Admins

$ ssh -t -A root@pavot.april.org vserver dns enter # dns
root@dns:/# emacs /etc/bind/zones/masters/vm.april-int
root@dns:/# cd /etc 
root@dns:/etc# git commit --author "Loic Dachary <loic@dachary.org>" -a -m "Definition de agenda-du-libre.vm.april-int" 
diff --git a/bind/zones/masters/vm.april-int b/bind/zones/masters/vm.april-int
index c2595c8..661b436 100644
--- a/bind/zones/masters/vm.april-int
+++ b/bind/zones/masters/vm.april-int
@@ -3,7 +3,7 @@ $TTL 1D

 @       IN SOA pavot.april-int. hostmaster.april.org. (

-        2013061600      ; Serial
+        2013071800      ; Serial
         3H              ; Refresh
         1H              ; Retry
         1W              ; Expire
@@ -46,5 +46,6 @@ gerrit                        IN      A       192.168.4.6
 spip.libre-en-fete     IN      A       192.168.4.7
 munin                  IN      A       192.168.4.8
 postfix                        IN      A       192.168.4.9
+agenda-du-libre                IN      A       192.168.4.10

 april-ci               IN      A       192.168.5.1
/etc/init.d/bind9 reload
ssh -t -A root@ns1.april.org vserver dns2 enter 
/etc/init.d/bind9 reload 

$ ssh -t -A root@controller.vm.april-int
root@controller:~# nova boot --image 'Wheezy+Emacs-Dec12' --flavor e.1-cpu.10GB-disk.1GB-ram --key_name loic --availability_zone=bm0008 --poll agenda-du-libre
root@controller:~# nova list
...
| d1c1216c-ec3e-43e7-82f2-270f7f5a94bd |  agenda-du-libre   |   ACTIVE  | novanetwork=10.145.4.18 |
...

En suivant les instructions du wiki

$ ssh -t -A root@yopo.april.org  ssh 10.145.4.18 
# cat >> /etc/network/interfaces <<EOF
        up ip addr add 192.168.4.10/24 dev eth0
        up ip route add 192.168.0.0/16 via 192.168.4.1 src 192.168.4.10
EOF
/etc# git diff dhcp/dhclient.conf 
diff --git a/dhcp/dhclient.conf b/dhcp/dhclient.conf
index 431fafd..71d0feb 100644
--- a/dhcp/dhclient.conf
+++ b/dhcp/dhclient.conf
@@ -19,6 +19,8 @@ send host-name = gethostname();
 #send dhcp-lease-time 3600;
 #supersede domain-name "fugue.com home.vix.com";
 #prepend domain-name-servers 127.0.0.1;
+prepend domain-name-servers 192.168.2.12;
+supersede domain-search "vm.april-int";
 request subnet-mask, broadcast-address, time-offset, routers,
        domain-name, domain-name-servers, domain-search, host-name,
        dhcp6.name-servers, dhcp6.domain-search,
# ifdown eth0 ; ifup eth0
# sleep 120
# ping 192.168.2.12
PING 192.168.2.12 (192.168.2.12) 56(84) bytes of data.
64 bytes from 192.168.2.12: icmp_req=1 ttl=63 time=6.40 ms
$ ssh -t -A root@agenda-du-libre.vm.april-int
root@agenda-du-libre:~# 
root@agenda-du-libre:~# scp controller.vm.april-int:.ssh/authorized_keys .ssh/authorized_keys

J'aurais du partir d'une image puppet pour que puppet client soit déjà installé

# apt-get install puppet
# apt-get remove libruby1.9.1
# echo  agenda-du-libre.vm.april-int > /etc/hostname
# hostname agenda-du-libre.vm.april-int
# ping puppet
PING puppet.vm.april-int (192.168.4.2) 56(84) bytes of data.
64 bytes from 192.168.4.2: icmp_req=1 ttl=64 time=0.576 ms
...

<kankan_01> dachary: pour le review, il y a ça qui englobe les deux : https://agir.april.org/projects/admins/repository/diff?rev=558432ce23db71b593ab79110248371a901f1867&rev_to=fe180fed1f151fbc5a224766c408cf7a74716325
<dachary> salut kamarade
-*- kankan_01 va devoir déconnecter son client IRC dans les minutes qui suivent.
<kankan_01> salut :)
<vincentxavier> matin
<vincentxavier> matin kamarade dachary
<dachary> kankan_01: ok, tu as fait ce travail en binome avec qui ? 
<dachary> ça m'a l'air tout a fait bien
-*- dachary relis
<dachary> puppetmaster/manifests/agenda-du-libre.vm.april-int/test-in-openstack.sh
<dachary> le test est commenté à la fin
<dachary> kankan_01: ^
<dachary> https://agir.april.org/projects/admins/repository/revisions/master/entry/puppetmaster/manifests/openstack-instance.pp#L4
<dachary> toutes les instances openstack s'enregistrent automatiquement aupres de backuppc
<dachary> et
<dachary> node 'agenda-du-libre.vm.april-int',
<dachary> ?79 ?
<dachary> 'agenda-du-libre.novalocal'
<dachary> ?80 ?
<dachary> inherits openstack-instance {
<dachary> donc l'instance sera backup
-*- dachary explicite ce qui ne l'est pas
<dachary> pour vincentxavier ;-)
<dachary> il manque a puppetmaster/modules/april_apache/manifests/init.pp des tests unitaires et des tests d'integration
<dachary> exemple de test unitaire:
<dachary> https://agir.april.org/projects/admins/repository/revisions/master/entry/puppetmaster/modules/april_apt/spec/classes/april_apt_spec.rb
<dachary> et de test d'integration
<dachary> https://agir.april.org/projects/admins/repository/revisions/master/entry/puppetmaster/modules/april_gdtc/test-in-openstack.sh
<kankan_01> dachary: si tu lis l'historique, j'ai fait plusieurs tests Jenkins (pour les deux machines). D'où le fait que le test ADL soit commenté
<kankan_01> J'ai fait ADL puis LAMP

Mise en production :

- Choix du vraimot de passe root MySQL (à mettre dans le fichier de password)

[12:30:20] <dachary> je me connecte sur ssh -t -A root@agenda-du-libre.vm.april-int
[12:31:26] * dachary ssh root@puppet.vm.april-int cd /srv/admins \; git pull
[12:31:59] <dachary> 44 files changed, 1374 insertions(+), 10 deletions(-)
[12:32:04] <dachary> on voit que ça a bossé ;-)
[12:33:01] <dachary> puppet agent -vt --noop
[12:33:18] <dachary> info: Creating a new SSL key for agenda-du-libre.vm.april-int
[12:33:18] <dachary> info: Caching certificate for ca
[12:33:18] <dachary> info: Creating a new SSL certificate request for agenda-du-libre.vm.april-int
[12:33:18] <dachary> info: Certificate Request fingerprint (md5): EB:BD:FE:D3:1E:11:9A:16:10:01:C6:71:F0:24:BD:CD
[12:33:18] <dachary> Exiting; no certificate found and waitforcert is disabled
[12:33:32] <dachary> back tu puppet
[12:33:52] <dachary> # puppetca list
[12:33:52] <dachary>   "agenda-du-libre.vm.april-int" (EB:BD:FE:D3:1E:11:9A:16:10:01:C6:71:F0:24:BD:CD)
[12:34:12] <dachary> # puppetca sign agenda-du-libre.vm.april-int
[12:34:12] <dachary> notice: Signed certificate request for agenda-du-libre.vm.april-int
[12:34:12] <dachary> notice: Removing file Puppet::SSL::CertificateRequest agenda-du-libre.vm.april-int at '/var/lib/puppet/ssl/ca/requests/agenda-du-libre.vm.april-int.pem'
[12:34:22] <dachary> back to agenda du libre

puppet agent -vr --noop :

info: Caching certificate for agenda-du-libre.vm.april-int
info: Caching certificate_revocation_list for ca
info: Caching catalog for agenda-du-libre.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[first]/April_puppet/Package[augeas-tools]/ensure: current_value purged, should be present (noop)
notice: Class[April_puppet]: Would have triggered 'refresh' from 1 events
notice: Stage[first]: Would have triggered 'refresh' from 1 events
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/April_automysqlbackup/Package[automysqlbackup]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/Backuppc::Client/User[abackup]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Screen/File[/root/.screenrc]/ensure: current_value absent, should be file (noop)
notice: Class[Screen]: Would have triggered 'refresh' from 1 events
notice: Class[April_automysqlbackup]: Would have triggered 'refresh' from 1 events
notice: /Stage[main]/Mysql::Server/Package[mysql-server]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/]/ensure: current_value absent, should be directory (noop)
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh]/ensure: current_value absent, should be directory (noop)
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh/authorized_keys]/ensure: current_value absent, should be file (noop)
notice: /Stage[main]/Bash/File[/root/.bashrc]/content: 
--- /root/.bashrc    2010-01-31 11:52:26.000000000 +0000
+++ /tmp/puppet-file20130801-14144-dihmre-0    2013-08-01 10:34:56.329079001 +0000
 -1,18 +1,22 @@
-# ~/.bashrc: executed by bash(1) for non-login shells.
-
-# Note: PS1 and umask are already set in /etc/profile. You should not
-# need this unless you want different defaults for root.
-# PS1='${debian_chroot:+($debian_chroot)}\h:\w\$ '
-# umask 022
+#
+# DO NOT CHANGE : IT WILL BE OVERRIDEN BY PUPPET ON THE NEXT RUN
+# GENERATED FROM puppet.vm.april-int:/etc/puppet/modules/bash/files/.bashrc
+#
+export HISTCONTROL=ignoredups # Ne pas conserver plusieurs fois de suite la même commande dans l'historique.
+if [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+fi
+if [ "$TERM" != "dumb" ]; then
+    eval "`dircolors -b`" 
+    alias ls='ls --color=auto'
+    alias grep='grep --color=auto'
+fi
+export HISTSIZE=500000
+export PROMPT_COMMAND='history -a'

-# You may uncomment the following lines if you want `ls' to be colorized:
-# export LS_OPTIONS='--color=auto'
-# eval "`dircolors`" 
-# alias ls='ls $LS_OPTIONS'
-# alias ll='ls $LS_OPTIONS -l'
-# alias l='ls $LS_OPTIONS -lA'
+alias dpkg-source="dpkg -l | awk '/^.i/ {print \$2}' | xargs apt-cache policy | awk '/^[a-z0-9\-]+:/ {pkg=\$1}; /\*\*\*/ {OFS=\"\t\"; ver=\$2; getline; print pkg,ver,\$2,\$3}'" 
+#
+# For vserver hosts
 #
-# Some more alias to avoid making mistakes:
-# alias rm='rm -i'
-# alias cp='cp -i'
-# alias mv='mv -i'
+alias upgrade_all='vapt-get --all -- update ; vapt-get --all upgrade && vapt-get --all dist-upgrade; vapt-get --all clean; apt-get update && apt-get upgrade && apt-get dist-upgrade && apt-get clean'
+alias run_all='vsomething vserver --running --all -- exec '

notice: /Stage[main]/Bash/File[/root/.bashrc]/content: current_value {md5}e12f5739f81b08c470f20890304bf53e, should be {md5}e22880457ebb6d9ac06331f5c763adf9 (noop)
notice: /Stage[main]/Bash/File[/root/.bashrc]/mode: current_value 0644, should be 0400 (noop)
err: /Stage[main]/Mysql::Server/Service[mysqld]: Could not evaluate: Could not find init script for 'mysql'
notice: /Stage[main]/April_nagios::Nrpe_server/Package[nagios-plugins-contrib]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/rsync_sender]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios-hetzner.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[controller.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[spip.libre-en-fete.org_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[april-ci.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[april-ci.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[opium.lan.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppet.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[munin.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/April_munin::Node/Package[munin-node]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: Class[Mysql::Server]: Would have triggered 'refresh' from 1 events
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: Class[Ssh::Hostkeys]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/Backuppc::Client/Package[sudo]/ensure: current_value purged, should be present (noop)
notice: Class[Backuppc::Client]: Would have triggered 'refresh' from 6 events
notice: /Stage[main]/April_nagios::Check_mysql/Exec[check-my.cnf]/returns: current_value notrun, should be 0 (noop)
notice: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]/mode: current_value 0644, should be 0600 (noop)
info: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]: Scheduling refresh of Class[Ssh::Server::Service]
notice: /Stage[main]/Vim/Package[vim]/ensure: current_value purged, should be present (noop)
notice: Class[Bash]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[munin.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppet.vm.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: Class[Ssh::Server::Config]: Would have triggered 'refresh' from 1 events
notice: Augeas[sshd_config_PasswordAuthentication](provider=augeas): 
--- /etc/ssh/sshd_config    2012-09-30 14:42:04.996000155 +0000
+++ /etc/ssh/sshd_config.augnew    2013-08-01 10:34:57.153079003 +0000
 -85,3 +85,4 @@
 # PAM authentication, then enable this but set PasswordAuthentication
 # and ChallengeResponseAuthentication to 'no'.
 UsePAM yes
+PasswordAuthentication no

notice: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]/returns: current_value need_to_run, should be 0 (noop)
info: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]: Scheduling refresh of Class[Ssh::Server::Service]
notice: Ssh::Server::Configline[PasswordAuthentication]: Would have triggered 'refresh' from 1 events
notice: Class[Ssh::Server::Service]: Would have triggered 'refresh' from 2 events
info: Class[Ssh::Server::Service]: Scheduling refresh of Service[ssh]
notice: /Stage[main]/Ssh::Server::Service/Service[ssh]: Would have triggered 'refresh' from 1 events
notice: Class[Ssh::Server::Service]: Would have triggered 'refresh' from 1 events
notice: /Stage[main]/April_apache::Server/Package[php5]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/April_apache::Server/Package[php5-mysql]/ensure: current_value purged, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppetmaster.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppetmaster.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios-hetzner.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/April_apache::Server/Package[apache2]/ensure: current_value purged, should be present (noop)
err: /Stage[main]/April_apache::Server/Service[apache2]: Could not evaluate: Could not find init script for 'apache2'
notice: /Stage[main]/April_apache::Server/Package[libapache2-mod-php5]/ensure: current_value purged, should be present (noop)
notice: Class[April_apache::Server]: Would have triggered 'refresh' from 4 events
notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/mode: current_value 0644, should be 0400 (noop)
notice: Class[April_ssh]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[opium.lan.april-int_dsa]/ensure: current_value absent, should be present (noop)
notice: /Stage[main]/Mysql::Config/File[/etc/mysql]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/File[/etc/mysql]: Skipping because of failed dependencies
notice: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]: Skipping because of failed dependencies
notice: /Stage[main]/Mysql::Config/File[/etc/mysql/conf.d]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/File[/etc/mysql/conf.d]: Skipping because of failed dependencies
notice: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]: Skipping because of failed dependencies
notice: /Stage[main]/Mysql::Config/File[/root/.my.cnf]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/File[/root/.my.cnf]: Skipping because of failed dependencies
notice: /Stage[main]/Mysql::Config/Exec[mysqld-restart]: Dependency Service[mysqld] has failures: true
warning: /Stage[main]/Mysql::Config/Exec[mysqld-restart]: Skipping because of failed dependencies
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[controller.vm.april-int_rsa]/ensure: current_value absent, should be present (noop)
err: /Stage[main]/April_munin::Node/Service[munin-node]: Could not evaluate: Could not find init script for 'munin-node'
notice: Class[April_munin::Node]: Would have triggered 'refresh' from 1 events
notice: /Stage[main]/April_nagios::Nrpe_server/Package[nagios-nrpe-server]/ensure: current_value purged, should be present (noop)
err: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]: Could not evaluate: Save failed with return code false
notice: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]/ensure: current_value absent, should be present (noop)
info: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: April_nagios::Nrpe_plugin[check_mysql]: Would have triggered 'refresh' from 1 events
notice: Class[April_nagios::Check_mysql]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Dependency Augeas[nrpe.cfg] has failures: true
warning: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Skipping because of failed dependencies
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Would have triggered 'refresh' from 1 events
notice: Class[April_nagios::Nrpe_server]: Would have triggered 'refresh' from 3 events
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/ensure: current_value absent, should be file (noop)
notice: Class[Vim]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[spip.libre-en-fete.org_rsa]/ensure: current_value absent, should be present (noop)
notice: Class[Ssh::Knownhosts]: Would have triggered 'refresh' from 22 events
notice: Stage[main]: Would have triggered 'refresh' from 15 events
info: Creating state file /var/lib/puppet/state/state.yaml
notice: Finished catalog run in 2.75 seconds

[12:36:17] <dachary> on se lance
[12:36:42] <dachary> je vois rien de problématique modulo le fait que certains trucs échouent a cause du noop
[12:36:50] <dachary> kankan_01: tu en dis quoi ?
[12:37:41] <kankan_01> rien de bizarre non plus
[12:37:48] <dachary> ok go

# puppet agent -vt
info: Caching catalog for agenda-du-libre.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[first]/April_puppet/Package[augeas-tools]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/April_automysqlbackup/Package[automysqlbackup]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Backuppc::Client/User[abackup]/ensure: created
notice: /Stage[main]/Screen/File[/root/.screenrc]/ensure: defined content as '{md5}161e395e35e791ea2ebf041f4764a8fb'
notice: /Stage[main]/Mysql::Server/Package[mysql-server]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/]/ensure: created
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh]/ensure: created
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh/authorized_keys]/ensure: defined content as '{md5}a8e86d4ed6eae0dbeb3b5a69d29b912d'
notice: /Stage[main]/Bash/File[/root/.bashrc]/content: 
--- /root/.bashrc    2010-01-31 11:52:26.000000000 +0000
+++ /tmp/puppet-file20130801-14406-1o11zw8-0    2013-08-01 10:38:04.989079000 +0000
 -1,18 +1,22 @@
-# ~/.bashrc: executed by bash(1) for non-login shells.
-
-# Note: PS1 and umask are already set in /etc/profile. You should not
-# need this unless you want different defaults for root.
-# PS1='${debian_chroot:+($debian_chroot)}\h:\w\$ '
-# umask 022
+#
+# DO NOT CHANGE : IT WILL BE OVERRIDEN BY PUPPET ON THE NEXT RUN
+# GENERATED FROM puppet.vm.april-int:/etc/puppet/modules/bash/files/.bashrc
+#
+export HISTCONTROL=ignoredups # Ne pas conserver plusieurs fois de suite la même commande dans l'historique.
+if [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+fi
+if [ "$TERM" != "dumb" ]; then
+    eval "`dircolors -b`" 
+    alias ls='ls --color=auto'
+    alias grep='grep --color=auto'
+fi
+export HISTSIZE=500000
+export PROMPT_COMMAND='history -a'

-# You may uncomment the following lines if you want `ls' to be colorized:
-# export LS_OPTIONS='--color=auto'
-# eval "`dircolors`" 
-# alias ls='ls $LS_OPTIONS'
-# alias ll='ls $LS_OPTIONS -l'
-# alias l='ls $LS_OPTIONS -lA'
+alias dpkg-source="dpkg -l | awk '/^.i/ {print \$2}' | xargs apt-cache policy | awk '/^[a-z0-9\-]+:/ {pkg=\$1}; /\*\*\*/ {OFS=\"\t\"; ver=\$2; getline; print pkg,ver,\$2,\$3}'" 
+#
+# For vserver hosts
 #
-# Some more alias to avoid making mistakes:
-# alias rm='rm -i'
-# alias cp='cp -i'
-# alias mv='mv -i'
+alias upgrade_all='vapt-get --all -- update ; vapt-get --all upgrade && vapt-get --all dist-upgrade; vapt-get --all clean; apt-get update && apt-get upgrade && apt-get dist-upgrade && apt-get clean'
+alias run_all='vsomething vserver --running --all -- exec '

info: FileBucket adding {md5}e12f5739f81b08c470f20890304bf53e
info: /Stage[main]/Bash/File[/root/.bashrc]: Filebucketed /root/.bashrc to puppet with sum e12f5739f81b08c470f20890304bf53e
notice: /Stage[main]/Bash/File[/root/.bashrc]/content: content changed '{md5}e12f5739f81b08c470f20890304bf53e' to '{md5}e22880457ebb6d9ac06331f5c763adf9'
notice: /Stage[main]/Bash/File[/root/.bashrc]/mode: mode changed '0644' to '0400'
notice: /Stage[main]/April_nagios::Nrpe_server/Package[nagios-plugins-contrib]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Backuppc::Client/File[/var/local/abackup/rsync_sender]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios-hetzner.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[controller.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[spip.libre-en-fete.org_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[april-ci.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[april-ci.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[opium.lan.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppet.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[jenkins.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[munin.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/April_munin::Node/Package[munin-node]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Backuppc::Client/Package[sudo]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/April_nagios::Check_mysql/Exec[check-my.cnf]/returns: executed successfully
notice: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]/mode: mode changed '0644' to '0600'
info: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]: Scheduling refresh of Class[Ssh::Server::Service]
notice: /Stage[main]/Vim/Package[vim]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[munin.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppet.vm.april-int_dsa]/ensure: created
notice: Augeas[sshd_config_PasswordAuthentication](provider=augeas): 
--- /etc/ssh/sshd_config    2012-09-30 14:42:04.996000155 +0000
+++ /etc/ssh/sshd_config.augnew    2013-08-01 10:39:39.669079001 +0000
 -85,3 +85,4 @@
 # PAM authentication, then enable this but set PasswordAuthentication
 # and ChallengeResponseAuthentication to 'no'.
 UsePAM yes
+PasswordAuthentication no

notice: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]/returns: executed successfully
info: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]: Scheduling refresh of Class[Ssh::Server::Service]
info: Class[Ssh::Server::Service]: Scheduling refresh of Service[ssh]
notice: /Stage[main]/Ssh::Server::Service/Service[ssh]: Triggered 'refresh' from 1 events
notice: /Stage[main]/April_apache::Server/Package[php5]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/April_apache::Server/Package[php5-mysql]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppetmaster.april-int_rsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[puppetmaster.april-int_dsa]/ensure: created
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[nagios-hetzner.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/April_apache::Server/Package[apache2]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/mode: mode changed '0644' to '0400'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[opium.lan.april-int_dsa]/ensure: created
notice: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]/content: 
--- /etc/mysql/my.cnf    2012-06-08 20:25:42.000000000 +0000
+++ /tmp/puppet-file20130801-14406-vprp48-0    2013-08-01 10:40:17.721079003 +0000
 -1,125 +1,41 @@
-#
-# The MySQL database server configuration file.
-#
-# You can copy this to one of:
-# - "/etc/mysql/my.cnf" to set global options,
-# - "~/.my.cnf" to set user-specific options.
-# 
-# One can use all long options that the program supports.
-# Run program with --help to get a list of available options and with
-# --print-defaults to see which it would actually understand and use.
-#
-# For explanations see
-# http://dev.mysql.com/doc/mysql/en/server-system-variables.html
-
-# This will be passed to all mysql clients
-# It has been reported that passwords should be enclosed with ticks/quotes
-# escpecially if they contain "#" chars...
-# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
 [client]
-port        = 3306
-socket        = /var/run/mysqld/mysqld.sock
-
-# Here is entries for some specific programs
-# The following values assume you have at least 32M ram
-
-# This was formally known as [safe_mysqld]. Both versions are currently parsed.
+port    = 3306
+socket    = /var/run/mysqld/mysqld.sock
 [mysqld_safe]
-socket        = /var/run/mysqld/mysqld.sock
-nice        = 0
-
+socket    = /var/run/mysqld/mysqld.sock
+nice    = 0
 [mysqld]
-#
-# * Basic Settings
-#
-user        = mysql
-pid-file    = /var/run/mysqld/mysqld.pid
-socket        = /var/run/mysqld/mysqld.sock
-port        = 3306
-basedir        = /usr
-datadir        = /var/lib/mysql
-tmpdir        = /tmp
-lc-messages-dir    = /usr/share/mysql
+user    = mysql
+pid-file  = /var/run/mysqld/mysqld.pid
+socket    = /var/run/mysqld/mysqld.sock
+port      = 3306
+basedir   = /usr
+datadir   = /var/lib/mysql
+tmpdir    = /tmp
 skip-external-locking
-#
-# Instead of skip-networking the default is now to listen only on
-# localhost which is more compatible and is not less secure.
-bind-address        = 127.0.0.1
-#
-# * Fine Tuning
-#
-key_buffer        = 16M
-max_allowed_packet    = 16M
-thread_stack        = 192K
-thread_cache_size       = 8
-# This replaces the startup script and checks MyISAM tables if needed
-# the first time they are touched
-myisam-recover         = BACKUP
-#max_connections        = 100
-#table_cache            = 64
-#thread_concurrency     = 10
-#
-# * Query Cache Configuration
-#
-query_cache_limit    = 1M
-query_cache_size        = 16M
-#
-# * Logging and Replication
-#
-# Both location gets rotated by the cronjob.
-# Be aware that this log type is a performance killer.
-# As of 5.1 you can enable the log at runtime!
-#general_log_file        = /var/log/mysql/mysql.log
-#general_log             = 1
-#
-# Error logging goes to syslog due to /etc/mysql/conf.d/mysqld_safe_syslog.cnf.
-#
-# Here you can see queries with especially long duration
-#log_slow_queries    = /var/log/mysql/mysql-slow.log
-#long_query_time = 2
-#log-queries-not-using-indexes
-#
-# The following can be used as easy to replay backup logs or for replication.
-# note: if you are setting up a replication slave, see README.Debian about
-#       other settings you may need to change.
-#server-id        = 1
-#log_bin            = /var/log/mysql/mysql-bin.log
-expire_logs_days    = 10
-max_binlog_size         = 100M
-#binlog_do_db        = include_database_name
-#binlog_ignore_db    = include_database_name
-#
-# * InnoDB
-#
-# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
-# Read the manual for more InnoDB related options. There are many!
-#
-# * Security Features
-#
-# Read the manual, too, if you want chroot!
-# chroot = /var/lib/mysql/
-#
-# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
-#
-# ssl-ca=/etc/mysql/cacert.pem
-# ssl-cert=/etc/mysql/server-cert.pem
-# ssl-key=/etc/mysql/server-key.pem
+
+
+bind-address    = 127.0.0.1
+ 
+
+key_buffer         = 16M
+max_allowed_packet = 16M
+thread_stack       = 192K
+thread_cache_size  = 8
+myisam-recover     = BACKUP
+query_cache_limit  = 1M
+query_cache_size   = 16M
+log_error          = /var/log/mysql/error.log
+expire_logs_days   = 10
+max_binlog_size    = 100M

 [mysqldump]
 quick
 quote-names
-max_allowed_packet    = 16M
-
+max_allowed_packet = 16M
 [mysql]
-#no-auto-rehash    # faster start of mysql but no tab completition
-
 [isamchk]
-key_buffer        = 16M
-
-#
-# * IMPORTANT: Additional settings that can override those from this file!
-#   The files must end with '.cnf', otherwise they'll be ignored.
-#
+key_buffer    = 16M
 !includedir /etc/mysql/conf.d/

info: FileBucket adding {md5}7424e1ae4a4f3eaf8f1971cf80762978
info: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]: Filebucketed /etc/mysql/my.cnf to puppet with sum 7424e1ae4a4f3eaf8f1971cf80762978
notice: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]/content: content changed '{md5}7424e1ae4a4f3eaf8f1971cf80762978' to '{md5}d9e035104d0794fd82604e6c0ae8d715'
info: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]: Scheduling refresh of Exec[mysqld-restart]
notice: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]/returns: executed successfully
info: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]: Scheduling refresh of Exec[mysqld-restart]
notice: /Stage[main]/Mysql::Config/File[/root/.my.cnf]/ensure: defined content as '{md5}9a561a99b5339aa6ccd432f2e9d94f33'
info: /Stage[main]/Mysql::Config/File[/root/.my.cnf]: Scheduling refresh of Exec[mysqld-restart]
notice: /Stage[main]/Mysql::Config/Exec[mysqld-restart]: Triggered 'refresh' from 3 events
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[controller.vm.april-int_rsa]/ensure: created
notice: /Stage[main]/April_nagios::Nrpe_server/Package[nagios-nrpe-server]/ensure: ensure changed 'purged' to 'present'
notice: Augeas[nrpe.cfg](provider=augeas): 
--- /etc/nagios/nrpe.cfg    2013-03-09 07:53:42.000000000 +0000
+++ /etc/nagios/nrpe.cfg.augnew    2013-08-01 10:41:44.061079001 +0000
 -78,7 +78,6 @@
 #
 # NOTE: This option is ignored if NRPE is running under either inetd or xinetd

-allowed_hosts=127.0.0.1

 -226,3 +225,4 @@
 # only snipplets ending in .cfg will get included
 include_dir=/etc/nagios/nrpe.d/

+server_address=10.145.4.18

notice: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/returns: executed successfully
info: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]/ensure: created
info: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Triggered 'refresh' from 2 events
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/ensure: defined content as '{md5}3a02a3855537126c2e03eabaf9c7ce4d'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[spip.libre-en-fete.org_rsa]/ensure: created
notice: Finished catalog run in 279.23 seconds

[12:43:06] <dachary> # puppet agent -vt
[12:43:07] <dachary> info: Caching catalog for agenda-du-libre.vm.april-int
[12:43:07] <dachary> info: Applying configuration version '1375353269'
[12:43:07] <dachary> notice: Finished catalog run in 2.83 seconds
[12:43:14] <dachary> nagios
[12:43:36] <dachary> ssh -A root@nagios.vm.april-int

root@nagios:~# puppet agent -vt
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for nagios.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_rsa]/ensure: created
info: FileBucket adding {md5}ac2409fb82fb36fd2c3fd2c50339068f
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Vim/Package[vim]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_project[check_cucumber_generate_www.april.org]/Exec[install-cucumber-project-www.april.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Nagios_service[http_agenda-du-libre.vm.april-int]/ensure: created
info: FileBucket adding {md5}8d5a776432b8b6eb60a80b30045566e5
info: /Stage[main]/April_nagios::Server/Nagios_service[http_agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]/ensure: created
info: FileBucket adding {md5}94fa1f48795b7438015cdcb686faca52
info: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/Nagios_service[check_mysql_agenda-du-libre.vm.april-int]/ensure: created
info: /Stage[main]/April_nagios::Server/Nagios_service[check_mysql_agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_spip[check_cucumber_generate_spip.libre-en-fete.org]/Exec[install-cucumber-project-spip-spip.libre-en-fete.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Service[nagios3]: Triggered 'refresh' from 3 events
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/content: 
--- /etc/vim/vimrc.local    2012-12-05 14:00:24.880461000 +0100
+++ /tmp/puppet-file20130801-29987-1q035mv-0    2013-08-01 12:44:41.704461001 +0200
 -2,5 +2,18 @@
 " DO NOT CHANGE : IT WILL BE OVERRIDEN BY PUPPET ON THE NEXT RUN
 " GENERATED FROM puppet.vm.april-int:/etc/puppet/modules/vim/files/vimrc.local
 " 
+set nocompatible
 syntax on
-set paste
+
+" Edit options
+set autoindent
+
+" UI options
+set background=dark
+set ruler
+set laststatus=2
+set showcmd
+
+" Search options
+set ignorecase
+set hlsearch

info: FileBucket adding {md5}2e31556d175342cc9633b30a8737297c
info: /Stage[main]/Vim/File[/etc/vim/vimrc.local]: Filebucketed /etc/vim/vimrc.local to puppet with sum 2e31556d175342cc9633b30a8737297c
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/content: content changed '{md5}2e31556d175342cc9633b30a8737297c' to '{md5}3a02a3855537126c2e03eabaf9c7ce4d'
notice: Finished catalog run in 31.25 seconds

[12:47:13] <dachary>nagios semble ok
[12:49:03] <dachary> ssh -A root@munin.vm.april-int

root@munin:~# puppet agent -vt 
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for munin.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_rsa]/ensure: created
info: FileBucket adding {md5}6048216c1786b764c3ed641cc6c51ec9
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/April_munin::Master/File[/etc/munin/munin-conf.d/agenda-du-libre.vm.april-int]/ensure: created
notice: Finished catalog run in 2.20 seconds

Nagios-hetzner :

root@nagios-hetzner:~# puppet agent -vt
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for nagios-hetzner.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_rsa]/ensure: created
info: FileBucket adding {md5}0866a2c9defdace80d4636396c5ca1d4
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_dsa]/ensure: created
notice: /Stage[main]/Vim/Package[vim]/ensure: ensure changed 'purged' to 'present'
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_project[check_cucumber_generate_www.april.org]/Exec[install-cucumber-project-www.april.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Nagios_service[http_agenda-du-libre.vm.april-int]/ensure: created
info: FileBucket adding {md5}8b85da0ea4b867d1ed165ab2171d8cbf
info: /Stage[main]/April_nagios::Server/Nagios_service[http_agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]/ensure: created
info: FileBucket adding {md5}d8418aec439f5706a9e9f04bb9faf9f6
info: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/Nagios_host[controller.vm.april-int]/hostgroups: defined 'hostgroups' as 'munin-node'
info: /Stage[main]/April_nagios::Server/Nagios_host[controller.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/Nagios_service[check_mysql_agenda-du-libre.vm.april-int]/ensure: created
info: /Stage[main]/April_nagios::Server/Nagios_service[check_mysql_agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_spip[check_cucumber_generate_spip.libre-en-fete.org]/Exec[install-cucumber-project-spip-spip.libre-en-fete.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Service[nagios3]: Triggered 'refresh' from 4 events
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/content: 
--- /etc/vim/vimrc.local    2012-12-06 17:44:06.148811002 +0100
+++ /tmp/puppet-file20130801-343-qhn928-0    2013-08-01 12:51:22.168811001 +0200
 -2,5 +2,18 @@
 " DO NOT CHANGE : IT WILL BE OVERRIDEN BY PUPPET ON THE NEXT RUN
 " GENERATED FROM puppet.vm.april-int:/etc/puppet/modules/vim/files/vimrc.local
 " 
+set nocompatible
 syntax on
-set paste
+
+" Edit options
+set autoindent
+
+" UI options
+set background=dark
+set ruler
+set laststatus=2
+set showcmd
+
+" Search options
+set ignorecase
+set hlsearch

info: FileBucket adding {md5}2e31556d175342cc9633b30a8737297c
info: /Stage[main]/Vim/File[/etc/vim/vimrc.local]: Filebucketed /etc/vim/vimrc.local to puppet with sum 2e31556d175342cc9633b30a8737297c
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/content: content changed '{md5}2e31556d175342cc9633b30a8737297c' to '{md5}3a02a3855537126c2e03eabaf9c7ce4d'
notice: Finished catalog run in 22.18 seconds

Et là, c'est le drame :

[12:55:18] <dachary> check_mysql_agenda-du-libre.vm.april-int
[12:55:21] <dachary> est en warning
[12:56:01] <kankan_01> mhhh, nrpe ?
[12:56:03] <dachary> tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN
[12:56:16] <kankan_01> NRPE: Unable to read output 
[12:56:53] <kankan_01> (bon, ils sont partis manger et m'ont laissé tomber -_- )
[12:57:00] <dachary> pas sympa
[12:57:41] <dachary> me souviens plus comment on fait pour tester nrpe a la main
[12:59:16] <kankan_01> (je l'ai redémarré... "au cas où")
[12:59:21] <dachary> le mot de passe est bien la ou il faut
[13:00:29] <dachary> on pourrait lancer la commande NRPE a la main depuis le nagios
[13:01:11] <dachary> c'est exactement le genre de glitch qui me fait dire qu'on fait bien de faire la mise en production a la main
[13:03:02] <dachary> /usr/lib/nagios/plugins/check_nrpe -H 192.168.4.10 -c check_backuppc
[13:03:02] <dachary> Connection refused by host
[13:03:08] <dachary> hum
[13:03:30] <vincentxavier> bon appétit les gens
[13:03:36] <dachary> \o
[13:04:07] <kankan_01> tcp        0      0 10.145.4.18:5666        0.0.0.0:*               LISTEN      107        260841      1263/nrpe       
[13:04:20] <kankan_01> ok, il a décider de nous troller
[13:04:44] <dachary> ha
[13:04:48] <dachary> il a pris l'IP
[13:04:50] <dachary> par defaut
[13:04:53] <dachary> y'a un pb de config
[13:06:02] * dachary va voir sur libre en fete qui ressemble
[13:14:12] <kankan_01> dachary: ipaddress => 10.145.4.18
[13:14:27] <kankan_01> dachary: avec un facter -p sur agenda-du-libre
[13:14:28] <dachary> oui
[13:14:41] <dachary> mais ça doit pas poser de pb pour ça
[13:15:00] <dachary> c'est routable
[13:15:31] <dachary> root@nagios:~# /usr/lib/nagios/plugins/check_nrpe -H 10.145.4.18 -c check_mysql
[13:15:31] <dachary> NRPE: Unable to read output
[13:15:41] <dachary> garg
[13:15:42] <kankan_01> bah déjà, pourquoi ya une directive listen avec une @IP précise dans nrpe ? 
[13:16:04] <dachary> on pourrait retrouver la raison mais comme ça pose pas pb ...

[13:17:07] * dachary regarde cat /etc/nagios/nrpe.d/check_mysql.cfg 
[13:17:11] <kankan_01> root@agenda-du-libre:/etc# /usr/lib/nagios/plugins/check_mysql
[13:17:11] <kankan_01> Uptime: 1269  Threads: 1  Questions: 107  Slow queries: 0  Opens: 171  Flush tables: 1  Open tables: 41  Queries per second avg: 0.084
[13:17:24] <dachary> Access denied for user 'nagios'@'localhost' (using password: YES)
[13:17:40] <kankan_01> whaaat ?
[13:17:51] <kankan_01> l'user nagios n'a pas été créé
[13:18:08] <kankan_01> Pourtant, c'est dans les directives de check_mysql et ça passait dans l'environnement de dev
[13:18:09] <dachary> zarb
[13:18:15] <dachary> ben oui
[13:18:49] <kankan_01> puppet agent -vt --noop
[13:18:51] <kankan_01> ?
[13:19:12] <kankan_01> rien de neuf... Pfff
[13:19:33] * dachary regarde les logs
[13:20:03] <dachary> http://pastealacon.com/32875
[13:21:10] <kankan_01> en nfait non... bizarre
[13:22:34] <kankan_01>   database_user { "nagios@localhost":
[13:22:34] <kankan_01>     ensure        => present,
[13:22:34] <kankan_01>     password_hash => mysql_password($mysql_nagios_password),
[13:22:34] <kankan_01>     provider      => 'mysql',
[13:22:34] <kankan_01>     require => [ Service['mysql'], Exec['check-my.cnf'] ],
[13:22:34] <kankan_01>   }
[13:22:44] <kankan_01> dans april_nagios::check_mysql
[13:25:43] <dachary> oui
[13:25:49] <dachary> et pourtant il ne fait rien
[13:25:54] <dachary> alors que
[13:26:03] <dachary> # mysql -e 'select * from user' mysql | grep nagios
[13:26:06] <dachary> retourne rien
[13:26:23] <dachary> on dirait bien que c'est database_user qui déconne
[13:26:42] <kankan_01> il n'a pas été exécuté surtout
[13:26:59] <Sp4rKy> avec un -d
[13:27:13] <Sp4rKy> pour voir si il fait un check quand meme ?
[13:27:15] <kankan_01> et pour Munin, juste la connexion n'aboutit pas, car munin-node a déconné aussi  : http://paste.debian.net/hidden/30e4ae83/
[13:29:12] <dachary> ca sent le probleme bien débile
[13:29:39] <dachary> kankan_01: ok, focalisons nous sur un probleme a la fois
[13:29:53] <dachary> a) pourquoi   database_user { "nagios@localhost":
[13:29:57] <dachary> ne fait pas son travail
[13:30:22] <kankan_01> il n'a même pas l'air d'être lancé

root@agenda-du-libre:~# puppet agent -vt --debug
debug: Failed to load library 'rubygems' for feature 'rubygems'
debug: Failed to load library 'selinux' for feature 'selinux'
debug: Puppet::Type::User::ProviderPw: file pw does not exist
debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not exist
debug: Failed to load library 'ldap' for feature 'ldap'
debug: Puppet::Type::User::ProviderLdap: feature ldap is missing
debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist
debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/state/resources.txt]: Autorequiring File[/var/lib/puppet/state]
debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl/public_keys/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys]
debug: /File[/var/lib/puppet/client_data]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/state/last_run_report.yaml]: Autorequiring File[/var/lib/puppet/state]
debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/lib/puppet/state]
debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/crl.pem]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet]
debug: /File[/var/lib/puppet/ssl/certs/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/certs]
debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs]
debug: /File[/var/lib/puppet/state/last_run_summary.yaml]: Autorequiring File[/var/lib/puppet/state]
debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/state/state.yaml]: Autorequiring File[/var/lib/puppet/state]
debug: /File[/var/lib/puppet/ssl/private_keys/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys]
debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/state/classes.txt]: Autorequiring File[/var/lib/puppet/state]
debug: Finishing transaction 70167712591160
debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/crl.pem]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs]
debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/private_keys/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys]
debug: /File[/var/lib/puppet/ssl/public_keys/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys]
debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet]
debug: /File[/var/lib/puppet/ssl/certs/agenda-du-libre.vm.april-int.pem]: Autorequiring File[/var/lib/puppet/ssl/certs]
debug: Finishing transaction 70167711111760
debug: Using cached certificate for ca
debug: Using cached certificate for agenda-du-libre.vm.april-int
debug: Finishing transaction 70167710609100
debug: Loaded state in 0.00 seconds
debug: Executing '/etc/puppet/etckeeper-commit-pre'
debug: catalog supports formats: b64_zlib_yaml dot pson raw yaml; using pson
debug: Using cached certificate for ca
debug: Using cached certificate for agenda-du-libre.vm.april-int
debug: Using cached certificate_revocation_list for ca
info: Caching catalog for agenda-du-libre.vm.april-int
debug: Puppet::Type::Service::ProviderDaemontools: file /usr/bin/svc does not exist
debug: Puppet::Type::Service::ProviderGentoo: file /sbin/rc-update does not exist
debug: Puppet::Type::Service::ProviderRedhat: file /sbin/service does not exist
debug: Puppet::Type::Service::ProviderLaunchd: file /bin/launchctl does not exist
debug: Puppet::Type::Service::ProviderSystemd: file /bin/systemctl does not exist
debug: Puppet::Type::Service::ProviderRunit: file /usr/bin/sv does not exist
debug: Puppet::Type::Package::ProviderRug: file /usr/bin/rug does not exist
debug: Puppet::Type::Package::ProviderUrpmi: file urpmi does not exist
debug: Puppet::Type::Package::ProviderSunfreeware: file pkg-get does not exist
debug: Puppet::Type::Package::ProviderFink: file /sw/bin/fink does not exist
debug: Puppet::Type::Package::ProviderRpm: file rpm does not exist
debug: Puppet::Type::Package::ProviderPorts: file /usr/local/sbin/pkg_deinstall does not exist
debug: Puppet::Type::Package::ProviderGem: file gem does not exist
debug: Puppet::Type::Package::ProviderAix: file /usr/bin/lslpp does not exist
debug: Puppet::Type::Package::ProviderPkg: file /usr/bin/pkg does not exist
debug: Puppet::Type::Package::ProviderPortage: file /usr/bin/eix-update does not exist
debug: Puppet::Type::Package::ProviderOpenbsd: file pkg_delete does not exist
debug: Puppet::Type::Package::ProviderZypper: file /usr/bin/zypper does not exist
debug: Puppet::Type::Package::ProviderSun: file /usr/bin/pkginfo does not exist
debug: Puppet::Type::Package::ProviderPortupgrade: file /usr/local/sbin/pkg_deinstall does not exist
debug: Puppet::Type::Package::ProviderYum: file rpm does not exist
debug: Puppet::Type::Package::ProviderHpux: file /usr/sbin/swinstall does not exist
debug: Puppet::Type::Package::ProviderUp2date: file /usr/sbin/up2date-nox does not exist
debug: Puppet::Type::Package::ProviderFreebsd: file /usr/sbin/pkg_delete does not exist
debug: Puppet::Type::Package::ProviderNim: file /usr/sbin/nimclient does not exist
debug: Puppet::Type::Package::ProviderPacman: file /usr/bin/pacman does not exist
debug: Puppet::Type::Package::ProviderAptrpm: file rpm does not exist
debug: Creating default schedules
debug: Loaded state in 0.00 seconds
info: Applying configuration version '1375353269'
debug: /Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/require: requires Service[mysqld]
debug: /Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/require: requires Exec[check-my.cnf]
debug: /Stage[main]/April_apache::Server/Service[apache2]/require: requires Package[apache2]
debug: /Stage[init]/Apt/File[sources.list]/notify: subscribes to Exec[apt_update]
debug: /Stage[main]/April_munin::Node/Service[munin-node]/require: requires Package[munin-node]
debug: /Stage[main]/April_munin::Node/File_line[cidr_allow_192]/require: requires Package[munin-node]
debug: /Stage[main]/April_munin::Node/File_line[cidr_allow_192]/notify: subscribes to Service[munin-node]
debug: /Stage[init]/Apt/Anchor[apt::update]/require: requires Class[Apt::Update]
debug: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]/require: requires Class[Ssh::Server::Config]
debug: /Stage[main]/April_ssh/Ssh::Server::Configline[PasswordAuthentication]/Augeas[sshd_config_PasswordAuthentication]/notify: subscribes to Class[Ssh::Server::Service]
debug: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]/notify: subscribes to Exec[mysqld-restart]
debug: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/require: requires Package[nagios-nrpe-server]
debug: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/notify: subscribes to Service[nagios-nrpe-server]
debug: /Stage[main]/Ssh::Server::Service/Service[ssh]/require: requires Class[Ssh::Server::Config]
debug: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]/require: requires Class[Ssh::Server::Install]
debug: /Stage[main]/Ssh::Server::Config/File[/etc/ssh/sshd_config]/notify: subscribes to Class[Ssh::Server::Service]
debug: /Stage[main]/Mysql::Config/File[/etc/mysql/conf.d]/notify: subscribes to Exec[mysqld-restart]
debug: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/require: requires File[/root/.ssh]
debug: /Stage[main]/April_apache::Server/Package[libapache2-mod-php5]/require: requires Package[apache2]
debug: /Stage[main]/April_apache::Server/Package[libapache2-mod-php5]/require: requires Package[php5]
debug: /Stage[main]/April_munin::Node/File_line[cidr_allow_10]/require: requires Package[munin-node]
debug: /Stage[main]/April_munin::Node/File_line[cidr_allow_10]/notify: subscribes to Service[munin-node]
debug: /Stage[main]/April_apache::Server/Package[php5-mysql]/require: requires Package[php5]
debug: /Stage[main]/Backuppc::Client/File_line[abackup_sudoers]/require: requires Package[sudo]
debug: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]/require: requires Package[nagios-nrpe-server]
debug: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File[/etc/nagios/nrpe.d/check_mysql.cfg]/notify: subscribes to Service[nagios-nrpe-server]
debug: /Stage[main]/Mysql::Config/File[/root/.my.cnf]/require: requires Exec[set_mysql_rootpw]
debug: /Stage[main]/Mysql::Config/File[/root/.my.cnf]/notify: subscribes to Exec[mysqld-restart]
debug: /Stage[init]/Apt/File[sources.list.d]/notify: subscribes to Exec[apt_update]
debug: /Stage[main]/Mysql::Config/File[/etc/mysql]/notify: subscribes to Exec[mysqld-restart]
debug: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]/require: requires File[/etc/mysql/conf.d]
debug: /Stage[main]/Mysql::Config/Exec[set_mysql_rootpw]/notify: subscribes to Exec[mysqld-restart]
debug: /Stage[init]/before: requires Stage[first]
debug: /Stage[main]/Mysql::Server/before: requires Class[Mysql::Config]
debug: /Stage[first]/before: requires Stage[main]
debug: /Stage[main]/Mysql::Server/Service[mysqld]/require: requires Package[mysql-server]
debug: /Stage[main]/April_nagios::Check_mysql/April_nagios::Nrpe_plugin[check_mysql]/File_line[sudo_check_mysql]/require: requires Package[sudo]
debug: /Stage[main]/Mysql::Config/File[/etc/mysql/my.cnf]: Autorequiring File[/etc/mysql]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/]: Autorequiring User[abackup]
debug: /Stage[main]/Mysql::Config/File[/etc/mysql/conf.d]: Autorequiring File[/etc/mysql]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh/authorized_keys]: Autorequiring File[/var/local/abackup/.ssh]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh/authorized_keys]: Autorequiring User[abackup]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh]: Autorequiring File[/var/local/abackup/]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/.ssh]: Autorequiring User[abackup]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/rsync_sender]: Autorequiring File[/var/local/abackup/]
debug: /Stage[main]/Backuppc::Client/File[/var/local/abackup/rsync_sender]: Autorequiring User[abackup]
debug: /Schedule[daily]: Skipping device resources because running on a host
debug: /Schedule[monthly]: Skipping device resources because running on a host
debug: /Schedule[hourly]: Skipping device resources because running on a host
debug: /Schedule[never]: Skipping device resources because running on a host
debug: /Schedule[weekly]: Skipping device resources because running on a host
debug: /Schedule[puppet]: Skipping device resources because running on a host
debug: Prefetching apt resources for package
debug: Executing '/usr/bin/dpkg-query -W --showformat '${Status} ${Package} ${Version}\n''
debug: Puppet::Type::Package::ProviderApt: Executing '/usr/bin/dpkg-query -W --showformat '${Status} ${Package} ${Version}\n''
debug: Prefetching parsed resources for sshkey
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: Service[mysqld](provider=debian): Executing '/etc/init.d/mysql status'
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: Augeas[sshd_config_PasswordAuthentication](provider=augeas): Opening augeas with root /, lens path , flags 0
debug: Augeas[sshd_config_PasswordAuthentication](provider=augeas): Augeas version 0.10.0 is installed
debug: Augeas[sshd_config_PasswordAuthentication](provider=augeas): Closed the augeas connection
debug: Service[ssh](provider=debian): Executing '/etc/init.d/ssh status'
debug: Service[apache2](provider=debian): Executing '/etc/init.d/apache2 status'
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: Exec[set_mysql_rootpw](provider=posix): Executing check 'mysqladmin -u root -p'FomgubAwm4' status > /dev/null'
debug: Executing 'mysqladmin -u root -p'FomgubAwm4' status > /dev/null'
debug: Service[munin-node](provider=debian): Executing '/etc/init.d/munin-node status'
debug: Augeas[nrpe.cfg](provider=augeas): Opening augeas with root /, lens path , flags 0
debug: Augeas[nrpe.cfg](provider=augeas): Augeas version 0.10.0 is installed
debug: Augeas[nrpe.cfg](provider=augeas): Will attempt to save and only run if files changed
debug: Augeas[nrpe.cfg](provider=augeas): sending command 'rm' with params ["/files/etc/nagios/nrpe.cfg/allowed_hosts"]
debug: Augeas[nrpe.cfg](provider=augeas): sending command 'set' with params ["/files/etc/nagios/nrpe.cfg/server_address", "10.145.4.18"]
debug: Augeas[nrpe.cfg](provider=augeas): Skipping because no files were changed
debug: Augeas[nrpe.cfg](provider=augeas): Closed the augeas connection
debug: Service[nagios-nrpe-server](provider=debian): Executing 'pgrep nrpe'
debug: file_metadata supports formats: b64_zlib_yaml pson raw yaml; using pson
debug: Finishing transaction 70167709962180
debug: Storing state
debug: Stored state in 0.02 seconds
notice: Finished catalog run in 2.68 seconds
debug: Executing '/etc/puppet/etckeeper-commit-post'
debug: report supports formats: b64_zlib_yaml pson raw yaml; using pson

[13:32:16] <dachary> c'est --debug
[13:32:25] <kankan_01> agenda-du-libre: Jul 31 10:27:32 debian puppet-agent[980]: (/Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/ensure) created
[13:32:33] <kankan_01> dans http://jenkins.april.org/jenkins/job/puppetmaster/481/consoleText
[13:33:02] <kankan_01> Donc c'est bien créé dans l'environnement de test
[13:33:28] <dachary> oui
[13:33:30] <dachary> debug: /Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/require: requires Service[mysqld]
[13:33:30] <dachary> debug: /Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/require: requires Exec[check-my.cnf]
[13:33:47] <dachary> c'est tout ce qu'on voit dans http://pastealacon.com/32879
[13:34:42] <kankan_01> et pourquoi pas de ensure => created ?
[13:36:38] <Sp4rKy> manquerait pas un coup de pluginsync ?
[13:36:56] <dachary> Sp4rKy: ah
[13:37:16] <dachary> mais carrément
[13:37:21] <dachary> Sp4rKy: tu es un genie
[13:37:53] <Sp4rKy> c'est ça ?
[13:38:02] <dachary> carrément
[13:38:36] <dachary> au lieu de bootstraper la machine a partir d'une image toute prete pour puppet client j'ai fait ça a base d'une image generique et ensuite ajouté puppet
[13:38:38] <dachary> ...
[13:38:49] <dachary> et oublié pluginsync dans /etc/puppet/puppet.conf
[13:39:04] <dachary> la ou ça me bluff c'est que ça fasse autant de chose *sans* plugingsync
[13:39:23] <dachary> kankan_01: grace a Sp4rKy on va pouvoir aller manger dans pas longtemps
[13:39:35] <kankan_01> :)
[13:39:38] <dachary> je run de nouveau
[13:39:40] <dachary> puppet
[13:40:00] <dachary> notice: /Stage[main]/April_nagios::Check_mysql/Database_user[nagios@localhost]/ensure: created
[13:40:17] <dachary> root@nagios:~# /usr/lib/nagios/plugins/check_nrpe -H 10.145.4.18 -c check_mysql
[13:40:17] <dachary> Uptime: 2660  Threads: 1  Questions: 144  Slow queries: 0  Opens: 171  Flush tables: 1  Open tables: 41  Queries per second avg: 0.054

root@agenda-du-libre:~# puppet agent -vt 
info: Retrieving plugin
notice: /File[/var/lib/puppet/lib/puppet]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider/database_user]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider/database_user/mysql.rb]/ensure: defined content as '{md5}a1de13720084641bcdce82a499b36650'
notice: /File[/var/lib/puppet/lib/puppet/provider/file_line]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider/a2mod]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider/a2mod/modfix.rb]/ensure: defined content as '{md5}b689a1c83c9ccd8590399c67f3e588e5'
notice: /File[/var/lib/puppet/lib/puppet/parser]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/parser/functions]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/validate_hash.rb]/ensure: defined content as '{md5}e9cfaca68751524efe16ecf2f958a9a0'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/validate_bool.rb]/ensure: defined content as '{md5}4ddffdf5954b15863d18f392950b88f4'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/get_module_path.rb]/ensure: defined content as '{md5}d4bf50da25c0b98d26b75354fa1bcc45'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_ip_address.rb]/ensure: defined content as '{md5}a714a736c1560e8739aaacd9030cca00'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_numeric.rb]/ensure: defined content as '{md5}6283dd52935fb1aba41958e50c85b1ed'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/delete.rb]/ensure: defined content as '{md5}9b17b9f7f820adf02360147c1a2f4279'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_domain_name.rb]/ensure: defined content as '{md5}fba9f855df3bbf90d72dfd5201f65d2b'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/has_ip_address.rb]/ensure: defined content as '{md5}ee207f47906455a5aa49c4fb219dd325'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/validate_absolute_path.rb]/ensure: defined content as '{md5}385137ac24a2dec6cecc4e6ea75be442'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/has_key.rb]/ensure: defined content as '{md5}7cd9728c38f0b0065f832dabd62b0e7e'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/flatten.rb]/ensure: defined content as '{md5}251d63696564254d41742ecbfbfcb9fd'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/has_ip_network.rb]/ensure: defined content as '{md5}b4d726c8b2a0afac81ced8a3a28aa731'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_mac_address.rb]/ensure: defined content as '{md5}288bd4b38d4df42a83681f13e7eaaee0'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/validate_array.rb]/ensure: defined content as '{md5}72b29289b8af1cfc3662ef9be78911b8'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/loadyaml.rb]/ensure: defined content as '{md5}2b912f257aa078e376d3b3f6a86c2a00'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/empty.rb]/ensure: defined content as '{md5}ae92905c9d94ddca30bf56b7b1dabedf'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/defined_with_params.rb]/ensure: defined content as '{md5}ffab4433d03f32b551f2ea024a2948fc'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/bool2num.rb]/ensure: defined content as '{md5}8e627eee990e811e35e7e838c586bd77'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/hash.rb]/ensure: defined content as '{md5}75fd86c01d5b1e50be1bc8b22d3d0a61'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/prefix.rb]/ensure: defined content as '{md5}6a2d86233c9435afc1738f60a0c34576'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_integer.rb]/ensure: defined content as '{md5}6520458000b349f1c7ba7c9ed382ae0b'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/swapcase.rb]/ensure: defined content as '{md5}4902f38f0b9292afec66d40fee4b02ec'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/to_bytes.rb]/ensure: defined content as '{md5}83f23c33adbfa42b2a9d9fc2db3daeb4'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/has_interface_with.rb]/ensure: defined content as '{md5}8d3ebca805dc6edb88b6b7a13d404787'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/lstrip.rb]/ensure: defined content as '{md5}210b103f78622e099f91cc2956b6f741'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_array.rb]/ensure: defined content as '{md5}875ca4356cb0d7a10606fb146b4a3d11'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/sort.rb]/ensure: defined content as '{md5}504b033b438461ca4f9764feeb017833'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/merge.rb]/ensure: defined content as '{md5}52281fe881b762e2adfef20f58dc4180'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/mysql_password.rb]/ensure: defined content as '{md5}3c375e08f7372795ad25d51d43995f96'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/member.rb]/ensure: defined content as '{md5}541e67d06bc4155e79b00843a125e9bc'
notice: /File[/var/lib/puppet/lib/puppet/provider/database]/ensure: created
notice: /File[/var/lib/puppet/lib/puppet/provider/database/mysql.rb]/ensure: defined content as '{md5}a337e681a7de594df6240a252aff0f66'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/capitalize.rb]/ensure: defined content as '{md5}14481fc8c7c83fe002066ebcf6722f17'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/values.rb]/ensure: defined content as '{md5}066a6e4170e5034edb9a80463dff2bb5'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/chomp.rb]/ensure: defined content as '{md5}719d46923d75251f7b6b68b6e015cccc'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/unique.rb]/ensure: defined content as '{md5}217ccce6d23235af92923f50f8556963'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/shuffle.rb]/ensure: defined content as '{md5}6445e6b4dc62c37b184a60eeaf34414b'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/num2bool.rb]/ensure: defined content as '{md5}dbdc81982468ebb8ac24ab78d7097ad3'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/pick.rb]/ensure: defined content as '{md5}2bede116a0651405c47e650bbf942abe'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/rstrip.rb]/ensure: defined content as '{md5}8a0d69876bdbc88a2054ba41c9c38961'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/str2bool.rb]/ensure: defined content as '{md5}ab045013031d01a0e9335af92580dde6'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/abs.rb]/ensure: defined content as '{md5}32161bd0435fdfc2aec2fc559d2b454b'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/parseyaml.rb]/ensure: defined content as '{md5}00f10ec1e2b050e23d80c256061ebdd7'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/grep.rb]/ensure: defined content as '{md5}5682995af458b05f3b53dd794c4bf896'
notice: /File[/var/lib/puppet/lib/puppet/provider/a2mod/a2mod.rb]/ensure: defined content as '{md5}8b4836cfbcc980e60c30cc046bc77cd5'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/squeeze.rb]/ensure: defined content as '{md5}541f85b4203b55c9931d3d6ecd5c75f8'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/downcase.rb]/ensure: defined content as '{md5}9204a04c2a168375a38d502db8811bbe'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/is_string.rb]/ensure: defined content as '{md5}2bd9a652bbb2668323eee6c57729ff64'
notice: /File[/var/lib/puppet/lib/puppet/provider/a2mod/redhat.rb]/ensure: defined content as '{md5}90b9add30cf9acf2289a51d9f4c31bd7'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/delete_at.rb]/ensure: defined content as '{md5}6bc24b79390d463d8be95396c963381a'
notice: /File[/var/lib/puppet/lib/puppet/parser/functions/size.rb]/ensur

[14:57:11] <dachary> j'ai oublié backuppc

Vive les IPs publiques :

[11:45:03] <kankan_01> (bon, par contre, il n'y aura pas de reverse proxy pour l'ADL ?)
[11:45:26] <dachary> ben du coup ils ont leur IP publique ils se débrouillent
[11:45:30] <dachary> c'est bcp plus simple

Migration :

[11:41:55] <dachary> usage: nova migrate [--poll] <server>
[11:41:55] <dachary> Migrate a server.
[11:41:55] <dachary> Positional arguments:
[11:41:55] <dachary>   <server>  Name or ID of server.
[11:41:56] <dachary> Optional arguments:
[11:41:58] <dachary>   --poll    Blocks while instance migrates so progress can be reported.
[11:42:12] <dachary> ne  permet pas de migrer en changeant l'availability zone
[11:42:22] <dachary> donc on va faire une image
[11:42:59] <kankan_01> et redéployer
[11:43:35] <kankan_01> (et voir tous les problèmes que va poser en changement d'adresse IP "interne" Openstack)
[11:43:56] <dachary> nova image-create --poll agenda-du-libre agenda-du-libre
[11:43:59] <dachary> c'est en cours
[11:44:52] <dachary> alors logiquement, quand on va re-run puppet agent, il va changer ça dans les ressources exportées
[11:45:12] <dachary> et du coup nagios, munin vont se mettre a jour au prochain run
[11:48:27] <dachary> l'étape suivante est simplement de faire un nova boot sur l'image agenda-du-libre depuis le controller
[11:48:44] <dachary> avec comme availability zone bm0002 qui est celle de psylocibine
[11:49:23] <dachary> apres avoir nova delete l'actuel agenda-du-libre
[11:49:52] <dachary> une fois qu'elle est lancée, on run puppet sur agenda-du-libre + nagios + munin
[11:50:03] <dachary> puis on bind l'IP avec

[11:55:14] <dachary> # nova floating-ip-list
[11:55:14] <dachary> +--------------+-------------+----------+-------+
[11:55:14] <dachary> |      Ip      | Instance Id | Fixed Ip |  Pool |
[11:55:14] <dachary> +--------------+-------------+----------+-------+
[11:55:14] <dachary> | 88.191.250.4 |     None    |   None   | april |
[11:55:16] <dachary> +--------------+-------------+----------+-------+
[11:55:22] <dachary> (je suis dans le controller)
[11:55:36] <dachary> # nova floating-ip-create april
[11:55:36] <dachary> +----------------+-------------+----------+-------+
[11:55:37] <dachary> |       Ip       | Instance Id | Fixed Ip |  Pool |
[11:55:39] <dachary> +----------------+-------------+----------+-------+
[11:55:41] <dachary> | 91.121.254.236 |     None    |   None   | april |
[11:55:44] <dachary> +----------------+-------------+----------+-------+
[11:55:50] <dachary> ( j'avais auparavant fait sur bm0001 :
[11:56:32] <dachary> nova-manage floating create --pool=april --ip_range=91.121.254.236
[11:56:33] <dachary> )
[11:57:16] <dachary> pour dire a openstack que l'IP que j'ai associé a la machine via le panel OVH  est gérée pour le compte d'April
[11:57:40] <dachary> # nova floating-ip-list
[11:57:40] <dachary> +----------------+-------------+----------+-------+
[11:57:41] <dachary> |       Ip       | Instance Id | Fixed Ip |  Pool |
[11:57:41] <dachary> +----------------+-------------+----------+-------+
[11:57:41] <dachary> |  88.191.250.4  |     None    |   None   | april |
[11:57:42] <dachary> | 91.121.254.236 |     None    |   None   | april |
[11:57:45] <dachary> +----------------+-------------+----------+-------+
[11:57:49] <dachary> sur le controller
[11:58:04] <dachary> on voit donc que April possède bien cette IP et qu'elle n'est pour l'instant associée a aucune instance
[11:59:53] <dachary> le snapshot de l'image est toujours en cours ( 10GB a transferer de free vers ovh)
[12:03:03] <dachary> root@bm0001:/var/lib/glance/images# watch ls -ltrh \| tail
[12:03:12] <dachary> surveille la progression ( 8.7GB )
[12:06:21] <dachary> # nova image-create --poll agenda-du-libre agenda-du-libre
[12:06:21] <dachary> Instance snapshotting... 100% complete
[12:06:21] <dachary> Finished
[12:07:07] <dachary> e2fsck -f 0e7527ec-ee42-43e0-a7d8-6ba6d58af59f
[12:07:46] <dachary> resize2fs -M 0e7527ec-ee42-43e0-a7d8-6ba6d58af59f
[12:07:46] <dachary> resize2fs 1.42.5 (29-Jul-2012)
[12:07:46] <dachary> Resizing the filesystem on 0e7527ec-ee42-43e0-a7d8-6ba6d58af59f to 371624 (4k) blocks.
[12:12:00] <dachary> root@bm0001:/var/lib/glance/images# ls -lh 0e7527ec-ee42-43e0-a7d8-6ba6d58af59f
[12:12:01] <dachary> -rw-r--r-- 1 glance glance 1.5G Aug  2 12:11 0e7527ec-ee42-43e0-a7d8-6ba6d58af59f
[12:12:47] <dachary> nova delete agenda-du-libre
[12:13:32] <dachary> nova boot --image 'agenda-du-libre' --flavor e.1-cpu.10GB-disk.1GB-ram --key_name loic --availability_zone=bm0002 --poll agenda-du-libre
[12:17:56] <dachary> Instance building... 100% complete
[12:17:56] <dachary> Finished

root@agenda-du-libre:~# puppet agent -vt --noop

root@agenda-du-libre:~# puppet agent -vt --noop
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for agenda-du-libre.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_rsa]/host_aliases: current_value agenda-du-libre.vm.april-intagenda-du-libre10.145.4.18, should be agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17 (noop)
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_dsa]/host_aliases: current_value agenda-du-libre.vm.april-intagenda-du-libre10.145.4.18, should be agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17 (noop)
notice: Class[Ssh::Hostkeys]: Would have triggered 'refresh' from 2 events
notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/content: 
--- /root/.ssh/authorized_keys    2013-08-02 10:17:33.239007407 +0000
+++ /tmp/puppet-file20130802-3480-1d8eorv-0    2013-08-02 10:21:48.753979001 +0000
 -58,6 +58,3 @@
 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo0J8F5a7JTgd9MQkjFWOWRhCcc3XAVG1DKXpZ9JQtceokqwxQlqUcI7XxHqNCP1DPq8emfV+97JnKfjaBE7+ctZLJirHfdPJSQMAs4dWWwLa8xZeTuVm+LSissHSeJDpXsnhbSc3KuqgaJ8AsWUHb5lUn8k+xqG980TSeDBoOviTgEPXfmtskLua1pjSp1qd3PBDCQyWuIxxEdyGzpNqaX48K9G84jGf7TgOCbGbxgcpWhpLPtmC3Vu5pb2PVvQQUA7dhzB4VkcxesSF2LmQ9JMhOPkXxwZIMqmxlFXl4ZtTrBFPjVKSNRFRd7LjEMUrly9n1OMyGMw3DIFtNKjwbQ== benj@hebus
 ##Quentin Chergui (kankan)
 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+y7rel3gIcSM89lPn+qB2tyhH/reJzQbYB+0CJCW6NCYcrS22b+wa9hsm+GMezv5gY4foMJWSw6kab4e30pbx1NFcM/AANo8T9iymEGFe+LtD68mR5dYjnyR2z9JL1hB3JN9st5wQ2ugDC4uYGsCboOTBgmuy/dpesOuoVMWE9J6G+0JrOp/wTcvvsbouJbRGK3S9MWymi4CdTrEAzSoKzCKG0rYEOTuV7vRA0UYy2awkahK4OAvF8ypBN/5GWpSaR2FPZW1zl3u/wL/oZgwtgTXQlZxtWFM40aQZIRz40gm5hMPGXc1bk2FrNWvISBvtiqtIZwb9yDzzZGxS7KYHw==
-
-# The following ssh key was injected by Nova
-ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEApKfP/I/WoSeX7MAFGpdntC56oHk0wJNn+qy0cud321yTaZRReJGQyqhoBk/sXsnqF4mOpXTf3+Ao1hQIiFazR5Fbmvk7DR0nKj8sGPV0iJB1F0+eyL+w7mgPyD8VDCw+ygCWG4ghMfeGKRAJQweO4v7rFx61UeYDxNk3roOgeuM= loic@inspiron.dachary.org

notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/content: current_value {md5}178f9357ef0db4868ea642b114aef1c8, should be {md5}4e827a13b844f66898ecb0f0ee34cdfe (noop)
notice: Class[April_ssh]: Would have triggered 'refresh' from 1 events
notice: Augeas[nrpe.cfg](provider=augeas): 
--- /etc/nagios/nrpe.cfg    2013-08-01 10:41:44.333078964 +0000
+++ /etc/nagios/nrpe.cfg.augnew    2013-08-02 10:21:49.673979000 +0000
 -225,4 +225,4 @@
 # only snipplets ending in .cfg will get included
 include_dir=/etc/nagios/nrpe.d/

-server_address=10.145.4.18
+server_address=10.145.4.17

notice: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/returns: current_value need_to_run, should be 0 (noop)
info: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]/ensure: current_value stopped, should be running (noop)
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Would have triggered 'refresh' from 1 events
notice: Class[April_nagios::Nrpe_server]: Would have triggered 'refresh' from 3 events
notice: Stage[main]: Would have triggered 'refresh' from 3 events
notice: Finished catalog run in 4.36 seconds
root@agenda-du-libre:~# puppet agent -vt
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for agenda-du-libre.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_rsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
info: FileBucket adding {md5}0e507ed82c38638ae7535d4cbe2bb0c5
notice: /Stage[main]/Ssh::Hostkeys/Sshkey[agenda-du-libre.vm.april-int_dsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/content: 
--- /root/.ssh/authorized_keys    2013-08-02 10:17:33.239007407 +0000
+++ /tmp/puppet-file20130802-3837-8c2tb1-0    2013-08-02 10:22:05.049979001 +0000
 -58,6 +58,3 @@
 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo0J8F5a7JTgd9MQkjFWOWRhCcc3XAVG1DKXpZ9JQtceokqwxQlqUcI7XxHqNCP1DPq8emfV+97JnKfjaBE7+ctZLJirHfdPJSQMAs4dWWwLa8xZeTuVm+LSissHSeJDpXsnhbSc3KuqgaJ8AsWUHb5lUn8k+xqG980TSeDBoOviTgEPXfmtskLua1pjSp1qd3PBDCQyWuIxxEdyGzpNqaX48K9G84jGf7TgOCbGbxgcpWhpLPtmC3Vu5pb2PVvQQUA7dhzB4VkcxesSF2LmQ9JMhOPkXxwZIMqmxlFXl4ZtTrBFPjVKSNRFRd7LjEMUrly9n1OMyGMw3DIFtNKjwbQ== benj@hebus
 ##Quentin Chergui (kankan)
 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+y7rel3gIcSM89lPn+qB2tyhH/reJzQbYB+0CJCW6NCYcrS22b+wa9hsm+GMezv5gY4foMJWSw6kab4e30pbx1NFcM/AANo8T9iymEGFe+LtD68mR5dYjnyR2z9JL1hB3JN9st5wQ2ugDC4uYGsCboOTBgmuy/dpesOuoVMWE9J6G+0JrOp/wTcvvsbouJbRGK3S9MWymi4CdTrEAzSoKzCKG0rYEOTuV7vRA0UYy2awkahK4OAvF8ypBN/5GWpSaR2FPZW1zl3u/wL/oZgwtgTXQlZxtWFM40aQZIRz40gm5hMPGXc1bk2FrNWvISBvtiqtIZwb9yDzzZGxS7KYHw==
-
-# The following ssh key was injected by Nova
-ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEApKfP/I/WoSeX7MAFGpdntC56oHk0wJNn+qy0cud321yTaZRReJGQyqhoBk/sXsnqF4mOpXTf3+Ao1hQIiFazR5Fbmvk7DR0nKj8sGPV0iJB1F0+eyL+w7mgPyD8VDCw+ygCWG4ghMfeGKRAJQweO4v7rFx61UeYDxNk3roOgeuM= loic@inspiron.dachary.org

info: FileBucket adding {md5}178f9357ef0db4868ea642b114aef1c8
info: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]: Filebucketed /root/.ssh/authorized_keys to puppet with sum 178f9357ef0db4868ea642b114aef1c8
notice: /Stage[main]/April_ssh/File[/root/.ssh/authorized_keys]/content: content changed '{md5}178f9357ef0db4868ea642b114aef1c8' to '{md5}4e827a13b844f66898ecb0f0ee34cdfe'
notice: Augeas[nrpe.cfg](provider=augeas): 
--- /etc/nagios/nrpe.cfg    2013-08-01 10:41:44.333078964 +0000
+++ /etc/nagios/nrpe.cfg.augnew    2013-08-02 10:22:06.061979000 +0000
 -225,4 +225,4 @@
 # only snipplets ending in .cfg will get included
 include_dir=/etc/nagios/nrpe.d/

-server_address=10.145.4.18
+server_address=10.145.4.17

notice: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/returns: executed successfully
info: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]/ensure: ensure changed 'stopped' to 'running'
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Triggered 'refresh' from 1 events
notice: Finished catalog run in 4.61 seconds

root@nagios:~# puppet agent -vt

root@nagios:~# puppet agent -vt
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for nagios.vm.april-int
info: Applying configuration version '1375353269'
bnotice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_rsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
info: FileBucket adding {md5}8bd2f06f35429dbebf54cefe372a1d23
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_dsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_project[check_cucumber_generate_www.april.org]/Exec[install-cucumber-project-www.april.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]/address: address changed '10.145.4.18' to '10.145.4.17'
info: FileBucket adding {md5}0a59cedb93ff9bab9fed2febf15cbb87
info: /Stage[main]/April_nagios::Server/Nagios_host[agenda-du-libre.vm.april-int]: Scheduling refresh of Service[nagios3]
notice: /Stage[main]/April_nagios::Server/April_nagios::Check_cucumber_generate_spip[check_cucumber_generate_spip.libre-en-fete.org]/Exec[install-cucumber-project-spip-spip.libre-en-fete.org]/returns: executed successfully
notice: /Stage[main]/April_nagios::Server/Service[nagios3]: Triggered 'refresh' from 1 events
notice: Finished catalog run in 2.83 seconds

root@munin:~# puppet agent -vt

root@munin:~# puppet agent -vt 
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for munin.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_rsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
info: FileBucket adding {md5}fa02227f72cc178dfccd096908825bfe
notice: /Stage[main]/Ssh::Knownhosts/Sshkey[agenda-du-libre.vm.april-int_dsa]/host_aliases: host_aliases changed ['agenda-du-libre.vm.april-int', 'agenda-du-libre', '10.145.4.18'] to 'agenda-du-libre.vm.april-int agenda-du-libre 10.145.4.17'
notice: Finished catalog run in 1.90 seconds

[12:30:29] <dachary> # nova list --name agenda-du-libre
[12:30:30] <dachary> +--------------------------------------+-----------------+--------+-----------------------------------------+
[12:30:30] <dachary> |                  ID                  |       Name      | Status |                 Networks                |
[12:30:30] <dachary> +--------------------------------------+-----------------+--------+-----------------------------------------+
[12:30:31] <dachary> | 4a1366e3-8d6a-48dc-bd03-934603b03977 | agenda-du-libre | ACTIVE | novanetwork=10.145.4.17, 91.121.254.236 |
[12:30:34] <dachary> +--------------------------------------+-----------------+--------+-----------------------------------------+
[12:31:01] <kankan_01> 10.145.4.17 pour Nagios
[12:31:04] <kankan_01> OK donc
[12:31:52] <kankan_01> Munin, on va attendre un tour je pense :)
[12:34:32] <dachary> # nova secgroup-list-rules default
[12:34:32] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:34:32] <dachary> | IP Protocol | From Port | To Port |  IP Range | Source Group |
[12:34:32] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:34:32] <dachary> |     tcp     |     22    |    22   | 0.0.0.0/0 |              |
[12:34:33] <dachary> |     tcp     |     80    |    80   | 0.0.0.0/0 |              |
[12:34:36] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:34:44] <dachary> pour l'instant il y a juste 22 / 80 ouverts
[12:34:54] <dachary> il faudrait leur demander s'ils en veulent plus
[12:35:27] <kankan_01> pas de réponse au ping
[12:35:39] <kankan_01> (sur l'IP publique, depuis le local)
[12:37:20] <dachary> root@controller:~# nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0
[12:37:20] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:37:20] <dachary> | IP Protocol | From Port | To Port |  IP Range | Source Group |
[12:37:20] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:37:21] <dachary> |     icmp    |     -1    |    -1   | 0.0.0.0/0 |              |
[12:37:21] <dachary> +-------------+-----------+---------+-----------+--------------+
[12:37:33] <dachary> loic@fold:~$ ping 91.121.254.236
[12:37:33] <dachary> PING 91.121.254.236 (91.121.254.236) 56(84) bytes of data.
[12:37:34] <dachary> 64 bytes from 91.121.254.236: icmp_req=1 ttl=55 time=129 ms

root@harmine:/# puppet agent -vt 
info: Retrieving plugin
info: Loading facts in puppet_vardir
info: Loading facts in concat_basedir
info: Loading facts in pe_version
info: Loading facts in root_home
info: Loading facts in puppet_vardir
info: Loading facts in concat_basedir
info: Loading facts in pe_version
info: Loading facts in root_home
info: Caching catalog for harmine.pavot.vm.april-int
info: Applying configuration version '1375353269'
notice: /Stage[init]/April_apt/Apt::Source[squeeze-backports]/File[squeeze-backports.list]/ensure: created
info: /Stage[init]/April_apt/Apt::Source[squeeze-backports]/File[squeeze-backports.list]: Scheduling refresh of Exec[apt_update]
notice: /Stage[init]/Apt::Update/Exec[apt_update]: Triggered 'refresh' from 1 events
notice: /Stage[first]/April_puppet/Package[libaugeas0/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[first]/April_puppet/Package[augeas-tools/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[first]/April_puppet/Package[facter/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[first]/April_puppet/Package[puppet-common/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[first]/April_puppet/Package[puppet/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[first]/April_puppet/Package[augeas-lenses/squeeze-backports]/ensure: ensure changed 'purged' to 'latest'
notice: /Stage[main]/Backuppc::Server/File_line[backuppc_host_spip.libre-en-fete.org]/ensure: created
info: /Stage[main]/Backuppc::Server/File_line[backuppc_host_spip.libre-en-fete.org]: Scheduling refresh of Service[backuppc]
notice: /Stage[main]/Backuppc::Server/File[config_file_nagios-hetzner.vm.april-int]/ensure: created
notice: /Stage[main]/Backuppc::Server/File_line[backuppc_host_agenda-du-libre.vm.april-int]/ensure: created
info: /Stage[main]/Backuppc::Server/File_line[backuppc_host_agenda-du-libre.vm.april-int]: Scheduling refresh of Service[backuppc]
notice: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]/returns: executed successfully
info: /Stage[main]/April_nagios::Nrpe_server/Augeas[nrpe.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
--- /etc/nagios/nrpe.d/check_backuppc.cfg    2012-12-12 11:22:11.000000000 +0100
+++ /tmp/puppet-file20130802-30277-2w6lci-0    2013-08-02 16:35:10.238597979 +0200
@@ -1 +1 @@
-command[check_backuppc]=/usr/bin/sudo -u backuppc /usr/lib/nagios/plugins/check_backuppc
+command[check_backuppc]=/usr/bin/sudo -u backuppc /usr/lib/nagios/plugins/check_backuppc 
info: FileBucket adding {md5}581905a6ddcee7a4aa95dccb67528f08
info: /Stage[main]/April_nagios::Check_backuppc/April_nagios::Nrpe_plugin[check_backuppc]/File[/etc/nagios/nrpe.d/check_backuppc.cfg]: Filebucketed /etc/nagios/nrpe.d/check_backuppc.cfg to puppet with sum 581905a6ddcee7a4aa95dccb67528f08
notice: /Stage[main]/April_nagios::Check_backuppc/April_nagios::Nrpe_plugin[check_backuppc]/File[/etc/nagios/nrpe.d/check_backuppc.cfg]/content: content changed '{md5}581905a6ddcee7a4aa95dccb67528f08' to '{md5}26e4b2ed00e1f7f13e35fdf6342f772a'
info: /Stage[main]/April_nagios::Check_backuppc/April_nagios::Nrpe_plugin[check_backuppc]/File[/etc/nagios/nrpe.d/check_backuppc.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
notice: /Stage[main]/April_nagios::Nrpe_server/Service[nagios-nrpe-server]: Triggered 'refresh' from 2 events
--- /etc/vim/vimrc.local    2012-12-10 15:28:19.000000000 +0100
+++ /tmp/puppet-file20130802-30277-hy6y1t-0    2013-08-02 16:35:11.590601651 +0200
@@ -2,5 +2,18 @@
 " DO NOT CHANGE : IT WILL BE OVERRIDEN BY PUPPET ON THE NEXT RUN
 " GENERATED FROM puppet.vm.april-int:/etc/puppet/modules/vim/files/vimrc.local
 " 
+set nocompatible
 syntax on
-set paste
+
+" Edit options
+set autoindent
+
+" UI options
+set background=dark
+set ruler
+set laststatus=2
+set showcmd
+
+" Search options
+set ignorecase
+set hlsearch
info: FileBucket adding {md5}2e31556d175342cc9633b30a8737297c
info: /Stage[main]/Vim/File[/etc/vim/vimrc.local]: Filebucketed /etc/vim/vimrc.local to puppet with sum 2e31556d175342cc9633b30a8737297c
notice: /Stage[main]/Vim/File[/etc/vim/vimrc.local]/content: content changed '{md5}2e31556d175342cc9633b30a8737297c' to '{md5}3a02a3855537126c2e03eabaf9c7ce4d'
notice: /Stage[main]/Backuppc::Server/File[config_file_puppet.vm.april-int]/ensure: created
notice: /Stage[main]/Backuppc::Server/File_line[backuppc_host_munin.vm.april-int]/ensure: created
info: /Stage[main]/Backuppc::Server/File_line[backuppc_host_munin.vm.april-int]: Scheduling refresh of Service[backuppc]
notice: /Stage[main]/Backuppc::Server/File[config_file_spip.libre-en-fete.org]/ensure: created
notice: /Stage[main]/Backuppc::Server/File_line[backuppc_host_nagios-hetzner.vm.april-int]/ensure: created
info: /Stage[main]/Backuppc::Server/File_line[backuppc_host_nagios-hetzner.vm.april-int]: Scheduling refresh of Service[backuppc]
notice: /Stage[main]/Backuppc::Server/File_line[backuppc_host_puppet.vm.april-int]/ensure: created
info: /Stage[main]/Backuppc::Server/File_line[backuppc_host_puppet.vm.april-int]: Scheduling refresh of Service[backuppc]
notice: /Stage[main]/Backuppc::Server/File[config_file_agenda-du-libre.vm.april-int]/ensure: created
notice: /Stage[main]/Backuppc::Server/File[config_file_munin.vm.april-int]/ensure: created
notice: /Stage[main]/Backuppc::Server/Service[backuppc]: Triggered 'refresh' from 5 events
notice: Finished catalog run in 28.07 seconds

Demande des informations pour la création de liste :
http://listes.april.org/wws/arc/admins/2013-09/msg00034.html

Après avoir passé du temps sur une redirection à la con dans la conf de nginx http://listes.april.org/wws/arc/admins-auto/2013-09/msg01386.html, j'ai pu créer les listes et abonner les bonnes personnes dans un robot virtuel dédié :http://listes.april.org/wws/arc/admins/2013-09/msg00050.html

grep agenda-du-libre.april.org /etc/mail/sympa/aliases | cut -d ' ' -f 4,3 | sed s,/usr/lib/sympa/lib/,, | sed s/queue// | sed s,/,, | sed s/\"// | sed -r 's/(sympa.*) (.*)/\2 \1/' >> /etc/mail/agenda-du-libre.april.org/sympa-transport

-cookie_domain .agenda-du-libre.april.org
+cookie_domain listes.agenda-du-libre.april.org
pour générer le «meilleur» cookie pour les listes.
Voir si ça ne peut pas être propagé à #1129

Dans la conf de nginx,

-        location /wws {
+        location / {

Cette redirection complète évite le 404 quand on demande juste https://listes.agenda-du-libre.april.org/

--- a/nginx/sites-available/listes.agenda-du-libre.april.org
+++ b/nginx/sites-available/listes.agenda-du-libre.april.org
@@ -3,10 +3,7 @@ server {
         server_name     listes.agenda-du-libre.april.org;
         charset off;
         access_log      /var/log/nginx/www.agenda-du-libre.april.org/listes.agenda-
-        location / {
-                proxy_pass http://192.168.2.17;
-                proxy_set_header        Host $http_host;
-        }
+       rewrite     ^ https://listes.agenda-du-libre.april.org$request_uri? permanen
 }

 server {

permet de gérer entièrement la redirection sur nginx.

Les deux commits précédents permettront, j'espère, de résoudre #701

Les listes fonctionnent sur le domaine agenda-du-libre.april.org avec un
accès web sur https://listes.agenda-du-libre.april.org/wws
Je sèche sur l'import des archives, mais j'ai des pistes, mais je ne
peux pas faire ça rapidement (du moins pas avant le WE prochain)
Est-ce un point bloquant ?

Le 30/09/2013 23:11, Vincent-Xavier JUMEL a écrit :

Les listes fonctionnent sur le domaine agenda-du-libre.april.org avec un
accès web sur https://listes.agenda-du-libre.april.org/wws

Je sèche sur l'import des archives, mais j'ai des pistes, mais je ne
peux pas faire ça rapidement (du moins pas avant le WE prochain)

Est-ce un point bloquant ?

Pour moi, non.
Bonne nuit.
Marco.

Bonjour,
Le lundi 30 septembre 2013 23:11:41 Vincent-Xavier JUMEL a écrit :

Les listes fonctionnent sur le domaine agenda-du-libre.april.org avec un
accès web sur https://listes.agenda-du-libre.april.org/wws

Super. Merci !
Librement,

Le 30/09/2013 23:11, Vincent-Xavier JUMEL a écrit :

Les listes fonctionnent sur le domaine agenda-du-libre.april.org avec un
accès web sur https://listes.agenda-du-libre.april.org/wws

Un petite demande d'info en préparation de l'étape suivante :
- Quel sera la procédure (sommaire pour coordonner tout le monde et les
tests) à utiliser et le temps d'interruption lorsque Thomas fera pointer
le domaine agendadulibre.org et consort vers le serveur April ?
- Quel MX Thomas devra-t-il mettre ?
Bonne journée.

Thomas doit baisser le TTL pour agendadulibre.org pour faciliter la migration. Le mettre déjà à 1j puis à 3h par exemple la veille de la migration.

Pour l'import des archives Mailman -> Sympa (Thomas a fourni un export au format mbox) on va regarder du côté des scripts https://www.sympa.org/contribs/migration_and_archives/index

Fred va essayer mais toute aide est la bienvenue

Pour la migration proprement-dite, la période la meilleure pour VX (et pour Fred) est la dernière semaine d'octobre (congés scolaire). Voir avec Thomas et Marco pour fixer une date précise.

Je pense avoir trouvé le bon script pour générer les archives web à partir de fichiers mbox :

- Récupérer le script
http://www.sympa.org/distribution/contrib/mbox2sympa.pl

- Puis lancer le script avec le fichier mbox en paramètre, par
exemple :

mbox2sympa.pl devel.mbox

- Cela génère des fichiers log.*

- Transférer ces fichiers et les mettre dans le répertoire (à créer
si besoin) d'archives textuelles de la liste, dans le cas de devel
il faut copier les fichiers log. dans

/var/lib/sympa/expl/agenda-du-libre.april.org/devel/archives

- Puis lancer le script

/usr/share/sympa/bin/arc2webarc.pl devel agenda-du-libre.april.org

pas besoin d'utiliser l'option -input-directory sinon on n'obtient
  pas le résultat attendu

- Les archives sont générées dans

/var/lib/sympa/wwsarchive/devel@agenda-du-libre.april.org/

- Résultat https://listes.agenda-du-libre.april.org/wws/arc/devel/

La suite bientôt

cp -r agenda-du-libre.april.org agenda-du-libre.ch
cp -r agenda-du-libre.april.org agenda-du-libre.be
vim agenda-du-libre.ch/robot.conf agenda-du-libre.be/robot.conf 
mysql
service sympa restart 

Dans vim :

sed s/agenda-du-libre.april.org/agenda-du-libre.ch/
sed s/agenda-du-libre.april.org/agenda-du-libre.be/

Dans mysql :

update subscriber_table set robot_subscriber = "agenda-du-libre.ch" where list_subscriber = "moderateurs-ch" ;
update subscriber_table set robot_subscriber = "agenda-du-libre.be" where list_subscriber = "moderateurs-be" ;

Dans nginx : copie des redirections vers agenda-du-libre.april.org puis :'<,'>s/agenda-du-libre.april.org/agenda-du-libre.ch/g et :'<,'>s/agenda-du-libre.april.org/agenda-du-libre.be/g sur les sélections correspondantes.

Je n'ai pas déplacé les archives des listes be et ch. Cela reste à faire.

• Import le jour de la migration des zones de la dernière version de la base
• Migration des zones
• Vérification des listes sur les 3 domaines
• Vérification des courriels

Il reste encore la migration des domaines en .be et en .ch

TODO: faire le transfert du domaine agendadulibre.org.
DONE :) cf whois agendadulibre.org

Le code du site agendadulibre est dans un dépôt git https://gitorious.org/agenda-du-libre-php

TODO : Mettre à jour l'historique du projet http://agendadulibre.org/infos.php#historique

En profiter pour mettre l'historique en ordre chronologique inverse.

Remarque Thomas :

Pour les .be et .ch Thomas a modifié directement le site de prod.
idéalement, il faudrait remettre ça au propre, en remettant à jour le
dépôt Git, et en gérant les différences fr/be/ch dans un seul dépôt
git.

Mise à jour domaine agendadulibre.ch faite, site http://www.agendadulibre.ch up, event de test saisi, courriel arrivé

Ok donc pour http://www.agendadulibre.ch

Howto pour ajouter un modérateur ajouté dans le wiki interne dokuwiki/doku.php?id=sysadm:machines_virtuelles:psilocybine:agendadulibre