Re: Apple script in cfengine files

2010-01-26 Thread Matt Richards
ooo, my interest is piqued! On Jan 26, 2010, at 3:11 PM, Janet Bass wrote: > Has anyone used Applescripts scripts in cfengine? > > I am not finding a lot of documentation about Cfengine and Mac OS X > > Thanks > -- > Janet Bass > Unix System Administration > Manufacturing Engineering Laborator

Re: AddClasses with ExecResult

2010-01-26 Thread Chris Ward
Omit the spaces in your output: control: AddClasses = ( ExecShellResult("/path/to/get_classes.sh") ) $ /path/to/get_classes.sh dev_class,system_class,some_other_class On Thu, 21 Jan 2010, Atom Powers wrote: > I'd like to use ExecResult with AddClasses to add several classes at > once, by p

service bundles and config files

2010-01-26 Thread Neil Watson
The 'Comparing Cfengine' doc talks about abstracting services. I like this idea and have used it in the lab. One thing this example doesn't mention is how to handle services with multiple configuration files. Suppose the service has recursive copy or a list of files? bundle common res # abstract

[cfengine2] Editing multiple files

2010-01-26 Thread B. Alexander
I would like to edit all of the .bashrc files on the system. I'm on Debian, so I would have one in /root, one in each user's directory and one in /etc/skel. First I am copying the file over if it is not already there, then I run an editfiles. The editfiles stanza looks like: editfiles: # Fir

Re: How to avoid spurious connection failure messages, when some other server responds?

2010-01-26 Thread Diego Zamboni
No, the "problem" is that the host is down, but in this case I don't care. My definitions look like this: "phost" slist => { "192.168.58.133", "127.0.0.1" }; later on... body copy_from umycopy(from) { source => "${from}"; compare => "digest"; verify => "true"; purge => "false"; serv

Re: Proper way of doing replace_or_add?

2010-01-26 Thread Diego Zamboni
I am sorry, I didn't realize that at some point we switched off the list. I'm sending to the list now - thanks for the help. --Diego On Tue, Jan 26, 2010 at 2:43 PM, Mark wrote: > I don't have time to guide you through this, send it to the list > > > Mark > > > On 26 Jan 2010, at 19:50, Diego Z

disk quotas

2010-01-26 Thread NWatson
I hardly use disk quotas myself but, if they were managed by Cfengine I think I'd be more inclined. Thoughts? Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may contain proprietary and/or

Apple script in cfengine files

2010-01-26 Thread Janet Bass
Has anyone used Applescripts scripts in cfengine? I am not finding a lot of documentation about Cfengine and Mac OS X Thanks -- Janet Bass Unix System Administration Manufacturing Engineering Laboratory 304/Room 12 100 Bureau Dr Mailstop 8203 Gaithersburg, MD 20899-8203 EMAIL: jb...@nist.gov PHO

How to avoid spurious connection failure messages, when some other server responds?

2010-01-26 Thread Diego Zamboni
Hi, In my update promises, I have multiple policy hosts defined – in my particular test setup, if the remote server is not available, I connect to localhost, where a server is also running (it’s all just for testing for now). However, when the update runs, I still get the connection failure messa

Re: "chaining" the body action

2010-01-26 Thread Mark Burgess
My first advice would be: don't make it too complex. Do absolutely everything you can to avoid this kind of complexity. Then, if there is nothing further you can do to simplify it, the complexity is real and it cannot be simplified significantly. Don't forget that you can make choices inside the

"chaining" the body action

2010-01-26 Thread Nicolas Charles
Hi, As my promises are getting more and more complex, I'm facing an issue with the body actions. Let's say I want to log in a file the execution result of a promises, and I want this promises to be run in background, a not more often than once per 6 hours., and sometimes I only want to run it a

RE: Standard library: apt package method

2010-01-26 Thread Andreas Dan Larsson
> > I would recommend that you check if the install is successful and > > run aptitude update if its not. If a updated package is published > > since you ran "aptitude update" you will get a 404 on your request > > for the older version. I think this would be the most elegant thing > > to do, ins

Re: Standard library: apt package method

2010-01-26 Thread Jonathan Clarke
On 26/01/2010 15:42, Tim Cutts wrote: > > On 26 Jan 2010, at 2:25 pm, Mark Burgess wrote: > >> >> This seems reasonable. I am spoiled using zypper which does this >> automatically. > > It's arguable that apt's separation of the two functions is sensible. I > have more than 2000 machines; and have a

Re: Standard library: apt package method

2010-01-26 Thread Tim Cutts
On 26 Jan 2010, at 3:13 pm, Andreas Dan Larsson wrote: > > I would recommend that you check if the install is successful and > run aptitude update if its not. If a updated package is published > since you ran "aptitude update" you will get a 404 on your request > for the older version. I th

RE: Standard library: apt package method

2010-01-26 Thread Andreas Dan Larsson
I would recommend that you check if the install is successful and run aptitude update if its not. If a updated package is published since you ran "aptitude update" you will get a 404 on your request for the older version. I think this would be the most elegant thing to do, instead of failing to

Re: Standard library: apt package method

2010-01-26 Thread Nakarin Phooripoom
So the best practice should be like this; :-) commands: debian|ubuntu.Hr00:: "/usr/bin/aptitude update"; packages: debian|ubuntu:: "$(packages_to_be_installed)" package_policy => "add", package_method => aptitude; body package_method aptitude { package_ad

Re: Standard library: apt package method

2010-01-26 Thread NWatson
I favour the idea of keeping apt-get update and apt-get upgrade separate. In this manner I can schedule an update and know that subsequent upgrades for all hosts will match the update schedule. This keeps your upgrades all on the same time line. Sincerely, -- Neil Watson 416-673-3465 CONFIDE

Re: Standard library: apt package method

2010-01-26 Thread Mark Burgess
And Tim is just knocking them down today! ;-) 1, 2, ... Tim Cutts wrote: > > On 26 Jan 2010, at 2:41 pm, Nakarin Phooripoom wrote: > >> Zypper and yum seem to check and update the latest list of packages >> every time it runs before installing any selected packages. >> >> Could we do somethin

Re: Standard library: apt package method

2010-01-26 Thread Tim Cutts
On 26 Jan 2010, at 2:41 pm, Nakarin Phooripoom wrote: > Zypper and yum seem to check and update the latest list of packages > every time it runs before installing any selected packages. > > Could we do something like this for Debian/Ubuntu? > > package_add_command => "/usr/bin/aptitude update &

Re: Standard library: apt package method

2010-01-26 Thread Mark Burgess
Doh! Strong left-hook from Tim. Will Jonathan come back for more? M Tim Cutts wrote: > > On 26 Jan 2010, at 2:25 pm, Mark Burgess wrote: > >> >> This seems reasonable. I am spoiled using zypper which does this >> automatically. > > It's arguable that apt's separation of the two functions is

Re: Standard library: apt package method

2010-01-26 Thread Mark Burgess
Nice. Does this work for you, Jonathan? Nakarin Phooripoom wrote: > Zypper and yum seem to check and update the latest list of packages every > time it runs before installing any selected packages. > > Could we do something like this for Debian/Ubuntu? > > package_add_command => "/usr/bin/apti

Re: Standard library: apt package method

2010-01-26 Thread Tim Cutts
On 26 Jan 2010, at 2:25 pm, Mark Burgess wrote: > > This seems reasonable. I am spoiled using zypper which does this > automatically. It's arguable that apt's separation of the two functions is sensible. I have more than 2000 machines; and have already once been blacklisted by one apt rep

Re: Standard library: apt package method

2010-01-26 Thread Nakarin Phooripoom
Zypper and yum seem to check and update the latest list of packages every time it runs before installing any selected packages. Could we do something like this for Debian/Ubuntu? package_add_command => "/usr/bin/aptitude update && /usr/bin/aptitude --assume-yes install"; Cheers, --Nakarin On

Re: Proper way of doing replace_or_add?

2010-01-26 Thread Mark Burgess
IN this case, you need to define a class regardless if what happens when the pattern replace is made. replace_patterns: "${p}" replace_with => value("${l}"), classes => always("done"); insert_lines: done:: "${l}"; # add only if it doesn't exist This should work as long

Re: Standard library: apt package method

2010-01-26 Thread Mark Burgess
This seems reasonable. I am spoiled using zypper which does this automatically. Jonathan Clarke wrote: > On 25/01/2010 14:44, Jonathan Clarke wrote: >> Hi, >> >> I've been testing the standard library, in particular the apt >> package_method. I come with a bug and some suggestions. > > One furth

Re: Multi-dimensional arrays

2010-01-26 Thread Mark Burgess
Daniel, the arrays can indeed be multi-dimensional, the real question is what do you want to do with the keys? Get indices applies only to one-dimensional arrays, so what would you want to do with another array? e.g. getindexlist("Hosts","2") to extract a list of the second index? Daniel Deh

Weird class definition problem

2010-01-26 Thread Martin A. Brooks
Hi I have been trying to make cfengine handle user account more usefully. To this end, I have writtne a pair of modules for parsing users and group and then creating classes based on what it finds. If the user "martin" account exists, a class is created of the form "user_martin". If the group "s

Re: recursive copy with encryption and empty files

2010-01-26 Thread Mario Heidmann
Thanks for the patch, Mark. It worked fine. Regards, Mario > Mario, > > sincere apologies for this error. After investigation, this is a simple issue > that slipped > through testing, not dangerous in any way. You will find a patched version in > svn revision > 739, correcting this issue. > >