Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-03-22

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:04 _Cyclone_ joined #salt
00:04 XenophonF yes?
00:04 aphor Because https://gist.github.com/aphor/a3421511baccedf2c30a
00:04 XenophonF why do you ask?
00:04 djgerm1 networks wouldnt work without media access control address ;)
00:04 XenophonF oh those kidns o f macs
00:05 arif-ali joined #salt
00:05 XenophonF oh hey i didn't realize salt was in macports
00:05 XenophonF awesome
00:05 XenophonF brb
00:05 aphor I patched the Portfile for 2015.8.5 because... I'm f'n Superman wannabe.
00:06 djgerm1 awesome! i am gonna start salting my lappy!
00:06 aphor So to get the patch submitted... PITA, and the maintainer bailed.
00:07 aphor I'm here, "taking it to the streets," asking if anybody wants to be the maintainer.
00:08 aphor If there are no takers, I'll volunteer, but beware, I'm going gray, and highly opinionated.
00:08 djgerm1 In this industry we're all going grey, if we're not already bald.
00:09 aphor OK. Point taken.
00:13 fxhp joined #salt
00:23 aphor If I get maintainer, I'll also fix this https://docs.saltstack.com/en/latest/topics/tutorials/walkthrough_macosx.html
00:25 brianfeister joined #salt
00:26 akhter joined #salt
00:27 liqw joined #salt
00:28 Yoda-BZH joined #salt
00:28 Yoda-BZH joined #salt
00:28 baweaver joined #salt
00:29 djgerm1 you ARE a super hero!
00:29 djgerm1 Does anybody know if {% for foo in item1 item2 item3 %} will work?
00:29 djgerm1 or do i need to specify a salt or pillar function?
00:30 mosu_ joined #salt
00:30 hemebond djgerm1: It still needs to be a list.
00:30 hemebond Check out the jinja2 documentation website.
00:30 djgerm1 k. thanks.
00:31 djgerm1 this one I think http://jinja.pocoo.org/docs/dev/templates/#
00:32 hemebond djgerm1: http://jinja.pocoo.org/docs/dev/templates/#literals
00:32 akhter joined #salt
00:33 akhter joined #salt
00:33 ahammond djgerm1 going grey is an option. I went pink instead.
00:35 whytewolf humm the only going i did was insane
00:36 whytewolf was a short trip though
00:37 djgerm1 ahammond: oh yeah, i've bought that ticket red orange blue green pink… I told my boss at that gig that when I stopped dying my hair he knows I am interviewing elsewhere.
00:37 djgerm1 whytewolf: crisis evokes serenity right?
00:37 whytewolf like odd hair colors would stop anyone from getting hired in this industry
00:38 djgerm1 "This guy looks like a total freak… must be a rockstar guru ninja!"
00:38 whytewolf ah the peace of a burning server rack
00:39 djgerm1 or is that title ninja guru?
00:39 * whytewolf shrugs I own both <name>.guru and <name>.ninja
00:40 whytewolf just in case
00:40 ahammond "Like mushrooms and snakes, bright colors are nature's way of saying you might want to pay attention."
00:41 djgerm1 LOL I like that. When I went dark is when they shoulda paid attention… My new gig is more uh straight laced, less fun, soul killing… I wonder how rainbow hair would go over here…
00:42 * whytewolf sighs
00:42 whytewolf all this talk makes me wish i still worked in an office with others instead of at home
00:42 djgerm1 I work remote :)
00:43 whytewolf we also don't use cams [stupid policies]
00:43 whytewolf they didn't even know what i looked like for a year
00:44 akhter joined #salt
00:48 brianfeister joined #salt
00:49 stooj joined #salt
00:50 bhosmer joined #salt
00:53 kliquori joined #salt
00:53 akhter joined #salt
00:54 aphor anonymity is impunity
00:58 norii joined #salt
00:58 liqw joined #salt
00:58 dyasny joined #salt
00:59 rem5 joined #salt
01:02 aphor https://trac.macports.org/ticket/50941
01:03 subsignal joined #salt
01:06 anmol joined #salt
01:07 euidzero joined #salt
01:11 inire joined #salt
01:11 kliquori joined #salt
01:16 RobertChen117 joined #salt
01:16 timoguin joined #salt
01:29 SheetiS joined #salt
01:37 mavhq joined #salt
01:40 SheetiS joined #salt
01:44 XenophonF aphor: you rock
01:44 XenophonF thank you
01:44 XenophonF i'm installing it on my mac now
01:45 XenophonF djgerm1: this should work - {% for foo in ['item1', 'item2', 'item3'] %}
01:46 baweaver joined #salt
01:47 k_sze[work] joined #salt
01:49 bhosmer joined #salt
01:49 djgerm1 oh nice. I put parens around them. It's working! I had to put the for loop outside the ID, and then use the variable to populate the ID (cause of duplicate IDs)
01:50 ninjada joined #salt
01:53 rem5 joined #salt
01:55 mavhq joined #salt
01:57 Glasswalker joined #salt
02:08 lorengordon joined #salt
02:09 iggy joined #salt
02:11 mapu joined #salt
02:12 saltstackbot joined #salt
02:14 lorengordon joined #salt
02:14 iggy !salt states.file.managed
02:14 saltstackbot http://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.managed
02:18 teatime niice
02:18 iceyao joined #salt
02:18 euidzero joined #salt
02:19 favadi joined #salt
02:29 racooper joined #salt
02:35 subsignal joined #salt
02:37 catpiggest joined #salt
02:39 nZac joined #salt
02:40 evle joined #salt
02:43 bhosmer joined #salt
02:46 iceyao joined #salt
02:51 mapu joined #salt
03:00 kshlm joined #salt
03:05 jfindlay aphor: also, with the release of 2016.3.0, we'll have official mac packages
03:06 jfindlay I'm not trying to discourage a macports package, just letting you know :)
03:06 iceyao joined #salt
03:07 aphor jfindlay: that's good.
03:09 aphor Since I'm applying for maintainer, I'd be a release manager for people using SaltStack via MacPorts.
03:10 aphor This would give me the ability to cherry-pick stuff to include as patches for MacPorts users.
03:13 beardedeagle how would run control the timeout of a state.orch ran from a reactor?
03:13 kliquori joined #salt
03:13 beardedeagle does -t work on that?
03:15 beardedeagle *sigh* everytime I ask, I find it in the code
03:16 jaybocc2 joined #salt
03:23 akhter joined #salt
03:37 bhosmer_ joined #salt
03:40 brianfeister joined #salt
03:42 bhosmer_ joined #salt
03:44 alemeno22 joined #salt
03:47 antpa joined #salt
03:59 kliquori joined #salt
03:59 anmol joined #salt
04:00 alemeno22 joined #salt
04:12 onlyanegg joined #salt
04:26 kshlm joined #salt
04:43 RobertChen117 joined #salt
04:53 subsignal joined #salt
05:07 brianfeister joined #salt
05:12 RobertChen117 joined #salt
05:22 ramteid joined #salt
05:23 sauvin joined #salt
05:23 mowntan joined #salt
05:23 mowntan joined #salt
05:26 favadi joined #salt
05:43 rhodgin joined #salt
05:43 bhosmer_ joined #salt
05:50 jaybocc2 joined #salt
06:00 kliquori joined #salt
06:04 favadi joined #salt
06:11 keimlink joined #salt
06:14 ninjada_ joined #salt
06:16 k_sze[work] joined #salt
06:17 beardedeagle should write a regex filter for the jinja filters
06:18 hemebond beardedeagle: That's quite a common request. I think some people have created some. From memory there is some difficulty getting it out to minions, etc.
06:19 RobertChen117 joined #salt
06:19 beardedeagle Well I mean I get not wanting to maintain your own fork of an upstream dependency. Not mad, just would be super useful
06:20 hemebond Ah, when I say get it to the minions, I mean in a way for the Jinja2 module to find it.
06:20 hemebond But I haven't really looked into it so I could be wrong :-)
06:20 beardedeagle gotcha. honestly it would probably be easier to just write straight python though
06:21 hemebond Yeah, probably would be easier to write the pillar or state in a different renderer.
06:21 dariusjs joined #salt
06:22 teatime I desire a working defined, and also deep-defined
06:22 teatime although maybe you can manage both situations with pillar.get default
06:22 hemebond In Jinja?
06:22 teatime yes
06:22 hemebond For a pillar value?
06:22 teatime defined doesn't work to check if something is in pillar data, because the pillar.get is defined.
06:22 teatime yeah
06:23 hemebond Right. But as you say a pillar.get would do that, correct?
06:23 hemebond Unless the value resolves to false.
06:23 hemebond Oh, you could use "if blah in"
06:24 hemebond Perhaps.
06:24 beardedeagle {% if dict.key %} should work
06:24 beardedeagle in jinja2
06:24 rdas joined #salt
06:24 teatime pillar.get wouldn't work for 0 and "" I don't think, right
06:25 teatime beardedeagle: what if the value is false?
06:25 beardedeagle good point
06:25 beardedeagle although...might have to test that
06:25 teatime and deep-defined would let you look for a.b.c.d and not raise an exception (just return false) if a, a.b, a.b.c, or a.b.c.d is not defined
06:25 hemebond {% if salt['pillar.get']('my:pillar:var', 'doesnotexist') != 'doesnotexist' %}
06:26 teatime lol hemebond, that's almost as bad as POSIX sh idioms
06:26 hemebond :-D
06:26 teatime except worse, because it masks 'doesnotexist' as a valid value.
06:26 teatime does Jinja understand None?  I don't think so.
06:27 hemebond It does I think.
06:27 teatime I guess if instead of jinja tags, I made a module called pillar.defined, it would be easy to sync to minions
06:27 beardedeagle pretty sure it does
06:27 honestly It does.
06:27 teatime well in that case, then that works.
06:28 teatime thank you guys, this has been bugging me for a while
06:30 dariusjs joined #salt
06:34 beardedeagle has anyone tried to multi line a states.cmd? probably with something like -name: | I would imaging
06:34 beardedeagle image* even
06:35 hemebond There is a way to run multiple commands. I think it's even covered in the documentation. Something about a list of commands in reverse order. I might be thinking of something else.
06:36 beardedeagle more like a heredoc, but don't want to throw it in a script
06:36 beardedeagle because reasons
06:36 hemebond How many commands?
06:37 hemebond http://stackoverflow.com/questions/19640829/how-can-i-execute-multiple-commands-using-salt-stack
06:37 bhosmer joined #salt
06:38 beardedeagle ah names
06:38 beardedeagle yeah one of the devs told me about that earlier
06:38 beardedeagle executes each as its own state.cmd
06:39 jaybocc2 joined #salt
06:39 ninjada joined #salt
06:39 beardedeagle looks like | does work
06:39 beardedeagle or should at least
06:41 kshlm joined #salt
06:41 beardedeagle basically I need to sudo su as a service account and create some certs to use with salt-cloud. I generate this every syndic I spin up because I want it to be dynamic as possible. So I do it in a heredoc
06:42 beardedeagle sudo -u*, I swear I can type
06:45 kliquori joined #salt
06:46 dariusjs joined #salt
06:50 evaryont joined #salt
06:55 subsignal joined #salt
07:02 mavhq joined #salt
07:08 fooma joined #salt
07:09 Rumbles joined #salt
07:12 teatime heh, yes, confirmed; pillar.get does everything I want.
07:12 teatime in Jinja2 you have to say 'is none' / 'is not none' instead of None, but I'll get over that.
07:15 teatime or you can say == None (but the jinja docs lightly recommend against it.)
07:15 teatime lol, which small irritation do I prefer... :)
07:16 slav0nic joined #salt
07:22 felskrone joined #salt
07:22 jaybocc2 joined #salt
07:25 dariusjs joined #salt
07:25 Jimlad joined #salt
07:29 dariusjs_ joined #salt
07:32 teatime these are nice, also:
07:32 teatime {%- set pget = salt['pillar.get'] -%}
07:32 teatime {%- set dget = salt['defaults.get'] -%}
07:32 teatime {%- set mget = salt['mine.get'] -%}
07:32 jaybocc2 joined #salt
07:32 djgerm1 that's brilliant
07:32 teatime found on stackexchange
07:34 teatime threw them into a top-level util.sls and now can do {% from 'util.sls' import pget, dget, mget %} where I want to use them
07:34 dariusjs joined #salt
07:39 beardedeagle @teatime: link the stackexchange?
07:40 teatime there wasn't anything else there, but I'll try to find it again
07:41 RobertChen117 joined #salt
07:43 dariusjs joined #salt
07:44 teatime beardedeagle: http://stackoverflow.com/questions/30697634/should-i-always-use-pillar-get-instead-of-pillarfoo
07:44 LostSoul_ Hi
07:44 LostSoul_ So I've got question when I add line in top.sls
07:44 elsmo joined #salt
07:44 LostSoul_ - some-state
07:45 LostSoul_ Then I create folder some-state/init.sls and add in it include : - other-state
07:45 beardedeagle thanks @teatime. that is pretty sweet
07:45 LostSoul_ And create file other-state.sls with content
07:45 LostSoul_ Did I do it in proper way?
07:45 LostSoul_ As salt stopped to include them
07:46 teatime no, top.sls is special.
07:46 Ron1 joined #salt
07:46 teatime using the same syntax in other, non-top.sls files to include things doesn't work.
07:47 Rumbles joined #salt
07:47 LostSoul_ Hmm..
07:47 Ron1 HI All, I have a question
07:47 Ron1 In this url https://docs.saltstack.com/en/getstarted/config/functions.html
07:47 teatime oh, you said "include:\n  - other-stata" ?
07:47 yuhlw_ babilen, hemebond: thanks for the help provided yesterday about the "salt -I" (i).
07:47 LostSoul_ teatime: yeah
07:47 Ron1 in the ADD a user example,
07:48 teatime LostSoul_: yeah thats hould work.
07:48 KermitTheFragger joined #salt
07:49 LostSoul_ teatime: In top.sls should I write - cron or - cron/init.sls?
07:49 rhodgin joined #salt
07:49 beardedeagle anyone ever have an event never return? salt-master keeps querying for return data and getting none. *well* over the timeout limit for it as well.
07:49 LostSoul_ lol I mean init not sls *
07:49 hemebond LostSoul_: It works just like Python modules.
07:49 hemebond So you just use cron
07:49 teatime 'cron' should work if you have cron/init.sls
07:50 LostSoul_ hemebond: I did and this module disappeared from salting :(
07:51 hemebond Something else going wrong.
07:51 beardedeagle non stop [DEBUG   ] Sending event - data = {'fun_args': ['20160322002255446438'], 'jid': '20160322005110828417', 'return': {'tgt_type': 'glob', 'jid': '20160322002255446438', 'tgt': 'testhook022*', 'pid': 4121, 'ret': '', 'to': 90, 'user': 'root', 'arg': ['cppv3.syndic',...
07:55 dkrae joined #salt
07:56 Ron1 joined #salt
07:57 Ron1 Sorry I disconnected, if anyone has answered me
07:57 hemebond Ron1: I don't see your question.
07:58 hemebond You said you had a question, posted a link, gave the heading, then disconnected.
08:00 Ron1 joined #salt
08:00 LostSoul_ hemebond: No idea :(
08:01 hemebond LostSoul_: Tried to build a smaller test?
08:01 LostSoul_ I not changed much, just move state from nagios-dir and created cron-dir with init file
08:02 LostSoul_ as before I used nagios/cron, now I'm using cron and in cron folder I have init.sls with include cron file
08:02 hemebond Can't help without the files.
08:02 Ron1 joined #salt
08:06 beardedeagle Gotta gist your stuff LostSoul_
08:06 beardedeagle well, the non sensitive stuff
08:08 jaybocc2 joined #salt
08:11 LostSoul_ Sure
08:11 LostSoul_ It's very simple as I just started my adventure with salt :)
08:12 linjan_ joined #salt
08:12 LostSoul_ I know there are recipies etc that are ready to go but, I want to learn my way and also I've got system that very "created" by various admins in the past so .. :D
08:12 LostSoul_ Default doesn't do much here, ok I will upload to paste - give me minute
08:14 LostSoul_ It worked till I move cron outside the nagios folder: http://paste.debian.net/hidden/46187835/
08:14 freeaks joined #salt
08:15 hemebond Your include is wrong.
08:15 hemebond Use either - cron.cron or - .cron
08:16 LostSoul_ Ou..
08:16 mavhq joined #salt
08:16 LostSoul_ I bet I'm not using this saltstack doc in proper way or I'm just lost in it
08:16 LostSoul_ Thanks hemebond, you save me again :)
08:16 hemebond np
08:17 LostSoul_ I would buy you a beer/coffee but I guess it's Internet - thanks man, hope not to spam you soon :)
08:17 dkrae joined #salt
08:17 hemebond No worries, happy to help.
08:17 LostSoul_ Btw, this . indicates as in linux "this folder" ?
08:17 hemebond Correct.
08:17 hemebond You can also use .. to go up a level.
08:18 hemebond I think these shortcuts are recent additions though.
08:18 hemebond So give them all a go.
08:18 Ron1 joined #salt
08:20 LostSoul_ I see, I saw in the in net that there was just include with no "."
08:21 LostSoul_ But I guess it was for state in main folder :)
08:21 hemebond Yes, but that only works for items at the top-level, i.e., same directory as top.sls.
08:21 hemebond That's why I also included cron.cron
08:21 hemebond That means, from the top, enter the "cron" directory and look for the "cron.sls"
08:22 beardedeagle Didn't we have a similar conversation about states with init vs without lol
08:22 rogst joined #salt
08:22 LostSoul_ beardedeagle: With me? I guess not :P
08:23 LostSoul_ Sorry, I'm idling here but reading stuff in irssi with ~40 open channels is not that easy to follow up :)
08:23 beardedeagle meh no big deal, I just remember discussing the same thing last night with someone
08:25 kbaikov joined #salt
08:26 bhosmer joined #salt
08:28 Ron1 Is salt support (solaris, linux 22, linux 30, mac)?
08:28 LostSoul_ Thanks guys
08:28 LostSoul_ I guess salt IRC is the most supportive I met :P
08:28 LostSoul_ Ok ansible was also very good and I got help very fast
08:29 hemebond Ron1: What do you mean?
08:29 Ron1 If I want to remote these servers
08:29 Ron1 or install minion on them
08:30 hemebond I don't know what "linux 22" or "linux 30" is.
08:30 Ron1 very old computer
08:30 Ron1 system
08:30 honestly Ron1: if you can get python 2.7.6 running
08:31 honestly which is hard on solaris
08:31 Ron1 yes
08:31 honestly you'll have to do interesting things like building a modern version of openssl
08:31 hemebond There are pages for several operating systems with installation instructions.
08:31 hemebond https://docs.saltstack.com/en/latest/topics/installation/index.html#platform-specific-installation-instructions
08:32 Ron1 Is salt use Database?
08:32 hemebond No, no database.
08:32 hemebond (unless you want to)
08:32 Ron1 thank you hemebond and honestly
08:32 Ron1 Uf I want
08:32 Ron1 if I want?
08:32 babilen What do you want?
08:32 Ron1 Database
08:32 hemebond Yeah, you can use a database to collect the results of updates, or to store Pillar data.
08:33 babilen You can also configure databases with salt ..
08:33 babilen Depends on what you want to achieve
08:34 josuebrunel joined #salt
08:34 Ron1 puppet works with Database, why?
08:35 Ron1 I want to understand why salt does not use database in default
08:35 hemebond I think PuppetDB is optional... kind of.
08:35 hemebond PuppetDB is used to store information about the clients.
08:35 hemebond Salt just stores that info in its own files.
08:36 Ron1 Which files?
08:36 kliquori joined #salt
08:36 AndreasLutro Ron1: because salt is configurable and you can do whatever you want
08:36 babilen Salt stored data about the minion locally on the master, just not in a database
08:36 Ron1 Can I change it to use database to store data?
08:37 babilen Ron1: /var/cache/salt and /etc/salt might be of interest to you.
08:37 babilen Ron1: Why would you want to?
08:40 hemebond I don't think you can store minion data (like grains) in a database.
08:40 hemebond Though I did find https://docs.saltstack.com/en/develop/topics/sdb/index.html
08:40 hemebond But I don't understand it.
08:41 babilen hemebond: It's like external pillars, but not minion specific
08:42 Ron1 Thank you all
08:42 Ron1 I will read the document
08:42 babilen One use for it is the integration of Hashicorp's vault
08:42 hemebond babilen: That's the bit I don't understand. So it's another store?
08:42 Ron1 Can salt support mac computer?
08:42 babilen It does, yeah
08:42 hemebond e.g., pillar:// salt:// grains:// sdb://
08:42 babilen yeah
08:42 keimlink joined #salt
08:43 hemebond I don't see any info on the actual database configuration.
08:43 babilen It's not a particularly often used feature these days, but vault integration might change that
08:43 hemebond Oooh, Salt Package Manager.
08:43 hemebond Oh, not that interesting.
08:43 Ron1 babilen , do you refer to me in the mac question? when you wrote yes?
08:43 lero joined #salt
08:43 hemebond (the SPM that is)
08:44 hemebond Ron1: Yes, Salt is supported on OSX.
08:45 babilen hemebond: https://github.com/saltstack/salt/blob/develop/salt/sdb/vault.py
08:45 fgimian joined #salt
08:46 babilen That might shed some light on the context in which sdb is being used
08:46 Ron1 thank you babilen and hemebond
08:46 hemebond Oh I see.
08:46 punkoivan joined #salt
08:46 hemebond Ron1: No problem
08:47 punkoivan joined #salt
08:48 punkoivan joined #salt
08:50 marnom https://github.com/nmadhok/salt/issues/8 <-- certificate verification disabled in code? :( makes me a bit sad to see this
08:50 saltstackbot [#8]title: InsecurePlatformWarning warning when using vmware.py module | Hello,...
08:54 dariusjs_ joined #salt
08:56 kshlm joined #salt
09:00 dariusjs_ joined #salt
09:01 rhodgin joined #salt
09:02 subsignal joined #salt
09:03 ronnix joined #salt
09:06 Rumbles joined #salt
09:12 beardedeagle https://www.hashicorp.com/blog/using-vault-with-consul-template.html
09:21 Itsme_ joined #salt
09:24 VSpike_ left #salt
09:25 elsmo joined #salt
09:25 jhauser joined #salt
09:26 GreatSnoopy joined #salt
09:29 chiui joined #salt
09:30 mavhq joined #salt
09:32 antpa joined #salt
09:34 fracklen joined #salt
09:35 sfxandy joined #salt
09:38 Cidan joined #salt
09:43 kawa2014 joined #salt
09:44 kliquori joined #salt
09:45 akhter joined #salt
09:55 keimlink joined #salt
09:57 ronnix joined #salt
09:58 sjorge joined #salt
09:58 sjorge joined #salt
09:59 favadi joined #salt
10:03 chiui left #salt
10:04 ninjada joined #salt
10:06 LostSoul_ Hi
10:07 hemebond hi
10:08 RobertChen117 joined #salt
10:17 XenophonF hi
10:20 jaybocc2 joined #salt
10:20 hemebond Do the Salt devs prefer pull requests from a forked develop branch or is it okay to send a pull request from an issue branch in my fork?
10:21 ronnix joined #salt
10:23 XenophonF the issue branch should be fine
10:24 dmaiocchi joined #salt
10:24 XenophonF https://docs.saltstack.com/en/latest/topics/development/contributing.html
10:25 hemebond Thanks. I'm reading that again now.  Need to fix my commit message.
10:26 ninjada joined #salt
10:28 hemebond I think I'll do more testing.
10:28 hemebond Pull requests make me nervous.
10:29 illern joined #salt
10:32 bhosmer joined #salt
10:33 kshlm joined #salt
10:41 dendazen joined #salt
10:46 kshlm joined #salt
10:47 impi joined #salt
10:50 RobertChen117 joined #salt
10:51 Amardeep joined #salt
10:51 Amardeep Hi
10:51 hemebond "The minion failed to bootstrap." Hopefully that's not because of my code.
10:52 Amardeep "The function \"state.sls\" is running as PID 1134 and was started at 2016, Mar 17 13:14:14.758161 with jid 20160317131414758161"
10:52 Amardeep I see mulitple event is being fired for same state exection
10:53 Amardeep What could be issue here ?
10:54 babilen Amardeep: You might have multiple salt-minions running
10:54 bluenemo joined #salt
10:55 Amardeep I have mutiple minion but command specfically targeted for the minion1
10:56 babilen No, I meant salt-minion instances on that particular minion
10:56 babilen (as in started multiple times/running in parallel)
10:58 Amardeep I have only one salt-mionion instance there
10:59 Amardeep And above issue does not come if have relatively less number of  masters-minions
11:00 Amardeep As i have syndicated topology having more than 32 masters and minions
11:04 amcorreia joined #salt
11:04 subsignal joined #salt
11:05 Amardeep In master log I can see there are two events during execution of state
11:06 hemebond 32 masters????
11:07 Amardeep 8 master and 24 minions
11:08 Amardeep each master has 3 minions
11:09 jaybocc2 joined #salt
11:10 ronnix joined #salt
11:15 fir3wall joined #salt
11:15 mavhq joined #salt
11:16 fir3wall Hello if I including include on top of my state is that will be always executed first in that state ? or not ? Can I do require - some other state instead to make sure that this will be executed first?
11:23 kshlm joined #salt
11:23 punkoivan joined #salt
11:24 LondonAppDev joined #salt
11:24 punkoivan joined #salt
11:26 bhosmer joined #salt
11:32 _Cyclone_ joined #salt
11:34 VSpike Finding this new trick of printing "Exception ValueError: 'I/O operation on closed file' in <bound method SyncWrapper.__del__ of <salt.utils.async.SyncWrapper object at 0x7f541e338450>> ignored" a zillion times if you forget to sudo when calling salt rather annoying :)
11:42 iceyao joined #salt
11:45 kliquori joined #salt
11:51 ninjada joined #salt
11:53 kliquori joined #salt
11:54 XenophonF heh
11:54 rem5 joined #salt
11:55 ramteid joined #salt
11:56 XenophonF fir3wall: i don't remember the precise semantics of include
11:56 XenophonF but you can (and probably should) use require/require_in/etc. for included states
11:57 XenophonF i personally don't use it any more
11:57 babilen fir3wall: You can require SLS and I would stronglyu recommend to be explicit and specific with requirements as salt *will* reorder states
11:57 babilen XenophonF: What is it you don't use?
11:57 XenophonF include
11:57 XenophonF i rather just compose SLSes
11:57 babilen Right .. how do you require states defined in a different SLS ?
11:58 XenophonF like i have amavisd, clamav, and clamav.amavisd SLSes
11:58 XenophonF that third one is the only one that contains states/requsites gluing the two other SLSes together
11:58 XenophonF that way i can use amavisd or clamav independent of one another
11:59 scott_w joined #salt
11:59 XenophonF i used to have a postfix.client and a postfix.mail_relay state, where .mail_relay included and extended client
12:00 XenophonF you know, OO-like
12:00 XenophonF but i realized that i could generalize them into a single SLS, driven by different configurations in pillar
12:00 XenophonF which i was already doing anyway
12:01 XenophonF and which ended up being much simpler and easier to understand
12:01 XenophonF DUNNO
12:01 XenophonF maybe there's a use case for include, but i tend to avoid it
12:04 babilen I'm still not exactly sure how you compose them?
12:10 quasiben joined #salt
12:11 dariusjs_ joined #salt
12:18 insomniaSalt joined #salt
12:23 XenophonF i put all of the states that could potentially be shared between two top-level SLSes into their own SLS
12:23 XenophonF rather than using include/extend
12:24 antpa joined #salt
12:25 west575 joined #salt
12:26 babilen And then? What does the "combined" state look like?
12:26 babilen Say you have a state that requires specific users and you use a "users" SLS (e.g. from users-formula) -- How would a "combined" SLS look like?
12:28 _Cyclone_ joined #salt
12:30 XenophonF if i had a state that required users, i'd add it after the users SLS in the top file
12:30 XenophonF and if necessary I'd add requisites in that state for the corresponding states in the users SLS
12:30 XenophonF let me give a better example
12:31 XenophonF i'm using mysql-formula together with some states that configure wordpress
12:31 bronsky_ joined #salt
12:31 XenophonF mysql-formula creates the database and the user accounts
12:31 illern joined #salt
12:32 XenophonF my wordpress SLS installs the wordpress RPM, creates/updates wp-config.php, installs templates and addons, etc.
12:32 LostSoul_ hemebond: Hi, you still around?
12:32 XenophonF when i wrote the wordpress SLS, i didn't add requisites for mysql-formula
12:32 LostSoul_ Or you babilen? :)
12:33 XenophonF i'm relying on the top file ordering to run one before the other
12:34 XenophonF but technically, the mysql-formula SLSes and my wordpress SLS are independent
12:34 XenophonF i'm explaining this poorly
12:34 XenophonF sorry
12:34 babilen LostSoul_: What did I do?
12:35 LostSoul_ http://paste.debian.net/hidden/1af83ea3/ - could you check it why I'm getting Comment: Recursive requisite found - I have not idea which one keeps which one ..
12:35 babilen no
12:35 babilen XenophonF:
12:36 LostSoul_ Ok
12:36 babilen XenophonF: So you simply rely on things running in order and assume that they worked, but do not make requisites explicit?
12:38 kliquori joined #salt
12:38 babilen LostSoul_: Your requirements are self-referential
12:39 babilen In 'splunkforwarder'
12:39 XenophonF babilen: essentially
12:39 XenophonF i only use requisites within a top-level SLS
12:39 babilen Okay
12:40 LostSoul_ babilen: But how come? service requires pkg and file but file and pkg don't require anything
12:42 XenophonF LostSoul_: it's that file.managed state
12:42 XenophonF it requires the service but it also puts a watch_in on the service
12:42 XenophonF also watch is a superset of requires
12:42 Hydrosine joined #salt
12:43 numkem joined #salt
12:43 XenophonF you can simplify things but removing the require: [ pkg: splunkforwarder, file: splunkforwarder] from the service: splunkforwarder state
12:43 XenophonF for the file.managed state(s) you probably meant to use require: [ pkg: splunkforwarder, file: splunkforwarder]
12:45 XenophonF although you probably don't need the file: splunkforwarder requisite there, just the pkg one
12:45 LostSoul_ TBH, I was trying to build my base config for splunk based on this formula: https://github.com/saltstack-formulas/splunkforwarder-formula/blob/master/splunkforwarder/forwarder/package/download.sls
12:46 LostSoul_ I also though that watch and require in this case would only hit service, so that it would need this file and pkg and then watch for changes
12:46 LostSoul_ I guess I understand it in wrong way
12:47 favadi joined #salt
12:48 DammitJim joined #salt
12:48 XenophonF watch does the same thing as require
12:48 XenophonF only it has some additional semantics
12:49 XenophonF i.e., not only "wait for this state to complete successfully" but also "do something if this state reports changes"
12:49 LostSoul_ I did as you adviced :)
12:49 LostSoul_ And still same error
12:49 akhter joined #salt
12:49 XenophonF would you post the current version?
12:50 LostSoul_ Sure
12:50 XenophonF merci
12:50 edrocks joined #salt
12:50 LostSoul_ XenophonF: LOL, nope, I'm saying thank you for your time!
12:50 LostSoul_ http://paste.debian.net/hidden/e9c400cc/
12:51 XenophonF line 30 - that specifically is what causes the recursive requisite
12:51 XenophonF change "service" to "file", which I think is your actual intent
12:52 XenophonF but you could probably remove that line entirely and only depend on the pkg state
12:53 XenophonF deploying those files don't actually depend on the file: splunkforwarder state
12:53 XenophonF i.e., the file.managed state will succeed no matter what the state of the init script
12:53 XenophonF i try to pare down dependencies to the bare minimum
12:53 XenophonF less confusing IMO
12:55 LostSoul_ Man, now I'm lost :)
12:56 LostSoul_ I mean, I though this require means that it needs service to be running and then watch_in to restart service in case
12:57 akhter joined #salt
12:57 LostSoul_ It worked
12:57 XenophonF that right there is a recursive dependency
12:57 LostSoul_ I guess I must read once more docs on those topics ..
12:57 LostSoul_ Shame on me
12:57 LostSoul_ Because I still don't see where is error in this
12:57 XenophonF you can't require a service to be running and then also have the service require that state
12:58 anmol joined #salt
12:58 XenophonF state1 points at state2, state2 points at state1 - salt's not smart enough to catch loops in the state dependency diagraph
12:58 XenophonF er digraph
12:59 TooLmaN joined #salt
12:59 gh34 joined #salt
13:00 numkem joined #salt
13:01 kliquori joined #salt
13:02 illern joined #salt
13:04 numkem joined #salt
13:04 akhter joined #salt
13:05 bronsky_ Hi everyone !
13:06 envintus joined #salt
13:06 numkem joined #salt
13:06 subsignal joined #salt
13:07 bronsky_ Quick question for the saltstack noob that I am : i want to manage LXC containers with salt-ssh but i don't understand where to put or how to use the profile file that i created :/
13:07 numkem joined #salt
13:08 Ron1 joined #salt
13:08 numkem joined #salt
13:09 Ron1 Hi, Can I define a group which contains 10 computers, and when I run salt command I wlll refer to them somehow?
13:10 keimlink joined #salt
13:11 numkem joined #salt
13:13 Ron1 Is the question clear?
13:13 Ron1 Another question, can I run job or state in parallel?
13:14 zerthimon joined #salt
13:15 averell joined #salt
13:16 babilen Ron1: https://docs.saltstack.com/en/latest/topics/targeting/ + suitable data in pillars / naming scheme / grains / nodegroups / ...
13:20 quix joined #salt
13:20 akhter joined #salt
13:20 jaybocc2 joined #salt
13:21 CeBe1 joined #salt
13:22 XenophonF joined #salt
13:23 Ron1 babilen thank you, I think you don't understand
13:24 Ron1 Do you refer to the first question or second?
13:24 babilen I refer to the first -- Sorry, thought that was obvious
13:25 antpa joined #salt
13:25 babilen A better answer relies on a more detailed question as to what you would actually like to achieve
13:25 babilen targeting and the things I mentioned really is all you need to, well, target 10 minions.
13:26 Ron1 Node groups?
13:26 Ron1 Ok I will explain
13:27 babilen I personally find nodegroups cumbersome and unnecessary, but sure ... if you don't mind their shortcomings (e.g. having to restart the master when you change them) why not?
13:27 Ron1 I need to check process in 10 computers, I wrote a script in perl
13:27 Ron1 I need to check 10 computers with process 1, and other 10 with process 2 etc
13:28 Ron1 I need the operation in parallel
13:29 mavhq joined #salt
13:29 babilen What's the difference between "process 1" and "process 2" and what is it those two groups of computers have in common?
13:29 babilen (or what differentiates the groups?)
13:30 babilen That's the bits you'd use for targeting (essentially)
13:30 Ron1 process 1 and 2 , that two different name of process that I look for in my code
13:32 bhosmer joined #salt
13:32 babilen So, I'd run the exact same state on both groups and simply pass "process 1" or "process 2" in via pillars then
13:33 impi joined #salt
13:34 akhter_1 joined #salt
13:36 jaybocc2 joined #salt
13:36 LostSoul_ Thank you guys, really appriciated :)
13:37 envintus joined #salt
13:37 LostSoul_ Mostly hemebond, babilen and you XenophonF - made my work and learning salt much, much  easier :)
13:37 Seichi joined #salt
13:38 XenophonF you're welcome, glad to help
13:38 babilen Anytime .. Happy to hear that. :)
13:38 euidzero joined #salt
13:40 akhter joined #salt
13:43 akhter_ joined #salt
13:43 mapu joined #salt
13:43 akhter_1 joined #salt
13:44 Seichi left #salt
13:46 cpowell joined #salt
13:49 mavhq joined #salt
13:50 RabidCicada joined #salt
13:52 racooper joined #salt
13:55 Ron1 So, I'd run the exact same state on both groups and simply pass "process 1" or "process 2" in via pillars then .... I don't understand
13:56 Ron1 I run job and it's take parameters, and one of the is process name
13:57 babilen Yes, and I'd make that process name minion specific via pillar data and have the state use that data (e.g. cmd.run: - name: foo_bar {{ salt['pillar.get']('foo_bar:process_name') }} or something like that)
14:00 Ron1 and then if I am using
14:00 Ron1 suppose the name is process.sls
14:01 Ron1 salt '*' state,apply process
14:01 Ron1 if I want to use again
14:01 Ron1 salt '*' state,apply process
14:02 Ron1 the second command will wait until the first will finished
14:02 Ron1 It's serial
14:02 hasues joined #salt
14:03 insomniaSalt joined #salt
14:05 jerredbell joined #salt
14:07 nZac joined #salt
14:12 andrew_v joined #salt
14:17 XenophonF Ron1: salt will run the process SLS across all of the targeted minions simultaneously (like, in batches of 25 by default, i think)
14:18 XenophonF are you checking the results of the process SLS outside of salt?
14:20 rm_jorge joined #salt
14:20 sxar joined #salt
14:23 andrew_v joined #salt
14:24 rhodgin joined #salt
14:24 Ron1 yes
14:25 Ron1 If you have another solution I will be glad to hear
14:25 Ron1 :)
14:26 mgresser joined #salt
14:27 DammitJim joined #salt
14:29 honestly wtf is this shit, pkg.installed doesn't support debs?!
14:29 honestly whoops
14:30 fir3wall anyone can give me hint howto use cmd.run only if there is no file in file system ? I know there is test -d for directories, can I do test -f /path/to/my/file and if this file exist cmd.run will never work ?
14:32 ronp_usa joined #salt
14:32 fir3wall yeah its working test -f thanks
14:37 yuhlw_ I got in ../log/salt/master "[CRITICAL][15378] Specified ext_pillar interface test_key is unavailable".  Yes, I wrote an ext_pillar to do some test. For some reason, I was forced to provide arguments to my ext_pillar. But now, the master tells met that I have not an interface specified.
14:38 keltim joined #salt
14:38 berserk joined #salt
14:39 XenophonF Ron1: why can't you do everyting from the one SLS?
14:39 zmalone joined #salt
14:41 SheetiS joined #salt
14:44 keisetsu joined #salt
14:45 cyborg-one joined #salt
14:45 mgresser joined #salt
14:48 berserk joined #salt
14:48 punkoivan Is someone use MacOs?
14:49 acastonguay joined #salt
14:51 Muchoz joined #salt
14:51 illern joined #salt
14:53 XenophonF I do
14:53 dfinn joined #salt
14:56 grumm_servire joined #salt
14:57 aphor punkoivan: me too
14:58 AndreasLutro never heard of it
14:59 acastonguay So installing the minion requires a number of packages that may not be present on a target device. Is it reasonable to install these in some self-contained way, such as python venv, to avoid breaking other system services?
15:00 punkoivan I newbie to Mac (only ssh, not my Mac) and I nedd to up Debian guest and provision it with Salt.
15:01 punkoivan So, error when I try to sync folder - there is no guest adds.
15:01 punkoivan when I try to install it I have error "Unable to determine correct library path."
15:02 punkoivan what the way to provision pure Debian with vagrant and salt?
15:03 sarlalian joined #salt
15:07 hasues left #salt
15:07 ninjada joined #salt
15:08 subsignal joined #salt
15:09 Ron1 can I install nagios agent via salt?
15:09 aphor acastonguay: yes, but you need to think about things outside of Python, like linker deps.
15:10 aphor punkoivan: do you have salt running on your mac?
15:10 mavhq joined #salt
15:11 punkoivan No.
15:11 punkoivan I want to use provision system in vagrantfile, with master and ,minions on guest.
15:11 aphor punkoivan: MacPorts just upgraded their salt port.
15:12 aphor install macports, and then "sudo port install salt"
15:13 mavhq joined #salt
15:13 punkoivan There is no way to use vagrant and salt without salt on host?
15:13 Ron1 someone install nagios via salt?
15:14 khaije1 punkoivan: it's possible to have both master and minions running as VM guests
15:15 aphor punkoivan: if you want to use masterless salt on a debian host, or run the salt master on the debian host, why did you mention MacOS?
15:16 aphor what do you think you want salt to do?
15:16 punkoivan debian is guest. Mac is host. I need to sync folders /salt/roots/ on host with /srv/salt on guest, yeah?
15:17 aphor why?
15:17 bronsky joined #salt
15:18 rylnd joined #salt
15:18 punkoivan Because I can put states on host and using them on guest.
15:18 punkoivan https://www.vagrantup.com/docs/provisioning/salt.html
15:18 punkoivan I use this guide
15:18 aphor punkoivan: don't worry about syncing files.
15:19 punkoivan I don't worry, but Vbox worried, since Debian haven't vbox adds :)
15:20 aphor So far there aren't any questions about salt
15:20 bhosmer joined #salt
15:21 aphor Why do you want to provision a masterless vagrant salt minion?
15:21 evle1 joined #salt
15:22 aphor Maybe we should take another step back and ask why you want a salt minion?
15:22 aphor There are lots of how-to guides on the Internet. Perhaps you chose the wrong one to start?
15:23 Brew joined #salt
15:23 punkoivan the best way is set install_master = true in vagrantfile?
15:23 aphor it depends
15:23 punkoivan aphor, may be is wrong, I think that how-to at official vagrant site is ok
15:23 punkoivan I need to deploy cassandra on guest
15:24 aphor The nice folks at Vagrant may have different needs than you do, so their advice may be a bad fit.
15:24 punkoivan There is final task
15:25 mavhq joined #salt
15:25 acastonguay aphor; I’m a bit fuzzy on what the dependencies really consist of. By your answer suspecting compiled stuff somewhere on the system?
15:25 aphor if you run masterless, then *YOU* need to manually copy all of the states into the /srv filesystem, or wherever your file_roots config option otherwise specify.
15:27 aphor acastonguay: like system packages maybe zmq or libcrypto?
15:28 aphor acastonguay: for isolation, maybe LXC/Docker/FBSDJails?
15:29 punkoivan aphor, yes, I understand and using rsync now for sync folders. I've my sls on host system, which rsync with /srv on guest. may be it's dirty hack, but should work...
15:29 aphor acastonguay: otherwise you can pip install salt in a virtualenv
15:29 aphor punkoivan: do you need this to be repeatable?
15:30 punkoivan aphor, I think yes. I'll try different ways and choose one.
15:30 berserk joined #salt
15:31 aphor punkoivan: I can't understand why you think you need salt.
15:31 punkoivan I want to anyone can pick my vagrantfile, sls and up virtual Debian with cassandra, deploying with salt.
15:32 punkoivan aphor, because i want to use pillar for keyspace option
15:32 punkoivan s/option/setup
15:33 aphor punkoivan: vagrant doesn't supply a way to include your /sls states or pillars.
15:34 aphor punkoivan: maybe you should start with running a salt master on your mac, and then once you have a working cassandra minion from state.highstate, you can bundle up your states and pillars and try masterless?
15:35 babilen https://www.vagrantup.com/docs/provisioning/salt.html ?
15:35 punkoivan aphor, vagrant can automaticaly install salt on guest and run state from /srv/salt.
15:35 punkoivan babile, yes, I use this one.
15:35 aphor punkoivan: That sounds simple to me, but yet here you are asking for help.
15:37 aphor I think you're having problems with vm.synced_folder and you came here for a salt solution.
15:38 Qwazerty joined #salt
15:38 aphor I'm going to tell you to cut out the synced_folder, and just tell the vagrant minion to get stuff from saltfs the master/minion way.
15:38 teryx5101 joined #salt
15:40 _JZ_ joined #salt
15:43 babilen fwiw, I work daily with synced folders in vagrant (via NFS) and have no problem with it. I despise vbox, so I tend to use KVM, but that shouldn't make a difference
15:44 babilen Ron1: https://github.com/saltstack-formulas/nagios-formula
15:44 punkoivan aphor, i just use type: "rsync" and it working for now. I'll try to use master/minion, yes. Thanks.
15:45 mapu joined #salt
15:45 beardedeagle joined #salt
15:46 Hydrosine joined #salt
15:47 aphor punkoivan: or, like babilen said, maybe your hypervisor is the problem. Maybe vbox is b0rk3d, and you will struggle to get the salt fs populated on your vagrants.
15:47 penguin_dan joined #salt
15:47 jaybocc2 joined #salt
15:48 aphor punkoivan: if you just want to iterate on your states/pillars and get a vagrant minion working, install a master on your mac and have your preliminary vagrantfiles set up a minion with preseeded keys.
15:49 aphor I wonder why salt designed saltfs in the first place?
15:49 aphor ..  anyway.
15:50 arif-ali joined #salt
15:50 Ron1 joined #salt
15:56 murrdoc joined #salt
15:57 murrdoc joined #salt
16:00 beardedeagle anyone know of a good way to replace one or more occurrences of a character in jinja without writing a custom filter? (eg. "DC1\\someusername" I want to match for 2 or more occurances of \ and make sure it only has one when done)
16:03 jaybocc2 joined #salt
16:05 rhodgin joined #salt
16:11 Ron1 thank you babilen
16:12 attawn_ joined #salt
16:15 aphor beardedeagle: there is a replace() filter in Jinja2 docs...
16:15 aphor http://jinja.pocoo.org/docs/dev/templates/#list-of-builtin-filters
16:15 beardedeagle yeah, tried that. which means I am probably doing it wrong.\
16:17 evle joined #salt
16:18 ronnix joined #salt
16:22 brianfeister joined #salt
16:23 onlyanegg joined #salt
16:24 Ron1 joined #salt
16:24 berserk joined #salt
16:24 penguin_dan joined #salt
16:26 esharpmajor joined #salt
16:27 antpa joined #salt
16:29 alemeno22 joined #salt
16:32 Ron1 joined #salt
16:35 onlyanegg joined #salt
16:36 alemeno22 joined #salt
16:37 linjan_ joined #salt
16:39 jeffspeff joined #salt
16:41 amcorreia joined #salt
16:42 potens joined #salt
16:48 dijit use pipes.
16:48 dijit muhahaha
16:48 dijit {% variable | replace("\\", "\") %}
16:49 Netwizard joined #salt
16:49 aw110f joined #salt
16:49 Opti_ joined #salt
16:51 writtenoff joined #salt
16:53 aphor I have often been tempted to extend python for the pipe operator...
16:53 beardedeagle @dijit: that is what I tried.
16:53 aphor I love some coroutines, but the tedious syntax offends my innocent eyes.
16:54 Ron1 joined #salt
16:54 aphor Anyone have any peeves with salt that should be SaltConf sprint/hackathon targets?
16:55 aphor Anyone else going?
16:55 beardedeagle still trying to get godaddy to pay for me to go
16:55 ron11 joined #salt
16:55 aphor client?
16:56 dijit aphor: jinja templating is way too limiting.
16:56 dijit and the others (mako?) are not well documented.
16:56 aphor dijit: which templating would you prefer?
16:56 dijit something which has regex.
16:56 aphor Maybe what we want is a jinja regex filter
16:57 djgerm1 this is a common thread I've noticed
16:57 uictamale Sup everyone
16:57 aphor what *I* want is a Jinja list comprehension..
16:57 uictamale Can I set some defaults for salt-cloud instance profiles then just override a couple of the parameters for more profiles?
16:57 aphor or at least a map filter.
16:57 dijit jinja is nice but you can't build non-standard stuff on top.
16:58 dijit because then it's not jinja anymore.
16:58 beardedeagle @aphor: yes, the filter is easy to write, it's getting propagated everywhere that is the issue. you would need it to be a part of the core of salt
16:58 djgerm1 uictamale: yes. that's precisely how I use cloud maps
16:59 djgerm1 and I think that's how most folks use cloud maps actually...
16:59 aphor beardedeagle: I got some code committed to the DigitalOcean salt-cloud driver.
16:59 alemeno22 joined #salt
17:00 jfelchner joined #salt
17:00 aphor beardedeagle: do you know the salt codebase?
17:00 beardedeagle well enough
17:01 aphor do you know where salt-contributed Jinja2 filters should go?
17:01 beardedeagle maybe salt.renderers.jinja? or somwhere in salt.renderers I would think
17:01 djgerm1 left #salt
17:02 uictamale djgerm1 - any examples?
17:02 mpanetta joined #salt
17:02 aphor .. beause we could open a ticket, and code up a branch from a GitHub fork, and then submit a pull request on the ticket.
17:02 sbogg joined #salt
17:02 beardedeagle I have thought about it
17:02 beardedeagle it is a common enough request
17:04 gtmanfred aphor: beardedeagle they should be in https://github.com/saltstack/salt/blob/develop/salt/utils/jinja.py
17:04 gtmanfred salt.utils.jinja
17:04 beardedeagle ahhh
17:04 gtmanfred it is loaded into salt.utils.template
17:04 gtmanfred which is loaded in salt.renderers.jinja
17:04 gtmanfred here is the custom parse_yaml https://github.com/saltstack/salt/blob/develop/salt/utils/jinja.py#L473
17:05 LostSoul joined #salt
17:06 aphor Now we're halfway to a pull request.
17:06 ageorgop joined #salt
17:06 aphor http://jinja.pocoo.org/docs/dev/api/#custom-filters
17:07 gtmanfred s/we're/i'm/ :)
17:07 punkoivan joined #salt
17:07 aphor Just need a place to load the custom filter function, then update the jinja environment.filters with it.
17:07 beardedeagle return re.sub(find, replace, s)
17:08 bhosmer joined #salt
17:08 ninjada joined #salt
17:11 aphor I'd add a salt/utils/jinja_filters module and then add filters one at a time to that folder
17:11 hightekvagabond joined #salt
17:12 LostSoul joined #salt
17:12 aphor enumerate and register the filters in a salt/utils/jinja_filters/__init__.py or something like that.
17:13 gtmanfred so
17:13 gtmanfred you could make a /srv/salt/_modules/jinja_filters.py
17:13 aphor or that
17:14 gtmanfred and then use the filters from the {{ thing|salt.jinja_filters.filtername }}
17:14 gtmanfred should do the same thing, and doesn't need to modify the internal salt stuff
17:14 aphor except part of the pain is that the regex filter is so sorely needed almost everywhere..
17:15 gtmanfred so, you could test it there
17:15 aphor and then promote it ...
17:15 aphor yesss
17:15 ronp_usa joined #salt
17:15 aphor A PLAN
17:15 gtmanfred and then put it in salt.utils.jinja
17:15 gtmanfred into the filters class that is already in thre
17:19 aphor gtmanfred: are you a racker?
17:20 aphor or ex-racker?
17:20 rylnd hey folks, i am just starting and wanted to take a closer look at salt. just a quick question before i dig into the documentation: i know foreman can be used with salt, is there any other UI available for salt-master? or is that just available with saltstack enterprise -- similar model as tower with ansible? Thanks :)
17:21 aphor rylnd: are you provisioning bare-metal?
17:22 rylnd aphor: Virtual Machines and Instances
17:22 rylnd AWS instances that is
17:22 rylnd and VMs on VMware
17:23 beardedeagle @rylnd: saltpad
17:23 beardedeagle molten
17:23 uictamale gah... bootstrap-salt.sh needs internet access?
17:23 beardedeagle formans saltstaack plugin is probably more complete than those though
17:24 beardedeagle uictamale: yes?
17:24 uictamale beardedeagle: I'm trying to use salt in our project but we CANNOT have access to the internet
17:24 uictamale salt-cloud on GCE, to be specific
17:24 rylnd beardedeagle thanks a bunch! looking at both of them after looking through the docs.
17:25 iggy don't use it
17:25 uictamale beardedeagle: Any way I can use my own version of bootstrap-salt that looks to a local file on the master instead?
17:25 beardedeagle yes
17:25 beardedeagle you can write your own bootstrap script
17:25 iggy the bootstrap script is just a handy way to install packages
17:25 aphor uictamale: then you download the Internet to a big shared drive, and configure it as your repo of repos.
17:25 uictamale We have a repo we can use
17:26 uictamale so I can install any package that's on a repo
17:26 uictamale I just can't clone stuff from github
17:26 aphor uictamale: read up on pre-seeding keys, then just pip install your minions from your repo then.
17:27 uictamale aphor: any links?  I'm reading through the deploy.sh script it created on my instance now
17:27 iggy uictamale: unless you are trying to install the git version, you don't need the bootstrap script... just install salt-minion and you're done
17:27 aphor That's all your bootstrap needs to do.
17:27 uictamale iggy: Literally just  yum install salt-minion ?
17:27 aphor https://docs.saltstack.com/en/latest/topics/tutorials/preseed_key.html
17:27 uictamale aphor: thx
17:27 iggy uictamale: yes
17:28 uictamale I'm assuming something in here sets up its config to know where the master is though?
17:28 aphor .. assuming you have everything covered in your offline yum repo.
17:28 iggy or yeah, if you are trying to use this with salt-cloud, the script can be as simple as adding your local repo and installing the whatever packages
17:28 uictamale Yup, I can add repos like the saltstack repo to our clone.
17:28 iggy doesn't have to be fancy
17:29 aphor uictamale: you need two things to bootstrap a minion automatically
17:29 uictamale thanks, I'm looking for the 'least fancy' way to do this
17:29 aphor the minion config needs to specify your master, and the master needs to already have the minion's public key.
17:29 baweaver joined #salt
17:29 iggy the keys are handled before the bootstrap script runs iirc
17:29 iggy but test that to be sure
17:30 uictamale It gets the key from the key I put into /etc/salt/ on the master right?
17:30 uictamale ssh_interface, ssh_username, and ssh_keyfile
17:30 uictamale We have build keys in our metadata of the project so I think we're good there.
17:30 aphor For simplicity, you will want your minions to DHCP with a DNS domain name blah.tld, and then your salt master should have A and/or AAAA records for salt.blah.tld.
17:30 aw110f joined #salt
17:31 uictamale I can probably just bake an /etc/host entry into our base image
17:31 baweaver joined #salt
17:32 uictamale so how do I pass my own version of the bootstrap-salt.sh script?
17:32 aphor uictamale: you will be very sad when your network needs renumbering if you do /etc/hosts
17:33 uictamale aphor: true.  But this is all just a proof of concept
17:33 uictamale First I have to get this all working in our no-internet project
17:34 aw110f_ joined #salt
17:34 aphor DNS is good for retarded insurance companies' IntrAnets too.
17:34 lero joined #salt
17:34 uictamale ha, close.
17:34 aphor Take my advice.. at least use ghetto DNS (dnsmasq).
17:36 baweaver joined #salt
17:37 uictamale DNS or not, I have to pass "something" to the nodes I'm creating right
17:37 uictamale either and IP or a well-known name
17:37 uictamale and then I need to run "something like bootstrap-salt.sh but doesn't require internet access" - how do I make this something and run it on instance creation?
17:38 aphor uictamale: salt-cloud ssh'es in and runs the bootstrap script.
17:38 uictamale right, I'm trying to find in the docs where I can set my own script instead on the master.
17:38 uictamale I found how I can set different args: http://salt-cloud.readthedocs.org/en/latest/topics/misc.html
17:38 aphor uictamale: I can think of more clever things, but not necessarily easier.
17:39 aphor Maybe you have cloud-init?
17:40 uictamale it's centos so it's available
17:40 uictamale not in our base image currently though
17:40 aphor neither is salt-minion...
17:41 onlyanegg I'm trying to include app.* (everything within the 'app' directory) in my pillar top.sls. I figured it was possible because the fileroot top.sls allows it. Is this not possible?
17:41 aphor chicken, egg, chicken, egg...
17:41 uictamale haa
17:41 uictamale surely there's a way to run an arbitrary script on instance startup?  ala libclouds "deploy script" ?
17:42 aphor uictamale: that depends on your VM deployment.
17:42 lero joined #salt
17:42 uictamale er sorry - they call it "ScriptDeployment"  http://libcloud.readthedocs.org/en/latest/compute/deployment.html
17:42 aphor but yes, and you will want to use that.
17:46 aphor uictamale: do you control the yum repo? Do your VMs yum update at install time?
17:47 uictamale yes, our team controls the repo
17:47 uictamale I just noticed there's an option to override the git repo location and use https instead, too
17:47 uictamale I might be able to make this work.
17:48 uictamale Does it do anything else besides get the repo and run yum?
17:48 aphor the salt-bootstrap.sh? I'm afraid to look. I thought I talked you into writing your own!
17:49 uictamale Ha, I'd rather not if I don't have to!
17:49 uictamale I found this: https://docs.saltstack.com/en/latest/topics/tutorials/salt_bootstrap.html
17:50 uictamale Looks like a few other people have been in my situation before - I see three things which I think I can use to make this work - the http instead of git option, custom repo URL, and http proxy/
17:50 morissette joined #salt
17:52 aphor uictamale: I guess you're back on the Internet then?
17:52 aphor .. via https proxy anyway?
17:53 uictamale right, we can't access the internet directly - but if you know the proxy address (and proxy creds) you can reach some things
17:54 uictamale the things we've deemed 'allowed'
17:54 murrdoc why would illinois not allow internet
17:54 jaybocc2 joined #salt
17:54 uictamale referencing the uic in my name?
17:54 murrdoc terrible
17:54 murrdoc i know
17:54 uictamale that's just where I went to school - not where I'm working on this stuff now heh
17:56 uictamale so ... I have salt packages of version 2015.5.8-1 available already.  Will those minion packages work with my 2015.8.7-1 master?
17:56 aphor YMMV.
17:57 uictamale haha
17:57 aphor When it bites, you will pull out your hair in bloody clumps and gouge out your own eyes, but until then it will be totally fine.
17:58 baweaver joined #salt
17:59 aphor In your case, I would recommend making the salt master also a repo server. That way it can be nearly autonomous.
18:00 jeddi joined #salt
18:00 uictamale Yah I'm sure if this all works out we can clean things up quite a bit.
18:00 impi joined #salt
18:00 uictamale Main thing I'm still not finding is where to put my custom bootstrap script
18:00 uictamale (I'm back to trying that first)
18:00 aphor I have mine serving saltfs, https files and custom local yum repos, and also https git repos.
18:00 uictamale Does it go with the profiles in /etc/salt/cloud.profiles.d/ ?
18:01 zmalone joined #salt
18:01 sc250024 joined #salt
18:01 uictamale aphor: nice, yah that seems reasonable. I'll probably go with git over ssh.
18:01 nZac joined #salt
18:02 aphor That way I can have a nearly identical sandbox and rsync and git-push my way to multi-master nirvana.
18:02 HappySlappy joined #salt
18:02 uictamale so you rely on DNS to specify both masters?
18:02 uictamale or you actively loadbalance them with health checks some way?
18:03 aphor I use a Mac to host my sandbox, with a local pfSense router to provide DHCP+DNS to the sandbox minions.
18:03 uictamale found it?  https://groups.google.com/forum/#!topic/salt-users/62NGkKlJUq8
18:04 uictamale but that refernces this nice 404 lol https://github.com/saltstack/salt-cloud/issues/347
18:04 saltstackbot The API says this is an invalid issue. Please report this if you know it's a correct link!
18:05 aphor My sandbox minions come up via vagrant as chump01.sandbox, and the default minion config looks for salt.sandbox, which I have resolving to my Mac's host-only network address.
18:06 aphor to the source!
18:06 murrdoc joined #salt
18:06 rmnuvg joined #salt
18:07 onlyanegg I'm trying set up salt with three areas: one for production, one for staging, and one that's common between both. A simplified directory structure looks like this: http://pastebin.com/tqXqJfb1 My minion config looks like this: http://pastebin.com/g6tscdNU and my prod states top.sls looks like this: http://pastebin.com/ycc38yTV How can I get pillar data from both prod and common?
18:08 melinath_ joined #salt
18:08 aphor onlyanegg: if your pillar tops say pull from prod and common, yes.
18:08 baweaver joined #salt
18:08 aphor onlyanegg: be sure to experiment with merging or developing discipline around pillar namespace.
18:09 mapu_ joined #salt
18:09 nZac joined #salt
18:11 onlyanegg ok, so my prod pillar top.sls should have two environments? one for prod and one for common? like this http://pastebin.com/z5rvTM5D
18:13 cberndt joined #salt
18:13 mapu joined #salt
18:13 alemeno22 joined #salt
18:14 aphor onlyanegg: here be dragons.
18:15 aphor it's less dangerous than having top.sls in each environment, but you need to be careful about the order of your environments because later the pillar data will depend on that order.
18:15 onlyanegg aphor: lol, yeah, but also here be well organzied code
18:16 aphor onlyanegg: and document your high level design and make it a review criterion.
18:16 mapu_ joined #salt
18:18 onlyanegg aphor: good advice
18:18 SheetiS joined #salt
18:18 aphor salt environments are really indirections to a particular view/version of pillars/states.
18:19 onlyanegg aphor: can you take a quick look at that last paste? Is that what you mean?
18:20 murrdoc i know when forrest wakes up
18:24 XenophonF aphor: that's the best description of environments i've ever seen
18:26 SheetiS joined #salt
18:27 rem5 joined #salt
18:28 antpa joined #salt
18:30 debian112 hey, is https://docs.saltstack.com/en/latest/ref/states/all/salt.states.network.html still experimental on Debian/Ubuntu?
18:30 onlyanegg XenophonF: it makes more sense to me to have files (like config files or jinja templates) separated from the states
18:31 XenophonF really? i prefer to keep everything together
18:31 XenophonF e.g., https://github.com/irtnog/salt-states/tree/development/apache
18:31 XenophonF one stop shopping
18:31 onlyanegg and I think having common area between stag and prod is pretty self explanatory
18:32 XenophonF i think separating config states and config files/templates violates POLA
18:32 XenophonF but that's just me
18:32 onlyanegg POLA?
18:32 XenophonF principal of least astonishment
18:33 Opti22 joined #salt
18:33 XenophonF confusion is the moral enemy of the lazy and impatient sysadmin ;)
18:33 XenophonF er, mortal
18:35 XenophonF onlyanegg: if you look at my state repo there, you'll see how i have different branches set up for dev/test/stage/prod
18:35 XenophonF i have a github flow-like branching/merging workflow
18:36 XenophonF only applied to salt states
18:36 XenophonF to see how i use it with pillar, look at https://github.com/irtnog/salt-example-pillar
18:37 onlyanegg Thanks XenophonF, I'll take a look
18:37 dmaiocchi joined #salt
18:37 XenophonF there's nothing wrong with implementing the same thing, only using subdirectories
18:37 sc250024 Does anyone know with Salt cloud how to not include the default block devices that come with an instance type?
18:38 nidr0x joined #salt
18:40 XenophonF sc250024: well on ec2 maybe you'd use block_device_mappings?
18:40 XenophonF i've only used that to modify the defaults, though
18:40 sc250024 Right, I do that currently
18:40 sc250024 for example, an m3.medium comes with the OS disk, and a small 4 GB IOPS disk attached by default
18:41 onlyanegg XenophonF: Getting a 404 for that page
18:41 onlyanegg ...which is really awesome on github
18:41 sc250024 it seems if you choose that profile in salt-cloud, you're saddled with the disk by default, even if you don't need it
18:42 XenophonF sorry onlyanegg gave you the wrong url, that's https://github.com/irtnog/salt-pillar-example
18:42 XenophonF sc250024: you can set block_device_mappings to something like [{DeviceName: "/dev/sdh", NoDevice: ""}]
18:43 sc250024 Oh brilliant!
18:43 sc250024 Let me give it a try
18:43 XenophonF sc250024: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-blockdev-mapping.html#cfn-ec2-blockdev-mapping-nodevice
18:44 sc250024 Gracias :)
18:45 XenophonF De nada :)
18:45 XenophonF alright amigos, i'm outta here. catch you on the flip
18:49 tawm04 joined #salt
18:49 sc250024 Thanks Xeno!
18:51 insomniaSalt joined #salt
18:53 aphor onlyanegg: I think I missed your last question asking me to look at the paste http://pastebin.com/z5rvTM5D
18:54 aphor the answer is yes, that will get node1 tomcat.sls pillar data from prod then from common
18:54 dfinn joined #salt
18:56 bhosmer joined #salt
19:00 jaybocc2 joined #salt
19:01 __alex joined #salt
19:02 quix_ joined #salt
19:09 Netwizard joined #salt
19:11 ageorgop joined #salt
19:12 subsignal joined #salt
19:13 hemphill joined #salt
19:14 kermit joined #salt
19:16 onlyanegg Thanks aphor!
19:17 arif-ali joined #salt
19:18 baweaver joined #salt
19:20 tawm04 joined #salt
19:20 ageorgop joined #salt
19:21 ageorgop1 joined #salt
19:25 GreatSnoopy joined #salt
19:27 lorengordon anyone familiar with the code around state providers? i'm trying to figure out what might cause a module to use the wrong provider...
19:27 lorengordon i'm referring to this: https://docs.saltstack.com/en/latest/ref/states/providers.html
19:28 losh joined #salt
19:35 alemeno22 joined #salt
19:36 elsmo joined #salt
19:38 fracklen joined #salt
19:40 ronp_usa joined #salt
19:41 lero joined #salt
19:41 rawzone joined #salt
19:44 ageorgop joined #salt
19:46 ajw0100 joined #salt
19:47 akhter joined #salt
19:48 Theo joined #salt
19:55 jaybocc2_ joined #salt
19:56 tawm04 joined #salt
19:56 notnotpe_ joined #salt
19:56 jfelchner_ joined #salt
19:56 bhosmer joined #salt
19:57 philiaagape joined #salt
19:58 trent joined #salt
19:58 teatime which module, using which provider, and which provider were you expecting/
19:58 Antiarc_ joined #salt
19:58 jeblair joined #salt
19:59 lynxman joined #salt
19:59 rubenb joined #salt
19:59 muep joined #salt
19:59 Vivek joined #salt
20:00 lorengordon @teatime, under 2015.8 the issue was manifesting with the `service.enabled` execution module/function not being available
20:00 muep_ joined #salt
20:00 lorengordon under 2016.3, it was cropping up with the `pkg.check_db` function
20:01 lorengordon if i edit the minion config to force the provider to `service: rh_service` then it worked fine
20:01 sarlalian joined #salt
20:02 lorengordon frustratingly, the issue is reproducible is certain conditions that mostly make no sense to me
20:02 lorengordon s/is/in/
20:02 simmel joined #salt
20:02 teatime what OS on the minion
20:03 lorengordon CentOS6 on one, RHEL6 on another
20:03 teatime so, not systemd yet, correct?
20:03 lorengordon nope
20:04 gnord joined #salt
20:04 teatime on my debian jessie machines, there is one service where I have to manually specify sysvinit provider, because salt defaults (correctly) to systemd, but this service's package doesn't install systemd service description, only a sysvinit script.
20:04 teatime so it might be something similar.
20:04 teatime what provider is it choosing?
20:04 lorengordon the default, `service`
20:04 lorengordon the frustrating part is that if i run _just_ the one sls then it's fine
20:05 brianfeister joined #salt
20:05 lorengordon the problem may somehow be related to nested `include` statements, which is how the sls gets pulled in during a highstate
20:05 lorengordon but that seems super odd to me
20:06 teatime hrm, it chooses a different provider for the same state and minion, depending on whether you run just the one state vs. a highstate/
20:06 darix teatime: rh_service ... but normally systemd can just handle init scripts for you
20:06 teatime that sounds like a bug.
20:06 teatime darix: ?
20:06 darix teatime: the old sysvinit is handled by rh_service. but systemd should normally handled sysvinit scripts just fine
20:07 kaictl joined #salt
20:07 lorengordon and more frustratingly, it is somehow also specific to a handful of AMIs we created recently
20:07 teatime darix: in the situation I was describing, the problem was systemd does start it correctly and such, and but it doesn't return status correctly, and makes a fake change in every state return.  everything is fine with specifying sysvinit provider.
20:07 lorengordon older AMIs work regardless of the nested `include` statements
20:08 teatime darix: but what are you answering with 'rh_service'?  I didn't ask a question :)
20:08 teatime lorengordon: might be a red herrin
20:08 darix teatime: state/modules/service.py state/modules/rh_service.py state/modules/<something for systemd>
20:08 teatime still have no idea what you're talking about
20:08 lorengordon @teatime: yeah, we're rebuilding the AMIs hoping the problem just goes away
20:09 darix teatime: i talk about the code that does things in the end
20:09 teatime yeah, I realize that.  but I don't know what you're trying to communicate to me.
20:09 teatime don't worry about it.
20:10 rem5 joined #salt
20:10 impi joined #salt
20:12 oida joined #salt
20:14 apanek joined #salt
20:15 jhauser joined #salt
20:15 baweaver joined #salt
20:15 kiorky joined #salt
20:17 mavhq joined #salt
20:25 josuebrunel joined #salt
20:29 nidr0x joined #salt
20:34 * hemebond clicks "Hide all checks" and sobs quietly
20:37 fracklen joined #salt
20:39 Brew1 joined #salt
20:46 kliquori joined #salt
20:49 fracklen joined #salt
20:49 edrocks_ joined #salt
20:52 beardedeagle joined #salt
20:53 beardedeagle finally get company to commit to paying for me to go to saltconf, don't have access to company travel site. smh.
20:57 gtmanfred yay
20:57 gtmanfred aww
21:01 jfindlay looking forward to seeing you there :-)
21:04 totte joined #salt
21:05 DammitJim how can I set @reboot on a crontab instead of m, h, dom, mon, dow?
21:05 DammitJim I'm using cron.present
21:05 andrew_v joined #salt
21:06 aurynn does the grain[] interface in SLS files work with pattern matching?
21:07 hemebond aurynn: What do you mean? You can match on grains in top.sls.
21:08 aphor hey: is the hackathon/sprint concurrent with teh party at SaltConf?
21:08 aurynn hemebond, I'm trying to use the orchestrator to iterate over a list of nodes; so I'm trying to pull the nodes from {{ salt["grains.get"] }}, and trying to figure out how to make that glob
21:08 hemebond DammitJim: Couldn't you create a cron file instead? I don't see a way to add an arbitray cron line.
21:08 aurynn (There's a reason I'm doing it this way)
21:08 hemebond aurynn: Oh, like a regex comparison in a Jinja template.
21:09 aurynn yeah
21:09 Theo left #salt
21:09 aurynn on the commandline it's -G "glob" for targeting
21:09 hemebond aurynn: I don't believe there is a default way to do it in Jinja.
21:09 DammitJim hemebond, cron.set_special does this
21:09 hemebond aurynn: There might be a filter you can add to test each value.
21:09 DammitJim I just had to use the proper words to google it
21:09 aphor hemebond: this was discussed earlier today as a potential enhancement for Salt's Jinja probably under modules for now.
21:10 hemebond DammitJim: I don't see that.
21:10 hemebond aphor: Yeah, regex filter is pretty popular request.
21:10 DammitJim hemebond, it seems it's only a module, but not a state?
21:11 ninjada joined #salt
21:11 aphor I'd personally like a graph search.
21:11 hemebond DammitJim: Ah, yeah, an execution module.
21:11 hemebond aphor: wassat?
21:11 DammitJim dammit, but I want a state!
21:12 aurynn bah, I'm not sure I can do this
21:12 aphor match like Neo4J Cypher syntax.
21:12 hemebond DammitJim: Can you not just put a file into cron.d?
21:12 DammitJim hemebond, I guess I could
21:12 DammitJim I don't like mocking with stuff like that, though... but that's just weird me
21:13 aurynn enh, I'll iterate a pillar
21:13 aurynn (not ideal, will figure this out later)
21:13 hemebond aurynn: What about a custom grain?
21:14 linovia is it a known side effect that network.managed (the state) will be marked as changed every time the high state is run ?
21:14 subsignal joined #salt
21:14 hemebond Match on your current grain to add another grain.
21:14 aurynn hemebond, I need machine A to be able to know about machines N-Q
21:14 aphor (x)-[tcp:80]->(y, {role: 'ws',}) x
21:14 DammitJim man, if I am doing this for a user, should I add it to /var/spool/cron/crontab?
21:15 hemebond aphor: I don't know what that means but it makes me a little sad.
21:15 jhauser joined #salt
21:15 aphor hemebond: (node)-[edge]->(anothernode)
21:15 aphor is like ASCII art
21:16 Netwizard joined #salt
21:17 hemebond DammitJim: If you can replace/set the entire crontab file for the user, then you might be able to use the cron.file state.
21:17 hemebond aurynn: Based on what? Just their name?
21:17 DammitJim hemebond, the problem is that cron.present doesn't support the special: @reboot
21:18 hemebond DammitJim: cron.file
21:18 hemebond DammitJim: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.cron.html#salt.states.cron.file
21:18 hemebond !salt salt.states.cron.file
21:18 hemebond dangit!
21:18 hemebond !salt states.cron.file
21:18 saltstackbot http://docs.saltstack.com/en/latest/ref/states/all/salt.states.cron.html#salt.states.cron.file
21:18 hemebond (sorry, wanted to play with that)
21:18 DammitJim oh, sorry
21:18 DammitJim you meant cron.file
21:19 DammitJim not cron.present
21:19 aurynn hemebond, name & IP, but just name is fine for now
21:19 DammitJim thanks
21:19 DammitJim let me try that
21:20 hemebond aurynn: And you can't give them a custom grain?
21:20 aurynn hemebond, what I need is something like chef's node search
21:21 hemebond aurynn: Yes, but that's not (yet) available in Salt Jinja. So can you not use a custom grain for the minions you want to target?
21:21 aurynn hemebond, no, because I'm not targetting minions
21:21 hemebond You just said you were.
21:21 fredvd joined #salt
21:22 hemebond I'm confused now.
21:22 aurynn no, I said I wanted minion A to be aware of/able to target minions N-Q
21:22 aurynn not at the master level
21:23 hemebond Sorry, I'm confused now. Minions don't access or target other minions directly.
21:24 hemebond Perhaps if you explain what minion A is trying to do I can offer suggestions.
21:24 quasiben joined #salt
21:24 armguy when using sysctl like so https://dpaste.de/vRJh should this actually reload if the value does get changed or do I have to add like a cmd.wait to trigger a sysctl -p ?
21:25 aurynn hemebond, I'm trying to bootstrap Chef clients from a chef server, using salt. So I need to run knife commands on the chef server to do the bootstrap, so I need to know where the various machines are.
21:25 aurynn and I'm not using highstates
21:25 edrocks joined #salt
21:26 hemebond aurynn: That still sounds like "master gives minion A a list of minions"
21:26 aurynn hemebond, sure; I'm trying to figure that out in the orchestrator context :)
21:27 baweaver joined #salt
21:29 Brew joined #salt
21:29 hemebond I've not used orchestration so it still sounds like something you could just use a custom grain for.
21:29 hemebond Perhaps someone else can offer an orchestration suggestion.
21:30 aurynn possibly. The pillar context with a custom grain could work
21:30 aurynn I'm hesitant to use custom grains for things as they're controlled by the target machine
21:30 hemebond aurynn: You can give grains to a minion from the master.
21:31 hemebond But yeah, they can be added on the minion.
21:37 hemebond aurynn: Does this work http://grokbase.com/t/gg/salt-users/148t6kk89m/if-condition-on-nodegroups ?
21:37 hemebond Specifically the last message.
21:38 mavhq joined #salt
21:39 cyborg-one joined #salt
21:39 hemebond Oh neat. I think I might use this too.
21:41 rem5 joined #salt
21:41 aurynn will check, thanks :D
21:44 onlyanegg joined #salt
21:44 bhosmer joined #salt
21:44 ninjada joined #salt
21:46 akhter joined #salt
21:51 murrdoc joined #salt
21:52 subsignal joined #salt
21:54 brianfeister joined #salt
21:56 keimlink joined #salt
21:57 hemebond I think it's pillar_opts now btw.
21:57 hemebond That's what I changed.
21:58 ninjada joined #salt
22:00 beardedeagle joined #salt
22:00 Rumbles joined #salt
22:01 jhauser joined #salt
22:02 ninjada joined #salt
22:03 sc250024 joined #salt
22:07 baweaver joined #salt
22:09 mapu joined #salt
22:12 amcorreia joined #salt
22:17 brianfeister joined #salt
22:18 fredvd joined #salt
22:21 west575 joined #salt
22:24 lporras joined #salt
22:27 alemeno22 joined #salt
22:29 brianfeister joined #salt
22:30 antpa joined #salt
22:31 edrocks joined #salt
22:35 nZac joined #salt
22:35 jnials joined #salt
22:36 jaybocc2 joined #salt
22:37 punkoivan if modules present id salt docs, but when run states I got error modules not  in dictionary. How to fix it ?
22:38 punkoivan I want to create keyspce in cassandra and found this module : https://salt.readthedocs.org/en/stable/ref/modules/all/salt.modules.cassandra_cql.html
22:38 punkoivan i think using special modules it's better that using cmd.run
22:39 aphor :(
22:39 aphor can't build pillars to consolidate mines.
22:40 zenlot6 joined #salt
22:44 bhosmer joined #salt
22:45 ronrib joined #salt
22:53 ajw0100 joined #salt
22:58 kliquori joined #salt
22:59 baweaver joined #salt
23:02 spankalish joined #salt
23:02 spankalish Hi I am trying to query the salt mine using the group id
23:03 spankalish {% for server, addrs in salt['mine.get']('G@group:group1', 'network.ip_addrs', expr_form='compound').items() -%}
23:04 edrocks_ joined #salt
23:04 spankalish server {{ server }} {{ addrs }} check port 80and print them out like so
23:04 spankalish but nothing returns
23:05 ajw0100 joined #salt
23:05 catpig joined #salt
23:07 ninjada joined #salt
23:09 spankalish Anyone on?
23:09 TooLmaN joined #salt
23:11 spankalish Hello?
23:14 beardedeagle spankalish: this is a channel populated by mainly volunteers. please be patient as we may be busy with our day to day tasks.
23:14 spankalish No problem I was just seeing if there was anyone on
23:14 murrdoc joined #salt
23:17 spankalish Can anyone help me with a problem with a haproxy load balancer and salt
23:22 murrdoc no way of knowing
23:22 murrdoc till u post the quetion
23:24 onlyanegg joined #salt
23:30 jab416171 is adding a firewalld rule to a state simply a matter of saying firewalld.present, name public, and ports? the name is the name of the zone, right?
23:35 punkoivan left #salt
23:40 onlyanegg joined #salt
23:45 edrocks joined #salt
23:52 kliquori joined #salt
23:55 devops joined #salt
23:57 devops Hi. I am importing a jijnja variable from yaml file with {% import_yaml defaults.yaml %}. But I also want to use jinja inside defaults.yaml itself. Is it possible?

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary