Is it possible to tell puppet to compile a catalog for one (or all) node(s) and save that particular data somewhere?
I'm specifically interested in getting all needed packages and their versions per node, but a general approach for getting any data is also suitable.
I want to have one place where I have defined ssh keys for my users. These users can be in different (multiple) roles on single server. So I defined ssh_authorized_key as virtual and then wanted to realize them in different roles. Example:
@ssh_authorized_key {
"user_a":
tag => ['deployer', 'developer', 'root'],
key => "xxx",
type => "ssh-dss",
ensure => present;
"user_b":
tag => ['deployer', 'root'],
key => "yyy",
type => "ssh-dss",
ensure => present;
"user_c":
tag => ['root', 'deployer'],
key => 'zzz',
type => "ssh-rsa",
ensure => present;
}
And then realize them for multiple users on single node:
Ssh_authorized_key<| tag == 'root' |> {
user => 'root'
}
Ssh_authorized_key<| tag == 'deployer' |> {
user => 'deployer'
}
But puppet will install the certificates only for one user. I think that main concept of my solution is wrong. But I can't figure out how to install single certificate to multiple users?
We're using nagios check_ntp_time for monitoring time on our servers. Unfortunately the service is flapping. And reporting a lot of false-positives. It happens everytime for random server in random day time and lasts for ~10-30 minutes. When the problem occurs we get:
watch01:~ # /usr/lib/nagios/plugins/check_ntp_time -H lb01 -w 1 -c 2 -v
sending request to peer 0
response from peer 0: offset 0.07509887218
sending request to peer 0
response from peer 0: offset 0.07508444786
sending request to peer 0
response from peer 0: offset 0.07499825954
sending request to peer 0
response from peer 0: offset 0.07510817051
discarding peer 0: stratum=0
overall average offset: 0
NTP CRITICAL: Offset unknown|
When everything is ok, we get (I used different server to not have to wait):
watch01:~ # /usr/lib/nagios/plugins/check_ntp_time -H web02 -w 1 -c 2 -v
sending request to peer 0
response from peer 0: offset 0.0002282857895
sending request to peer 0
response from peer 0: offset 0.0002194643021
sending request to peer 0
response from peer 0: offset 0.0002347230911
sending request to peer 0
response from peer 0: offset 0.0002293586731
overall average offset: 0.0002282857895
NTP OK: Offset 0.0002282857895 secs|offset=0.000228s;1.000000;2.000000;
We are using:
Remote ntp daemon is:
I already found some forums where the problem is described: 1, 2, 3. Every time they edvise to upgrade nagios-plugins, because in version prior to 1.4.13 there was a bug with inserted leap second. But we have already newer version of nagios-plugins.
Example:
max_input_time 600
max_execution_time 30
Question: Will be my PHP script force to terminate if upload of file(s) from HTML form will take let's say 200 seconds? I'm assuming that execution of the script will not take longer than 30 seconds.
To be more precise: In infrastructure with apache + php: When will PHP start counting max_input_time and when max_exectuion_time?
Is it possible to declare variable in node and than propage it way down to the erb template?
Example:
node basenode {
$myvar = "bar" # default
include myclass
}
node mynode extends basenode {
$myvar = "foo"
}
class myclass {
file { "/root/myfile":
content => template("myclass/mytemplate.erb")
ensure => present,
}
}
Source of mytemplate.erb:
myvar has value: <%= myvar %>
I know that my example might be complicated. But I'm trying to propagate file on (almost) all my nodes and I want its content to be altered depending on the node which requests the file. The $myvar = "bar" statement should be default when node does not override its value.
Is there a solution to my problem? I'm using puppet 0.24.5
Edit: The problem here is probably variable inheritance order. This $myvar variable won't have foo value in mynode node. The solution here would be to include myclass directly in mynode. But I really don't want to do that. Is there an option to override class variable value after the class has been included?
I'm trying to get up dynamical WebDav on my virtual hosts
<VirtualHost *:80>
# http://www.example.com/test.txt -> /var/www/example.com/www/test.txt
VirtualDocumentRoot /var/www/%-2.0.%-1.0/%-3+/
<Location /webdav>
Dav On
AuthType Basic
AuthName "example.com"
AuthUserFile /var/www/[PROBLEM-1]/passwd.dav
Require valid-user
</Location>
</VirtualHost>
What I'm trying to do here is to load dav passwd file dynamically based on which domain is requested. It is something like "groups" if you wish. So that owner of domainA is not allowed to access files of domainB. So maybe there is some other solution based on AuthGroupFile directive? Or anything based on LDAP authentication which would use groups named after hosts?
We're using nagios to watch our servers health. Now we have a task to add server which will be up only for certain time. And during that time we have to ensure that all services are up and running. Unfortunately we don't know when will be the host down. So we need some automatic way to achieve this.