Questions tagged [saltstack]
The Salt Project, previously known as SaltStack, is a Python-based open-source configuration management software and remote execution engine.
281
questions
1
vote
1
answer
28
views
Is it possible to store custom runner output to pillar data in SALTSTACK?
I have a Salt formula that runs on my minions, and it runs a custom module that reaches out to the web for some JSON data for the latest version of chrome. It works great, but I thought it would be ...
- 95
0
votes
0
answers
29
views
Configuring salt stack on virtualbox manually
First time using salt stack.
I configured salt stack on three virtual box machines. All three machines are set up as bridged networks. Centos7(Master), Centos7(minion), Ubuntu(minion). On the master, ...
- 11
0
votes
1
answer
44
views
How to access a roles hostlist in a statefile?
I am using salt by defining roles which map a list of states to a list of hosts on which to apply the states:
#/srv/pillar/base/top.sls:
{% set h = 'host1, host2,' %}
'L@{{ h }}':
- roles.Servers
...
- 33
1
vote
1
answer
71
views
Saltstack set java alternative using command instead of path
I am trying to apply a salt.states.alternatives to set my default java to java 11. However, I need to put in the full path for the openjdk, which includes the version number that changes every time ...
0
votes
0
answers
33
views
Long-running async salt job seems to timeout
I have a long-running async job that doesn't produce output for a long time at one point of the job ... It is terminating early - during the part where there is no output for a while - but the master ...
- 101
1
vote
1
answer
29
views
Set Firmware Option for Vsphere VM created by salt-cloud
I am trying to create a VM hosted in Vsphere using salt-cloud and need to set the boot options for this VM.
From what I can tell there isn't an actual option for this so I guessing it needs to be part ...
- 11
1
vote
1
answer
106
views
Auditd - Don't log events from salt-minion
I'm updating our Auditd rules (Red Hat Linux) to log all tty/interactive commands from all users. That part works no problem.
What I'm trying to do now is to exclude commands issued by our salt-...
- 151
0
votes
1
answer
238
views
saltstack cmd.run variable expansion
I can get salt to let me run keytool this way:
salt [host] cmd.run shell=powershell '& "$JRE_HOME/bin/keytool.exe" --help'
But I can't figure out how to put this into a state file. A ...
- 101
1
vote
1
answer
410
views
Loop through variables in state file and use the vars in the target template as well
In Ansible I can loop through a list of dicts/lists and then use the loop vars in the Ansible task, but also in the template I call on.
I'm trying to do the same in Salt, but it seems like it's not ...
- 13
0
votes
1
answer
1k
views
Saltstack - mapping values are not allowed in this context
Following state file throws an error
"Rendering SLS 'base:settings.app.state.sls' failed: mapping values are not allowed in this context"
I rendered the state of the minion into a file and ...
- 33
0
votes
1
answer
114
views
How to Pre-seed Salt Minion's Archives
So I am creating a state file to install MatterMost on a minion. So far it looks like this:
mattermost-usergroup:
user.present:
- name: mattermost
- shell: /bin/sh
- createhome: False
...
- 5,038
0
votes
1
answer
385
views
Salt: connection refused to proxy
I have troubles with Salt, installed on an HPC cluster. All maintenance commands (i.e. salt commands) are made from master0. The minions to be managed are named node0, node1, ..., node4. When I try to ...
- 103
0
votes
1
answer
811
views
Salt state file doesn't load info from pillar
I'm getting this error when I'm trying to apply my statefile to my minion:
client.school.test:
Data failed to compile:
Rendering SLS 'base:nextcloud2' failed: Jinja variable 'list object' has no ...
0
votes
1
answer
1k
views
No matching sls found for 'state.sls' in env 'web'
i am trying to execute a specific sls file on specific machine using
salt "remote-host" state.apply state.sls
but i am getting error which i dont understant why i am getting this error.
...
0
votes
1
answer
86
views
Salt Cloud Map File to Map Data
I'm trying to deploy a server using Salt cloud and the VMWare provider and I have developed a profile and a map file that works fine. I see however that there is a salt cloud module that might fit my ...
- 99
0
votes
0
answers
155
views
Process getting different environment variables to system settings
I have an issue where a tomcat process started through salt stack is getting different environment variables than the ones set on the system. This is on a centos 7 server.
Below is the locale -v ...
- 111
0
votes
1
answer
491
views
Salt Pillar: How to use different values for prod / dev?
I'm not sure if I am thinking about this the right way, but here is my Problem:
I want to use the same Salt state and pillar configuration for production, development and test servers. The only ...
- 115
0
votes
2
answers
118
views
Using Configuration management tools to synchronize large files
We are looking into using a configuration mangement tool (like Salt or Puppet) to automate what is currently a lot of manual work. One requirement is that we have to distribute rather large files / ...
- 115
0
votes
1
answer
149
views
SaltStack: install packages behind proxy
Getting through a Saltstack tutorial and ran into a problem how to install packages on a linux host if it's behind a proxy. For example, I have a file nettools.sls:
install_network_packages:
pkg....
- 1
0
votes
2
answers
682
views
Open SSL throwing unknown option '-n' in Amazon Linux2 instance
My code throws error when it reaches this line:
{% set encrypted_password = salt['cmd.run']('openssl enc -aes-128-cbc -a -salt -md md5 -in <(echo -n "' + ssm_plaintext_password +'") -pass pass:'+...
- 1
1
vote
1
answer
2k
views
saltstack: Pass jinja variable from a salt state file to an included salt state
I have the case where I have 3 salt states A.sls, B.sls and C.sls of which only one will be applied on a host.
All 3 of them sets a jinja variable x to a specific value and then I want all 3 to call ...
- 123
0
votes
1
answer
620
views
Saltstack: Select data from database using salt
I want to select data from a database table (here mysql) with saltstack.
In my test scenario I have a linux host called salt-master. On this host the database, the master and the minion are running.
...
- 1
0
votes
1
answer
368
views
Can ext_pillar be configured depending on pillarenv or saltenv?
I'm looking for a way to select the external pillar depending on saltenv or pillarenv variable.
From saltstack documentation, ext_pillar does not support the same syntax as pillar_roots (https://docs....
- 145
1
vote
1
answer
313
views
Salt configuration for nftables prerouting
I'm trying to configure a nftables-rule for forwarding traffic from my server to a LXC container, however, the way that the salt states module for dport renders the given value is not accepted by ...
- 121
1
vote
1
answer
923
views
SaltStack: Delete directory, if it is empty
How can I delete a directory with SaltStack, if it is empty?
First I remove a file in this directory, and then I would like to delete the directory. But if there is one or several files in the ...
- 3,541
0
votes
2
answers
4k
views
How to install salt for python3?
When I check my salt-minion version, I get the following message:
[root@localhost ~]# salt-minion --version
/usr/lib/python2.7/site-packages/salt/scripts.py:198: DeprecationWarning: Python 2.7 will ...
0
votes
1
answer
510
views
SaltStack: No usable error message if dpkg fails
I get this message from salt-ssh
ID: apache
Function: pkg.installed
Result: False
Comment: Problem encountered installing package(s). Additional info follows:
errors:
...
- 3,541
0
votes
1
answer
136
views
Call state directly via salt-ssh
Is it possible to call this state via salt-ssh directly?
vim:
pkg.installed
I mean without creating an sls file?
- 3,541
0
votes
1
answer
2k
views
Loop through salt pillar to create file without knowing keys
Background: I need to make an XML file like this:
<?xml version="1.0"?>
<configuration>
<appSettings>
<add key="BaseOU" value="DC=myplace,DC=wan" />
<add key="...
- 141
2
votes
2
answers
3k
views
SaltStack: found conflicting ID
My sls file:
/etc/sudoers.d/foo:
file.managed:
- contents: |
foo ALL = NOPASSWD: /usr/bin/systemctl restart minio_storage-foo.service
foo ALL = NOPASSWD: /bin/systemctl restart ...
- 3,541
8
votes
1
answer
11k
views
Unable to generate GPG keys without passphrase on Ubuntu 18.04 [closed]
Has anyone tried creating GPG keys for encrypted pillars on Ubuntu 18.04?
I'm using the following command to attempt to generate the keys:
gpg --gen-key --homedir /etc/salt/gpgkeys
When I run that ...
- 4,366
0
votes
1
answer
194
views
Salt-Stack init process after package is installed
Installing AIDE needs to follow by a init proces.
aide:
pkg:
- installed
Now the following commands need to run only once:
/usr/sbin/aide --config=/etc/aide.conf --init
mv -f /var/lib/aide/aide.db....
- 1
0
votes
1
answer
99
views
SaltStack: normalize Package name
I would like to have less conditions in my saltstack sls files.
Up to now it looks like this:
foo_package:
pkg.installed:
- pkgs:
{% if grains.os_family == 'Debian' %}
- foo_BAR
{% ...
- 3,541
0
votes
2
answers
70
views
saltstack equivalent of puppet last_run_summary.yaml
Does Salt have the equivalent of Puppet's last_run_summary.yaml? If not, what's the suggested way to monitor the success or failure of executions on individual salt minions?
- 13
0
votes
1
answer
231
views
Saltstack: How to install a new zypper RPM Repo?
How to add a new rpm package repo via saltstack?
I checked the docs, and only see method to list, modify or delete repos:
https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.zypper....
- 3,541
0
votes
1
answer
85
views
Saltstack formulas (starter)
Is any saltstack formula 'skeleton' available so it can create a structure as described here?
In chef you have knife cookbook create or in ansible ansible-galaxy init.
- 2,687
0
votes
1
answer
489
views
Salt: Raise Error if file.replace did not find anything to replace
Maybe I am blind, but I could not find a way to let the salt-ssh call fail, if file.replace did not replace a single line.
If the pattern I provide did not match, then I want to get noticed.
Example:...
- 3,541
0
votes
1
answer
1k
views
Jinja "for loop" statement with multiple lines (saltstack)
When using salt for specifying user creation, it is unorganized to have the for statement in a single line. Example:
{% for USR in 'hewey','dewey','loui' %}
Is it possible to break this into ...
- 1
0
votes
2
answers
1k
views
Salt: file.replace on a list of files (globbing)
I use file.replace and would like to use this not on a single file, but on a list of files. The list of files comes from globbing.
Example: I want to modify /etc/ImageMagick*/policy.xml.
The file ...
- 3,541
0
votes
1
answer
452
views
Salt: file.replace: ignore_if_missing gets ignored?
I want to enable logging of an fstp server like this: https://serverfault.com/a/74234/90324
But salt does nothing. I reduced it to this:
enable_logging_of_sftp:
file.replace:
- name: /etc/ssh/...
- 3,541
5
votes
2
answers
18k
views
How to copy file from master to minions on salt-stack?
I want to copy a file from salt stack master server to minion servers. I found a script from https://stackoverflow.com/questions/27687886/copy-a-file-from-salt-master-to-minions. But I got an error.
...
- 223
0
votes
1
answer
702
views
How to instal vim using salt stack?
I have salt-stack maser and minion servers which running on centos7. I want to install vim package in minion server. For that I have created srv directory and vim.sls file under etc.
My vim.sls file ...
- 223
1
vote
1
answer
1k
views
Automatic pillars by host name
I have problem where managing multiple domains in one top.sls file is getting difficult. How could I write top.sls so that it only takes those pillars that match my minion name/hostname.
For example:...
0
votes
1
answer
854
views
Salt Stack file.recurse Recurse Failed
I built a state file in salt to copy a list of check_mk Nagios scripts down to the remote server. Below is a snip of the state file.
check_mk_defined_checks:
file.recurse:
- name: /usr/lib/...
- 143
1
vote
2
answers
1k
views
Saltstack state.apply determine whether it is being run in test=True mode ?
We are using serverdensity (BETA MODULE - https://docs.saltstack.com/en/latest/ref/states/all/salt.states.serverdensity_device.html) with salt and have hit the (bug?) where if you try a :
salt '*...
- 31
0
votes
1
answer
107
views
.mount a folder from the salt:// share onto a minion?
I'm trying to write a state that will mount the folder currently in the "salt://" directory with the sophos installer, run the installer.sh, then unmount it. I'm hoping to avoid copying the whole ...
- 48
1
vote
1
answer
357
views
Deliver unique file for each Salt minion
There is some directory path, like /etc/opt/mysoft which contents should be different for each minion.
So for minion A it contains config.ini with come contents and for minion B it contains config....
- 337
1
vote
2
answers
2k
views
Executing arbitrary sls file with salt
I'm learning about salt.
I understand that the way things work, state files must be put under a root directory specified statically in the master/minion config.
So my question is, is there a way to ...
- 111
0
votes
1
answer
207
views
SaltStack: Disable Cron during run
I would like to disable cron on the minion when salt gets executed.
Disabling it would be easy: service.disabled
But how to enable it again (in all cases (success or error))?
What I want is ...
- 3,541
3
votes
0
answers
2k
views
GitFS Salt Environments with a single top.sls
The documentation states that if you use
salt_top_saltenv: base
in the master config, that I can force all Minions to only use the base
saltenv for the top file, ignoring all other top files, is ...
- 131