Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-08-12

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 druonysuse joined #salt
00:04 druonysuse joined #salt
00:12 otter768 joined #salt
00:18 claytron_ joined #salt
00:19 h220hawk left #salt
00:27 otter768 joined #salt
00:35 hasues joined #salt
00:35 hasues left #salt
00:39 omegamike joined #salt
00:44 PredatorVI joined #salt
00:45 PredatorVI left #salt
00:45 PredatorVI joined #salt
00:48 mdye joined #salt
00:49 amcorreia joined #salt
00:49 PredatorVI Is anyone familiar with the salt-formula/rabbitmq-formula?  having issues with it not installing the pkgrepo and I don't see what I'm doing wrong.
00:50 Akhter joined #salt
00:51 dthom91 joined #salt
00:57 favadi joined #salt
01:01 icflournoy joined #salt
01:04 claytron_ joined #salt
01:06 MatthewsFace joined #salt
01:09 tru_tru joined #salt
01:35 dendazen joined #salt
01:42 dthom911 joined #salt
01:48 phw_ joined #salt
01:49 writtenoff joined #salt
02:03 mapu joined #salt
02:17 ajw0100_ joined #salt
02:19 auzty joined #salt
02:24 claytron_ joined #salt
02:26 arif-ali joined #salt
02:27 omegamike joined #salt
02:33 evle joined #salt
02:36 funzo joined #salt
02:48 zwi joined #salt
02:50 gchao joined #salt
02:54 pdayton joined #salt
03:00 Furao joined #salt
03:06 pdayton joined #salt
03:07 claytron_ joined #salt
03:09 spark_ joined #salt
03:12 pdayton joined #salt
03:16 dynamicudpate joined #salt
03:24 clintber_ joined #salt
03:25 intr1nsic joined #salt
03:26 calebj joined #salt
03:26 tzero joined #salt
03:27 rome_390 joined #salt
03:27 Tecnico1931 joined #salt
03:28 lahwran joined #salt
03:33 ajw0100 joined #salt
03:34 zzzirk joined #salt
03:37 Bryanstein joined #salt
03:38 druonysus joined #salt
03:56 baweaver_ joined #salt
03:57 baweave__ joined #salt
04:04 capricorn_1 joined #salt
04:04 zzzirk_ joined #salt
04:06 zzzirk__ joined #salt
04:06 funzo joined #salt
04:11 tmclaugh[work] joined #salt
04:15 omegamike joined #salt
04:26 zsoftich2 joined #salt
04:27 claytron_ joined #salt
04:35 Singularo joined #salt
04:38 malinoff joined #salt
04:42 ajw0100 joined #salt
04:47 ramteid joined #salt
04:55 otter768 joined #salt
05:00 cliluw joined #salt
05:01 markm joined #salt
05:01 jaybocc2 joined #salt
05:07 zer0def joined #salt
05:13 yomilk joined #salt
05:13 claytron_ joined #salt
05:15 catpiggest joined #salt
05:19 jaybocc2 joined #salt
05:28 calvinh joined #salt
05:28 TyrfingMjolnir joined #salt
05:37 katyucha joined #salt
05:39 calvinh joined #salt
05:40 DanyC GreatSnoopy: only at the first loading up the minion
05:47 gcfhvjbkn joined #salt
05:55 calvinh_ joined #salt
05:56 dopesong joined #salt
05:57 gcfhvjbkn joined #salt
05:58 rdas joined #salt
05:59 claytron_ joined #salt
05:59 ageorgop joined #salt
06:00 Bryson joined #salt
06:00 armguy joined #salt
06:03 dopesong_ joined #salt
06:04 Bryson joined #salt
06:10 colttt joined #salt
06:13 malinoff joined #salt
06:15 lb1a joined #salt
06:22 AndreasLutro joined #salt
06:23 pi3r13 joined #salt
06:25 impi joined #salt
06:37 katyucha joined #salt
06:49 hasues joined #salt
06:54 dopesong joined #salt
06:55 favadi joined #salt
06:56 otter768 joined #salt
06:56 GrantFS hi
06:57 yomilk joined #salt
06:58 KermitTheFragger joined #salt
06:58 kawa2014 joined #salt
06:59 Grokzen joined #salt
07:01 claytron_ joined #salt
07:14 stevend joined #salt
07:16 eseyman joined #salt
07:20 linjan joined #salt
07:21 jbrnds joined #salt
07:24 spo0nman joined #salt
07:30 jbrnds Hi gents
07:30 jaybocc2 joined #salt
07:30 jbrnds (and ladies) sry
07:35 markm_ joined #salt
07:37 kbaikov joined #salt
07:37 impi joined #salt
07:43 PI-Lloyd joined #salt
07:45 phr34k joined #salt
07:46 jaybocc2 joined #salt
07:48 mattiasr joined #salt
07:49 calvinh joined #salt
07:51 omegamike joined #salt
07:51 afics on archlinux packages for zmq and raet are seperated, on fedora there is only one package. does the fedora package support both zmq and raet?
07:52 spo0nman salt event fired from reactor does not reach target. if i send a cmd.run it arrives. but a local.cmd.run in reactor does not fire. how to debug?
07:52 phr34k heya small question, but i'm trying to run some expiriments with a salt master. I would like to make a basic custom module, as such i've create a folder ' /svr/salt/_modules/' and put a file test.py in it, with the example 'spam eggs' code.. With the command 'sudo salt-call -m /svr/salt/_modules/ test.spam eggs' i am able to call this function, however i don't seem to be able to configure the master so that this module is synchronized
07:55 gcfhvjbkn joined #salt
08:01 calvinh_ joined #salt
08:02 jbrnds phr34k, you mean you want to call the module in a salt statement from the minion?
08:03 claytron_ joined #salt
08:05 impi joined #salt
08:07 phr34k jbrnds: sorry i am not that familiar with the jargon yet, but i think so. From what i've read i should be able to perform 'sudo salt '*' test.spam eggs' after the module is properly served.
08:08 s_kunk joined #salt
08:08 phr34k however the minions say: ''test.spam' is not available', i've tried performing a saltutil.sync_all and saltutil.sync_modules also which doesn
08:08 phr34k 't list anything is updated
08:18 yomilk joined #salt
08:20 zer0def joined #salt
08:27 afics http://pastebin.com/ehK24Kub happens on a newly installed arch
08:27 afics also cpu usage seems to be high, 5 processes using 10% cpu each
08:31 GreatSnoopy joined #salt
08:36 dopesong joined #salt
08:37 afics it seems the master pubkey should be at /etc/salt/pki/master/master.pub, this file doesn't exist so far
08:38 afics could I be running into some low entropy issues?
08:39 holyzhou joined #salt
08:39 afics http://pastebin.com/MPj17eDm only these messages appear in strace -p <pid of a salt master>
08:39 holyzhou clea
08:40 rodio_ua joined #salt
08:44 xaviern joined #salt
08:46 DanyC joined #salt
08:46 marnom joined #salt
08:47 claytron_ joined #salt
08:48 stephanbuys joined #salt
08:48 holyzhou joined #salt
08:48 jhauser joined #salt
08:50 damaex joined #salt
08:51 stephanbuys joined #salt
08:53 pm90__ joined #salt
08:55 afics i just switched to the zmq transport, now everything works fine
08:57 otter768 joined #salt
09:02 phr34k anybody any ideas to my problem?
09:03 stephanbuys joined #salt
09:09 inad922 joined #salt
09:09 phr34k this is my master config http://pastebin.com/UkvbztT8
09:13 fgimian joined #salt
09:14 N-Mi joined #salt
09:14 N-Mi joined #salt
09:15 khris joined #salt
09:15 shnguyen joined #salt
09:16 fgimian joined #salt
09:19 gchao joined #salt
09:23 jbrnds phr34k, sorry don't know. Seems that your _modules dir is not recognised as being a module. Unsure
09:27 sectionme joined #salt
09:28 phr34k hmm maybe i'm missing __init__.py from the modules dir
09:28 kawa2014 joined #salt
09:29 aqua^c joined #salt
09:34 phr34k it doesn't seem to have had any effect, any way i can debug this?
09:38 aRkadeFR hey guys, I have something weird with pkg.latest. I have a new version on my apt repo, and with the salt-call on the minion, it runs: http://pastebin.com/fZ37uk06 but if I run the apt-cache -q policy cuisine, it shows that there is a new version… so it doesn't update my package
09:41 omegamike joined #salt
09:47 duendecat joined #salt
09:48 tkharju joined #salt
09:49 z3r0 joined #salt
09:51 jonher joined #salt
09:57 jaybocc2 joined #salt
09:59 rodio_ua left #salt
10:01 aRkadeFR ok, there's the same md5 on both version, does salt doesn't upgrade if it's the case?
10:07 rodio_ua joined #salt
10:07 claytron_ joined #salt
10:07 rodio_ua left #salt
10:13 jaybocc2 joined #salt
10:16 hvn joined #salt
10:16 hvn joined #salt
10:22 dopesong joined #salt
10:23 phr34k joined #salt
10:26 CeBe joined #salt
10:35 dendazen joined #salt
10:39 XenophonF joined #salt
10:57 otter768 joined #salt
11:02 bougie joined #salt
11:03 evle1 joined #salt
11:09 Kelsar joined #salt
11:12 claytron_ joined #salt
11:16 ajw0100 joined #salt
11:20 Kelsar joined #salt
11:26 LowWalker joined #salt
11:29 ingslovak joined #salt
11:31 duendecat joined #salt
11:32 duendecat joined #salt
11:36 yomilk joined #salt
11:39 yomilk joined #salt
11:40 MadsRC SaltStack is recommending that I add the COPR repo for ZeroMQ, but it requires enabling epel, and epel and the COPR repo have the same ZeroMQ version? Why would I use the COPR (Overhead of adding a new repo...) when it's in EPEL also?
11:41 XenophonF MadsRC: because that's not the case for all versions of RHEL/EPEL
11:42 MadsRC Ah okay. So if it's in the EPEL for the release I'm using, I can forego the CORP? (Using CentOS 7)
11:42 XenophonF yup
11:42 MadsRC But CentOS 6, which has ZeroMQ3, I should use COPR?
11:42 XenophonF absolutely
11:42 MadsRC Thanks :D
11:43 XenophonF technically, if you want everything to have the exact same config, use the same repos everywhere
11:43 MadsRC Indeed, but that could prove a problem when using different releases
11:43 XenophonF you can push the COPRs out via a pkgrepo state
11:44 XenophonF i try to avoid any variances in my configs across O/Ses or even between versions
11:44 XenophonF better conforms with the principle of least astonishment
11:45 XenophonF that way, the same packges come from the same repos on all my RHEL/CentOS boxes
11:45 XenophonF vs. packages from EPEL on some and the saltstack COPRs on others
11:45 MadsRC And you're not out of luck if EPEL decides to remove ZeroMQ :D
11:46 XenophonF yeah well it's a pretty common python package so i doubt it's going anywhere :)
11:46 XenophonF one thing I don't know is how the saltstack COPRs' release schedules line up with EPEL's
11:46 XenophonF because i only use the COPRs, I never have to worry about one having newer packages than the other
11:47 XenophonF same goes for the saltstack PPA on Debian/Ubuntu
11:48 MadsRC True that. My colleaque don't like having multiple repo's though. He's worried they'll clash
11:48 dopesong joined #salt
11:50 MadsRC And I like having as few repo's as possible, and only official repo's as to make sure packages are good and has a low chance of being compromised.
11:50 XenophonF all fair, but remember the saltstack COPRs are official release channels for SaltStack, so I'd argue that you can trust them about as much as EPEL
11:51 XenophonF i'd have to check again to be sure, but i'm pretty sure those packages are signed
11:51 MadsRC That was my argument also :) I don't really have a problem with Saltstack's repo quality :D
11:51 MadsRC They are
11:51 MadsRC signed, that is
11:52 XenophonF yup, sure are
11:52 dopesong_ joined #salt
11:53 XenophonF i enable a couple of repos (via salt, naturlich) across all of my RedHat-family computers
11:53 XenophonF EPEL, nux-dextop and -misc, both saltstack COPRs
11:54 XenophonF RHEL/CentOS 6.5 and 7 - so far no problems whatsoever w/r/t conflicts
11:54 GreatSnoopy i installed salt minion on centos6 only with epel only, it has everything the minion needed
11:55 XenophonF but zeromq3
11:56 XenophonF saltstack's recommends zeromq4
11:57 GreatSnoopy i see
11:57 GreatSnoopy any particular reason for that ? Is it something wrong with zeromq3 ?
11:59 XenophonF i don't know the technical rationale.  all i have to go by is what they say on http://docs.saltstack.com/en/latest/topics/installation/rhel.html#zeromq-4
12:00 * sectionme points out the zeromq4 changelog is here http://zeromq.org/docs:changes-4-0-0
12:02 banderas07 joined #salt
12:03 banderas07 Hi, can http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.groupadd.html#salt.modules.groupadd.adduser integrated into a sls file ? does it work in cmd line only ?
12:04 XenophonF banderas07: there are two answers to your question
12:04 sectionme banderas07: You want the state (http://docs.saltstack.com/en/latest/ref/states/all/salt.states.group.html) not the module.
12:05 XenophonF banderas07: you can use the `group.present` state's `addusers` feature to modify an existing group, as sectionme pointed out
12:06 XenophonF banderas07: but in a more general sense, when a particular state isn't available, you can use the http://docs.saltstack.com/en/latest/ref/states/all/salt.states.module.html
12:08 banderas07 thx, module.run better fits my needs, will try it :)
12:10 XenophonF banderas07: for the group modification, use the state
12:10 XenophonF group.present + the addusers argument will do the right thing
12:11 banderas07 XenophonF: yes, group.present is already used in another sls, but I want addusers only on some sls, not in all
12:13 XenophonF you can still use the same state
12:13 XenophonF just different arguments in different SLSes
12:14 omegamike joined #salt
12:16 ITChap joined #salt
12:16 zzzirk joined #salt
12:16 dthom91 joined #salt
12:17 ITChap Hi everyone
12:17 ITChap looks like I have some escaping issues in my pillar could someone kindly take a look into https://bpaste.net/show/67feab135915 ?
12:17 duendecat joined #salt
12:18 AndreasLutro ITChap: the - means "minus"
12:19 dthom91 joined #salt
12:19 ITChap AndreasLutro: sorry I am a bit tired but I still don't get it Oo
12:19 ITChap core-db ?
12:20 AndreasLutro {{ hosts.core-db }}
12:20 AndreasLutro is the same as print(hosts.core - db)
12:20 ITChap AndreasLutro: Ohhh ok
12:20 ITChap Is there any issue with the ':' ?
12:20 AndreasLutro nope
12:20 ITChap do I need to escape them also ?
12:21 ITChap thank you very much :)
12:21 AndreasLutro you don't need to escape anything, just change the - to _ in your pillar or whatever
12:21 ITChap ok
12:21 ITChap I will change that
12:21 XenophonF try hosts['core-db']
12:21 AndreasLutro or if you absolutely can't, hosts.get('core-db')
12:21 AndreasLutro or that
12:22 zwi joined #salt
12:22 funzo joined #salt
12:23 yomilk joined #salt
12:24 banderas07 joined #salt
12:24 jaybocc2 joined #salt
12:25 XenophonF obviously the '-' in the member name isn't valid python syntax
12:26 XenophonF so you have to use the get() accessor
12:26 XenophonF whether explicitly or implicitly
12:27 yomilk joined #salt
12:28 ITChap looks like even salt['pillar.get']('hosts:lookup:core-db') doesn't work :(
12:28 XenophonF shouldn't that work?
12:29 ITChap Jinja variable 'db' is undefined
12:29 ITChap my bad
12:29 aRkadeFR do you know when a new Salt-minion package will be released? (I'm in need of a patch on modules/aptpkg.py :D)
12:29 XenophonF aRkadeFR: you can monkey patch that via _modules
12:30 ITChap XenophonF: I was using a db variable somewhere else that doesn't exist
12:30 XenophonF ah
12:30 XenophonF you good now?
12:30 ITChap 1s I will fix it
12:31 _JZ_ joined #salt
12:33 ITChap XenophonF: looks like it does work
12:33 aRkadeFR thanks XenophonF
12:33 ITChap I have another more general question with pillars
12:34 claytron_ joined #salt
12:34 ITChap If I start doing some salt['pillar.get'] from my pillar sls files does it mean that I am doing something wrong ?
12:34 ITChap should I include instead ?
12:37 XenophonF i'm not sure pillar.get will work like you expect from within pillar itself
12:37 ITChap I have some pillar files that are passed to all the machines, some kind of environment wide settings
12:37 ITChap so in my top.sls I pass them to '*'
12:37 XenophonF are you wanting to set one pillar from another?
12:37 ITChap but some of my other pillar file need those values also
12:38 AndreasLutro you can't pillar.get between pillars
12:38 AndreasLutro ITChap: https://www.reddit.com/r/saltstack/comments/3edbc3/pillar_using_pillar_values_in_other_pillar_values/cteb435
12:38 saltstackbot [REDDIT] pillar: using pillar values in other pillar values. is it possible? (self.saltstack) | 6 points (100.0%) | 5 comments | Posted by SpaceJesusOnAStick | Created at 2015-07-23 - 21:10:13
12:38 XenophonF there's a saltstack reddit? awesome
12:39 * XenophonF subscribes
12:39 AndreasLutro yeah.. doesn't seem very active though
12:39 XenophonF that's too bad
12:39 XenophonF i'm still going to lurk
12:39 ITChap also just subscribed :D
12:40 ITChap AndreasLutro: does it also work in states ?
12:40 jaybocc2 joined #salt
12:40 AndreasLutro yes
12:40 ITChap AndreasLutro: I need this stuff like all the time ....
12:40 ITChap cool
12:40 dendazen joined #salt
12:42 XenophonF ITChap: i tend to follow the pattern of saltstack-formulas/template-formula
12:42 XenophonF where all my states have a defaults.yaml and a map.jinja
12:42 ITChap same
12:43 ITChap but I have some states like JAVA and Jetty that share values
12:43 XenophonF so by the time settings from pillar get to states they're in whatever_settings
12:43 ITChap like JAVA_HOME
12:44 XenophonF things like that i usually determine at state run time or hard-code in a pillar
12:44 ecdhe joined #salt
12:44 XenophonF but YMMV :)
12:44 AndreasLutro it's annoying to hard-code the same string in 5 locations
12:44 bmcorser joined #salt
12:44 AndreasLutro in the same pillar
12:44 AndreasLutro + other pillars that build on top
12:45 dyasny joined #salt
12:47 AndreasLutro https://bpaste.net/show/a3f762ca3f84 this is my webserver pillar - quite a lot of variable re-use
12:49 ITChap the string concat syntax in jinja is really painful for file path I now use a list with |join('/')
12:49 * XenophonF makes the sign to ward away the evil eye.
12:49 XenophonF unportable!  unportable!
12:50 XenophonF sorry
12:50 ITChap how do you do ?
12:50 XenophonF reflex reaction by someone who writes formulas for windows and unix :)
12:50 ITChap having 5x '~' really sucks
12:50 * AndreasLutro would never use salt for windows anyways
12:50 XenophonF i define dirsep conditionally ('/' or '\\') and then just |join(dirsep)
12:51 ITChap --_--
12:51 XenophonF salt for windows is pretty great, actually
12:51 XenophonF nicely complements GPO
12:52 stephanbuys1 joined #salt
12:52 ITChap AndreasLutro: would it be possible to take a look at yout incoming from iptables.sls
12:53 ITChap looks really neat
12:53 AndreasLutro yeah sure
12:54 AndreasLutro https://bpaste.net/show/bcb27e139d3a ITChap
12:55 ITChap AndreasLutro: that's really cool I will probably still some of your ideas
12:55 ITChap :)
12:55 AndreasLutro disclaimer: I have no idea if it scales well or follows iptables best practices or whatever... but seems to work
12:56 * XenophonF bookmarks that one, too.
12:56 ITChap Just the macro idea is really nice
12:56 XenophonF nice use of macros
12:57 amcorreia joined #salt
12:57 XenophonF that's for use in pillar, right? and with iptables-formula?
12:58 AndreasLutro yeah that's /srv/pillar/iptables.sls. I don't use any public formulas
12:58 XenophonF gotcha
12:58 otter768 joined #salt
12:59 AndreasLutro but it's just a simple {% for name, rule in pillar.get('iptables_rules', {}).iteritems() %} and passing variables from the pillar to the state really
12:59 AndreasLutro simple stuff
12:59 DanyC AndreasLutro: nice one, thx for sharing....i like the KISS one ;)
13:00 ITChap We need something like dotshare.it for cool salt states/pillar/whatever
13:01 ITChap Salt is so flexible that the hardest part for me is to keep things organized and clean
13:01 ITChap looking at how other are doing really helps
13:01 AndreasLutro might as well just put it all up https://gist.github.com/anlutro/644fc588e228f0df14b9
13:02 XenophonF ITChap: check out my public git repos - https://github.com/irtnog/salt-states and https://github.com/irtnog/salt-pillar-example
13:02 XenophonF Thanks, AndreasLutro
13:03 ITChap XenophonF, AndreasLutro: nice thanks
13:03 ITChap arff gist is blocked here --_--
13:05 subsignal joined #salt
13:06 ITChap for the envs I use one branch per env and I have one master per env that use its branch as base
13:07 ITChap I find this way easier to manage
13:07 stephanbuys joined #salt
13:07 ITChap but it doesn't work with pillar :(
13:08 AndreasLutro I gave up using environments
13:08 AndreasLutro too much duplication
13:09 XenophonF i use them for release engineering
13:09 XenophonF dev/test/stage/prod
13:10 ITChap same
13:10 ITChap all envs use the same states
13:10 ITChap just pillar changes
13:10 ITChap but I can use the branch to validate the states
13:10 XenophonF i only have one env for pillar
13:11 ITChap Oo you have the same data/settings/versions in all of them ?
13:11 XenophonF kind of
13:11 hasues joined #salt
13:11 hasues left #salt
13:12 XenophonF look at my salt-pillar-example repo for examples
13:12 VR-Jack joined #salt
13:12 XenophonF but like if i have a prod and a dev server, they'll have their own pillars---e.g., minecraft-dev.example.com and minecraft.example.com
13:13 ITChap ok I see
13:13 AndreasLutro I don't see the difference between having a single salt environment (base) and multiple branches for stages, and having multiple salt environments
13:13 XenophonF 6 of one, half-dozen of other
13:13 AndreasLutro what's wrong with git checkout staging && salt '*' state.highstate ?
13:14 VR-Jack if the same master, you run into production changing. :)
13:14 VR-Jack multi-master, not a big deal
13:14 homeshlice joined #salt
13:14 homeshlice i’m new to saltstack.. is saltstack free?
13:14 VR-Jack I do multi-master w/ hg
13:14 AndreasLutro I don't think I'd want to use the same master for prod and staging regardless
13:14 VR-Jack but git would be fine
13:15 AndreasLutro homeshlice: salt is free and open source, yes
13:15 VR-Jack homeshlice: like a lot of projects, there's a free and a commercial version
13:15 AndreasLutro homeshlice: saltstack is the company behind it, they provide premium services if you need them
13:15 XenophonF homeshlice: better yet, it isn't 'open core' like other projects i could mention
13:15 phx i never found out the difference between the free and the premium saltstack
13:15 * XenophonF curses under his breath at Zenoss.
13:15 ITChap using multiple master your minion don't need to have any special settings just attach to the good master
13:16 ITChap I like it this way
13:16 VR-Jack phx: gui and a few extra db items
13:16 VR-Jack although I believe the db items are hidden in the OSS version dev
13:17 Tyrm joined #salt
13:17 homeshlice thanks, and is saltstack python based?
13:17 khaije1 I'm reading about include and extend, but is there a way to say that a state depends on another state file?
13:17 VR-Jack XenophonF: I gave up on Zenoss and went zabbix
13:17 AndreasLutro homeshlice: yes
13:18 AndreasLutro khaije1: require: - sls: my_sls
13:18 khaije1 brilliant AndreasLutro, I thank you.
13:18 VR-Jack warning! there are issues with include and require sls
13:18 AndreasLutro I bet there are...
13:18 VR-Jack can create a loop
13:18 AndreasLutro I would recomment including the sls and requiring specific states instead
13:19 AndreasLutro recommend*
13:19 claytron_ joined #salt
13:19 homeshlice and what would you guys say is the biggest difference when comparing ansible and saltstack?
13:19 homeshlice AndreasLutro: thanks
13:19 VR-Jack ansible is ssh only, but it does it better than saltstack
13:20 VR-Jack I give another year on salt-ssh
13:20 pdayton joined #salt
13:20 AndreasLutro I've been using salt-ssh pretty successfully
13:21 VR-Jack There's a lot of code it doesn't support yet, and when I tried it with sudo on 2015.5 it couldn't even run a state
13:21 LtLefse joined #salt
13:21 ITChap Do you guys manage any network gears with salt or salt-ssh ?
13:21 hvn joined #salt
13:21 hvn joined #salt
13:21 AndreasLutro odd, I've used 2015.5 with sudo
13:21 VR-Jack There's a bug with $HOME (didn't quote the parameter and gets shell processed on master)
13:21 AndreasLutro nah just servers
13:21 khaije1 VR-Jack: AndreasLutro: could you break that down a bit... you mean you recommend includes, and seperately, including specific states, (instead of sls files) ... do I have that right?
13:21 AndreasLutro debian/ubuntu servers that is
13:21 khaije1 how do I require a specific state-id ?
13:21 DanyC AndreasLutro: do you have other nice examples like the iptables one? :) the simplicity just blew my head :)
13:22 VR-Jack and then it did the test.opkg or whatever for grains and that's where it died
13:22 ITChap I have some Arista switches I need to check if I can do something with salt on it
13:22 VR-Jack khaijel: yes
13:22 babilen DanyC: Which iptables example?
13:22 DanyC babilen: https://gist.github.com/anlutro/644fc588e228f0df14b9 from AndreasLutro
13:22 AndreasLutro DanyC: not really no, everything else is "standard" salt so to speak
13:23 VR-Jack khaijel: require: - pkg: stateid or - service: stateid, etc
13:23 racooper joined #salt
13:23 babilen DanyC: ta
13:23 AndreasLutro khaije1: https://bpaste.net/show/b5526d257189 like this
13:24 ITChap is it possible to watch or listen on a sls ?
13:24 DanyC babilen: pleasure ;)
13:24 ITChap or just require ?
13:24 homeshlice does saltstack play well with aws?
13:24 VR-Jack khaijel: http://docs.saltstack.com/en/latest/ref/states/requisites.html
13:24 AndreasLutro ITChap: yeah I have no experience with anything other than regular debian/ubuntu servers, I suppose for more esoteric stuff the same rules don't apply
13:24 mapu joined #salt
13:24 AndreasLutro but for my use case, salt-ssh has worked ok, though there are definitely some funny bugs
13:24 VR-Jack ITChap: would probably have to test it. doubt it's documented
13:25 AndreasLutro https://github.com/saltstack/salt/issues/25721 this one is my favorite :)
13:25 saltstackbot [#25721]title: Strange "Permission denied" error with "/etc/apache2/sites-available/default-ssl.conf" with salt-ssh | I noticed a strange error when I tried to write a state which manages `/etc/apache2/site-available/default-ssl.conf`....
13:25 VR-Jack homeshlice: yes. people use it with aws
13:25 VR-Jack homeshlice: look at salt-cloud
13:25 babilen homeshlice: I'd really recommend to define a small project and implement it with saltstack and ansible if you are trying to decide between the two. I found ansible to be a bit too limiting and the saltstack community more welcoming, but that was some time ago. There is also an older comparison http://ryandlane.com/blog/2014/08/04/moving-away-from-puppet-saltstack-or-ansible/
13:25 XenophonF homeshlice: i use salt-cloud to provision all of my servers in aws---linux and windows
13:25 cpowell joined #salt
13:25 DanyC on a different subject, anyone here is using an IRC bot which is public so i can hook my client - i don't want to set my own ZNC
13:26 * babilen runs on a private vm
13:26 VR-Jack babilen, homeshlice: Ryan's comparison is still good today
13:27 babilen VR-Jack: It sure is, I didn't mean to imply that it is not ...
13:27 ninkotech_ joined #salt
13:27 AndreasLutro heh, that blog post inspired my choice as well
13:27 VR-Jack yeah, just making sure your "old" didn't get taken for obsolete. :)
13:28 VR-Jack Same. I read it before picking
13:28 XenophonF homeshlice: i'm getting ready to tie my various vsphere-based private clouds into salt, too
13:28 XenophonF just waiting for 2015.5.4
13:28 jdesilet joined #salt
13:29 VR-Jack I sometimes feel salt is a little too open in accepting commits, though.
13:29 AndreasLutro VR-Jack: it totally is :p
13:29 VR-Jack It leads to a lot of our bugs
13:30 AndreasLutro code structure and test coverage leaves something to be desired as well
13:30 * babilen loves the monkey patching
13:30 VR-Jack Yeah, I have tickets and suggestions to corporate concerning those items
13:30 khaije1 AndreasLutro: so to reference by stateid the item prefix is state as https://gist.github.com/khaije1/49a3e6a2c8bc4424a39a
13:30 AndreasLutro I always run off the latest git head, if I were tied to distro-specific releases I'd probably give up
13:31 VR-Jack functional tests, and perhaps a lint tweak or something similar to verify all called functions exist and have code in them
13:31 khaije1 your example illuminated that the prefix is actually the execution module name
13:31 khaije1 :)
13:31 AndreasLutro err sorry khaije1 my paste is wrong
13:31 VR-Jack I'm probably going to start going off the stable git head. Get all the patches faster than next month.
13:31 AndreasLutro let me modify it..
13:32 bhosmer joined #salt
13:32 AndreasLutro khaije1: https://bpaste.net/show/e9f8bb38a089 this should be better
13:32 AndreasLutro note the difference between .sls names and state IDs
13:32 VR-Jack Most of the time, they don't allow bad patches into stable.
13:34 TyrfingMjolnir joined #salt
13:35 duendecat joined #salt
13:35 khaije1 does that work? I just tested using the 'require: \n    state: <stateid>' snippet and it worked
13:36 icflournoy joined #salt
13:36 AndreasLutro if `require: - state: <stateid>` works then that's an undocumented feature
13:36 * AndreasLutro tests
13:38 funzo joined #salt
13:38 AndreasLutro doesn't work here khaije1, dunno what you did to make it not error :)
13:38 kawa2014 joined #salt
13:39 XenophonF hah
13:39 AndreasLutro https://github.com/saltstack/salt/issues/4597
13:39 saltstackbot [#4597]title: Require by id/label | As discussed with UtahDave on IRC:...
13:40 VR-Jack AndreasLutro: Do you know if salt-cloud or salt-ssh's file can gain access to pillar?
13:41 bhosmer joined #salt
13:41 VR-Jack That's one thing I didn't like. duplicate host info in pillar plus the others
13:41 DanyC babilen: thx, so you using a private IRC bot.... i was trying to see if i can hook onto http://irclog.perlgeek.de/salt/ with my client. In this case i don't have to do anything...we'll see hwo it goes
13:41 AndreasLutro VR-Jack: not sure what you mean by that
13:41 khaije1 AndreasLutro: oh that has me worried that it'll stop working next time I update the salt version
13:41 khaije1 what version are you using?
13:41 AndreasLutro khaije1: 2015.8
13:41 XenophonF VR-Jack: i use salt-formula to build the salt-cloud and salt-ssh configs, if that's what you want
13:41 stephanbuys left #salt
13:42 VR-Jack XenophonF: So you just use the local minion and build them? That's an option
13:42 XenophonF well, the master's a minion, right?
13:43 XenophonF https://github.com/irtnog/salt-states/tree/development/salt/files but they're empty
13:43 XenophonF i'm afraid i can't show you my work configs
13:43 TyrfingMjolnir joined #salt
13:43 VR-Jack Yeah. Guess I could set it up that way.
13:44 XenophonF but basically, if you tell salt-formula to use a particular provider, it will look for files matching that provider name in the same environment under salt/files
13:44 VR-Jack I hate duplicate
13:44 VR-Jack I'd custom it, myself. I have a pillar setup layout for my needs
13:44 AndreasLutro duplicate what and where VR-Jack ?
13:44 XenophonF so i let salt-formula do all the heavy lifting
13:45 teryx510 joined #salt
13:45 VR-Jack AndreasLutro: the /etc/salt configs for cloud and ssh. Like roster. But yeah, doing a state and building them from the pillar would be just as good
13:46 XenophonF if i have some time today, i'll add some salt-cloud stuff to my state repo and my pillar examples
13:46 Arendtsen joined #salt
13:46 XenophonF VR-Jack: ping me after 2pm us edt (utc-04:00)
13:46 AndreasLutro the only thing you'd be repeating in roster would be the IP I guess
13:46 AndreasLutro I can't think of anything that'd be repeated in salt-cloud vs elsewhere but I guess use-cases vary
13:47 VR-Jack XenophonF: I'm good. I had thought of that process but forgot it. old memory. :)
13:47 XenophonF VR-Jack: do you need salt-ssh? for me salt-cloud gets the minion ip from the cloud provider and runs the minion bootstrap automagically
13:48 VR-Jack XenophonF: depends on how I do setup. FYI: I'm just a kvm shop mostly.
13:48 XenophonF gotcha
13:48 XenophonF are you using anything like xenserver or openstack or something to manage your hypervisors?
13:49 VR-Jack nope
13:49 bhosmer joined #salt
13:49 VR-Jack just standard libvirt
13:49 XenophonF gotcha
13:49 mpanetta joined #salt
13:49 VR-Jack and gonna have to modify my createvm script. *sigh* And it was so automagic
13:50 VR-Jack May keep it for fast local turnups but in a way that doesn't freak salt out
13:51 linjan joined #salt
13:52 VR-Jack I do quite a bit of testing, though, so I may start spinning up some stuff on DO or AWS
13:53 DammitJim joined #salt
13:56 VR-Jack hmm. when I was testing salt-ssh it was to a server with a minion installed. wonder if that screwed things up
13:58 kawa2014 joined #salt
13:58 VR-Jack python may have mixed the versions
13:58 hvn joined #salt
13:58 andrew_v joined #salt
14:00 AndreasLutro that is definitely a possibility
14:01 murrdoc joined #salt
14:01 scoates joined #salt
14:01 VR-Jack lol. first test. fails with wanting key accept
14:02 VR-Jack guess I need -i
14:02 AndreasLutro the first time, yes
14:02 Akhter joined #salt
14:03 VR-Jack hmmm. key push may fail. :(
14:03 claytron_ joined #salt
14:04 AndreasLutro what I do is ensure you can log in via ssh with password as root at first. salt-ssh will be able to deploy its own ssh key, then the states will configure the ssh server to be secure again
14:05 kaptk2 joined #salt
14:05 Akhter joined #salt
14:05 VR-Jack heh. if doing agent forwarding, enter dummy password. blank password screws it up
14:06 LtLefse joined #salt
14:07 VR-Jack ugh. it's key is installed, but not working. lol
14:07 sunkist joined #salt
14:07 DanyC XenophonF: question for you around salt-cloud.. I'm an OpenStack shop and using HEAT to deploy my master and minions which then pull the states and complete the job. In your situation, how does Salt-Cloud deals with Security Groups in plain OpenStack and not RAX which is very different where only Iptables type Security Groups are supported ?
14:08 DanyC XenophonF: i thought Salt-cloud doesn't support yet all the use cases HEAT integrate around SG/ Nova etc - hence why i'm still using HEAT only. If i'm wrong, great - maybe is time for me to refresh my knowledge on that ;)
14:09 rodio_ua joined #salt
14:09 rodio_ua left #salt
14:10 Arendtsen If one creates several enviroments for states is the same environments need for pillars as well?
14:10 VR-Jack Oh. heh. forgot to set sudo to not use key auth. ugh. wish they'd support the agent forward/sudo setup
14:10 jeremyr joined #salt
14:13 favadi joined #salt
14:14 dthom91 joined #salt
14:14 XenophonF hang on DanyC, i'm in a meeting
14:16 VR-Jack Nope. Didn't fix my problem. salt-ssh returns with the results of test.opts_pkg and exits
14:17 AndreasLutro VR-Jack: when you run what command?
14:18 Akhter Hey guys, do any of you know how to set a grain from a saltstate?
14:18 VR-Jack salt-ssh node* state.sls nano
14:18 VR-Jack test.ping works, but state calls fail
14:18 Brew joined #salt
14:18 Akhter Like I want a salt state to run from top.sls which will set the grain to a value.
14:18 AndreasLutro odd! any state or particular ones?
14:18 markm joined #salt
14:19 VR-Jack AndreasLutro: all states. It doesn't make it past the test.opts_pkg which is how it does grains and stuff
14:19 AndreasLutro is there a stack trace?
14:20 VR-Jack Nope. Returns stderr with the ssh closed message, stdout with the output of opts_pkg, and further up it has:
14:20 VR-Jack _error:
14:20 VR-Jack Failed to return clean data
14:21 AndreasLutro salt-ssh errors can be pretty cryptic... I'd try with -l trace, redirect the output to a file because it can often be 1000s of lines
14:22 VR-Jack debug didn't really add anything
14:23 VR-Jack just the ssh commands
14:23 VR-Jack and: [DEBUG   ] SHIM retcode(0) and command: _edbc7885e4f9aac9b83b35999b68d015148caf467b78fa39c05f669c0ff89878
14:24 AndreasLutro use trace or all, not debug
14:24 spark_ joined #salt
14:24 TyrfingMjolnir joined #salt
14:28 zmalone joined #salt
14:29 wnkz joined #salt
14:30 yannis joined #salt
14:33 yannis hey guys, I'm having an issue with importing a Jinja macro into my init.sls state file. The statement to import it is this: {% from 'docker-container.sls' import deploy_docker_container with context %} and the error that I get on that line is "TemplateNotFound: docker-container.sls". Clearly it's not finding it .... However the imported sls file is in the same directory as the init.sls file. Any ideas what could be going wrong? Thanks!
14:33 drawsmcgraw yannis: It needs to be the full path to the file
14:34 drawsmcgraw the full path in the Salt file server, that is
14:34 yannis really? is there no way to use a relative path for this?
14:34 AndreasLutro nope
14:34 yannis or some way for me to provide the search path externally
14:34 drawsmcgraw yannis: If there is, I'm unaware
14:34 yannis maybe an environment variable for the search path or similar?
14:35 yannis ok well let me try full path first
14:36 TyrfingMjolnir joined #salt
14:36 yannis it doesn't like the forward slashes in the full path
14:38 duendecat joined #salt
14:38 VR-Jack AndreasLutro: switched to root login instead of sudo and it now works.
14:38 yannis {% from '/root/salt/states/elasticsearch/docker-container.sls' import deploy_docker_container with context %} gives me MinionError: Unsupported path
14:39 AndreasLutro yannis: from 'elasticsearch/docker-container.sls'
14:39 AndreasLutro home time
14:39 yannis finally! thanks so much
14:40 yannis now I can delete about half the codebase thanks to that :)
14:40 jaybocc2 joined #salt
14:43 PredatorVI joined #salt
14:43 capricorn_1 joined #salt
14:44 capricorn_1 joined #salt
14:46 zwi joined #salt
14:49 claytron_ joined #salt
14:49 bhosmer joined #salt
14:50 jbrnds Q: is there an easy way to make a file structure using jinja templating. Now I 'copy' file.directory states every time. That goes against my DRY principle. I made a gist to demonstrate what I mean: https://gist.github.com/df103ae8b5015ccf4639.git
14:51 sunkist joined #salt
14:51 venu0336 joined #salt
14:55 VR-Jack jbrnds: sure. just create a list in pillar of directories and loop through it?
14:55 elfixit joined #salt
14:55 jalbretsen joined #salt
14:56 VR-Jack you could also use a single key for the directory under all the different apps, and do some magic to get just those keys based on the shared key name
14:56 babilen I can't open that gist for some reason, but VR-Jack's idea sounds spot on
14:56 VR-Jack delete the .git at the end
14:56 jbrnds babilen, yeah indeed:https://gist.github.com/jberends/df103ae8b5015ccf4639 (without .git)
14:57 murrdoc use looping in jinja sparingly
14:57 murrdoc u can do this with
14:57 murrdoc all-dirs-in-webapp:
14:57 murrdoc file.directory:
14:57 murrdoc - names:
14:57 murrdoc - dir1
14:57 murrdoc - dir2
14:57 murrdoc so on
14:58 VR-Jack yaml parsing error! :P
14:58 murrdoc pssh its not my bad i cant figure out how to add a line break and a tab
14:59 murrdoc but names is global
14:59 otter768 joined #salt
14:59 murrdoc if u hvae a list of things that need the same options just use names
15:00 zzzirk joined #salt
15:00 murrdoc jbrnds:  https://gist.github.com/jberends/df103ae8b5015ccf4639
15:02 jbrnds murrdoc, check. names work too then (just as I use in pkg.installed). Will check it out.
15:02 SheetiS joined #salt
15:02 icflournoy joined #salt
15:02 murrdoc names and failhard are global options
15:02 murrdoc to all states
15:03 Gareth o/
15:03 jbrnds VR-Jack, updated the gist: https://gist.github.com/df103ae8b5015ccf4639 with the looping. But will go for names - more native salty
15:04 murrdoc Gareth:  \o
15:04 VR-Jack definitely. I didn't notice they were all for the same thing
15:04 Gareth murrdoc: hows it going?
15:04 murrdoc its aight man
15:04 murrdoc how are u doing
15:05 Gareth not too bad :)
15:05 duendecat joined #salt
15:07 PredatorVI Anyone familiar with or use the salt-forumulas/rabbitmq-formula ?  For the life of me it won't install the pkgrepo and could use some guidance
15:07 sdm24 joined #salt
15:07 gazarsgo joined #salt
15:07 spark_ joined #salt
15:07 czchen joined #salt
15:08 grepory joined #salt
15:09 funzo joined #salt
15:09 PredatorVI Here is my state file for joining the rabbit cluster that 'require' on the rabbitmq.rabbitmq-server pkg.  It is definitely running and including the state but fails to install the package because it can't find that version and nowhere can I see even an attempt at installing the apt repo.
15:09 PredatorVI https://gist.github.com/PredatorVI/d8df4877a3b463f73c32
15:09 LinuxHorn joined #salt
15:09 OliverMT joined #salt
15:10 imanc joined #salt
15:10 berto- joined #salt
15:10 murrdoc link to formua
15:10 PredatorVI Here is my fork https://github.com/PredatorVI/rabbitmq-formula
15:11 mattl joined #salt
15:11 chutzpah joined #salt
15:11 PredatorVI https://github.com/saltstack-formulas/rabbitmq-formula
15:11 [vaelen] joined #salt
15:11 akitada joined #salt
15:11 venu0336_ joined #salt
15:11 mikepea joined #salt
15:12 murrdoc try include:  rabbitmq.latest
15:13 skarn joined #salt
15:13 hardwire joined #salt
15:13 DanyC XenophonF: no prob :)
15:14 spark_ joined #salt
15:14 linjan_ joined #salt
15:15 tmclaugh[work] joined #salt
15:18 favadi joined #salt
15:19 jondonas joined #salt
15:21 iggy PredatorVI: what distro are you installing on?
15:22 Furao joined #salt
15:22 dezertol joined #salt
15:26 PredatorVI murrdoc:  That seemed to get past that issue.  If I'm understanding the reason, it's because the 'rabbitmq-server: pkg.installed' module doesn't have the 'require', but the latest uses 'require_in'.  Would it be better to use require on the pkg.installed module?  What reason would the 'require_in' be better in this case?
15:26 iggy PredatorVI: because the pkgrepo only works on certain distros
15:26 lz-dylan Hey, folks!
15:26 PredatorVI ah
15:26 iggy (Debian and centos 6)
15:27 PredatorVI Good to know!
15:27 * PredatorVI would slap PredatorVI, but is not being violent today
15:28 lz-dylan Anyone know offhand how to use `cron.rm_job` targeting based solely on a cron identifier? The docs include identifier in the potential argument list, but examples skip it in lieu of just the cmd (ie. `salt '*' cron.rm_job root /usr/local/weekly`)
15:29 lz-dylan I'd like to do `salt \* cron.rm_job username some-identifier` and it doesn't seem to work; guesswork of `salt \* cron.rm_job username Identifier=some-identifier` just throws an argument count error.
15:31 lz-dylan looks like: https://gist.github.com/arubis/57df03201ebad146fe4a
15:33 claytron_ joined #salt
15:34 z3r0 joined #salt
15:35 atree joined #salt
15:38 Akhter iggy: Hey, mind if I bother you with a quick question?
15:39 jerematic joined #salt
15:40 iggy lz-dylan: you'd have to specify the command and the identifier if you want to do it that way
15:40 lz-dylan iggy: So `salt \* target cron.rm_job username cmd identifier=some_id`?
15:40 iggy lz-dylan: you're seeing that message because rm has 2 mandatory args and multiple optional, you specified one manadatory and one optional, so you have the right number of args, but not the correct combo
15:41 lz-dylan No way to do it based on identifier alone?
15:41 iggy lz-dylan: nope
15:41 lz-dylan Got it. That won't really hold me back in this case. Thanks!
15:41 iggy Akhter: shoot
15:41 Akhter iggy: I'm trying to use client.destroy as suggested here: http://docs.saltstack.com/en/latest/ref/clients/#salt.cloud.CloudClient.destroy
15:42 lz-dylan BTW, this channel is pretty much my high bar for OSS IRC support. You guys are great =)
15:42 Akhter This is what I have so far.  However I get this output: https://gist.github.com/AkhterAli/e5ffca005c1c36edd8ec  output: https://gist.github.com/AkhterAli/a00bdc36669df5f1cc55
15:43 iggy Akhter: fyi, gist can have multiple files per paste
15:43 Akhter That helps, thanks.
15:43 Akhter I'll remember that :)
15:44 TheoSLC joined #salt
15:45 TheoSLC Greetings.  I'm having a problem with my /var/cache/salt/minion/extrn_files/ directory filling up quickly.  Is there a way to tell salt to not cache files there?
15:45 iggy Akhter: your virtual won't work the way you think it will
15:45 Akhter Really?  Judging by the error it looks like it's passing the virtual.
15:46 iggy I mean based on the pydoc
15:46 Akhter https://docs.saltstack.com/en/develop/ref/modules/index.html#virtual-modules
15:46 iggy it won't continually try to load modules until 5 minutes has passed
15:46 Akhter Ahh, that's my doc.
15:46 Akhter I can remove taht.
15:46 Akhter that*
15:46 Akhter It doesn't actually do any sort of check.
15:47 Akhter It's not a docstring, it's just a doc.
15:47 dthom911 joined #salt
15:47 djstorm joined #salt
15:48 iggy you're going to have cloud config files setup on all your minions?
15:50 Akhter iggy: This is only meant to target ec2 machines so they should have the cloud config files setup.
15:51 iggy Should they? I mean that's not a default thing, that's something you'd have to setup
15:52 atree left #salt
15:52 dyasny joined #salt
15:52 Akhter Mind sharing how I would set them up so I'm not missing the config?
15:54 Bryson joined #salt
15:58 Akhter From what I understand the bootstrap script I've already setup with when launching the instance via salt-cloud should already include any configs.
15:58 Akhter But I want to double check.
15:59 PredatorVI I a folder called 'myapp' that has init.sls and inside the init.sls I have 'myserver:  pkg.installed: ...'   I now want to include 'myapp' so that I can require the pkg myserver.  What is the proper syntax to include and reference 'myserver' located in 'init.sls' under the 'myapp' folder?
15:59 nzero joined #salt
16:00 iggy Akhter: not that I know of
16:01 iggy Akhter: none of my machines spun up with salt-cloud have any cloud config
16:01 jaybocc2 joined #salt
16:01 Akhter Where would the cloud config files be located?
16:02 Akhter Likely I do have them due to the bootstrap script (it's not a script I created).
16:02 iggy usually on the master... wherever you ran salt-cloud from
16:02 dezertol my custom bootstrap is in /etc/salt/cloud.deploy.d
16:03 dezertol on my setup
16:03 Akhter Yeah, mine are there.
16:03 duendecat joined #salt
16:03 boredatwork joined #salt
16:04 Akhter and my profile is in /etc/salt/cloud.profiles.d, mappings are in /ettc/salt/cloud.maps.d
16:04 dezertol same
16:04 Akhter That's how I got the instance launched, but it won't terminate by minion ID?
16:04 dezertol did you launch it via map or by profile?
16:04 sdm24 PredatorVI: use include, and then you can require the modules like normal. http://docs.saltstack.com/en/latest/ref/states/requisites.html#the-in-versions-of-requisites
16:04 saltstackbot [reddit-saltstack] Saltstack extra return error https://www.reddit.com/r/saltstack/comments/3gqior/saltstack_extra_return_error/ - 2015-08-12 - 17:04:41
16:05 zsoftich2 joined #salt
16:05 Akhter by map
16:05 Akhter salt-cloud -m (point to map file)
16:06 dezertol and if you run the same command with a -d
16:06 dezertol it doesn't ask you to delete it?
16:06 dezertol salt-cloud -m <map> -d
16:06 dezertol it should ask you to delete the instance(s) it.. at least it does for me..
16:08 RickCH joined #salt
16:08 bougie joined #salt
16:08 Akhter dezertol: Never mind, I miss-spoke, the mapping isn't there.  Is it necessary to have that there to use python api CloudClient.destroy?
16:08 RickCH Anyone good at building iptables with salt states?
16:08 Akhter http://docs.saltstack.com/en/latest/ref/clients/#salt.cloud.CloudClient.destroy
16:08 RickCH I need to forward anything from port 2195 to a squid proxy.
16:09 funzo joined #salt
16:10 dezertol Akhter: if your talking about the profiles and providers then ya you'd need that to be able to reference the minion.. but the cloud.map is optional
16:11 jaybocc2 joined #salt
16:11 Akhter dezertol: By default the minion name is the hostname of the instance.  Right now I can check the minion['id'] grain which comes up just fine.
16:12 dezertol ya but salt-cloud is not part of salt-core
16:12 tmclaugh[work] joined #salt
16:12 Akhter Ahhhhh.
16:12 dezertol so calling a "minion" destroy is part of the underliner
16:12 dezertol for the vm host
16:13 dezertol in the case of AWS you'd need to setup the provider and junk so that your salt commands have the rights and access to issue the AWS cli commands
16:13 Akhter But I can target that minion name by running "salt-cloud -d (minion name)"
16:13 dezertol on your behalf
16:14 dezertol then I would assume that you already have the provider and stuff setup
16:14 Akhter Are you stating that by running salt.cloud.CloudClient, it's not using the salt-cloud api's?
16:14 Akhter Yes, I do.
16:14 Akhter provider and profile to launch the instance.
16:14 dezertol so then ya the pythong clouldCloudClient.destroy.. should work .. tho I've never tried it
16:14 Akhter https://gist.github.com/AkhterAli/0ab76f6badb312495186
16:14 Akhter That's the return I get when executing that module.
16:15 iggy dezertol: salt-cloud is part of salt-core now (as of like 2 years ago)
16:16 aparsons joined #salt
16:16 Akhter minion_name = __grains__['id']  -- so I should be able to use salt-core and run "salt 'myminion' checkhighstate_test.destroy" that should target the minion['id'] of 'myminion' which should then run checkhighstate_test.destroy
16:16 dthom91 joined #salt
16:16 Akhter Sorry for the long names.
16:16 Akhter I should have called the module name something smaller.
16:16 dezertol iggy: that's good to know.. I was under the impression that they where seperate.. as the sites/look and feel even the packages are sepearte
16:16 iggy Akhter: the problem is you don't have any cloud config on the minion where you are running that, so it can't delete itself
16:17 Lionel_Debroux_ joined #salt
16:17 iggy dezertol: the salt-cloud package at this point is just the wrapper script... the cloud modules are part of the main salt package
16:17 z3r0 joined #salt
16:18 dezertol iggy: that's good to know, do you know if they are going to build provider like the AWS one for libvirt?
16:18 iggy so you can technically call cloud modules (i.e. salt.states.cloud.*) without salt-cloud installed... you just wouldn't be able to call the command line salt-cloud script
16:18 tmclaugh[work] joined #salt
16:18 claytron_ joined #salt
16:19 gimpy2938 Writing a custom state I keep getting "State 'foo.bar' was not found in SLS whatevs" - however, the script is in _states, I ran saltutil.sync_states and verified it was pushed to the minion.  Why does this fail?
16:19 dthom911 joined #salt
16:19 iggy dezertol: it shouldn't be too hard since libcloud supports it
16:20 writtenoff joined #salt
16:20 iggy and most of the providers now use libcloud
16:20 dezertol I'll have to check again.. I've not looked in  a couple months..
16:20 Akhter iggy: So each of my minions need to have cloud config so they would require the provider to list the VM's and delete itself?
16:21 capricorn_1 joined #salt
16:21 iggy Akhter: the better option is probably to have the minion call the reactor and have the master handle the actual cloud calls (assuming you already have the cloud config there)
16:22 Akhter I already have the cloud configs on the master.  Okay, I'll try to figure out how to go about that.
16:22 Akhter Thanks iggy
16:22 RickCH Anyone good at building iptables with salt states? I need to forward anything from port 2195 to a squid proxy.
16:22 jaybocc2 joined #salt
16:23 iggy Akhter: you really want to delete everything 5 minutes after it's up?
16:23 Akhter iggy: It's more to test if highstates fail.
16:23 Akhter So basically if highstates aren't completed after 5 minutes, then it will kill the instance.
16:23 iggy ahh
16:24 Akhter That's just the test module.  I have the full module which will set grains value from incomplete to complete in order and another grain to sync uptime grains.
16:24 Akhter So if the uptime grain is more than 5 minutes and highstate status is incomplete then it will kill the instance.
16:24 Akhter I feel like this is a giant workaround but with the scheduler I can run the module as needed without so much syncing.
16:25 iggy so yeah, just call __salt__['event.fire_master']({'minid': __grains__['id']}, 'mycustom/reactor/tag/to/delete')
16:25 iggy on the minion
16:25 dyasny joined #salt
16:25 dezertol iggy: libvirt -> "Libvirt driver in current version of Libcloud is still experimental and doesn’t support advanced functionality like creating a node and so on."
16:25 dezertol so.. I guess that's a no
16:25 iggy then on the master you have a reactor key for mycustom/reactor/tag/to/delete that runs an sls file that calls the cloud modules directly to delete the minid
16:26 iggy dezertol: lol, "advanced functionality like creating a node"... super advanced
16:26 Akhter I'm not very familiar with reactors just yet so I have to see a few examples so I can set that up.
16:26 Akhter Thanks for the event module though, that will come in handy.
16:26 dyasny joined #salt
16:26 Kraln joined #salt
16:27 dezertol iggy: that's what I thought.. more like... basic core features..
16:27 iggy Akhter: you know about this right? http://docs.saltstack.com/en/latest/salt-modindex.html
16:28 Akhter Yeah, I was already reading through it.
16:28 Akhter I just never set one up before so still a bit new to it.
16:28 Kraln joined #salt
16:28 Akhter And yes, I know about the module list.  It's how I found __grains__['id']
16:29 Akhter Thanks iggy, much appreciated.
16:29 Kraln joined #salt
16:29 stephanbuys joined #salt
16:30 zwi joined #salt
16:30 murrdoc joined #salt
16:30 jaybocc2 joined #salt
16:32 RickCH So no one is good at translating iptable rules to saltstates?
16:33 bhosmer joined #salt
16:34 rodio_ua joined #salt
16:34 rodio_ua left #salt
16:35 iggy I think everybody just uses iptables directly since salt's iptables/firewall modules are worse than the sweat from a baboon's balls
16:37 dezertol RickCH: I've honestly never had to do any iptables in my states.. all the environments I work on are all behind something dedicated to that job
16:37 murrdoc "I think everybody just uses iptables directly since salt's iptables/firewall modules are worse than the sweat from a baboon's balls
16:37 murrdoc " true
16:37 murrdoc pkgrepo managed vs iptables
16:37 murrdoc its a close call about which one sucks more
16:37 zwi RickCH:  are you looking to do something fancy or just allow/deny a port?
16:37 mpanetta Looks like we need a quotes page now :P
16:39 murrdoc saltstackbot:  add quote "iggy : still waiting on that 2015.1'
16:40 dthom91 joined #salt
16:41 RickCH zwi I need to forward everything from port 2195 to a http proxy
16:42 zwi so like reverse nat and all that..yeah this is where I bow out :-)
16:43 zwi sorry..I've just started using the iptables stuff for my consul module but nothing that advanced
16:43 sdm24 RickCH: I'm not sure what rules to set, but one solution could just be having salt either file.manage a template for iptables
16:43 dthom911 joined #salt
16:44 RickCH I have thought about the template.  Was just hoping to figure out how to use the built in.  Cleaner.
16:44 kawa2014 joined #salt
16:45 PredatorVI sdm24:  sorry for delay (meetings) I'm using include, but I'm just a little fuzzy on the syntax for referencing targets that were included.
16:46 iggy - module: state_id
16:46 sdm24 I think its the exact same as normal references
16:46 iggy but you have to make sure you include everything you reference
16:46 PredatorVI ok
16:47 PredatorVI I think I assumed that if I had 'init.sls' in the folder I'm including, it would include everything else referenced.
16:47 iggy no
16:47 malinoff joined #salt
16:48 iggy if you have like repo.sls, server.sls, client.sls, and init.sls in a dir, if init.sls references something in server.sls, it has to include dir.server at the top
16:49 sdm24 or just .server I believe, if they share a directory
16:49 PredatorVI got it
16:49 PredatorVI thanks
16:50 ingslovak joined #salt
16:52 aparsons_ joined #salt
16:52 cpowell joined #salt
16:52 PredatorVI I'm working on a state that stands up a 3 node rabbitmq cluster.  node01 is primary and must be configured first.  Other than only doing them sequentially one at a time, are there other 'salty' ways to enforce ordering?
16:54 dezertol PredatorVI outside of using reactors to trigger the next one there isn't any good way that I've found to "pause" the until x value is present..
16:54 bezeee joined #salt
16:55 dezertol we use the reactors to configure our slave databases in our master/slave setups..
16:55 SheetiS https://docs.saltstack.com/en/latest/topics/tutorials/states_pt5.html orchestration is a great way to do ordered runs among multiple minions.
16:55 dezertol o.. ya I .. forgot about orchestration..
16:55 dezertol I need to re-visit that
16:56 SheetiS you can (and I do) have the reactor call orchestrations as well
16:56 SheetiS depending on your needs.
16:56 iggy ^
16:56 cpowell joined #salt
16:57 teryx510 joined #salt
16:57 iggy f.ex. I have an orchestration that sets up all our nodes to use an internal repo server when a server called *repo* is deployed
16:59 murrdoc joined #salt
17:00 SheetiS iggy: nice.  I currently run all my yum repos out of hte same server, so mine is much simpler (attached to states on the same VM).  It's getting a little bit 'heavy', but isn't that bad because we do most of our packages out to the minions via (salted) channels in spacewalk.
17:00 dendazen joined #salt
17:00 otter768 joined #salt
17:01 iggy I ended up doing it that way because we actually have on centralized repo server that all our "environments" pull from, but in devel/qa we sometimes want to override that (without the possibility of prod pulling something they shouldn't)
17:01 iggy *have one
17:02 murrdoc1 joined #salt
17:02 scoates joined #salt
17:03 SheetiS Ahh.  We schedule new package versions via spacewalk.  Salt doesn't know about versions, just pkg.installed for us.  Then the different environments dev/stage/test/uat/prod/support/whatever have their own spacewalk groups that can get issued the updates in a controlled manner.
17:03 jngd joined #salt
17:04 VR-Jack If you're doing that, shouldn't it be pkg.latest?
17:04 SheetiS nah, because the rhn_check also schedules the date/time of the install
17:04 SheetiS so it can happen in our maintenance window and not during a random highstate
17:05 VR-Jack ahh. gotcha
17:07 spark_ joined #salt
17:08 VR-Jack given the overlap of spacewalk and salt, I think I'd just tend to use salt and different repos
17:10 PredatorVI This might be peripherally related, but how are you guys managing general OS updates/security patches?  Is that something you use salt for?
17:10 hvn joined #salt
17:10 hvn joined #salt
17:11 VR-Jack PredatorVI: depends. With private repo, usually update the repo, then let the maintenance window scheduled update do it. Some people just issue salt commands to do the updates.
17:12 iggy for dev, I just issue the salt commands, for qa/prod, we have some systems that get updates during the maint window, some get them as part of the docker packaging
17:13 PredatorVI ok
17:13 Fiber^ joined #salt
17:13 VR-Jack a million and one ways to do it
17:13 PredatorVI So much to do :)
17:13 PredatorVI true
17:14 iggy it's like I like to say... a swiss army knife with a gun on it
17:14 iggy don't shoot off your toes
17:14 PredatorVI :)
17:14 VR-Jack I generally prefer keeping it in the packages, primarily because updating a package isn't necessarily the entire step
17:15 VR-Jack err. in the sls
17:16 aparsons joined #salt
17:16 kawa2014 joined #salt
17:17 SheetiS docker containers getting security updates is going to be the bane of my existence.
17:18 Edgan joined #salt
17:19 iggy s/getting security updates //
17:20 SheetiS iggy++
17:20 aparsons joined #salt
17:21 ageorgop joined #salt
17:21 VR-Jack hmmm. states might work with salt-ssh, but it appears it doesn't like running the modules directly.
17:22 VR-Jack probably due to lack of appropriate wrappers
17:24 XenophonF DanyC: i'm not using salt with openstack...yet
17:24 XenophonF helpfully soon
17:25 XenophonF er, hopefully
17:25 XenophonF i've been working on my own openstack deployment formula, too
17:26 XenophonF here, we're currently just AWS and vSphere
17:26 XenophonF and at home, I'm running HyperV (which IIRC Salt doesn't support)
17:30 MattGair joined #salt
17:32 pm90_ joined #salt
17:33 ponpanderer joined #salt
17:33 ponpanderer hello
17:34 ponpanderer is there a way to combine --batch-size and --async. Seems when -b/--batch-size is present --async is ignored
17:34 murrdoc1 nope
17:35 SheetiS async doesn't wait for a return, so there is currently no clean/simple way to get to the next step in the batch.
17:35 pm90__ joined #salt
17:36 cpowell joined #salt
17:37 ponpanderer that sucks and is unfortunate as it would be quite useful as much as the limitation does make sense
17:38 X67r joined #salt
17:38 sectionme joined #salt
17:38 cpowell joined #salt
17:40 CeBe1 joined #salt
17:41 RickCH Asked earlier hoping someone new online might be able to assist
17:41 RickCH Anyone good at building iptables with salt states? I need to forward anything from port 2195 to a squid proxy.
17:41 prwilson joined #salt
17:42 forrest joined #salt
17:43 KyleG joined #salt
17:43 KyleG joined #salt
17:45 impi joined #salt
17:46 baweaver joined #salt
17:48 dcs_ joined #salt
17:51 murrdoc1 Gareth:  the schedule module doesnt return the enabled flag, if enabled is set to true , why come
17:51 dendazen joined #salt
17:53 Gareth murrdoc1: who what where?
17:54 dthom91 joined #salt
17:55 SheetiS RickCH: Can you provided more clear details or the raw iptables command that you want salted?  I assume that you want anything that connects TO port tcp 2915 on the particular salt minion to be redirected to a squid proxy on another port/host?
17:56 RickCH -t nat -A PREROUTING -p tcp —dport 3195 -j DNAT —to fproxy.com:312
17:57 RickCH This is for apples push network.  I need anything on the server calling the port to be forwarded to the squid proxy.
17:59 SheetiS RickCH:  I think this should be mostly right: https://bpaste.net/show/26d7e08ab027
18:00 RickCH ok so I thought it was a insert
18:01 sdm24 What command will easily get me a list of specific minions? I currently have been using salt <targets> test.ping, but that creates 2 lines (one for the minion, one for ping: True)
18:01 Furao joined #salt
18:02 RickCH you can always use --out=text to have it output on one line
18:03 sdm24 og good call
18:03 sdm24 oh*
18:03 claytron_ joined #salt
18:04 gimpy2938 Writing a custom state I keep getting "State 'foo.bar' was not found in SLS whatevs" - however, the script is in _states, I ran saltutil.sync_states and verified it was pushed to the minion.  Why does this fail?
18:05 forrest iggy: I still can't get initdb working. I might just call a bash script to do the job
18:05 * forrest facepalms
18:06 iggy DO IT!
18:06 sdm24 dont use a bash script. Use 5
18:06 sdm24 IDs of cmd.run
18:06 murrdoc1 Gareth:  when u run schedule.list it doesnt return the enabled key in the schedules returned
18:06 murrdoc1 Gareth:  it does return enabled key if the value is false
18:07 * Gareth looks
18:07 forrest sdm24: What?
18:07 forrest sdm24: cmd.run already fails
18:07 forrest even when setting the env and the home and everything
18:07 sdm24 forrest: I don't actually know what you are trying to do. I was trying to make a joke about salt's 1000 ways to get a job done
18:07 sdm24 sorry about that :(
18:08 forrest cmd.run for service postgresql-9.3 initdb
18:08 forrest fails with cmd.run
18:08 RickCH Urgh still getting fail:  Failed to set iptables rule for iptablemod.               Attempted rule was /sbin/iptables  -t nat -A PREROUTING  -p tcp --dport 2195 --to http://fproxy.com:312 --jump DNAT for ipv4
18:08 forrest because something isn't getting set correctly by salt, but even when setting the env vars for the root user, still fails
18:10 aron_kexp joined #salt
18:10 sdm24 I had issues with salt setting env vars a while ago. I can't remember exactly what the issue was or what the work around was. I think it was installing Splunk from dpkg, and using a different $SPLUNK_HOME env
18:10 tmclaugh[work] joined #salt
18:11 zsoftich2 RickCH: try --to-destination
18:11 Gareth murrdoc1: what version of salt?
18:11 RickCH https://bpaste.net/show/26d7e08ab027
18:11 zsoftich2 also from iptables docs it looks like it will require an ip
18:11 RickCH is what I tried
18:12 Furao joined #salt
18:12 zsoftich2 change 'to' to 'to-destination'?
18:14 cliluw joined #salt
18:14 Furao_ joined #salt
18:15 RickCH Attempted rule was /sbin/iptables  -t nat -A PREROUTING  -p tcp --dport 2195 --to 10.254.254.18:3128 --jump DNAT for ipv4
18:15 RickCH This is why I hate iptables....
18:16 gimpy2938 RickCH: firewalld is worse IMO
18:16 zsoftich2 it changes - to-destination -> to?
18:18 RickCH https://bpaste.net/show/b90b8aadded4
18:19 saltstackbot [reddit-saltstack] Fundamental saltstack question https://www.reddit.com/r/saltstack/comments/3gr264/fundamental_saltstack_question/ - 2015-08-12 - 19:17:27
18:20 baweaver joined #salt
18:22 forrest iggy: Looks like I already fixed this in another one of my repos, testing the solution now
18:23 PredatorVI We assign roles to minions in our top.sls like this:  `dev:  'E@myapp-(dev|acc)0[1-2]\..+':  - myapp.role_web`  I've renamed some of the roles and rerun 'highstate'.  The minion /etc/salt/grains shows the new roles but it also shows the old roles.  However from the salt master it only lists the old roles and if I do a `salt myapp-acc01 grains.remove role web` followed by `salt myapp-acc01 grains.item role` the 'web' role is still there.  What am I missi
18:26 ajw0100 joined #salt
18:26 scoates I keep hitting the API rate limit when trying to use boto_route53.present ; anyone got a trick to make it stall, somehow, when doing a large number of requests?
18:27 zsoftich2 RickCH: what version are you running? I just tried what you pasted and it worked as expected
18:27 rdutch joined #salt
18:27 forrest PredatorVI: Did you already sync? http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.saltutil.html#salt.modules.saltutil.sync_all
18:27 bhosmer_ joined #salt
18:28 forrest I *THINK* that works for roles
18:28 scoates (where large is 30-50)
18:28 forrest there isn't an exact module for roles specifically though
18:28 RickCH I was just about to post that it ran successfully on the second try.
18:28 PredatorVI forrest:  I did a sync but the old grains are still reflected.  I shouldn't assign grains this way.
18:28 PredatorVI ?
18:29 forrest PredatorVI: No you're doing it the right way
18:29 dthom91 joined #salt
18:29 DammitJim joined #salt
18:29 murrdoc1 Gareth:  'what version of salt', 2014.7
18:29 forrest PredatorVI: Since they are just grains you think it would ;)
18:29 forrest murrdoc1: Gross
18:30 murrdoc1 forrest:  2015.3 is broke
18:30 forrest that's worse than me running centos 6.4
18:30 murrdoc1 or .5
18:30 forrest murrdoc1: How so?
18:30 murrdoc1 whatever it is
18:30 murrdoc1 VR-Jack:  can tell u all about how latest salt is broke
18:30 forrest 2015.5.8 is out
18:30 tiadobatima1 joined #salt
18:31 forrest is it going to be a long rant that you can break down into the key points that could negatively impact this VM I'm provisioning?
18:31 gcfhvjbkn joined #salt
18:31 forrest because I'm provisioning right now and it seems good
18:32 murrdoc1 idk, ask VR-Jack
18:32 murrdoc1 i am on 2014.7.6
18:33 murrdoc1 i will test 2015.3
18:33 Gareth murrdoc1: is 2014.7 even still supported?
18:33 iggy no
18:33 iggy well, they said they aren't going to do any more releases
18:33 ayee year.day.month, really?
18:33 ayee why not year.month.day
18:34 iggy I still keep seeing patches go into it
18:34 Gareth ayee: year.month.revision
18:35 ayee Gareth: So 2015.may.revision8 is out? isn't that from a few months ago?
18:35 iggy there aren't monthly releases
18:36 sdm24 its more of a guideline than a rule
18:36 murrdoc1 Gareth: nope not supported but i like knonwn knowns
18:36 iggy 2015.5 is the current year.month release
18:36 XenophonF i wish they'd stuck with normal version numbers
18:36 PredatorVI how can I purge all grains from a minion?
18:36 iggy there have been multiple revisions (That weren't in May)
18:36 murrdoc1 XenophonF:  u tripping
18:37 murrdoc1 datever > all
18:37 XenophonF or since releases are code named after elements, they could be all googly cute and numbered releases after atomic weights in order
18:37 murrdoc1 dont give thatch ideas
18:37 XenophonF 1, 4, etc.
18:37 mpanetta XenophonF: +1
18:37 mpanetta heh
18:38 sdm24 use isotopes for finer patch numbers
18:38 XenophonF YES!!!
18:38 sdm24 salt version: heavy water
18:38 sdm24 err rather deuterium but you get the joke
18:38 XenophonF heh
18:40 mpanetta and then tritium
18:40 Gareth murrdoc1: right known knowns :) Its fixed in 2015.5
18:40 mpanetta heh
18:40 murrdoc1 Gareth:  is it really ?
18:40 murrdoc1 got link ?
18:41 murrdoc1 i mean its a really easy fix for me
18:41 murrdoc1 i can wirte a custom module and do an update enabled if true if enabled key doesnt exist in return from schedul.elist
18:43 Gareth wait..
18:43 Gareth so you're saying it doesn't say enabled: True...if it's enabled and the enabled bit isnt there.
18:43 Gareth ?
18:43 PredatorVI Is there a grains cache on the master?
18:44 amcorreia joined #salt
18:44 murrdoc1 Gareth:  yeah it doesnt say enabled; True for enabled jobs
18:45 Gareth ahh right.  it does not.
18:45 Gareth unless you disable it, then re-enable it.
18:46 murrdoc1 right
18:47 murrdoc1 so is it fixed in {latest}
18:47 Gareth develop?
18:47 claytron_ joined #salt
18:47 murrdoc1 :D
18:47 murrdoc1 thats not deployable in prod
18:47 murrdoc1 what is this mongodb!
18:49 shaggy_surfer joined #salt
18:50 PredatorVI Should 'grains.delval role destructive=True' actually remove the 'role' and all it's values from everywhere?
18:50 Gareth murrdoc1: looks like no.
18:50 PredatorVI everywhere = minions that were targeted as well as master
18:50 * Gareth works on a PR.
18:51 PredatorVI 'cuz it doesn't seem to do anything
18:51 murrdoc1 Gareth:  thanks
18:52 shaggy_surfer Hi all…. how do I target a set of minions using globs, if the hostnames are like the following web09, web10, I tried salt 'web[09,10]' test.ping but it doesn't work…  I can do them individually and it works.  I have done the following for servers 0-9, like a range salt web0[1,2,3] test.ping or web0[1-9] test.ping and that works.  My issue is I have reached server '10' and now I want to put it in my salt top file too.
18:53 sdm24 salt 'web*' or salt -L 'web01,web02,web03...'
18:53 murrdoc1 Gareth:  when u do update, can u please https://github.com/saltstack/salt/blob/develop/salt/modules/schedule.py#L12438 to do   if name in current_schedule and current_schedule[name].get('enabled'):
18:53 murrdoc1 so that it actually returns all schedules that are enabled
18:55 sdm24 shaggy_surfer: also using single quotes around the target: salt 'web0[1,2,3]' test.ping will work, at least for me
18:55 shaggy_surfer how would you do that in the top file, right now I have 'web0[7,8,9]', now if I want to add the 10th server, how do you do it with the same reg expression but not as a different node?
18:56 shaggy_surfer yes, I am using single quotes, but try this, salt 'web[09,10]' test.ping <== doesn't work
18:57 sdm24 yeah I'm not getting it to work either when I match anything else than integers
18:57 shaggy_surfer so the range is limited to 1 integer then?
18:57 sdm24 like salt 'mysql[dev,prod]' won't work
18:57 shaggy_surfer yeah I see they have what's called compound matchers for that type of thing
18:58 shaggy_surfer but that's for strings and more complex names
18:58 shaggy_surfer I am just adding another integer
18:58 sdm24 i mean like 9 vs 09
18:59 sdm24 so salt 'web[1-10]' will work (assuming your minions are named web1,web2, etc
18:59 sdm24 but salt 'web[01-10]' won't
18:59 shaggy_surfer well unfortunately my host are named 01, 02, 03, etc.
18:59 babilen web0[0-9]
19:00 Gareth murrdoc1: Sounds like that should be a filter argument.
19:00 babilen (or use regular expressions)
19:00 sdm24 web0[0-9] or web10:  \n match: compound?
19:00 murrdoc1 Gareth:  sure
19:00 sdm24 that might work in a top file
19:00 shaggy_surfer I just want web09 and web10 lets' say
19:01 murrdoc1 google compound matches
19:01 prwilson joined #salt
19:01 babilen shaggy_surfer: "-C 'web09 or web10'
19:01 murrdoc1 read the doc
19:01 murrdoc1 free yourself
19:01 otter768 joined #salt
19:01 shaggy_surfer how do you use compound in the top file, I did read the doc
19:01 sdm24 you don't need -C in a top file
19:01 babilen "- match: compound"
19:02 sdm24 yeah
19:02 murrdoc1 That same example expressed in a http://docs.saltstack.com/en/develop/glossary.html#term-top-file looks like the following:
19:02 sdm24 https://gist.github.com/sdm24/7ea173a90d3a47543653
19:02 babilen But check the docs, it sounds as if you want to use regular expressions though or simply "web*" might be all you need
19:03 saltstackbot joined #salt
19:03 PredatorVI Top file example similar to what we use:  'E@web(09|10)':
19:03 shaggy_surfer perfect, let me try that… thanks… I was really looking for better examples… but I will experiment.  Thanks for all the help guys.
19:04 zsoftich2 joined #salt
19:04 zwi I'm trying to do {%- set zwi = salt['mine.send']('zwi','network.get_hostname') %} which I think should do the same as this from the cli: salt-call mine.send zwi mine_function=network.get_hostname and it's not working..suggestions?
19:05 sdm24 what is the error message?
19:06 iggy ping me if the bot acts up
19:07 zwi that's the problem..no error…but it's not getting set..if I do a salt '*' mine.get '*' zwi I don't see that var set unless I do it from the cli…the intent was I'd like to set something in my mine anytime I run my init.sls
19:07 PredatorVI Back to grains question...how do I purge grains for a given minion?
19:07 PredatorVI grains.delval isn't sticking, even with the destructive=True flag
19:09 edrocks joined #salt
19:09 aron_kexp joined #salt
19:09 rdutch use destructive is true to delete the key too
19:10 PredatorVI still not deleting key
19:10 zwi PredatorVI: you're doing a salt 'box' grains.delval <grainname> destructive=True?
19:10 PredatorVI yes
19:10 zwi that works for me..I can confirm by looking at /etc/salt/grains and the key is no longer there at all
19:10 zwi salt 2015.5.3
19:11 PredatorVI what happens if you then do a grains.item <grainname> after the delval?
19:11 baweaver joined #salt
19:11 zwi PredatorVI:  hold please…
19:11 ageorgop1 joined #salt
19:12 zwi heh…that's fun
19:13 scoates_ joined #salt
19:13 zwi (for various definitions of fun)…yeah the key is there with no value
19:13 PredatorVI zwi: I can confirm that the minion /etc/salt/grains is empty.  However the master still sees them ... see this gist https://gist.github.com/PredatorVI/d8df4877a3b463f73c32
19:15 gimpy2938 why not 'web0[1,2,3] or web1[0,1,2]'?  That's how I have my nodegroups configured and it works.
19:15 zwi PredatorVI:  agreed…restarting the minion doesn't clear it either..so definitely a master caching thing?
19:17 zwi PredatorVI:  even saltutil.sync_grains doesn't clear it
19:17 sinonick joined #salt
19:17 hasues joined #salt
19:18 hasues left #salt
19:19 PredatorVI zwi:  That's what I was thinking...I don't know how to clear the master cache
19:22 PredatorVI I tried salt-run cache.clear_all with master shut down and it didn't help.
19:22 jaybocc2 joined #salt
19:25 bhosmer joined #salt
19:25 funzo joined #salt
19:28 VooDooNOFX joined #salt
19:28 malinoff joined #salt
19:29 PredatorVI zwi (et.al.): What is the proper way to clear the master's cache and where are the files stored?
19:30 PredatorVI specifically for grains
19:30 evilrob so salt.states.service can stop a service, and start a service.  is the only way to restart a service with a watch on something?
19:31 ageorgop joined #salt
19:32 forrest evilrob: You can use - reload: True
19:32 forrest to reload
19:32 forrest but otherwise, yeah use a watch/watch_in/listen/listen_in
19:32 PredatorVI evilrob: onchanges works too (I think).  I use it but i've only tested my newly minted states with a clean system so far.
19:33 evilrob reading the docs on that made it sound like it would use the reload function in the service definition instead of the restart
19:33 forrest http://docs.saltstack.com/en/latest/ref/states/requisites.html
19:33 evilrob ok.  I'm modifying config files at the same time.  I'll just add a watch
19:34 omegamike joined #salt
19:35 sinonick joined #salt
19:35 forrest evilrob: Yeah I'd suggest to do watch, or if you want you can just do watch_in for the file itself
19:35 PredatorVI There may be an ordering thing with watch.  My understanding was the 'onchanges' will trigger AFTER a change is detected in the onchanges state.
19:35 quasiben joined #salt
19:37 PredatorVI How do I comment out a jinja directive while debugging a state file?  Simply adding a '#' at the beginning doesn't seem to prevent that directive from executing.
19:37 evilrob have to wrap it with {# #} don't you?
19:37 * evilrob isn't quite shure
19:37 evilrob sure
19:38 forrest yes evilrob
19:38 amcorreia_ joined #salt
19:38 dendazen joined #salt
19:39 PredatorVI all:  Any other guidance on clearning grain cache on master or resetting the minion?
19:39 evilrob so I'm writing salt states for adding a compute node to my openstack cluster.  testing in vagrant.  I've now got a compute node in vagrant on my laptop :)
19:40 VR-Jack Go away and y'all have all kinds of fun
19:41 Arendtsen What the best approach to creating different environments?
19:41 * PredatorVI invits VR-Jack to the party
19:42 VR-Jack forrest: lots of issues in 2015.5.3... many fixes waiting on 2015.5.4 or 2015.8, whichever releases first
19:42 scoates_ whoever decided to make roots/_modules override built-ins, thank you.
19:42 forrest VR-Jack: Yes I just ran into one and had to downgrade to 2014.7
19:42 forrest Not happy about it
19:42 VR-Jack forrest: you'd be less happy if you look at the code. :)
19:43 forrest VR-Jack: I have
19:43 forrest lol
19:43 forrest It isn't that bad
19:43 forrest I just hate the regressions
19:43 forrest very annoying
19:43 VR-Jack I hate the complete rewrites of various functions for each release.
19:43 PredatorVI clearing master cache...anyone?
19:44 VR-Jack one of the biggies is that wheel.* doesn't work
19:44 PredatorVI grain values are stuck on my minion like an Alamaba tick.
19:44 PredatorVI I can't clear them
19:44 VR-Jack I fixed it, but waiting for new rev
19:44 PredatorVI or change them
19:44 VR-Jack I also hate 50+ changeset pull requests
19:45 VR-Jack with regressions built in
19:46 PredatorVI ugh...company all-hands at movie theater...gonna be a rough afternoon...:)
19:47 VR-Jack I'm debating making a automatic rpm packager for the latest patch versions.
19:48 bhosmer joined #salt
19:48 baweaver joined #salt
19:49 VR-Jack Then I can just pull 2015.5.3-e02923f3d8
19:49 VR-Jack or something
19:50 scoates if anyone was curious about my boto_route53 question/solution above: https://github.com/saltstack/salt/pull/26267
19:50 saltstackbot [#26267]title: Allow (and default to) retries when Route53 changes are throttled by the AWS API | The AWS API for R53/DNS is very [aggressive about rate limiting](http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/DNSLimitations.html):...
19:50 nzero joined #salt
19:50 DanyC joined #salt
19:53 bhosmer joined #salt
19:53 DanyC XenophonF: i see... i couldn't find much feature set around Salt-Cloud using Openstack.
19:54 GreatSnoopy joined #salt
19:55 DanyC XenophonF: i wasn't looking at deploying OpenStack using SaltStack ( although i could cloudbees github repo and extend those states should i need to ..) but more on get rid of HEAT templates and replace with Salt-cloud
19:56 gimpy2938 When I run something (e.g. state.sls) on many minions at once it sometimes hangs, how can I tell on which minion it is hanging on?
19:57 bbbryson joined #salt
20:00 ponpanderer is there an eta for 2015.5.4?
20:00 gekitsuu joined #salt
20:01 baweaver joined #salt
20:01 iggy nope
20:04 babilen wir and siyh
20:04 whytewolf I actually enjoy working with the openstack salt-cloud stuff. was much easier then deploying the rest of openstack
20:05 whytewolf although i dread when the nova driver takes over 100% for the openstack driver
20:07 katyucha joined #salt
20:07 gcfhvjbkn joined #salt
20:08 dopesong joined #salt
20:09 tiadobatima joined #salt
20:10 tiadobatima2 joined #salt
20:11 XenophonF DanyC: salt-cloud deploys instances from given templates, and at least for EC2 and vSphere salt-cloud can customize those templates
20:11 XenophonF dunno if that's what you're getting at
20:13 rdutch left #salt
20:17 baweaver joined #salt
20:24 CeBe1 joined #salt
20:27 prwilson joined #salt
20:27 claytron_ joined #salt
20:28 nzero joined #salt
20:32 jeremyr1 joined #salt
20:32 gekitsuu_ joined #salt
20:35 dthom91 joined #salt
20:41 FeatherKing joined #salt
20:43 FeatherKing my salt master seems to be having an issue with my soft file limit being detected (2015.5.0)
20:43 baweaver joined #salt
20:43 FeatherKing seeing this in my logs The number of accepted minion keys(1963) should be lower than 1/4 of the max open files soft setting(4096)
20:43 FeatherKing but my open file soft limit is 20000
20:45 shaggy_surfer joined #salt
20:45 Tecnico1931 joined #salt
20:46 spark_ joined #salt
20:46 khaije1 is there a way to run only a specific subset of states in an sls file?
20:46 rideh joined #salt
20:47 khaije1 it would really make grouping easier to be able to include like states in the same file even if they aren't always going to be executed as a set
20:48 manfred khaije1:  you can't you should seperate them out, and then include all the ones using the include: directive
20:49 tiadobatima joined #salt
20:49 zmalone joined #salt
20:50 manfred anything you might want to run seperately, should be in a different state file
20:50 khaije1 manfred: ah well
20:50 khaije1 I understand your answer, just dont prefer it
20:50 manfred fair enough :)
20:52 khaije1 come to think of it there may be a way to make it suitably modular and re-usable using clever jinja, manfred you're a genius!
20:53 dmilunus joined #salt
20:53 * manfred blushes
20:54 dmilunus I am relatively new to saltstack, but I have used puppet quite a bit. Is it possible to have a file in a state that is a bunch of variables and then have all of the other salt files in that state pull those variables like puppet is able to do?
20:54 dthom91 left #salt
20:55 iggy yes, look at the map.jinja files in the formulas
20:55 dmilunus I did look at that and it doesnt seem to work as I would expect it
20:56 dmilunus meaning that if I set map.jinja and in there say set X = 1 then if I have file.sls I am not able to just say {{X}}
20:59 iggy do you import from map.jinja in file.sls?
20:59 DanyC joined #salt
21:00 DanyC VR-Jack, murrdoc1 - read your conversation and gave me goosebumps about 2015.5.2/3 and how broken it is. Reason is becuase that is what i can use now since that version is the only one available in CentOs 6.x epel repo. I'm still waiting for basepi to announce when 2014.7.x will be added back into the epel so i can downgrade it. Could you pls share more details as to what level of broken it is ?
21:00 dmilunus yes I do.
21:01 iggy dmilunus: then you'd have to gist more of what you're doing for us to look at... It should work fine
21:01 VR-Jack DanyC: Depends on what you are doing. For some people it will work troublefree
21:02 iggy WORLSFORME
21:02 dmilunus <iggy> I am trying to find a place to dump my files so that I can send you a link
21:02 otter768 joined #salt
21:02 iggy dmilunus: try gist.github.com
21:02 iggy *WORKSFORME
21:03 VR-Jack DanyC: you can also git the 2015.5 or 2015.8 branch and package it yourself. Or 2014.7 if you insist
21:03 kukacz joined #salt
21:04 wendall911 joined #salt
21:05 VR-Jack To be fair, there are bugs in the older code still, too, and some of those will never be fixed.
21:06 DanyC VR-Jack: i could do indeed. On this subject, how are you guys package it, buidl the rpm using maven ? or you have some tools which are available? asking as in this case will be easier for me to "sell" it internally rather then packge it myself - all release mgmt chain will say "s** you wiht your crazy idea"  :)
21:06 VR-Jack 2014.1 has been dropped already, and they will probably drop 2014.7 soon
21:06 dmilunus https://gist.github.com/anonymous/adf26434eb3fa4bb9435
21:07 dmilunus 'THat is what I am trying to do
21:07 dmilunus that all points to a pillar
21:07 dmilunus but it is telling me that it cannot find my variables
21:07 dmilunus that they are undefined
21:07 VR-Jack DanyC: I'm still running 2014.7 I downloaded to my local repo previously, but I will package it with the standard rpmbuild
21:09 iggy dmilunus: you have to make dhcp a dict with all that info in it, then refer to {{ dhcp.svc_name }} or whatever
21:10 VR-Jack dmilunus: Umm, doesn't that import say import just the dhcp dict?
21:10 dmilunus Ah okay.. the example was a little hard to follow. I thought that was importing the pillar called dhcp
21:11 cpowell_ joined #salt
21:11 VR-Jack nah. you're saying import dhcp variable from dhcp/map.jinja with context (rendor file first)
21:11 iggy it's importing a variable called dhcp from dhcp/map.jinja
21:12 VR-Jack import dhcp/map.jinja as localvar would import all the jinja variables under your local localvar
21:12 iggy you could also try {% import "dhcp/map.jinja" as dhcp %} and then {{ dhcp.svc_name }}
21:12 aparsons joined #salt
21:12 VR-Jack ^^
21:12 iggy not sure on that syntax exactly though
21:12 VR-Jack correct syntax. add with context to it
21:12 VR-Jack you'll need the context to run the renderers
21:12 SheetiS joined #salt
21:13 dmilunus Okay I think I follow what you are saying
21:13 dmilunus if I look at the map.jinja is it documented that way?
21:13 claytron_ joined #salt
21:13 dmilunus Or is there a place that gives me a really good example of what I am trying to do?
21:14 VR-Jack probably every map.jinja example in every formula out there
21:14 iggy aside from the formulas? not that I know of
21:14 forrest joined #salt
21:14 VR-Jack I have an example, but it's so scary I won't share it with ya
21:16 VR-Jack dmilunus: some description here. http://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.jinja.html
21:16 DanyC VR-Jack: right so nothing special about then ... will give it a go then ;)
21:16 dmilunus http://docs.saltstack.com/en/latest/topics/development/conventions/formulas.html#know-the-evaluation-and-execution-order <== that is the formulas documentation I should read up on right?
21:17 VR-Jack DanyC: they make it easy. See https://github.com/saltstack/salt/tree/2014.7/pkg/rpm or whichever version
21:18 dmilunus One last thing that has been driving me nutty... is there any way to escape a colon when doing a pillar lookup? Like if I pull in my mac address is there any way to use that value against a pillar key without stripping out the colons
21:19 iggy {{ pillar.value.replace(':', '\:') }}
21:19 VR-Jack Might try single quotes. Not sure.
21:19 iggy depending on what you're doing
21:19 dmilunus I am doing a grains.get pulling in my mac address and then looping through pillar to get networking information.
21:20 dmilunus right now I have it where I strip out the : and replace it with a - but it would be nice if I didnt have to do that so that I could store my macs as keys in pillar
21:21 iggy when you do the pillar lookup, use a different delimiter
21:21 iggy {{ salt['pillar.get'](mac_addr, delimimiter='|') }}
21:21 iggy or whatever
21:22 dmilunus I will give that a whirl. Thanks again.
21:23 venu0336 joined #salt
21:24 DanyC VR-Jack: cool, thx !
21:24 VR-Jack dmilunus: this worked. salt bootstrapper pillar.get mac,ab:cd:ef delimiter=','
21:24 nzero joined #salt
21:25 VR-Jack so it'd work in code too
21:27 VR-Jack to keep the pillar file itself straight, I did   'ab:cd:ef':
21:33 Bryson joined #salt
21:33 zwi Hey all..I'm trying to verify thta  {%- set zwi = salt['mine.send']('zwi','network.get_hostname') %} should set a variable in the mine for the box with the contents of hostname for that box.
21:36 iggy I think you have to have network.get_hostname in mine_functions already
21:36 iggy and it'd just be salt['mine.send']('network.get_hostname')
21:37 baweaver joined #salt
21:38 zwi ok..so then I can't set that get_hostname in a specific variable called zwi? it's just available as the get_hostname for that box?
21:38 subsignal joined #salt
21:39 iggy that's how mine_functions work, yeah
21:40 iggy you can't set arbitrary data in the mine
21:40 iggy it has to be the output of a module call
21:40 zwi ahhhh..ok...
21:40 Ac-town joined #salt
21:40 zwi thank you so the module call is the var name really..I just need to do whatever with it instead
21:41 funzo joined #salt
21:47 iggy newer salt has a feature called sdb that might be a better fit for abitrary data
21:47 iggy or something like etcd/consul/etc
21:49 ranomore1 joined #salt
21:50 baweaver joined #salt
21:58 ingslovak joined #salt
21:58 claytron_ joined #salt
21:59 Slimmons joined #salt
22:01 otter768 joined #salt
22:01 Slimmons Hey, I'm wanting to change my sudoers file, and I was going to use cmd.run and a sed command to do so (I'm open to suggestions on other ways to do that).  I'm having issues with this cmd.run, - name: "sudo sed -i '/%sudo*/c\%sudo    ALL=NOPASSWD: ALL' /etc/sudoers"
22:02 Slimmons it's saying there's errors, so I tried escaping the single quotes
22:02 Slimmons still mad
22:02 Slimmons tried escaping the %'s as well, still mad
22:02 Slimmons any other ideas?
22:02 iggy use file.replace
22:02 Slimmons problem solved
22:02 Slimmons thanks
22:02 iggy !salt states.file.replace
22:02 saltstackbot http://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.replace
22:04 prwilson joined #salt
22:07 hoonetorg_ joined #salt
22:10 icflournoy joined #salt
22:15 dopesong joined #salt
22:19 nzero joined #salt
22:20 baweaver joined #salt
22:29 gcfhvjbkn joined #salt
22:31 omegamike joined #salt
22:33 dopesong_ joined #salt
22:35 omegamike joined #salt
22:46 gchao joined #salt
22:56 mosen joined #salt
22:57 dendazen joined #salt
23:02 [dee] joined #salt
23:03 VR-Jack Oh, pretty tests. salt-testing develop mixed with salt-2015.5.3 head. lots of depreciation. lol
23:07 VR-Jack let's try python-salttesting from epel instead.
23:12 coval3nce joined #salt
23:13 nzero joined #salt
23:14 coval3nce Hmm, does the salt-bootstrap script let you install into a virtualenv?
23:15 coval3nce Seems like i need a pure virtualenv install of Salt to deal with api changes and bugs, particularly -> https://github.com/saltstack/salt/issues/25492
23:15 saltstackbot [#25492]title: "docker-py mem_limit has been moved to host_config in API version 1.19" error | Hello,...
23:15 coval3nce Things like docker-compose need new versions of the lib, but salt only works wit older version of lib.
23:16 coval3nce Any thoughts you all may have on if going down the “install salt via virutualenv” is a good idea?
23:19 RickCH joined #salt
23:19 RickCH ok translation question what is the table for this?
23:19 RickCH iptables -A FORWARD -d 10.254.254.18 -p tcp —dport 2195 -j ACCEPT
23:20 RickCH nat?
23:20 SheetiS default table is filter
23:20 SheetiS if you don't specify one on iptable
23:20 SheetiS iptables
23:22 claytron_ joined #salt
23:22 jaybocc2 joined #salt
23:22 RickCH Woot that is what I assumed
23:24 baweaver joined #salt
23:27 RickCH So does this work?  https://bpaste.net/show/f33e52a21c27 to replace this iptables -A FORWARD -d 10.254.254.18 -p tcp —dport 2195 -j ACCEPT
23:34 twork i'm (still...) working my way through the bind formula. testing a run, one of the changes to come is a file.managed, "newfile: /etc/logrotate.d/['named']", and i don't know what those square brackets mean. is this an issue, or am i just being paranoid?
23:37 RickCH are you using jinja?
23:38 RickCH and 'named' is a variable?
23:38 twork yeah.
23:38 twork jinja yes; named is a variable, probably in several places yes, but should i understand that it's being interpreted that way here?
23:39 RickCH I tend to grab from pillars or grains but here is a example I use.
23:39 RickCH ip: '{{ salt["network.interfaces"]()["eth0"]["inet"][0]["address"] }}'
23:39 RickCH So I would say you have it right
23:40 RickCH as long as you add the
23:40 RickCH - template: jinja
23:40 twork hm. okay, but it seems weird to me that it's showing up that way during state.highstate
23:40 whytewolf twork: is this your own work or are you digging through a bind-formula you found on the internet?
23:40 twork formula
23:40 twork and one of my first, i'm a n00b
23:40 twork so context is still coming slow for me
23:41 RickCH https://bpaste.net/show/0a74b2d4edf2
23:41 RickCH That is how I handle jinja templates?  I assume it is close to that?
23:42 twork one sec, let me check
23:42 whytewolf RickCH: he isn't building a jinja template. he is using one already built. and it looks like something is wrong with the map.jinja file that is putting a list into a variable.
23:43 RickCH ah ok.  Guess I have never used a formula.
23:43 twork the literal string '[named]' (no quotes) never appears
23:43 RickCH Just trying to be helpful.  Everyone here has always been great to me.
23:44 twork RichCH: i appreciate it. and, i've been "trying to be helpful" lots of other places. we're friends here.
23:44 whytewolf RickCH: no problem, not scolding. your information was actually very informative for things he will be dealing with at some point ;)
23:44 whytewolf twork: this is the line causeing issues. https://github.com/saltstack-formulas/bind-formula/blob/master/bind/config.sls#L110 some how map.service is being seen as a list
23:44 twork +1
23:46 quasiben joined #salt
23:47 cztanu joined #salt
23:47 RickCH Nice I did not realize there was formulas.  I have created everything my self
23:47 twork ok, thanks whytewolf. i got close to there, but haven't been able to track down the trouble. but that's a helpful clue.
23:47 RickCH So does this work?  https://bpaste.net/show/f33e52a21c27 to replace this iptables -A FORWARD -d 10.254.254.18 -p tcp —dport 2195 -j ACCEPT
23:47 coval3nce Anybody have thoughts on installing salt-minion into a virtual environment?  Pros/cons etc?
23:48 RickCH are there formulas for apple push services?
23:48 whytewolf twork: huh, that formulas map.jinja is filtering on the os grain. and only looks like it is seeing Debian or Redhat. shouldn't that filter on os_family?
23:48 whytewolf RickCH: I have never used the iptables state. but from the documentation that looks correct to me
23:49 whytewolf RickCH: unforchantly not. but if you create one you can submit it ;)
23:49 emnot3 joined #salt
23:49 twork whytewolf: you lost me
23:49 ComradeZiggy joined #salt
23:49 whytewolf twork: what does grains.get os return on your miions?
23:50 emnot3 What is this channel?
23:50 emnot3 What is this for?
23:50 whytewolf it is a channel for salty snacks emnot3... or was that deployment software known as saltstack.
23:50 whytewolf can never remeber
23:51 RickCH Sadly this is one that will end up being very proprietary.  But where is the repo for formulas?  I have others that might help others
23:51 ComradeZiggy so not for the Socialist Alternative, a US Trotsky based party
23:51 ComradeZiggy often called SAlt
23:51 ComradeZiggy :-p good bye
23:51 twork whytewolf: it gets Debian ...and i think (not 100%) that filtering on grains is working fine elsewhere on the same minion
23:51 ComradeZiggy left #salt
23:51 whytewolf RickCH: not a repo, each formula has it's own repo but there is a list of repos for it https://github.com/saltstack-formulas
23:51 sorta joined #salt
23:52 RickCH sweet I have a openvpnas formula that took forever and a Foreman one I am almost done with
23:53 twork whytewolf: fwiw i just tried that at salt and at salt-call, both come back fine
23:53 whytewolf twork: even odder. the Debian section of that bind-formal has the service as bind9 so map.service should be bind9 not ['named']
23:54 emnot3 joined #salt
23:54 amcorreia_ joined #salt
23:54 whytewolf twork: it could also be said that sometime when i have a long day. i get which default grain should be what
23:55 emnot3 What is this channel for?
23:55 whytewolf repeat: it is a channel for salty snacks emnot3... or was that deployment software known as saltstack.
23:56 RickCH LOL
23:56 emnot3 Not a repeat, I timed out
23:56 whytewolf it was a repeat to everyone else :P
23:56 twork whytewolf: oooooh, i think we may be on to something. i've been trying to adapt a pillar from that formula, and i've screwed it up previously.
23:56 emnot3 I closed my computer
23:57 emnot3 not to me, comradde
23:58 whytewolf twork:earlyer in the highstate. what is it returning for the service.running part?
23:58 whytewolf cause that is the only other place that map.service is being used
23:59 emnot3 joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary