Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-04-29

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 bluenemo_ joined #salt
00:03 big_rob joined #salt
00:04 mosen iggy: haha
00:10 otter768 joined #salt
00:18 tkharju joined #salt
00:19 aquassaut joined #salt
00:24 baweaver joined #salt
00:27 JDiPierro joined #salt
00:28 BlackFX joined #salt
00:30 JDiPierro joined #salt
00:30 gadget-girl joined #salt
00:31 gadget-girl is list all the things salt work with some where
00:31 BlackFX Anyone had the following error with saltcloud and softlayer : [ERROR   ] There was a profile error: global name 'ScriptDeployment' is not defined\
00:43 Guest47952 joined #salt
00:43 Guest47952 left #salt
00:47 c10 joined #salt
00:48 Iron_DXM joined #salt
01:00 coval3nce is there a way to use ‘failhard’ for ‘salt.function’ in an orchestrate run?
01:09 rojem joined #salt
01:13 ITChap joined #salt
01:13 hasues joined #salt
01:13 hasues left #salt
01:14 nafg_ joined #salt
01:32 Furao joined #salt
01:39 bhosmer_ joined #salt
01:41 otter768 joined #salt
01:50 fusionx86 joined #salt
01:54 yomilk joined #salt
01:54 TyrfingMjolnir joined #salt
02:00 dendazen joined #salt
02:00 murrdoc joined #salt
02:01 _JZ_ joined #salt
02:10 SeeDickCode joined #salt
02:11 malinoff joined #salt
02:12 baweaver joined #salt
02:19 ChesFTC joined #salt
02:21 hybridpollo joined #salt
02:23 fxhp joined #salt
02:26 solidsnack joined #salt
02:35 evle joined #salt
02:35 c10 joined #salt
02:36 ITChap joined #salt
02:38 magicsalt joined #salt
02:39 fusionx86 joined #salt
02:40 favadi joined #salt
02:40 magicsalt hi
02:44 ITChap joined #salt
02:47 donmichelangelo joined #salt
02:50 big_rob left #salt
02:53 favadi joined #salt
02:55 stanchan joined #salt
02:55 pdayton joined #salt
03:04 Furao joined #salt
03:23 Corey joined #salt
03:28 SeeDickCode joined #salt
03:30 MrPeppah Hola
03:30 dendazen joined #salt
03:30 gthank joined #salt
03:30 gthank joined #salt
03:30 izibi joined #salt
03:31 _ether_ joined #salt
03:32 bash124512 joined #salt
03:32 subsignal joined #salt
03:36 jasonrm joined #salt
03:38 Dev0n_ joined #salt
03:40 bhosmer_ joined #salt
03:42 iromli joined #salt
03:44 mosen joined #salt
03:48 TyrfingMjolnir joined #salt
03:48 solidsnack joined #salt
03:48 radd joined #salt
03:49 ChesFTC Hi, it looks like the boto_vpc state (not module) isn't in 2015.rc2?
03:49 izibi joined #salt
03:49 ChesFTC Is there a particular reason why? The docs say it's included post 2014.7.1
03:49 gthank joined #salt
03:49 gthank joined #salt
03:50 rdas joined #salt
03:51 ChesFTC I think that's maybe a mistake, as it's not in the 2014.7 branch either?
03:53 ndrei joined #salt
03:54 SeeDickCode joined #salt
03:58 ageorgop joined #salt
03:58 iggy ChesFTC: yeah, mind opening an issue on that?
03:58 iggy I'm guessing the person who got that merged was a little too optimistic
04:07 yomilk joined #salt
04:08 blacked joined #salt
04:14 SeeDickCode joined #salt
04:17 malinoff_ joined #salt
04:24 c10 joined #salt
04:27 malinoff joined #salt
04:28 dl_nz joined #salt
04:29 catpig joined #salt
04:33 VR-Jack2 spacing with jinja is so much fun. heh
04:33 SeeDickCode joined #salt
04:35 malinoff VR-Jack2, use mako
04:36 VR-Jack2 barely getting used to jinja. haven't even seen any mako examples
04:37 malinoff VR-Jack2, don't rely on examples, use your brain :) http://www.makotemplates.org/
04:38 VR-Jack2 lol. easier said than done. there's multiple layers and not everything is exposed, and all of it is new to me.
04:39 VR-Jack2 but finally have things working, even if it seems inefficient. https://gist.github.com/anonymous/5a26b459373eab6d3403
04:40 ChesFTC iggy: No worries
04:47 JlRd joined #salt
04:49 cimkir joined #salt
04:51 perrigo joined #salt
04:54 TheOtherDude joined #salt
04:57 jalbretsen joined #salt
04:59 yomilk joined #salt
05:04 blacked joined #salt
05:15 joeto joined #salt
05:16 stoogenmeyer_ joined #salt
05:18 badon_ joined #salt
05:28 echo joined #salt
05:29 SeeDickCode joined #salt
05:29 TheOtherDude joined #salt
05:40 c10 joined #salt
05:41 bhosmer_ joined #salt
05:41 catpigger joined #salt
05:44 bzf130_mm joined #salt
05:51 solidsnack joined #salt
05:51 krelo joined #salt
05:57 Furao joined #salt
06:01 colttt joined #salt
06:02 kawa2014 joined #salt
06:05 mephx joined #salt
06:12 AndreasLutro joined #salt
06:13 jerrcs joined #salt
06:13 mephx joined #salt
06:21 blacked joined #salt
06:22 blacked joined #salt
06:31 harkx joined #salt
06:35 KermitTheFragger joined #salt
06:37 stoogenmeyer_ joined #salt
06:42 c10 joined #salt
06:43 flyboy joined #salt
06:43 c10 joined #salt
06:43 subsignal joined #salt
06:46 illern joined #salt
06:50 chiui joined #salt
06:55 c10 joined #salt
06:57 I3olle joined #salt
06:57 hebz0rl joined #salt
07:01 nafg_ joined #salt
07:01 jhauser joined #salt
07:03 eseyman joined #salt
07:07 Romlok joined #salt
07:08 EvaSDK joined #salt
07:08 EvaSDK joined #salt
07:10 ITChap1 joined #salt
07:14 c10 joined #salt
07:14 nafg joined #salt
07:15 radd joined #salt
07:15 o5k_ joined #salt
07:16 blacked joined #salt
07:17 JlRd joined #salt
07:18 o5k joined #salt
07:19 Auroch joined #salt
07:20 babilen joined #salt
07:20 _JZ_ joined #salt
07:22 jrluis joined #salt
07:23 linjan joined #salt
07:23 JlRd joined #salt
07:25 _JZ_ joined #salt
07:26 dRiN joined #salt
07:30 _JZ_ joined #salt
07:33 Grokzen joined #salt
07:35 cberndt joined #salt
07:42 bhosmer_ joined #salt
07:43 tomh- joined #salt
07:45 CeBe joined #salt
07:48 _JZ_ joined #salt
07:48 yomilk joined #salt
07:51 teogop_ joined #salt
07:53 ITChap joined #salt
07:55 _JZ_ joined #salt
07:56 jeblair joined #salt
07:59 ndrei joined #salt
08:01 blacked joined #salt
08:01 al joined #salt
08:02 jasonrm joined #salt
08:02 _JZ_ joined #salt
08:03 chiui joined #salt
08:05 otter768 joined #salt
08:06 Grokzen joined #salt
08:07 _JZ_ joined #salt
08:09 _JZ_ joined #salt
08:10 Xevian joined #salt
08:11 JlRd joined #salt
08:11 plindgre joined #salt
08:13 numkem_ joined #salt
08:14 _JZ_ joined #salt
08:17 fredvd joined #salt
08:19 plindgre hi guys
08:19 plindgre im having issues with my master log
08:19 jhauser joined #salt
08:19 plindgre salt does not write anything to /var/log/salt/master
08:19 plindgre anyone encountered this before?
08:20 plindgre if i remove the file and run something that should log it only creates the file again but with no content
08:21 jhauser_ joined #salt
08:25 numkem_ joined #salt
08:28 _JZ_ joined #salt
08:28 jakubm mourning
08:32 Romlok plindgre: I've noticed that salt seems to be very economical with its logging under normal operation
08:32 Romlok IME it doesn't actually put anything in the log until something goes wrong
08:32 Furao joined #salt
08:33 plindgre okey
08:33 ktosiek joined #salt
08:33 plindgre but if i want to see what happened when a colleague ran highstate for instance
08:33 plindgre that wont be in the master log?
08:34 Romlok you could check the job list
08:34 blacked joined #salt
08:34 Romlok I think salt keeps a record of the most recently performed activities
08:34 Romlok http://docs.saltstack.com/en/latest/topics/jobs/
08:35 Romlok for example; `salt-run jobs.list_jobs` and then `salt-run jobs.lookup_jid <id>`
08:36 plindgre ah nice
08:36 plindgre thx
08:38 mike25de joined #salt
08:39 mage_ hello, is it OK to have something like that https://dpaste.de/7bA5 ?
08:44 Romlok mage_: shouldn't that be "include: - users.webapps"?
08:48 CeBe1 joined #salt
08:48 mage_ what's the difference ?
08:51 jeblair joined #salt
09:03 pdx7 joined #salt
09:08 CeBe1 joined #salt
09:15 gdm85 are the salt root and pillars root automatically updated whenever I add/remove/change files in them?
09:15 gdm85 I mean, without restarting the salt master
09:16 hemebond gdm85: I don't believe so, no.
09:16 gdm85 hemebond: uhm. ok, thanks. do I need to send a SIGHUP or something to force it?
09:17 hemebond I don't know what a SIGHUP is. I just restart or do a force-reload.
09:17 slav0nic joined #salt
09:18 gdm85 it's about this: https://github.com/saltstack/salt/issues/570
09:18 gdm85 it's a standard signal for this type of things
09:19 hemebond I see, a hangup signal is used to trigger reload.
09:20 tomasfejfar joined #salt
09:20 tomasfejfar Hi everyone :)
09:21 tomasfejfar How do you store data securely in pillars?
09:21 tomasfejfar I don't feel like having root password for example stored in plaintext on the server...
09:22 tomasfejfar Something like EYAML for puppet https://puppetlabs.com/blog/encrypt-your-data-using-hiera-eyaml
09:22 tomasfejfar Same goes for private keys I need to distribute...
09:22 _JZ_ joined #salt
09:23 AndreasLutro tomasfejfar: http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.gpg.html
09:26 tomasfejfar AndreasLutro : thanks
09:27 CeBe1 joined #salt
09:30 N-Mi joined #salt
09:30 N-Mi joined #salt
09:31 mage_ any idea why the following fail: https://dpaste.de/uhgT ?
09:34 bluenemo joined #salt
09:36 keimlink joined #salt
09:36 froztbyte http://docs.saltstack.com/en/latest/ref/states/all/salt.states.service.html isn't very clear on how .running works
09:37 AndreasLutro mage_: you want salt['pillar.get']('users:webapps')
09:37 AndreasLutro pillar.get() is something different
09:37 froztbyte I'm guessing it tries `service foo status` ?
09:37 froztbyte (or the equivalent)
09:37 mage_ AndreasLutro: thanks!
09:37 AndreasLutro froztbyte: I think it just does service foo start, which will do nothing if it's already running
09:37 AndreasLutro but yeah basically
09:41 peters-tx joined #salt
09:41 froztbyte AndreasLutro: that's an incorrect assumption
09:41 froztbyte (there are many *many* broken initscripts in the world)
09:42 AndreasLutro aha, well I assume the salt authors have taken that into account then
09:43 bhosmer joined #salt
09:43 pf_moore joined #salt
09:49 TyrfingMjolnir_ joined #salt
09:50 markm joined #salt
09:52 fbergroth joined #salt
09:58 lothiraldan joined #salt
10:03 jeblair joined #salt
10:06 otter768 joined #salt
10:06 mage_ AndreasLutro: what's the difference between salt['pillar.get']('users:webapps') and pillar.get('users:webapps') ?
10:07 mage_ I checked on http://clinta.github.io/Salt-User-Management/ and it uses pillar.get() .. is this wrong ?
10:07 hemebond mage_: pillar is just a dict
10:07 hemebond So your "something:something" won't work.
10:08 hemebond Only salt['pillar.get']() understands the colons.
10:08 hemebond You could use pillar['something']['something']
10:08 mage_ ah, that make sense ..!
10:09 mage_ so it's best to always use salt['pillar.get'](...) in my state files ?
10:09 xnaveira joined #salt
10:09 hemebond Yes
10:09 mage_ thanks
10:10 Romlok personally,  I'm a proponent of using pillar['foo']['bar']
10:10 hemebond Romlok: What if you need a fallback?
10:10 Romlok unless you're writing a reusable/magic formula, failing hard when you're missing a pillar value is probably safer IMO
10:12 xnaveira hi everyone, I was wondering, what's the best way to ensure that the minions are running the highstate periodically?
10:13 hemebond xnaveira: Would http://docs.saltstack.com/en/latest/topics/jobs/schedule.html be useful for that?
10:15 xnaveira looks like what I was looking for, ty hemebond !
10:17 RobbieAB|laptop joined #salt
10:21 TyrfingMjolnir joined #salt
10:24 giantlock joined #salt
10:25 penguinpowernz joined #salt
10:25 aberdine is there a good practice for managing salt states and pillars? Eg .. oh Gitpillar... Hmm
10:26 aberdine is there something similar for states?
10:28 hemebond aberdine: Putting individual state directories into a git repository (like the formulas) is probably helpful
10:29 krelo joined #salt
10:30 aberdine yes, just looking at those. how to manage the main tree? submodules?
10:32 hemebond You mean the /srv/salt/ directory? I probably wouldn't put anything into source control except the top.sls and such.
10:32 hemebond None of the sub-directories.
10:32 aberdine How do the formula get put there?
10:32 hemebond You put them there.
10:33 aberdine manually?
10:33 hemebond Forumulas are a little different as they will be in their own directory.
10:33 hemebond But your states will be in something like /srv/salt/
10:33 hemebond And you just create a repo for each of those states.
10:34 aberdine I'm missing something in my understanding I think
10:36 joehh joined #salt
10:36 aberdine gitfs, perhaps
10:36 aberdine what else lives in /srv/states?
10:37 aberdine other than top.sls?
10:37 hemebond /srv/states isn't a default directory.
10:37 hemebond By default it's /srv/salt
10:37 aberdine Yes, sorry, that's the one
10:38 hemebond so /srv/salt is where your top.sls lives along with all your states.
10:38 hemebond /srv/formulas will contain the formulas you download/checkout/clone and are like generic states for you to use.
10:38 dendazen joined #salt
10:39 hemebond But they will behave the same as your /srv/salt/ states
10:40 aberdine I
10:40 hemebond So, say you wanted a custom state for deploying nginx, and you couldn't or didn't want to use the nginx formula for it. You'd create a new repo /srv/salt/nginx
10:40 dkrae joined #salt
10:40 hemebond Then write your state stuff and files in that directory and commit them.
10:40 hemebond Now your nginx state is source controlled.
10:40 aberdine or use gitfs or similar
10:40 aberdine ok
10:41 aberdine I think I'm on my way again - thanks hemebond
10:41 hemebond Good luck :-)
10:43 aberdine Thanks :)
10:45 rjc joined #salt
10:50 drawsmcgraw joined #salt
10:50 ndrei joined #salt
10:51 echo joined #salt
10:56 bluenemo joined #salt
10:56 bluenemo joined #salt
10:59 salt-n00b joined #salt
11:09 elfixit1 joined #salt
11:13 bhosmer joined #salt
11:13 mage_ is there a way to see what's the generated sls will looks like ?
11:16 c10 i'm having trouble locating the master configuration file for salt installed on a mac with homebrew. any ideas where that might be?
11:19 mage_ ok, looks like state.show_sls does the job :)
11:20 aberdine what methods exist to call salt modules other than cli?
11:22 evle1 joined #salt
11:25 scoates_ joined #salt
11:27 eightyeight joined #salt
11:31 jonatas_oliveira joined #salt
11:33 yuhl_work_ joined #salt
11:36 drawsmcgraw joined #salt
11:36 lothiraldan joined #salt
11:40 arif-ali joined #salt
11:42 itamar joined #salt
11:43 JDiPierro joined #salt
11:43 Guest64210 Hi all,
11:43 Guest64210 trying to install salt-minion on rhel 7 via epel and it fails stating that zmq is missing
11:44 hemebond aberdine: module.run ?
11:46 aberdine Guest64210 - I think you need the COPR repo - see the install guide
11:47 Guest64210 thanks!
11:47 aberdine hemebond - oooo. that helps! Thanks again!
11:49 fr0de joined #salt
11:52 amcorreia joined #salt
11:57 bhosmer joined #salt
11:58 ndrei joined #salt
12:05 radd joined #salt
12:05 mike25de hi guys ...  when running a state:
12:05 mike25de root:
12:05 mike25de user.present:
12:05 mike25de - shell: /bin/bash
12:05 mike25de - password: 'somepass'
12:05 mike25de i also get a change :  Comment:   The following user attributes are set to be changed: groups: []
12:06 mike25de the change is actually adding root user to root group - but that is not part of my state. Is that normal?
12:07 otter768 joined #salt
12:09 AndreasLutro mike25de: when a user is created, on most systems the group is created automatically, that bit is usually out of salt's control unless you add a group.absent state right after it
12:09 mike25de but the root user is already there
12:09 AndreasLutro if you run the state twice the user+group will be created the first time, then on the second run the group will be removed (I think)
12:09 mike25de is not created
12:10 AndreasLutro aha, not sure then. maybe you're not allowed to remove root from the root group
12:10 codehotter joined #salt
12:10 mike25de hmm .. let me add group.present root
12:10 codehotter Is it possible to have a 'test' account in Amazon EC2 and a 'production' account, so that I can test changes to my configuration before deploying to production?
12:10 codehotter How do you test configuration changes usually? In a 'production like environment'?
12:11 codehotter How do I easily switch between test and production - in a manner of minimum oops?
12:11 codehotter I definitely want to minimize 'oops'
12:12 codehotter Maybe two salt masters, one salt master for test and one salt master for production? They work from the same git backend, but have different cloud information configured?
12:13 codehotter Or... I probably want a separate repository or branch
12:14 codehotter "Branches become fileserver environments" hmm...?
12:15 tomasfejfar aberdine: we version-control the whole /srv/salt directory that holds custom states. It's checked out using salt.master state and forcibly checked out in post-receive hook. In there we have /nginx-custom that has include: -nginx inside and that one is in topfile. That gives us the option to use pre-made formulas and still have custom changes to it.
12:17 rdas joined #salt
12:18 denys joined #salt
12:19 aquassaut joined #salt
12:20 markm_ joined #salt
12:21 codehotter tomasfejfar: Oh, you're not using git based fileserver backends? That must be for a reason...
12:21 codehotter I was just intending to go and configure that...
12:22 tomasfejfar codehotter: reason is the gitfs is cached
12:22 tomasfejfar it's not ideal for development
12:22 codehotter There's no way to turn that off?
12:23 ITChap joined #salt
12:24 tomasfejfar You can update on push if your git server is minion itself as per http://docs.saltstack.com/en/latest/topics/tutorials/gitfs.html#refreshing-gitfs-upon-push
12:24 tomasfejfar But we started with salt pre 0.16 where the whole gitfs was really buggy
12:25 codehotter tomasfejfar: given your experiences, if you were starting right now, would you base it on gitfs backend or on fileserver backend + checkouts?
12:25 codehotter tomasfejfar: I'm trying to figure out what I should do
12:25 tomasfejfar gitfs would be the proper way
12:26 tomasfejfar On the other hand I like that I am in total control of the main /srv/salt dir with fileserver+checkout
12:26 codehotter Here's how I currently envision the development process: 2 machines, on the test server, it'/srv/salt
12:26 codehotter and /srv/salt is in version control. The test server manages an amazon aws 'test' account
12:26 fr0de joined #salt
12:27 codehotter when I think it's working, I commit and push, and it goes to git based backend on the real master server, who deploys it to production
12:27 codehotter does that process make sense? What could go wrong?
12:28 tomasfejfar That's what I've been using
12:29 codehotter tomasfejfar: so you have 2 master servers as well?
12:29 tomasfejfar What will probably go wrong unless you don't re-create the test environment every time is that something will get out of sync
12:29 tomasfejfar i.e. when I use dotdeb.org
12:29 tomasfejfar they only have the latest version of everything
12:29 codehotter so the test environment will probably get recreated often, but production environment doesn't, so things get out of sync?
12:30 tomasfejfar So when I install nginx on testing and test lot of stuff i get 1.5 nginx for example
12:30 codehotter wow, OK, that's an important one to keep in mind.
12:30 tomasfejfar It takes a month to finish the work and deploy
12:30 tomasfejfar When I run the pkg.installed on production only nginx 1.6 is available in dotdeb
12:31 tomasfejfar So I either have locked the version in salt state and the state fails
12:31 codehotter ...or you get an untested version
12:31 tomasfejfar Or I haven't and I end up with 1.6
12:31 tomasfejfar Exactly
12:31 codehotter right
12:31 markm_ joined #salt
12:31 tomasfejfar That's the biggest problem we encounter
12:31 tomasfejfar Practically that you don't control all the pieces of the test env
12:32 codehotter I have a local mirror of all packages we install
12:32 codehotter all servers talk to the local mirror
12:32 tomasfejfar Very good :)
12:32 tomasfejfar Lucky man
12:32 _mel_ joined #salt
12:33 tomasfejfar But the main idea is that the production servers took different path to get to the same state
12:33 tomasfejfar (for example you created a file in conf.d)
12:33 tomasfejfar Than the file is no longer in use and you forget to ensure it's removed in the state
12:33 tomasfejfar On production the file is there but on the newly recreated dev stack it's not as it's no longer in the state file :)
12:34 codehotter That sounds like a real problem. What's the solution?
12:34 codehotter yea I know "don't forget to remove it in the salt state"
12:34 codehotter but we're human
12:34 codehotter how to minimize 'oops'
12:34 julienlavergne joined #salt
12:34 tomasfejfar Don't forget http://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.absent when you stop using a file :)
12:35 PI-Lloyd set to file.absent for X amount of time, then delete the state... if you forget to delete the state it doesn't really matter
12:35 tomasfejfar There is no way IMO
12:35 codehotter What if we put all configuration files on the machine in version control?
12:35 tomasfejfar *no other way
12:35 tomasfejfar You don't need salt then... do you? :)
12:35 ITChap joined #salt
12:35 tomasfejfar You just checkout the whole machine from git :)
12:35 tomasfejfar (the important parts)
12:36 codehotter Let's say salt is the 'source code' - and the configuration checkout is the 'binary' that gets built from the source code
12:36 tmclaugh[work] joined #salt
12:36 codehotter Then if dev and prod are in sync, my new version of the configuration checkout should fast forward on prod, but if they are out of sync, it won't
12:36 jrluis joined #salt
12:36 julienlavergne hello guys
12:37 __mel joined #salt
12:38 _mel_ joined #salt
12:40 julienlavergne I am testing salt to operate with aws resources; in the documentation corresponding to the lastc release 2014.7.5), boto_vpc salt module appears but seems to be not available in the release … is it strange ? boto_secgroup exists but not idempotent… another example ?
12:40 tomasfejfar codehotter: it's hard to make them 1:1
12:40 tomasfejfar that's the main problem (at least for me)
12:41 AndreasLutro julienlavergne: do you mean module or state?
12:41 codehotter tomasfejfar: For example?
12:41 julienlavergne State 'boto_vpc.present'
12:41 codehotter Why shouldn't they be 1:1?
12:41 julienlavergne @AndreasLutro: State 'boto_vpc.present'
12:41 AndreasLutro julienlavergne: the documentation is always from the newest version, that state won't be present until the next major version (it's currently only available in the develop branch)
12:41 tomasfejfar codehotter: it just happens :)
12:41 codehotter tomasfejfar: how so?
12:42 AndreasLutro julienlavergne: if the documentation doesn't reflect this you may want to open an issue or make a pull request
12:42 tomasfejfar You will never replay the full way how prod was created when re-creating the dev
12:42 tomasfejfar And yu don't version all the files that get created with pkgs
12:42 codehotter OK, what if I periodically destroy production instances and recreate them?
12:42 cmcmacken joined #salt
12:42 julienlavergne @AndreasLutro: thx; any repo to get nightly packages for ubuntu ?
12:43 AndreasLutro julienlavergne: not that I'm aware of, you can git clone and pip install -e
12:44 markm__ joined #salt
12:44 julienlavergne @AndreasLutro: thx
12:44 flyboy82 joined #salt
12:44 tomasfejfar codehotter: that would work.
12:44 tomasfejfar Doesn't work in my scenario though :(
12:45 codehotter tomasfejfar: why not? (let me know if I ask too many questions)
12:45 tomasfejfar codehotter: becuse of data migration and downtime it would cause
12:46 codehotter OK, so let's say I have a couple of 'data' instances, they are very simple, change very rarely, every change is code reviewed 3 times, etc. Those are 'evolving'. And all the rest I destroy and recreate periodically. Would that work?
12:47 n00b joined #salt
12:48 Furao joined #salt
12:49 johndeo joined #salt
12:51 subsignal joined #salt
12:51 johndeo Im trying to install https://www.meinbergglobal.com/download/ntp/windows/ntp-4.2.8-win32-setup.exe, which has a silent installer file with options, how do you set up this installer file in the sls?
12:52 hemebond johndeo: http://docs.saltstack.com/en/latest/topics/windows/windows-package-manager.html
12:54 JDiPierro joined #salt
12:54 markm__ joined #salt
12:55 johndeo looked at a few examples here: https://github.com/saltstack/salt-winrepo/blob/2d9b0f67a2dd717469474c7bde929664ad53bb73/pdfcreator.sls for what I mean
12:55 dendazen joined #salt
12:56 johndeo hemebond: already looked there, but not what I mean.
12:56 hemebond johndeo: You want to know how to use a state file to deploy a Windows application?
12:56 johndeo the LOADINF part is a good example.
12:56 FRANK_T joined #salt
12:57 markm_ joined #salt
12:57 JDiPierro joined #salt
12:57 hemebond johndeo: The install_flags depend entirely on the software you're installing.
12:57 toanju joined #salt
12:57 FRANK_T I am able to target specific minion using {% if grains['host'] == 'caliber13' %} my question is how can I target groups of minions?
12:58 hemebond FRANK_T: http://docs.saltstack.com/en/latest/topics/targeting/nodegroups.html
12:58 FRANK_T hemebond I am talking inside the YALM
12:58 FRANK_T using if and else
12:59 AndreasLutro if host in ['host1', 'host2'] is a dirty solution
12:59 AndreasLutro but I'm sure there is some salt function you can use to match nodegroups
12:59 hemebond FRANK_T: You would apply apply the state, via top.sls, using the node group.
12:59 hemebond That way your state doesn't need host matching.
13:00 hemebond Unless it's for a small deployment and you don't mind your state being bound to your servers.
13:00 FRANK_T yes but inside my state I have multiples if and else I have 4 clusters  if cluster A than do if cluster b than do c
13:00 FRANK_T I have 200 Nodes it is not big
13:01 hemebond How are your clusters defined?
13:01 FRANK_T defined?
13:01 hemebond Do the minions themselves know what cluster they are in?
13:01 FRANK_T ok
13:01 FRANK_T I create a nodegroup per cluster
13:02 FRANK_T created*
13:02 FRANK_T group1: 'sc10*.domain.com'
13:02 ndrei joined #salt
13:03 FRANK_T I have 3 cluster with 3 groups
13:03 hemebond What I would probably do is create a Pillar setting for the cluster. Then check that Pillar value in the state.
13:03 FRANK_T Ok i guess I will have to learn Pillar :)
13:04 FRANK_T Thank you.
13:04 hemebond Sorry, not for the cluster, but for the servers.
13:04 jcockhren cluster of servers?
13:04 jcockhren I kid
13:04 hemebond Similar to using Grains, but this way the minions don't need to know what cluster they're in.
13:05 hemebond Though a grain might be easier.
13:05 hemebond Or make more sense, depending on what it is you're actually doing.
13:05 FRANK_T hemebond I am using grains now
13:06 FRANK_T {% if grains['host'] == 'caliber13' %}
13:06 hemebond A custom grain
13:06 FRANK_T but I have caliber[01-40]
13:06 hemebond {% if salt['grains.get']('cluster_id', 0) %}
13:06 FRANK_T I wan to target 40 nodes
13:06 FRANK_T want*
13:07 FRANK_T Can I use Regular expression?
13:07 KoFFiE sure you can
13:07 hemebond In a Jinja2 template? Not that I know of.
13:08 FRANK_T {% if grains['host'] == 'caliber[01-40]' %}
13:08 FRANK_T something like that
13:08 hemebond No
13:08 hemebond Use a custom Grain or a Pillar to put servers into a cluster.
13:08 hemebond Then reference the cluster IDs in the state.
13:08 FeatherKing joined #salt
13:08 jdesilet joined #salt
13:08 FRANK_T ok let me go and read about pillar
13:10 _prime_ joined #salt
13:14 fusionx86 joined #salt
13:16 FRANK_T hmhbond should I create a Pillar per cluster?
13:16 FRANK_T hemebond
13:17 kawa2014 joined #salt
13:18 lothiraldan joined #salt
13:18 johndeo hemebond: no, let's say a windows installer comes with a silent install file, like mine with meinberg NTP, so you can do -f silentinstallfile.ini. How to configure this silentinstallfile.ini and where to put it on the saltmaster filesystem?
13:20 markm_ joined #salt
13:24 llb joined #salt
13:26 bhosmer joined #salt
13:28 racooper joined #salt
13:29 bhosmer joined #salt
13:29 markm__ joined #salt
13:31 cpowell joined #salt
13:32 bhosmer_ joined #salt
13:33 Tecnico1931 joined #salt
13:34 hasues joined #salt
13:34 hasues left #salt
13:38 echo joined #salt
13:42 sroegner joined #salt
13:43 JDiPierro joined #salt
13:45 perfectsine joined #salt
13:46 bhosmer joined #salt
13:46 Tyrm joined #salt
13:46 markm_ joined #salt
13:47 murrdoc joined #salt
13:50 speedlight joined #salt
13:50 mapu joined #salt
13:52 rojem joined #salt
13:54 Guest15 joined #salt
13:56 ilbot3 joined #salt
13:56 Topic for #salt is now Welcome to #salt | 2014.7.5 is the latest | Please use https://gist.github.com for code, don't paste directly into the channel | Please be patient when asking questions as we are volunteers and may not have immediate answers | Channel logs are available at http://irclog.perlgeek.de/salt/
13:57 losh joined #salt
13:58 bhosmer_ joined #salt
13:58 mikeywaites joined #salt
13:58 mikeywaites Hey guys, is there a specific channel for salt cloud? or can i ask way in here?
13:59 amcorreia joined #salt
14:00 gladiatr mikeywaites: you’re in the right place
14:00 clmsy joined #salt
14:01 timoguin joined #salt
14:02 mikeywaites I am getting an error when bringing up new instances on ubuntu 14.04 amis.  But it doesnt happen reliably
14:02 mikeywaites let me just gist it
14:02 FRANK_T any idea with I am getting this error  https://www.refheap.com/050c0c25bcd2963eaa8b1301d
14:03 mikeywaites https://gist.github.com/mikeywaites/6bfb713f292d05c4c334
14:03 FRANK_T https://www.refheap.com/1649d15e0c2de834c66394d40 this is the block
14:03 mikeywaites seems like its more of an issue with bootstrap than salt-cloud
14:03 mikeywaites but i cant quite figure out how to kill it.
14:03 andrew_v joined #salt
14:03 ndrei joined #salt
14:03 mikeywaites as i say, it happens maybe 2-3 out of 5 runs
14:05 TheOtherDude joined #salt
14:05 SeeDickCode joined #salt
14:07 mpanetta joined #salt
14:08 otter768 joined #salt
14:09 mikeywaites I've tried upgrading salt-cloud as well with salt-cloud -u and get the following error
14:09 mikeywaites https://gist.github.com/mikeywaites/6bfb713f292d05c4c334#file-gistfile2-txt
14:11 JDiPierro joined #salt
14:14 mage_ it's only me or the salt doc is very "disorganized" ..?
14:14 mage_ it's quite difficult to follow
14:16 codehotter mage_: common complaint about salt
14:16 mage_ ok .. :)
14:17 ek6 codehotter: how many open source projects anywhere near salt's size where that is not a common complaint
14:17 mage_ the doc is OK, just disorganized
14:17 ek6 not defending the docs....they have cost me as many hours as they have saved
14:17 codehotter ek6: salt is actually well documented, I just can't really find what I'm looking for. I'm really thankful for pointers on IRC
14:18 codehotter and the docs only make sense with a certain mental model of how salt works, that only slowly builds up as you get more experience
14:18 codehotter curse of knowledge
14:18 ek6 im waiting for someone to stick iggy into a wine press and hope for docs to come out the other side myself
14:19 timoguin joined #salt
14:19 ek6 codehotter: doc'ing salt imho is like doc'ing a hammer..... things it was built for...things you can do with it...things you shouldnt do for the safety of yourself and others
14:19 iggy all they'd get out is vodka
14:20 pdayton joined #salt
14:21 iggy SSE hired a docs guy a while back... he must be working on docs for the gui
14:21 Furao joined #salt
14:22 ek6 even if he wasnt there would be tons of cleanup in the 'dont swing the hammer around your head' doc variety to keep them busy
14:27 sandah joined #salt
14:27 c10 joined #salt
14:31 rhodgin joined #salt
14:32 elfixit joined #salt
14:33 jalbretsen joined #salt
14:35 murrdoc joined #salt
14:36 julienlavergne salt ec2 states make me crazy :p ; somebody test them?
14:37 toastedpenguin joined #salt
14:39 Brew joined #salt
14:39 codehotter julienlavergne: Why, what's making you crazy?
14:39 julienlavergne boto_XXXX states;
14:40 manfred iggy:  https://www.youtube.com/watch?v=bHCQA1EJiC0
14:40 codehotter julienlavergne: Can you be a little more specific about the problems you're experiencing?
14:40 gdm85 is it ok to quote the before/after of file.sed with double quotes if they contain single quotes in the patterns?
14:44 julienlavergne @codehotter: Comment: Security group myapp created. myapp security group configuration could not be retrieved.
14:44 ek6 gdm85: i think i remember doing that..but all my file.sed is long gone in favor of replace
14:44 julienlavergne boto_secgroup doesn't work
14:44 gdm85 ek6: there is replace?! wow.
14:47 dendazen i have this match http://pastebin.com/Wrfh8JDJ
14:48 dendazen it matches criteria even though my hostname is demo1.sec1.blha.com
14:49 kawa2014 joined #salt
14:51 solidsnack joined #salt
14:53 julienlavergne @codehotter maybe terraform seems another solution to spec and build aws infra
14:54 anotherZero joined #salt
14:55 evilrob joined #salt
14:58 rideh joined #salt
14:59 slav0nic joined #salt
14:59 slav0nic joined #salt
14:59 murrdoc dendazen:  that looks liek it would match a lot of things
15:00 dendazen well i have ‘and not'
15:00 dendazen for demo
15:00 dendazen and my hostname is demo1
15:00 ghoz joined #salt
15:00 dendazen that match should fail, no?
15:03 giantlock joined #salt
15:03 ghoz hi ...
15:03 rm_jorge joined #salt
15:03 ghoz new salt user here, so the question is probably dumb.
15:04 ek6 ghoz: because we dont like the metric system
15:04 ghoz using jinja templating for a state, is it normal that I cant' acces a variable that is set inside a for loop  ?
15:05 murrdoc true Or true Or true AND false is still true dendazen
15:05 dendazen one sec
15:05 dendazen what if i add  parentheses for ‘or’?
15:06 murrdoc try it out
15:06 murrdoc cos then its (true Or false Or false) AND not false will return false
15:06 murrdoc as u expect it to
15:08 dendazen Thanks.
15:09 dendazen it did work, indeed.
15:09 bhosmer_ joined #salt
15:09 rojem joined #salt
15:11 scbunn joined #salt
15:14 siciliansun joined #salt
15:15 clintberry joined #salt
15:17 giantlock joined #salt
15:17 Auroch joined #salt
15:18 Guest70 joined #salt
15:21 JDiPierro joined #salt
15:29 debian112 joined #salt
15:33 ghoz ok so apparently it is impossible to acces the inner variable. found an  ugly hack with an array.append()...
15:33 speedlight exit
15:34 speedlight joined #salt
15:34 iggy ghoz: that's pretty much any programming language (jinja is based on python, so it follows it's rules in this regard)
15:36 lictor36 joined #salt
15:36 conan_the_destro joined #salt
15:37 SeeDickCode joined #salt
15:40 speedlight joined #salt
15:43 ktosiek joined #salt
15:43 subsigna_ joined #salt
15:47 ccarney_ROCC joined #salt
15:48 mohae joined #salt
15:50 mohae joined #salt
15:50 mikeywaites Anyone know if its possible to provide the availability zone to salt-cloud when using EC2 at runtime?
15:51 iggy profiles/providers support inheritance 1 level deep
15:51 ccarney_ROCC left #salt
15:52 iggy so you could make a base and then stack some on top of that that just changed the az
15:53 mikeywaites iggy:  is inheritance performed in the standard yaml way like
15:53 mikeywaites foo_bar: &foo_bar
15:53 mikeywaites baz:
15:53 mikeywaites <<: foo_bar
15:54 iggy no, it's specific to the salt-cloud config (hence it only working 1 level deep)
15:54 ALLmightySPIFF joined #salt
15:55 aparsons joined #salt
15:59 bhosmer joined #salt
15:59 JDiPierro joined #salt
16:01 rideh_ joined #salt
16:03 ajw0100 joined #salt
16:04 ghoz iggy: in most laguage you can define a variable ouside a loop, change it inside the loop and access the changed variable ...
16:04 iggy oh, you mean like that... wasn't clear, sorry
16:05 viq joined #salt
16:07 ghoz anyway... found a workaround... thanks
16:07 tmclaugh[work] joined #salt
16:09 otter768 joined #salt
16:14 hemphill joined #salt
16:15 rhand joined #salt
16:15 bhosmer joined #salt
16:16 sevalind joined #salt
16:16 fbergroth joined #salt
16:16 tmclaugh[work] joined #salt
16:18 sevalind I'm trying to set up a masterless salt machine for testing out some changes. I've set up the minion to look locally and set it to the proper file root. How can I run a single module as I would with salt 'machinename' module.name?
16:18 murrdoc salt-call —local module.name 'needbetterdocs'
16:18 lictor36 joined #salt
16:19 KyleG joined #salt
16:19 KyleG joined #salt
16:20 sevalind murrdoc: It's telling me "function module.name is not available"
16:20 murrdoc ouch
16:20 murrdoc salt-call —local sys.doc module
16:20 murrdoc and then check logs
16:21 anotherZero joined #salt
16:21 sevalind That worked. Nothing in the minion logs
16:22 ek6 murrdoc: that would be   salt-call --local cmd.run 'echo " needs better docs"'
16:23 murrdoc does it show u the module docs ?
16:23 murrdoc ek6:  HAH
16:24 sevalind murrdoc: it just shows local: --------
16:24 mschiff I have a very strange error "TypeError: string indices must be integers, not str" on 2014.7.5 in file.managed iterating over a pillar list via jinja
16:24 sevalind note: I don't think I have any docs written for my modules
16:24 babilen mschiff: known bug
16:25 mschiff babilen: I read something about it.. for me when the pillar data (filenames to be managed) contain a slash (path+filename) it works
16:25 babilen mschiff: https://github.com/saltstack/salt/issues/21480
16:26 babilen ah, that might then be something else
16:26 mschiff yes, Its not in highstate for me
16:26 mschiff its 100% reproducable and a in salt or salt-call
16:26 murrdoc in your yaml somewhere you have a number as a string
16:26 babilen Could you give an example of data that works and of data that doesn't?
16:26 siciliansun1 joined #salt
16:27 babilen (on http://refheap.com for example)
16:27 mschiff This works: repos.conf/gentoo.conf
16:27 mschiff This does not: package.accept_keywords
16:28 babilen As argument to what?
16:28 babilen oh, brb
16:28 sevalind murrdoc: I think what I'm looking for is `salt-call state.sls module.name`
16:29 tomasfejfar joined #salt
16:29 murrdoc ah then its not module.name
16:29 fusionx8_ joined #salt
16:29 murrdoc its like path.to.state
16:29 murrdoc sorry i misunderstood your question
16:30 sevalind murrdoc: no worries
16:30 mschiff babilen: https://www.refheap.com/100207
16:30 mschiff murrdoc: ^^
16:30 sevalind So now a different questions, can you have a state like module.name.foo? and call it using state.sls?
16:34 ek6 sevalind: sure but it would just be a name....or in example case  /srv/salt/module/name/foo.sls   would have no impact or relation to the module your 'naming'
16:35 ckao joined #salt
16:35 murrdoc mschiff:  u have tried quoting the pillars ?
16:35 murrdoc like "package.use/package.use2"
16:36 mschiff yes just tried, makes not difference
16:36 sevalind ah so it'd have to be another directory? My current stuff (that I'm in the process of re-organizing and testing) is like this: https://www.refheap.com/100208
16:36 mschiff those with "/" in it are working well
16:37 mschiff its just those values (files) that have just a filename are not working
16:37 smcquay joined #salt
16:39 patrek joined #salt
16:40 iggy sevalind: states != modules
16:40 ek6 sevalind: so just my 1cent id never name a state directory..especially at the top level module  although i think it would only actually be a problem if it was named _modules   there is no reason that i can see that anything would be named module or pkgs
16:40 iggy I think it's a matter of poor terminology
16:40 ek6 savalind: that was never name a state directory module
16:41 theologian joined #salt
16:41 sevalind To say I'm pretty confused is an understatement
16:42 ek6 sigh....annoyed that murrdoc already beat me to the good 'need better docs' joke
16:42 MatthewsFace joined #salt
16:42 sevalind I feel like in order for me to actually understand salt properly I'd need to take a class, but they're too expensive for my company to pay for
16:43 iggy you don't... just start doing stuff
16:43 * froztbyte reads up
16:43 iggy just don't expect to know everything in the first week
16:43 sevalind iggy: I've been using salt for ~2 years
16:44 sevalind and I still basically don't know anything. I can get it to build my machines, but I'm pretty certain I'm doing it terribly wrong
16:44 iggy regularly? or like 5 minutes a week?
16:44 ktosiek joined #salt
16:44 froztbyte sevalind: I came from a very puppet heavy background, and the first couple of interactions with salt felt like the naming was really awkward
16:44 iggy it is really awkward
16:44 froztbyte sevalind: try to run the tutorial, in order
16:45 froztbyte You'll probably get it in an hour or two, if that long
16:45 murrdoc mschiff:  this stinks can u try https://www.refheap.com/100209
16:45 ek6 imho one of the issues is that going from just remote command execution with modules to states is a bigger step/jump then people assume
16:46 iggy "wait for the new version of the docs"
16:46 sevalind froztbyte: I'm pretty certain I've already done that... I've had a salt master building machines with "states" or "modules" or whathaveyou since the first week
16:46 froztbyte iggy: "state 'statehere' in SLS 'statehere' is $someproblem" is both totally obvious and something that's caught me a couple of times already.
16:46 froztbyte Not quite sure how to fix that
16:47 froztbyte sevalind: ah
16:47 iggy sevalind: modules are what you run on the command line (salt '*' test.ping; salt '*' network.get_hostname) states are what you put in your top file to run as a highstate (and are also runnable via salt '*' state.sls foo)
16:47 iggy in that particular case, state.sls is a module that applies states
16:48 sevalind froztbyte: My current project is to reorganize/clean up our current stuff
16:48 iggy clear?
16:48 sevalind Gotcha, I see now
16:48 iggy lol
16:48 sevalind I was improperly referring to states as modules
16:48 synestine joined #salt
16:48 iggy 12:40 < iggy> I think it's a matter of poor terminology
16:48 iggy it gets worse :/
16:48 sevalind heh
16:49 mschiff murrdoc: with "ID: etc-portage-file-package-accept_keywords" its still failing with the same error...
16:49 iggy what do you call a section of a state sls file?
16:49 murrdoc mschiff:  well shit
16:49 iggy most of us say stanza
16:49 iggy but I don't think it's ever really mentioned in the docs
16:50 ek6 iggy: well in addition to that when your writing states you want to be looking at http://docs.saltstack.com/en/latest/ref/states/all/ and not just trying to put in module name/functions into sls files
16:50 spookah joined #salt
16:50 prwilson joined #salt
16:50 sevalind Ok, so I guess my current question is with the directory structure of https://www.refheap.com/100208 how do I include the state pkgs.dev.sls when referencing it in pkgs.sls?
16:50 prwilson_ joined #salt
16:51 andrew_v joined #salt
16:51 iggy you can't?
16:51 iggy don't use periods in file names
16:51 iggy because... python
16:52 murrdoc yeah its kinda ghettho
16:52 mschiff murrdoc: when I write "- source: salt://portage/files/./{{ file }}" it works!
16:52 murrdoc but i think in this case its tripping up on the source
16:52 murrdoc ah damnit thats what i was saying
16:52 mschiff (added "./")
16:52 sevalind hrm, ok. I guess I misunderstood how salt references different state names
16:52 iggy and yeah, definitely don't use a top level directory of module (don't know if you just have that for demonstration purposed or not, but that'll confuse the shit out of anyone... and maybe salt/python too)
16:53 sevalind iggy: It's not called module, sorry. It was for demonstration before I knew the correct terminology
16:53 sdm24 joined #salt
16:53 iggy use _'s
16:53 iggy -'s are a bad idea too
16:53 murrdoc -s dont work
16:53 murrdoc only _s work
16:53 murrdoc is hardcoded yes
16:54 mschiff murrdoc: and do you have any idea what might cause this? for me I have a "hotfix" now, but I think this might be a bug somewhere, right?
16:54 sevalind so I'd rename the files to something like pkgs_dev.sls and then do include: - statename.pkgs_dev
16:54 meylor joined #salt
16:56 sevalind Unfortunately I need to run to a meeting, right when I'm finally starting to understand some stuff. Thanks a ton for your help and patience so far guys
17:00 sdm24 Is there a state command to remove a single line (not knowing which line number) from a file?
17:00 sdm24 I have a state that runs on the nameserver minion to print the names of all minions not on the DNS nameserver, using mine. If a minion is then added to the DNS nameserver, I want its name removed from the list
17:01 rypeck joined #salt
17:01 murrdoc this is salt
17:01 murrdoc there are OPTIONS
17:01 murrdoc file.replace
17:01 sdm24 One way I was thinking was using file.replace with text blank, but won't that just leave an empty line?
17:01 murrdoc file.uncomment ?
17:01 murrdoc not that wont work
17:02 murrdoc file.comment ?
17:02 sdm24 I guess I could do file.comment
17:02 sdm24 thanks, I'll try that out
17:02 mschiff murrdoc: with test=1 it looked good. But without I now get similar error like "Comment: Source file salt://portage/files/./repos.conf/gentoo.conf not found" for every file
17:03 aparsons joined #salt
17:04 big_rob joined #salt
17:04 solidsnack joined #salt
17:06 murrdoc k looks like the source files need to be not funky named
17:06 julienlavergne joined #salt
17:06 murrdoc ?
17:06 murrdoc this might be a bug
17:06 murrdoc open an issue
17:08 kermit joined #salt
17:10 adelcast joined #salt
17:13 UtahDave joined #salt
17:15 linjan joined #salt
17:17 mschiff murrdoc: ok, will do it. Funny detail: when I rename the source file to package.use.conf and write {{ file }}.conf into the state, it works...
17:18 mschiff {{ file }}.conf only in source: that is, so the dest file is still correct
17:18 stoogenmeyer_ joined #salt
17:18 sevalind joined #salt
17:18 bhosmer joined #salt
17:19 murrdoc 0_o
17:20 mschiff I will open an issue in a few hours because I have to leave now. Many thanks for helping murrdoc
17:20 murrdoc i understand salt://{{file}} works
17:20 murrdoc cos i think recently it started supporting relative paths
17:21 CeBe1 joined #salt
17:21 mschiff something must be screwd here ;)
17:21 ndrei joined #salt
17:21 murrdoc maybe it needs the .conf to handle file mime type guessing
17:21 murrdoc glad it worked out
17:22 rideh joined #salt
17:22 fusionx86 joined #salt
17:26 julienlavergne saltstack can't serve as aws provider to build IaC; it's too young
17:28 ajw0100 joined #salt
17:31 iggy file issues for any perceived shortcomings
17:33 FeatherKing joined #salt
17:33 solidsnack joined #salt
17:34 ageorgop joined #salt
17:37 mapu joined #salt
17:38 theologian joined #salt
17:44 baweaver joined #salt
17:45 denys joined #salt
17:47 blacked joined #salt
17:48 stoogenmeyer_ joined #salt
17:49 tmclaugh[work] joined #salt
17:49 stanchan joined #salt
17:49 echo joined #salt
17:50 fusionx86 joined #salt
17:51 dendazen can someone please take a look i have this jinja template http://pastebin.com/Ztyha1CG and i get this error:  Unable to manage file: Jinja syntax error: unexpected end of template, expected 'block_end'.; line 83
17:51 c10 joined #salt
17:51 dendazen is it possible in jinja have nested if?
17:52 sdm24 log isn't closed at the top?
17:52 druonysuse joined #salt
17:52 druonysuse joined #salt
17:53 sdm24 maybe I'm reading it wrong, but it looks like { after log doesn't have a matching }
17:54 dendazen but it should be irrelevant, no?
17:55 meylor joined #salt
17:55 dendazen can be any arbitrary text, no?
17:55 sdm24 it might cause jinja errors because of the uneven brackets. I don't know for sure though
17:56 krelo joined #salt
17:56 dendazen like in puppet for the same policy i have http://pastebin.com/MYScgxs7
17:56 dendazen but that is erb not jinja.
17:56 dendazen maybe you are right.
17:57 dendazen }; should be before endif
17:58 iggy probably need some {% raw %} {% endraw %} around the {'s
17:58 iggy (or {{ '{' }} )
17:59 sdm24 Also, I'm not sure with jinja if you are allowed to do this, but it looks like you use multiple block string types ('{}' and '<>' ) together
17:59 subsignal joined #salt
17:59 bhosmer__ joined #salt
18:00 timoguin joined #salt
18:00 dendazen thanks, let me try.
18:02 Napid joined #salt
18:03 Napid I am looking at alternative ways to target minions and came across nodegroups which is how I would like to do it, however it requires a restart of the master every time you add a new minion.  Could I not create a pillar with the same data and put that in place of the minions in the top.sls state config?
18:04 stanchan joined #salt
18:05 jonatas__ joined #salt
18:06 iggy you can only put nodegroups in the config file
18:06 iggy and yes, that can be a pita
18:09 jopecko joined #salt
18:09 otter768 joined #salt
18:11 jopecko joined #salt
18:11 big_rob joined #salt
18:11 signull joined #salt
18:12 druonysus joined #salt
18:13 Napid iggy: I just create a pillar with minions and then in my state top.sls file {{ pillar['miniongroups']['dev'] }}:     - match: list and it worked perfectly, so yes you can specify your own "nodegroups" in a pillar instead of using the nodegroups
18:13 spookah joined #salt
18:14 murrdoc i mean of course you can
18:14 murrdoc you can match on anything
18:14 murrdoc whats better is what works with your use case
18:14 Napid murrdoc: not having to restart the salt master to add new minions to my config works best for my use case, and probably many others.
18:15 murrdoc yup
18:15 murrdoc i dont use nodegroups
18:15 murrdoc i have two , trusty servers and precise servers
18:15 Napid We have hundreds of servers, but in little clusters of two to four that serve individual purposes.  It's a nightmare to manage with or without config management systems
18:18 dendazen actually that  }; works in simpler example, something i do not see in my main template i will paste it, myabe i looked too long, but i can’t find error.
18:18 dendazen http://pastebin.com/0xar0kZB
18:18 dendazen i also pasted an error there, if guys anyone has time to take a look, i’d appreciate it.
18:18 druonysuse joined #salt
18:20 sdm24 on my first quick read-through, I couldn't find an endif for the first 'if' statement, with apphost
18:20 sdm24 oh wait never mind its further down, sorry
18:22 dojobonobo joined #salt
18:22 o5k_ joined #salt
18:23 dendazen and this one i created parses just fine http://pastebin.com/1nf0B9sq
18:23 dendazen simillar strucuture.
18:24 sdm24 What about mixing and matching {% %} and <% %> for block statements? I'm not sure if that would cause an issue
18:24 markm_ joined #salt
18:24 o5k__ joined #salt
18:26 sdm24 I'm by no means a Salt/Jinja genius, but it seems like it might cause an issue
18:26 dendazen hmm, where am i doing it? let me see.
18:26 dojobonobo I have a list of things in pillar that I want to add items to for specific servers. https://gist.github.com/jasonkeene/f6889b0f73daf1e5bf7f
18:26 dojobonobo I tried using jinja and include syntax but nothing seems to be working for me
18:26 sdm24 lines 65-69, for example
18:26 dendazen omg
18:27 dendazen i think that’s it.
18:27 dendazen i did not even notice.
18:27 dendazen i am so bad.
18:27 sdm24 sometimes you just need a fresh set of eyes
18:27 sdm24 im just happy that my suggestion worked
18:27 dendazen Thanks, man.
18:28 sdm24 no problem
18:28 sdm24 dojobonobo: is the problem that you are missing a colon after 'specific server' in top?
18:28 dojobonobo ah no that is just an example
18:29 sdm24 oh ok
18:29 dojobonobo like I’ve tried this http://docs.saltstack.com/en/latest/topics/pillar/#including-other-pillars
18:29 dendazen that’s it it fixed that.
18:29 dojobonobo but it just blows away everything
18:29 dendazen 2 hours into the window.
18:29 davisj dojobonobo: Maybe the fact that both init an specific_server define the same key "list_of_things". One overwrites the other?
18:29 sdm24 in your top, do you use list_of_things.specific_server?
18:30 dojobonobo yeah.. is there a way to merge the lists? or is the merging just key based?
18:30 dojobonobo @sdm24 yeah
18:31 davisj dojobonobo: this just came up earlier https://github.com/saltstack/salt/issues/3991
18:31 blacked joined #salt
18:31 hemphill joined #salt
18:31 davisj not a solved problem as far as I can tell
18:32 dojobonobo K, I’ll split it into seperate lists with different keys and just iterate over both of them in my templates
18:32 dojobonobo thanks
18:34 hemphill Is the top.sls file case sensitive?
18:36 sdm24 In what regard? Personally, I have my states organized in to salt://linux and salt://windows files, so I need a {{ grains['kernel']|lower }}.state if I want to run a state located in both linux/ and windows/
18:36 Tyrm joined #salt
18:37 sdm24 otherwise it would try to use Linux/ and Windows/ directories, which would not exist
18:37 bhosmer joined #salt
18:38 hemphill in the top file you have the base and then iterate over the 'os:Windows' '*RABBIT*' type entries. are 'rabbit' and 'RABBIT' equal to salt or are they distinct items?
18:38 _1_Gonzalo joined #salt
18:38 sdm24 distinct I believe
18:39 hemphill thanks
18:39 Tyrm joined #salt
18:39 dingo as OrderedDict internally, very likely distinct
18:39 sdm24 no problem
18:39 c10 joined #salt
18:43 terratoma joined #salt
18:44 rsimpkins joined #salt
18:44 Tyrm joined #salt
18:46 Tyrm joined #salt
18:48 SheetiS joined #salt
18:48 mpanetta joined #salt
18:52 big_rob joined #salt
18:53 blacked1 joined #salt
18:57 lothiraldan joined #salt
19:04 fusionx86 joined #salt
19:06 bhosmer_ joined #salt
19:17 numkem joined #salt
19:18 dangra joined #salt
19:18 stanchan joined #salt
19:20 SeeDickCode joined #salt
19:24 mikeywaites joined #salt
19:24 jenty joined #salt
19:25 Matthews_ joined #salt
19:26 yaryarrr joined #salt
19:27 Matthews_ joined #salt
19:27 yaryarrr Hello, I'm new to salt (switcher from puppet). I have a state for an app, and I want to check if my nginx state is defined / used, so that I know whether or not to include a conf file. Is there a way to go about doing this? like: if nginx = defined then file.manage app.conf
19:31 sdm24 require or watch
19:31 sdm24 ?
19:31 sdm24 http://docs.saltstack.com/en/latest/ref/states/requisites.html
19:31 yaryarrr but what if nginx isn't defined?
19:31 keimlink joined #salt
19:32 yaryarrr it may not always be defined, sometimes i want to have the app without the nginx proxy.
19:32 sdm24 is nginx a state?
19:32 yaryarrr yes
19:32 yaryarrr essentially, if two apps are on a box... i want to use nginx with them. but if it's just one... i don't want a proxy.
19:33 yaryarrr so i was hoping the state could check if nginx state was defined, and if so, put in the conf file.
19:33 yaryarrr_ joined #salt
19:34 sdm24 I think require is what you want. If you have a state with a require nginx option, that state won't run unless the nginx state does
19:35 sdm24 sorry i have to go to a meeting now. Good luck!
19:35 yaryarrr but I may want the state to run without nginx sometimes. I want the one piece of the app state to run only if the nginx state is used.
19:35 drawsmcgraw yaryarrr What, exactly, is your use case?
19:35 drawsmcgraw I'm thinking of something that [deploys one app], then another thing that [deploys an arbitrary number of apps and puts them behind nginx]
19:36 drawsmcgraw Where the second option could pull a list of apps to deploy out of Pillar
19:36 drawsmcgraw Basically, my concern is that it would be overly complicated to have one-command-to-run-them-all
19:36 yaryarrr that is part of the use case. then there are some customers who don't want to run behind a proxy and want to hit the apps directly.
19:37 yaryarrr i guess i could have a pillar that defines whether or not the proxy is present. and then check for that. but i was hoping to just check if the nginx sls was present...or not.
19:37 drawsmcgraw Instead of "is the sls present", you could say "does this app go behind nginx?"
19:38 yaryarrr but for different customers... the app could be behind nginx, or not.
19:38 drawsmcgraw Because, as I understand it, configuring an app to go behind Nginx is (mostly? entirely?) just dropping a single config file into Nginx's config directory
19:38 yaryarrr it is, yes. so i was hoping the app could say "is the nginx sls present?" if yes, then put the conf file here.
19:38 drawsmcgraw Would something like this work? --> "If Pillar says I belong behind Nginx, then include the Nginx sls file"
19:39 MatthewsFace joined #salt
19:41 drawsmcgraw yaryarrr I'm thinking something like this: http://dpaste.com/3J8KHN1
19:41 drawsmcgraw Likely not that *exactly*, but it would look something like that
19:41 iggy targeting stuff based off jinja is a bad idea
19:41 drawsmcgraw Really? Wrapping a state-or-two inside a Jinja conditional?
19:42 iggy you should target your states in your top file
19:42 yaryarrr how would you check if a state exists in the top file for that minion?
19:42 drawsmcgraw Suppose there is no top file though....
19:42 charliewho1 joined #salt
19:42 iggy I'm not saying it isn't easier to just hack some if's in your sls files every once in a while, but it's non-obvious to anyone who looks at your code
19:43 yaryarrr my preference would be to avoid a pillar AND an sls.... i already tell the minion to get nginx in the top file....
19:43 iggy yaryarrr: you don't... '*webA*':\n  - nginx.configA\n  - appcode
19:43 iggy or something
19:43 dyasny joined #salt
19:44 yaryarrr ah
19:44 KyleG joined #salt
19:44 KyleG joined #salt
19:44 gazarsgo joined #salt
19:45 yaryarrr but what if there are multiple apps and multiple nginx.configs? make one for each app? nginx.config.app1 nginx.config.app2
19:45 yaryarrr ?
19:47 whytewolf yaryarrr: here is a question. does it hurt to have the nginx app conf there if the nginx isn't installed?
19:47 yaryarrr ...well i suppose not lol
19:47 gazarsgo is there any consensus in the community on running with or without a master ?
19:48 iggy gazarsgo: depends who you ask (and what you're doing)
19:48 charliewho1 left #salt
19:48 yaryarrr I found this: http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.state.html#salt.modules.state.show_top but that shows the whole top
19:48 yaryarrr for that minion.
19:49 yaryarrr i was hoping there was something like show_top nginx that checked if that was present or something
19:50 gazarsgo iggy: i guess the main question is how much of the userbase are using a container based fabric like docker+mesos and how people generally manage rolling out infrastructure changes ? i'm still very new to salt :)
19:50 gazarsgo i guess i'm looking for the 'philosophy' of salt, haven't had any problem finding tutorials so far
19:50 vexati0n joined #salt
19:51 whytewolf gazarsgo: the philosophy of salt so far as i can tell is. hey here is a toold. find what works for you
19:51 iggy pretty much
19:51 vexati0n HEY #salt. I upgraded a master and a syndic-master to 2014.7.5, and now I can't get any data back from minions connected to the syndic master. anything connected directly to the top level master responds fine, and everything connected to the syndic responds to the syndic just fine, but the syndic isn't relaying responses from its minions back to the top master.
19:51 iggy more like "here's the most awesome decked out swiss army knife you could ever find, don't shoot off your foot"
19:52 whytewolf humm. I like your version better iggy
19:52 vexati0n i watch the debug log and commands from the top master are being published and replies are being received, but none of those replies are being given back to the top master
19:52 ek6 <---- goes looking for iggys swiss army knife that includes a gun
19:53 whytewolf ek6: http://www.dailymail.co.uk/news/article-2442634/The-mother-Swiss-Army-Knives-19th-Century-boasted-100-tools--including-REVOLVER.html
19:53 iggy lol, beat me to it
19:54 mpanetta joined #salt
19:54 iggy mf'ing .22 pistol on a "knife"
19:55 ek6 i could say thats not a real swiss army knife......and please no bottle opener...
19:55 ek6 well i guess you could use the gun as a bottle opener
19:55 murrdoc joined #salt
19:56 iggy there you go thinking outside the box ;)
19:56 jopecko joined #salt
19:58 Guest70 joined #salt
19:59 whytewolf what i want to know is why it has so many pairs of scissors.
19:59 ek6 to shoot your own foot off when you run out of ammo in the gun?
19:59 iggy it was the 1800s... they made their own clothes and stuff
20:00 bhosmer__ joined #salt
20:01 whytewolf whileokay, that makes sense
20:01 perfectsine joined #salt
20:06 bluenemo joined #salt
20:06 bluenemo joined #salt
20:10 druonysus joined #salt
20:10 otter768 joined #salt
20:15 cmcmacken joined #salt
20:19 perfectsine joined #salt
20:24 dalexander joined #salt
20:25 snarfy joined #salt
20:26 snarfy Hey dumb question but I cant figure it out. I want to restart a service. I dont want it to be conditional. I want it to restart every damn time the state is run
20:26 snarfy Im installing a pkg and I want it restarted regardless of changes
20:26 micko joined #salt
20:26 snarfy A watch statement appears only to restart the service if there is a change.
20:28 timoguin snarfy: use the module.run state to call the service.restart execution module
20:28 snarfy Perfect!
20:28 rsimpkins left #salt
20:28 snarfy Thanks :)
20:29 Eric-RB joined #salt
20:29 ek6 just be careful if you need that restart to happen before any other packages are installed and your using mod aggregate
20:30 bash124512 joined #salt
20:34 bhosmer_ joined #salt
20:34 skizunov joined #salt
20:38 krelo joined #salt
20:39 rm_jorge joined #salt
20:39 skizunov I have a question about ZeroMQ vs RAET...
20:39 iggy shoot
20:39 skizunov Is there any cons to choosing RAET over ZeroMQ? Is RAET better in every way than ZeroMQ?
20:39 neonixcoder joined #salt
20:40 baweaver joined #salt
20:42 iggy no
20:42 iggy for one, it's still considered experimental
20:42 neonixcoder left #salt
20:42 skizunov Once it is not experimental, will it become the new default value in future versions of Salt?
20:43 iggy unless you have a specific reason for wanting to use RAET, I wouldn't use it right now (and if you do have a specific reason, I'd be using it against devel, not any released version)
20:43 iggy that is the eventual goal
20:43 skizunov It is more stable in devel than in 2015.2?
20:43 rm_jorge joined #salt
20:45 iggy fixes to raet tend to go into devel and then feed back from there (vs generic fixes that tend to go into older versions and feed forward)
20:46 skizunov I have contributed some fixes myself (to get it working on Windows)
20:46 skizunov Both ZeroMQ and RAET seem to work for me now...
20:47 iggy at the same time with 1 master?
20:47 skizunov Yes
20:47 skizunov I have only configured things for 1 master.
20:47 iggy the last I heard you couldn't use RAET and zmq on the same master
20:48 iggy so they've obviously made some progress
20:48 skizunov Maybe I misunderstood you...
20:48 skizunov ...I pick either ZeroMQ or RAET, but not both at the same time
20:48 iggy yeah, I was asking about at the same time
20:48 skizunov No, only choose one or the other
20:49 iggy which is kind of a deal breaker for people with large deployments
20:49 skizunov Is it a future planned feature to support both at the same time?
20:49 iggy nobody wants to change all their minions all at once
20:49 iggy they said so at SaltConf
20:49 skizunov That is good to hear, I didn't know that
20:50 skizunov For now, I don't have any minions out in the field and am designing the architecture...
20:50 skizunov ...so I can choose to use ZeroMQ or I can choose to use RAET since I am starting from scratch
20:50 skizunov For someone starting from scratch like myself, is there a recommendation?
20:51 spookah joined #salt
20:51 iggy if you don't mind a hiccup or two, RAET
20:51 UtahDave You can now run both RAET and ZMQ minions at the same time
20:51 skizunov And connect to the same master?
20:52 iggy UtahDave: awesome! I know there were talking about it at the conf, haven't kept up since then (especially since moving to 2015.2 obviated our need to go to RAET)
20:53 skizunov Why did moving to 2015.2 obviate your need to go RAET?
20:55 iggy we used to have problems with the minions losing contact with the master frequently
20:55 giantlock joined #salt
20:55 skizunov And RAET solved the issue?
20:55 iggy there was a fix that went into 2015.2 (and devel) that fixed the socket keepalive setting
20:55 iggy no, it was fixed in zmq
20:56 Tyrm_ joined #salt
20:58 skizunov Is there a reason why the devel stack is preferred for RAET over the 2015.2 stack?
20:58 skizunov Are there stability issues with RAET on 2015.2?
20:59 subsignal joined #salt
20:59 iggy just like I said earlier, the path for fixes to RAET seems to go devel->2015.2 (vs 2014.7->2015.2->devel for other stuff)
21:00 skizunov Does this impact quality on RAET for 2015.2? I don't understand how the different workflow affects quality.
21:00 iggy just that you get fixes quicker (if at all)
21:03 skizunov So if I start from devel, then RAET is the recommended approach?
21:04 nahamu you haven't mentioned your use case yet.
21:04 nahamu what are you planning on using salt for and on what sort of timeline?
21:05 igorwidl left #salt
21:05 nahamu zeromq has seen more operational hours in production than raet at this point.
21:06 nahamu but there are reasons behind the development of raet that may be relevant to your use case
21:07 skizunov Since the number of minions can grow over time, I wanted to be able to handle many minions. I also heard that ZeroMQ has trouble when a lot of events are fired.
21:08 skizunov Since I don't have any production minions yet, I wanted to future-proof my architecture.
21:08 nahamu do you have any sense of an upper bound on the number of minions you'll have?
21:08 skizunov If RAET is eventually going to be the default, that would influence the decision.
21:09 carmony joined #salt
21:09 skizunov That is a good question...
21:09 nahamu Unless something has changed since I last heard I do believe that RAET is intended to be the default when it's considered complete.
21:09 skizunov ...to be honest, I can't answer it concretely...
21:10 solidsnack joined #salt
21:10 skizunov ...at the beginning, thousands of minions...
21:10 VR-Jack2 If you are going into production soon, I'd hold off on RAET unless you're immediately scaling up. Changing between ZeroMQ and RAET in the future shouldn't be that big of an issue
21:10 skizunov ...but we expect that number to grow over time
21:10 nahamu If you know for a fact that you're unlikely to hit the ceiling that zeromq has and you need to be in production highly reliable *right now* then zeromq might be the better choice.
21:10 ek6 VR-Jack2: you mean besides the whole totally different keys thing?
21:11 iggy if you don't know if RAET solves a specific problem for you, stick with the current default (zmq)
21:11 skizunov I am not so sure that ZeroMQ can be easily swapped to RAET...
21:11 skizunov ...is that really true?
21:11 bhosmer_ joined #salt
21:11 VR-Jack2 ek6: well, if you are managing them, deploy rate using salt. ;)
21:11 iggy ^
21:12 iggy I imagine when the salt devs want people to start moving to RAET, they'll provide handy tools to assist that (beef up wheel modules, etc.)
21:12 Tyrm joined #salt
21:12 bhosmer__ joined #salt
21:13 VR-Jack2 iggy: I need to transfer a subset of my master (sls/pillars) to a new master. Any pointers for doing that in a salt fashion?
21:13 hemebond joined #salt
21:13 iggy I can't say there's a "salty" way to do that
21:14 VR-Jack2 I know I can local package, ship, and deploy, but thought there might be something salty, since they do master of master stuff.
21:14 hemebond Does anyone have a suggestion on the best way to "patch" an XML file with SaltStack? I'm looking at writing a module for editing them but wonder if anyone else has had to do it.
21:14 iggy hemebond: augeus?
21:15 iggy http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.augeas_cfg.html#module-salt.modules.augeas_cfg
21:15 hemebond iggy: Thanks, I'll check that out.
21:18 hemebond Blast, doesn't seem to have a Windows version. Still, I found an alternative for that. Thanks iggy.
21:18 arif-ali joined #salt
21:19 tzero joined #salt
21:25 KyleG joined #salt
21:25 KyleG joined #salt
21:25 o5k_ joined #salt
21:27 cb joined #salt
21:28 o5k joined #salt
21:31 viderbit joined #salt
21:32 cpowell joined #salt
21:33 Berty_ joined #salt
21:34 sdm24 Does anyone know the best way to kill a salt job on a windows minion?
21:34 sdm24 I have a state that uses module.run to install chocolatey, but it is hanging
21:36 solidsnack joined #salt
21:40 druonysuse joined #salt
21:40 druonysuse joined #salt
21:41 o5k_ joined #salt
21:42 nickdew joined #salt
21:43 baweaver joined #salt
21:43 keimlink joined #salt
21:44 o5k__ joined #salt
21:44 perfectsine joined #salt
21:52 VR-Jack2 sdm24: just guessing, but have you tried the saltutil kill_job? no mention if it has windows equivs.
21:58 sdm24 VR-Jack2: that didn't work. I ended up just having to restart the minions
21:59 VR-Jack2 sdm24: that was somewhat of a windows issue anyways. the minion is multithreaded, so killing the process kills the minion. There was a patch of some type submitted, but not sure where it sits.
21:59 iggy if saltutil.kill_job didn't work on Windows, you should open an issue
22:00 sdm24 There alread is one
22:01 iggy oh, very well then
22:01 bhosmer joined #salt
22:03 ajw0100 joined #salt
22:03 jonatas_oliveira joined #salt
22:04 relicanth joined #salt
22:04 VR-Jack2 several, and it looks like the merge I saw was strictly to deal with the error caused by win32 python not supporting the signal
22:04 relicanth I'm switching from salt-ssh to master/minion, and I don't know how to get output
22:04 relicanth The states are being run, but even when there are changes salt '*' state.highstate has no output
22:05 relicanth I have state_verbose: True in the minion and master configs
22:06 relicanth I'm using 2014.7.4 on both
22:06 VR-Jack2 Think I read somewhere that highstate doesn't wait, so the return are just sent to logfiles/syslog or other returners
22:06 relicanth Gotcha, do you know which one is the default/how I can get the output
22:07 sdm24 have you tried --state-output=full at the end of salt '*' state.highstate?
22:07 relicanth I'll give that a try now
22:08 iggy -t
22:08 relicanth --state-output=full doesn't change anything
22:08 VR-Jack2 there's a log entry in the individual minion logfiles by default. I think you can also issue a job command to grab output of completed jobs. I think by default it only keeps job info for 24 hours, though
22:09 druonysuse joined #salt
22:09 druonysuse joined #salt
22:10 relicanth OK, seeing stuff in the minion logfile
22:10 relicanth Do you know offhand what the job command is to grab output?
22:10 VR-Jack2 I don't. it's convoluted. just read the job management stuff on salt docs
22:11 relicanth OK, thanks a bunch
22:11 VR-Jack2 I'm a noob, so I'm still trying to remember all the various commands.
22:11 otter768 joined #salt
22:13 iggy salt-run jobs.* http://docs.saltstack.com/en/latest/ref/runners/all/salt.runners.jobs.html
22:13 iggy did you try the -t option?
22:15 relicanth Nope, I'll try that now
22:19 relicanth The salt-run / jobs stuff is definitely what I'm looking for
22:19 relicanth And -t works well too
22:20 relicanth Although async by default is a good decision imo
22:20 relicanth Thanks iggy!
22:23 iggy at some point a lot of people end up using custom returners and sorting the output via some other means
22:23 iggy there was even a frontend for mongo that was mentioned in here recently, but I can't remember what it was
22:23 relicanth Yeah, that makes a lot of sense
22:24 relicanth Eww mongo but that's off topic
22:27 cpowell_ joined #salt
22:27 baweaver joined #salt
22:28 relicanth Is there an easy hookup with Reactor to get notified if a job fails?
22:28 solidsnack joined #salt
22:29 rojem joined #salt
22:29 sdm24 Does anyone use Salt and chocolatey? I'm running into issues with chocoaltey version 0.9.9.5 trying to install packages, because chocolatey wants me to input "yes" to start the installer
22:30 VR-Jack2 probably, but couldn't tell you the event. a quick test that will fail and watching the events should give you all you need
22:30 relicanth It looks like there's some nice events built-in, so I'll lookat them
22:31 relicanth http://docs.saltstack.com/en/latest/topics/event/master_events.html#event-master-events
22:33 iggy event_listen.py is your friend when you start messing with the reactor
22:37 relicanth Good to know
22:37 relicanth Right now I'm just listening on the bus to get a feel for things
22:38 relicanth Why is salt so awesome
22:38 bfoxwell joined #salt
22:41 scoates joined #salt
22:47 ek6 why is a hammer so awesome?  why is a swiss army knife with 20 scissors and a gun so awesome?
22:48 JDiPierro joined #salt
22:50 murrdoc why is ek6 waxing eloquent
22:50 murrdoc on humpday
22:50 ek6 because i had to refine my 'because of all the hookers and blow at the yearly conference' answers when none of you slackers stepped up
22:51 iggy there were hookers too?
22:52 spookah KCCO hump day?
22:52 irctc291 joined #salt
22:52 ek6 iggy: thats what happens when you just stuff your face in the pile and start inhaling so early in the evening
22:53 relicanth note to self: attend yearly conference in 2016
22:53 murrdoc who are you ek6
22:53 murrdoc or what was your username in the recent past
22:55 p0rkbelly joined #salt
22:56 ek6 only good response to that question is 'im batman' because even i could have done a better job then keaton
22:58 jchen joined #salt
22:58 jchen left #salt
22:59 [7hunderbird] joined #salt
22:59 iggy you take that back
22:59 * iggy /ignore's ek6
23:00 ek6 nfw...i needed that stuff the next morning for some of those keynotes...and poof all gone
23:00 ek6 i was pissed
23:00 saltnooob joined #salt
23:01 saltnooob hi, using salt-call on a minion, am I able to use cp.get_file to grab a file from the master or must this be initiated from the master?
23:01 ek6 saltnooob: yes, no
23:02 [arx] joined #salt
23:02 saltnooob I tried salt-call cp.get_file salt://some_file.txt file.txt but always get "local: false"
23:03 iggy saltnooob: salt-call cp.list_master | grep some_file.txt
23:03 ek6 saltnoob: sorry..dont know about get_ file i use get_managed
23:04 johnzorn joined #salt
23:04 echo joined #salt
23:04 saltnooob cp.get_managed?
23:04 ek6 get.managed is a bit...verbose but ive never needed anything else
23:05 saltnooob getting function not available
23:06 saltnooob do you have an example of pulling a file from master from a minion?
23:06 saltnooob in a roundabout way, I'm trying to ensure a minion can NOT pull a file from master
23:06 ek6 http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.file.html#salt.modules.file.get_managed
23:07 ek6 err....dont have it available on the saltfs that minion is enabled to see
23:07 penguinpowernz joined #salt
23:07 ek6 i refuse to say a different env because i hate env's
23:08 iggy if it's under salt:// a minion can get to it
23:08 murrdoc environments stink (right now)
23:09 ek6 now is when i saw something that makes iggy ill....ready?.... of course you could have it available but encrypted and have the key in a pillar to decrypt on certain nodes
23:09 murrdoc thats not bad
23:10 saltnooob good idea
23:10 ek6 was actually considering that again this morning using vault as well
23:11 scbunn joined #salt
23:11 ek6 but i want the security weenies to beat at vault a bit more before i use it in earnest
23:12 murrdoc does cp.get_file put it in the cachedir ?
23:13 rigor789|away joined #salt
23:14 ek6 sure..why wouldnt it
23:14 gwmngilfen joined #salt
23:14 murrdoc cos it dont
23:15 mosen joined #salt
23:15 * murrdoc reads code
23:15 keimlink_ joined #salt
23:15 ek6 yeah my bad...when i did use that for vms i was showing it in cache dir but not the salt one...
23:16 ek6 it just holds the hash in cache?
23:17 murrdoc no caching https://github.com/saltstack/salt/blob/v2014.7.4/salt/fileclient.py#L595
23:18 murrdoc i could use cache_file tbut that picks the destination
23:18 murrdoc fuck it, we are doing it live
23:19 saltnooob how do you guys go about storing secure files like ssl certs and api keys if you say you want multiple environments and don't want a minion to pull a sensitive file, guessing I would have to have seperate roots / repo's for each environment?
23:20 saltnooob was hoping to only manage 1 repo for all states
23:20 iggy put them in the pillar
23:21 murrdoc write a state, that vlideats a minions perms
23:21 murrdoc and then allows a minion to file.manage a file
23:21 iggy that's ridiculous (and wouldn't work)
23:21 murrdoc dont keep the file in file_roots so regular salt funtions cant get to it
23:21 murrdoc it would totes work
23:23 saltnooob as a rule, don't put anything sensitive in the file roots and store sensitive stuff in pillar, then use states to write out the keys / files from pillar
23:23 saltnooob so for ssl certs I'd put them in pillar
23:23 saltnooob and not file roots
23:23 murrdoc gpg pillar
23:23 saltnooob yeah, gpg the data in pillar
23:23 saltnooob ok
23:24 MrPeppah Question: can I push users and their passwords out to minions with salt just like puppet?
23:24 ek6 you using that for real murrdoc?  i tried that early on and the wheels flew off the car before it burst into flames.
23:24 hemebond MrPeppah: Yes
23:24 murrdoc i am using an external data store
23:24 murrdoc and put the creds on the minion
23:24 murrdoc and curl stuff down
23:25 saltnooob am still figuring out how to deal with dev environment and am wondering if it might just be a better / cleaner way to just setup a seperate master
23:25 thehaven joined #salt
23:25 iggy we use separate masters
23:25 ek6 ok but not specifically the gpg renderer
23:25 ek6 sep masters here as well
23:26 murrdoc havent done separate masters
23:26 murrdoc living on the edge with one master in one pop
23:26 scbunn joined #salt
23:27 skizunov left #salt
23:27 echo joined #salt
23:27 murrdoc i am testing out consul and or just a web front end to store minion keys
23:27 murrdoc so it solves the multi master key problem
23:27 murrdoc at least
23:28 ek6 murrdoc: you sir can be my vault guinea pig
23:28 murrdoc oink
23:28 ek6 what multi master key problem?   just use signing keys
23:29 baweaver joined #salt
23:29 solidsnack joined #salt
23:29 murrdoc thats not a guinea pig is it
23:29 murrdoc not doing multi master
23:31 ek6 yeah when you said solves multi master key problem wasnt sure which 'problem' you were referring to
23:38 tmclaugh[work] joined #salt
23:45 scbunn joined #salt
23:56 BlackFX anyone get this error when using Saltcloud with SoftLayer : [ERROR   ] There was a profile error: global name 'ScriptDeployment' is not defined
23:57 bootstrappm joined #salt
23:57 murrdoc you should mail #salt-users group
23:57 BlackFX okay :)
23:58 murrdoc because i think you asked yesterday
23:58 murrdoc and didnt get an answer
23:58 BlackFX I did :)
23:58 bootstrappm helloooo! I just tried to use the file.line state described in http://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.line and got: State 'file.line' found in SLS u'bash' is unavailable ... anybody seen this before?
23:58 bootstrappm just fyi bash is the name of my sls
23:58 iggy bootstrappm: it's only in devel (maybe 2015.2)
23:59 murrdoc can u paste in your sls and the way u are claling it, in a gist
23:59 bootstrappm ahh, thank you iggy
23:59 catpig joined #salt
23:59 bluenemo_ joined #salt
23:59 iggy New in version Beryllium
23:59 iggy Beryllium is 2015.2++
23:59 ek6 oh dont you start that iggy...or ill beat you with a big bag of boron
23:59 * __number5__ can't spell the versions
23:59 bootstrappm murrdoc https://gist.github.com/frankpinto/1e59d644bf957df10e32
23:59 bootstrappm just in case you're still curious

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary