Re: Time classes question

2012-10-12 Thread Brian Bennett
I agree with this assessment. The next 5-minute marker is Min25_30. If Min20_25 were inclusive, then it would overlap with Min25_30 by one minute. It makes sense when they're considered together, and it's better syntax than Min20_24_59. On Oct 12, 2012, at 10:21 AM, Brad Beyenhof wrote: > On

Re: CFEngine Help: Normal ordering, files and commands

2012-08-29 Thread Brian Bennett
Try this: files: (!cdev_null|cbind9_devs_null_repaired) "${cbind_dir}/dev/null" comment => "Fix null device permission", perms => mog("666", "root", "root"), create => "false"; (!cdev_random|cbind9_devs_random_repaired) "${cbind_dir}/dev/random" comment

Cfengine license

2012-06-22 Thread Brian Bennett
In the LICENSE file included with the cfengine the contents of the GPLv3 is included. It also states "CFEngine is provided under the terms of the GNU General Public License..." The GPL itself in section 14 states "If the Program doesn't specify a version number...you may choose any version ever

Re: 180+ instances of cf-execd and cf-agent

2012-06-21 Thread Brian Bennett
Ron, It looks to me like you have a promise that's getting hung on something. Run `cf-agent -KIv` (cap k, cap i, little v) and watch the output. You should be able to see where it's hanging. -- Brian On Jun 21, 2012, at 8:01 AM, Ron Parker wrote: > In testing that the promises for a given m

Re: distributing secrets

2012-06-13 Thread Brian Bennett
Where else is this password referenced? My inclination would be a promise that generates the password directly on the box (perhaps with pwgen). Something like this: files: "/etc/local/pass" create => "false", classes => if_notok("gen_pass"); commands: gen_pass:: "/usr/bin/pwgen -s >

again, cf-runagent

2012-05-13 Thread Brian Bennett
For the life of me, I can't get `cf-runagent` to work. I realize that it's somewhat deprecated, but as long as it's supported I want to grok it. I'm using community edition 3.3.1. In promises.cf: bundle server access_rules() { access: any:: "$(def.dir_masterf

Re: [ANNOUNCE] CFEngine Community 3.3.1 is released

2012-05-04 Thread Brian Bennett
Am I missing something? I still don't see the 3.3.1 tag on github... $ git remote -v origin https://github.com/cfengine/core/ (fetch) origin https://github.com/cfengine/core/ (push) $ git tag | grep 3.3 3.3.0 3.3.0a1 3.3.0b1 3.3.0b2 $ git pull Al

Building 3.3 on Solaris 11

2012-04-24 Thread Brian Bennett
I'm attempting to build version 3.3.0 on Solaris 11. After several warnings I get this: unix.c: In function `Unix_GetMacAddress': unix.c:562: error: structure has no member named `ifr_hwaddr' unix.c:563: error: structure has no member named `ifr_hwaddr' unix.c:564: error: structu

Re: classes not working in vars?

2012-03-16 Thread Brian Bennett
Are you trying to set a class if a vars promise has been kept, or set a variable based on the existence of a class? -- Brian On Mar 16, 2012, at 7:41 AM, Marco Marongiu wrote: > Il 16/03/2012 15:16, Nick Anderson ha scritto: classes: >> "has_shortname" >> expression => isvar

Re: CFEngine Help: Bundle meta data

2012-03-15 Thread Brian Bennett
Are there already existing reserved local variable names? I don't know of any and I'd be resistant to starting this trend just for versioning. Should this simply be a best practice? In other words, what exactly does reserving the word gain us since, as Mark said, no matter how hard you try some

Re: Execute command before reparation

2012-03-11 Thread Brian Bennett
In general it's done on an interface by interface basis. The commands ifdown and ifup are almost always used rather than /etc/init.d/networking. The init script itself just calls ifdown -a or ifup -a anyway. Debian never expects all interfaces to be altered in one shot unless you're on the conso

Re: Execute command before reparation

2012-03-10 Thread Brian Bennett
On Mar 10, 2012, at 4:37 PM, Jimmy THRASIBULE wrote: > Hi, > > I am discovering CFEngine3 and I would like to execute a command if a > file is about to be repaired. > > The case here is to stop the Debian networking service if a change > must be done on `/et/network/interfaces`. Is that possible?

Re: Help with a class construction

2012-03-03 Thread Brian Bennett
Nick, It works exactly as you have it. That is, pipe (|) is the proper OR and dot (.) is the proper AND. You can also use an ampersand (&) for AND, although I do prefer dot. It looks to me that reason you're having a problem is that all of your variables need to be defined, regardless of wethe

Re: CFEngine Help: Re: Ignoring virtual interfaces

2012-03-01 Thread Brian Bennett
On Mar 1, 2012, at 3:22 PM, no-re...@cfengine.com wrote: > > Perhaps skipidentity or skipverify I already have both of those set. This doesn't have anything to do with the classes that get set. -- Brian Bennett | http://digitalelf.net/ | baha...@me.com aim - elfbahamat | ja

Ignoring virtual interfaces

2012-03-01 Thread Brian Bennett
I came across this old post on the mailing list: https://cfengine.org/pipermail/help-cfengine/2009-December/006811.html Quoting the relevant portion: Mark Burgess wrote: > Ouch. Perhaps we can make a configuration setting to ignore interfaces. > >> Bryan Ramirez wrote: >> Some of our servers ha

Re: Does ifvarclass allow illegal class expressions? (containing spaces) why doesn't it auto-canonify? (to save CPU cycles?)

2012-03-01 Thread Brian Bennett
I was thinking along these lines, but wasn't sure. My takeaway on this is that it appears that what ifvarclass is evaluating is a string (which is not guaranteed to be a valid class context) which it matches against the existing class contexts. If the string contains invalid class characters th

Re: Is source RPM available for prebuilt community pacakges?

2012-03-01 Thread Brian Bennett
I would also love to have the debian directory used to build the debs. -- Brian On Mar 1, 2012, at 7:16 AM, Brian Whitehead wrote: > It would be helpful to have the source RPMS available or at least the .spec > file used to generate the RPMS. Maybe some at Cfengine will consider this > requ

Re: What does {{{ files: "/tmp/filename.txt"; }}} mean? (and why is not a "promise_kept" if /tmp/filename.txt exists?)

2012-02-29 Thread Brian Bennett
Aleksey, I don't think that {{{ files: "/tmp/filename.txt"; }}} means that it is promised to *exist* since one of the attributes is delete, which means that the file promises to *not* exist. The way I read the files: promisetype for agent is that the promiser only promises to be a valid path n

Re: dynamic bundlesequence - Neil's example breaks if the soft class is defined within the promise file

2012-02-28 Thread Brian Bennett
It's my installation. The promises are only a few MB, but our file repo is a few GB. -- Brian On Feb 28, 2012, at 6:41 AM, Ted Zlatanov wrote: > On Fri, 24 Feb 2012 07:35:34 -0800 Aleksey Tsalolikhin > wrote: > > AT> This site has been using CFEngine 2 for 5 years and they have a very > AT

Re: CFEngine Help: multihomed cf-serverd and ipv6

2012-02-27 Thread Brian Bennett
I had the same problem. I had to explicitly set this: bindtointerface => "::" Although I haven't done that on a multihomed host yet but I would assume it will bind to all interfaces. My Cfengine server is listening *only* on v6 now. I haven't tried to bind dual stack. -- Brian On Feb 27, 201

IPv6 and Solaris 11

2012-02-25 Thread Brian Bennett
Greetings, I'm beginning to work in IPv6 only environments. I've compiled cfengine 3.2.1 on Solaris 11 and cf-agent doesn't query for records (which I verified with tcpdump that only A queries are going out). The S11 host works normally with IPv6 destinations otherwise. I have the communi