Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
    Renier Morales
    @renier
    @smurawski cool, thanks
    Steven Murawski
    @smurawski
    np
    Justin Dossey
    @justindossey
    Hey all, I ran into an interesting case with test-kitchen yesterday and would appreciate some input. My recipe adds a host to an AD domain. The test, therefore, would verify the domain was joined successfully. So converge joins, verify confirms the join, then destroy removes the VM created for the integration test. Nowhere in there can I invoke an un-join or leave operation, so I'm left with crap on the AD server. How should I invoke the un-join or any other cleanup stuff to avoid leaving crap on outside servers?
    This case comes up not just with AD, but also with stuff like license servers, where I need to check out a license, verify that I have a valid license, then return the license, then verify the license was returned.
    Steven Murawski
    @smurawski
    @justindossey how are you handling the reboot required by the domain join?
    Steven Murawski
    @smurawski
    @justindossey my recommendation at this point would be rather than kitchen test, breaking out the steps in your ci pipeline and doing kitchen create, kitchen converge (probably a few times if reboots are needed), then as a deprovision, use kitchen exec to run arbitrary commands against the kitchen node (to do your unlicensing or cleaning up AD). If it was just AD, I would have them join a specific OU and reap through there with a scheduled task or something and blow away unneeded accounts.
    Justin Dossey
    @justindossey
    @smurawski thanks for the response. I'll noodle on it some more
    this particular tool (quest/vintella) doesn't require reboot, fwiw
    Bill Warner
    @TD-4242
    is there an easy way to do some post failure info gathering during a kitchen test? I'd like to at least cat some logs to stdout.
    Steven Murawski
    @smurawski
    @TD-4242 not that I can think of off hand, but to be clear - post fail to converge or fail to validate or both?
    For a workaround, there is always kitchen exec
    Bill Warner
    @TD-4242
    this is having 'kitchen test' in my build plan executed by Jenkins on code commit. If the app dies on start up for example I have to re-converge locally to login and find out why. Often this can be seen in the logs from the application.
    Steven Murawski
    @smurawski
    @TD-4242 nothing out of the box I can think of, but rather than have kitchen destroy at the end of the failed kitchen test run, just kitchen exec to cat out the log files you care about, then kitchen destroyit
    Bill Warner
    @TD-4242
    Bill Warner
    @TD-4242
    while i don't think it'll let me run on failure, I can at least tail the logs I need and get them into the build servers logs :)
    Steven Murawski
    @smurawski
    :+1:
    nukepuppy
    @nukepuppy
    has anyone found a clever way to apply CORS configuration via chef (or ruby?) to an s3bucket?
    nukepuppy
    @nukepuppy
    just realized that was posted to completely wrong gitter.im chat ;) sorry for anyone who got uber confused
    nukepuppy
    @nukepuppy
    anyone ever do anything for managing lots of .kitchen.yml files in different projects that are essentially very similar? generating etc
    Bill Warner
    @TD-4242
    the .kitchen.yml file is processed with erb prior to use, so you can create them as templates. I was using this while testing docker so I could set an ENV var KI_DRIVER=docker and it would use that instead of vagrant.
    simple: name: <%= ENV['KI_DRIVER'] || 'vagrant' %>
    nukepuppy
    @nukepuppy
    hmm we're looking to find a more stable way to manage lots of kitchen ymls when they are on same platform etc
    like building part of it and then merging it to a real .kitchen.yml .. gather the platform and driver from a remote source depending on if its a specific driver. and then an app.yml which has the localized attributes etc in kitchen.. all done with something like rake.. that then builds the kitchen.yml for the user
    this way .. when we want to change a box_url or something its not a ton of kitchen.ymls that need an update just the one master source for X platform
    Eugene Narciso
    @enarciso
    Has anyone experience problems with TK/vsphere/windows2012. I'm currently using Matt Rock's chef-provisioning-vsphere as my driver and at spin up on the VM instance, the first IP address vsphere's API renders is an IPv6 which leads TK to exit with a [Bad URI(is not URI?): http://$IPV6/msman] error. We don't server IPv6 in our DHCP, and disabling IPv6 in windows made my template worse. I hope i'm not the only one that's experiencing this problem. Appreciate any pointers. Thanks!
    Bill Warner
    @TD-4242
    anyone know if I can fake a block device like /dev/sda in kitchen-docker?
    Patrik Votońćek
    @Vrtak-CZ
    Hi guys, is there anyone who can help me with chef-cookbooks/cron#79 ? Lookslike as kitchen-docker issue but i'm not sure.
    Petr Michalec
    @epcim
    Hi folks, is there a way to skip some verification steps if running in docker ( using inspec/serverspec as backend )?
    nukepuppy
    @nukepuppy
    @epcim describe file('/usr/lib64'), :if => os[:arch] == 'x86_64' do it { should be_directory } end or similar instead of the os arch use something else to identify the condition for inside the tests?
    nukepuppy
    @nukepuppy
    maybe i forgot this already but.. isn't there a way to make test kitchen use a 'real chef server' ?
    Aaron Lippold
    @aaronlippold
    Hi all, I am using kitchen-ssh to do some repetitive testing of a chef recipe and an inspec profile - against a provisioned vm host - any suggestions on caching to speed up the process. The idea is we will use the chef recipe to bring the box in and out of compliance and test the inspec secuirty checks that way.
    @epcim You can use the --controls flag to execute only a specific set of controls or none of them in the InSpec profile - https://github.com/chef/inspec/blob/master/docs/ctl_inspec.rst#options
    @epcim you can also use the inSpec 'only_if' logic as well and profile inheritance to tailor your profile to only run a few tests - https://github.com/chef/inspec/blob/master/docs/profiles.rst#profile-inheritance
    Aaron Lippold
    @aaronlippold
    @epcim only_if do
    command('docker').exist?
    end

    @epcim see

    only_if do command('docker').exist? end

    only_if do
      command('docker').exist?
    end
    grumble ...
    Punita Ojha
    @punitaojha
    This message was deleted
    Renato Marinho
    @renatomarinho
    This message was deleted
    Renato Marinho
    @renatomarinho
    This message was deleted
    Titouan Chary
    @Mwea
    Hi guys !
    Does anyone could be interested by plugins for terraform to handle chef-zero ? ( I'm looking for feedbacks )
    Brett Benassi
    @dubb-b
    Anyone know if you can you do kitchen-docker with Docker in Docker?
    Laurent Vallar
    @Val
    @dubb-b : Yes you can, but with a patch like test-kitchen/kitchen-docker#294 , see https://github.com/devops-playground/tap4ci
    Bruno Andrade
    @bmandrade
    Hey guys,
    I'm running test-kitchen+kitchen-docker and I need to run docker with host network
    The problem is the ssh port 22 is already in use.
    I try to use transport to update the port to another like the following:
    transport:
      name: ssh
      port: 5000
    there is no service running on port 5000
    I destroy the current kitchen and run verify
    but still getting:
    Waiting for SSH service on :22, retrying in 3 seconds
    Does anyone already got this?