Re: Variable convergence mystery

2012-07-31 Thread Tokarski Boleslaw
Hello, Funny thing, as I bumped into that today, using 3.1.4. With my own policy, but here are my discoveries. > bundle agent test(param){ > vars: > debug:: > "filename" string => "/tmp/debug"; > > !debug:: > "filename" string => "/tmp/nodebug"; > > classes: > "debug" expr

Re: CFEngine Help: Suggestions needed on folder structure and paths in promises

2012-07-29 Thread Tokarski Boleslaw
Hello, > Then you can use: > "scripts_folder" string => "$(sys.workdir)resources/scripts"; > > Yeah, that's what I'll be doing, but currently I'm just "testing out" the > files in a location other than "masterfiles" so that they won't be copied to > other nodes as they're being tested. How do you

Re: CFEngine Help: Suggestions needed on folder structure and paths in promises

2012-07-27 Thread Tokarski Boleslaw
Hello, sonofrage, First of all, welcome, and great to see you managed to get that far with CFEngine. As per the directory structure, I find your idea a little bit weird. I see that you have separated the .cf files in src/ from scripts in resources/, however you left promises.cf and stdlib in t

Re: CFEngine Help: Fun fact about aptitude

2012-07-04 Thread Tokarski Boleslaw
I never knew why COPBL used aptitude in preference over apt-get. Although it was true at some point that aptitude was more sophisticated than apt-get and was able to mark packages as installed manually, apt-get can do that now as well. And it seems that apt-get is a more automated solution than

Re: CFEngine Help: Re: How to skip installing package if already installed

2012-06-11 Thread Tokarski Boleslaw
Hello, To achieve this I have provided my modified version of package_method body: body package_method aptget { package_changes => "bulk"; package_list_command => "/usr/bin/dpkg -l"; package_list_name_regex => "ii\s+([^\s]+).*"; package_list_version_regex => "ii\s+[^\s]+\s+([^\s]+).*"; package_ins

Change state repaired to kept

2011-08-16 Thread Tokarski Boleslaw
Hello, I am analyzing my promises that are in state repaired and notkept. I consider that: - 'kept' state are promises that were evaluated correctly and the system was in an expected state, - 'repaired' are promises that show that something was wrong and corrected and may require manual interve

Re: CFEngine Help: Re: add users to /etc/shadow

2011-07-27 Thread Tokarski Boleslaw
Well, even if it is expecting an array... "passwd[support]" string => "support:x:301:301:Remote Support User,,,:$(home):/bin/bash", comment => "/etc/passwd line for support user", handle => "support_vars_passwd_support"; "shadow[support]" string => 'support:$(shadow):14939:0:9:7:::', comment

Re: Cfengine Help: Re: Creating package_method for gentoo's portage

2011-06-21 Thread Tokarski Boleslaw
Hello, Well, I suppose "/bin/sh -c \"ls -d /var/db/pkg/*/* | cut -c 13-\"" would be 'a bit' cleaner than inviting python to do it. Cheers, B On 21/06/11 14:50, no-re...@cfengine.com wrote: > Forum: Cfengine Help > Subject: Re: Creating package_method for gentoo's portage > Author: doychin > L

Re: Cfengine Help: Creating package_method for gentoo's portage

2011-06-21 Thread Tokarski Boleslaw
Hello, I don't believe that the package_list_command is executed inside a shell. Piping will not work in such a case. You may write a bash or perl script instead and use it from cfengine. I am not a gentoo user, but is there no emerge --list command? Best regards, Boleslaw Tokarski On 21/06/1

Re: Cfengine Help: Re: Variable to lowercase

2011-06-20 Thread Tokarski Boleslaw
Hello, Sauer, I was thinking about exactly the same thing - if there are perl regexp's than perhaps some of these things could be used. I didn't try \L though, I am no perl programmer, but was very eager to learn if that's possible. Now seeing that it's not... Well, I will use just another work

Re: Cfengine Help: Updating shadow encrypted fields

2011-06-15 Thread Tokarski Boleslaw
Hello, Seva, I'll try to explain my arguments below. > you're saying strange things. First of all, Cfengine will only > authorize remote files copying if a client is known and matches its > host key, so that a client can't grab somebody else's IP and get their > files (because keys won't match). W

Re: Cfengine Help: Updating shadow encrypted fields

2011-06-14 Thread Tokarski Boleslaw
Hello, deb, We have a similar setup and this has bugged me for some time. We have workstations to manage and their actual users have sudo rights, so there is no way to forbid them to see the actual .cf files, so putting all the hashes to one .cf file was not an option. For your server setup, t

Variable to lowercase

2011-06-14 Thread Tokarski Boleslaw
Hello, I need to convert my variable $(domain), which is lowercase by default, but I need to put it to /etc/krb5.conf, where the realm is expected to appear in uppercase. Is there a simple way to do that without using external commands like 'tr'? I tried looking for this in cfengine's string f

Re: Cfengine Help: Copying Local Folder

2011-06-12 Thread Tokarski Boleslaw
quot;root"), create => "true"; } bundle agent copyLocalFolder { files: "/data/test/create_folder1/copy_local_folder" comment => "copy local folder", include_dirs=> { "/etc/c

Re: Cfengine Help: Copying Local Folder

2011-06-09 Thread Tokarski Boleslaw
Hello, I would like to copy the folders /etc/cron* and its contents to another location. However, I still end up copying the whole /etc directory. Well, this should be feasible :) bundle agent copyLocalFolder { files: "/tmp/test/create_folder1/copy_local_folder"