Search:

Thanks for that, but as you know, that's a status check hack, which does, in my opinion, what the stock puppet check should be doing. If we're going to have to rewrite service manifests in order to...

I'm sorry to hear this, as my main system is still on 11.04 but I was looking to move to 12.04 soon, which would be problematic if the default service checks are still broken. I'm really surprised...

Despite having Natty installed on a decent system (8 GB RAM, Core 2 Duo 3.33GHz w/vmx), I have trouble running *any* guest OS inside a VM. When installing an OS (like Precise). I give the VM a CPU...

BTW, strangely enough, on my 11.04 workstation (w/puppet 2.6.8 ), when I run a `sudo puppet agent --test` manually from my client, all of these services return the proper response, and Puppet assumes...

Thanks Hendy. I had seen the report from two years ago but dismissed it in my case, as the problem persisted despite having been "fixed". I'm now watching both issues.

Right: a custom 'status' command is one way to approach this. Unfortunately, this particular approach would not work for some of the services I've mentioned as problematic. Also, if possible, I'd...

Anyone? :(

Also wondering how people are managing upgrades to apt packages to get Puppet in a usable state with a relatively modern version, as the stock package for 11.04 is pretty old and...

bochi2: if you're still stuck, one suggestion I have would be to try the upgrade procedure again, and let it go as far as it can before giving up. I did this a few times, and it failed twice before...

Is anyone using Puppet to manage Ubuntu services? Can you please mention how you're checking status on services such as:

ntp
ssh
rsyslog
iptables

Left to its own devices, Puppet uses...

May I ask for specifics on what the lock file change was?

Perhaps someone knows why such a change would be made in a "minor" release, when so many people would be prompted by the OS itself to...

We've written some cross-platform Puppet manifests to ensure specific services are running, and although Puppet's providers should be able to abstract away the details for some things, it doesn't...

Sorry: what? If that was meant for me, thanks, but I don't understand how it applies to my questions about how applied ufw firewall rules are saved? how iptables can be used instead of ufw? etc.?

Are you sure this wasn't due to some change between 10 and 11? Are you still running 10.04 (or 10.10)?

My first question was going to be why setting `ALL_PROXY=` wouldn't cover HTTPS, but it...

Agreed: it's nice to have the option of falling back to iptables, as well as using the up/down script method to control things. But that's not quite the same as having an init or service script to...

What the ... if UFW isn't iptables, why does it have its own 'iptables' directory, with rules separate from those of the same name in the directory above that, which are separate from the ones in...

Hmmm ... null result. Lots of '-p' but no '-P' in /etc/ufw/*.

Actually, there's something I can't figure out: adding a default allow rule for outgoing traffic (via ufw CLI) does _not_ seem to get written to /lib/ufw/user.rules, as the other rule commands for...

Uhm, what? And what does this have to do with UFW?

Thanks for that bodhi.zazen, especially the post-up bit. That helps me to make sense of a lot of this. Other OS flavors have similar network configs and scripts, but use different names...

Right haqking: that's my understanding as well, with the caveat that iptables itself is also an interface to netfilter. UWF is seeming less and less "uncomplicated" to me and more like a somewhat...

Hi bodhi.zazen, and thank you. I have seen the recommendation for iptables-[apply|save] before, but was hoping for something that I wouldn't have to exec in order to enact, e.g., a config somewhere...

I'm a bit confused about Ubuntu firewalls, and after reading documentation on UFW, I've been asking in a few places in the forums (1, 2, etc.) but still don't have a clear understanding.

In short:...

I'm really confused about all this: I am told that ufw is an optional, "simplified" interface to netfilter, and that iptables is still active in addition to ufw, but I don't know of a simple way in...

Hi Dangertux,
Not dumb at all, but in my case, this whole configuration and management needs to be automated. If I can't automate everything with Puppet, I'm in trouble.

No: the automated...

Hmmm ... okay, how about this one: in order for Puppet to control Kerberos and the PAM stack, one needs to ensure that the Ubuntu package `libpam-krb5` is installed. Puppet can do this; the problem...