Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-05-02

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 kevinquinnyo from reading the docs at https://docs.saltstack.com/en/latest/topics/event/ i don't actually understand the difference between event.fire() and event.send() .  Can anyone explain like I'm 5 years old?  I'll check the code myself otherwise
00:01 flowstate joined #salt
00:17 pppingme joined #salt
00:20 bb74352 joined #salt
00:23 rem5 joined #salt
00:26 Castor__ joined #salt
00:26 flowstate joined #salt
00:32 rem5 joined #salt
00:52 keimlink joined #salt
01:01 edrocks joined #salt
01:05 i90rr joined #salt
01:10 iceyao joined #salt
01:11 keldwud_ joined #salt
01:20 mosen joined #salt
01:21 flowstate joined #salt
01:24 beardedeagle local -> local as opposed to local -> master
01:25 beardedeagle @kevinquinnyo ^
01:29 catpiggest joined #salt
01:30 rem5 joined #salt
01:35 meekrab joined #salt
01:35 brianfeister joined #salt
01:47 om joined #salt
01:47 spuder joined #salt
01:49 disbound joined #salt
01:49 graffic joined #salt
01:50 sagerdearia joined #salt
01:53 michelangelo joined #salt
01:56 arienovo joined #salt
02:14 racooper joined #salt
02:21 flowstate joined #salt
02:28 arienovo joined #salt
02:29 arienovo joined #salt
02:29 brianfeister joined #salt
02:31 arienovo joined #salt
02:32 arienovo joined #salt
02:34 arienovo joined #salt
02:36 arienovo joined #salt
02:38 arienovo joined #salt
02:39 ramteid joined #salt
02:39 belak joined #salt
02:41 belak joined #salt
02:47 brianfeister joined #salt
02:48 Zachary_DuBois joined #salt
02:48 michelangelo joined #salt
02:51 meekrab joined #salt
02:51 i90rr joined #salt
02:54 i90rr joined #salt
02:59 estahn joined #salt
03:04 edrocks joined #salt
03:08 i90rr joined #salt
03:10 kshlm joined #salt
03:20 rem5 joined #salt
03:20 flowstate joined #salt
03:24 dkrae joined #salt
03:26 JamieH joined #salt
03:26 nahkiss joined #salt
03:28 kutenai joined #salt
03:29 rideh joined #salt
03:40 spuder joined #salt
03:49 spuder joined #salt
03:54 jeffspeff joined #salt
04:09 ageorgop joined #salt
04:20 flowstate joined #salt
04:21 brianfeister joined #salt
04:23 meekrab joined #salt
04:30 flowstate joined #salt
04:33 quasiben joined #salt
04:36 arienovo joined #salt
04:36 arienovo joined #salt
04:37 arienovo joined #salt
04:38 arienovo joined #salt
04:41 arienovo joined #salt
04:48 meekrab joined #salt
04:57 rdas joined #salt
04:59 zer0def joined #salt
05:06 ivanjaros joined #salt
05:06 edrocks joined #salt
05:36 feld joined #salt
05:36 feld joined #salt
05:44 keimlink joined #salt
05:54 salty_solution joined #salt
05:56 salty_solution Do you guys know how to source a .profile file? I am getting an error    /bin/sh: 1: source: not foun
05:57 salty_solution I am just running the command 'source ~/.profile'
06:05 colttt joined #salt
06:06 colttt_ joined #salt
06:09 kaushal_ joined #salt
06:10 rem5 joined #salt
06:17 ageorgop joined #salt
06:26 duncanmv joined #salt
06:27 ivanjaros joined #salt
06:33 kshlm joined #salt
06:34 Sammichmaker joined #salt
06:40 brianfeister joined #salt
06:42 ronrib joined #salt
06:44 keimlink joined #salt
06:44 meto1 joined #salt
06:44 meto1 Where is the orchestration rendered? Because in my statefile I get the master hostname if I query the host in the grains
06:52 zer0def joined #salt
06:57 CeBe joined #salt
06:59 bantone renders on the master meto1
06:59 mowntan joined #salt
07:00 iggy it's a runner, all runners are handled in the master context
07:01 iggy orchestration can call a state on a minion though
07:01 josuebrunel joined #salt
07:06 kbaikov joined #salt
07:08 edrocks joined #salt
07:09 dmaiocchi joined #salt
07:10 meto1 In orchestartion I can target a minion. But if I call a grain then it  shows the grain of the master and not on the minion.
07:11 babilen Could you provide additional information about that (state, command(s), output, ...) on one of http://refheap.com, http://paste.debian.net, https://gist.github.com, http://sprunge.us, … ?
07:11 iggy yeah, target a state at a minion, in that state, the pillar/grain/etc data will apply to that minion
07:12 babilen As you would expect
07:15 meto1 Yes Iggy that is what i excpected an did'nt happen :-(
07:15 mowntan joined #salt
07:16 mowntan joined #salt
07:17 bantone can you show us the orchastration call and the statefile you're using?
07:17 iggy as babilen says... try pasting some code to a (not sucky) paste site
07:24 flowstate joined #salt
07:36 viq_ joined #salt
07:41 dgutu joined #salt
07:45 meto1 I pasted it. https://www.refheap.com/118534
07:50 ronnix joined #salt
07:50 iggy I don't see anything being rendered in there
07:55 lero joined #salt
08:06 kawa2014 joined #salt
08:08 colttt joined #salt
08:12 writteno1 joined #salt
08:12 salty joined #salt
08:14 salty Hey guys, i could use some help. Im using salt sls and want to install a package in two different folder. i have this:  http://paste.ubuntu.com/16186462/
08:20 rrei joined #salt
08:21 flowstate joined #salt
08:21 babilen salty: Use, say, upath_app1 and upath_app2
08:21 babilen (your states need different global IDs)
08:21 salty but it won't install upath this way, it will look for upath_app2 and will fail. wouldn't it?
08:24 meekrab joined #salt
08:24 JohnnyRun joined #salt
08:26 jhauser_ joined #salt
08:28 brianfeister joined #salt
08:29 babilen salty: Then pass two different name: arguments
08:31 salty what do you mean? like upath:app1 upath:app2?
08:32 keimlink joined #salt
08:33 meto1 Sorry, I missed a line https://www.refheap.com/118535
08:38 s_kunk joined #salt
08:42 honestly I want to trigger a reboot from a state execution in a way that doesn't break the state execution.
08:42 honestly i.e. I want it to reboot after the state is done executing
08:46 rrei just a hunch, but maybe you can use order: last or something along those lines
08:46 CeBe1 joined #salt
08:47 rrei hey guys, just a quick question. does anyone know if it is possible in a pillar file to define pillar variables based on the value of other pillar variables defined above?
08:47 honestly it's all in one file, so it gets executed in order anyway
08:48 honestly and the answer to your question is no
08:48 mowntan joined #salt
08:48 mowntan joined #salt
08:49 honestly but you can of course set the value using jinja (or what you're using as a template) and then fill both values from that
08:49 rrei yes, that's what i'm currently doing, but I was wondering if there was a better alternative
08:50 rrei for your problem, I'm thinking maybe you could have a state with the reboot action requiring ALL other states
08:51 babilen salty: No, you need different state IDs, but as you want both to use the same argument to npm.installed, you'd specify different name: arguments in the state (name: defaults to the state ID, which is what you rely on right now)
08:51 brianfeister joined #salt
08:51 colttt_ joined #salt
08:52 babilen rrei: Only in pillarstack or when using external pillars (that are being rendered earlier)
08:53 rrei sorry, I don't understand the question. I'm just using basic pillar, nothing too fancy since I'm still very green
08:53 babilen salty: https://www.refheap.com/118536
08:53 babilen rrei: Yeah, you can't reference pillar values then
08:54 rrei alright, I'll keep using jinja variables then
08:54 rrei thanks for the help ;)
08:54 salty thanks
08:55 abruanese joined #salt
08:56 babilen salty: Do you understand why that would work?
08:58 salty Yeah, let me test it
09:09 salty emm, seem that it doesn't work with pkg.installed as well..
09:11 edrocks joined #salt
09:14 slav0nic joined #salt
09:15 salty But it did work with the npm.installed. thanks
09:18 N-Mi joined #salt
09:20 flowstate joined #salt
09:26 kbaikov joined #salt
09:32 KermitTheFragger joined #salt
09:36 kbaikov joined #salt
09:45 steffo joined #salt
09:49 cpowell joined #salt
10:01 pfallenop joined #salt
10:02 aarontc joined #salt
10:02 sarlalian joined #salt
10:03 Sylvain31 joined #salt
10:05 Sylvain31 Hi, I'm a sysadmin new to salt. Is there's some ressource already about some way to store and manage relationship between customer/shell user/services?
10:05 Garyx joined #salt
10:20 flowstate joined #salt
10:22 pfallenop joined #salt
10:23 punkoivan joined #salt
10:24 punkoivan joined #salt
10:32 basepi joined #salt
10:36 whatever_sd_ joined #salt
10:37 Sketch joined #salt
10:37 AndreasLutro Sylvain31: not sure what you mean by that
10:37 dmz joined #salt
10:37 yomilk joined #salt
10:37 rmnuvg_ joined #salt
10:37 zenlot6 joined #salt
10:37 pfallenop joined #salt
10:37 pfallenop joined #salt
10:37 nethershaw joined #salt
10:38 renoirb joined #salt
10:38 justyns joined #salt
10:39 MindfulMonk joined #salt
10:40 steffo joined #salt
10:41 Vye joined #salt
10:44 briner joined #salt
10:45 briner joined #salt
10:45 N-Mi joined #salt
10:51 aarontc joined #salt
10:55 Sylvain31 AndreasLutro: I must go. I meat is there proposed way to organise (by pillar, or state may be) the relationship between customer associated shell account, and associated services (folders, web config, sftp permission, domain names, etc.) just to explore before reinventing the wheel! ;)
10:55 Sylvain31 meat = mean ;)
10:56 Sylvain31 I will connect back later.
10:58 amcorreia joined #salt
11:01 sarlalian joined #salt
11:02 fracklen joined #salt
11:13 edrocks joined #salt
11:19 kbaikov joined #salt
11:21 flowstate joined #salt
11:22 ivanjaros joined #salt
11:29 Miouge joined #salt
11:29 kbaikov joined #salt
11:33 rem5 joined #salt
11:34 mowntan joined #salt
11:38 saltuser joined #salt
11:47 elsysops joined #salt
11:54 yomilk joined #salt
11:54 ronnix joined #salt
12:00 akhter joined #salt
12:00 disbound joined #salt
12:01 rem5 joined #salt
12:04 viq_ joined #salt
12:09 quasiben joined #salt
12:10 TooLmaN joined #salt
12:19 debian112 joined #salt
12:21 flowstate joined #salt
12:25 catpigger joined #salt
12:27 honestly how do I trigger a reboot to happen just after a state execution is done?
12:27 fracklen honestly - I would do it using orchestration...
12:28 honestly what do you mean by that?
12:28 fracklen I would normally refrain from causing reboots as part of highstate
12:28 fracklen and if a task requires a reboot, I would write a simple orchestration
12:29 babilen +1
12:29 west575 joined #salt
12:29 fracklen honestly: https://medium.com/@Drew_Stokes/saltstack-orchestration-6521bad7d085#.1ebxvr5oq
12:29 dijit says bad in the URL
12:31 honestly wut.
12:31 honestly how does that even target minions?
12:32 fracklen honestly: https://docs.saltstack.com/en/latest/topics/tutorials/states_pt5.html#function
12:33 honestly does that work with salt-ssh? :)
12:34 fracklen It should - If you're running a fairly new salt - 2015.8.7+ (As I recall)
12:34 honestly how does salt-run know to use salt-ssh?
12:36 fracklen orchestrate kind of allows you to run multiple salt commands in sequence (very simply put)
12:37 fracklen So the first step could be a state.highstate with a given target - Then afterwards, you would run a system.reboot with the same target
12:38 babilen Hmm, is there a way to target all minions that have more than, say, 4G of RAM?
12:39 honestly you'd have to check the grain targeting docs
12:42 babilen honestly: That would allow for something like "G@mem_total:4*" but not >= 4096
12:43 babilen I'm not sure if it is possible, but I thought I'd ask before I perform the comparison in the pillar SLS
12:43 honestly you can write a custom targetter, no?
12:44 AndreasLutro if your regex-fu is good I guess you can use grains_pcre
12:44 disbound joined #salt
12:45 babilen AndreasLutro: Sure, but then I'd rather just lookup the grain the pillar SLS and keep the logic there ..
12:46 babilen That is a lot clearer .. just wanted to make sure that I'm not missing some way to do this in a target expression
12:48 babilen Ta :)
12:48 PuppyPoker joined #salt
12:50 pfallenop joined #salt
12:50 dyasny_ joined #salt
12:56 marie1972 joined #salt
12:57 honestly what the heck is this
12:58 honestly there's no way to fork out of a salt-ssh execution hard enough for salt not to track it, wait for it, and then fall over when the machine reboots
12:58 akhter joined #salt
13:00 subsignal joined #salt
13:00 guanopho1ic joined #salt
13:02 XenophonF how do you all deal with salt states that trigger actions on windows that require a reboot
13:03 hal58th joined #salt
13:03 XenophonF like, i'm trying to wrap my head around salt-driven sharepoint deployment
13:03 XenophonF which requires several reboots to install pre-requisites
13:03 babilen Does system.reboot work on Windows?
13:04 honestly XenophonF: you need orchestration
13:04 babilen (see above)
13:04 XenophonF ah
13:04 XenophonF OK
13:04 XenophonF well time to RTFM
13:04 XenophonF can either of you point me to some good examples outside of the salt docs?
13:04 XenophonF also: thanks for the clue :)
13:04 honestly from what I've seen it seems pretty simple
13:05 honestly no idea how orchestration can achieve "wait for the minion to come back up"
13:05 babilen You might want to encode the "stage" you are in in a grain and then start the next step after the reboot based on that value
13:05 honestly babilen:...ew
13:05 babilen (simply run a highstate when the minion comes up)
13:05 subsigna_ joined #salt
13:05 babilen honestly: Why "ew" ?
13:05 honestly y'know, staging execution is a first-class feature in ansible
13:06 babilen As it should be
13:06 honestly you could always just make a "stage1.sls", "stage2.sls", ... in your state folder
13:06 honestly but then you get to manually track which stage you're at in your head
13:07 honestly I guess the tracking could be done with grains
13:07 gh34 joined #salt
13:07 honestly but like I just said
13:07 honestly ew.
13:07 honestly for reasons that should be obvious
13:08 honestly salt-ssh -i --refresh --user $(whoami) templateub1604 cmd.run "start-stop-daemon -b -S --exec /usr/bin/setsid -- sh -c 'sleep 3; reboot'"
13:08 honestly haha
13:08 honestly (╯°□°)╯︵ ┻━┻
13:11 estahn joined #salt
13:13 AndreasLutro honestly: salt-ssh is not a first-class citizen
13:13 honestly i no rite
13:14 honestly :(
13:14 AndreasLutro orchestration would do this no problem, but afaik it only works with a real salt master
13:14 akhter_1 joined #salt
13:14 honestly fracklen said it should work with a new salt-ssh
13:14 honestly 14:34:22 < fracklen> It should - If you're running a fairly new salt - 2015.8.7+ (As I recall)
13:15 remyd1 joined #salt
13:15 AndreasLutro docs do make mention of it, but not how
13:15 i90rr joined #salt
13:15 edrocks joined #salt
13:16 viq_ joined #salt
13:16 hexa- joined #salt
13:16 honestly "implementation of this straight-forward feature is left to the user as an exercise"
13:16 AndreasLutro https://docs.saltstack.com/en/latest/ref/states/all/salt.states.saltmod.html says you can provide ssh: true to orchestration states
13:18 TyrfingMjolnir joined #salt
13:19 edrocks_ joined #salt
13:20 AndreasLutro that'd be neat if it worked
13:20 ashrov joined #salt
13:21 flowstate joined #salt
13:21 ashrov HI, I can't install package in centos5.11 . http://paste.debian.net/678911/
13:21 ashrov I run each step here http://repo.saltstack.com/#rhel
13:25 ashrov Anyone know what is the problem?
13:26 numkem joined #salt
13:27 akhter joined #salt
13:28 Guest4379 joined #salt
13:33 ashrov babilen?
13:33 Tanta joined #salt
13:37 newjersey joined #salt
13:38 ninkotech_ joined #salt
13:39 mapu joined #salt
13:41 aarontc joined #salt
13:42 DammitJim joined #salt
13:43 newjersey joined #salt
13:46 west575 joined #salt
13:47 sarlalian joined #salt
13:47 TooLmaN joined #salt
13:48 akhter joined #salt
13:49 quix joined #salt
13:50 cpowell joined #salt
13:51 aarontc joined #salt
13:59 akhter joined #salt
13:59 MeltedLux joined #salt
14:00 racooper joined #salt
14:01 jerredbell joined #salt
14:02 ssplatt joined #salt
14:04 ssplatt hey guys, is anyone using network.system to configure their hostname on debian systems? I can’t get this state to be idempotent https://gist.github.com/ssplatt/211a2f675b0a2622936ce445bd0f6197
14:04 ssplatt wondering if its a salt thing or debian thing.
14:05 bowhunter joined #salt
14:05 mpanetta joined #salt
14:09 akhter joined #salt
14:10 steffo joined #salt
14:12 toanju joined #salt
14:15 relidy joined #salt
14:15 jerredbell joined #salt
14:16 tharkun joined #salt
14:18 flowstate joined #salt
14:22 perfectsine joined #salt
14:23 rem5 joined #salt
14:23 akhter joined #salt
14:23 akhter Anyone here use boto_iam?
14:26 edrocks joined #salt
14:26 AdamSewell joined #salt
14:26 quix_ joined #salt
14:27 AdamSewell I have continued issues with my salt master claiming that the master is timing out when i run even a simple test.ping to an organization. It says to increase the worker_threads but I've done that and given the master more resources. Is there anything else I can do?
14:27 hasues joined #salt
14:27 hasues left #salt
14:28 Jimlad joined #salt
14:28 akhter AdamSewell: Have you checked your minion logs?
14:28 AdamSewell akhter, i've not.
14:29 akhter I'd start there make sure your minion is connecting.
14:29 AdamSewell ok, thanks
14:33 akhter joined #salt
14:36 akhter joined #salt
14:37 fracklen joined #salt
14:39 ekristen joined #salt
14:39 akhter Anyone have an example of an IAM policy from pillar?
14:40 fracklen_ joined #salt
14:40 rem5 joined #salt
14:41 gtmanfred morning
14:42 Fiber^ joined #salt
14:42 west575 joined #salt
14:42 spuder joined #salt
14:43 flowstate joined #salt
14:44 akhter gtmanfred: Morning.
14:51 akhter joined #salt
14:56 akhter joined #salt
14:58 _JZ_ joined #salt
14:58 rbjorkli1 joined #salt
14:59 kojiro joined #salt
14:59 zmalone joined #salt
15:01 rem5 joined #salt
15:05 tercenya joined #salt
15:05 cnk joined #salt
15:07 fyb3r joined #salt
15:09 bowhunter joined #salt
15:09 simonmcc_ joined #salt
15:10 JonGretar_ joined #salt
15:10 ToeSnacks_ joined #salt
15:10 czchen_ joined #salt
15:11 nahkiss_ joined #salt
15:11 CeBe2 joined #salt
15:11 dober- joined #salt
15:11 the_lale1u joined #salt
15:11 rsys_ joined #salt
15:11 sarlalian_ joined #salt
15:12 oeuftete_ joined #salt
15:12 brd_ joined #salt
15:13 copelco_ joined #salt
15:13 sjorge_be joined #salt
15:14 bstaz_ joined #salt
15:14 hillna_ joined #salt
15:16 phtes_ joined #salt
15:16 kutenai_ joined #salt
15:16 kevinquinnyo joined #salt
15:16 eseyman_ joined #salt
15:17 abruanes- joined #salt
15:18 mrueg_ joined #salt
15:18 numkem1 joined #salt
15:18 lws_ joined #salt
15:19 mrtrosen_ joined #salt
15:19 whatevsz_ joined #salt
15:20 PuppyPok_ joined #salt
15:21 quasiben1 joined #salt
15:21 justanot1eruser joined #salt
15:21 apanek joined #salt
15:21 Xevian joined #salt
15:21 radhac joined #salt
15:21 viq_ joined #salt
15:21 apanek joined #salt
15:21 flowstate joined #salt
15:22 Vye joined #salt
15:22 liqw joined #salt
15:22 dh joined #salt
15:22 dkrae joined #salt
15:23 viq_ joined #salt
15:24 capri joined #salt
15:24 drawsmcgraw joined #salt
15:24 adongy joined #salt
15:25 akhter joined #salt
15:26 silviud joined #salt
15:26 kiorky joined #salt
15:27 silviud I'm running many jobs via salt - what is the best way to monitor them ?
15:27 akhter joined #salt
15:27 viq_ joined #salt
15:27 lero joined #salt
15:30 kawa2014 joined #salt
15:33 eliasp joined #salt
15:33 spuder joined #salt
15:35 akhter joined #salt
15:36 numkem joined #salt
15:36 TaiSHi iggy: thanks for the pointer I'll try that
15:36 TaiSHi And sorry for such a late answer
15:38 johtso joined #salt
15:39 perfectsine joined #salt
15:39 estahn joined #salt
15:42 beardedeagle joined #salt
15:47 akhter joined #salt
15:50 Fiber^ joined #salt
15:51 cpowell joined #salt
15:56 lordmike joined #salt
15:58 lordmike Hi. Just reporting an issue with http://repo.saltstack.com/apt/ubuntu/ - the latest ubuntu 16.04 says: W: http://repo.saltstack.com/apt/ubuntu/14.04/amd64/latest/dists/trusty/InRelease: Signature by key 754A1A7AE731F165D5E6D4BD0E08A149DE57BFBE uses weak digest algorithm (SHA1)
15:58 lordmike Possibly relevant: https://wiki.debian.org/Teams/Apt/Sha1Removal
16:03 gtmanfred can you report it to https://github.com/saltstack/salt-pack ? that is where all the repository stuff is
16:04 ageorgop joined #salt
16:05 iggy you could try rethinking your pillar setup so you don't have so much repetition
16:05 iggy oh whoops, I was scrolled up ;)
16:05 zer0def joined #salt
16:06 iggy rrei: ^
16:06 akhter joined #salt
16:07 patarr joined #salt
16:08 bltmiller joined #salt
16:08 rrei :D
16:08 rrei yeah, I was asking that a few hours ago
16:09 iggy ashrov: maybe take out the s (so https -> http)
16:09 rrei meanwhile i'm using jinja variables and yaml anchors to avoid repetition
16:09 rrei wish me luck! :D
16:09 iggy rrei: I've never used either of those
16:10 iggy not entirely true, I've used jinja before, but not to repeat data
16:10 akhter joined #salt
16:10 rrei the problem is, for scalars, yaml provides no way to refer to a previously defined value
16:11 rrei we can refer lists or objects, but not scalars
16:11 sfz- joined #salt
16:11 rrei that's the reason for jinja variables in my case
16:11 rrei the anchors do the trick nicely for all other cases
16:11 rrei yaml anchors I mean
16:11 iggy but you really shouldn't need to use either of those
16:11 lordmike @gtmanfred: done - https://github.com/saltstack/salt-pack/issues/76
16:11 saltstackbot [#76]title: Signing using SHA1 is deemed insecure by Ubuntu 16.04 LTS | Hi,...
16:12 rrei I shouldn't? why?
16:13 iggy I haven't seen anything, but it sounds like you could rearrange your pillar data and achieve the same thing
16:14 AndreasLutro woop woop
16:15 AndreasLutro wrong channel, or I went mad, you decide
16:18 kojiro Why can't it be both?
16:19 nate_c joined #salt
16:20 flowstate joined #salt
16:21 * Eugene runs around pantsless
16:21 onlyanegg joined #salt
16:23 babilen Eugene: As long as you wear underwear ...
16:23 Eugene No comment
16:23 perfectsine joined #salt
16:24 akhter joined #salt
16:24 babilen Well .. I am simply assuming that you are from the US and therefore just took of your trousers
16:24 LotR underpants are pants to, so..
16:24 LotR too*
16:26 tharkun joined #salt
16:29 kojiro I'm not sure what not wearing pants has to do with sanity, one way or the other.
16:29 flowstate joined #salt
16:31 gtmanfred lordmike: it is also worth noting that we do not have packages for 16.04 yet
16:31 lordmike I was wondering about that
16:31 lordmike Any plans?
16:32 gtmanfred there are plans
16:32 gtmanfred they aren't finished yet
16:32 LotR kojiro: some people think with their other head ;)
16:33 cnk no what packages for 16.04? Ubuntu is distributing .debs for salt-minion at least
16:33 LotR (for the pg-13 police, I was talking about zaphod beeblebrox. honest!)
16:33 cnk I am just waiting for salt-bootstrap to work on 16.04 so I can have a single provision stanza for my vagratn
16:34 rm_jorge joined #salt
16:34 ahammond any recommendations for getting .sls stuff to render nicely in pycharm?
16:34 gtmanfred cnk: there are no repo.saltstack.com packages yet
16:34 zmalone cnk: Probably because 16.04 was released since the last Salt release, which was in March.
16:35 gtmanfred the salt release isn't released yet
16:35 gtmanfred we are still stablizing it
16:35 gtmanfred and it should run on 16.04, we just do not have packages for it ready yet
16:35 ahammond I've currently got .sls associated with the jinja filetype, which... solves my jinja rendering, but doesn't do anything for yaml. :(
16:35 gtmanfred but once we do it will be added to the bootstrap
16:36 cnk Super. Thanks for all the work you do to keep pushing salt forward
16:36 cnk we just converted to Salt from Chef and even with wanting 16.04 support it has still been a better experience
16:36 kawa2014 joined #salt
16:36 cnk yeah salt!
16:37 ahammond cnk welcome. :)
16:38 s_kunk joined #salt
16:39 AdamSewell joined #salt
16:42 gtmanfred lordmike: i poked our packager guy and he said he took a look
16:43 SpeeR_ joined #salt
16:44 ahammond the output of salt-cloud for digital_ocean boxes is very helpful. The output for ec2 and linode is _much_ less. Is this because I haven't fully configured my providers for ec2 and linode, or is this intentional?
16:46 SpeeR_ we had an error in a script that issued a reboot on a group of minions, and the network was pulled out from under the saltmaster in an attempt to stop it from sending the jobs. Is there a location I can look to see if there are still any jobs left that will try to reboot minions?
16:46 SpeeR_ prior to reenabling the network?
16:47 ahammond SpeeR_ https://docs.saltstack.com/en/latest/topics/jobs/
16:47 SpeeR_ OK thank you
16:48 ahammond SpeeR_ you'd have to pull that network super-quick to beat it though. Salt is _fast_.
16:48 mapu joined #salt
16:48 ahammond and... if it's not fast, you might have a configuration or other issue.
16:48 flowstate joined #salt
16:49 SpeeR_ yeh, we have other issues right now, minions are always trying to reauth
16:49 SpeeR_ but there are no jobs left
16:49 SpeeR_ so they weren't fast enough
16:49 writtenoff joined #salt
16:50 akhter joined #salt
16:50 ferbla joined #salt
16:50 ferbla joined #salt
16:51 LordMike joined #salt
16:55 akhter joined #salt
16:55 salty_solution joined #salt
16:57 sagerdearia joined #salt
16:58 edrocks joined #salt
17:00 riftman joined #salt
17:02 flowstate joined #salt
17:02 AdamSewell joined #salt
17:02 salty_solution Hey I'm trying to source my bashrc file and I cant get the command to run. Has anyone every had issues like this and can help a fellow sodium lover out?
17:03 salty_solution /bin/sh: 1: source: not found
17:06 akhter joined #salt
17:06 AndreasLutro salty_solution: debian?
17:08 gtmanfred salty_solution: you should change the shell it is running as to bash, it defaults to /bin/sh
17:08 gtmanfred source is a bashism
17:08 gtmanfred and not posix
17:09 patrek joined #salt
17:10 salty_solution AndreasLutro:  yeah debian
17:10 Edgan joined #salt
17:10 salty_solution good to know thanks fellas
17:10 pipps joined #salt
17:11 AndreasLutro https://wiki.ubuntu.com/DashAsBinSh has the best walkthrough of why and how to fix it that I know of
17:11 flowstate joined #salt
17:12 fracklen joined #salt
17:13 ageorgop joined #salt
17:14 pfallenop joined #salt
17:14 akhter joined #salt
17:15 frew joined #salt
17:15 Garo_ joined #salt
17:16 Tanta use ". ~/.bashrc" instead
17:16 Tanta that's compliant without any BASH-specific stuff
17:18 hajhatten joined #salt
17:18 salty_solution Thanks Tanta
17:22 AndreasLutro assuming your bashrc doesn't have bashisms :p
17:25 akhter joined #salt
17:26 TheoSLC joined #salt
17:26 TheoSLC Greetings!
17:27 bfrog joined #salt
17:27 scottcrooks joined #salt
17:27 bfrog I can't recall if there's some way to force the salt mine to be refreshed everywhere
17:27 bfrog saltutil.refresh_pillar and mine.flush sort of work
17:27 bfrog but then the mine is more or less empty
17:28 bfrog it seems to take awhile to repopulate then
17:28 gtmanfred bfrog: salt \* mine.update
17:28 bfrog nvm, its right there
17:28 TheoSLC I want to start a conversation about the future of salt-cloud.  I should first ask if anybody knows of any documented plans for the future of salt-cloud.  Is it going to stay as it currently is, or morph into something bigger?
17:28 bfrog yeah
17:28 bfrog just saw that
17:28 bfrog rawr, wish that was a saltutil :-)
17:28 bfrog refresh_mine or something
17:29 AndreasLutro bfrog: salt-run cache.clear_mine, salt '*' mine.update, should do the trick
17:31 bfrog thanks guys, appreciate the quick answers
17:31 akhter joined #salt
17:31 merlehaggard joined #salt
17:32 londo joined #salt
17:32 salty_solution joined #salt
17:33 TooLmaN joined #salt
17:33 jespada joined #salt
17:36 cpowell joined #salt
17:37 jespada Hi, if I would like to call `salt-call state.highstate` from another python progrma, on each minion server(not from the central master) what would be the recomened way, use the clients? or just python sys.argv ?
17:38 autofsckk joined #salt
17:39 Tanta import os\nos.system("salt-call state.highstate")\n
17:40 Tanta or: from subprocess import call\ncall(["salt-call", "state.highstate"])
17:40 relidy joined #salt
17:43 fer_bla joined #salt
17:43 jespada Tanta: thanks so just use standard python instead of something like `import salt.client` then caller = salt.client.Caller() then use cmd
17:44 Tanta I'm not really qualified to say which is better, but it seems more straightforward to let Python spawn a shell process to run the highstate
17:46 jespada fair enough :)
17:46 akhter joined #salt
17:49 AndreasLutro I'd do the subprocess unless you need to tap into salt internals - importing salt can have funky side effects in my experience
17:50 iggy TheoSLC: start the conversation... there may be plans internal to SSE, but we don't really know them... and I'm sure they'd appreciate the input
17:51 pipps joined #salt
17:51 jav joined #salt
17:51 murrdoc joined #salt
17:51 jfindlay TheoSLC: is this the kind of thing you were thinking of: https://github.com/saltstack/salt/issues/25555?
17:51 saltstackbot [#25555]title: Salt Could should have a way to define an entire infrastructure | At present the map file is pretty limited in what it can do in the fact it will only spin up instances not other resources (unless I'm missing something) and overstate seems to be dead, ideally you should be able to define an entire infrastructure (cross provider) through a mapfile/overstate style system....
17:52 akhter joined #salt
17:53 flowstate joined #salt
17:56 sc250024 Doesn't orchestrate take care of that?
17:56 pipps joined #salt
17:57 iggy it can (and I think that's one of the ideas behind stuff like the boto modules)
17:57 iggy but it's a little verbose
17:58 Tanta one way to do this might be to deploy something like cloudformation or terraform from a Jinja template that is populated with Pillars, and have a separate salt state that can update the stack
17:59 iggy you sound like murrdoc
17:59 Tanta this is what I do already, except without a Jinja template, and without the automated updates, but I store the JSON for the entire stack in the source repository side-by-side with the Salt code
18:00 sc250024_ joined #salt
18:01 autofsckk joined #salt
18:01 ssplatt joined #salt
18:02 AndreasLutro we have an external database for customer data which we use to generate terraform templates and as a salt external pillar
18:02 iggy I think that's where we might end up
18:03 relidy joined #salt
18:04 pipps99 joined #salt
18:04 TheoSLC iggy: Thanks.  I don't know what SSE is..  But my thoughts are around doing stateful configuration management for cloud infrastructure, just like we can do on platforms with Salt states.  This is all coming from my frustration of the limitations of AWS CloudFormation.  One alternative could be to use salt with boto states.  But I really feel like a salt-minion is the wrong place to put stateful definitions for infrastructure, I feel lik
18:04 TheoSLC e it should be part of salt-cloud.  (BTW, I'm no expert on salt-cloud)
18:04 TheoSLC And in general I do believe that cloud/infrastructure configuration management should be a totally separate tool from platform configuration management.  I'm frustrated by attempts to conflate the two.
18:05 Tanta what does CloudFormation lack?
18:05 iggy SSE = SaltStack Enterprise
18:06 iggy the company
18:06 AndreasLutro Tanta: readability :p
18:06 TheoSLC Tanta: logic.  cloudformation has only 1 logical operator.  So it's really hard to get it to do something conditional.  I also can't do things like merge lists.
18:06 kevinquinnyo joined #salt
18:06 AndreasLutro yeah I think you're supposed to have some sort of application generating those templates
18:06 TooLmaN joined #salt
18:07 Tanta I can show you how I deal with that  with a short example if you like
18:08 edrocks joined #salt
18:08 TheoSLC cloudformation resource types are also more limited than the AWS API.  For example, you cannot give a security group a custom name with cloudformation.  If your practices require conformity for naming security group, you cannot even use cloudformation.
18:10 hasues joined #salt
18:10 Tanta http://pastebin.com/raw/BZvXuWfn - here's a horribly butchered example of how I do it with Parameter + Mapping
18:10 hasues left #salt
18:11 Tanta custom naming for resources is indeed a great point and a pain in the butt
18:11 TheoSLC If the point is to have a tool that creates cloudformation scripts, I would rather have that same tool use the more powerful AWS API instead and perform the orchestration itself.
18:12 iggy ^
18:13 Tanta what I like about CFN is that it requires a deep understanding of dependencies and removes absolutely all of the magic
18:15 Tanta IE, if you want to put together a functional VPC it will take quite a bit of work that you lose if you let the AWS console or Terraform do it all for you, maybe the long-term value is nil but it's a good learning exercise at the least
18:18 hajhatten joined #salt
18:21 pipps joined #salt
18:23 dmaiocchi joined #salt
18:24 TheoSLC I don't mind doing extra work, if it means getting the automation I need.  One limitation with even doing this with salt states is that I would need the output from one boto state_id to be made available to the next.  (A kind of state that can re-render after each id run).  It may be too big a task to add this sort of feature to minion salt.  But it could become part of salt-cloud.
18:25 iggy in the midterm, you could also do it using python states that call boto stuff
18:26 iggy I'm pretty sure orchestrate jobs can use python "states" too (never tried)
18:26 TheoSLC iggy: so basically everything would be done in the py rendering?
18:26 cyraxjoe joined #salt
18:26 TheoSLC iggy: oooo, I forgot about orchestrate.
18:27 catpiggest joined #salt
18:30 amcorreia joined #salt
18:30 pipps joined #salt
18:30 josuebrunel joined #salt
18:31 isntall joined #salt
18:31 isntall joined #salt
18:31 TheoSLC iggy: Even with orchestrate, I still don't know how to solve the "getting data out of one state run for the next state run" problem.
18:31 eseyman joined #salt
18:32 ajw0100 joined #salt
18:33 MadHatter42 joined #salt
18:33 babilen TheoSLC: You can set it as grains on the minion
18:33 flowstate joined #salt
18:36 ssplatt joined #salt
18:37 TheoSLC babilen: I still think my only chance to pull in that grain would be on rendering (which is too late).  But that does make me.  I could save the output somewhere on disk and pull it in that way.
18:37 TheoSLC ^But that does make me think**
18:39 keldwud_ joined #salt
18:41 ssplatt joined #salt
18:42 major joined #salt
18:42 hasues joined #salt
18:43 major is there some way to specify a node target from the salt-ssh CLI that isn't in the roster?
18:44 TheoSLC What if state output could be stored in a data object and could be queried by future states with something like sdb?
18:45 babilen TheoSLC: Why would it be too late?
18:45 babilen (just curious)
18:46 babilen TheoSLC: I mean you could also fire an event on the minion at the end of the run and save that information on the master .. that way you can use it if the minions comes back.
18:46 TheoSLC because I can only query grains and add then to the state during rendering.  Which is done before the states run.
18:47 babilen TheoSLC: In the sense of "Minion comes back, you check if you have saved information for that, then you use that information to determine what to run next"
18:48 AdamSewell joined #salt
18:48 TheoSLC babilen: i feels like a complex solution, can't do it in a masterless situtation (which we do alot)
18:48 babilen yeah
18:49 sc250024 joined #salt
18:49 ahammond salt-cloud --query is fantastic, but takes a long time to run... is there a cache for this? Preferably one with reactors for create / destroy?
18:49 babilen TheoSLC: Saving it locally on the minion is a decent option
18:49 gtmanfred ahammond: there is
18:49 ahammond gtmanfred dear friend tell me more! :)
18:50 gtmanfred ahammond: https://docs.saltstack.com/en/latest/topics/cloud/misc.html#salt-cloud-cache
18:50 gtmanfred you have to do a full query, and it will update the cache on each fullquery call
18:50 gtmanfred but if you call salt-cloud --cache, it should just search your cache
18:50 cyborg-one joined #salt
18:51 gtmanfred actaully... hrm
18:51 gtmanfred it is not --cache
18:51 gtmanfred i forget how to make it search only using the cache, but i do remember when joseph wrote it
18:52 gtmanfred but there is a cache
18:52 sc250024 joined #salt
18:53 gtmanfred the thing it was made for was to be used with the salt-ssh cloud cache roster
18:58 edrocks joined #salt
18:58 quasiben joined #salt
19:00 sc250024 joined #salt
19:02 toanju joined #salt
19:03 edrocks_ joined #salt
19:04 zmalone joined #salt
19:04 flowstate joined #salt
19:05 edrocks__ joined #salt
19:06 rem5 joined #salt
19:13 edrocks joined #salt
19:18 [Kernel_Panic] joined #salt
19:18 [Kernel_Panic] joined #salt
19:19 hajhatten joined #salt
19:20 davisj So, my reading of the docs is that setting 'ext_pillar_first: True' in master config means that you should be able to do something like "pillar['some key from ext_pillar']" in pillar/top.sls. But that doesn't seem to be the case. Or, I'm doing something wrong.
19:20 davisj Anyone have thoughts on why calling pillar['some key from ext_pillar'] causes the top file rendering to fail just before it successfully renders the ext_pillar https://gist.github.com/davisj/83404e0c567d860f48d8e98197304014
19:23 evilrob I've got a pillar var with the value of "true" that I'm trying to get the text "true" to render in a template.  All that seems to render is a blank.  pillar.items shows the value as "True" so it's populated, I can only assume it's rendering as boolean true.
19:24 mapu joined #salt
19:24 planetvortex joined #salt
19:26 AndreasLutro evilrob: shouldn't render as a blank, you sure you checking the right minion?
19:26 evilrob yes
19:26 AndreasLutro are you rendering the pillar variable directly or is there some processing going on inbetween
19:26 davisj evilrob: If you have control of how it is set, then just set it to a string instead of a bool.
19:27 evilrob daveleigh: I've tried setting it with single and double quotes.
19:28 evilrob davisj: I've tried setting it with single and doublequotes
19:28 hasues joined #salt
19:28 planetvortex I've been trying for about a week to get a reactor to work (first one for me) and I haven't had much luck.  I'm working with an inotify beacon, that appears to be kicking off ok after I modify a file and the master shows that it's looking for the reactors.  However it doesn't appear to be finding any.
19:29 davisj evilrob: that should do it. I suppose AndreasLutro was closer to the mark thinking that the key is not present in pillar at all?
19:29 evilrob as always, I ask my question and find the problem is somethign stupid I did.
19:30 evilrob I was setting the value right.  I was rendering the wrong varible in the template
19:30 * evilrob drinks more coffee
19:30 davisj evilrob: doh!
19:35 shiriru joined #salt
19:35 AndreasLutro planetvortex: double check the paths to your reactors, salt is awful at telling you if you provide the wrong path
19:36 pid1 joined #salt
19:37 SubOracle joined #salt
19:38 `chris joined #salt
19:39 asteriskie AndreasLutro:  I tried straight path, but I'm also using a gitfs for the paths.  I've tried a few variants of what should be the paths but no luck...and I believe you on the picky part.
19:40 asteriskie I'm getting ready to paste my cleaned up paths into the Gist bit.
19:40 planetvortex sorry, changed nicks.
19:41 quix joined #salt
19:41 AndreasLutro gitfs works fine, so does salt:// paths
19:41 AndreasLutro but if you typo the salt:// path you'll not be explicitly told so
19:43 hasues left #salt
19:48 planetvortex AndreasLutro:  https://gist.github.com/asteriskie/f7b5f8cb4b5ec7c6d688828e77b08c16
19:49 ChadRodrigue joined #salt
19:49 kojiro joined #salt
19:50 ChadRodrigue Hello everyone.  I have a simple question: is it possible to set the output of a command as a grain in a state?
19:50 ChadRodrigue For example, the output of the "date" command?
19:50 planetvortex AndreasLutro: here rather:  https://gist.github.com/asteriskie/4f49976241ce2cdd591e58db4f0e879a
19:52 bltmiller joined #salt
19:54 ChadRodrigue ...any takers?
19:54 AndreasLutro planetvortex: paths look correct, I'd check the event name and data to see if you've got that bit right
19:55 AndreasLutro ChadRodrigue: yes, you can write custom grains in python - but they're cached for some time so you might not want to use it for the current date
19:55 planetvortex I actually did a copy and paste of the tag from the event to see if maybe I was hitting a typo issue there.
19:56 ChadRodrigue @AndreasLutro: What would be a better way to go about doing something like that?
19:57 ChadRodrigue I'm not married to the process...
19:57 AndreasLutro what do you need the date for?
19:57 ChadRodrigue I don't.  I was using date as an example.  I need the value of another command.
19:57 ChadRodrigue A considerably lengthier one that outputs a UUID that I'd like to put in a jinja-templated conf file.
19:58 AndreasLutro can you create a separate file for just the uuid?
19:58 AdamSewell joined #salt
19:58 ChadRodrigue I can salt.cmd.run the command OK in the template, but ideally half it's arguments would come from pillar values, and I'm having a really difficult time trying to figure out how to sub that in.
19:58 tpaul joined #salt
19:59 ChadRodrigue I suppose I could run the command and output it to a file, sure.
19:59 ChadRodrigue Not above that at all.
19:59 AndreasLutro salt['cmd.run']('foo ' ~ pillar.bar ~ ' baz') is how you'd do that
19:59 AndreasLutro but since it's a uuid I assume it'd be different each time?
20:00 ChadRodrigue The value of the command would be different every deployment.
20:00 flowstate joined #salt
20:00 ChadRodrigue The arguments from the command, ideally, would come from the pillar (all static values for that pillar)
20:01 ChadRodrigue Also: that concatonation routine you posted might just be good enough.  I couldn't find out how to do that in any docs
20:01 planetvortex AndreasLutro:  I appended a sample run to the comment of my gist.  If it looks right, then I am at a loss.
20:01 AndreasLutro the jinja docs are worth looking through
20:02 flowstate joined #salt
20:02 AndreasLutro yeah I don't know either then planetvortex - increase your master's log level I guess
20:02 ChadRodrigue Thank you very much.   That's given me at least two avenues to attack the problem with.  I appreciate it.
20:03 planetvortex Ok, I'll see what I can get.
20:03 planetvortex well..Debug's already on
20:06 Muchoz joined #salt
20:06 SubOracle joined #salt
20:06 planetvortex Upped to trace...that's gonna take a bit to look through.  But looks like it might give me what I need.
20:09 akhter joined #salt
20:10 sbogg joined #salt
20:12 planetvortex Ok....so apparently turning on TRACE fixed my issue today. :P
20:12 akhter_1 joined #salt
20:12 pipps joined #salt
20:12 planetvortex the reactor worked...whatever.
20:13 planetvortex back to debug...and still working.  Thanks AndreasLutro anyway.
20:15 beelzebob joined #salt
20:18 duncanmv joined #salt
20:19 CeBe joined #salt
20:20 salty_solution joined #salt
20:20 hajhatten joined #salt
20:20 notnotpeter joined #salt
20:20 relidy_ joined #salt
20:21 SubOracle joined #salt
20:21 onlyanegg joined #salt
20:21 nebuchad` joined #salt
20:22 lkannan_ joined #salt
20:23 serverascode_ joined #salt
20:23 jrklein_ joined #salt
20:23 shawnbutts_ joined #salt
20:24 djural_ joined #salt
20:24 gtaylor_ joined #salt
20:24 arapaho_ joined #salt
20:24 Laogeodritt| joined #salt
20:25 tawm04_ joined #salt
20:25 MikaT_ joined #salt
20:26 mrueg_ joined #salt
20:27 M-liberdiko1 joined #salt
20:27 akhter_1 Anyone use boto_iam here to create policies?
20:27 mikepea_ joined #salt
20:27 relidy joined #salt
20:28 Awesomecase_ joined #salt
20:28 crashmag_ joined #salt
20:28 renoirb_ joined #salt
20:29 planetvortex left #salt
20:29 jcockhren joined #salt
20:29 MindDrive joined #salt
20:30 tongpu joined #salt
20:31 packeteer joined #salt
20:31 georgemarshall joined #salt
20:32 ChadRodrigue @AndreasLutro, the solution you provided worked.  Thank you so much.
20:32 flowstat_ joined #salt
20:32 TomJepp joined #salt
20:33 adelcast joined #salt
20:33 fyb3r left #salt
20:35 catpigger joined #salt
20:37 mikepea_ joined #salt
20:38 jab416171 I want to store a snippet of a bash script in pillar, what's the best way to go about this?
20:38 jab416171 using varstack
20:38 AdamSewell joined #salt
20:41 akhter joined #salt
20:41 kinow joined #salt
20:45 guest joined #salt
20:46 guest left #salt
20:49 pipps joined #salt
20:50 woodtablet joined #salt
20:51 wryfi_ does anybody know if there's a way to have an ext_pillar abort a salt run if it experiences a failure?
20:51 woodtablet anyone here try out salt-kitchen recently ? i just tried installing it.. and i gotta say i hate ruby
20:51 woodtablet salt-kitchen requires 1.9.3, but its depedencies require at least 2.0.0
20:51 woodtablet so, fun times
20:52 AdamSewell joined #salt
20:52 dyasny joined #salt
20:52 jwon joined #salt
20:53 iggy TheoSLC: __context__ ?
20:53 brianfeister joined #salt
20:54 iggy nah, that only works in state/execution modules
20:56 akhter Anyone use boto_iam?  I want to know how you can have two keys named "Action" when using policies_from_pillars
20:56 woodtablet Does anyone here have a good example or suggestions of how to test salt-formulas? maybe not using salt-kitchen
20:57 salty_solution woodtablet: What issues are you having with ruby? Salt-kitchen sounds like a chef remake.
20:57 zmalone woodtablet: I've played around with dropping inspec files into each formula, and then having vagrantfiles to go with them
20:58 iggy I don't think it's something that's been generally solved
20:58 zmalone salt-kitchen is an adaptation of chef's tdd tooling, and nothing like it really exists in the salt world
20:58 iggy mostly whatever fits your needs best
20:58 zmalone a lot of the stuff that makes test-kitchen, berks, and the other parts of the chef ecosystem work don't exist yet in salt
20:59 zmalone versioning of formulas, formula dependencies, etc. either don't exist or are not in wide use
20:59 woodtablet salty_solution: salt-kitchen's Gemfile says 1.9.3, but when trying to install it its dependency requires 2.0.0 for net-ssh, i have tried alot of crap. even got rvm now on here too and 4 version of ruby now
20:59 zmalone (I'm not always sure which)
20:59 woodtablet zmalone: how do us inspec to test it ? I am not familiar with that process
20:59 woodtablet zmalone: is that the same as a rspec file  ?
20:59 pipps joined #salt
21:00 AdamSewell joined #salt
21:00 subsignal joined #salt
21:00 zmalone it's an rspec extension, like serverspec, for doing integration tests on running systems
21:00 woodtablet zmalone: so lets say i write a formula, how do you like test it with inspec? kitchen had this thing to do kitchen test function which would take your rspec file and use it against your vagrant instance
21:01 woodtablet zmalone: is there a cool script i can use or how do i run inspec on the vagrant instance? sorry noob question
21:01 zmalone kitchen spins up vagrant instances, and I have manual vagrant files in place to do the same
21:01 zmalone then run the tests by hand
21:01 zmalone I've only done it as POC, but in the process, I found salt bugs which were reported and mostly fixed,
21:02 zmalone so it had some value to me
21:03 woodtablet zmalone: so something like vagrant --provision --provision-with salt ?
21:04 woodtablet zmalone: then someting like inspec exec test.rb -t ssh://centos@host
21:04 zmalone That part of my salt repos I didn't write, but I think we used a shell script as the provisioning script/path
21:04 zmalone then handle installing and configuring salt in there
21:05 pipps99 joined #salt
21:05 akhter joined #salt
21:06 woodtablet zmalone: can i bother to see a tidbit of your shell script in gist ? i am just looking for something help me move away from kitchen, something similar to what you guys use
21:08 zmalone that shell script here is unfortunately fragile and not mine
21:08 zmalone I'll think about it and get back to you tomorrow, if you are in this channel?
21:08 zmalone See if I can come up with a less fragile version from scratch
21:10 akhter joined #salt
21:10 intr1nsic joined #salt
21:11 duncanmv joined #salt
21:12 lorengordon joined #salt
21:12 v0rtex joined #salt
21:12 rome_390 joined #salt
21:12 Valfor joined #salt
21:12 Valfor joined #salt
21:13 woodtablet zmalone: ha ok, thanks
21:13 pppingme joined #salt
21:15 ahammond salt-cloud --query from the command line works as expected. On the master, salt-call cloud.query says 'cloud.query' is not available. What do I need to do to convince salt to load the cloud module?
21:16 gtmanfred ahammond: run salt-call cloud.query -l debug?
21:16 gtmanfred it should just work
21:17 ahammond even more awesome: it works in production salt master, but not on my VM... which should be just about identical to prod'n.
21:17 gtmanfred uhhh /shrug
21:17 ahammond I really, really, really don't want to test my development code on the master. :)
21:17 gtmanfred are you installing useing packages?
21:18 gtmanfred or pip?
21:18 ahammond gtmanfred packages from repo.saltstack.com
21:18 gtmanfred apt-get install salt-cloud or yum instlal salt-cloud
21:18 ahammond which... is awesome.
21:18 gtmanfred the pakcages split it out from the main package
21:18 toabi joined #salt
21:18 ahammond salt-cloud packages are installed on both (and they're both salted using the same formula with very minor changes between vm and prod'n)
21:18 gtmanfred which is the only thing the __virtual__ looks for in the cloud module
21:20 ahammond hmmm, boto_cloudwatch isn't loading. What do you bet? ...
21:21 hajhatten joined #salt
21:23 flowstate joined #salt
21:25 knine joined #salt
21:28 jnials joined #salt
21:29 AdamSewell joined #salt
21:30 brotatochip joined #salt
21:32 yomilk joined #salt
21:33 woodtablet salty_solution: i just started deleting all the gemfiles (the ones that reference 1.9.x) and got salt-kitchen installed. here is downloading new images and testing..
21:34 salty_solution Yeah you typically have to delete the gemfile.lock and run bundle again.
21:35 salty_solution Though you may not have to if you are just outright switching ruby versions through rvm.
21:35 woodtablet these arent the locks, these are the Gemfile and .ruby (some of ruby version file)
21:35 salty_solution Oh okay
21:35 woodtablet rvm is nice though, so i could get 4 parallel versions of ruby
21:36 AdamSewell joined #salt
21:36 salty_solution Yeah you could
21:37 salty_solution I personally like rbenv better but that is just a preference thing.
21:37 woodtablet i have no preference, only started using it because it was in the salt-kitchen readmes lol
21:38 cpowell joined #salt
21:38 brotatochip joined #salt
21:39 murrdoc serverspec is dope
21:41 salty_solution murrdoc: What do you like about it?
21:41 salty_solution I haven't ever used it but would like to test machine creation
21:42 murrdoc its simple, and it works when you need to test stuff like is service running
21:42 murrdoc do files exist
21:42 murrdoc so on
21:42 woodtablet i like it too
21:42 murrdoc i am not saying kitchen is bad
21:43 murrdoc i am saying evaluate both kitchen and serverspec
21:43 murrdoc before committing to one
21:43 murrdoc what u think woodtablet
21:43 woodtablet you can use kitchen with serverspec
21:44 woodtablet i think serverspec files are simple to write, and great for auto/unittesting recipes (trying to convert to formulas now if i can get this thing to behave)
21:44 woodtablet i definately wouldnt mind not using kitchen if someone has a good way for unittesting formulas
21:44 woodtablet getting my team on board with it was impossible
21:45 woodtablet thus the implosion of our chef implmentation
21:45 pipps joined #salt
21:45 woodtablet because i wrote all the recipes and no one else wanted to touch'em
21:45 woodtablet i should hit up jfdindlay and ask how much a consultation is
21:47 AdamSewell joined #salt
21:49 akhter_1 joined #salt
21:49 murrdoc good food
21:50 murrdoc jfindlay:  will come out for good food
21:50 murrdoc its rough in utah
21:50 murrdoc (totally kidding)
21:50 woodtablet lol
21:50 salty_solution_ joined #salt
21:50 woodtablet i meet utahdave
21:50 woodtablet he was cool
21:52 bltmiller joined #salt
21:53 AdamSewell joined #salt
21:53 * jfindlay is totally uncool
21:53 woodtablet lol
21:54 murrdoc jfindlay: is aight
21:54 murrdoc also he loves bbq
21:54 jfindlay also, utahdave is more likely the utahdave you are looking for
21:54 murrdoc when u get him out to whereever u are woodtablet
21:55 west575 joined #salt
21:55 woodtablet Utahdave came out to LA for SCALE (southern california linux expo) and he did a salt reactor presentation
21:56 SpX joined #salt
21:56 woodtablet ah i see justin is alive =D
21:57 murrdoc jfindlay: next time u come to la
21:57 murrdoc holler
21:57 murrdoc we ll take you to baby blue bbq
21:57 murrdoc i forget who we went there with from salt
21:57 murrdoc it was fun
21:57 jfindlay murrdoc: cool
21:57 woodtablet jfindlay: definitely, i ll buy you a drink
21:57 murrdoc it was one of the lead trainer guys
21:58 murrdoc super cool dude
21:58 jfindlay although I'm vegetarian so I'll be judging you the whole time
21:58 murrdoc oh
21:58 murrdoc then real food daily it is
21:58 woodtablet bbq carrots!
21:58 murrdoc best vegan ever
21:58 jfindlay lol
21:58 salty_solution_ LOL
21:58 akhter joined #salt
21:58 salty_solution_ Smoked pineapple.
21:59 pipps joined #salt
21:59 jfindlay murrdoc: did we meet at saltconf?  I talked with so many people that I can't remember most of their names
21:59 * jfindlay needs to be better at this
21:59 murrdoc no we didnt
21:59 murrdoc i didnt come out
21:59 murrdoc had to goto openstack instead
22:00 murrdoc we met last year
22:00 murrdoc no way will u remember someone from last eyar jfindlay
22:01 rem5 joined #salt
22:01 woodtablet murrdoc: i dont know, every time i read your name I think of this guy:
22:01 woodtablet https://en.wikipedia.org/wiki/Murdoc
22:01 saltstackbot [WIKIPEDIA] Murdoc | "Murdoc is a fictional character in the ABC television series MacGyver, played by Michael Des Barres. Murdoc is an assassin working for the Homicide International Trust, an international group of assassins. He appears in a total of nine episodes, being the most frequent antagonist of the series and one..."
22:01 murrdoc http://gorillaz.wikia.com/wiki/Murdoc
22:02 murrdoc jfindlay: have yuo heard of stackstorm
22:04 ferbla_ joined #salt
22:04 jfindlay from my perspective, the hard thing about testing states and more with salt is having a good enough orchestration platform for test purposes, but orchestration in general is a hard problem to solve
22:05 jfindlay murrdoc: I have, but I've not experimented with it or terraform, or the other one I can't remember yet
22:06 murrdoc i am loving it
22:06 murrdoc only downside is the salt actions need some love
22:06 murrdoc https://github.com/StackStorm/st2contrib/issues/482
22:06 saltstackbot [#482]title: Use saltstack pepper in the salt pack to talk to the api | Runner module is broken in the salt pack with saltstack version 2015.8.7 and above. Checked with @jcockhren and will stage a version of the pack using [saltstack/pepper](https://github.com/saltstack/pepper)
22:06 murrdoc the salt api changes to 2015.8 broke the code that was in there
22:07 bltmiller is there anyone to install only salt-minion through pip? seems like I can only do `pip install salt` which gets both master and minion
22:07 jcockhren murrdoc: yeah. that's in the works. I should move faster on testing against newer versions
22:09 murrdoc kk jcockhren
22:09 murrdoc i mean stackstorm should use pepper, which just works
22:09 jcockhren murrdoc: we agree there.
22:09 murrdoc hook it up :D
22:10 murrdoc i might later this week
22:10 * murrdoc embraces laziness
22:10 jfindlay bltmiller: no, you have to install the whole salt package from pip
22:10 bltmiller jfindlay: any plans to change that?
22:10 woodtablet murrdoc: tell me more, does stackstorm help with salt formula testign and deployments?
22:11 jfindlay bltmiller: there is a salt-ssh pip package, but it's basically salt minus most of the command scripts, like `salt`
22:11 jfindlay I imagine you could do the same but for `salt-minion` and `salt-call`
22:11 perfectsine joined #salt
22:11 murrdoc woodtablet: nope, only for connecting multiple micro services
22:12 bltmiller jfindlay: mk, thanks
22:12 woodtablet murrdoc: i am chilling here on 25 min in a kitchen converge for the example salt forumula from salt-kitchen
22:12 woodtablet murrdoc: doohhh
22:13 jfindlay bltmiller: not really due to the overhead of maintaining separate pip packages.  If you want to only install salt-minion, I recommend using packages from repo.saltstack.com
22:14 bltmiller jfindlay: if only I could, I do not have root privileges on my servers :(
22:14 bltmiller everything must be installed and run locally
22:16 jfindlay maybe we could add an option for split pip packages, but I'm reluctant to encourage the use of pip packages as pip is usually a much weaker package manager than the system package manager
22:16 jfindlay but your use case makes sense
22:18 bltmiller jfindlay: aye. I really love salt, and hopefully I can change minds around my org such that we can actually get privileged accounts and use repos, but for now this is my only option. so it's either through cloning the git repo, pip, or no salt at all
22:19 bltmiller if anything, this small bit of pain I get to go through serves as good ammunition. things can only improve :)
22:20 flowstate joined #salt
22:22 hajhatten joined #salt
22:23 jfindlay bltmiller: yeah, hopefully the suggested workaround will work for your case.  I don't want to cause unnecessary pain and I know that dev/sys ops involves more unsavory work than many people know :)
22:24 bltmiller heh no kidding. that's what I'm here to fix in my org
22:30 ferbla joined #salt
22:33 hal58th Anyone in San Diego doing any hiring that use Salt? My company just decided to use Chef. Blah
22:33 kbaikov joined #salt
22:34 woodtablet hal58th: lol
22:34 perfectsine joined #salt
22:36 perfectsine joined #salt
22:41 flowstate joined #salt
22:41 scottcrooks joined #salt
22:42 cnk hal58th: My condolences
22:42 cnk I really wanted to like chef.. it's Ruby and everything
22:42 zenlot6 joined #salt
22:42 hal58th Thanks much. It's really difficult to look through job postings and see if the company actually uses Salt or not.
22:46 salty_solution_ I have used way to much chef and the second that I picked up salt I realized that chef really was as crappy as I thought it was.
22:46 hal58th Ugh, if only my company would honestly try out Salt.
22:47 hal58th salty_solution_: What do you like about Salt compared to Chef? I
22:47 hal58th I'm still writing some docs about why we should use Salt
22:47 salty_solution_ Chef is so complicated
22:47 salty_solution_ salt is so easy to use
22:47 salty_solution_ and easy to learn
22:47 salty_solution_ and I think that it is faster as well.
22:48 hal58th It is really fast... I really need to make a presentation about why Salt is easy to use and read....
22:52 rem5 joined #salt
22:52 elsysops joined #salt
22:54 SubOracle joined #salt
22:55 rem5 joined #salt
22:55 iggy isn't that what saltstack's marketing people are for?
22:55 pipps joined #salt
22:55 iggy also, move to LA!
22:56 hal58th lol screw LA. I have to drive 5 miles to get home and it takes me 15 minutes. In LA that can easily take an hour.
22:56 perfectsine joined #salt
22:58 ahammond move to the Valley, there's about 4 jobs for every person who wants one.
22:58 iggy that's about my commute
22:58 iggy but I don't hit freeways
22:58 pipps joined #salt
22:59 cnk readable, easy to use, all very subjective. The comparison I want to see laid out for the various devops solutions is how does it handle securely distributing secrets like certs or other keys
22:59 ahammond also... salt-cloud --query gives me public_ips for all my instances. salt-call cloud.query doesn't. what am I doing wrong?
23:00 hal58th Tell Silicon Valley companies to move to San Diego. Cheaper to operate but still have great weather :)
23:00 iggy cnk: salt handles it by not handling it at all
23:00 hal58th iggy, I agree that there should at least be a matrix comparison on Salt's website... I wonder if they can do that legally...
23:01 ninkotech_ joined #salt
23:01 cnk why not? if it is accurate
23:03 ahammond hal58th interested in working remote? if so, what's your github id so I can see your code. :)
23:03 ahammond iggy our salt system has some very clever stuff for distributing certs and such. elegant, even.
23:04 iggy blog post or it didn't happen?
23:04 ahammond iggy I have a task to refactor it to an ext_pillar... at which time you'll get a blog post _and_ a pull request.
23:05 iggy using anything special for storage of said secrets? (i.e. vault, etc)
23:05 ahammond iggy nah, just the filesystem
23:05 iggy won't work for us :(
23:06 ahammond iggy sorry man. you could pretty easily extend it to include the gpg renderer, I think.
23:06 ajw0100 joined #salt
23:06 iggy having 120 masters and not wanting to keep that stuff in git makes it harder to solve
23:06 ahammond iggy ah... the cool part of this is how it handles distributing changes and backups of the data.
23:06 hal58th No code written, but here is my account https://github.com/hal58th
23:07 ahammond hal58th commits == portfolio. no portfolio, and I can't make a recommendation beyond "well, he seemed clueful in #salt". :)
23:07 iggy that's how I got hired
23:08 ahammond iggy good point.
23:08 ahammond hal58th email your resume to ahammond@anchorfree.com
23:08 iggy "he talks a lot and I want the referral bonus"
23:08 ahammond it's $5k for engineers.
23:09 ahammond because... silicon valley
23:10 pipps joined #salt
23:10 iggy I should have made him split it with me
23:11 ahammond any suggestions on why salt-cloud --query works  but  salt-call cloud.query fails to load cloud.query on my salt master? salt-cloud is installed and running 2015.8.8 from repo.saltstack.com
23:11 drawsmcgraw joined #salt
23:13 pipps joined #salt
23:15 kevinquinnyo joined #salt
23:15 autofsckk joined #salt
23:16 ahammond ok... testing in production.
23:17 ahammond iggy if I get that bonus, I'll send $1k your way. After taxes, that's what, a case of beer?
23:18 rem5 joined #salt
23:19 flowstate joined #salt
23:22 pipps joined #salt
23:22 bVector I'm seeing a bunch of __master_alive coming back with success: false retcode 254 in the event stream
23:22 estahn joined #salt
23:22 bVector is success: false indicative of something, __mine_interval is also success:false
23:22 hajhatten joined #salt
23:24 ahammond answer: because I'm dumb enough to shadow the cloud module with my own cloud module in _modules. Some days.
23:26 wryfi_ ahammond: who do you work for?
23:27 ahammond wryfi_ anchorfree, wanna job? because... the devops dept here is good, but tiny.
23:28 wryfi_ maybe, depends on lots of things. current job not so great, but good people. getting kicked out of my housing in berkeley, not sure if i'm gonna stick around.
23:29 wryfi_ everything up in the air
23:29 woodtablet hal58th: chef doesnt have a builtin way of dealing with secrets very well. also chef & kitchen is painful sometimes because of compile & run time of the ruby code. determining your recipe run time - you would think would be straightforward but its not. chef recipes and dependencies are brittle. take a look at berkshelf (guy wrote a pretty complicated tool to just help with this)
23:30 ahammond wryfi_ the office is in Menlo park. We can do transition housing if you need.
23:30 wryfi_ that's generous
23:31 ahammond wryfi_ also, we do consumer VPNs. So maybe 5% of our traffic is selling civil liberties to people in countries with douchy governments. Which is kinda cool.
23:31 hal58th woodtablet, doesn't Chef have Data Bags to handle secrets? I haven't looked into it too much
23:31 wryfi_ nice
23:32 wryfi_ ahammond: what's the business model? everything appears to be free from your website.
23:33 wryfi_ oh i see, it's freemium
23:33 ahammond wryfi_ premium subscription. there's also ads, but they mostly just cover costs.
23:33 woodtablet hal58th: data bags are just key value pairs, you can encrypt your databag, but then you need the clients to be able to decrypt.
23:33 ahammond big growth space for us is IoT
23:33 wryfi_ ah, you and the rest of the valley ... IoT and AI are all the hotness.
23:35 ahammond wryfi_ somebody has to make it easy for these things to talk to each other, and we wanna be that somebody.
23:35 wryfi_ cnk: i'm using vault's transit mode encryption with an external pillar to manage secrets
23:35 hal58th ah ok woodtablet, I will have to do more reading.
23:35 wryfi_ not the *most* secure way to use vault, but good enough for our purposes.
23:36 woodtablet i havent been called the hotness since my "Tabasco" incident
23:36 wryfi_ lol
23:36 wryfi_ ahammond: sure, didn't mean to imply anything wrong with it
23:37 pipps joined #salt
23:37 ahammond wryfi_ personally I'm happy that Saudi boys can watch their porn in safety and security. Making the world a better place, one corrupt youth at a time.
23:38 wryfi_ heh. definitely a respectable mission
23:38 hal58th ahammond: I sent you a private message btw.
23:38 * wryfi_ feels sorry for sexually repressed people all over the world
23:38 sagerdearia joined #salt
23:40 meekrab joined #salt
23:43 estahn joined #salt
23:44 BogdanR joined #salt
23:48 mosen joined #salt
23:50 pipps joined #salt
23:55 sc250024_ joined #salt
23:55 estahn joined #salt
23:57 meekrab joined #salt
23:59 ahammond so... cloud.full_query returns a nice reasonable dict and under networks I see, for example, this: "{u'v4': [{u'type': u'public', u'netmask': u'255.255.240.0', u'ip_address': u'107.170.210.193', u'gateway': u'107.170.208.1'}], u'v6': [{u'type': u'public', u'netmask': 64, u'ip_address': u'2604:A880:0001:0020:0000:0000:04C9:A001', u'gateway': u'2604:A880:0001:0020:0000:0000:0000:0001'}]}"

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary