Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-08-30

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:16 riftman joined #salt
00:17 Jeff_ joined #salt
00:21 ajw0100 joined #salt
00:26 dthom91 joined #salt
00:35 bfoxwell joined #salt
00:46 ntropy_ joined #salt
00:51 Jeff__ joined #salt
01:02 dthom91 joined #salt
01:18 denys joined #salt
01:21 dthom91 joined #salt
01:22 tyson joined #salt
01:23 pravka joined #salt
01:24 cyborg-one joined #salt
01:26 Arbusto joined #salt
01:28 aristedes joined #salt
01:33 catpigger joined #salt
01:44 aristedes left #salt
01:45 Arbusto joined #salt
01:46 Arbusto joined #salt
01:52 trebortech joined #salt
01:58 joshin joined #salt
02:00 Corey forrest: Where are you?!
02:04 zmalone joined #salt
02:06 ajw0100 joined #salt
02:08 tmclaugh[work] joined #salt
02:23 quasiben joined #salt
02:30 zmalone joined #salt
02:43 zmalone joined #salt
02:49 tmclaugh[work] joined #salt
02:52 tmclaugh[work] joined #salt
02:54 tmclaugh[work] joined #salt
03:02 zmalone joined #salt
03:04 tmclaugh[work] joined #salt
03:10 zmalone joined #salt
03:18 tmclaugh[work] joined #salt
03:21 tyson_ joined #salt
03:52 tyson joined #salt
03:53 aristedes joined #salt
03:54 favadi joined #salt
03:55 aristedes left #salt
04:01 tmclaugh[work] joined #salt
04:06 dthom91 joined #salt
04:17 TyrfingMjolnir joined #salt
04:29 tmclaugh[work] joined #salt
04:53 jeadre joined #salt
04:58 quasiben joined #salt
05:01 rideh joined #salt
05:03 sunkist joined #salt
05:03 rideh joined #salt
05:04 jeadre joined #salt
05:08 rideh joined #salt
05:11 rideh joined #salt
06:04 Jeff_ joined #salt
06:07 overyander joined #salt
06:21 jeadre joined #salt
06:29 joshin joined #salt
06:29 aristedes joined #salt
06:30 aristedes joined #salt
07:02 joshin joined #salt
07:05 jeadre joined #salt
07:11 dandelo joined #salt
07:12 joshin joined #salt
07:15 elsmo joined #salt
07:29 egil joined #salt
07:30 joshin joined #salt
07:30 garphyx joined #salt
07:32 evle1 joined #salt
07:34 slav0nic joined #salt
07:36 Bryanstein joined #salt
07:47 joshin joined #salt
08:01 joshin joined #salt
08:09 subsignal joined #salt
08:13 joshin joined #salt
08:15 Bryson joined #salt
08:19 joshin joined #salt
08:23 linjan joined #salt
08:24 X67r joined #salt
08:28 mikeywaites joined #salt
08:28 joshin joined #salt
08:34 rdorgueil joined #salt
08:34 rdorgueil joined #salt
08:41 zerthimon joined #salt
08:56 joshin joined #salt
09:05 joshin joined #salt
09:16 joshin joined #salt
09:18 zer0def joined #salt
09:20 Fiber^ joined #salt
09:21 BigBear joined #salt
09:25 markm joined #salt
09:36 joshin joined #salt
09:42 saltE_ joined #salt
09:45 mikeywaites joined #salt
09:46 zer0def joined #salt
09:50 joshin joined #salt
09:51 anmol joined #salt
09:59 joshin joined #salt
10:00 mdupont joined #salt
10:06 laax joined #salt
10:08 harkx joined #salt
10:11 Fiber^ joined #salt
10:14 anmol joined #salt
10:19 joshin joined #salt
10:20 favadi joined #salt
10:22 Fiber^ joined #salt
10:30 mikeywaites joined #salt
10:38 joshin joined #salt
10:38 zer0def joined #salt
10:43 markm joined #salt
10:46 jhauser joined #salt
11:01 aristedes joined #salt
11:01 laax joined #salt
11:03 aristedes left #salt
11:04 anmol Hi, w.r.t, influxdb-formula at https://github.com/saltstack-formulas/influxdb-formula
11:05 anmol I am facing the following error " Rendering SLS 'base:influxdb' failed: Jinja variable 'dict object' has no attribute 'version' "
11:05 anmol I am using the default pillar and I see an attribute version in there
11:06 anmol am I required to add it elsewhere? Please help
11:08 joshin joined #salt
11:16 babilen anmol: Please set it to '0.9.3' in your pillar (influxdb:version) -- I'll fix that bug.
11:16 anmol ok
11:18 anmol babilen, I am getting the same error infact I had previously tried it for 0.9.2
11:18 joshin joined #salt
11:18 joshin joined #salt
11:24 babilen anmol: What does "salt 'yourminion' pillar.get 'influxdb:version" give you?
11:24 babilen (and could you paste the entire error to one of http://refheap.com, http://paste.debian.net, https://gist.github.com, http://sprunge.us, http://dpaste.de, … ?
11:25 anmol salt-call pillar.get influxdb:version
11:25 anmol local:
11:25 anmol babilen, I am not sure why it says local:
11:26 babilen Are you using a masterless setup?
11:26 anmol and not just blank
11:26 anmol yes
11:26 babilen anmol: How did you set your pillar and did you configure it in /etc/salt/minion{,.d/something} ?
11:27 joshin joined #salt
11:27 anmol babilen, yes I have configured it in /etc/salt/minion
11:28 babilen Okay, but it is obviously empty
11:28 babilen Mind showing how you set and configured it?
11:28 anmol pillar_roots:
11:28 anmol base:
11:28 anmol - /srv/pillar
11:28 anmol in /etc/salt/minion
11:28 babilen Please use a pastebin
11:29 anmol aah sorry !!
11:31 anmol babilen, https://paste.debian.net/309663/
11:32 babilen anmol: Okay, do you also have /srv/pillar/top.sls and what is the content of /srv/pillar/influxdb.sls ? (feel free to "attach" it to the paste, click 'Paste as new' to 'edit' it.
11:32 babilen )
11:32 ajmath joined #salt
11:32 cyborg-one joined #salt
11:33 gadams joined #salt
11:34 cwright joined #salt
11:36 joshin joined #salt
11:36 zemm joined #salt
11:37 anmol babilen, pasted in the same link and I don't have a top.sls in the pillar. I thought it was not necessary to have one in pillar but I have it in the formula path but only to load states
11:38 babilen anmol: Okay, first and foremost: You need a /srv/pillar/top.sls that targets the 'influxdb' pillar to your minion (much like you target states). Secondly: The formula comes with sensible defaults and you should, at the start, only set influxdb:version in your pillar. The pillar.example file typically shows *all* possible options you could set, but you typically don't want to set them all.
11:39 babilen anmol: You target pillar data to minions too. In fact that is what makes pillars so useful as they are *specific* to one minion (and are therefore usable for sensitive data)
11:40 babilen https://paste.debian.net/309665/ is what I mean there
11:42 ajmath joined #salt
11:46 babilen bbl
11:51 mapu joined #salt
12:02 anmol babilen, thanks a lot :)
12:07 joshin joined #salt
12:09 ran4443 joined #salt
12:16 joshin joined #salt
12:20 mikeywaites joined #salt
12:24 jeadre joined #salt
12:26 joshin joined #salt
12:33 CeBe joined #salt
12:44 jeadre joined #salt
12:46 zer0def joined #salt
12:47 joshin joined #salt
12:52 favadi joined #salt
12:57 joshin joined #salt
13:13 cyborg-one joined #salt
13:17 joshin joined #salt
13:18 CeBe joined #salt
13:38 mullein joined #salt
13:39 anmol joined #salt
13:41 markm joined #salt
13:48 quasiben joined #salt
13:49 bluenemo joined #salt
13:51 anmol joined #salt
13:54 joshin joined #salt
14:04 dude051 joined #salt
14:06 favadi joined #salt
14:06 joshin joined #salt
14:09 dthom91 joined #salt
14:11 bfoxwell joined #salt
14:12 anmol joined #salt
14:12 CeBe joined #salt
14:16 mikeywaites joined #salt
14:21 tedski joined #salt
14:32 tmclaugh[work] joined #salt
14:34 joshin joined #salt
14:35 anmol joined #salt
14:42 viq joined #salt
14:44 subsignal joined #salt
14:45 sunkist joined #salt
14:57 jeddi joined #salt
15:09 bfoxwell joined #salt
15:15 pm90_ joined #salt
15:20 tedbot joined #salt
15:23 sxar joined #salt
15:28 clintberry joined #salt
15:29 muep joined #salt
15:32 ecdhe joined #salt
15:37 amcorreia joined #salt
15:40 dopesong joined #salt
15:41 cheus joined #salt
15:48 markm joined #salt
16:07 _JZ_ joined #salt
16:20 toastedpenguin joined #salt
16:26 pravka joined #salt
16:35 forrest joined #salt
16:48 linjan joined #salt
17:01 BigBear joined #salt
17:13 Fiber^ joined #salt
17:16 Buzer joined #salt
17:19 rdorgueil joined #salt
17:19 overyander joined #salt
17:21 theShirbiny joined #salt
17:25 Buzer hey. Is there a way to assign some kind of group on master side to minion? I'm primarily thinking about howto assign a role(s) to minion, documentation generally seems to suggest to do it via grains. However, that feels quite unsafe. If webserver is compromised, attacker could assign whatever grains it wants and only security would be that they might not know the name/value of grains that would allow them to h
17:25 Buzer igher access (which might be available via states)
17:30 rdorgueil joined #salt
17:34 trebortech joined #salt
17:35 sgargan joined #salt
17:41 rdorgueil joined #salt
17:41 jonher left #salt
17:41 andrew_v joined #salt
17:46 jeadre joined #salt
17:47 Lionel_Debroux joined #salt
17:50 cyborg-one joined #salt
17:55 andygabby Buzer, don't know if this will meet your needs, but you can use custom grains on the master. It will overwrite a role by the same name on the minion.
17:55 andygabby http://docs.saltstack.com/en/latest/topics/targeting/grains.html
17:57 Buzer andygabby: If I understood it correctly, it would copy the file to minion and then execute it there. If attacker was on the minion, they could overwrite module to return what they want
18:00 [arx] joined #salt
18:00 [arx] joined #salt
18:03 Buzer The only safe way I can think of to protect against this would be either using minion id for matching (or is that also obtain from minion itself during execution rather than using the local database?) rather than other fields or creating external pillar where all matching logic is done by minion id (assuming it can be trusted?)
18:04 andygabby ya, just tested it, it is possible to hack it on the minion by overwriting the cache :-(
18:04 laax joined #salt
18:13 mapu_ joined #salt
18:16 overyander joined #salt
18:22 katyucha joined #salt
18:22 Ztyx joined #salt
18:23 tmclaugh[work] joined #salt
18:28 clintber_ joined #salt
18:33 clintberry joined #salt
18:34 jeadre joined #salt
18:44 tkharju joined #salt
18:45 jeadre joined #salt
18:46 vincent_vdk left #salt
19:10 laax joined #salt
19:18 Ztyx joined #salt
19:19 ajw0100 joined #salt
19:51 Lionel_Debroux_ joined #salt
19:57 BigBear joined #salt
19:59 dthom91 joined #salt
20:06 sgargan joined #salt
20:09 jeadre joined #salt
20:11 khaije1 joined #salt
20:19 bfoxwell joined #salt
20:19 sgargan joined #salt
20:22 jakubm joined #salt
20:23 jakubm good evening
20:24 jakubm i've a question regarding http://docs.saltstack.com/en/latest/ref/configuration/master.html#pillar-source-merging-strategy
20:24 jakubm i have two pillar files: users.present and users.absent
20:25 jakubm only whichever i declare last in pillar/top.sls will be presented - they are not getting merged
20:26 jakubm i've pillar_source_merging_strategy: recurse set in /etc/salt/master
20:37 Norbell joined #salt
20:43 vim-zz joined #salt
20:47 alynpost joined #salt
20:49 dyasny joined #salt
21:05 BigBear joined #salt
21:06 sgargan joined #salt
21:10 opensource_ninja joined #salt
21:13 sgargan joined #salt
21:15 dthom91 joined #salt
21:16 keimlink joined #salt
21:20 andrew_v joined #salt
21:22 alynpost joined #salt
21:28 alynpost joined #salt
21:33 alynpost joined #salt
21:35 scooby2 joined #salt
21:38 alynpost joined #salt
21:46 alynpost joined #salt
21:52 BigBear joined #salt
21:55 alynpost joined #salt
21:56 Reinhart joined #salt
21:59 sgargan joined #salt
22:03 sgargan joined #salt
22:11 amcorreia joined #salt
22:12 sgargan joined #salt
22:14 alynpost joined #salt
22:15 overyander joined #salt
22:15 sgargan joined #salt
22:18 alynpost joined #salt
22:19 aristedes joined #salt
22:20 aristedes left #salt
22:22 alynpost joined #salt
22:26 subsignal joined #salt
22:30 aristedes joined #salt
22:30 alynpost left #salt
22:31 Alekti joined #salt
22:37 jeadre joined #salt
22:46 dthom91 joined #salt
22:55 WildPikachu joined #salt
22:55 WildPikachu what would be the best way to test if a machine is virtual?
22:55 dthom91 joined #salt
23:00 otter768_ joined #salt
23:01 __number5__ WildPikachu: maybe use the grain `virtual`
23:02 WildPikachu yea, just found it now, but oddly enough it doesn't detect the environment being virtual :(
23:02 __number5__ what environment you are using, virtualbox/aws ec2 seems to be fine
23:02 WildPikachu kvm with q35
23:03 WildPikachu virtual: physical  <= with dmidecode and pciutils installed
23:03 Corey WildPikachu: That's interesting. I did a lot of the work on the core grains; what's it reporting as-- thanks.
23:03 __number5__ WildPikachu: report a bug on github :)
23:03 Corey q35?
23:04 WildPikachu http://wiki.qemu.org/Features/Q35 <= Corey  :)
23:04 WildPikachu I'll look into the code and/or report a bug :)
23:05 hasues joined #salt
23:05 Corey WildPikachu: That determination is being made in salt/grains/core.py
23:05 WildPikachu thanks Corey , checking now
23:07 WildPikachu systemd-detect-virt returns kvm, let the debugging begin!
23:08 overyander joined #salt
23:14 mosen joined #salt
23:14 hasues left #salt
23:16 Arbusto joined #salt
23:19 WildPikachu https://github.com/saltstack/salt/blob/develop/salt/grains/core.py#L493 <= Corey just curious, is there a reason you taking dmidecode output over things on line 501 and 503?
23:20 WildPikachu moving line 494-495 to 505 works for me and removing those 2 commands from 501 and 503 :)
23:20 WildPikachu but I am assuming there is a very good reason its not like that already
23:21 pravka joined #salt
23:22 * WildPikachu works on a patch ... v0v :)
23:29 keimlink_ joined #salt
23:29 alynpost joined #salt
23:30 alynpost left #salt
23:30 alynpost joined #salt
23:31 alynpost left #salt
23:33 anotherbofh2 joined #salt
23:34 keimlink joined #salt
23:38 WildPikachu https://github.com/nkukard/salt/commit/3801f17207f7d3e253056978a4910d56c5d1f150 <= Corey not sure how that looks for you?
23:39 aristedes joined #salt
23:40 aristedes left #salt
23:47 cheus joined #salt
23:49 jeddi joined #salt
23:59 jondonas joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary