[Puppet Users] Re: what's the google's pupetmaster structure ?

I would also love to get more details on this setup. I have tried
following the Multiple Certificate Authorities page on the wiki but to
no success.

 - Jeremy

On Apr 30, 10:08 am, "Paul Lathrop" <p... <at> tertiusfamily.net> wrote:
> On Tue, Apr 29, 2008 at 5:41 PM, Ohad Levy <ohadl... <at> gmail.com> wrote:
> > We handled the certificate management in a different way, since all of our
> > puppet masters are also puppet clients, there is a hierarchy of
> > certificates, but each puppet master can still sign the clients below, and
> > as its trusted, each client can connect to any other puppet master.
>
> That sounds like a really interesting and useful setup. Would you be
> willing to share more specifics? How did you set this up?
>
> Regards,
> Paul
>
> > On Wed, Apr 30, 2008 at 5:31 AM, Joel Wood <jw... <at> joelwood.com> wrote:
>
> > > On the DNS round robin bit, if you also want some redundancy with your
> > > load distribution you could always use wackamole.  It allows you to share
> > > a pool of virtual ips between a number of hosts.  You can use it with DNS
> > > round robining to give you failover of sorts.
>
> > >http://www.backhand.org/wackamole/
>
> > > -Joel

[Puppet Users] File source weirdness

Sorry for the rather vague subject-line, but I can't think of any pithy way
to describe what I'm seeing.

I have Puppet 0.24.4 running on a whole bunch of Solaris machines.  Some 10,
some 8, some SPARC, some x86.  On two of them (8/SPARC, but not the only
8/SPARC machines we have!) this:

  file {"/etc/resolv.conf":
    source => [ "puppet:///dist/resolv.conf.$hostname",
                "puppet:///dist/resolv.conf.$location",
                "puppet:///dist/resolv.conf" ]
  }

Results in "/etc/resolv.conf" becoming a symlink to "/etc/resolv.conf.mel"
rather than simply containing the contents of
puppet:///dist/resolv.conf.mel.

($location is set by a custom fact.)

There are other seemingly-identical Solaris 8/SPARC systems running the same
Puppet client and Ruby build (it's all rsynced from one common copy) in the
same machine room which work properly, and it worked properly on these hosts
with our previous version of Puppet (0.24.1).

Anyone else seen anything like this?  It's a bit disconcerting that a "file"
stanza which specifies a source and does not have an "ensure" clause which
would create a link winds up creating a link.

Matt

[Puppet Users] Re: configuring services not to auto-run ("chkconfig off service")

Hi

> Right now I just keep puppet from controlling these service and do it
> "manually" in external scripts, but is there a proper way to do this
> without having to hack puppet too much?

extend puppet's provider for redhat services. it is
lib/puppet/provider/service/redhat.rb .
I think you might subclass it to a new provider or add a certain
parameter which would then force your needs, but by default keep it the
same as it is now.
Would be nice if you can provide a patch for that. :)

greets pete

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

[Puppet Users] Re: configuring services not to auto-run ("chkconfig off service")

Peter Meier wrote:
> Hi
>
>   
>> Right now I just keep puppet from controlling these service and do it
>> "manually" in external scripts, but is there a proper way to do this
>> without having to hack puppet too much?
>>     
>
> extend puppet's provider for redhat services. it is
> lib/puppet/provider/service/redhat.rb .
> I think you might subclass it to a new provider or add a certain
> parameter which would then force your needs, but by default keep it the
> same as it is now.
> Would be nice if you can provide a patch for that. :)
>
>   

I agree.  I recently submitted a number of changes to the provider to 
support use of /sbin/service instead of direct calls to init scripts (to 
accomodate SELinux) and I am happy to test additional changes if it 
furthers development of the provider to better suit Red Hat norms.

Regards

James Turnbull

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.

[Puppet Users] Certificate hierarchy - multiple puppet masters setup

[Puppet Users] Re: File source weirdness

On May 1, 2008, at 12:18 AM, Matt McLeod wrote:

> There are other seemingly-identical Solaris 8/SPARC systems running  
> the same
> Puppet client and Ruby build (it's all rsynced from one common copy)  
> in the
> same machine room which work properly, and it worked properly on  
> these hosts
> with our previous version of Puppet (0.24.1).
>
> Anyone else seen anything like this?  It's a bit disconcerting that  
> a "file"
> stanza which specifies a source and does not have an "ensure" clause  
> which
> would create a link winds up creating a link.

The only time I've seen anything like this is when the http keepalive  
was causing file corruption.

You're absolutely sure those broken clients are running 0.24.4?

I just can't imagine this discrepancy in behaviour without some  
distinct configuration difference.

--

-- 
Don't throw away the old bucket until you know whether the new one
holds water. -- Swedish Proverb
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

[Puppet Users] Re: File source weirdness

Luke wrote:
> The only time I've seen anything like this is when the http keepalive
> was causing file corruption.
> 
> You're absolutely sure those broken clients are running 0.24.4?

Yup.  I have two builds of a tree containing the Ruby stable-snapshot
from a few days ago, Puppet 0.24.4, and whatever the latest Facter is
(both installed as gems).  One is built on Solaris 8/SPARC (and running
on both 8 and 10 on SPARC), the other on Solaris 10/x86.

The hosts that are misbehaving are even configured identically in Puppet
to others that aren't -- they're all nodes inheriting the same
"meta-node".

Apologies for the crappy quoting and probably screwed-up wordwrap/etc,
I'm stuck using Outlook/Entourage.

> I just can't imagine this discrepancy in behaviour without some
> distinct configuration difference.

Looking more closely at the OS patch revisions on the two sets of hosts,
it seems that the misbehaving ones have slightly older (relatively
speaking, this is Solaris 8 after all!) versions of a few patches that
may be relevant: the kernel, libc/libc++, and linker patches.  Not sure
I can actually patch those as these are largely "hands off" machines,
but I'll see and report back.

Matt

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

[Puppet Users] How to tell if file replaced? want to run aptitude update after replacement of sources.list

Hi,

I'm wondering how are people deploying new machines with puppet. I
have everything setup properly though I have one question. I have a
local Ubuntu mirror and after replacing sources.list to use the
mirror, I'd like to run aptitude update. I want this to run only when
this file is replaced. Is that possible?

Gary
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

[Puppet Users] Re: How to tell if file replaced? want to run aptitude update after replacement of sources.list

Would this work?

   case $lsbdistcodename {
      feisty: {
         $ubuntu_repo = "ubuntu.domain.com:9999"
         $ubuntu_repo_sec = "ubuntu.domain.com:9999"
         file { "/etc/apt/sources.list.d": ensure => directory,
recurse => true, purge => true, }
         file { "/etc/apt/sources.list": owner => root, group => root,
mode => 0644,
            content => template("apt/sources.list.feisty.erb"),
         }
      }
      hardy: {
         $ubuntu_repo = "ubuntu.domain.com"
         $ubuntu_repo_sec = "ubuntu.domain.com"
         file { "/etc/apt/sources.list": owner => root, group => root,
mode => 0644,
            content  => template("apt/sources.list.hardy.erb"),
         }
      }
   }
   exec { "aptitude update":
      path => ["/usr/bin"],
      subscribe => File["/etc/apt/sources.list"],
      refreshonly => true
   }

}

On May 2, 4:48 pm, gary <garyy... <at> gmail.com> wrote:
> Hi,
>
> I'm wondering how are people deploying new machines with puppet. I
> have everything setup properly though I have one question. I have a
> local Ubuntu mirror and after replacing sources.list to use the
> mirror, I'd like to run aptitude update. I want this to run only when
> this file is replaced. Is that possible?
>
> Gary
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

[Puppet Users] Re: How to tell if file replaced? want to run aptitude update after replacement of sources.list

Would this work?

   case $lsbdistcodename {
      feisty: {
         $ubuntu_repo = "ubuntu.domain.com:9999"
         $ubuntu_repo_sec = "ubuntu.domain.com:9999"
         file { "/etc/apt/sources.list.d": ensure => directory,
recurse => true, purge => true, }
         file { "/etc/apt/sources.list": owner => root, group => root,
mode => 0644,
            content => template("apt/sources.list.feisty.erb"),
         }
      }
      hardy: {
         $ubuntu_repo = "ubuntu.domain.com"
         $ubuntu_repo_sec = "ubuntu.domain.com"
         file { "/etc/apt/sources.list": owner => root, group => root,
mode => 0644,
            content  => template("apt/sources.list.hardy.erb"),
         }
      }
   }
   exec { "aptitude update":
      path => ["/usr/bin"],
      subscribe => File["/etc/apt/sources.list"],
      refreshonly => true
   }

}

On May 2, 4:48 pm, gary <garyy... <at> gmail.com> wrote:
> Hi,
>
> I'm wondering how are people deploying new machines with puppet. I
> have everything setup properly though I have one question. I have a
> local Ubuntu mirror and after replacing sources.list to use the
> mirror, I'd like to run aptitude update. I want this to run only when
> this file is replaced. Is that possible?
>
> Gary
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-users <at> googlegroups.com
To unsubscribe from this group, send email to puppet-users-unsubscribe <at> googlegroups.com
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---