Questions tagged [saltstack]

SaltStack is an open source configuration management and remote execution application.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

symlink issue with saltstack pillar data

I'm working with an inherited system where AWS infrastructure is currently being managed via Terraform and Salt, with pillar data stored in a remote git repo. In the original repo I can see the team ...
0
votes
0answers
9 views

SaltStack disable local windows Administrator if it is enabled

I'd like to disable the built-in windows local administrator account if it is enabled. As salt.state.user.present doesn't support disabling accounts, I'm using salt.modules.win_useradd.update. ...
0
votes
0answers
14 views

OpenLDAP users can look up their own group memberhips

We have an OpenLDAP server that we've been using for allowing users to log into various nix machines so long as the ldap client is installed on that machine. Recently we decided to try and use ...
0
votes
0answers
125 views

How to install salt for python3?

When I check my salt-minion version, I get the following message: [root@localhost ~]# salt-minion --version /usr/lib/python2.7/site-packages/salt/scripts.py:198: DeprecationWarning: Python 2.7 will ...
0
votes
1answer
42 views

SaltStack: No usable error message if dpkg fails

I get this message from salt-ssh ID: apache Function: pkg.installed Result: False Comment: Problem encountered installing package(s). Additional info follows: errors: ...
0
votes
1answer
49 views

Call state directly via salt-ssh

Is it possible to call this state via salt-ssh directly? vim: pkg.installed I mean without creating an sls file?
0
votes
0answers
9 views

SaltStack + SaltCloud, dynamically allow incoming minion IPs for master

What I want to do is to create new VMs with SaltCloud, but as a part of VM creation allow IP address of newly created VM on SaltStack Master host firewall almost instantly, so before VM boots and runs ...
0
votes
1answer
36 views

Loop through salt pillar to create file without knowing keys

Background: I need to make an XML file like this: <?xml version="1.0"?> <configuration> <appSettings> <add key="BaseOU" value="DC=myplace,DC=wan" /> <add key="...
0
votes
0answers
15 views

SaltStack Master installation

I want to install the SaltStack master on my Debian 9 physical machine. I added the line deb https://repo.saltstack.com/apt/debian/9/amd64/latest/ stretch main in the sources.list file and added the ...
0
votes
0answers
68 views

Set variable from cmd.run in jinja + saltstack on Windows Minion

I am trying to set a variable in jinja when a task in task scheduler is found on the Windows Minion. Tried many things but dont seem to get this working yet. here is the code that I have {% set ...
0
votes
0answers
93 views

Package/patch management with Salt

I am setting up saltstack to manage workstations. Linux, Windows and MacOS. I want to distribute, install and manage software with saltstack. What would be the best way to achieve this using saltstack?...
0
votes
0answers
22 views

Is it possible to use Jinja in a SLS file and create a dependency relation with other states?

I have an interesting problem to solve using SaltStack 2016.3. I need to set a Jinja variable to collect some runtime parameters in the minion, but the problem is that these parameters depend on the ...
0
votes
0answers
24 views

Unable to run sync_grains while using grain matching

Whenever I try to run the sync_grains command on a host using glob matching, it works great: root@salt:~# salt '*-stage-*' saltutil.sync_grains; echo $? i-0bbaf106121397b74-stage-knowledge-base: 0 ...
0
votes
2answers
177 views

SaltStack: found conflicting ID

My sls file: /etc/sudoers.d/foo: file.managed: - contents: | foo ALL = NOPASSWD: /usr/bin/systemctl restart minio_storage-foo.service foo ALL = NOPASSWD: /bin/systemctl restart ...
1
vote
1answer
528 views

Unable to generate GPG keys without passphrase on Ubuntu 18.04 [closed]

Has anyone tried creating GPG keys for encrypted pillars on Ubuntu 18.04? I'm using the following command to attempt to generate the keys: gpg --gen-key --homedir /etc/salt/gpgkeys When I run that ...
0
votes
0answers
171 views

Passing a variable into Salt cmd.script module?

I have a PowerShell script that finds what version of Java is installed by checking the registry but the script has Java hard coded into it and I would like to be able to change it to Adobe, or Google ...
0
votes
1answer
17 views

Salt-Stack init process after package is installed

Installing AIDE needs to follow by a init proces. aide: pkg: - installed Now the following commands need to run only once: /usr/sbin/aide --config=/etc/aide.conf --init mv -f /var/lib/aide/aide.db....
0
votes
1answer
32 views

SaltStack: normalize Package name

I would like to have less conditions in my saltstack sls files. Up to now it looks like this: foo_package: pkg.installed: - pkgs: {% if grains.os_family == 'Debian' %} - foo_BAR {% ...
0
votes
2answers
37 views

saltstack equivalent of puppet last_run_summary.yaml

Does Salt have the equivalent of Puppet's last_run_summary.yaml? If not, what's the suggested way to monitor the success or failure of executions on individual salt minions?
0
votes
1answer
52 views

Saltstack: How to install a new zypper RPM Repo?

How to add a new rpm package repo via saltstack? I checked the docs, and only see method to list, modify or delete repos: https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.zypper....
0
votes
1answer
63 views

Saltstack formulas (starter)

Is any saltstack formula 'skeleton' available so it can create a structure as described here? In chef you have knife cookbook create or in ansible ansible-galaxy init.
0
votes
0answers
76 views

Saltstack Jinja template pillar merge

I have a several pillars and I am trying to merge them in the same jinja variable {%- import_yaml "server_list_de.yaml" as servers %} {%- import_yaml "server_list_uk.yaml" as servers_uk %} {%- ...
0
votes
1answer
110 views

Salt: Raise Error if file.replace did not find anything to replace

Maybe I am blind, but I could not find a way to let the salt-ssh call fail, if file.replace did not replace a single line. If the pattern I provide did not match, then I want to get noticed. Example:...
0
votes
1answer
166 views

Jinja “for loop” statement with multiple lines (saltstack)

When using salt for specifying user creation, it is unorganized to have the for statement in a single line. Example: {% for USR in 'hewey','dewey','loui' %} Is it possible to break this into ...
0
votes
2answers
208 views

Salt: file.replace on a list of files (globbing)

I use file.replace and would like to use this not on a single file, but on a list of files. The list of files comes from globbing. Example: I want to modify /etc/ImageMagick*/policy.xml. The file ...
0
votes
1answer
84 views

Salt: file.replace: ignore_if_missing gets ignored?

I want to enable logging of an fstp server like this: https://serverfault.com/a/74234/90324 But salt does nothing. I reduced it to this: enable_logging_of_sftp: file.replace: - name: /etc/ssh/...
1
vote
2answers
2k views

How to copy file from master to minions on salt-stack?

I want to copy a file from salt stack master server to minion servers. I found a script from https://stackoverflow.com/questions/27687886/copy-a-file-from-salt-master-to-minions. But I got an error. ...
0
votes
1answer
115 views

How to instal vim using salt stack?

I have salt-stack maser and minion servers which running on centos7. I want to install vim package in minion server. For that I have created srv directory and vim.sls file under etc. My vim.sls file ...
0
votes
0answers
49 views

SaltStack: Requisite not found

I try to configure sqreen. I installed the pkg, sqreen-repo: cmd.run: - name: curl -s {{ sqreenScriptUrl }} | sudo bash - unless: test -f /etc/apt/sources.list.d/sqreen_sqreen.list - ...
1
vote
1answer
304 views

Automatic pillars by host name

I have problem where managing multiple domains in one top.sls file is getting difficult. How could I write top.sls so that it only takes those pillars that match my minion name/hostname. For example:...
0
votes
1answer
281 views

Salt Stack file.recurse Recurse Failed

I built a state file in salt to copy a list of check_mk Nagios scripts down to the remote server. Below is a snip of the state file. check_mk_defined_checks: file.recurse: - name: /usr/lib/...
0
votes
2answers
157 views

Saltstack state.apply determine whether it is being run in test=True mode ?

We are using serverdensity (BETA MODULE - https://docs.saltstack.com/en/latest/ref/states/all/salt.states.serverdensity_device.html) with salt and have hit the (bug?) where if you try a : salt '*...
0
votes
1answer
27 views

.mount a folder from the salt:// share onto a minion?

I'm trying to write a state that will mount the folder currently in the "salt://" directory with the sophos installer, run the installer.sh, then unmount it. I'm hoping to avoid copying the whole ...
1
vote
1answer
69 views

Deliver unique file for each Salt minion

There is some directory path, like /etc/opt/mysoft which contents should be different for each minion. So for minion A it contains config.ini with come contents and for minion B it contains config....
1
vote
2answers
527 views

Executing arbitrary sls file with salt

I'm learning about salt. I understand that the way things work, state files must be put under a root directory specified statically in the master/minion config. So my question is, is there a way to ...
0
votes
1answer
64 views

SaltStack: Disable Cron during run

I would like to disable cron on the minion when salt gets executed. Disabling it would be easy: service.disabled But how to enable it again (in all cases (success or error))? What I want is ...
2
votes
0answers
430 views

GitFS Salt Environments with a single top.sls

The documentation states that if you use salt_top_saltenv: base in the master config, that I can force all Minions to only use the base saltenv for the top file, ignoring all other top files, is ...
2
votes
0answers
154 views

How can I set user/group ownership on a SaltStack git clone?

I have a hand-maintained Bugzilla installation that I'm trying to move to being managed with SaltStack. Currently I have the following .sls file to set up the clone: https://github.com/bugzilla/...
2
votes
1answer
1k views

How to reposync saltstack? reposync failing with error message `Removing […], due to missing GPG key.`

On a RHEL 7.4 system, I add the salt-latest repo as follows: yum -y install https://repo.saltstack.com/yum/redhat/salt-repo-latest-2.el7.noarch.rpm Notice, amongst other things, this creates the ...
1
vote
1answer
350 views

SaltStack: How to create user and a directory in his HOME directory?

I want to create a user and a directory in his HOME directory. Unfortunately the HOME directory is not allways directly under /home. On some minions it is under /localhome and some use /users/.
1
vote
1answer
894 views

Saltstack and Python3 issue

I'm having a bit of an issue with the following recipe: setup-compose: file.managed: - source: https://github.com/docker/compose/releases/download/1.21.1/docker-compose-Linux-{{ grains['cpuarch'...
0
votes
1answer
106 views

salt-ssh Do changes which spans several hosts

I need to change two hosts: A new web-server gets configured A tunnel between tunnel-host and the new web-server should get created We implemented both, and both steps work: root@s# salt-ssh ...
0
votes
0answers
51 views

SaltStack: --failhard for salt-ssh

I would like the execution of salt-ssh to cancel on the first error. I read this: https://docs.saltstack.com/en/latest/ref/states/failhard.html But I am using salt master-less with salt-ssh. Is ...
0
votes
1answer
423 views

SaltStack: ImportError: No module named backports.ssl_match_hostname

I get this exception: ===> salt-ssh remote-host cmd.run 'id' remote-host: ---------- retcode: 0 stderr: Traceback (most recent call last): File "/var/tmp/....
0
votes
1answer
148 views

Salt modules in state file

salt.modules.iptables is great to use from command line but how can I use this in a state file. First I want to check if iptables is running: check_process: cmd.run: - name: ps aux | grep '...
0
votes
1answer
472 views

SaltStack: Stop on first error

I have a sls file for SaltStack which looks like this: etckeeper: pkg.installed etckeeper_extra_packages: pkg.installed: - pkgs: - hwinfo {%- if not salt['file.directory_exists' ]('/...
0
votes
2answers
91 views

SaltStack: Do “etckeeper init” if /etc/.git is not there

I want to deploy the tool etckeeper via SaltStack. Installating the RPM/DPKG is easy. Next step is to call etckeeper init after the installation. My current idea is this pseudo-code: execute ...
0
votes
1answer
108 views

How do I use debconf in salt with pillars?

I have the following: newrelic-debconf: debconf.set: - name: newrelic-php5 - data: 'newrelic-php5/application-name': { 'type': 'string', 'value': '{{ salt['pillar.get']('newrelic:...
3
votes
3answers
4k views

SaltStack: Execute `systemctl --system daemon-reload` if service file was changed

We deploy and change system service files via SaltStack. For example, if file /etc/systemd/system/superfoo.service gets changed, then systemd emits this warning: Warning: Unit file of superfoo....
0
votes
0answers
49 views

SaltStack: Reason why postgres_user.absent fails?

The Salt state postgres_user.absent fails: ID: remove_foobar_vums_dci__database_user Function: postgres_user.absent Name: foobar_vums_dci Result: False Comment: User foobar_vums_dci ...