CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Finally started doing some bullseye to bookworm upgrades, first glitch is php-geoip's having disappeared (removed because of missing support for PHP 8). Will need to investigate what to do for #matomo

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Another problem is losing XMPP-based notifications because the (old, written in Perl) scripts suddenly error out, while the relevant libraries seem to have only received minimal packaging changes (mostly metadata).

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

On bullseye, Net::XMPP::Protocol seems to go with AuthSASL (OK); on bookworm, that goes with AuthIQAuth (KO).

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Alright, for some reason, session information is missing on bookworm, meaning no session ID, and of course the “what does this thing support” question doesn't get a “yes I support SASL” hence the fallback to AuthIQAuth…

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Alright, that's FUBAR. The connection is established, session information as well. Then xmpp-tls says we need to StartTLS, and there's absolutely no error handling, so we lose session information entirely, for unknown reasons, and with no warnings. No wonder the rest explodes.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar
CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

To be honest, debugging, hopefully fixing, and extending life support for a Perl module last released in 2014 does sound very much less appealing than just reimplementing a few scripts in Python, which features several XMPP modules, released… this decade (this year even).

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

On the #puppet side, I anticipated things wouldn't be trivial, but not quite that it would be that bad:

puppet-master[<PID>]: Error: Unknown Puppet subcommand 'master'

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

That one seems to be a wrapped /etc/init.d script, while puppetserver.service exists but is disabled. Starting the latter manually:

systemd[1]: Starting puppetserver.service - Puppet Server...
sh[<PID>]: sh: 1: kill: Operation not permitted

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Better after stop and start, go figure…

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

And restart takes ages, probably because that's now a Java-based thing. Maybe one day I'll get tired of those various #puppet annoyances, and move everything to #ansible

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Of course, the old hiera config file no longer works; the new one doesn't either; editing it following upstream's doc doesn't work.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Gotta enjoy how the hiera eyaml configuration bit doesn't warn about having to set a lookup_options key…

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

https://www.puppet.com/docs/puppet/7/securing-sensitive-data.html doesn't seem to have been proofread, seeing how it mentions “hiera-emyal” and contains indentation errors in code blocks…

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Anyway, just the incredible length of https://www.puppet.com/docs/puppet/7/hiera_migrate.html and the number of steps to upgrade is… daunting.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Gotta enjoy the schizophrenia, with #puppet's erroring out because it doesn't find lookup_options in hiera.yaml, and https://www.puppet.com/docs/puppet/7/hiera_merging insisting on hiera.yaml's not being the place to set this key!!!

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Add funny characters like nbsp's or tabs sneaking in, no detection/error reporting about that, and you get the perfect mix for a Saturday afternoon.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Progress?

Error while evaluating a Function Call, Function Load Error for function 'eyaml_lookup_key': Lookup using eyaml lookup_key function is only supported when the hiera_eyaml library is present

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

The 300 lines of puppetserver log generated by a single puppet agent -t call (mostly call trace) makes me wonder whether hiera-eyaml and puppetserver are actually compatible in #bookworm

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

This can be side-stepped with:

puppetserver gem install hiera-eyaml
systemctl restart puppetserver

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

And finally, at least for this instance and those nodes, to keep support for the mailalias resource type:

puppet module install puppetlabs/mailalias_core

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois the _core ones are bundled in the AIO server Puppetlabs ships, I guess it's not the case for Debian? Sounds like a bug to me :)

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

@zhenech I'll see whether I file this, but I'm more worried about the hiera-eyaml thingy…

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois I guess jruby doesn't like the packaged one for some reason, but I've not used Debians puppetserver yet at all. For mailalias there is at least puppet-module-puppetlabs-mailalias-core.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

@zhenech The mailalias part is https://bugs.debian.org/1050337 now, sharing blame or credit.

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois Thanks!

Interestingly, I checked and Puppetlabs
a/ vendors the modules in puppet-agent, not puppetserver
b/ doesn't vendor mailalias_core, which confuses me

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois

dpkg -L puppet-agent |grep _core$

/opt/puppetlabs/puppet/vendor_modules/augeas_core
/opt/puppetlabs/puppet/vendor_modules/cron_core
/opt/puppetlabs/puppet/vendor_modules/host_core
/opt/puppetlabs/puppet/vendor_modules/mount_core
/opt/puppetlabs/puppet/vendor_modules/selinux_core
/opt/puppetlabs/puppet/vendor_modules/sshkeys_core
/opt/puppetlabs/puppet/vendor_modules/yumrepo_core
/opt/puppetlabs/puppet/vendor_modules/zfs_core
/opt/puppetlabs/puppet/vendor_modules/zone_core

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

@zhenech I think I'll stay away from the “trying to understand the current state of puppet architecture and packaging” rabbit hole, but nice try interesting me into jumping!

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois look, the rabbit is extra crispy and the hole was freshly painted, you can't ignore THAT!

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

@zhenech And the puppetserver vs. hiera-yaml incompatibility is now filed as well: https://bugs.debian.org/1050340

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Things could be said about the compared memory footprint between the deprecated default non-production server that worked so well for this < 20 hosts setup, and the new Java-based monster.

zhenech,
@zhenech@chaos.social avatar

@CyrilBrulebois you could try tamming it down by setting max-active-instances: 1 in puppetserver.conf

(or some other, low value, see https://www.puppet.com/docs/puppet/7/server/tuning_guide.html for this and other options)

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

@zhenech I must confess I stopped when things looked like they worked again, and only noticed that while checking unrelated graphs… Thanks again for the excellent feedback, I'll try and work my way through your suggestions in the next few days.

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Just filed the puppet-master.service (enabled, failing) vs. puppetserver.service (disabled) confusion as well: https://bugs.debian.org/1050343

(Not just my snowflake system, reproduced in a brand new VM.)

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Another weird issue: I'm no longer seeing regular IRC messages in #irssi, possibly some format thing changed and broke the theme I've been using for ~ 15 years or so. Back to the default one for the time being (and oh wow it's bad).

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

This is definitely weird as the irssi theme repository seems to have received almost no changes in many years (and I don't think my irssi config is very heavy). Time to debug then!

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

A trivial loop across all themes, minimizing the diff against my broken config says oscar.theme was the source for my custom theme; and there are many changes in placeholders/format strings! Switching back to the original, and if that works, problem solved!

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Alright, this seems to be doing the trick:

-msgnick = "%K[%g$0%w$1-%K]%n %|";
+msgnick = "%K<%n$0$1-%K>%n %|";

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Alright, so what's inside the brackets ([] or <>) isn't what matters here.

Switching from <> to [] is what makes both nick and text disappear. Escaping [] makes everything work again!

Hopefully that's the final setting:

msgnick = "%K[%n$0$1-%K]%n %|";

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Another problem is all the /load something.pl lines in ~/.irssi/startup are now failing, with each http://something.pl triggering an attempt to load a plugin (ELF shared object, .so).

Time to switch to /script load something.pl instead.

vague,

@CyrilBrulebois you could create symlinks to the scripts you want autoloaded in ~/.irssi/scripts/autorun/ and skip the startup file

CyrilBrulebois,
@CyrilBrulebois@mamot.fr avatar

Next (minor so far) annoyance in LXC guests:

ps -hu

root 99 0.0ps: Unable to get total memory

so I suppose I'll have to dig into #libvirt/#lxc settings and learn more about cgroups etc.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • ngwrru68w68
  • rosin
  • GTA5RPClips
  • osvaldo12
  • love
  • Youngstown
  • slotface
  • khanakhh
  • everett
  • kavyap
  • mdbf
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • megavids
  • InstantRegret
  • normalnudes
  • tacticalgear
  • cubers
  • ethstaker
  • modclub
  • cisconetworking
  • Durango
  • anitta
  • Leos
  • tester
  • provamag3
  • JUstTest
  • All magazines