'undo' capability, was: Re: Cfengine capability

2006-04-03 Thread Edward F. Brown
On Mon, April 3, 2006 10:38 am, Brendan Strejcek said: > > http://madstop.com/articles/tag/transactions > > http://reductivelabs.com/projects/puppet/random/transactions1105 Not sure if your 'offtopic' tags referred to the whole question of 'undo' capability in other tools (which it was, offtopi

Re: Cfengine capability

2006-04-03 Thread Brendan Strejcek
Atom Powers wrote: > Edward F. Brown <[EMAIL PROTECTED]> wrote: > > > Have any other tools addressed 'undo'? > > I think I head that puppet is working on this, but frankly I haven't > even looked at it yet. http://madstop.com/articles/tag/transactions http://reductivelabs.com/projects/puppet/r

Re: Cfengine capability

2006-04-03 Thread Brendan Strejcek
Mark Burgess wrote: > Undo is rather ambiguous unless you snapshot the entire system (as Ed > alluded to), since there can be unseen consequences of changes. And even then, the problem can't be solved generally because the state of the network is important as well. However, I think there is plen

Re: Cfengine capability

2006-04-02 Thread Edward F. Brown
On Sat, April 1, 2006 8:43 pm, Atom Powers said: > But I think we > will have to agree to disagree. Agreed. :) > My position is simple: the tool should be able to undo what it did I would point out that the tool didn't 'do' anything, WE did it, whatever IT is. Hoping a tool can add a safety

Re: Cfengine capability

2006-04-02 Thread Mark Burgess
Josh Smith wrote: EFB == Edward F Brown <[EMAIL PROTECTED]> EFB> Have any other tools addressed 'undo'? A different class of tools: Revision control systems, like CVS and Subversion. I don't see an easy way to integrate their techniques into Cfengine, but the idea of committing each change, and

Re: Cfengine capability

2006-04-02 Thread David Kewley
On Saturday 01 April 2006 20:37, Josh Smith wrote: > EFB == Edward F Brown <[EMAIL PROTECTED]> > > EFB> Have any other tools addressed 'undo'? > > A different class of tools: Revision control systems, like CVS and > Subversion. I don't see an easy way to integrate their techniques into > Cfengine,

Re: Cfengine capability

2006-04-01 Thread Josh Smith
EFB == Edward F Brown <[EMAIL PROTECTED]> EFB> Have any other tools addressed 'undo'? A different class of tools: Revision control systems, like CVS and Subversion. I don't see an easy way to integrate their techniques into Cfengine, but the idea of committing each change, and being able to roll

Re: Cfengine capability

2006-04-01 Thread Mark Burgess
My position is simple: the tool should be able to undo what it did; if you want to preserve user modifications get good backups. Perhaps you can combine the two to make your undo convergent, but that is a different problem. Have any other tools addressed 'undo'? I think I head that puppet is

Re: Cfengine capability

2006-04-01 Thread Atom Powers
On 4/1/06, Edward F. Brown <[EMAIL PROTECTED]> wrote: > O Fri, Mar 31, 2006 at 03:32:22PM -0800, Atom Powers wrote: > > > "undo" means "un-do": reverse what you did. > > I think this is simplistic. And I think you are overly complicating the problem. But I think we will have to agree to disagree.

Re: Cfengine capability

2006-04-01 Thread Edward F. Brown
O Fri, Mar 31, 2006 at 03:32:22PM -0800, Atom Powers wrote: > > I would say that this is beyond the scope of the tool. It may not have been a very good example. > "undo" means "un-do": reverse what you did. I think this is simplistic. To try again with the example of changing modes on a dire

Re: Cfengine capability

2006-03-31 Thread Digant C Kasundra
* Can Cfengine determine if a config file on a server is different than expected and report a diff? How would one go about getting this sort of behavior/functionality? The question is sort of "I've already decided to think in Unix shell". This is not the way cfengine works. You *could* simply

Re: Cfengine capability

2006-03-31 Thread Mark Burgess
Digant C Kasundra wrote: Hello everyone, We're evaluating different config management systems and procedures to develop and effective infrastructure at Stanford. I'm going through my list of requirements to show how various options might be able to do various things. I have read a little bi

Re: Cfengine capability

2006-03-31 Thread Mark Burgess
Edward F. Brown wrote: On Fri, March 31, 2006 12:34 pm, Digant C Kasundra said: * Undo last set of actions This sounds like a reasonable thing to expect of a configuration management tool. But I'm very skeptical that it's realistic, or desirable. There are so many relationships and interdepe

Re: Cfengine capability

2006-03-31 Thread Atom Powers
On 3/31/06, Edward F. Brown <[EMAIL PROTECTED]> wrote: > On Fri, March 31, 2006 2:48 pm, Atom Powers said: > > > It depends a lot on what you are rolling back, > > Right, I agree. Some things are simple to implement, perhaps a one-line > change in your configuration to 'undo' an action. But what

Re: Cfengine capability

2006-03-31 Thread Edward F. Brown
On Fri, March 31, 2006 2:48 pm, Atom Powers said: > It depends a lot on what you are rolling back, Right, I agree. Some things are simple to implement, perhaps a one-line change in your configuration to 'undo' an action. But what if a simple mode change on a directory had allowed a user to writ

Re: Cfengine capability

2006-03-31 Thread Atom Powers
On 3/31/06, Edward F. Brown <[EMAIL PROTECTED]> wrote: > On Fri, March 31, 2006 12:34 pm, Digant C Kasundra said: > > > > * Undo last set of actions > > This sounds like a reasonable thing to expect of a configuration > management tool. But I'm very skeptical that it's realistic, or > desirable.

Re: Cfengine capability

2006-03-31 Thread Brendan Strejcek
Digant C Kasundra wrote: > Or does any output of the shell command get automatically sent to the > sys admin specified? Yes, that is exactly what happens. Best, Brendan -- Senior System Administrator The University of Chicago Department of Computer Science http://www.cs.uchicago.edu/people/bre

Re: Cfengine capability

2006-03-31 Thread Tyson A. Tucker
Usually all output gets sent to the 'sysadm' address as defined in cfagent.conf. Either the diffs could be displayed in the email (ala Brendan) or you could use cfengine alerts, ie: groups: etc_hosts_modifed = ( ReturnZero(/usr/bin/diff /etc/hosts /path/to/canonical/hosts) ) a

Re: Cfengine capability

2006-03-31 Thread Edward F. Brown
On Fri, March 31, 2006 12:34 pm, Digant C Kasundra said: > > * Undo last set of actions This sounds like a reasonable thing to expect of a configuration management tool. But I'm very skeptical that it's realistic, or desirable. There are so many relationships and interdependencies and complexiti

Re: Cfengine capability

2006-03-31 Thread Digant C Kasundra
So that could easily be expanded to call a script that would detect if there were any diffs and then send an email, I suppose. Or does any output of the shell command get automatically sent to the sys admin specified? --On Friday, March 31, 2006 1:56 PM -0600 Brendan Strejcek <[EMAIL PROTECTE

Re: Cfengine capability

2006-03-31 Thread Brendan Strejcek
Digant C Kasundra wrote: > I was wondering how you would address the following in Cfengine: > > * Undo last set of actions cfengine does not support a general rollback operation. > * Can Cfengine determine if a config file on a server is different than > expected and report a diff? How would

Cfengine capability

2006-03-31 Thread Digant C Kasundra
Hello everyone, We're evaluating different config management systems and procedures to develop and effective infrastructure at Stanford. I'm going through my list of requirements to show how various options might be able to do various things. I have read a little bit of the docs but since I