Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2017-10-24

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:03 blu_ joined #salt
00:37 ibro joined #salt
00:40 SamYaple is there anyway I can share context between multiple sls
00:45 XenophonF SamYaple: that probably means you should combine them
00:45 XenophonF but if not, have them share an import
00:45 XenophonF or use Pillar data
00:46 XenophonF or both (e.g., the defaults.yaml+map.jinja pattern)
00:47 snc joined #salt
00:47 SamYaple XenophonF: cool. as long as there is nothing blatant im missing
01:07 tiwula joined #salt
01:24 chowmeined joined #salt
01:29 GnuLxUsr joined #salt
01:40 DammitJim joined #salt
01:43 swa_work joined #salt
01:56 ilbot3 joined #salt
01:56 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.11.8, 2017.7.2 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic <+> We are volunteers and may not have immediate answers
02:43 dxiri joined #salt
03:02 k_sze[work] joined #salt
03:22 SamYaple im trying to put something like this in my sls, i only want the block to render if the command fails. {% if not salt.cmd.run('false') %}
03:23 SamYaple but instead, salt is just complaining the command failed
03:23 SamYaple thoughts?
03:23 SamYaple let me elaborate. its working fine, but its throwing errors in the log. i want to prevent those errors
03:25 SamYaple oh no, tell a lie. its not rendering fine and its throwing errors
03:27 SamYaple i guess i should just build a module wrapper around this
03:43 swa_work joined #salt
03:47 Aikar i dont get this, https://gist.github.com/aikar/c4abb12f852e36afac0e9a28cc4cd2a3 - I thought sha256 keys were fixed?
03:48 Aikar I'm getting remote host key found but doesnt match
03:50 threwahway joined #salt
03:59 chowmeined joined #salt
04:09 Aikar i just worked around it by not using that state and doing - name: "ssh-keyscan -H -p {{ pillar['ssh_port']|string }} myhost >> /root/.ssh/known_hosts"    - unless: "grep '# myhost' /root/.ssh/known_hosts"
04:10 Aikar on cmd.run
04:31 threwahway joined #salt
05:06 omie888777 joined #salt
05:14 felskrone joined #salt
05:20 LocaMocha joined #salt
05:23 Atmafox joined #salt
05:35 LocaMocha joined #salt
05:43 impi joined #salt
05:53 evle joined #salt
06:03 Lionel_Debroux joined #salt
06:15 hoonetorg joined #salt
06:16 Ricardo1000 joined #salt
06:22 nick123 joined #salt
06:26 do3meli joined #salt
06:26 do3meli left #salt
06:31 _aeris_ joined #salt
06:39 omie888777 joined #salt
06:48 threwahway joined #salt
06:50 Miouge joined #salt
07:04 ibro joined #salt
07:04 usernkey joined #salt
07:08 oida joined #salt
07:27 kavakava joined #salt
07:32 robman joined #salt
07:32 zulutango joined #salt
07:36 impi joined #salt
07:42 mikecmpbll joined #salt
08:03 mikecmpbll joined #salt
08:05 pbandark joined #salt
08:08 mavhq joined #salt
08:18 nkuttler joined #salt
08:20 aldevar joined #salt
08:22 rathier joined #salt
08:23 Bryson joined #salt
08:26 aldevar1 joined #salt
08:39 darioleidi joined #salt
08:39 _KaszpiR_ joined #salt
08:40 coredumb Anyone know if the s3 module is compatible with openstack horizon?
08:41 Mattch joined #salt
08:48 gmoro joined #salt
08:52 toanju joined #salt
09:07 stooj joined #salt
09:07 toanju joined #salt
09:08 mavhq joined #salt
09:30 toanju joined #salt
09:35 DanyC joined #salt
09:49 N-Mi joined #salt
09:49 N-Mi joined #salt
09:51 Naresh joined #salt
10:16 felskrone joined #salt
10:28 xet7 joined #salt
10:46 threwahway joined #salt
10:54 _KaszpiR_ joined #salt
10:58 mechleg1 joined #salt
11:02 lorengordon joined #salt
11:14 Ricardo1000 joined #salt
11:18 NegiLXXXVIII joined #salt
11:18 NegiLXXXVIII hi
11:21 NegiLXXXVIII I have a problem using the software repo for windows. I'ld like to add a custom software definition. so far I made a sls file and added it to the win/repo-ng folder.
11:23 NegiLXXXVIII for some reasonm the file seem to be ignored and the defined package is not available on the minion after running winrepo.update_git_repos and salt '*' pkg.refresh_db
11:25 NegiLXXXVIII did anyone had the same issue or know what I might do wrong?
11:29 cyborg-one joined #salt
11:39 marceliq joined #salt
11:44 usernkey joined #salt
11:49 HTTP_____GK1wmSU joined #salt
11:50 HTTP_____GK1wmSU left #salt
11:52 marceliq Hi there :)
11:53 marceliq Anyone using minion on windows?
11:54 babilen marceliq: Some people can't help themselves, yes
11:55 marceliq :)
11:56 marceliq i'm just trying to stop windows service beforehand archive.extracted
11:56 _KaszpiR_ joined #salt
11:58 marceliq anyone tried this scenario?
12:08 hoonetorg joined #salt
12:09 pbandark hi.. how one should use "salt-cloud" in state file? should we use `cmd.run` salt state function?
12:09 Nahual joined #salt
12:17 DammitJim joined #salt
12:23 Shirkdog joined #salt
12:28 justdroppingby joined #salt
12:31 Harmless_Sponge joined #salt
12:35 babilen pbandark: You'd normally use https://docs.saltstack.com/en/latest/ref/states/all/salt.states.cloud.html
12:36 pbandark babilen: i was using the same. but, there is no option to capture output as what we can do with "salt-cloud". for ex: ` salt-cloud --out yaml --out-file=output.yaml -p test_profile test_instance`
12:37 babilen aye
12:40 pbandark babilen: any alternative? or should it be feature request for cloud.profile ?
12:40 babilen Probably the latter
12:40 pbandark ok. till then i will go with `cmd.run`
12:45 _JZ_ joined #salt
12:48 ivanjaros joined #salt
12:49 lorengordon joined #salt
12:49 dxiri joined #salt
12:51 jas02 joined #salt
12:54 edrocks joined #salt
12:55 numkem joined #salt
13:05 wavded joined #salt
13:05 kwmiebach joined #salt
13:09 threwahway joined #salt
13:21 aldevar joined #salt
13:23 dxiri joined #salt
13:25 wavded joined #salt
13:27 lorengordon joined #salt
13:27 mchlumsky joined #salt
13:31 Brew joined #salt
13:33 fallenour joined #salt
13:36 fallenour test
13:39 dxiri joined #salt
13:39 viq[m] joined #salt
13:39 dxiri joined #salt
13:44 racooper joined #salt
13:46 oida joined #salt
13:46 major joined #salt
13:56 DammitJim joined #salt
13:56 tkharju joined #salt
14:08 ooboyle Edgan: Thanks for the reply. I don't think I require it to persist across system recreation, though having it do so might make things easier. I'll look into using a pillar for this as well.
14:09 tkharju joined #salt
14:11 ooboyle Edgan: RE using the custom grain to query a database: Are you saying I can put that into the python function used to define the grain and the query will execute during the grain creation process? Sorry if that's a basic question, I'm still new to salt and custom grains and I'm not sure what limitations there are in the code I can include in a custom grain function etc...
14:11 cgiroua joined #salt
14:19 megamaced joined #salt
14:25 lkolstad joined #salt
14:26 tkharju joined #salt
14:32 mikecmpbll joined #salt
14:36 DanyC_ joined #salt
14:37 aldevar joined #salt
14:37 ahrs joined #salt
14:38 mage_ joined #salt
14:38 mage_ hello
14:38 mage_ any idea how could I copy files generated on minionA to minionB ?
14:39 lorengordon joined #salt
14:42 mage_ in other words: how to copy files between minions?
14:45 nkuttler joined #salt
14:45 omie888777 joined #salt
14:45 mage_ I have a FreeBSD jail "certbot.lan" on which I'm generating Let's Encrypt certificates, and I need to copy those on my HAProxy backends
14:50 tkharju joined #salt
14:51 mage_ is minionfs secure? I mean can I push SSL private keys, etc ?
14:55 lordcirth_work mage_, I'm not familiar with minionfs, but generally any salt:// path can be read by any minion if they know the path
14:58 mage_ maybe the easiet would be to use rsync after all
14:59 lordcirth_work mage_, maybe.
14:59 mage_ minionfs seems not to be secure
14:59 mage_ all files are world readable
14:59 lordcirth_work mage_, well, it's secure within the boundaries it defines.  It's purpose is to put things into salt://, and salt:// is minion-readable
15:02 lompik joined #salt
15:03 ange mage_: is your jail exposing some kind of API ?
15:04 mage_ no, I have a jail for Salt master and a jail for certbot
15:04 mage_ but I don't like the principle to have private keys world readable ..
15:06 ange yeah, me neither
15:10 ange mage_: I am starting to look at Vault for similar issues (certs, keys, ...) there seems to be a few posts about how to use with Let's Encrypt ; https://www.vaultproject.io/ ; https://www.monterail.com/blog/2017/lets-encrypt-vault-free-ssl-tls-certificate ; https://github.com/ketchoop/letsencrypt-to-vault ; and recent versions of Salt are able to talk to Vault iirc
15:11 mage_ let me check :)
15:13 mikecmpbll joined #salt
15:16 dxiri joined #salt
15:23 tiwula joined #salt
15:26 dezertol joined #salt
15:28 nixjdm joined #salt
15:34 mauli joined #salt
15:34 lorengordon joined #salt
15:36 Hybrid joined #salt
15:43 tkharju joined #salt
15:49 sarcasticadmin joined #salt
15:52 colegatron joined #salt
15:58 Hybrid joined #salt
15:58 dh joined #salt
16:01 mikecmpbll joined #salt
16:01 jeblair joined #salt
16:13 csmule joined #salt
16:20 mntnman joined #salt
16:28 hasues joined #salt
16:42 mpanetta joined #salt
16:42 DanyC joined #salt
16:43 nixjdm joined #salt
16:46 pbandark joined #salt
16:46 mishanti1 joined #salt
16:50 mike_verhulst joined #salt
16:51 thematthewgreen joined #salt
16:52 evle1 joined #salt
16:59 Edgan ooboyle: yes, almost anything you can do in python you should be able to do in a custom grain(which is python).
17:05 edrocks joined #salt
17:06 alvinstarr joined #salt
17:10 pipps joined #salt
17:41 lorengordon joined #salt
17:43 nixjdm joined #salt
17:45 pipps joined #salt
17:48 aldevar joined #salt
17:56 pinecamp joined #salt
17:57 mikecmpbll joined #salt
17:57 pinecamp Is there a way to print sys.doc style documentation for a specific module, instead of all available?
17:58 pipps joined #salt
18:02 GnuLxUsr joined #salt
18:14 pinecamp Found an answer in docs for salt.modules.sysmod. :)
18:18 pbandark1 joined #salt
18:18 pipps joined #salt
18:20 ooboyle Edgan: Thanks for the conformation. I wasn't sure if the python in the custom grain was being filtered through something internal to salt as it gets processed, thereby limiting what can be done in the grain code.
18:29 felskrone joined #salt
18:30 ChubYann joined #salt
18:42 nixjdm joined #salt
18:42 arif-ali joined #salt
18:46 _KaszpiR_ joined #salt
18:53 pipps joined #salt
18:56 _JZ_ joined #salt
18:57 DanyC joined #salt
18:58 thematthewgreen joined #salt
19:03 aldevar joined #salt
19:04 Trauma joined #salt
19:04 Edgan ooboyle: the return gets fed back into Salt, but what you do internally is up to you. You also do introduce new python module dependencies to Salt if you use any Python modules you don't already have installed.
19:07 do3meli joined #salt
19:07 do3meli left #salt
19:20 ange mage_: ping, did you find something that worked ?
19:21 edrocks joined #salt
19:21 ange Edgan: ah, seems you might be able to answer a question I asked a few days ago : with a !py state , can you split some code out to share it between py rendered states to avoid code duplication ?
19:24 Trauma joined #salt
19:25 DanyC_ joined #salt
19:30 elpsy joined #salt
19:31 elpsy Is the "IMPORTANT: Do not use md5 hashing algorithm! Please set "hash_type" to SHA256 in Salt Minion config!" a valid error message? I'm trying to grok its meaning in a few github issues and can't tell if its a valid security concern or a bug
19:33 choke joined #salt
19:33 mntnman md5 is old and is vulnerable as is SHA1.  Best to use SHA256
19:35 Jaman_JA joined #salt
19:39 aldevar left #salt
19:43 DanyC joined #salt
19:46 exegesis joined #salt
19:47 pipps joined #salt
19:49 Edgan ange: you mean like a library?
19:49 sbc joined #salt
19:50 Edgan ange: I am not that famaliar with the py renderer, but in jinja, I use macros. https://storage.cygnusx-1.org/formula.txt
20:01 lorengordon joined #salt
20:06 DammitJim joined #salt
20:11 ange Edgan: yes, like a library, ok I will have a look thanks
20:12 exegesis joined #salt
20:15 bluenemo joined #salt
20:21 Edgan ange: This seems to kind of relate, https://github.com/saltstack/salt/issues/37807
20:22 izrail joined #salt
20:25 Brew joined #salt
20:27 jbailey joined #salt
20:35 scbunn joined #salt
20:39 swa_work joined #salt
20:45 DanyC joined #salt
20:49 swa_work joined #salt
20:52 pipps joined #salt
20:54 DammitJim joined #salt
21:02 pipps joined #salt
21:03 xet7 joined #salt
21:07 Aikar whats difference between {%- and {%
21:07 Aikar and now I see -%} in that link O.o
21:08 pipps joined #salt
21:10 Lionel_Debroux joined #salt
21:12 swa_work joined #salt
21:12 Edgan Aikar: the dashes control newlines
21:13 Edgan Aikar: http://jinja.pocoo.org/docs/2.9/templates/  Whitespace Control
21:15 averell joined #salt
21:17 sjorge joined #salt
21:17 swa_work joined #salt
21:24 omie888777 joined #salt
21:29 nkuttler_ joined #salt
21:32 cgiroua joined #salt
21:33 dankolbrs joined #salt
21:39 ponyofdeath joined #salt
21:41 darioleidi joined #salt
21:41 darioleidi_ joined #salt
21:42 teogop joined #salt
21:43 darioleidi joined #salt
21:45 darioleidi joined #salt
21:46 darioleidi joined #salt
22:02 pipps joined #salt
22:16 mchlumsky joined #salt
22:19 jeffspeff joined #salt
22:25 pipps joined #salt
22:30 bluenemo joined #salt
22:32 swa_work joined #salt
23:09 stewgoin joined #salt
23:19 pipps joined #salt
23:23 jas02 joined #salt
23:29 bluenemo joined #salt
23:30 swa_work joined #salt
23:42 pryorda joined #salt
23:46 bluenemo joined #salt
23:47 N-Mi joined #salt
23:47 N-Mi joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary