Questions tagged [saltstack]

SaltStack is an open source configuration management and remote execution application.

Filter by
Sorted by
Tagged with
0
votes
0answers
77 views

No matching sls found for 'state.sls' in env 'web'

i am trying to execute a specific sls file on specific machine using salt "remote-host" state.apply state.sls but i am getting error which i dont understant why i am getting this error. ...
0
votes
1answer
16 views

Salt Cloud Map File to Map Data

I'm trying to deploy a server using Salt cloud and the VMWare provider and I have developed a profile and a map file that works fine. I see however that there is a salt cloud module that might fit my ...
0
votes
0answers
30 views

Salt - Need pillar to override default values

This is salt 101 I think, but I'm really a salt N00b and need assistance. I need to disable specific services on all of our servers by default, but I need to create a pillar that allows me to override ...
0
votes
0answers
111 views

Saltstack - Jinja variable 'selinux_policy_dir' is undefined. New salt user

I'm a total n00b to writing salt states. The other day I created my first. It's just an automated deployment of a new auditing tool, along with a SELinux policy for it, etc. It seems to work fine. ...
0
votes
0answers
37 views

Process getting different environment variables to system settings

I have an issue where a tomcat process started through salt stack is getting different environment variables than the ones set on the system. This is on a centos 7 server. Below is the locale -v ...
0
votes
1answer
137 views

Salt Pillar: How to use different values for prod / dev?

I'm not sure if I am thinking about this the right way, but here is my Problem: I want to use the same Salt state and pillar configuration for production, development and test servers. The only ...
0
votes
2answers
52 views

Using Configuration management tools to synchronize large files

We are looking into using a configuration mangement tool (like Salt or Puppet) to automate what is currently a lot of manual work. One requirement is that we have to distribute rather large files / ...
0
votes
1answer
58 views

SaltStack: install packages behind proxy

Getting through a Saltstack tutorial and ran into a problem how to install packages on a linux host if it's behind a proxy. For example, I have a file nettools.sls: install_network_packages: pkg....
0
votes
2answers
291 views

Open SSL throwing unknown option '-n' in Amazon Linux2 instance

My code throws error when it reaches this line: {% set encrypted_password = salt['cmd.run']('openssl enc -aes-128-cbc -a -salt -md md5 -in <(echo -n "' + ssm_plaintext_password +'") -pass pass:'+...
1
vote
1answer
449 views

saltstack: Pass jinja variable from a salt state file to an included salt state

I have the case where I have 3 salt states A.sls, B.sls and C.sls of which only one will be applied on a host. All 3 of them sets a jinja variable x to a specific value and then I want all 3 to call ...
0
votes
1answer
215 views

Saltstack: Select data from database using salt

I want to select data from a database table (here mysql) with saltstack. In my test scenario I have a linux host called salt-master. On this host the database, the master and the minion are running. ...
0
votes
1answer
93 views

Can ext_pillar be configured depending on pillarenv or saltenv?

I'm looking for a way to select the external pillar depending on saltenv or pillarenv variable. From saltstack documentation, ext_pillar does not support the same syntax as pillar_roots (https://docs....
1
vote
1answer
124 views

Salt configuration for nftables prerouting

I'm trying to configure a nftables-rule for forwarding traffic from my server to a LXC container, however, the way that the salt states module for dport renders the given value is not accepted by ...
1
vote
1answer
374 views

SaltStack: Delete directory, if it is empty

How can I delete a directory with SaltStack, if it is empty? First I remove a file in this directory, and then I would like to delete the directory. But if there is one or several files in the ...
0
votes
2answers
3k views

How to install salt for python3?

When I check my salt-minion version, I get the following message: [root@localhost ~]# salt-minion --version /usr/lib/python2.7/site-packages/salt/scripts.py:198: DeprecationWarning: Python 2.7 will ...
0
votes
1answer
231 views

SaltStack: No usable error message if dpkg fails

I get this message from salt-ssh ID: apache Function: pkg.installed Result: False Comment: Problem encountered installing package(s). Additional info follows: errors: ...
0
votes
1answer
54 views

Call state directly via salt-ssh

Is it possible to call this state via salt-ssh directly? vim: pkg.installed I mean without creating an sls file?
0
votes
1answer
428 views

Loop through salt pillar to create file without knowing keys

Background: I need to make an XML file like this: <?xml version="1.0"?> <configuration> <appSettings> <add key="BaseOU" value="DC=myplace,DC=wan" /> <add key="...
0
votes
2answers
1k views

SaltStack: found conflicting ID

My sls file: /etc/sudoers.d/foo: file.managed: - contents: | foo ALL = NOPASSWD: /usr/bin/systemctl restart minio_storage-foo.service foo ALL = NOPASSWD: /bin/systemctl restart ...
6
votes
1answer
6k views

Unable to generate GPG keys without passphrase on Ubuntu 18.04 [closed]

Has anyone tried creating GPG keys for encrypted pillars on Ubuntu 18.04? I'm using the following command to attempt to generate the keys: gpg --gen-key --homedir /etc/salt/gpgkeys When I run that ...
0
votes
1answer
39 views

Salt-Stack init process after package is installed

Installing AIDE needs to follow by a init proces. aide: pkg: - installed Now the following commands need to run only once: /usr/sbin/aide --config=/etc/aide.conf --init mv -f /var/lib/aide/aide.db....
0
votes
1answer
42 views

SaltStack: normalize Package name

I would like to have less conditions in my saltstack sls files. Up to now it looks like this: foo_package: pkg.installed: - pkgs: {% if grains.os_family == 'Debian' %} - foo_BAR {% ...
0
votes
2answers
58 views

saltstack equivalent of puppet last_run_summary.yaml

Does Salt have the equivalent of Puppet's last_run_summary.yaml? If not, what's the suggested way to monitor the success or failure of executions on individual salt minions?
0
votes
1answer
116 views

Saltstack: How to install a new zypper RPM Repo?

How to add a new rpm package repo via saltstack? I checked the docs, and only see method to list, modify or delete repos: https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.zypper....
0
votes
1answer
74 views

Saltstack formulas (starter)

Is any saltstack formula 'skeleton' available so it can create a structure as described here? In chef you have knife cookbook create or in ansible ansible-galaxy init.
0
votes
1answer
255 views

Salt: Raise Error if file.replace did not find anything to replace

Maybe I am blind, but I could not find a way to let the salt-ssh call fail, if file.replace did not replace a single line. If the pattern I provide did not match, then I want to get noticed. Example:...
0
votes
1answer
420 views

Jinja “for loop” statement with multiple lines (saltstack)

When using salt for specifying user creation, it is unorganized to have the for statement in a single line. Example: {% for USR in 'hewey','dewey','loui' %} Is it possible to break this into ...
0
votes
2answers
619 views

Salt: file.replace on a list of files (globbing)

I use file.replace and would like to use this not on a single file, but on a list of files. The list of files comes from globbing. Example: I want to modify /etc/ImageMagick*/policy.xml. The file ...
0
votes
1answer
215 views

Salt: file.replace: ignore_if_missing gets ignored?

I want to enable logging of an fstp server like this: https://serverfault.com/a/74234/90324 But salt does nothing. I reduced it to this: enable_logging_of_sftp: file.replace: - name: /etc/ssh/...
3
votes
2answers
8k views

How to copy file from master to minions on salt-stack?

I want to copy a file from salt stack master server to minion servers. I found a script from https://stackoverflow.com/questions/27687886/copy-a-file-from-salt-master-to-minions. But I got an error. ...
0
votes
1answer
407 views

How to instal vim using salt stack?

I have salt-stack maser and minion servers which running on centos7. I want to install vim package in minion server. For that I have created srv directory and vim.sls file under etc. My vim.sls file ...
1
vote
1answer
687 views

Automatic pillars by host name

I have problem where managing multiple domains in one top.sls file is getting difficult. How could I write top.sls so that it only takes those pillars that match my minion name/hostname. For example:...
0
votes
1answer
488 views

Salt Stack file.recurse Recurse Failed

I built a state file in salt to copy a list of check_mk Nagios scripts down to the remote server. Below is a snip of the state file. check_mk_defined_checks: file.recurse: - name: /usr/lib/...
1
vote
2answers
558 views

Saltstack state.apply determine whether it is being run in test=True mode ?

We are using serverdensity (BETA MODULE - https://docs.saltstack.com/en/latest/ref/states/all/salt.states.serverdensity_device.html) with salt and have hit the (bug?) where if you try a : salt '*...
0
votes
1answer
42 views

.mount a folder from the salt:// share onto a minion?

I'm trying to write a state that will mount the folder currently in the "salt://" directory with the sophos installer, run the installer.sh, then unmount it. I'm hoping to avoid copying the whole ...
1
vote
1answer
154 views

Deliver unique file for each Salt minion

There is some directory path, like /etc/opt/mysoft which contents should be different for each minion. So for minion A it contains config.ini with come contents and for minion B it contains config....
1
vote
2answers
1k views

Executing arbitrary sls file with salt

I'm learning about salt. I understand that the way things work, state files must be put under a root directory specified statically in the master/minion config. So my question is, is there a way to ...
0
votes
1answer
133 views

SaltStack: Disable Cron during run

I would like to disable cron on the minion when salt gets executed. Disabling it would be easy: service.disabled But how to enable it again (in all cases (success or error))? What I want is ...
3
votes
0answers
946 views

GitFS Salt Environments with a single top.sls

The documentation states that if you use salt_top_saltenv: base in the master config, that I can force all Minions to only use the base saltenv for the top file, ignoring all other top files, is ...
2
votes
0answers
284 views

How can I set user/group ownership on a SaltStack git clone?

I have a hand-maintained Bugzilla installation that I'm trying to move to being managed with SaltStack. Currently I have the following .sls file to set up the clone: https://github.com/bugzilla/...
3
votes
1answer
3k views

How to reposync saltstack? reposync failing with error message `Removing […], due to missing GPG key.`

On a RHEL 7.4 system, I add the salt-latest repo as follows: yum -y install https://repo.saltstack.com/yum/redhat/salt-repo-latest-2.el7.noarch.rpm Notice, amongst other things, this creates the ...
1
vote
1answer
742 views

SaltStack: How to create user and a directory in his HOME directory?

I want to create a user and a directory in his HOME directory. Unfortunately the HOME directory is not allways directly under /home. On some minions it is under /localhome and some use /users/.
1
vote
1answer
2k views

Saltstack and Python3 issue

I'm having a bit of an issue with the following recipe: setup-compose: file.managed: - source: https://github.com/docker/compose/releases/download/1.21.1/docker-compose-Linux-{{ grains['cpuarch'...
1
vote
1answer
191 views

salt-ssh Do changes which spans several hosts

I need to change two hosts: A new web-server gets configured A tunnel between tunnel-host and the new web-server should get created We implemented both, and both steps work: root@s# salt-ssh ...
0
votes
0answers
74 views

SaltStack: --failhard for salt-ssh

I would like the execution of salt-ssh to cancel on the first error. I read this: https://docs.saltstack.com/en/latest/ref/states/failhard.html But I am using salt master-less with salt-ssh. Is ...
0
votes
1answer
534 views

SaltStack: ImportError: No module named backports.ssl_match_hostname

I get this exception: ===> salt-ssh remote-host cmd.run 'id' remote-host: ---------- retcode: 0 stderr: Traceback (most recent call last): File "/var/tmp/....
0
votes
1answer
207 views

Salt modules in state file

salt.modules.iptables is great to use from command line but how can I use this in a state file. First I want to check if iptables is running: check_process: cmd.run: - name: ps aux | grep '...
1
vote
1answer
917 views

SaltStack: Stop on first error

I have a sls file for SaltStack which looks like this: etckeeper: pkg.installed etckeeper_extra_packages: pkg.installed: - pkgs: - hwinfo {%- if not salt['file.directory_exists' ]('/...
0
votes
2answers
140 views

SaltStack: Do “etckeeper init” if /etc/.git is not there

I want to deploy the tool etckeeper via SaltStack. Installating the RPM/DPKG is easy. Next step is to call etckeeper init after the installation. My current idea is this pseudo-code: execute ...
0
votes
1answer
169 views

How do I use debconf in salt with pillars?

I have the following: newrelic-debconf: debconf.set: - name: newrelic-php5 - data: 'newrelic-php5/application-name': { 'type': 'string', 'value': '{{ salt['pillar.get']('newrelic:...

1
2 3 4 5 6