Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2017-06-26

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:20 asyncsec joined #salt
00:21 nona joined #salt
00:34 XenophonF drewbert: IIUC that's an artifact of how the 0mq comms bus works
00:49 fritz09 joined #salt
01:01 Bock joined #salt
01:05 Bock joined #salt
01:24 iggy because the master doesn't actually send commands to the minions... it publishes on the 0mq bus and the minions pick them up
01:26 iggy the transport layers aren't that bad... we've got thousands of minions connecting from 100+ locations all over the world (some on some seriously shitty networks) all with little to no problem
01:26 iggy you should talk to your provider instead of blaming salt
01:26 XenophonF have you tweaked anything in the master or minion configs to improve reliablity?
01:27 XenophonF b/c i see non-responsive minions for stuff running near the master in AWS
01:27 XenophonF i dunno if it's because the states i'm running are complicated, or the master is configured wrong or what
01:28 XenophonF i usually set a timeout on the CLI of 300 or 900 seconds, and everything runs perfectly
01:29 iggy turned off mine (it was loading some of the masters pretty hard), we've had to come up with some local caching mechanisms for pillar data, and some other things that most people probably don't hit at the scale of <1000 minions
01:30 iggy I'm not saying it's perfect, but if there are people at the scale we are at (and larger) that are fine with 0mq and you're having problems with it, it could be something other than salt's fault
01:34 XenophonF yup
01:34 dxiri joined #salt
01:35 XenophonF on average, how many states does a minion execute during a highstate?
01:35 XenophonF (if you don't mind me asking)
01:35 iggy that's hard to say... we have ~100 server types
01:36 iggy I know the ones I'm responsible for are ~150 and ~500
01:37 XenophonF thanks - good to know that i'm in about the same range
01:37 iggy we also have different schedules for different server types... some are hourly, some are daily, and anywhere inbetween
01:38 MTecknology $client has 300+ states running on every server
01:38 XenophonF you're constantly running highstate jobs on those servers?
01:39 MTecknology heheheh....
01:39 MTecknology running a highstate carries a good chance of breaking things
01:48 ilbot3 joined #salt
01:48 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
01:57 dxiri_ joined #salt
02:16 patrek joined #salt
02:17 onlyanegg joined #salt
02:26 dxiri joined #salt
02:32 nicksloan joined #salt
02:35 CEH joined #salt
02:46 JPT_ joined #salt
02:48 dxiri joined #salt
02:49 cswang joined #salt
02:56 dxiri joined #salt
03:00 coldbrewedbrew joined #salt
03:00 coldbrewedbrew joined #salt
03:02 zerocoolback joined #salt
03:03 scarcry joined #salt
03:21 donmichelangelo joined #salt
03:34 tobstone joined #salt
03:41 onlyanegg joined #salt
03:45 patrek joined #salt
03:50 dxiri joined #salt
03:56 evle joined #salt
04:06 evle2 joined #salt
04:22 ntropy MTecknology: if you use salt for configuration management, then you kinda have to highstate frequently, otherwise your changes never converge and so what's the point?
04:24 ntropy we have people averse to change at $work sadly, so we don't highstate regularly, the result being that we can't be sure what state things are in (and things i mean >2k servers)
04:25 coredumb I highstate every 15mn
04:26 coredumb migrating from cfengine where I was doing highstate equivalent every 5mn
04:34 MTecknology At home, I have automated highstates that run nightly and others that run on git push
04:42 Diaoul joined #salt
04:42 MTecknology I figure anything more frequent than that is just silly because nothing will have changed
04:43 MTecknology heck... I consider it alert-worthy if any changes are applied in the nightly highstate
04:45 ntropy highstate frequency depends on your use of salt i guess, we have a large repo to which several teams contribute
04:45 ntropy collectively its several changes per hour
04:46 ntropy as far as highstating on git push, do you just highstate all of your nodes or do you have a nice way of highstating only the nodes that the change applies to somehow?
04:56 preludedrew joined #salt
05:01 MTecknology yes
05:04 dxiri joined #salt
06:06 MTecknology file.managed should just copy the source no matter what, ya? even if it's just a symlink?
06:08 colttt joined #salt
06:09 MTecknology oh... follow_symlinks
06:13 MTecknology nope, that's not the problem...
06:14 patrek joined #salt
06:18 felskrone joined #salt
06:18 Zachary_DuBois joined #salt
06:18 LeProvokateur joined #salt
06:37 yuhl joined #salt
06:39 Ricardo1000 joined #salt
06:42 CEH joined #salt
06:51 Guest73 joined #salt
06:52 xet7 joined #salt
06:53 aldevar joined #salt
06:56 MTecknology I /think/ this is a bug in file.get_managed. file.source_list seems to be returning that a file exists and has no hash, which makes perfect sense.
06:57 zulutango joined #salt
07:05 dxiri joined #salt
07:19 pbandark joined #salt
07:23 ronnix joined #salt
07:24 EthPyth joined #salt
07:29 toanju joined #salt
07:44 losh joined #salt
07:46 fracklen joined #salt
08:02 ilbot3 joined #salt
08:02 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
08:03 jhauser joined #salt
08:04 darioleidi joined #salt
08:04 cmichel joined #salt
08:04 nku joined #salt
08:07 dxiri joined #salt
08:25 fracklen joined #salt
08:29 Mattch joined #salt
08:38 CEH joined #salt
08:44 ronnix joined #salt
08:48 cablekev1n joined #salt
08:53 JohnnyRun joined #salt
09:00 usernkey joined #salt
09:02 q1x joined #salt
09:16 yuhl______ joined #salt
09:21 jeddi joined #salt
09:26 pbandark1 joined #salt
09:35 CEH joined #salt
09:41 CEH joined #salt
09:48 benner joined #salt
09:52 CEH joined #salt
09:59 Hybrid joined #salt
10:00 LeProvokateur joined #salt
10:02 fracklen joined #salt
10:11 Praematura joined #salt
10:14 Naresh joined #salt
10:16 fracklen joined #salt
10:19 rgrundstrom joined #salt
10:19 rgrundstrom Good afternoon everyone.
10:35 CEH joined #salt
10:36 EthPyth joined #salt
10:47 cyborg-one joined #salt
10:51 riftman joined #salt
10:52 nf joined #salt
15:07 ilbot3 joined #salt
15:07 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
15:08 babilen mikea: Right :)
15:08 mikea oh I see it
15:08 babilen You found it?
15:08 mikea yeah
15:08 mikea 2014.7? that's new? =p
15:08 jauz I want 2017.x!
15:09 babilen Well done .. I find that particular one liner particularly tricky to search for and typically just grep the source :)
15:09 babilen jauz: I would like to have 2023.5 now .. think of all the progress!
15:09 PatrolDoom joined #salt
15:14 noobiedubie So here is everything nice and organized https://paste.debian.net/973396
15:15 noobiedubie so the same variable that works for file.directory fails on acl.present with an error
15:24 onlyanegg joined #salt
15:25 dxiri joined #salt
15:26 babilen noobiedubie: I'd remove it from the state ID and use something like "|yaml_encode" in the name argument
15:28 babilen But then .. spaces have no place in filenames ;)
15:29 blu_ joined #salt
15:33 carlwgeorge gtmanfred: FYI, RHEL7's tornado is getting updated to 4.2.1 https://bugzilla.redhat.com/show_bug.cgi?id=1158617
15:39 censorshipwreck joined #salt
15:41 woodtablet joined #salt
15:41 dxiri joined #salt
15:44 gtmanfred carlwgeorge: noted, thanks
15:44 gtmanfred Ugh, i don't want to be back at work...
15:48 woodtablet lol
15:48 noobiedubie joined #salt
15:48 woodtablet @gtmanfred welcome back
15:48 woodtablet =D
15:50 noobiedubie babilen tried using path|yaml_encode with the same results
15:50 noobiedubie file.directory works but not acl.present
15:51 babilen Is it drinking g&t or what is happening?
15:52 gtmanfred thanks!
15:53 CEH joined #salt
15:54 noobiedubie getting the same key error
15:55 dxiri joined #salt
15:55 nich0s joined #salt
15:56 XenophonF /join #apache
15:56 XenophonF er sorry
15:56 woodtablet =D
15:56 noobiedubie lol
15:57 XenophonF it's #httpd anyway :-D
16:00 Guest73 joined #salt
16:02 Praematura joined #salt
16:05 edrocks joined #salt
16:06 asyncsec joined #salt
16:07 seanz joined #salt
16:08 noobiedubie anybody have a working syntax for acl pathnames with spaces?
16:11 cwandrews joined #salt
16:12 dxiri joined #salt
16:13 noobiedubie so i think i found the issue
16:15 cwandrews_ joined #salt
16:18 AvengerMoJo joined #salt
16:20 freelock so my docker states no longer seem to authenticate to our private docker registry
16:20 thinkt4n_ joined #salt
16:21 freelock I have a yaml block in the pillar, but it's not seeming to work... did something change with the docker authentication?
16:22 * freelock sent a long message: freelock_2017-06-26_16:22:44.txt <https://matrix.org/_matrix/media/v1/download/matrix.org/SXiuARaSieSQuvTznhnLrfRz>
16:23 Laogeodritt joined #salt
16:24 jauz Have you tried "hub" instead of the URL?
16:24 godlike joined #salt
16:24 godlike joined #salt
16:26 tbrb joined #salt
16:27 noobiedubie seems to be a problem with the way name is being passed to the getfacl command
16:27 freelock Hub? as in the main docker hub?
16:28 noobiedubie name is not being escaped when passed to getfacl which linux_acl.py uses as a key in a dictionary that it stores it in
16:30 freelock so change to `"docker.privateregistry.com":` ?
16:31 jauz Yes, it looks like the docs suggest you can use hub in place of the URL as of some newer versions of Salt.
16:31 jauz https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.dockerng.html
16:32 nicksloan joined #salt
16:36 rebbdohr joined #salt
16:37 tobstone joined #salt
16:38 freelock we run our own registry though, we're not using the docker hub
16:39 freelock I am seeing examples there that specify https://registry-url/v1/: ... but I think we had trouble with that format previously... guess I'll try that now, maybe that's the change?
16:41 major joined #salt
16:43 freelock hmm
16:44 freelock >Note
16:44 freelock > For Salt releases before 2016.3.7 and 2016.11.4, dockerng.login is not available. Instead, Salt will try to authenticate using each of your configured registries for each push/pull, behavior which is not correct and has been resolved in newer releases.
16:44 freelock so it looks like that might be what has changed -- I don't see a state for dockerng.login, only a module command
16:45 dxiri joined #salt
16:45 freelock and it now no longer automatically authenticates against a registry before docker.image_present ... it works if I manually go onto the host and `docker login`, but I don't want to have to do that on every host...
16:47 rebbdohr joined #salt
16:52 fracklen joined #salt
16:55 rebbdohr joined #salt
16:55 tiwula joined #salt
16:55 Heartsbane joined #salt
16:55 Heartsbane joined #salt
17:03 dxiri joined #salt
17:04 cwandrews joined #salt
17:08 yuhl______ joined #salt
17:08 Lionel_Debroux_ joined #salt
17:11 MTecknology What was the magical way to match a glob in jinja?
17:12 whytewolf https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.match.html <=- that?
17:12 jauz https://groups.google.com/forum/#!topic/salt-users/2vu0TJ1BjF8 <- Maybe this too?
17:12 rebbdohr joined #salt
17:14 impi joined #salt
17:16 MTecknology yup, thanks!
17:18 rgrundstrom Having so much fun working with salt that time flies.... I need to stop for today. Have a great evening everyone.
17:19 debian112 joined #salt
17:20 jauz Salt is addicting!
17:20 rgrundstrom Indeed.
17:21 rgrundstrom Been working with it for 3 months now... Making great progress :)
17:21 whytewolf bathSalts of the config manegment world
17:21 MTecknology lol
17:21 jauz https://s-media-cache-ak0.pinimg.com/originals/ff/6d/46/ff6d466c22fcbc05ae073d568a7b2f92.jpg
17:22 whytewolf it is adicting and hey you might eat a face in a blind rage someday
17:22 asyncsec joined #salt
17:22 MTecknology oh.... I can't use match :(
17:22 rebbdohr joined #salt
17:22 MTecknology I'm trying to do things in the pillar context
17:23 rgrundstrom Well its making things easier on the administration team. We had a semi working puppet before that was horrible and broken. Now we have a clean working salt for all OS distros we are running. Managing everything from users to services and work flawless.
17:23 * rgrundstrom wont settle for anything less then perfect.
17:24 jauz Salt sometimes takes some wrangling but it's definitely capable. :)
17:24 whytewolf MTecknology: oh fun. with out match true globs are kind of out.
17:24 rgrundstrom Only problem i had to get it working was on Debian 6... Its just simply to old.
17:24 dxiri_ joined #salt
17:25 rgrundstrom New task is to replace all old Debian 6 server with brand new installations :)
17:25 MTecknology whytewolf: it's /possible/ that I can still use salt.match.grains('id:foo'), buuuuuut..... that's only if the master will use the minion's id. If it uses the master ID, it's out and I get to do if foo.startswith() and foo.endswith()
17:26 whytewolf it should use the minions it
17:26 rgrundstrom Well have a great evning, im off.
17:26 whytewolf id
17:26 whytewolf have fun :)
17:26 MTecknology I suppose it'd make the most sense so that's probably how it was written so I should be as happy as a clam that doesn't have a starfish trying to eat it
17:28 whytewolf it is one of the reasons that minion_id is passed to pillar. so that when rendering it knows hey this is for this minion run all the commands as close as you can against that minion
17:28 MTecknology :D
17:28 * MTecknology hugs whytewolf
17:29 nicksloan joined #salt
17:29 whytewolf things like mine kind of get blown up. and well pillar cause it thinks that is blank.
17:29 whytewolf i think for some modules it actually asks the minion to run them
17:29 whytewolf I'm not sure though pillar code is one of those things i dare not venture into
17:30 whytewolf it is a magic black box to me
17:32 coredumb ext_pillar isn't that bad though :)
17:33 whytewolf no, ext_pillar is pretty decent. and is where i get most of my ideas about how normal pillar works
17:34 coredumb just this gpg stacking that doesn't work
17:35 coredumb should take a look at what's needed see if it's not so bad
17:37 beardo joined #salt
17:40 AvengerMoJo joined #salt
17:43 rebbdohr joined #salt
17:44 whytewolf gpg can be a pain to get going but once going it isn't that bad.
17:46 edrocks joined #salt
17:47 MTecknology imo, it's pretty well documented at this point
17:48 whytewolf yes it is very well documented. doens't make it less of a pain to setup ;)
17:48 jauz Standing on the shoulders of those before me = How I feel configuring Salt functionality, most of the time.
17:50 nkuttler pain? oh well, get it to work with a syndic setup..
17:51 MTecknology why would adding syndics make it difficult?
17:51 whytewolf because key manegment is hard?
17:52 whytewolf [i am just kidding]
17:56 JPT joined #salt
17:56 dxiri joined #salt
17:57 amy joined #salt
18:00 MTecknology Once you have a master, wouldn't you deploy gpg data to syndic masters using salt?
18:01 MTecknology ... wouldn't you deploy syndic masters using salt?
18:02 whytewolf i would. hell would setup the main master with salt also
18:03 rebbdohr joined #salt
18:04 jdipierro joined #salt
18:08 MTecknology whytewolf: https://michael.lustfield.net/misc/ground-up-infrastructure
18:09 hashwagon joined #salt
18:09 MTecknology first a bare-minimum salt master, then deploy a git server w/ salt, then populate w/ repos, then move salt's configs from /srv/ to gitfs and delete /srv
18:09 tiwula joined #salt
18:10 whytewolf yeap. [althought since i have free github i skip the setup git server part]
18:10 PatrolDoom joined #salt
18:10 cwandrews joined #salt
18:10 noobiedubie joined #salt
18:14 whytewolf so. looking back i would still love to know why github gave me a free account. the reason in the email they tell me is for academic programs and hackathons. i had participated in neither when they gave me the update
18:15 dxiri joined #salt
18:15 absolutejam I hope they post he videos from salt conf quickly
18:16 absolutejam I've almost finished all the past salt conf videos
18:16 whytewolf saltconf isn't until oct
18:16 absolutejam When it's actually been I mean ????
18:16 whytewolf sooo. you have a bit of a wait :P
18:16 absolutejam You got a random GitHub?
18:17 absolutejam Are there any limits?
18:17 whytewolf nope. free unlimited private repos
18:17 absolutejam Nice
18:17 absolutejam I'm a big GitLab user/fan but free is free!
18:17 whytewolf [it started with three, but when they gave normal users unlimited i got unlimited as well]
18:17 absolutejam Damn, nice
18:18 Cottser joined #salt
18:18 absolutejam I sync my stuff to GitHub just for discoverabilit
18:18 absolutejam y
18:18 whytewolf not a fan of gitlab. tried setting it up when i worked at $paper. but just was so unstable back then.
18:19 cwandrews_ joined #salt
18:19 absolutejam But GitHub really does have a massive user base
18:19 whytewolf it might be better now
18:19 absolutejam I use the hosted one I mean
18:19 absolutejam Never had any issues but I mostly just use it for stuff without collab
18:19 dxiri joined #salt
18:19 whytewolf i used to use stash before it became bitbucket. but then github gave me free and keeping that cost just didn't make sense
18:19 absolutejam I like the fact you can split things into different groups (namespaces)
18:21 absolutejam Oh and GitLab CI is great! I'm no developer but I use it to auto build containers and im sure I could think of a few more uses
18:22 rebbdohr joined #salt
18:23 Shirkdog joined #salt
18:23 absolutejam I really need to get a syndic set up
18:23 absolutejam I keep glancing at the docs then avoiding it
18:23 absolutejam Got a master that I went under another master
18:24 absolutejam For centralised ultimate power
18:24 tapoxi absolutejam: have you tried other CI tools? I'm using an old version of teamcity and thinking of migrating to gitlab or jenkins
18:24 absolutejam I literally only use it to build Docker containers automatically atm
18:24 tapoxi ahh ok
18:25 absolutejam I'm a Windows sysadmin so don't really have much need for CI kinda toolsets right now
18:25 tapoxi how is salt on windows?
18:25 absolutejam Been flawless so far
18:26 MTecknology absolutejam: gitlab isn't really all that free
18:26 cwandrews joined #salt
18:26 shanth didn't know that salt had certifications
18:26 tapoxi do they have developer support?
18:26 shanth better than sccm absolutejam?
18:27 tapoxi I've emailed sales and it fell into a black hole...
18:27 snarfy^ joined #salt
18:27 absolutejam Define free MTecknology
18:27 absolutejam I use both but prefer salt
18:29 absolutejam I've fantasised with the possibility of replacing SCCM with it
18:29 absolutejam One day
18:29 cwandrews_ joined #salt
18:30 MTecknology absolutejam: it's a long rant, I prefer gitea
18:31 astronouth7303 joined #salt
18:31 Edgan joined #salt
18:33 rebbdohr joined #salt
18:34 astronouth7303 so i can't call arbitrary states from my minions? I define foo/bar.sls in my gitfs, but i can't point a minion at it ('foo.bar' is not available.) without referencing it in my top file? I'm reasonably certain it's not saltfs caching. Is this expected behavior, or am I missing something?
18:34 MTecknology astronouth7303: you're missing something
18:35 whytewolf astronouth7303: you are missing something. salt 'minion' state.apple boo.bar should work
18:35 whytewolf apply*
18:35 whytewolf man my typing is worse then mornal today
18:35 * MTecknology still only uses state.sls
18:36 whytewolf nothing wrong with that state.apply is just a shortcut that will state.highstate or state.sls dependong on if there is a state listed
18:37 MTecknology ooooh... that's why I don't like it :P
18:37 MTecknology oops, hit enter too early
18:37 astronouth7303 ah, ok
18:37 astronouth7303 ... is there an SLS linter/format checker?
18:40 MTecknology online yaml parser
18:40 druonysus joined #salt
18:42 astronouth7303 helpful, but not my problem.
18:42 astronouth7303 also, i strongly suspect it would require being able to render the jinja
18:43 rebbdohr joined #salt
18:44 bakins joined #salt
18:47 whytewolf state.show_highstate or state.show_sls
18:48 major need a state.show_winning_lottery_numbers easteregg or something
18:49 MTecknology I need to get more familiar with lowstate data
18:49 Rumbles joined #salt
18:49 shanth what's the point of doing a salt syndic setup?
18:50 whytewolf salt 'minion' state.show_highstate --out pony
18:50 whytewolf syndic is a master that is a slave to another master
18:51 shanth when does one need a syndic
18:51 MTecknology when one master isn't enough
18:51 shanth my brain keeps reading it as synchdic
18:52 major I tend to read it as syndicate
18:52 shanth sinkd#%k lol
18:52 MTecknology it /is/ syndication
18:52 whytewolf well. if one master isn't enough. or if you have seperate datacenters and you don't want to have every minion connect across the pond
18:52 shanth ahh
18:53 MTecknology the transfer of something for control or management by a group of individuals or organizations.
18:53 MTecknology I meant to tweak that before pasting...
18:53 shanth prob dont need it for 50 minions i guess
18:53 whytewolf it was named after mod syndacates iirc
18:53 major shanth, one of the neat things about syndic's is that an individual (or group) can control say a salt-qa master and all the minions under that, while a global master can still control the salt-qa master and the minions there-in ;)
18:53 rebbdohr joined #salt
18:53 shanth cool
18:54 MTecknology shanth: depending on the situation and the skills of the people developing the salt infrastructure, one master can scale up to tens of thousands of minions
18:54 major more of just a tiering model .. put this group of minions under this syndic master and effectivel isolate them from commands and outages and whatever .. the syndic master can apparently even run its own checkout of the state/pillar tree
18:55 MTecknology major: that'd work until you start having overlap and people need to log into multiple syndics to push changes
18:56 MTecknology or you need to add another syndic that controls both syndics where there is overlap
18:56 mikecmpbll joined #salt
18:58 absolutejam My intended use case is that we have 1 master controlling different clients servers
18:58 major keep tiering them ;)
18:58 absolutejam And one site that is especially large with a load of their own servers and it's own master
18:59 absolutejam I want it so our master is that master's... master
18:59 absolutejam Then they can manage themselves and we can manage them
18:59 jdipierro That sounds like a job for a syndic!
18:59 absolutejam Aye, just need to set it up
19:00 MTecknology sounds like a case where one master would be plenty
19:01 absolutejam Well we can't have the admins at that site having access to the top level master
19:01 absolutejam Because they would have access to other customers
19:01 absolutejam If they break their own shit, so be it
19:01 yuhl______ joined #salt
19:01 MTecknology I don't have enough time to explain, and there's probably little value in doing so anyway
19:02 MTecknology time for food
19:02 absolutejam Sounds like a cop out ????
19:02 astronouth7303 sounds like the prior stated of using syndics as a form of access control
19:02 absolutejam My salt masters Docker containers ATM
19:02 PatrolDoom joined #salt
19:03 major yah .. I see syndics less about load balancing (though they do that "as well") and more about delegation of authority between groups
19:04 PatrolDoom joined #salt
19:04 major if you want a high level access control model that uses LDAP or something to decide who can do what then you can likely use Salt Enterprise instead
19:05 nixjdm joined #salt
19:06 cwandrews joined #salt
19:07 nicksloan joined #salt
19:09 [v] joined #salt
19:12 rebbdohr joined #salt
19:13 tanker12C joined #salt
19:14 Inveracity joined #salt
19:15 ChubYann joined #salt
19:19 f3rno joined #salt
19:20 CEH joined #salt
19:25 Trauma joined #salt
19:27 zer0def joined #salt
19:27 oida_ joined #salt
19:28 nicosuave joined #salt
19:29 nich0s joined #salt
19:29 jauz Yay SaltConf17 early-bird~
19:30 nich0s_ joined #salt
19:30 nich0s_ left #salt
19:33 rebbdohr joined #salt
19:35 scottk_ joined #salt
19:37 scottk_ joined #salt
19:37 nicksloan joined #salt
19:37 nich0s joined #salt
19:37 nich0s joined #salt
19:40 scottk_ Can anyone shed some light on why win_update.list_updates doesn't return any results when i know there are updates available for the system.
19:40 nicksloan joined #salt
19:40 astronouth7303 is there a good way to generate a file from a command if it doesn't exist? ie, "ssh-keyscan -H myserver.example > /root/.ssh/authorized_hosts"
19:41 XenophonF scottk_: maybe run `salt-call win_update.list_updates --log-level=debug` on the minion itself?
19:41 jauz scottk_: I believe it only shows updates that the system has cached as available, so the system would have to run a check and say there are X updates available first, then that function lists those.
19:41 major when/where is SaltConf?
19:42 whytewolf end of oct [halloween], salt lake city
19:42 major hmmm
19:42 whytewolf see saltconf.com for more details
19:42 major have to make a request w/ the manager
19:42 rebbdohr joined #salt
19:43 scottk_ Would i run that salt-call from cmd?
19:43 whytewolf yes
19:44 nicksloan joined #salt
19:46 whytewolf one of the good things about my company not using salt. i can just take the time off as vacation time.
19:47 major whytewolf, thinking I can get them to pay me to go ;)
19:47 scottk_ no luck with salt-call..
19:47 whytewolf major: my company has a policy in place this year about not paying for conferences  so.... no
19:48 jauz Sadness. :(
19:48 major whytewolf, /comfort
19:49 whytewolf not that they would pay for saltconf anyway. again they don't use salt :P
19:49 major should start a GoFundMe and get people to pay for your trip to the conference
19:49 brd whytewolf: time to find a new company :)
19:49 whytewolf brd, sure. know any place that is willing to have me work 100% remote. pays me 3 times the going avg for my location and pretty much leaves me alone to do $job?
19:50 brd whytewolf: unicorns are out there :)
19:50 major whytewolf, can I work w/ you?
19:50 major ;)
19:51 whytewolf lol
19:54 Praematura_ joined #salt
19:55 nicksloan joined #salt
19:57 swa_work joined #salt
19:57 nich0s joined #salt
19:59 nicksloan joined #salt
20:00 cyborg-one joined #salt
20:01 nicksloan joined #salt
20:03 rebbdohr joined #salt
20:03 nicksloan joined #salt
20:04 toastedpenguin joined #salt
20:05 raspado joined #salt
20:07 whytewolf gtmanfred: any chance i can get a discount code to go ontop the early bird registration?
20:08 onlyanegg joined #salt
20:09 whytewolf forgot the :P
20:10 gtmanfred whytewolf: heh
20:11 jhauser joined #salt
20:12 whytewolf man really wish this conference was closer to the middle of the year. or someplace where the weather was more predictable
20:13 jdipierro I wish I had a reason to be able to go D: I just switched jobs and don't use Salt anymore :'( I miss it dearly
20:13 gtmanfred I will be massively dissappointed if there is not a costume contest on the first night
20:13 whytewolf I don't use salt at $work, I'm going
20:14 whytewolf gtmanfred: but how many will go as a salt shaker.
20:15 gtmanfred hopefully everyone
20:15 gtmanfred I plan on going as cumin
20:19 major everyone shows up as salt shakers and salty pirates
20:19 major except for gtmanfred
20:20 nich0s joined #salt
20:20 nixjdm joined #salt
20:22 rebbdohr joined #salt
20:23 astronouth7303 hm. I think I want more proxy minions to talk to my services? eg, poke into postgresql or gitlab
20:23 astronouth7303 (i know there's a bunch of postgresql modules already)
20:23 astronouth7303 since proxy minions are more "poke at this RPC" instead of "poke at the system"
20:24 gtmanfred you could definitely do that.
20:24 gtmanfred but I am not aware of a proxy minion for postgresql as it exists right now
20:24 tapoxi saltconf worth going to?
20:24 whytewolf humm interesting... Marriotts site doesn't like passwords that have < in them.
20:24 tapoxi I'm at a startup so budgets are tight
20:25 gtmanfred I have heard good feed back on the trainings
20:25 astronouth7303 or: it feels weird to assign some of these states to minions, because they're against a service?
20:26 gtmanfred astronouth7303: i get that, but proxy minions are really for things that it is impossible to run a minion on
20:26 gtmanfred like a switch
20:26 whytewolf tapoxi: I wish i had even a startups budget. i have a personal budget to use
20:26 astronouth7303 i know
20:26 gtmanfred where you are running postgres on a server, so run the postgres states against the server, or one server in the cluster
20:26 absolutejam Does the name 'Salt' come from salt lake city?
20:26 MTecknology tapoxi: It's worth it if you pay attention to the talks you go to. They tend to make it more learning and less sales
20:26 gtmanfred absolutejam: no
20:26 absolutejam And it's legit in Salt Lake City?
20:26 absolutejam That's Utah right?
20:26 major ....
20:26 astronouth7303 gtmanfred: i'm thinking of sharing a postgres instance across several environments
20:27 gtmanfred no, we are in lehi, UT
20:27 gtmanfred which is south of salt lake
20:27 absolutejam ah, just from a comment above
20:27 absolutejam UT = Utah
20:27 absolutejam *
20:27 absolutejam ?
20:27 gtmanfred yes
20:27 absolutejam Right. Not sure where I was going with that
20:27 gtmanfred astronouth7303: yeah, you can just have a regular minion that is used for managing that, it doesn't need to be a proxy minion
20:28 gtmanfred you could make your own proxy minion for postgres, but i don't really see the point of using the extra stuff from proxy minions
20:28 gtmanfred like, proxy minions run commands on remote boxes, there are a few ssh proxy minions that ssh in and then run the commands and the proxy minion does the analysis to see if changes are needed
20:29 astronouth7303 fair
20:29 rebbdohr joined #salt
20:29 whytewolf wtf.... Marret just sent me 2 confirmation requests. 1 for 1 night and the other for the whole stay.
20:30 MTecknology I should probably book all of that stuff tonight...
20:30 major heh
20:30 astronouth7303 (sounds like the proxy minion i need is to init boxes by esxi serial port)
20:30 astronouth7303 the bit that's really challenging me is that i'd like to have minions generate their own SSH keys and then push those to a particular user in our local gitlab, without having to share gitlab credentials to everyone.
20:31 gtmanfred astronouth7303: use publish.publish to request keys from remote minions, or use the mine, and only let the gitlab minion query it
20:31 whytewolf huh? gitlab doens't let you setup different keys? in know in stash and github you can have many types of different keys and each user has their own.
20:32 whytewolf no one should share any keys.
20:32 lordcirth_work Gitlab lets you add deployment keys to a repo, or normal read/write keys to a user
20:32 rebbdohr joined #salt
20:32 astronouth7303 whytewolf: gitlab's key management is great, but it's only by API
20:33 MTecknology gtmanfred: my client boss voted for mrs. dash
20:33 lordcirth_work astronouth7303, as opposed to what?
20:33 astronouth7303 copying a file to a directory
20:33 gtmanfred Found my costume http://www.buycostumes.com/c/themes/tv-movies/minion-costumes
20:34 whytewolf i think i'll go as what i go as every year. a seriel killer. they look like everyone else
20:35 gtmanfred cereal killer!
20:35 gtmanfred http://www.pennypinchinmom.com/wp-content/uploads/2012/10/cereal-killer.jpg
20:37 gmoro joined #salt
20:37 tapoxi why not a chef puppet: http://cdn3.volusion.com/mggza.zqqyl/v/vspfiles/photos/GS4305-2.jpg?1487252707
20:38 gtmanfred oohhhh
20:38 gtmanfred i could go as the swedish chef
20:39 tapoxi I can't think of any ansible puns
20:41 losh joined #salt
20:41 lordcirth_work gtmanfred, bork bork?
20:42 gtmanfred heh
20:43 gtmanfred need to figure out an enders game pun https://xkcd.com/241/
20:44 tapoxi orson scott card is from salt lake right
20:44 tapoxi "salt is better" mic drop, moonwalk off stage
20:45 gtmanfred richland washington
20:45 tapoxi booo
20:45 chadhs joined #salt
20:46 gtmanfred https://www.youtube.com/watch?v=LC6dxgLk0GY
20:47 gtmanfred aight, i gotta do work
20:47 gtmanfred o/
20:47 whytewolf https://youtu.be/9f01szhNARE
20:47 whytewolf psh, work .. like 2017.x is ever really coming out :P
20:47 rebbdohr joined #salt
20:48 rebbdohr joined #salt
20:48 dxiri joined #salt
20:49 rebbdohr_ joined #salt
20:50 rebbdohr_ joined #salt
20:52 rebbdoh__ joined #salt
20:56 rebbdohr joined #salt
20:59 cliluw joined #salt
20:59 keltim joined #salt
20:59 teh_champ joined #salt
21:00 whytewolf kind of wish i could think of something i could give a talk on. just to soak up some of that cost :/
21:02 rebbdohr joined #salt
21:05 major ...
21:05 major startup states? ;)
21:06 onlyanegg joined #salt
21:06 whytewolf lol
21:06 whytewolf hard to make an entire panel on just startup states
21:07 major salt crystals ;)
21:07 major little gems and tricks of things people forget even exist
21:07 major like .. startup states
21:08 major tada!
21:12 Bock joined #salt
21:14 astronouth7303 hm, so I'm using `network.system` to change a minion's hostname, but it's not rebooting. Bug? Or am I missing something?
21:14 astronouth7303 (i do have `require_reboot: true`)
21:15 Bock joined #salt
21:17 onlyanegg joined #salt
21:21 nixjdm joined #salt
21:23 astronouth7303 oh, debian require_reboot just warns about it, doesn't actually reboot
21:26 Kegeruneku left #salt
21:26 Shirkdog joined #salt
21:34 heaje joined #salt
21:36 Bock joined #salt
21:43 Bock joined #salt
21:44 BrunoNascimento joined #salt
22:10 edrocks joined #salt
22:13 ahrs joined #salt
22:21 nixjdm joined #salt
22:29 ecdhe joined #salt
22:29 ecdhe joined #salt
22:32 whytewolf major: you know what. your idea wasn't half bad. I submitted to be a speaker. and in a way i hope i get denied [I'm not much for public speaking]
22:34 onlyanegg joined #salt
22:35 brd whytewolf: well you only get better with practice..
22:36 whytewolf yeah. it might not help i am a shy introvert hermit
22:39 coredumb :D
22:39 coredumb good luck then
22:39 coredumb made my first public speach last november in front of 400 ppl
22:40 coredumb was f***ing stressful
22:41 tobstone joined #salt
22:43 MTecknology I did absolutely terrible w/ mine, but I still got thanked for some of my ideas so it couldn't have been all bad. :P
22:43 MTecknology irunno how that works. I will DEFINITELY look in a mirror next time...
22:53 fracklen joined #salt
23:00 hemebond joined #salt
23:10 druonysus joined #salt
23:20 nixjdm joined #salt
23:22 Trauma joined #salt
23:27 toastedpenguin joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary