Hello,
We'd like to use cfengine to perform specific tasks on machines, but
only have it run things related to a specific class. For instance,
I'd like to run 'cfagent -qI -D WEBSERVER' and have it run all the
configuration updates defined for the WEBSERVER class. What's
currently happening is it runs EVERYTHING in our admittedly monolithic
cfengine configuration.

Is it possible to isolate a single class like this so that the only
thing that runs are the definitions under that class? I tried running
'cfagent -qI -H -D WEBSERVER' but that appeared to not do anything.
Thanks.

Hi,

apparently, I'm the only one having this issue, I can't find any info
on this group nor google.

In my cf.main file, I'd like to test for installed packages :

# cf.main #
[...]
classes:

debian::
DefaultPkgMgr = ( dpkg )
DPKGInstallCommand = ( "/usr/bin/apt-get -y install %%s" )

packages:
debian::
sudo define=hassudo elsedefine=needssudo action=install
ncftp action=install

[...]

I have removed ncftp to check if cfengine will install it for me (sudo
already installed).
But I get this very weird output:

Dear All,

if I use cfengine to copy a file which does not exist, I get no
warning (?!)

I have to turn verbose mode on (cfagent -v) to see :

cfengine:node08: Server returned error: Host authentication failed.
Did you forget the domain name or IP/DNS address registration (for
ipv4 or ipv6)?
cfengine:node08: Can't stat /opt/cfengine-dev/masterinputs/foudil in
copy

But I would like to see it without -v !

I tried with 'failover' :

---------------------------------------------------------------------------
copy:
$(update.masterinputs)/foudil dest=$(update.workdir)/inputs/foudil
server=$(update.policyhost) action=warn failover=failed_copy_foudil

alerts:
failed_copy_foudil::
"erreur: could not copy /tmp/foudil dest=/tmp/foudil"
---------------------------------------------------------------------------

I am trying to exclude directory "CVS" from my update.conf config, but
the exclude rule doesn't seem to work. How do I exclude /master/
cfengine/cfengine_cvs/CVS from being copied to all hosts?

Here's my update.conf:

control:
actionsequence = ( copy tidy )
workdir = ( /var/cfengine )
policyhost = ( mypolicyhost.domain.com )
master_cfinput = ( /master/cfengine/cfengine_cvs )
cf_install_dir = ( /usr/sbin )

I would like to know if any of you use cfengine for monitoring URLs
and web servers, and if so what is the best way to go about
configuring URL monitors.

I would like to build some logic like this. URLs A, B, and C are
served up by httpd running on linuxhost1. If URLs A, B, and C are all
down, AND the httpd service is down then cfengine should only alert my
pager one time.

Our current monitoring system (brand X) alerts the administrator for
each and every URL when apache dies, this can be 30-40 or more SMS
pages, repeated every 10 or 15 minutes. Its annoying because the
alerts do not tell us anything about which server the URL lives on.

I am hopeful that cfengine can rectify this situation, possibly even
restarting apache when it arises. But for starters I would like to
get the alerts under control and make sure that when apache or tomcat
dies that we are not bombarded with URL alerts.

Any suggestions are most welcome. I'd like to hear how other cfengine
users would tackle this problem. I am open to using a hybrid solution
like nagios + cfengine to make this work.

Hi all. I have just set up a couple servers with cfengine, and have a
couple of basic copy and file permission checks working. Is there a
good book or web-based guide to properly setting up cfengine on a
medium-sized network of Linux hosts? I want to make sure we do this
right the first time.

Hi,

I'm trying to install cfengine on a tru64 cluster ( uname -a: OSF1
my.hostname V5.1 2650 alpha)

Installed software is:
OpenSSL 0.9.7d (system installed)
BerkeleyDB-4.6.21 (manually compiled)

It is running with its default CC and MAKE, doesn't seem that there is
that many gnu utilities available (but shouldn't it work since the
configure runs through OK?)

I have downloaded the latest cfengine-2.2.6 and ran configure using
the following command:

LDFLAGS="-L/usr/shlib -Wl,-rpath,/usr/local/BerkeleyDB.4.6/lib:/usr/
shlib" \
./configure --prefix=/home/netictr/cfengine --with-berkeleydb=/usr/
local/BerkeleyDB.4.6

It is running with its default CC and MAKE (not gcc, not gmake, no
automake, autoconf etc), doesn't seem that there is that many gnu
utilities available (but shouldn't it work since the configure runs
through OK?)

I've seen a number of postings related to ReplaceAll and can't quite
understand how it is supposed to work.

I have the following editfiles statement:

{ /etc/default/autofs
ReplaceAll '#AUTOMOUNT_TIMEOUT=600' With
'AUTOMOUNT_TIMEOUT=86400'
}

I get the following output:

ntgwpms001# cfagent -qK
BRSCFE: WARNING: Non-convergent edit operation ReplaceAll
[#AUTOMOUNT_TIMEOUT=600] With [AUTOMOUNT_TIMEOUT=86400]
BRSCFE: Line begins [#AUTOMOUNT_TIMEOUT=600]
BRSCFE: Replacement matches search string and will thus replace every
time - edit was not done
BRSCFE: Error editing file /etc/default/autofs

I try other quotes "" but get the same error. Can anyone point out
what I am doing wrong here?

Thanks

I'm running Version 2.2.3.

Hi

I have a cfengine server on SuSE Linux Enterprise Server 10.1 but
whenever I start up cfenvd it immediately crashes, I tried to start
it with strace and option -F, and it produced the following (I've
snipped the first couple of hundred lines of output): Any hints on
what could be wrong? It is a cfengine 2.2.1, and the other daemons
works fine and cfengine seems to work, except this daemon. Regards
Thomas

mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xfffffffff7b5b000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xfffffffff7b5a000
set_thread_area...

I am trying to set a class based on the following:

classes:
admin = ( RegCmp(".*adm.*","${host}" ))

i.e. Set the admin class if adm is included in the hostname.

The class never gets set. The debug output is as follows:

HandleFunctionObject(RegCmp(".*adm.*","${host}" ))
IsBuiltinFunction(RegCmp(".*adm.*","${host}" ))
IsBuiltinFunction: RegCmp(".*adm.*","${host}" )
HandleFunction: RegCmp(".*adm.*","${host}" )
FunctionStringToCode...