Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2015-11-10

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 moogyver yeah looks like that still doesn't work
00:00 moogyver ah well.  i'll have to look at adding provider specification to actions at some point later
00:00 pcn Is anyone using boto_elb.register_instances with 2015.8.1?
00:02 forrest wtf is this nonsense
00:02 forrest https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.dockerng.html#authentication
00:02 forrest credentials MUST be configured to pull images?
00:02 forrest uhh no
00:02 forrest docker hub doesn't require that
00:03 iggy there was an issue about it... should check that
00:06 forrest Yeah I just commented on that
00:07 forrest seems like something that should have been caught compared you can put in GARBAGE and it works
00:08 cberndt joined #salt
00:09 keimlink_ joined #salt
00:11 pcn If I'm trying to invoke boto_elb.exists, I should be able to do this, right? sudo salt-call boto_elb.exists elb-name region=us-west-2 ?
00:12 pcn Trying that is getting me: 'boto_elb' __virtual__ returned False
00:12 pcn And that is confusing the heck out of me
00:12 breakingmatter joined #salt
00:14 murrdoc joined #salt
00:15 whytewolf pcn: make sure your python can pass this https://github.com/saltstack/salt/blob/develop/salt/modules/boto_elb.py#L58-L76
00:16 pcn Ah, OK.  Version too old
00:18 LeProvokateur joined #salt
00:20 ernetas joined #salt
00:21 mosen joined #salt
00:23 keimlink joined #salt
00:24 Micromus joined #salt
00:25 scoates_ joined #salt
00:27 zmalone joined #salt
00:29 moogyver ah.  nothing better to give yourself a headache than trying to rewrite someone else's perl script.
00:30 moogyver especially when they manage to make it a 3000 line script for what equates to about 5 rest calls.
00:30 geekatcmu ouch
00:30 geekatcmu And no subroutine calls?
00:30 jrklein joined #salt
00:31 geekatcmu And no relying on any CPAN modules that might make REST easy, but lots of CPAN modules for parsing various configuration files?
00:31 stupidnic rewrite it in go and call it a day :)
00:33 moogyver oh no geekatcmu - he just shells out to curl.
00:33 moogyver stupidnic - that's funny because that's exactly what i'm doing
00:33 geekatcmu right
00:34 moogyver he actually has subroutines in here that literally do nothing.  like he forgot how to call them, so he wrote some test ones
00:34 moogyver and then forgot to take them out.
00:34 * geekatcmu snickers
00:35 moogyver i mean, i did trim it to about 2500 right away when i took away the 500 lines of changelog he put at the top of the script as comments
00:35 * moogyver rolls eyes
00:39 timoguin joined #salt
00:39 larsfronius joined #salt
00:41 LeProvokateur joined #salt
00:43 Micromus joined #salt
00:52 stupidnic moogyver: Go is my new hotness
00:53 moogyver stupidnic: yeah I like it - I just write in python mostly, so I don't get to practice it as much as I'd like
00:56 murrdoc basepi:  u around
00:56 otter768 joined #salt
00:56 murrdoc question about https://docs.saltstack.com/en/2015.5/ref/clients/index.html#salt.runner.RunnerClient
00:57 murrdoc help :)
00:58 jaybocc2 joined #salt
00:59 zzzirk joined #salt
00:59 zmalone joined #salt
01:00 JDiPierro joined #salt
01:10 JDiPierro joined #salt
01:11 sunkist joined #salt
01:13 breakingmatter joined #salt
01:15 woodtablet left #salt
01:16 basepi murrdoc: I can try to help. I haven't used that much.
01:19 otter768 joined #salt
01:19 dthom91 joined #salt
01:24 murrdoc ok
01:24 conan_the_destro joined #salt
01:24 murrdoc how do i do cmd_async
01:24 murrdoc i need an example please
01:24 murrdoc master_opts = salt.config.master_config('/etc/salt/master')
01:24 murrdoc runner_client = salt.runner.RunnerClient(master_opts)
01:24 murrdoc runner_client.cmd_async({
01:24 murrdoc 'fun': 'custom.runner',
01:24 murrdoc 'args': [ arg1 ]
01:24 murrdoc })
01:24 murrdoc that doesnt work
01:25 Illusioneer joined #salt
01:38 basepi murrdoc: what does it do?
01:45 ldelossa joined #salt
01:45 murrdoc the runner ?
01:45 murrdoc or that piece of python
01:45 ldelossa Hey guys, If I enter an if loop in jinja, just to check if something exists, and if it exists I want to just continue the state, can I just place an endif
01:45 ldelossa and it'll continue?
01:45 murrdoc it doesnt do anything basepi
01:45 murrdoc it just dies
01:48 basepi murrdoc: well, async will just fire the job off in its own process and then exit.
01:48 murrdoc right
01:49 basepi so it's not running in the background?
01:49 murrdoc but i dont see the results of the runner
01:49 basepi results where?
01:49 basepi in the job cache?
01:49 murrdoc yeah
01:49 basepi hmmmm
01:50 murrdoc looks like i have the 'low' setup wrong
01:50 basepi eh?
01:50 basepi yeah maybe....
01:50 murrdoc https://docs.saltstack.com/en/2015.5/ref/clients/index.html#salt.runner.RunnerClient.async
01:50 RandyT Heyo
01:51 basepi according to those docs it does say that external auth must be configured....
01:51 RandyT what is the proper way to call a function from this salt-contrib module? https://github.com/saltstack/salt-contrib/blob/master/modules/iis.py
01:51 basepi so that might be the problem.
01:51 murrdoc ah fuck
01:51 basepi RandyT: you should sync it as a custom module to your minions
01:51 murrdoc it says a lot of 'can be used'
01:51 murrdoc Salt's https://docs.saltstack.com/en/2015.5/ref/configuration/master.html#std:conf_master-external_auth can be used to authenticate calls. The eauth user must be authorized to execute runner modules: (@runner). Only the master_call() below supports eauth.
01:51 basepi By default, that means putting it in /srv/salt/_modules and then running `salt '*' saltutil.sync_all`
01:51 RandyT salt winminion iis.site_list not working
01:51 murrdoc doesnt make it look like its required
01:51 RandyT I've run sync_modules and see the sync happen
01:52 basepi RandyT: in that case it usually means the module is not loaded. You should inspect the __virtual__ function inside and see what its requirements are for loading.
01:52 basepi except....it seems like the only requirement is windows....
01:52 basepi hmmm
01:53 RandyT basepi: that works... sorry
01:53 RandyT must have not used \*
01:53 basepi Glad we figured it out! :)
01:53 basepi murrdoc: I'm only going off of the docs at the moment
01:53 basepi The runnerclient docs
01:53 RandyT I like those easy ones.. easy for you anyway
01:53 murrdoc basepi:  need more docs man
01:53 basepi hahaha
01:54 murrdoc or just an example
01:54 basepi you're right, those python client docs are slim
01:54 murrdoc can u hit up whiteinge  ?
01:54 murrdoc oh shit i should look at pepper
01:54 murrdoc nope
01:54 murrdoc its abstracted
01:55 basepi murrdoc: wonder if you should use client.async instead of client.cmd_async
01:56 basepi Anyway, I need to go afk, so file an issue or hit me up tomorrow and we'll see if we can get it figured out.
02:09 tiadobatima joined #salt
02:14 breakingmatter joined #salt
02:14 murrdoc joined #salt
02:19 felskrone joined #salt
02:21 justanotheruser joined #salt
02:27 racooper joined #salt
02:28 zzzirk_ joined #salt
02:28 murrdoc joined #salt
02:33 zmalone joined #salt
02:40 favadi joined #salt
02:40 mapu joined #salt
02:45 ageorgop joined #salt
02:45 zzzirk joined #salt
02:47 murrdoc joined #salt
02:48 dthom91 joined #salt
02:48 bhosmer joined #salt
02:49 catpiggest joined #salt
02:53 ldelossa joined #salt
02:54 ldelossa Hey guys, I'm having a little trouble. I have a very basic orchestration file which is target minions directly by name
02:54 ldelossa when I go to run the state.orch, it says no minions are found
02:54 ldelossa if I do a test.ping for the minion name
02:54 ldelossa no issues
02:55 ldelossa http://hastebin.com/iganopisud.sm
03:04 zmalone joined #salt
03:10 iggy ldelossa: -sls should be a list
03:11 iggy or I guess it can be either... stupid insconsistent docs
03:13 anmolb joined #salt
03:13 ldelossa haha
03:13 ldelossa should I make it into a list?
03:13 whytewolf ldelossa: it is just salt-run not salt salt-run
03:13 ldelossa wow
03:14 ldelossa I'm a moron
03:14 ldelossa it's late lol
03:14 vf joined #salt
03:15 ldelossa okay quick question also: http://hastebin.com/ubopizogir.vhdl
03:15 ldelossa trying to use this small block, if the pillar matches the minion's grain, I want nothing to happen and just continue, not running the elif
03:15 ldelossa but jinja complains that there should be an expression
03:16 ldelossa is there a way to to say, exit the if condition and continue on
03:16 whytewolf ldelossa: change == to != and drop the elif
03:16 ldelossa thanks a ton!
03:19 ldelossa everything works, thank god. Night guys always appreciate the assistance
03:21 jaybocc2 joined #salt
03:22 * vf slaps vf around a bit with a large fishbot
03:22 clintberry joined #salt
03:23 tt_ joined #salt
03:26 favadi joined #salt
03:27 zmalone joined #salt
03:34 falenn joined #salt
03:47 evle joined #salt
03:52 pdayton joined #salt
03:57 hasues joined #salt
03:57 hasues left #salt
04:00 zmalone1 joined #salt
04:04 zzzirk_ joined #salt
04:06 josuebrunel joined #salt
04:10 falenn joined #salt
04:12 viq joined #salt
04:13 quix joined #salt
04:15 breakingmatter joined #salt
04:18 colegatron joined #salt
04:36 ^C joined #salt
04:41 larsfronius joined #salt
04:43 ramteid joined #salt
04:51 wendall911 joined #salt
05:01 PeterO joined #salt
05:13 Segfault_ joined #salt
05:21 rdas joined #salt
05:29 favadi joined #salt
05:45 timoguin joined #salt
05:46 mehakkahlon joined #salt
05:48 mehakkah_ joined #salt
05:48 stanchan joined #salt
05:55 impi joined #salt
06:11 gratimax joined #salt
06:16 breakingmatter joined #salt
06:29 jaybocc2 joined #salt
06:42 larsfronius joined #salt
06:52 zz_Cidan joined #salt
06:52 Cidan joined #salt
07:01 colttt joined #salt
07:10 otter768 joined #salt
07:17 breakingmatter joined #salt
07:18 harkx joined #salt
07:22 evle Hi. Bootstrap script installs the following repository on my debian: "deb http://debian.saltstack.com/debian jessie-saltstack main"
07:22 evle Documentation says that repository should be "deb http://repo.saltstack.com/apt/debian/latest jessie main", which is much more fresh.
07:22 evle Is it supposed to be that way?
07:22 ageorgop joined #salt
07:29 jaybocc2 joined #salt
07:30 slav0nic joined #salt
07:31 impi joined #salt
07:33 KermitTheFragger joined #salt
07:37 evidence it doesn't seem any of the bootstrap scripts have moved over to the new repos they've set up yet.. been waiting for that for our vagrant provisioner to work moar better
07:38 evidence currently we get the upstream distro package, and then the first highstate updates it from our local mirror.  but distro packages are so old that the output and a bunch of functions get completely boned, as the pkg goes 2015.5 -> 2015.8 mid run
07:39 evidence also, i heard 2015.8.2 was getting tagged anyday?  we have some bug fixes in there we are looking forward to
07:49 cberndt joined #salt
07:54 scarcry joined #salt
07:57 AndreasLutro joined #salt
07:57 rotbeard joined #salt
08:05 impi joined #salt
08:06 zionsofer joined #salt
08:10 eseyman joined #salt
08:24 kawa2014 joined #salt
08:28 keimlink joined #salt
08:29 fredvd joined #salt
08:30 Guest55101 joined #salt
08:30 jaybocc2 joined #salt
08:34 zionsofer joined #salt
08:35 David_B55 joined #salt
08:36 wartalker joined #salt
08:38 denys joined #salt
08:39 wartalker group1: 'L@10.10.10.10', salt -N group1 test.ping: Minion did not return. but with salt 10.10.10.10 test.ping, it's OK, help?
08:40 kawa2014 joined #salt
08:42 hoonetorg hi
08:43 hoonetorg what is the correct repo for debian jessie?
08:43 hoonetorg deb http://debian.saltstack.com/debian jessie-saltstack main
08:43 hoonetorg or
08:43 hoonetorg deb http://repo.saltstack.com/apt/debian/latest jessie main
08:44 AndreasLutro hoonetorg: probably whatever's stated here https://docs.saltstack.com/en/latest/topics/installation/debian.html
08:50 bhosmer joined #salt
08:53 jhauser joined #salt
08:56 Guest59 joined #salt
08:58 thalleralexander joined #salt
08:58 Guest55101 joined #salt
08:59 KermitTheFragger joined #salt
09:04 srv_ joined #salt
09:05 * srv_ slaps bbradley around a bit with a large fishbot
09:07 srv_ left #salt
09:10 Rumbles joined #salt
09:15 evle Is there a good way to delete key issued for the same name as one that is already accepted?
09:17 hemebond evle: I'm not sure (I just deleted both) but you might be able to delete the file itself from the master.
09:17 hemebond I haven't tried it though.
09:17 evle Yep. It worked.
09:19 breakingmatter joined #salt
09:20 s_kunk joined #salt
09:20 otter768 joined #salt
09:22 thefish joined #salt
09:26 Todesengelchen left #salt
09:31 jaybocc2 joined #salt
09:36 impi joined #salt
09:37 ziro` joined #salt
09:46 Grokzen joined #salt
09:52 Dev0n Hey, is norm to always highstate when deploying out or would you normally run that initially bootstrap then run individual states when things change?
09:53 Dev0n initially to*
09:53 hemebond Dev0n: I would say it's normal to just highstate.
09:54 hemebond You could, I suppose, just run a single state if that's all you've changed.
09:54 hemebond But that would mostly be a time saving thing I think.
09:54 Dev0n hemebond, true
09:54 hemebond Or perhaps you just want to apply a state as a one-off.
09:55 markm joined #salt
09:55 Dev0n hemebond, I have edge cases that would require an instance to be started which wouldn't be part of the normal operations
09:55 Dev0n for those, it prob does make sense to run a single state
10:06 ziro` joined #salt
10:06 yetAnotherZero joined #salt
10:12 ziro` joined #salt
10:12 Rumbles joined #salt
10:14 babilen Dev0n: I like to ensure that the boxes are actually in the state that would be achieved by a highstate. If you run single states often you might introduce inconsistencies in your setup that might be tricky to track down...
10:16 Dev0n babilen, come to think of it, I can see how inconsistencies could be introduced. I think I'm just looking for a cheap way to cut down the deployment time, it usually takes around 80 seconds for a fullstate to run when I just want to redeploy an instance that's running backed due to code changes (which is only one state of many)
10:17 Dev0n backend*
10:17 babilen It really is up to you ... I do run states individually every now and then, but by and large a highstate is what you want to ensure that *everything* is in the state you expect it to be
10:18 babilen Or, even worse, you might overlook local changes that are necessary, but would be overwritten by a highstate after which the systems don't work as expected anymore
10:18 Dev0n babilen, no doubt you would periodically run the highstate to make sure everything is good.
10:18 colegatron joined #salt
10:18 babilen exactly
10:24 Dev0n thanks
10:27 Dev0n is it really just preference on how you lay out your pillars? I can see having the top.sls file matching ids and pointing to pillar data files specific to node or top.sls to match * and have if grains['id'] match in a single file
10:27 Dev0n trying to figure out which might be the better approach
10:27 hemebond Dev0n: If you're using formulas you will have to have certain data structures for them.
10:28 Dev0n hemebond, I'm not using any formulas at the moment
10:28 Dev0n the latter example I mentioned is here: https://docs.saltstack.com/en/latest/topics/tutorials/pillar.html#pillar-makes-simple-states-grow-easily
10:29 rdas joined #salt
10:29 Dev0n it almost seems like conditional match for minion seems longwinded compared to having individual pillar files per minion (at the moment it's just two, staging and pro)
10:29 Dev0n prod*
10:29 hemebond Dev0n: It's something I haven't really figured out yet.
10:29 Dev0n ahh
10:30 hemebond As in, figured out what works best for me.
10:30 Dev0n gotcha
10:31 denys joined #salt
10:32 jaybocc2 joined #salt
10:34 favadi joined #salt
10:36 mattiasr joined #salt
10:40 clintberry joined #salt
10:44 giantlock joined #salt
10:44 larsfronius joined #salt
10:45 MasterNayru joined #salt
10:46 sm1ly joined #salt
10:47 hemebond Oh. Someone was in here recently asking about letting users modify the minion config; turns out you can put .conf files into /etc/salt/minion.d/
10:48 sm1ly re2all. guys. I got some stranges. got simple config ( http://pastebin.com/8t4vaZQJ ). i call it like salt 'bot' state.sls sysctl. if there is no file - it creates it. but it dont fill it from source. what I doing wrong?
10:49 jb_ joined #salt
10:49 MasterNayru Hello all. I think I've found a bug when you try and use S3 URLs as source/source_hash in file.managed resources. The fix is pretty simple, but I'm not entirely sure how I would go about structuring a pull request or any of that. Can someone give me a hand to get this fixed?
10:49 AndreasLutro MasterNayru: sure
10:49 AndreasLutro sm1ly: are you sure the source actually has content?
10:49 hemebond sm1ly: The file is in /srv/salt/sysctl/sysctl.conf ?
10:50 sm1ly AndreasLutro, yup. I use it not first time. it looks like it dont see -source line in config.
10:50 sm1ly hemebond, correct.
10:50 hemebond sm1ly: Have you tried with file.managed: ?
10:51 bhosmer joined #salt
10:51 hemebond What about trying to set the user+group?
10:51 sm1ly hemebond, what for? I use configs like this about a year. its like templates. I just make it simle trying understand an error. looks like new version changes.
10:52 hemebond sm1ly: Just throwing things out there. Just found my own usage and it's as simple as yours.
10:52 Kurisutian joined #salt
10:53 sm1ly hemebond, hm. any did u know any changes about grains globbing?
10:53 hemebond Nope.
10:54 Kurisutian Hi! I'm currently compiling salt from source and out of curiosity I'd like to know if it is possible to change the default location of the config filen when compiling salt? Is there any flag to do so?
10:54 AndreasLutro sm1ly: can you try `salt minion file.get_diff /etc/sysctl.conf salt://sysctl/sysctl.conf`
10:56 sm1ly AndreasLutro, I tryied salt-call state.sls sysctl -l trace test=True. it talks it dont see -source. so they broke globbing it grains. cause salt 'bot[4,6,7]' test.ping works, but {% elif grains['host'] == 'bot[4,6,7,8]' %} dont
10:56 AndreasLutro oh
10:56 AndreasLutro errr
10:56 AndreasLutro well that was never supposed to work
10:56 AndreasLutro == is just a literal string comparison, there's no globbing involved there
10:57 rodio_ua joined #salt
10:57 rodio_ua left #salt
10:57 sm1ly it works with different version. about 2014.* i dont remember what. I just changed centos6 to 7 and reconfiguring salt.
10:58 AndreasLutro regardless, it's not supposed to work
10:58 AndreasLutro you need to use something like https://docs.saltstack.com/en/develop/ref/modules/all/salt.modules.match.html#salt.modules.match.glob
10:59 sm1ly AndreasLutro, u talking about salt-master call minions for work globbing. like top.sls
11:00 AndreasLutro no, I'm talking about {% if grains['host'] == 'bot[4,6,7,8] %} - that will never work
11:00 sm1ly but i need the same in sls. so. now I got 10 hosts. I can write if grains host 1 elif 2....elif 10. but what if its 1000?
11:00 AndreasLutro like I said, https://docs.saltstack.com/en/develop/ref/modules/all/salt.modules.match.html#salt.modules.match.glob
11:02 MasterNayru AndreasLutro: The bug I've found is present in develop, but it's currently affecting me in 2015.5 and I would like to have it fixed in 2015.8 if I do end up upgrading ... how would I go about making sure the bug gets fixed in these other branches?
11:03 AndreasLutro MasterNayru: if you send the PR to 2015.5 it will be merged into the more recent branches eventually
11:03 MasterNayru Do I just put in a pull request to the develop branch and let you guys handle the other branches?
11:03 AndreasLutro if you send to develop the salt devs will usually backport it, but you could do it yourself and open 3 PRs if you're in a hurry
11:13 MasterNayru OK, I've sent one to develop
11:13 opdude Has anyone ever tried to remove elevation on a windows minion for a particular command? I'm thinking like running cmd.run unevelate=True "my command of awesomeness" and that will remove the admin elevation that salt runs with?
11:18 felskrone joined #salt
11:20 breakingmatter joined #salt
11:21 otter768 joined #salt
11:22 amcorreia joined #salt
11:23 tuxx hey guys
11:24 tuxx im trying to learn how to use salt and stumbled over salt-formulas
11:25 tuxx when i try to use postgres_formula for example i get:
11:25 tuxx Comment: Jinja error: get() got an unexpected keyword argument 'merge'
11:25 tuxx anyone have an idea what this could be?
11:25 AndreasLutro a bug in the formula, most likely
11:25 AndreasLutro expect many of them to be broken
11:26 tuxx terrific
11:27 Dev0n hey, is it possible to access pillar data within file templates?
11:27 Dev0n for example, inside an nginx.conf
11:27 AndreasLutro Dev0n: "pillar" is a jinja global variable which is a dict of all the pillar data
11:27 Dev0n awesome, thanks
11:28 tuxx does anyone have a link to a full functional example of saltstack provisioning files?
11:32 jaybocc2 joined #salt
11:34 ggoZ joined #salt
11:41 Dev0n hum, seems salt['pillar.get'] is recommended over pillar['key']
11:41 Dev0n is that due to the fact that it allows for a default to be set?
11:42 clintberry joined #salt
11:42 AndreasLutro Dev0n: salt['pillar.get']('nested:keys:rule', 'default') vs pillar.get('nested', {}).get('keys', {}).get('rule', 'default')
11:43 AndreasLutro if you're not getting nested keys the difference isn't big
11:43 erik_____ joined #salt
11:43 mehakkahlon joined #salt
11:43 Dev0n ahh, AndreasLutro, this next state I'm working on will have nested keys so I'll go through salt, thanks
11:44 erik_____ hi all need help with salt-cloud on ec2 with windows
11:45 erik_____ cant make the salt bootstrap working
11:48 sunkist joined #salt
11:54 golodhrim|work joined #salt
11:56 thalleralexander joined #salt
11:57 erik_____ can ssh_interface: private_ips will work on windows?
11:59 favadi joined #salt
12:14 erik_____ Error: There was a profile error: Failed to authenticate against remote windows host
12:23 av___ joined #salt
12:26 hojgaard joined #salt
12:26 hojgaard hello. How often is grains updated?
12:27 LotR it's configurable
12:27 hojgaard LotR, where?
12:29 LotR grain_refresh_every in /etc/salt/minion
12:29 hojgaard LotR, cool will try it
12:29 LotR grains_refresh_every*
12:33 jaybocc2 joined #salt
12:34 netcho joined #salt
12:37 diegows joined #salt
12:38 cpattonj joined #salt
12:44 laidback Hello, how would you setup salt to have a formula repository's master branch available in all environments without too much clutter because of multiple clones or too much symlinks?
12:44 deus_ex joined #salt
12:45 samed joined #salt
12:45 samed joined #salt
12:48 cpattonj joined #salt
12:56 hojgaard LotR, the refresh does not really works. I change the value of a grain clear the cache on the master and runt salt 'host' grains.item wanted_grain but the old value persists
12:56 sanflores joined #salt
12:57 LotR hojgaard: and you've waited for the number of minutes you specified in that setting?
12:57 sanflores Hello, anyone can help me setting utf-8 on salt for filenames?
12:58 hojgaard yes. i specified grains_refresh_revery: 1 in /etc/salt/minion and restarted the minion. changed the value, waited several minutes, but the value persists
12:59 AndreasLutro what grain are you changing? how are you changing it?
12:59 LotR then I have no idea. it turns out I was confused with the mine when I initially answer, I've never actually used that setting :)
13:00 hojgaard LotR, ok but thank you anyways. I created custom grains to fetch information from my hosts so i would like to keep using grains :)
13:02 s0undt3ch joined #salt
13:02 danielcb joined #salt
13:04 LotR hojgaard: so answer AndreasLutro's question and see if he can help you better
13:04 hojgaard AndreasLutro, I have created som custom grains that fetch different information from my hosts. Just simple information..
13:04 hojgaard AndreasLutro, if i run saltutil.sync_grains it works, but that does not seem to be the right way
13:04 AndreasLutro ok. was really just wondering if the grains were set in the minion config
13:05 hojgaard AndreasLutro, no they are not
13:05 traph joined #salt
13:05 traph joined #salt
13:05 dthom91 joined #salt
13:06 AndreasLutro I don't know what the problem could be, but have you considered making it pillar data instead of grains?
13:06 AndreasLutro alternatively, try firing a salt event when that grain changes, and use a reactor to manually sync grains when it does
13:07 hojgaard AndreasLutro, how can i make it a reactor?
13:07 traph is there a way to inherit a variable across sub-states?
13:07 AndreasLutro https://docs.saltstack.com/en/latest/topics/reactor/index.html hojgaard
13:12 AndreasLutro traph: sub-states?
13:12 traph yes - state.substate
13:12 AndreasLutro aha. no, there isn't
13:13 mattiasr joined #salt
13:17 zionsofer joined #salt
13:18 danielcb joined #salt
13:18 traph AndreasLutro, maybe with {% include ... %} statement?
13:18 traph going to try it
13:20 AndreasLutro traph: importing jinja variables is probably better
13:20 AndreasLutro {% from 'state/init.sls' import var1, var2 %}
13:20 mage_ https://dpaste.de/7zrp any idea for this error ?
13:21 breakingmatter joined #salt
13:22 otter768 joined #salt
13:24 sanflores Hi, anyone knows how to set utf-8 for state.sls? I'm having trouble comparing some files with special characters
13:25 sanflores ?
13:26 lcg joined #salt
13:27 netcho joined #salt
13:29 breakingmatter joined #salt
13:30 dthom91 joined #salt
13:32 ziro` joined #salt
13:32 mik__R joined #salt
13:34 jaybocc2 joined #salt
13:34 traph AndreasLutro, works like a charm :)
13:34 traph thank you
13:39 hoonetorg AndreasLutro: late, but thx for debian repo link
13:39 hoonetorg AndreasLutro: can u remember i asked a few days ago for environment as a variable?
13:40 honestly using masterless salt-ssh can I define host groups / roles?
13:40 hoonetorg AndreasLutro: {{env}} is what works
13:41 honestly oh, I guess I can use nodegroups?
13:41 AndreasLutro honestly: salt-ssh isn't technically masterless, the machine you're running salt-ssh from becomes the master
13:41 sanflores
13:42 AndreasLutro honestly: also I don't think nodegroups work with salt-ssh
13:42 hoonetorg AndreasLutro: see also https://docs.saltstack.com/en/latest/ref/states/vars.html
13:43 clintberry joined #salt
13:44 _mel_ joined #salt
13:44 numkem joined #salt
13:44 honestly AndreasLutro: yeah :|
13:44 AndreasLutro I just name your minions in a group-like way in roster
13:45 AndreasLutro s/your/mine/
13:45 honestly I'm glad you don't name my minions :P
13:46 AndreasLutro my, not mine, dammit
13:46 evanlivingston joined #salt
13:46 scarcry joined #salt
13:47 evanlivingston Hey all. I can't figure out who to authenticate a user with salt-api
13:48 evanlivingston As far as I can tell the user needs to be just any user on the system
13:48 Ahlee evanlivingston: do you have external_auth: defined?
13:49 evanlivingston I do, in /etc/salt/master, I'm using pam for authentication
13:49 Ahlee evanlivingston: https://gist.github.com/jalons/99dd76001730d55ad77f
13:49 Ahlee that will allow the salt user, auth'd through pam, do be able to run all commands, as well as wheel and runner commands
13:50 evanlivingston ahale_:Do I need to "useradd salt" on the machine?
13:50 mpanetta joined #salt
13:52 evanlivingston Because as far as I can tell to use salt-api a request must be made with the username and password
13:52 racooper joined #salt
13:52 Ahlee evanlivingston: just need to be able to authenticate with salt via pam
13:53 Ahlee in my case, salt lives in AD, and pam talks to AD
13:53 evanlivingston ahale_: sorry, what is AD?
13:53 Ahlee Active Directory
13:54 Ahlee if you're using local users, you'll need a local user on the salt master
13:55 _JZ_ joined #salt
13:56 evanlivingston _ahale: awesome, thanks
13:57 TooLmaN joined #salt
13:57 _ahale left #salt
13:59 rnts joined #salt
14:02 traph AndreasLutro, double checked, the variables in the templated states remain empty
14:03 AndreasLutro traph: can you show me your states files?
14:03 traph sure
14:03 AndreasLutro state files*
14:03 AndreasLutro what is up with my grammar today
14:04 subsignal joined #salt
14:07 CeBe joined #salt
14:11 traph AndreasLutro, http://pastebin.com/LyQdCq32
14:13 mapu joined #salt
14:13 traph AndreasLutro, this is the init.sls http://pastebin.com/g4TqD5EZ
14:13 Dev0n hey, is there a way to see progress for a highstate?
14:14 AndreasLutro Dev0n: no
14:14 Dev0n Ahh, snap
14:15 Dev0n ok, thanks AndreasLutro
14:15 AndreasLutro traph: you sure the salt['cp.list_master'] isn't returning empty?
14:15 traph AndreasLutro, yes
14:17 traph there is another variable, which gathers info from a mine function to populate a file, which is empty as well
14:17 rnts_ joined #salt
14:17 AndreasLutro don't know then
14:18 AndreasLutro any reason you're not just calling salt['cp.list_master'] in the webapp .sls?
14:18 bferkingstad joined #salt
14:19 dthom91 joined #salt
14:19 traph AndreasLutro, it would execute for each webapp
14:19 traph I want to avoid that
14:19 RandyT erik_____: let me know when you are around, I can probably help with those issues.
14:19 rnts_ joined #salt
14:19 RandyT erik_____: you might also search in salt github. At least one of those are issues I have reported or chattered about.
14:19 AndreasLutro traph: I think it caches stuff, if you're worried about performance
14:21 traph not just performance, but it looks ugly having redundant code across each of the states
14:22 AndreasLutro you could create a macro if that's your concern
14:22 AndreasLutro mostly I'm interested in knowing if it starts working if you copy the salt['cp.list_master'] line instead of importing it
14:24 traph will try
14:25 tuxx hey guys.. i have a list of packages that i want to install
14:25 tuxx what is the right file hierachy for that? should i make a folder for each debian packagewith pkg.installed: name?
14:27 OliverMT joined #salt
14:28 rnts_ joined #salt
14:30 rnts_ joined #salt
14:31 evanlivingston Okay, I still am unable to get local users authenticated with salt. I have external_auth defined but whenever I run 'salt -a pam '*' test.ping' I get "Failed to authenticate! This is most likely because this user is not permitted to execute commands, but there is a small possibility that a disk error occurred (check disk/inode usage)."
14:31 wych joined #salt
14:31 dthom91 joined #salt
14:32 evidence joined #salt
14:32 traph AndreasLutro, is there a way to see the output of a template render?
14:33 AndreasLutro traph: not really - state.show_sls is the closest you'll get
14:34 AndreasLutro tuxx: there is no "right" hierarchy, do whatever suits you best
14:34 quix joined #salt
14:35 jaybocc2 joined #salt
14:35 akoumjian joined #salt
14:35 copelco joined #salt
14:35 lorengordon left #salt
14:36 lorengordon joined #salt
14:40 aurynn joined #salt
14:40 jor joined #salt
14:44 impi joined #salt
14:44 traph AndreasLutro, my bad, it works. my test environment doesn't have multiple hosts set for the same role. what doesn't work is the blockreplace, but I can figure that out
14:45 shiriru joined #salt
14:45 mik__R joined #salt
14:46 larsfronius joined #salt
14:48 ujjain joined #salt
14:48 ujjain joined #salt
14:52 bhosmer joined #salt
14:53 shiriru joined #salt
14:55 zmalone joined #salt
14:55 diegows joined #salt
14:57 GrueMaster joined #salt
14:59 jdubski joined #salt
15:02 rocket joined #salt
15:02 RandyT could someone give me a hint as to what proper syntax might be to include a kms_keyid: for access to s3://sourcefile?
15:02 RandyT Here is what I am trying: https://gist.github.com/rterbush/17ef0f07e4ee15d5c52a
15:03 babilen RandyT: What is the outcome of your test?
15:05 RandyT babilen: complaints about file format... let me see if I can find something in context to share.
15:06 RandyT looking through the code, seems kms_keyid is supported as a parameter, but not finding how to add it
15:07 mik__R_ joined #salt
15:08 hasues joined #salt
15:08 hasues left #salt
15:08 RandyT babilen: I've updated that gist to include error/warning message.
15:08 babilen RandyT: Which version of salt do you use?
15:09 Hetman joined #salt
15:09 RandyT using 2015.8.1
15:10 babilen And I can't find kms_keyid in the context of archive.extracted at all. I was under the impression that you setup s3 in the master config or pillar as detailed in https://docs.saltstack.com/en/latest/ref/file_server/all/salt.fileserver.s3fs.html
15:11 Hetman Hello quick one I'm lost: I've got RPM file with mysql-community repository , should I install this using pkg.installed? (i'm tryig pkg.installed('mysql-57-community', source='salt_path_to_my_rpm) ... its throwing me that no rpm named mysql... in my rpm . Howto do something like localinstall. why i need to produce name ive just want to install rpm like yum localinstall or rpm -ivh ...
15:11 RandyT no, not using it as a pillar or file_root.
15:11 RandyT I have been able to use s3:// directly in the source url, and there are changes that support that.
15:12 RandyT Need to pass key to decrypt that resource in this case.
15:12 babilen RandyT: Support for kms was added in 952f1d8052b853b6a96adb09b97a3ef789f51c39 which I only find in develop
15:13 babilen Why do you think that it exists in 2015.8.1 ? Are you sure that the source you referred to earlier is indeed on the 2015.8 branch?
15:14 AlberTUX joined #salt
15:14 babilen Please provide a little more information as to why you think that this should work as that makes it easier to track down why it doesn't
15:14 andrew_v joined #salt
15:14 RandyT ok, missed the fact that this is in develop branch...
15:14 babilen aye
15:15 AlberTUX hi there, i'm working on a POC to migrate from and old version of puppet  to saltstack and there are some things that i'm stuck with
15:15 RandyT was merged quite a long time ago I see...
15:15 babilen https://github.com/saltstack/salt/pull/25767
15:16 babilen Let me guess who just commented ;)
15:16 babilen And I don't like feature bloat in point/maintenance releases
15:16 RandyT yes, just added my comment. This was merged before 2015.8, so not sure how it was not included in a release.
15:16 babilen But then this is saltstack ..
15:16 AndreasLutro RandyT: the 2015.8 feature freeze took place long before the actual release
15:17 RandyT would not personally consider this a huge feature. Fundamental part of working with S3
15:17 RandyT ok, living on the bleeding edge... this is a must have in order to work in AWS IMO
15:17 AlberTUX so how would i include other states in saltstack based on grains?
15:18 AndreasLutro AlberTUX: define them in top.sls with a grain matcher?
15:18 s0undt3ch joined #salt
15:19 DammitJim joined #salt
15:20 babilen AlberTUX: https://docs.saltstack.com/en/latest/topics/targeting/compound.html or https://docs.saltstack.com/en/latest/topics/targeting/grains.html
15:20 babilen Which grain are you targeting?
15:20 honestly ugh. why is salt-ssh so castrated.
15:20 AndreasLutro honestly: usually good reasons ;)
15:21 babilen honestly: What are you missing?
15:21 AlberTUX a few, osfamily, environment
15:22 AlberTUX what i have in puppet is a general module and then it includes submodules based on facts
15:22 AlberTUX but i can't have multiple include: lines in a single salt state
15:22 honestly babilen: advanced minion targetting
15:22 AndreasLutro sure you can
15:22 AndreasLutro though it's not really recommended
15:23 Heartsbane joined #salt
15:23 otter768 joined #salt
15:23 babilen AlberTUX: You might also consider to target states from top.sls based on those grains, rather then "including" them from a common state that contains all the targeting logic
15:23 babilen *than
15:26 bhosmer joined #salt
15:26 Hetman any idea howto do that? Ive got RPM just want to install it using pkg.installed ... currently im doing it by cmd_run rpm -ivh <my rpm>
15:28 keltim_ joined #salt
15:28 AlberTUX thanks, i think it makes sense. i'll just have to unlearn puppet and start learning the saltstack way i guess
15:28 nofxrok joined #salt
15:29 AlberTUX are the states in the topfile applied sequentially?
15:30 Hetman left #salt
15:30 Hetman joined #salt
15:31 pdayton joined #salt
15:32 stupidnic AlberTUX: typically yes, however things like requires and ordering can modify that
15:33 babilen AlberTUX: They are, but you would typically model dependencies explicitly with https://docs.saltstack.com/en/latest/ref/states/requisites.html
15:33 babilen (where necessary)
15:34 honestly Of O
15:35 honestly If I'm using salt-ssh can I inject functions into jinja?
15:35 jaybocc2 joined #salt
15:36 AlberTUX if i start moving the state includes to the topfile, it will start to get a little bit messy, if 'I@prop:true' then this state, else the other and so on… is there any other way to do that?
15:38 int joined #salt
15:38 honestly guess I should just use the python renderer...
15:39 dthom91 joined #salt
15:41 telegraph joined #salt
15:42 telegraph Anyone encountered ERROR: Group 'GNOME Desktop' not found when using the new 2015.8.0 "group_install"?
15:44 zionsofer joined #salt
15:45 clintberry joined #salt
15:45 dthom91 joined #salt
15:49 zzzirk joined #salt
15:49 k00l joined #salt
15:52 sunkist joined #salt
15:54 penguin_dan joined #salt
15:54 dthom91 joined #salt
15:55 telegraph https://gist.github.com/Enquier/b795421004da42978c8a I'm testing on CentOS 7 so it should work (in one case it's already installed)
15:55 dfinn joined #salt
15:56 zmalone joined #salt
16:02 carmony joined #salt
16:02 dthom91 joined #salt
16:08 baweaver joined #salt
16:14 sdm24 joined #salt
16:15 catpig joined #salt
16:17 raqua joined #salt
16:18 colegatron joined #salt
16:19 raqua Hi. When I do run "normal" salt in test mode, I can see all the changes to files that will be done, but when I run orchestration in test mode, I only get this: https://gist.github.com/raqua/e0523d5980f65959c7fd
16:19 baweaver joined #salt
16:20 raqua When I actually run the orchestration then, I do get proper diffs and logs as expected. I would like to have that output also in test phase, is that possible?
16:21 pdayton joined #salt
16:22 dthom91 joined #salt
16:22 zsoftich1 joined #salt
16:24 bhosmer joined #salt
16:27 Brew joined #salt
16:28 djstorm joined #salt
16:30 zzzirk joined #salt
16:33 jaybocc2 joined #salt
16:35 raqua anyone please?
16:36 jeffpatton1971 joined #salt
16:37 jeffpatton1971 i'm attempting to set a multi-valued grain called role, such that servers can be either a slave, or a service they are running. I think for the ones where it "worked" I had set in the past and forgot that I did it, and for these new servers (elasticsearch) the code I thought would work isn't...see gist https://gist.github.com/jeffpatton1971/8bf120fba2b33ef10eac
16:38 jeffpatton1971 line 66 is where I think the issue is https://gist.github.com/jeffpatton1971/8bf120fba2b33ef10eac#file-init-sls-L66
16:38 TOoSmOotH joined #salt
16:42 telegraph If anyone was looking at my previous post
16:42 ageorgop joined #salt
16:43 telegraph digging into group_install took me to repoquery
16:43 telegraph testing in repoquery showed me that it only recognizes "GNOME"
16:43 telegraph not "GNOME Desktop"
16:44 dthom91 joined #salt
16:45 vfong joined #salt
16:45 MikeyYeahYeah joined #salt
16:47 jalbretsen joined #salt
16:48 colegatron I am trying to install a postgis extension on a postgres using postgres_extension.present but it fails with "Failed to install extension postgis"
16:49 colegatron I tried with a -l debug but no extra info... The extension is there, if I do a 'create extension postgis' from the psql it works
16:49 Fiber^ joined #salt
16:49 colegatron does anyone ever installed a postgresql extension or can give some help?
16:50 jasonrm joined #salt
16:52 malinoff joined #salt
16:57 dthom91 joined #salt
16:59 ziro` joined #salt
17:00 onovy joined #salt
17:03 writtenoff joined #salt
17:06 wendall911 joined #salt
17:06 conan_the_destro joined #salt
17:07 ekristen joined #salt
17:08 KennethWilke joined #salt
17:09 troyready joined #salt
17:11 int i wonder if "salt 'node' state.sls network.config test=Test" is right way to preview changes? that state uses network.system module to set hostname and it seems it ignore test=Test and actually changes hostname
17:12 armguy test=True
17:12 markm joined #salt
17:15 teryx510 Hey guys, installing salt-minion 2015.8.1 on Windows and setting /start-service=0 is still starting the service. Not really sure to look for/create the issue on GitHub as it's the installer.
17:16 teryx510 Can someone point me in the right direction?
17:16 PeterO joined #salt
17:17 Bryson joined #salt
17:22 mik__R joined #salt
17:22 int armguy: oops, sorry, i miss typed, just tried it with test=True and it still changes /etc/hostname
17:23 tiadobatima joined #salt
17:23 armguy int not sure then looks just like how I test a single state
17:24 otter768 joined #salt
17:26 int armguy: thanks, i wonder why test=True doesn't work then
17:27 armguy << salt n00b so I could be missing something in your example
17:27 impi joined #salt
17:28 quix_ joined #salt
17:31 tiadobatima joined #salt
17:31 tiadobatima1 joined #salt
17:32 tiadobatima left #salt
17:33 kawa2014 joined #salt
17:33 markm_ joined #salt
17:34 lorengordon teryx510: problems with the windows installer are still typically handled as issues on GitHub under saltstack/salt
17:36 teryx510 lorengordon: thanks!
17:41 joyrida08 joined #salt
17:42 wblair joined #salt
17:43 joyrida08 joined #salt
17:46 baweaver joined #salt
17:47 bhosmer joined #salt
17:51 perfectsine joined #salt
17:56 perfectsine joined #salt
17:57 quasiben joined #salt
17:58 thalleralexander joined #salt
18:01 timoguin joined #salt
18:01 racooper joined #salt
18:01 wblair left #salt
18:02 CheKoLyN joined #salt
18:02 fivehole joined #salt
18:04 dfinn joined #salt
18:12 dRiN joined #salt
18:12 bhosmer joined #salt
18:15 mapu joined #salt
18:22 jaybocc2 joined #salt
18:22 stomith joined #salt
18:23 bhosmer joined #salt
18:25 chiui joined #salt
18:27 tex joined #salt
18:28 fivehole Has anybody seen an issue with executing a self extracting archive using cmd.wait?  I can see the files expanded but highstate never returns
18:29 hal58th_ fivehole, do you have the same problem with cmd.run?
18:29 rickflare joined #salt
18:30 fivehole I’ll let you know in a sec.
18:30 hal58th_ fivehole: have you tried running highstate in trace?
18:30 dthom91 joined #salt
18:31 fivehole Looks like the same issue with cmd.run/
18:31 fivehole I ran salt-call -l all state.highstate
18:32 fivehole also set the output_loglevel: all
18:32 fivehole but I don’t see any output from the exe
18:33 cberndt joined #salt
18:35 ajw0100 joined #salt
18:36 hal58th_ Can you print out what it is trying to do? Is it showing the command?
18:38 fivehole yeah, one sec.
18:39 baweaver joined #salt
18:43 fivehole https://gist.github.com/anonymous/5018f01f5c8fc804da1c
18:43 mpanetta Someone watches ugly americans...
18:43 dyasny joined #salt
18:44 hal58th_ so my guess is that your exe file doesnt have a good return or whatever. You probably want this option..
18:45 fivehole [INFO    ] Executing command 'C:\\inetpub\\packages/code_deploy-1.0.1.exe' in directory 'C:\\inetpub/web'
18:45 fivehole That is from the log
18:46 morissette joined #salt
18:47 hal58th_ hold on, can't find the option I am thinking of
18:47 fivehole is it stateful: True?
18:48 hackel joined #salt
18:49 ageorgop joined #salt
18:49 hackel How can I create a user with no (not empty!) password?  I only want them to be able to login with an SSH key, but I want them to be able to set a password once they've logged in to use for sudo.  This is the equivalent of "passwd -d user"
18:50 ziro` joined #salt
18:50 CryptoMer joined #salt
18:51 RandyT anyone here have any experience installing zip archives on windows minions?
18:52 hal58th_ hackel: I think the password is "!" no quotes
18:53 hackel hal58th_: Yeah, that's what it's doing now, bit it's causing users to be prompted for a "current password" when trying to set an initial password.
18:54 hal58th_ fivehole, I can't find the option I am thinking of. But I believe your problem is that the code-deploy.exe file is not cleanly exiting, so highstate will just wait forever
18:54 hal58th_ Is the old password just blank?
18:56 fivehole RandyT: I have a pretty bad one, see above.
18:57 hackel hal58th_: No, haven't found anything that works.  passwd -d empties the passwd field in /etc/shadow, but if I try 'password: ""' in salt, it gets the '!' hash.
18:58 mpanetta hackel: the ! isn't a hash, it means that the password is in /etc/shadow
18:58 mpanetta IIRC
18:59 hackel mpanetta: I realize it's not actually a hash, but it is what appears in /etc/shadow.
18:59 mpanetta Ah
18:59 mpanetta Actually if that is in /etc/shadow doesn't that mean that the password is disabled?
19:00 mpanetta Which I guess isn't quite what you want
19:00 bhosmer joined #salt
19:00 hackel Yes, that is my problem!
19:01 mpanetta Do you want them to have to set it, or it just be an option to set it?
19:01 mpanetta If you want them to have to set it, use -e
19:02 mpanetta Not sure you can have it so that they can optionally set it...
19:02 hackel I'm fine with having to set it.  Was just looking at trying the expire option.
19:02 zemane joined #salt
19:03 larsfronius joined #salt
19:03 tiadobatima1 left #salt
19:05 RandyT fivehole: have you run this with -l debug?
19:06 fivehole I ran it with -l all
19:06 fivehole it still hits that last INFO statement and then stops.  There is not other logs produced.
19:06 RandyT fivehole: and what did that show? error above is just info level
19:07 RandyT running that on your master I assume?
19:07 fivehole salt-call
19:07 fivehole on the minion
19:08 RandyT I had trouble running minion as service on the windows machine with any flags.
19:08 RandyT might try running it instead in a shell
19:08 RandyT you are not getting debug level tracing
19:09 fivehole I see trace logging for other parts of the state file just nothing for the cmd.wait part.
19:09 RandyT your source: doesn't make much sense to me either... you hosting that on local http server?
19:10 RandyT you're probably not getting there
19:11 fivehole Oh no, the names and locations have been changed to protect the incocent.
19:12 RandyT also, not sure if it is required, but when referencing windows filesystem, I have gotten in the habit of single quoting and using backslash.
19:12 fivehole The file is being pulled correctly becuase I can see it in the packages directory.  I can also run the command in that is in the INFO line of the log in a seperate CMD window and it extracts properly.
19:13 RandyT may not be necessary, but that is taken from other examples I am seeing
19:13 fivehole hmm. let me try that.
19:14 baweaver joined #salt
19:17 forrest joined #salt
19:17 forrest Is anyone else using the new dockerng states?
19:17 DammitJim joined #salt
19:18 zemane joined #salt
19:18 forrest If so and you can add to this issue: https://github.com/saltstack/salt/issues/28728 I'd appreciate it
19:18 Guest55101 joined #salt
19:23 fivehole RandyT: Looks like there was a hidden prompt.  I slapped a -y to the end of the command and it completed.  When you run the cmd in a normal cmd window there is not prompt.
19:24 RandyT fivehole: congrats
19:24 RandyT fivehole: any experience extracting other archive formats?
19:24 RandyT on windows?
19:25 RandyT I'm currently battling the challenge of no unzip executable on the windows minion...
19:25 RandyT trying to minimize the amount of crap I have to install to support these things.
19:25 RandyT https://docs.saltstack.com/en/latest/ref/states/all/salt.states.archive.html
19:25 otter768 joined #salt
19:26 zsoftich1 joined #salt
19:26 RandyT doc is not clear to me if python will support other common *nix formats without the specific tools installed on the windows machine
19:26 fivehole I know at one point to get around the issue we were just looking at I converted the .exe to a zip and attempted to use the archive state but if I remember that didn’t work correctly either so I went back to the exe version.
19:29 fedgoat joined #salt
19:31 RandyT Could someone help me interpret the doc referenced above for salt.states.archive and specifically the tar_options key?
19:31 dthom91 joined #salt
19:32 enigma99a joined #salt
19:32 RandyT My goal is to have use platform independent archive.
19:32 GreatSnoopy joined #salt
19:33 RandyT From what I read with tar_options, if I set archive_format: tar, then salt will look for local tar executable... not what I want.
19:34 RandyT If I set archive_format to zip or rar, and don't set tar_options (why would I?) then python uses tarfile module???
19:34 enigma99a Hey all, got a question. I am using git with my sls files, and haven't had any issues with it (commits, etc) but today I updated my top.sls and it appears the nodes are not aware of it. Ideas?
19:35 enigma99a do I need to clear the cache when updating a top.sls?
19:36 teryx5101 joined #salt
19:37 enigma99a I'm using gitpy2
19:41 fivehole RandyT: I started to write I couldn’t remember what was wrong, but your above comments triggered some memmories.  I think I issues with tar_options not working with zip.  I started to just convert my zip to a tar but there was issues with that also.
19:42 RandyT fivehole: I'm in the process of trying to use bzip2 format tar file swithout the archive_format: tar to see if salt figures it out on the fly...
19:42 RandyT that is the only interpretation I can give that doc...
19:45 mpanetta Has anyone used the raid/mdadm module from the command line?  I am running 2015.8 and it keeps saying that the module is not available...
19:46 RandyT k
19:46 fivehole RandyT: That would seem to be correct based on the doc.  Let me know how it goes.
19:48 lorengordon RandyT: I've used powershell to extract zip archives on Windows
19:48 lexter joined #salt
19:49 RandyT lorengordon: had not considered that approach. I would guest that requires cmd.run with some shell parameters?
19:50 lorengordon RandyT: yes, gimme a min and i'll throw together a PoC
19:53 enigma99a Yeah for my git top.sls to work, I had to clear the cache and restart the master, weird. Oh well maybe that's just how it works
19:53 bferkingstad_ joined #salt
19:54 opensource_ninja joined #salt
19:54 amcorreia joined #salt
19:55 apergos joined #salt
19:56 quix joined #salt
19:57 tiadobatima joined #salt
19:57 apergos if we have two salt masters (primary and secondary) and people might do a refresh of pillars from either one of them to the minions, what might go wrong from that? anyone with experience?
19:59 lorengordon RandyT: I've used variations on this to extract zip archives on Windows: https://gist.github.com/lorengordon/88e0fc8ee8f9fe312b2f
19:59 RandyT fivehole: this is what I get when trying to run and let python do the extraction.
19:59 RandyT Comment: Missing parameter archive_format for state archive.extracted
20:00 RandyT lorengordon: awesome. Great stuff there for a newby. Will give it a try. Thanks for sharing.
20:01 RandyT I would throw out suggestion of possible #salt-windows irc.... seems there are only a handful of us that have this chore...
20:02 fivehole did you have archive_format: zip and remove tar_options:?
20:02 lorengordon RandyT: the key line handling the actual extraction is: https://gist.github.com/lorengordon/88e0fc8ee8f9fe312b2f#file-gistfile1-txt-L31
20:03 lorengordon RandyT: everything else is prep
20:04 PeterO joined #salt
20:04 lorengordon i like the idea of a #salt-windows channel
20:04 RandyT interesting.. I've had more than enough powershell lately, but if this gets the job done, I am in.
20:05 RandyT lorengordon: thanks again for sharing
20:12 mpanetta Er, so I am trying to use the mount.set_fstab module to add a LABEL mount to fstab... I am getting this when I try to do that:     TypeError encountered executing mount.set_fstab: set_fstab() takes at least 3 arguments (3 given). See debug log for more info.
20:12 mpanetta Kinda a confusing error message...
20:13 mehakkahlon joined #salt
20:13 mpanetta Anyone here got the mount module to add a mount that uses a LABEL or UUID and not a device name?
20:17 mpanetta Nobody? heh
20:17 dthom91 joined #salt
20:18 baweaver joined #salt
20:19 whytewolf mpanetta: have you tried name='/mnt/foo' device='UUID=theuuid' fstype='ext4'
20:19 mpanetta Not tried it with explicit arg names no, Will do that now :)
20:20 mpanetta whytewolf: That seems to have worked :)
20:21 whytewolf yeah the = for UUID throws it off so that it thinks that it has an arg for UUID. and is missing one of the other args
20:21 mpanetta whytewolf: Thanks!  Wrked perfect
20:21 Pixionus joined #salt
20:21 DammitJim joined #salt
20:22 mpanetta whytewolf: Ah ok, that makes sense
20:23 RandyT basepi: It has been suggested and seconded to create a #salt-windows channel for those of us dealing with this beast. Wanted to make sure it hit your radar for consideration.
20:40 |Fiber^| joined #salt
20:40 adelcast I am debugging a problem where the grains cache on my master is resetting the network settings of one of my minions
20:41 adelcast I have only seen this on a minion that is a VM, but haven't been able to pinpoint the problem...I can see that when the salt/auth event runs, the cache is already wrong
20:41 adelcast any pointers would be greatly appreciated as I am not sure where to look next...
20:42 adelcast (I am using 2015.8.1)
20:44 AlberTUX1 joined #salt
20:47 ziro` joined #salt
20:48 RandyT for any windows users, anyone here have experience using the iis state and module in salt-contrib to configure iis server?
20:51 cro joined #salt
20:56 brianvdawson joined #salt
20:56 quasiben joined #salt
20:57 Vynce joined #salt
20:59 Vynce I feel liek i still don't grok pillars, and all the documentation is complexly worded. what is the notional scope of a pillar? does it make sense to say a minion has a pillar value, the way it has a grain? or is the pillar system more like a DB?
20:59 baweaver joined #salt
21:01 clintberry joined #salt
21:02 bhosmer joined #salt
21:02 Vynce i think it's per minion, but i don't see any clear reference to a pillar equivalent of the /etc/salt/grains file
21:03 Vynce pillar.ext says it will "Generate the pillar and apply an explicit external pillar" but doesn't explain what that means.
21:03 whytewolf Vynce: pillar is setup on the master not the minion. it is configed more like states. and has a top file. however it really is just a data structure like grains.
21:05 whytewolf pillar.ext is external pillars which are setup on the master to use external programs for pillar data
21:05 whytewolf you should learn pillars before really slipping into external pillars
21:05 Vynce i feel like that's the clearest explanation i've gotten yet, adn i still don't really understand what it means
21:05 sunkist joined #salt
21:06 breakingmatter joined #salt
21:06 whytewolf Vynce: have you read this? https://docs.saltstack.com/en/latest/topics/pillar/
21:07 babilen Vynce: In the end pillars are simply Python dictionaries that are being targeted to specific minions. That allows you to use them for storing sensitive (and non-sensitive) data in a mapping like data structure that is specific to a minion.
21:08 rodr1c joined #salt
21:08 __Vano__ joined #salt
21:09 Vynce and is there a programmatic way to set pillar values?
21:09 RandyT lorengordon: giving your state file a try for extracting zip. On first run, getting a complaint about the following: failed: mapping values are not allowed here; line 6
21:09 Vynce i see there is no pillar.setval (i thought pillar.ext meant extend but apparently not)
21:10 RandyT this is first attempt to reference myarchive.name... just wondering if there is some other dependency in the setup before I go much deeper here.
21:11 Vynce like, i have a command line script that i want to add pillar values to a minion (or group of minions) — should i jsut yaml.in(/srv/pillar/foo) / modify  / yaml.out(/srv/pillar/foo) ?
21:11 cberndt joined #salt
21:12 clintber_ joined #salt
21:12 lorengordon RandyT: probably need to escape the backslashes, change them all to '\\'
21:14 Vynce I mean, i see https://docs.saltstack.com/en/latest/topics/pillar/#set-pillar-data-at-the-command-line but it's unclear whether that "keeps" the pillars past the highstate, or just during that highstateing
21:14 babilen Vynce: https://docs.saltstack.com/en/latest/ref/wheel/all/salt.wheel.pillar_roots.html#salt.wheel.pillar_roots.write - but then it might be much easier to write to one of the many external pillars (cf. https://docs.saltstack.com/en/latest/ref/pillar/all/) or simply generate suitable YAML files if you don't have to do this often
21:14 babilen Vynce: That doesn't "keep" the pillar
21:14 RandyT lorengordon: that appears to be the issue... so much for meaning of single quote. :-)
21:14 Rumbles joined #salt
21:16 Vynce ("wheel"? so confusing.)
21:16 lorengordon I updated the gist to escape the backslashes
21:19 Vynce every time i think i understand salt well enough to work with it, i find myself losing two days to reading the docs and wishing i had a salt for dummies simplified explainer manual.
21:19 ziro` joined #salt
21:20 lorengordon escaping the backslashes is a jinja-rendering oddity...defining the dictionary in yaml is cleaner
21:22 Vynce unfortunately, salt.wheel.pillar_roots.write has essentially no documentation, and no examples. i guess i should stick to reading and writing the yaml files manually, unless that sounds like a terrible idea to someone.
21:22 lorengordon RandyT: take a look at the gist, now using load_yaml: https://gist.github.com/lorengordon/88e0fc8ee8f9fe312b2f
21:23 babilen Vynce: What are you actually trying to achieve?
21:23 ekleog joined #salt
21:23 breakingmatter joined #salt
21:24 whytewolf Vynce: pillar data is typically done manually. as it is data meant to be pushed to the minion.
21:24 Vynce in what level of detail?
21:24 babilen And pillar_roots.write just lets you write a file to the pillar roots in the given environment with content specified by "data" (which would be yaml for example)
21:24 babilen Vynce: "enough" ;)
21:24 cro joined #salt
21:25 babilen "data" is essentially a string and the file content you want to write
21:25 RandyT lorengordon: thanks! I've had a run with it and it seems to work as advertise. I have three archives to put in same destination, so will need to tweak it so it does not clean the destination.
21:26 babilen But as I said: I'd rather generate suitable files if that's all you have to do or use one of the many external pillars and write to them
21:26 otter768 joined #salt
21:26 babilen (such as a database)
21:26 Vynce OK, so i have some minions that are running node express apps in containers. some of the config is not in the image, but needs to be pushed to the minion that gets assigned that container. so it seems like this is a candidate for a pillar value thtat says, for each minion, basically which containers it has, so the config that container needs can be pushed.
21:26 DammitJim can one have 2 states that manage the same file?
21:26 DammitJim I think I've done it before... I don't know why I am doubting myself...
21:26 Eugene file.managed, I don't think so
21:26 Eugene file.append or similar, I want to say yes but I've never done it
21:27 DammitJim same file, but different IDs
21:27 RandyT lorengordon: thought I could use copies of the file and just add the differences in the set at top of file, but it does not like reuse of states. Can parameterize those I guess...
21:27 racooper joined #salt
21:27 babilen Vynce: Does that data change all the time or is this a one-time thing? Do you have that data in another datasource already?
21:27 lorengordon RandyT: yeah, you'll need to make sure the state names are unique to do that
21:28 Vynce well, it changes every time i add a new container to a minion. how often will that be? dunno. why?
21:28 babilen (brb, telephone)
21:30 lorengordon RandyT: you could maybe make the 'clean' bit dependent on changes in the file.managed state. that way changes to the archive will extract into a clean directory.
21:31 Vynce also, what the config is might change independent of the lis tof containers.  so, basically, i'm thinking like minionA containers = [client1, client2, internal] minionB containers=[client3,client4] …state.highstate puts config for 1,2 on A and 3,4 on B.  then the config for 4 changes, s.h jsut updates B.  then i run a redundant 3 on A (via my script, which also calls s.h) and s.h. updates A to have the config for 3 on A.
21:31 mpanetta Does anyone know what file the code is in that fills out the 'SSDs' grain?
21:32 whytewolf mpanetta: https://github.com/saltstack/salt/blob/develop/salt/grains/disks.py
21:32 whytewolf I think
21:32 mpanetta I found ssds.py
21:33 mpanetta just did a grep for SSD in grains/ heh
21:33 mpanetta whytewolf: Weird, disks.py does not exist in 2015.5.3
21:34 Eureka703 Hi All. I am trying to user glusterfs.peered to setup my glusterfs..peers.. But when its ran im getting a keyerror and the minion throws an exception. https://gist.github.com/fb2460e9bfcfe0b307e1.git
21:34 whytewolf Vynce: humm. complex setup
21:34 Eureka703 Any thoughts?
21:34 whytewolf mpanetta: looks like ssds.py became disks.py
21:34 mpanetta whytewolf: Ah cool
21:35 whytewolf Eureka703: that link isn't opening for me
21:35 Eureka703 @whytewold. Oops. Ill see if i can fix it..
21:36 whytewolf Eureka703: this one? https://gist.github.com/anonymous/fb2460e9bfcfe0b307e1
21:36 Vynce whytewolf: babilen: maybe the containers list can just be a grain. the docs say grains are for "static" information, but i don't know why or how static that needs to be.
21:36 whytewolf I dropped the .git off it
21:36 lorengordon RandyT: i updated the gist so the ExtractDirectory state executes 'onchanges' in the file.managed state
21:37 whytewolf Vynce: actually it is kind of subjective. grains and pillars both are cached.
21:37 whytewolf Eureka703: 2015.5 by chance?
21:37 Eureka703 Try this one? https://gist.github.com/anonymous/5884ab1d7b8f6ef80ca8
21:37 Eureka703 Yeah. im 2015.5.5
21:38 solidsnack joined #salt
21:39 RandyT lorengordon: very cool. thanks for the tutelage.
21:40 whytewolf Eureka703: lets see. first looks like glusterfs state module only loads if glusterfs.list_volumes is in __salt__
21:40 whytewolf Eureka703: KeyError typically means that the module isn't loaded
21:41 solidsnack joined #salt
21:41 chiui joined #salt
21:41 Eureka703 Ah, interesting. Im going off the doc here: https://docs.saltstack.com/en/2015.5/ref/states/all/salt.states.glusterfs.html I suppose I could try getting everything updated to 2015.8.1
21:41 whytewolf humm. looks like the glusterfs exacution module is loadable if 'gluster' is in the path
21:42 whytewolf Eureka703: that would only change the error rom KeyError to telling you the module isn't found
21:42 Eureka703 The odd thing is that this *was* working about 3 weeks ago. I just ran a re-deploy of my testing environment and it decided to break.
21:43 whytewolf are you installing gluster in the same state the is doing the peered?
21:43 Eureka703 Ewww, I think I see whats going on. Its getting my install state out of order.
21:44 Eureka703 I just checked the server and it has not installed glusterfs even though the way it was setup was working before.
21:44 Eureka703 Ill change around my requirements and see if that fixes it. Thank you whytewolf =)
21:44 whytewolf that would defintly cause the error you are seeing then
21:48 DammitJim if I want to comment out a line on a file, do I need to specify the whole line or can I do something like this for the regex: ^JAVA_OPTS=*
21:49 lorengordon DammitJim: looks like file.comment supports a `regex` parameter for that purpose, https://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.comment
21:50 lorengordon maybe just change the '*' to '.*'. e.g.: `regex: ^JAVA_OPTS=.*`
21:51 bastion1704 joined #salt
21:51 Eureka703 @whytewolf I found the problem. Looks like I was missing another failure. The package list changed for glusterfs on my distribution so it was failing to install properly. Thanks again for the help!
21:52 whytewolf Eureka703: no problem
21:52 solidsna_ joined #salt
21:52 babilen Vynce: Sure, that would be an option and is certainly easier to write than pillars
21:53 babilen Vynce: And grains are for "reasonably" static information (they can change, but shouldn't every second, ...)
21:53 ruph joined #salt
21:54 mapu good aftrnoon- I am using salt-cloud to provison instances in a VPC, each time an instance is created it creates an EIP. My reading makes me thing that an EIP shouldn’t be created. My specifics here: http://pastie.org/private/bcg9sj9g7gmlvqqhorpj5q
21:55 Vynce babilen: and does grans.setval, or anything else, actually write it to the /etc/salt/grains file?
21:55 ruph left #salt
21:55 DammitJim silly question, how do I check if a pillar has been defined?
21:55 zmalone joined #salt
21:56 DammitJim because if the pillar hasn't been defined, I don't want to set a line in a config file
21:56 babilen Vynce: It does indeed .. Where do you get this information from?
21:56 DammitJim meaning a pillar item
21:56 lorengordon DammitJim: use jinja. {% if salt['pillar.get']('mypillar','') %}
21:57 babilen DammitJim: "... is defined" (cf. http://jinja.pocoo.org/docs/dev/templates/#defined )
21:57 DammitJim oh, just like that
21:57 DammitJim I thought that would put in a default
21:57 DammitJim thanks!
21:57 Vynce babilen: mmm… which information?  the fact that minionA is now supposed to run container3?
21:57 babilen exactly
21:57 babilen And what actually *is* container3 ?
21:58 lorengordon in my example, the default if the pillar is not defined is `''`, which resolves to `False` in the if statement
21:58 Vynce i decide it.  then i run my script.  (uh… it's a docker container?)
21:58 babilen Vynce: Are you using https://docs.saltstack.com/en/latest/ref/states/all/salt.states.dockerio.html to manage them?
21:58 Vynce nope.
21:59 babilen And "I decide it" -- is that decision written to anything or is it just in your brain?
21:59 Vynce well, it starts in my brain, then i runt he script to write it to places.
22:00 Vynce i'm not rtrying to be obtuse, i jsut don't really undestand what you're getting at
22:00 DammitJim is anyone from salt coming to fossetcon in orlando?
22:00 Vynce dockerio / dockerng — possibly i will do that in the future, but i did not know of it (and maybe it didn't exist? certainly we weren't using salt, actually) when i started this project.
22:01 babilen I am trying to figure out if there is a better place to store that information or, rather, if you had already stored it *somewhere* (database, file, ...) that could be made available to salt so you don't need to duplicate that information again. (the idea is to work on the original data source)
22:01 Vynce i am now in the process of creating the script that will provide those original data sources.
22:01 babilen Salt obviously doesn't come with a Vynce-brain interface ;)
22:01 Vynce nope.  nor even a good vynce-brain translation layer hack
22:02 Vynce (and the developers of Vynce-brain have largely retired. it was an unpaid gig, and they moved on to other concerns.)
22:02 babilen Vynce: https://docs.saltstack.com/en/latest/ref/pillar/all/ <- all these are suitable sources and it sounds as if writing a YAML file and serving that as a pillar should be straightforward.
22:03 giantlock joined #salt
22:03 jaybocc2 joined #salt
22:03 babilen I don't necessarily see a point to use grains unless you have to write it from *within* salt itself (why store that information in a distributed fashion?)
22:03 Vynce uh… i don't understand
22:04 babilen But I basically wanted to make sure that your script isn't simply reading the mapping from a database as salt could interface to that directly
22:04 Vynce nope. not yet, anyway.
22:04 baweaver joined #salt
22:06 MadHatter42 joined #salt
22:06 Vynce a grain value can be a list of dicts, right?
22:08 babilen Yes, but I'd consider that a little uncommon
22:08 babilen I still think that you should generate pillar files from withing your script (what input is that working on?)
22:09 babilen I mean you could even write a script that outputs YAML or JSON or ... and use https://docs.saltstack.com/en/latest/ref/pillar/all/salt.pillar.cmd_json.html#module-salt.pillar.cmd_json
22:10 babilen That way you could feed the original input to both of your scripts and salt would use it right away
22:12 Ked joined #salt
22:12 Tyrm joined #salt
22:12 fyb3r joined #salt
22:13 fyb3r is it possible to create a reactor that uses the python renderer, and if so whats the difference between it and the state files
22:15 iggy fyb3r: yes
22:15 fyb3r do you have access to the globals like you do in a state file?
22:18 dthom91 joined #salt
22:18 fyb3r cause im trying to think of a way to get the minion id's from an event inside a reactor using the py renderer
22:21 iggy pass the id around
22:22 iggy oh, I see what you're saying
22:23 fyb3r im stumepd lol
22:23 iggy you should have access to all the standard dunder dicts
22:24 fyb3r even then, though. not sure where i would get the id's of all minions from the event
22:24 iggy try __data__ ?
22:24 jaybocc2 joined #salt
22:26 fyb3r ill test it out. if not  I think I could write a reactor that passes the id's to a state file, and the state file be written with the py renderer
22:28 iggy I don't see data being loaded by the py renderer
22:28 iggy I think I'd file a bug
22:28 forrest somebody fucking kill me https://github.com/saltstack/salt/issues/28004#issuecomment-155587845
22:29 forrest How was this not caught, WHY would you require creds to pull public images
22:29 forrest It makes LESS than 0 sense.
22:29 forrest fuck
22:30 zmalone as I recall, the same thing exists in some of the http file states, where you MUST have a source hash
22:30 zmalone even though one may not exist
22:30 forrest yes and there's an issue open for that too I think
22:30 forrest but this one makes even less sense
22:30 forrest Docker doesn't require creds at all
22:30 forrest why would Salt??
22:31 forrest I just don't understand how requiring credentials for repos could have gotten in.
22:31 zmalone salt is weird, and with a lot of states it makes sense to shell out or work around them.
22:31 iggy there's a reason for requiring a hash for http files
22:32 iggy you want to make sure the file you download is the one you expected
22:32 iggy auth is totally different
22:32 forrest iggy, You should still be able to disable it.
22:32 forrest I'm not saying security wise it's the best practice, but it should be an option for the file hash
22:33 iggy I'm sure there are people that disagree with you
22:33 colegatron joined #salt
22:35 Tyrm_ joined #salt
22:36 zmalone Sometimes you don't know the contents of the file you want, but you trust the source and the SSL cert protecting it
22:36 forrest iggy, They can disagree, and that's why it should be AN OPTION
22:36 forrest disabled by default
22:36 forrest if I want to run some shitty insecure setup, that's my business.
22:36 forrest The docker login creds are inexcusable however.
22:38 baweaver joined #salt
22:38 zmalone Verifying both the source and the content makes sense in some cases, but not others.
22:40 Ryan_Lane basepi: can you reopen this? https://github.com/saltstack/salt/issues/25094
22:41 conan_the_destro joined #salt
22:41 jalbretsen And I press send for the email question, and a thought occurs to me of the problem likely is.
22:42 forrest jalbretsen, You should get a badass debugging duck like I have
22:42 techblaze joined #salt
22:43 jalbretsen If as in badass, the duck is making the famous Neil Tyson hand motion, I'm in
22:43 hemebond joined #salt
22:44 jalbretsen http://garethedwards.com/wp-content/uploads/2014/08/15.png
22:45 toastedpenguin when wanting to install pkgs on a minion is it required to do a pkg.refresh_db prior?
22:46 toastedpenguin err 'salt minion pkg.refresh_db'
22:46 hemebond toastedpenguin: I have a feeling it will do that automatically.
22:46 techblaze joined #salt
22:47 timoguin_ joined #salt
22:47 hal58th_ toastedpenguin: It will do one apt/yum update for the whole salt run. So if you change your sources, and then try to install a package, then you would want that option
22:47 scooby2 joined #salt
22:48 toastedpenguin hemebond: I am using a orchestration post salt-cloud minion deployment and when it attempted to run it I got an error "CommandExecutionError: Windows repo cache doesn't exist, pkg.refresh_db likely needed"
22:48 toastedpenguin shoiuld have lead with it being Winblows
22:48 hemebond Oh, Windows.
22:48 toastedpenguin *led
22:48 hemebond Yes, you need to refresh_db on all minions before trying to install something.
22:48 timoguin joined #salt
22:48 toastedpenguin can that be part of the orchestration itself?
22:49 hemebond I don't see why not. I haven't used orchestration myself.
22:49 hemebond But I would assume it's easy to add.
22:49 mosen joined #salt
22:55 toastedpenguin I have the orch renaming the server, adding it to the domain; doing the reboots inbetween it, then adding the required packages
22:56 quix_ joined #salt
22:59 bharper joined #salt
23:01 clintberry joined #salt
23:02 bhosmer joined #salt
23:04 larsfronius joined #salt
23:08 bfoxwell joined #salt
23:10 baweaver joined #salt
23:13 cberndt joined #salt
23:15 ViciousLove joined #salt
23:21 LeProvokateur joined #salt
23:21 dthom91 joined #salt
23:21 clintberry joined #salt
23:27 otter768 joined #salt
23:32 basepi Ryan_Lane: done.
23:33 RandyT toastedpenguin: have you done anything with IIS configuration? If so, can you share some examples?
23:34 chiui joined #salt
23:35 toastedpenguin RandyT:  actually working on that now, we are deployed in AWS, so I decided to create IIS specific image with IIS pre-installed to speed up the process....IIS takes far to long to install
23:35 toastedpenguin as I get the config working i can share
23:36 RandyT toastedpenguin: I'm currently trying to solve that challenge. Have grabbed state and module for iis from salt-contrib.
23:36 RandyT Having some problems calling the state...
23:36 RandyT it basically calls appcmd to configure IIS.
23:36 RandyT seems doable
23:39 Ryan_Lane basepi: hm. it's possible that pip gets the develop branch, the changes to whatever branch you're using
23:39 Ryan_Lane I had a develop branch that was like 2 years old
23:39 fivehole RandyT: I was using appcmd to configure IIS and then I realized I could just template C:/Windows/System32/inetsrv/config/applicationHost.config
23:39 Ryan_Lane so now I fixed that and I'm trying again
23:39 Ryan_Lane may be user error :)
23:40 RandyT fivehole: ah, thanks for the pointer. That crossed my mind earlier today and then got distracted by archve.extract challenge...
23:40 RandyT fivehole: problem solved.
23:40 fivehole So is it using the python extractor?
23:40 ziro` joined #salt
23:40 RandyT fivehole: I'm not a windoze guy, so fighting gag reflex all day as well...
23:41 fivehole Same here
23:41 nate_c joined #salt
23:41 RandyT fivehole: it is not using the python extractor. I reverted to using lorengordon script that was shared. Uses powershell
23:43 fivehole RandyT: I saw he posted that,  I will keep that in mind next time I need to do something with archive. I think I have used a similiar approch with PS and installing a newrelic monitor.
23:46 RandyT fivehole: thanks for the help today. fwiw, here is a PS script I put together to assign IP address in route53 based on Name tag.
23:46 RandyT https://gist.github.com/rterbush/dd31c281e536bbd3e9fa
23:46 RandyT in case you find that useful
23:47 RandyT that is passed into user-data for EC2
23:49 Ryan_Lane RandyT: you've seen the boto_route53 state module, eh? :)
23:49 fivehole RandyT: Cool thanks, and like wsie thanks for your help today.
23:49 Ryan_Lane if you're doing master/minion, you could fire an event back to the master and have the master do the route53
23:49 RandyT Ryan_Lane: I have.. took this approach to deal with case of machine reboot without initiating salt deploy.
23:50 zzzirk joined #salt
23:50 RandyT I guess that event would tell the master that "hey, I rebooted"
23:50 Ryan_Lane this looks like you're giving the instance access to modify route53. that's terrifying to me :)
23:50 Ryan_Lane you can't do fine-grained route53 IAM permissions can you?
23:50 RandyT probably not fine enough...
23:51 Ryan_Lane heh
23:51 RandyT will revisit that. :-)
23:51 RandyT I can restrict to zones which is somewhat safer
23:51 RandyT somewhat..
23:51 Ryan_Lane I actively avoid giving instances route53 entries
23:51 RandyT thanks for the comments.. will put that on the list
23:52 geekatcmu I've got a whole bunch of separate Kerberos environments (with more on the way).  I really need to figure out a way to do more automatic provisioning of keytabs.
23:52 Ryan_Lane but it looks like you're managing windows instances, which probably makes that more difficult :)
23:52 Ryan_Lane we do magic things with proxycommand and ec2 lookups to avoid dns
23:52 nickermire joined #salt
23:52 Ryan_Lane for ssh
23:52 RandyT Ryan_Lane: it does... although, I managed to install boto and boto3 on the windows instances.
23:53 Ryan_Lane cool
23:53 RandyT Ryan_Lane: I'm still working to catch up to just some of what you have done there...
23:53 RandyT things would go much faster if I did not have these Windoze anchors...
23:55 Ryan_Lane :D

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary