what does ${...} mean?

2010-12-12 Thread Aleksey Tsalolikhin
Hi. What does ${...} mean again? And what's the difference to $(...) which I know is used to unambiguously refer to scalar variables and to do magical implicit 'foreach' style loops on arrays. For example, I see it in the following unit examples/tests: [cfengine00 cfengine]# grep '${' * unit_c

Re: Cfengine Help: Re: Once more unto the code bridge: repository

2010-12-13 Thread Aleksey Tsalolikhin
Thanks for the summary, Carolyn, and I am pleased to see this is a hot topic. =) Diego, could you please help me setup up a github wiki on the github.com cfengine site? I would like to comment on some of Mark's proposed requirements: 0. A flat, management free interface No comment. 1. Versi

Re: Cfengine Help: Re: Once more unto the code bridge: repository

2010-12-16 Thread Aleksey Tsalolikhin
On Mon, Dec 13, 2010 at 6:08 PM, wrote: > Forum: Cfengine Help > Subject: Re: Once more unto the code bridge: repository > Author: bbomgardner > Link to topic: https://cfengine.com/forum/read.php?3,19721,19772#msg-19772 > > Another related issue: > > When researching cfengine this summer I had so

generating a list of all your current servers using Cfengine

2010-12-29 Thread Aleksey Tsalolikhin
Here's a post on how to generate a list of all your current servers using Cfengine, in order to run a one-time command on them (for example to gather data): http://silverwraith.com/blog/?p=72 How would we do this in Cfengine? It depends on where we have a list of all the servers; or even if we d

Re: Cfengine Help: New features of Cfengine 3.1.2

2010-12-30 Thread Aleksey Tsalolikhin
Very well done, Eystein, this is most useful! Thanks!! Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: How to check out cfengine source?

2011-01-18 Thread Aleksey Tsalolikhin
On Sun, Jan 16, 2011 at 1:41 PM, Erlend Leganger wrote: > Thanks guys, one problem fixed - this is probably obvious for the > skilled subversion user, but I'm not and tried to follow the > documentation. > > Now I did this: > > svn checkout http://source.cfengine.com/svn/core/trunk core > svn chec

checking for suspicious file names with "suspiciousnames" does not work or am I using it wrong? (3.1.3)

2011-01-31 Thread Aleksey Tsalolikhin
Hi. I'm trying to implement suspiciousnames check as per http://www.cfengine.org/manuals/cf3-reference.html#suspiciousnames-in-agent but it ain't going: [cfengine00 cfengine]# cat ./test_aleksey.cf body common control { bundlesequence => { "report_suspicious_file_names" }; } body agent control

Re: checking for suspicious file names with "suspiciousnames" does not work or am I using it wrong? (3.1.3)

2011-01-31 Thread Aleksey Tsalolikhin
I am getting the same error, "Scalar item in suspiciousnames => { .mo } in rvalue is out of bounds" under 3.1.4. On Mon, Jan 31, 2011 at 10:35 AM, Aleksey Tsalolikhin wrote: > Hi.  I'm trying to implement suspiciousnames check as per > http://www.cfengine.org/ma

Can Cfengine give me a list of TCP ports that are being listened on? (Like "lsof -i |grep LISTEN" ?)

2011-01-31 Thread Aleksey Tsalolikhin
Hi. Three years ago, I wanted to use Cfengine 2 to monitor open ports. I wanted to say, "This server A should have ports X, Y and Z open. If port W is open, it could be an intrusion, so sound the alarm." I ended up using ExecResult and an external shell script: (https://cfengine.org/pipermail/he

Re: checking for suspicious file names with "suspiciousnames" does not work or am I using it wrong? (3.1.3)

2011-02-01 Thread Aleksey Tsalolikhin
On Mon, Jan 31, 2011 at 11:53 PM, Eystein Måløy Stenberg wrote: > The validation of suspiciousnames was too strict, can you retry svn trunk? Dear Eystein, Thanks! I retried svn trunk, but still no go: community>:/root/core/src/aleksey_test.cf:9,47: Scalar item in suspiciousnames => { .mo } i

Re: checking for suspicious file names with "suspiciousnames" does not work

2011-02-01 Thread Aleksey Tsalolikhin
Dear Eystein, Thank you. I tried with r1762. I don't get a syntax error any more, but it does not actually work to detect suspicious file names. For example: # cat /var/cfengine/inputs/aleksey_test.cf body common control { bundlesequence => { "report_suspicious_file_names" }; inputs => { "

Re: Cfengine vf3.1.4 not announced on the mailing list?

2011-02-01 Thread Aleksey Tsalolikhin
On Tue, Feb 1, 2011 at 10:39 AM, Erlend Leganger wrote: > From the email trail below I understand that Cfengein 3.1.4 has been > released. However, I did not see the original 3.1.4 announcement message on > the mailing list, I only see this response with title "Re: Cfengine Help: > Cfengine 3.1.4

Re: checking for suspicious file names with "suspiciousnames" does not work

2011-02-01 Thread Aleksey Tsalolikhin
On Tue, Feb 1, 2011 at 11:16 AM, Eystein Måløy Stenberg wrote: > Perhaps run it in verbose mode to see if it enters the directories? > I ran your policy earlier today, and it worked. > Note that the suspiciousnames list is only matched against regular > files, not directories/symlinks/etc. > > --E

Re: Cfengine Help: Re: checking for suspicious file names with "suspiciousnames" does not work or am I using it wrong? (3.1.3)

2011-02-01 Thread Aleksey Tsalolikhin
On Tue, Feb 1, 2011 at 4:56 AM, wrote: > Forum: Cfengine Help > Subject: Re: checking for suspicious file names with "suspiciousnames" does > not work or am I using it wrong? (3.1.3) > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.php?3,20369,20384#msg-20384 > > What happe

Re: checking for suspicious file names with "suspiciousnames" does not work

2011-02-01 Thread Aleksey Tsalolikhin
On Tue, Feb 1, 2011 at 12:27 PM, Eystein Måløy Stenberg wrote: > Ah, now I remember - I did a slight change to your policy. > As it was, your files:-promise had no intention about the state, and was > thus skipped. > > Try this (just to check). > > -- > files: > > "/root/tmp2" >  transformer => "/

Re: checking for suspicious file names with "suspiciousnames" does not work

2011-02-01 Thread Aleksey Tsalolikhin
> >  why isn't > >      files:  "/root/tmp2"   depth_search => recurse("inf"); > >  a promise to search /root/tmp2?  It looks like one to me.  Because I > defined the suspiciousnames slist, I am expecting cf-agent to search > the /root/tmp2 directory. In order to find suspicious files. Aleksey __

Re: checking for suspicious file names with "suspiciousnames" does not work

2011-02-01 Thread Aleksey Tsalolikhin
Understood, thank you, Eystein. I've checked the bug tracker and reported the bug: https://cfengine.com/bugtracker/view.php?id=464 Cheers, Aleksey On Tue, Feb 1, 2011 at 1:17 PM, Eystein Måløy Stenberg wrote: > Yes, when you specify "suspiciousnames" the promise has meaning, so > should be ex

Re: Cfengine Help: Re: Cfengine 3.1.4 is released

2011-02-02 Thread Aleksey Tsalolikhin
On Wed, Feb 2, 2011 at 7:38 AM, wrote: > Forum: Cfengine Help > Subject: Re: Cfengine 3.1.4 is released > Author: hristob > Link to topic: https://cfengine.com/forum/read.php?3,20344,20407#msg-20407 > > When we can expect rpm? Or a tutorial how to create our own RPMs? Don't know about the former

Re: Cfengine Help: Cfengine 3.1.4 is released

2011-02-03 Thread Aleksey Tsalolikhin
On Thu, Feb 3, 2011 at 8:41 AM, Richard Siddall wrote: > > > Should we actually have the binaries in /usr (to follow RPM conventions) > and symlinks from /var/cfengine/bin (since that's where cfengine > conventions would put them)?  Or has Mark issued a policy statement > about whether the communi

Re: Cfengine Help: 3.0.2 too old?

2011-02-03 Thread Aleksey Tsalolikhin
Hi, pettai. I saw your question earlier, is 3.0.2 too old. The forum and list are gatewayed; they are two sides of the same coin. Why don't you try 3.1.4; if that makes your problem go away, then yes, 3.0.2 is too old. =) Generally speaking, Cfengine 3 is under active development so if you're

Re: Cfengine Help: Re: Cfengine Help: Cfengine 3.1.4 is released

2011-02-04 Thread Aleksey Tsalolikhin
On Fri, Feb 4, 2011 at 5:56 AM, wrote: > Forum: Cfengine Help > Subject: Re: Cfengine Help: Cfengine 3.1.4 is released > Author: berntjernberg > Link to topic: https://cfengine.com/forum/read.php?3,20445,20454#msg-20454 > > Hi, > > I usually use /opt, /etc/opt and /var/opt for binaries or scripts

Re: Cfengine Help: Re: Cfengine Help: Cfengine 3.1.4 is released

2011-02-04 Thread Aleksey Tsalolikhin
On Fri, Feb 4, 2011 at 11:33 AM, Jesse Becker wrote: > > Theoretically, Linux systems should use the FHS: >        http://www.pathname.com/fhs/ > Great link, thanks, Jesse! I will check this out. Please do be aware that Cfengine runs on many Unix systems, not only Linux. One of the unique cha

Re: Cfengine Help: Re: Cfengine Help: Cfengine 3.1.4 is released

2011-02-04 Thread Aleksey Tsalolikhin
On Fri, Feb 4, 2011 at 11:52 AM, wrote: > Forum: Cfengine Help > Subject: Re: Cfengine Help: Cfengine 3.1.4 is released > Author: mark > Link to topic: https://cfengine.com/forum/read.php?3,20445,20467#msg-20467 > > The original reason for choosing /var (and you kids are probably too young to >

Re: Cfengine Help: Re: two quick questions

2011-02-08 Thread Aleksey Tsalolikhin
On Tue, Feb 8, 2011 at 7:47 AM, wrote: > > Something that would be nice to have is a good facility for searching > documentation. I often find myself trying to find a concept or idea that I > read somewhere, but can't remember if it was on the reference manual, the > tutorial, the solutions gu

Re: two quick questions

2011-02-09 Thread Aleksey Tsalolikhin
On Wed, Feb 9, 2011 at 5:05 AM, Jonathan CLARKE wrote: > Much less frequently, I look for the following, but have never really > managed to "figure out" how to get there, or find what I want easily: > ... Simple, self-contained examples of Cfengine promises to do > "something" (either demonstrate

Re: Cfengine Help: Re: version string in community

2011-02-09 Thread Aleksey Tsalolikhin
+1 me too On Wed, Feb 9, 2011 at 3:13 PM, Bas van der Vlies wrote: > +1 for me too > > On 9 feb 2011, at 20:01, Jesse Becker wrote: > >> I'll add +1 for this as well.  I've wanted to do the same thing for a >> long while... >> >> On Wed, Feb 09, 2011 at 01:58:20PM -0500, no-re...@cfengine.com wro

"Why I use Cfengine" on www.thebitsource.com

2011-02-09 Thread Aleksey Tsalolikhin
I was in a bit of a hurry when I wrote this, but it should still work. http://www.thebitsource.com/infrastructure-operations/cfengine-amongst-chefs-and-puppets-scale-9x/ Mark, please let us know when Cfengine is used in space! =) I said it is not (yet). =) Best, -at _

Re: libpromises.so.1 error

2011-02-11 Thread Aleksey Tsalolikhin
On Fri, Feb 11, 2011 at 10:48 AM, Yared Berhanu wrote: > > greetings, > > now I have a working cfengine. But when I try to check a conf file it > outputs > > cf-promises: error while loading shared libraries: libpromises.so.1: cannot > open shared object file: > > I don't know , please help me. H

Re: libpromises.so.1 error

2011-02-12 Thread Aleksey Tsalolikhin
On Sat, Feb 12, 2011 at 2:25 AM, Eystein Måløy Stenberg wrote: > Any binaries, documentation, manual, shared libraries, etc. are not put > anywhere unless you do "make install" (and never has been). Of course, but I always do "make install" because I want to install Cfengine. I don't compile it f

Re: Meta: Forum postings break help-cfengin email threads in Gmail

2011-02-12 Thread Aleksey Tsalolikhin
I'm seeing this problem too, Erlend. (On Gmail.) Aleksey On Sat, Feb 12, 2011 at 2:30 PM, Erlend Leganger wrote: > I follow this list on email only (using Gmail), I don't use the forum. It > seems as if questions or responses posted to the forum have the prefix > "Cfengine Help: " when reaching

Re: www.cfengine.org | com not accesible

2011-02-12 Thread Aleksey Tsalolikhin
Dear mlz, Could you please check via http://www.downforeveryoneorjustme.com/ ? Best, -at On Sat, Feb 12, 2011 at 7:44 AM, M LZ wrote: > > Hi, > > For a couple of days cfengine sites are  not accesible. Can anyoane help > with that as I miss them :). Ping output for revealing the ip as seen by

Re: libpromises.so.1 error

2011-02-12 Thread Aleksey Tsalolikhin
On Sat, Feb 12, 2011 at 12:59 PM, Aleksey Tsalolikhin wrote: > On Sat, Feb 12, 2011 at 2:25 AM, Eystein Måløy Stenberg > >> As discussed a couple of times on the list now, the main reason for >> using shared libraries is efficiency (80% reduction of memory/disk size >&g

select_line_matching is great; how about a select_paragraph_matching?

2011-02-14 Thread Aleksey Tsalolikhin
What's the paragaraph equivalent to select_line_matching() ? Situation: I've written a promise to insert "extension=http.so" into /etc/php.ini in the Dynamic Extensions section so that Apache httpd's mod_php dynamically loads the "pecl_http" module which is needed by our Web app, however I've anc

Cfengine promise bundle for installing PHP PECL "http" library

2011-02-14 Thread Aleksey Tsalolikhin
Happy Valentine's Day! With love, here is my promise bundle for installing PHP PECL "http" library and integrating it (set SELinux permissions and edit /etc/php.ini) https://github.com/cfengine/contrib/raw/master/php_pecl_http_extension_is_installed_and_integrated.cf Best, -at _

Re: Any comments?

2011-03-02 Thread Aleksey Tsalolikhin
Hey, Tom. I talked to a fellow who used to consult on (IBM) Tivoli setups, and knows it quite well. I asked him about Tivoli capabilities and it can handle configuration management at a PACKAGE level. Contrast Cfengine which can handle packages, files, user accounts, services, processes, and mor

Re: Cfengine Help: Edit crontabs - was cfengine/puppet choice

2011-03-04 Thread Aleksey Tsalolikhin
On Thu, Mar 3, 2011 at 12:49 AM, wrote: > Forum: Cfengine Help > Subject: Edit crontabs - was cfengine/puppet choice > Author: mark > Link to topic: https://cfengine.com/forum/read.php?3,18633,20887#msg-20887 > > Sorry for the delay in replying. I've been travelling, I made a cronjob > method in

Re: verify service running

2011-03-04 Thread Aleksey Tsalolikhin
On Fri, Mar 4, 2011 at 4:22 AM, Jonathan Clarke wrote: > > I have [...] become maniacal about always > using the full path name of an executable in processes promises, eg: > > processes: >        "/usr/sbin/cupsd" >                etc > > This avoids the "mycupsarefull" problem, and the > more-com

code sharing: Cfengine promises for provisioning server instances on Amazon EC2

2011-03-09 Thread Aleksey Tsalolikhin
Purpose: Use Cfengine to automatically provision VM's on Amazon EC2. I've chosen the Amazon command line tools suite (ec2-run-instances, ec2-describe-instances, ec2-terminate-instances, etc.). I was considering using the Perl Net::Amazon::EC2 library but the author is still in the process of ad

Re: Cfengine Help: Re: code sharing: Cfengine promises for provisioning server instances on Amazon EC2

2011-03-09 Thread Aleksey Tsalolikhin
Thanks, Deb. If you're provisioning a local VM, you should be able to do it all natively in Cfengine Nova. I haven't played with that yet. I intend to post a screencast of my demo once its complete. Maybe you could do the same with yours. Are you using Xen? Best, -at On Wed, Mar 9, 2011 at 6

progress update - provisioning in EC2 using Cfengine (not really, I'm using a shell script. :(

2011-03-10 Thread Aleksey Tsalolikhin
The following works if servers/* files exist (e.g. servers/web1 servers/web2 servers/haproxy) but if they don't cfengine won't run! cf-promises segfaults.   (i'm using 3.1.4, by the way). I've promised Eystein a gdb backtrace once I learn how to make one.

Re: Cfengine Help: Re: cfengine3 processes

2011-03-10 Thread Aleksey Tsalolikhin
Hi, David. You might find it of use to go through my class, I've got a 2:41 hr video online, and downloadable examples: http://www.verticalsysadmin.com/cfengine/ That's in addition to the online materials, not instead of them. I tried to learn Cfengine from the website and really struggled - onc

Re: Cfengine Help: Re: code sharing: Cfengine promises for provisioning server instances on Amazon EC2

2011-03-10 Thread Aleksey Tsalolikhin
Dear Deb, Understood; thank you for sharing that. Would you be willing to share where does Xen fall short for HA services? I am just starting to use Xen in our stage/test environment, and it's been running OK so I'm going to expand it to the main development envirornment, with an eye on eventu

Re: Cfengine Help: Getting a long list of files into Cfengine

2011-03-10 Thread Aleksey Tsalolikhin
Could you please take a look at special variable $(this.promiser) ? Section 12.6.4 in the reference manual today.Combine that with "transformer" and you can use an external command (like sed) to edit your files. If anyone has a better suggestion (totally done in Cfengine), I'd love to hear it.

Re: Cfengine 2.1.21 on RHEL 6

2011-03-11 Thread Aleksey Tsalolikhin
Hi, Rakesh. What library errors did you get when you tried to compile 2.1.21 on RHEL 6? Migrating to version 3 might be a good idea in any case, if you have time to learn 3. In 3, the language has been greatly streamlined and standardized; and it is more powerful and flexible than 2. Best, -at

what does "timeout=-678, owner=-1, group=-1" mean when running a command?

2011-03-11 Thread Aleksey Tsalolikhin
What do these negative numbers mean, please? I'm running a shell command. -> Executing '/home/user/cfengine_ec2/start_micro_instance.sh web > /home/user/cfengine_ec2/servers/web' ...(timeout=-678,owner=-1,group=-1) Best, Aleksey ___ Help-cfengine mail

Re: Cfengine Help: Re: code sharing: Cfengine promises for provisioning server instances on Amazon EC2

2011-03-11 Thread Aleksey Tsalolikhin
On Fri, Mar 11, 2011 at 1:21 AM, wrote: > Forum: Cfengine Help > Subject: Re: code sharing: Cfengine promises for provisioning server > instances on Amazon EC2 > Author: berntjernberg > Link to topic: https://cfengine.com/forum/read.php?3,21018,21087#msg-21087 > > Hi, > > I don't know if this he

Re: Cfengine Help: Re: cfengine3 processes

2011-03-11 Thread Aleksey Tsalolikhin
In a nutshell, a bundle is a group of one or more promises. Whereas a promise BODY is the details of a particular promise that qualifies it and constrains its nature. need a good example, I think On Fri, Mar 11, 2011 at 3:51 AM, Bas van der Vlies wrote: > David, > > For me the following docume

Re: Community contributions (was: Re: Cfengine Help: Re: Managing user accounts with Cfengine 3)

2011-03-11 Thread Aleksey Tsalolikhin
On Fri, Mar 11, 2011 at 9:11 AM, Jesse Becker wrote: > On Fri, Mar 11, 2011 at 10:08:10AM -0500, David Lee wrote: >>no-re...@cfengine.com wrote: >>> Forum: Cfengine Help >>> Subject: Re: Managing user accounts with Cfengine 3 >>> Author: kenneho >>> Link to topic: https://cfengine.com/forum/read.p

Re: Community contributions (was: Re: Cfengine Help: Re: Managing user accounts with Cfengine 3)

2011-03-11 Thread Aleksey Tsalolikhin
On Fri, Mar 11, 2011 at 10:01 AM, Christopher Browne wrote: > On Fri, Mar 11, 2011 at 12:54 PM, Aleksey Tsalolikhin > wrote: >> Let me know if you'd like me to add anything to the list. >> >> This is an interim solution until Cfengine the company puts up &

Re: Cfengine Help: cfengine agents on Smart phones

2011-03-27 Thread Aleksey Tsalolikhin
Dear georgen, cfengine agent is a small C binary. the only dependencies are Berkeley DB library, libcrypto and (optional but recommended) PCRE library. See https://cfengine.com/forum/read.php?3,20311,20312#msg-20312 (this came up in January 2011) (and follow the link to http://www.cfengine.

Re: Cfengine Help: Deploying configuration partially

2011-04-06 Thread Aleksey Tsalolikhin
On Wed, Apr 6, 2011 at 8:22 AM, wrote: > > usually the full system configuration is deployed to every client. I think > this has got two huge disadvantages. One is that the entire configuration is > known by every client. The other is the network load because the full > configuration has to be

Linux Journal May 2011 issue is out with "Security Monitoring and Enforcement with Cfengine 3"

2011-04-15 Thread Aleksey Tsalolikhin
I'm super-pleased to report the Linux Journal May issue is now out, with Aleksey's "Security Monitoring and Enforcement with Cfengine 3" article: http://www.linuxjournal.com/on-newsstands Thanks to Mark for encouraging me to write and to Diego for the sshd-related code. Best, -at ___

Re: Cfengine Help: Re: Linux Journal May 2011 issue is out with "Security Monitoring and Enforcement with Cfengine 3"

2011-04-19 Thread Aleksey Tsalolikhin
On Mon, Apr 18, 2011 at 6:26 PM, wrote: > Forum: Cfengine Help > Subject: Re: Linux Journal May 2011 issue is out with "Security Monitoring > and Enforcement with Cfengine 3" > Author: bbomgardner > Link to topic: https://cfengine.com/forum/read.php?3,21508,21513#msg-21513 > > Well done! THanks

Re: Cfengine 3.1.5 is released -- a bugfix release

2011-05-04 Thread Aleksey Tsalolikhin
Thank you, great stuff! I'm pleased to see - 478: [Other] the version field cannot contain the the colon character ":" (mark) - resolved. which enables embedding RCS/CVS tags in the version field, thanks! Aleksey ___ Help-cfengine mailing

interface promises - what's the current state of this promise type?

2011-05-07 Thread Aleksey Tsalolikhin
Hi. What's the current state of interface type promises? Are they still under development / reserved for future use? Or is some part workable already? I'm a little confused as the manual gives some examples but also states "Reserved for future use". http://www.cfengine.org/manuals/cf3-referenc

Why are body parts attributes separated by semicolons but promise attributes separated by commas?

2011-05-07 Thread Aleksey Tsalolikhin
Hi. I'm trying to understand Cfengine 3 bodies better. Why are body parts attributes separated by semicolons but promise attributes separated by commas? For example: --- start of body parts example --- bundle agent example { storage: "/" volume => min_free_space("25%"); } body volume mi

Re: Cfengine Help: Re: Cfengine Help: cfengine 3.1.5 pcre question

2011-05-07 Thread Aleksey Tsalolikhin
On Fri, May 6, 2011 at 7:33 AM, wrote: > Forum: Cfengine Help > Subject: Re: Cfengine Help: cfengine 3.1.5 pcre question > Author: Beto > Link to topic: https://cfengine.com/forum/read.php?3,21785,21787#msg-21787 > > BTW, I think the fact that a "." now matches ANY character rather than any > ch

Re: Cfengine Help: Sharing our cf3 library

2011-05-07 Thread Aleksey Tsalolikhin
Thanks, Jessica! I've listed Yale Cfengine promise body library on the Shared Configs Index at http://www.verticalsysadmin.com/cfengine/shared-configs-index.html So you don't use the cfengine_stdlib.cf and use your library.cf instead, is that right? Aleksey On Sat, May 7, 2011 at 8:00 PM, wr

Shared Configs Index updated - added 3ware raid array monitoring and manage SVN working copy

2011-05-07 Thread Aleksey Tsalolikhin
Shared Configs Index updated - added 3ware raid array monitoring and manage SVN working copy. http://www.verticalsysadmin.com/cfengine/shared-configs-index.html Cheers, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.o

Re: Why are body parts attributes separated by semicolons but promise attributes separated by commas?

2011-05-09 Thread Aleksey Tsalolikhin
On Sun, May 8, 2011 at 12:08 AM, Mark Burgess wrote: > > Hi Aleksey, > > in the context of a body part, a complete statement is a body > constraint, but in the context of a body a complete statement is a promise. > > M Got it, thank you. I do find this confusing: a promise body can have an att

Re: Cfengine Help: Re: Deploying configuration partially

2011-05-09 Thread Aleksey Tsalolikhin
Hi, Christian. I have my Cfengine clients pull config directly from Subversion, too. I don't understand your huge problem. Why cannot a developer load two configurations? Do you keep the configurations in separate files or branches, and each client only sees their section of the overall config

the relation of entropy to anomaly detection - what does entropy mean here? how does this work?

2011-05-09 Thread Aleksey Tsalolikhin
Hi. I see we have some classes for anomaly detection: entropy_cfengine_in_low entropy_cfengine_out_low entropy_dns_in_low entropy_dns_out_low entropy_ftp_in_low entropy_ftp_out_low entropy_icmp_in_low entropy_icmp_out_low entropy_irc_in_low entropy_irc_out_low entropy_misc_in_low entropy_misc_out

What is the "loadavg_high_ldt" class?

2011-05-09 Thread Aleksey Tsalolikhin
Hi, what is the loadavg_high_ldt class, please? I noticed this defined on my system. Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Cfengine 3 intro class at USENIX conference: Fri, 17 June 2011 at Portland

2011-05-11 Thread Aleksey Tsalolikhin
I am very excited to teach an intro to Cfengine 3 class at USENIX on 17 June at Portland. This will be very practically oriented, covering basic theory and grammar, with lots of live examples and demonstrations. Would very much appreciate any help you can offer in promoting the class / mentioning

Re: the relation of entropy to anomaly detection - what does entropy mean here? how does this work?

2011-05-11 Thread Aleksey Tsalolikhin
Thank you to everyone who replied! :) I look forward to exploring this new (to me) facet of Cfengine. Yours truly, Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

suspiciousnames implemented in 3.1.5b1 - more detail, please?

2011-05-12 Thread Aleksey Tsalolikhin
Hi. ChangeLog in the 3.1.5 source tar ball says "suspiciousnames implemented". Is it possible to get more detail, please? I'm curious if this change relates to https://cfengine.com/bugtracker/view.php?id=464 Thanks, -at ___ Help-cfengine mailing list H

change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Aleksey Tsalolikhin
Is it just me, or did Cfengine 3 used to use md5 databases for change detection? now I see both md5 and sha1 are used. why is that? (doesn't that double the cost of change detection?) bundle agent example { files: "/etc" changes => detect_all_change, depth_search => recurse("inf

how to use process_select?

2011-05-12 Thread Aleksey Tsalolikhin
So I'm looking for a practical example of how process_select could be used. What do you do after the selection has been made? How do you report the process names or take actions (signal or process_stop them?) For example, I have this policy that will match on suspicious process names, but then w

Re: change detection - md5 / sha1 databases? why both?

2011-05-12 Thread Aleksey Tsalolikhin
> "best"; > report_changes => "all"; > update_hashes  => "yes"; > } > --- > > Consider using the detect_content body for a cheaper but less secure > alternative. > > -- > > Regards, > Eystein > > > On Thu, May 12, 2011 at 10:00 PM, Alek

where to put local promises? site.cf?

2011-05-13 Thread Aleksey Tsalolikhin
Sorry, I don't recall seeing this in any of the documentation I've read so far, but are my promises supposed to go into site.cf? Is that right? Sorry, I just haven't seen it mentioned anywhere and it seems important, I want to make sure I get it right. I've made this little table of what each

special variable match.* - I don't understand the example in the reference manual

2011-05-14 Thread Aleksey Tsalolikhin
Hi. I am looking at section "12.3 Variable context match" and it says: Each time cfengine matches a string, these values are assigned to a special variable context $(match.n). The fragments can be referred to in the remainder of the promise. this makes sense ...

Re: special variable match.* - I don't understand the example in the reference manual

2011-05-14 Thread Aleksey Tsalolikhin
P.S. And why does it say "second" in the myedit() paramaters? ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: special variable match.* - I don't understand the example in the reference manual

2011-05-14 Thread Aleksey Tsalolikhin
I have the following working example of using the special match variable with file names: First, we have three files we'll be matching on: [cfengine00 cfengine_examples]# ls -l /tmp/cf*test* -rw-r--r-- 1 root root 29 May 14 12:37 /tmp/cf2_test -rw-r--r-- 1 root root 29 May 14 12:38 /tmp/cf3_test

Re: special variable match.* - I don't understand the example in the reference manual

2011-05-14 Thread Aleksey Tsalolikhin
Final version, with comments, for possible inclusion in the reference manual: bundle agent example { # INPUT # Please create the following files before running this example: # /tmp/cf2_test1 # /tmp/cf3_test2 files: "/tmp/(cf[23])_(.*)" edit_line => report_match_variables("$(match.0) $(

Re: Bundle for printing ${mon.*} variables

2011-05-14 Thread Aleksey Tsalolikhin
Thanks again for sharing this, Jesse. Small typo, missing showstate => { 'udp_in' }; How long have you been using Nova compared to Community? How do you like it? Best, -at On Fri, May 13, 2011 at 3:15 PM, Jesse Becker wrote: > Posting this to save someone else the trouble of

Need an example of a policy that reacts to environmental data collected by cf-monitord

2011-05-14 Thread Aleksey Tsalolikhin
Hi. I am trying to think of an example of a policy that reacts to environmental data collected by cf-monitord... I thought I might do something with "diskfree" but there is already "freespace" under "volume" that will warn if free space is too low. Then I thought, how about I check CPU utilizati

Re: Need an example of a policy that reacts to environmental data collected by cf-monitord

2011-05-15 Thread Aleksey Tsalolikhin
On Sun, May 15, 2011 at 3:06 AM, Jesse Becker wrote: > On Sun, May 15, 2011 at 03:01:53AM -0400, Seva Gluschenko wrote: >> >> Aleksey, >> >> don't mess CPU utilization with load average, these two are pretty >> different. While I doubt seriously that LA could rise to 100 while CPU >> usage is 6% o

How do I set a persistent class in Cfengine 3?

2011-05-15 Thread Aleksey Tsalolikhin
Hi. How do I set a persistent class, please? I see from the reference manual that $(sys.workdir)/state/cf_state.tcdb is the database of persistent classes active on this current host. cf-agent -v includes the step "Loading persistent classes" I see from the reference manual Cfengine Enterprise

What does the output prefix >> mean?

2011-05-15 Thread Aleksey Tsalolikhin
Hi. What does the output prefix >> mean, please? For example: # cf-agent -b bundlename -f filename.cf >> Using command line specified bundlesequence ... # So far I know about the following prefixes, am I missing one, or is the above supposed to be "->" ? !! errors or alerts Rreports

need a working example of how to use "transformer" without $(this.promiser)

2011-05-15 Thread Aleksey Tsalolikhin
Hi. I need a working example of how to use a "transformer" to specify a command to create the promised file based on a different origin file. I looked at Reference Manual section "7.4.18 transformer" but could not get a simpler example to work. Here is what I tried: bundle agent example { fil

Re: Cfengine Help: cfengine_stdlib.cf and hardclasses

2011-05-16 Thread Aleksey Tsalolikhin
Could you please post your policy, di3z? Aleksey On Mon, May 16, 2011 at 9:09 AM, wrote: > Forum: Cfengine Help > Subject: cfengine_stdlib.cf and hardclasses > Author: di3z > Link to topic: https://cfengine.com/forum/read.php?3,21965,21965#msg-21965 > > Hi > > It seems like there's no way to us

Re: Cfengine Help: Re: need a working example of how to use "transformer" without $(this.promiser)

2011-05-16 Thread Aleksey Tsalolikhin
On Mon, May 16, 2011 at 2:16 PM, wrote: > Forum: Cfengine Help > Subject: Re: need a working example of how to use "transformer" without > $(this.promiser) > Author: toddnni > Link to topic: https://cfengine.com/forum/read.php?3,21955,21984#msg-21984 > > > Okay, this was my bad. Now I got a very

Re: Cfengine Help: Re: need a working example of how to use "transformer" without $(this.promiser)

2011-05-16 Thread Aleksey Tsalolikhin
OK, I found the example, unit_locate_files_and_compress.cf Thanks, Mark! Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Functions section of the reference manual contains complete runnable examples. Yay!!

2011-05-16 Thread Aleksey Tsalolikhin
Just got to the Functions section of the reference manual and was overjoyed to see runnable examples. Thank you!! This is fantastic. Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

What are the functions peers and peerleaders used for?

2011-05-16 Thread Aleksey Tsalolikhin
What is the purpose of these functions, please? (I've read what they do, but why?) Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: where to put local promises? site.cf?

2011-05-17 Thread Aleksey Tsalolikhin
On Tue, May 17, 2011 at 5:07 AM, Nicolas Charles wrote: > On 13/05/2011 09:42, Aleksey Tsalolikhin wrote: >> Sorry,  I don't recall seeing this in any of the documentation >> I've read so far, but are my promises supposed to go into >> site.cf?   Is that right?

Re: How do I set a persistent class in Cfengine 3?

2011-05-17 Thread Aleksey Tsalolikhin
On Mon, May 16, 2011 at 3:47 AM, Nicolas Charles wrote: > In the body class, you have "persist_time" that allows you to set the > number of minutes the related class should remain active > > In the cfengine_stdlib.cf : > > body classes state_repaired(x) > { > promise_repaired =>  { "$(x)" }; > per

invoking a module - when should I use the usemodule() function, or when a commands promise with module attribute set to true?

2011-05-17 Thread Aleksey Tsalolikhin
I see in the reference manual that there are two ways to invoke a module. 11.87 Function usemodule Modules must reside in WORKDIR/modules but no longer require a special naming convention. 7.1.3 module attribute of commands type promise (set to true) I guess function is there to give

Re: where to put local promises? site.cf?

2011-05-18 Thread Aleksey Tsalolikhin
On Wed, May 18, 2011 at 7:22 AM, Nicolas Charles wrote: > On 17/05/2011 16:59, Aleksey Tsalolikhin wrote: >> >> On Tue, May 17, 2011 at 5:07 AM, Nicolas Charles >>  wrote: >>> >>> On 13/05/2011 09:42, Aleksey Tsalolikhin wrote: >>>> &g

still trying to set a persistent class. help, please?

2011-05-18 Thread Aleksey Tsalolikhin
I'm stuck, guys. I'm trying to set a persistent class, and then use it. No go. :: test.cf - set a persistent class :: bundle agent example { classes: "myclass" expression => classmatch (".*cfeng.*"), classes => set_to_persist; } body classes set_to_persi

Re: Race condition between cfengine and an application?

2011-05-18 Thread Aleksey Tsalolikhin
On Wed, May 18, 2011 at 7:28 AM, Michael Schwartzkopff wrote: > Hi, > > I have seen some strange errors in my application. It tells me that the config > file is not available. Since no admin messed around with the file the usual > suspect is cfengine sice we roll out that file with it. > > Is it p

Re: still trying to set a persistent class. help, please?

2011-05-18 Thread Aleksey Tsalolikhin
This does not work either, I do not get a report. What I tried was I moved the class definition into a common bundle, to make the persistent class be global. :: test.cf :: bundle common set_persistent_class { classes: "myclass" expression => classmatch (".*cfeng

having trouble copying files using cf-serverd 3.1.4

2011-05-19 Thread Aleksey Tsalolikhin
I'm having trouble setting up copying files. cf-serverd version 3.1.4 shows, in verbose mode: community> cf-serverd access list is empty, no files are visible community> Access control in sync community> From (host=cfengine00,user=root,ip=myIP) community> REFUSAL of request from connecting host:

Re: having trouble copying files using cf-serverd 3.1.4

2011-05-19 Thread Aleksey Tsalolikhin
I've tried both an IP address and and a regex (.*) Thank you for letting me know, I'll stick to IP addresses. I do get the same behavior: 1. cf-agent does not pull down the new files 2. cf-serverd says: "cf-serverd access list is empty, no files are visible" "REFUSAL of request from co

Re: Cfengine Help: Re: where to put local promises? site.cf?

2011-05-19 Thread Aleksey Tsalolikhin
On Thu, May 19, 2011 at 6:07 AM, Nick Anderson wrote: > On Thu, 2011-05-19 at 14:37 +0200, no-re...@cfengine.com wrote: >> Forum: Cfengine Help >> Subject: Re: where to put local promises? site.cf? >> Author: neilhwatson >> Link to topic: https://cfengine.com/forum/read.php?3,21932,22062#msg-22062

conditional import of inputs -- i.e. using classes to control inputs

2011-05-19 Thread Aleksey Tsalolikhin
I'm trying to set up Cfengine to import (inputs attribute of the common control promise) a country-specific inputs file, and to call a country-specific bundle of promises, if the current instance of Cfengine belongs to the class of that country. The country class is definited based on the hostname

Re: Cfengine Help: Re: still trying to set a persistent class. help, please?

2011-05-19 Thread Aleksey Tsalolikhin
Thank you very much Neil and bbomgardner for looking at this. I opened bug https://cfengine.com/bugtracker/view.php?id=634 Aleksey ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: conditional import of inputs -- i.e. using classes to control inputs

2011-05-19 Thread Aleksey Tsalolikhin
Hi, Seva. Did you try this? I tried what you suggested and cf-agent tried to read the file called @(g.countryside). Can you get it to work? Here is what I have now: # import italy.cf and run the italy bundlesequence # only if the hostname matches the pattern mil.* bundle common define_global

Re: Cfengine Help: Re: conditional import of inputs -- i.e. using classes to control inputs

2011-05-19 Thread Aleksey Tsalolikhin
I moved the classes promise higher, before the vars promise, (which is how it is evaluated anyway), but I get: Can't stat file "./@(g.country)" for parsing ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/he

Re: Cfengine Help: question about editing smb.conf

2011-05-19 Thread Aleksey Tsalolikhin
Could you please post the text you want to edit (the smb.conf file) and the field_edits code you have in mind? What changes do you want to make in smb.conf? Aleksey On Thu, May 19, 2011 at 3:36 PM, wrote: > Forum: Cfengine Help > Subject: question about editing smb.conf > Author: raymondcox

<    1   2   3   4   5   >