Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-06-17

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 flowstate joined #salt
00:02 MindDrive Okay, I'm having a bit of a memory lapse here... if I have multiple Salt masters in an environment, do they know about each other in any, or is it just the minions that know that there a multiple ones?
00:03 DEger joined #salt
00:06 Eugene MindDrive - have you done anything more than setting multiple masters in the minion config? Eg, syndic?
00:07 Eugene The masters won't know about each other unless you tell them.
00:07 snaggleb joined #salt
00:07 snaggleb joined #salt
00:07 MindDrive Not with my current setup, no (I eventually will be looking at syndic).  And good, that means for my testing I just need to conditionalize the servers my test minions see (going through a major update right now, need to test a small set of systems to ensure I don't cause havoc like last time).
00:08 MindDrive Eugene: Thanks!
00:29 rem5 joined #salt
00:31 teryx510 joined #salt
00:39 flowstate joined #salt
00:46 dh joined #salt
00:52 Nahual joined #salt
01:04 edrocks joined #salt
01:09 robawt can I have a portion of the orchestration runner wait until a condition is met?
01:10 robawt in this example i want to wait until a package has been indexed by the yum repo then execute a highstate
01:15 iceyao joined #salt
01:21 flowstate joined #salt
01:29 ivanjaros joined #salt
01:30 questions joined #salt
01:39 flowstate joined #salt
01:48 ilbot3 joined #salt
01:48 Topic for #salt is now Welcome to #salt! | Latest Versions: 2015.5.10, 2015.8.10, 2016.3.1 | Support: https://www.saltstack.com/support/ | Logs: http://irclog.perlgeek.de/salt/ | Paste: https://gist.github.com/ (please don't multiline paste into channel) | See also: #salt-devel, #salt-offtopic | Ask with patience as we are volunteers and may not have immediate answers
01:49 k_sze[work] joined #salt
01:50 Lionel_Debroux_ joined #salt
01:52 catpiggest joined #salt
01:57 pzipoy joined #salt
01:59 Lionel_Debroux joined #salt
02:00 flowstate joined #salt
02:07 DEger joined #salt
02:07 Lionel_Debroux_ joined #salt
02:11 flebel joined #salt
02:20 PuppyPoker joined #salt
02:21 flowstate joined #salt
02:24 _JZ_ joined #salt
02:31 favadi joined #salt
02:38 tpaul joined #salt
02:46 ajw0100 joined #salt
02:52 evle joined #salt
02:54 akio joined #salt
02:58 necronian joined #salt
03:02 writtenoff joined #salt
03:04 thenut joined #salt
03:07 edrocks joined #salt
03:12 rem5 joined #salt
03:16 snc joined #salt
03:30 esharpmajor joined #salt
03:35 anotherZero joined #salt
03:39 flowstate joined #salt
03:54 borgstrom joined #salt
03:56 komputes joined #salt
03:59 flowstate joined #salt
04:06 rdas joined #salt
04:06 justanotheruser joined #salt
04:12 MTecknology How can I have servers running in a cloud service like DigitalOcean managed by a salt-master server in my own personal network? I can keep salt-master running with a publicly routable IPv6 address, but I need the communication to be secured.
04:20 flowstate joined #salt
04:27 DEger joined #salt
04:29 evle joined #salt
04:29 mosen joined #salt
04:30 ntropy MTecknology: communication between salt master and minions is secured by default, with tls
04:33 ntropy https://docs.saltstack.com/en/latest/topics/#builds-on-proven-technology
04:38 MTecknology Right now, I'm trying to get my firewall opened up enough for this to work
04:38 flowstate joined #salt
04:46 MTecknology ntropy: you happen to know anything about setting up the firewalls?
04:48 devtea joined #salt
04:54 ntropy eh, yeah
04:54 ntropy define firewall - is it a physical box?
04:55 MTecknology pfsense
04:57 MTecknology tcpdump shows me this on the salt-minion (DO) side - http://dpaste.com/3A76X5G
04:59 flowstate joined #salt
05:00 kshlm joined #salt
05:02 DarkKnightCZ joined #salt
05:03 ivanjaros joined #salt
05:04 felskrone joined #salt
05:05 godlike joined #salt
05:05 godlike joined #salt
05:05 MTecknology I GOT IT!!!!! :D :D :D
05:09 edrocks joined #salt
05:11 sauvin joined #salt
05:12 nmadhok joined #salt
05:15 hasues joined #salt
05:15 hasues left #salt
05:20 flowstate joined #salt
05:28 calvinh joined #salt
05:32 nmadhok joined #salt
05:38 fannet joined #salt
05:38 teatime joined #salt
05:41 DarkKnightCZ Hi, is it possible to somehow use Compound Matchers (https://docs.saltstack.com/en/latest/topics/targeting/compound.html) via rest_cherrypy (https://docs.saltstack.com/en/latest/ref/netapi/all/salt.netapi.rest_cherrypy.html)? Thanks
05:42 s________ joined #salt
05:44 onlyanegg joined #salt
05:45 nmadhok1 joined #salt
05:51 duncanmv joined #salt
05:54 Miouge joined #salt
05:57 ninkotech__ joined #salt
06:02 babilen DarkKnightCZ: Tried "expr_form=compound" ? Not sure if it works with cherrypy
06:04 DarkKnightCZ babilen: great, works as a charm (matcher as tgt, expr_form=compound), thanks a lot
06:05 babilen perfect
06:07 patrek joined #salt
06:08 subsignal joined #salt
06:11 nmadhok joined #salt
06:12 favadi joined #salt
06:15 duncanmv joined #salt
06:22 KermitTheFragger joined #salt
06:26 nmadhok joined #salt
06:31 favadi joined #salt
06:34 ivanjaros joined #salt
06:35 DEger joined #salt
06:36 linjan joined #salt
06:38 flowstate joined #salt
06:42 keimlink joined #salt
06:44 nmadhok1 joined #salt
06:48 nmadhok joined #salt
06:49 fracklen joined #salt
06:52 fracklen joined #salt
06:59 flowstate joined #salt
06:59 Rumbles joined #salt
07:01 toanju joined #salt
07:10 Ayo_ joined #salt
07:12 edrocks joined #salt
07:14 Miouge joined #salt
07:15 nmadhok1 joined #salt
07:20 dmaiocchi joined #salt
07:22 favadi joined #salt
07:26 N-Mi joined #salt
07:26 N-Mi joined #salt
07:28 dmaiocchi joined #salt
07:37 flowstate joined #salt
07:38 Sylvain31 joined #salt
07:42 iceyao joined #salt
07:47 cyborg-one joined #salt
07:51 nmadhok joined #salt
07:56 krymzon joined #salt
07:58 flowstate joined #salt
08:00 Miouge joined #salt
08:02 keimlink joined #salt
08:03 nmadhok1 joined #salt
08:12 impi joined #salt
08:13 netcho joined #salt
08:14 kawa2014 joined #salt
08:16 Rumbles joined #salt
08:19 flowstate joined #salt
08:20 pzipoy1 joined #salt
08:22 v0rtex joined #salt
08:22 jgelens joined #salt
08:22 packeteer joined #salt
08:23 tuxx_ joined #salt
08:23 duncanmv joined #salt
08:23 Antiarc joined #salt
08:23 v12aml joined #salt
08:24 rnts joined #salt
08:28 favadi joined #salt
08:36 MikaT joined #salt
08:36 rnts_ joined #salt
08:38 DarkKnightCZ1 joined #salt
08:39 mackripe_ joined #salt
08:39 oon_ joined #salt
08:39 atmosx_alt joined #salt
08:40 peters-tx joined #salt
08:41 Micromus_ joined #salt
08:41 oon joined #salt
08:41 iggy joined #salt
08:41 quarcu_ joined #salt
08:42 Garo__ joined #salt
08:42 Sketch joined #salt
08:42 manji joined #salt
08:42 garthk joined #salt
08:42 Ch3LL joined #salt
08:42 Ch3LL joined #salt
08:42 nkuttler_ joined #salt
08:42 lynxman_ joined #salt
08:43 tedski_ joined #salt
08:43 i90rr joined #salt
08:43 emid joined #salt
08:43 Nebraskka joined #salt
08:43 s_kunk joined #salt
08:43 douardda joined #salt
08:43 NV joined #salt
08:44 Karunamon joined #salt
08:44 Qwazerty joined #salt
08:44 cliffstah joined #salt
08:44 futuredale joined #salt
08:45 izibi joined #salt
08:45 jcastle joined #salt
08:45 Cottser joined #salt
08:46 NightMonkey joined #salt
08:46 codehotter joined #salt
08:47 copelco joined #salt
08:48 OliverMT joined #salt
08:49 mattl joined #salt
08:49 SteamWells joined #salt
08:49 lkannan joined #salt
08:49 munhitsu_ joined #salt
08:57 nmadhok joined #salt
08:57 FroMaster joined #salt
09:05 Miouge joined #salt
09:14 edrocks joined #salt
09:15 Sylvain31 hi, can I change on-the-fly the modules.mysql connection on the minion in a state? I'm changing root password on the same state so, I need to now use the new one… How do I change mysql.pass: '' from /etc/salt/minion or mysql.default_file:
09:17 netcho joined #salt
09:19 netcho hi all
09:23 Sylvain31 hi netcho
09:25 netcho i started working on our new conf mgmt system and i choosed saltstack... currently we use chef for bootstrap and capistrano for deploy
09:26 netcho i need some guidance on how to organiye stuff :)
09:26 netcho organize
09:26 netcho i have couple of questions
09:27 netcho we need local dev env and i was thinking of vagrant with masterless setup
09:28 netcho can i use the same states as i would use on master-minion scenario for our cloud infra or do i need to do some modifications?
09:28 slav0nic joined #salt
09:29 netcho it would be neet if i coould just "mount" /srv/salt from repo and run states
09:30 netcho also since we have multiple frameworks and multiple env what is the best way to organize files? states and pillar directories?
09:32 Sylvain31 I never used masterless config, but the doc here: https://docs.saltstack.com/en/latest/topics/tutorials/quickstart.html seems to present the same behavior at the command change… salt '*' becomes salt-call --local
09:32 netcho i was thinking envs in top file and custom grains for frameworks?
09:33 AndreasLutro netcho: masterless or salt-ssh in vagrant works just fine, and yes, you can use the exact same state/pillar files
09:33 netcho ql
09:34 AndreasLutro as for frameworks/environments that's up to you... if you put it all in different states you can do more different stuff but you'll have more duplication, if you put it all in pillars or grains you'll have to work harder to make your generic states work with every use case
09:35 netcho yeah, i need to choose lesser evil :D
09:36 arnaud hello
09:36 arnaud is there a way to browse minion grains on master cache?
09:40 arnaud or store them in an external system like jobs maybe
09:43 Sylvain31 arnaud: did you try : salt '*' grains.ls or salt '*' grains.items
09:45 tbrb joined #salt
09:45 impi joined #salt
09:45 peters-tx joined #salt
09:47 N-Mi joined #salt
09:47 N-Mi joined #salt
09:50 Sylvain31 how do I escape colon in yaml value?
09:51 arnaud yes sure Sylvain31 it works! but it would be convenient to be able to store them in a relational database like mysql
09:52 cyborg-one joined #salt
09:52 arnaud i'm coming from Puppet (dont blame me) and this thing misses me
09:52 Sylvain31 arnaud: did you try: salt '*' grains.items --out=json | store ?
09:53 arnaud wow I see... The idea would be to run that periodically?
09:53 Sylvain31 arnaud: See also : https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.data.html#module-salt.modules.data
09:54 arnaud the idea would be everytime a minion report grains: update them in an external storage
09:54 Sylvain31 arnaud: you can also read it from state and do something with the value?
09:55 Sylvain31 There's also salt mine: https://docs.saltstack.com/en/latest/topics/mine
09:55 deniszh joined #salt
09:55 arnaud looks good
09:56 Sylvain31 arnaud: what do you want to do with the grains value?
09:56 arnaud thanks a lot Sylvain31
09:56 arnaud explore it Sylvain31
09:56 arnaud get vision
09:56 Sylvain31 good ;)
10:20 ronnix joined #salt
10:21 Ayo__ joined #salt
10:22 fredvd joined #salt
10:26 Sylvain31 I included a state, with include, at the end of my state, but it is run before my state. How do I delay the inculded state to be run?
10:27 armyriad joined #salt
10:28 packeteer joined #salt
10:28 karlthane joined #salt
10:30 Elsmorian joined #salt
10:36 DEger joined #salt
10:39 Elsmorian Hi all. Trying to get custom grains to sync to a minion. I have synced this to other minions no problem, but one refuses to use it seemling. The output of saltutil.sync_grains mentions the file being copied, but doesn't show it in teh final output..
10:40 impi joined #salt
10:46 permalac joined #salt
10:56 catpig joined #salt
11:16 edrocks joined #salt
11:17 Sylvain31 can
11:18 * Sylvain31 is hiting keyboard in the wrong window
11:18 ronnix joined #salt
11:20 Sylvain31 can I deny a state to be executed if another state failed?
11:23 toabi Sylvain31 well if the state has the other one as requirement, it won't execute
11:23 bx2 joined #salt
11:23 Sylvain31 require_in: should do the trick i'm testin…
11:28 Sylvain31 toabi: Yes it does! the usecase: Change mysql root password (helped with old password stored in /root/.my.cnf) if succeed recreate /root/.my.cnf with the new passord. :)
11:31 Muchoz joined #salt
11:39 amcorreia joined #salt
11:40 fannet joined #salt
11:41 bx2 hi everyone, is it normal that firewall state is not updating iptables rules on centos7?
11:48 bx2 i mean the state is passing nicely, shows me which ports were added but when I run iptables -L.. nothing updated
11:59 keimlink joined #salt
12:03 Sylvain31 is there some string escaping filter for mysql and bash in jinja?
12:10 Rumbles Sylvain31, you mean from yaml?
12:11 Rumbles https://docs.saltstack.com/en/latest/topics/jinja/index.html#filters check yaml_encode
12:13 sybix joined #salt
12:14 iceyao joined #salt
12:15 rem5 joined #salt
12:20 tuxick joined #salt
12:22 impi joined #salt
12:27 Sylvain31 Rumbles: thanks, clever user will avoid strange password with doulble quote/ quote, starting or ending with space… I let it go. ;) but thank that was that
12:28 Rumbles np :)
12:33 evle1 joined #salt
12:35 gh34 joined #salt
12:38 wangofett joined #salt
12:38 wangofet1 joined #salt
12:39 ronnix joined #salt
12:47 Muchoz joined #salt
12:57 edrocks joined #salt
12:59 teryx510 joined #salt
13:03 corichar joined #salt
13:03 dyasny joined #salt
13:07 squishypebble joined #salt
13:07 hendrickxs joined #salt
13:07 komputes_ joined #salt
13:07 fannet joined #salt
13:09 aidin joined #salt
13:11 JohnnyRun joined #salt
13:12 eliasp joined #salt
13:12 Rumbles joined #salt
13:13 jdubski joined #salt
13:20 teryx510 joined #salt
13:21 lord2y joined #salt
13:21 lord2y Hello everybody
13:21 lord2y I have a question about salt.states.network
13:22 lord2y because I would like to configure a teamd interface (team0)
13:22 lord2y but it appered that salt support only bond
13:22 Muchoz joined #salt
13:23 permalac Hello guys, can I use salt-ssh with windows?   I mean, windows without installing the minion ?
13:24 lord2y permalac: good question...I'm too newbie to answare :-)
13:24 eliasp permalac: you might be interested in https://blogs.msdn.microsoft.com/powershell/2015/10/19/openssh-for-windows-update/ and https://github.com/PowerShell/Win32-OpenSSH
13:25 eliasp permalac: windows doesn't come (yet) with (Open)SSH builtin…
13:25 permalac I see that you can install salt minion remetely, https://docs.saltstack.com/en/latest/topics/installation/windows.html ,  since this is posible, maybe I can install nagios client on windows using salt and without the minion.
13:25 west575 joined #salt
13:26 permalac eliasp, the idea behind not installing the salt minion on windows is that I only would like to install the nagios package on all the windows, I don't would like to deal with the minion installation if its not needed.
13:27 eliasp permalac: well, then you might be better of with a Proxy minion which talks to your Windows boxes through Windows' builtin RPC (e.g. through psexec) mechanisms
13:28 permalac eliasp, interesting. I don't understand what you said, :)  can you give me a link where to go?
13:31 lord2y So, isn't there a chance/way to configure teamd interfaces with salt?
13:31 rem5 joined #salt
13:31 eliasp permalac: https://docs.saltstack.com/en/latest/topics/proxyminion/index.html
13:32 TOoSmOotH joined #salt
13:32 rem5 joined #salt
13:32 permalac eliasp, thank you very much. I have looked arround salt documentation for some weeks and by now I never seen that link.  Thanks.
13:35 _JZ_ joined #salt
13:36 flowstate joined #salt
13:37 MadHatter42 joined #salt
13:38 lord2y neither the support for NetworkManager?
13:40 eliasp lord2y: well, you could simple use the `ini` state to write NetworkManager config files and restart NetworkManager.service through a `watch` requisite on those files…
13:40 Dale joined #salt
13:41 lord2y eliasp: thank you. I'm a newbie of salt and not a guru of NetworkManager
13:41 lord2y eliasp: have you references about your statment?
13:42 eliasp lord2y: the easiest approach would be: create a copy of `/etc/NetworkManager` without a configured teamd interface… then setup a teamd connection using NMs assistant/config tools/whatever… check now the differences: `diff -ruN /etc/NetworkManager.orig /etc/NetworkManager`
13:42 Dale joined #salt
13:42 eliasp implement those changes now using the state for INI files: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.ini_manage.html
13:43 Dale joined #salt
13:43 eliasp then place a `watch` requisite on those states in a NetworkManager service state: https://docs.saltstack.com/en/latest/ref/states/requisites.html
13:43 eliasp https://docs.saltstack.com/en/latest/ref/states/all/salt.states.service.html
13:44 lord2y eliasp: thanks, I'm reading/trying
13:47 perfectsine joined #salt
13:52 Dale joined #salt
13:57 keltim joined #salt
13:57 Tanta joined #salt
13:57 mapu joined #salt
14:01 brew joined #salt
14:01 scoates joined #salt
14:03 vilitux joined #salt
14:04 DEger joined #salt
14:05 ajv joined #salt
14:07 perfectsine_ joined #salt
14:09 abednarik joined #salt
14:11 aidin joined #salt
14:11 amcorreia joined #salt
14:13 teryx510 joined #salt
14:13 onlyanegg joined #salt
14:23 Muchoz_ joined #salt
14:26 DanyC joined #salt
14:29 knine joined #salt
14:35 mpanetta joined #salt
14:42 anotherZero joined #salt
14:43 ivanjaros joined #salt
14:43 Rumbles joined #salt
14:52 hasues joined #salt
14:53 hasues left #salt
14:56 Jogfat joined #salt
15:19 murrdoc joined #salt
15:23 toanju joined #salt
15:23 bantone having a brain freeze here...say I do a cmd.run 'rm file' but want an output to confirm it
15:23 bantone how can I do that in salt again?
15:23 bantone isn't there a true condition I can create to confirm the file was deleted
15:24 Tanta use https://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.absent
15:25 Tanta or use rm -f with onlyif: test -f "filename"
15:25 Jogfat Tanta is probably right, but you could also look up the stateful argument of the state
15:25 mapu joined #salt
15:25 Jogfat - stateful: True
15:27 SpX joined #salt
15:27 bantone awesome, that gives me a few ideas
15:29 dmaiocchi joined #salt
15:33 Jogfat_ joined #salt
15:35 Rumbles joined #salt
15:35 rory left #salt
15:39 zmalone joined #salt
15:42 fannet_ joined #salt
15:48 dmaiocchi joined #salt
15:55 ajw0100 joined #salt
15:56 devster31 joined #salt
15:57 toanju joined #salt
16:00 zmalone1 joined #salt
16:04 whitenoise joined #salt
16:08 SpX joined #salt
16:09 mpanetta joined #salt
16:11 nmadhok joined #salt
16:14 onlyanegg joined #salt
16:25 writtenoff joined #salt
16:29 aasirc joined #salt
16:35 ageorgop joined #salt
16:40 west575_ joined #salt
16:43 edrocks joined #salt
16:44 west575 joined #salt
16:49 west575_ joined #salt
17:05 linjan joined #salt
17:05 manji joined #salt
17:17 west575 joined #salt
17:18 mpawel joined #salt
17:25 mapu joined #salt
17:25 manji joined #salt
17:26 Jogfat joined #salt
17:26 rbjorklin joined #salt
17:26 impi joined #salt
17:36 ajv joined #salt
17:39 nmadhok joined #salt
17:40 iggy use cmd.run as little as possible
17:47 tuxick ok
17:48 kevinquinnyo is there a salt execution module that checks for the presense of kernel modules?
17:48 fracklen joined #salt
17:48 mpawel hey, is any one using salt consul execution module ?
17:49 mpawel I have a problem, that when I use is, every value that I put to consul is quoted, and I have no idea how I can get rid of this :/
17:49 mpawel any idea ?
17:49 whytewolf kevinquinnyo: you mean like salt.modules.kmod
17:50 kevinquinnyo yes, and i was literally just looking at that
17:50 kevinquinnyo i did a search in the code for 'lsmod' assuming that's what was going to be used internally
17:50 kevinquinnyo cool i think this is what i need
17:53 MeltedLux joined #salt
17:56 cyborg-one joined #salt
18:01 subsignal joined #salt
18:05 Jogfat joined #salt
18:07 kevinquinnyo The salt.utils.depends decorator is supposed to take a function, which should return True or False right?
18:07 kevinquinnyo or "Something" or Falsey
18:08 garphy joined #salt
18:09 kevinquinnyo hmm i don't understand what I'm supposed to pass it, after reading the documentation in class Depends https://github.com/saltstack/salt/blob/0ef623f6fae5d624abd5d335ccd0f8b0aab77845/salt/utils/decorators/__init__.py#L25
18:15 kevinquinnyo oh it takes a python module...
18:15 kevinquinnyo i thought it could just take an arbitrary function
18:16 kevinquinnyo so what's the best way to gracefully and informatively fail only specific functions of an exectuion module if a kernel module is not loaded on the system
18:18 dendazen joined #salt
18:23 Rumbles joined #salt
18:24 iggy kevinquinnyo: I wrote a grain that throws kernel modules into a list and we check against that
18:25 kevinquinnyo well i can just call __salt__['kmod.is_loaded]('module-name-here')
18:26 kevinquinnyo i was just wondering if there was a best way to do it in an execution module, something like the @depends decorator that will check for the existence of a python module
18:26 toanju joined #salt
18:26 iggy kevinquinnyo: as far as failing gracefully, the best I've come up with is {% if something_fails %}test.fail_without_changes:  failhard: true{% endif %}
18:26 ajw0100 joined #salt
18:27 kevinquinnyo i think it would be pretty cool if there were a decorator that could just accept an arbitrary function that returns true/false
18:27 kevinquinnyo just for execution modules, where some of the functions will work, but some exotic functions require specific conditions
18:27 iggy that seems like a  lot of engineering to handle something an if can do
18:28 kevinquinnyo but not very dry to put it in 5 or 6 different functions
18:28 kevinquinnyo same reason they have the @depends decorator to my knowledge
18:29 impi joined #salt
18:29 kevinquinnyo i dunno
18:29 kevinquinnyo maybe that is overengineering
18:30 iggy it's probably best to put that in the __virtual__ function and just not load the module if it won't be useful
18:31 kevinquinnyo well this is in cases where the module will still work for say 90% of functions, but the special ones won't unless some conditions are present, so you wouldnt want to make the entire module unavailble
18:32 iggy you clearly understand what you're trying to do much better than any of us, so do what works best for you
18:32 iggy the beauty of salt... it's not opinionated
18:33 kevinquinnyo yeah i was just thinking out loud i guess -- i think it would even be possible to modify the salt.utils.decorator Depends class to check if what is passed is a callable / function and if so try to run it
18:33 kevinquinnyo so it could be dual-purpose
18:41 nmadhok joined #salt
18:41 dmaiocchi joined #salt
18:42 fredvd joined #salt
18:44 drawsmcgraw left #salt
18:49 eliasp joined #salt
18:50 pcn Is there a way to force a state to be run with a parallelism of 1 if it's invoked by salt?
18:50 pcn like "this state will only every be run one at a time)
18:50 pcn To avoid accidents?
18:50 murrdoc yeah
18:50 murrdoc touch a file
18:51 murrdoc and then use unless test -f file
18:51 mpawel joined #salt
18:52 pcn How does that avoid it running on 10 systems?
18:53 west575_ joined #salt
18:53 nmadhok joined #salt
18:53 mpawel HI is here any one that use consul salt module ?
18:54 nmadhok1 joined #salt
18:56 nmadhok joined #salt
18:56 cyborg-one joined #salt
19:00 flowstate joined #salt
19:02 iggy pcn: -b (batch mode)
19:04 flowstate hey guys, I've got a minion that just hangs either after or while trying to Determine Pillar Cache
19:04 flowstate no messages from the master about it, and the minion just hangs
19:04 flowstate I've tried with -l debug, and the only relevant thing I've seen is "No Dest File" when it's trying to copy a state file from the master
19:06 DEger joined #salt
19:07 poopsplat4 joined #salt
19:16 poopsplat4 https://www.youtube.com/watch?v=gDsSQ0YUTqQ
19:18 pcn iggy: right, is there a way to say "any time this state is invoked, enforce a batch of 1"?
19:22 abednarik joined #salt
19:23 iggy pcn: uhh... don't put it in highstate and only run it via orch (which does support batch)?
19:24 ajw0100 joined #salt
19:24 iggy flowstate: you tried with -l debug on the master or the minion?
19:24 flowstate on the minion
19:24 flowstate then it started saying that it couldn't talk to master, and that I should increase the worker threads
19:25 flowstate however there are already more worker threads than I have minions
19:25 flowstate I'm starting to wonder how stable this all is
19:25 iggy hmm, that usually gives a good indication
19:25 flowstate ...not a great feeling as I'm putting the last of my services into prod in salt
19:25 iggy is it one minion or all of them?
19:25 flowstate in this instance it's one
19:25 flowstate but it's happened before
19:25 flowstate I'm running on a pretty beefy instance
19:25 iggy what version of salt on master and minions?
19:26 flowstate 2015.8.0 on all
19:26 iggy .0?
19:26 pcn iggy: Our usual invocation is salt 'target' state.sls, and target almost always has a * in it.
19:27 iggy we don't use anything lower than .7
19:27 flowstate I believe so, I can verify, I pinned the version to avoid coinflicts
19:27 flowstate and conflicts, toio
19:27 flowstate too*
19:27 pcn Can I hide the state from state.sls?
19:27 iggy they are up to 2015.8.10 by now
19:28 iggy pcn: no
19:28 iggy I mean there are ways, but then there are ways around those ways
19:28 iggy so... you're always going to have to worry about someone aiming the loaded gun at their foot
19:29 pcn Hmm... OK, going to think about that, thanks.
19:34 Antiarc I'm trying to set up a git remote to serve pillar data in ext_pillar, but as far as I can tell it's just missing that pillar data. master log shows that the remote is read correctly.
19:34 Antiarc https://gist.github.com/cheald/059e244b7ed1b0001c9a8cd38605a204
19:34 Antiarc Any ideas why I would be hitting that?
19:36 Antiarc The log shows the ext_pillar updating properly, the files are where they'd be expected to be in the cache, but they are just missing during rendernig
19:37 DEger joined #salt
19:37 iggy Antiarc: maybe try something with file_exists
19:37 iggy !salt modules.pillar.file_exists
19:37 saltstackbot https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.pillar.html#salt.modules.pillar.file_exists
19:38 Antiarc Nice, thanks
19:38 Antiarc salt-call pillar.file_exists users.cheald
19:38 Antiarc local:
19:38 Antiarc False
19:38 iggy I think it'd be users/cheald.sls
19:38 iggy according to the docs
19:38 Antiarc Ah, whoops
19:38 Antiarc Same result though
19:39 iggy there's not much in the pillar runner
19:39 Antiarc yeah, I've been using item/items and they're just indicating that the master can't locate those files
19:39 iggy maybe `salt-run -l debug git_pillar.update`
19:40 iggy I've never tried to debug git pillars... there's some stuff for the salt:// fileserver, but no equivalents in pillar
19:40 toanju joined #salt
19:40 Antiarc https://gist.github.com/cheald/07b1365af1c8e61b15e20571e1c508b2
19:40 Antiarc No issues there.
19:41 Antiarc I've got gitfs working just fine, I've got states in a remote git repo that are performing as expected
19:41 Antiarc It's just pillar data that's giving me fits
19:41 iggy salt-run pillar.show_top ?
19:42 iggy should be `salt-run pillar.show_top <minion_id>`
19:42 Antiarc It's showing the topfile from my filesystem pillar base, no issues there
19:42 Antiarc I've got a filesystem root at /srv/pillar, and then the ext_pillar from git
19:42 iggy so you don't have a top in your git tree?
19:42 Antiarc Correct
19:42 Antiarc The former works fine, the latter does not
19:43 iggy but the fs one maps stuff from git?
19:43 Antiarc No, nothing from git is mapping in properly.
19:43 iggy but I mean it's supposed to be?
19:43 Antiarc I reference `users.roles.sysadmins` which is a fs sls which expands into some list of users
19:43 Antiarc I have the individual users in my git pillar, it's failing to find those
19:43 Antiarc Sec, I'll type up a gist
19:44 fannet_ joined #salt
19:45 Antiarc https://gist.github.com/cheald/cdda847c5287552a626434f5b0e649a1
19:45 Antiarc Sorta rough but it should give you the idea
19:45 Antiarc I'm sharing common pillar data between multiple environments, where I want all the user data to always be consistent, but I might have different sysadmin lists for this env vs that one
19:45 iggy and it's not just like a parsing error in users/cheald.sls?
19:46 Antiarc Correct, it worked just fine on the FS before I moved it into Git
19:46 iggy ahh, gotcha
19:47 Antiarc It feels like it's just not including the ext_pillar tree for some reason, I just haven't been able to suss out why yet
19:47 iggy yeah, I think I'm out of ideas
19:48 iggy maybe crank up debug level on the master and see if anything shakes out
19:48 Antiarc Hehe, sounds like a plan
19:50 Antiarc I'm seeing [DEBUG   ] Jinja search path: ['/srv/pillar']
19:50 Antiarc Which is my fs root, but I don't see any indication that it's ever checking the ext data
19:50 subsignal joined #salt
19:50 Antiarc [DEBUG   ] LazyLoaded git.ext_pillar -- happens later, after my sysadmins.sls has already been processed.
19:51 rvandegrift joined #salt
19:52 Antiarc Might jsut be as easy as the git.ext_pillar module isn't loading early enough. Any ideas how I might force it to load earlier?
19:54 Antiarc It looks like it renders the topfile first, then loads the ext_pillar module. So maybe it's expecting the fs topfile to be self-contained or something. Hm. I'm gonna try adding a top.sls to the git pillar, and setting it to process ext first
19:54 mpawel_ joined #salt
19:58 rvandegrift Should a state with onchanges_in always execute, regardless of any changes in the requisite states?
19:59 fracklen joined #salt
19:59 Antiarc "It seems like your use case relies on the git_pillar instance being able to access the pillar_roots top file (i.e. /srv/pillar/top.sls). That is not supported, if it worked before then it was unintended. The git pillar repo must have its own top file." -- https://github.com/saltstack/salt/issues/33355#issuecomment-223398640
19:59 saltstackbot [#33355][MERGED] Git ext_pillar "new-style" (post 2015.8.0) doesn't work on 2015.8.8.2 | Description of Issue/Question...
19:59 Antiarc So maybe I'm not supposed to be able to mix fs and git pillars? Hm.
20:01 DEger joined #salt
20:03 slav0nic joined #salt
20:07 edrocks joined #salt
20:08 nmadhok joined #salt
20:08 subsignal joined #salt
20:11 alexanderilyin joined #salt
20:14 toanju joined #salt
20:23 nmadhok1 joined #salt
20:24 DEger joined #salt
20:25 subsignal joined #salt
20:25 nmadhok joined #salt
20:27 nmadhok joined #salt
20:28 nmadhok1 joined #salt
20:28 ahammond we're on transport: tcp. Is there any way to query the salt master and get a list of open tcp connections? (kind of like manage.up, but without actually communicating)
20:30 Antiarc You could use netstat and filter for the salt port
20:30 Antiarc lsof would work too
20:31 ahammond Antiarc that's probably the right idea. Thanks!
20:31 DEger joined #salt
20:34 DarkKnightCZ joined #salt
20:42 flowstate joined #salt
20:43 deniszh joined #salt
20:43 nmadhok joined #salt
20:49 Rumbles joined #salt
21:06 nmadhok1 joined #salt
21:19 Nahual joined #salt
21:20 onlyanegg joined #salt
21:23 rem5 joined #salt
21:30 mpawel joined #salt
21:32 keimlink joined #salt
21:36 flowstate joined #salt
21:37 onlyanegg joined #salt
21:40 cb joined #salt
21:40 rem5 joined #salt
21:45 fannet_ joined #salt
21:46 onlyanegg joined #salt
21:49 beneggett joined #salt
21:52 onlyanegg joined #salt
21:54 Rumbles joined #salt
21:57 rem5 joined #salt
21:58 Nim joined #salt
21:58 Nim HELP
22:00 Nim Question for anyone in the chat room, I am running on ubuntu. I can set the timezone using a state file so that when I run 'date' it returns the correct timezone. If I run timedatectl it shows the old timezone string but with the correct +/- value. Does anyone know how salt sets the timezone when it uses a statefile? is it via timedatectl? It seems that it reads the timezone using timedatectl.
22:00 Nim I appreciate any feedback. Thanks in advance! :)
22:03 flowstate joined #salt
22:04 misconfig joined #salt
22:05 nmadhok joined #salt
22:07 rem5 joined #salt
22:10 misconfig Hi everyone, I have an issue with pkgrepo.managed while installing an ubuntu PPA. Salt continues to fail but it works VIA CLI - I'm currently using http/https proxies for apt and set in /etc/environment = > https://gist.github.com/ndobbs/a92809037b91df2396db3a6f1f262de3
22:12 ajw0100 joined #salt
22:16 onlyanegg joined #salt
22:17 babilen misconfig: You need to look at the minion debug log. Another way would be to just forego the buggy add-apt-repository tool and simply configure the PPA like a normal repository
22:19 TyrfingMjolnir joined #salt
22:23 misconfig babilen, great suggestions - rather than spending too much time on this I'll do as suggested. I found an open issue in github I'm going to follow up on and maybe it'll be resolved when there is time. Thanks again
22:24 nmadhok1 joined #salt
22:25 rem5 joined #salt
22:26 misconfig I've followed up with the issue => https://github.com/saltstack/salt/issues/32294
22:26 saltstackbot [#32294][OPEN] Salt pkgrepo.managed for PPA Does not Import Keys | Description of Issue/Question...
22:31 Muchoz joined #salt
22:35 ajw0100 joined #salt
22:54 geekbauru joined #salt
23:00 west575 joined #salt
23:08 nmadhok joined #salt
23:13 Muchoz joined #salt
23:19 ajw0100_ joined #salt
23:23 geekbauru left #salt
23:31 toastedpenguin joined #salt
23:32 toastedpenguin joined #salt
23:36 west575 joined #salt
23:45 onlyanegg joined #salt
23:45 fannet_ joined #salt
23:52 subsignal joined #salt
23:54 hasues joined #salt
23:54 hasues left #salt
23:57 keimlink_ joined #salt
23:58 dendazen joined #salt
23:59 onlyanegg joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary