Hi,

this may be a simple question, but so far no luck for me.

I'm currently using CFengine to collect various system data, such as the SSH host keys for ssh_known_hosts, basically like this:

first CFengine run - copy local /etc/ssh/ssh_{rsa,dsa} _host_key.pub to an common (NFS) directory

5 minutes before the next run a cronjob (on $cfserver) recreates a new ssh_known_hosts file (update only on change) next CFengine run - distribute the new ssh_known_hosts file to all systems

The problem with the above is the common NFS directory, it is automounted and even though I use SplayTime etc the automounter load on the NFS-server is enough that a few of the mounts fail from time to time. (Ok, the next run will probably work for these systems, but I still get the error reports mailed to me. Quite a few, on any given day...)

It would have been nice if I could have used the 'server=$cfserver' syntax during the copy, but that appears only to work *from* $cfserver, and never *to* it.

Any suggestions? As I said, the above works, but it's kind of kludgy.

/Håkan




_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
http://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to