Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-09-18

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:03 scurry joined #salt
00:03 nicksloan with the boto_secgroup states, is there a way to easily create two security groups with rules that depend on each other?
00:03 nicksloan should I perhaps run a boto_secgroup.present with no rules for both of them, and then run a boto_secgroup.present with rules? seems messy.
00:10 moogyver Configio - cobbler's still being maintained.  Found that Foreman's puppet roots were a little too strong for us, so we went w/ Cobbler.
00:11 moogyver Although the XMLRPC api is annoying
00:16 mosen I have to say its not as annoying as SOAP :)
00:16 murrdoc joined #salt
00:16 mosen hi murrdoc
00:16 moogyver mosen - true :)
00:17 rocket joined #salt
00:19 murrdoc1 joined #salt
00:20 moogyver whytewolf - you around?
00:20 timoguin_ joined #salt
00:20 whytewolf kind of. not compleatly mentally here.
00:21 moogyver ah - was gonna ask you about your comment the other day about syndic masters.
00:21 moogyver we had planned on going towards them, but you didn't seem too keen
00:23 svinota joined #salt
00:23 whytewolf my experence with them is limied. but from the little experence. it was kind of hacky. having a master controlled by another master down the line. and not everything passes back through
00:24 Akhter joined #salt
00:26 murrdoc joined #salt
00:30 sunkist joined #salt
00:30 joe_n joined #salt
00:35 Pixionus joined #salt
00:36 Ryan_Lane nicksloan: hm. that's actually not very easy
00:36 Ryan_Lane it's a chicken/egg problem
00:37 nicksloan Ryan_Lane: what I'm going to try is to have two boto_secgroup.present states for each group. One that has no rules, and just creates the group, and another that requires the first group, and adds the rules.
00:39 Ryan_Lane nicksloan: oh. it'll run in order
00:39 Ryan_Lane if you create group a, then group b and reference group a in b, then it'll work fine
00:39 Ryan_Lane but you can't create group a that depends on b, and b than depends on a at the same time
00:40 nicksloan Ryan_Lane: right, but I have create_a and create_b and add_rules_a and add_rules_b. add_rules_* depend on create_*
00:41 Ryan_Lane ah
00:41 nicksloan so it will go secgroup.present: a, secgroup.present: b, secgroup.present: a with rules referring to b, secgroup.present: b with rules referring to a
00:42 Ryan_Lane that's not easily doable, since the states are idempotent
00:42 Ryan_Lane you /could/ do trickery with jinja
00:42 Ryan_Lane where you only run the initial states if the secgroups don't exist yet
00:44 nicksloan Ryan_Lane: otherwise without the jinja help, I'd end up stripping the rules off of the groups, and then replacing them a moment later?
00:44 Ztyx left #salt
00:44 ziro` joined #salt
00:45 Ryan_Lane yep
00:48 ziro` Are there any examples of saltstack setups around? I’ve seen formulas, I get it. I’ve seen what pillar can do, I get it. I’d like to see someone running multiple servers with multiple configurations. Examples with files called /srv/pillar/mysql.sls containing a single config cannot be the extent of real world use
00:54 ashmckenzie joined #salt
00:59 knite joined #salt
01:05 jodv joined #salt
01:06 SirRon joined #salt
01:09 rocket joined #salt
01:11 Akhter joined #salt
01:22 Akhter joined #salt
01:25 Akhter joined #salt
01:28 subsignal joined #salt
01:31 |_[O_O]_| joined #salt
01:36 otter768 joined #salt
01:38 dendazen joined #salt
01:39 rocket joined #salt
01:40 catpiggest joined #salt
01:40 ronT1V joined #salt
01:40 ronT1V anyone successfully using raet with 2015.5 or 2015.8?
01:45 ronT1V I see the job results from minion returned to master via raet transport in the log but they are not delivered to the cli client seems like a master internal communication problem
01:51 ageorgop joined #salt
01:52 knite joined #salt
01:56 rocket joined #salt
02:03 knite joined #salt
02:09 s_kunk joined #salt
02:09 arc-impulse joined #salt
02:10 rocket joined #salt
02:13 pratikmallya joined #salt
02:16 knite joined #salt
02:19 cliluw joined #salt
02:24 aristedes joined #salt
02:25 aristedes left #salt
02:37 Akhter joined #salt
02:45 Akhter joined #salt
02:45 clintberry joined #salt
02:49 Furao joined #salt
02:52 joe_n joined #salt
02:53 Akhter joined #salt
02:56 evle joined #salt
02:58 ajw0100 joined #salt
03:00 Akhter joined #salt
03:04 Furao joined #salt
03:06 jodv joined #salt
03:07 huwenfeng joined #salt
03:07 trisell joined #salt
03:08 pravka joined #salt
03:09 cyborglone joined #salt
03:09 Akhter joined #salt
03:10 cornfeedhobo left #salt
03:10 huwenfeng Using cron.file to manage the crontab file, but there's one problem, each time I run the state, the crontab file will be override(even if the file do NOT change).  How can I change the behave to ONLY override when the file is different?
03:13 jodv joined #salt
03:14 opensource_ninja joined #salt
03:15 wendall911 joined #salt
03:16 jodv joined #salt
03:18 jodv joined #salt
03:19 Akhter joined #salt
03:22 womble huwenfeng: That sounds like a bug.  I wouldn't expect a state to do that.
03:28 huwenfeng womble: Yes, using file.manage is fine. only change file if files are changed. But using cron.file, every time you run this state or just run highstate, the /var/spool/cron/root file will be override, even if they are exactly the same content.   But crond will think it is newly edited, and will reload this new file.
03:28 jodv joined #salt
03:37 womble huwenfeng: Yeah, as I say, I'd expect that it's probably a bug in the state -- I can't see any reason that it should behave that way intentionally.
03:41 whytewolf huwenfeng: i would say file a bug. looking at the source code for cron.file and i see no other way it would act. looks like it runs cron.write_cron_file_verbose if it makes it towards the end of the function. regardless of changes.
03:41 whytewolf https://github.com/saltstack/salt/blob/develop/salt/states/cron.py#L533
03:42 huwenfeng whytewolf: Yes, I am looking at the source code file now, seems to be like what you said.
03:44 aparsons joined #salt
03:46 huwenfeng yes, maybe I should open a bug ticket to solve this problem.  whytewolf/ womble
03:47 Furao joined #salt
03:51 dabb joined #salt
03:55 rocket joined #salt
03:57 writtenoff joined #salt
03:58 huwenfeng https://github.com/saltstack/salt/issues/27215   Oh, I just opened a new issure.
03:59 aristedes joined #salt
03:59 aristedes left #salt
04:00 jodv joined #salt
04:03 mosen joined #salt
04:04 favadi joined #salt
04:07 DammitJim joined #salt
04:07 DammitJim what is a normal way to use a source file for prod vs test?
04:09 jodv joined #salt
04:20 jodv_ joined #salt
04:21 arc-impulse joined #salt
04:22 nate_c joined #salt
04:34 tzero joined #salt
04:34 Furao joined #salt
04:35 Aleks3Y joined #salt
04:37 arc-impulse joined #salt
04:40 FOCer joined #salt
04:40 stanchan joined #salt
04:46 FOCer joined #salt
04:47 ageorgop joined #salt
04:48 Akhter joined #salt
04:50 FOCer joined #salt
04:53 cornfeedhobo joined #salt
04:53 Akhter joined #salt
04:54 cornfeedhobo anyone here using docker that is able to forward ports not EXPOSEd in the Dockerfile?
04:54 cornfeedhobo i keep trying and everything fails
04:57 FOCer left #salt
05:00 clintberry joined #salt
05:00 cornfeedhobo sad. https://github.com/saltstack/salt/issues/21572
05:01 zer0def joined #salt
05:01 anmol joined #salt
05:08 Akhter joined #salt
05:14 Akhter joined #salt
05:17 Akhter joined #salt
05:24 TyrfingMjolnir joined #salt
05:25 saffe joined #salt
05:27 FOCer joined #salt
05:32 brahama joined #salt
05:38 slav0nic joined #salt
05:42 rdas joined #salt
05:47 losh joined #salt
05:49 Ztyx joined #salt
05:53 katyucha joined #salt
05:59 forrest joined #salt
06:01 colttt joined #salt
06:07 RandyT joined #salt
06:09 otter768 joined #salt
06:10 sirex joined #salt
06:10 laax joined #salt
06:10 Furao joined #salt
06:11 ajw0100 joined #salt
06:17 elsmo joined #salt
06:18 awpti Hey folks, I think I'm having trouble understanding the pkgrepo documentation. If I create a set of repos, will all minions then be made aware of said repositories?
06:25 dopesong joined #salt
06:32 dopesong joined #salt
06:34 favadi joined #salt
06:36 cyborg-one joined #salt
06:44 linjan joined #salt
06:48 arc-impulse joined #salt
06:48 spoksss_ joined #salt
06:49 spoksss_ hello everybody, the documentation of version Salt-2015.8.0.pdf is broken, there are no commands in it
06:49 omenlabs joined #salt
06:50 spoksss_ https://docs.saltstack.com/en/pdf/Salt-2015.8.0.pdf
06:54 colttt joined #salt
06:56 Furao joined #salt
06:57 pratikmallya joined #salt
06:58 arc-impulse joined #salt
07:03 svinota joined #salt
07:04 jhauser joined #salt
07:05 kusams joined #salt
07:06 GreatSnoopy joined #salt
07:06 arc-impulse joined #salt
07:07 Grokzen joined #salt
07:09 colttt joined #salt
07:13 eseyman joined #salt
07:16 Furao_ joined #salt
07:17 jbrnds is there some jinja check to see if a dict contains a key. like 'has_key' or something?
07:19 jbrnds ah it seems I can just use {% if dict.a_key %} ...exec stuff... {% endif %}
07:29 rubendv joined #salt
07:30 favadi joined #salt
07:32 arc-impulse joined #salt
07:35 markm_ joined #salt
07:42 phw joined #salt
07:42 arc-impulse joined #salt
07:44 phw pkg.refresh_db does update 2/3 windows clients, the remaining one just respons with an empty answers. It is the only one that uses 2015.8.0 (the others use 2015.8.0rc3); Is there something known about that?
07:53 omenlabs_ joined #salt
07:54 kawa2014 joined #salt
08:04 losh joined #salt
08:09 keimlink joined #salt
08:09 Steven| joined #salt
08:10 otter768 joined #salt
08:16 s_kunk joined #salt
08:18 linjan joined #salt
08:18 elsmo joined #salt
08:19 Steven- joined #salt
08:20 dkrae joined #salt
08:21 Furao joined #salt
08:22 Xevian joined #salt
08:25 katyucha joined #salt
08:25 TyrfingMjolnir joined #salt
08:26 dopesong_ joined #salt
08:28 Rumbles joined #salt
08:28 pbrooko joined #salt
08:33 MadsRC Would it be possible to create a sshd_config as a jinja template (or maybe just 2 different sshd_configs) and sync them to minions based on the version of OpenSSH installed?
08:36 Norrland MadsRC: yes
08:37 lothiraldan joined #salt
08:38 Furao joined #salt
08:39 colttt joined #salt
08:40 thefish joined #salt
08:41 ambientsound Hi guys. Based on your experience, is Salt suitable for deployment in large, heteorogenous environments?
08:43 trapha joined #salt
08:43 thefish ambientsound: depends on your definition of heterogenous - we've got a mix of linux flavours and some windows, the windows stuff can need some thinking about, but in general it works well
08:43 ambientsound I'm playing with the idea of replacing our Chef setup with Saltstack.
08:44 ambientsound We've got ~70 in-house cookbooks, so quite a selection of software...
08:44 thefish ambientsound: i chatted to someone who did that a few months ago, i think they reduced their infrastructure code by about 10x
08:44 ambientsound running mainly on Ubuntu precise and trusty.
08:44 thefish 10k lines of infra code down to 1k
08:44 ambientsound hey, that's amazing!
08:45 thefish for ubu you'll be fine
08:45 thefish we've had to do some template logic to make sure rhel and ubuntu both work, but nothing major
08:45 larsfronius joined #salt
08:45 ambientsound we are running different versions of software packages from system to system. We need to freeze package versions, generate configuration based on other nodes in the setup, etc.
08:46 ambientsound I guess Salt can do pretty much the same stuff as Chef?
08:46 thefish i dont know chef very well, but you can freeze versions, push different versions to different machines, know about other minions in configs etc
08:47 ambientsound sounds promising. thanks. I'd really like to get rid of the Ruby-based stuff... :-P
08:47 ambientsound and no one on the house working with Chef are satisfied with the workflow
08:47 _Kev_ we're running salt across a mix of rhel6 and 7 boxes (which, for intentes and purposes means you have to have a fair bit of logic to effectively treat them as seperate OS') and a few ubuntu boxes. No issues. As above you need to put a bit of thought into your state logic but it's not hard
08:48 larsfronius joined #salt
08:49 ambientsound _Kev_: are you saying that there is a logical separation of templates from "ubuntu" to "rhel", but not from "ubuntu 12" to "ubuntu 14"?
08:50 _Kev_ we don't have seperate templates. Single states with logic in to figure out what OS (and version as necessary) is running and apply accordingly. And yes we don't find much difference ubuntu -> ubuntu but rhel 6 ->7 brings lots of differences. Package names, iptables etc etc
08:52 ambientsound OK. Well, we don't usually separate templates either, but we have a "base" setup which does quite a few things on all our servers, which would need such handling.
08:52 ambientsound Chef has a lot of community provided code for setting up popular software packages. Is it the same case with Salt?
08:52 _Kev_ yep same here. It's not a big issue though - salts syntax is simple enough.
08:52 ambientsound How do you rate the quality in general?
08:53 _Kev_ salt has some yes and they've just introduced a 'package management' feature in the latest release to allow you to, presumably, install salt states etc ala puppet style. So intrigued to see how that goes
08:53 _Kev_ but in general we've written all our own rather than take anyone elses
08:53 _Kev_ tbh it's so simple that it's often quicker doing our own than figuring out how to make someone elses work (pillar data required etc)
08:54 kusams joined #salt
08:54 _Kev_ https://github.com/saltstack-formulas & http://saltstarters.org/ are good places to look
08:55 MadsRC Norrland: I am aware how to do the templating stuff, but how would you match on a minion based on OpenSSH version? Other than having the OpenSSH version in grains?
08:56 Norrland try something with "if "salt['pkg.version']('your_package')""
08:57 MadsRC Norrland: Ah thanks, I'll play around with that :D
08:58 seatan joined #salt
09:01 lothiraldan joined #salt
09:03 linjan joined #salt
09:04 ambientsound thanks.
09:09 thalleralexander joined #salt
09:13 Furao joined #salt
09:13 saffe_ joined #salt
09:14 saffe__ joined #salt
09:18 aqua^c joined #salt
09:21 rubendv joined #salt
09:31 fredvd joined #salt
09:39 jbrnds2 joined #salt
09:40 sk_0 joined #salt
09:42 pbrooko joined #salt
09:42 dthorman joined #salt
09:42 anon1 joined #salt
09:46 slav0nic saltpad not support salt-ssh?
09:48 ITChap joined #salt
09:48 ITChap Hi guys
09:48 ITChap in the 2015.8.0 is it possible the map a branch to base in the top pillar file ?
09:49 ITChap If I remember well it was possible for states only in the previous version
09:49 ITChap is it still the case ?
09:50 monkey66 joined #salt
09:54 Twiglet ext_pillar:
09:54 Twiglet - git: production:base git:salt root=pillar
09:54 Twiglet that's how we do it ITChap
09:55 ITChap and in your top.sls ?
09:55 Twiglet that's on 2015.5 though
09:55 ITChap the env name is base ?
09:55 Twiglet just in the master config
09:55 Twiglet oh, yes
09:56 ITChap ok cool
09:56 ITChap so it's equivalent to the gitfs_base for states ?
09:59 Twiglet Ah yes, sorry we use gitfs for out pillar, the "root=pillar" is the subdir it looks in so you can ignore that bit
09:59 Twiglet It's been a long morning
10:01 tongpu joined #salt
10:03 ajw0100 joined #salt
10:03 ITChap Twiglet, thank you very much :)
10:05 peters-tx joined #salt
10:06 Twiglet No worries
10:06 saffe joined #salt
10:07 pviktori joined #salt
10:11 otter768 joined #salt
10:18 tongpu joined #salt
10:22 ITChap How do you guys trigger your deployment or highstate on salt ? do you use something like Rundeck ? Foreman ? or directly with the scheduler inside salt ?
10:24 tongpu joined #salt
10:25 tongpu joined #salt
10:29 tongpu joined #salt
10:32 anon1 hey. what magic incantation is necessary to use a literal ! as a value in a pillar file?
10:32 tongpu joined #salt
10:33 jodv joined #salt
10:33 tongpu joined #salt
10:36 tongpu joined #salt
10:38 svinota joined #salt
10:39 tongpu joined #salt
10:41 phw ITChap:  I do it as a initial state for salt-minions (as I manage several computers that are workstations that shutdown)
10:42 JDiPierro joined #salt
10:43 kusams joined #salt
10:44 giantlock joined #salt
10:45 ajw0100 joined #salt
10:48 tongpu joined #salt
10:48 sr4f joined #salt
10:51 JDiPierro joined #salt
10:53 tongpu joined #salt
10:56 tongpu joined #salt
10:58 phw pkg.refresh_db results in no changes on one of my machines and also does not sync the desired pacakges - what could be the cause?
11:00 rubendv joined #salt
11:00 phw (with a windows minion)
11:04 anon1 and how can i create a set of three or more variables that i can have jinja iterate over? something like 'for foo, bar, baz in ...'
11:05 JDiPierro joined #salt
11:09 tongpu joined #salt
11:10 tongpu joined #salt
11:10 jbrnds joined #salt
11:11 ambientsound anon1: uncertain, but have you tried <% for item in ['foo', 'bar', 'baz'] %> ?
11:14 anon1 i have tried: {% for ip, sport, dport in pillar.get('portforwards', {}).items() %}
11:14 anon1 doesnt do the job tho
11:15 codehotter I can put server names in top.sls, then assign roles to them
11:15 codehotter can I invert this? List the role first, then the minions that should apply that role?
11:15 robot9 I'm not finding much data on how to make pillar data overwrite other pillar data, and how to define which is used in the top file. example: I have salt states/jinja for mysql server and mysql client, both use the same framework in salt/mysql/ , but they have seperate pillar files in pillar/mysql/server.sls client.sls . server A installs mysql.client server B installs mysql.server
11:17 codehotter https://docs.saltstack.com/en/latest/ref/states/top.html answered my question, thanks.
11:20 Furao joined #salt
11:27 kbaikov joined #salt
11:33 seatan joined #salt
11:33 DammitJim joined #salt
11:33 tongpu joined #salt
11:36 codehotter Can I use include in top.sls?
11:39 codehotter Can I use jinja in top.sls?
11:39 thefish codehotter: yes and yes iirc
11:41 thefish anyone got a nice recipe for updating salt-minion? I'm having to restart minions as they get updated (and stopped) but not restarted
11:43 RandyT joined #salt
11:43 TooLmaN joined #salt
11:45 KermitTheFragger joined #salt
11:53 colttt joined #salt
11:53 TyrfingMjolnir joined #salt
11:55 loki_ joined #salt
11:56 loki_ Hi everyone
11:56 loki_ i am using dotnet.sls
11:56 loki_ https://github.com/saltstack/salt-winrepo/blob/master/dotnet.sls
11:56 loki_ whenever i run this state
11:58 loki_ State '.NET' in SLS 'dotnet.dotnet' is not formed as a list
11:58 loki_ can anyone please help me
11:58 tongpu joined #salt
11:59 denys joined #salt
11:59 keimlink joined #salt
12:00 tongpu joined #salt
12:02 loki_ can any one guide me throught this
12:03 tongpu joined #salt
12:04 thefish loki_: make sure your yaml is in list form, not dict, for that sls/sls section
12:04 codehotter If I have a state, in which the top state requires something and all the others don't. Will salt wait for the top state's require to be fulfilled before itp rogresses to the 'next line' in the state file?
12:04 codehotter Or will only the top state wait, and the rest execute immediately?
12:04 breakingmatter joined #salt
12:05 thefish codehotter: you prob want to use require in your dependent states
12:05 codehotter thefish: That's exactly what I don't want to do. I want things to execute in the order they're in the file
12:06 loki_ thefish_ i used the sls from here  https://github.com/saltstack/salt-winrepo/blob/master/dotnet.sls
12:06 codehotter Let's say I have a state that creates a database, and I have a state that creates a service making use of that database (on a different server)
12:06 codehotter how do I create this dependency?
12:07 thefish codehotter: its a bit against the goal as far as i understand it - with the same pattern a state on 1k hosts would wait for each one to finish before moving to the next
12:07 thefish it does things parallel to be fast
12:08 thefish codehotter: this might help - http://www.saltstat.es/posts/dependencygraph.html
12:08 codehotter So how does auto order work?
12:09 codehotter Ah, WITHIN a minion, they're all executed in a certain order, but minions are done in parallel
12:09 tmclaugh[work] joined #salt
12:09 thefish codehotter: they are only done in order on a minion if you tell salt about dependencies
12:09 codehotter thefish: there's no date on that article
12:09 loki_ thefish_     saltstack-windows-test:     Data failed to compile: ----------     State '.NET' in SLS 'dotnet.dotnet' is not formed as a list
12:10 thefish loki_: is that sls actually a pillar, not a state?
12:10 codehotter thefish: did you make that website?
12:11 thefish codehotter: first time ive ever seen it :)
12:11 thefish but it seems like a nice explanation
12:12 otter768 joined #salt
12:12 thefish loki_: ah its a windows repo file (we dont use these) - are you doing salt somehost pgk.installed foo?
12:13 loki_ no i am doing salt -L 'saltstack-windows-test' state.sls dotnet.dotnet
12:13 pprkut if I have a small fix for salt (could count as new feature), which branch should I base it on, 2015.8 or develop?
12:13 thefish loki_: and what is in dotnet/dotnet.sls
12:14 loki_ thefish_ u can find the sls here https://github.com/saltstack/salt-winrepo/blob/master/dotnet.sls
12:14 thefish loki_: that file is not a state that can be called
12:15 loki_ ok , then what shuld i do to install dotnet in my windows machine through saltstack
12:15 thefish loki_: check https://docs.saltstack.com/en/latest/topics/windows/windows-package-manager.html#usage (you'll want to put those in a file root somewhere, and sepecify the root as winrepo_dir in master conf (for v2015.8), then add windows packages with pkg.install etc
12:15 loki_ thank man will go through the link
12:16 thefish loki_: so your state will have something like install_dotnet:
12:16 thefish pkg.latest:
12:16 thefish - name: '.NET'
12:16 thefish the dotnet.sls file tells the pkg module where to get the windows pkg etc
12:16 pratikmallya joined #salt
12:17 loki_ yes man i get an idea
12:17 loki_ thanks for ur help _thefish
12:18 thefish np loki_
12:18 jbrnds I want to combine multile file.managed and file.replace (or service.running) under 1 state. I seem to fail in doing that. What is going wrong here: https://dpaste.de/VELV
12:18 quasiben joined #salt
12:25 dijit hm, anyone know why salt becomes case-sensitive when I have a number before a glob?
12:26 dijit IE; salt '*thing*' <command>; will match LOTSOFTHINGS and someotherthing.
12:26 dijit but salt '*thing1*' <command>; will only match asinglething1 and not ANOTHERTHING1
12:27 quasiben joined #salt
12:28 dijit actually, it keeps randomly going between case-sensitive and case-insensitive.
12:28 dijit it's not due to the number. ;_;
12:29 krymzon joined #salt
12:31 phw anon1: set foo=["a", "b", "c"]
12:31 kusams joined #salt
12:32 zer0def joined #salt
12:33 katyucha Is someone use Salt to deploy or admin some windows for final user ?
12:33 katyucha I just want to know difficulties or things they can't do
12:35 dijit I use salt on windows.
12:35 dijit it's actually pretty usable.
12:36 dijit much better than chef for the same things.
12:36 phw I use it too, although I currently encountering a small problem
12:37 thefish left #salt
12:38 dijit anyone else seeing the same issue as me (or do you see a bug report for it?)
12:38 dijit random case-sensitivity when matching minions.
12:39 dijit (I don't think it's this: https://github.com/saltstack/salt/issues/8965)
12:40 gcfhvjbkn joined #salt
12:41 thefish joined #salt
12:41 gcfhvjbkn left #salt
12:42 giantlock joined #salt
12:42 katyucha dijit: you use salt on windows server or for client ?
12:43 dijit client only.
12:43 dijit server is centos6.6
12:43 katyucha sorry, bad question
12:43 katyucha windows is for customer or for application server ?
12:43 katyucha I want to use it to deploy like Microsoft Office or stuff like that
12:44 dijit I'm using it to control activedirectory membership and placing files/services on the machine.
12:44 katyucha ok
12:44 katyucha thank you
12:56 traph joined #salt
12:56 traph joined #salt
12:57 mattiasr joined #salt
12:58 ferbla joined #salt
13:01 subsignal joined #salt
13:02 _JZ_ joined #salt
13:03 hunmonk_ joined #salt
13:05 hunmonk_ if i've installed salt via salt-bootstrap, what is the proper way to upgrade to a new release? i tried just re-running the bootstrap script with the newer git tag, but that didn't turn out so well...
13:05 jbrnds I want to combine multile file.managed and file.replace (or service.running) under 1 state. I seem to fail in doing that. What is going wrong here: https://dpaste.de/VELV
13:07 favadi joined #salt
13:12 lothiraldan joined #salt
13:14 Configio joined #salt
13:14 vieira joined #salt
13:17 elfixit joined #salt
13:19 bhosmer joined #salt
13:20 scoates joined #salt
13:27 Twiglet jbrnds: I don't think that's possible unfotunately
13:28 vieira When pushing new network routes using salt.states.network
13:28 vieira how do you make the changes take effect immediately?
13:29 giantlock joined #salt
13:30 pravka joined #salt
13:31 jbrnds Twiglet so I have to name every state individually.. sadface. But I will survive
13:31 matthew-parlette joined #salt
13:34 Rumbles joined #salt
13:34 protoz joined #salt
13:36 Configio joined #salt
13:36 racooper joined #salt
13:37 Configio Does salt keep an audit log on the master of any actions sent to the minions (not just highstate, but command line executions sent to the minions)?
13:37 elfixit joined #salt
13:39 timoguin joined #salt
13:41 bhosmer_ joined #salt
13:42 dyasny joined #salt
13:45 DammitJim how would one go about placing a file name EventLog.jar for 1 server but a different EventLog.jar for another server?
13:46 Tyrm joined #salt
13:47 clintberry joined #salt
13:48 sovern joined #salt
13:49 Tyrm joined #salt
13:50 kaptk2 joined #salt
13:51 protoz_ joined #salt
13:51 jY joined #salt
13:54 mapu joined #salt
13:55 statesandconfuse joined #salt
13:55 tanta joined #salt
13:56 cresten joined #salt
13:59 zmalone joined #salt
13:59 cpowell joined #salt
14:04 saffe joined #salt
14:04 kusams joined #salt
14:04 zwi joined #salt
14:05 zwi joined #salt
14:05 Twiglet DammitJim: {% if salt.grains.get('id') == 'server 1' %} do stuff {% else %} do other stuff {% endif %}
14:06 rojem joined #salt
14:06 DammitJim thanks Twiglet
14:06 lpmulligan joined #salt
14:07 lpmulligan joined #salt
14:07 DammitJim Twiglet, how is that different from {% if {{ pillar['pkgs']['type'] }} == 'new' -%}
14:07 DammitJim like I'm defining the server type in pillar vs doing each server in the state
14:12 sunkist joined #salt
14:12 otter768 joined #salt
14:13 andrew_v joined #salt
14:13 pezh0re joined #salt
14:15 krymzon hmm, is it just me, or is 2015.8 not yet in debian.saltstack.com?
14:19 Configio joined #salt
14:22 rojem joined #salt
14:22 dthom91 joined #salt
14:22 indispeq HI Everyone, is it possible to specify the same renderer twice in the decoding of a file? Manner of: #!yaml|gpg|yaml
14:23 CeBe joined #salt
14:23 indispeq it seems to fail on me, but it seems that gpg|yaml does not work, the gpg renderer seems to want the yaml renderer before
14:23 murrdoc joined #salt
14:23 indispeq i have to encrypt a native yaml binary, so I would need to decrypt with GPG first, before yaml
14:25 pdayton joined #salt
14:26 shiriru joined #salt
14:30 dthom91 joined #salt
14:31 ALLmightySPIFF joined #salt
14:32 Brew joined #salt
14:33 quasiben joined #salt
14:34 rojem joined #salt
14:34 matthew-parlette joined #salt
14:34 kusams joined #salt
14:36 murrdoc joined #salt
14:37 robot9 if I setup a salt state/formula with jinja to intake pillar values from two different files
14:37 robot9 but I need it to only use mysql/server.sls pillar for some servers and mysql/client.sls pillar data for another
14:37 robot9 how do I differentiate that either in the salt state or top.sls
14:37 Rumbles joined #salt
14:42 openfly you might do a conditional on grains
14:44 kawa2014 joined #salt
14:44 kusams_ joined #salt
14:44 Configio joined #salt
14:44 robot9 well the server name isn't what I base the condition on, not sure any of the grains would work for that, but I suppose i could set a variable in the top file, I just thought there was a better way of doing it
14:44 rojem joined #salt
14:45 pezh0re Is there a testing harness for Salt?
14:46 s0undt3ch joined #salt
14:47 bhosmer joined #salt
14:51 zmalone pezh0re: you can use serverspec, or something like that, but there isn't really a salt-linter.  Most of the public salt formulas etc. don't have serverspec tests written for them either, as the feeling is that it is redundant
14:52 openfly i don't think it's redundant
14:52 Rumbles joined #salt
14:52 openfly i think that's a huge failing of salt
14:52 openfly tbh
14:52 SunPowered joined #salt
14:52 polishdub joined #salt
14:52 zmalone I suspect it just hasn't been a priority for salt developers, so it's excused as not necessary.
14:52 openfly that makes more sense
14:53 zmalone serverspec should work fine for integration tests though, it's platform agnostic.
14:55 pravka joined #salt
14:56 rojem joined #salt
14:58 tanta what is it you want to test independently of a state run
14:58 tanta just build the validations into the states
14:59 ferbla_ joined #salt
15:00 ageorgop joined #salt
15:01 cornfeedhobo is anyone here, using the docker state module, that is able to forward ports not EXPOSEd in the Dockerfile? i have an image that does not have a port "exposed", and in the docker.running definition the port mappings i have specified are not created. I have found https://github.com/saltstack/salt/issues/21572 but every suggestion in there fails.
15:05 Configio joined #salt
15:08 zer0def joined #salt
15:09 cresten joined #salt
15:09 mohae_ joined #salt
15:12 kawa2014 joined #salt
15:12 gmoro joined #salt
15:14 mattiasr joined #salt
15:14 SunPowered how many levels will the salt-cloud config `extends` keyword reach?  Just one?
15:15 Akhter joined #salt
15:16 statesandconfuse joined #salt
15:18 favadi joined #salt
15:19 FOCer joined #salt
15:20 pcdummy joined #salt
15:23 aparsons joined #salt
15:24 Configio joined #salt
15:25 rojem joined #salt
15:25 mike_swie joined #salt
15:25 saffe joined #salt
15:27 StolenToast can I give a managed file state a name different from its path?
15:27 StolenToast so instead of /path/to/file.repo it could be labeled File and define the path
15:27 tkharju joined #salt
15:28 statesandconfuse stolentoast: put 'File' as the id (first line) and then have  a key " - name: filepath" should do it
15:29 StolenToast I'll try it thanks
15:30 cresten joined #salt
15:30 hunmonk_ left #salt
15:32 fyb3r joined #salt
15:32 fyb3r whats the link for the pastebin for this channel?>
15:34 marco_82 joined #salt
15:35 cornfeedhobo fyb3r: use any you like, but gist.github.com is preferred
15:35 cornfeedhobo i know some people won't click the spammy ones
15:35 StolenToast I like hastebin cuz it has no cruft
15:35 StolenToast or ads
15:36 StolenToast hastebin also uses the dark solarized theme, which is cool
15:36 PeterO_ joined #salt
15:36 cornfeedhobo i like https://ncry.pt/
15:36 StolenToast and in general it is the fastest and simplest paste site I've used
15:37 cornfeedhobo the scheme one stores encrypted data, and the keys are the url, which are not stored
15:37 cornfeedhobo only*
15:38 fyb3r when I run a  salt -I "connectus:true" test.ping         with this pillar in place, I get a msg saying there is no response from the minions or it just wont run... yet when i do pillar.items I see them pop up with the connectus: true       https://gist.github.com/fyb3r/981ebdb1a156a4432091
15:38 fyb3r any ideas?
15:38 whytewolf I perfer gist, since it has the ability to edit, have comments, and put multiple files.
15:39 PeterO_ Ok, this is a first for me on a states cmd.run it's complaining about invalid output any ideas how to resolve it? https://gist.github.com/polds/326314d6fb4118453a9c
15:39 PeterO_ would it be better to change the command to `start ecs || true` ?
15:40 murrdoc dont use cmd.run
15:40 murrdoc and yes start ecs && true would be ok
15:40 PeterO_ murrdoc: what'd be better to use?
15:40 murrdoc or cmd.retcode
15:40 whytewolf fyb3r: try salt-call -l debug test.ping on the minion and check the minion for errors
15:41 PeterO_ ok
15:41 murrdoc PeterO_:  is ecs an initd script ?
15:41 PeterO_ it's an upstart script
15:41 murrdoc then use service state
15:41 PeterO_ service knows both init.d and upstart?
15:41 cornfeedhobo whytewolf: indeed, more than small pastes go to gist :)
15:41 fyb3r I dont see any erros
15:41 fyb3r errors*
15:41 murrdoc yup it does
15:41 cornfeedhobo PeterO_: i believe so
15:42 PeterO_ Alright I'll try it. Thanks.
15:42 breakingmatter joined #salt
15:42 cornfeedhobo PeterO_: upstart tried to be "friendly" (which it's not) and support the init.d convention as well as the newer scripts, so `service` cli api stayed pretty much the same
15:43 whytewolf fyb3r: than try adding -l debug to your salt run. SOMETHING has to be erroring other then the minion not returning or it "just not running"
15:43 fyb3r whytewolf, here is the log file while the command is called and below it is the output of the events
15:43 fyb3r https://gist.github.com/fyb3r/4e91904093d448f7511d
15:44 fyb3r Minion did not return. [No response]
15:45 hasues joined #salt
15:46 whytewolf fyb3r: what you just pasted to gist doesn't have a minion did not return
15:46 fyb3r that was the output on the minion
15:47 fyb3r errr from the minion's log file, the events from the master i ran the cmd on
15:47 fyb3r sec ill get the master's log
15:47 jerematic joined #salt
15:47 fyb3r https://gist.github.com/fyb3r/c1398198ff44f09f1e45
15:48 whytewolf um fyb3r you you should have sanatized that before pasting. there are keys in there.
15:48 hasues left #salt
15:48 fyb3r its in a test environment mate, nothing harmful
15:49 fyb3r few vms on my desktop here :)
15:49 trph joined #salt
15:49 whytewolf okay. I'm also not seeing a minion did not return in that
15:49 fyb3r yeah, thats the confusing part. its as if it hangs and the master just outputs that, but no where in the logs does it show
15:49 Configio joined #salt
15:50 fyb3r nor in the events...
15:50 whytewolf fyb3r: try salt-run manage.down
15:51 openfly http://stackoverflow.com/questions/32656152/in-saltstack-how-do-i-conditionally-and-iteratively-jinja-apply-an-include   stackoverflow points if anyone has an answer.
15:51 fyb3r nothing. theyre all up
15:51 fyb3r i can do test.ping to them all. but when i try to go against that pillar it barfs somewhere and I cant find it lol
15:53 pezh0re is there an internally hosted browser for written/tested salt states that other development teams can search
15:54 pezh0re so that they know what's available and don't have to recode states
15:54 pezh0re ?
15:55 lowfive joined #salt
15:55 whytewolf pezh0re: nothing formal. and most are not tested out side of some basic enviroments but you can look through here for ideas at least https://github.com/saltstack-formulas
15:55 Twiglet StolenToast: yes, http://hastebin.com/ijakihequz.sm
15:55 Twiglet whoops, was scrolled up
15:56 murrdoc joined #salt
15:56 whytewolf fyb3r: so only that pillar causes the minion to not return. that is odd.
15:57 fyb3r yup. in fact ive ran test pillars that do not run anything with a renderer and they work perfect
15:57 Twiglet pezh0re: we split our repo into "common/", "core/", "roles/". "core" goes on everything then the do matching to "roles" in the topfile, a role could just be a couple of includes to common states
15:57 fyb3r but the py renderer seems to be making the thing halt somewhere and I cant find it
15:58 Bryson joined #salt
15:58 Twiglet pezh0re: with our common states being heavily templated so we usually just have to include a minimal amount of info in the pillar to get it going
15:59 Twiglet granted that won't help people find the "common" states
15:59 Twiglet but we have docs for that
15:59 StolenToast thanks anyway Twiglet, it's the thought that counts
16:00 cresten joined #salt
16:01 jalbretsen joined #salt
16:01 pezh0re okay, thanks Twiglet
16:02 favadi joined #salt
16:02 danlsgiga joined #salt
16:03 lowfive joined #salt
16:03 zmalone joined #salt
16:04 danlsgiga hey guys, I'd like to add a suffix to each item in a list... the join filter does not suffix the last item (which makes sense)... does anyone have done this before?
16:05 danlsgiga mylist = ['minion1','minion2','minion3']
16:06 danlsgiga I want to make it ['minion1:/path', 'minion2:/path','minion3:/path']
16:06 danlsgiga any ideas?
16:06 openfly maybe you want to convert to a dictionary?
16:06 openfly putting colons into stuff can be a dicey endeavour
16:07 danlsgiga openfly: this would still be a list that I would iterate later
16:07 openfly you can import yaml
16:07 openfly as lists or as dicts
16:07 openfly and iterate
16:07 alemeno22 joined #salt
16:07 lowfive joined #salt
16:08 danlsgiga openfly: I know, but I'm getting the server list from mine.get
16:08 scoates I have a salt minion that can do `salt-call test.ping` (and get true; and I checked DEBUG output to be sure it's contacting the right master) ; but from the master I get "Minion did not return" on `salt correctminionname test.ping`. How is this possible?
16:08 danlsgiga openfly: and I want to suffix all the entries with :/path
16:08 scoates I had this behaviour on another minion, and when I restarted the minion, the master could then ping it again.
16:08 scoates Very confused.
16:09 pratikmallya joined #salt
16:10 fyb3r I wonder if my problem is similar to scoates
16:10 openfly https://gist.github.com/openfly/a83486cd56acc45b6dbc
16:10 openfly danlsgiga check that
16:10 ageorgop joined #salt
16:10 openfly maybe that's what you want
16:10 openfly oh
16:10 openfly mine...
16:11 danlsgiga openfly: lemme see
16:13 danlsgiga openfly: thanks for that, but that's not what I'm looking for... I don't have a preset dict or list, I'm getting the server list from a mine.get function, then currently it is getting 3 servers
16:13 RedundancyD joined #salt
16:13 danlsgiga openfly: I just want to update that list with the :/path suffix for each item in the list
16:13 whitePAWS joined #salt
16:13 openfly yeah
16:13 aw110f joined #salt
16:13 otter768 joined #salt
16:13 bhosmer joined #salt
16:13 openfly the semicolons are going to be an issue i think
16:14 openfly as that's an operator in yaml
16:14 krymzon joined #salt
16:14 openfly you might want to write a state for this
16:14 whytewolf the semi colon shouldn't be an issue. as it isn't yaml at that point. it is python. and they are in quotes
16:14 danlsgiga openfly: I can do that using | join(':/path') ~ ':/path', but I don't like the last append to the last item in the list, because if the list is empty, it will also add the :/path and my command will fail
16:14 openfly whytewolf is it?
16:15 openfly i would think it would be occurring in jina
16:15 openfly err jinja
16:15 whytewolf quoted semi colons work fine
16:16 openfly groovy
16:16 openfly just be careful with the vars
16:16 mr_const joined #salt
16:17 mr_const Hi, is there a simple way to install java to a deb/rh minion using salt?
16:17 whytewolf valid advice for any lang
16:17 danlsgiga openfly: I also tried a combination of map('format', '%s:/path') | list but it doesnt work... format in this situation must receive the string instead of the variable
16:17 statesandconfuse could someone help me understand this behavior with grains? https://gist.github.com/anonymous/59aa18fb1fe8f6698d91
16:18 openfly what about instantiating a new dict and reading in the list as keys and adding a :/path as value?
16:18 stephen144 joined #salt
16:18 openfly mr_const   pkg.installed: name: java  ?
16:18 danlsgiga openfly: sounds interesting
16:19 rm_jorge joined #salt
16:19 openfly there are java packages for rh.. debian probably has some sort of solution as well
16:19 openfly openjdk or something
16:21 keimlink joined #salt
16:22 dthom91 joined #salt
16:23 larsfronius joined #salt
16:24 teebes joined #salt
16:25 scoates incredibly difficult to search for "salt minion can ping but salt master can't" kind of problem. /-:
16:29 lowfive joined #salt
16:29 mr_const openfly, package java not found
16:29 saltwin joined #salt
16:29 Configio joined #salt
16:30 theologian joined #salt
16:30 openfly https://gist.github.com/openfly/976b09d6f073ef290c04
16:30 openfly check that
16:30 openfly that works on a centos 7 ami
16:31 ferbla_ joined #salt
16:31 mr_const openfly, thanks
16:33 fer_bla joined #salt
16:33 lowfive joined #salt
16:37 knite joined #salt
16:38 berserk joined #salt
16:41 rojem joined #salt
16:45 writtenoff joined #salt
16:46 zwi joined #salt
16:50 Gareth o/
16:51 murrdoc \o
16:53 saltwin im having a major problem with grains, has anyone had a grain get set to None after a state run?
16:56 shiriru joined #salt
16:56 seatan joined #salt
16:56 pratikmallya joined #salt
16:59 jbrnds joined #salt
16:59 saffe joined #salt
17:02 Configio joined #salt
17:03 pravka joined #salt
17:07 forrest joined #salt
17:10 cresten joined #salt
17:11 rojem joined #salt
17:12 favadi joined #salt
17:13 dopesong joined #salt
17:16 scoates https://github.com/saltstack/salt/issues/27237 if anyone has any insight, I'd appreciate it.
17:16 svinota joined #salt
17:20 bluenemo joined #salt
17:20 keimlink joined #salt
17:22 viq joined #salt
17:23 druonysus joined #salt
17:23 druonysus joined #salt
17:24 dthom91 joined #salt
17:24 Kraln joined #salt
17:24 iggy saltwin: what kind of grain?
17:25 saltwin a custom grain set with the grains state
17:26 forrest scoates: Can you try to dump a minion back to that old master version?
17:26 iggy hmm, make sure you are using the appropriate setter (list if it's a list, etc)
17:26 bhosmer joined #salt
17:26 rojem joined #salt
17:26 forrest scoates: Err sorry, other way around
17:26 scoates bump a minion up?
17:26 * Gareth fights with salt-cloud
17:26 tanta joined #salt
17:26 saltwin its just grains.present,  but what I am seeing is that during a state.sls something is replacing grain values
17:26 scoates I can, I think (or to 2015.8 at least), but when it restarts, it will definitely reconnect to the master properly. /-:
17:26 forrest scoates: Yeah, since you can easily duplicate the connection issue, I would like to know if bumping the minion to the same release as the master resolves it.
17:27 forrest Yeah but only for a few minutes according to your testing right?
17:27 saltwin there is nothing in the master log however
17:27 scoates forrest: unsure about the time. I guess we could wait for it to time out again. I'll try that.
17:27 forrest scoates: Cool, let me know what you find out!
17:27 scoates will do.
17:28 theologian joined #salt
17:28 theologian joined #salt
17:30 saltwin its just grains.present,  but what I am seeing is that during a state.sls something is replacing grain values https://gist.github.com/anonymous/c4854176358d7cddd34f
17:31 aparsons joined #salt
17:32 nate_c joined #salt
17:32 ageorgop joined #salt
17:34 scoates ok, forrest. now running 2015.8.0-39-g253ac5e on the minion; master is still connected.
17:35 forrest scoates: And now we wait...
17:35 scoates tick tock.
17:37 scoates there's a certain irony in that I don't know if pinging from the master resets the timeout or not (-:
17:37 scoates going to leave it alone for an hour.
17:37 forrest scoates: Cool, the ping test would be good as well
17:37 forrest Just duplicate the same steps and all that jazz
17:37 jbrnds joined #salt
17:37 forrest Then if the upgrade works I'm going to send a bill to you
17:38 forrest 'dear sir, please pay me money, sincerely, Forrest'
17:38 szhem joined #salt
17:38 bunniez joined #salt
17:38 arnoldB CentOS tests are broken...
17:38 bunniez left #salt
17:39 forrest arnoldB: You broke the tests this early on Friday? Come on....
17:39 krymzon joined #salt
17:39 arnoldB forrest: hehe
17:39 dopesong joined #salt
17:39 arnoldB https://jenkins.saltstack.com/job/salt-pr-rs-cent7-n/8157/console
17:41 forrest Looks like it is still running to me
17:41 arnoldB 17:36:52 Build step 'Execute shell' marked build as failure
17:42 arnoldB there is something with the git clone. + echo 'Commits don'\''t match 4a71418cfc7790eb624ccbfd3ae3434d7d697717 == ccdce490ba9359c2e3dcc07c4d5281cb04010969'
17:42 scoates forrest: indeed. I'll feel bad. (-:
17:42 forrest scoates: Nah I'm just screwing with you
17:42 Configio joined #salt
17:42 forrest arnoldB: commits don't match, yeah I see that as well.
17:42 scoates meh. I'll still feel bad (-:
17:43 forrest basepi: Are you aware of any issues with the jenkins box today? arnoldB is getting an annoying commits don't match error during centos testing
17:43 forrest scoates: Well then you can send the check to....
17:43 forrest ;)
17:43 scoates buy-a-round-if-we-meet-in-person level of bad
17:44 arnoldB rallytime to the rescue
17:44 basepi rallytime is helping you? Cool beans
17:44 arnoldB hehe no
17:45 arnoldB thought she has one of the most knowledge about the test system
17:45 scoates (round of non-alcoholic, non-caffeinated beverage, prepared on the side of your choice of the Zion curtain, if that's your thing (-; )
17:46 basepi Yeah, she is, even though she actually moved from the QA team to the platform team a few months ago....
17:46 basepi arnoldB: where's the PR in question?
17:47 knite joined #salt
17:47 arnoldB basepi: https://github.com/saltstack/salt/pull/27238
17:48 arnoldB basepi:  look for the first test run
17:48 basepi arnoldB: do you have a link to the test summary for the failed test?
17:49 basepi I'm guessing it's a false positive or something. We'll wait for the current test run to complete and probably can just merge it.
17:50 arnoldB basepi: https://jenkins.saltstack.com/job/salt-pr-rs-cent7-n/8156/
17:50 basepi That one appears to still be in-progress
17:50 fyb3r are  pillars that execute python code via the py renderer executed on the minions themselves?
17:51 basepi Your fix looks fine. Just let the current test run finish, and I'll evaluate the failures and see if you need to fix anything. We'll likely just merge it, I inspected the code and it looks great.
17:51 arnoldB basepi: yes but is already marked as failure, isn't? see "Build step 'Execute shell' marked build as failure"
17:51 basepi fyb3r: No. Pillars are always rendered master-side. External pillars receive the minion in question as an argument and so can evaluate what to give which minion.
17:51 arnoldB basepi: sure, I'm not in hurry
17:52 basepi fyb3r: the py renderer has access to the grains for the minion in question, though you should only rely on the `id` grain, as the others are not guaranteed secure
17:52 basepi (Since the minion can change grains)
17:52 fyb3r k. cause im trying to figure out why this pillar i wrote wont work for some reason
17:53 fyb3r https://gist.github.com/fyb3r/1c3a7d9c7b7f2bb2b6e5
17:53 fyb3r in theory it should. and if i do just pillar.items it works perfect
17:54 fyb3r but when i attempt to run any execution module with connectus: as a target it says No response...
17:55 basepi Hmmm, yeah, I'm not sure about running LocalClient commands inside of a pillar file
17:56 basepi It's possible that's contributing to your trouble. But then again, I *think* it should work....
17:56 fyb3r https://gist.github.com/fyb3r/7507d684d318639280d5
17:56 basepi I'm just not sure I've ever seen it done
17:56 fyb3r thats the output
17:56 fyb3r seems like it works. but when I go to try to test ping based on connectus: it barfs somewhere lol
17:57 lexter joined #salt
17:58 s_kunk joined #salt
18:00 SheetiS joined #salt
18:00 baweaver joined #salt
18:01 Brew joined #salt
18:02 tanta_g joined #salt
18:02 basepi Oh, based on the pillar value?
18:02 fyb3r ya
18:02 basepi Does it show up correctly in `pillar.items` or `pillar.get`?
18:02 basepi Also, have you tried explicitly doing a `saltutil.refresh_pillar`?
18:03 fyb3r yup. both
18:03 fyb3r and ive refreshed like mad lol
18:03 basepi hmmmm, that is strange.
18:03 basepi I guess I'd recommend filing an issue? I'm not sure what's going on if it's showing up in pillar queries but targeting isn't working...
18:04 fyb3r i cant even find an error logged anywhere though, so i wouldnt know what to say the issue is tbh
18:04 ziro` joined #salt
18:04 fyb3r and i can run other commands based on pillars that are defined already
18:04 fyb3r so I wasnt sure if it was timing out somewhere when its waiting for the return of the rendered pillar
18:06 aparsons joined #salt
18:08 fyb3r Missing configuration file: /root/.saltrc     does pop up in the log though, just noticed it
18:08 Configio joined #salt
18:10 Akhter joined #salt
18:10 basepi I don't think that's important. Just file the issue as "pillar values in pillar.get don't work for targeting" and then explain everything you've tried so far.
18:10 fyb3r https://gist.github.com/fyb3r/3c490516ea4dee18716e     then thats the log from running:    salt -I "{'connectus':False}" -l debug test.ping
18:10 fyb3r k
18:10 denys joined #salt
18:10 baweaver joined #salt
18:11 tmclaugh[work] joined #salt
18:12 jeadre joined #salt
18:14 otter768 joined #salt
18:17 fyb3r just out of curiousity, pillar.item 'connectus' works but get wont lol
18:17 fyb3r >_>
18:18 basepi Ah that means the caches are probably out of sync or something. Wonder if a minion restart would help?
18:18 fyb3r yeah i just did a pillar.raw and it showed a bunch of render errors
18:19 fyb3r ill restart them and clear their cache
18:19 Gareth are packages for 2015.5 still being built?
18:20 iggy there's supposed to be one more release of 2015.5 iirc
18:20 iggy so one would think so
18:20 snarfy joined #salt
18:21 snarfy yo.
18:21 snarfy I have a sweet headscratcher today.
18:22 danlsgiga fyb3r: Did you try to use the compound matcher? salt -C 'I@connectus:False' -l debug test.ping ?
18:22 pratikmallya joined #salt
18:22 fyb3r i havent. ill try it here in just a sec though
18:24 snarfy on the host: "salt-call config.get log_level" returns INFO, on master: "salt 'minion_id' config.get log_level" returns WARNING
18:25 dopesong joined #salt
18:25 knite joined #salt
18:25 snarfy it appears to be logging [INFO ], but there is no config directive I can find, either in a config file or in pillar, that would have changed the log_level from the default
18:25 snarfy and I'm 95% sure it's the same machine, as the IP matches
18:26 qybl left #salt
18:26 snarfy why might the master not have correct information about a minion's settings and would could have changed the log level? so weird.
18:28 fyb3r danlsgiga, heres the info that showed up: https://gist.github.com/fyb3r/a9dc7f74a59e35f75ea2
18:28 fyb3r ive got the logs set to debug if you want the entire dump
18:29 whitePAW_ joined #salt
18:29 GreatSnoopy joined #salt
18:30 Fiber^ joined #salt
18:32 whitePAWS joined #salt
18:37 clintberry joined #salt
18:40 dopesong joined #salt
18:41 zmalone joined #salt
18:47 petersson joined #salt
18:47 petersson good morning sunshine
18:50 danlsgiga fyb3r: It's timing out... :/ Does it timeout only for this call?
18:52 mimiandi joined #salt
18:53 mimiandi anyone using logging granular_levels ?
18:53 wendall911 joined #salt
18:55 whytewolf snarfy: config.get works in this order minion config, minion grain, minion pillar, master config. with each one overriding the one before it. and the default log_level for minions is info, but the default log_level in master is warning
18:55 marco_82 joined #salt
18:56 whytewolf when you do salt-call the master config is not grabbedd
18:56 mimiandi hmmm ... so log_level needs to be set at the lowest
18:56 tkharju joined #salt
18:56 whytewolf mimiandi: sorry that was to someone else
18:57 mimiandi whytewolf: yeah nw ..
18:57 tanta_g joined #salt
18:57 mimiandi whytewolf: figured it out anyways.. i hope the doc is a bit more clear .. . or was this like 'commmon sense'
18:58 Akhter joined #salt
18:58 whytewolf mimiandi: a bit of both. reading the config.get doc lists the order.
18:59 Tyrm joined #salt
19:00 whytewolf mimiandi: basicly is matches first found config. since nothing is actually set it will walk the line
19:00 scoates forrest: reproduced it on 2015.8.0-39-g253ac5e
19:00 mimiandi whytewolf: ?
19:01 mimiandi whytewolf: are you still referring to my log_granular_levels?
19:01 whytewolf mimiandi: log_level
19:01 whytewolf and config.get
19:01 mimiandi thats different from what i was asking .
19:01 mimiandi whytewolf: but yeah i know that
19:01 forrest scoates: Awesome, you should note that on the issue, maybe someone can weigh in. Also what about spinning up the master in debug mode, same with the minion, see if anything shows up for the 'test' server on the same release?
19:02 scoates yeah; noted in the issue. minion shows nothing (there's not even any TCP traffic) in debug mode.
19:03 scoates master is a production master, and debug is super noisy. /-:
19:03 whytewolf mimiandi: I didn't see a question from you. I was originally talking to someone called snarffy about why his useing config.get showed two different answers for salt-call and salt 'minionid'
19:05 forrest scoates: Fair enough.
19:06 berserk joined #salt
19:07 fyb3r danlsgiga: yeah it only times out for that call
19:07 fyb3r the others work perfect
19:07 scoates is there a good document that explains what the two salt ports are used for?
19:07 arnoldB does anyone know why https://github.com/saltstack/salt/pull/27239 didn't fail?
19:08 Configio joined #salt
19:09 PeterO_ joined #salt
19:11 tkharju joined #salt
19:12 scoates forrest: eureka! (-: (though I don't know *why*)
19:12 scoates # salt-run jobs.list_jobs | grep test.ping | wc -l
19:12 scoates 1600
19:12 forrest oh
19:12 forrest why you spamming your servers man!?
19:13 scoates heh. I don't understand how those could still be running. the master thinks it can't even see those.
19:14 scoates I have cron jobs that try to do a ping every 5 mins. It's likely that those are the cause. But… why are they staying in the queue forever?
19:14 SheetiS jobs.list_jobs doesn't just list current active jobs
19:14 SheetiS that's more or less a recent history.
19:15 fyb3r weird. now im getting key errors in my code
19:15 SheetiS jobs.active would be active jobs.
19:15 scoates ah. let me try that.
19:15 zmalone joined #salt
19:17 scoates SheetiS: forrest: http://paste.roguecoders.com/p/f72afd60919c0b0e1c3365763f759c17.txt
19:19 forrest LOL
19:19 forrest That's awesome scoates
19:20 scoates … the list_jobs output has start times, but no end times
19:20 forrest scoates: okay, I think you should look at the jobs to determine whether they are the old minions or not, and whether the new minion is included among them. Perhaps the version mismatch is creating an error with the communication.
19:21 scoates http://paste.roguecoders.com/p/de703f9187ef264bbd5af3aab9f30dec.txt <-- definitely from the 2015.8 minion
19:21 scoates based on timestamp and target
19:22 scoates actually… that salt-call test.ping cron job wouldn't create new jobs, would it?
19:22 forrest Uhh, you know I'm not sure. You'd think it would say the job is running, but maybe that's only for highstate.
19:23 pratikmallya joined #salt
19:25 scoates can definitely do test.ping while highstate is running
19:25 scoates I think highstate is special.
19:25 scoates (it checks the minion)
19:26 dthom91 joined #salt
19:31 jodv joined #salt
19:32 edrocks joined #salt
19:33 jperras joined #salt
19:34 jeremati_ joined #salt
19:38 Configio joined #salt
19:38 saltwin i believe this grain behavior is a bug, right? https://gist.github.com/anonymous/3ac70fe2abced65736e1
19:41 slav0nic joined #salt
19:41 Cyis Anyone used NuGet on Windows within a salt state to deploy a *.nupkg ?
19:46 breakingmatter joined #salt
19:47 jodv joined #salt
19:47 knite joined #salt
19:49 dthom91 joined #salt
19:50 XenophonF iirc a while back babilen or hobakill or somebody was using chocolatey with salt - maybe search the irc log over the last year
19:51 XenophonF or maybe it was eliasp?
19:51 snarfy joined #salt
19:52 dopesong joined #salt
19:54 Cyis just had yet another project team hand a new project to be deployed... of course they want to demo it on Thursday the 24th to executive leadership ... while the other projects either hand us a big ZIP file to deploy or they put a big ZIP file in Artifactory to be downloaded to deploy this team decided they wanted to go the package manager route and use NuGet
19:55 knite joined #salt
19:56 jerematic joined #salt
19:56 baweaver joined #salt
19:57 MohShami joined #salt
19:57 Tyrm joined #salt
19:58 knite joined #salt
19:58 Tyrm joined #salt
19:59 Tyrm joined #salt
19:59 MohShami hey guys, I'm using the mysql_grants.present state, is there a way that I can make it use the .my.cnf file I have in root's home folder?
20:01 babilen XenophonF: Wasn't me! ;)
20:02 whytewolf MohShami: mysql.default_file: '/root/.my.cnf' in your minion config.
20:02 FOCer joined #salt
20:03 MohShami whytewolf: Thanks man, never found that in the docs :)
20:04 whytewolf MohShami: it was listed in this which the other states say to reference for config data https://docs.saltstack.com/en/develop/ref/modules/all/salt.modules.mysql.html
20:04 MohShami and now I found it :D
20:05 MohShami been looking for days
20:05 MohShami thanks mate :)
20:06 relidy joined #salt
20:07 baweaver joined #salt
20:07 druonysuse joined #salt
20:12 fyb3r left #salt
20:14 aw110f joined #salt
20:14 seatan joined #salt
20:15 otter768 joined #salt
20:16 bluenemo joined #salt
20:16 knite joined #salt
20:16 druonysuse joined #salt
20:16 druonysuse joined #salt
20:18 dthom91 joined #salt
20:18 relidy Can anyone tell me if it's possible to test for the existence of a file in the salt file server? For example, only run a particular state if a particular file exists?
20:21 scoates forrest: … would you believe this is a Layer 3 problem? (my current theory)
20:21 forrest I would believe it
20:22 scoates the minion is a VM in VirtualBox
20:22 scoates tried to capture the packets upstream (on my workstation), with tcpdump
20:22 scoates saw them for minion-originated ping. didn't see them for master-originated ping… until `tcpdump: pktap_filter_packet: pcap_add_if_info(vboxnet0, 1) failed: pcap_add_if_info: pcap_compile_nopcap() failed`
20:22 scoates which makes me think: vbox bug.
20:23 scoates (2nd major one in 8 days! (-; )
20:23 Tyrm joined #salt
20:24 iggy shocker
20:24 scoates heh
20:24 keimlink joined #salt
20:25 iggy relidy: {% if 'file' in cp.list_master %} maybe
20:25 larsfronius joined #salt
20:26 dthom91 joined #salt
20:26 relidy iggy: Thanks. I'm not really sure it's the approach I want to take anyway (testing for the file), but I was exploring possible options.
20:27 whitePAWS joined #salt
20:30 iggy relidy: what is it you are trying to achieve?
20:30 johngrasty joined #salt
20:31 intr1nsic joined #salt
20:32 whitePAWS joined #salt
20:34 relidy iggy: At this point, configuring Apache (automatically setting up SSL support if a public certificate exists, for example). I've poked at the apache-formula a fair bit and snagged some ideas from it, but overall it's not as configurable as I wanted (particularly in SSL details).
20:34 pdayton1 joined #salt
20:34 relidy iggy: I have it all set via a pillar right now, but thought I might save some configuration if I could expect files in certain places to trigger features on/off.
20:35 johngrasty joined #salt
20:35 iggy thar be dragons
20:35 relidy Heh
20:35 iggy really, that's not the way Salt is expected to work
20:36 relidy Yeah, I'm not surprised (or disappointed)
20:36 dthom91 joined #salt
20:36 snarfy so is the default log_level info or warning?
20:37 rubendv joined #salt
20:37 rubendv joined #salt
20:37 iggy you _could_ write a custom grain module maybe, but it's going to amount to the same kind of check (looking in cp.list_master output or cp.cache*)
20:37 relidy Meh, not worth saving some manual configuration in the pillar.
20:38 iggy snarfy: https://docs.saltstack.com/en/develop/ref/configuration/minion.html#log-level
20:39 snarfy yeah they say warning but that's not what i see
20:39 snarfy with 2015.5.3 on ubuntu
20:39 troyready joined #salt
20:39 tanta_g joined #salt
20:40 iggy https://github.com/saltstack/salt/blob/develop/salt/config/__init__.py#L855
20:40 iggy file a docs bug
20:41 snarfy word
20:43 tanta_g I have a custom grains state
20:44 tanta_g it pulls a file from S3, puts it in /etc/salt/grains, and restarts the highstate
20:44 tanta_g happy to share the code if you want it
20:44 thefish joined #salt
20:46 snarfy iggy: thanks. it seems also worth noting that interrogating the minion's config from the salt master re: its log_level returns incorrect information
20:46 relidy tanta_g: If that was directed at me, I'd probably be interested just for kicks, but I think I'll stick with manually configuring this stuff in a pillar for now.
20:47 johngrasty joined #salt
20:47 tanta_g relidy, https://gist.github.com/anonymous/52a7723c0b09d4d77e0f here you go
20:47 relidy tanta_g: Thanks!
20:47 tanta_g I use it for storing sensitive credentials and other secret data, with S3 instead of another Git repo
20:47 tanta_g it's a fairly hackish way of doing it though
20:48 cberndt joined #salt
20:50 gimpy2938 left #salt
20:55 knite joined #salt
20:55 johngrasty joined #salt
20:57 urika joined #salt
20:57 johngrasty joined #salt
21:00 DanyC joined #salt
21:02 dopesong joined #salt
21:04 lothiraldan joined #salt
21:04 rome_390 joined #salt
21:05 druonysuse joined #salt
21:09 trph joined #salt
21:09 trph joined #salt
21:12 theologian joined #salt
21:13 teebes joined #salt
21:15 cresten joined #salt
21:16 seatan joined #salt
21:18 dthom91 joined #salt
21:20 baweaver joined #salt
21:23 ferbla joined #salt
21:24 knite joined #salt
21:26 dthom91 joined #salt
21:27 larsfronius joined #salt
21:30 kevinquinnyo joined #salt
21:32 DanyC left #salt
21:32 DanyC joined #salt
21:33 subsignal joined #salt
21:34 DanyC left #salt
21:34 DanyC joined #salt
21:34 vovcia joined #salt
21:34 DanyC hi all, has anyone started using 2015.8.0 on prod? if yes any critical issues ?
21:38 zmalone joined #salt
21:41 pratikmallya joined #salt
21:42 stanchan joined #salt
21:47 snoozlebug joined #salt
21:47 giantlock joined #salt
21:53 omenlabs joined #salt
21:54 pravka joined #salt
21:58 moogyver joined #salt
22:00 eightyeight joined #salt
22:00 eightyeight joined #salt
22:05 cresten joined #salt
22:08 bfoxwell joined #salt
22:10 Bryson joined #salt
22:15 shiriru joined #salt
22:16 otter768 joined #salt
22:16 tkharju joined #salt
22:17 seatan joined #salt
22:20 MadsRC joined #salt
22:32 joeskyyy joined #salt
22:34 awpti Hey folks, I'm perhaps not understanding the docs on pkgrepo -- if I create a pkgrepo.sls on the salt master, are all the relevant minions made aware of that repository as a package source?
22:35 joeskyyy Alright, I'm driving myself bonkers. Trying to do a simple file template example for a demo and it's not working :| I've got the following structure of files: http://hastebin.com/aboporazut.tex and I've been reading through issues and googling like crazy but nothing seems to be providing the answer.
22:36 joeskyyy When I run the highstate, it says the Source file salt://webserver/files/test.txt not found, when it quite obviously is -_-
22:36 joeskyyy I'm using all defaults, so my file_roots is in /srv/salt
22:36 joeskyyy Using salt 2015.8.0 (Beryllium)
22:39 iggy awpti: you target it at minions, just like any other state
22:39 ws2k3 joined #salt
22:40 awpti iggy, awesome! Thanks for the clarification.
22:40 kevin-wk joeskyyy: your file is named "text.txt" but your source is salt://webserver/files/test.txt
22:40 iggy joeskyyy: ^
22:40 kevin-wk teXt vs. teSt
22:41 kevin-wk line 59 in your hastebin
22:41 joeskyyy_ joined #salt
22:41 joeskyyy_ -____________- fml, it's been way too long of a week
22:42 joeskyyy_ thank you both for helping me not throw myself into traffic over something stupid lmao
22:42 * joeskyyy_ disapears to the corner in shame
22:42 kevin-wk np, i've made mistakes like that plenty of times
22:42 joeskyyy_ i think that's a clear sign it's time for a beer or four
22:42 awpti Those are my favorite mistakes. At least once a day.
22:43 joeskyyy_ have a good weekend folks ;)
22:47 zmalone joined #salt
22:48 PeterO_ joined #salt
22:49 lothiraldan joined #salt
22:50 zmalone joined #salt
22:52 jperras joined #salt
22:54 zmalone1 joined #salt
22:54 dthom91 joined #salt
22:54 goldbuick__ joined #salt
22:59 pravka joined #salt
23:02 cresten joined #salt
23:12 kusams joined #salt
23:17 SunPowered joined #salt
23:18 seatan joined #salt
23:21 jodv joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary