Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-11-05

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:01 whatapain salt selinux module isn't  very advanced so i'm limited in what i can do
00:01 geekatcmu Whatever distro you're using should have the relevant policy files already built.  You should be able to modify them, add them to your new rsyslog package, and have them applied at installation.
00:01 geekatcmu If you aren't packaging ... you're doing it wrong.
00:02 geekatcmu (yes, I have strong feelings about packagin)
00:04 justanotheruser joined #salt
00:06 whatapain geekatcmu: what do you mean "if you aren't packaging you're doing it wrong"
00:06 whatapain you mean compiling code from source to create your own packages?
00:07 whytewolf whatapain: he means that you should be using the package manager for everything
00:07 whatapain right
00:07 whatapain which i am
00:07 whytewolf rsyslog didn't come with policy updates?
00:08 whatapain nope
00:08 whatapain perhaps i need to update selinux-policy package
00:08 whytewolf you might. honestly that is a good one to keep updated anyway
00:09 geekatcmu you *might* just need to re-appky the policies.
00:10 geekatcmu Though it's been so long since I had to work with it that I may be tottky wrong
00:11 whytewolf I know policies in selinux have gotten a lot easier to use from when the whole selinux thing was first introduced.
00:13 whatapain sure enough, looks like that selinux-policy package update fixed it
00:14 whatapain anoying!
00:14 whatapain <----
00:15 whatapain pkg.latest is slowww
00:16 whatapain damn mirrors
00:18 forrest vikas, Looks like you are correct in your assumption regarding the processes.
00:19 vikas hmm any workarounds? or is there a better way to do this without proxy?
00:20 forrest vikas, I'm not sure, I tweeted at Cro (the guy who primarily works on the proxy) since I didn't see any issues related to this: https://twitter.com/failvarez/status/662061687470620672
00:20 gtmanfred whytewolf: selinux is pretty decent now.  I like that I can turn it off, which is a problem I have with apparmor
00:21 whytewolf gtmanfred: this is true. the abiltiy to turn something off without turning the system into a boat anchor is always a good thing
00:21 vikas thanks @forrest
00:21 forrest vikas, You got it! hopefully he has time to respond.
00:21 forrest vikas, If there's no response by tomorrow remind me and I can harass one of the devs to bother him about it.
00:22 gtmanfred whytewolf: the fact that i do an apparmor unload, and then restart the service, and apparmor turns back on is... annoying
00:22 vikas :-) sure thing
00:28 kitplummer joined #salt
00:29 dthom91 joined #salt
00:30 amcorreia joined #salt
00:30 ajw0100 joined #salt
00:31 dthom91 joined #salt
00:36 cpattonj joined #salt
00:50 quix joined #salt
00:52 whatapain i guess it makes sense to do a pkg.uptodate every time you state.highstate
00:53 whatapain that should prevent any of those selinux issues
00:53 ajw0100 joined #salt
00:58 quix joined #salt
01:05 joren joined #salt
01:09 joren Hey guys, I was wondering if anyone's had any luck with the create_dns_record feature of the Digital Ocean script for salt-cloud if you've only give DO controll over a subdomain. I hope that makes sense? I was getting a resource not found error, but it looks like it's trying to add my new host to domain.com instead sub.domain.com, just wondering if there are any tricks to get around this.
01:12 zmalone joined #salt
01:16 quix_ joined #salt
01:17 workthrick what's the correct way to make pip,installed: operate on a specific virtualenv?
01:17 workthrick pip.installed even
01:18 hemebond workthrick: Is there not a parameter for it?
01:18 workthrick hemebond: I'm not sure, not all parameters are documented
01:19 workthrick there's env, which is not documented, and bin_env
01:19 hemebond https://docs.saltstack.com/en/latest/ref/states/all/salt.states.pip_state.html
01:19 workthrick oh, I see, it's deprecated
01:19 workthrick right, so bin_env and activate: True
01:20 hemebond activate is deprecated
01:20 hemebond From 2014.7.2
01:20 workthrick ah, true
01:20 hemebond Just give it a bin_env and it'll do the rest.
01:21 workthrick cool, thanks
01:32 subsignal joined #salt
01:37 whatapain hrm.  so i have a config file that contains "{% but i'd also like to use jinja templates to insert variables in to the config.  when i try and deploy the config file i'm getting a jinja syntax error.  any ideas on how i can prevent jinja from processing a part of a log i don't want it to?
01:37 aw110f joined #salt
01:38 hemebond whatapain: There is a way to escape that in a Jinja template. Check Jinja docs.
01:39 whatapain thx, looks like {% raw %} might do it
01:40 whatapain sho 'nuff!
01:41 cpattonj joined #salt
01:42 hasues joined #salt
01:42 hasues left #salt
01:42 aphor Oracle confused pkg.installed state with their pathologically mangled jdk1.8.0_66 rpm metadata.
01:42 hemebond ?
01:43 aphor the rpm package name is jdk1.8.0_66
01:44 aphor the version is 1.8.0_66-fcs
01:45 aphor the whole thing is fully specified as jdk1.8.0_66-1.8.0_66-fcs and pkg. installed parsed that to completely inadequate 'jdk--fcs'
01:45 fsteinel_ joined #salt
01:47 aphor Has packaging software gone completely out of style now?
01:54 bfoxwell joined #salt
01:55 aphor http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8061441 <-- Oracle == Jerk
01:55 workthrick btw, the require: syntax seems underdocumented to me. In particular, all the examples use things like "require: - pkg: vim", but nowhere is it explained what it *means* to say "pkg: something" in a require
01:56 workthrick basically, the docs tell you you can use requires, but the syntax of a require is never explained
01:56 hemebond workthrick: I think it is explained.
01:56 hemebond pkg is the the module, "something" is the name or your state or package.
01:56 aphor workthrick: "vim" would be the name of a state, and "pkg" would be the execution module.
01:56 hemebond (which can be different)
01:57 zmalone1 joined #salt
01:57 aphor workthrick: if you can identify some docs that misled you or are ambiguous, maybe we can help get an issue opened and a worthy fix into a pull request?
01:59 aphor "require: - pkg: jre" means require a "pkg" state named "jre"
02:01 workthrick hemebond: OK, I don't understand what execution module is here. It'd be clear if it was a state ID, in that case "require: y" simply says "state Y needs to be run before state X can run". But I don't know what it means to require state "vim" (which is, as I understand it, a state I defined myself) with (in?) "pkg" execution module
02:01 meanieotter joined #salt
02:02 hemebond workthrick: Within your states you call modules, e.g., pkg
02:02 hemebond e.g., pkg.installed:
02:02 workthrick right
02:02 hemebond So you require the "pkg" change within that state.
02:03 hemebond If you want the entire state...
02:03 hemebond I think you have to add each module within that state (not sure though)
02:03 hemebond (might be a way to require an entire state)
02:03 workthrick OK, that's pretty confusing TBH
02:03 workthrick and the require docs never mention that
02:04 workthrick https://docs.saltstack.com/en/latest/ref/states/requisites.html
02:05 hemebond I see it.
02:05 hemebond See the note. And see the way require_in uses file: statename
02:06 hemebond Whereas require used pkg: statename
02:06 hemebond Aha, you can require an entire state by using sls: foobar
02:06 workthrick right, but it's not clear if you don't know that
02:07 workthrick ie. if you know what you're looking for, you can sorta-kinda read into it enough to see that it uses states
02:07 workthrick but it doesn't explain that mechanism sufficiently
02:07 hemebond I suppose it comes to you as you get more familiar with the way state names work.
02:07 fridder joined #salt
02:07 workthrick the closest thing you get is the note on requisite matching, but it should be much more explicit, IMHO
02:08 workthrick yeah, I suppose
02:08 hemebond https://docs.saltstack.com/en/latest/ref/states/requisites.html#the-in-versions-of-requisites
02:08 hemebond That shows a state with multiple modules.
02:08 lporras joined #salt
02:08 hemebond (or, if you like, multiple module calls with the same state state name)
02:10 hemebond Remember that the state name is often used as the "name" parameter for the module.function call.
02:11 hemebond e.g., "mystate": pkg.installed is the same as "mystate": pkg.installed: - name: mystate
02:11 otter768 joined #salt
02:11 workthrick right, which makes it more confusing
02:11 workthrick I think it could be made much clearer by spelling out that the target state has two components in the note
02:12 workthrick I'll try to submit a PR for that
02:12 writtenoff joined #salt
02:12 workthrick or at least an issue, I'm not sure how the docs are generated
02:12 hemebond Took me a while to understand it too. As well as the YAML format.
02:12 workthrick yeah
02:13 workthrick that's somewhat big in salt, it has many interacting parts, and unusual naming
02:13 workthrick making it hard to understand what you're trying to do at first
02:16 hemebond aphor: "This is as-designed." hahaha
02:16 workthrick speaking of YAML, I don't quite understand why parameters are passed in as a list of single-key dicts, rather than a single dict
02:16 hemebond What do you mean?
02:16 workthrick ie. pkg.installed: name: foo, rather than pkg.installed: - name: foo
02:18 hemebond I've never really thought about it/
02:18 bougie joined #salt
02:23 vvoody joined #salt
02:30 pirulo joined #salt
02:31 alexhayes joined #salt
02:31 pirulo anyone knows how to use a compund matching in i.e: -S 192.168.0.0/24 and grains to get If the machine is Virtual or Physical?
02:32 hemebond pirulo: You want a working example or just want to know if it's possible?
02:33 pirulo if its possible if you have an example that will be great
02:33 hemebond What is "-S 192.168.0.0/24" ?
02:34 hemebond Oh, a subnet match.
02:34 pirulo it's a subnet it could be any subnet I made 192.xx to not reveal my ip subnet
02:35 aphor hemebond: "We broke yum install jdk? Yeah we meant to do that."
02:35 subsignal joined #salt
02:38 hemebond pirulo: I'm having trouble getting the subnet match to work at all.
02:38 hemebond But it is possible to match the subnet and a grain
02:39 workthrick hmm, so I have a problem now: apparently pip doesn't like if you specify requirements for the same package multiple times, even if the versions requested are compatible. And pip.installed doesn't check this either, so if I specify pkgs: with duplicates, it will fail
02:39 pirulo I hope some one else can help..
02:39 workthrick this is a problem, because I'm gathering my requirements from a bunch of external sources
02:39 pirulo I really new on salt and I'm trying to figure it out
02:39 hemebond Wait... I tried -S '192.168.56.2' and it returned all minions on that subnet
02:39 otter768 joined #salt
02:40 hemebond No wait... it returned all minions
02:40 workthrick I wanted to work around it by calling pkg.installed multiple times with one package at a time, but it doesn't like that either. Is there a way to call the same function multiple times in a single state?
02:40 iggy salt -C 'S@192.168.0.0/24 and G@virtual:*'
02:40 iggy I think
02:40 pirulo let me try it
02:45 ITChap joined #salt
02:45 iggy nah, that's not it
02:45 pirulo noe is not it
02:45 iggy why can't they just leave virtual blank
02:45 iggy salt -C 'S@192.168.0.0/24 and not G@virtual:physical'
02:45 hemebond I can't get that subnet matching to work at all.
02:47 ilbot3 joined #salt
02:47 Topic for #salt is now Welcome to #salt | 2015.8.1 is the latest | Please use https://gist.github.com for code, don't paste directly into the channel | Please be patient when asking questions as we are volunteers and may not have immediate answers | Channel logs are available at http://irclog.perlgeek.de/salt/
02:47 pirulo thanks a lot iggy
02:47 hemebond salt -C 'S@192.168.20.0/24 and G@virtual:*' test.ping seems to work for me.
02:47 hemebond But all my servers are virtual, so....
02:48 iggy hemebond: yeah, it'll also match virtual:physical for grains unfortunately
02:48 hemebond Oh of course.
02:48 pirulo homebond that will not work
02:48 hemebond virtual: physical
02:48 hemebond Makes sense :-P
02:48 zmalone joined #salt
02:49 pirulo thanks a lot guys for your helps
02:51 evle joined #salt
02:51 iggy food luck
02:52 blast_hardcheese joined #salt
02:52 iggy *good.... f this keyboard
02:52 pirulo np.!!
02:53 blast_hardcheese Is the only difference between orchestrate and reactor requisite support in orchestrate, or am I missing something else?
02:53 pirulo I'm hungry
02:54 catpigger joined #salt
02:58 pirulo Question for anyone.. Have anyone use Foreman with salt?
02:58 blast_hardcheese Oh, nevermind, they've got completely different execution contexts! This is great, all the problems I was having with the reactor are solved by orchestrate.
03:01 bhosmer joined #salt
03:06 bfoxwell joined #salt
03:10 aphor blast_hardcheese: always glad to help ;)
03:11 bfoxwell_ joined #salt
03:11 sunkist joined #salt
03:11 blast_hardcheese aphor, I can't explain how happy I am to have discovered Orchestrate in the docs-- My shim was to manually construct high data via jinja macros...
03:13 blast_hardcheese this is the first time I've tried to use Salt at scale, up until now it's been a great way to manage a couple of boxes or one class of box deployed loads of times
03:13 blast_hardcheese this is a whole world of stuff I never knew I loved
03:17 bfoxwell joined #salt
03:17 blast_hardcheese super trial and error though -- haven't developed the intuition for where concepts apply
03:18 blast_hardcheese currently trying to use pillar in orchestrate with mixed results.
03:18 blast_hardcheese ah, trying to use mine in orchestrate rather
03:18 blast_hardcheese pillar seems to work, although it doesn't like how I'm passing values.
03:20 conan_the_destro joined #salt
03:24 blast_hardcheese Is mine data inaccessible in overstate?
03:27 stupidnic I have a rather interesting issue. I am including ubuntu's cloud archive for liberty and installing some packages from there (keystone specifically). When that occurs any calls to salt's keystone state creates a stack trace. I determined that the salt-minion being restarted fixes the issue. How do I approach that? Should I just restart the minion after I install the keystone package?
03:27 favadi joined #salt
03:30 blast_hardcheese stupidnic: What version of salt are you running?
03:30 blast_hardcheese (on the minion)
03:30 stupidnic 2015.5.3 (from the ppa)
03:31 blast_hardcheese Can you link to the trace?
03:31 stupidnic Sure hold on
03:32 stupidnic https://gist.github.com/tomwalsh/644821a45c0ff9b4e1e5
03:32 stupidnic As soon as I restart the minion's salt service the problem goes away
03:34 blast_hardcheese stupidnic: https://docs.saltstack.com/en/latest/ref/states/#reloading-modules might help
03:35 stupidnic Perfect
03:36 yuhl_work___ joined #salt
03:38 PeterO joined #salt
03:41 ageorgop1 joined #salt
03:42 racooper joined #salt
03:47 bfoxwell joined #salt
03:49 deedubs joined #salt
04:04 zmalone joined #salt
04:08 kulty joined #salt
04:10 ITChap joined #salt
04:17 larsfronius joined #salt
04:29 conan_the_destro joined #salt
04:35 opensource_ninja joined #salt
04:55 rdas joined #salt
05:03 dthom91 joined #salt
05:11 otter768 joined #salt
05:14 dthom91 joined #salt
05:28 mehakkahlon joined #salt
05:40 mr_chris joined #salt
05:49 ramteid joined #salt
06:04 edulix joined #salt
06:06 favadi joined #salt
06:12 pdayton joined #salt
06:21 golodhrim|work joined #salt
06:28 CeBe joined #salt
06:32 malinoff joined #salt
06:40 malinoff_ joined #salt
06:52 trph joined #salt
06:52 trph joined #salt
06:52 ashmckenzie joined #salt
06:55 impi joined #salt
07:03 bhosmer joined #salt
07:12 katyucha joined #salt
07:12 otter768 joined #salt
07:20 felskrone joined #salt
07:21 AndreasLutro joined #salt
07:30 seweryn joined #salt
07:33 __number5__ joined #salt
07:35 ramteid joined #salt
07:40 ITChap joined #salt
07:43 ashirogl joined #salt
07:45 ashirogl1 joined #salt
07:47 opdude_ joined #salt
07:52 colegatron joined #salt
07:54 CeBe joined #salt
07:54 opdude joined #salt
07:58 rotbeard joined #salt
08:00 ajw0100 joined #salt
08:02 SWAT joined #salt
08:03 toanju joined #salt
08:07 eseyman joined #salt
08:19 larsfronius joined #salt
08:19 kawa2014 joined #salt
08:20 denys joined #salt
08:31 jhauser joined #salt
08:33 human01d joined #salt
08:35 Segfault_ joined #salt
08:39 kawa2014 joined #salt
08:39 trph joined #salt
08:44 edulix joined #salt
08:46 rhodgin joined #salt
08:46 jhauser_ joined #salt
08:52 ilk joined #salt
08:56 harkx joined #salt
09:00 zerthimon joined #salt
09:01 s_kunk joined #salt
09:02 GothAck joined #salt
09:02 skrobul joined #salt
09:03 bhosmer joined #salt
09:06 Rumbles joined #salt
09:07 rhodgin joined #salt
09:10 rodio_ua joined #salt
09:10 rodio_ua left #salt
09:11 edulix joined #salt
09:11 slav0nic joined #salt
09:13 Jimlad joined #salt
09:13 otter768 joined #salt
09:16 losh joined #salt
09:16 Xevian joined #salt
09:22 colttt joined #salt
09:26 edulix joined #salt
09:30 mianos joined #salt
09:30 mianos hi, is anyone using salt-cloud on aws?
09:32 babilen be the first!
09:34 andrew_v joined #salt
09:36 mianos Seems I am the first to want to use the -P parallel mode
09:36 mianos never mind, found a bug report, I am the second
09:36 thefish joined #salt
09:37 mianos good old salt, it's been a year since a fresh deployment, still reminds me of oracle
09:37 charli joined #salt
09:39 edulix joined #salt
09:39 charli joined #salt
09:39 raqua joined #salt
09:39 MadHatter42 joined #salt
09:41 thalleralexander joined #salt
09:48 teryx510 joined #salt
09:51 fredvd joined #salt
09:58 markm joined #salt
09:58 cberndt joined #salt
10:02 viq joined #salt
10:30 giantlock joined #salt
10:30 Score_Under joined #salt
10:31 larsfronius joined #salt
10:40 colegatron mianos: I'm using a mix of vagrant-aws and masterless minions
10:41 colegatron does anyone knows if is possible define a "description" to a salt state? I would like to describe what the state does before run it and avoid to read the code
10:43 AndreasLutro add comments?
10:45 ggoZ joined #salt
11:01 evle1 joined #salt
11:10 favadi joined #salt
11:14 otter768 joined #salt
11:15 larsfron_ joined #salt
11:19 colegatron AndreasLutro, yes, similar to an 'usage: this state does awesomethings\nor not, it depends'
11:23 cliluw joined #salt
11:30 anmol joined #salt
11:33 waesum joined #salt
11:38 amcorreia joined #salt
11:38 evle joined #salt
11:45 pozling joined #salt
11:46 pozling hi all, i would like about something
11:46 pozling i used quite a number of includes in my state sls files
11:47 pozling is there anyway (command line, whatever) that, i can find out all the files that are included?
11:47 pozling since state.show_top only show the list in top.sls
11:48 keltim joined #salt
11:56 GreatSnoopy joined #salt
12:21 lporras joined #salt
12:26 favadi joined #salt
12:46 ]V[ joined #salt
12:50 lloesche joined #salt
12:52 catpig joined #salt
12:55 bastion1704 joined #salt
13:03 Diaoul joined #salt
13:03 edulix joined #salt
13:10 mik__R joined #salt
13:10 breakingmatter joined #salt
13:12 favadi joined #salt
13:13 yuhl_work___ hello, Is there some documentation on how to do a rolling ugrade. I mean, in some case, mine being to manage elasticsearch, how can I do to apply modification on a group of node, waiting that after a modification is applied to one, salt wait until the system being patched is okay to start an ugrade to the next node.
13:13 yuhl_work___ Any pointer would be great !
13:15 otter768 joined #salt
13:15 mapu joined #salt
13:16 Segfault_ joined #salt
13:16 AndreasLutro yuhl_work___: orchestration, probably
13:17 falenn joined #salt
13:17 yuhl_work___ orchestration ???
13:17 linjan joined #salt
13:17 yuhl_work___ AndreasLutro: nevers heard about this one ! Thanks for the hint !
13:21 mortis_ how can i see what saltenv a minion belongs to while on the minion?
13:35 yidhra__ joined #salt
13:36 ajw0100 joined #salt
13:36 jdubski joined #salt
13:37 mapu joined #salt
13:38 lporras_ joined #salt
13:41 breakingmatter joined #salt
13:44 GreatSnoopy joined #salt
13:45 CheKoLyN joined #salt
13:53 paolo joined #salt
13:54 giantlock joined #salt
13:56 subsignal joined #salt
13:57 larsfronius joined #salt
13:57 colegatron joined #salt
13:58 TooLmaN joined #salt
14:00 JDiPierro joined #salt
14:00 racooper joined #salt
14:02 larsfron_ joined #salt
14:03 pdayton joined #salt
14:04 bhosmer joined #salt
14:05 deedubs joined #salt
14:09 Guest27231 joined #salt
14:09 impi joined #salt
14:12 Tyrm joined #salt
14:13 ekristen joined #salt
14:18 ]V[ joined #salt
14:18 bhosmer joined #salt
14:19 pdayton joined #salt
14:22 pyropoptrt joined #salt
14:23 DammitJim joined #salt
14:26 shiriru joined #salt
14:26 edrocks joined #salt
14:30 pdayton joined #salt
14:34 cpowell joined #salt
14:36 favadi joined #salt
14:37 perfectsine joined #salt
14:40 JDiPierro joined #salt
14:40 niluje joined #salt
14:43 stickmack joined #salt
14:44 niluje In a sls file, I have "{{ len(filter(None, sync['from'].split('/'))) }}" which results to the error "Rendering SLS '...' failed: Jinja variable 'filter' is undefined"
14:44 niluje is there a way to import Python builtins?
14:44 oravirt joined #salt
14:44 stooj joined #salt
14:44 charli joined #salt
14:45 Ahlee Do runners generate JIDs?
14:45 lionel joined #salt
14:46 opdude joined #salt
14:46 gwmngilfen joined #salt
14:46 unusedPhD_ joined #salt
14:47 TooLmaN joined #salt
14:47 emostar joined #salt
14:47 winsalt joined #salt
14:47 memford joined #salt
14:47 THE_BOULDER joined #salt
14:47 FreeSpencer joined #salt
14:47 FreeSpencer joined #salt
14:47 ashmckenzie joined #salt
14:47 sirtaj joined #salt
14:47 hasues joined #salt
14:47 hasues left #salt
14:48 sixninetynine joined #salt
14:48 DammitJim can I use pillar data to define pillar data?
14:48 GrueMaster joined #salt
14:48 nobrak joined #salt
14:48 DammitJim like I have defined a pillar for what server is a test server
14:48 nobrak joined #salt
14:48 DammitJim I want to use that information to define what I put in my sudoers file
14:48 agj joined #salt
14:51 sunkist joined #salt
14:52 GothAck joined #salt
14:54 clintberry joined #salt
14:56 FredFoo joined #salt
14:57 zmalone joined #salt
14:58 Brew joined #salt
14:59 dyasny joined #salt
15:00 bluenemo joined #salt
15:01 mpanetta joined #salt
15:01 mik__R joined #salt
15:03 AndreasLutro DammitJim: no - https://github.com/saltstack/salt/issues/23910
15:03 DammitJim thanks, I saw that
15:04 furrowedbrow joined #salt
15:07 clintberry joined #salt
15:07 illern joined #salt
15:08 clintber_ joined #salt
15:10 DaveQB joined #salt
15:10 furrowedbrow joined #salt
15:11 dimeshake joined #salt
15:11 drags joined #salt
15:11 jesusaurus joined #salt
15:12 masterkorp joined #salt
15:14 cowboy-coder joined #salt
15:16 Ahlee can't you load ext_pillars first?
15:16 otter768 joined #salt
15:16 Ahlee so you could populate the previous data in ext_pillar, then reference it maybe?
15:17 _mel_ joined #salt
15:17 niluje left #salt
15:18 lexter joined #salt
15:18 cowboy-coder we want to provision our dev environments so it's salt all-the-way-down; our webapp uses oracle and I'm wondering how folks provision an oracle server with salt
15:18 _JZ_ joined #salt
15:18 cowboy-coder Given that "Oracle Linux" is often mentioned in the docs and that there is something called "Oracle SALT" googling is a bit tricky
15:19 Ahlee cowboy-coder: How do you provision an oracle server without salt? You run the java install package, right?
15:19 cowboy-coder Given the PITA of installing Oracle, I'm assuming salt will run giant bash script (I'm a salt noob, but I've written such a bash script)
15:20 zmalone https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.oracle.html is the module for interfacing with Oracle, but installing it will probably need to be written by you.
15:20 Ahlee cowboy-coder: so, you can either run a script with cmd.run, which is just like ./script, or you can write the underlying python to do what the script does in a _module/
15:21 zmalone You can shell out and run a bash script, but cmd.running big scripts can end with flakey or inconsistent configuration management systems, as opposed to trying to make convergent salt based scripts to do the same thing.
15:21 rubendv joined #salt
15:22 bhosmer joined #salt
15:22 cowboy-coder @zmalone "make convergent salt based scripts" I will dig in and hope to fully understand this
15:25 dyasny joined #salt
15:26 zmalone Imagine you've got a huge shell script that installs things all over the place, sets up services, and does stuff like that.
15:26 zmalone Then you make it run any time you don't see /foo/oracle-version on the system
15:26 zmalone if someone goes and deletes /etc/init.d/oracle (for example), re-running salt will not fix that
15:27 zmalone whereas configuration management systems normally try to make sure all parts of a system are as they should be, and converge towards that "good" state if things don't match it
15:28 zmalone so if a disk has some corruption and you lose /etc/init.d/oracle, your config management system will say "Oh, that's wrong!" and go correct it.
15:28 zmalone This is all a compromise, in that there are always things outside of salt's (or whatever system you use) control
15:28 cowboy-coder zmalone Yes, that makes perfect sense. Thanks for the clarification.
15:29 zmalone So, if all the work to configure Oracle just-so is already done from a shell script, it might make sense to just cmd.run that if /opt/oracle is missing, but you should probably be aware of the limitations of that approach.
15:30 linjan joined #salt
15:30 cowboy-coder zmalone: We're pretty small and that's no worse than what we have now (which is no, err, very young CMS).
15:31 zmalone It's hard to write convergent scripts in bash, and handle errors well in bash, which is why a lot of these systems exist.
15:32 zmalone it turns into endless "if foo do bar; if $? != 0 do baz…" sometimes
15:33 pdayton1 joined #salt
15:34 andrew_v joined #salt
15:34 cowboy-coder yeah, my existing bash script has the ability to whack everything and re-do install. Basically I punt on decisions about whether part 23 of 91 parts is correct.
15:35 cowboy-coder the other issue is that an install from binaries takes forever ... so for dev and testing branches I suspect we'll have some VM image that is mostly pre-cooked.
15:35 cowboy-coder (cannot wait to ditch oracle, WAY more than what we need ... but back in 1993 when this system started, there weren't many other options)
15:37 stomith joined #salt
15:37 cowboy-coder I will have to play with modules.oracle ... but it looks to be mostly something for talking to an existing, running instance
15:40 quix joined #salt
15:42 timoguin_ joined #salt
15:43 bastion1704 joined #salt
15:44 debian112 joined #salt
15:44 rmnuvg joined #salt
15:46 katyucha left #salt
15:48 cowboy-coder Thanks for the pointers ... much learning awaits.
15:50 bhosmer joined #salt
15:50 ldelossa Hey guys, what's the safest way you guys are using to pull .rpm file urls
15:51 ldelossa Basically what I've been doing is just taking like three or four links, finding the common areas, then doing if statements and pillars to fill in the url sections that are specific to a build
15:51 zsoftich1 joined #salt
15:51 malinoff joined #salt
15:53 zsoftich1 joined #salt
15:56 mirko joined #salt
15:57 bastion1704 is it possible to use mine.get with reactor ? cannot to make it worked
15:58 FredFoo joined #salt
15:58 bastion1704 work fine if runs as a regular state
15:59 zsoftich1 bastion1704: are you on 2015.8?
16:00 bastion1704 zsoftich1 no 2015.5
16:00 zsoftich1 there was an issue related to using mine.get with orchestrate and runners...can't find it atm and cant' remember if reactor was included
16:01 dthom91 joined #salt
16:01 PeterO joined #salt
16:02 perfectsine joined #salt
16:02 zsoftich1 oh and pillar
16:03 larsfronius joined #salt
16:03 zsoftich1 bastion1704: so on version 2015.8 you might be able to use the runner
16:03 bastion1704 zsoftich1 will try tx
16:04 zsoftich1 salt['saltutil.runner']('mine.get', tgt='*' fun='network.ip_addrs')
16:04 rojem joined #salt
16:06 sdm24 joined #salt
16:10 zmalone joined #salt
16:18 pdayton joined #salt
16:24 ldelossa guys
16:24 ldelossa does anyone know why this is not working? http://hastebin.com/vafilatuza.sm
16:25 ldelossa wait...
16:25 ldelossa I see now because of the syntax highlighting
16:25 ldelossa didn't quote my url haha
16:25 MeltedLux joined #salt
16:26 ldelossa eh, still not working
16:27 DaveQB joined #salt
16:27 whytewolf ldelossa: salt 'client01p' saltutils.refresh_pillar
16:28 jeddi joined #salt
16:29 quix_ joined #salt
16:29 ldelossa let me check it out
16:31 whytewolf opps. saltutil not saltutils
16:31 whytewolf https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.saltutil.html#salt.modules.saltutil.refresh_pillar
16:31 ldelossa totally worked
16:31 ldelossa that's strange never had to do that before?
16:31 whytewolf pillar is cached. refresh_pillar just forces the update
16:31 ldelossa thanks man
16:35 ALLmightySPIFF joined #salt
16:36 Seanie joined #salt
16:36 Seanie Hey is there any to get everything that is currently stored in a mine.
16:38 Seanie What I want to do is get a grain I have set but not sure if it is set without mine.send. Something like ['mine.get']('rabbitmq:master', '*somerandomgrain*', 'grain')
16:38 aw110f joined #salt
16:39 evidence joined #salt
16:40 Seanie I'm not currently using the new version of salt. So what I want to do is check if there is a grain set which will hold the status of the server. rabbitmq:master or rabbitmq:slave
16:41 aw110f_ joined #salt
16:43 dthom91 joined #salt
16:49 ldelossa Hey guys, what dictionarys are available to us in a state file? I know we have salt[] which hold sall exection modules, grains[] for grains, pillar[] for pillars, anything else?
16:49 boredatwork joined #salt
16:49 ldelossa holds all*
16:49 breaking_ joined #salt
16:50 tercenya_ joined #salt
16:50 big_area_ joined #salt
16:51 ahale_ joined #salt
16:51 toddnni_ joined #salt
16:51 PredatorVI joined #salt
16:52 denys_ joined #salt
16:52 Hipikat_ joined #salt
16:52 HappySlappy joined #salt
16:52 timoguin joined #salt
16:52 gtmanfred i am only aware of this being documented, https://docs.saltstack.com/en/latest/topics/development/dunder_dictionaries.html#available-in but that is specifically for in the modules
16:53 gtmanfred https://docs.saltstack.com/en/latest/ref/states/vars.html
16:53 gtmanfred boom
16:53 gtmanfred ldelossa: there is the list ^^
16:53 N-Mi__ joined #salt
16:53 apejens_ joined #salt
16:53 scarcry_ joined #salt
16:53 btorch_ joined #salt
16:54 tmmt_ joined #salt
16:54 mohae joined #salt
16:54 Reinhart_ joined #salt
16:54 fhh_ joined #salt
16:54 douardda_ joined #salt
16:54 superseb joined #salt
16:54 wangofet1 joined #salt
16:54 sunkist joined #salt
16:54 ldelossa thanks!
16:54 arnoldB_ joined #salt
16:55 gtmanfred np
16:56 jfred__ joined #salt
16:57 Gareth_ joined #salt
16:57 asoc_ joined #salt
16:57 unusedPh- joined #salt
16:58 NightMonkey_ joined #salt
16:59 smkelly_ joined #salt
17:00 arif-ali_ joined #salt
17:00 robins joined #salt
17:00 eofs_ joined #salt
17:01 Bryson joined #salt
17:01 creppe_ joined #salt
17:02 linjan joined #salt
17:03 simonmcc_ joined #salt
17:03 dec_ joined #salt
17:04 shnguyen_ joined #salt
17:04 Rockj\ joined #salt
17:04 ldelossa so as a rule of them, I've been using my pillars to put most of my logic
17:04 ldelossa and then just pass those pillar items to the state, after the item is determined by logic
17:04 ldelossa you think that's the best way to go about it?
17:04 ldelossa question to anyone.
17:05 tongpu joined #salt
17:05 mikepea joined #salt
17:05 dec joined #salt
17:05 mullein joined #salt
17:06 stevednd joined #salt
17:06 MaZ- joined #salt
17:06 ajw0100 joined #salt
17:06 yac joined #salt
17:06 blueyed joined #salt
17:07 StolenToast joined #salt
17:08 PredatorVI salt-api question:  st pass those pillar items to the state, after the item is determined by logic
17:08 PredatorVI [10:04] #salt: <ldelossa> you think that's the best way to go about it?
17:08 PredatorVI oops
17:08 PredatorVI :)
17:09 egil joined #salt
17:10 shanemhansen joined #salt
17:10 FreeSpencer Did anything change in a recent replease where grains['roles'] now returns the role surrounded by [' ']
17:11 ldelossa PredatorVI ?
17:13 writtenoff joined #salt
17:15 PredatorVI sorry, bad paste...this IRC client automatically cuts anything I highlight :(
17:17 otter768 joined #salt
17:18 dthom91 joined #salt
17:20 timoguin joined #salt
17:21 mapu joined #salt
17:24 timoguin_ joined #salt
17:24 zmalone joined #salt
17:25 dthom91 joined #salt
17:26 ldelossa no worrieslol
17:30 writteno1 joined #salt
17:31 ageorgop joined #salt
17:34 hal58th_ FreeSpencer what is the command you are trying to do that is giving you that output?
17:35 DD joined #salt
17:36 DD left #salt
17:39 andrew_v joined #salt
17:40 Xor_ joined #salt
17:44 Xor_ How do I set a grain with mine.send salt['mine.send']('grain.get,'grain')
17:45 Lionel_Debroux joined #salt
17:45 jdubski joined #salt
17:45 aparsons joined #salt
17:45 giantlock joined #salt
17:46 stomith joined #salt
17:48 markm joined #salt
17:49 FreeSpencer hal58th_ im doing hostname: {{pillar['servers'][grains['roles']]['hostname']}}
17:50 irctc203 joined #salt
17:52 irctc203 i'm stuck trying to concatenate lists from pillars into a string for a template... is there a way to do that?
17:53 iggy join
17:53 iggy just like in python
17:54 iggy or there's a jinja join filter too {{ list|join(' ') }}
17:57 irctc203 trying it right now
17:58 bhosmer_ joined #salt
17:59 JDiPierro joined #salt
18:00 blast_hardcheese joined #salt
18:01 irctc203 this is what i'm doing:
18:01 irctc203 https://gist.github.com/bert-o-git/2c0fc315bc76df39c652
18:05 sevalind joined #salt
18:05 rm_jorge joined #salt
18:06 sevalind Hey guys! I was wondering if the include directive in an sls file will accept the order property? I didn't see in the docs if that as possible
18:07 hal58th joined #salt
18:07 irctc203 what i get is "user1 user2 \n user3 user4"
18:07 jaybocc2 joined #salt
18:07 murrdoc joined #salt
18:07 irctc203 i was expecting a single line
18:08 murrdoc anyone have thoughts on whats a good way to test that a salt master is up and running
18:08 sevalind Or would we want to go with state_auto_order?
18:08 murrdoc correctomondo
18:08 iggy irctc203: that's because you have 2 lines of join'ed lists
18:09 iggy irctc203: you could try playing around with jinja whitespace control functionality
18:11 murrdoc any thoughts on how to run ping
18:13 jaybocc2 joined #salt
18:14 murrdoc https://docs.saltstack.com/en/develop/ref/modules/all/salt.modules.network.html#salt.modules.network.connect
18:16 Score_Under joined #salt
18:16 kawa2014 joined #salt
18:18 Michael-S joined #salt
18:23 andrew_v joined #salt
18:24 baweaver joined #salt
18:30 hal58th joined #salt
18:32 jalbretsen joined #salt
18:32 pmcnabb joined #salt
18:33 cpattonj joined #salt
18:35 hal58th_ joined #salt
18:37 furrowedbrow joined #salt
18:38 lporras joined #salt
18:39 ALLmightySPIFF joined #salt
18:43 k00mi joined #salt
18:44 murrdoc so no thoughts on how to test if a salt master was up
18:44 murrdoc is*
18:44 dh__ joined #salt
18:45 iggy connect to the master on 4505?
18:46 aRkadeFR joined #salt
18:46 dh joined #salt
18:46 fxhp joined #salt
18:46 DaveQB joined #salt
18:46 JoeHazzers joined #salt
18:46 Hydrosine joined #salt
18:47 ajw0100 joined #salt
18:47 bhosmer_ joined #salt
18:48 impi joined #salt
18:50 cpattonj_ joined #salt
18:51 denys joined #salt
18:51 dthom91 joined #salt
18:52 rojem joined #salt
18:53 Craighton joined #salt
18:54 bastion1704 joined #salt
18:55 impi joined #salt
18:56 Craighton Is there a good resource of pre-baked scripts that I could take a look at?
18:56 ashirogl joined #salt
18:57 ashirogl1 joined #salt
19:01 opensource_ninja joined #salt
19:02 Craighton joined #salt
19:03 subsigna_ joined #salt
19:04 JDiPierro joined #salt
19:06 Fiber^ joined #salt
19:06 blast_hardcheese Craighton: Take a look at https://github.com/saltstack-formulas/ -- There's a lot of stuff that's already been salted
19:07 cliluw joined #salt
19:07 Craighton Ah, awesome I was looking for something like that.
19:08 forrest joined #salt
19:12 MeltedLux joined #salt
19:15 toanju joined #salt
19:16 baweaver joined #salt
19:18 otter768 joined #salt
19:24 Vaelatern joined #salt
19:25 CeBe joined #salt
19:26 gasbakid joined #salt
19:28 kitplumm_ joined #salt
19:29 cliluw joined #salt
19:30 aidalgol joined #salt
19:30 quix joined #salt
19:33 quix_ joined #salt
19:33 adelcast left #salt
19:34 bastion1704 hello, what is salt one ?
19:35 adelcast joined #salt
19:38 iggy --no-color doesn't work :/
19:39 gtmanfred iggy: yeah, super bummed about that
19:39 gtmanfred watch salt-run --no-color jobs.active
19:40 iggy more fun, piping stuff to a file and trying to make any sense of that
19:40 geekatcmu TERM=dumb ...
19:40 iggy nope
19:40 geekatcmu ugh
19:40 geekatcmu SO, both broken and stupid.
19:41 gtmanfred yes
19:43 iggy resorted to stripping it out with sed... /me crosses fingers
19:43 HappySlappy joined #salt
19:43 whytewolf humm. only time --no-color doesn't work for me is if color: True is in the master config.
19:44 forrest iggy, Someone has done the sed trick before and it worked
19:45 forrest iggy, Are you on the newest release? I thought they fixed that bug a few releases back...
19:45 gtmanfred nice, works for me now if I rmeove that line
19:45 baweaver joined #salt
19:46 farkus joined #salt
19:46 farkus Hey everyone I'm having an issue with puppet.noop
19:46 farkus I can do a puppet.run and it returns just fine, but noop doesn't seem to run anything
19:47 farkus foo.com:     ----------     pid:         24498     retcode:         0     stderr:     stdout:
19:47 pmcnabb joined #salt
19:47 farkus I ran the following to do this.
19:48 farkus salt -v '*foo*' puppet.noop
19:48 rojem joined #salt
19:51 dthom91 joined #salt
19:54 iggy forrest: 2015.5 and indeed, it's fixed in develop... don't have access to a 2015.8 to test
19:54 forrest gotcha.
19:54 gtmanfred it is working in 2015.8 for me
19:54 forrest Can you not upgrade?
19:54 iggy why even ask me that
19:55 gtmanfred i commented out the color: line in there master config, and now no-color works
19:55 * iggy pushes murrdoc under the bus
19:55 ashirogl joined #salt
19:55 gtmanfred and if it goes through a pipe, it correctly disables the color
19:55 forrest iggy, Because your reaction is usually pretty funny ;)
19:56 iggy well I've got a workaround until corporate overlords allow an upgrade anywya
19:56 trph joined #salt
19:56 forrest EVIL OVERLORDS
19:59 MadHatter42 joined #salt
19:59 GreatSnoopy joined #salt
19:59 forrest iggy, Did you get a cool black cape when you joined up? They just hand it to you from the shadows. "here is your cape, don't upgrade shit!"
20:00 forrest murrdoc, You know I was joking in my comment about that PR earlier right?
20:04 seweryn joined #salt
20:05 iggy I don't think they give out the capes until after you're past FNG
20:08 farkus Any thoughts on puppet.noop not running on the minion?
20:12 seweryn2 joined #salt
20:14 zmalone joined #salt
20:15 dthom91 joined #salt
20:16 quix joined #salt
20:17 murrdoc forrest:  its why i said "oh my"
20:17 murrdoc :D
20:18 forrest murrdoc, lol okay, just wanted to make sure that was recognized without a /s
20:18 murrdoc i always assume a /s
20:18 murrdoc well on doomsday scenarios at least :)
20:19 forrest heh
20:19 forrest not even a doomsday scenario, just a 'this happens all the time' scenario.
20:19 murrdoc u missed the /s
20:20 murrdoc i mean the 'implied' /s
20:20 forrest lol
20:21 murrdoc do you know the 'reactor' entry point in the salt code ?
20:23 gtmanfred https://github.com/saltstack/salt/blob/develop/salt/utils/reactor.py
20:24 ldelossa can I run a formula with state.sls execution module?
20:24 gtmanfred https://github.com/saltstack/salt/blob/develop/salt/master.py#L493
20:24 gtmanfred murrdoc: ^^
20:24 PredatorVI joined #salt
20:24 gtmanfred then it just listens on the event bus
20:25 ageorgop joined #salt
20:27 [1]PredatorVI joined #salt
20:28 seweryn joined #salt
20:30 melog1 joined #salt
20:30 ldelossa So guys, how exactly would I restart a minion
20:30 ldelossa and then continue running a task
20:30 ldelossa or state rather
20:32 forrest ldelossa, Not possible currently :(
20:32 forrest you'd have to try and like jerry rig a reactor or something on service start.
20:32 forrest ldelossa, What goal are you trying to achieve, maybe we can figure out a way to resolve it
20:33 forrest ldelossa, You can use startup_states and such for system reboots, but it's still not perfect.
20:33 perfectsine joined #salt
20:33 seweryn joined #salt
20:34 ldelossa So this annoying ass issue
20:34 forrest ldelossa, https://docs.saltstack.com/en/latest/ref/states/startup.html combined with an 'at' command call can provide the functionality you want as a workaround. use cmd.run to drop 'at' in the background (since it should continue the run), and then you use the startup state to have the minion run certain stuff.
20:34 ldelossa where rabbitmq gets installed fine, but I need to restart it
20:34 ldelossa or rlese I can't use the rabbitmqctl commands
20:34 ldelossa even using the formulars from github
20:34 ldelossa same thing happens
20:34 ldelossa can't find anything about it with rabbitmq forums
20:34 zmalone cmd.run to restart it and sleep for 15 seconds?
20:35 forrest ldelossa, There's a workaround for that, don't restart the minion
20:35 ldelossa You know of it?
20:35 forrest iggy, What's the thing where you force a module recheck?
20:35 ldelossa It's a rabbit issue, it's not a salt issue
20:35 forrest iggy, So you can get commands for something you installed during the state run
20:35 justanotheruser joined #salt
20:36 forrest ldelossa, ? Salt is loading all the module data it has when it starts, it can't use the rabbitmq stuff without knowing rabbitmq is installed, and it doesn't (by default) recheck during the middle of a state run. I'm pretty sure there's a function to do so.
20:36 ldelossa No no it's not salt
20:36 ldelossa If i install the RPM straight up
20:36 ldelossa the rabbit rpm on the server
20:36 ldelossa no salt involved
20:36 ldelossa same issues
20:36 s_kunk joined #salt
20:36 ldelossa rabbitmqctl won't connect to rabbit until Irestart the servr
20:36 ldelossa think it's a hostname issue or smoething like that
20:37 ldelossa nothing to do with salt
20:37 forrest ldelossa, Until you restart the actual box itself??
20:37 ldelossa yes sir
20:37 ldelossa I'm not sure if it's because I use hostnamectl
20:37 ldelossa to set my hostname
20:37 [1]PredatorVI joined #salt
20:37 Ahlee ldelossa: are you specifying the node name to rabbitmq?
20:37 ldelossa and erlang is reading it form somewhere else
20:37 forrest ldelossa, By the way I found it, add - reload_modules: True after installing something you need the module from: https://docs.saltstack.com/en/latest/ref/states/#reloading-modules
20:37 ldelossa I do not specify the node
20:37 Ahlee That's probably the issue. rabbit is touchy about nodename
20:38 ldelossa Thank you forrest, regardless of the issue this is helpful to have
20:38 ldelossa Ahlee, let me try that
20:38 forrest ldelossa, For sure, I didn't know rabbit had such a problem, lol
20:38 ldelossa yeah I'm thinking forsome reason, I run hostnamectl, and rabbit is probing something else and getting localhost
20:38 ldelossa erlang is a strangeeeee beast
20:38 Ahlee it's not a problem so much as it needs to know it's name
20:38 forrest Thanks Ahlee
20:38 Ahlee It's like Reek
20:38 Ahlee ;)
20:39 ldelossa So basically just specify the hostname when running rabbitmqctl ?
20:39 ldelossa rabbitmqctl [-n node]
20:39 ldelossa god it
20:39 ldelossa got it
20:39 ldelossa let me try this
20:41 iggy forrest: reload_modules: True ?
20:42 ignasr joined #salt
20:43 forrest iggy, Yeah that's it, I already linked it, THANKS FOR NOTHING IGGY! ;)
20:45 * iggy packs his things and leaves
20:48 ldelossa Ahlee
20:48 ldelossa you are the freaking man
20:48 lemur joined #salt
20:48 ldelossa or women
20:48 ldelossa I don't discriminate
20:48 bhosmer_ joined #salt
20:49 iggy he's women
20:49 ldelossa now to automate the clustering, god save me
20:49 ldelossa hahahahahahaa
20:49 ldelossa That comment thru me back to my college days iggy
20:49 Ahlee power bottom maybe iggy
20:49 ldelossa whoah, way to personal
20:49 dthom91 joined #salt
20:51 iggy I just shot water out of my nose from laughing so much
20:51 forrest lol
20:51 ldelossa hahaha.
20:51 Derrick joined #salt
20:51 seweryn2 joined #salt
20:52 Ahlee <3 iggy
20:52 Ahlee you gonna make it to saltconf '16 iggy?
20:52 Ahlee see if our waitresses are still working at that joint
20:53 jakehilton joined #salt
20:53 Guest62284 hey I have started playing with SaltStack and like it so far. Right now I have two multi masters (with the same key) and works fine. What about putting this behind a netscaler VIP? Is that bad practice for HA?
20:53 mapu joined #salt
20:53 ldelossa Ahlee, if interested: https://github.com/rabbitmq/rabbitmq-server/issues/406
20:54 hemebond enigma99a: Just leave it to the built-in balancing.
20:54 Ahlee Guest62284: I kind of do similar, I have a VIP shared between HAProxy nodes in front of Salt-API
20:54 hemebond (I gather that will be the recommended method)
20:55 enigma99a I see... so everyone is doing round robin DNS then?
20:55 enigma99a for the 'salt' host
20:55 Ahlee enigma99a: since minions return to the master that initiated, it's less important
20:55 Ahlee both masters are "hot", so how you kick jobs off is up to you
20:56 enigma99a yeah guess so.
20:56 iggy Ahlee: yes, probably not presenting though
20:56 enigma99a what about scale? if I leave them both hot
20:56 murrdoc how do u check waht salt is hot
20:56 enigma99a should I have any issues running 5-7,000 minions on each?
20:56 Ahlee syndic masters (basically federating down) is available if you exceed one master
20:57 Ahlee then you have a "master of master" which talks to the underlying masters - making that HA is tougher.
20:57 Ahlee which is what i'm fighting with now
20:57 jakehilton trying to get this dang ext_pillar stuff working.. I have the following specified. https://gist.github.com/jakehilton/2d623d728d248a5031e2
20:57 Ahlee iggy: word, i'm still pondering a topic
20:57 jakehilton but getting an error:: [ERROR   ] Error parsing configuration file: /etc/salt/master - mapping values are not allowed here
20:57 jakehilton in "<string>", line 559, column 15:
20:57 jakehilton - root: pillar
20:57 iggy the bad part with multi-master atm is data that isn't easily sync'ed between the masters (minion cache info, return data, etc.)
20:58 jakehilton but -root: pillar is correct syntax..  as per the docs.
20:58 Ahlee pillar is a string, it needs to be a dict
20:58 Ahlee - root: {}
20:58 zzzirk joined #salt
20:58 blast_hardcheese also master looks like it needs a colon
20:58 jakehilton let me give that a whirl.
20:58 Ahlee - vmware_pillar: {}
20:59 enigma99a let's say you have 2 syndics pointing to a single master, will the minion caches stay better in sync?
20:59 Ahlee enigma99a: yes, syndic is a passthrough
20:59 Ahlee enigma99a: and there's always external job caches for returned data
20:59 enigma99a ahhhh got it.
21:00 enigma99a so connecting directly to the master is kinda bad practice at scale
21:00 Ahlee https://docs.saltstack.com/en/latest/topics/jobs/external_cache.html#external-master-cache
21:00 Ahlee at extreme scale (20k minions or so), masterless is preferred
21:00 Ahlee well, i don't know if preferred is right word
21:00 Ahlee better tested
21:00 Ahlee and 'extreme'
21:01 hemebond Ahlee: What's the point of that then? If you have no master, how do you manage them?
21:01 Ahlee hemebond: masterless you lose the RPC functionality, and salt becomes config management
21:01 jakehilton looking at this documentation..  but the example is not working: https://docs.saltstack.com/en/latest/ref/pillar/all/salt.pillar.git_pillar.html#git-pillar-2015-8-0-and-later
21:02 perfectsine joined #salt
21:02 blast_hardcheese jakehilton, Oh, you were missing : after - git
21:03 enigma99a thanks everyone for all the help :)
21:03 Ahlee i've not seen this
21:03 Ahlee interesting
21:03 jakehilton ha.. well blast I feel sheepish. :S
21:03 jakehilton let me work that over
21:03 quix_ joined #salt
21:04 blast_hardcheese jakehilton, No worries-- the example is pretty noisy. I've gotten a lot of mileage out of YAML syntax checkers
21:04 jakehilton good point.. I should have run it through one first.
21:08 jakehilton perfect! ext_pillars is working fine now which is great.. but I have one other issue with the gitfs remote..  any ideas here would be much appreciated:  https://github.com/saltstack/salt/issues/28620
21:09 baweaver joined #salt
21:15 StolenToast joined #salt
21:18 iggy Ahlee: it's not just job cache you lose, (consistent) targetting via anything other than name is the other big one for me
21:19 otter768 joined #salt
21:23 Ahlee oh? can you elaborate? As that sounds fundamentally broken
21:24 iggy minions will return their grains (for the master to cache) to either (not both) masters
21:25 iggy so targetting grains on one master will return a different set than on the other
21:27 iggy (mine suffers as well, but I guess not many people use it)
21:29 SaltySnack joined #salt
21:29 SaltySnack hello
21:29 SaltySnack is there a way to run execute external commands when using salt-cloud profiles?
21:29 SaltySnack i am trying to install aws code-deploy agent on a salt-cloud create AWS instance
21:30 SaltySnack i am wondering if i can put cmd.run in /etc/salt/cloud.profiles.d/example-profile.conf
21:30 iggy you can put grains in it I think then have a reactor kick off on minion start that checks that grain
21:31 nofxrok joined #salt
21:32 SaltySnack i have grains in my cloud profile, i am using the grain to decide which state file will run
21:32 SaltySnack so in my top.sls, i have state files, and each one does a check using jinja {% if grain=webserver} then run web server sls
21:32 SaltySnack i guess i could try using the reactor system as well
21:33 iggy top files can match on grain, so you don't have to put a bunch of unnecessary jinja in your states
21:33 SaltySnack oh, i did not know that
21:34 SaltySnack so i can move the if then else to my top file
21:34 SaltySnack should make it easier
21:34 iggy you don't even need if
21:34 SaltySnack i see
21:34 SaltySnack what's the syntax then?
21:35 iggy https://docs.saltstack.com/en/latest/ref/states/top.html#advanced-minion-targeting
21:35 iggy there are some examples of matching on grain, pillar, and pcre's
21:35 iggy compound matches are fun too
21:36 SaltySnack cool, thank you
21:36 dthom91 joined #salt
21:39 joren So I've been playing with salt-cloud recently, dns creation seemed to be present for digitalocean in a previous version but I upgraded trying to fix something and now it seems to not be trying to create the dns record for my new host, just wondering if anyone else has ran into this or has any advice? it doesn't seem to be hitting the /v2/domains/ portion of the api at all
21:41 ajw0100 joined #salt
21:41 iggy joren: it might be functionality that was lost when they had to change to the new api
21:43 joren hmm, it was at least *trying* in a 2015.5 version of salt that was using the /v2/ api, was there a more recent api change than that?
21:43 iggy sadly beyond the basics of creating/destroying/etc instances, the feature coverage of different cloud providers is hit-or-miss
21:44 joren yeah, I noticed that for sure
21:45 felskrone joined #salt
21:46 iggy joren: did you try running with -l debug? it looks like a pretty specific set of circumstances is required for salt-cloud to actually try to add records
21:47 iggy that code has indeed changed a good bit since 2015.5
21:48 joren I did, I'll try and dig into the log a bit more to see what's going on, I didn't actually see anything in the code that looked like it was trying to call that create_dns function, maybe it has indeed just been dropped
21:49 subsignal joined #salt
21:49 ldelossa Hey guys, do you know if this is possible: http://hastebin.com/nelegadoxi.sm I'm trying to parse the rabbitmq: file saying for every object in users, set a variable for the nested dictionary's value
21:51 markm joined #salt
21:54 NotBobDole joined #salt
21:54 DammitJim joined #salt
21:55 evilrob so how many jokes are there about the saltconf.com/location page being 404?
21:55 dthom91 joined #salt
21:56 opensource_ninja joined #salt
21:56 zmalone http://saltconf.com/saltconf16-hotel/ ?
21:56 zmalone I'm not sure where that's linked from
21:57 evilrob oh, I know where it is.  I just thought it humorous that the location page was 404
21:57 zmalone Ah, the location page is linked from "Plan ahead"
22:02 ronrib joined #salt
22:03 Tyrm_ joined #salt
22:03 iggy joren: are you on 2015.5?
22:04 joren I'm on 2015.8 now
22:04 joren 2015.5 is where I at least saw the /v2/domains/ api getting called
22:05 iggy lol, looks like that was dropped in 2015.8 and added back in devel
22:05 joren ouch -_-
22:06 joren thanks, maybe I'll just grab the digital_ocean.py script from devel or something
22:08 forrest iggy, Which PR is that in? I'm pretty sure the domains stuff was there when I added floating ips.
22:08 joren it's almost painfull that that function is still in the script but just not being called :D
22:09 forrest lol
22:09 forrest joren, If you use the dev script it has support for floating IPs as well now
22:09 forrest which you should be using since they're free as long as they're assigned to a system ;)
22:10 cpattonj joined #salt
22:12 joren nice, thanks forrest
22:12 forrest joren, For sure, checks can be addressed to.....
22:13 quix joined #salt
22:20 gchao joined #salt
22:20 thayne joined #salt
22:20 Tyrm joined #salt
22:21 sontek joined #salt
22:24 Tyrm joined #salt
22:27 zzzirk joined #salt
22:27 hemebond Ahlee: So how do you actually manage those minions if you have no master?
22:30 murrdoc joined #salt
22:30 perfectsine joined #salt
22:32 murrdoc1 joined #salt
22:37 whatapain is salt-cloud.readthedocs.org the same documentation as docs.saltstack.com?
22:37 hal58th_ hemebond: https://www.youtube.com/watch?v=94TSWxyapuU
22:38 hemebond hal58th_: Oooh, thanks :-)
22:38 pjb_ joined #salt
22:39 cyborg-one joined #salt
22:40 pjb_ left #salt
22:42 ldelossa does anyone have any examples of pretty advanced and nested yaml parsing
22:42 ldelossa I'm having a good amount of trouble with this
22:43 ldelossa unpacking is spinning my brain
22:44 ldelossa I'm confused if a jinja variable can be an array
22:45 ldelossa so if I do a {% for user in pillar.get('users') %} and there's multiple highlevel dictionary objects, are both those now placed in user?
22:47 hemebond ldelossa: A Jinja variable can be an array.
22:48 hemebond I don't think your Pillar values will be merged, but I'm not sure; there are instances where they will be.
22:48 gchao joined #salt
22:52 kermit joined #salt
22:52 bbradley joined #salt
22:53 waesum joined #salt
22:55 Sokel joined #salt
22:56 Sokel Does salt and jinja not play well with states that have dashes in their names? I'm getting this error: expected end of statement block got '-' line 1
22:58 hemebond Sokel: Looks like hyphens are okay.
22:58 hemebond Can you paste your state somwhere?
23:00 hemebond Sokel: https://github.com/saltstack/salt/issues/28161
23:01 perfectsine joined #salt
23:03 aaron_ joined #salt
23:03 aaron_ hi
23:04 aaron_ Is there a Salt State in order to check if Postgres9.3 is running on Centos 7?
23:04 aaron_ I have the service as: "postgresql-9.3.service "
23:05 aaron_ But, for some reason, this simple state.sls file isn't working: https://gist.github.com/aronysidoro/9eadcf4a5b4e58fe462b
23:05 aaron_ Thank you in advance!
23:06 perfectsine joined #salt
23:07 aphor aaron_: what kind of error are you getting?
23:07 aaron_ @aphor, I just updated the Gist with the error. thanks
23:08 aphor aaron_: service.running can't find anything by the name "postgresql-93"
23:09 aphor the rest is probably highly platform dependent.
23:09 aaron_ I ran this command to check my services: "sudo systemctl list-unit-files --type=service"
23:09 aaron_ and it output: "postgresql-9.3.service                      enabled "
23:10 aaron_ I just don't know why SaltStack State doesn't recognize the name....
23:12 ekristen joined #salt
23:12 mosen joined #salt
23:12 iggy whatapain: no
23:13 * MTeck tickles iggy
23:14 aphor aaron_: maybe there will be clues in the minion log file?
23:15 mosen good news I made an osx native package. There are some situations in which homebrew is not acceptable
23:15 iggy what's cracking MTeck?
23:15 MTeck aphor: If you run "service postgresql-93 start", what do you see?
23:15 aaron_ @aphor, ok, I solved it.  I ran: "sudo salt '*' service.get_all" and saw the service name was: "postgresql-9.3" I was missing the period!
23:15 aaron_ Thank you
23:15 aphor aaron_: what does "systemctl status postgresql-9.3" do?
23:15 MTeck iggy: LA needs to burn and I need to watch it
23:16 aaron_ yes, it's solved. thanks
23:16 aphor aaron_: YW.
23:16 aphor MTeck: it was @aaron_ not me..
23:17 workthrick is there any reference for what functions are available in salt.util, as exposed by jinja?
23:17 MTeck aphor: in my defense... same number of letters and starting with the same letter, AND o and r at the end, and r and n are similar
23:17 iggy workthrick: ... none?
23:18 workthrick iggy: so how can I learn what functions are available there?
23:19 iggy what functions are in salt.util? read the code
23:19 otter768 joined #salt
23:20 workthrick ok, maybe I confused myself
23:22 whytewolf workthrick: are you trying to ask about the sls template variables? https://docs.saltstack.com/en/latest/ref/states/vars.html
23:23 iggy if that's the case, there's some good info here too: https://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.jinja.html#module-salt.renderers.jinja
23:28 bfoxwell joined #salt
23:30 ageorgop joined #salt
23:32 baweaver joined #salt
23:32 breakingmatter joined #salt
23:33 opensource_ninja joined #salt
23:33 freelock running into trouble with jinja in an sls, and I'm not seeing what's wrong
23:33 freelock "Rendering SLS 'base:docker.containers' failed: found unexpected end of stream; line 66"
23:34 whytewolf freelock: gist?
23:35 freelock more looking for how to debug this in general
23:35 whytewolf check around line 66 before and after.
23:35 whytewolf for typos
23:36 whytewolf missing punctuation. or extra puncutation
23:36 whytewolf things that should be escaped that are not.
23:38 ldelossa does anyone know the best way of going about unpacking this in a state file, so I can get the username and password into a jinja vairable http://hastebin.com/aresawazis.sm
23:38 whytewolf ldelossa: by putting the username and password into a pillar to begin with
23:38 MeltedLux joined #salt
23:38 ldelossa That is my pillar file
23:38 ldelossa above
23:39 freelock the output of the command shows the last two lines of the file -- with the jinja, the line numbers do not match the source file at all
23:39 ujjain joined #salt
23:39 ujjain joined #salt
23:39 freelock looking for a way to see what jinja is rendering -- as best I can tell all the {% for %} and {%if %} blocks all end
23:40 freelock (it's a bit problematic to grab this file off the server, but I will drop into a gist momentarily)
23:40 whytewolf freelock: end of stream means it is hitting the end of file before something that should be closed
23:40 Emantor joined #salt
23:40 freelock is there any kind of jinja validator I can paste this into to find it?
23:40 freelock (lots of blocks, and I've gone through twice without spotting it)
23:41 whytewolf freelock: no, there is no lint for jinja
23:41 dec joined #salt
23:41 whytewolf you could try this https://github.com/whytewolf/salt-debug but it only shows what gets rendered
23:43 sdm24 freelock: I will print jinja in the state ID tags, or have a "{{var1 }} {{var2 }}...
23:43 whytewolf ldelossa: something doesn't look right about that pillar.
23:43 sdm24 : \n cmd.run: \n -name: echo {{var 3}} {{var4}}
23:44 ldelossa It's funny because I wind up getting a dictiionary with two lists
23:44 ldelossa that can ahve overlapping mapping names
23:44 ldelossa and salt jsut pics the first one
23:44 ldelossa http://hastebin.com/ijesufuhar.sm
23:45 ldelossa not sure how it can differentiate if I can't give it an item number like I would an array object
23:45 nobrak joined #salt
23:45 nobrak joined #salt
23:45 sdm24 ldelossa: yep, [0], [1], etc
23:46 sdm24 at least that works ina  state, not sure for the CLI
23:46 ldelossa doesn't seem to work for me
23:46 ldelossa via cli anyway
23:46 quix joined #salt
23:46 sunkist1 joined #salt
23:46 ldelossa I'm having nesting issue where I can't even get to the data I need
23:47 ldelossa look at the following: http://hastebin.com/efezuposij.sm
23:47 ldelossa so I an place the first list object within users: into the user variable, but now what syntax do I use to access the embedded structures inside the user variable now
23:47 freelock whytewolf: that looks like the kind of thing I was looking for!
23:49 whytewolf ldelossa: can you post the full pillar with both the test user and the real user?
23:49 whytewolf trying to replicate it
23:49 freelock https://gist.github.com/anonymous/d23f4f1e6213c07949c7
23:49 ldelossa you want the pillar file?
23:49 ldelossa or the pillar info
23:50 whytewolf file
23:50 perfectsine joined #salt
23:51 ldelossa http://hastebin.com/gihelotadu.sm
23:52 ldelossa I can setup the yaml anyway, I dont care what format it's in, but I'm not sure the best way to format the yaml if I want tobasically have a user dictionary, with a nested password and user name, then extract that password and username into jinja variable and use it in the rabbitmqctl command
23:52 ldelossa I'm wondering if it may just be easier to write a remote execution module
23:52 ldelossa and run it
23:52 ldelossa but this seems pretty basic, I just don't know yaml that well
23:52 ldelossa or jinja
23:53 whytewolf ahh okay so you do have lists with dicts in them
23:53 iggy MTeck: it's not that bad... or so I've been told... I pretty much work <--> home
23:53 MTeck wanna grab a drink after work?
23:54 iggy not today
23:54 MTeck Tonight, I'm gonna go to UCLA
23:54 ldelossa whytewolf, yes I do, and the problem is, I'm not sure how to access data structure within jinja's variable
23:55 ldelossa in python I'd do something like, http://hastebin.com/tafihuzafu.vhdl
23:55 zmalone joined #salt
23:55 ldelossa and then I'd extract the value, and save it to a variable to use somewhere later
23:56 iggy you know you can write states in python right?
23:56 ldelossa No I did not
23:56 ldelossa changing renderers?
23:56 iggy yes
23:56 iggy https://docs.saltstack.com/en/latest/salt-modindex.html#cap-r
23:57 iggy specifically: https://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.py.html#module-salt.renderers.py
23:57 ldelossa just shabang it
23:57 ldelossa or did I need to edit salt config
23:57 iggy shebang works
23:57 ldelossa just shang bang it
23:57 ldelossa Let me play around with this then
23:58 freelock ha, found it, missing end ' on a cmd.run
23:59 cpattonj joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary