building cfengine 3.0.2 on CentOS 5 (64-bit) - graphviz-devel is required

2009-12-14 Thread Aleksey Tsalolikhin
Just wanted to share my experience in building cfengine 3.0.2 on CentOS 5 (64-bit). I ran into 2 snags: 1. I had to remove db4-devel.i386 db4.i386 (leaving the 64-bit versions); 2. I had to install graphviz-devel.x86_64 or else I would get errors like: Making all in docs make[1]: Entering direc

examples of working cfengine3 config? sharing my experience in trying to get started with cfengine 3

2009-12-14 Thread Aleksey Tsalolikhin
Hi. I've used cfengine 2 for a couple of years. I am starting out with cfengine 3. I've built and installed cfengine 3. Now I want to learn how to configure it. I started at www.cfengine.org. I've gotten to http://www.cfengine.org/pages/compare which is the first place with cfengine configura

Re: examples of working cfengine3 config? sharing my experience in trying to get started with cfengine 3

2009-12-14 Thread Aleksey Tsalolikhin
Thanks, Erlend. I just needed to vent, partly. :) I'll post on "getting started with cfengine 3" and provide some examples. Looking forward to Mark's Christmas gift as well, re Cfengine 3 standardization / cookbook library. I'd be glad to help any way I can. Cheers, -at __

need simple examples of cfengine3

2009-12-14 Thread Aleksey Tsalolikhin
I am working on an article to introduce more sysadmins to cfengine 3, and I need help from the cfengine community putting together working standalone examples of the power and simplicity of cfengine 3. By standalone, I mean I should be able to run "cf-agent -f example1.cf" and have example1.cf be

Re: list substitution in cfe3

2009-12-15 Thread Aleksey Tsalolikhin
Dear Brendan, I tried out your code below, expecting it to create search example.com nameserver 192.168.1.1 nameserver 192.168.1.2 but it only created: search example.com nameserver 192.168.1.1 I am using cfengine 3.0.2 community edition, and calling the code with "cf-agent -f resolv.cf".

Re: list substitution in cfe3

2009-12-15 Thread Aleksey Tsalolikhin
p a lot. Aleksey On Tue, Dec 15, 2009 at 12:25 AM, Mark Burgess wrote: > > In the approach given, the file is edited twice - once to add each line. > You have to think "sub-routines". Editing is a bundle of promises itself. > > My Christmas bundle will help to make th

What does "promiser" mean?

2009-12-15 Thread Aleksey Tsalolikhin
What does "promiser" mean, please? I am on PDF page 17 of the cfengine 3 tutorial workbook, http://www.cfengine.org/manuals/cf3-tutorial.pdf Line 9, below. 1 body common control 2 { 3 bundlesequence => { "fileperms" }; 4 } 5 bundle agent fileperms 6 { 7

Re: list substitution in cfe3

2009-12-15 Thread Aleksey Tsalolikhin
On Tue, Dec 15, 2009 at 1:02 AM, Mark Burgess wrote: > > And I should have pointed out that the "bundle resolvconf" etc, belongs in > the standard > library. Is this why the below does not work? What do I need to do? myprompt# cf-agent -f ./resolver.cf cf3:./resolver.cf:33,18: syntax error, ne

file copy in cfengine - need some help getting going

2009-12-18 Thread Aleksey Tsalolikhin
Hi, guys. I am having trouble getting file copying going. I am sure it's something simple, but I am having trouble spotting what it is. The error message I get is: $ cf-agent -f test_copy.cf Not authorized to trust the server=127.0.0.1's public key (trustkey=false) Authentication dialog

Re: file copy in cfengine - need some help getting going

2009-12-18 Thread Aleksey Tsalolikhin
Thanks, Brendan and Neil for your replies. I've removed that special_class::, changed 127.0.0.1 to the primary IP address, and got this far: Trusting server identity, promise to accept key from 10.1.2.3=10.1.2.3 However the file transfer was still not happening, getting message like "server

Re: file copy in cfengine - need some help getting going

2009-12-18 Thread Aleksey Tsalolikhin
I am back to running this as a mortal user, since I got further along this way. With "-d 1" on cf-serverd, I see: AccessControl(/home/tsalolia/testcopy2) AccessControl, match(/home/tsalolia/testcopy2,hwd-ddc-app-prod01) encrypt request=1 Examining rule in access list (/home/tsalolia/testcopy2,/ho

Re: file copy in cfengine - need some help getting going

2009-12-18 Thread Aleksey Tsalolikhin
this was it! it worked after I updated the access_rules Thanks!! Aleksey On Fri, Dec 18, 2009 at 5:29 PM, Aleksey Tsalolikhin wrote: > Ok, I found it in site.cf : > > ### > # Server c

Fwd: [lopsa-discuss] Configuration Management

2010-02-22 Thread Aleksey Tsalolikhin
Paul on a sys admin discussion list asked about a "do it now" button in cfengine. I remember reading about something like this in cfengine3 docs, a way to tell the cfengine clients that a policy update is available. A quick search failed to turn this up. Could someone refresh my memory, please?

Re: Fwd: [lopsa-discuss] Configuration Management

2010-02-22 Thread Aleksey Tsalolikhin
Yes, cf-runagent is what I was looking for. Thanks, all! Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

How to run Cfengine 3 with Cfengine 2 policies? I get syntax errors.

2010-03-04 Thread Aleksey Tsalolikhin
Hi. I understood that Cfengine 3 could read and run Cfengine 2 policies. How to get a Cfengine 3 promises.cf to import a Cfengine 2 cfagent.conf, please? I get syntax errors if I try to import it using "inputs". Best, -at ___ Help-cfengine mailing lis

Re: How to run Cfengine 3 with Cfengine 2 policies? I get syntax errors.

2010-03-05 Thread Aleksey Tsalolikhin
Thanks, Nicolas. I understand Cfengine 3 CAN read Cfengine 2 policies - the feature is "Auto-encapsulation of Cfengine 2 for incremental upgrade", see at the bottom of http://cfengine.com/pages/cfengine3 I just want to find out HOW to do it. :) I am ready for an incremental upgrade of a product

Re: How to run Cfengine 3 with Cfengine 2 policies? I get syntax errors.

2010-03-05 Thread Aleksey Tsalolikhin
engine 3 provides the possibility for cfengine 3 and cfengine 2 > to coexist > during an upgrade phase. It cannot *read* Cfengine 2 policies.  Cfengine (the > company) can > help transform a configuration. > > Aleksey Tsalolikhin wrote: >> Thanks, Nicolas.  I understand Cfe

Re: How to run Cfengine 3 with Cfengine 2 policies? I get syntax errors.

2010-03-08 Thread Aleksey Tsalolikhin
I found the answer in the Cfengine reference manual -- thank you, Mark. cf-execd runs cfagent to handle the Cfengine 2 policies. (and cf-agent to handle Cfengine 3 policies.)There is a policy example for the encapsulation. Thanks! Aleksey ___ Help-

Re: tcpread help

2010-03-15 Thread Aleksey Tsalolikhin
Dear Neil, I ran into this a couple of days ago. The HTTP protocol requires a blank line at the end of the request. Here is an example using Cfengine 2 syntax: ReadTCP(www.google.com,80,"GET /cfengine_probe HTTP/1.0${n}${n}",1024) Best, -at On Sat, Mar 13, 2010 at 12:25 PM, Mark Burg

Re: tcpread help

2010-03-16 Thread Aleksey Tsalolikhin
gt; Computer Systems Engineer       Berkeley, CA 94720 > ESnet  http://www.es.net/       Desk: 510/495-2243 > > > > On Mon, 15 Mar 2010 14:26:24 -0700, Aleksey Tsalolikhin wrote: >> Dear Neil, >> >>   I ran into this a couple of days ago. >> >>   The HTTP pr

Re: tcpread help

2010-03-16 Thread Aleksey Tsalolikhin
I meant to say, out of one of Mark's Cfengine 2 documents. On Tue, Mar 16, 2010 at 7:06 PM, Aleksey Tsalolikhin wrote: > Hi, Deb.  You are most welcome.  I copied it out of one of Mark's > Cfengine2, I imagine.  So thanks to Mark! > > Truly, > -at > > 2010/3/1

Is it possible to suppress error messages from ReadTCP in cfengine 2?

2010-03-18 Thread Aleksey Tsalolikhin
Hi. Is it possible to selectively suppress error messages with cfengine 2? For example, I have the following working config which sets a class indicating the machine's physical location. I deal with two locations, and each location has it's own Web proxy server. I try to connect to both, and set

Dear Mark, will you teach a Cfengine 3 class at LISA?

2010-05-17 Thread Aleksey Tsalolikhin
Dear Mark, Are you going to teach a Cfengine 3 class at LISA in November? (I may not make it to USENIX this year, so asking about LISA.) Kind regards, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listi

Intro article on Cfengine 3 published in Linux-Mag.com

2010-06-08 Thread Aleksey Tsalolikhin
Neil Watson and I have an intro on Cfengine 3 article in Linux-Mag.com web site: http://www.linux-mag.com/cache/7802/1.html Best, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Article on the Configuration Management Summit 2010 now online at www.linux-mag.com

2010-08-25 Thread Aleksey Tsalolikhin
http://www.linux-mag.com/id/7841 "The State of Open Source System Automation" A report on bcfg2, cfengine, chef and puppet by, Yours truly, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cf

need help with restart_class; the example from the manual does not work (3.0.5p1)

2010-09-08 Thread Aleksey Tsalolikhin
Reference: http://www.cfengine.org/manuals/cf3-reference.html#restart_005fclass-in-processes Example - ntpd is down, cf-agent should start it. It does not. [r...@localhost inputs]# /etc/init.d/ntpd status ntpd is stopped [r...@localhost inputs]# ps auwx|grep ntpd root 11788 0.0 0.0 399

Re: need help with restart_class; the example from the manual does not work (3.0.5p1)

2010-09-08 Thread Aleksey Tsalolikhin
hed. Also, take a > look at process_select compound body to implement better matching. > > 2010/9/9 Aleksey Tsalolikhin : >> Reference:   >> http://www.cfengine.org/manuals/cf3-reference.html#restart_005fclass-in-processes >> >> Example - ntpd is down, cf-agent should start

Re: Cfengine Help: Re: need help with restart_class; the example from the manual does not work (3.0.5p1)

2010-09-09 Thread Aleksey Tsalolikhin
@Seva: -K did not help. lock is not an issue in this case; regex is. thanks anyway! @neil watson: thanks, Neil! anchoring the regex helped (i.e. the example works now) I don't understand why regex "^ntpd" sets the restart_class, and regex "ntpd" does not. "ps auwx" output does not contain

Re: Cfengine Help: Re: need help with restart_class; the example from the manual does not work (3.0.5p1)

2010-09-10 Thread Aleksey Tsalolikhin
On Thu, Sep 9, 2010 at 11:12 PM, Seva Gluschenko wrote: > Aleksey, > > I told you about regex and suggested looking into process_select > compound body. Unfortunately, you didn't hear. Seva, you were right, it is a regex issue. Thank you. And I see why you suggested -K, because of the 0/1 minu

Re: Cfengine Help: Re: need help with restart_class; the example from the manual does not work (3.0.5p1)

2010-09-10 Thread Aleksey Tsalolikhin
Great idea, thanks, Neil, I'll definitely try that! Aleksey On Fri, Sep 10, 2010 at 5:06 AM, wrote: > Forum: Cfengine Help > Subject: Re: need help with restart_class; the example from the manual does > not work (3.0.5p1) > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.p

What does ... mean? (literally, ...) in quoted command output

2010-09-10 Thread Aleksey Tsalolikhin
What does ... mean in the output from the example cfengine config? commands: "/bin/echo Hello world!"; [r...@localhost inputs]# cf-agent -Kf ./example000_helloworld.cf Q: ".../bin/echo Hello": Hello world! I: Last 1 QUOTed lines were generated by promiser "/bin/echo Hello world!" [r..

Re: What does ... mean? (literally, ...) in quoted command output

2010-09-10 Thread Aleksey Tsalolikhin
On Fri, Sep 10, 2010 at 11:42 AM, Mark Burgess wrote: > Cfengine tries to extract the most relevant portion of the text so that you > can see what > it is ... that is usually that final part of the path, not the beginning. If > it wrote > > "/usr/bin/..." you wouldn't be much wiser :) Very prat

I've written an article about how Cfengine relates to Chef and Puppet in terms of origin; and its new capabilities

2010-09-15 Thread Aleksey Tsalolikhin
I noticed some people using Chef have no idea of the history involvedso I've put together a little piece detailing the lineage and how Cfengine 3 is a next-generation tool, it's improvements over Cfengine 2 and completely new capabilities: http://verticalsysadmin.com/blog/uncategorized/relative-or

Re: Cfengine Help: Re: I've written an article about how Cfengine relates to Chef and Puppet in terms of origin; and its new capabilities

2010-09-15 Thread Aleksey Tsalolikhin
They ought to come to Mark's Cfengine 3 class at LISA 2010. I bet they don't even know what Cfengine 3 is and are going off 2's reputation. Tell them about Mark's Cfengine 3 class if you can, please, Neil. Cheers, -at On Wed, Sep 15, 2010 at 10:33 AM, wrote: > Forum: Cfengine Help > Subject:

cfengine.com is very slow for me right now... took 5 minutes to login. Now "my cache" is slow to come up. EOM

2010-09-15 Thread Aleksey Tsalolikhin
___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

3.0.5p1: library.cf conflicts with cfengine_stdlib.cf. Trouble getting started.

2010-09-15 Thread Aleksey Tsalolikhin
Hi. So I've installed 3.0.5p1, and copied the following to /var/cfengine/inputs: /usr/local/share/doc/cfengine/inputs/*cf /usr/local/share/doc/cfengine/cfengine_stdlib.cf Now I run cf-agent and get errors: cf3:/var/cfengine/inputs/cfengine_stdlib.cf:304,1: Redefinition of body start for locati

Re: cfengine.com is very slow for me right now... took 5 minutes to login. Now "my cache" is slow to come up. EOM

2010-09-15 Thread Aleksey Tsalolikhin
I am in Los Angeles. The main cfengine.com site pages come up reasonably fast but when I go to login, it starts getting into minutes... I just submitted username and password and the browser busy doohicky is just spinning... about a minute now and still going. On Wed, Sep 15, 2010 at 4:29 PM, Na

Re: 3.0.5p1: library.cf conflicts with cfengine_stdlib.cf. Trouble getting started.

2010-09-15 Thread Aleksey Tsalolikhin
t; library.cf > > Cheers, > --Nakarin > > On Sep 16, 2010, at 2:12 AM, Aleksey Tsalolikhin wrote: > >> Hi.  So I've installed 3.0.5p1, and copied the following to >> /var/cfengine/inputs: >> >> >> /usr/local/share/doc/cfengine/inputs/*cf >>

BTW, it's really cool that cfengine3 automatically detects cfengine2 config files and runs cfagent! :) Thank you for this. EOM

2010-09-15 Thread Aleksey Tsalolikhin
___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: 3.0.5p1: library.cf conflicts with cfengine_stdlib.cf. Trouble getting started.

2010-09-19 Thread Aleksey Tsalolikhin
Dear Seva, library.cf came from cfengine 3.0.5p1 package (RPM): Still looking for an answer about what is library.cf, please... Here is what I did in trying to get started with 3.0.5p1 package: 1. cp /usr/local/share/doc/cfengine/inputs/*cf /var/cfengine/inputs 2. run cf-agent and conf

Re: Quickstart guide?

2010-09-19 Thread Aleksey Tsalolikhin
On Sat, Sep 18, 2010 at 4:27 PM, Francisco Reyes wrote: > Trying to setup cfengnie. > So far have found: > ... > > http://www.verticalsysadmin.com/cfengine3/ > This one seems somewhat promissing. Still trying to go over it and try to > see how to apply it. Hi, Francisco . Let me know if you have

Re: 3.0.5p1: library.cf conflicts with cfengine_stdlib.cf. Trouble getting started.

2010-09-19 Thread Aleksey Tsalolikhin
On Sun, Sep 19, 2010 at 11:23 PM, Mark Burgess wrote: > > library.cf is an old version of stdlib, you don't need both, so I would take > out the > librart.cf which probably has some dual definitions. > > M Dear Mark, Thank you. I tried taking out library.cf and putting cfengine_stlib.cf in

Re: cfengine.com is very slow for me right now... took 5 minutes to login. Now "my cache" is slow to come up. EOM

2010-09-19 Thread Aleksey Tsalolikhin
THANK YOU, Nicolas. I just tried providing wrong username and then wrong password, but it came back quickly. Tried both Chrome and Firefox. Can't duplicate it now, but thank you, Nicolas, for also seeing this, so I am not crazy. :-) cheers, -at On Thu, Sep 16, 2010 at 5:03 AM, Nicolas Charles

Re: Quickstart guide?

2010-09-20 Thread Aleksey Tsalolikhin
On Mon, Sep 20, 2010 at 9:46 AM, Francisco Reyes wrote: > ) > > Towards the bottom where you have: > cf-agent -v test_copy.cf -K > > Shouldn't it be: > cf-agent -v -f test_copy.cf -K You're right! Fixed. Thank you. Glad you got some help on IRC. > Personally I think the concepts make total s

Re: 3.0.5p1: library.cf conflicts with cfengine_stdlib.cf. Trouble getting started.

2010-09-21 Thread Aleksey Tsalolikhin
On Mon, Sep 20, 2010 at 4:25 AM, Mark Burgess wrote: > > Sounds like maybe there is some version mixup. Do you have all the files from > the same > place? There should not be any duplicate definitions. > Dear Mark, I got all the files from the 3.0.5p1 Linux 64-bit RPM from the Engine Room on

Re: Quickstart guide? [learning more about Cfengine classes]

2010-09-23 Thread Aleksey Tsalolikhin
Dear Francisco, I would recommend the Concept Guide (aka Tutorial), the section called "Decisions" http://www.cfengine.org/manuals/cf3-tutorial.html Let me know how that goes for you. And thanks for the tip about "cf-promise -v", that's a good one and one I use in my classes. Best, -at ___

Using the Engine Room website is still VERY slow for me. Can't download Special Topic Guides... EOM

2010-09-23 Thread Aleksey Tsalolikhin
___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Using the Engine Room website is still VERY slow for me.

2010-09-23 Thread Aleksey Tsalolikhin
Correction: I was able to download the Special Topic Guides - it just took a long time. Truly, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

"irreconcilable constraints" error when trying to set a role class based on a hostname. (Was Re: Machine types)

2010-09-23 Thread Aleksey Tsalolikhin
Problem: How to determine machine role from the hostname using Cfengine? Data: My server hostnames contain location code, department code, type (web/db/etc.) and environment (stage/prod/dev). For example: "lax-it-web01-prod01". Location: Los Angeles Department: IT Primary role: Web (first serv

Machine types and auto-provisioning

2010-09-24 Thread Aleksey Tsalolikhin
Dear Mark and Nicolas, Thank you for your reply. Dashes used to be illegal in class names, but as of 3.0.5p1 that is no longer the case. I found this out yesterday: cf-promise -v listed both "lax-it-web01-prod01" and "lax_it_web01_prod01"; so I tried using the "lax-it-web01-prod01" class and i

Re: Quickstart guide? [learning more about Cfengine classes]

2010-09-24 Thread Aleksey Tsalolikhin
Well done, Francisco, you're helping others already. Continue! Classes provide an implicit if/then test. There is no else. But you can negate a class: if not class, then x. Negate with !, like this: !class:: promise HTH, -at ___ Help-cfengine m

Re: Cfengine Help: Re: Quickstart guide? [learning more about Cfengine classes]

2010-09-24 Thread Aleksey Tsalolikhin
2010/9/24 Jakub Viták : >  OK. > > And is there any method how to find out (debug) that I have > exceed this number, or could I alter it by command option or with config > definiton? > > J. I am pretty sure three passes is hard-wired into cfengine and you can't change it. You can run cf-agent in

Host inventory (Was: Machine types)

2010-09-24 Thread Aleksey Tsalolikhin
On Fri, Sep 24, 2010 at 5:52 AM, wrote: > > I'm going to go off on a rant here.  DNS names should not be used as an > inventory system.  DNS is used to make host names easier to remember than IP > addresses.  If a host name is harder to remember than an IP address then the > naming convention

Re: Machine types and auto-provisioning

2010-09-24 Thread Aleksey Tsalolikhin
On Fri, Sep 24, 2010 at 11:24 AM, Mark wrote: > This is not strictly true. Cfengine converts the dashes to underscore now. > It does not allow them. Oh, I see. That explains why my code worked, cfengine converted my dashes to underscores before running my code. Thank you. I am very glad I can

Linux.conf.au 2011 soliciting presentations on configuration management

2010-09-27 Thread Aleksey Tsalolikhin
Hi. I am sure we have some Australian users on this list. In case somebody is interested in presenting to Linux.conf.au 2011: --- start quote --- Call for Presentations Linux.conf.au 2011 Systems Administration Miniconf As part of the linux.conf.au conference in Brisbane, Australia in January 2

I've reserved a room at LISA 2010 conference for a Cfengine BoF

2010-09-27 Thread Aleksey Tsalolikhin
Hello, I've reserved a room at LISA 2010 conference for a Cfengine BoF: Tuesday, Nov 10, 7 pm - 8 pm, Almaden room http://www.usenix.org/events/lisa10/bofs.html#cfengine I would like to organize a demo of multi-node orchestration; but just wanted to provide a forum for Cfengine users and keep t

Cfengine BoF at LISA 2010 moved to a bigger room

2010-09-29 Thread Aleksey Tsalolikhin
New location; Salon III room (100 seats) on Wednesday from 9-10pm. http://www.usenix.org/events/lisa10/bofs.html Best, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

FYI, LISA 2010 Cfengine BoF has been moved to Blossom Hill room (60 seats) on Tuesday, 7 P.M. - 8 P.M. EOM

2010-09-29 Thread Aleksey Tsalolikhin
___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Chef/Puppet/CFengine administrator - full time job

2010-10-03 Thread Aleksey Tsalolikhin
I've been minding jobs that have "cfengine" in the title for about a year now -- for the first time, I see not a Unix sys admin job listing with cfengine mentioned briefly somewhere in the job description, but a pure open source configuration management administrator role! Configuration management

Re: Cfengine Help: Who's going to promise this - Forums Fubar

2010-10-13 Thread Aleksey Tsalolikhin
On Wed, Sep 1, 2010 at 12:59 PM, Diego Zamboni wrote: > >> CFengine needs a promise that receives email replys to forum postings and >> puts them into the proper subject. >> >> why bother contributing to "no-reply"? >> > As far as I can tell (and this message is a test, I'm replying by > email),

3.1.0b2 - library.cf still conflicts with cfengine_stdlib.cf

2010-10-13 Thread Aleksey Tsalolikhin
Hi. This is still broken in 3.1.0b2. Instructions to replicate the problem: 1. install from the cfengine 3.1.0b2 tarball 2. cp -rp /usr/local/share/doc/cfengine/inputs/ /var/cfengine/inputs 3. cp /usr/local/share/doc/cfengine/cfengine_stdlib.cf /var/cfengine/inputs 4. edit /var/cfengine/input

Re: 3.1.0b2 - library.cf still conflicts with cfengine_stdlib.cf

2010-10-14 Thread Aleksey Tsalolikhin
55 AM, Daniel V. Klein wrote: > As far as I know, library.cf is no longer part of the Cfengine distribution.   > Th only file that you should have is cfengine_stdlib.cf - if there are any > conflicts, you should just change your private version of library.cf. > > -Dan > >

Re: Cfengine Help: Re: Cfengine minimal configuraton example

2010-10-14 Thread Aleksey Tsalolikhin
Hi, Sakis. I also have an introduction at http://www.verticalsysadmin.com/cfengine3/ Good luck getting started and welcome to the Cfengine community. Best, -at ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/list

Re: 3.1.0b2 - library.cf still conflicts with cfengine_stdlib.cf

2010-10-15 Thread Aleksey Tsalolikhin
Thank you, Mark. Should I expect to see the fix in 3.1.0b3 or in 3.1.0 final, please? I don't usually run code straight out of SVN mid-version -- don't want to get cut on the "cutting edge" of technology... On Fri, Oct 15, 2010 at 3:10 AM, Mark Burgess wrote: > > Resolved this >

feedback on 3.1.0b2: bootstrap into root crontab fails on CentOS: "File /var/spool/cron/crontabs/root was marked for editing but could not be opened"

2010-10-15 Thread Aleksey Tsalolikhin
Hi. I am on CentOS 5.5. When I run cf-agent for the first time, it complains: "File /var/spool/cron/crontabs/root was marked for editing but could not be opened" and is not able to insert the 5 minute schedule to root crontab. To fix this, change in site.cf, from: bundle common g { vars: SuS

Re: Cfengine Help: Re: feedback on 3.1.0b2: bootstrap into root crontab fails on CentOS: "File /var/spool/cron/crontabs/root was marked for editing but could not be opened"

2010-10-15 Thread Aleksey Tsalolikhin
Dear Neil, Thanks for your reply. Yes, the root crontab did exist (in my case). The problem is that Cfengine didn't know about Red Hat systems and was using an invalid (for Red Hat) path to the root crontab: /var/spool/cron/crontabs/root -- the correct path (on Red Hat) is /var/spool/cron/ro

Re: Cfengine Help: Re: feedback on 3.1.0b2: bootstrap into root crontab fails on CentOS: "File /var/spool/cron/crontabs/root was marked for editing but could not be opened" - needs to be /var/spool/cr

2010-10-19 Thread Aleksey Tsalolikhin
Hi. Didn't hear back from anybody at Cfengine... ACK, please? Cheers, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: feedback on 3.1.0b2: bootstrap into root crontab fails on CentOS: "File /var/spool/cron/crontabs/root was marked for editing but could not be opened"

2010-10-19 Thread Aleksey Tsalolikhin
The latest cfengine 3.1.0b2 in SVN knows where redhat systems keep the root crontab, thanks! The advice to take it a task at a time is a good one, thank you. library.cf is no longer part of the distribution, but site.cf still is: # ls -1 /usr/local/share/doc/cfengine/inputs/*cf /usr/local/share

Is it possible to turn off informational reporting associated with commands type promises?

2010-10-19 Thread Aleksey Tsalolikhin
Hi. Is there any way to turn off information reporting associated with commands promises? (3.1.0b2) bundle agent hello { commands: "/bin/echo Hello world!"; } Q: ".../bin/echo Hello": Hello world! I: Last 1 QUOTed lines were generated by promiser "/bin/echo Hello world!" I only want to s

Could you please teach Cfengine that RHEL 5 systems use YUM as the package manager?

2010-10-19 Thread Aleksey Tsalolikhin
Problem: cfengine does not know that modern red hat systems use YUM package manager: bundle agent packages { packages: "httpd" package_policy => "delete"; } Results in error "!! You must supply a method for determining the version of existing packages" Could you please teach cfengine

Re: Is it possible to turn off informational reporting associated with commands type promises?

2010-10-20 Thread Aleksey Tsalolikhin
uals/cf3-reference.html#contain-in-commands > "This is equivalent to piping standard output and error to /dev/null. " > > On 10/19/2010 10:51 PM, Aleksey Tsalolikhin wrote: > > Hi. Is there any way to turn off information reporting associated > with commands promises?

Re: Cfengine Help: Re: Could you please teach Cfengine that RHEL 5 systems use YUM as the package manager?

2010-10-20 Thread Aleksey Tsalolikhin
On Wed, Oct 20, 2010 at 5:09 AM, wrote: > > I am also using RHEL5.  It works for me by using this line: > > >      package_method        => yum, Thanks, same here, I was just suggesting an enhancement to cfengine, for it to know what OS's use what package managers, and run with that; of course a

Re: Cfengine Help: Re: Is it possible to turn off informational reporting associated with commands type promises?

2010-10-20 Thread Aleksey Tsalolikhin
On Wed, Oct 20, 2010 at 5:04 AM, wrote: > Forum: Cfengine Help > Subject: Re: Is it possible to turn off informational reporting associated > with commands type promises? > Author: bbomgardner > Link to topic: https://cfengine.com/forum/read.php?3,18797,18800#msg-18800 > > Check out the contain

Re: Cfengine Help: Re: Is it possible to turn off informational reporting associated with commands type promises?

2010-10-20 Thread Aleksey Tsalolikhin
OK, that helps, thanks, Neil! And I now know that body contain silent is part of cfengine_stdlib.cf. I'll have to study that stdlib top to bottom as soon as I can. OK, so I've learned how to silence output, but that silenced everything, I wanted to see just the "Q"uoted output, but not the "I"n

cfengine config for installing wordpress blog

2010-10-21 Thread Aleksey Tsalolikhin
for your review: cfengine 3.1.0b2 config for installing wordpress blog http://www.verticalsysadmin.com/cfengine/example100_wordpress.cf this is a first draft -- I know I need to add comments comments welcome i'm going to be using this tonight for my cfengine class (http://lopsala.eventbrit

WordPress one-click installer in Cfengine

2010-10-24 Thread Aleksey Tsalolikhin
Current version of the WordPress installer is at http://www.verticalsysadmin.com/cfengine/cfengine3_examples_from_class_at_SoCalCodecamp.com_at_USC_on_24-Oct-2010/example100_wordpress.cf thank you to Neil Watson for the fast review on Thursday! Very helpful. Current version does work but can us

Cfengine 3 classes in Los Angeles - a quick report: thursday 23 attendees, sunday 4 attendees

2010-10-24 Thread Aleksey Tsalolikhin
Hi. I did a 3 hour class at Media Temple (web hosting company) on thursday night under the auspices of LOPSA Los Angeles and that was well attended, 23 people. I demo'ed the one-click word press installer, the Media Temple guys were quite impressed as that's exactly the sort of thing they deal wit

reports: linux:: " $(sys.interface) and $(sys.ipv4)"; returns 50% success rate - why not 100% ?

2010-10-27 Thread Aleksey Tsalolikhin
The following promise registers a 50% success rate. Why not 100%? Is there something I don't understand or is this a bug? Thanks, -at #!/var/cfengine/bin/cf-agent -Kf body common control { bundlesequence => { "test" }; } bundle agent test { reports: linux:: "My default interface and i

How to remove packages not explicity whitelisted?

2010-10-27 Thread Aleksey Tsalolikhin
Does anybody have a recipe for, or would like to make one, for removing packages not explicitly whitelisted? In other words, if we provide a variable of type slist that contains a list of packages we expect to be present on the system, do the following: a) make sure all packages listed are instal

Re: reports: linux:: " $(sys.interface) and $(sys.ipv4)"; returns 50% success rate - why not 100% ?

2010-10-28 Thread Aleksey Tsalolikhin
te: > > Where do you see this value? When promises are always repaired > (commands/reports) it counts as 50% compliant since they were not there > before, but they were after. > > On 10/28/2010 06:44 AM, Aleksey Tsalolikhin wrote: >> The following promise registers a 50% succe

Re: Cfengine Help: Re: compiling cfengine on AIX 6.1

2010-10-28 Thread Aleksey Tsalolikhin
This list is awesome!! true help! Aleksey On Thu, Oct 28, 2010 at 10:35 AM, wrote: > Forum: Cfengine Help > Subject: Re: compiling cfengine on AIX 6.1 > Author: dan5261415 > Link to topic: https://cfengine.com/forum/read.php?3,18917,18952#msg-18952 > > I'm all set now. I compiled each of the p

Re: Cfengine Help: Re: How to remove packages not explicity whitelisted?

2010-11-01 Thread Aleksey Tsalolikhin
Hi, Mike. Thanks for your reply. I agree that keeping this promise could be expensive.The purpose is to increase control over the system - to know what packages are added, either automatically (by OS updates) or by other users or admins. I don't think any change in Cfengine is required to im

Re: Cfengine Help: Re: How to remove packages not explicity whitelisted?

2010-11-02 Thread Aleksey Tsalolikhin
On Tue, Nov 2, 2010 at 5:00 AM, wrote: > Forum: Cfengine Help > Subject: Re: How to remove packages not explicity whitelisted? > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.php?3,18929,19028#msg-19028 > > Beyond the difficulty in maintaining I think that this would be ris

Re: Cfengine Help: Re: How to remove packages not explicity whitelisted?

2010-11-02 Thread Aleksey Tsalolikhin
On Tue, Nov 2, 2010 at 11:52 AM, wrote: > Forum: Cfengine Help > Subject: Re: How to remove packages not explicity whitelisted? > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.php?3,18929,19039#msg-19039 > > To such a question I might reply how do you white list packages no

Re: Cfengine Help: Re: How to remove packages not explicity whitelisted?

2010-11-02 Thread Aleksey Tsalolikhin
On Tue, Nov 2, 2010 at 4:52 PM, Aleksey Tsalolikhin wrote: > On Tue, Nov 2, 2010 at 11:52 AM,   wrote: >> Forum: Cfengine Help >> Subject: Re: How to remove packages not explicity whitelisted? >> Author: neilhwatson >> Link to topic: https://cfengine.com/forum/read.

Re: Cfengine Help: package management with yum: handling stuck processes

2010-11-04 Thread Aleksey Tsalolikhin
This is useful. Thanks, Seva! Mark, could you please add this to the Cfengine website to make it available to other Cfengine users? Truly, -at On Sun, Oct 31, 2010 at 1:19 AM, wrote: > Forum: Cfengine Help > Subject: package management with yum: handling stuck processes > Author: Seva Glusch

Re: Cfengine Help: Re: Looking for ideas on people's config

2010-11-07 Thread Aleksey Tsalolikhin
Dear Neil, Could you please demonstrate with a running example? I couldn't get this to work... Thanks, Aleksey On Wed, Sep 15, 2010 at 5:36 AM, wrote: > Forum: Cfengine Help > Subject: Re: Looking for ideas on people's config > Author: neilhwatson > Link to topic: https://cfengine.com/forum

Re: verify service running

2010-11-10 Thread Aleksey Tsalolikhin
On Wed, Nov 10, 2010 at 3:53 PM, Sandra Wittenbrock wrote: > Hi, > > What would be the command to make sure a service (sysctl, firewall, etc) > is running, and/or restart it when cfengine updates the config files? Here is what I use on a Linux server - if somebody has a better way, I would love t

Re: verify service running

2010-11-13 Thread Aleksey Tsalolikhin
On Wed, Nov 10, 2010 at 10:40 PM, Seva Gluschenko wrote: > Alexey, take it easier > > Usually if you're restarting a service upon its configuration file(s) > change, you put those files under Cfengine management as well, so that > Sandra's question about files is being solved pretty easy like > >

Re: Cfengine 3.0.5p1 daemons spinning CPU to 100% on 1 host out of 800

2010-11-20 Thread Aleksey Tsalolikhin
Hi, Mike. Is it workable to suggest upgrading to 3.1.0? Yours, -at On Fri, Nov 19, 2010 at 4:33 PM, Mike Svoboda wrote: > I’ve deployed Cfengine 3.0.5p1 across 800 hosts.  I only have an issue with > the Cfengine daemons on 1 box where it appears I am hitting a bug.  On this > machine, it spin

Re: Cfengine Help: Update /etc/motd with timestamp of policy update

2010-11-22 Thread Aleksey Tsalolikhin
Thanks, Nick! Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-11-30 Thread Aleksey Tsalolikhin
I saw the Solutions Guide on cfengine.org over the weekend and am really looking forward to going through it; I just haven't had the time yet. I think sharing recipes on the forum is OK as an immediately workable solution; I'd be happy to post my example of multi-node orchestration demo'ed at the

Re: Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-02 Thread Aleksey Tsalolikhin
I'd be willing to administer an "index" page of Cfengine configs, pointing to people's wiki's, github or SVN repos, or websites/blogs. This would be more useful/accessible to the community if hosted on or at least linked from cfengine.org. This would give a (practical) mix of centralization and d

Re: Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-02 Thread Aleksey Tsalolikhin
What's this? I couldn't figure it out from looking at the site, Jarle. On Thu, Dec 2, 2010 at 7:35 AM, wrote: > Forum: Cfengine Help > Subject: Re: Extended solutions guide and YOUR HELP! > Author: JarleB > Link to topic: https://cfengine.com/forum/read.php?3,19429,19587#msg-19587 > > How about

I've created a github cfengine site for sharing configs.

2010-12-03 Thread Aleksey Tsalolikhin
Dear fellow Cfengineers, To facilitate sharing configs I've created a git repo at https://github.com/cfengine/contrib You'll see I've posted a promise bundle demonstrating poking holes in RHEL host firewall (iptables) for NTP (a files edit_lines promise). I used git because it is designed

Re: Cfengine Help: Re: I've created a github cfengine site for sharing configs.

2010-12-04 Thread Aleksey Tsalolikhin
Thank you, Jessica. I don't disagree with anything you said. Consider it a demonstration or prototype. We certainly have to give it some thought. Have you had a look at http://wiki.opscode.com/display/chef/Cookbooks ? And thanks for pointing out the gist plugin on Diego's blog, I will add it

Re: Cfengine Help: Re: I've created a github cfengine site for sharing configs.

2010-12-06 Thread Aleksey Tsalolikhin
f them, and an explaination of what they do. >> >> >> Nicolas CHARLES >> Normation SAS - http://www.normation.com >> 44 rue Cauchy – 94110 ARCUEIL >> +33 (0)1 83 62 26 96  - +33 (0)6 14 63 25 18 >> >> >> On 04/12/2010 17:39, Aleksey Ts

Does cfagent download the policy even if it hasn't changed?

2010-12-08 Thread Aleksey Tsalolikhin
Does cfagent download the policy even if it hasn't changed? If not, how does it know the policy hasn't changed compared to what it has in its cache in /var/cfengine/inputs? Thanks, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https:

WordPress Installer posted on github

2010-12-09 Thread Aleksey Tsalolikhin
https://github.com/cfengine/contrib/blob/master/wordpress_installer.cf ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Does cfagent download the policy even if it hasn't changed?

2010-12-09 Thread Aleksey Tsalolikhin
a file will be copied (i.e. a > policy will be downloaded) whenever the md5 digest of the local copy > differs from remote. > > 2010/12/9 Aleksey Tsalolikhin : >> Does cfagent download the policy even if it hasn't changed?  If not, >> how does it know the policy hasn'

  1   2   3   4   5   >