CFEngine Help: Re: Promises repaired in promise_summary
Forum: CFEngine Help Subject: Re: Promises repaired in promise_summary Author: toddnni Link to topic: https://cfengine.com/forum/read.php?3,24595,24619#msg-24619 To my understanding var promises are not counted in repaired promises and I predict that the repaired promises are your report promises (you didn't have them in your first example). ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
CFEngine Help: What kernel tunables do you implement for better Cfengine performance?
Forum: CFEngine Help Subject: What kernel tunables do you implement for better Cfengine performance? Author: msvob...@linkedin.com Link to topic: https://cfengine.com/forum/read.php?3,24620,24620#msg-24620 I had the oppretunity to meet with Mark Burgess last week at LinkedIn and we had a brief discussion about cf-serverd performance. He stated that TCP tuning Linux systems can give dramatic performance gains to cf-serverd. The one TCP kernel tunable he suggested was net.ipv4.tcp_fin_timeout. Looking at a current RHEL6 machine, this is set to the default 60s. >From the kernel documentation: tcp_fin_timeout - INTEGER Time to hold socket in state FIN-WAIT-2, if it was closed by our side. Peer can be broken and never close its side, or even died unexpectedly. Default value is 60sec. Usual value used in 2.2 was 180 seconds, you may restore it, but remember that if your machine is even underloaded WEB server, you risk to overflow memory with kilotons of dead sockets, FIN-WAIT-2 sockets are less dangerous than FIN-WAIT-1, because they eat maximum 1.5K of memory, but they tend to live longer. Cf. tcp_max_orphans. Does anyone else tune their Linux / Solaris TCP stack for improved performance, and if so, what changes have you found to give better performance? Valid answers win a cookie or metal award. I'll attempt to implement these tunables on our non-production instance serving several hundred clients. If I can dramatically cut down on network transfer times, then you'll seriously be a Cfengine hero. Cheers Mike ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
CFEngine Help: Re: CFEngine Help: Re: maintaining /etc/security/limits.conf with cf3
Forum: CFEngine Help Subject: Re: CFEngine Help: Re: maintaining /etc/security/limits.conf with cf3 Author: milindk Link to topic: https://cfengine.com/forum/read.php?3,24612,24621#msg-24621 Can we not use this way ? Below is my code snippet "limits[^\s*sybase\s*hard\s*memlock\s.*$]" string => "sybasehard memlock unlimited"; "limits[^\s*sybase\s*soft\s*memlock\s.*$]" string => "sybasesoft memlock unlimited"; bundle agent edit_limits { files: "$(sybaseconfig.files)" comment => "Make sure limits.conf contains desired configuration settings", create => "true", edit_line => add_line("sybaseconfig.limits"), classes => if_repaired("limits_modified"); } bundle edit_line add_line(v) { vars: "pattern" slist => getindices("$(v)"); "cpattern[$(pattern)]" string => canonify("$(pattern)"); classes: "${cpattern[$(pattern)]}_parameter_found" expression => regline("$(pattern)","$(sybaseconfig.files)"); insert_lines: "$($(v)[$(pattern)])" location => before("#\s+End of file"), ifvarclass => "!${cpattern[$(pattern)]}_parameter_found"; } ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
CFEngine Help: Re: Promises repaired in promise_summary
Forum: CFEngine Help Subject: Re: Promises repaired in promise_summary Author: jonesy1234 Link to topic: https://cfengine.com/forum/read.php?3,24595,24622#msg-24622 Ah, I see your point. I remove the reports section and all is good. thanks for your help toddnni! cf3>= cf3>classes in bundle test (3) cf3>= cf3> cf3> Executing and using module cf3> Module context: pseries_adapters_ksh cf3> Activated classes: pseries_fcs_adapters_detected cf3> Module context: pseries_adapters_ksh cf3> Activated classes: fcs0 cf3> Module context: pseries_adapters_ksh cf3> Activated classes: fcs1 cf3> Module context: pseries_adapters_ksh cf3> Defined variable: fcs_adapters in context pseries_adapters_ksh with value: { "fcs0", "fcs1" } cf3> Module context: pseries_adapters_ksh cf3> Activated classes: pseries_fscsi_adapters_detected cf3> Module context: pseries_adapters_ksh cf3> Defined variable: fscsi_adapters in context pseries_adapters_ksh with value: { "fscsi0", "fscsi1" } cf3> Module context: pseries_adapters_ksh cf3> Activated classes: pseries_ent_adapters_detected cf3> Module context: pseries_adapters_ksh cf3> Activated classes: ent0 cf3> Module context: pseries_adapters_ksh cf3> Activated classes: xiv_hdisks_detected cf3> Module context: pseries_adapters_ksh cf3> Defined variable: xiv_hdisks in context pseries_adapters_ksh with value: { "hdisk0", "hdisk1", "hdisk2" } cf3> Module context: pseries_adapters_ksh cf3> Initiate variable convergence... cf3> cf3> + Private classes augmented: cf3> + done cf3> cf3> - Private classes diminished: cf3> cf3> cf3> Outcome of version (not specified): No checks were scheduled cf3> -> Checked 0 objects with 3 promises, efficiency 0.00 cf3> -> No lock purging scheduled ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine