Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-06-23

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:01 catpigger joined #salt
00:01 systeem joined #salt
00:01 ajw0100 joined #salt
00:02 Twiglet joined #salt
00:08 noraatepernos joined #salt
00:11 netcho joined #salt
00:13 woodtablet salt gpg render is just so wonderful, it makes me cry with joy =D
00:14 woodtablet left #salt
00:23 brent_ joined #salt
00:25 flowstate joined #salt
00:26 Muchoz joined #salt
00:27 MindDrive And once again... my Salt upgrade is failing miserably.
00:31 dendazen joined #salt
00:31 mosen joined #salt
00:33 ahammond I'm about to start experimenting with Thorium. Wish me luck. :)
00:35 MindDrive I'm honestly beginning to wonder if choosing Salt was a good idea, since it seems that it's impossible for me to upgrade without breaking the one thing I'm using it for, and now one of my log files is getting spammed with TRACE messages, and I don't HAVE 'trace' set for logging.
00:43 ajw0100 joined #salt
00:51 iceyao joined #salt
00:59 devster31 joined #salt
01:00 iceyao joined #salt
01:01 edrocks joined #salt
01:02 CustosLimen joined #salt
01:02 llua joined #salt
01:03 zero_shane joined #salt
01:03 WildPikachu joined #salt
01:05 godlike joined #salt
01:05 godlike joined #salt
01:05 al joined #salt
01:05 ajw0100 joined #salt
01:14 iggy you definitely shouldn't have
01:15 iggy sjmh: salt-call --local grains.items ... or something
01:16 sjmh iggy - yeah.  I have to muck with it though - I'm doing it on a system that's in the middle of provisioning on a non-routed network, so the call takes forever
01:16 sjmh due to the hostname, fqdn_ipv4 and fqdn_ipv6 grains
01:16 sjmh solution right now is to replace 'hosts: files dns' in nsswitch.conf, run the command, then switch it back :)
01:17 sjmh the purpose being to gather up the grain information i need and forward it over to the CMDB while it's provisioning
01:19 keltim has anyone gotten salt to work off on it's own part of the fs, like /opt/salt ? perhaps with it's own python all to itself?
01:19 justanotheruser joined #salt
01:20 iggy should be doable... definitely not a standard setup
01:20 iggy there's some docs on venv install that might be a good place to start
01:20 tvinson_ i'm on ubuntu xenial, saltstack 2016.3.1, python-boto 2.38.0-1ubuntu1 and i think i'm facing https://github.com/saltstack/salt/issues/28469 or something similar. when doing boto_secgroup.create it creates the group but isn't able to find it or add any rules -- there's this error {'new': {'secgroup': None}, 'old': {'secgroup': None}}
01:20 saltstackbot [#28469][MERGED] state boto_secgroup.present fails to find vpc_name | I'm getting a error when attempting to use the salt.boto_secgroup state to manage security groups. Am I doing something wrong? (some content redacted)...
01:23 druonysus joined #salt
01:26 tvinson_ it's intermittent, almost seems like i'm hitting a race condition where salt is checking before aws is done with its thing
01:26 flowstate joined #salt
01:40 patrickancillott joined #salt
01:46 jimklo joined #salt
01:48 ilbot3 joined #salt
01:48 Topic for #salt is now Welcome to #salt! | Latest Versions: 2015.5.10, 2015.8.10, 2016.3.1 | Support: https://www.saltstack.com/support/ | Logs: http://irclog.perlgeek.de/salt/ | Paste: https://gist.github.com/ (please don't multiline paste into channel) | See also: #salt-devel, #salt-offtopic | Ask with patience as we are volunteers and may not have immediate answers
01:49 flowstate joined #salt
01:56 noraatepernos joined #salt
01:59 tvinson_ hmm..when it does happen i can call the boto_secgroup.exists execution module (similar to what the state's doing internally. i get True when passing vpc_id, I get False for a couple minutes without.
02:08 ageorgop joined #salt
02:12 iceyao joined #salt
02:18 dh__ joined #salt
02:23 k_sze[work] joined #salt
02:26 flowstate joined #salt
02:27 skeezix-hf joined #salt
02:29 hasues joined #salt
02:34 hasues left #salt
02:35 eseyman joined #salt
02:39 patrickancillott joined #salt
02:40 netcho joined #salt
02:40 racooper joined #salt
02:44 writtenoff joined #salt
02:57 tuxx joined #salt
03:01 netcho joined #salt
03:03 patrickancillott joined #salt
03:03 edrocks joined #salt
03:06 GreatSnoopy joined #salt
03:15 eseyman joined #salt
03:19 patrickancillott joined #salt
03:24 flowstate joined #salt
03:28 sauvin joined #salt
03:46 morissette joined #salt
03:48 dendazen joined #salt
04:00 Derailed hey all, I'm going to ask what I think must be the dumbest question of all: How do I actually make all my salt-minions run 'state.apply' on a regular basis? How do I actually get puppet-like configuration management?
04:01 Derailed i must be missing somewhere obvious in the docs, right?
04:02 Derailed when my new minion comes online and its key is accepted I want it to immediately run it's [highstate? do I have the terminology right?], and I want it to update quickly
04:05 zer0def joined #salt
04:05 bfig__ joined #salt
04:06 sknebel joined #salt
04:06 bfig___ joined #salt
04:09 Cidan joined #salt
04:11 haaj joined #salt
04:24 flowstate joined #salt
04:24 macheck joined #salt
04:25 mohae_ joined #salt
04:28 hweemiin joined #salt
04:29 hweemiin hi, I'm currently blocked by https://github.com/saltstack/salt/issues/30990, anyone knows workaround/solution for it?
04:29 saltstackbot [#30990][OPEN] is there a way to use git fileserver backend to sync the salt-master repo from github behind a proxy? | I'm currently testing the gitfs provider 'pygit2' with https authentication....
04:39 Ayo joined #salt
04:40 zero_shane joined #salt
04:42 brent_ joined #salt
04:54 jalbretsen joined #salt
04:57 noraatepernos joined #salt
04:59 netcho joined #salt
05:04 noraatepernos joined #salt
05:04 DarkKnightCZ joined #salt
05:06 edrocks joined #salt
05:15 iggy Derailed: there isn't a config option or something to enable scheduled highstates
05:17 Derailed iggy, what is the suggested practice, then?
05:17 Derailed and how should I ensure that newly onboarded minions are immediately brought into line?
05:17 iggy Derailed: you can use the scheduler, webhooks called by a CI/CD system (or even from github on commit), a reactor triggered by a beacon, etc...
05:17 iggy the possibilities are endless
05:18 Derailed indeed :-)
05:18 iggy there are also multiple ways of doing that
05:18 Derailed but when the possibilities are endless, it's really nice to know how people *expect* you to do it
05:18 iggy yeah
05:18 Derailed is there a best practice/standard practice?
05:18 iggy what you're searching for... doesn't exist
05:18 Derailed ha!
05:18 iggy it was one of the hardest things for me to come to grips with when I started using salt
05:19 iggy salt isn't opinionated at all
05:19 iggy for better or worse
05:20 whaity joined #salt
05:21 iggy as far as minion startup highstate goes... there are also multiple ways of doing that (reactor, startup_states minion config, etc)
05:24 Mill80 joined #salt
05:25 Mill80 Is complete anonymity possible?
05:25 Derailed iggy, in my use-case, I'm actually working entirely with pre-generated pre-accepted keys. So would it be reasonable to use 'salt-call' to trigger a highstate run as soon as the minion boots up?
05:26 iggy Derailed: if that works for you, go with it
05:26 iggy (there are however events to watch other than key accepted)
05:30 felskrone joined #salt
05:37 felskrone joined #salt
05:39 rdas joined #salt
05:42 dh__ joined #salt
05:46 smcquay joined #salt
05:49 rbjorklin joined #salt
05:50 impi joined #salt
05:50 illern joined #salt
06:01 slav0nic joined #salt
06:02 Mill80 Anybody there?
06:05 Mill80 left #salt
06:08 buxy left #salt
06:12 DEger joined #salt
06:18 duncanmv joined #salt
06:22 colegatron joined #salt
06:23 flowstate joined #salt
06:24 LostSoul Hi
06:24 LostSoul Does wildcard works in pillars?
06:25 LostSoul I have something like {% if grains['host'] == 'hostname-*' %} and it seems not to use those pillars after that if
06:25 KermitTheFragger joined #salt
06:28 iggy no
06:28 LostSoul Hmm
06:28 LostSoul I used fqdn and it still doesn't work :O
06:28 LostSoul On one host it work on second it's not
06:29 iggy == doesn't supoort globbing
06:29 iggy either split your states up and target stuff in the top file (as it should be)
06:29 iggy or use string functions (the other way is better though)
06:31 iggy i.e. {% if grains.id.startswith('hostname-') %} ... {% endif %}
06:32 LostSoul So now I'm a bit lost as I'm able to setup stuff on one host and not on the second
06:33 Ayo joined #salt
06:33 LostSoul I've defined state which uses list and that list of variables is definied in pillar (pillar is for 2 hosts but each should have various tasks)
06:36 LostSoul Ok got it, I made small mistake and double checked grain
06:37 sauvin joined #salt
06:37 LostSoul But you are right it doesn't support globbing
06:37 LostSoul Thanks iggy!
06:40 CeBe joined #salt
06:45 nebuchadnezzar joined #salt
06:50 DEger joined #salt
06:52 dmaiocchi joined #salt
06:54 dmaiocchi joined #salt
06:56 om joined #salt
06:57 iceyao joined #salt
07:04 iceyao_ joined #salt
07:09 edrocks joined #salt
07:10 evle joined #salt
07:18 toanju joined #salt
07:23 Electron^- joined #salt
07:23 flowstate joined #salt
07:24 felskrone joined #salt
07:26 kawa2014 joined #salt
07:27 iceyao__ joined #salt
07:34 netcho joined #salt
07:37 iceyao_ joined #salt
07:42 iceyao joined #salt
07:44 krymzon joined #salt
07:45 kawa2014 joined #salt
07:51 keimlink joined #salt
07:52 linjan joined #salt
07:54 sagerdearia joined #salt
07:55 netcho joined #salt
07:58 deniszh joined #salt
08:03 JohnnyRun joined #salt
08:06 SWA I would like to trigger in a hipchat notification the number of failed states during a highstate.. i can't find the info in the event dict. Is it available somewhere?
08:08 AndreasLutro SWA: no, you have to iterate through the state return data
08:08 SWA AndreasLutro: thanks :)
08:10 iceyao_ joined #salt
08:10 ronnix joined #salt
08:16 iceyao joined #salt
08:17 manji joined #salt
08:24 flowstate joined #salt
08:26 GreatSnoopy joined #salt
08:29 netcho joined #salt
08:32 s_kunk joined #salt
08:37 Rikaikun joined #salt
08:37 garphy joined #salt
08:39 felskrone joined #salt
08:41 smcquay joined #salt
08:41 Rikaikun left #salt
08:43 fracklen joined #salt
08:44 netcho joined #salt
08:44 netcho left #salt
08:46 Hetman joined #salt
08:47 Hetman hello how to list all minions with grains my-grain:true ?
08:50 vitalyisaev2 joined #salt
08:54 nkuttler Hetman: https://docs.saltstack.com/en/latest/topics/targeting/
08:55 LostSoul Hetman: Go to salt-master
08:55 LostSoul And salt '*' grains.items
08:57 AndreasLutro salt -G my-grain:true test.ping
09:01 felskrone joined #salt
09:02 tuxick is there a way to run/update just one state/rule from init.sls?
09:02 tuxick might save problems/time testing stuff
09:11 edrocks joined #salt
09:15 Qlawy Hi guys
09:15 Qlawy salt should work with python 2.6? or not really?
09:15 Qlawy https://docs.saltstack.com/en/latest/topics/installation/index.html tells it should
09:16 Qlawy but on rhel 6(sic!) where there is python 2.6 (sic!^2) I got: syntax error: return {key: safe_value(key, val) for (key, val) in headers}
09:16 Qlawy http://wklej.org/hash/efcaa0afd1f/
09:17 AndreasLutro should probably report that as a bug
09:17 AndreasLutro also why is that sic?
09:17 Qlawy presonal opinion ;)
09:17 AndreasLutro okay? sic is usually used to point out typos in quotes from others, I don't think rhel 6 is a typo :p
09:18 AndreasLutro oh and I guess it's not technically salt that has the 2.6 compat issue, it's swiftclient
09:18 lero joined #salt
09:18 Qlawy hmm
09:21 Qlawy interesting: file /usr/lib/python2.6/site-packages/swiftclient/client.py is not owned by any package
09:22 AndreasLutro could be installed with pip
09:24 inad922 joined #salt
09:24 arif-ali joined #salt
09:26 Qlawy btw, why salt needs openstack swift client? Just curious
09:28 AndreasLutro no clue
09:30 vitalyisaev2 Hello! I'm pretty new to Salt, and possibly I misunderstand some concepts... Recently I faced with a need of "dynamic" Pillar: some keys should be initialized with values at the Pillar's compile time (i.e. should not to be stored statically). Jinja macro are not sufficient here, I would like to recruit Python for this purporse. Please consider two simple cases: http://pastebin.com/iB8jehPr Is it possible to implement this in Salt
09:37 mage_ vitalyisaev2: maybe you want external pillar?
09:38 mage_ or maybe you can juste set token: - arg1 - arg2 and call token_get() in the state ?
09:49 om joined #salt
09:53 vitalyisaev2 I didn't want to take this logic in States. I think that States should act just like a templates for RPC actions, but all the variables should be defined in Pillars only.
09:55 ubaumann joined #salt
10:00 vitalyisaev2 joined #salt
10:00 ubaumann hi, is it possible to get the job id in a state file? i'm trying to do something like this:   wait_for_config_update:   salt.wait_for_event:     - name: salt/netapi/hook/osr/stagingtask/{{ jid }}/config_update
10:03 Guest47189 joined #salt
10:07 om3 joined #salt
10:07 om2 joined #salt
10:07 netcho joined #salt
10:16 jhauser joined #salt
10:23 hweemiin joined #salt
10:23 flowstate joined #salt
10:26 felskrone joined #salt
10:28 goudale joined #salt
10:28 goudale hello
10:28 goudale can I use a salt-cloud map to describe my already-existing ec2 instances ?
10:48 haarp joined #salt
10:51 haarp hey. is the documentation for states.ssh_auth correct? it has examples for the -options argument, but it only causes problems when i try to use it like this. did i get the syntax wrong? http://pastebin.com/SdQK4949
10:51 Satyajit joined #salt
10:51 haarp uuugh, never mind
10:52 goudale don't you miss a column (:) after option ?
10:52 haarp just saw it too :P
10:52 goudale ``- options:``
10:52 haarp didnt notice it until i pastebinned and posted here, of course
10:52 haarp heh, but thanks
10:57 netcho i am using salt-cloud to create ec2 instances, what is the best way to create a DNS record automaticaly for that instance after highstate is done?
10:58 netcho i.e. i create app-1 instance with: salt-cloud -p my_profile app-1
10:59 netcho i would like to create a DNS record in a specific hosted zone for that app-1 and its local ip
10:59 netcho boto_route53?
11:02 netcho or just use aws-cli for that
11:02 amcorreia joined #salt
11:08 NightMonkey joined #salt
11:13 edrocks joined #salt
11:16 duncanmv joined #salt
11:20 irctc086 joined #salt
11:20 irctc086 hi !
11:21 irctc086 i just installed salt (newbee) to work with foreman. My question is, doest it need to launch salt services (master, salt-api) at statup of my os (centos7). Or foreman launch them when it's nedded
11:21 mpanetta joined #salt
11:23 flowstate joined #salt
11:32 numkem joined #salt
11:38 abednarik joined #salt
11:39 lilvim joined #salt
11:41 keimlink joined #salt
11:42 lilvim joined #salt
11:44 lilvim joined #salt
11:44 AvengerMoJo joined #salt
11:47 viq joined #salt
11:48 Muchoz joined #salt
11:49 duncanmv joined #salt
11:59 lero__ joined #salt
12:07 numkem1 joined #salt
12:09 west575 joined #salt
12:15 ixeous joined #salt
12:22 rem5 joined #salt
12:24 TooLmaN joined #salt
12:24 tpaul joined #salt
12:31 edrocks joined #salt
12:33 om3 joined #salt
12:33 om2 joined #salt
12:34 Muchoz joined #salt
12:41 XenophonF joined #salt
12:45 gh34 joined #salt
12:45 numkem joined #salt
12:47 felskrone joined #salt
12:49 ronnix joined #salt
12:55 om2 joined #salt
12:55 om3 joined #salt
12:56 p3rror joined #salt
12:57 dendazen joined #salt
12:57 lero joined #salt
12:59 felskrone1 joined #salt
12:59 rofl____ joined #salt
13:04 lero joined #salt
13:04 edrocks joined #salt
13:06 Muchoz joined #salt
13:07 TyrfingMjolnir joined #salt
13:07 teryx510 joined #salt
13:10 kawa2014 joined #salt
13:14 hasues joined #salt
13:14 samkottler joined #salt
13:15 kbaikov joined #salt
13:18 arnaud isnt this question more #foreman related?
13:22 mpanetta joined #salt
13:23 flowstate joined #salt
13:26 hasues left #salt
13:30 mapu joined #salt
13:34 dyasny joined #salt
13:40 flowstate joined #salt
13:41 iceyao joined #salt
13:53 ajv joined #salt
13:56 perfectsine joined #salt
13:57 rem5 joined #salt
13:59 edrocks joined #salt
14:01 goudale joined #salt
14:01 kevinquinnyo joined #salt
14:02 tuxick ProgrammingError: (2014, "Commands out of sync; you can't run this command now"
14:02 tuxick i'm not programming!
14:03 om3 joined #salt
14:03 om2 joined #salt
14:06 racooper joined #salt
14:08 sjmh joined #salt
14:09 edrocks joined #salt
14:09 kaptk2 joined #salt
14:12 abednarik joined #salt
14:14 DammitJim joined #salt
14:15 evle1 joined #salt
14:20 teryx510 joined #salt
14:21 teryx510 joined #salt
14:22 flowstate joined #salt
14:26 patrickancillott joined #salt
14:33 DarkKnightCZ joined #salt
14:39 deniszh1 joined #salt
14:39 netcho joined #salt
14:39 Brew joined #salt
14:40 p3rror joined #salt
14:41 beardedeagle joined #salt
14:43 netcho how do i install boto modules on minions?
14:43 p3rror joined #salt
14:44 netcho Error loading module.boto_route53: The boto_route53 module could not be loaded: boto libraries not found
14:45 goudale pip install boto ?
14:45 flowstate joined #salt
14:45 netcho i did
14:45 netcho actualy by sudo apt-get install python-boto
14:45 netcho it should be the same
14:45 goudale what's the output of `python2 -c 'import boto'`
14:45 goudale ?
14:46 netcho no output
14:47 goudale so no errors ( :
14:48 goudale maybe salt expect boto3 (and not boto) ?
14:48 netcho dunno
14:48 netcho Comment: State 'boto_route53.present' was not found in SLS 'update_dns_record'
14:48 netcho Reason: 'boto_route53' __virtual__ returned False
14:49 beardedeagle did you restart the salt-master service?
14:49 flowstate joined #salt
14:50 netcho why?
14:52 netcho i did and still the same
14:52 mpanetta joined #salt
14:53 goudale could you share your sls ?
14:53 flowstate joined #salt
14:56 netcho goudale: http://pastebin.com/Qz7MVHEH
14:56 om3 joined #salt
14:56 om2 joined #salt
14:57 netcho Result: False
14:57 netcho Comment: State 'boto_route53.present' was not found in SLS 'update_dns_record'
14:57 netcho Reason: 'boto_route53' __virtual__ returned False
14:58 flowstate joined #salt
15:00 goudale does these work ? https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.boto_route53.html
15:04 protoz joined #salt
15:05 tuxick weird, every time i run highstage my .ssh/authorzid_keys gets rewritten. just for my account, all others arel left untouched
15:10 ZiLi0n joined #salt
15:11 ZiLi0n Hello everyone, does someone know how to use the 'base' parameter in grains.filter_by function? I am thinking of using it so that I can provide default values for the cases where there is no match
15:12 Muchoz_ joined #salt
15:16 dh__ joined #salt
15:16 alvinstarr joined #salt
15:18 om2 joined #salt
15:18 om3 joined #salt
15:20 netcho goudale: nope, it does not work
15:20 marcus_ joined #salt
15:20 goudale ``salt --version`` ?
15:20 netcho salt 2015.8.10 (Beryllium)
15:21 jimklo joined #salt
15:21 goudale maybe try with the ``-l debug`` option ?
15:22 netcho i am
15:22 netcho http://pastebin.com/Gb7qLDzJ
15:22 flowstate joined #salt
15:23 goudale maybe an hint at https://github.com/saltstack/salt/blob/develop/salt/modules/boto_route53.py#L63 ?
15:24 flowstate joined #salt
15:25 netcho http://pastebin.com/VtxQ1KRu
15:25 flowstat_ joined #salt
15:28 goudale imo your version of boto is too old, try to uninstall the debian package and install the pip one (sudo pip install boto)
15:28 zero_shane joined #salt
15:30 shiriru joined #salt
15:30 rem5 joined #salt
15:30 netcho Downloading boto-2.40.0-py2.py3-none-any.whl (1.3MB): 1.3MB downloaded
15:32 om2 joined #salt
15:32 om3 joined #salt
15:32 Ayo joined #salt
15:35 colegatron when you do a salt-call state.highstate the console starts displaying the states it is running in realtime. There is anyway to see them too when you run a "salt minion1 state.highstate" ??
15:36 goudale tail /var/log/salt/minion on the minion ?
15:37 colegatron I would like to do it on the master
15:37 deus_ex joined #salt
15:37 colegatron because a "sudo salt minion1 cmd.run 'tail -f /log'" also never ends and you get no feedback
15:39 colegatron I am very curious if there is no an easy way to do it
15:39 Trauma joined #salt
15:41 goudale did you try `-l debug` ?
15:41 al joined #salt
15:41 colegatron goudale, honestly not, but it is not going to be too much (superfluous) info?
15:42 goudale `-l info` :B
15:42 rem5 joined #salt
15:43 colegatron oh, really? going to try
15:43 zer0def ok, anyone able to tell me why keystone modules don't work, while having keystoneclient installed? :/
15:43 al joined #salt
15:44 patrickancillott joined #salt
15:45 flowstate joined #salt
15:45 zer0def welp, despite explicitly stating to reload modules, i needed to restart the minion
15:45 garphy joined #salt
15:45 lungaro joined #salt
15:47 rem5 joined #salt
15:47 jav joined #salt
15:47 netcho goudale: looks like it was a boto version problem... after i upgrade it i got another error which lead me to conclusion
15:47 honestly The minion doesn't give the master any results before it's done.
15:47 netcho it failed geting profile form pillar
15:48 honestly It's as simple as that.
15:48 netcho when i set key id in state ir runs fine
15:48 goudale netcho: sounds like a different issue then
15:48 netcho File "/usr/lib/python2.7/dist-packages/salt/utils/boto.py", line 90, in _get_profile
15:48 netcho key = _profile.get('key', None)
15:48 netcho AttributeError: 'str' object has no attribute 'get'
15:58 noraatepernos joined #salt
15:59 druonysus joined #salt
16:03 noraatepernos joined #salt
16:07 bfig joined #salt
16:08 bfig_ joined #salt
16:08 netcho goudale: yeah now i have another issue :D
16:08 netcho when i run it manualy it works but when i run it via salt-api jenkins plugin it fails
16:10 netcho not surte why, i send 2 api calls, one is fine other fails
16:10 netcho http://pastebin.com/RTgnfUyN
16:12 netcho looks like highstate is not finished before trying to apply new state
16:12 netcho or am i wrong
16:16 bowhunter joined #salt
16:16 iggy looks like it
16:22 bltmiller joined #salt
16:23 west575_ joined #salt
16:24 Muchoz_ joined #salt
16:30 brent_ joined #salt
16:31 om joined #salt
16:31 om2 joined #salt
16:32 lero joined #salt
16:33 woodtablet joined #salt
16:37 zero_shane joined #salt
16:38 bltmiller joined #salt
16:38 Lionel_Debroux_ joined #salt
16:40 writtenoff joined #salt
16:46 DEger joined #salt
16:46 DEger joined #salt
16:50 brent_ joined #salt
16:51 murrdoc joined #salt
16:55 buglessdr joined #salt
16:56 flowstate joined #salt
17:00 aharvey joined #salt
17:02 haaj joined #salt
17:03 aharvey Gitfs question:  If my file_roots look like https://gist.github.com/adamcharvey/5332d3146f7bdd9133979903636cc21c and my repo base is /srv/salt/states, is there a method to have file_roots look through base-config as well?  This works great with straight up file_roots, but when I tried having gitfs read solely from /srv/salt/states, it would not parse through base-config and find the states within.  Ideas?
17:07 sauvin joined #salt
17:12 Slimmons joined #salt
17:12 Slimmons When I make a change to my map.jinja file, what's the correct way to reload that file?  I'm currently trying to run a state, and it's pulling the old data from that file
17:13 Slimmons tried restarting all salt-master, but it's still pulling old data
17:13 aharvey I use salt ‘hostname’ saltutil.clear_cache
17:14 aharvey you want to clear out the minion’s cache since they’re the ones executing it
17:15 bltmiller joined #salt
17:16 Slimmons thanks, that's where my mistake was.  I was refreshing on master
17:16 Slimmons thx
17:17 druonysus joined #salt
17:26 aharvey anytime - took me a while to wrap my head around =)
17:28 Muchoz joined #salt
17:33 flowstate joined #salt
17:34 morissette joined #salt
17:38 flowstate joined #salt
17:41 keimlink joined #salt
17:43 s_kunk joined #salt
17:43 flowstate joined #salt
17:45 iggy saltutil.sync_all should probably work too
17:45 iggy alternatively, everything should be sync'ed at the start of a highstate (vs state.sls foo)
17:45 aharvey excellent info
17:46 iggy we stopped using gitfs at my last place it was just too... odd
17:47 iggy we just had a state that checked out the git tree into the file_roots
17:47 iggy aharvey: ^
17:47 aharvey I’m trying to figure out a way of keeping some people’s grubby fingers from editing on the fly on the master lol
17:47 iggy a bit of a non-answer, but seemed relevant
17:47 flowstate joined #salt
17:47 aharvey hmm not a bad idea
17:48 iggy inotify beacon that runs a git checkout every time someone edits ;)
17:52 flowstate joined #salt
17:54 buglessdr joined #salt
17:55 wendall911 joined #salt
17:56 west575 joined #salt
17:57 flowstate joined #salt
18:00 toanju joined #salt
18:01 ageorgop joined #salt
18:01 west575 joined #salt
18:02 haaj joined #salt
18:02 flowstate joined #salt
18:07 flowstate joined #salt
18:09 netcho joined #salt
18:11 Slimmons What's the correct syntax for setting the versions for postgres?  Here's a gist of what I've tried.  Also, I thought I remembered there being a more graceful way of installing postgres, and setting up users/db's, other than the postgres_database.present.  https://gist.github.com/Slimmons/b548a9a865a70c2b5fc7fe3da5185f5d
18:12 Muchoz joined #salt
18:12 Slimmons more graceful, was the wrong way to phrase that, just different
18:13 amcorreia joined #salt
18:14 impi joined #salt
18:14 corichar joined #salt
18:15 aharvey joined #salt
18:16 flowstate joined #salt
18:20 eykd joined #salt
18:26 iggy postgres-formula?
18:28 iggy and no, that's not the proper syntax for setting versions
18:28 iggy !salt.states.pkg.installed
18:28 iggy !salt states.pkg.installed
18:28 saltstackbot https://docs.saltstack.com/en/latest/ref/states/all/salt.states.pkg.html#salt.states.pkg.installed
18:29 Slimmons in the postgres-formula, when pkg.installed runs, it's just installing postgresql, and no specific version.  It doesn't specify a version until the pg_createcluster...which I don't understand
18:29 iggy hmm, the docs say that should work, but I've only ever seen it as - <pkgname>: <version>
18:29 DEger joined #salt
18:29 iggy ahh, I'm thinking of pkgs format
18:32 goudale joined #salt
18:35 FroMaster joined #salt
18:35 ajw0100 joined #salt
18:39 tik joined #salt
18:40 tik is there a way to target only minions of a specific environment?
18:41 iggy do you have your environment set in the minion config?
18:41 kawa2014 joined #salt
18:42 tik yes
18:42 tik i've also got the corresponding environment configured on the master
18:42 noraatepernos joined #salt
18:51 tik i'd like to avoid having to add the environment as a static grain on the minion config
18:52 DEger joined #salt
18:55 flowstate joined #salt
18:57 toanju joined #salt
18:59 manji joined #salt
18:59 iggy maybe there isn't a way...
18:59 iggy environment isn't autoloaded into grains by chance is it?
19:01 flowstate joined #salt
19:03 haaj joined #salt
19:04 bltmiller joined #salt
19:07 tik grains.items returns nothing looking like an environment
19:13 GreatSnoopy joined #salt
19:14 flowstate joined #salt
19:15 zero_shane joined #salt
19:18 fannet_ joined #salt
19:19 flowstate joined #salt
19:24 DarkKnightCZ joined #salt
19:24 flowstate joined #salt
19:26 spuder joined #salt
19:33 justyns joined #salt
19:34 lero joined #salt
19:34 flowstate joined #salt
19:36 Barbarossa joined #salt
19:36 Barbarossa hi there
19:36 Barbarossa Does anyone have a pointer to me on where I can learn how to access the pillar from within python code (loaded into jinja as a salt module)?
19:37 Barbarossa I didn't manage to find any documentation explaining that
19:37 repl1cant Barbarossa: check out any of the formulas on github
19:41 netcho joined #salt
19:47 samkottler Hi! I'm running salt 2016.3.1 on Ubuntu 14.04 and am running into an interesting condition where grains.get for a custom grain doesn't return anything after sync. Once I restart the salt-minion daemon it'll be there though.
19:47 samkottler Is this expected behavior and if not how do I work around it?
19:47 repl1cant samkottler: ha, me and a co-worker were talking about that exact same issue this morning ;-)
19:49 Slimmons So, I'm trying to avoid having an awful chain of cmd.run's to get postgres setup, and editing the sources.list the way in this gist, bothers me.  Is there a better way to be doing this?  I know there's a postgres-formula, but it does a lot of crazy stuff that I don't need, and doesn't specify the version (so it pulls w/e ubuntu has setup in their repos).  https://gist.github.com/Slimmons/8d3a59d18b0ba65a40fc7921380ef9f0
19:49 aharvey joined #salt
19:49 Slimmons But that's the only way I seem to be able to get postgres 9.5 installed on an ubuntu minion
19:49 Slimmons and it's gross
19:50 Slimmons and sorry samkottler, I don't know the answer to that question.
19:50 kevinquinnyo Slimmons: you should use pkgrepo.managed instead of using cmd.run to add the key
19:50 kevinquinnyo then you could use pkg.installed to install it
19:50 samkottler repl1cant: is this is a new behavior?
19:50 kevinquinnyo then use requisites to make sure everything executes in the correct order
19:51 repl1cant samkottler: I think it's a bug, he was able to track something down on github
19:53 Slimmons kevinquinnyo: thanks!
19:56 fracklen joined #salt
19:57 Netwizard joined #salt
19:59 rem5 joined #salt
20:00 Muchoz joined #salt
20:02 bltmiller joined #salt
20:05 DammitJim joined #salt
20:05 haaj joined #salt
20:07 bltmiller joined #salt
20:09 jimklo joined #salt
20:10 flowstate joined #salt
20:12 netcho joined #salt
20:13 edrocks joined #salt
20:20 netcho joined #salt
20:24 dendazen joined #salt
20:27 evilrob_ joined #salt
20:27 garphy joined #salt
20:27 stupidnic joined #salt
20:27 arapaho joined #salt
20:27 alxchk joined #salt
20:27 MTecknology joined #salt
20:27 systeem joined #salt
20:27 klaas joined #salt
20:27 a1 joined #salt
20:27 crashmag joined #salt
20:27 Zachary_DuBois joined #salt
20:27 dyaln joined #salt
20:27 bbradley_ joined #salt
20:27 SubOracle joined #salt
20:27 jwon joined #salt
20:27 berto- joined #salt
20:27 packeteer joined #salt
20:27 hexa- joined #salt
20:27 synical joined #salt
20:27 tristianc joined #salt
20:27 dandelo_ joined #salt
20:27 AirOnSkin joined #salt
20:27 WildPikachu joined #salt
20:27 skrobul joined #salt
20:27 jor joined #salt
20:28 brent_ joined #salt
20:28 saltstackbot joined #salt
20:28 schinken joined #salt
20:28 renoirb joined #salt
20:28 weylin joined #salt
20:28 repl1cant joined #salt
20:28 duckfez joined #salt
20:28 wangofett joined #salt
20:28 dandelo joined #salt
20:28 cyraxjoe joined #salt
20:28 pjs joined #salt
20:29 egil_ joined #salt
20:29 SteamWells joined #salt
20:29 shawnbutts joined #salt
20:29 _W_ joined #salt
20:29 basepi joined #salt
20:29 darix joined #salt
20:29 mikepea joined #salt
20:30 yuhlw_ joined #salt
20:30 edrocks joined #salt
20:30 WKNiGHT joined #salt
20:30 czchen joined #salt
20:33 akoumjian joined #salt
20:34 Favoretti joined #salt
20:34 druonysus joined #salt
20:35 onlyanegg joined #salt
20:35 Freek joined #salt
20:35 ToeSnacks joined #salt
20:36 simonmcc joined #salt
20:36 hacks joined #salt
20:36 cebreidian joined #salt
20:37 Awesomecase joined #salt
20:38 gazarsgo joined #salt
20:39 imanc joined #salt
20:39 dunz0r joined #salt
20:40 WKNiGHT joined #salt
20:41 Ahlee that's a new one. error: (1332, 'LookupAccountSid', 'No mapping between account names and security IDs was done.')
20:44 kutenai joined #salt
20:46 wiqd joined #salt
20:47 JamieH joined #salt
20:49 DEger joined #salt
20:54 Slimmons I was finally able to set up postgres like I wanted, using this setup https://gist.github.com/Slimmons/f06c90c2019c923baa9962e1ee0be44d  Now I'm having trouble setting the roles of the user.  I want him to be a superuser, and able to do everything that the postgres user can do by default, but not sure how to add that to the postgres_user.present.
20:54 Slimmons can anyone add a comment to that gist, or point me to an example of how someone has done that?
20:54 deniszh joined #salt
20:57 fusionx86 joined #salt
21:01 protoz joined #salt
21:03 bltmiller joined #salt
21:03 lero joined #salt
21:03 fusionx86 Hello. I'm returning to salt after about a year and have a question about gitfs and the top.sls file. Is it still the recommended to have the top.sls file in a different repo and only in one branch (master)? I see a couple guides with slightly different suggestions.
21:05 schemanic joined #salt
21:05 schemanic hi
21:05 fusionx86 hi
21:05 schemanic where am I supposed to put my files on a windows minion?
21:05 RandyT Hey gang
21:05 schemanic all of the documentation is for linux hosts
21:05 schemanic I need the equivalent of /srv/whatever on windows
21:05 RandyT what do I need to do to specify version install of a winrepo package in a state file?
21:05 brent_ joined #salt
21:05 RandyT https://gist.github.com/rterbush/8ee05d84bd6f3a294eedb548ec8720e9
21:06 RandyT gist there to scribble in. Having trouble figuring out what I need to do to specify version.
21:06 RandyT salt winminion pkg.install 'firefox' version=16.0.2 works fine on command line
21:06 DEger joined #salt
21:07 haaj joined #salt
21:08 RandyT schemanic: when installing the windows minion, everything is put under c:\salt
21:08 jfindlay schemanic: `/srv/whatever` is for salt-related files that are accessed by the master.  Windows masters and masterless are not yet fully supported
21:08 Micromus 3634 root      20   0  623092  77036  12228 R  98.8  1.1  28:46.97 salt-minion
21:08 Micromus Is that good? 99% CPU for half an hour
21:09 bltmiller joined #salt
21:09 brent_ joined #salt
21:10 schemanic_ joined #salt
21:10 jfindlay fusionx86: I would try to keep the top file separate for my own sanity, but I can see how other users may put it into the sls repo
21:11 ALLmightySPIFF joined #salt
21:11 schemanic_ jfindlay: so how do I apply states on a masterless windows minion?
21:11 perfectsine joined #salt
21:11 jfindlay s/may/may want to/
21:11 schemanic_ like, where would I put them?
21:11 jfindlay schemanic_: windows masterless is not yet fully supported and may not even be fully implemented yet
21:12 jfindlay let me ask to be sure
21:12 schemanic_ so what can I rely on? I've gotten execution modules to work but I want to use this to bootstrap windows workstations
21:13 RandyT schemanic_: so is masterless a requirement?
21:14 tik anyone know of a way to confirm if a salt forumula from github is getting pulled down to my master?
21:14 schemanic_ yes, for now. We dont have the hands to set up a master at the moment. I want this on a flash drive
21:14 schemanic_ Ideally later we would connect a master
21:14 jfindlay schemanic_: I was wrong about windows masterless.  You should be able to already do this
21:15 schemanic_ jfindlay: thats great! I still need to understand how and where to put the state files in place. all the docs refer to *nix locations
21:15 tik when I try to reference it in a state file it's telling me it's not available - however, I dynamically generate my file roots so I don't know if it's trashing the formula
21:17 schemanic_ I can edit the minion file just fine, and it seems to respond when I tell it it has no master. I still need to understand where I'm 'supposed' to put files
21:17 schemanic_ jfindlay, RandyT ?
21:17 jfindlay schemanic_: for `file_roots` and other path configs in salt, `/` on POSIX systems corresponds to `c:\salt` on windows systems, so `/srv/salt` is equivalent to `c:\salt\srv\salt`, etc.
21:18 RandyT schemanic_: no experience with masterless. I would look for similar directory structure under c:\salt
21:18 RandyT ^^
21:19 schemanic_ jfindlay: salt does not create a 'c:\salt\srv\salt'. Is it empty normally on *nix systems? I'm trying to make sure that I don't forget something that ought to be there
21:19 flowstate joined #salt
21:20 jfindlay tik: you could try `salt minion cp.list_master` and see if the formula files are listed
21:22 jfindlay schemanic_: I don't think /srv/salt is created on posix systems when you install salt
21:22 flowstate joined #salt
21:24 protoz joined #salt
21:25 tik jfindlay: it shows the sls on the minion
21:27 fusionx86 jfindlay: Thanks for the suggestion on top.sls
21:28 Slimmons Anybody have any idea why salt won't create this database?  https://gist.github.com/Slimmons/f06c90c2019c923baa9962e1ee0be44d
21:32 babilen Slimmons: Take a look at your minion debug log
21:33 Slimmons babilen: Thanks, that did it.  I was logged into the db from another terminal I had minimized......
21:33 bowhunter joined #salt
21:34 babilen :)
21:42 woodtablet Anyone use Role-base infrastructure ? I see how to add it to machine after its up via /etc/salt/minion and /etc/salt/grains on the minion itself or using grains.setval after its in salt. But I want to give a minion roles prior to building it, how do i do that ?
21:48 woodtablet Basically i want to be able to salt-cloud provision a box (lets say a webserver), and it will get the role at provision, so the appropriate formula will be applied. i guess i want to do this some from there.. trying to talk and think my way through this here..
21:51 woodtablet Maybe a salt-cloud mapfile.. yes.. that looks like it might work =D
22:00 tberch8 joined #salt
22:03 edrocks joined #salt
22:05 goudale joined #salt
22:11 amcorreia joined #salt
22:12 west575 joined #salt
22:15 babilen woodtablet: Where do you maintain the "minion" <-> "role" mapping?
22:16 babilen (I mean originally)
22:16 cyborg-one joined #salt
22:20 ponyofdeath joined #salt
22:21 woodtablet babilen: i dont know yet, i dont have any real minions outside vagrant, i am about to start deploying tomorrow
22:22 woodtablet babilen: i was thinking doing something like this maybe? https://docs.saltstack.com/en/latest/topics/cloud/map.html
22:22 woodtablet babilen: maybe save it on the master in /etc/salt/role-mapfile  ? i am very open to other ideas
22:23 flowstate joined #salt
22:23 jfindlay the cloud map is limited when it comes to orchestration.  Personally, I'd try using the orchestrate runner with the cloud state
22:23 babilen You can set roles in pillars and use any of the many external pillar sources https://docs.saltstack.com/en/latest/ref/pillar/all/ as datasource
22:27 woodtablet jfindlay: tell me if i am understanding the saltstack docs right. so I make an orch function to define the roles to the machines and run some tasks, but how would i integrate that automatically when provisioning a new node on salt-cloud ?
22:30 jfindlay woodtablet: I don't think that is currently possible
22:30 babilen woodtablet: I'd think twice about setting roles in grains as you will have to maintain *those* as well, which might just bring you back to square one. There is also little reason to maintain this information in a distributed manner nor can the master trust grains reported by minions.
22:31 jfindlay woodtablet: see https://github.com/saltstack/salt/issues/25555
22:31 saltstackbot [#25555][OPEN] Salt Could should have a way to define an entire infrastructure | At present the map file is pretty limited in what it can do in the fact it will only spin up instances not other resources (unless I'm missing something) and overstate seems to be dead, ideally you should be able to define an entire infrastructure (cross provider) through a mapfile/overstate style system....
22:31 woodtablet babilen: can you explain that a little bit more ? i see the many ext_pillar options. i could put it in database or flat file read in that pillar as like some sort of role lookup table, then set the grains somehow ?
22:33 woodtablet jfindlay: Ok so I can just spin up a few extra nodes.. and when i need a webserver, i just run my orchestration runner to change that extra node into a webserver, and viola ?
22:35 jfindlay woodtablet: that is the way I would do it
22:35 zenlot joined #salt
22:35 protoz joined #salt
22:36 woodtablet jfindlay: re:github issue page: Ahh.. thats what i want to do too lol. i feel a little better about not being the only one.
22:37 tberch8 joined #salt
22:37 Gareth joined #salt
22:40 babilen woodtablet: In the end you'll have a "minion-id" <-> "role" mapping at one poing. You can easily maintain that in a database or even in a flat file, or just "normal" pillars.
22:40 woodtablet babilen and jfindlay: if i set the grain role to webserver via orchestration thats a better idea right ? I still want that grain around later on if I want to do soemthing to all the webservers like restart them or install some patch
22:40 babilen woodtablet: Grains might be perfectly suitable, but you have to think about how you maintain them. If all you need is "set once, fire and forget" then setting them in your cloud profile might be okay.
22:41 babilen But even then ... why maintain that information in a distributed manner?
22:41 babilen Just have a list "role: [minion1, minion2, ...]" or "minion1: [role1, role2, ...]" in pillars and you are done.
22:41 woodtablet babilen: oh, it sets that on the minion itself, its not retaining in something on the salt-master?
22:42 babilen woodtablet: Grains are minion local and the minion can claim to have whatever minions it wants to
22:42 woodtablet babilen: ya thats sounds good, role: [minion1, minion2...]. i ll have to play with that
22:42 zero_shane joined #salt
22:42 woodtablet babilen: ah.. i see i didnt realize that, silly me, thanks!
22:43 babilen Look into pillars .. both approaches might be good, but I'd investigate pillars in your case. You can easily target by pillar also (I@ -- https://docs.saltstack.com/en/latest/topics/targeting/compound.html)
22:45 RandyT I have this crazy issue with pillar data that I would appreciate a bit of a brainstorm with the collective here
22:45 RandyT I have a dict of items that I have put in a file with other items and the target minion displays everything but the items in that dict
22:46 RandyT I've put that same dict in a file for another minion and it loads it fine.
22:46 RandyT in the first case, it loads everything around this dict of items but not the stuff I am attempting to add
22:46 RandyT no errors in a debug log on the minion
22:49 woodtablet randyt: that dict might be overwritten, try giving it a new key at the top and slurping to make sure its not overwritten
22:49 RandyT same data being loaded in a production environment, same version of salt
22:50 woodtablet randyt: like superawesomelookupkey:
22:50 woodtablet rest_of_dict:
22:50 teryx510 joined #salt
22:50 RandyT woodtablet: standby
22:50 woodtablet randty: and then print up all the pillar items of the minion
22:51 RandyT woodtablet: no love
22:51 RandyT pretty sure I had tried that and has no effect
22:52 RandyT I've completely deleted var/cache on the minion and did a refresh
22:52 deniszh1 joined #salt
22:52 woodtablet RandyT: and pillar items doesnt show any of the dict ?
22:53 RandyT woodtablet: none of the dict
22:54 woodtablet randyt: can you gist paste the dict ?
22:55 RandyT woodtablet: I can, but it is full of sensitive stuff. I can clean, but let me try it clean version I guess before I paste to see if it could be content.
22:55 RandyT like I said though, the same dict is working fine on other minions and other environments
22:55 RandyT just this one minion target
22:55 RandyT this minion is a windows minion for full disclosure
22:55 RandyT but running 2016.3
22:55 RandyT but running 2016.3.1
22:56 RandyT actually have a windows minion in production that has no problem with this same dict.
22:57 woodtablet randyt: hmm.. i dont have any windows minions. and that is weird. its just a dict. anyone else have ideas ?
23:01 woodtablet left #salt
23:02 RandyT workthrick: https://gist.github.com/rterbush/8dff8179cbe49337fe898320c1ef7db7
23:02 RandyT oops, looks like woodtablet wisely ducked out. :-)
23:03 RandyT that is the gist I am working with stripped of content and it still does not load in this minion
23:03 RandyT it is as if I have hit some limit
23:06 edrocks joined #salt
23:08 bltmiller I'd love to know if anyone is heavily using the postgres states in production, e.g. create databases, users, privileges. Anyone?
23:09 tberch8 joined #salt
23:10 p3rror joined #salt
23:12 anil joined #salt
23:14 om joined #salt
23:14 om2 joined #salt
23:15 berserk joined #salt
23:17 anil I have a situation where I need to run the salt chef module with the minion running as root but the actual chef-solo command run with sudo on the minion to ensure that the recipes run by chef run as a non-privileged user.
23:19 ronrib joined #salt
23:19 anil when extending salt modules, is there a way to decorate salt execution module functions so you can wrap them and perform the manipulation on the command before running it
23:20 anil i have looked at the which decorator which checks for the existence of the command but if I wanted to add my decorator on top of that, what would be the best practice for that
23:21 druonysus joined #salt
23:22 dendazen joined #salt
23:22 flowstate joined #salt
23:24 aharvey joined #salt
23:28 bltmiller joined #salt
23:28 aharvey trying to put 2+2 together for beacon/reactor
23:29 aharvey reactor code: https://gist.github.com/adamcharvey/e18af19177f45267d993b22b2ad6867e in /srv/reactor/
23:29 aharvey minion beacon: https://gist.github.com/adamcharvey/86a9c08c475d5d5946231d6d62de9728 in /etc/salt/minion.d/* (salt master’s minion)
23:29 aharvey reactor config: https://gist.github.com/adamcharvey/6e15e371c3dc9148829361717601d9a9 /etc/salt/master.d/reactor.conf
23:30 aharvey feel like I’m close but flunking somewhere.  The tags on modify are not getting generated.  Basically there’s a couple git repos in said directory that I have a webhook receiver checking for merges.  Based upon that modification, I’d like beacon to scream for reactor to apply state to said host
23:32 druonysus joined #salt
23:40 rhand joined #salt
23:43 kevinquinnyo joined #salt
23:44 krymzon joined #salt
23:45 kevinquinnyo what's the best way to do development on salt -- i ran into some issues on my local environment with virtaulenv, and it made me wonder if anyone has a vagrant solution or dockerfile or something for development
23:50 babilen I just fire up a vagrant box, nfs mount a local salt git checkout into it, pip install it and run the services
23:54 MindDrive Salt 2015.5.0 -> 2015.8.10.  Have upgraded two environments.  Had to bump worker_threads because one environment was having timeout issues.  Now that environment is generating tons of files in /var/cache/salt/jobs
23:54 MindDrive (The other environment, same configuration (including worker_threads) is not seeing the increase.)
23:54 MindDrive I don't even know where to begin to debug this.

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary