Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-01-06

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 frew I think the problem I'm running into at this point is that (it seems like) pillers can only be hashes (recursively?)
00:05 whytewolf frew: update
00:05 whytewolf comments
00:07 frew not following
00:07 whytewolf sorry I put comments on your gist
00:07 frew ahh
00:07 frew gotcha
00:08 frew ok doing it
00:08 drawsmcgraw left #salt
00:08 whytewolf although it wouldn't work if pkgs as more then one item
00:08 frew :/
00:08 frew I guess I could do it all the way
00:09 frew set herp = { 'ruby': { 'pkgs': pkgs, ... } }; herp|yaml
00:09 frew but overall: this is gross to me and I'm curious why this is a sharp edge?
00:11 jaybocc2 joined #salt
00:11 whytewolf well the real question is. why are you building an array like that to start with.
00:11 frew right
00:11 whytewolf why not just do multiple files and target in top.sls like is normal
00:11 frew I don't know what's normal
00:12 frew so the more normal thing would be to ahve, say, ruby-www.sls and ruby-ops.sls
00:12 whytewolf just cause you have the ability to use jinja doens't mean you have to.
00:12 frew ok
00:12 frew I didn't realize that
00:12 frew ok lemme try that
00:12 frew I honestly haven't been able to get a good feel for how all of this works
00:13 frew and since they are dicts they merge easily
00:13 frew whytewolf: thanks
00:13 whytewolf well if you really want you can eveen break it down to use a python render. but that is a whole nother ball game
00:14 frew no I think you are recommending the path of reason here
00:14 frew I udnerstand the value of a data driven approuch
00:14 frew approach*
00:14 frew I did not understand why this was the path to get there
00:14 frew now that I see the light of merged pillar data I think I get it
00:16 whytewolf i think this is the doc you were looking for in regards to merging https://docs.saltstack.com/en/latest/topics/pillar/#pillar-namespace-merges
00:16 frew thanks
00:18 frew ok this is making this make a lot more sense to me
00:18 frew again, thanks a lot whytewolf
00:18 whytewolf no problem :)
00:19 pfallenop joined #salt
00:21 abednarik joined #salt
00:22 cyborg-one joined #salt
00:22 frew is it normal to do 'role:www': [ match: grain, ruby-www ], 'role:dev': [ match: grain, ruby-www] or shoudl I use a compound matcher?
00:22 frew I think both will work
00:23 whytewolf I would use compound. it just looks a little cleaner.
00:23 frew ok
00:24 whytewolf also. just a note. matching grains in pillar is considered a no-no. as pillar data is secure [only the minion that matches can see it]. and grains are mutable on the minion. so matching grains in pillar means that a compromised minion can look up any pillar that is using grain matching
00:25 frew but pillar/top isn't really a pillar
00:25 frew so it's ok there... right?
00:25 whytewolf no, cause matching the top selects the pillars that get shown to a minion.
00:26 whytewolf https://docs.saltstack.com/en/latest/topics/best_practices.html see number 5 of general rules
00:26 frew we don't (currently) have any sensitive pillars
00:26 frew but I see what you mean
00:26 frew I'll read over this doco
00:27 whytewolf no problem. just a warning. we give it to everyone asking about pillar data :P
00:27 frew yep
00:27 frew I appreciate it
00:28 frew I wonder if we should consider using salt for our secrets
00:28 whytewolf depends. salt might already have a way of securly accessing that data. if you look into ext_pillars
00:28 frew sure
00:29 frew we just haven't settled on a secret storage/distribution method yet that we are happy with
00:29 frew and we are definitely picking up salt
00:29 frew ok here's another question
00:29 whytewolf always glad to hear :) [they should really pay me :P}
00:29 frew as I'm debugging this stuff, I want to just check one state or whatever
00:30 frew surely there's a better way than commenting stuff out of my top state
00:30 baweaver joined #salt
00:30 whytewolf salt 'minion' state.sls <state>
00:30 frew ok!
00:30 frew very good
00:31 whytewolf or even salt 'minion' state.sls_id <state id> <state>
00:31 frew what's state_id?
00:31 frew is that to do like, just part of the state?
00:31 whytewolf the first line of a state stanza
00:31 frew indeed..
00:31 frew very cool
00:32 cyborg-one joined #salt
00:33 * frew is making notes
00:33 frew whytewolf: is there a way I can check a match?
00:33 frew like, "does this match like I expect it to"
00:33 whytewolf salt -C 'the match you want' test.ping
00:33 whytewolf every server that matches will return
00:34 frew I'm using salt-call since I'm masterless in dev
00:34 frew (salt-call --local ...)
00:35 frew is there a way in that context?
00:35 whytewolf aahh there is the match module https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.match.html#module-salt.modules.match
00:35 frew ah ok
00:35 whytewolf not sure how it works never used it personally
00:36 babilen https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.state.html#salt.modules.state.show_top would show you the top.sls for that minion
00:36 frew babilen: that's probably good enough
00:36 babilen Depends on what you want
00:36 frew mostly I'm trying to see if my matches are pulling in the states that I expect
00:36 babilen Sounds about right then
00:37 whytewolf agreed. there are a ton of different tools for a ton of different ways ot looking at things
00:38 frew 'I@roles:www or I@roles:dev':
00:38 frew any idea why that's wrong for a compound match?
00:39 whytewolf depends on if roles is pillar or grains
00:39 whytewolf I is pillar G is grains
00:39 frew yeah I just realized
00:39 frew I think it needs to be G
00:39 frew thanks
00:39 babilen (and I'd recommend to keep it in pillars)
00:40 whytewolf babilen: already gave that speach :P
00:40 babilen ah
00:40 frew hm
00:40 frew for whatever reason it's just not pulling in my new pillar
00:40 whytewolf although pillar matching in pillars
00:41 babilen pillar_refresh?
00:41 whytewolf saltutil.pillar_refresh
00:41 frew ok
00:41 frew yeah no dice; I don't think that applies when you have no running services
00:42 babilen *nod*
00:42 whytewolf unforchantly I am less help with masterless installs.
00:42 babilen dito
00:42 frew [ERROR   ] Received bad data when setting the match from the top file
00:42 frew that might have something to do with it.
00:42 whytewolf I really need to get this openstack cluster built so i can start playing with them
00:42 frew I'm doing it in a docker container and it's pretty nice.
00:43 frew https://gist.github.com/frioux/6b96a8e196393c96a6c0
00:43 whytewolf docker/vagrent all that. is nice. I just have a lot of hardware sitting in my bedroom and don't do anything small :P
00:43 frew see anything obvious
00:43 frew ?
00:43 colegatron joined #salt
00:43 otter768 joined #salt
00:44 whytewolf babilen: I don't remeber is matching cap sensative [i work with way to many langs and can never kept my head straight about which support want]
00:45 dancat joined #salt
00:45 babilen cap sensitive?
00:45 frew oohhh
00:45 frew I think I know
00:45 frew I was looking for a file name
00:45 whytewolf babilen: if OR and or are the same thing or different
00:45 frew but the actual data in the pillar is "ruby" not "ruby-www"
00:46 babilen whytewolf: Ah, I believe they are not, but I mostly use the miniscule variant
00:46 frew hm.  Maybe not
00:47 whytewolf frew: in the top file it should be the name of the sls file.
00:47 babilen frew: Do you set roles in grains or pillars?
00:47 frew babilen: grains, currently in just /etc/salt/grains
00:47 frew we may move it to pillars but as of this second it's a grain
00:48 frew (I just want to finish this one file before I leave for the day, I'll talk to coworker about migrating to pillars later)
00:48 frew whytewolf: right, it is
00:48 babilen Okay, that is fine then. What is the path (beneath file_roots) to the SLS file you are trying to include?
00:48 frew ruby-www.sls
00:48 babilen It should be "- ruby-www" in that case
00:48 frew so to be clear, /vol/salt/pillars/ruby-www.sls
00:49 frew right, that's what it is
00:49 frew though the data inside the file is "ruby: ...."
00:49 whytewolf and pillar_roots is /vol/salt/pillars
00:49 whytewolf ?
00:49 frew yesyes
00:50 babilen frew: The data inside is irrelevant in the context of top files. You are simply saying "include file a, b and c" expressed in paths (breadcrumbs?) relative to {file,pillar}_roots
00:50 frew that's what I thought
00:50 frew well, for some reason as far as I can tell, this pillar won't get included no matter what I do
00:51 babilen So, what does "salt-call pillar.get ruby" give you then?
00:51 whytewolf are you still getting the match data error?
00:51 babilen Which top.sls do you refer to and where is it?
00:51 frew babilen: ah!
00:51 frew ok
00:51 frew so it *is* getting included, I just couldn't tell becasue it was merged into the ruby pillardata
00:51 frew I thoguth that might be the case but wasn't sure
00:52 babilen So: All is good?
00:52 frew yes; thanks so much
00:52 whytewolf yay!
00:52 babilen Wonderful
00:52 whytewolf beer time?
00:52 babilen Please note that you can't match on pillars in the pillars SLS file)
00:52 frew yeah someone told me about that
00:52 * babilen is already enjoying a nice g&t
00:53 frew ok this is working perfectly
00:53 whytewolf I still have 7 min at the bank
00:54 frew now I'm getting errrors from the actual state trying to consume the pillardata
00:55 frew not a huge deal; I'm gonna look for a little bit, but I am pleased with the progress
00:55 babilen progress!
00:55 frew indeed
00:55 babilen Paste the state and error if you want us to take a look
00:55 whytewolf |=======================================------------|
00:55 babilen :D
00:59 liskl joined #salt
01:00 liskl joined #salt
01:02 liskl joined #salt
01:06 liskl joined #salt
01:10 zenlot2 joined #salt
01:10 liskl joined #salt
01:11 frew is there a way to see only the failed states after running highstate?
01:13 babilen I like to set state_output: mixed, but there is no way to summarise the outcome (for multiple minions) or only show failed states still AFAIR
01:13 frew ok
01:13 babilen https://docs.saltstack.com/en/latest/ref/configuration/master.html#state-output
01:13 babilen .. is what I'm referring to
01:14 frew and now I am running into regular rubygem problems (failed to load a dep)
01:15 frew that's my signal to gtfo
01:15 frew thanks for the help all, I really appreciate it
01:15 * frew absconds
01:17 babilen have fun and welcome!
01:18 woodtablet left #salt
01:21 cberndt joined #salt
01:28 yomilk joined #salt
01:31 liskl joined #salt
01:40 jhauser joined #salt
01:41 DammitJim joined #salt
01:51 AdamSewell joined #salt
01:52 cyborg-one joined #salt
01:54 mschiff joined #salt
01:54 mschiff joined #salt
01:55 ajw0100 joined #salt
01:55 AdamSewell what's the best way to manage applications on windows outside of the winrepo or chocolately?
01:59 realee joined #salt
02:00 murrdoc powershell
02:02 akhter joined #salt
02:06 invalidexception SCCM and/or DSC can do it, but you're venturing outside of the realm of Salt at that point.
02:10 hasues joined #salt
02:10 hasues left #salt
02:20 snarfy^ joined #salt
02:21 stanchan joined #salt
02:22 catpiggest joined #salt
02:23 writtenoff joined #salt
02:47 ilbot3 joined #salt
02:47 Topic for #salt is now Welcome to #salt! | Latest Version: 2015.8.3 | Logs: http://irclog.perlgeek.de/salt/ | Paste: https://gist.github.com/ (please don't multiline paste into channel) | Ask with patience as we are volunteers and may not have immediate answers
02:56 amcorreia joined #salt
03:02 murrdoc joined #salt
03:08 zmalone joined #salt
03:16 charo joined #salt
03:37 rem5 joined #salt
03:51 wenxin joined #salt
03:52 debian112 joined #salt
04:02 favadi joined #salt
04:03 DammitJim joined #salt
04:04 rem5 joined #salt
04:16 ageorgop joined #salt
04:22 wt joined #salt
04:27 DammitJim joined #salt
04:28 malinoff joined #salt
04:30 ajw0100 joined #salt
04:34 jaybocc2 joined #salt
04:38 ageorgop joined #salt
04:44 stanchan joined #salt
04:45 ecrane joined #salt
04:48 ecrane In this example, how can I make one state require that another state run first? https://gist.github.com/anonymous/85fda4959504543d52e5
05:03 _JZ_ joined #salt
05:07 racooper joined #salt
05:09 yomilk joined #salt
05:12 brianfeister joined #salt
05:13 anmol joined #salt
05:20 DammitJim joined #salt
05:27 jaybocc2 joined #salt
05:44 kshlm joined #salt
05:45 rdas joined #salt
05:48 hamsham joined #salt
05:49 dops joined #salt
05:57 favadi joined #salt
06:02 dops left #salt
06:08 impi joined #salt
06:08 otter768 joined #salt
06:18 favadi joined #salt
06:25 DammitJim joined #salt
06:35 iggy ecrane: salt executes in order
06:35 iggy so that is already the case
06:44 colegatron joined #salt
06:45 ecrane iggy: If state_auto_order = False in the master config, that is not the case, right? Does anyone set it to False, or does everyone leave it at default/True?
06:47 iggy I'm not sure, I know by default it goes top-down
06:49 ecrane thank you
06:58 kaushal_ joined #salt
07:13 eseyman_ joined #salt
07:21 brianfeister joined #salt
07:26 iggy http://iggy.ninja/salt.html  Some of you need to stop talking so much
07:32 evle1 joined #salt
07:40 k_sze joined #salt
07:40 k_sze Does ssh_known_hosts' fingerprint support the new sha256 fingerprint?
07:46 yomilk joined #salt
07:46 impi joined #salt
07:48 KermitTheFragger joined #salt
07:50 GreatSnoopy joined #salt
07:56 jbax joined #salt
07:58 elsmo joined #salt
08:00 justanotheruser joined #salt
08:09 otter768 joined #salt
08:09 felskrone joined #salt
08:21 dgutu joined #salt
08:26 stanchan joined #salt
08:26 bhosmer joined #salt
08:26 calvinh joined #salt
08:27 calvinh joined #salt
08:41 calvinh joined #salt
08:45 AlberTUX joined #salt
08:48 patchedmonkey joined #salt
08:52 Rumbles joined #salt
08:53 rotbeard joined #salt
08:59 LondonAppDev joined #salt
09:02 evle joined #salt
09:03 tinyhippo joined #salt
09:08 kshlm joined #salt
09:10 TyrfingMjolnir_ joined #salt
09:10 brianfeister joined #salt
09:12 justanotheruser joined #salt
09:24 keimlink joined #salt
09:27 GreatSnoopy joined #salt
09:30 s_kunk joined #salt
09:32 traph joined #salt
09:32 traph joined #salt
09:51 Jimlad joined #salt
09:53 impi joined #salt
09:54 slav0nic joined #salt
09:55 lynxman joined #salt
09:55 lynxman joined #salt
10:03 andrew_pashkin joined #salt
10:04 hasanfefer joined #salt
10:05 jhauser joined #salt
10:10 otter768 joined #salt
10:14 jbax joined #salt
10:15 ericof joined #salt
10:20 jcristau joined #salt
10:37 viq iggy: you don't mention time zone :P
10:44 N-Mi joined #salt
10:49 jbax joined #salt
11:01 calvinh joined #salt
11:02 calvinh joined #salt
11:19 av_ joined #salt
11:23 calvinh joined #salt
11:28 Rumbles joined #salt
11:29 wangofett joined #salt
12:01 bluenemo joined #salt
12:04 TyrfingMjolnir joined #salt
12:11 otter768 joined #salt
12:11 boargod2 joined #salt
12:13 DanyC joined #salt
12:13 anmol joined #salt
12:14 DanyC quick q: when a highstate is run, which gets first applied, the states or the pillar ?
12:25 babilen DanyC: Pillars will have been synced by the time the states are run. What exactly do you mean by "application of a pillar" ?
12:26 denys joined #salt
12:27 DanyC babilen: sso you have a top.sls for pillar and then a top.sls for state. When you run highstate, is the top.sls from /srv/salt/ applied first and the /src/pillar/top.sls ?
12:27 DanyC babilen: (gave the path as an example to clear the confusion)
12:27 sys01_ joined #salt
12:27 sys01_ hi friends
12:27 sys01_ i would get some password in sdb file to use in jinja template
12:27 sys01_ even i set related config for sdb, but i cannot get password in jinja file
12:27 sys01_ any idea?
12:28 sys01_ i set like this
12:28 sys01_ pass: sdb://ya-api-web/myapipass
12:28 sys01_ also i create a config in master file
12:28 babilen DanyC: Pillars are synced first so surely the pillar's top.sls will be "applied" before the states' top.sls
12:29 DanyC babilen: right, much thanks. I think i just found a race condition, pff .
12:32 calvinh joined #salt
12:34 martoss joined #salt
12:35 CeBe joined #salt
12:35 calvinh joined #salt
12:36 babilen DanyC: How so?
12:37 martoss left #salt
12:38 DanyC babilen: well is a race condition in the way i lay down the installation of consul. Cause i have a pillar which match a grain, does install consul and then i install again consul via state and that screw the init script
12:39 DanyC babilen: so basically 2 states - one from pillar and one from state itself come together and does same thing...grr
12:40 DanyC babilen: i wish the docs will have s'thing like this, https://blog.talpor.com/2014/07/saltstack-beginners-tutorial/ easy to follow and with some diagrams
12:40 sys01_ nobody use sdb ?
12:40 DanyC sys01_: not me, sorry for not being to help
12:43 wangofett DanyC: the newer docs are a lot nicer
12:43 wangofett well, tutorial anyway :)
12:44 wangofett https://docs.saltstack.com/en/getstarted/
12:44 DanyC wangofett: i'll have a look, which branch is that...2015.8 or .5 ?
12:44 DanyC wangofett: ah okay, thx
12:45 wangofett The actual API docs... that's something that I would love to make more user friendly, you know, if I was actually working for Salt ;)
12:45 colegatron joined #salt
12:45 wangofett https://docs.saltstack.com/en/getstarted/overview.html is definitely one of the prettier diagrams
12:45 Dw_Sn joined #salt
12:46 wangofett helped me visualize some things
12:46 Dw_Sn anyone having slow issue with salt with centOS7.2 ?
12:46 DanyC wangofett: indeed ;) that API docs is s'thing you love and hate at the same time :)
12:48 wangofett Dw_Sn: yesterday I was
12:48 sinonick joined #salt
12:48 amcorreia joined #salt
12:49 wangofett Dw_Sn: well, centos 7 at least. no clud about the .2 part :P
12:49 wangofett clue, too
12:49 wangofett like... states that are running in a couple of seconds today were taking a couple of minutes
12:50 wangofett I thought it was just me. I've noticed that I do have a couple of states that take for-ev-errrrrrrrr (e.g. the SELinux state)
12:52 Dw_Sn wangofett: 7.1 was great , 7.2 highstate is really slow
12:52 babilen DanyC: Don't quite understand the problem, but I'm sure you'll sort it out
12:53 quasiben joined #salt
12:54 wangofett DanyC: I think you may have some confusion around terms... I know I did starting out :)
12:54 wangofett pillar == data
12:55 wangofett state == what you want setup
12:56 wangofett (see the image about halfway down on https://docs.saltstack.com/en/getstarted/overview.html)
13:00 wangofett things like this that I don't understand  "Duration: 27441.539 ms"
13:00 wangofett that was hg.latest for a repo that didn't change at all
13:01 wangofett I'm (pretty) sure it's not Salt's fault... but it still seems wonky to me
13:03 AndreasLutro salt may need to fetch a lot of data to actually know for sure that nothing has changed since the last state run
13:05 wangofett If I run `hg pull` it doesn't take that long :P
13:09 justanotheruser joined #salt
13:09 AndreasLutro it's entirely possible the salt modules do a lot more than that. you could review the code
13:14 wangofett https://github.com/saltstack/salt/blob/develop/salt/states/hg.py not much
13:14 wangofett hg pull followed by hg update
13:14 wangofett hence my confusion :P
13:15 DanyC joined #salt
13:18 akhter joined #salt
13:28 losh joined #salt
13:31 baoboa joined #salt
13:31 dyasny joined #salt
13:32 calvinh joined #salt
13:36 sk_0 joined #salt
13:53 bhosmer joined #salt
14:01 fredvd joined #salt
14:02 rm_jorge joined #salt
14:08 kernasi joined #salt
14:10 dyasny joined #salt
14:12 otter768 joined #salt
14:12 Tanta joined #salt
14:13 subsignal joined #salt
14:17 yomilk joined #salt
14:20 catpig joined #salt
14:21 scoates joined #salt
14:21 edrocks joined #salt
14:23 yomilk_ joined #salt
14:23 lompik joined #salt
14:25 viq_ joined #salt
14:26 viq_ so module gpg.list_secret_keys gives output like this - https://pbot.rmdir.de/B-_9XQhUz5cLoQcIaabz3A
14:27 viq_ How could I use eg fingerprint from that in states?
14:27 yomilk joined #salt
14:32 LondonAppDev joined #salt
14:32 mpanetta joined #salt
14:33 calvinh joined #salt
14:36 mapu joined #salt
14:39 dyasny_ joined #salt
14:40 andrew_v joined #salt
14:40 winsalt joined #salt
14:41 marcinkuzminski joined #salt
14:43 DammitJim joined #salt
14:43 bhosmer joined #salt
14:45 evle1 joined #salt
14:45 morissette joined #salt
14:47 zmalone joined #salt
14:49 rem5 joined #salt
14:51 perfectsine joined #salt
14:53 racooper joined #salt
14:59 kshlm joined #salt
15:00 babilen viq: returnvalue_from_function_call.get('fingerprint', '')
15:00 dancat joined #salt
15:01 perfectsine joined #salt
15:02 wangofett anyone know if there is a command to flush selinux privileges aside from setsebool?
15:02 spiette joined #salt
15:02 hasues joined #salt
15:02 hasues left #salt
15:03 wangofett if you do man setsebool: "If the -P option is given, all pending values are written to the policy file on disk. So they will be persistent across reboots."
15:04 viq babilen: I'm too programming illiterate to know how to chain this, how would I eg set a jinja variable with that?
15:05 viq wangofett: and why setsebool is not suitable/
15:05 viq ?
15:05 wangofett I'm using file.managed to copy over a .pp file and then https://docs.saltstack.com/en/develop/ref/states/all/salt.states.selinux.html#salt.states.selinux.module to make sure it's enabled
15:05 wangofett but that doesn't appear to flush the privileges
15:05 wangofett I have to manually run `setsebool <somebool> <state it was in> force=True`
15:06 viq wangofett:
15:06 viq New in version Boron.
15:06 viq https://docs.saltstack.com/en/latest/topics/releases/version_numbers.html
15:07 wangofett yeah, I know it's new - I just copied the source of those states into my _states, etc.
15:07 wangofett so I've got them ;)
15:10 _JZ_ joined #salt
15:10 viq It seems to me you're talking about two different things - you're copying a module, but want to ensure state of bolleans?
15:10 viq s/boll/bool/
15:11 drawsmcgraw joined #salt
15:12 anotherZero joined #salt
15:14 viq babilen: would it be something like {% set FP = salt['gpg.list_secret_keys'](user='root').returnvalue_from_function_call.get('fingerprint', '') %} ?
15:14 antpa_ joined #salt
15:15 wangofett viq: no - I don't care about the state of the booleans
15:15 Brew joined #salt
15:15 wangofett viq: the module is enabled (yay) but it doesn't actually *work*
15:16 wangofett viq: because (as far as I can tell) the permissions haven't took. But running `setsebool -P` will flush the privileges
15:16 AdamSewell joined #salt
15:16 wangofett the only problem is that you can't run it naked like that
15:16 wangofett you have to provide a boolean
15:16 wangofett it doesn't matter *what* boolean
15:17 wangofett it will pick up these waiting privileges and say, "Oh hey, yeah, these are live, OK?"
15:17 wangofett at least that appears to be what's happening :P
15:17 autoall joined #salt
15:19 rory joined #salt
15:20 viq shouldn't that be semodule's job?
15:22 rory Is it possible to run some state "bar" at the end of some other state "foo"'s execution ?
15:22 rory Regardless of if the declarations in "foo" succeeded or not
15:22 rory kind of like... "require" to specify the order, but "require" implies that the first state succeed
15:23 rory I'm on some batshit ancient version of Salt as well, 0.17.5
15:23 viq I think 'onfail' is newer than that
15:24 winsalt joined #salt
15:24 rory I don't need it to only execute on fail
15:24 rory I always want it to execute at the end
15:25 rory success or not. bar doesn't care what happened when foo ran, it just needs to run chronologically layer
15:25 rory later*
15:25 viq yes, have it require and onfail ;)
15:25 rory I can't onfail that requires a later version. Is there some workaround?
15:25 rory I'd be surprised if this wasn't a common usage pattern
15:26 viq hm, https://docs.saltstack.com/en/latest/ref/states/requisites.html#overriding-checks
15:27 malinoff joined #salt
15:27 viq what module is the first state using?
15:27 malinoff joined #salt
15:28 FreeSpencer Anybody else see where the saltstack route 53 boto state is superrrrrr slow
15:28 FreeSpencer Like 40+ seconds to make a record
15:31 DanyC is it possible to store the _grains & _modules in git so that master can pull it in /srv/salt/ the same way it does for the states ?
15:32 perfectsine joined #salt
15:37 viq DanyC: https://docs.saltstack.com/en/latest/topics/tutorials/gitfs.html seems to suggest it should work
15:39 calvinh joined #salt
15:40 DanyC viq: i can't see saying anything about custom grains ...have i missed s'thing ?
15:41 viq DanyC: I'm guessing from the very last comment, but to be honest I'm not sure
15:45 Rumbles joined #salt
15:47 viq DanyC: then again, maybe not
15:47 DanyC viq: :)
15:51 teryx510 joined #salt
15:53 yomilk joined #salt
15:55 xmj left #salt
15:58 traph joined #salt
15:59 spuder joined #salt
16:02 sdm24 joined #salt
16:06 dyasny__ joined #salt
16:08 cpowell joined #salt
16:10 adelcast joined #salt
16:10 viq How would I use that returnvalue_from_function_call.get('fingerprint', '') in states?
16:12 beardedeagle joined #salt
16:12 otter768 joined #salt
16:16 scoates joined #salt
16:20 dyasny__ joined #salt
16:20 CheKoLyN joined #salt
16:27 Gareth morning morning
16:28 elsmo joined #salt
16:29 PeterO joined #salt
16:30 perfectsine joined #salt
16:32 thejrose1984 joined #salt
16:33 dyasny_ joined #salt
16:38 LondonAppDev joined #salt
16:38 impi joined #salt
16:40 calvinh joined #salt
16:43 ranomore1 left #salt
16:47 perfectsine joined #salt
16:47 tehsu if I want to pull from a different pillar, can I just do a pillar.get
16:48 babilen viq: You execute the execution function and make the lookup?
16:48 winsalt pillar is one big dictionary, you can access all the values you put in there tehsu
16:49 tehsu so my salt script can access any pillar as long as that pillar exists in top.sls
16:49 viq babilen: sorry, I don't know how
16:51 bhosmer joined #salt
16:52 babilen viq: {% set foo = salt['gpg.list_secret_keys']() %} and then later {{ foo.get('fingerprint', '') }} -- You could also save that information in the salt mine if you need that data from other minions
16:53 winsalt its a matching game, if you give a minion a pillar in top.sls then they can access it, otherwise it will fail.
16:53 viq babilen: thank you, I'll try that. I was considering that, though I think with mine I'd have to as well do quite a bit of acrobatics to get that info
16:53 ranomore1 joined #salt
16:53 yomilk joined #salt
16:55 babilen viq: Well, I have no idea what you are trying to achieve
16:56 brianfeister joined #salt
16:57 viq babilen: have states that will generate a gpg key if not present, and then generate a config file for duply telling it to use that key to encrypt backups
16:57 viq I have the generation part done, but I'm trying to figure out how to go about the second part of it
16:58 viq https://pbot.rmdir.de/tLgg9lFAt5jtvXGQv1iLAQ is what I have so far, and it results in "Rendering SLS 'base:test' failed: Jinja variable 'list object' has no attribute 'get'"
16:58 ranomore1 left #salt
16:58 Bryson joined #salt
16:59 viq (gpgkeys is defined in a line I did not include, and without the "test key" state it works)
17:00 drawsmcgraw Is there a way to define nested Pillar data on the command line?
17:00 drawsmcgraw I know I can do -> pillar='{"port":"80"}
17:00 Mandorath_ joined #salt
17:01 drawsmcgraw But what about -> pillar='{"app:port":"80"}' ?
17:01 drawsmcgraw That seems to not work....
17:02 drawsmcgraw oh... nm... read the Docs :)
17:03 Mandorath_ When i try to use salt commands on the master as a non root user the salt-master gives a timout. I dit specify the necessary rights under pam in the master config file. What do i need to configure to give other users the right permission to execute salt commands?
17:03 wangofett lol. That's always the best ;)
17:04 viq I wish I knew what to look for to figure out my problem ;)
17:06 babilen viq: Looks as if list_secret_keys returns a list of dictionaries, rather than a single dictionary. I'd assume that it includes one entry per key. You would therefore have to iterate over it and check each key.
17:06 babilen https://github.com/saltstack/salt/blob/develop/salt/modules/gpg.py#L268
17:07 dfinn joined #salt
17:07 DanyC joined #salt
17:08 CeBe joined #salt
17:09 dyasny joined #salt
17:10 viq something like: {% for key in localkeyinfo %} {{ key.get('fingerprint', '') }} {% endfor %}     ?
17:11 viq ah, apparently so \o/
17:13 stanchan joined #salt
17:14 viq babilen: thank you :)
17:15 viq for reference, here's what works https://pbot.rmdir.de/rr25lWUS4VjYXOpDQ9jklA
17:18 DanyC joined #salt
17:18 joejoba joined #salt
17:19 bhosmer joined #salt
17:20 DanyC joined #salt
17:21 heathn joined #salt
17:21 snarfy joined #salt
17:22 heathn I am getting 'Connection reset by peer' when trying 'sudo salt-cloud -l debug --list-locations linode'. Linode is a provider that I setup. I have my api key inside the provider file.
17:23 babilen viq: Perfect! :)
17:24 onlyanegg joined #salt
17:27 Gary joined #salt
17:28 Guest99058 hello all
17:28 Guest99058 I am new to salt configuration
17:28 Guest99058 gimme some idea about it
17:30 viq Guest99058: https://docs.saltstack.com/en/getstarted/
17:30 viq and https://docs.saltstack.com/en/latest/topics/tutorials/walkthrough.html
17:30 writtenoff joined #salt
17:40 Guest99058 Thanks
17:40 babilen Welcome! Let us know if you have more specific questions :)
17:48 DanyC joined #salt
17:51 DanyC joined #salt
17:53 snarfy joined #salt
17:54 yomilk joined #salt
17:58 rem5 joined #salt
18:02 rem5 joined #salt
18:02 bhosmer joined #salt
18:03 baweaver joined #salt
18:04 LostSoul Yeah, I'm new to salt too and it's so huge that I got losted
18:04 viq getting closer :) https://pbot.rmdir.de/8GJXr4LYZABkuzjPm3RSsg
18:06 spuder_ joined #salt
18:09 LostSoul viq: Nice
18:09 LostSoul I'm willing to create few configs for my hosts
18:10 jfindlay LostSoul: be sure to check out https://docs.saltstack.com/en/getstarted/
18:10 LostSoul Yeah I saw it, nice stuff but so many informations
18:11 LostSoul Also I guess learning Jinja2 is needed to create nice working templates, right?
18:11 viq LostSoul: find yourself a simple task and start there
18:11 viq LostSoul: I expect you'll really need maybe 3 things from jinja at first
18:12 jfindlay I see that viq has already posted that URL, sorry :)
18:12 LostSoul jfindlay: Yeah, hehe
18:12 LostSoul Thanks viq and jfindlay
18:12 jfindlay also, to viq you listen; good advice he has
18:13 otter768 joined #salt
18:14 LostSoul Hehe, I will
18:14 LostSoul Hope to idle here on daily basis now
18:14 viq ....people _do_ close their IRC clients? o.O
18:14 viq ;P
18:14 LostSoul :D
18:15 LostSoul I wasn't just aware that this community is so active on IRC
18:15 jfindlay I've heard theories that it is possible
18:15 whytewolf wait, you can quit irc?
18:15 viq whytewolf: maybe they meant IRL and just made a typo?
18:16 geekatcmu I close my IRC client all the time.
18:16 geekatcmu Of course, my bouncer stays connected...
18:16 stanchan joined #salt
18:17 whytewolf lol geekatcmu I'm using a bouncer and still don't close my IRC client. it lives in tmux :P
18:17 LostSoul xD
18:17 geekatcmu I prefer to run irssi on my desktop, so it gets closed on a more or less regular basis.
18:17 viq ...why? :P
18:18 geekatcmu reboots?
18:18 LostSoul I need to set up bouncer too :)
18:18 whytewolf I only use a bouncer so i can pop in with my phone now and then
18:18 LostSoul I never did it, is it hard?
18:18 nZac joined #salt
18:19 viq what do you use for a bouncer?
18:19 whytewolf ZNC
18:19 antpa_ joined #salt
18:20 geekatcmu ZNC
18:20 geekatcmu I use a bouncer so I can switch between desktop and laptop
18:20 geekatcmu and never lose scrollback
18:21 antpa_ What's the best way to deploy commercial ssl certificates?  Ideally I could store them in file in pillar and reference them with something like source: pillar://nginx/files/domain.com.crt in the same fashion we do with salt:// file sources.
18:21 baweaver joined #salt
18:22 viq antpa_: sadly, no, you can have contents_pillar in file.managed though
18:22 iggy viq: good point.... I assume it uses server time (which would be UTC-5 NYC)
18:23 viq antpa_: unless you go with custom pillars like here http://garthwaite.org/virtually-secure-with-openvpn-pillars-and-salt.html
18:24 fullstop joined #salt
18:24 PsionTheory joined #salt
18:24 antpa_ viq: your first suggestion is great! I see it in the documentation now https://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html
18:24 fullstop Hi, I'm having a bit of trouble with a command that downloads something..
18:25 whytewolf well thats vague....
18:25 fullstop sorry, getting a gist
18:25 fullstop https://gist.github.com/mdeneen/a976025cb495d7833a54
18:26 fullstop ignore the lack of pillars / grains for this test
18:26 fullstop This downloads every time, even though that file exists.  I feel like I'm doing something dumb.
18:26 ryau joined #salt
18:26 fullstop I've tried tomcat.tar.gz and /tomcat.tar.gz
18:26 whytewolf fullstop: lack of cwd
18:27 fullstop ?
18:27 fullstop cwd is there
18:27 viq fullstop: full path in unless
18:27 fullstop unless doesn't use cwd.. ok
18:27 whytewolf ^
18:27 viq fullstop: also, why not simply use file.managed
18:27 fullstop because I'm just learning this.  :)
18:27 viq file.managed can download stuff for you, though you have to give it a checksum
18:27 fullstop I use file.managed for files in my formula
18:27 fullstop ah, ok
18:27 whytewolf file.managed would do this [would need hash value though]
18:27 fullstop I'll look into it
18:28 whytewolf also. if the cmd.run is creating a file you might want to use creates: instead of an unless
18:29 fullstop I will look at this as well.
18:29 fullstop thanks!
18:29 viq Also you can tell curl to write to file instead of using >
18:29 fullstop yes, a lot of this was gleaned from the java formula
18:30 bhosmer joined #salt
18:31 ryau_ joined #salt
18:32 iggy I'll just say this (as a formulas maintainer, so I can talk smack).... only about half of the formulas are useful as examples of what not to do
18:32 iggy the other half are shining examples of what not to do... ever... under any circumstances
18:33 iggy the first one wasn't supposed to have not, but... oddly fitting
18:33 fullstop haha, ok, I'll take them with a grain of ... salt
18:34 whytewolf lol, oh so punny
18:35 impi joined #salt
18:36 fullstop It had to be done.
18:36 iggy you looking for a job? you'd fit right in here
18:39 stanchan joined #salt
18:40 frew is a grain of virtual:physical basically saying a container?
18:41 iggy I probably wouldn't trust the virtual grain
18:41 iggy that's just me though
18:41 beardedeagle mmm...that saltstack career
18:41 frew ok
18:41 whytewolf +1
18:42 frew should I write my own grain do you think?
18:42 whytewolf or check salt-contrib
18:42 frew ah good idea
18:42 whytewolf https://github.com/saltstack/salt-contrib
18:43 * whytewolf isn't really sure whats in there
18:44 iggy frew: if you have very tight control over your minion versions and test every possible value in your situation, it can maybe work
18:44 iggy but it'll probably break when you upgrade salt
18:45 colegatron joined #salt
18:46 iggy is your goal to determine if something is in a container?
18:47 iggy (and virtual:physical on my boxes is an actual physical piece of hardware)
18:47 perfectsine joined #salt
18:47 frew iggy: sorta; basically some things (like lvm, mdadm, etc) make no sense to be installed in a container, so I want to leave those out in that situation
18:48 iggy fair enough
18:50 frew a better phrase is like...
18:50 frew I dunno it's like not about containers, but about complete machiens
18:50 frew which VM's are
18:50 frew I'm struggling to think of a word here
18:51 frew anyway thansk I'll look at contrib
18:51 fullstop for file.managed, how does the salt:// work?
18:51 fullstop Does it only look in things defined in roots and in formula directories?
18:51 ajw0100 joined #salt
18:51 whytewolf fullstop: salt:// = combined file_roots merged together.
18:52 fullstop ok
18:53 whytewolf you can get a list of what is avalible from salt:: with salt 'minion' cp.list_master
18:53 fullstop let me run that, but I might have another question
18:54 fullstop ok, this makes sense.  One must be careful to avoid collisions.
18:54 whytewolf yes
18:54 whytewolf they are handled. but most likely will not act like you expect. or cause errors
18:58 brianfeister joined #salt
19:01 martoss joined #salt
19:02 cberndt joined #salt
19:05 fullstop Yes, I'll keep them unique
19:06 andrew_v joined #salt
19:06 frew we're using the ec2_info and ec2_tags grains from salt-contrib and somewhere one of those modules allows an exception to get thrown; which is kinda gross and annoying.  I am trying to find it but I think that the file is copied to somewhere on the minion.  I tried running saltutil.refresh_modules but the exception is still being thrown
19:06 jfindlay not my favorite salt feature: use with discretion and care
19:06 frew should I be running some other command to push out the grain?
19:06 iggy I generally use sync_all
19:06 frew ok I'll do that
19:06 frew less guesswork I presume
19:07 frew ok ec2_tags it is
19:07 frew er.. maybe?
19:07 frew arg
19:09 frew now the stacktrace isn't happening.
19:09 * frew ignores for now
19:10 iggy #nohacks
19:16 baweaver joined #salt
19:22 baweaver joined #salt
19:23 ryau joined #salt
19:26 forrest joined #salt
19:26 ryau_ joined #salt
19:29 aboe joined #salt
19:31 denys joined #salt
19:33 subsignal joined #salt
19:33 JDiPierro joined #salt
19:35 enigma99a joined #salt
19:36 enigma99a anyone have any ideas on this one? :-(
19:36 enigma99a # salt-minion -l debug
19:36 enigma99a [DEBUG   ] Reading configuration from /etc/salt/minion
19:36 enigma99a [DEBUG   ] Including configuration from '/etc/salt/minion.d/_schedule.conf'
19:36 enigma99a [DEBUG   ] Reading configuration from /etc/salt/minion.d/_schedule.conf
19:36 enigma99a [DEBUG   ] Including configuration from '/etc/salt/minion.d/minion.conf'
19:36 enigma99a [DEBUG   ] Reading configuration from /etc/salt/minion.d/minion.conf
19:36 enigma99a [DEBUG   ] Using cached minion ID from /etc/salt/minion_id: server0001.domain.net
19:36 enigma99a [DEBUG   ] Configuration file path: /etc/salt/minion
19:36 enigma99a Failed to prepare the Salt environment for user root. The user is not available.
19:36 enigma99a [INFO    ] The salt minion is shut down
19:36 whytewolf ACK! Flood
19:36 enigma99a root@server0001:/var/log# id
19:36 enigma99a uid=0(root) gid=0(root) groups=0(root)
19:37 enigma99a Ubuntu 14.04.2 LTS
19:38 frew ok so I'm trying to write a little grain to detect if I'm in docker or w/e
19:38 frew I named it virt.py; put it in the _grains dir, ran sync_all (and can see it get synced) but when I run grains.items I see no virt grain
19:38 fullstop ok, I'm at the point where each server needs to have an ID set..
19:39 fullstop Is this what pillars are for?
19:39 ryau joined #salt
19:39 frew any ideas on how to get that grain to run or w/e?
19:40 perfectsine joined #salt
19:41 fullstop or should I just configure the ID on the minion as a grain and fetch it?
19:41 ryau__ joined #salt
19:43 whytewolf enigma99a: sounds like python is having problems with pwd.getpwnam('root')
19:43 enigma99a odd....
19:43 whytewolf enigma99a: https://github.com/saltstack/salt/blob/01490387d714256191b3017fe488175b55231bbf/salt/utils/verify.py#L154-L161
19:44 enigma99a https://github.com/saltstack/salt/issues/26054
19:44 saltstackbot [#26054]title: Typo in sys.exit(salt.defulats.exitcodes.EX_NOUSER) AttributeError: 'module' object has no attribute 'defulats' | Encountered the following when a failed login to a remote host using salt-ssh was unsuccessful....
19:44 FreeSpencer Calling "ip neigh show dev br0 | grep REACHABLE | wc -l" from python caller API results in Error: an inet prefix is expected rather than "|". but calling it from the master works fine. Any idea?
19:44 enigma99a yeah that owuldn't be it
19:46 Theo joined #salt
19:46 Theo Greetings..  How do I go about requesting a saltstack centos7 docker image?
19:46 whytewolf fullstop: minion id? typically thats set in minion_id on the minion and is what the key that is accepted in salt-key is
19:47 enigma99a whytewolf: >>> pwd.getpwnam('root')
19:47 enigma99a pwd.struct_passwd(pw_name='root', pw_passwd='x', pw_uid=0, pw_gid=0, pw_gecos='root', pw_dir='/root', pw_shell='/bin/bash')
19:47 enigma99a that's from a python cli
19:47 harkx joined #salt
19:47 whytewolf enigma99a: strange
19:47 enigma99a so it can read it there
19:47 enigma99a very
19:47 whytewolf enigma99a: cause that line is the only place that error shows up in the code
19:47 fullstop whytewolf: not quite.  I need a unique value (separate from the minion_id)
19:47 yomilk joined #salt
19:48 whytewolf fullstop: set it in pillar then
19:48 enigma99a yeah I'm sure that is where it is failing, I just need to figure out why now :-/
19:48 fullstop whytewolf: Aren't pillars applied to any number of minions?
19:48 whytewolf fullstop: only to minions that are targeted
19:48 fullstop ok, I'll look at that again.
19:49 fullstop It seemed to be able to be applied willy-nilly, and that kind of scared me.
19:49 felskrone joined #salt
19:50 ryau joined #salt
19:50 whytewolf nothing willy nilly about pillars. :P they go where they are told to go in the top.sls for pillar. if the target is done oddly then yeah they can go everywhere but thats a targetting error not a pillar being strange
19:51 whytewolf enigma99a: what version 2015.8.3?
19:51 fullstop I'll check it out again.
19:51 whytewolf maybe there was a achange
19:52 enigma99a yes
19:52 enigma99a 2015.8.3
19:53 nZac joined #salt
19:53 bhosmer joined #salt
19:53 thejrose1984 joined #salt
19:54 whytewolf enigma99a: honestly I have no idea. pwnam[2] on the getpwnam object should just retern the uid
19:54 ryau_ joined #salt
19:55 whytewolf maybe a corrupt install?
19:55 zmalone Can someone explain this to me? "$ sudo salt-key -D 'test'"
19:55 enigma99a could be......... I am going to try reinstalling
19:55 zmalone if I single quote a value for salt-key -D, it matches every minion id I have
19:56 zmalone I don't understand why
19:56 whytewolf -D is everything.
19:56 calvinh joined #salt
19:56 zmalone ah, got it
19:56 whytewolf you want lowercase d
19:56 zmalone exactly
19:56 zmalone I was troubleshooting something else and flipped case by accident
19:56 zmalone thanks
19:56 whytewolf np
19:57 fullstop got the pillar working.  thanks.
19:57 whytewolf np fullstop
19:58 dfinn joined #salt
19:59 enigma99a [TRACE   ] Trying generic group list for 'root'
19:59 enigma99a [TRACE   ] Group list for user 'root': ['Domain Users', 'root-']
19:59 enigma99a ah hah.......
19:59 whytewolf root-?
19:59 whytewolf lol
19:59 enigma99a although id showed it all to be (root) I think something is going on with ldap
20:00 enigma99a taking off ldap in nsswitch.conf allowed it to start
20:00 enigma99a what the heelll
20:02 ryau joined #salt
20:02 enigma99a LOL.. I found it in AD
20:02 whytewolf yikes. ldap issues are not fun.
20:02 enigma99a what the heck, who put that there
20:02 enigma99a deleted now
20:03 elephhy joined #salt
20:04 ryau__ joined #salt
20:05 frew is there a way to negate a match?
20:05 frew like, os!ubuntu ?
20:06 whytewolf compound match '* and not G@os:ubuntu'
20:06 frew ah ok
20:09 brianfeister joined #salt
20:11 ryau joined #salt
20:12 bluenemo joined #salt
20:13 Rumbles joined #salt
20:14 otter768 joined #salt
20:15 clayoster joined #salt
20:15 ryau_ joined #salt
20:16 GreatSnoopy joined #salt
20:16 beardedeagle holy crap getting winexe to work properly with salt-cloud was a pain
20:17 baweaver joined #salt
20:17 fullstop okay, last question, I swear!
20:17 fullstop I'd like to run a command, but only after a file is changed (through salt)
20:17 beardedeagle wait
20:18 RandyT beardedeagle: I have a few scars there myself if you want to compare notes
20:19 beardedeagle @fullstop: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.cmd.html#salt.states.cmd.wait
20:19 beardedeagle @RandyT: Lol, we may have to do that.
20:20 fullstop ah, I see it now.  thanks
20:22 ajw0100 joined #salt
20:22 bhosmer joined #salt
20:22 stanchan joined #salt
20:23 beardedeagle @RandyT: took me several hours to get it worked out, between figuring out that you need winexe 1.1 (doesn't exist for cent7, had to compile), getting my user_data file properly written (needed local admin user, among other things), then fixing my states. never want to do that again.
20:25 RandyT beardedeagle: I'd offer the following as well which was helpful in packaging a winexe for Centos. https://github.com/LHN/winexe-rpm
20:25 RandyT no real changes in that fork from the original
20:25 beardedeagle well...that would have been nice
20:25 winsalt i gave up on winexe, switched to winrm
20:25 beardedeagle already created an internal yum repo with my complied rpm so I don't have to do it again.
20:26 whytewolf I gave up on windows, switch to sanity :P
20:26 RandyT winsalt: interesting.. any significant difference? I've not really had any problems with winexe once I sorted these issues out.
20:26 RandyT whytewolf: I hear that... need to spend more time in figuring out migration path to mono here...
20:27 beardedeagle @winsalt: not that it matters in post, but what did you get caught up on? @whytewolf: I wish I could just stick to linux but I am providing support to an organization that deals almost solely in c# and mono won't cut it/
20:27 beardedeagle I support both linux and windows here for salt-cloud
20:27 RandyT beardedeagle: doing the same here
20:28 RandyT with moratorium on any more dependency on Windoze... :-)
20:28 whytewolf beardedeagle: RandyT: I understand. I'm just being cheeky. since I tend to deal with technologies that only run in linux with any kind of effect I get to play the I only deal with linux card.
20:28 winsalt i also went through the same thing, finding it needed 1.1, building it etc.  And it still would fail for some reason
20:28 beardedeagle @winsalt: did you install and configure samba?
20:29 winsalt oh right, its something to do with centos 7.2
20:29 iggy we have a winops team... they get to do all the "fun" stuff
20:29 RandyT iggy: for now, I am THE team... with exception of these C# zealots I deal with. :-P
20:29 beardedeagle I support windows with this platform as far as: you can provision windows openstack instances, they are bootstrapped with salt, puppet hook runs after salt is installed.
20:30 beardedeagle that is it
20:30 beardedeagle otherwise I sit in linux all day and I prefer to keep it that way lol
20:30 whytewolf lol
20:30 UtahDave joined #salt
20:31 beardedeagle Hell, the most I personally have for windows is a kvm running win 10 with gpu passthrough on my gaming rig
20:31 RandyT I have managed to get as far as provisioning entire environment including configuration of MSSQL and intializing databases, etc... it has been a painful journey for me and the helpful folks here in the channel. :-)
20:31 beardedeagle arch linux ftw
20:32 beardedeagle yeah I make the windows people here write anything they need installed on their vm's in puppet, hence the hook.
20:32 iggy RandyT: want a job? I think you're farther along than our win team is
20:33 whytewolf lol, i think he is trying to get away from windows iggy.
20:33 beardedeagle idk, if it meant getting to play with salt all day...
20:33 iggy I didn't say a great job...
20:33 RandyT iggy: thanks, I think I have too many jobs right now and am deeply invested.. we'll see where that leaves me in a few months.
20:34 whytewolf if it wasn't in Cali I would consider hitting iggy up for a job.
20:34 whytewolf :P
20:34 beardedeagle yeah moving is out
20:34 beardedeagle just bought a house
20:34 iggy LA is great
20:34 beardedeagle I'm an adult now
20:34 RandyT I really enjoy doing an application upgrade from a Linux box while the windows guys are screwing around on RDP.. :-)
20:35 iggy I mean until the oceans swallow it whole and all
20:35 whytewolf well when the oceans do swallow LA. I"ll have beach side property in Vegas
20:35 aron_kexp joined #salt
20:35 beardedeagle super beach front property
20:36 Rumbles joined #salt
20:37 fullstop is there any way to rename a minion?
20:38 fullstop or must it be renamed and then re-added?
20:38 iggy fullstop: vi /etc/salt/minion_id
20:38 iggy yeah, you have to rm the key and readd it after you edit the minion and restart it
20:38 fullstop ok, that's what I figured
20:38 mapu joined #salt
20:38 iggy I thought there was a manage command to do it
20:40 whytewolf iggy: nope. althought that would be a great feature request :P [esp if it could preseed the new minion key]
20:40 iggy yeah, not finding anything
20:40 beardedeagle omg yes
20:43 beardedeagle @RandyT: what is your cloud provider?
20:46 perfectsine joined #salt
20:46 aron_kexp_ joined #salt
20:47 nZac joined #salt
20:52 jaybocc2 joined #salt
20:53 morissette joined #salt
20:55 ktosiek joined #salt
20:58 calvinh joined #salt
20:58 ajw0100 joined #salt
21:01 jaybocc2 joined #salt
21:04 bhosmer joined #salt
21:04 UtahDave joined #salt
21:09 stanchan joined #salt
21:10 amcorreia joined #salt
21:10 stanchan joined #salt
21:12 ageorgop joined #salt
21:14 Rumbles joined #salt
21:16 chadhs joined #salt
21:18 fullstop would it be ill-advised to use salt to create and format disk partitions?
21:18 morissette joined #salt
21:20 morissette joined #salt
21:22 frew I run my highstate and then see: "Total run time: 58330.108 s"
21:22 frew I am positive that is wrong, as it did not run for 16 hours
21:22 frew is it actually something like... I dunno it's not milliseconds
21:22 zmalone Time zone issue?
21:23 frew hm
21:23 whytewolf fullstop: not ill advised. just tricky. I actually do it from time to time for my openstack installs
21:23 frew well we *do* change the timezone with a state
21:23 frew maybe that's causing this
21:23 baweaver joined #salt
21:23 frew if that's the case I think it's a bug in salt
21:23 frew (should measure time delta against utc at least)
21:24 fullstop or monotonic time
21:24 frew right
21:24 frew that seems liek the real answer but maybe that's not an option on windows or something
21:27 dondestantman joined #salt
21:27 dondestantman Whats up everyone?
21:27 dondestantman How is everybody?
21:27 sgargan joined #salt
21:27 dondestantman Anyone been streaming any ant-man?
21:28 dondestantman I sure would like to know where I could stream some ant-man.
21:28 bhosmer joined #salt
21:28 whytewolf ... so not the right channel for that
21:28 terratoma dondestantman: check #noisebridge
21:28 dondestantman AbyssOne WHAT FIOO MNK FO LIFE!
21:29 mpanetta Oi
21:29 mpanetta Nutter
21:29 dondestantman I got banned from minichan
21:29 dondestantman How can I change that?
21:29 cpowell I heat they ahve some ant-man out califoriway
21:29 dondestantman I heard that too cpowell
21:31 dondestantman So no one herre cares about ant-man?
21:31 whytewolf not about stealing it.
21:32 dondestantman Just watching it.
21:32 dondestantman A little.
21:32 whytewolf itunes, google play, amazon. I'm sure they have it
21:32 dondestantman I have amazon prime.
21:32 dondestantman I can not stream it with out perds.
21:33 dondestantman If you did not have perds, b ut you HAD amazon prime, where would you stream ant-man?
21:33 sdm24 canisee.it? to check where to get it
21:33 sdm24 or maybe its canistream.it
21:34 dondestantman A wild sdm24 appears.
21:34 * viq is ~90% of the way to saltifying https://gist.github.com/molobrakos/ff1620ce6031c99f120b
21:34 calvinh joined #salt
21:34 whytewolf very nice viq
21:34 * dondestantman slaps AbyssOne around a bit with a large fishbot
21:35 whytewolf ./ignore dondestantman
21:36 UtahDave dondestantman: could you discuss movies in another channel, please?  Thanks!   This channel is for discussing SaltStack and related technologies
21:36 viq https://pbot.rmdir.de/lXPOnphieDQl5Eg1rZlZ1g
21:37 * robawt highfives UtahDave
21:37 UtahDave hey, robawt!
21:37 UtahDave are you going to SCALE?
21:37 robawt sure am!  Are they sending you West?
21:38 UtahDave Yep! I'll be there first thing Thursday morning
21:38 viq whytewolf: ^^ and some template files. Most satisfied with the locally generated gpg key and then the fingerprint reused ;)
21:38 whytewolf viq: that is nice. love seeing stuff like this actually come together.
21:39 dondestantman UtahDave roger wilco that ten four good buddy.
21:40 UtahDave thanks, dondestantman. I appreciate it.
21:40 viq also playing with keeping some of the variables in gpg encrytped pillars ;)
21:40 UtahDave robawt: let's make sure to meet up.
21:40 UtahDave viq, are you going to configmgmcamp again?
21:41 sdm24 is there a way for Salt to tell if a pkg (using apt on ubuntu) requires a reboot?
21:41 viq UtahDave: depends whether work will send me, can't afford this trip on my own this month. December was... interesting.
21:41 robawt UtahDave: you got it.
21:41 dondestantman How can I code a stack that will get me unbanned from ##minichat?
21:41 UtahDave viq, ah ok.  I'll be there. Let me know if you end up going
21:42 dondestantman Excuse me, ##minichan
21:42 viq sdm24: I was playing with the idea. There is something called update-notifier-common, or something similiar, and it has some hooks for common things requiring reboot, you could try and make salt watch for those
21:42 UtahDave dondestantman: usually you just need wait and don't do whatever got you banned
21:42 sdm24 viq: cool, thanks. I'll google around. my coworker was asking so im not to invested in it haha
21:42 viq UtahDave: ACK, will do :)
21:44 viq sdm24: my idea was a custom grain that would be watching for the things that package sets. It's quite easy to watch for it using monitoring systems ;)
21:44 sdm24 viq: yeah but thats still more complicated then a require_reboot: False flag I was hoping for haha
21:44 viq sdm24: indeed
21:45 dondestantman Oh so the ban period is a period. Not forever.
21:45 netcho_ joined #salt
21:46 rem5 joined #salt
21:48 yomilk joined #salt
21:49 XenophonF hey UtahDave, does Salt still need m2crypto?
21:50 tmclaugh[work] joined #salt
21:50 XenophonF also i see references to iocage in the windows package building scripts but not in setup.py or whatever
21:50 XenophonF is that right?
21:50 blckbit10 joined #salt
21:52 drawsmcgraw left #salt
21:52 nZac joined #salt
21:56 heathn I am getting 'Connection reset by peer' when trying 'sudo salt-cloud -l debug --list-locations linode'. Linode is a provider that I setup. I have my api key inside the provider file.
21:58 ageorgop joined #salt
22:00 nZac joined #salt
22:02 brianfeister joined #salt
22:02 UtahDave XenophonF: I believe 2015.8 branch doesn't need m2crypto anymore
22:02 UtahDave heathn: Linode has been dealing with a really bad ddos attack
22:03 ekristen_ joined #salt
22:03 ajw0100_ joined #salt
22:04 Edgan_ joined #salt
22:04 shawnbutts_ joined #salt
22:04 tawm04 joined #salt
22:04 EvaSDK joined #salt
22:04 EvaSDK joined #salt
22:04 heathn I know aout that, just fixed it, was a missing dependency on linode-python
22:04 adelcast joined #salt
22:05 colegatron_ joined #salt
22:05 wangofett joined #salt
22:05 UtahDave heathn: ah, good catch
22:05 Edgan_ joined #salt
22:05 samed joined #salt
22:05 samed joined #salt
22:05 cswang_ joined #salt
22:05 heathn Indeed, RTFM helps ;)
22:05 heathn Thanks.
22:06 cswang joined #salt
22:06 copelco joined #salt
22:06 Laogeodritt joined #salt
22:07 geekatcmu Well, linode is dealing with a *lot* of things.
22:07 dyasny joined #salt
22:08 Nazca joined #salt
22:09 gchao joined #salt
22:10 berto- joined #salt
22:10 dondestantman ##minichan
22:11 keimlink joined #salt
22:14 scarcry joined #salt
22:15 otter768 joined #salt
22:17 feliks joined #salt
22:18 ryau__ joined #salt
22:18 _ikke_ joined #salt
22:18 virusuy joined #salt
22:19 mfournier joined #salt
22:19 bemehow joined #salt
22:20 skarn joined #salt
22:20 keimlink joined #salt
22:21 perfectsine joined #salt
22:22 antpa joined #salt
22:23 jcristau joined #salt
22:25 jaybocc2 joined #salt
22:27 kevinqui1nyo shot in the dark here, anyone know of a better module for gitlab? https://github.com/cznewt/salt-state-gitlab I found, but it looks like the upstream gitlab api has some regressions that make it not work any longer
22:30 frew so is setting pillar data in the commandline only something you can do with salt.highstate?
22:32 beardedeagle you mean you want to manually run a command with pillar data?
22:32 whytewolf frew: no. pillar data should be settable from most commandline stuff. however a lot of pillar data doesn't make sense for other commands.
22:32 beardedeagle like this: salt '*tldweb1*' state.sls containers.update-rnvapi 'pillar={image: "reg-cn-document-rest-api", tag: "2.0.6-SNAPSHOT.b177", env: "test", volume: "/opt/registrar/certs:/certs:ro, name: "rnv-api"}'
22:33 beardedeagle @frew: that should work as an example
22:33 frew trying it with salt pillar.get
22:33 jaybocc2 joined #salt
22:33 frew to see how changing pillar data could affect other pillar data
22:33 frew salt pillar.get python pillar="{'roles':['selenium', 'www']}"
22:33 rem5 joined #salt
22:33 frew that's well formed right?
22:36 frew well, I'll just use it with state.sls
22:36 frew but I'd rather see the fully built pillarinfo
22:36 whytewolf pillar.items
22:37 sgargan joined #salt
22:37 whytewolf your pillar.get doens't make a lot of sense. you are getting the python pillar but setting a roles pillar
22:37 whytewolf also pillar.get works off of a cahce.
22:37 whytewolf cache
22:37 beardedeagle one way would be to structure a command like what I wrote while launching salt-master -l debug
22:37 beardedeagle you can see the pillar data passed
22:38 beardedeagle and how it is passed
22:42 beardedeagle honestly while you are learning salt you should salt-master -l debug period. #personalexperiance
22:43 frew whytewolf: the output from that is just gigantic is all, so I Was hoping to filter it
22:43 frew I can always use json output and output to jq though :)
22:44 winsalt you can specify -l debug on the command line, so only when you want to see it
22:45 beardedeagle I just like knowing what is going on at all times
22:45 beardedeagle lol
22:45 frew huh
22:46 frew so we're importing some pillar data into our pillar topfile so that we can include other pillar data based on pillar calculated roles
22:46 frew and either that's not working, or the hash merging isn't
22:46 * frew comments out import code to verify the merging is working as intended
22:46 beardedeagle would either need a gist to see, or -l debug would be your friend.
22:46 zenlot joined #salt
22:47 frew ok merging is working, that's good
22:47 frew I just think that the pillar=... is applying too late maybe?
22:47 frew anyway will run with -l debug
22:49 frew ok
22:49 frew yeah I guessed right
22:50 frew setting pillar data at the CLI does not affect the other pillar data
22:50 frew so it happens too late
22:50 frew oh well
22:55 rem5 joined #salt
22:55 fas3r joined #salt
22:56 fas3r Hello
22:58 fas3r I need to use salt to do some ajustment in some PAM file (ubuntu / debian  in /etc/pam.d ), should I use cmd.run and sed ? or there is a better way to achieve that ? ( I need to add some more options for some modules)
22:58 baweaver joined #salt
22:58 almech joined #salt
22:58 sgargan joined #salt
23:01 sgargan joined #salt
23:02 UtahDave fas3r: I often find it easier to use  file.managed for that type of thing, unless you're expecting other systems to update that file and you want to make sure to only modify certain portions of it.
23:04 ryau joined #salt
23:05 fas3r UtahDave: yes that's the thing, if I can find the proper way I would reuse it for other modifications in the future
23:06 UtahDave file.replace will do what you want.  but if you can manage the whole file with file.managed, you'll find that much simpler.
23:08 fas3r yes I use it for static conf file such as nginx or other apps.
23:08 fas3r oki I will look at file.replace
23:08 fas3r UtahDave: thanks for the help
23:09 UtahDave anytime, fas3r
23:09 fas3r hahah don't say that I might comeback to ask for help on that matter :D :D
23:19 ChrisMorgan joined #salt
23:21 s_kunk joined #salt
23:25 ChrisMorgan I’m just starting using Salt, in a place where it was set up by someone before me. User configuration is done through it, but I’m having trouble getting it working with the instructions left. `salt '*' state.sls users` complains of `No matching sls found for 'users' in env 'base'`, but pillar.items shows a whole users tree; I thought that that was all that was required. Have I misunderstood things? How can
23:25 ChrisMorgan I get it to work?
23:27 whytewolf ChrisMorgan: users would be a state file. do you know how the file_roots is setup? [gitfs, /srv/salt, other]
23:27 rem5 joined #salt
23:28 nZac joined #salt
23:31 ChrisMorgan whytewolf: conf/master.conf has a file_roots {"base": ["/srv/salt", …, "/srv/users-formula", …]}
23:31 ChrisMorgan Ah, I am suspecting something… git submodules not checked out.
23:32 ChrisMorgan Great, that did it, thanks for the push in the right direction ☺
23:33 whytewolf np
23:33 stanchan joined #salt
23:35 PeterO joined #salt
23:38 ageorgop joined #salt
23:39 bhosmer joined #salt
23:41 onlyanegg joined #salt
23:41 jhauser joined #salt
23:44 yomilk joined #salt
23:46 ChrisMorgan left #salt
23:51 brianfeister joined #salt
23:55 UtahDave left #salt
23:55 yomilk joined #salt
23:57 heathn Ok, I have my salt cloud profile and salt provider, how do I spin up and provision my new box? Anyone have docs that help with this step?

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary