Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-07-11

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:08 flowstate joined #salt
00:20 myraft joined #salt
00:38 hemebond Is it normal for "salt-master --version" to return "salt-master 2016.3.0-847-g9156521 (Boron)" when installing a development version from a Git clone?
00:39 Sandlayth where's the problem?
00:40 hemebond I'm not sure I'm installing it correctly into this virtualenv.
00:40 hemebond No, I'm doing it wrong somewhere. I don't see my edits.
00:44 hemebond ~/saltmastertest$ pip install -e ../salt/
00:44 hemebond That should work fine, correct? That's what's listed on the docs.
00:48 mpanetta_ joined #salt
00:50 mpanetta_ joined #salt
00:52 racooper joined #salt
00:54 hemebond Got it. I had a Salt install rather than a simple egg symlink.
00:55 hemebond *in addition to an egg symlink
00:56 hemebond I take that back. I have resolved nothing.
01:06 flowstate joined #salt
01:08 armyriad joined #salt
01:16 hemebond Got it.
01:16 onlyanegg joined #salt
01:18 iceyao joined #salt
01:20 Nahual joined #salt
01:22 hemebond And the develop version does return that version string.
01:22 hemebond At least mine does.
01:24 hexa- yup
01:25 hexa- that is a `git describe` and it tells you its 847 commits ahead of the 2016.3.0 tag
01:25 hexa- so probably unreleased :)
01:25 hemebond :sadthumbsup:
01:27 flowstate joined #salt
01:53 fannet joined #salt
01:59 amcorreia joined #salt
02:06 flowstate joined #salt
02:07 hasues joined #salt
02:11 ageorgop joined #salt
02:34 evle joined #salt
02:43 armyriad joined #salt
02:44 mpanetta joined #salt
02:47 onlyanegg joined #salt
03:00 colegatron_origi joined #salt
03:08 flowstate joined #salt
03:10 onlyanegg joined #salt
03:16 macheck joined #salt
03:19 treaki__ joined #salt
03:26 fxhp joined #salt
03:29 macheck left #salt
03:29 macheck joined #salt
03:38 fxhp joined #salt
03:41 fxhp joined #salt
03:43 onlyanegg joined #salt
03:52 onlyanegg joined #salt
03:54 fannet joined #salt
03:59 auzty joined #salt
04:05 armguy joined #salt
04:06 flowstate joined #salt
04:16 onlyanegg joined #salt
04:49 iggy I hate having to fix stuff in core, it's so much easier when it's something I can put in _modules/_states/etc
04:50 onlyanegg joined #salt
04:55 UForgotten joined #salt
04:58 rdas joined #salt
05:03 rem5 joined #salt
05:06 flowstate joined #salt
05:08 mohae joined #salt
05:15 onlyanegg joined #salt
05:22 cyborg-one joined #salt
05:27 irctc811 joined #salt
05:28 irctc811 hi all, is it possible with salt to call a label in aws and grab all the ip addresses from the ec2 instances tagged with that label?
05:28 irctc811 i need to build a file dynamically with hosts that perform certain functions
05:46 kawa2014 joined #salt
05:46 ruxu joined #salt
05:49 iggy irctc811: that would normally be what mine is for, but it's not exactly reliable
05:55 fannet joined #salt
05:57 necronian joined #salt
05:59 illern joined #salt
06:05 flowstate joined #salt
06:09 necronian joined #salt
06:17 kshlm joined #salt
06:18 Lionel_Debroux joined #salt
06:22 impi joined #salt
06:22 manji joined #salt
06:23 manji joined #salt
06:46 KermitTheFragger joined #salt
06:52 manji joined #salt
06:56 illern joined #salt
07:05 Rumbles joined #salt
07:06 flowstate joined #salt
07:21 eseyman_ joined #salt
07:22 fracklen joined #salt
07:24 Kurisutian joined #salt
07:25 JohnnyRun joined #salt
07:25 fracklen joined #salt
07:27 fracklen joined #salt
07:30 mavhq joined #salt
07:42 illern joined #salt
07:45 guedressel joined #salt
07:46 armyriad joined #salt
07:47 GreatSnoopy joined #salt
07:48 colegatron_origi joined #salt
07:49 bdrung_work joined #salt
07:56 fannet joined #salt
07:56 badon joined #salt
07:56 lero joined #salt
07:57 deniszh joined #salt
07:57 infrmnt joined #salt
07:59 felskrone joined #salt
08:02 illern joined #salt
08:02 garphy joined #salt
08:06 flowstate joined #salt
08:10 illern_ joined #salt
08:13 illern joined #salt
08:14 kbaikov joined #salt
08:16 POJO joined #salt
08:16 ronnix joined #salt
08:18 Rumbles joined #salt
08:19 garphy joined #salt
08:25 illern_ joined #salt
08:25 s_kunk joined #salt
08:26 Hetman joined #salt
08:29 Hybrid1 joined #salt
08:30 totte joined #salt
08:42 Guest46271 left #salt
08:42 kevinquinnyo1 joined #salt
08:47 totte joined #salt
08:51 illern joined #salt
08:54 manji joined #salt
08:54 catpig joined #salt
08:59 keimlink joined #salt
09:04 Hetman joined #salt
09:05 flowstate joined #salt
09:12 fannet joined #salt
09:20 taichi2901 joined #salt
09:20 barmaley joined #salt
09:21 Cidan joined #salt
09:26 flowstate joined #salt
09:42 CeBe1 joined #salt
09:43 N-Mi joined #salt
09:46 lero joined #salt
09:58 rem5 joined #salt
10:01 fredvd joined #salt
10:05 flowstate joined #salt
10:33 Kurisutian Hi! I'm currently testing salt-ssh but for whatever reason no command works with it. I did set up a roster file and want to ping one target but no matter what I do, I never get any result from any target I choose. Can anyone help me figuring out why it does not work? The debug output is here: http://pastebin.com/J0TU7ZVs
10:34 hemebond Kurisutian: Does salt-ssh leave the shim (partial install) on the minion?
10:34 hemebond Are there any logs on the target/minion?
10:35 hemebond Have you tried with a roster of one?
10:35 hemebond Have you installed the SSH key manually already?
10:36 Kurisutian hemebond: there is a folder /tmp/ssh-dGk8ojrVNv/ on the minion. And a roster with a single entry also does not work. the SSH Key is installed on the target, I can manually connect to it through ssh
10:36 ruxu joined #salt
10:38 Kurisutian hemebond: Oh, I think I have an idea, what the problem might be... give me a sec to verify...
10:40 Kurisutian hemebond: OK, I found the problem. The used ssh private key did have a password protection.... ^^
10:41 hemebond Ah. Nice find :-)
10:41 manji joined #salt
10:42 rsys joined #salt
10:45 Rumbles joined #salt
10:46 teryx510 joined #salt
10:47 Kurisutian Unfortuantely there's another problem with calling a cmd.run. Shouldn't the module be coming from the thin_dir? Here's the traceback: http://pastebin.com/HymkWKga
10:47 hemebond I would have thought so.
10:47 hemebond I'm not sure about the dependencies
10:48 Kurisutian Hmmm... :-(
10:48 hemebond What version of Python on the minion?
10:49 hemebond And what version of salt-ssh?
10:49 hemebond https://github.com/saltstack/salt/issues/27692
10:49 saltstackbot [#27692][OPEN] Salt-ssh traceback for msgpack and certifi on Arch | When I create a vm then use Salt-SSH to access it, I get a traceback for failing to import msgpack and certifi....
10:49 hemebond Still a problem apparently.
10:50 Kurisutian salt-ssh 2016.3.1 (Boron)
10:50 Kurisutian Python 2.7.3
10:51 teryx510 joined #salt
10:54 babilen Kurisutian: Do you have certifi installed on your local host?
10:54 Kurisutian I also installed python-certifi on my machine
10:54 Kurisutian babilen: Yes
10:54 babilen When?
10:55 Kurisutian babilen: About 1 minute ago when I saw the ticket... and I re-ran the command with the same result
10:55 manji joined #salt
10:56 hemebond I think in the ticket they installed it on the minion.
10:56 babilen Delete the thin.tgz locally and try again
10:56 babilen They mention installing it on the remote, but it might get included in the thin.tgz if available
10:56 Kurisutian Where can I find it locally?
10:56 babilen It's in your cache dir (not sure what you configured for that)
10:58 rawzone joined #salt
10:58 Kurisutian babilen: I did remove it, and checked again, but still the same error
10:59 babilen Kurisutian: I use this scheme ... https://www.refheap.com/121376
10:59 babilen Found it to be nicer for organisation
11:00 babilen Kurisutian: Does your thin.tgz include certifi?
11:01 Kurisutian babilen: Yes it's included in the tgz
11:01 hemebond Deleted the copy on the minion?
11:02 Kurisutian hemebond: Shouldn't it be removed automatically?
11:03 hemebond Dunno. I assumed it was cached to make future commands/connections faster.
11:03 Kurisutian hemebond: to be sure I removed it but it still does not work
11:05 Kurisutian target machines are Debian based... it works on other Arch/Manjaro machines... so is it somehow Debian related? It's Debian 7.11
11:05 flowstate joined #salt
11:09 amcorreia joined #salt
11:09 babilen You'd have to remove it on the remote also
11:09 babilen Maybe "--wipe" does that
11:12 Kurisutian babilen: Still does not work, unfortunately... I added the --wipe to it but the error remains
11:13 babilen Kurisutian: Did that remove the thin deployment on the remote?
11:13 babilen (and did you run it *again* after you've done it with "--wipe" ?)
11:13 babilen Is certify present in the thin deployment on the remote now?
11:13 Kurisutian babilen: I did... but I had to run it twice... now the error is another one: ImportError: No module named backports.ssl_match_hostname
11:14 Kurisutian So the certifi issue should be gone
11:14 babilen rinse and repeat
11:14 babilen backports.ssl_match_hostname is definitenly included in the thin.tgz if available on the source box
11:14 babilen *definitely even
11:15 babilen Which distribution is the remote?
11:15 Kurisutian Debian 7
11:15 babilen *nod*
11:16 babilen https://github.com/saltstack/salt/issues/27355 (fwiw)
11:16 saltstackbot [#27355][OPEN] salt ssh error with debian 7 on target | salt-ssh and 2 targets ( debian 7 and debian 8 )...
11:16 babilen Solution is the same though
11:16 babilen And that bug should be closed, I guess
11:16 Kurisutian also I have single machines with "ImportError: No module named pstats" also Debian
11:19 babilen You need python-profiler for that
11:19 babilen Kurisutian: Is this squeeze?
11:20 Kurisutian babilen: Yes
11:21 Kurisutian babilen: OK, I see... well, these systems will be shut down soon anyway, so I don't care about them that much right now... ;-)
11:21 babilen Security support for squeeze ended on 2014-05-31 and LTS support on 2016-02-29 -- You *really* shouldn't have productive squeeze boxes around anymore
11:22 Kurisutian babilen: unfortunately removing the thin.tgz and the /tmp/ssh-* folder as suggested in the ticket did not resolve the ImportError: No module named backports.ssl_match_hostname problem
11:23 Kurisutian babilen: It's in a closed down pre-production network which will be shut down completely anyway... I care more about the backports.ssl_match_hostname problem as it still remains
11:23 babilen Worked for me (check who repored that)
11:23 babilen Is that on the squeeze box?
11:24 mage_ joined #salt
11:24 Kurisutian No, that's wheezy box(es)
11:24 mage_ hello
11:24 mage_ how can I "add" a value to a pillar list data when I'm overriding?
11:24 babilen Kurisutian: Shouldn't be a problem with them. I use salt-ssh regularly with wheezy boxes.
11:24 babilen (and the solution discussed in the bug report solved this issue for me)
11:25 mage_ for ex in foo.sls I have modules: -foo -bar and in bar.sls I have modules: -lol .. and in the end I want [foo, bar, lol] and not just [lol]
11:25 babilen Kurisutian: So you checked that backports.ssl_match_hostname is included in the thin.tgz ?
11:26 babilen mage_: Read up on pillar merge strategy and "merge_lists"
11:26 mage_ thanks :)
11:26 babilen mage_: This is discussed in the "Configuring the salt master" documentation
11:27 Kurisutian babilen: Do you happen to know where I can find it in the tgz?
11:28 babilen Kurisutian: backports/ssl_match_hostname/__init__.py
11:28 babilen Kurisutian: Which distribution to you run locally?
11:29 Kurisutian Hmmmm.... I removed the thin.tgz to have a new one running, but the module can only be located at "./py2/salt/ext/ssl_match_hostname.py"
11:29 Kurisutian babilen: Manjaro Linux
11:30 babilen Okay, I know little about Manjaro, but they might have python-backports.ssl-match-hostname packages also
11:31 babilen https://www.archlinux.org/packages/community/any/python2-backports.ssl_match_hostname/ it's in Arch (couldn't find a Manjaro package search right away)
11:31 babilen Do you have that installed?
11:31 Kurisutian babilen: Indeed they have
11:32 Kurisutian babilen: Awesome, this worked like a charm... I finally get a result... yayyy... :-)
11:33 babilen Looks as if the dependencies of Salt's Manjaro packages need some extra entries .. ;)
11:34 Kurisutian babilen: Yes, I am about to file some bug report as we speak... ^^
11:34 babilen Great, thank you!
11:34 babilen The good thing is that you now know how to solve similar problems should they ever arise in the future
11:34 babilen It's a bit easier now that salt-ssh has "--wipe"
11:34 Kurisutian babilen: So last but not least, I owe you an answer about the topic last week with the minion_opts and the sudo user... unfortunately it seems like it does not work atm
11:35 babilen I had to remove the /tmp/salt-ASDFASDFASDFAS "install" manually on some boxes
11:35 babilen Ah  man!!!
11:35 babilen That's such a disappointment
11:35 babilen It was a "gut feeling" and should™ work.
11:36 babilen Are you aware of a salt bug report about this?
11:36 Kurisutian It is indeed... I was positive, too... currently this is a bit of a problem, but it might be temporarily since it might be related to the other but with the minion_opts you mentioned
11:36 babilen It's a commonly requested feature and should be supported by salt-ssh. It is particularly annoying as the options are already there, but don't seem to have an effect then.
11:37 babilen Even if the minion_opts approach worked you probably want to support that a bit more explictly in salt-ssh, but I really had hoped that we could "sneak it in" that way :(
11:37 Rumbles is it possible to have salt output the diff for a given change to a .diff file, rather than just on screen?
11:38 Kurisutian do you happen to have the link for the bug again? I will have to keep an eye on it as well.... I really don't want to use ansible just because of that as I feel that salt has so much more to offer...
11:38 babilen Rumbles: You could use different outputters: https://docs.saltstack.com/en/2015.8/ref/output/all/index.html or write one yourself. Shouldn't be too tricky to get it out of, say, JSON.
11:39 babilen Kurisutian: I'm not sure I ever found a bug report about that .. did I?
11:39 Rumbles thank
11:39 Rumbles s
11:40 Kurisutian babilen: I thought you did send me the link last week.... well, I'll check my logs... :-)
11:40 babilen Rumbles: JSON + https://stedolan.github.io/jq/ might be all you need for this
11:40 babilen Kurisutian: If so .. please give it to me also ;)
11:41 babilen Kurisutian: I really wonder why sudo_user in minion_opts doesn't work
11:41 babilen https://github.com/saltstack/salt/issues/31074
11:41 saltstackbot [#31074][OPEN] salt-ssh sudo_user execution not running as sudo_user | Hi,...
11:42 Kurisutian babilen: Yeah, that's the one I was talking about
11:42 armin so what's the difference between a grain and a pillar? i'm working through the "getting started" tutorials and try to clarify both vocabulary to myself.
11:43 AndreasLutro armin: grains are provided my the minion, pillars are provided by the master - so pillars are more secure, but grains can provide more information about the minion
11:44 mage_ babilen: is it possible to have a per-sls pillar_merge_lists ..?
11:44 armin AndreasLutro: allright, thank you.
11:45 iceyao joined #salt
11:46 babilen mage_: I haven't seen that in the documentation nor used .. aggregate might be worth further investigation, but I am just merging pillar globally.
11:48 mage_ it's strange because there is https://docs.saltstack.com/en/latest/ref/pillar/all/salt.pillar.stack.html#merging-strategies and this pillar_merge_lists option
11:48 mage_ the "merging examples" with __: merge-last and lists don't work
11:53 babilen mage_: Are you using pillarstack ?
11:54 mage_ ah... no
11:55 armin AndreasLutro: could one say a pillar is always being defined by the master, while a grain is always defined by the minion? or is it just generally but could have exceptions to that rules?
11:55 AndreasLutro armin: correct
11:55 armin AndreasLutro: thanks for your kind help.
11:56 babilen mage_: You might want to if you have requirements like that
11:57 mage_ I have a very simple use-case
11:57 mage_ babilen: https://gist.github.com/silenius/c5f4f90ed21186765f79ab3e0e782506 I just want to add "ssl" for one machine
11:58 babilen mage_: So configure list merging and target the additional pillar ..
11:58 AndreasLutro mage_: I do that by changing "modules" from a list to a dict
11:58 AndreasLutro `authn_file: true` for example
11:59 mage_ ah yep, this might be a better idea
11:59 AndreasLutro I don't want/trust salt's list merging so just using a dict was easier
11:59 AndreasLutro also means I can disable modules if I want
11:59 mage_ changing the default pillar_merge_lists for existing states could have some side-effects ...
11:59 mage_ AndreasLutro: thanks, I'll do that way
12:04 impi joined #salt
12:07 LotR where is documented how ext_pillars get merged into the pillar?
12:19 _JZ_ joined #salt
12:25 west575 joined #salt
12:28 kevinquinnyo1 joined #salt
12:38 TooLmaN joined #salt
12:39 kawa2014 joined #salt
12:41 squishypebble1 joined #salt
12:42 manji joined #salt
12:43 impi joined #salt
12:51 manji joined #salt
12:56 gh34 joined #salt
12:57 dyasny joined #salt
13:01 armin "SaltStack moves fast. So join our mailing list to receive the latest SaltStack info and appease your FOMO now."
13:01 armin wat
13:02 babilen armin: What exactly is it that you object to or don't understand?
13:03 armin babilen: what's a FOMO?
13:03 babilen fear of missing out
13:03 armin sounds enterprisey.
13:07 numkem joined #salt
13:10 Hybrid1 Hi, how can I update a package installed fron .deb and not from repo ?
13:11 Hybrid1 I install some .deb package on my machines with pkg.installed + source: <path to my deb file>
13:11 Erik-P joined #salt
13:11 Hybrid1 now, there is a new version, I updated the path consequently but when I execute my sls, the package is not updated
13:11 Erik-P Can i call salt-run from jinja the same as i call salt?????
13:12 VSpike joined #salt
13:12 Hybrid1 any idea or best practice ? (except "install from repo" because in that case, this is not possible)
13:12 Erik-P i like to build dynamic orchestration for a list of servers i dont know the names 1 by 1 and fail hard if one failed
13:14 VSpike Hi. Are there two different methods for setting EBS volumes in Salt cloud? I see this syntax here https://docs.saltstack.com/en/latest/topics/cloud/aws.html#cloud-profiles
13:15 VSpike I'm using this syntax https://bpaste.net/show/b273ac18ce4f
13:15 VSpike Are they different things? Or has one replaced the other? Or they are alternatives?
13:15 dps joined #salt
13:16 AndreasLutro I don't see the difference
13:17 VSpike One has an entry called "volumes", with a list of dicts with keys like size, device, type ..
13:18 VSpike The other has block_device_mappings with a list of dicts with keys like DeviceName, Ebs.VolumeSize, Ebs.VolumeType ...
13:18 dps i have a dumb question: is there a way to see the streaming output of a state.apply operation via an invocation salt-ssh against a specific host?  it seems like all of the output gets rolled up and dumped to output after the entire application.  right now i am gaining introspection by using watch pstree on the target, seems a little rudimentary to do things this way.
13:18 dps it is also problematic if the agent hangs, for example
13:18 dps (on a certain step)
13:19 AndreasLutro VSpike: iirc, volumes is a more high level abstraction... not sure. it's also not a different syntax, just a different configuration (to be nitpicky)
13:19 lugo_ joined #salt
13:21 manji joined #salt
13:22 lugo__ joined #salt
13:22 babilen dps: No, with master and masterless setups you can use "salt-call", but that isn't an option with salt-ssh.
13:23 AndreasLutro dps: what I usually do if that happens is run salt-ssh with -l debug or -l trace, find SALT_ARGV, then run that on the target host through SSH
13:27 dps babilen & AndreasLutro: ok thank you
13:28 impi joined #salt
13:30 stanchan joined #salt
13:39 Qlawy Hi Guys, how Can I run for example pkg.install (winrepo) from another sls file
13:42 babilen Qlawy: Why not use a pkg.installed state?
13:42 babilen And what is the significance of "another sls file" ?
13:42 Qlawy its windows, and when I try to use pkg.installed when: The following packages failed to install/update: my_package=11.5.0.0
13:43 Qlawy s/when/then/
13:44 Qlawy I think im doing sth wrong
13:44 Qlawy give me a sec
13:51 perfectsine joined #salt
13:53 racooper joined #salt
13:53 racooper joined #salt
13:56 zlittle joined #salt
14:01 AndreasLutro check your minion logs
14:02 adulteratedjedi joined #salt
14:05 Qlawy AndreasLutro: yep, there was some problem with relevant file. I needed to escape all \
14:05 Qlawy thank you for anyway :)
14:05 Tanta joined #salt
14:07 jav joined #salt
14:08 mpanetta joined #salt
14:14 bowhunter joined #salt
14:14 armguy joined #salt
14:15 hyegeek joined #salt
14:15 ferbla joined #salt
14:22 kevinquinnyo1 joined #salt
14:26 catpig joined #salt
14:28 fredvd joined #salt
14:28 numkem joined #salt
14:29 flowstate joined #salt
14:32 scoates joined #salt
14:32 XenophonF joined #salt
14:35 beardedeagle joined #salt
14:36 XenophonF any salt-formula committers around?
14:36 XenophonF i'd like to see https://github.com/saltstack-formulas/salt-formula/pull/242 merged
14:36 saltstackbot [#242][OPEN] Add support for s3fs | These changes add support for the S3 file server back end as described in https://docs.saltstack.com/en/latest/ref/file_server/all/salt.fileserver.s3fs.html.
14:39 * babilen can't test it
14:39 fxhp joined #salt
14:40 Slimmons Anybody know if it's possible to run a visual program like notepad on a windows minion, and have it actually open on screen?
14:41 Slimmons tried doing it via cmd.run, or having it run a script that opens it, and nothing is working so far.  Ever seen it work?
14:41 Slimmons If not, does anyone have any creative ideas on how to get that to work with salt?
14:44 flowstate joined #salt
14:45 flowstate joined #salt
14:46 manji joined #salt
14:49 rothsa Slimmons: what's your objective? are you trying to build a workflow doing that rather than creating a file locally and sending it over?
14:56 toastedpenguin joined #salt
14:56 toastedpenguin joined #salt
14:56 Slimmons I want to have a text file with some contents, send it over using file.managed (that's working fine), then open it on the monitor that's connected to the windows minion
14:57 Slimmons it's basically just a test case for me sending a config file to the machine, and then opening a program with that config file
14:57 Slimmons https://github.com/saltstack/salt/issues/4834
14:57 saltstackbot [#4834][OPEN] Feature request: Make salt-minion interact with desktop on Windows | The salt-minion windows service does not interact with desktop. So, when you start a program through salt-minion, you will never see the GUI window....
14:57 toastedpenguin joined #salt
14:58 fer_bla joined #salt
14:59 BlackBishop joined #salt
14:59 zmalone joined #salt
15:01 corichar joined #salt
15:03 XenophonF babilen: you don't need to test it, because i tested it before i submitted the PR ;)
15:03 XenophonF Slimmons: as a workaround could you use psexec?
15:03 keith4 joined #salt
15:04 knine joined #salt
15:04 XenophonF specifically the "-i" option runs a process on the target system interactively
15:05 XenophonF no reason why you couldn't target the local computer but let me try that real quick
15:05 Slimmons I've never used psexec, I'll look into that and see if it matches what I need to do.
15:06 Slimmons I'm not sure if I'll be able to use it though.  I have some fairly strict requirements of what I can use, and salt got approved.  Not sure I can get anything else approved
15:06 Slimmons bah
15:06 west575_ joined #salt
15:06 XenophonF bummer
15:07 Slimmons yeah
15:07 XenophonF microsoft sysinternals
15:07 XenophonF psexec is part of it
15:07 ferbla joined #salt
15:07 nyx joined #salt
15:08 XenophonF if you try to get approval, make sure to get the ok for the bsod screen saver while you're at it ;)
15:08 Slimmons see, that's the kind of forward thinking I need to practice
15:09 XenophonF it's a "necessary and critical component of the sysinternals suite"
15:09 XenophonF in case you need to itemize the file manifest
15:10 XenophonF can't you use a salt state to reconfigure the salt-minion service as being desktop interactive?
15:10 Brew joined #salt
15:11 adoy_ joined #salt
15:11 west575 joined #salt
15:12 Slimmons I don't know
15:12 XenophonF Slimmons: https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_service.html#salt.modules.win_service.config
15:12 XenophonF you might be able to use this via a module.run state
15:12 g3cko joined #salt
15:13 adoy_ hi all, can someone help me with code to stop salt run on a state fail, i am new to salt and can't find a good example
15:14 adoy_ I see onfail and new state can be run but how to exit run
15:14 beardedeagle require
15:15 Slimmons XenophonF: I'll look into that.  We're a little beyond anything I've done with salt at this point, but I'll give it a try.
15:15 adoy_ thank you
15:17 teryx510 joined #salt
15:18 perfectsine joined #salt
15:20 mamercad joined #salt
15:26 mpanetta joined #salt
15:26 manji joined #salt
15:31 XenophonF xml config generation from salt is madness :(
15:31 XenophonF https://gist.github.com/xenophonf/86ae7dbc82d53cadbc0ed5074d90a651
15:31 XenophonF does anyone know a better way?
15:33 XenophonF there's a ref in the salt docs to a badgerfish formatter for file.serialize
15:33 XenophonF but last i looked it wasn't supported
15:36 iggy that seems about like I would expect
15:37 iggy there's a reason nobody uses xml anymore
15:37 XenophonF oh man don't i know it, but here i am stuck with j2ee web services with a 20+ year history in my particular industry :(
15:37 XenophonF "baroque" doesn't even begin to describe it
15:38 lugo__ Hey guys, I'm trying to install Git on a Windows minion so I went through the steps on the SaltStack documentation about the Windows Software Repository on my master but when I try "salt -G 'os:windows' pkg.refresh_db" nothing gets returned back. When I try to install Git (via pkg.install Git), it returns "Unable to locate package Git". Any ideas?
15:40 Slimmons Xenophonf: I found this, and it confirms your suggestion.  Someone was able to run eclipse successfully with "Allow interaction with the desktop" option.  https://groups.google.com/forum/#!topic/salt-users/fl1B4bCG-Nk
15:40 sfxandy joined #salt
15:41 sfxandy hi everyone.  ok, rookie question here and brain not functioning.... how do I use a grain in a mine function??
15:42 Slimmons to allow interaction with the desktop, would I just run something like salt '*' service config notepad /path/to/notepad.exe type='interact' ?
15:43 XenophonF you would need to reconfigure the salt-minion service as type=interact, i think
15:43 XenophonF and then you should be able to do a cmd.run that invokes notepad
15:43 Tyrm joined #salt
15:44 XenophonF can we back up a little and ask why on earth you want to do this?
15:44 fyb3r joined #salt
15:46 XenophonF are you going to end up using runas?
15:47 babilen "How would I script salt to enter things into notepad?" ;)
15:48 renoirb joined #salt
15:53 ajv joined #salt
15:53 fer_bla joined #salt
15:53 ruxu joined #salt
15:55 autofsckk joined #salt
16:01 Tyrm_ joined #salt
16:03 ajv I just built a bunch of minions with salt-cloud. Not all of them built successfully. Is there a way on the master to get a list of minions that are not responding, so I can delete/rebuild them?
16:05 zmalone joined #salt
16:05 Tyrm joined #salt
16:06 babilen ajv: "salt-run manage.down" -- https://docs.saltstack.com/en/latest/ref/runners/all/salt.runners.manage.html
16:06 tapoxi joined #salt
16:06 tapoxi anyone on #salt have book recommendations? learning saltstack or salt essentials?
16:07 anotherZero joined #salt
16:13 ferbla_ joined #salt
16:15 netjak joined #salt
16:17 JohnnyRun joined #salt
16:19 khaije1 tapoxi: I'm getting a lot out of "Mastering Salt"
16:23 fyb3r I just went through the documentation. There is a pretty comprehensive tutorial in them.
16:25 tapoxi khaije1 is that by packt?
16:25 babilen tapoxi: The full name is "Mastering SaltStack"
16:25 babilen And that one would be by Packt, yes
16:26 tapoxi thanks, I'll give that one a shot
16:26 tapoxi I have the basics down but I want to get better at style and using features
16:29 ageorgop joined #salt
16:30 Tyrm joined #salt
16:31 hasues joined #salt
16:32 Tyrm_ joined #salt
16:32 hasues left #salt
16:36 POJO joined #salt
16:36 zmalone joined #salt
16:38 deus_ex1 joined #salt
16:41 rem5 joined #salt
16:42 bryguy joined #salt
16:43 zero_shane joined #salt
16:44 nyx joined #salt
16:47 Tyrm joined #salt
16:48 impi joined #salt
16:48 Garo_ joined #salt
16:56 iggy I don't think books are going to help with that
16:56 iggy salt is specifically not opinionated about things
16:57 flowstate joined #salt
16:59 bmac2-work joined #salt
16:59 DX1 joined #salt
17:03 onlyanegg joined #salt
17:05 XenophonF joined #salt
17:05 racooper_ joined #salt
17:08 Tyrm joined #salt
17:09 Tyrm joined #salt
17:10 onlyanegg joined #salt
17:16 zmalone joined #salt
17:16 Garo_ joined #salt
17:17 numkem joined #salt
17:21 toastedpenguin left #salt
17:23 toastedpenguin joined #salt
17:25 johnkeates joined #salt
17:25 racooper joined #salt
17:30 hasues joined #salt
17:32 hasues left #salt
17:33 flowstate joined #salt
17:38 zero_shane joined #salt
17:39 onlyanegg joined #salt
17:39 west575_ joined #salt
17:40 necronian joined #salt
17:42 wangofett joined #salt
17:42 johnkeates joined #salt
17:45 zenimal joined #salt
17:49 stomith joined #salt
17:50 stomith Hey, how do I try out a individual sls file?
17:50 iggy stomith: state.sls foo
17:51 stomith danke
17:51 babilen stomith: Or "state.apply foo"
17:51 babilen bitte
17:52 stomith foo, meaning..?
17:52 babilen foo = foo.sls
17:52 iggy by default that would be `/srv/salt/foo.sls`
17:53 babilen foo.bar.baz = foo/bar/baz.sls or foo/bar/baz/init.sls
17:53 stomith ah, thanks! that works.
17:53 stomith can't ever remember that. I should document that. :)
17:54 nobrak joined #salt
17:54 nobrak joined #salt
17:57 bowhunter joined #salt
17:58 west575 joined #salt
17:59 toastedpenguin joined #salt
18:02 wwalker currently, there are multiple files, one for each subdomain, residing in salt/hosts/files/*.hosts.  I want to run h2n on these to generate zone files, then I want a minion to pick up the new zone files from the master (via salt://hosts/zones/db*).  I'm a saltstack newb, any pointers to save me doing it wrong 5 times ?
18:05 ALLmight_ joined #salt
18:05 yidhra joined #salt
18:05 wwalker I can just cron it on the master, but am trying to do things the salt way.
18:06 ALLmight_ joined #salt
18:07 johnkeates you can use the ZeroMQ/RAET bus to consume events and kick off modules
18:09 orionx joined #salt
18:10 wwalker johnkeates: thanks, that is interesting.  looks fairly clean.
18:11 onlyanegg joined #salt
18:11 johnkeates you could look into the reactor system
18:11 johnkeates and there's beacons
18:11 johnkeates and other stuff
18:12 johnkeates you can monitor file changes and kick off an event off of that
18:12 ajw0100 joined #salt
18:17 Edgan joined #salt
18:17 emaninpa joined #salt
18:20 tapoxi joined #salt
18:22 Eugene The python-zmq package in the Salt CentOS repo is broken with the newest zeromq package from epel. https://vomitb.in/ncRSV4dGOO
18:22 Eugene Which is a bit of a downer
18:23 Slimmons XenophonF: So, I've been learning salt during my free time basically, and I've been looking for reasons to use it.  Because of that I've ended up using it in places where it's probably a terrible idea, and this may be one of them.
18:23 west575_ joined #salt
18:23 Slimmons Basically I'm opening simulators across several machines, and each one needs a different config file
18:23 Slimmons and it's on a massive array of monitors, so I wanted them all opening at around the same time, and it needs to actually show up on the monitors.
18:24 orionx is there a way to specify the 'ret port
18:24 orionx is there a way to specify the 'ret port' from the minion?
18:25 johnkeates that's something salt can do, just put them all on hot-standby and sync the start app time once they are ready, i.e. have a reactor collect state completion and once they all are done, send a signal to start the app on unixtime+2seconds and they will all start at the same time
18:25 johnkeates if you want more synchronisation than that, look at stuff like heartbeat/corosync etc
18:26 johnkeates also use NTP
18:26 Slimmons good idea, I think that would be enough synch for me, thanks
18:26 Slimmons Any idea how to configure a minoin on windows to type=interactive
18:27 johnkeates not sure, you mean the service config? because in that case, you have to look at windows's service editor
18:32 irctc986 joined #salt
18:33 irctc986 is there a way to run a command as another user
18:33 irctc986 cmd.run "sysctl fs.file-max"
18:33 johnkeates yes
18:33 johnkeates cmd.run as additional options
18:33 johnkeates has*
18:33 irctc986 ooo ok
18:33 irctc986 thx john
18:33 johnkeates https://docs.saltstack.com/en/latest/ref/states/all/salt.states.cmd.html
18:34 johnkeates runas is the parameter you're looking for i think
18:34 johnkeates well, that's the state page, but the exec module page should say the same
18:34 west575 joined #salt
18:34 johnkeates but since you'r using sysctl you might need to run as root anyway
18:35 fxhp joined #salt
18:36 amcorreia joined #salt
18:36 _beardedeagle joined #salt
18:38 irctc986 johnkeates: do you know by chance how I can pass that as an adhoc command? im doing this in a command prompt: sudo salt "bootstrap2*" cmd.run "sysctl fs.file-max"
18:40 johnkeates I think you need to pass it as runas=<user> but i'm not sure, let me check
18:42 johnkeates i can't find the reference, but this should help you: https://docs.saltstack.com/en/latest/ref/cli/ and https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.cmdmod.html#salt.modules.cmdmod.run
18:42 ekristen joined #salt
18:42 irctc986 yeah i think runas=user worked
18:42 irctc986 thx johnkeates
18:42 johnkeates cool
18:45 ruxu joined #salt
18:48 tapoxi joined #salt
18:49 onlyanegg joined #salt
18:53 ALLmightySPIFF joined #salt
18:55 KingJ joined #salt
18:56 onlyanegg joined #salt
18:57 Tyrm_ joined #salt
18:59 Sylvain31 joined #salt
19:00 Tyrm joined #salt
19:01 tapoxi I'm setting up gitfs, is pygit2 still recommended?
19:03 DammitJim joined #salt
19:09 Slimmons is there any documentation on how to set up a windows minion to use svc_type interact?  I'm having no luck with service.config, and it appears to want to do it with each service individually
19:09 Slimmons not specifically svc_type, but run everything in interactive
19:11 deniszh joined #salt
19:20 winsalt joined #salt
19:20 KajiMaster joined #salt
19:21 ronnix joined #salt
19:23 fyb3r left #salt
19:29 irctc986 when I run # salt -G 'operational_environment:ms1’ cmd.run runas=root "sysctl fs.file-max"
19:29 onlyanegg joined #salt
19:29 irctc986 it returns hosts that are not in the map file, where is salt grabbing the hosts based on the group name i defined?
19:30 tapoxi joined #salt
19:30 west575_ joined #salt
19:31 winsalt whichever minion has a grain matching operational_environment:ms1 is going to run that cmd
19:32 GreatSnoopy joined #salt
19:32 keys joined #salt
19:35 irctc986 winsalt: yep thats like 4 hosts based on the map file
19:36 irctc986 but when I run it, it returns several other hosts that are not defined in the map file, i ran a recursive search for "operational_environment: ms1" and its only the hosts defined in the file
19:37 tapoxi joined #salt
19:38 winsalt this is a cloud map file right, where  you are setting grains?
19:38 KajiMaster joined #salt
19:39 POJO joined #salt
19:40 irctc986 winsalt: is it possible to run a salt command against the map file so it grabs only the hosts defined from the map file?
19:41 irctc986 like salt -m ms1 test.ping ?
19:41 winsalt I think the map file is only used for salt-cloud stuff
19:41 tapoxi joined #salt
19:41 ALLmightySPIFF joined #salt
19:42 irctc986 winsalt: hmmm yeah
19:42 winsalt you can do "salt \* grains.get operational_environment" to see which ones are going to match
19:44 ruxu joined #salt
19:45 sagerdearia joined #salt
19:50 fannet joined #salt
19:51 irctc986 winsalt: i dont get it, i see some hosts that no longer even exist that have operational environment ms1
19:51 irctc986 is salt master somehow caching these old hosts ?
19:53 winsalt maybe, im not sure about that.  you can do a saltutil.sync_grains to try and get new data
20:00 Andrew joined #salt
20:01 Tyrm joined #salt
20:08 kevinquinnyo1 joined #salt
20:09 west575 joined #salt
20:14 west575_ joined #salt
20:19 badon joined #salt
20:24 bltmiller joined #salt
20:24 _JZ_ joined #salt
20:28 corichar joined #salt
20:28 oida joined #salt
20:31 teryx510 joined #salt
20:34 dyasny joined #salt
20:36 teryx510 joined #salt
20:39 edrocks joined #salt
20:40 deniszh joined #salt
20:44 sjmh joined #salt
20:47 sjmh is there some trickery you need to do to get state.apply not to bitch when installing a pkg from a URL?
20:48 ruxu joined #salt
20:50 sjmh ah, found it, nm
20:56 negjak joined #salt
20:57 netcho joined #salt
20:57 netcho joined #salt
20:57 netcho joined #salt
20:57 netcho hi all
20:59 netcho here is my nginx state
20:59 netcho https://paste.debian.net/780469/
20:59 netcho it does not restart service on file change
20:59 netcho and when i restart it manualy in fails and cannot start nginx again
20:59 netcho on aws
20:59 hemebond netcho: Your "watch" has to match the ID of a state.
21:00 hemebond e.g., your state ID is "nginx.conf" not "/etc/nginx/nginx.conf"
21:00 hemebond It doesn't "watch" files, it watches states.
21:00 hemebond If a state makes a change, that triggers the watcher.
21:01 netcho aaaa
21:01 netcho gotcha
21:01 hemebond FYI, there is an Nginx formula available.
21:01 netcho yea i know
21:01 netcho i am learning stuff here :)
21:02 hemebond Cool.
21:02 netcho need to figure out how to dynamically create nginx templates with salt
21:03 bltmiller joined #salt
21:05 manji joined #salt
21:05 flowstate joined #salt
21:10 TOoSmOotH joined #salt
21:20 onlyanegg joined #salt
21:20 jhauser joined #salt
21:21 babilen netcho: https://github.com/saltstack-formulas/nginx-formula/ ← some inspiration
21:22 flowstate joined #salt
21:23 justanotheruser joined #salt
21:24 justanotheruser joined #salt
21:25 netcho babilen: yep i have seen it
21:26 netcho need to set it up as a proxy for 6 upsreams
21:26 netcho this will be fun :)
21:29 manji joined #salt
21:30 netcho should it restart service if i change /etc/nginx/sites-enabled/default manualy?
21:30 netcho on the minion
21:31 netcho cuz i change listening port but it does not apply it
21:32 hemebond netcho: Salt only knows the file has changed if Salt changes it.
21:34 netcho hm
21:35 netcho so if i wanna update a file need to have a separate state for that?
21:36 hemebond Correct.
21:36 netcho i could ask that half an hour ago :D
21:36 netcho 10x
21:36 netcho state.event helps alot
21:38 hemebond state.event looks neat. Haven't used it myself.
21:43 fracklen joined #salt
21:50 UForgotten joined #salt
21:51 fannet joined #salt
21:52 ajw0100 joined #salt
21:57 onlyanegg joined #salt
21:57 colegatron_origi joined #salt
21:58 oida joined #salt
22:03 RobertLaptop joined #salt
22:04 Rick__ joined #salt
22:05 Rick__ Hi how to create reactors with a git backend for the sls files?
22:05 Rick__ reactor:
22:06 iggy you can use salt:// paths for reactors (and using gitfs for salt's fileserver)
22:08 Rick__ cool so how do I do the http://pastebin.com/fGtpmsE0
22:08 Rick__ Since I already use git for pillar etc
22:13 amcorreia joined #salt
22:18 Rick__ http://pastebin.com/vQ9twFTR
22:18 Rick__ this is what I tried.  Do I need to move it up a level to the root of the git repo?
22:27 hemebond Do reactors use absolute paths to files instead of the Python module pathing?
22:27 hemebond Oh, iggy is saying you can use anything.
22:35 keimlink joined #salt
22:42 lero joined #salt
22:42 flowstate joined #salt
22:50 drawsmcgraw left #salt
22:55 jgelens joined #salt
22:57 murrdoc joined #salt
22:58 murrdoc has anyone here written something with pepper
23:02 kasia joined #salt
23:02 jgelens joined #salt
23:03 edrocks joined #salt
23:04 flowstate joined #salt
23:06 orionx_ joined #salt
23:06 kasia left #salt
23:13 hemebond murrdoc: No, but got a link?
23:13 hemebond *Not I, but got a link?
23:13 gimpy2938 left #salt
23:16 hemebond Oh, guessing it's the salt-api thing.
23:16 murrdoc pepper ?
23:16 murrdoc its the original 'talk to salt api' thing
23:16 murrdoc stackstorm has sketchy interface to salt api
23:16 murrdoc needs to be fixed
23:17 hemebond Ooh, Stackstorm looks interesting.
23:17 murrdoc its pretty dope
23:17 murrdoc it can use salt api to talk to someone / something
23:17 murrdoc and ssh
23:18 murrdoc and u can use mistral (yaql) to queue up actions in a workflow
23:25 snaggleb_ joined #salt
23:30 snaggleb joined #salt
23:31 flowstate joined #salt
23:46 nidr0x joined #salt
23:49 manji joined #salt
23:49 MTecknology Is there any reason I should avoid using something like this?  {% if grains['osrelease_info'][0] >= 16 %}
23:49 nyx joined #salt
23:49 aurynn what is 16? why is 16?
23:50 aurynn I recommend avoiding magic numbers :)
23:50 MTecknology uhm...
23:50 MTecknology huh?
23:50 aurynn what does "16" correspond to?
23:50 aurynn it's a magic number
23:50 hemebond Magic numbers are numbers used in checks that aren't explained.
23:50 aurynn it doesn't mean anything
23:50 hemebond Rather than using a descriptive variable.
23:51 hemebond {% set UBUNTU_TRUSTY = 16 %}
23:51 aurynn so if you mean "ubuntu 16.04", put that in a variable
23:51 iggy it would be xenial
23:51 MTecknology Why would I load that up into a variable when it's immediately obvious what the number is
23:51 hemebond Wasn't obvious to me :-)
23:52 aurynn because it's not immediately obvious
23:52 hemebond Will it be obvious a year from now? What if you add more checks? What about new staff :-)
23:52 MTecknology ... anyway
23:52 fannet joined #salt
23:52 MTecknology how about the question that was asked..?
23:52 hemebond I thought this is what you asked.
23:52 aurynn Yes, you should avoid using this
23:52 iggy I generally prefer to check the oscodename, but to each his own
23:52 aurynn because it is opaque and meaningless information
23:53 MTecknology iggy: I thought about that first, but I can't do something with >=
23:53 iggy {% if salt.grains.oscodename not in ['precise', 'trust'] %}
23:54 hemebond What about case and fallthrough?
23:54 hemebond Or that
23:54 MTecknology that could work nicely :)
23:55 MTecknology iggy: any reason for salt.grains.xyz instead of grains['xyz']?
23:56 hemebond It's the Jinja way.
23:56 hemebond Or a way in Jinja.
23:57 iggy I was being too lazy to type brakcets
23:57 MTecknology ah, lol

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary