Hi all,

 

As we've been moving forward with our Nova implementation and developing
an appropriate procedure for getting approval to make changes to our
Cfengine policy, I've realized that it would be incredibly important to
know which systems will be affected by a policy change. So, given a
class expression ("oracle.!gold", "web_server|ftp_server", etc.), I'd
like a way of using Cfengine to generate a list of hosts that match the
expression.

 

My initial thought is derived from how a Nova policy server gathers
statistics files from its clients. I could have the policy server fetch
/var/cfengine/state/allclasses.txt from every host and then run a script
on the policy server could use those files as the data from which it
could generate such a list. For example, here's the most complicated
class expression in our policy:

 

pserver$ list-hosts
"!unix_lab.!nonstandard_sudoers_host.(linux|(solaris.zone_global.!usr_lo
cal_is_nfs))"

matchinghost1

matchinghost2

etc.

pserver$

 

Anyone have any other ideas? Anyone know if such a capability will be
added to Nova 2.0?

 

Thanks,

Justin

 

 

Justin C. Lloyd

Senior Unix Infrastructure Engineer

Office: 303.684.4166


 
www.digitalglobe.com <http://www.digitalglobe.com/> 

 


This electronic communication and any attachments may contain confidential and 
proprietary 
information of DigitalGlobe, Inc. If you are not the intended recipient, or an 
agent or employee 
responsible for delivering this communication to the intended recipient, or if 
you have received 
this communication in error, please do not print, copy, retransmit, disseminate 
or 
otherwise use the information. Please indicate to the sender that you have 
received this 
communication in error, and delete the copy you received. DigitalGlobe reserves 
the 
right to monitor any electronic communication sent or received by its 
employees, agents 
or representatives.

<<image001.gif>>

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to