birdsong
2010-Nov-11 19:52 UTC
[Puppet Users] using puppet to restore root access to a box
Hey all, I''m pretty new to puppet; I''m coming from a cfengine background. Anyway, so far I like puppet well enough. I''ve got a dilemma I''m hoping this list can help with. I''ve lost root access to a postgres master running on an ec2 instance. It''s running a 0.24.x client that''s checking into my puppet master which runs 2.6.3. All I''d like to do is have the puppet agent pull down a sudoers file, but I''m seeing that 0.24.x clients don''t support stages and some other errors that seem totally work-around-able. Nov 11 19:38:01 ip-<address> puppet-master[3885]: Could not call: Fileset paths must be fully qualified Nov 11 19:38:01 ip-<address> puppet-master[3885]: Compiled catalog for postgres-master in environment development in 0.02 seconds Nov 11 19:38:01 ip-<address> puppet-master[3885]: Stages are not supported by 0.24.x client; stage(s) Stage[main] will be ignored Nov 11 19:38:01 ip-<address> puppet-master[3885]: Could not call: Mounts without paths are not usable I''ve stripped site.pp down to bare bones in hopes to have it pull the sudoers file: (the puppet master''s hostname is ''puppet'') node default { file { "/etc/sudoers": owner => "root", group => "root", mode => "440", source => "puppet://puppet/modules/users/sudoers" } } I''m guessing that I need to somehow serve up a catalog in a non-staged way, but I have no idea how to do that. Any tips? Should I just install a 0.24.x master temporarily? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Bruce Richardson
2010-Nov-11 21:33 UTC
Re: [Puppet Users] using puppet to restore root access to a box
On Thu, Nov 11, 2010 at 11:52:26AM -0800, birdsong wrote:> > I''m guessing that I need to somehow serve up a catalog in a non-staged > way, but I have no idea how to do that. Any tips? Should I just > install a 0.24.x master temporarily?If coyping is the problem, don''t copy the file; write it. So do content => file( whatever ) rather than source => ''puppet:///whatever'' -- Bruce Remember you''re a Womble. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
David Birdsong
2010-Nov-11 21:46 UTC
Re: [Puppet Users] using puppet to restore root access to a box
On Thu, Nov 11, 2010 at 1:33 PM, Bruce Richardson <itsbruce@workshy.org> wrote:> On Thu, Nov 11, 2010 at 11:52:26AM -0800, birdsong wrote: >> >> I''m guessing that I need to somehow serve up a catalog in a non-staged >> way, but I have no idea how to do that. Any tips? Should I just >> install a 0.24.x master temporarily? > > If coyping is the problem, don''t copy the file; write it. So do > > content => file( whatever ) > > rather than > > source => ''puppet:///whatever'' > >that''s the thing, not sure if it''s the copy that is the problem--though this appears to remove one of the failed steps. it''s this line that i was thinking indicates the outer most scope of the problem: Nov 11 19:38:01 ip-<address> puppet-master[3885]: Stages are not supported by 0.24.x client; stage(s) Stage[main] will be ignored i infer Stage[main] is everything, therefore File {} will never be applied on the agent. (still learning the right words to describe puppet actions..)> -- > Bruce > > Remember you''re a Womble. > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Bruce Richardson
2010-Nov-11 22:21 UTC
Re: [Puppet Users] using puppet to restore root access to a box
On Thu, Nov 11, 2010 at 01:46:50PM -0800, David Birdsong wrote:> problem--though this appears to remove one of the failed steps. it''s > this line that i was thinking indicates the outer most scope of the > problem: > Nov 11 19:38:01 ip-<address> puppet-master[3885]: Stages are not > supported by 0.24.x client; stage(s) Stage[main] will be ignored > > i infer Stage[main] is everything, therefore File {} will never be > applied on the agent. (still learning the right words to describe > puppet actions..)Ah, right. You may find this useful: http://www.mail-archive.com/puppet-dev@googlegroups.com/msg08787.html If there''s a version of 2.6 where that fix has gone in, you need that version. If not, you could try applying the patch yourself ;) -- Bruce Bitterly it mathinketh me, that I spent mine wholle lyf in the lists against the ignorant. -- Roger Bacon, "Doctor Mirabilis"