Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-06-10

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:02 edrocks joined #salt
00:02 abednarik joined #salt
00:07 zmalone joined #salt
00:09 paydro joined #salt
00:13 jeddi joined #salt
00:17 trave joined #salt
00:19 Eugene My personal preference is to create a minimal package(rpm/deb) and install that, but yes, you can file.managed the unit file
00:19 serverascode joined #salt
00:19 ToeSnacks joined #salt
00:20 clouddale joined #salt
00:21 liviudm joined #salt
00:21 mikepea joined #salt
00:21 WKNiGHT joined #salt
00:22 lkannan joined #salt
00:23 phtes joined #salt
00:26 Ryan_Lane joined #salt
00:33 paydro joined #salt
00:44 flowstate joined #salt
00:46 dendazen joined #salt
00:46 Nahual joined #salt
00:48 zmalone joined #salt
00:52 zmalone joined #salt
01:03 catpigger joined #salt
01:14 dyasny joined #salt
01:25 flowstate joined #salt
01:29 brotatochip joined #salt
01:36 racooper joined #salt
01:39 fannet joined #salt
01:47 ilbot3 joined #salt
01:47 Topic for #salt is now Welcome to #salt! | Latest Versions: 2015.5.10, 2015.8.10, 2016.3.0 | Support: https://www.saltstack.com/support/ | Logs: http://irclog.perlgeek.de/salt/ | Paste: https://gist.github.com/ (please don't multiline paste into channel) | See also: #salt-devel, #salt-offtopic | Ask with patience as we are volunteers and may not have immediate answers
01:54 Lionel_Debroux_ joined #salt
02:05 onlyanegg joined #salt
02:11 nmadhok joined #salt
02:11 paydro joined #salt
02:12 flowstate joined #salt
02:13 kus joined #salt
02:32 paydro joined #salt
02:33 zmalone joined #salt
02:33 writtenoff joined #salt
02:33 paydro joined #salt
02:35 brotatochip joined #salt
02:35 rem5 joined #salt
02:36 fracklen joined #salt
02:37 paydro joined #salt
02:41 perfectsine joined #salt
02:49 Miouge joined #salt
02:52 tuxx joined #salt
03:01 zmalone joined #salt
03:04 edrocks joined #salt
03:05 onlyanegg joined #salt
03:09 zmalone joined #salt
03:14 evle joined #salt
03:14 flowstate joined #salt
03:23 brotatochip joined #salt
03:27 fannet joined #salt
03:28 Deliant joined #salt
03:29 zmalone joined #salt
03:31 Deliant joined #salt
03:36 Deliant joined #salt
03:36 iceyao joined #salt
03:53 zmalone joined #salt
04:00 paydro_ joined #salt
04:00 cyborg-one joined #salt
04:11 kshlm joined #salt
04:17 flowstate joined #salt
04:31 mosen joined #salt
04:36 favadi joined #salt
04:36 Miouge joined #salt
04:41 brotatochip joined #salt
04:42 noraatepernos joined #salt
04:45 brotatochip joined #salt
04:46 DEger joined #salt
04:55 manji joined #salt
04:57 dfinn joined #salt
04:58 manji joined #salt
05:02 barmaley joined #salt
05:03 flowstate joined #salt
05:08 anmol joined #salt
05:14 Ayo joined #salt
05:15 Deliant joined #salt
05:15 fannet joined #salt
05:18 manji joined #salt
05:21 manji joined #salt
05:28 felskrone joined #salt
05:29 sauvin joined #salt
05:42 rdas joined #salt
05:45 ajw0100 joined #salt
05:49 onlyanegg joined #salt
05:50 perfectsine joined #salt
06:01 rdas joined #salt
06:06 flowstate joined #salt
06:09 RealMurphy joined #salt
06:10 Antiarc joined #salt
06:17 lunarlamp joined #salt
06:23 Miouge joined #salt
06:26 AirOnSkin joined #salt
06:28 linjan joined #salt
06:31 duncanmv joined #salt
06:36 fracklen joined #salt
06:38 Sylvain31 joined #salt
06:48 favadi joined #salt
06:52 flowstate joined #salt
06:55 Muchoz joined #salt
06:56 sauvin joined #salt
07:02 dmaiocchi joined #salt
07:04 fannet joined #salt
07:04 fracklen joined #salt
07:08 edrocks joined #salt
07:12 dmaiocchi joined #salt
07:13 duncanmv joined #salt
07:15 permalac joined #salt
07:16 Sylvain31 hi salted, some example about unitesting formula with salt-kitchen or other stuff? My local computer hasn't enough CPU power to run many VM quickly, I would like to run it on other remote server VM. I need to see if it's possible to run on a VM able to create Docker containers… Do you know if it's possible?
07:17 Muchoz joined #salt
07:20 KermitTheFragger joined #salt
07:21 Electron^- joined #salt
07:27 JohnnyRun joined #salt
07:30 JohnnyRun joined #salt
07:47 slav0nic joined #salt
07:48 Garo_ joined #salt
07:48 nmadhok joined #salt
07:54 sjorge joined #salt
07:54 flowstate joined #salt
07:57 punkoivan joined #salt
07:58 punkoivan joined #salt
07:58 kawa2014 joined #salt
07:58 punkoivan left #salt
08:00 Sylvain31 morning salt cleaner! http://paste.debian.net/733814/
08:00 deniszh joined #salt
08:03 keimlink joined #salt
08:04 mikecmpbll joined #salt
08:07 rim-k joined #salt
08:09 honestly joined #salt
08:11 s_kunk joined #salt
08:18 DarkKnightCZ joined #salt
08:19 DarkKnightCZ Hi, apparently there are disks grains (https://docs.saltstack.com/en/latest/ref/grains/all/salt.grains.disks.html), but I cannot see it via grains.ls module, any ideas?
08:24 Sylvain31 I would like to add log_dir creation using apache formula https://github.com/saltstack-formulas/apache-formula/blob/master/apache/vhosts/standard.sls, I created a state  create_dir.sls http://paste.debian.net/733836/ but running highstate apache is complaining that error reloading, because a2ensite is lauching apache-reload (or something) before LogDir are created, what would be the way to add LogDir creation
08:24 Sylvain31 before vhosts?
08:25 krymzon joined #salt
08:31 DEger joined #salt
08:34 sjorge joined #salt
08:35 MadHatter42 joined #salt
08:40 om joined #salt
08:41 flowstate joined #salt
08:44 kbaikov joined #salt
08:50 om2 joined #salt
08:52 kbaikov joined #salt
08:52 fannet joined #salt
08:57 Sylvain31 DarkKnightCZ: No idea. sorry.
08:59 Miouge joined #salt
09:00 kbaikov joined #salt
09:02 nmadhok1 joined #salt
09:03 Miouge joined #salt
09:05 Miouge joined #salt
09:05 mpanetta joined #salt
09:06 mikecmpbll joined #salt
09:09 sarlalian joined #salt
09:15 CeBe1 joined #salt
09:15 Sylvain31 posted as a ticket: https://github.com/saltstack-formulas/apache-formula/issues/145
09:15 saltstackbot [#145]title: how to create extra LogDir and using apache/vhosts/standard.sls and hanling apache-reload? | I would like to create some extra dir for `apache:sites`, managed through `apache.vhosts.standard` state....
09:15 colegatron_origi joined #salt
09:16 babilen DarkKnightCZ: Which version of salt do you use?
09:17 DarkKnightCZ babilen: 2016.3, but i had 2015 minion, so just a second, i will check with newer one
09:19 DarkKnightCZ babilen: ah, in 2016 it works, funny it's also mentioned in 2015 client, thanks
09:21 lero joined #salt
09:21 babilen good
09:24 Sylvain31 here: https://docs.saltstack.com/en/latest/ref/states/ordering.html  it is said: "Require statements can refer to any state defined in Salt. The basic examples are pkg, service, and file, but any used state can be referenced." Which is not magic right? if I call state.apply something, it wont be able to see as state in somethingelse.sls. This phrase is not well chosen I feel.
09:28 _mel_ joined #salt
09:42 anmol joined #salt
09:46 babilen What?
09:49 Sylvain31 babilen: "Require statements can refer to any state defined in Salt." which is true, if and only if, the state is loaded in the current context, right?
09:54 MadHatter42 joined #salt
09:57 babilen Sylvain31: Do you mean that you can't require states from other SLSs if you haven't included them?
09:58 Sylvain31 Yes I can't, which may seems obvious, but not nesseraly for newcomers who can see some magic in salt, because many thing are automagic. This phrase is confusing, I feel.
09:59 flowstate joined #salt
09:59 babilen I'm sure that they'll happily accept a less confusing sentence
10:01 Sylvain31 babilen: you mean if I send a PR on the doc?
10:02 babilen Exactly
10:03 Sylvain31 ;) of course, I still a bit lost, too fast, and too many doc and tutorial skipped, year of sysadmin doesn't apply with salt… :/
10:04 babilen Why don't they?
10:04 iceyao joined #salt
10:06 deniszh joined #salt
10:09 Sylvain31 I don't know. salt is different, and confusing, if you don't take time through basic step, confusion occure, and you waste time to figure what has happened… especially terms reuse, for state modules, and also declarative ordering, which is cool, but introduce mistake too. Or my brain is damaged. ;)
10:09 babilen *no comment*
10:15 flowstate joined #salt
10:16 Electron^- morning guys... I saw that there is an issue for creating users on mysql 5.7 caused by column renamed for the password... I also findout that the solution is to modify the mysql.py module for salt to edit the column name, but doesn't it remove compatibility with old mysql version?
10:17 Sylvain31 Electron^-: issue?
10:17 Electron^- https://github.com/saltstack/salt/issues/29265
10:17 saltstackbot [#29265]title: mysql_user.present does not work with MySQL 5.7 | On CentOS6 mysql user is no longer created correctly, whether password or password_hash is used....
10:20 ixeous joined #salt
10:20 Sylvain31 Electron^-: thanks
10:23 babilen Electron^-: It would unless you do that conditionally based on the MySQL server version
10:23 babilen Hooray for stable APIs :(
10:24 babilen The fix seems to just remove an overly opinionated default though
10:25 cliluw joined #salt
10:25 lorengordon joined #salt
10:26 Electron^- ok babilen .. i'll try it later to findout a wirking solution
10:26 Electron^- working*
10:26 babilen Electron^-: https://github.com/saltstack/salt/pull/32440 in combination with https://github.com/saltstack/salt/pull/33690 seems to "do the right thing"™
10:26 saltstackbot [#33690]title: Remove explicit PW column default from mysql_user | Followup to issue #29265 and PR #32440....
10:26 babilen Did you try the modules and states from develop?
10:27 Electron^- no, I have the stable
10:28 babilen I'd try a version with those commits in them
10:28 babilen (copy them in _modules,_states,... as appropriate)
10:28 babilen ((and don't forget to sync))
10:29 Electron^- I'll try it in the afternoon.. Now I have to migrate 30 servers...
10:29 Sylvain31 Electron^-: I didn't noticed any change with mariaDB, though
10:29 Electron^- thank you for the support
10:29 Electron^- Sylvain31, I user percona
10:29 Electron^- use*
10:31 Sylvain31 authentication_string is the new column name, so ;)
10:32 Sylvain31 quite long to type…
10:32 Electron^- heheh yep
10:33 Sylvain31 I hope it wont merge into mariaDB~
10:33 Sylvain31 :/
10:35 Sylvain31 is it need to majuscule the P of Password?
10:38 aidin joined #salt
10:40 fannet joined #salt
10:41 AndreasLutro capitalize
10:43 AndreasLutro is there really no way to delete a salt minion key by its fingerprint?
10:44 Sylvain31 AndreasLutro: probably with a shell | grep trick
10:45 Sylvain31 could you list them | awk '/match/ { print $n }' ?
10:45 AndreasLutro screw that
10:45 * AndreasLutro rm's
10:46 Sylvain31 salt-key -d $(list them | awk '/match/ { print $n }') should approch the expected result
10:46 AndreasLutro no that wouldn't work at all
10:46 AndreasLutro because I have 2 keys for the same minion id, 1 accepted, 1 denied
10:47 ashmckenzie joined #salt
10:47 Sylvain31 which one would you like to delete?
10:48 ixeous left #salt
10:48 AndreasLutro the one that's denied. I just did it with `rm` but I'm annoyed there's no an option for it with salt-key
10:50 lorengordon joined #salt
10:51 Sylvain31 salt-key -F -R give the list right?
10:51 AndreasLutro -R would reject all unaccepted keys, I don't have any unaccepted keys
10:53 Sylvain31 ok, I see you want denied keys only, and there's is no filter builtin for that, right?
10:53 s_kunk joined #salt
10:53 vodik joined #salt
10:53 vodik joined #salt
10:53 s_kunk joined #salt
10:54 Sylvain31 salt-key -F -l den ?
10:54 AndreasLutro it doesn't matter Sylvain31
10:54 AndreasLutro even if I can find just the key I want to delete there's no argument to salt-key to just delete keys matching that fingerprint
10:58 Sylvain31 OK.
11:00 aidin joined #salt
11:01 flowstate joined #salt
11:03 toanju joined #salt
11:10 edrocks joined #salt
11:15 abednarik joined #salt
11:21 droid joined #salt
11:22 renaissancedev joined #salt
11:24 lero joined #salt
11:36 numkem joined #salt
11:38 fracklen joined #salt
11:42 punkoivan joined #salt
11:43 punkoivan joined #salt
11:45 mdasilva joined #salt
11:53 impi joined #salt
11:53 impi joined #salt
11:55 KingJ joined #salt
11:59 DanSlimmon joined #salt
12:04 flowstate joined #salt
12:04 Mate https://github.com/saltstack/salt/blob/develop/salt/states/pkg.py#L1090 what's the magic here? a or (b and a)?
12:04 punkoivan left #salt
12:05 AndreasLutro hah
12:05 keimlink joined #salt
12:05 AndreasLutro probably no magic, just a mistake
12:05 Mate 15 lines later: if version is not None and version == 'latest':
12:07 Mate someone doesn't really trust computers :)
12:17 fredvd joined #salt
12:18 fannet joined #salt
12:22 shoemonkey joined #salt
12:28 catpig joined #salt
12:30 amcorreia joined #salt
12:31 rhodgin joined #salt
12:34 dendazen joined #salt
12:36 DammitJim joined #salt
12:39 GreatSnoopy joined #salt
12:47 nbari joined #salt
12:47 nbari joined #salt
12:47 nbari hi all, just updated to 2016.3.0 but whiele trying to create an AWS autoscaling group I am geting this: https://github.com/saltstack/salt/issues/33931
12:47 saltstackbot [#33931]title: 2016.3.0 - SaltInvocationError: No authentication credentials found when attempting to make boto asg connection to region "us-east-1". | ### Description of Issue/Question...
12:48 nbari any idea ?
12:48 DanSlimmon joined #salt
12:48 nbari it was working before upgrading
12:51 fracklen joined #salt
12:59 teryx510 joined #salt
13:03 duncanmv joined #salt
13:04 gh34 joined #salt
13:05 subsigna_ joined #salt
13:06 flowstate joined #salt
13:07 mpanetta joined #salt
13:11 flowstat_ joined #salt
13:13 Ayo joined #salt
13:15 shoemonkey joined #salt
13:16 gngsk joined #salt
13:20 edrocks joined #salt
13:24 Sylvain31 joined #salt
13:24 Sylvain31 someone has tested kitchen-salt with docker?
13:31 impi joined #salt
13:36 edrocks joined #salt
13:37 Tyrm joined #salt
13:38 Tyrm joined #salt
13:43 mapu joined #salt
13:44 dfinn joined #salt
13:45 nyx joined #salt
13:47 racooper joined #salt
13:47 drawsmcgraw joined #salt
13:55 rem5 joined #salt
13:55 flowstate joined #salt
13:57 fracklen joined #salt
14:03 kaptk2 joined #salt
14:04 andrew_v joined #salt
14:06 DanSlimmon joined #salt
14:09 Mate i want to install a deb package from a http url with pkg.installed(sources), but also upgrade it if new version is available. can i? sources doesn't accept =version spec in package name
14:10 zmalone joined #salt
14:13 gngsk_ joined #salt
14:17 mavhq joined #salt
14:18 Sylvain31 Mate did you add the repos or is it a .deb you want to download then install?
14:20 Mate no repos, just a http url to a deb file
14:20 Sylvain31 so… does version apply?
14:23 TooLmaN joined #salt
14:26 aidin joined #salt
14:26 tapoxi joined #salt
14:26 Mate hm, seems like it always downloads the file, and checks if that version is installed. this is close to what i want, but really slow for a 300MB package over a ~10MB link
14:28 zmalone joined #salt
14:29 perfectsine joined #salt
14:29 Sylvain31 you could split download and cache it?
14:30 zmalone joined #salt
14:32 TOoSmOotH joined #salt
14:34 SpX joined #salt
14:39 iceyao joined #salt
14:45 mandarine joined #salt
14:46 mandarine Ohai, there
14:46 corichar joined #salt
14:48 menglish joined #salt
14:49 mandarine I seem to enconter a small problem with my salt states : one of them upgrades the system including the "salt-minion" package and then the salt modules are not compatible anymore. I tried to add a "reload_modules: True" and requisites to the upgrade state but it doesn't quite seem to work ...
14:50 jav joined #salt
14:50 mandarine Basically, my question is "How to handle an upgrade of the salt package in a single run of salt-call"
14:50 AndreasLutro mandarine: I think not upgrading salt in a highstate would be the safest bet
14:51 mohae joined #salt
14:51 radhac joined #salt
14:53 mandarine AndreasLutro: on one hand, this sounds logical ... on the other hand, this feels like defeat for me :'(
14:53 babilen Mate: You'd have to create a repository for it. That would allow salt to know which version(s) are being available without having to look inside the .deb.
14:54 babilen mandarine: I wouldn't necessarily perform system upgrades in a highstate runs. It is nice if they are idempotent and don't change/break things on subsequent executions.
14:55 babilen Upgrades should be explicit and a separate step. You could control the software sources you install from and control what gets installed when by simply pushing new packages in those sources.
14:55 jenastar joined #salt
14:55 babilen I'd go bonkers if my infrastructure were to upgrade to new software versions all the time
14:58 aidin joined #salt
14:59 mandarine babilen: okay this actually sounds like I have looked for a solution in the wrong place and you're definitely right
15:01 mandarine Clearly … thank you very much
15:07 fracklen joined #salt
15:07 DEger joined #salt
15:14 gngsk_ joined #salt
15:18 Ztyx joined #salt
15:19 Ztyx Hm, which targetting scheme is the default in top.sls files? I just had a 'myminion-* and S@192.168.10.0/24' match a minion despite me not having a "- match: compound".
15:20 babilen Ztyx: glob
15:20 hasues joined #salt
15:21 hasues left #salt
15:22 Ztyx babilen: Hm, I'm looking https://docs.saltstack.com/en/2015.8/topics/targeting/globbing.html#globbing, but I can't understand how my "glob" matches. Do you have any theory?
15:22 gngsk joined #salt
15:24 babilen no
15:24 babilen It shouldn't
15:25 anmol joined #salt
15:25 Ztyx babilen: Tried to recreate the targetting on command line, but couldn't. Something smelly here. I'll investigate some more...
15:28 crashmag joined #salt
15:29 traph joined #salt
15:29 traph joined #salt
15:31 flowstate joined #salt
15:32 flowstate joined #salt
15:35 mdasilva joined #salt
15:44 keltim joined #salt
15:47 mpanetta joined #salt
15:48 mpanetta joined #salt
15:49 spuder joined #salt
15:56 autofsckk joined #salt
15:56 brotatochip joined #salt
15:58 Miouge joined #salt
16:00 DarkKnightCZ joined #salt
16:00 gngsk_ joined #salt
16:04 noraatepernos joined #salt
16:09 hamstah Sylvain31: hey, I tried what you suggested yesterday. I have a manual checkout of the logstash-formula now in /srv/salt/formulas and I added it to my file_roots. I also added a pillar file from the example. I still doesn't seem to do anything with it
16:09 hamstah I'm probably doing something stupidly wrong
16:09 hamstah I can see in the debug output that it's reading my pillar
16:09 hamstah but it doesn't install logstash or create the config files
16:11 gngsk_ hamstah: What does the output of ``state.show_sls logstash'' look like?
16:11 aagbds joined #salt
16:11 babilen hamstah: And which command do you run that you expect to "do something with it" ?
16:11 hamstah state.apply
16:11 hamstah oh wait
16:12 hamstah ok I forgot to add it back to my top.sls
16:12 babilen That command, its output, your top.sls, the output of "salt 'foominion' cp.list_master" would all be of interest (please paste to one of http://refheap.com, http://paste.debian.net, https://gist.github.com, http://sprunge.us, … )
16:12 hamstah now it does it again
16:12 babilen It works now?
16:12 hamstah it removed it after it failed to work with gitfs
16:12 rem5 joined #salt
16:12 hamstah yes, it seems like it worked
16:13 hamstah sorry about that
16:13 babilen No problem
16:13 babilen It sounded like "forgot to add it to top.sls" ;)
16:13 hamstah yeah
16:13 hamstah I used to have it
16:13 babilen fwiw, it should still work with gitfs, but maybe pygit2 is just broken for you. Did you try gitpython?
16:13 hamstah but removed it when it failed with the gitfs version
16:13 hamstah no I haven't
16:14 hamstah I ran into an issue with gitfs with masterless setup making the apply really slow
16:14 hamstah I found a github issue related to it
16:14 hamstah so it sounds like a known thing
16:15 aagbds joined #salt
16:15 hamstah so I use the formulas in submodule from my main git for the config
16:15 babilen Ah, masterless .. yeah, there were issues with that.
16:15 brotatochip joined #salt
16:16 hamstah I'm happy with the submodule
16:16 Sylvain31 curiously state.user.present doesn't handle password hashing… should we do that manually?
16:16 hamstah also avoids having to mirror or having to deal with potential git outages
16:17 babilen Sylvain31: You should
16:19 mdasilva joined #salt
16:22 flowstate joined #salt
16:23 Sylvain31 OK, why?
16:25 onlyanegg joined #salt
16:25 babilen Because you obviously want to use hashes
16:25 Miouge joined #salt
16:26 amcorreia joined #salt
16:26 Sylvain31 yes, sorry, why doesn't it compute hash itself?
16:26 bearonis joined #salt
16:27 bearonis joined #salt
16:27 renaissancedev joined #salt
16:28 babilen You should specify hashes in your input data to begin with
16:28 renaissancedev So, looking at the current state of the loader.py file it doesn't appear as though there's a facility to register post-load hooks in an extension module.
16:28 renaissancedev Would something like that seem to be a sane and useful idea?
16:28 renaissancedev I'm thinking something like:
16:28 renaissancedev ```
16:29 renaissancedev post_load_hooks = []
16:29 bearonis left #salt
16:29 renaissancedev for hook in post_load_hooks:\n    hook()
16:29 renaissancedev Thoughts?
16:33 fannet joined #salt
16:33 Sylvain31 babilen: Sorry again, if I'm unclear, I want to gives clear password to be encrypted automatically, it is not provided, I must provide the valid hash that the system is handling, right?
16:33 babilen indeed
16:34 babilen Well, you don't have to, but if you want to that's the way to do it
16:35 Sylvain31 Ah, OK. nothing using underling OS standard behavior, so…
16:39 babilen Sylvain31: Do you want to provide a clear text password and have it hashed?
16:39 babilen (for your)
16:40 Sylvain31 yes I have hoped so. ;)
16:40 babilen Then set hash_password, but I wouldn't recommend to leave clear text passwords in your provisioning
16:41 mindscratch joined #salt
16:42 mindscratch what's a typical directory structure on a salt master?  for example, file_roots, pillar_roots and states.... is this "common?
16:43 writtenoff joined #salt
16:44 Sylvain31 babilen: OK, I'm still puzzled about that I will think more about it… thanks. I have to go.
16:44 babilen mindscratch: I use GitFS exclusively for states and top file
16:47 evle joined #salt
16:54 shoemonkey joined #salt
16:56 Miouge joined #salt
16:56 nidr0x joined #salt
16:57 Miouge joined #salt
17:03 s_kunk joined #salt
17:08 nyx joined #salt
17:09 rem5 joined #salt
17:11 squishypebble joined #salt
17:12 smcquay is there something special needed to use pillar data stored in a saltenv?
17:13 iggy setting the saltenv when you run commands
17:13 iggy (or in the minion config file)
17:13 iggy alternatively, don't use salt environments
17:14 gngsk joined #salt
17:15 zugeldog joined #salt
17:16 UtahDave joined #salt
17:17 pfallenop joined #salt
17:18 flowstate joined #salt
17:19 punkoivan joined #salt
17:19 abednarik joined #salt
17:19 pmcg joined #salt
17:19 zmalone joined #salt
17:25 flowstate joined #salt
17:26 brotatochip joined #salt
17:26 ageorgop joined #salt
17:26 bltmiller joined #salt
17:27 tapoxi joined #salt
17:31 akio joined #salt
17:32 punkoivan left #salt
17:34 Miouge joined #salt
17:35 flowstate joined #salt
17:37 marie1972 joined #salt
17:38 edrocks joined #salt
17:39 belak joined #salt
17:39 impi joined #salt
17:41 * smcquay is starting to really loathe saltenvs
17:42 smcquay so I have tried setting some pillar data in my saltenv, I have tried refresh_pillar, and it doesn't show up.
17:42 smcquay (when I run pillar.items)
17:43 ipmb joined #salt
17:44 manji joined #salt
17:45 Trauma joined #salt
17:45 rem5 joined #salt
17:45 paydro joined #salt
17:46 smcquay and I get "'state.apply' is not available.
17:46 smcquay " when I try to follow the documentation to set pillar items interactively.
17:46 smcquay quite odd.
17:47 HappySlappy joined #salt
17:47 edrocks joined #salt
17:48 UtahDave smcquay: how are you setting that up?
17:49 smcquay well to be honest I'm coming into our established salt code base, so I'm feeling it out myself. We've got multiple file_roots, one for my user, and ...
17:49 smcquay oh man. I'm conflating. We don't have a setting for pillar_roots!
17:50 smcquay this might be pebcak, or totally bad configuration of our system. to be honest however we have it set up I tend to have a hard time getting stuff in my file_roots to take effect.
17:50 MindDrive joined #salt
17:53 UtahDave smcquay: Are you restarting the salt-master daemon after modifying your master config?
17:53 smcquay well I am just now noticing that the master config is incorrect :)
17:53 smcquay let me try a reconfigure and a restart and that may be sufficient :\
17:53 UtahDave ah, ok
17:59 jenastar left #salt
18:01 ixeous joined #salt
18:01 Miouge joined #salt
18:02 brotatochip joined #salt
18:02 gngsk joined #salt
18:03 paydro joined #salt
18:04 ixeous hello.  quick newbie question.  when creating a schedule, does splay in a state file default to seconds (or some other unit) or does it use the units stated in the schedule?  if i set the schedule to 2 hours, can my splay be 0-2 or should it be something like 0-7200?
18:05 ixeous all examples that i have seen use seconds for the schedule
18:06 robinsmidsrod joined #salt
18:07 punkoivan joined #salt
18:07 ageorgop joined #salt
18:11 UtahDave Hm, ixeous, I think it defaults to seconds. I wonder if you can change that, though.  Gareth, do you know?
18:12 Gareth splay is always seconds.
18:12 ixeous i'm ok with using seconds, i just don't want to schedule something for 2 hours and the splay to 7200 hours
18:12 ixeous thanks
18:13 DEger joined #salt
18:14 ninkotech__ joined #salt
18:15 Ztyx joined #salt
18:15 asoc_ joined #salt
18:16 fannet joined #salt
18:18 fannet_ joined #salt
18:21 tduerr joined #salt
18:23 perfectsine joined #salt
18:25 amcorreia joined #salt
18:37 paydro joined #salt
18:41 brotatochip_ joined #salt
18:51 paydro joined #salt
18:54 shoemonkey joined #salt
18:56 bltmiller joined #salt
19:02 tapoxi joined #salt
19:07 sorce47 joined #salt
19:07 sorce47 hi guys, i am having problems with idempotency with the following code: https://gist.github.com/developerinlondon/29e786a3b2d21eebeaefdb8d2910c2df
19:07 sorce47 any ideas why its not being idempotent?
19:09 fracklen joined #salt
19:09 ageorgop joined #salt
19:10 tapoxi hi everyone, using salt-ssh. I'm root, trying to ssh in as root, getting permission denied. If I ssh in manually, it works. thoughts?
19:10 punkoivan joined #salt
19:11 aidin joined #salt
19:12 punkoivan joined #salt
19:12 jfindlay tapoxi: what does your roster look like?
19:14 punkoivan joined #salt
19:14 ajw0100 joined #salt
19:14 jfindlay sorce47: that seems like it should work.  Does the file get created as expected?
19:15 tapoxi jfindlay : http://pastebin.com/bE5Etk3B ad infinitum, username and pass are passed via command line: salt-ssh \* --roster=flat test.ping --user root --askpass -i
19:15 punkoivan joined #salt
19:16 jfindlay tapoxi: what error are you getting?
19:17 tapoxi jfindlay Permission denied for host hostname, do you want to deploy the salt-ssh key? (password required):
19:18 punkoivan joined #salt
19:18 sorce47 jffindlay: yes it does
19:18 sorce47 i dont get any error, it just runs it again next time i run
19:19 sorce47 so presumably it thinks the file is missing
19:19 tapoxi what's funky is I used salt-ssh to bootstrap this salt install a month ago, didn't change anything re: my ssh config, and now I can't seem to use salt-ssh anymore
19:19 aharvey joined #salt
19:20 jfindlay sorce47: that might be a bug.  Would you mind filing an issue?
19:20 punkoivan joined #salt
19:21 Bryson joined #salt
19:23 punkoivan joined #salt
19:26 whitenoise joined #salt
19:26 whitenoise have you guys ever had an issue with a saltmaster in AWS not getting a grain in time in an {% import %} ?
19:26 whitenoise for example,
19:27 whitenoise {% set le_env = salt['grains.get']('le_env') %} and then {% import_yaml "blah/" + le_env + "blah.yaml" %}
19:27 whitenoise but then it tells you it can't find blah//blah.yaml (i.e., the le_env is apparently ''
19:29 aharvey joined #salt
19:31 ageorgop joined #salt
19:31 brotatochip joined #salt
19:38 jfindlay whitenoise: are you able to retrieve the grain in other contexts/ways?
19:39 whitenoise jfindlay: they are "custom grains" -- it's been written with Python somehow to load them in.
19:39 whitenoise are you referring to pulling it from an environment variable or something like that?
19:39 * whitenoise doesn't know very much about Salt
19:40 whitenoise I assume grains are environment variables anyway, like Puppet facts
19:40 jfindlay whitenoise: `salt '*' grains.get le_env`, for example
19:40 jfindlay right
19:40 whitenoise hm
19:40 punkoivan joined #salt
19:40 whitenoise not sure
19:41 fredvd joined #salt
19:41 jfindlay tapoxi: I'm not sure.  The best I can suggest is to experiment with options on the command line and in the roster file to see what the issue might be
19:42 whitenoise it's all within Jinja, of course, and then we manually kick off the automation. Knowing which pillars and stuff it has access to is done by parsing the hostname.
19:42 punkoivan joined #salt
19:42 jfindlay whitenoise: can you run that command line from your master?
19:42 whitenoise running grains.get will return the appropriate value
19:42 whitenoise from the command line, yes
19:42 rem5 joined #salt
19:42 whitenoise also, even later in that same Jinja file..the value is used and it works.
19:42 whitenoise it's only in the import_yaml
19:42 jfindlay hm
19:43 whitenoise it's pretty weird. It also does not do it in our dev environment, or in our local datacenter.
19:43 whitenoise but I don't really understand how AWS would mess that up
19:43 punkoivan joined #salt
19:43 bltmiller joined #salt
19:44 whitenoise the only thing that is different is that the file storage is probably held on some other piece of machinery--could it be a latency issue?
19:44 whitenoise I'm just kind of shooting in the dark at the moment.
19:45 punkoivan joined #salt
19:46 tapoxi jfindlay thanks, i'll play around with it some more
19:49 whitenoise jfindlay: ah, it looks like the particular dev that was working on it found it
19:49 babilen What was it?
19:49 whitenoise salt '*' pillar.items has a different return than salt-run pillar.show_top '*', and I remember they were also comparing grains.get and pillar.items.
19:50 whitenoise does salt-run ignore custom grains?
19:51 radhac joined #salt
19:53 keimlink_ joined #salt
19:53 fracklen joined #salt
19:54 Trauma joined #salt
19:54 jfindlay whitenoise: I'm not too experienced with custom grains, but if you're updating a grain, you may need to make sure to sync it `saltutil.sync_grans`
19:54 bfig joined #salt
19:55 whitenoise ok, yeah, apparently he got consistent behavior between his dev environment and the cloud environment. it was all differences between pillar.items and pillar.show_top
19:55 noraatepernos joined #salt
19:55 bfig hello, I'm just starting with saltstack, I want to use it to configure some vagrant instance. Where can I find information to get started?
19:57 babilen bfig: Go through https://docs.saltstack.com/en/getstarted/ and read up on https://www.vagrantup.com/docs/provisioning/salt.html
19:57 jfindlay whitenoise: top information is different from the actual pillar data, so I would expect them to be different
19:57 bfig thanks babilen
19:57 babilen bfig: Anything in particular you'd like to do?
19:57 bfig I want to set up a local rabbitmq + meteor  vm in virtualbox
19:57 babilen bfig: https://github.com/UtahDave/salt-vagrant-demo might come in handy (it's also being discussed in the getstarted guide)
19:57 jfindlay whitenoise: there is a similar construct for sls files with state.show_top and state.show_sls (both execution modules)
19:58 bfig I have the virtualbox running and ports are redirected through the vagrant configuration to my host, I just need to automagically provisioon the meteor and rabbit
19:58 bfig will check that example
19:58 whitenoise jfindlay: ok. so this turned out to not be unexpected or even a bug or anything...just us not understanding Salt completely :P
19:58 whitenoise fair enough
19:58 whitenoise good to know
19:59 bfig I suppose that I should ask in meteor and see if there are any considerations I should figure of how to provision a server
19:59 jfindlay whitenoise: no problem, sls/pillar+top can be a little challenging at first
19:59 bfig it seems there is no automagic configurator like the apache2 package... I need to create the daemon files and do everything by myself, and I don't know much about infrastructure
19:59 rem5 joined #salt
20:00 bfig devops is just so complex lol
20:00 whitenoise jfindlay: is there a way to see what is matched in a pillar top, not just the interpreted results. (similar to the output of state.show_top)
20:01 mikecmpbll joined #salt
20:01 jfindlay whitenoise: these should explain the top file concept: https://docs.saltstack.com/en/getstarted/fundamentals/top.html, https://docs.saltstack.com/en/latest/ref/states/top.html.  The same basic ideas should transfer to pillar top files
20:01 babilen bfig: Approach it one step at a time. Start with setting up the environemnt. Learn a bit of salt. Figure out how to install meteor. Then configure the service with a couple of file.managed states .. (and so on)
20:02 ageorgop joined #salt
20:02 jfindlay whitenoise: the top file should normally be configured explicitly
20:03 jfindlay whitenoise: the canonical location is `/srv/pillar/top.sls`
20:03 whitenoise yeah, we have a very large top.sls
20:04 whitenoise we just do glob matching on hostnames
20:04 whitenoise we have a lot of environments with a lot of matchers
20:06 zmalone1 joined #salt
20:07 whitenoise so yeah, it is defined explicity.
20:07 whitenoise explicitly rather
20:07 whitenoise i told him to just come in here if he wants to ask something about it
20:07 whitenoise his question does not make sense to me as far as exactly what he is wanting
20:09 jfindlay if you want to find out which minions match a pattern in your top file you could try `salt <pattern> test.ping` to see what they are
20:10 nmadhok joined #salt
20:12 menglish joined #salt
20:13 GreatSnoopy joined #salt
20:14 fannet joined #salt
20:16 Ayo joined #salt
20:17 sorce47 how could i remove a container first before trying to add it in? (in saltstack) ... i tried docker rm -i <name> but that throws an error when the container is not already there
20:23 babilen sorce47: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.dockerng.html#salt.states.dockerng.absent + https://docs.saltstack.com/en/latest/ref/states/all/salt.states.dockerng.html#salt.states.dockerng.running
20:23 babilen But then: Why remove a container you want to have running?
20:28 DEger joined #salt
20:33 whitenoise ahuehue, full problem solved.
20:33 bfig babilen: hey, I just installed the demo and tried it, I'm failing the ping tests
20:33 whitenoise the pillar.show_top was only part of it. the other part was that he made a /srv/salt/aws, and anything other than base has to be added to /etc/salt/master file
20:34 nmadhok joined #salt
20:36 babilen bfig: Try restarting master and minion. I have to confess that I haven't used that before, but had hoped that it "just works".
20:36 nmadhok joined #salt
20:41 bfig babilen: now they work!
20:41 bfig magick
20:42 q1x joined #salt
20:46 jfindlay whitenoise: nice
20:47 q1x joined #salt
20:50 menglish joined #salt
20:51 zmalone joined #salt
20:53 kedgar joined #salt
20:53 kedgar Anyone using svnfs as your filesystem backend?
20:54 kedgar trying to figure out how to get it to authenticate... appears salt expects no authentication is required
20:56 UtahDave kedgar: from what I can see the user the salt-master is running as needs to have rights to the svn repo
20:56 UtahDave https://docs.saltstack.com/en/latest/ref/configuration/master.html#std:conf_master-svnfs_remotes
20:58 kedgar @UtahDave thanks, I will try that out
21:02 CeBe joined #salt
21:04 ElasticApps joined #salt
21:05 rem5 joined #salt
21:12 tommyfun joined #salt
21:16 nyx joined #salt
21:16 Cimmx joined #salt
21:17 Cimmx Hello all.      We are having an issue using salt-cloud to create Windows hosts in EC2.     We are using the winrm solution to create these hosts and are hitting an issue where the process errors out checking the validity of the SSL cert.     SSLError: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed.       We changed the source code in sessions.py for self.verify = False and tried
21:18 Cimmx Where else could the verify ssl be turned off?
21:18 rem5 joined #salt
21:21 Cimmx or an even better question.... how do we get minion onto a windows machine spun up through salt cloud.
21:21 tommyfun left #salt
21:22 q1x joined #salt
21:24 rim-k joined #salt
21:30 repl1cant er, silly question
21:31 repl1cant when using something like cmd_json for a external pillar source
21:31 repl1cant how to I tell it to pass the minion id in the config?
21:31 repl1cant like I have - cmd_json: /ext_pillar.py
21:32 repl1cant in my config, but it doesn't auto send the minion id
21:32 brotatochip joined #salt
21:33 pfallenop joined #salt
21:33 darvon joined #salt
21:33 manji joined #salt
21:34 barmaley joined #salt
21:36 SheetiS joined #salt
21:37 west575 joined #salt
21:37 UtahDave Cimmx: what instructions are you following?
21:38 UtahDave repl1cant: the cmd_json doesn't allow that unfortunately.  It's really more of a demo.
21:38 rem5 joined #salt
21:38 repl1cant ah. k. i'm prototyping an actual module and was hoping to test there first
21:38 UtahDave repl1cant: it would be pretty easy to create your own external pillar that would do that.
21:39 repl1cant that's what I'm doing, again was wanting to simply prototype :-)
21:39 UtahDave gotcha
21:40 repl1cant have a simple python script that spits out the proper json data when you pass a minion id to it via the command line already written.
21:40 repl1cant guess i'll just port it over
21:41 bltmiller joined #salt
21:43 CeBe joined #salt
21:45 marie1972 left #salt
21:47 Joe630 Hey all, I'm looking at https://docs.saltstack.com/en/latest/topics/cloud/windows.html
21:47 Joe630 It makes references to pywinrm, but doesn't explain how to replace winexe with it in the config files.  can anyonepoint me to the right docs on how to make salt-cloud use it instead of winexe?
21:49 Joe630 Haha -RTFM, me - it's in that page.
21:49 Joe630 If WinRM is to be used use_winrm needs to be set to True. winrm_port can be used to specify a custom port (must be HTTPS listener).
21:49 Cimmx UtahDave....  following the instruction from salt's website using a powerscript file as userdata
21:50 nmadhok joined #salt
21:50 Cimmx What I found is that the session.py has set SSL verification to True.   I changed the Arguements in the call to adapters.py to force cerification to False.   Then it worked 100%.
21:51 Cimmx Issue is that for the windows process.    The SSL port that is created is based off a self signed certificate.  Salt master is using that port to push minion
21:52 Cimmx I was looking for a way in the profile to disable verification.... something like ssl_verify: False but that was failing.    So I made the code change and it's fine.... of course setting this to False is not a great idea.... but without a mechanism to disable the cert check, this would keep failing on me.
21:52 Trauma joined #salt
21:53 iggy letsencrypt-formula
21:53 Cimmx I was using the same info that Joe360 is referencing.
21:54 iceyao joined #salt
21:55 Joe630 630, mister.
21:55 Cimmx I had to edit /user/local/lib/python2.7/dist-packages/requests/sessions.py and changed lines 555 and 640 replacing self.verify with False.    Reran the cloud command for the windows hosts and bingo.... worked
21:56 Cimmx Sorry Joe
21:59 mikecmpbll joined #salt
22:01 Cimmx Joe630 - ARe you trying this now?   Tell me if you get the same issue when using salt-cloud to spin up windows hosts in ec2....
22:04 fannet joined #salt
22:06 Joe630 this is exactly what I'm doing
22:06 Joe630 I am doing something weird though
22:06 brotatochip joined #salt
22:07 Cimmx what's wierd....    what step are you on?
22:08 Cimmx How far are you along?
22:08 keimlink joined #salt
22:10 mikecmpbll joined #salt
22:11 Joe630 I am only creating the image and instance with salt, then we use puppet to do our config and install salt
22:12 Joe630 we use salt for remote execution, but puppet to manage states
22:12 Joe630 very hacky
22:12 Cimmx ah i see.    I was using the salt-cloud methoud to get minion on the host...  hence tthe https listener issue with the self signed cert.
22:12 Joe630 but we are making it betterer
22:12 Cimmx good luck .
22:12 Joe630 thanks
22:12 Joe630 we moved to r2, and winexe doesnt work anymore
22:12 Joe630 :(
22:17 Edgan There are 'salt host state.show_highstate' and 'salt host state.show_lowstate'. Is there anything like 'salt host state.show_jinja'?
22:19 onlyanegg joined #salt
22:20 Joe630 Cimmx:  the host is coming up, the fireewall rule is getting setup, but It can't connect to do the deploy
22:22 UtahDave Edgan:   state.show_sls   will show you the rendered sls file after the jinja has been evaluated
22:22 UtahDave Joe630: is the correct firewall and vpc port open on your new VM?
22:24 Edgan UtahDave: That is just the state(s). I want just the map.jinja data in a rendered state.
22:25 UtahDave I don't think Salt itself usually touches the map.jinja.  usually it's jinja itself that is doing the import with map.jinja.
22:25 Edgan UtahDave: The docs say the data flow is "Jinja -> YAML -> Highstate -> low state -> execution"
22:26 UtahDave Edgan: how are you rendering the map.jinja?
22:26 Edgan UtahDave: There ends up being a lot of data in a map.jinja, and mine have jinja in them, not just flat yaml.
22:28 UtahDave Edgan: can you gist or pastebin an example of what you're doing?
22:29 Edgan UtahDave: yes, one sec
22:30 bantone joined #salt
22:32 Joe630 UtahDave: That's what I'm working on now, just now got the machine laucnhed
22:37 Edgan UtahDave: That is an example chain of map.jinjas. Even just looking at one of the simpler ones I am using grains.
22:37 cliluw joined #salt
22:40 Edgan UtahDave: Ignoring those two things, you can still use the yaml elements and do things like construct urls and then write it into the yaml.
22:40 amcorreia joined #salt
22:42 bltmiller joined #salt
22:45 onlyanegg joined #salt
22:46 aharvey joined #salt
22:49 paydro_ joined #salt
22:51 ageorgop joined #salt
22:51 paydro joined #salt
22:52 perfectsine joined #salt
22:52 bltmiller joined #salt
22:56 UtahDave Edgan: So you're wanting to view an evaluated version of those map.jinja files through Salt?
22:58 DEger joined #salt
22:59 Edgan UtahDave: yes
22:59 paydro joined #salt
22:59 belak left #salt
22:59 Edgan UtahDave: Otherwise it can be guess work
22:59 UtahDave All of that gets evaluated when Salt runs the sls files through the renderer
22:59 paydro joined #salt
23:08 DEger joined #salt
23:11 DEger joined #salt
23:14 Joe630 utahdave: I hade to set a security group up and fix the windows firewall, but it all looks like it will work
23:19 DanSlimmon joined #salt
23:22 onlyanegg joined #salt
23:24 pavan joined #salt
23:24 pavan i cant run this command "salt '*' win_iis.create_site name='My Test Site' protocol='http' sourcepath='c:\stage' port='80' apppool='TestPool'"
23:25 pavan i am using the latest salt release on my windows minion and the master
23:25 pavan the command was taken from the documentation of Boron
23:25 pavan am i doing something wrong ??
23:26 pavan is there anything to be setup on the windows minion before i can try to create a basic website ?
23:26 mikecmpbll joined #salt
23:27 iggy define "can't run"
23:28 shoemonkey joined #salt
23:30 justanotheruser joined #salt
23:33 shoemonkey joined #salt
23:34 pavan I get an error saying
23:34 pavan Import-Module : The specified module 'WebAdministration' was not loaded     because no valid module file was found in any module directory.     At line:1 char:1     + Import-Module WebAdministration; New-Item \'IIS:\AppPools\MyTestPool\'     + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~         + CategoryInfo          : ResourceUnavailable: (WebAdministration:String)        [Import-Module], FileNotFoundException         + FullyQualifiedErrorId : M
23:36 iggy sounds like you need some extra powershell stuff installed maybe?
23:36 iggy haven't touched windows in years, so that's just a wild guess
23:37 rhodgin joined #salt
23:38 pavan hmmm
23:41 rem5 joined #salt
23:42 pfallenop joined #salt
23:48 mohae_ joined #salt
23:52 fannet joined #salt
23:57 west575 joined #salt
23:59 cyborg-one joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary