12:07 otter768 joined #salt
12:09 wnkz joined #salt
12:09 AirOnSkin How can I match two pillars with an AND operator in the top file? Meaning, for a state to be called it must match pillar1 AND pillar2?
12:11 evle joined #salt
12:11 murrdoc Have you tried compound matching , it works for all matching
12:11 AirOnSkin Nope, haven't heard of that... I'll have a look....
12:12 murrdoc http://docs.saltstack.com/en/latest/topics/targeting/compound.html
12:13 GabLeRoux joined #salt
12:16 Dw_Sn how can i use nodegroups inside SLS such as firewall ? seems that adding it in top does not work , because will be having 2 firewall sls and managed files and confliecting
12:20 tzu joined #salt
12:20 tzu left #salt
12:21 jtang joined #salt
12:21 dunz0r How long is a job left at the master if no minion picks it up? As in it isn't reported to be "finished"
12:21 dunz0r ?
12:21 dunz0r Like if I tell some stolen laptop to shred all important documents, will it do that upon connecting to the internet when started a week after the command was sent?
12:23 malinoff joined #salt
12:23 murrdoc fun question, no clue if the job timeout is a week
12:24 dunz0r I know there's a keep_jobs-timeout, but I don't know about jobs that haven't been "picked up"
12:25 wincus joined #salt
12:25 murrdoc thats the same thing
12:25 murrdoc no ?
12:26 murrdoc if you need to hvae a job run for sure, across reboots, look into salt reactor or startup_states
12:27 dunz0r murrdoc: What makes me uncertain is the wording in the config regarding that line: "# Set the number of hours to keep old job information in the job cache'
12:27 dunz0r What classifies a job as old?
12:29 murrdoc ok thats different
12:29 murrdoc thats a result cache
12:31 Ahlee Those entries refer to the on disk master result cache
12:32 Ahlee minions keep data until they're done, masters keep on disk for the value configured, and indefinitely in external_job_caches
12:35 iromli joined #salt
12:36 cmcmacken joined #salt
12:39 lothiraldan joined #salt
12:40 dunz0r Ahlee: So I need to set up an external_job_cache for this behaviour then?
12:41 sieve joined #salt
12:41 Ahlee or specify a --returner when kicking off the job
12:42 Ahlee external_job_cache appends a default returner to all jobs submitted
12:42 Ahlee sorry, --return, http://docs.saltstack.com/en/latest/ref/returners/
12:42 deyandyankov hi guys. I'm new to Salt and unfortunately I have to install it on a RHEL 6.4. Ubuntu installation went smoothly but RHEL has Python2.6 and no Salt RPMs. What would be the best way to install Salt on RHEL 6.4? Installing from bootstrap.saltstack.com fails on python-jinja2 :(
12:43 deyandyankov I'll only need these machines to be minions if this helps
12:44 Ahlee There are RPMs available via EPEL
12:44 deyandyankov for Salt?
12:44 ThomasJ Yes
12:45 Ahlee http://dl.fedoraproject.org/pub/epel/6/x86_64/repoview/letter_s.group.html
12:45 ThomasJ Running salt via epel on CentOS 5-7 here
12:45 Ahlee i package my own copy and host internally from the SRPM
12:45 hobakill salt DEFINITELY is in epel.
12:46 Ahlee as why would you ever want to install production software from a bash script downloaded from the internet?
12:46 Ahlee *shudder*
12:47 deyandyankov yes, I actually tried those. but it fails on python2.7 dependency
12:47 hobakill Ahlee, well you're better than the rest of us yum fools. :)
12:48 Ahlee deyandyankov: the RHEL/Cent6 rpms do not require python2.7
12:48 dunz0r Ahlee: That's just the return though. The job that is sent off to minions has to have some default timeout or something?
12:49 dunz0r Or does jobs just stay in the queue until some minion picks it up?
12:49 bhosmer joined #salt
12:49 Ahlee If a JID is generated, a targeted minion accepted the job
12:49 dunz0r So if a JID isn't generated, then what happens?
12:50 Ahlee dunz0r: No work has been scheduled
12:50 Ahlee if a JID is generated, jinja is rendered on master and sent to minion, stored in /var/cache/salt/minion/
12:50 Ahlee on return it will be removed, if it can't return it should remain there, but I've never tested
12:51 Ahlee deyandyankov: hold for srpm link showing .spec with requirements
12:51 dunz0r That's what I suspect will happen too, but I'm not sure.
12:51 dunz0r Ahlee: What I mean is if the targeted minion isn't connected when I start the job.
12:52 Ahlee dunz0r: the master keeps a record of minions matching the target at job submission
12:52 Ahlee if a minion is not responding at time of job, that job will not run on the minion
12:53 Ahlee This leads it self to 'put what you want into highstate, and have highstate run through reactor on minion join"
12:53 dunz0r Ah. Now I understand. Thanks Ahlee :)
12:53 Ahlee dunz0r: no problem!
12:53 Ahlee it has it's weaknesses.
12:53 subsignal joined #salt
12:53 Ahlee But, it has it's strengths, too
12:54 Ahlee we have a reactor set up on minion join to run a subset of states (not highstate necessarily)
12:54 deyandyankov Ahlee: It still fails on python2.7 dep:( yum install http://dl.fedoraproject.org/pub/epel/6/x86_64/salt-2014.7.1-1.el6.noarch.rpm
12:54 Ahlee so when a minion comes back, it knows
12:54 subsigna_ joined #salt
12:54 deyandyankov Error: package: python-zmwq-14.3.1-1.el7.x86_64 ; "Requires: python(abi) = 2.7
12:55 deyandyankov zmq*
12:55 elfixit joined #salt
12:55 Ahlee ah, that's not salt requirement, tha'ts python-zmwq.  Install a python-zmq RPM built against 2.6
12:55 deyandyankov btw I've tried http://docs.saltstack.com/en/latest/topics/installation/rhel.html before coming here
12:56 Ahlee I'm trying to find the link still, sorry, been a long time since i had to dig into this
12:56 deyandyankov ok, I'll try installing python-zmq. thanks
12:56 losh joined #salt
12:58 bougie joined #salt
12:58 bougie Hi o/
12:58 bougie Can I write pillar file in JSON ?
12:59 murrdoc si si puede
12:59 hobakill murrdoc, i feel like i'm in mexico city!
12:59 murrdoc :)
13:00 joehoyle joined #salt
13:00 jeremyr joined #salt
13:00 subsignal joined #salt
13:05 Ahlee excellent question bougie
13:05 shoemonkey joined #salt
13:05 Ahlee I'm not sure.
13:06 cpowell joined #salt
13:07 paulm-- joined #salt
13:07 mapu joined #salt
13:08 murrdoc you can, just put #!json at the top of the file
13:08 Ahlee in pillar?
13:08 Ahlee neat
13:08 murrdoc yeah same as sls
13:09 murrdoc even this works Ahlee http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.yamlex.html#module-salt.renderers.yamlex
13:10 jeddi joined #salt
13:10 murrdoc so u can aggregate lists
13:12 bougie thanks murrdoc :)
13:12 renoirb joined #salt
13:12 bougie like #!py too
13:12 murrdoc ext_pillar is better than !#py
13:13 Habsgoalie joined #salt
13:14 diegows joined #salt
13:17 catpig joined #salt
13:18 amcorreia joined #salt
13:18 jdesilet joined #salt
13:21 joehh murrdoc: when you say ext_pillar are you refering to something similar to reclass/
13:21 joehh ?
13:21 murrdoc yeah or any pillar you write yourself
13:22 murrdoc the !py renderer is nice and all, but as a personal preference i use ext_pillar for pillars and _states for states that use !#py
13:22 murrdoc personal preference
13:23 mortis_ no saltconf vids out yet? *sniff* http://www.youtube.com/saltstack
13:25 Deevolution joined #salt
13:25 shoemonkey joined #salt
13:26 lothiraldan joined #salt
13:26 primechuck joined #salt
13:28 jtang joined #salt
13:28 mohae joined #salt
13:28 deyandyankov thank you, guys! I did it. It was a matter of installing a proper version of python-jinja2 that works with Python2.6 and then EPEL's salt installs like a charm
13:29 murrdoc Ahlee knows all; praise Ahlee
13:30 Ahlee I am the master of dealing with outdated software
13:30 * murrdoc does we are not worthy dance
13:33 Ahlee I had to boot up a redhat 9 system on Monday
13:33 Ahlee that was a bit of nostalgia
13:34 timoguin joined #salt
13:34 MWheelz joined #salt
13:34 sieve joined #salt
13:37 murrdoc u should video such things
13:38 giannello joined #salt
13:39 XenophonF do any of you remember Red Hat's Mother's Day release?
13:40 XenophonF that release was life-changing
13:40 XenophonF (but oh so buggy!)
13:41 murrdoc i will not make yo mama joke on a the salt channel
13:41 murrdoc what was the mothers day release, i dont remember it
13:42 shoemonk_ joined #salt
13:43 snuffychi joined #salt
13:44 linjan joined #salt
13:46 lothiraldan joined #salt
13:49 XenophonF Red Hat 2.0
13:49 theologian joined #salt
13:49 XenophonF like 95 or 96
13:49 XenophonF first graphical Linux installer I ever saw
13:49 hobakill i remember when you could buy a box of redhat at best buy.
13:50 XenophonF oh my mistake, that was Red Hat 1.0
13:50 XenophonF and end of 1994
13:50 XenophonF it was So. Buggy.
13:52 dyasny joined #salt
13:52 ndrei joined #salt
13:53 llua and not much have changed.
13:54 shoemonkey joined #salt
13:55 murrdoc systemd will fix it all
13:55 murrdoc dont worry about it
13:55 JDiPierro joined #salt
13:55 AirOnSkin Hey guys. I have the following SLS file to assign states based on roles: http://hastebin.com/olupusazib
13:55 kaptk2 joined #salt
13:56 AirOnSkin Now I'm trying to do something similar in Pillar: http://hastebin.com/ubujaxabew
13:57 AirOnSkin A new host will have a file at /srv/salt/dev/pillars/hostcfg/ named after its id
13:57 AirOnSkin In that file there would be all relevant Pillar data for this host.
13:57 AirOnSkin Do you think that could work like that?
13:59 JDiPierro AirOnSkin: I think you can simplify your states via roles by using grains. I have a grain called 'role' that is a list of roles the machine fulfills and then in my top.sls file I match on grain and assign states that way. Example in the top file: http://pastebin.com/Kg5aRk7v
14:00 JDiPierro And the same applies for pillars. You can match on a grain and then assign relevant pillars like the above example.
14:00 AirOnSkin JDiPierro: That was my previous setup. However, I'd like to have my host configuration (roles, open ports, crontab entries) in Pillar, rather than in Grains
14:01 andrew_v joined #salt
14:01 debian112 joined #salt
14:01 murrdoc also   {% if 'roles' in pillar %} should be {% if salt['pillar.get']('roles',{})|length > 1 %}
14:02 sieve joined #salt
14:02 AirOnSkin murrdoc: Can you explain the difference?
14:05 shoemonkey joined #salt
14:05 snuffychi joined #salt
14:07 gscott joined #salt
14:08 otter768 joined #salt
14:09 gscott I'm having an issue with salt spamming my red hat repositories
14:10 gscott and kicking my minions off the red hat network
14:11 Brew joined #salt
14:12 jaloren joined #salt
14:13 jaloren hi all...i have a question about exception handling for imports in custom modules in saltstack
14:13 jaloren currently if an import fails, all that the minion returns back is "function is not available"
14:13 Ahlee what's the new hotness with salt, engines and ___
14:13 jaloren is there anyway to intercept an import error and pass that exception to the minion which is then returned to the master?
14:13 murrdoc beacons
14:13 RipePeach joined #salt
14:14 Ahlee thank you murrdoc
14:14 murrdoc AirOnSkin:  the difference is stylistic, using the .get() function on a dict is considered cleaner
14:14 N-Mi_ is there a way to run a different command in a cmd.run state when using "test=True" ?
14:14 RipePeach joined #salt
14:15 Ahlee plus .get() allows specifying defaults rather than failing on non-exist
14:15 snuffychi joined #salt
14:16 murrdoc that too
14:17 brick joined #salt
14:18 \ask joined #salt
14:20 AirOnSkin But do you think what I posted could work?
14:20 __gotcha joined #salt
14:21 RipePeach joined #salt
14:22 RipePeach joined #salt
14:23 StDiluted joined #salt
14:24 troyready joined #salt
14:25 RipePeach joined #salt
14:25 wincyj joined #salt
14:29 ek6 joined #salt
14:30 XenophonF AirOnSkin: there's a difference between pillar.get() and the regular dict get(), too
14:30 XenophonF AirOnSkin: i target based on a "role"pillar directly from top.sls
14:30 XenophonF AirOnSkin: i think it's easier to understand
14:31 Ahlee N-Mi_: Not to my knowledge
14:31 _JZ_ joined #salt
14:31 XenophonF AirOnSkin: I don't usually use grains for targeting because it requires the master trusting the minion
14:32 murrdoc if you cant trust your minions, who can u trust!
14:33 N-Mi_ Ahlee: thanks for the answer. in the end I added an additional parameter and some jinja to execute the alternate command. not 100% happy with this but it does the job
14:34 RipePeach joined #salt
14:35 XenophonF AirOnSkin: here's an example from my top.sls file - https://bpaste.net/show/2a35715b116c
14:35 mpanetta joined #salt
14:35 XenophonF murrdoc: hah
14:35 XenophonF murrdoc: well it's more like attack surface reduction
14:35 Ahlee N-Mi_: yeah, I cringe at the amount of jinja workarounds I have to do, as well
14:35 RipePeach joined #salt
14:35 murrdoc XenophonF:  yeah
14:36 murrdoc btw i do a fully pillar driven state selection, and get a minions' role from an ext_pillar
14:36 Ahlee ext_pillar is the bestest thing ever
14:36 murrdoc so in the {{ role }} pillar for a  minion i specify what states it expects to run and then in the top.sls all i have is
14:36 murrdoc base:
14:37 murrdoc - global
14:37 murrdoc - global.{{ role }}
14:37 XenophonF oh neat
14:37 jalbretsen joined #salt
14:37 murrdoc and the global.role sls does for state in  customfunctionthatmungespillars
14:37 murrdoc include state
14:37 murrdoc almost no matching yet
14:38 yuhl_work_ hello, I do have a problem with one minion: the command salt -v <minion_id> state.highstate, returns Execution is still in running ...., ..., and then I get a Minion did not return
14:38 murrdoc the best part is i can salt 'minionname' custommodule.get_states
14:38 Furao joined #salt
14:38 murrdoc and i get a list of states that get applied to the minionname
14:39 XenophonF murrdoc: that's worthy of a detailed writeup somewhere
14:39 yuhl_work_ and on the minion you can see that salt-minion keeps beeing in top of the top command
14:39 murrdoc XenophonF:  it is
14:39 murrdoc someone should do that
14:39 * murrdoc pulls an iggy
14:39 XenophonF heh
14:39 murrdoc i will write it up, honest, soon
14:40 murrdoc did u see the new style salt formulas ?
14:40 murrdoc the salt-formula was upgraded to the new style, i like it
14:40 overyander joined #salt
14:40 murrdoc pillars only used for overrides … +!
14:40 joehoyle joined #salt
14:40 KennethWilke joined #salt
14:40 RipePeach joined #salt
14:45 XenophonF i have
14:46 XenophonF i switched my networks over to salt-formula about a month ago
14:46 Andre-B_ joined #salt
14:46 XenophonF so far i've been really, really happy
14:46 XenophonF only complaint is that the windows minion isn't supported
14:46 XenophonF at some point i'm going to send a pull request in to fix that
14:46 overyander I'm having issues using salt to upgrade the minions to a newer version. the minion is windows. here's an excerpt from the debug log on the minion when it runs the state http://pastebin.com/G35cpsm5 here's the state itself http://pastebin.com/5r4db8Sb  here's the init file for the salt-minion winrepo http://pastebin.com/BxWUeW94   I can run the command listed in the debug log of the minion and it runs fine, but it seems when salt runs it, the service stops
14:46 overyander and nothing else happens.
14:49 RipePeach joined #salt
14:49 LinuxHorn anyone know what is going on with the SaltConf15 videos?
14:50 LinuxHorn they still aren't up on the youtube page
14:50 LinuxHorn want to watch some of the sessions i missed because i was in different sessions
14:51 jri joined #salt
14:51 murrdoc based pi would know
14:53 XenophonF overyander: i don't know why salt can't execute the installer
14:54 XenophonF overyander: does it work if you use cmd.run?
14:54 williamthekid joined #salt
14:55 overyander i updated from 2014.1.11 to 2014.7.0 this way. i haven't tried cmd.run yet. i get the same results if i try pkg.install
14:55 kermit joined #salt
14:56 rojem joined #salt
14:58 RipePeach joined #salt
15:00 mikaelhm joined #salt
15:04 RipePeach joined #salt
15:08 joehoyle2 joined #salt
15:10 scbunn joined #salt
15:11 XenophonF overyander: why 2014.7.0 and not 2014.7.2?
15:12 Xevian joined #salt
15:12 refnode joined #salt
15:12 overyander XenophonF, i'm upgrading from 2014.7.0 to 2014.7.2. also, trying from cmd.run results in the same issue
15:13 braqoon joined #salt
15:13 XenophonF ah
15:13 XenophonF gotcha
15:13 refnode hi
15:13 braqoon hi
15:13 rome_390 joined #salt
15:13 overyander hi
15:14 murrdoc aigh
15:15 Nazzy I have an interesting problem ... suggestions on the best way to have a jinja template say "if (some file exists) { config line }"?
15:15 braqoon I'm thinking about using some of the formulas form saltstack on git, eg. nginx one, but they seem highly complicated for what i need. What's the take on this if you just want to install pkg and config file ?
15:15 jespada joined #salt
15:15 ndrei joined #salt
15:17 sander_____ joined #salt
15:17 overyander Nazzy, {% if salt['file.directory_exists']('filename') %}
15:17 overyander don't forget to end your if
15:18 badon_ joined #salt
15:18 XenophonF is there a reason why the entirety of the python namespace isn't available from within Jinja?
15:18 SheetiS braqoon: I go for the KISS principle. If I don't need to complicate my states, I don't.  If it is too much for what you need, then don't use the formula.
15:18 sieve joined #salt
15:19 SheetiS XenophonF: what are you wanting available from Jinja that isn't?
15:19 braqoon SheetiS, That's what i was thinking. Thanks.
15:20 Nazzy overyander, perfect, thank you
15:20 overyander yw
15:22 overyander there's more people in here now. i'm going to repost my issue from earlier. just stating this so nobody thinks i'm spamming; just at my wits end with this problem
15:22 overyander I'm having issues using salt to upgrade the minions to a newer version. the minion is windows. here's an excerpt from the debug log on the minion when it runs the state http://pastebin.com/G35cpsm5 here's the state itself http://pastebin.com/5r4db8Sb  here's the init file for the salt-minion winrepo http://pastebin.com/BxWUeW94   I can run the command listed in the debug log of the minion and it runs fine, but it seems when salt runs it, the service stops
15:22 overyander and nothing else happens.
15:23 overyander i get the same results when also trying to use pkg.install or cmd.run from the salt-master cli
15:23 refnode joined #salt
15:23 RipePeach joined #salt
15:24 zwi joined #salt
15:25 RipePeach joined #salt
15:26 esogas_` joined #salt
15:27 RipePeach joined #salt
15:28 Deevolution overyander:  Is it even possible to get Salt to upgrade itself that way on Windows?  I was under the impression that due to the way Windows locks files this wouldn't work.
15:28 RipePeach joined #salt
15:28 Deevolution I actually have something similar where we setup a job to run +2 minutes after the Salt highstate to upgrade Windows machines.
15:29 JoshuaX joined #salt
15:29 SheetiS Deevolution++ I was also thinking that might be a good idea to schedule it so that salt wasn't the parent process for the upgrade.
15:29 overyander Deevolution, it worked for me when i upgraded from 2014.1.11 to 2014.7.0. salt would kick off the installation process and the installer would finish even though salt wasn't running. Can you share your state with me that you use?
15:30 Deevolution overyander: One sec, let me see what shape it's in.
15:31 overyander thanks
15:32 Deevolution overyander: We wrote a module to do the upgrade and have Salt schedule the module's execution for post the state.
15:32 dharper_ii overyander: are you using the msi (frozen install) or have you guys rolled your own installation?
15:32 iggy LinuxHorn: they took 8 months to be uploaded last year... so you've got some time left
15:34 Deevolution So... It would be somewhat complicated to share what we're using.  dharper_ii (co-worker) wrote a PowerShell script that does a Salt install on Windows via pip.  That powershell is what is executed via an execution module (it schedules it at a point "X" minutes in the future).  That's what's actually being called in the state.
15:35 overyander dharper_ii, we're using the exe's provided in http://docs.saltstack.com/downloads/
15:35 LinuxHorn Lol iggy
15:36 dharper_ii overyander: Give me a second, I might have something for you then
15:37 yuhl_work_ hello, how can I tell salt-minion to generate the pki and transmit them to the master
15:38 dharper_ii overyander: just one question, does the uninstall on windows delete the minion's key?
15:38 dharper_ii i forget
15:38 timoguin joined #salt
15:38 hasues joined #salt
15:39 mcescher joined #salt
15:40 mcescher hi i'm trying to use the dockerio module to run a docker image, but i have trouble specifying environment variables. could anyone give me an example please how to specifiy it in the yaml file as there's no example in the documentation
15:41 mcescher and: is it possible to specifiy an environment file that maps to --env-file in docker?
15:42 clintberry joined #salt
15:42 RipePeach joined #salt
15:43 bmac2 I have a simple beginner question.  HOw do I get salt installed on VMware ESXi version 5.1.0.  I got a link to this document: http://docs.saltstack.com/en/latest/ref/clouds/all/salt.cloud.clouds.vsphere.html, which doesn't work because of a TON of missing python modules that won't install
15:43 bmac2 anyone have a link to any other documents that show the install steps for vmware?
15:44 overyander dharper_ii, no, when i manually do the update, the key stays the same thankfully.
15:44 overyander sorry for the delay, had to step away for a min
15:44 iggy bmac2: install salt on esxi? That's not the way it works...
15:44 ekristen joined #salt
15:44 bmac2 ok, the install says for vsphere
15:44 bmac2 so how do I managed vmware from salt?
15:44 bmac2 I am just learning all of htis
15:45 bmac2 have my freebsd, linux, and windows stuff all in salt now
15:45 bmac2 have all my vms in salt
15:45 murrdoc does salt-cloud not have vmware support
15:45 bmac2 looking at our vmware units, and the cloud install doesn't work on my systems
15:45 iggy bmac2: salt-cloud talks to the vsphere api, so normally you'd run the salt-cloud commands on your salt-master host
15:46 bmac2 so that install guide is ON the master
15:46 bmac2 not on the vmware host?
15:46 iggy right
15:46 bmac2 ok
15:46 bmac2 that is why it didn't make sense
15:46 bmac2 I am a total noob when it comes to this, just now learning it
15:46 hasues left #salt
15:47 MTecknology When was saltconf14?
15:48 iggy Jan 14 (iirc)
15:48 MTecknology thansk
15:48 MTecknology thanks* :)
15:49 JDiPierro joined #salt
15:50 jdesilet joined #salt
15:53 smcquay joined #salt
15:53 [7hunderbird] joined #salt
15:54 cmcmacken joined #salt
15:54 ltsampros joined #salt
15:54 aparsons joined #salt
15:55 yuhl_work_ I got a strange behaviour with a minion, as it seems it does it job, but when invoking a salt command on the master, I do not get the *normal* output from the highstate. I actually get nothing in the output
15:55 iggy try a longer timeout
15:56 ltsampros is it possible to get an event when a new minion appears for the first time on the master?
15:56 iggy there isn't an event for that, there's an event for key accepted
15:56 murrdoc check the reactor documentation page, it walks you through that situation
15:57 ltsampros iggy :)
15:57 ajw0100 joined #salt
15:57 ltsampros iggy so when the key is pre-seeded (and already know), it will fire up
15:57 ltsampros so it's kind of the same
15:57 iggy it may be effectively the same for your use case
15:58 ltsampros iggy: yeah thanks
15:58 theologian joined #salt
15:58 ltsampros where do I look in the source code for events etc ?
15:58 iggy best bet is watch the bus using the script mentioned in the docs
15:59 thedodd joined #salt
15:59 ltsampros iggy thanks
15:59 ltsampros iggy: you refer to this i suppose: http://docs.saltstack.com/en/latest/topics/event/index.html
15:59 ltsampros right?
16:00 jespada joined #salt
16:06 favadi joined #salt
16:06 favadi left #salt
16:09 otter768 joined #salt
16:10 jdesilet joined #salt
16:12 losh_ joined #salt
16:14 dopesong_ joined #salt
16:17 cedwards joined #salt
16:18 nexsja^ joined #salt
16:18 slav0nic joined #salt
16:18 slav0nic joined #salt
16:18 kunit joined #salt
16:19 theologian joined #salt
16:19 kunit what is the url for the vetted salt templates?
16:20 spookah joined #salt
16:20 murrdoc github saltstack-formulas org
16:21 sander_____ There are vetting template somewhere?
16:21 kunit formulas, that is the term,  thank you murrdoc
16:22 losh__ joined #salt
16:22 XenophonF joined #salt
16:22 Opti99 joined #salt
16:23 kunit sander____: https://github.com/saltstack-formulas
16:24 ahammond yum sucks and is the slowest part of all my formulas. Is there any integration with pulp? I see a great formula to install a pulp server, but... ?
16:25 dalexander joined #salt
16:26 thayne joined #salt
16:26 sander_____ kunit: I know its a best effort thing, but the vetting is pretty loose: https://github.com/saltstack-formulas/readthedocs-formula
16:28 kunit coworker said they had to be of a certain quality in get into that repo, mmv
16:29 sander_____ Well some of them are pretty good, but many only work on certain distros. You should always check the map.jinja file before even downloading.
16:29 kunit rgr
16:32 KyleG joined #salt
16:32 KyleG joined #salt
16:33 refnode are there any standardized qa tools yet?
16:33 NV joined #salt
16:34 joehoyle joined #salt
16:38 prwilson joined #salt
16:39 lomeroe joined #salt
16:39 spookah joined #salt
16:40 bluenemo joined #salt
16:40 bluenemo joined #salt
16:40 pravka joined #salt
16:42 sandah joined #salt
16:44 ndrei joined #salt
16:47 [7hunderbird] joined #salt
16:49 joehoyle joined #salt
16:50 joehoyle3 joined #salt
16:52 hbasir joined #salt
16:52 cmcmacken joined #salt
16:52 hbasir hey does anyone know why you get different state.highstate outputs for non-root users ?
16:53 linjan joined #salt
16:53 hbasir it looks like it always returns the full output not the mixed from the config
16:53 joehoyle joined #salt
16:57 ndrei joined #salt
16:58 dalexander joined #salt
17:03 Ryan_Lane joined #salt
17:03 refnode_ joined #salt
17:03 rgarcia_ joined #salt
17:14 Ahlee ahammond: interesting RE: pulp
17:15 jespada joined #salt
17:19 meylor joined #salt
17:20 meylor Can you use jinja {{ varname }} in a map.jinja?
17:21 bhosmer_ joined #salt
17:21 refnode joined #salt
17:23 ndrei joined #salt
17:24 hbasir joined #salt
17:25 SheetiS meylor: you can use variable names in map.jinja, but becasue of the way they are commonly structured, I would not expect to have to use {{ }} as it would be inside of a {% %} block most likely.
17:25 welldannit joined #salt
17:25 jimylongs this is probably a lame question.. but can a module be ran in a state when it's not a state module?
17:26 SheetiS jimylongs: indeed it can be
17:26 jimylongs this is what i'm attempting to run . . . . {% set users = salt['file.find']('/ name=.mysql_history') %}
17:27 forrest joined #salt
17:27 perfectsine joined #salt
17:27 meylor : SheetiS let me try that instead
17:29 SheetiS jimylongs: salt['file.find']('/', name='.mysql_history')
17:29 SheetiS that would be better syntax for the module file.find.
17:30 Ahlee probably want to start that not at / but at /home, lest you like walking through potentially large amounts of unnecessary files like in /lib, /var, /usr, etc :)
17:30 SheetiS Ahlee++ I was just starting to type that about scope of the find :D
17:31 jimylongs thanks guys
17:31 germs_ joined #salt
17:32 jespada joined #salt
17:33 jimylongs all though maybe that's part of the issue
17:33 SheetiS It will return full (or relative if you started with a .) paths including the filename itself.  The return will be in a list you can iterate over once you have it.
17:33 jimylongs it looks like find expects only 1 argument
17:33 jimylongs so maybe it's not getting the name
17:33 neogenix joined #salt
17:33 SheetiS One arg and then many kwargs right?
17:33 jimylongs Rendering SLS 'mysqlservers:mysql-server.test' failed: Jinja error: find() takes exactly 1 argument (2 given)
17:35 jimylongs (path, *args, **kwargs)
17:35 numkem has anyone having issues with the virt runner in 2014.7.2? Trying to use the virt.hyper_info command it keeps returning nothing...
17:36 hbasir looks like i found the issue. users can't read the master config in etc, and they needed the saltrc
17:37 SheetiS jimylongs: this worked: https://bpaste.net/show/24f66089f3bd
17:37 SheetiS on salt 2014.7.1
17:38 ksalman say, does anybody use aptly and have merged salt repo with debian wheezy repo?
17:38 rgarcia_ joined #salt
17:38 thayne joined #salt
17:38 jimylongs ahh , i had the name in ' as well
17:38 jimylongs thanks Sheet
17:38 SheetiS yeah name is a kwarg
17:38 SheetiS so it needs to be outside :D
17:39 neogenix joined #salt
17:45 Vynce joined #salt
17:46 wincyj joined #salt
17:47 dalexander joined #salt
17:49 jalaziz joined #salt
17:49 Fiber^ joined #salt
17:50 rojem joined #salt
17:51 neogenix_ joined #salt
17:52 treborTech joined #salt
17:57 baweaver joined #salt
18:01 gds_ joined #salt
18:03 gds_ pkg.install is failing if package not found.. is there any way to skip just one package and continue rest or retry after some time?
18:03 Habsgoalie joined #salt
18:05 joehoyle joined #salt
18:05 mattiasr joined #salt
18:08 hal58th gds_ doesn't look like it. Separate that package into another state.
18:09 germs_ joined #salt
18:09 hal58th There is definitely no built in retry. States execute in an order. You could do "onfail" and add another state with "order: last". It will just run that state at the end of the highstate.
18:10 otter768 joined #salt
18:10 prime left #salt
18:10 I3olle joined #salt
18:11 zwi joined #salt
18:13 ajw0100 joined #salt
18:13 gds_ i have separated few trouble some packages to other states but one way or other my states are failing just for one package or dependent package
18:14 gds_ some times it is even failing because of slow network..
18:14 gds_ can we increase timeout time incase of slow network
18:20 hal58th well, I'm looking at the code but I suck at looking through the code. Don't see anything obvious. I would put in a feature request into github
18:23 joshin If anyone can point me to their favorite tutorial on manipulating application config files, I'd appreciate it. Been playing with pillars, file.blockconfig, file.replace, and not sure of best practices.
18:24 dopesong_ joined #salt
18:24 SheetiS I like to use file.managed with a template for arbitrary configuration types.  If something is configured via json or yaml, I prefer file.serialize.
18:25 joshin Thanks SheetiS. I need to wrap my head better around templates.
18:26 JoshuaX joined #salt
18:28 SheetiS joshin: here's an example I use for my apache24 states.  Here is my template for config files: https://bpaste.net/show/185912025e54
18:28 joshin Cool, thanks!
18:29 joshin I really appreciate that SheetiS!
18:29 SheetiS Those mostly will generate the 'default' config with a few minor tweaks for Amazon Linux's httpd24 package.
18:30 joshin That's perfect, thanks! We're migrating from Chef to Salt and I'm figuring out how to convert our Chef templates over.
18:42 jrb28 joined #salt
18:46 mcescher joined #salt
18:47 aparsons_ joined #salt
18:48 ndrei joined #salt
18:48 wnkz_ joined #salt
18:51 mbartsch joined #salt
18:51 mbartsch Hi everyone
18:52 joshin Howdy!
18:54 mbartsch Hi joshin, how are you?
18:54 mbartsch may I throw a newbie question with saltstack
18:54 mbartsch i had search a bit on google and logs, but couldn't find a clear answer :(
18:56 mbartsch i'm trying to configure yum.repos.d from salt, but always i get this, which i have found on the irc logs but can't understand why is not working
18:56 mbartsch Failed to configure repo 'ngas_repo': The repo does not exist and needs to be created, but a name was not given
18:56 mbartsch ngas_repo:
18:56 mbartsch pkgrepo.managed:
18:57 mbartsch - hummanname: NGAS Repository
18:57 mbartsch - mirrorlist: http://xxxxxxxxxx/xxx/xxxx
18:57 mbartsch - gpgcheck: 0
18:57 wnkz joined #salt
18:57 mbartsch - enabled: 1
18:58 MTecknology mbartsch: dpaste.com next time for pastes
18:59 linjan joined #salt
18:59 cluther joined #salt
18:59 Ahrotahntee mbartsch: you're missing - name:
18:59 mbartsch sorry , won't happend again, but now that i made the copy paste , just realize it was a typo on humanname :/
18:59 Ahrotahntee also what MTecknology said
19:00 Ahrotahntee oh, yeah 'humman' - missed that one
19:00 mbartsch damn, i had missed it for like 2 hours, and now that I came here to ask, after the copy&paste :/ i found the problem he he he
19:01 mbartsch well, I'll keep porting my puppet config to salt ;) thanks
19:01 MTecknology sounds like fun
19:01 ben_NN Hi everyone
19:02 ben_NN any idea how to get grains value in uppercase?
19:02 murrdoc {{ salt['grains.get']('key')|upper }}
19:03 mbartsch MT, just starting so need to catch with the syntax and yaml , which i know nothing ;)
19:03 ben_NN I see I've that = Hostname={{ grains|upper['fqdn'] }}
19:03 ben_NN wrong obviously
19:03 ben_NN cheers murrdoc
19:08 bbhoss can someone point me to where external auth actually asks for a password? I have been trying like hell to make it work with ldap, but it doesn't even seem to make a request
19:09 diegows joined #salt
19:09 overyander i'm trying to write an execution module for updating my minions. i'm not familiar with these or with python. can anyone tell me if i'm doing this correctly? thanks http://pastebin.com/a3Nxp3RD
19:10 refnode_ joined #salt
19:10 vstoniest joined #salt
19:11 edrocks joined #salt
19:13 Vynce joined #salt
19:13 refnode joined #salt
19:13 ksffemt joined #salt
19:14 Deevolution overyander:  That's more or less on the right track.
19:14 Deevolution It's pretty close to how we construct a scheduled task to handle Windows upgrades.
19:15 Micromus joined #salt
19:16 JlRd joined #salt
19:18 cluther overyander: The upgradeCmd string formatting is a little off.
19:19 MatthewsFace joined #salt
19:19 cluther overyander: Something more like: upgradeCmd = 'c:\...{}-Setup.exe ... /minion-name={}'.format(_minion_arch(), _minion_name()) would work.
19:19 cluther overyander: Not sure if it was intended, but your function is called updgrade. Is that right or a typo of upgrade?
19:20 overyander Deevolution, dharper_ii did the upgrade(), i changed it around some to be more dynamic.
19:20 cberndt joined #salt
19:20 overyander cluther, that was a typo
19:20 MatthewsFace joined #salt
19:21 joshin What's the channel opinion on Colton Myers's "Learning SaltStack" book?
19:22 baweaver joined #salt
19:22 Deevolution overyander:  Everything working post-upgrade?
19:22 SheetiS joshin: basepi would tell you it's great :D  I've not read it myself, but I understand that it is a good introduction to salt and concepts.
19:23 overyander Deevolution, are you asking if my states work and everything? i'm only having an issue with upgrading the existing minions. fresh installs work like a charm... well except for an infinite extra line problem i have when using file.replace... but i'll tackle that later.
19:24 Vynce left #salt
19:24 joshin That's why I didn't tag him. :) I get the concepts, am looking for some more depth than the typical tutorials. It's cheap, I'll probably get it anyhow.
19:26 overyander cluther, like so? http://pastebin.com/a3Nxp3RD
19:26 Deevolution overyander:  I was asking about the upgrades themselves.
19:26 mcescher left #salt
19:26 overyander should i be using double or single quotes for defining strings like that and the above return vars?
19:27 overyander Deevolution, once I get this fixed and implemented, i think they'll work fine.
19:28 bbhoss ugh! you have to have the ldap module installed or it fails silently
19:29 overyander ?
19:32 ek6 joined #salt
19:36 dopesong joined #salt
19:37 jwhisnant joined #salt
19:37 ckao joined #salt
19:40 rgarcia_ joined #salt
19:40 esharpmajor joined #salt
19:41 packeteer joined #salt
19:41 jay_d joined #salt
19:41 __gotcha joined #salt
19:41 johtso joined #salt
19:44 XenophonF joined #salt
19:45 diegows joined #salt
19:47 evidence were there any docs or branches hiding out somewhere on the new master clustering bits?
19:48 scbunn joined #salt
19:49 rojem joined #salt
19:50 diegows_ joined #salt
19:50 wincyj joined #salt
19:53 jtang joined #salt
19:54 renoirb joined #salt
19:57 joshfu joined #salt
19:59 esharpmajor joined #salt
20:00 Cidan does anyone else find that using ping is really, really slow sometimes?
20:01 johtso joined #salt
20:03 renoirb Hi all, is there anybody who’s running Salt stack with Python 2.7.9 on Ubuntu?
20:03 joshfu joined #salt
20:05 bhosmer_ joined #salt
20:06 Matthews_ joined #salt
20:09 baweaver joined #salt
20:09 hal58th_ joined #salt
20:09 __gotcha joined #salt
20:09 JDiPierro If a highstate fails is there anywhere to find a stacktrace of the failure?
20:10 JDiPierro nm
20:11 otter768 joined #salt
20:15 overyander so, my new custom module. i've placed it in /srv/salt/base/_modules/ (/srv/salt/base is one of my file roots and contains global.sls, top.sls and the win repo dir) but when i run 'salt MINION saltutil.sync_all' the module doesn't get pushed to the minion.
20:16 scoates is there some sort of dunder magic to get __name__ when in jinja+yaml mode?
20:20 jalbretsen1 joined #salt
20:20 baweaver If I wanted to apply a PR to Salt Master, what would be the best way to go about it?
20:20 getling joined #salt
20:21 XenophonF joined #salt
20:21 jalbretsen joined #salt
20:22 jchen joined #salt
20:22 jchen left #salt
20:22 mcescher joined #salt
20:23 mcescher hi i have trouble using archive.extracted: http://www.pastebin.ca/2960181   .. i cant figure out what the problem is. could anyone give me a hint please?
20:24 getling So for client ACLs/external auth, I can regex the users, right? Like 'user1|user2:'?
20:24 XenophonF mcescher: don't you have to pass the "z" flag to tar?
20:25 XenophonF like, set "tar_options: z"
20:26 baweaver zxf for untarring iirc
20:26 edrocks joined #salt
20:29 mcescher according to the docs i should not use x and f: Main operators like -x, --extract, --get, -c and -f/--file should not be used here.
20:29 mcescher but even if i just use tar_options: z  i'm getting the same error message
20:29 getling because it is not working for me
20:29 getling or do people just leverage groups?
20:32 rojem joined #salt
20:33 XenophonF mcescher: see if there's a traceback or something in your minion log
20:34 XenophonF or run "salt-call state.highstate" and pastebin the output
20:37 murrdoc joined #salt
20:38 mcescher http://www.pastebin.ca/2960193
20:38 mcescher that's the relevant part i guess
20:38 mcescher does it even try to download that file?
20:39 iggy you aren't the first person to complain about archive.extracted
20:41 mcescher hmm, i've seem to fixed it by adding keep: True in the config file
20:42 JordanTesting joined #salt
20:42 mcescher now salt is able to extract the file
20:43 [7hunderbird] joined #salt
20:43 rgarcia_ joined #salt
20:43 Habsgoalie joined #salt
20:44 nexsja^ joined #salt
20:49 ajw0100 joined #salt
20:51 SpX joined #salt
20:52 garthk left #salt
20:55 Thiggy joined #salt
20:55 dude051 joined #salt
20:55 Thiggy Seeing this error on some new machine provisions when trying to install some pip packages. [ERROR   ] Command '/usr/bin/pip install' failed with return code: 1
20:55 Thiggy [ERROR   ] stdout: You must give at least one requirement to install (see "pip help install")
20:55 Thiggy Storing complete log in /home/dev/.pip/pip.log
20:55 Thiggy [ERROR   ] retcode: 1
20:55 Thiggy [ERROR   ] Python package uwsgi was already installed
20:55 Thiggy oops sorry.
20:56 Thiggy gists, they do a body good.
20:56 neogenix_ joined #salt
20:56 jdesilet joined #salt
21:01 hal58th joined #salt
21:02 neogenix_ joined #salt
21:05 scbunn joined #salt
21:10 hal58th joined #salt
21:12 murrdoc joined #salt
21:16 warpaint joined #salt
21:16 pipps joined #salt
21:16 Linuturk can I set minion options from a state file?
21:16 Linuturk not templating the minion config
21:17 Linuturk but just overriding certain options
21:20 xintron joined #salt
21:21 * JordanTesting looks at Linuturk
21:21 LtLefse Linuturk: I just use a standard file state to drop files in /etc/salt/minion.d/
21:23 Linuturk JordanTesting: LtLefse this is masterless
21:23 Linuturk specifically related to the mysql credentials file
21:23 bhosmer joined #salt
21:23 Linuturk was hoping I could set it in the state without writing out anything extra to the minion config
21:23 ajw0100 joined #salt
21:23 Linuturk http://salt.readthedocs.org/en/latest/ref/modules/all/salt.modules.mysql.html
21:24 Thiggy @Linuturk You can still use the conf.d folder on a masterless setup. We do that.
21:24 Linuturk setting - mysql.default_file: '/path/to/file'
21:24 Linuturk Thiggy: yeah, I've got that going now.
21:24 Linuturk setting it with cloud-init
21:27 __TheDodd__ joined #salt
21:27 Linuturk Thiggy: https://github.com/rackspace-orchestration-templates/owncloud/blob/saltwip/owncloud.yaml#L111-L190 << if you are interested
21:30 murrdoc http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.grains.html#salt.modules.grains.get_or_set_hash
21:30 murrdoc for use with mysql
21:30 murrdoc not related to what anyone asked
21:32 iggy Linuturk: you can set mysql connection info in pillars too
21:33 linjan joined #salt
21:34 iggy (the mysql module uses config.option internally which looks in __opts__ (config dir), __pillar__['master'] (master config dir), and __pillar__
21:35 Thiggy joined #salt
21:37 SheetiS <3 config.option
21:38 Linuturk neat
21:41 pipps joined #salt
21:43 cberndt joined #salt
21:44 kermit joined #salt
21:45 Thiggy Also, my earlier pip errors were from me accidently installing the develop branch instead of the 2014.7.2 branch.
21:46 Singularo joined #salt
21:48 refnode joined #salt
21:52 nexsja^ joined #salt
21:54 jtang joined #salt
21:56 jtang joined #salt
22:02 iggy (in general) does a service.running _really_ need to "watch" a pkg being installed (assuming they are in the proper order in the sls file)
22:08 StDiluted joined #salt
22:10 garthk joined #salt
22:10 garthk Anyone else getting ssh_auth problems on 2014.7.2? https://github.com/saltstack/salt/issues/21783
22:12 otter768 joined #salt
22:13 aquassaut joined #salt
22:13 enarciso joined #salt
22:13 warpaint joined #salt
22:19 badon_ joined #salt
22:20 hal58th_ joined #salt
22:21 Thiggy joined #salt
22:22 kermit joined #salt
22:26 baweaver joined #salt
22:30 MaliutaLap joined #salt
22:30 MaliutaLap left #salt
22:30 joshfu joined #salt
22:33 diegows_ joined #salt
22:33 wedgie joined #salt
22:33 wedgie joined #salt
22:37 garthk guess not :/
22:37 mosen joined #salt
22:42 murrdoc looks like a config is not what was expected ?
22:42 subsignal joined #salt
22:52 iggy salt:lookup is correct
22:53 garthk not sure what either of those mean, I'm afraid
22:56 iggy (my msg was not to you, it was to murrdoc mostly)
22:56 Ryan_Lane joined #salt
22:57 murrdoc so if u want to override stuff , u have to put it under salt:lookup:key=>value
22:58 murrdoc iggy:  u are merging the full salt pillar and then the salt:lookup pillar ?
22:58 baweaver joined #salt
22:59 jtang joined #salt
22:59 iggy salt:lookup is not incorrect
22:59 enarciso joined #salt
22:59 murrdoc i get that
23:00 iggy and it's a defacto standard, so I'm leaving it for now
23:00 murrdoc but what i dont understand is why we are merging it twice
23:00 murrdoc once in the flavor_map and once in the pillar.get
23:01 kermit joined #salt
23:01 iggy we aren't, and it's there (at least for now) for historical/compatibility reasons
23:02 Ryan_Lane joined #salt
23:02 murrdoc uh we are in the map.jinja
23:02 iggy I'm not opposed to ditching that at some point once people get used to this new way of doing maps/defaults/etc
23:02 khris joined #salt
23:03 iggy one pillar.get is salt and one is salt:lookup
23:06 Guest27756 joined #salt
23:07 clintber_ joined #salt
23:08 Guest27756 left #salt
23:13 rgarcia_ joined #salt
23:16 yomilk joined #salt
23:17 overyander i wrote a custom execution module and it works when i run it from cmd 'salt MINION update_minion.upgrade' how would i go about using that in a state?
23:18 overyander cmd.run update_minion.update? or update_minion: -upgrade
23:18 overyander ?
23:20 Ryan_Lane overyander: http://docs.saltstack.com/en/latest/ref/states/all/salt.states.module.html
23:20 Ryan_Lane ideally you'd also create a custom state to go with it
23:20 Ryan_Lane so that you can make it an idempotent call
23:22 iggy salt.states.module.run
23:24 overyander Ryan_Lane, thanks, didn't know about custom states. and kinda missed the obvious module.run
23:24 Ryan_Lane no worries :)
23:25 kmtanak joined #salt
23:28 garthk Woot. Pulled off using | to wrap a longish bracket command. module.run tls.create_self_signed_cert… cmd.run -name: | ( cat the key; echo; cat the cert ; echo ) > /etc/blah/blah.pem… done. HaProxy is happy.
23:28 garthk Now all I need is ssh_auth working again.
23:29 murrdoc i mean
23:29 murrdoc why dont u chain states
23:29 heise joined #salt
23:29 murrdoc instead of giant cmd.run :D
23:30 MaliutaLap joined #salt
23:30 MaliutaLap left #salt
23:32 Opti88 joined #salt
23:36 viq joined #salt
23:43 MindDrive So a couple of questions that may not be easy to answer: 1) is there any technical reason other than "no one's tried to make it work" that the Salt master can't run as non-root yet still be able to have minions run modules as root?, and 2) from a client, instead of doing 'sudo salt-call publish.publish <host> <cmd>' (including programmatically which would require running the script as root), is there a way to drop the 'sudo' part and have t
23:43 MindDrive he Salt master only allow restricted commands/modules to be run?
23:43 MindDrive (MCollective allows the latter, was hoping Salt might have something equivalent.)
23:44 cberndt joined #salt
23:44 jespada joined #salt
23:45 murrdoc you can install salt master as root
23:46 murrdoc and then configure what modules a non root user can use
23:46 garthk haaang on… IRC client might be pulling tricks. murrdoc, did you say anything to me before "i mean"? Seemed to start out of nowhere.
23:46 murrdoc no
23:46 murrdoc i type like this is a real conversation
23:47 murrdoc cause i am an idiot
23:47 iggy ^
23:47 garthk murrdoc: heh
23:47 garthk phew
23:47 garthk thx
23:47 murrdoc but basically i prefer chaining states together , managed file for a sequence of bash calls and lastly multiple cmds in the a cmd.run: | state
23:47 murrdoc in that order
23:48 MindDrive murrdoc: Just curious, is this documented?  I couldn't seem to find anything like that when I went looking, but I might just be blind. :-/
23:49 murrdoc http://docs.saltstack.com/en/latest/ref/configuration/examples.html#configuration-examples-master
23:50 murrdoc search for client_acl_blacklist
23:50 joshfu joined #salt
23:53 MindDrive Hmm, that does kind of the opposite of what I wanted, but it looks like client_acl could be set very specifically to what I want (in this case, just a single module), but may not be able to do a set of users and may be less secure?
23:53 Ryan_Lane MindDrive: you can define it by group
23:54 iggy peer system?
23:54 iggy I'm still not really clear on the goal
23:54 MindDrive Iggy: Was that related to my questions?
23:54 Ryan_Lane you can have the salt master run as non-root
23:54 iggy yes
23:54 MindDrive Okay, let me expand a bit on what I'm doing, then.
23:54 Ryan_Lane and allow regular users to call modules without sudo
23:55 Ryan_Lane or did you want to be able to make peer calls to the master from another minion?
23:55 Ryan_Lane as non-root?
23:55 Ryan_Lane that does not work.
23:55 joshfu joined #salt
23:55 Ryan_Lane the peer system kind of sucks, imo
23:55 Ryan_Lane if you want more control, use salt-api + pepper
23:56 Ryan_Lane it's way better than the peer system
23:56 pipps joined #salt
23:56 MindDrive I have a deployment system.  Currently said deployment system works with RPMs.  We use MCollective to let a small set of deploy servers allow a user with proper permissions (currently based on Unix groups) to run a Python program on the remote systems needing the RPM. (More)
23:57 MindDrive I hate MCollective, with a passion.  I'm looking to replace it with Salt, but right now since installing RPMs requires root, the Salt master needs to run as root (from what I understand, as we'll be using it for much more as well), I have to access it from my deploy servers as root.
23:57 MindDrive So I was trying to find out if there's a better (and still secure) way to do this without needing something like 'sudo' on the deploy servers.
23:58 MindDrive Does that make more sense?
23:59 XenophonF joined #salt
23:59 iggy the master doesn't need to run as root, just the minions

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary