Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2017-11-29

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 saltslackbridge joined #salt
00:03 rojem joined #salt
00:12 pipps joined #salt
00:19 zerocoolback joined #salt
00:23 bluenemo joined #salt
00:26 pipps joined #salt
00:29 om2 joined #salt
00:30 threwahway joined #salt
00:49 rem5_ joined #salt
00:51 onlyanegg joined #salt
01:00 GMAzrael joined #salt
01:00 pipps joined #salt
01:12 dhwt joined #salt
01:36 alker1 joined #salt
01:50 GMAzrael joined #salt
01:50 sh123124213 joined #salt
02:10 GMAzrael joined #salt
02:14 zerocoolback joined #salt
02:19 om2 joined #salt
02:21 ponyofdeath joined #salt
02:26 Lenz joined #salt
02:39 zerocoolback joined #salt
02:39 zerocoolback joined #salt
02:40 zerocoolback joined #salt
02:41 threwahway_ joined #salt
02:55 zerocoolback joined #salt
02:55 threwahway joined #salt
02:57 ilbot3 joined #salt
02:57 Topic for #salt is now Welcome to #salt! <+> Latest Versions: 2016.11.8, 2017.7.2 <+> Support: https://www.saltstack.com/support/ <+> Logs: http://irclog.perlgeek.de/salt/ <+> Paste: https://gist.github.com/ <+> See also: #salt-devel, #salt-offtopic, and https://saltstackcommunity.herokuapp.com (for slack) <+> We are volunteers and may not have immediate answers
03:02 zerocoolback joined #salt
03:03 zerocoolback joined #salt
03:04 zerocoolback joined #salt
03:05 zerocoolback joined #salt
03:13 GMAzrael joined #salt
03:17 kellyp joined #salt
03:52 prg3 joined #salt
03:54 GMAzrael joined #salt
03:55 shiranaihito joined #salt
03:56 GMAzrael joined #salt
04:13 SkyRocknRoll joined #salt
04:16 threwahway_ joined #salt
04:39 evle joined #salt
04:41 mcqueenorama joined #salt
04:43 threwahway joined #salt
04:46 sh123124213 joined #salt
05:03 tiwula joined #salt
05:03 GMAzrael joined #salt
05:06 hemebond joined #salt
05:09 threwahway_ joined #salt
05:11 threwahway__ joined #salt
05:28 shripadr joined #salt
05:32 fl3sh joined #salt
05:34 shripadr_ joined #salt
05:55 pppingme joined #salt
05:55 sh123124213 joined #salt
05:57 mcqueenorama joined #salt
05:59 impi joined #salt
06:04 GMAzrael joined #salt
06:11 mcqueenorama joined #salt
06:19 LocaMocha joined #salt
06:23 Lenz joined #salt
06:28 promorphus_home joined #salt
06:32 JawnAuz__ joined #salt
06:35 sh123124213 joined #salt
06:44 msn joined #salt
06:50 yidhra joined #salt
06:58 GMAzrael joined #salt
07:02 Lenz joined #salt
07:02 threwahway joined #salt
07:08 threwahway_ joined #salt
07:08 sh123124213 joined #salt
07:17 kellyp joined #salt
07:29 felskrone joined #salt
07:41 sh123124213 joined #salt
07:46 aldevar joined #salt
07:53 Manor joined #salt
07:56 Manor joined #salt
07:58 impi joined #salt
08:00 GMAzrael joined #salt
08:02 Manor_ joined #salt
08:03 Hybrid joined #salt
08:04 mcqueenorama joined #salt
08:09 robin2244 joined #salt
08:13 Ricardo1000 joined #salt
08:17 Tucky joined #salt
08:19 pualj joined #salt
08:25 mcqueeno1ama joined #salt
08:26 Lenz joined #salt
08:26 Lenz joined #salt
08:33 SkyRocknRoll joined #salt
08:40 _KaszpiR_ joined #salt
08:40 coredumb maybe I'll be a bit OT, but I find it really weird the way saltstack is sharing the Saltconf videos
08:40 coredumb https://saltstack.com/saltconf17-video-access/
08:46 mcqueenorama joined #salt
08:54 Hybrid1 joined #salt
08:56 Manor joined #salt
08:57 GMAzrael joined #salt
08:59 SkyRocknRoll joined #salt
09:06 mcqueeno1ama joined #salt
09:13 Ricardo1000 joined #salt
09:20 lkolstad joined #salt
09:26 colttt joined #salt
09:27 mcqueeno1ama joined #salt
09:29 Manor_ joined #salt
09:29 babilen joined #salt
09:43 pbandark joined #salt
09:48 mcqueenorama joined #salt
09:49 cablekevin joined #salt
10:02 zerocoolback joined #salt
10:04 zerocoolback joined #salt
10:05 GMAzrael joined #salt
10:06 yuhl joined #salt
10:08 mcqueenorama joined #salt
10:10 Mattch joined #salt
10:16 syd_salt joined #salt
10:22 promorphus_home joined #salt
10:23 Hybrid joined #salt
10:26 mcqueenorama joined #salt
10:58 threwahway joined #salt
11:05 GMAzrael joined #salt
11:17 kellyp joined #salt
11:32 saltslackbridge <chris.ruscio> @coredumb - they've been popping up on youtube too, about 20 so far - https://www.youtube.com/user/SaltStack/videos
11:52 asyncsec joined #salt
11:52 oida joined #salt
11:52 GMAzrael joined #salt
11:57 GMAzrael joined #salt
12:01 wongster80 joined #salt
12:11 zerocoolback joined #salt
12:16 syd_salt2 joined #salt
12:16 doda_ joined #salt
12:18 doda_ left #salt
12:21 GMAzrael joined #salt
12:23 syd_salt joined #salt
12:25 doda joined #salt
12:27 fracklen joined #salt
12:27 mcqueenorama joined #salt
12:31 doda i can't use the provider config in salt-cloud for defining the master, doing it in a profile works just fine but its not the best fix
12:48 BiW joined #salt
12:49 BiW hi, attempting to hook up esxi as salt-proxy, receiving 'Proxymodule esxi is missing an init() or a shutdown() or both. Check your proxymodule.  Salt-proxy aborted' error.  Salt version 2017.7.2, any suggestions?
12:50 GrisKo joined #salt
12:54 Kax joined #salt
12:58 saltslackbridge <chris.ruscio> Is it possible to pass options to the YAML serializer in file.serialize? (specifically: have it use the option preserve_quotes=True)
13:03 aanriot joined #salt
13:03 colttt joined #salt
13:05 GMAzrael joined #salt
13:13 Nahual joined #salt
13:14 GMAzrael joined #salt
13:17 rem5_ joined #salt
13:23 GMAzrael joined #salt
13:30 GrisKo joined #salt
13:43 mcqueenorama joined #salt
13:52 englishm_work joined #salt
13:55 edrocks joined #salt
13:59 londo_ joined #salt
14:05 saltslackbridge <gtmanfred> BiW do you have all the dependencies for the esxi proxy minion installed? https://docs.saltstack.com/en/latest/ref/proxy/all/salt.proxy.esxi.html#dependencies
14:08 BiW gtmanfred: Yes, got pyvmomi and esxcli on, both up to date, esxcli tool works ok directly
14:22 nomeed joined #salt
14:23 aagbds joined #salt
14:23 eykd joined #salt
14:27 Naresh joined #salt
14:35 valkyr2e joined #salt
14:36 kojiro joined #salt
14:41 user-and-abuser joined #salt
14:43 prg3 joined #salt
14:44 mchlumsky joined #salt
14:44 pualj joined #salt
14:49 eykd Hello. I’m having some trouble with a masterless minion that won’t pick up pillars from the topfile’s hostname-matching section. I’ve outlined the problem and all the configs at https://stackoverflow.com/questions/47555520/standalone-masterless-salt-minion-wont-pick-up-matching-pillar, if anybody cares to take a stab at it.
14:52 racooper joined #salt
14:55 _KaszpiR_ joined #salt
14:56 nebuchadnezzar joined #salt
14:57 pualj joined #salt
14:57 ouemt joined #salt
15:05 colttt joined #salt
15:12 mcqueenorama joined #salt
15:15 cgiroua joined #salt
15:28 fullstop hi all.  with jinja is it possible to prevent empty strings from being represented as None ?
15:28 pualj joined #salt
15:32 drawsmcgraw joined #salt
15:34 edrocks joined #salt
15:37 tiwula joined #salt
15:37 numkem joined #salt
15:39 _KaszpiR_ joined #salt
15:39 alker joined #salt
15:42 _JZ_ joined #salt
15:43 alker1 joined #salt
15:45 om2 joined #salt
16:07 lclemens joined #salt
16:07 eykd joined #salt
16:13 eykd joined #salt
16:15 om2 joined #salt
16:20 _KaszpiR_ joined #salt
16:24 edrocks joined #salt
16:31 kojiro I'm wondering if we could use the AWS encryption SDK with salt-ssh such that we could put encrypted values in pillars and allow minions with sufficient IAM permissions to decrypt those pillar values, but _without_ allowing the master the ability to decrypt them.
16:32 kojiro I could probably write a renderer or whatever works with https://docs.saltstack.com/en/latest/topics/pillar/#encrypted-pillar-data-on-the-cli
16:32 kojiro but it seems like the master is responsible for rendering, so I'm wondering if it'd work at all.
16:33 SkyRocknRoll joined #salt
16:36 saltslackbridge <gtmanfred> the master handles all the pillar data, and passes it down
16:36 saltslackbridge <gtmanfred> you could write a custom grain that does that though
16:37 saltslackbridge <gtmanfred> and it would work on salt-ssh and regular minions
16:37 kojiro joined #salt
16:37 saltslackbridge <gtmanfred> though that would still allow the master to see them
16:37 ECDHE_RSA_AES256 joined #salt
16:38 saltslackbridge <gtmanfred> basically, anything the minion can see, the master has a way of getting
16:39 zach an IRC bridge eh
16:40 ecdhe joined #salt
16:40 lordcirth_work fullstop, what do you want them to be instead? emptystring "" ?
16:41 fullstop yes
16:41 lordcirth_work fullstop, I thought that "" was printed properly, and only unset variables are None?
16:42 lordcirth_work Does {{ "" }} print None?
16:42 fullstop I'm appending optional command line arguments based on a pillar value which may not be set... and it's showing up as "None" in the output.
16:42 jkaberg left #salt
16:42 fullstop brb, need to help someone
16:42 lordcirth_work fullstop, see, that's different, that's unset, not emptystring.  Do this: {{ salt.pillar.get('foo:bar', "") }}
16:43 fatal_exception joined #salt
16:43 pualj joined #salt
16:46 kojiro gtmanfred: Sure, I'm not too concerned with really preventing the master-users from getting the secrets from minions. I just don't want to have to manage the secrets on individual master-users' machines.
16:47 saltslackbridge <gtmanfred> I would write a grain then.
16:47 saltslackbridge <gtmanfred> that will allow the minion to go get the data
16:47 kojiro yep, I will look into it
16:47 kojiro thanks!
16:47 mcqueenorama joined #salt
16:48 motherfsck joined #salt
16:50 drawsmcgraw joined #salt
16:51 fracklen joined #salt
16:55 netcho joined #salt
16:55 netcho joined #salt
16:56 niluje I'm trying to use salt-ssh 2017.7.2. In /etc/salt/roster, I have two hosts: xxx: host: 10.0.0.1 and xxx: host: 10.0.0.2. In /etc/salt/roster.d/roster-override.conf there's: roster_defaults: user: niluje / sudo: True. When running "salt-ssh -i '*' cmd.run hostname", the command is executed two times on the first host.
16:57 niluje To edit the command on the two hosts, I have to update the class RosterMatcher.ret_glob_minions and replace minions[minion] = data with minions[minion] = dict(data.items())
16:57 niluje I guess somehow the configuration of roster_defaults is altered with the content of the first host, and  the host is overriden for the second host
16:57 niluje is it a known bug?
16:57 niluje couldn't find it on the tracker
16:58 saltslackbridge <gtmanfred> roster_defaults should go in /etc/salt/master ?
16:59 niluje gtmanfred: yes: https://docs.saltstack.com/en/latest/topics/ssh/roster.html#target-defaults
16:59 saltslackbridge <gtmanfred> why are you putting it in /etc/salt/roster.d?
17:00 niluje sorry, I mistyped. It's in /etc/salt/master.d/
17:00 niluje The roster_defaults is correctly used
17:00 saltslackbridge <gtmanfred> ahh ok, yeah that shouldn’t be happening, and it didn’t happen back when I wrote it.
17:00 saltslackbridge <gtmanfred> can you open a bug and I will look at it
17:01 niluje will do, with a minimal test case. I'll notify you once done. Thanks a lot
17:01 niluje (note this is not the only matcher broken)
17:02 saltslackbridge <gtmanfred> I am triaging issues today, I will see it when I refresh the page
17:02 niluje kk
17:02 niluje thanks a lot :)
17:12 aldevar left #salt
17:24 GMAzrael joined #salt
17:29 csmule joined #salt
17:30 kellyp joined #salt
17:37 JAuz joined #salt
17:43 sh123124213 Anybody deploying openshift with saltstack ?
17:47 evle joined #salt
17:47 niluje gtmanfred: https://github.com/saltstack/salt/issues/44744
17:47 niluje here it is
17:47 onlyanegg joined #salt
17:47 niluje I reproduced the issue with a minimal test case and I confirm the problem exists, but not with all versions of salt
17:47 niluje I suggested a patch though I'm almost sure this is not what you'll want to do
17:48 niluje I'd be glad to bring more details if you need to
17:48 Lionel_Debroux joined #salt
17:49 saltslackbridge <gtmanfred> comment added, can you test that as a fix?
17:50 pualj joined #salt
17:54 bluenemo joined #salt
17:58 pipps joined #salt
17:58 pipps joined #salt
18:08 vexati0n are there any plans at all to have gitfs behave more consistently between states and pillar ?
18:08 vexati0n it's annoying that with pillar, you have to include a top file in your repo, but with states, salt only reads the first one it finds.
18:09 saltslackbridge <gtmanfred> that is just because of the fundementally different way that external pillars and remote filesystems work
18:09 saltslackbridge <gtmanfred> fileservers can pull from multiple places
18:09 saltslackbridge <gtmanfred> but for pillars, each one gets rendered independently
18:09 saltslackbridge <gtmanfred> so to summarize, i doubt it
18:10 vexati0n i understand the theory behind it, but in practice, from a user's perspective, it seems inconsistent.
18:10 jmedinar joined #salt
18:11 jmedinar Hi all, is it possible to modify a pillar value from a module?
18:11 vexati0n there are practical reasons why it's a bother as well. if i have different people working on different projects to be included via git, they should be able to structure top files for states specific to their project, without having to consult an unrelated repository or config file and have their states included in the instructions
18:12 jmedinar or only by using a reactor>
18:13 vexati0n jmedinar: there is no 'good' way to do that, that i'm aware of. you could define pillar files as templates or something in a state that affects the master, but that's sort of roundabout and seems sloppy. usually with salt if you can't find a way to do something, you're most likely approaching the problem wrong.
18:14 saltslackbridge <gtmanfred> There is a feature request open to allow setting pillar data from minions, but no one working on it afaik
18:31 wongster80 joined #salt
18:37 SkyRocknRoll joined #salt
18:50 SkyRocknRoll_ joined #salt
18:54 raceboyer_ joined #salt
18:57 mcqueenorama joined #salt
18:57 raceboyer_1 joined #salt
18:58 raceboyer_1 left #salt
19:00 fracklen joined #salt
19:02 pipps joined #salt
19:03 bc75_ joined #salt
19:04 DammitJim joined #salt
19:08 aldevar joined #salt
19:22 noobiedubie joined #salt
19:24 noobiedubie hi alll running into an error when trying to launch a windows ec2 instance using salt-cloud. I'm auto generating a password but when I launch it tells me:  AWS Response Status Code and Error: [400 400 Client Error: Bad Request] {'Errors': {'Error': {'Message': "The instance ID
19:24 noobiedubie 'i-0f982a22bce7d69d9' does not exist", 'Code': 'InvalidInstanceID.NotFound'
19:25 noobiedubie even though it does exist but is still initializing it there a timeout I can set or a retry. I know auto generating a password takes a few minutes not sure if there is a config option to handle that in profile
19:25 dave92082 joined #salt
19:26 edrocks joined #salt
19:28 dave92082 left #salt
19:31 noobiedubie https://paste.debian.net/hidden/17929795/
19:31 noobiedubie my current profile
19:32 noobiedubie running latest salt-cloud on centos 7
19:33 netcho joined #salt
19:34 pualj joined #salt
19:41 rgrundstrom joined #salt
19:44 pipps joined #salt
19:45 Lenz joined #salt
19:45 ymasson joined #salt
19:49 yidhra joined #salt
19:57 pualj_ joined #salt
20:03 Deliant joined #salt
20:04 lordcirth_work fullstop, did that work for you?
20:04 kellyp joined #salt
20:05 pualj_ joined #salt
20:05 ECDHE_RSA_AES256 joined #salt
20:06 fullstop lordcirth_work: one moment
20:07 saltslackbridge <gtmanfred> noobiedubie where is the ssh key file for that?
20:07 saltslackbridge <gtmanfred> ahh, nevermind, it is private key
20:07 saltslackbridge <gtmanfred> idk what is going on there ¯\_(ツ)_/¯
20:08 fullstop lordcirth_work: this is what I'm attempting to do: https://pastebin.com/raw/Rqawfars
20:08 lordcirth_work fullstop, and java_opts is being printed as None?
20:08 fullstop {{java_opts}} is replaced with None if the pillar 'opts' is not set
20:08 fullstop correct
20:08 lclemens_ joined #salt
20:09 fullstop +export JAVA_OPTS="-Xmx3072M -XX:-OmitStackTraceInFastThrow -Djava.security.egd=file:/dev/./urandom -Djava.library.path=/usr/lib/jni None"
20:09 lordcirth_work fullstop, so, if pj is None, I would guess that pj.get anything will be None, even with a default, because the function .get doesn't exist?
20:10 lordcirth_work I could be wrong, not a python expert
20:10 lordcirth_work Or is 'java' not None here?
20:10 fullstop if put, say, '-X' in instead of '' then it will put -X in the template.
20:10 fullstop It only happens if the string is empty.
20:11 lordcirth_work Ah ok
20:11 fullstop +export JAVA_OPTS="-Xmx3072M -XX:-OmitStackTraceInFastThrow -Djava.security.egd=file:/dev/./urandom -Djava.library.path=/usr/lib/jni -X"
20:11 lordcirth_work Terrible solution: what about ' ' instead?
20:12 lordcirth_work Or this: https://stackoverflow.com/questions/11146619/suppress-none-output-as-string-in-jinja2#11146693
20:12 fullstop the strings appear to be trimmed first, so None is still there.
20:12 lordcirth_work Oh, I see what the problem is
20:13 lordcirth_work So, Jinja puts '' in place.  That results in java_opts: {{java_opts}} which YAML then parses as None.  Put quotes '' around the {{ }}
20:13 lordcirth_work I always put quotes around Jinja
20:13 lordcirth_work In state files, that is
20:14 lordcirth_work Got to remember that Jinja and YAML are 2 different phases with no understanding of each other.
20:15 saltslackbridge <gtmanfred> yeah, like I said before, there have been multiple people asking for different things for empty strings, some want it to be `null` some want it to be `None` and some want the empty string left there
20:15 sh123124213 joined #salt
20:16 fullstop lordcirth_work: that worked.  a bit odd, but it worked.
20:16 lordcirth_work It's not odd at all actually, IMHO
20:16 lordcirth_work If you never tell YAML what type a field is, and you don't provide a value, how can it guess it's a string?
20:17 fullstop do you mean this down in the managed file?  java_opts: "{{java_opts}}"
20:17 lordcirth_work Yes
20:17 fullstop I guess that I didn't expect "None" to pop out.
20:17 lordcirth_work So that way, after jinja, you get: java_opts: "" like you want, instead of java_opts: with no value
20:18 kellyp joined #salt
20:19 londo_ joined #salt
20:23 pualj joined #salt
20:24 fullstop I see
20:26 rgrundstrom joined #salt
20:28 Lenz joined #salt
20:31 eseyman joined #salt
20:35 pualj joined #salt
20:43 noobiedubie ok new question so I have cloud almost working with windows but now I'm getting a There was a profile error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) when using winrm and using the provided example script in the salt docs to copy the rdp store as the cert store
20:43 noobiedubie is there a workaround for this or how can I verify the cert
20:45 rojem joined #salt
20:46 edrocks joined #salt
20:46 saltslackbridge <gtmanfred> are you using pywinrm?
20:46 saltslackbridge <gtmanfred> what version
20:47 noobiedubie 0.2.2
20:47 gtmanfred downgrade to 0.1.1
20:47 gtmanfred you can't use 0.2.2 until oxygen is release
20:47 gtmanfred https://github.com/saltstack/salt/pull/42214
20:47 noobiedubie is that another pip package?
20:48 gtmanfred pip install pywinrm==0.1.1
20:48 gtmanfred in 0.2.0, they switched to verifying certificates by default
20:48 gtmanfred and in 0.2.1, they allowed for disabling that
20:49 gtmanfred but that requires the patch i linked above, which won't be out until Oxygen is released, and allows for disabling verifying the certificate
20:49 noobiedubie so i can't disable it in 0.2.2?
20:49 noobiedubie o gotcha
20:49 gtmanfred not until that patch is in a salt release
20:49 gtmanfred which will be oxygen
20:49 noobiedubie super lame
20:49 noobiedubie thanks for the patch though
20:49 yidhra joined #salt
20:50 Lenz joined #salt
20:51 noobiedubie i guess that still leaves the question of what's the point if your not verifing the cert then why not just use winexe seems like a chicken and egg situation
20:53 noobiedubie i guess we'll need another patch to actually pass a cert that can be used and verified, maybe in the actual powershell script itself or something adding that to the rdp store then copying that as the new cert store
20:54 gtmanfred you can verify the cert
20:54 gtmanfred it just has to be a non self signed cert
20:55 gtmanfred by default most of these just make self signed certs
20:55 gtmanfred if you sign it with a local certificate authority, and put that in your local keychain, it can be signed
20:55 noobiedubie right but how can you set that if the instance is just being launched and salt isn't even installed yet and it needs that setup beforehand in order to complete bootstrap
20:56 gtmanfred the way people are doing it now is by saving images for their internal clouds
20:56 noobiedubie with a root cert already saved i'm assuming?
20:56 gtmanfred with the cert already setup in the cert store on windows
20:57 fracklen joined #salt
20:57 gtmanfred also
20:57 gtmanfred you can do all this inside of active directory
20:57 gtmanfred that would be ya know, the best way
20:57 gtmanfred then the machine just joins the domain, and bam, setup
20:57 noobiedubie but again that would have to be setup in an image
20:58 gtmanfred sure, but really, that is what you are going to have to do anyway if you want to presign the key
20:58 gtmanfred otherwise you are automating and passing around a signing key to all boxes, which is less secure
20:59 noobiedubie well thanks for the help i'll stick with winexe i guess
21:00 noobiedubie don't fancy having to manually setup my automation seems counter productive
21:01 vexati0n why is solaris so awful
21:07 Lenz joined #salt
21:09 gtmanfred better than ubuntu
21:16 pipps joined #salt
21:25 trouba_w joined #salt
21:26 tjjuh joined #salt
21:27 rgrundstrom Good night
21:29 Lenz joined #salt
21:30 tjjuh joined #salt
21:30 _KaszpiR_ joined #salt
21:33 edrocks joined #salt
21:33 tjjuh left #salt
21:38 Diaoul joined #salt
21:38 klaver010110 joined #salt
21:41 jmedinar joined #salt
21:43 londo_ joined #salt
21:46 linovia I'm feeling like I'm not going in the right direction. I would like to use a common nginx layout for my projects although some may "override" the some default state.
21:47 klaver010110 left #salt
21:48 linovia I don't feel like salt if friendly with a per project layout.
21:49 linovia I mean, I try to get all the states for a given project but I can't find a way to have those states generic enough to be reusable across projects
21:49 saltslackbridge <gtmanfred> check out the salt formulas
21:50 saltslackbridge <gtmanfred> https://github.com/saltstack-formulas/nginx-formula
21:51 linovia the formulas I've seen are more oriented like I'd add the project to every associated state rather than the other way arond
21:51 saltslackbridge <gtmanfred> It has a bunch of macros so that you can define information about your nginx configs in pillar data
21:51 saltslackbridge <gtmanfred> https://github.com/saltstack-formulas/nginx-formula/blob/master/pillar.example#L105
21:52 kojiro joined #salt
21:52 drawsmcgraw joined #salt
21:52 saltslackbridge <gtmanfred> well, right there, if you just use the nginx pillar.example, you can define multiple projects in pillar data, and then the states handle laying down different files for each one
21:57 linovia ok, I think I likely was adding too many indirection. My current option was to lay each project in a different pillar file and have a list of those projects while the formula choose to embedded the project directly in a list
21:57 linovia thanks gtmanfred !
21:58 kojiro I'm having a problem with mine.get in salt-ssh, that appeared after I switched to a custom roster. I would love to find a solution that let me do pdb style debugging on the salt-ssh minion. Is there any tooling or documentation for that?
22:00 saltslackbridge <gtmanfred> you can, but it is going to be interesting, because the mine.get stuff for salt-ssh doesn’t actually use the mine cache, it uses the mine wrapper
22:01 saltslackbridge <gtmanfred> https://github.com/saltstack/salt/blob/2017.7/salt/client/ssh/wrapper/mine.py
22:01 saltslackbridge <gtmanfred> And actually runs from the place where you run salt-ssh
22:03 kojiro Oh, so it actually runs from where I run salt-ssh? Then is there some way I can get into pdb, but just for the mine.get part of salt-ssh?
22:03 saltslackbridge <gtmanfred> you should be able to just drop your pdb traceback stuff in that file
22:03 kojiro I will try
22:05 kojiro heh, I made the mistake of setting up a yubikey for gpg _and_ using gpg-agent as my ssh-agent, which has made salt-ssh locally extraordinarily slow
22:06 kojiro Fortunately I only use salt-ssh locally when I'm debugging stuff
22:07 drawsmcgraw left #salt
22:11 fracklen joined #salt
22:13 ry joined #salt
22:13 kojiro Aha! salt.client.ssh.wrapper.mine's `get` method takes `roster` as an arg and uses the default value there instead of looking at the config options.
22:14 saltslackbridge <gtmanfred> that was what my guess was going to be
22:14 kojiro pdb didn't work, btw -- I guess because we're layers into Multiprocessing.
22:15 kojiro I'll worry about that later
22:15 saltslackbridge <gtmanfred> yeah, that is always the fun part of pdb with salt
22:15 saltslackbridge <gtmanfred> if you wanted to submit a PR that lets it pull the roster from the master config if no roster is passed, we would greatly appreciate it
22:15 saltslackbridge <gtmanfred> https://docs.saltstack.com/en/latest/topics/development/contributing.html
22:15 kojiro I probably will
22:16 kojiro Need to get my current PR merged first, though ;)
22:16 saltslackbridge <gtmanfred> speaking as a person with multiple open prs, that is silly :P https://github.com/saltstack/salt/pulls/gtmanfred
22:17 netcho joined #salt
22:17 netcho joined #salt
22:17 kojiro fair
22:20 pualj joined #salt
22:23 Deliant joined #salt
22:26 mcqueenorama i've had to patch something in the salt virtualbox support to get things working.  When I consider pushing it out I should aim for merging it to the develop branch, right?
22:29 mcqueenorama i see the link posted above
22:29 saltslackbridge <gtmanfred> if it is a bug fix, fix it in the oldest supported release that it is broken in
22:29 pipps joined #salt
22:29 saltslackbridge <gtmanfred> and we will forward merge it to the other branches
22:29 saltslackbridge <gtmanfred> if it is a new feature, put it into develop
22:30 mcqueenorama oh that's better. its bug fixes
22:30 saltslackbridge <gtmanfred> https://docs.saltstack.com/en/latest/topics/development/contributing.html#main-release-branches
22:31 saltslackbridge <gtmanfred> the merge forward process is explained below that
22:31 Trauma_ joined #salt
22:32 cgiroua joined #salt
22:38 ecdhe joined #salt
22:38 pipps joined #salt
22:40 _dp joined #salt
22:43 rojem joined #salt
22:53 pipps joined #salt
22:57 armyriad joined #salt
23:03 GMAzrael joined #salt
23:10 hoonetorg joined #salt
23:18 pualj_ joined #salt
23:19 user-and-abuser joined #salt
23:26 rojem joined #salt
23:32 Bryson joined #salt
23:35 GMAzrael joined #salt
23:45 mcqueenorama joined #salt
23:48 xet7 joined #salt
23:53 pualj joined #salt

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary