similar to: Pushing a file only if another does not exist.

Luke has mentioned a few times that people are fairly quiet about numbers, so I thought I''d help out there. Our production Puppet server currently has 75 signed certificates, and I believe essentially all of those systems are active. We have an extremely diverse environment; there are rarely more than three or four systems that can use the same set of classes. So that represents quite

Can anyone who''s having this problem please send details? I''m trying to reproduce it -- I''ve got 5 clients concurrently retrieving 200 10k files made of random binary, and I can''t get any corruption or memory growth at all. Is everyone experiencing the problem using Mongrel? Webrick? What versions of ruby? Are only big files affected? Small files?

Hi all, I''ve been looking for a good example for how one would build a module, but I couldn''t really find something that I liked, so I went ahead and tried to do it myself. The result is this: a git module (see attachment). Please have a look and comment on it, before I add it to the wiki. I especially want comments on the setup of the module itself, not so much on the git

Hi, I have a class to add users to all the host servers. We are in the process to have a coexisting user which belongs in NIS & as well as /etc/passwd. We have NIS clients (yp running) on all host servers. So when running puppet is fails to add or modify user, bcos the user already exists in NIS. Eg: A user pcruise is an existing NIS user. When using useradd or

I was wondering if there would be any benefit to the general community if I made available a debian and ubuntu repository of up to date puppet packages. I have the infrastructure in place anyway for my work (pbuilder + falcon), and can quite easily run up a vhost on a VM somewhere. Debian Etch (4.0) for example has puppet 0.20.1, and will never get a newer version. Ubuntu Feisty has a newer

What is everyone''s experience with Puppet on Ubuntu? Does it work as expected? Any caveats or oddities? -- DK -- Digant C Kasundra <digant@stanford.edu> Technical Lead, ITS Unix Systems and Applications, Stanford University

Greetings all, My deployment of puppet includes a monitrc to make sure that puppetd stays up and running. It seems like (across all of my hosts) that pupeptd will end up dying and restarted by monit. I''m running puppetd under a screen session now on one particular host with --debug --verbose to see if any thing comes out on console but until it happens again, any anybody else

Hello, I just attempted to remove both the ypbind and the yp-tools packages using the package parameter with yum. As it turns out, both of these packages depend on each other. Is there a way of forcing package removal and, if there is not, is there a way of making all packages to be removed be collapsed into the same yum command? Either of these solutions would solve the problem with the

i got a little idea there, should not puppet use environement LANG=C when managing facts or packages etc... ? i have LANG=fr_FR.UTF-8 and puppet choke on quite a few facts (erors messages with uname for exemple: Pour en savoir davantage, faites: « uname --help ». ) and also with packages updates : /usr/bin/apt-cache policy mysql-client-4.1 => err:

Hi all, I have two prodction servers with FreeBSD 5.4 (all security patches are applied). They running some services like dns, ssh, http, ftp, etc. But I woukd like to encrypt some services for some hosts with ipsec when it is accessed. For example: - DNS resolution: not encrypted. - DNS replication master-slave: encrypted by ipsec. - Telnet: encrypted by ipsec for some hosts. Deny

I''m trying to install the tomcat5.5 package under Debian Etch. The problem is that the init.d script for tomcat5.5 uses "su .... &" to run some things (I think logging processes?) This causes puppetd to hang in its run, because the subprocess never returns (due to open filehandles?). Does anybody have any idea what I can do to get around this? The same

Greetings! Are there any plans of using Kerberos for authentication in addition to (or in place of) SSL certificates in Puppet? Kerberos provides mutual, cryptographically strong authentication. A number of different services are Kerberos-enabled (SSH, NFSv4 and HTTP are common examples), and thus use the same authentication mechanism system-wide. At our site, almost all services and users are

Just curious as to the functionality of puppet. Does Puppet ensure that a service is up and running as long as puppet is running? Ie, I want to make sure ssh is always running, if for some reason ssh get''s shut down, does puppet start it back up when it does it''s config sync run? Thanks! --------------------------------- Pinpoint customers who are looking for

This is slightly off topic, and may just be tossing red meat to y''all, but here goes: My boss has RedHat coming in on Tuesday to give a spiel on RHN Satellite. I''m dubious, as it seems mostly like a web UI wrapped around a Yum repository system and a half-baked configuration management system. I''m of the opinion that our time and money would be better spent getting

Is it possible to specify an arch type (e.g. i386 or x86_64, etc) when using the package resource type? -- DK

I would like to write up brief tutorial/documentation on how to manage /etc/passwd using puppet. While this may seem pretty straight forward to some...the documentation is not. We have been able to create a manifest that defines all of our users "virtually" and are able to "realize" users and add them to the system(s) running puppetd. Is there a way to simply realize all users

I know people must be doing something to manage iptables, but I haven''t been able to find anything yet. ( My google-fu must be weak today. ) What are you using to manage your iptables? -- -- Perfection is just a word I use occasionally with mustard. --Atom Powers--

Apparently I''m missing how information comes in from different places to one destination, or something. The current case is a simple one; I want to define everything about the firewall in one place, *except* the source of the /etc/sysconfig/ iptables file (which will be system-specific). Apparently I can''t just set that attribute of that file resource in the node statement,

I''m about to leave town for three weeks and my home server keeps rebooting. It''s my mail server, unfortunately, so there''s a good chance you won''t get this. :/ Anyway, I''ve been meaning to do this for ages and ages, and it''s time to finally do so. I need to move all of the Puppet lists to a public, non-me provider, someone who has

Anyone care to share how they handle yum updates? We have a script that runs yum update nightly and then emails us the results when there are packages to be updated. Ideally I''d like a way to keep a class in site.pp that can be uncommented to run yum update -y after the update list is reviewed by a human. Tim