Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2017-06-27

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:09 Praematura_ joined #salt
00:09 woodtablet left #salt
00:15 Whissi joined #salt
00:23 raspado joined #salt
00:41 edrocks joined #salt
00:45 major whytewolf, awesome
00:45 StolenToast joined #salt
00:48 fritz09 joined #salt
00:56 Whissi joined #salt
01:02 majuscul1 left #salt
01:05 hoonetorg joined #salt
01:08 onlyanegg joined #salt
01:22 mosen joined #salt
01:29 hoonetorg joined #salt
01:49 patrek joined #salt
01:49 armin joined #salt
01:51 ilbot3 joined #salt
01:51 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
01:54 AvengerMoJo joined #salt
01:59 edrocks joined #salt
02:04 pppingme joined #salt
02:26 zerocoolback joined #salt
02:26 toastedpenguin joined #salt
02:36 gnomethrower joined #salt
02:53 mquin_ joined #salt
02:56 asyncsec joined #salt
03:21 donmichelangelo joined #salt
03:27 Praematura joined #salt
03:52 guerby_ joined #salt
03:55 major joined #salt
04:00 jwarren_ joined #salt
04:01 edrocks joined #salt
04:02 jwarren_ Hey folks, I'm having some issues after upgrading to 2016.11.05. My git.latest state is now failing. Previously I was using force: true, force_checkout: true, and force_reset: true, and things worked. force was deprecated and replaced by force_clone, which I didn't actually need. The problem I'm having: at some point Salt is trying to do a --ff-only, and it fails because my AMI is on a different branch with local changes.
04:03 jwarren_ So, what's the easiest way to switch branches and do a hard reset to origin?
04:03 jwarren_ Is there a way I can get salt to NOT try to do a --ff-only?
04:04 jwarren_ I just want to force_checkout the correct branch, and then force_reset to the origin.
04:09 onlyanegg joined #salt
04:13 major joined #salt
04:25 f3rno joined #salt
04:32 f3rno joined #salt
04:59 evle joined #salt
05:12 ccha2 joined #salt
05:12 davroman1ak joined #salt
05:12 kwork joined #salt
05:12 asoc_ joined #salt
05:12 mmidgett joined #salt
05:13 sarlalia1 joined #salt
05:13 cswang_ joined #salt
05:13 lazybear_ joined #salt
05:13 CeBe_ joined #salt
05:14 scc joined #salt
05:14 ponyofdeath joined #salt
05:15 Nebraskka joined #salt
05:15 notCalle joined #salt
05:15 Morrolan joined #salt
05:15 jf_sebastian joined #salt
05:15 preludedrew joined #salt
05:15 eightyeight joined #salt
05:16 patrek joined #salt
05:16 APLU joined #salt
05:18 mr_kyd joined #salt
05:19 whyzgeek joined #salt
05:19 shortdudey123 joined #salt
05:20 Sacro joined #salt
05:23 jholtom joined #salt
05:27 darioleidi joined #salt
05:29 eseyman joined #salt
05:30 davroman1ak left #salt
05:30 eseyman left #salt
05:31 eseyman joined #salt
05:33 masber joined #salt
05:37 drags2 joined #salt
05:37 ashmckenzie_ joined #salt
05:38 felskrone joined #salt
05:43 rome_390 joined #salt
05:43 LotR joined #salt
05:43 k_sze[work] joined #salt
05:43 shadoxx joined #salt
05:43 ry joined #salt
05:43 gadams joined #salt
05:43 jagguli joined #salt
05:43 nineteen joined #salt
05:44 nich0s joined #salt
05:44 xMopxShell joined #salt
05:44 nledez joined #salt
05:48 f3rno joined #salt
06:00 aneeshusa joined #salt
06:02 CEH joined #salt
06:06 impi joined #salt
06:10 Rumbles joined #salt
06:17 CEH joined #salt
06:33 EthPyth joined #salt
06:38 Ricardo1000 joined #salt
06:47 f3rno joined #salt
07:03 JohnnyRun joined #salt
07:06 rgrundstrom joined #salt
07:06 rgrundstrom Good morning
07:07 zulutango joined #salt
07:09 jeblair joined #salt
07:12 f3rno joined #salt
07:14 coredumb Morning
07:27 aldevar joined #salt
07:27 xet7 joined #salt
07:27 cyteen joined #salt
07:32 CEH joined #salt
07:35 graffic joined #salt
07:35 fracklen joined #salt
07:36 coldbrewedbrew joined #salt
07:36 coldbrewedbrew joined #salt
07:41 notCalle joined #salt
07:44 impi joined #salt
07:48 kiorky joined #salt
07:49 neilf__ joined #salt
07:51 guerby_ left #salt
07:52 guerby joined #salt
07:54 NegiLXXXVIII joined #salt
07:54 NegiLXXXVIII hi
07:55 NegiLXXXVIII is there a module in salt that allows to manage devices and/or drivers on a windows system?
07:55 NegiLXXXVIII so far i couldn't find such a module
08:00 pbandark joined #salt
08:00 Rumbles joined #salt
08:05 CEH joined #salt
08:09 LeProvokateur joined #salt
08:10 Neighbour NegiLXXXVIII: That would be awesome, but I don't think there currently is such a state/module
08:10 jhauser joined #salt
08:11 NegiLXXXVIII Neighbour: ok. then i guess i have to develop my own module
08:17 debian112 joined #salt
08:17 Mattch joined #salt
08:21 mikecmpbll joined #salt
08:25 sjorge joined #salt
08:28 tompte joined #salt
08:32 patrek joined #salt
08:44 Firewalll joined #salt
08:45 cyteen joined #salt
08:47 mt5225 joined #salt
08:59 justanotheruser joined #salt
09:04 gnomethrower joined #salt
09:21 onmeac joined #salt
09:25 evle1 joined #salt
09:25 leev_ joined #salt
09:26 nebuchad` joined #salt
09:27 Sarph joined #salt
09:27 evilmquin2 joined #salt
09:28 esharpmajor joined #salt
09:28 Antiarc_ joined #salt
09:28 pjs_ joined #salt
09:29 _KaszpiR__ joined #salt
09:29 Udkkna_ joined #salt
09:29 bantone joined #salt
09:29 bd joined #salt
09:29 citaret_ joined #salt
09:29 Xenophon1 joined #salt
09:29 Ahlee_ joined #salt
09:29 mirko_ joined #salt
09:30 Heartsbane_ joined #salt
09:30 tellendil_ joined #salt
09:30 froztbyt1 joined #salt
09:30 joe___ joined #salt
09:30 Ludo_ joined #salt
09:30 Annihite1 joined #salt
09:30 bergei joined #salt
09:30 Sacro_ joined #salt
09:30 filippos joined #salt
09:30 darvon_ joined #salt
09:30 eichiro_ joined #salt
09:30 rmc3_ joined #salt
09:31 CrummyGummy_ joined #salt
09:32 graffic_ joined #salt
09:33 cmichel_ joined #salt
09:33 Phanes- joined #salt
09:33 CeBe joined #salt
09:33 shakalaka_ joined #salt
09:33 lazybear_ joined #salt
09:34 whyzgeek_ joined #salt
09:34 Deliants joined #salt
09:34 Whissi_ joined #salt
09:38 absolutejam joined #salt
09:38 JPT joined #salt
09:39 cro joined #salt
09:40 brent_ joined #salt
09:40 sjorge joined #salt
09:40 Praematura joined #salt
09:40 LeProvokateur joined #salt
09:41 hoonetorg joined #salt
09:41 debian112 joined #salt
09:41 spiette joined #salt
09:42 mt5225 joined #salt
09:46 Phanes- left #salt
09:46 zerocool_ joined #salt
09:53 bd saltstackbot: maybe give people a second to auth before messaging them ;)
10:01 CEH joined #salt
10:04 JohnnyRun joined #salt
10:05 gmoro joined #salt
10:06 edrocks joined #salt
10:09 ProT-0-TypE joined #salt
10:14 upb joined #salt
10:14 * babilen hands one sasl
10:15 babilen to bd
10:15 kalessin joined #salt
10:16 patrek joined #salt
10:22 zerocoolback joined #salt
10:23 mugsie joined #salt
10:23 mugsie joined #salt
10:25 _KaszpiR_ joined #salt
10:27 Kelsar joined #salt
10:31 Sacro_ left #salt
10:32 Sacro joined #salt
10:37 JohnnyRun joined #salt
10:38 Valfor joined #salt
10:38 Valfor joined #salt
10:40 Valfor joined #salt
10:40 Valfor joined #salt
10:40 Vaelatern joined #salt
10:43 ProT-0-TypE joined #salt
10:44 mugsie joined #salt
10:44 mugsie joined #salt
10:50 N-Mi joined #salt
10:50 N-Mi joined #salt
10:50 mirko_ joined #salt
10:54 mirko_ joined #salt
10:57 mirko joined #salt
11:06 asterisc joined #salt
11:11 Reverend joined #salt
11:17 nebuchad` left #salt
11:17 nebuchadnezzar joined #salt
11:20 Valfor joined #salt
11:20 Valfor joined #salt
11:22 mugsie joined #salt
11:22 rebbdohr joined #salt
11:30 zerocoolback joined #salt
11:32 rebbdohr joined #salt
11:32 amcorreia joined #salt
11:35 remy_ joined #salt
11:35 cyteen joined #salt
11:35 ecdhe joined #salt
11:35 ecdhe joined #salt
11:39 bd joined #salt
11:43 ecdhe joined #salt
11:46 radriaanse joined #salt
11:47 rmya joined #salt
11:51 _KaszpiR_ joined #salt
11:53 rebbdohr joined #salt
11:55 radriaanse joined #salt
11:55 joe___ left #salt
11:56 radriaanse Hi guys! Does anyone know how I can accomplish the following with salt.modules.boto? "aws ec2 describe-instances --query='Reservations[].Instances[].PublicIpAddress'"
11:56 radriaanse So to clarify, I need to grab the Public IP of an EC2 instance. Not the Elastic IP but a "classic"
11:57 mugsie joined #salt
11:57 mugsie joined #salt
12:27 ilbot3 joined #salt
12:27 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
12:29 CEH joined #salt
12:29 GMAzrael joined #salt
12:35 rebbdohr joined #salt
12:35 rathier joined #salt
12:44 babilen Did anybody hear something about stretch support ?
12:44 babilen https://github.com/saltstack/salt-pack/issues/183 has been closed and I only found https://github.com/saltstack/salt-pack/issues/341 to hint at problems
12:49 ilbot3 joined #salt
12:49 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
12:53 jdipierro joined #salt
12:54 leev_ left #salt
12:54 cyborg-one joined #salt
12:54 leev joined #salt
12:56 coredumb folks
12:56 coredumb How do you handle your automatic minion deployment and addition to your server?
12:57 rebbdohr joined #salt
12:57 dyasny joined #salt
12:59 ProT-0-TypE joined #salt
13:03 dunz0r coredumb: My master has a bash-script that deploys salt, then waits for confirmation while I manually accept the minion-key on my master
13:03 coredumb dunz0r: yeah I'd not want to manually accept that's what bothers me
13:03 dunz0r coredumb: I've thought about ways to do it, but I can't really come up with a secure way to do it
13:03 coredumb pre-generating the minion key on the master would be quite fine, but I don't have the workflow laid out to configure the minion with it
13:10 ilbot3 joined #salt
13:10 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
13:16 ssplatt joined #salt
13:16 asyncsec joined #salt
13:16 dyasny joined #salt
13:22 joehh joined #salt
13:27 mquin joined #salt
13:27 leev joined #salt
13:28 patrek joined #salt
13:29 racooper joined #salt
13:35 rebbdohr joined #salt
13:35 rebbdohr joined #salt
13:35 rebbdohr_ joined #salt
13:35 rathier joined #salt
13:35 mquin joined #salt
13:43 ilbot3 joined #salt
13:43 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
13:45 rathier joined #salt
13:52 coredumb ah thx Naresh forgot about this one
13:53 coredumb ah the API takes care about this :)
13:53 _KaszpiR_ joined #salt
13:59 Rumbles joined #salt
13:59 coredumb ok have to work this out
14:02 inad922 joined #salt
14:03 kulty joined #salt
14:11 7GHABALUT joined #salt
14:13 cwandrews joined #salt
14:21 ilbot3 joined #salt
14:21 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
14:22 pbandark i am setting variable with vlaue fetched from grains. How can i use this variable to fetch pillar information. for ex:  https://paste.fedoraproject.org/paste/qVRoaBaghxnCmu3wkk94Og
14:24 skrobul joined #salt
14:25 jauz Anyone have a good resource for setting up CherryPi with the Salt API for a simple front-end? I'm using the docs so far but help is appreciated from those wiser than myself. :)
14:27 jauz Py*
14:27 onlyanegg joined #salt
14:38 Neighbour Here's a funky one...if you capture the output of a 'state.single' state-run in a jinja variable, and then create a state that calls module.run with test.outputter, and output the data of that state (minus the funky state key), the result-value of the state.single becomes the result-value of the module.run state...
14:38 babilen I put a salt in your salt so you can salt while you salt
14:39 Neighbour something like that :)
14:39 babilen Neighbour: What are you waiting for?
14:39 babilen Err
14:39 babilen NegiLXXXVIII: ^^^
14:40 Neighbour the other 'Ne<tab>' :P
14:40 babilen Exactly
14:49 NegiLXXXVIII ?
14:51 NegiLXXXVIII yes babilen?
14:51 coredumb can someone point me to the option/function where the orchestrator wait after a reboot of the server?
14:53 ilbot3 joined #salt
14:53 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
14:53 NegiLXXXVIII i have a scheduled job that should run once the minion is started
14:53 NegiLXXXVIII and call a hioghstate
14:53 babilen NegiLXXXVIII: What is stopping you from firing off that state when the minion comes online?
14:54 NegiLXXXVIII but it won't run properly
14:54 NegiLXXXVIII and so far the the solution i found was to add a couple of seconds
14:54 colegatron joined #salt
14:54 coredumb babilen: let's say it still has not a minion installed so it wouldn't trigger the minion start event
14:54 babilen coredumb: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.event.html#salt.states.event.wait can be used
14:54 NegiLXXXVIII the minion is running on a windows machine
14:55 sarcasticadmin joined #salt
14:55 babilen NegiLXXXVIII: So the problem is that the minion connects to the master, but running a highstate at that point fails?
14:55 NegiLXXXVIII yes
14:56 patrek joined #salt
14:56 babilen And you have no way to test or raise an event once it is "ready" ?
14:57 babilen coredumb: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.saltmod.html#salt.states.saltmod.wait_for_event has an example for reboots
14:57 NegiLXXXVIII not as far as i know
14:57 babilen NegiLXXXVIII: So an arbitrary but, hopefully, long enough delay is the solution? If so then cmd.run with sleep might just work
14:58 coredumb babilen: yep that's it
14:58 coredumb thx
14:58 colegatron left #salt
14:58 NegiLXXXVIII i think so too
14:58 coredumb Not what I thought I remember but fine enough :D
14:58 NegiLXXXVIII thank you
14:58 brd NegiLXXXVIII: you could add a cron entry like: @reboot sleep 60; service salt restart
14:59 NegiLXXXVIII i really didn't think of the cmd.run ^^
14:59 babilen brd: On Windows?
14:59 brd babilen: doh
14:59 NegiLXXXVIII i would like to but like i said. salt is running on a windows system -.-
14:59 babilen Isn't Windows the root of all evil^Wproblems here?
14:59 brd NegiLXXXVIII: nm, sorry
15:00 NegiLXXXVIII yes it is babilen
15:02 NegiLXXXVIII or maybe i'm just not getting the schedule correct
15:03 NegiLXXXVIII so in my pillar i have the folling
15:03 NegiLXXXVIII schedule:   job1:     function: state.highstate
15:03 NegiLXXXVIII and this does not run once the minion is started
15:04 NegiLXXXVIII once i add seconds: 30 it runs periodicly after 30 secs
15:05 babilen That's what schedule does, you want to look into reactors or startup_states
15:05 NegiLXXXVIII but in theory it should run without the seconds argument, correct?
15:06 babilen Wouldn't that - if possible - execute the job every time the schedule timer is evaluated (probably once a second or more frequently)
15:06 babilen ?
15:06 babilen And why schedule recurrent jobs if you want to run it once on startup?
15:07 NegiLXXXVIII you're right
15:08 NegiLXXXVIII i didn't know there where satrtup states
15:16 NegiLXXXVIII thank you again babilen
15:18 babilen https://docs.saltstack.com/en/latest/topics/reactor/ → react to 'salt/minion/*/start' or https://docs.saltstack.com/en/latest/ref/states/startup.html
15:20 babilen Depending on your needs
15:20 NegiLXXXVIII i guess i'll go with the statrup states
15:20 NegiLXXXVIII that exactly what i need
15:20 onlyanegg I have this orchestrate sls for downloading artifacts that loops over "pods" and runs several state files for each. I'm using the concurrent flag, and I was expecting that to mean that each of the state files would run concurrently, but it wouldn't run concurrently with other pods. Does anybody know if that's true?
15:20 onlyanegg https://gist.github.com/onlyanegg/26452c3b04281440b7466384a3c0e2f4
15:24 ilbot3 joined #salt
15:24 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
15:25 babilen https://github.com/saltstack/salt/issues/32956 + https://github.com/saltstack/salt/issues/32488
15:25 onlyanegg I've been looking forward to that PR
15:25 babilen In general: Running multiple states concurrently on the same minion is bound to cause problems
15:29 babilen Naturally there are states in which this wouldn't be a problem, but it is impossible to guarantee that in every case (e.g. package installations). It would be nice to have the ability to do it, but it looks as if we aren't there yet
15:29 onlyanegg In this case, I'm only downloading artifacts - basically running a bunch of curls.
15:39 CEH joined #salt
15:46 ilbot3 joined #salt
15:46 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
15:51 XenophonF how might I got about accessing minion data while rendering a Pillar SLS?
15:51 XenophonF s/got/go/
15:51 yuhl______ joined #salt
15:51 dunz0r XenophonF: Grains?
15:59 ilbot3 joined #salt
15:59 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
15:59 Praematura joined #salt
16:06 jthunt joined #salt
16:06 cwandrews joined #salt
16:15 ilbot3 joined #salt
16:15 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.3.6, 2016.11.5 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers <+> The call for speakers for SaltConf17 is now open: http://tinyurl.com/SaltConf17
16:19 XenophonF holy crap the default match is compound
16:19 XenophonF and there's new shortcut syntax in top.sls?!
16:20 CEH joined #salt
16:20 XenophonF dunz0r: I refactored my use of salt.network.in_subnet() into a ipcidr match + multiple Pillar SLS files
16:21 XenophonF it actually looks kind of nice
16:22 impi joined #salt
16:26 XenophonF astronouth7303: https://docs.saltstack.com/en/latest/ref/states/requisites.html
16:26 XenophonF holler if you need additional examples
16:27 astronouth7303 thanks! I'm currently struggling with ssh host verification and strange uplink outages
16:29 astronouth7303 (some of our uplinks are not routing to one of our remote datacenters, and we don't have magic autobalanced uplinks or w/e)
16:30 XenophonF fun times!
16:35 gtmanfred arif-ali: I will try to get to it later today
16:37 onlyanegg joined #salt
16:41 XenophonF is the shorthand target SLS syntax not available in the Pillar top file?
16:41 whytewolf pillar based ones
16:41 XenophonF I'm getting errors like `Specified SLS 'd' in environment 'base' is not available on the salt master`
16:41 XenophonF basically one error for each letter
16:42 XenophonF screw it switching to inline yaml list syntax
16:43 XenophonF it works! ship it
16:45 f3rno joined #salt
16:54 arif-ali gtmanfred: thanks
16:57 edrocks joined #salt
16:57 sjorge joined #salt
16:58 LeProvokateur joined #salt
17:02 f3rno joined #salt
17:07 cwandrews_ joined #salt
17:08 cwandrews_ joined #salt
17:09 heaje joined #salt
17:17 beardedeagle joined #salt
17:18 mikecmpbll joined #salt
17:19 demize joined #salt
17:22 edrocks joined #salt
17:23 tiwula joined #salt
17:25 astronouth7303 wishful thinking: SSH subsystem RPC, eg `ssh mymaster -s salt` will get you a "salt shell" and makes use of your unix credentials (as handled by sshd)
17:25 jauz Can you do something like that through Salt API?
17:27 astronouth7303 yeah, a salt API module
17:27 astronouth7303 (currently all the API modules use HTTP)
17:28 astronouth7303 and i'm not sure eauth can handle "just get the credentials from the socket properties and trust them" (unix domain sockets attach information about the process connecting, including the user/group)
17:30 jauz Relevant? https://docs.saltstack.com/en/latest/ref/runners/all/salt.runners.ssh.html
17:31 astronouth7303 i think that allows salt to execute commands over ssh (salt is using ssh as a client)
17:31 astronouth7303 i mean admins can communicate with the master over ssh (salt is using ssh in more of a server role)
17:32 scottk_ joined #salt
17:33 scottk_ I have a minion that is being blocked by selinux. does anyone know how to allow salt to connect through selinux?
17:34 XenophonF scottk_: SELinux is enabled on all my CentOS 7 minions, and I haven't run into any trouble.  What errors specifically are you encountering?
17:34 XenophonF like, are you seeing avc denied entries in /var/log/audit/audit.log?
17:35 kulty joined #salt
17:35 MTecknology Is there such thing as running a report on grains?  "What matches osrelease:12.04?" I did a  -G 'osrelease:12.04' test.ping and I can use that, but is there something better?
17:36 scottk_ maybe i'm just blaming selinux....my minion service keeps dying. on the box. looking at audit.log right now.
17:40 MTecknology strace!
17:49 jauz MTecknology, couldn't you do "salt -G 'osrelease:12.04' grains.item osrelease" to get the result of "What maches osrelease:12.04?" I mean, it'd only target where that's already true but perhaps better output than just "true"?
17:50 scottk_ is there a way to target a minion based on not having a grain? example: salt -G 'saltversion: (!= 2016.11.5)' ?
17:51 MTecknology jauz: that's pretty much the exact same as test.ping except with less stuff going on. I ended up just grepping for Minion and Executing. Was hoping for a better way, but no worries.
17:51 MTecknology scottk_: compound match of all and not
17:51 MTecknology * and
17:51 scottk_ Thanks
17:52 whytewolf a. could pretty it up with jq and using --out json so instead of grep just using jq. but meh. also might be better to write a runner to do it.
17:54 jauz Nifty cheat-sheet: https://sites.google.com/site/mrxpalmeiras/saltstack/salt-cheat-sheet
17:58 apofis joined #salt
17:59 woodtablet joined #salt
18:00 astronouth7303 ok, what's the magic google term for if I want to run a salt command (service.restart) if a state actually changed something (file.managed)?
18:01 whytewolf astronouth7303: service.running with a watch or listen
18:01 astronouth7303 (i thought i read through the tutorial...)
18:01 whytewolf https://docs.saltstack.com/en/latest/ref/states/requisites.html#watch
18:02 astronouth7303 i assume you mean service.restart, because the state will be running, but i need to give it a kick after changing its config file
18:02 whytewolf no, i mean service.running
18:03 whytewolf mod_watch will kick off service.restart based on the settings in service.running
18:04 whytewolf when another state that is watched changes
18:04 whytewolf service.restart isn't a state. it is a exacution module.
18:04 astronouth7303 oh, service.running does something special with watches, ok
18:04 major my head esplode
18:05 astronouth7303 I was figuring that the watch would tell the running state to do its thing, and running would see the service is running and do nothing
18:05 whytewolf no, that is onchanges
18:05 whytewolf watchs run the function mod_watch
18:06 whytewolf [listens create a new state at the end of the run that runs the mod_watch function
18:06 whytewolf ]
18:06 cyborg-one joined #salt
18:07 whytewolf https://docs.saltstack.com/en/latest/ref/states/all/salt.states.service.html#salt.states.service.running also notice the note at the bottom of that
18:07 astronouth7303 yeah, i saw that
18:08 astronouth7303 service.mod_watch defines options i want. I can put those in the watch key somehow?
18:08 astronouth7303 i'm not seeing clear docs on how to do that
18:08 whytewolf put them in the service.running
18:09 astronouth7303 thank you
18:10 hashwagon joined #salt
18:10 * whytewolf adds watch, listen and onchanges to his talk. as this is not the first time this has come up.
18:11 astronouth7303 to be fair, this is probably a fairly standard nginx recipe i probably should have googled for
18:11 astronouth7303 "install nginx, add my config file from saltfs, make sure everything is wired appropriately"
18:12 whytewolf most things are fairly standard down to install, config, service[watch]
18:19 raspado joined #salt
18:19 raspado whats a good approach to monitoring failed high states on the minions?
18:20 raspado I ran into an issue with "Detected conflicting IDs, SLS IDs need to be globally unique." and the state.apply errors out, it must have been an issue for at least a month and theres several commits we've made since this was introduced
18:24 fracklen joined #salt
18:25 MTecknology raspado: someday I plan to have an ELK stack running and have a returner that logs all executions, changes, and failures .. then I'll have a pretty graph of failure count and expect it to always be zero
18:25 MTecknology not sure if I really want ELK, though... the delay has been trying to find something lightweight
18:25 raspado yeah
18:26 whytewolf does salt have an influxdb returner? that would be more lightweight
18:26 raspado is it possible to fire back an event to the salt master if the agent fails to complete? thinking if we can do that and have some script catch that event, we can send it to pagerduty or soemthing
18:27 whytewolf raspado: you could hook something to onfail requisites.
18:28 whytewolf https://docs.saltstack.com/en/latest/ref/states/all/salt.states.event.html#salt.states.event.send
18:28 raspado k so we just need to build a runner for it i suppose?
18:28 whytewolf runner? why
18:28 raspado oh nm, i see your link
18:29 druonysus joined #salt
18:29 druonysus joined #salt
18:30 whytewolf still would be a mess. and an alternative returner would be a better more robust setup
18:39 andi- joined #salt
18:40 cwandrews joined #salt
18:41 jimklo joined #salt
18:44 NightMonkey joined #salt
18:45 dxiri joined #salt
18:48 colttt joined #salt
18:50 cwandrews_ joined #salt
18:54 colttt joined #salt
18:58 Renich joined #salt
19:03 astronouth7303 is there anything I need to do to match against a list grain? eg, if I have the grain `role: ['nginx', 'database', 'application']`, can I just match with `G@role:nginx`?
19:05 dxiri joined #salt
19:08 astronouth7303 ... nvm, it looks like something isn't syncing/taking?
19:09 ChubYann joined #salt
19:10 aldevar joined #salt
19:11 major Embedded Linux Kernel Subsystem?
19:13 aldevar1 joined #salt
19:27 oida joined #salt
19:27 aldevar joined #salt
19:32 jimklo_ joined #salt
19:33 CEH joined #salt
19:39 Praematura_ joined #salt
19:53 Rico_ joined #salt
19:59 GMAzrael_ joined #salt
20:10 edrocks joined #salt
20:11 jdipierro joined #salt
20:15 mikea joined #salt
20:20 GMAzrael joined #salt
20:23 aneeshusa joined #salt
20:24 nixjdm joined #salt
20:42 PatrolDoom joined #salt
20:52 GuestUser joined #salt
20:52 cgiroua joined #salt
20:52 Bock joined #salt
20:54 heyimawesome joined #salt
21:02 NotBobDole joined #salt
21:07 NotBobDole gtmanfred, Thanks for your help a year ago https://irclog.perlgeek.de/salt/2016-08-03#i_12962263
21:07 NotBobDole We are seeing this error upgrading and changing out our infrastructure.
21:08 gtmanfred NotBobDole: Hrm? that gives me a 403
21:08 gtmanfred no problem i guess :D
21:09 NotBobDole https://webcache.googleusercontent.com/search?q=cache:pfexzr_e-dMJ:https://irclog.perlgeek.de/salt/2016-08-03+&amp;cd=3&amp;hl=en&amp;ct=clnk&amp;gl=us
21:10 NotBobDole So it was up just about 20 minutes ago and saved our butts big
21:10 NotBobDole ctrl + F 15:26
21:10 NotBobDole "Reason: 'service' __virtual__ returned False: No service execution module loaded: check support for service management on CentOS Linux-7"
21:10 ayecee left #salt
21:11 gtmanfred ahh yes
21:11 gtmanfred need to have an init system actually running to use that :P
21:11 NotBobDole We're seeing that ourselves. and the odd thing is, that the directory you mention and such all exist
21:11 gtmanfred cat /proc/1/cmdline?
21:12 NotBobDole gtmanfred, we're just specifying the provider override right now, which is good enough
21:12 gtmanfred cool
21:13 NotBobDole just wanted to say thanks :)
21:13 gtmanfred Happy to help!
21:31 onlyanegg joined #salt
21:37 onlyanegg joined #salt
21:38 sjorge joined #salt
21:49 izrail joined #salt
21:50 shanth is there a salt features that requires two users to auth to complete salt commands, kinda like firing a nuke and requiring two keys to turn?
21:53 N-Mi joined #salt
21:53 N-Mi joined #salt
21:54 xet7 joined #salt
21:55 jauz You could watch for a specific file to have a contents of "x" and "y" where only one person knows the information to enter for "x" and same for "y", then when that resolves to TRUE you execute the desired "nuke". :P
21:55 jauz Kinda like have one part of the launch codes per person.
21:59 f3rno joined #salt
22:03 Guest73 joined #salt
22:05 edrocks joined #salt
22:05 evox joined #salt
22:07 Guest73 joined #salt
22:22 fracklen joined #salt
22:25 jhauser joined #salt
22:29 CrummyGummy joined #salt
22:45 sp0097 joined #salt
22:48 druonysus joined #salt
22:48 druonysus joined #salt
22:49 Guest73_ joined #salt
23:09 sp0097 left #salt
23:12 PatrolDoom joined #salt
23:20 Edgan shanth: No, you could add it, or hack it in as jauz suggested
23:21 Edgan shanth: You could also tie Salt into something like Jenkins or Rundeck and implement something like that. If you want it to be so tightly controlled, you probably also want it logged.
23:26 hoonetorg joined #salt
23:30 shanth nah we dont want it that bad Edgan
23:38 mikecmpbll joined #salt
23:43 jrgochan left #salt
23:46 fracklen joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary