Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2016-09-13

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 manji joined #salt
00:03 sagerdearia joined #salt
00:04 druonysus joined #salt
00:04 flowstate joined #salt
00:06 cliluw joined #salt
00:08 sagerdearia joined #salt
00:12 sagerdearia joined #salt
00:15 shoemonkey joined #salt
00:16 sagerdearia joined #salt
00:18 flowstate joined #salt
00:21 sagerdearia joined #salt
00:23 flowstate joined #salt
00:39 ekristen joined #salt
00:43 ssplatt joined #salt
00:53 John_Kang joined #salt
00:57 peters-tx joined #salt
01:00 raspado is there a way to have a salt state only run once
01:00 raspado i have a cmd.run but it runs every single time
01:00 hemebond Yes, apply it manually.
01:01 hemebond You can have tests and checks within states.
01:01 hemebond See "unless"
01:01 raspado does unless work with tracking package installs too?
01:02 hemebond You can do, it's just used to run any bash command test you want.
01:02 hemebond What does your command do? Can you not make it idempotent?
01:02 hemebond Or replace it with something that is?
01:03 raspado hemebond: http://pastebin.com/w4xZdgrc
01:03 raspado but the thing is, i dont want it to run "zpool list data" every 15 minutes that i have the schedule
01:03 hemebond What does that command do?
01:03 hemebond Create a filesystem?
01:04 ssplatt joined #salt
01:04 raspado it creates a zfs pool
01:04 hemebond That's different to a filesystem or volume?
01:04 raspado kinda, its zfs
01:04 raspado so if a result doesnt return, then it should create it
01:05 hemebond Sure, but I'm reading https://docs.saltstack.com/en/latest/ref/states/all/salt.states.zfs.html and wondering if it could be replaced with one of those state functions.
01:05 raspado yeahhhh im running on 2015 :(
01:05 hemebond Ah
01:05 hemebond Well, if your unless test returns a 0, your command won't run.
01:06 hemebond If it returns anything else it will run.
01:06 raspado yeah thats the thing
01:06 raspado i just need it to run one time if it doesnt return 0
01:06 hemebond That's what will happen.
01:07 raspado i guess setting a local grain
01:07 raspado then matching the grain
01:07 hemebond Why?
01:07 raspado i guess so it calls the grain to see if the grain matches zfs_vol_created = true then dont run?
01:07 hemebond But that's what the unless check is for.
01:08 raspado but the unless runs an actual command
01:08 raspado which is what im hoping to stray away from
01:08 hemebond Why?
01:08 hemebond All states and modules run commands.
01:09 raspado well the "zfs get <pool>" command
01:09 hemebond If you're concerned about running too many commands a highstate every 15-minutes is probably a bit much.
01:09 raspado yeah
01:10 hemebond You could also set your cmd state to watch the package state.
01:10 raspado hemebond: http://pastebin.com/GuvErqdL
01:10 hemebond So it only does the command (and check) when the package state itself changes.
01:10 raspado good call
01:11 hemebond Yeah, using grains for flags is not something I would ever do.
01:11 hemebond That's just me though.
01:11 raspado in my include, i have zfs.packages, within packages, theres quite a few pkg installs, can i somehow say include: zfs.packages.zfs-install ?
01:11 raspado i tried that but didnt work
01:12 hemebond You don't need to include it.
01:12 raspado hmmm true
01:12 hemebond Just reference the state ID in your watch/onchanges check.
01:17 armonge joined #salt
01:26 _JZ_ joined #salt
01:32 sagerdearia joined #salt
01:46 catpigger joined #salt
01:51 subsignal joined #salt
01:52 flowstate joined #salt
01:58 MTecknology FINALLY!!!!!
01:58 MTecknology *RAAAAH*!!!!!!
02:03 bastiandg joined #salt
02:05 mpanetta joined #salt
02:05 Brew joined #salt
02:08 jenastar joined #salt
02:11 ssplatt joined #salt
02:11 ashmckenzie joined #salt
02:13 jjasinski_ joined #salt
02:16 Salander27 joined #salt
02:16 jjasinski_ joined #salt
02:23 jjasinski_ left #salt
02:28 ssplatt joined #salt
02:47 subsignal joined #salt
02:52 sp0097 joined #salt
02:56 sp0097 joined #salt
02:59 chim_ joined #salt
03:00 dendazen joined #salt
03:04 sp0097 joined #salt
03:37 onlyanegg joined #salt
03:46 ssplatt joined #salt
03:51 raspado joined #salt
04:02 fxdgear joined #salt
04:04 fxdgear so I'm getting some really weird errors with my minions...
04:04 rdas joined #salt
04:04 fxdgear https://thepb.in/p/qjhLgL9QKkJHB
04:07 hemebond fxdgear: Did you customise the configuration?
04:08 fxdgear hemebond this is happening when I create new minions from salt-cloud too
04:08 fxdgear which config are you refering too the master or minion?
04:09 hemebond The minion config is probably the culprit.
04:09 fxdgear so the only 2 lines i customized were `id: salt-master` `master:localhost`
04:09 fxdgear BUT I'm also getting weird ness on all the minons created via salt-cloud
04:10 fxdgear they can't run `state.highstate`
04:10 subsignal joined #salt
04:10 fxdgear https://thepb.in/p/8qhOmO9VoVgc0
04:11 hemebond So it's reading something from pillar.
04:11 hemebond Hmm, no, a module?
04:11 fxdgear hmm I don't recall setting up any pillars...
04:11 hemebond Do you have pillar_roots configured on the master?
04:12 hemebond So this affects every minion you try to create?
04:12 fxdgear nope, pillar_roots is not configured
04:12 hemebond What else have you configured on the master?
04:13 fxdgear yeah and the minion running ON my master has stopped responding as well
04:13 fxdgear my master config all default
04:13 hemebond Are you using a top.sls?
04:13 hemebond For your states
04:13 fxdgear yeah
04:13 hemebond What's in there?
04:14 fxdgear base:
04:14 fxdgear '*':
04:14 fxdgear - pidgey
04:14 hemebond Anything to do with schedules?
04:14 hemebond You've accepted the keys for the minions?
04:14 fxdgear salt-cloud generates the keys locally
04:14 fxdgear then copies them to the minon after it's been provisioned
04:15 hemebond Sure, but your master didn't use it.
04:15 hemebond Your master minion I mean.
04:15 hemebond Which version of salt?
04:15 hemebond What about.... loading up iPython on the master and importing Salt?
04:18 fxdgear @hemebond so the keys are auto accepted. and I attempt to run highstate and i get the 2nd paste above
04:18 fxdgear so then I attempted to restart all my minions and when they came back up i now get "minion did not respond"
04:18 fxdgear when I look at the logs... I get the first pace
04:18 fxdgear s/pace/paste
04:19 hemebond Which version of Salt are you running?
04:19 fxdgear BUT I'm making a new minion again cause i just destroyed them all
04:19 hasues joined #salt
04:19 hemebond And how are you installing the master and minions?
04:20 fxdgear https://thepb.in/p/oYhlAlJDVZDCZ
04:20 fxdgear I installed salt-master via the apt-repo listed in the salt-docs
04:20 fxdgear i install the minion by using salt-cloud
04:20 fxdgear and the bootstra-salt script that's included there
04:21 hemebond And which version of the minion has the bootstrap script installed for you?
04:22 hasues left #salt
04:23 fxdgear https://thepb.in/p/r0hwywXDJo8iK
04:23 hemebond Okay, next step is to run a minion in debug mode.
04:24 hemebond salt-minion -l debug
04:25 toastedpenguin joined #salt
04:26 fxdgear @hemebond the minion daemon running on the master host
04:26 fxdgear keeps rebooting
04:26 fxdgear the output is in the first paste
04:26 fxdgear https://thepb.in/p/r0hwywX1XXKsK more output here...
04:27 hemebond Is there anything in /etc/salt/minion.d/_schedule.conf ?
04:28 fxdgear schedule:
04:28 fxdgear __mine_interval: {function: mine.update, jid_include: true, maxrunning: 2, minutes: 60}
04:28 fxdgear that's auto generated. I didn't make this ^^
04:30 hemebond Hmmm.
04:30 hemebond Has this problem just started?
04:30 fxdgear yeah
04:31 fxdgear I'm super baffled...
04:31 hemebond No changes to the OS's?
04:31 fxdgear I was working on making a load testing system using minions to simulate load. got side tracked by something else. and then came back to it and now it's all messed up.
04:31 fxdgear it's all in Ec2
04:32 fxdgear so everything is expendable (except the salt-master)
04:32 fxdgear and I fully expect them to be expendable.
04:32 hemebond Have you checked the master logs for errors?
04:33 fxdgear I think ```[ERROR   ] '' is not in list``` is the main problem line
04:33 fxdgear but I have no idea what that means
04:33 fxdgear or what it is referencing
04:33 hemebond Nothing else in the master logs?
04:34 fxdgear and I can't find anything with a google of that error message cause it's kinda vuage and isn't helpful
04:34 hemebond Have you tried a very simple state?
04:34 hemebond Does "salt-minion -l trace" give you more output?
04:34 * fxdgear runs master in debug mode
04:35 fxdgear master logs keep running this...
04:37 fxdgear https://thepb.in/p/oYhlAlJp9l0CZ
04:38 fxdgear https://thepb.in/p/lOhOWODgqMDHB  << `-l trace`
04:40 hemebond Your salt-key list shows the keys?
04:41 fxdgear yes
04:41 fxdgear and shows them as accepted
04:42 hemebond I would delete them all and start with just one minion.
04:42 hemebond I can't figure out from here where the issue might be.
04:42 flowstate joined #salt
04:43 hemebond Assuming you've also restarted the master a few times already.
04:44 hemebond And no states.
04:45 fxdgear yeah
04:45 fxdgear run it in different modes
04:45 fxdgear (debug manually, restarted the service etc...)
04:47 fxdgear I have one minion
04:47 fxdgear I have 2 hosts
04:47 fxdgear 1 host runs master and minion, 1 host runs minion only
04:48 fxdgear the minion only is behaving... by responding but it won't run states...
04:48 hemebond What customisations have you made to the master and minion configs now?
04:48 fxdgear I get this....
04:48 fxdgear https://thepb.in/p/Z4hP1Pyjvg6sG
04:49 fxdgear I'm curious now... let me kill the minion on the master host
04:49 fxdgear and try again
04:49 fxdgear cause the error `'' not in list' is in the tb on minion_01
04:51 hemebond in loader.py
04:51 hemebond In function refresh_file_mapping
04:51 hemebond Do you have a line commented out with log.debug?
04:53 hemebond My local copy of the source is much newer than what you're running so I don't see that line.
04:54 fxdgear @hemebond so what I did is deleted my minion_1
04:54 hemebond Oh wait...
04:54 fxdgear and deleted `/var/cache/salt/minion`
04:54 fxdgear and then started the salt-minion again
04:54 fxdgear and now it's responding
04:54 hemebond minion_1 is the remote minion?
04:55 fxdgear but now I'm at the point where i can't get the highstate to apply
04:55 hemebond So you can test.ping but can't highstate?
04:56 fxdgear right
04:56 hemebond Error?
04:56 fxdgear @hemebond see the most recent paste ^^
04:56 hemebond So same thing.
04:56 fxdgear yeah
04:57 hemebond And everything is default.
04:57 hemebond And from the saltstack repos (not the debian/ubuntu repos)?
04:58 fxdgear yeah
04:59 fxdgear I can't even sync my modules
04:59 fxdgear `saltutil.sync_all`
04:59 fxdgear I get the same valueerror
05:00 hemebond On the minion, purge the package.
05:00 hemebond And reinstall via pip
05:00 hemebond Specifying the version you want.
05:06 Salander27 joined #salt
05:30 bocaneri joined #salt
05:33 keimlink joined #salt
05:39 beardedeagle joined #salt
05:45 felskrone joined #salt
06:01 infrmnt joined #salt
06:09 systo joined #salt
06:20 jxm_ joined #salt
06:21 tcom joined #salt
06:24 nebuchadnezzar joined #salt
06:30 flowstate joined #salt
06:35 tcom is salt the best choice of configuration management tool when managing an established group of production servers?
06:35 hemebond tcom: If you've not got an existing management system, sure.
06:37 tcom i'm having a debate with my team and they suggest salt is best for building from scratch, ie deployment, not config management
06:38 hemebond What do they think is better for config management?
06:38 MTecknology tcom: Today, I finish writing up salty goodness that lets me run salt-cloud -p aws.east
06:39 tcom ansible
06:39 MTecknology err... hold on! soon!
06:39 hemebond tcom: I would disagree with them on that.
06:40 hemebond Ansible is fine but you'll probably find most people on here prefer Salt over Ansible.
06:40 tcom that's my view too, just looking for more ammunition (so to speak)
06:40 MTecknology tcom: Today, I finish writing up salty goodness that lets me run "salt-cloud -p aws.east oob_camp03.lustfield.net" and have a VPN server running in AWS that is a fully functional VPN server with multiple other clients automatically connecting to it...
06:40 tcom of course!
06:40 MTecknology ansible is just remote scripts (in my book)
06:40 hemebond What do they think Ansible does better than Salt?
06:40 MTecknology some people like it because "it doesn't have a daemon" which, considering what you're dealing with, seems like a terrible idea to me.
06:40 MTecknology don't rely on SSH!!!!
06:41 tcom deployment (from scratch) vs management
06:41 hemebond But Salt does deployment, management and configuration.
06:41 tcom I agree @MTecknology
06:41 MTecknology tcom: if you do it right, there's no difference betwen initial configuration and long-term configuration
06:42 MTecknology err.. configuration management **
06:42 hemebond ^
06:42 MTecknology if you use ansible ... you have to change constantly
06:42 subsignal joined #salt
06:42 MTecknology if you use salt, you define it will be this; if it changes, it will bet that
06:43 MTecknology because ansible is so heavily focused on building a pretty wrapped around remote execution, that's about all you get. Great if you want to constantly run scripts to manage systems, but it means you're losing sight of the devops perspective
06:44 tcom I think they have their requirements back-to-front
06:44 MTecknology the old way, the ansible way, is to just keep track of everything you've changed on servers and always do that again. That's why you end up with "gold" templates
06:47 MTecknology the new way, the more devops mindset, is that you should be able to destroy these boxes, re-create them, whatever else. You don't want to replay years worth of changes, we want to go from deploy to an exact configuration, exactly as it was specified previously. Why? Because we can. If we lose regard to our persistent state in such a way that we look at servers as temporary resources; things that
06:47 MTecknology need to be build, configured, modified, managed, destroyed, etc... as cattle, not pets, what you want out of config management changes
06:48 MTecknology tcom: a lot of older admins look at ansible as "the answer" because it fits well into how they've always done things
06:49 MTecknology that works well if you're dealing with the way things have always been, but less efficient when you try to scale it out to thousands of servers in an environment that needs to change on a dime.
06:49 * MTecknology stops rambling and goes to sleep
06:52 hemebond I'm currently converting a Puppet system to Saltstack. It manages multiple environments.
06:52 hemebond Including a production environment.
06:57 MTecknology here's this super deploy process... all you have to do is these thirty five and a half steps on the fourth blue moon; it downloads a base, incremental tarballs, unpacks the tarballs over top of each other, runs "merge" scripts ... turns out only 3/4th of it actually worked, the rest were just producing errors in logs nobody ever saw, if you got lucky, this would now work after you shipped it out
06:57 MTecknology to a facility.
06:58 tcom that's excellent information - thank you!
06:58 MTecknology New world order; boot to iso, let installer get esxi stuck on and shut down; ship out, plug in, power up over ipmi, run highstate, done.
06:59 tellendil_ joined #salt
07:02 tellendil_ Hi ! I've got a problem installing an external package with salt. My minion is running centos 7, my state file is : https://bpaste.net/show/ccf93470045e and I get "Error: no package /var/cache/[...]/latest/1 available. It seems that it does not attempt to install the local package but instead tries to fetch it in the repositories. Anyone has an idea ? thanks !
07:09 flyboy joined #salt
07:09 tcom can you make changes on the client then push them to the master, or is it change on master and push ?
07:10 hemebond master -> minion
07:10 hemebond What kind of changes would you want to "push" to the master?
07:13 tcom say we install a new license, usually this is executed on the host, then we check into SVN
07:13 ronnix joined #salt
07:13 tcom ^ our current method
07:14 hemebond What goes into SVN? A file created by the command?
07:14 tcom yes, or sometimes the license is just a copy/paste of text, then reload the service
07:15 hemebond tellendil_: Does it work if you do it manually instead of using a state?
07:16 tellendil_ hemebond: no, the problem is that 1 is not ending by .rpm ... which prevents yum from installing it. Anyway of forcing a download name for this ? :/
07:16 hemebond I had a look but couldn't see an option for it.
07:17 hemebond Tried quotes around the string?
07:19 tellendil_ hemebond: it seems like salt is not following the 301 REDIRECT that sends to the correct package name
07:20 tellendil_ hemebond: if I put the link to which the redirect sends, it can install the package
07:20 tellendil_ the quotes does not change anything :/
07:31 flowstate joined #salt
07:38 impi joined #salt
07:41 dariusjs joined #salt
07:43 subsignal joined #salt
07:44 jhauser joined #salt
07:46 tellendil_ When I have a state that creates a new minion, would it be possible to wait a bit before executing states on the new minion ? in order not to fail the state ? or should I do two separate runs ?
07:47 hemebond tellendil_: That would be a job for a reactor
07:47 hemebond As separate processes.
07:48 tellendil_ hemebond: so salt "my-hypervisor" state.highstate should launch jobs on a reactor to run the same command on each of the new vm created right ?
07:49 ivanjaros3916 joined #salt
07:49 Reverend have I ever told you guys how much I hate windows?
07:54 geomacy joined #salt
07:55 krymzon joined #salt
08:17 jonathan___ joined #salt
08:19 xmj where i come from, reverends usually preach a message of love and hope
08:19 xmj all the while being surrounded by Marc Chagall windows
08:19 Reverend I preach the message of love and hope for linux.....
08:19 xmj ugh
08:19 Reverend i preach the message of hate and intolerance for windows.
08:20 Reverend ugh?
08:20 Reverend UGH?
08:20 * Reverend gasps
08:21 xmj yes ugh
08:21 Reverend what's wrong with linux?
08:21 riftman joined #salt
08:24 jonathan___ hi all, is there a way to install a package as part of a 'minion_start' event? to do proper targeting, I have an aws ec2 grain. But that grain requires a package to be installed before.
08:25 jonathan___ see https://gist.github.com/kung-foo/30fd06420848b64862fb19b99066ff0f
08:26 Reverend which package?
08:26 jonathan___ something like: https://gist.github.com/kung-foo/4801a69a076f24ab0c5baac5af385abb
08:26 jonathan___ pip and then boto
08:26 Reverend oh. and you only want pip and boto on the instance that use ec2_tags rite?
08:26 jonathan___ correct
08:26 Reverend 10.0.0.0/8:
08:27 Reverend - match: ipcidr
08:27 Reverend maybe?
08:28 jonathan___ i tried putting the pkg.installed in the sync_grains.sls that is invoked from the reactor, but i got a weird error
08:29 lero joined #salt
08:29 flowstate joined #salt
08:34 hemebond tellendil_: More likely you'd just have a reactor listen for a new VM to come online and have the reactor run a highstate or whatever on it.
08:40 impi joined #salt
08:48 babilen jonathan___: You can easily react to the minion start event with a state that will install that package. Fire off another "please highstate" me at the end of it, or just run highstates regularly.
08:48 babilen jonathan___: Look into reactors for that. Another option would be startup states
08:50 jonathan___ can a 'minion_start' event run something on the minion itself?
08:54 Grou joined #salt
08:55 Grou hello All ! Does anybody know where I can find infos on cryto used in saltstack. I know it AES but doesnt find info on key size (128/256/... ) ?
09:07 gmoro joined #salt
09:08 froztbyte uh
09:08 froztbyte so
09:09 froztbyte anyone here who deals with golang from salt?
09:11 coredumb Hello folks, I'm trying to use a reactor, but running salt-master in DEBUG mode seems like it's not loading the reactor_event.sls
09:11 babilen jonathan___: You would use reactors for that: https://docs.saltstack.com/en/latest/topics/reactor/
09:11 coredumb any idea how to debug that ?
09:12 froztbyte key things I wonder about: installing the go toolchain, managing go applications (installation, checking versions, upgrades)
09:12 froztbyte coredumb: have you got the reactor stuff configured in your master config, and restarted your master after doing so?
09:13 coredumb froztbyte: yes I've put it in master.d
09:14 froztbyte what have you put in master.d?
09:14 coredumb reactor.conf
09:14 coredumb then restarted
09:14 coredumb [salt.config      ][DEBUG   ][28224] Including configuration from '/etc/salt/master.d/reactor.conf'
09:14 froztbyte what's in reactor.conf?
09:14 Rumbles joined #salt
09:15 coredumb reactor:
09:15 coredumb - 'git/saltstack/push':
09:15 coredumb - /srv/reactor/sync_git.sls
09:15 Rumbles hi, I want to remove some duplicate keys, I have replaced the hosts, I removed the old ones, then added the new ones which had the same name
09:15 coredumb nothing fancy I guess
09:15 Rumbles the old hosts then appeared in my denied keys list
09:15 Rumbles this feature request says it has been added : https://github.com/saltstack/salt/pull/25761/files
09:15 saltstackbot [#25761][MERGED] Adding delete_den to delete denied keys  See issue #24836 | This just adds the backend api, not the front-end call.  Will need to figure how those are being called and add methods as necessary....
09:15 coredumb froztbyte: wait I'm too stupid
09:16 coredumb :D
09:16 Rumbles can anyone tell me how I use this feature?
09:16 coredumb I call sync_git.sls but named the file git_sync.sls >_<
09:21 coredumb froztbyte: works better now indeed :)
09:21 froztbyte cool
09:23 babilen Rumbles: That function is never called anywhere
09:24 babilen Rumbles: It needs to be integrated into salt/utils/parsers.py (SaltKeyOptionParser) and salt/key.py (KeyCLI.run())
09:26 Rumbles oh right, so there's no way to delete all the denied keys still?
09:26 Rumbles if I try to delete by name it matches the accepted key and the denied key
09:26 babilen Rumbles: Just remove the files (the function doesn't do anything fancier)
09:27 babilen Rumbles: I would also *strongly* suggest to file a bug against salt-key in which you make them aware that they have to implement the CLI interface part for this
09:27 Mattch joined #salt
09:28 alrayyes joined #salt
09:28 Rumbles oh right, where do the files normally live (ubuntu)
09:28 Rumbles I will open a bug
09:29 babilen Rumbles: They are in /etc/salt/pki/master -- salt-key does little more than just moving files from A to B there
09:30 Rumbles thanks babilen
09:31 flowstate joined #salt
09:39 CeBe1 joined #salt
09:43 agend joined #salt
09:44 babilen Rumbles: Did you file a bug about this?
09:44 babilen Ah, you did
09:44 babilen Thanks
09:46 subsignal joined #salt
09:53 froztbyte so, to go back to my earlier question: it seems like the only reasonable solution here is to do a thing with some shellscript or something, pull the release/binary, and make a shim package with fpm/whatever
09:54 LiamMon_ joined #salt
09:54 Rumbles yes thanks babilen :)
09:58 coredumb Is there a way to have a clean state return when restarting master/minion processes on configuration change ?
10:03 aaa_ joined #salt
10:04 aaa_ help
10:07 Rumbles left #salt
10:07 Rumbles joined #salt
10:08 yomilk joined #salt
10:13 lovecraftian joined #salt
10:13 lovecraftian joined #salt
10:17 permalac joined #salt
10:21 KingOfFools joined #salt
10:27 N-Mi joined #salt
10:27 N-Mi joined #salt
10:30 flowstate joined #salt
10:30 LiamMon joined #salt
10:34 dariusjs joined #salt
10:47 ronnix joined #salt
10:52 ivanjaros joined #salt
11:04 mbools joined #salt
11:04 yomilk joined #salt
11:12 manji joined #salt
11:12 toanju joined #salt
11:30 Roelt is a song by the beatles
11:36 hemebond coredumb: Like this? https://docs.saltstack.com/en/latest/faq.html#linux-unix
11:38 west575 joined #salt
11:45 yomilk joined #salt
11:45 dariusjs joined #salt
11:48 subsignal joined #salt
12:06 yomilk joined #salt
12:09 ronnix joined #salt
12:12 coredumb hemebond: interesting
12:15 coredumb hemebond: for people that don't like using at would a schedule runner be able to achieve that ?
12:16 coredumb well the fork & disown command looks fine for me as well
12:18 catpig joined #salt
12:20 DammitJim joined #salt
12:22 coredumb thanks hemebond
12:22 hemebond Good luck :-)
12:24 coredumb I am very happy with the integrated message bus
12:24 coredumb matching events works like a charm :)
12:25 hemebond That's something I still haven't had a chance to play with :-(
12:27 coredumb git push sal tree => post receive hook event.send => reactor => git fetch/reset == master files in sync
12:33 permalac joined #salt
12:44 ssplatt joined #salt
12:50 dendazen joined #salt
13:00 ZachLanich joined #salt
13:00 numkem joined #salt
13:04 kbaikov joined #salt
13:10 subsignal joined #salt
13:20 Tanta joined #salt
13:21 subsignal joined #salt
13:22 krymzon I'm a bit confused byt x509 signing_policy. How do I ensure one minion can't request another's CN and impersonate? I see how to force e.g. keyUsage, but how can I force particular parametrisation of CN?
13:24 Brew joined #salt
13:25 krymzon at the moment the only clear way I see is to generate a separate signing policy per each minion, in a loop over hundreds of minions. There surely must be a better way?
13:26 nicksloan joined #salt
13:27 subsignal joined #salt
13:30 _JZ_ joined #salt
13:34 subsigna_ joined #salt
13:34 west575_ joined #salt
13:36 racooper joined #salt
13:36 LiamMon_ joined #salt
13:39 dariusjs joined #salt
13:40 KingOfFools Why can I get 'The following requisites were not found: sls' for '- require: - sls: name' if that required state works just fine by itselt?
13:41 LiamMon joined #salt
13:42 Reverend you've got "require" as an sls there. if I'm reading it right
13:43 Reverend can you give us the lines that are using that require?
13:43 Reverend I acutally think I'm wrong, but it'd help to read it :)
13:46 froztbyte uggggggh the salt-users spam... :|
13:47 KingOfFools http://pastebin.com/H6PhuhhT
13:47 babilen Repasted: http://paste.debian.net/820774/
13:51 spuder joined #salt
14:01 pppingme joined #salt
14:04 robinsmidsrod joined #salt
14:05 hlub_ how can I add execution permissions for all files under a directory?
14:08 whytewolf hlub: file.directory with mode 755 and recurse: - mode [or if you are file.recurse on the files already use mode 755
14:10 mpanetta joined #salt
14:11 robinsmidsrod joined #salt
14:12 hlub the doc for file.directory is a bit confusing: file_mode The permissions mode to set any files created if 'mode' is run in 'recurse'. This defaults to dir_mode. Not supported on Windows
14:12 hlub "to set any files created"... what? :)
14:13 hlub but thanks whytewolf, I'll try that. the files were extracted with archive.extract.
14:13 whytewolf ignore the crreated part. looks like it was copied word for word from from file.recurse
14:15 armin joined #salt
14:18 davisj_ I want a state that will halt execution (like failhard: true) if a certain pillar value it missing/incorrect. Seems like an obvious thing to do but I don't see a way to implement.
14:23 Tanta {% if salt['pillar.get']('key') is not defined or salt['pillar.get']('key') != 'this_value' %} kill_salt_cmd: cmd.run: -name: pkill --signal SIGTERM "[s]alt-call" {% endif %}
14:24 davisj_ Tanta: interesting. Seems like nuclear option :)
14:24 davisj_ I see there a 'test.check_pillar' state but it lacks a failhard option.
14:25 ivanjaros joined #salt
14:27 davisj_ Silly me, it does accept failhard. Problem solved!
14:32 perfectsine joined #salt
14:36 kbaikov joined #salt
14:36 whytewolf davisj_: failhard is a global option. everything has it
14:38 davisj_ whytewolf: yup, that's what I learned from this exercise
14:42 Edur joined #salt
14:42 bowhunter joined #salt
14:43 Brew joined #salt
14:43 kbaikov joined #salt
14:46 ronnix joined #salt
14:47 Salander27 joined #salt
14:50 spuder joined #salt
14:51 ronnix joined #salt
14:52 eset joined #salt
14:52 eset joined #salt
14:58 bakins joined #salt
15:02 khaije1 joined #salt
15:04 flowstate joined #salt
15:07 infrmnt joined #salt
15:08 jrose1030 joined #salt
15:08 RandyT joined #salt
15:08 systo joined #salt
15:10 doriftoshoes joined #salt
15:10 hacks joined #salt
15:11 Antiarc joined #salt
15:12 pfallenop joined #salt
15:12 flowstate joined #salt
15:12 Corey joined #salt
15:12 ventris joined #salt
15:13 numkem joined #salt
15:13 davromaniak joined #salt
15:13 davromaniak joined #salt
15:13 flowstate joined #salt
15:13 quarcu joined #salt
15:13 jacksontj joined #salt
15:14 ksa joined #salt
15:14 Patch joined #salt
15:14 sp0097 joined #salt
15:15 alrayyes joined #salt
15:15 bluenemo joined #salt
15:16 sagerdearia joined #salt
15:17 whytewolf joined #salt
15:17 robbintt joined #salt
15:20 fxdgear joined #salt
15:22 systo joined #salt
15:23 LondonAppDev joined #salt
15:25 iggy froztbyte: someone at work tried to add a formula to install a bunch of go stuff to all of our production servers... we laughed at them and publicly shamed them until they came up with a different method (deb packages)
15:26 iggy they were installing a service that needed an init script and some other stuff anyway
15:26 iggy so it made more sense
15:28 iggy but I have a state for gnatsd that just pulls from GH via archive.extracted
15:30 armonge joined #salt
15:33 sagerdearia joined #salt
15:35 joshin joined #salt
15:37 Patch joined #salt
15:39 roock joined #salt
15:39 Veers joined #salt
15:42 beowuff joined #salt
15:44 onlyanegg joined #salt
15:46 descrepes joined #salt
15:46 flowstate joined #salt
15:46 xMopxShell joined #salt
15:49 Tanta joined #salt
15:53 wendall911 joined #salt
15:53 flowstate joined #salt
16:01 beowuff joined #salt
16:01 pppingme joined #salt
16:04 gpampara joined #salt
16:07 flowstate joined #salt
16:07 ssplatt joined #salt
16:12 ronnix joined #salt
16:12 ekristen joined #salt
16:13 armyriad joined #salt
16:13 chefffff joined #salt
16:13 flowstate joined #salt
16:14 west575 joined #salt
16:15 bltmiller joined #salt
16:18 renaissancedev joined #salt
16:18 winsalt does anyone know how to get a minions pillar data into a custom grain?
16:19 subsignal joined #salt
16:21 bltmiller joined #salt
16:23 whytewolf um .... why
16:24 winsalt i dunno, maybe there is a better way.  But i want to pass a password to a custom grain so it can access a db
16:25 renaissancedev winsalt: Is there any particular reason that it needs to be in a grain as opposed to staying as part of the pillar data?
16:26 renaissancedev Ah, I think I get it now. You've written the grain to return info about the DB but it can't auth...
16:27 whytewolf okay. then in your grain. you should have access to the salt object. just call salt.config.get
16:27 renaissancedev I would suggest using the pillar data to write out a .env (or similar) file which your custom grain can then read to get the credentials that it needs.
16:27 renaissancedev Or what whytewolf just said :)
16:27 whytewolf winsalt: https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.config.html#salt.modules.config.get
16:28 renaissancedev Does anyone here have advice on how I can get a scheduled job to only execute on one node in a cluster? In particular I want to schedule daily backups for my Elasticsearch cluster by using the HTTP interface and I don't want it to run 3 times every day.
16:28 whytewolf using config.get will allow you to use a pillar. or set the password in your minion config file
16:29 renaissancedev I _could_ schedule it to run on my master node, but I'd rather not do that if I can avoid it.
16:29 subsignal joined #salt
16:29 winsalt do you mean __salt__ as the salt object, like in https://docs.saltstack.com/en/2015.8/ref/clients/index.html#salt-s-opts-dictionary
16:29 whytewolf renaissancedev: humm. target it to only one of the minions?
16:29 whytewolf winsalt: yes
16:29 bluethundr joined #salt
16:29 whytewolf __salt__.config.get
16:29 whytewolf [sory so used to accessing it from jinja forgot it is __salt__ in _grains.py
16:30 winsalt ive got this so far https://bpaste.net/show/f6578790a145, but the pillar returns empty
16:30 whytewolf winsalt: does it show up if you do a salt 'minionid' pillar.get sql:connection
16:31 raspado joined #salt
16:31 ssplatt joined #salt
16:32 renaissancedev whytewolf: I had thought of that, but I would also like to not have to worry about that instance going down...
16:32 winsalt yeah, i can salt-call pillar.get and it gets what I want.
16:32 renaissancedev After thinking about it I think that it would probably make the most sense to set it up from the Kibana node.
16:32 renaissancedev Thanks for letting me talk that out :)
16:33 bluethundr hey all.. I'm trying to launch new EC2 instances in AWS using salt
16:33 bluethundr I'm following this guide
16:33 bluethundr https://docs.saltstack.com/en/latest/topics/cloud/aws.html
16:33 bluethundr but when I go to run the command that launches the instance
16:33 bluethundr I get this error
16:33 whytewolf winsalt: strange ... with debugging on the minion are you getting any error messages?
16:33 bluethundr Profile base_ec2 is not defined
16:34 bluethundr Can somebody take a look at this paste: https://docs.saltstack.com/en/latest/topics/cloud/aws.html
16:34 bluethundr and let me know what's going wrong
16:34 whytewolf bluethundr: gist up what you have please.
16:35 bluethundr sorry bad paste
16:35 mmidgett joined #salt
16:35 bluethundr this should be my gist https://gist.github.com/bluethundr/adebc599c4314761c2404ea18f62c861
16:35 pipps joined #salt
16:36 whytewolf ahh the example is wrong
16:37 whytewolf the base_ec2 should be base_ec2_db
16:37 whytewolf basicly you are trying to call a profile that doens't exist
16:37 agend joined #salt
16:38 bluethundr oh ok
16:38 bluethundr got it
16:38 bluethundr thanks
16:38 amcorreia joined #salt
16:38 renaissancedev For my next question... Any ideas on how I can print the contents of my merged top file as pulled in from gitfs?
16:38 onlyanegg Does anyone have an example of how to use the pillar parameter in the 'salt.state' block of the orchestrate runner?
16:39 ekristen joined #salt
16:39 beardedeagle joined #salt
16:39 whytewolf renaissancedev: salt 'minion' state.show_highstate
16:40 renaissancedev https://github.com/mitodl/salt-ops/blob/master/salt/orchestrate/operations/services/consul.sls#L98
16:40 renaissancedev onlyanegg: ^
16:40 onlyanegg renaissancedev: thanks!
16:41 renaissancedev whytewolf: Yeah, I tried that and it's returning no output. When I try to execute the highstate it's claiming that there are no matches. Problem being that I'm using the exact same targeting in my pillar top file and it's matching properly...
16:41 whytewolf humm. look for broken colons
16:42 whytewolf show_highstate basicly shows the rendered top file that the minion knows about.
16:42 subsignal joined #salt
16:43 whytewolf kind of wish the fileserver runner had a built in output command.
16:44 renaissancedev Agreed
16:44 whytewolf and I'm too lazy to make one
16:44 woodtablet joined #salt
16:44 edrocks joined #salt
16:45 tvinson would salt-call cp.get_file_str salt:///top.sls work?
16:45 woodtablet joined #salt
16:45 whytewolf no. salt blocks access to the top file through cp
16:46 whytewolf least IIRC it does
16:46 tvinson hm..that returns when run on my master
16:47 whytewolf huh. maybe i'm just growing senial
16:48 whytewolf that does work
16:49 mors joined #salt
16:49 ronnix joined #salt
16:50 whytewolf renaissancedev: try what tvinson said
16:53 renaissancedev whytewolf: tvinson thanks for the suggestion!
16:54 bltmiller joined #salt
16:55 renaissancedev I think I figured out my issue. I'm pretty sure it's because I'm trying to apply states that are contained in a git repo which I forgot to add to the gitfs list :/
16:57 impi joined #salt
17:01 winsalt hey renaissancedev, when  you said to use a file to supply creds, how would you secure that file?
17:06 sagerdearia joined #salt
17:07 flowstate joined #salt
17:08 ageorgop joined #salt
17:08 bluethundr hey guys.. I'm still geting the Profile base_ec2 is not defined error when I try to launch new ec2 instances
17:08 bluethundr I used the example from the salt tutorial almost verbatim
17:08 bluethundr https://gist.github.com/bluethundr/c9980562dbfb2e05245a4e0dd3e63237
17:08 whytewolf bluethundr: did you crreate a profile called base_ec2.
17:08 whytewolf since the example doens't include one?
17:08 ThomasJ joined #salt
17:09 bluethundr oh duh... lol
17:09 bluethundr I guess not
17:09 bluethundr I'll try that
17:09 mTeK joined #salt
17:12 renaissancedev winsalt: you could set the mode on the file to be 0400 and owned by the user who will be reading it.
17:14 bluethundr ok, so now I created a profile called just 'base_ec2', and tried to call it from the command line
17:14 bluethundr with the command salt-cloud -p base_ec2 ops.example.com
17:14 bluethundr and got the same error: https://gist.github.com/bluethundr/5a17888e55ab6f7e9795466a9f6d1207
17:15 bluethundr I'm perplexed because that profile is clearly in  the file in the profiles directory
17:15 bluethundr what could be going on ?
17:15 whytewolf try with -l debug
17:15 bluethundr ok
17:17 bluethundr oh, I think I see what's going on
17:17 bluethundr https://gist.github.com/bluethundr/7eeefcda4d9a537b3e075ca8275fd692
17:17 bluethundr It's saying that it's missing a file in the cloud.providers directory
17:18 bluethundr so does that file have to have a special name or something?
17:18 bluethundr because I do have a file in that location
17:18 bluethundr meant to say cloud.profiles
17:19 whytewolf shouldn't be an issue.
17:19 toastedpenguin joined #salt
17:19 bluethundr hmm
17:19 bluethundr so why isn't it reading that file?
17:20 nethershaw joined #salt
17:21 pipps joined #salt
17:22 whytewolf been awhile since i used salt-cloud so trying to rember the setup
17:22 bluethundr oh ok
17:25 bluethundr let me know if you can think of anything
17:25 bluethundr or have doc recommendations
17:25 ajw0100 joined #salt
17:27 bluethundr also if I try to list the cloud providers, this is what I get
17:27 bluethundr https://gist.github.com/bluethundr/ced72d147b6db86506a5c136a4a334ca
17:28 bluethundr I see that the config file is owned by root...
17:28 bluethundr so maybe that's the issue?
17:29 bluethundr hmmm.. maybe not
17:29 bluethundr I tried to chmod the file to 777 temporarily to see.. and got the same error
17:30 Edgan joined #salt
17:30 bluethundr is there any ownership of the /etc/salt directory that's recommended?
17:30 Sokel Never set permissions to 777. That's foolish.
17:30 bluethundr I know.. it was for less than 5 seconds
17:30 Sokel It's normally owned root:root on 755 permissions.
17:30 bluethundr and the file contained nothing important to an intruder
17:31 bluethundr still I get what you're saying
17:31 bluethundr so ownership shouldn't be an issue, I take it?
17:33 bluethundr oh
17:33 bluethundr the file needs to end in .conf
17:33 bluethundr that's the issue
17:34 perfectsine_ joined #salt
17:34 whytewolf normally it's permissions are 644 not 755
17:34 whytewolf doens't need exacute permissions
17:34 whytewolf but yeah. .conf
17:34 whytewolf forgot that part
17:34 pipps joined #salt
17:35 bluethundr heh...
17:35 bluethundr glad I got that sorted out
17:35 bluethundr ;)
17:38 subsignal joined #salt
17:38 ThomasJ joined #salt
17:39 edrocks joined #salt
17:41 woodtablet joined #salt
17:50 woodtablet left #salt
17:56 woodtablet joined #salt
17:58 fxdgear joined #salt
17:59 pipps joined #salt
18:02 lovecraftian joined #salt
18:02 lovecraftian joined #salt
18:05 babilen joined #salt
18:06 pipps joined #salt
18:06 babilen joined #salt
18:08 ThomasJ joined #salt
18:09 bluethundr hey guys.. now that I got past that configuration issue I was having
18:09 toanju joined #salt
18:09 bluethundr I'm now getting an AUTH error when I try to run the salt-cloud command: https://gist.github.com/bluethundr/c671f7917302efef45739924b04b2543
18:09 bluethundr can someone take a look at the gist and have a guess at what's going on?
18:11 mavhq joined #salt
18:12 ageorgop joined #salt
18:12 ronnix joined #salt
18:13 capri joined #salt
18:14 ajw0100 joined #salt
18:14 capri joined #salt
18:15 ageorgop joined #salt
18:16 bowhunter joined #salt
18:17 bltmiller joined #salt
18:18 whytewolf bluethundr: id and key ... hopefully they are not 'REDACTED' in your real files...
18:19 whytewolf but you might want to double check that the keys and id have pretty much full permissions in your cloud
18:19 perfectsine joined #salt
18:20 bluethundr whytewolf: yep.. definitley the real keys in the cloud.providers file
18:20 bluethundr ok that's a good tip
18:20 bluethundr I'll try that
18:21 bluethundr the user who's keys I'm using has AdministratorAccess to AWS
18:22 bluethundr shouldn't that be enough?
18:22 ronnix joined #salt
18:25 Tanta check the clock on your machine
18:25 bluethundr ok
18:26 bluethundr hmm.. the clock's in UTC
18:26 Tanta "Authentication tokens are time stamped. If your datetime is wrong on your local computer your credentials will be invalid and you will get "AWS was not able to validate the provided credentials""
18:26 bluethundr ok
18:26 bluethundr really cool
18:26 bluethundr I'll try it from that angle
18:28 GreatSnoopy joined #salt
18:29 jpunz joined #salt
18:30 bluethundr I set the time and date using the ntpdate command
18:30 bluethundr and I got this result
18:30 bluethundr 13 Sep 14:23:38 ntpdate[16776]: step time server 91.208.179.1 offset 401.749880 sec
18:31 bluethundr however the auth error that I'm getting is still there
18:31 bluethundr still says [ERROR   ] There was a profile error: string indices must be integers, not str
18:32 nicksloan joined #salt
18:34 subsignal joined #salt
18:37 writtenoff joined #salt
18:39 bluethundr does anyone have any ideas?
18:41 m4rx joined #salt
18:41 sagerdearia joined #salt
18:43 impi joined #salt
18:43 renaissancedev joined #salt
18:44 edrocks joined #salt
18:50 XenophonF you probably need to quote something
18:50 mrueg joined #salt
18:50 XenophonF i dunno
18:51 XenophonF the full error trace might clue us in
18:51 DammitJim joined #salt
18:53 pipps joined #salt
18:54 XenophonF looking over your config, the iam_profile is wrong
18:54 XenophonF can't be a user
18:54 XenophonF has to be an instance-profile
18:54 XenophonF like arn:aws:iam::123456789012:instance-profile/ExampleInstanceProfile
18:56 XenophonF the base_ec2_private profile has a yaml syntax error
18:56 XenophonF "base_ec2_private:/et" isn't a valid key specification
18:56 bluethundr XenophonF: I tried using both hard and soft quotes on the keys in the config
18:56 bluethundr not sure what else to do
18:56 Stephen joined #salt
18:57 bluethundr oh the iam profile is wrong
18:57 bluethundr I copied it straight from the AWS console for that user
18:57 ronnix joined #salt
18:58 bluethundr this is the ARN I'm using: arn:aws:iam::840405578871:user/bluethundr
18:58 XenophonF nope
18:58 bluethundr that comes directly from the AWS console and that's what I have in the config
18:58 XenophonF can't be a user
18:58 XenophonF the iam_profile refers to a role
18:58 bluethundr ohhhh
18:58 bluethundr ok
18:59 XenophonF an instance profile is a role that gets assigned to EC2 instances
18:59 ekristen joined #salt
18:59 XenophonF you can give the role permissions
18:59 bluethundr oh I see
18:59 bluethundr can you create/see those in the AWS UI?
18:59 XenophonF and then from the EC2 instance you can get a temp API key + secret with which you can access AWS APIs
18:59 XenophonF yes
18:59 bluethundr or is that only available to you on the command line
18:59 XenophonF under IAM
18:59 XenophonF roles
18:59 bluethundr oh ok
18:59 bluethundr got it
18:59 alinuxninja joined #salt
18:59 tvinson as i recall a role can't be added to a running instance
19:00 XenophonF it can
19:00 bluethundr excellent thanks
19:00 bluethundr I'll give that a try
19:00 XenophonF at launch time you assign the instance profile that corresponds to the role
19:00 XenophonF but you'd only need to do that if the EC2 instance needs to access the AWS APIs
19:01 XenophonF e.g., my salt master is hosted on an ec2 instance
19:01 tvinson XenophonF: i think we're saying the same thing. you would need to stop the instance to add or change an IAM role.
19:01 XenophonF so i assigned that ec2 instance an instance profile (== role) which has permissions to configure and launch EC2 and RDS instances
19:01 XenophonF no
19:02 tvinson but you can change the permissions on a role
19:02 XenophonF you can't change the IAM role, or at least you couldn't last I checked
19:02 XenophonF i could be wrong
19:02 XenophonF let me check
19:02 flowstate joined #salt
19:03 XenophonF oh i guess from the command line you can create instance profiles separately from roles
19:03 XenophonF i've never needed to do that myself
19:04 XenophonF but yes according to the IAM docs you can only associate an IAM role with an EC2 at launch time
19:05 edrocks joined #salt
19:05 XenophonF sorry IAM instance profile, not role
19:07 bluethundr XenophonF: oh ok
19:08 bluethundr so back to my earlier question
19:08 bluethundr can you see that in the UI? or is that a CLI only phenomenon?
19:08 Guest64559 does anyone know if there is an issue with using file.managed for remote files behind a proxy?  I even try setting the proxy with environ.setenv and i still get connection timed out.
19:09 tellendil joined #salt
19:10 tellendil Hi, I'm looking to add uid mappings for my lxc containers controlled through salt-cloud, but I'm unable to find how to do it, and how I could be able, on creation to give each container another range of ids. Does someone has an idea ?
19:13 bluethundr I was able to get the ARN from the instance profile on the cli.. put that into the config, but I got the same result
19:16 Rkp_ joined #salt
19:16 my10c joined #salt
19:16 Hazelesque joined #salt
19:17 hexa- joined #salt
19:17 peters-tx joined #salt
19:17 Mattch joined #salt
19:17 Antiarc joined #salt
19:18 justyns joined #salt
19:18 rome_390 joined #salt
19:18 stooj joined #salt
19:18 armin joined #salt
19:19 JPT joined #salt
19:19 adongy joined #salt
19:20 chamunks joined #salt
19:21 cebreidian joined #salt
19:21 q1x joined #salt
19:22 XenophonF joined #salt
19:23 Micromus joined #salt
19:23 JPT joined #salt
19:23 borgstrom joined #salt
19:23 dimeshake joined #salt
19:23 stfknd joined #salt
19:23 beardo joined #salt
19:23 sybix joined #salt
19:23 regretio joined #salt
19:23 LostSoul joined #salt
19:23 ws2k3 joined #salt
19:23 cscf joined #salt
19:23 joshin joined #salt
19:23 doublemetres joined #salt
19:23 ]V[ joined #salt
19:23 nebuchadnezzar joined #salt
19:23 jenastar joined #salt
19:23 jxm_ joined #salt
19:23 hoonetorg joined #salt
19:23 deus_ex joined #salt
19:23 om joined #salt
19:23 jpunz joined #salt
19:23 pppingme joined #salt
19:23 riftman joined #salt
19:23 Yoda-BZH joined #salt
19:23 ropes joined #salt
19:23 diegows joined #salt
19:23 fhh joined #salt
19:23 tbrb joined #salt
19:23 elektrix_ joined #salt
19:23 graffic joined #salt
19:23 pocketprotector joined #salt
19:23 shadoxx joined #salt
19:23 mortis joined #salt
19:23 7F1ABVBRI joined #salt
19:23 nihe joined #salt
19:23 upb joined #salt
19:23 bantone joined #salt
19:23 nicholas joined #salt
19:23 StolenToast joined #salt
19:23 hlub joined #salt
19:23 pcdummy joined #salt
19:23 alxchk joined #salt
19:23 Heartsbane joined #salt
19:23 jfindlay joined #salt
19:23 nkuttler joined #salt
19:23 MaZ- joined #salt
19:23 darvon joined #salt
19:23 alvinstarr joined #salt
19:23 LotR joined #salt
19:23 bbradley joined #salt
19:23 rodr1c joined #salt
19:23 phx joined #salt
19:23 ixs joined #salt
19:23 ze- joined #salt
19:23 synapse joined #salt
19:23 gmoro joined #salt
19:23 Tanta joined #salt
19:23 woodtablet joined #salt
19:23 psy0rz_ joined #salt
19:23 t0m0 joined #salt
19:23 RandyT joined #salt
19:23 drags joined #salt
19:23 wangofett joined #salt
19:23 jrose1030 joined #salt
19:23 stotch joined #salt
19:23 scooby2 joined #salt
19:23 Ashald joined #salt
19:23 mTeK joined #salt
19:23 wm-bot4 joined #salt
19:23 jeddi joined #salt
19:23 jgarr joined #salt
19:23 TomJepp joined #salt
19:23 ange joined #salt
19:23 Ludo- joined #salt
19:23 nledez joined #salt
19:23 klocek joined #salt
19:23 jamesog joined #salt
19:23 kalessin joined #salt
19:23 ujjain joined #salt
19:23 Ahlee joined #salt
19:23 toabi joined #salt
19:23 rhand joined #salt
19:23 gerhardqux joined #salt
19:23 JoeJulian joined #salt
19:23 svg joined #salt
19:23 euidzero joined #salt
19:23 keekz joined #salt
19:23 smkelly joined #salt
19:23 AbyssOne joined #salt
19:23 artemz joined #salt
19:23 tercenya joined #salt
19:23 titilambert joined #salt
19:23 LordOfLA joined #salt
19:23 renoirb joined #salt
19:23 cswang joined #salt
19:23 filippos joined #salt
19:23 ronrib joined #salt
19:23 GothAck joined #salt
19:23 SWAT joined #salt
19:23 komputes joined #salt
19:23 zer0def joined #salt
19:23 CeBe1 joined #salt
19:23 ssplatt joined #salt
19:23 impi joined #salt
19:23 tuxx__ joined #salt
19:23 tawm04_ joined #salt
19:23 wryfi joined #salt
19:23 froztbyte joined #salt
19:23 jessexoc joined #salt
19:23 NightMonkey joined #salt
19:23 devster31 joined #salt
19:23 arapaho joined #salt
19:23 flebel joined #salt
19:23 MTecknology joined #salt
19:23 jhujhiti joined #salt
19:23 oliv` joined #salt
19:23 theanalyst joined #salt
19:23 hardwire joined #salt
19:23 douardda joined #salt
19:23 capn_morgan joined #salt
19:23 Garo_ joined #salt
19:23 aitrus joined #salt
19:23 smcquay joined #salt
19:23 edrocks joined #salt
19:23 colegatron joined #salt
19:23 robinsmidsrod joined #salt
19:23 cliluw joined #salt
19:23 badon joined #salt
19:23 jab416171 joined #salt
19:23 skeezix-hf joined #salt
19:23 Lionel_Debroux joined #salt
19:23 guerby joined #salt
19:23 Ouzo_12 joined #salt
19:23 evidence joined #salt
19:23 justanotheruser joined #salt
19:23 netzvieh joined #salt
19:23 alinuxninja joined #salt
19:23 Roelt joined #salt
19:23 mrMute joined #salt
19:23 vadimck joined #salt
19:23 sinh_ joined #salt
19:23 lynxman joined #salt
19:23 robawt joined #salt
19:23 tehsu joined #salt
19:23 Qwazerty2 joined #salt
19:23 kidneb joined #salt
19:23 notCalle joined #salt
19:23 baffle joined #salt
19:23 Vaelatern joined #salt
19:23 TooLmaN joined #salt
19:23 dustywusty joined #salt
19:23 chitown joined #salt
19:23 stopbyte joined #salt
19:23 afics joined #salt
19:23 leev joined #salt
19:23 lazybear joined #salt
19:23 honestly joined #salt
19:23 jesusaur joined #salt
19:23 nshttpd joined #salt
19:23 georgemarshall joined #salt
19:23 codehotter joined #salt
19:23 binocvlar joined #salt
19:23 oeuftete joined #salt
19:23 nidr0x joined #salt
19:23 JohnnyRun joined #salt
19:23 ecdhe joined #salt
19:23 ALLmightySPIFF joined #salt
19:23 armyriad joined #salt
19:23 nicksloan joined #salt
19:23 majuscule joined #salt
19:23 Guest41531 joined #salt
19:23 pfallenop joined #salt
19:23 sjohnsen- joined #salt
19:23 dyasny joined #salt
19:23 egil joined #salt
19:23 GreatSnoopy joined #salt
19:23 Brew joined #salt
19:23 ahammond joined #salt
19:23 hasues joined #salt
19:23 __number5__ joined #salt
19:23 Guest52996 joined #salt
19:23 karlthane joined #salt
19:23 TyrfingMjolnir joined #salt
19:23 ThomasJ joined #salt
19:23 xMopxShell joined #salt
19:23 jerrcs joined #salt
19:23 Zachary_DuBois joined #salt
19:23 Dev0n joined #salt
19:23 boogibugs joined #salt
19:23 UForgotten joined #salt
19:23 davisj_ joined #salt
19:23 izrail joined #salt
19:23 Arendtsen joined #salt
19:23 eseyman joined #salt
19:23 shanemhansen joined #salt
19:23 MajObviousman joined #salt
19:23 harkx joined #salt
19:23 telx joined #salt
19:23 rawzone joined #salt
19:23 TRManderson joined #salt
19:23 d3c4f joined #salt
19:23 jgelens joined #salt
19:23 yidhra joined #salt
19:23 xmj joined #salt
19:23 cmarzullo joined #salt
19:23 bergei joined #salt
19:23 mschiff_ joined #salt
19:23 sknebel joined #salt
19:23 Xevian joined #salt
19:23 systemdave joined #salt
19:23 bstaz joined #salt
19:23 gadams_ joined #salt
19:23 samkottler joined #salt
19:23 notnotpeter joined #salt
19:23 ramblinpeck joined #salt
19:23 whitenoise joined #salt
19:23 corby joined #salt
19:23 GnuLxUsr joined #salt
19:23 Corey joined #salt
19:23 quarcu joined #salt
19:23 sp0097 joined #salt
19:23 alrayyes joined #salt
19:23 mors joined #salt
19:23 perfectsine joined #salt
19:23 voytek_ joined #salt
19:23 cb joined #salt
19:23 tperale joined #salt
19:23 jcristau joined #salt
19:23 sarlalian joined #salt
19:23 etangle joined #salt
19:23 voileux joined #salt
19:23 mrBen2k2k2k joined #salt
19:23 alwaysatthenoc joined #salt
19:23 PalTale joined #salt
19:23 tcolvin joined #salt
19:23 wiqd joined #salt
19:23 scc joined #salt
19:23 tongpu joined #salt
19:23 liviudm joined #salt
19:23 darix joined #salt
19:23 jeblair joined #salt
19:23 MK_FG joined #salt
19:23 hop joined #salt
19:23 ponyofdeath joined #salt
19:23 smakar joined #salt
19:23 OliverMT joined #salt
19:23 feld joined #salt
19:23 shanesveller joined #salt
19:23 BlackBishop joined #salt
19:23 giany joined #salt
19:23 buxy joined #salt
19:23 drybjed joined #salt
19:23 Ryan_Lane joined #salt
19:23 armguy joined #salt
19:23 oyvindmo joined #salt
19:23 misconfig joined #salt
19:23 debian112 joined #salt
19:23 ashmckenzie joined #salt
19:23 LiamMon joined #salt
19:23 wendall911 joined #salt
19:23 subsignal joined #salt
19:23 renaissancedev joined #salt
19:23 mrud_ joined #salt
19:23 lubyou_ joined #salt
19:23 west575 joined #salt
19:23 ajolo joined #salt
19:23 Guest52674 joined #salt
19:23 workthrick joined #salt
19:23 godlike joined #salt
19:23 alex_s joined #salt
19:23 darkalia joined #salt
19:23 eichiro joined #salt
19:23 verdurin joined #salt
19:23 oida joined #salt
19:23 RobertLaptop joined #salt
19:23 arif-ali joined #salt
19:23 Sarphram joined #salt
19:23 mohae joined #salt
19:23 jacksontj joined #salt
19:23 stupidnic joined #salt
19:23 SpX joined #salt
19:23 jY- joined #salt
19:23 yuhlw_ joined #salt
19:23 bdrung_work joined #salt
19:23 McNinja joined #salt
19:23 packeteer joined #salt
19:23 Nebraskka joined #salt
19:23 emid joined #salt
19:23 Ch3LL joined #salt
19:23 Kruge joined #salt
19:23 mage_ joined #salt
19:23 ekristen joined #salt
19:23 davromaniak joined #salt
19:23 ventris joined #salt
19:23 kbaikov joined #salt
19:23 ivanjaros joined #salt
19:23 lionel joined #salt
19:23 Morrolan joined #salt
19:23 SWA joined #salt
19:23 Shirkdog joined #salt
19:23 viq joined #salt
19:23 mirko joined #salt
19:23 hax404 joined #salt
19:23 JPaul joined #salt
19:23 Bryson joined #salt
19:23 MikaT_ joined #salt
19:23 coldbrew- joined #salt
19:23 deei joined #salt
19:23 kevc joined #salt
19:23 skrobul joined #salt
19:23 Sokel joined #salt
19:23 ajv joined #salt
19:23 coldbrewedbrew joined #salt
19:23 Vye joined #salt
19:23 adeschamps joined #salt
19:23 al joined #salt
19:23 zifnab joined #salt
19:23 canci_ joined #salt
19:23 jrklein_ joined #salt
19:23 gtmanfred joined #salt
19:23 patrek_ joined #salt
19:23 coredumb joined #salt
19:23 capri joined #salt
19:23 \ask joined #salt
19:23 rem5 joined #salt
19:23 twork_ joined #salt
19:23 s0undt3ch joined #salt
19:23 pipps joined #salt
19:23 ageorgop joined #salt
19:23 mavhq joined #salt
19:23 babilen joined #salt
19:23 amcorreia joined #salt
19:23 whytewolf joined #salt
19:23 _JZ_ joined #salt
19:23 Mate joined #salt
19:23 rideh joined #salt
19:23 fullstop joined #salt
19:23 Reverend joined #salt
19:23 Jimlad_ joined #salt
19:23 Deliants joined #salt
19:23 dh joined #salt
19:23 pmcg joined #salt
19:23 garphy`aw joined #salt
19:23 FreeSpencer joined #salt
19:23 kevinqui1nyo joined #salt
19:23 klaas joined #salt
19:23 mattp_ joined #salt
19:23 duckfez joined #salt
19:23 Karunamon joined #salt
19:23 chmod666org joined #salt
19:23 Horgix joined #salt
19:23 utahcon joined #salt
19:23 rmc3 joined #salt
19:23 Ssquidly joined #salt
19:23 Patch joined #salt
19:23 snaggleb joined #salt
19:23 KingOfFools joined #salt
19:23 izibi joined #salt
19:23 dunz0r joined #salt
19:23 basepi joined #salt
19:23 tvinson joined #salt
19:23 writtenoff joined #salt
19:23 toanju joined #salt
19:23 fxdgear joined #salt
19:23 Edgan joined #salt
19:23 nethershaw joined #salt
19:23 raspado joined #salt
19:23 bluethundr joined #salt
19:23 numkem joined #salt
19:23 racooper joined #salt
19:23 shalkie joined #salt
19:23 asoc joined #salt
19:23 freelock[m] joined #salt
19:23 cro joined #salt
19:23 hemebond joined #salt
19:23 AvengerMoJo joined #salt
19:23 johtso joined #salt
19:23 Laogeodritt joined #salt
19:23 CheckYourSix joined #salt
19:23 gnord joined #salt
19:23 Aikar joined #salt
19:23 ub1quit33 joined #salt
19:23 kuromagi joined #salt
19:23 dwfreed joined #salt
19:23 esc\ joined #salt
19:23 Sammichmaker joined #salt
19:23 qman__ joined #salt
19:23 Derailed joined #salt
19:23 jnials joined #salt
19:23 agentnoel joined #salt
19:23 twiedenbein joined #salt
19:23 chutzpah joined #salt
19:23 esharpmajor joined #salt
19:23 saltsa joined #salt
19:23 vaelen joined #salt
19:23 Eugene joined #salt
19:23 CustosLimen joined #salt
19:23 xenoxaos joined #salt
19:23 aalmenar joined #salt
19:23 jav joined #salt
19:23 pjs joined #salt
19:23 kossy_ joined #salt
19:23 kylehuff joined #salt
19:23 aarontc_ joined #salt
19:23 khorben joined #salt
19:23 yesimon joined #salt
19:23 briansteffens joined #salt
19:23 c4rc4s joined #salt
19:23 vodik joined #salt
19:23 Llmiseyhaa joined #salt
19:23 saltstackbot joined #salt
19:23 iter joined #salt
19:23 Sketch joined #salt
19:23 ntropy joined #salt
19:23 KingJ joined #salt
19:23 stickmack joined #salt
19:23 cyraxjoe joined #salt
19:23 eightyeight joined #salt
19:23 g3cko joined #salt
19:23 DaveQB joined #salt
19:23 v0rtex joined #salt
19:23 Hipikat joined #salt
19:23 llua joined #salt
19:23 alias joined #salt
19:23 wwalker joined #salt
19:23 aberdine_ joined #salt
19:23 tru_tru joined #salt
19:23 Hydrosine joined #salt
19:23 tuxx_ joined #salt
19:23 rickflare joined #salt
19:23 evilrob joined #salt
19:23 bryguy joined #salt
19:23 carmony joined #salt
19:23 Qlawy joined #salt
19:23 __alex joined #salt
19:23 weylin joined #salt
19:23 Gareth joined #salt
19:23 nikogonzo joined #salt
19:23 iggy joined #salt
19:23 daveleigh joined #salt
19:23 devtea joined #salt
19:23 asyncsrc1 joined #salt
19:23 dober joined #salt
19:23 trent__ joined #salt
19:23 monokrome joined #salt
19:23 andi- joined #salt
19:23 daks joined #salt
19:23 Twiglet joined #salt
19:23 SubOracle joined #salt
19:23 DerCed joined #salt
19:23 unusedPhD joined #salt
19:23 zz_Cidan joined #salt
19:23 watersoul joined #salt
19:23 Valfor joined #salt
19:23 concernedcitizen joined #salt
19:23 colttt joined #salt
19:23 m4rx joined #salt
19:23 bltmiller joined #salt
19:23 descrepes joined #salt
19:23 roock joined #salt
19:23 ksa joined #salt
19:23 Edur joined #salt
19:23 catpig joined #salt
19:23 bastiandg joined #salt
19:23 nonades joined #salt
19:23 fleaz joined #salt
19:23 Kakwa joined #salt
19:23 jcockhren joined #salt
19:23 muep joined #salt
19:23 pcn joined #salt
19:23 tooth joined #salt
19:23 LeProvokateur joined #salt
19:23 cmek_ joined #salt
19:23 pprkut joined #salt
19:23 akw joined #salt
19:23 dandelo joined #salt
19:23 inire joined #salt
19:23 64MAAW279 joined #salt
19:23 APLU joined #salt
19:23 Hazelesque joined #salt
19:23 scooby2 joined #salt
19:23 theanalyst joined #salt
19:23 hacks joined #salt
19:23 Kelsar joined #salt
19:23 whytewolf okay, Freenode, get your servers together
19:23 supermike_ joined #salt
19:23 adongy joined #salt
19:23 armin joined #salt
19:23 the_lalelu joined #salt
19:23 raeven joined #salt
19:23 jor joined #salt
19:23 dijit joined #salt
19:24 Cidan joined #salt
19:24 eset joined #salt
19:24 eset joined #salt
19:24 hacks joined #salt
19:24 supermike_ joined #salt
19:24 Valfor joined #salt
19:24 concernedcitizen joined #salt
19:24 djinni` joined #salt
19:24 mrueg joined #salt
19:24 Trauma joined #salt
19:24 jerryc joined #salt
19:24 daemonkeeper joined #salt
19:24 sagerdearia joined #salt
19:25 sjorge joined #salt
19:25 M-liberdiko joined #salt
19:25 ekkelett joined #salt
19:27 voxxit joined #salt
19:29 raspado what is a good way to decrypt a private key on a remote host?
19:29 alexlist joined #salt
19:29 cscf raspado, you want only the minion to know the key?
19:29 Veers joined #salt
19:30 CaptTofu joined #salt
19:30 MulX joined #salt
19:30 hasues left #salt
19:30 raspado cscf: doesnt have to be, i have a private ssh key that i need to deploy out to the minions on /home/user/.ssh/id_rsa but i have to commit the key to the repo and i dont want to commit a priv key to the repo
19:31 cscf raspado, oh.  Use the gpg renderer to have the salt master decrypt it during state.apply
19:31 whytewolf raspado: https://docs.saltstack.com/en/latest/ref/renderers/all/salt.renderers.gpg.html
19:31 raspado kk thx
19:32 keimlink joined #salt
19:32 flowstate joined #salt
19:32 _W_ joined #salt
19:33 m0nky joined #salt
19:33 deus_ex joined #salt
19:33 linovia joined #salt
19:34 hillna joined #salt
19:35 czchen joined #salt
19:37 mikepea joined #salt
19:37 bluethundr whytewolf: any ideas?
19:37 bluethundr still getting auth failures
19:38 whytewolf bluethundr: sorry, I havn't touched AWS since 2012.
19:38 bluethundr wow.. ok :)
19:38 jgarr is there a known supported version of salt for el 6.4? I currently have salt-minion-2016.3.2-1.el6.noarch but it crashes on startup
19:38 bluethundr no problemo
19:40 subsignal joined #salt
19:41 tyler-baker joined #salt
19:41 whytewolf 6.4? wow didn't know anyone still ran that. after all it's EUS cycle ended in 2015.
19:42 mors I think RHEL 6.4 doesn't have updated enough python libraries for salt
19:42 druonysus joined #salt
19:43 Sketch any el 6.x release of salt will _probably_ work on 6.4.
19:43 Sketch the salt repos should have all the deps, though?
19:43 edrocks joined #salt
19:43 mors I didn't think salt packaged the python libs
19:43 jgarr ya, I have a handful of systems that are not easy to replace that are still 6.4
19:44 Sketch well, they package some of them.  i guess they may not package base-os libs
19:44 Sketch https://repo.saltstack.com/yum/redhat/
19:44 Sketch they do have a 6.4 dir, though it might just be a symlink to 6
19:44 jgarr that's my guess. It has the same releases
19:45 Sketch anyway, i would try it and see if it works.  at worst, it will probably just fail to install
19:45 jgarr ahh, here's a rhel6 release https://repo.saltstack.com/yum/redhat/6.4/x86_64/archive/rhel6/
19:45 froztbyte joined #salt
19:45 jgarr looks like it's just 2015.8.1
19:46 whytewolf well worse is it "works" enough to flood the filesystem
19:46 whytewolf https://repo.saltstack.com/yum/redhat/6.4/x86_64/2016.3/
19:46 mors anyone ever try to use this: https://clinta.github.io/Salt-User-Management/
19:47 Sketch whytewolf: yeah.  i was going to say it is possible that it will install but not work too, if there is some missing dep in the system libs.
19:47 subsignal joined #salt
19:48 Sketch but usually packagers are pretty good about requiring specific versions in cases like that
19:48 Sketch though maybe not with salt? i dunno ;)
19:48 * whytewolf shrugs
19:48 whytewolf been using centos 7.2+ for too long
19:48 Sketch we still have a few 6.5 systems, but we haven't updated salt on them as they're on the way out
19:49 mors one would assume that package maintainers would keep up with dependeencies, even if outside local repos
19:49 mors but that isn't always the case.
19:49 lkannan joined #salt
19:49 whytewolf well 6.5 also is out of the EUS. only 6.6 and 6.7 still have any EUS time left
19:50 whytewolf mors: problem is it is bad juju to overright system dependencies
19:50 mors whytewolf: of course it is. especially where RHEL is concerned.
19:51 mors that's the price of running a deprecated OS
19:51 sjorge joined #salt
19:58 shawnbutts joined #salt
20:00 felskrone joined #salt
20:00 gazarsgo joined #salt
20:00 kutenai joined #salt
20:00 bakins joined #salt
20:01 simonmcc joined #salt
20:01 phtes joined #salt
20:01 djural joined #salt
20:01 SteamWells joined #salt
20:02 aljosa joined #salt
20:02 nahkiss joined #salt
20:04 copelco joined #salt
20:04 johtso joined #salt
20:04 bVector joined #salt
20:06 ToeSnacks joined #salt
20:06 jgarr I'm guessing 2015.8.x can't talk to 2016.3.x master
20:07 Awesomecase joined #salt
20:07 mihait joined #salt
20:07 jgarr the minion starts now (version salt-minion-2015.8.12-1.el6.noarch) but on the master I don't see a key for it and it doesn't test.ping
20:07 bbhoss joined #salt
20:08 Xenophon1 joined #salt
20:10 jgarr last thing I see in the minion output (testing by running in the forground) is [TRACE   ] Inserted key into loop_instance_map id 44972080 for key ('/etc/salt/pki/minion', 'minion1', 'tcp://172.30.196.88:4506', 'clear') and process 13749
20:10 Sketch jgarr: it should be able to.
20:10 jgarr the tcp ip is my master
20:10 Sketch i have 2016.3.x master and some 2015.5.x clients
20:10 Xenophon1 joined #salt
20:10 jgarr but salt-key --list all | grep minion1 has no results
20:11 Sketch (though they existed before the master was updated to 2016.3)
20:13 imanc joined #salt
20:13 monrad joined #salt
20:13 antonw joined #salt
20:13 munhitsu_ joined #salt
20:13 futuredale[uf] joined #salt
20:14 mors salt-key -L?
20:15 mattl joined #salt
20:15 lilvim joined #salt
20:16 moy joined #salt
20:16 bluenemo joined #salt
20:18 doriftoshoes joined #salt
20:18 bmcorser joined #salt
20:18 JamieH joined #salt
20:18 pipps joined #salt
20:18 WKNiGHT joined #salt
20:18 mors jgarr: in my environment, sometimes it took restarting the minion after first initial start in order for the key request to populate
20:19 abele joined #salt
20:20 shanesveller joined #salt
20:20 Freek joined #salt
20:20 bltmiller joined #salt
20:21 mors I'm sure you made sure both 4505 and 4506 are open on the firewall...
20:21 twodayslate joined #salt
20:23 LostSoul joined #salt
20:28 jgarr yes, I have lots of other minions that are working
20:28 jgarr it's just these old boxes
20:29 tvinson jgarr: do you see connectivity in a netstat on either side?
20:29 jgarr I also don't see a key in /etc/salt/pki/master/minions
20:30 pipps joined #salt
20:31 jgarr mors: I tried restarting a few times already playing with flags. I also deleted /etc/salt/pki to have keys regenerated
20:31 subsignal joined #salt
20:31 ajw0100 joined #salt
20:31 jgarr tvinson: yes tcp        0      0 master:4506 minion1:42096 ESTABLISHED
20:31 ageorgop joined #salt
20:34 mors does the minion have the pki?
20:34 mors ie /etc/salt/pki/minion.pub and /etc/salt/pki/minion.pem?
20:34 mors err /etc/salt/pki/minion/<above files)
20:34 pipps99 joined #salt
20:35 mors and does dns for the master work/specified correctly in /etc/salt/minion?
20:35 johtso joined #salt
20:38 jgarr mors: yes I see them there but I don't see a minion_master.pub which I usually see on the minions
20:38 jgarr maybe that's because this is 2015.8.12?
20:39 tvinson jgarr: what zeromq and pyzmq versions do you have on your master and this minion? does that differ from minions that are working?
20:39 mors you don't get that until you accept the key on the master
20:41 jgarr problem is the key isn't showing up to accept
20:42 keimlink joined #salt
20:42 tvinson jgarr: could the minion id have changed?
20:43 jgarr tvinson: zeromq3-3.2.5-1.el6.x86_64 (.el7 on master) master and minion both don't have pyzmq
20:44 tvinson jgarr: package on rhel would be python-zmq
20:45 flowstate joined #salt
20:45 SaltyMcSaltpants joined #salt
20:46 jgarr tvinson: those are pretty different python-zmq-2.2.0.1-1.el6.x86_64 and python-zmq-14.3.1-1.el7.x86_64
20:46 tvinson jgarr: also what do you get out of salt-call test.versions_report on the master. i would think you maybe have zmq4 installed alongside 3?
20:46 SaltyMcSaltpants Hey, do custom modules get executed on the master, minion, or both?
20:47 whytewolf SaltyMcSaltpants: minion
20:47 jgarr tvinson: https://gist.github.com/anonymous/8868580797fc85ae813bcdd99a9d4a47
20:48 SaltyMcSaltpants whytewolf: sweet.  Also, fun nick.  You roll 10s?
20:48 GreatSnoopy joined #salt
20:48 jgarr tvinson: this minion doesn't have zmq4
20:49 whytewolf SaltyMcSaltpants: lol, not anymore. also i had this nick before vampire had their masquerade
20:49 tvinson jgarr: are you able to upgrade python-zmq on the minion? that might help.
20:49 tkharju joined #salt
20:49 SaltyMcSaltpants whytewolf: So the custom pillar will get rendered on the master and transmitted to the minion, but a custom module will get distributed to the minion and executed there as well?
20:49 tvinson and/or check against a working minion
20:50 whytewolf SaltyMcSaltpants: by custom pillar i guess you mean external pillar
20:50 whitenoise_ joined #salt
20:50 armonge joined #salt
20:51 SaltyMcSaltpants whytewolf: Yea.  I write my own code in python to generate a pillar at highstate.  The result of that gets pushed to the minion like any other pillar.  A custom module, though, will get pushed to a minion through a sync and executed locally on the minion?
20:51 jgarr tvinson: that was it. I updated and the key went through right away
20:51 SaltyMcSaltpants Sorry to restate everything.  Just trying to make sure I've got it down for myself and coworkers.
20:51 whytewolf SaltyMcSaltpants: yes.
20:52 SaltyMcSaltpants whytewolf: woot.  Thanks.
20:52 whytewolf SaltyMcSaltpants: use saltutil.sync_all or sync_modules to sync those modules to the minion
20:53 sjorge joined #salt
20:54 tkharju joined #salt
20:54 voxpop joined #salt
20:55 kuromagi joined #salt
20:55 bryguy joined #salt
20:57 Vye joined #salt
21:05 jgarr tvinson: mors just FYI, el7 6.4 can run the latest 2016.3.2 so long as python-zmq is updated. Looks like that was my problem all along
21:06 mors nice, glad you have it working
21:06 evilrob joined #salt
21:08 Sketch python-zmq is in the salt repo
21:09 Sketch we've actually had issues as a result of that...because it's also in epel.
21:09 felskrone joined #salt
21:09 NightMonkey joined #salt
21:10 Sketch so if one of our local repo mirrors gets updated and not the other, it can cause dependency issues.
21:11 Nei joined #salt
21:21 the_lalelu joined #salt
21:22 bluenemo joined #salt
21:22 cliluw joined #salt
21:22 ajw0100 joined #salt
21:22 MrCornett joined #salt
21:23 MrCornett Hello, I was hoping to get some help with the salt.state commands.  background:  I'm trying to apply a highstate and getting an error -     Warnings: 'arg' is an invalid keyword argument for 'salt.state'. If you were               trying to pass additional data to be used in a template context,               please populate 'context' with 'key: value' pairs. Your approach               will work until Salt Carbon is out. Please update
21:24 NightMonkey joined #salt
21:24 whytewolf MrCornett: please post a gist of what you currently have please
21:24 MrCornett https://gist.github.com/digitaldelirium/f2c58d78b0b0c2d60bff3d264fdd0851
21:24 MrCornett I seem to be missing an argument
21:26 whytewolf ok, wow. lots wrong here. do you have a start file called chocolatey/installed.sls?
21:26 whytewolf s/start/state
21:26 whytewolf salt.state is for running state files
21:26 whytewolf not state modules
21:26 MrCornett that's a built-in module
21:26 whytewolf again.... salt.state is for running state files. like the way highstate does
21:27 MrCornett I've been able to get it to work using module.run chocolatey.install, but that's not a state module, it's an execution module.
21:27 whytewolf ...
21:29 ilbot3 joined #salt
21:29 Topic for #salt is now Welcome to #salt! | Latest Versions: 2015.8.12, 2016.3.3 | Support: https://www.saltstack.com/support/ | Logs: http://irclog.perlgeek.de/salt/ | Paste: https://gist.github.com/ (please don't multiline paste into channel) | See also: #salt-devel, #salt-offtopic | Ask with patience as we are volunteers and may not have immediate answers
21:29 Cidan joined #salt
21:30 whytewolf MrCornett: where did you see to use that form for salt.state?
21:30 simmel joined #salt
21:30 whytewolf cause that is the salt.function layout
21:30 MrCornett it was a WAG from salt.function and module.run calls I'd seen elsewhere.  Since calling the method directly was blowing up, I've been trying derivatives.
21:31 whytewolf salt.function is used with exacution modules
21:31 drawsmcgraw joined #salt
21:32 whytewolf MrCornett: take a look at the examples here. keep in mind ceph is a state file that is elsewhere. https://docs.saltstack.com/en/latest/topics/orchestrate/orchestrate_runner.html#more-complex-orchestration
21:32 jnials_ joined #salt
21:32 abele joined #salt
21:33 whytewolf also the documentation for salt.state https://docs.saltstack.com/en/latest/ref/states/all/salt.states.saltmod.html#salt.states.saltmod.state
21:33 twodayslate joined #salt
21:33 MrCornett Thank you, I was looking for that documentation but apparently hit all around it
21:34 Rkp joined #salt
21:34 MrCornett I think that answers my questions, thanks!
21:34 doriftoshoes joined #salt
21:35 munhitsu_ joined #salt
21:35 SteamWells joined #salt
21:36 kutenai joined #salt
21:37 jab416171 joined #salt
21:38 lovecraftian joined #salt
21:38 ajw0100 joined #salt
21:38 mattl joined #salt
21:45 cyborg-one joined #salt
21:46 tyler-baker joined #salt
21:56 Armadillo joined #salt
21:57 lorengordon joined #salt
21:58 kiorky joined #salt
21:58 quasiben joined #salt
21:59 panderson61 joined #salt
22:00 Jarus joined #salt
22:01 panderson61 Hello, I'm trying to use peer communication to get the load average of my application servers. This works fine on the cli:
22:01 panderson61 sudo salt-call --out json publish.publish 'G@pics_env:avt and G@pics_type:tomcat' status.loadavg expr_form='compound' | jq '.[] | .[] | .["1-min"]'
22:01 panderson61 But I'm having trouble writing this in python.
22:02 panderson61 !/usr/bin/env python import salt.client salt_call = salt.client.Caller() salt_call.function('publish.publish',                    'ip-10-200-30-70.us-west-2.compute.internal',                    'status.loadavg',                    'logger "publish.publish success"')
22:03 panderson61 How do I express a compound target?
22:05 adongy joined #salt
22:05 kevinqui1nyo i think you have to pass 'tgt_type': 'compound' as a kwarg panderson61
22:05 raspado I have multiple .sls files in a directory system_configuration/users  where in users directory there is user1.sls user2.sls user3.sls
22:06 raspado how can I call each of those state files from a state file?
22:06 raspado i tried system_configuration.users.user1 but that didnt seem to work
22:07 panderson61 thanks for the hint kevinquilnyo
22:12 subsignal joined #salt
22:12 subsigna_ joined #salt
22:15 subsignal joined #salt
22:19 ronnix joined #salt
22:22 onlyanegg Can I get rolling logs for my orchestrate runner?
22:26 NightMonkey joined #salt
22:29 scoates joined #salt
22:29 flowstate joined #salt
22:32 nidr0x joined #salt
22:39 pipps joined #salt
22:47 nidr0x joined #salt
22:49 nidr0x joined #salt
22:49 druonysus joined #salt
22:51 nidr0x joined #salt
22:54 nidr0x joined #salt
23:03 lilvim joined #salt
23:06 writtenoff joined #salt
23:10 pipps joined #salt
23:16 ssplatt joined #salt
23:19 N-Mi joined #salt
23:19 N-Mi joined #salt
23:21 tapoxi joined #salt
23:29 flowstate joined #salt
23:30 ajw0100 joined #salt
23:49 dendazen joined #salt
23:50 felskrone joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary