similar to: puppetlabs-firewall stages and persistence

Hello, I can''t figure out how I can use the module puppetlabs-firewall only for some targeted nodes. If I put : resources { "firewall": purge => true } in top scope (i.e. site.pp), then all the firewall rules on all my nodes are purged. Even for nodes for which I don''t apply any module containing specific firewall { ... } resources. If I put it in a module

Hi all, I''m looking for background information about how bug #7127[1] should be fixed: prerun_command don''t stop puppet on error I think there''s general agreement that if the prerun command fails, then the catalog should not be applied, but the report should be sent, and the report''s status should be "failed". However, what about the post-run

I am working on this module: https://github.com/belminf/puppet-iptables I have this defined resource: define iptables::hole ($proto=''tcp'', $port, $source=undef) { firewall { "100 input: $name": chain => ''INPUT'', proto => $proto, dport => $port, source => $source, action => ''accept'',

I''m using puppetlabs/firewall with Puppet 2.7.2, and for the most part it''s working great. I have this in my sites.pp, which I took from this list sometime ago, to save firewall rules to disk when they''re changed: # Always persist firewall rules if ($kernel == ''Linux'') { exec { ''persist-firewall'':

Dears all, I was testing my localusers facter by puppetmaster fileserver but i''d got in error Could not retrieve localusers: No such file or directory - /etc/ puppet/whitelist I was pretending the file was served by fileserver of puppetmaster doing in init.pp : file { "/etc/puppet/whitelist": ensure => present, Just before to call a facter. I

Hi, I am trying to convince aptitude update to run only when a file changes in /etc/apt/sources.list.d: exec { <snip> "aptitude-update": command => "/usr/bin/aptitude update", subscribe => "$basedir/sources.list.d", refreshonly => true; } File { owner => ''root'', group =>

Hi, I need to use the output of a script to set the value of a variable. I understand the only way to do this is to use a custom Facter fact. However, this script will only run when (naturally) it''s been installed, which is something Puppet takes care of. Conf files, which I would very much like to be able to install as part of the same run depend on the variable being set. So, it

I am trying to expose a custom fact that requires a certain gem to be installed. However, the facts are being loaded before the module is loaded (and I see why this is the case sine the fact should be made available to the module). So my question is, is there a way to avoid this chicken and egg problem? I tried putting the module in a stage before main, but it still looks like the facts

Hi everyone- I have used several methods to calculate principal components rotated using the varimax procedure. This is simple enough. But I would like to calculate the % of variance explained associated with each PC before and after rotation. factanal returns the % of variance explained associated with each PC but I cannot seem to get it to change after rotation. Many thanks for your

Hello everyone- I have a 3-d array with the 1st dimension being monthly mean data that I would like to correlate with some time series index, for example, and save the coefficients in an array. The code I am currently running is.... rData <- array(0,c(73,144)) # array to store results for (i in 1:73) { for (j in 1:144) { rData[i,j] <- cor(slp[,i,j],y)

Hi All, I have a provider dns_zone_recourd that is using nsupdate and dig commands. nsupdate and dig are provided by bind-utils RPM. Before I get puppet to install bind-utils I am getting an error: "Could not run Puppet configuration client: Could not find a default provider for dns_zone_record" I am getting an error that there are no providers available before puppet is able to

Howdy all, I was wondering if there was a known bug with the everyone acl. When looking at the security tab on windows the everyone acl has the read permission. If I unselect it to give everyone no permission and hit apply, read becomes checked again. If I select deny everyone read, then a warning pops up saying this will deny read for all users and it does. If after that I give read to another

hello guys, I am trying to incorporate run stages into my puppet setup. I''ve been working with this for a few days and I haven''t quite got the hang of it yet... When I attempt my puppet run this is the error I see: ------------------------------------------------ [root@chromews21 ~]# puppetd -t err: Could not retrieve catalog from remote server: Error 400 on SERVER:

During puppet catalog runs, I sometimes (~ 10%) get the following message: Failed to retrieve current state of resource: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A Has anyone else ran into this? I am running puppet 0.25.1 on Solaris 9 and 10. Let me know what other info you need to help debug... -- You received this message because you are subscribed to the

Hi everyone, Here are the manifest I am using: In file ''*modules/test/manifest/init.pp*'': class test ( $test = undef, ) { notice("Here is the message: ${test}") } Now in ''*modules/saas/manifests/client/sudo.pp*'': class saas::client::sudo { class { ''test'': } } Now in ''*manifests/sites.pp*'': import

I''ve been using camptocamp''s iptables module. It works pretty well, lets me define rules in various modules, etc. Now I find myself needing to generate a commented list of it''s rules. I notice that the README has a nice exec suggestion. But, when I try it, I can''t get it to work. In my iptables/manifests/init.pp I have: Iptables { before =>

My install was working for a couple of months until I rebooted my puppet server. The clients do not report an error when I run puppet agent -t. I''ve attempted to remove certificates and renew. The clients get new certificates, but the console still does not update. Even the puppet server itself is not updating as a client. After reboot the only thing I have noticed that changed

I am running puppet 3.1.1 and have a site.pp which roughly looks like this site.pp: node basenode { include common } node ''server1'' inherits basenode { include role::appserver } node ''server2'' inherits basenode { include role::webserver } And my common module includes lots of different types of classes for creating base directories, adding in

Hi, I''m using puppet 2.7.3 on RHEL/CentOS and I have an issue which is now a big blocking issue within my environment. What I''m trying to accomplish wit puppet is a create a mountpoint, mount a filesystem on it and install an application on that filesystems are set proper user/ group and permissions on it, but it fails big time. The issues I currently run into are about 3

Hi, I am getting the following error on my CentOS clients; err: Could not run Puppet configuration client: Invalid parameter stage at /etc/puppet/manifests/nodes.pp:32 The server is CentOS 5.4 with packages from the epel-puppet repos; # rpm -qa | grep puppet puppet-dashboard-1.0.3-3 puppet-2.6.1-0.3.rc3.el5 puppet-server-2.6.1-0.3.rc3.el5 The clients are; # rpm -qa | grep puppet