https://www.puppet.com/community logo
Join Slack
Powered by
# voxpupuli
  • v
    bleh, you'll see the entire test suite is broken :P
  • v
    no, it's simpler than that: I picked the one directory which was actually a template builder
  • v
    but now that I've had something to eat I hope the day will go better
  • v
    nice
  • v
  • j
    has anyone used 
    kmod::load
    from 
    puppet/kmod
    ? I have an issue which isn't directly caused by the mod but I'm curious as to how others have dealt with it. I am battling a strange error... which I think has something to do with a kernel mod taking some time to settle before related sysctls are exposed. E.g.
    Copy code
    Notice: /Stage[main]/Kmod/Kmod::Load[bridge]/Exec[modprobe bridge]/returns: executed successfully (corrective)
Warning: sysctl parameter net.bridge.bridge-nf-call-iptables wasn't found on this system
Error: Execution of '/sbin/sysctl net.bridge.bridge-nf-call-iptables=1' returned 255: sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory
Error: /Stage[main]/Sysctl::Values/Sysctl::Value[net.bridge.bridge-nf-call-iptables]/Sysctl_runtime[net.bridge.bridge-nf-call-iptables]/val: change from 'absent' to '1' failed: Execution of '/sbin/sysctl net.bridge.bridge-nf-call-iptables=1' returned 255: sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory
Notice: /Stage[main]/Docker::Service/Service[docker]/ensure: ensure changed 'stopped' to 'running'
    I am thinking I might have to stick an 
    exec
    of a 
    sleep
    in there but that seems... awful...
  • d
  • b
    does it work on a second run?
  • j
    yes
  • j
    Copy code
    [root@jhoblitt-test3 modprobe.d]# /sbin/sysctl net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-iptables = 1
  • j
    and
    Copy code
    [root@jhoblitt-test3 modprobe.d]# cat /proc/sys/net/bridge/bridge-nf-call-iptables
1
  • b
    you could add an if condition around the sysctl and check if the bridge module is loaded. in that case you need two runs
  • j
    adding a fact to use for a conditional branch always feels dirty to me too
  • j
    I guess I could have an exec busy wait until the sysctl appears
  • j
    that seems slightly less awful than a sleep?
  • b
    I'm not sure 😄
  • j
    I am a bit surprised that modprobe returns before the mod is fully initialized. I guess it just tells the kernel what needs loading and returns
  • b
    maybe that's configureable? or it's a sysctl bug that it's too slow?
  • j
    The sysctl puppet mod I'm using is checking for the /proc file
  • j
    so it means the /proc file is taking a moment to appear too
  • b
    I'm trying to manage YUM repositories (specifically, EPEL for RHEL7) and am using Voxpupuli Puppet-yum module but I'm having trouble figuring out how to get the EPEL7 GPG key installed by the module. Obviously, the proper gpgkey is defined here but the gpg key at /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 isn't getting copied/installed. I've tried this bit of code: 
    # These GPG keys will be installed
    yum::gpgkeys:
    '/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7':
    ensure: present
    but still, no gpg key installed. Can someone give me a pointer or two as to how to get the module to install the appropriate GPG key for EPEL?
  • b
    I'm trying to manage YUM repositories (specifically, EPEL for RHEL7) and am using Voxpupuli Puppet-yum module but I'm having trouble figuring out how to get the EPEL7 GPG key installed by the module. Obviously, the proper gpgkey is defined here but the gpg key at /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 isn't getting copied/installed. I've tried this bit of code: 
    # These GPG keys will be installed
    yum::gpgkeys:
    '/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7':
    ensure: present
    but still, no gpg key installed. Can someone give me a pointer or two as to how to get the module to install the appropriate GPG key for EPEL?
  • d
  • s
    This message was deleted.
    b
    v
    +2
    • 5
    • 72
  • v
    Copy code
    yum::repos:
  epel:
    enabled: true
    skip_if_unavailable: true
    priority: 100
  • v
    for example
  • v
  • v
    doesn't it import the key or just too late?
  • b
    I'm looking at the code and the code appears to be correct but I'm sure it's something I'm [not] doing.
  • v
    becase you probably need to configure the resoruce ordering
1...128129130...648Latest