#theforeman

that can foreman/puppet do for you

and then you want to manage source lists for example

and maybe user accounts?

joshua1: try it. play around with it. install an test-lab for your needs.

AND - use git for your module/puppet stuff and configs

ok, yeah if it can do all that it sounds pretty sweet. I will try it now.

joshua1: you can do. and "foreman-installer" will install you an complete set to work with (foreman,puppet-master,foreman-proxy and soone)

then you can try to pxe boot an client and playaround with foreman/baremetal install for example

So I'm getting this error "[E] Start tag expected, '<' not found [oscap_source.c:172]" it looks like foreman_scap_client is bzip compressing the openscap results before it uploads them to the foreman-proxy and that is working ok. But then when foreman-proxy tries to upload it to foreman it's causing a issue. It looks like foreman is expecting uncompressed data and foreman-proxy is not uncompressing it before uploading. Any idea what could be wrong here?

Hi, could anyone tell me what this error means related to SSL ERF12-2530

Hi: ERF12-2530 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

ERF12-2530

grealish: ERF12-2530 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

cool! a bot that reply's to error codes ERF12-2530

grealish: ERF12-2530 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

ERF12-2530

grealish: ERF12-2530 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

ERF12-2530

grealish: ERF12-2530 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

ERF12-2531

ERF12-4252

grealish: ERF12-4252 has a wiki page - see http://theforeman.org/projects/foreman/wiki/ERF...

/who nudnik

it's just rbot with a custom extension ;)

ensures people get some kind of response when the channel is quiet

gwmngilfen: thansk, is it a open source project?

the bot or the extension? :)

both are, but they're different things :P

so the bot i guess is this https://github.com/jsn/rbot is the extensions OPS?

it's just a massive ruby regex

ERF is one of the matches

brdude: afaik this was already fixed (it was an older openscap lib on the foreman server side) best to answer is shlomizadok (when he is online) probably tomorrow am europe time

ohadlevy: Thanks!

Do you have any more info on that so I can try and do some digging?

gwmngilfen: thanks for the github link

gwmngilfen: i've a strange SSL issue that doesn't seam to be related to foreman, but following the steps on 1.8, it just fails at adding a remote foreman-proxy

i add the host and when it wants to get the json /features it fails at a SSL error, however certs are generated and setup in the host, doing a curl -kvv domain:8443/features works, the cert has the CA

but i still get a ..=SSLv3 read server session ticket A: tlsv1 alert un...) then it just ends

time is in sync?

(obvious but worth checking)

they are in different timezones

but otherwise correct?

always worth eliminating

gwmngilfen: typeing "date" is that enought to check

one is UTC and the other CEST

so long as they have the correct time for their timezone, should be fine

yes, doing date -u looks good, but how accurate? it looks like they are about a second or two off

probably not a big deal if the certs were generated some time ago ;)

so your proxy has certs generated from the foreman ca?

yes

and I copyied the 3 certs over

to the new deployed foreman-proxy server

can you pastebin the foreman log when trying to add the proxy?

gwmngilfen: actually i can't find that log, production.log doesn't give me enough verbose

the request to add it should be there, as a POST to /smart_proxies

just tail it and then try to add again

then you'll have whatever is new ;)

gwmngilfen: found it.. what pastbin service you use here?

pick one ;)

we're not fussy

pastie.org is my personal norm

gwmngilfen: http://pastebin.com/62vcyrTH

aha, so thats good

not an SSL error ;)

getaddrinfo: Name or service not known) for proxy https://provusd02.....

sounds like foreman can't resolve it

but, i can ping it on the host foreman is running

let me look more through the log.. that could be a type

i thought it could be related to this http://blog.penumbra.be/2011/04/puppetmaster-pa...

tbh ssl is not my strongest area ;)

but i can at least sanity-check logs for stuff i've seen before

gwmngilfen: here's another try

gwmngilfen: this is the guide i'm following http://www.theforeman.org/manuals/1.8/#3.2.3Ins...

grealish: still says name not known on lines 5/6

oh, wait, you appended

hmm the truncated error is unhelpful

gwmngilfen: yes thats where i'm stuck.. and googled around and found this SSL related issue in puppetmaster, linked to a blog post

yeah, we don't use the default vhost though

also that blog is from 2011 ;)

i'm afraid you're probably best checking back in a bit and seeing if anyone else has ideas. 9-5 CEST is a good time to be asking questions ;)

ok, thanks anyways

gwmngilfen: I mostly read up