ipaddress_eth1 Puppet fact not available with VirtualBox ("predictable interface names")

[nbuchwitz]

If you try to open the host or service detail page, the page shows only the following error message:

Could not resolve host: icingaweb2; Name or service not known

The error is caused by the graphite module in whose configuration the URL is missing / broken.

/etc/icingaweb2/modules/graphite/config.ini:

[graphite]
url = "http://:8003"

[ui]
default_time_range = "5"
default_time_range_unit = "minutes"
disable_no_graphs_found = "0"

Expected Behavior

Host or service detail page is shown.

Current Behavior

Both pages terminate with the error message.

Possible Solution

Set the hostname to the IP 192.168.33.5

Steps to Reproduce (for bugs)

1. Clone icinga-vangrant git repository
2. cd icinga-vagrant/standalone && vagrant up

Context

GIT master

Your Environment

• Vagrant version (vagrant -v): 2.0.2
• Box name: standalone
• Release version: git master
• Operating system: Fedora 27
• Provider (VirtualBox, Parallels, libvirt): VirtualBox

[nbuchwitz]

After some digging, it seems that the ip lookup fails, because eth1 is named enp0s8 my environment.

icinga-vagrant/.puppet/hieradata/common.yaml

Line 8 in 356e230

graphite::web::listen_ip: "%{ipaddress_eth1}"

This also affects the other ip addresses.

[dnsmichi]

Neinnnnnnnnn. Not again this foobar.

[dnsmichi]

Ok, this affects VirtualBox which uses the "predictable if name schema". Parallels does not for some reason.

[root@icinga2 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 08:00:27:ed:e3:61 brd ff:ff:ff:ff:ff:ff
    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3
       valid_lft 85514sec preferred_lft 85514sec
    inet6 fe80::1b76:3522:f94e:cc7e/64 scope link
       valid_lft forever preferred_lft forever
3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
    link/ether 08:00:27:2d:1c:13 brd ff:ff:ff:ff:ff:ff
    inet 192.168.33.5/24 brd 192.168.33.255 scope global enp0s8
       valid_lft forever preferred_lft forever
    inet6 fe80::a00:27ff:fe2d:1c13/64 scope link
       valid_lft forever preferred_lft forever

Workaround: Edit .puppet/hieradata/common.yaml and replace eth1 with enp0s8.

I am still not convinced if enp0s8 always stays the same. There are some guides on the net which allow to disable predictable names and just use eth0/eth1. Still, hiera lookup with a fallback would be better.

[dnsmichi]

hashicorp/vagrant#7361 (comment)
elastic/logstash#5467

Note that the bento boxes do not disable predictable network interface names

[dnsmichi]

[root@icinga2 ~]# puppet facts
...
    "interfaces": "enp0s3,enp0s8,lo",
    "ipaddress": "10.0.2.15",
    "ipaddress6": "fe80::1b76:3522:f94e:cc7e",
    "ipaddress6_enp0s3": "fe80::1b76:3522:f94e:cc7e",
    "ipaddress6_enp0s8": "fe80::a00:27ff:fe2d:1c13",
    "ipaddress6_lo": "::1",
    "ipaddress_enp0s3": "10.0.2.15",
    "ipaddress_enp0s8": "192.168.33.5",
    "ipaddress_lo": "127.0.0.1",

    "mtu_enp0s3": 1500,
    "mtu_enp0s8": 1500,
    "mtu_lo": 65536,
    "netmask": "255.255.255.0",
    "netmask6": "ffff:ffff:ffff:ffff::",
    "netmask6_enp0s3": "ffff:ffff:ffff:ffff::",
    "netmask6_enp0s8": "ffff:ffff:ffff:ffff::",
    "netmask6_lo": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
    "netmask_enp0s3": "255.255.255.0",
    "netmask_enp0s8": "255.255.255.0",
    "netmask_lo": "255.0.0.0",
    "network": "10.0.2.0",
    "network6": "fe80::",
    "network6_enp0s3": "fe80::",
    "network6_enp0s8": "fe80::",
    "network6_lo": "::1",
    "network_enp0s3": "10.0.2.0",
    "network_enp0s8": "192.168.33.0",
    "network_lo": "127.0.0.0",
    "networking": {
      "dhcp": "10.0.2.2",
      "domain": "vagrant.demo.icinga.com",
      "fqdn": "icinga2.vagrant.demo.icinga.com",
      "hostname": "icinga2",
      "interfaces": {
        "enp0s3": {
          "bindings": [
            {
              "address": "10.0.2.15",
              "netmask": "255.255.255.0",
              "network": "10.0.2.0"
            }
          ],
          "bindings6": [
            {
              "address": "fe80::1b76:3522:f94e:cc7e",
              "netmask": "ffff:ffff:ffff:ffff::",
              "network": "fe80::"
            }
          ],
          "dhcp": "10.0.2.2",
          "ip": "10.0.2.15",
          "ip6": "fe80::1b76:3522:f94e:cc7e",
          "mac": "08:00:27:ed:e3:61",
          "mtu": 1500,
          "netmask": "255.255.255.0",
          "netmask6": "ffff:ffff:ffff:ffff::",
          "network": "10.0.2.0",
          "network6": "fe80::"
        },
        "enp0s8": {
          "bindings": [
            {
              "address": "192.168.33.5",
              "netmask": "255.255.255.0",
              "network": "192.168.33.0"
            }
          ],
          "bindings6": [
            {
              "address": "fe80::a00:27ff:fe2d:1c13",
              "netmask": "ffff:ffff:ffff:ffff::",
              "network": "fe80::"
            }
          ],
          "ip": "192.168.33.5",
          "ip6": "fe80::a00:27ff:fe2d:1c13",
          "mac": "08:00:27:2d:1c:13",
          "mtu": 1500,
          "netmask": "255.255.255.0",
          "netmask6": "ffff:ffff:ffff:ffff::",
          "network": "192.168.33.0",
          "network6": "fe80::"
        },
        "lo": {
          "bindings": [
            {
              "address": "127.0.0.1",
              "netmask": "255.0.0.0",
              "network": "127.0.0.0"
            }
          ],
          "bindings6": [
            {
              "address": "::1",
              "netmask": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
              "network": "::1"
            }
          ],
          "ip": "127.0.0.1",
          "ip6": "::1",
          "mtu": 65536,
          "netmask": "255.0.0.0",
          "netmask6": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
          "network": "127.0.0.0",
          "network6": "::1"
        }
      },
      "ip": "10.0.2.15",
      "ip6": "fe80::1b76:3522:f94e:cc7e",
      "mac": "08:00:27:ed:e3:61",
      "mtu": 1500,
      "netmask": "255.255.255.0",
      "netmask6": "ffff:ffff:ffff:ffff::",
      "network": "10.0.2.0",
      "network6": "fe80::",
      "primary": "enp0s3"
    },
...

[dnsmichi]

Ok, fuck it. You cannot reliably determine the secondary interface. Either you attempt to extract that with hiera lookup(), modify hiera to support regexp on key/values. Or you'll go by the route of writing a custom fact which attempts to extract the secondary ip address.

Nothing which works reliably, therefore hieradata gets node specific ip addresses configured like anything else (the distributed boxes already override common.yaml with node specific data). This is how Puppet works, Vagrant is just a bonus on top for the host only bridge.

==> icinga2: Notice: /Stage[main]/Profiles::Icinga::Icingaweb2/Icingaweb2::Module[graphite]/Icingaweb2::Inisection[module-graphite-general]/Concat[/etc/icingaweb2/modules/graphite/config.ini]/File[/etc/icingaweb2/modules/graphite/config.ini]/content: content changed '{md5}960425c353d7d14a88ffab929f9ebb89' to '{md5}6f54e822aca78fded6e6771ad25e8c41'

michi@mbmif ~/coding/icinga/icinga-vagrant/standalone (master *+=) $ vagrant ssh -c 'sudo cat /etc/icingaweb2/modules/graphite/config.ini'
[graphite]
url = "http://192.168.33.5:8003"

[ui]
default_time_range = "5"
default_time_range_unit = "minutes"
disable_no_graphs_found = "0"

Connection to 127.0.0.1 closed.

PR is coming soon.