Re: invalid mode string error.

${cmt} Unknown user ${usr} Unknown group '${grp}' Promise (version not specified) belongs to bundle 'filecontents' in file './foo.cf' near line 50 Comment: ${cmt} Strangely Community V3.0.2 returns now errors or warnings. What do these messages mean? -- Ne

Re: invalid mode string error.

On Wed, Dec 02, 2009 at 11:04:49PM +0100, Nicolas Charles wrote: > > Shouldn't it be $(mod) rather than ${mod} ? I guess the () are for > function parameters, whereas {} are for variables and classes, isn't it {} and () can both be used to identify variables. -- Nei

Re: invalid mode string error.

> hold for 2.x? (We have policies with both, depending who wrote 'em.) I've always used {} and have never had a problem going back to 2.2.9. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help

Re: invalid mode string error.

> hold for 2.x? (We have policies with both, depending who wrote 'em.) Just be certain I changed ${} to $() in test file but the error was still the same. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine

syntax suggestion

It would be nice if the parser allowed us to express this "$(trg[$(files_list)])" Like this "$(trg [ $(files_list) ] )" for better readability. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailin

Re: compiling cf3 on sparc solaris

After turning up no new leads on why CF was not compiling I back tracked and install the libgcc dependency. After that the next compile was successful. Thus is seems that the problem is that Berkeley does not check the libgcc dependency when it installs. -- Neil Watson Linux/UNIX Consultant http://w

Re: Cfengine releases 12/09

Awesome Mark! Thanks for the hard work. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine releases 12/09

In the spirit of giving: http://www.vim.org/scripts/script.php?script_id=2903 http://www.vim.org/scripts/script.php?script_id=2904 -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org

copy and file perms

e the current target permissions? Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: copy and file perms

ar had permission 600, changed it to 644 No difference. Why is the agent trying to change permissions? Is this expected behaviour? Is this desired behaviour? Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: copy and file perms

-KnIf /var/cf-masterfiles/config/trunk/inputs/test.cf Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: copy and file perms

r > /tmp/foobar)): time=0.0003 secs, av=0.0003 +/- 0.0016 cf3 Existing connection just became free... Can you reproduce this? Have I made a mistake? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ## body common control { bundlesequence => { "t

Re: using copy_from help

often worth the expense. Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: copy and file perms

Tonight I build cf again from the latest trunk and now perms are not altered unexpectedly. Did I make a mistake last night or was something fixed in SVN today? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list

Re: using copy_from help

of us are not so lucky. Typically if a project is not customer facing it is very hard to get a budget of time and money. I agree that a VLS is an solution but one still needs to budget some time and hardware. -- Neil Watson Linux/UNIX Consultant http://

ifelapsed 0 and 'verified' promises

;${g.svc_start[${service}]}_failed" ), comment => "Start $(service) if proc ${g.svc_proc[${service}]} not running."; body action immediate { ifelapsed => "0"; } -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Getting the n-th element of a slist

Might I ask where the date is coming from and what you plan to do with it? I think that what you are doing might be possible but there might be an entirely better way. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine

Re: Triggering an alert when repairs occur

AFAIK Nova has this function but not Community. There was some discussion on this list during the late summer about this very topic. I think that Mark hinted things were going to change but I've seen no updates on the matter. -- Neil Watson Linux/UNIX Consultant

service bundles and config files

ndle common res # abstraction layer { vars: solaris:: "cfg_file[ssh]" string => "/etc/sshd_config"; "daemon[ssh] " string => "sshd"; "start[ssh] " string => "/etc/init.

bug

es an error should occur. The client's version was Community 3.0.2 but I was able to reproduce this at home using a SVN build that is only two weeks old. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing

Re: error in stdlib

. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: error in stdlib

On Sat, Jan 30, 2010 at 04:17:25PM +0100, Mark Burgess wrote: > >It it not always as easy to give this information as you might think, >but I'll look into it. Worthwhile things are often not easy :) -- Neil Watson Linux/UNIX Consultant http://wa

Re: bug

;cfbackup"' cf3:/var/cfengine/inputs/promises.cf:8,5: syntax error, near token '}' cf3:/var/cfengine/inputs/promises.cf:8,6: syntax error, near token ';' cf3 Fatal cfengine error: Too many errors cf3 Outcome of version (not specified): No checks were scheduled I then restart

Re: Email notification of repairs

rting system would be better for this. Something like OpenNMS can correlate events into a single alarm and escalate notification while avoiding the information storm than can come from 'dumb' notification services. -- Neil Watson Linux/UNIX Consultant http://w

Re: case sensitivity in cf3 regexes

On Sat, Feb 13, 2010 at 02:17:47AM +0100, Nakarin Phooripoom wrote: >Could we use [A-Z]? for instance; We could but it is not very flexible. Suppose you want to match 'OpenSSL-4.8' but you don't know what will be capitalized. -- Neil Watson Linux/UNIX Consultant http:

Re: Fwd: [lopsa-discuss] Configuration Management

sts. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: load promise from file

Cfengine defaults to promises.cf. From there define the common bundle and include your other bundles and files in inputs and bundlesequence. With this knowledge I encourage you to go back again and look at the tutorial. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca

Re: Remote copy help

I haven't seen this issue myself. Can you create a small self contained example that others can test? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/ma

Re: Can't use host name regexps with trustkeysfrom

Shouldn't the administrator have the option to decide how trustworthy the DNS service is? There are certainly no shortage of shoddy DNS services out there but not all. Making the Cfengine do some checking such as PTR records might be compromise. -- Neil Watson Linux/UNIX Consultant

cf-twin message in cf 3.0.4

uot;, "cf-monitord", "cf-know", /home/neil/src/cfengine-3.0.4/src/sysinfo.c: // twin has own dir, and is named agent /home/neil/src/cfengine-3.0.4/src/sysinfo.c: snprintf(name,CF_MAXVARSIZE-1,"%s%cbin-twin%ccf-agent.exe",CFWORKD

Re: process miscounting?

uggested tests I'm happy to perform them. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

tcpread help

oogle.ca 80 GET /index.html This returns a page. However, readtcp times out. What have I missed? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: tcpread help

xplain? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: /var/cfengine not created during install

I think if you run cf-key it will create /var/cfengine but usually I create it by hand. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help

Re: Retrieving certain files from a directory

Can you show us what you've tried? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

storage volume size math

;not specified' of './policies.cf' near line 82 ettin:~/inputs# df -k / Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/vg-root 10321208 4625188 5171732 48% / This is community 3.0.4. -- Neil Wats

svn versus patch level

How can I match Subversion version numbers with Cf patch levels? For instance which svn number matches 3.0.4.p2? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https

Re: CFEngine Help: Upgrading to cf3.3 and tcdb issues

ation. While trying to recreate the database the agent creates a new db file that fills all available free space. I had to kill CF and remove all the databases to start anew. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengin

Re: CFEngine Help: Upgrading to cf3.3 and tcdb issues

On Fri, Apr 20, 2012 at 02:20:40PM +0200, Mikhail Gusarov wrote: >I think I have seen this bug in old version of Tokyo Cabinet. Which one >do you use? neil@mercury:~$ dpkg -l |grep tokyocabinet ii libtokyocabinet8 1.4.37-6 Tokyo Cabinet Database Libraries [runtime] -- Neil Watson Linu

hostsseen stopped working in 3.3?

n db file: ettin:~/masterfiles# ls -ltr /var/cfengine/cf_lastseen.tcdb -rw-r--r-- 1 root root 530560 Apr 20 21:37 /var/cfengine/cf_lastseen.tcdb Why does this policy no longer working since I changed to 3.3? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

cf-twin

Greetings, What's the latest on the use of cf-twin in 3.3? It is referenced in the included promises.cf. However, I do not see the cf-twin binary in the built source or any way to create it in the included policies. Cf-twin does not appear anywhere in the reference manual. Sincerely, --

Re: CFEngine Help: Re: cf-twin

cfengine/bin/cf-twin, CFE will use /var/cfengine/bin/cf-agent >instead. I saw cf-execd error out yesterday because the execd agent variable referenced cf-twin that was not there. No attempt was made to use cf-agent instead. -- Neil Watson Linux/UNIX Consultant http://w

Re: executable file doesn't exist. bundles processing.

During the run, and the three sub-runs, Cfengine will attempt to evaluate variables and classes. So the commands that may be associated with vars and classes promises will be run, if possible, each time. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca

seg fault in 3.3

[stack] 7fff00339000-7fff0033a000 r-xp 00:00 0 [vdso] ff60-ff601000 r-xp 00:00 0 [vsyscall] Aborted -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list

negative process match and general promise state rambling

l help everyone better understand how promises might be used. Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help: Re: negative process match and general promise state rambling

", comment => "Restart class should not be needed here.", classes => if_kept("proc_is_running"); The above promise is kept if the class is running. It is repaired if the restart class has to be set by the agent. Improvements or alternatives welcome. Since

Re: CFEngine Help: Re: negative process match and general promise state rambling

esorted to a classes body that sets all possible state classes. I test with this to see what happens. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help: Thoughts of encrypting the entire Cfengine workspace?

ts to target clients rather than in bulk. So a local crack will only affect that host which is already lost. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/ma

Re: CFEngine Help: Wildcard Characters in commands

Commands are, by default, not executed in full a shell. If you contain the command in a shell I would expect globbing to work. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https

Re: CFEngine Help: Re: CFEngine Help: Re: CFEngine Help: Multple (identical) command executions optimized away?

Variable and classes promises are not like other promises. They do not make changes to the host directly. It is essential for the agent to re-evaluate these promises continuously to help the system to converge during the 3 internal runs. -- Neil Watson Linux/UNIX Consultant http://wats

Re: Distill a three dimensional array to a two dimensional array?

main(params){ >vars: ># c=component ># u=user >acl_conf[$(c)][$(u)] string => $(service[acl[$(c)][$(u)]) params is a reference. Try this "$($(params)[acl][$(c)][$(u)])" It's a pity that the parser does not allow whitespace in the varia

Re: cf-agent 3.3.0 segmentation violation

I'm no C hacker but I've seen seg faults too with 3.3. Might be related Bug report: https://cfengine.com/bugtracker/view.php?id=1089 -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cf

Re: [ANNOUNCE] CFEngine Community 3.3.1 is released

ses there? They don't want default one to replace them. I do not think it wise to touch what could be user created files. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://

Re: CFEngine Help: Re: NFS mount options and behaviour

On Mon, May 07, 2012 at 08:22:59PM +0200, no-re...@cfengine.com wrote: >Any advices or comments before I let my question die ? :) Narrow it down to a reproducible example with expected versus actual results and submit a bug report if you feel there is an error. I think you have case. -- N

Re: CFEngine Help: Logging changes.

It varies a bit based on your policy but generally you'll see actions from the agent listed in logs of the outputs directory and in syslog. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfe

Re: CFEngine Help: Re: CFEngine Help: How do I delete old keys? help - newbie :)

racker/view.php?id=866 Also, Mikhail, check with Matt. I seem to recall that I had an issue with Nova and key removal at JP. Sincerely, -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org

Re: again, cf-runagent

"$(sys.cf_agent)" > handle => "grant_access_to_cf_agent", > admit => { "$(sys.policy_hub)" }; Look at the earlier output of cf-serverd, which you did not post. You will see a list of access rules. Are these variables expanded to wha

cf-server intermittently denies connections

uthorized IP 192.168.9.193 cf3> -> Accepting a connection cf3> Not allowing connection from non-authorized IP 192.168.9.193 cf3> -> Accepting a connection cf3> Not allowing connection from non-authorized IP 192.168.9.212 -- Neil Watson Linux/UNIX Consultant http://watson-wils

Re: cf-server intermittently denies connections

internal to cf-serverd. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help: Re: again, cf-runagent

I had some IPV issues with CF. Your's might be related. https://cfengine.com/bugtracker/view.php?id=988 -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/ma

how is am_policy_hub class set?

cf3> Path: /i/am/not/policy/hub (encrypt=0) cf3>Admit: localhost root= The above example was run on Core 3.3.1. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Rare/exotic operating systems support

QNX is the new base for Blackberries IIRC. Would be good to support that for future embedded opportunities. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org

Re: Variable setting in verbose output

I have a similar request below. Feel free to add your two cents. https://cfengine.com/bugtracker/view.php?id=983 -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https

Re: reports: showstate => { ... }

On 05/23/2012 08:13 AM, Mikhail Gusarov wrote: > Is there anyone who uses the "showstate" option of reports promise? It seems > to > be broken w.r.t. report_to_file option since the beginning, and noone noticed. I've use this on rare occasions in the past. -- Neil Wats

Re: CFEngine Help: Re: Cfengine 3.3 wins!

grounded cf-runagent >command into my post-commit hook. :) Beware of svn up commands. On an error it will still exit zero. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https

Re: CFEngine Help: edit_template array variable expansion

t;192.168.0.1"; >"mac"string => "52:54:00:00:00:00"; > >"ip" string => "192.168.0.2"; >"mac" string => "52:54:00:00:00:01"; > >"hosts" slist => getindices("na

Re: CFEngine Help: Re: CFEngine Help: edit_template array variable expansion

Sorry, the webforum to mailing list software corrupted the message. I see the same thing you do. Let me think about it. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https

Re: Has anybody put together a body package_method cpan ?

On Tue, Jun 05, 2012 at 11:51:26AM -0700, Aleksey Tsalolikhin wrote: >Hi. Has anybody put together a body package_method cpan ? to >interface with the perl CPAN library? I'd like to see that. Given that many CPAN installs can be interactive this would be challenging. -- Neil W

Re: Has anybody put together a body package_method cpan ?

ot a goat. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Problems editing /etc/exports

I don't use storage promises much but don't they edit fstab for you without needing your own edit_line promises? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cf

arrays with lists

} [root@admin1 masterfiles]# cf-agent -IKf ./arlist.cf R: l => main.l[x] I was hoping to see list expansion in the report promise. Is this possible? -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

distributing secrets

promises to allow each host to gather its needed file. Scale is a bit of an issue. If you have 500 hosts I think you need 500 rules unless iteration looping works in server bundles. All ideas welcome. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca

Re: distributing secrets

this case I am using Core rather than Enterprise. I have used remote scalars in the past. The results were very disappointing and it is my understanding that remote scalars have not been fixed in this release of Enterprise. -- Neil Watson Linux/UNIX Consultant http://watson

Re: distributing secrets

mit: 192.168.9.2 root= cf3> Path: /var/cache/192.168.9.3 (encrypt=0) cf3>Admit: 192.168.9.3 root= cf3> Path: /var/cache/192.168.9.4 (encrypt=0) cf3>Admit: 192.168.9.4 root= cf3> Path: /var/cache/192.168.9.5 (encrypt=0) cf3> Admit: 192.168.9.5 root= cf3> Path: /var

Re: Hierarchy of policy hubs

get called from classes promises. You can also but put modules for commands promises too. All of the contents of these directories are contained in some form of version control. They can go from version control to these locations manually or by some automatic process. -- Neil Watson Linux/UNIX

Re: CFEngine Help: Re: cf-runagent and keys

;cf3> -> R: puppet-common is NOT installed I'd like to know the story of the above output. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help: Re: cf-runagent and keys

ve the grateful >task to kick out the puppet installation currently running on them, and >replace it with cfengine. I get a lot of Puppet versus Cfengine questions. Can you tell us why the change over? Sincerely, -- Neil Watson Linux/UNIX Cons

Re: CFEngine Help: Re: distributing secrets

eed to be restarted. It rereads files regularly looking for changes much like Vixiecron. -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: when/how is masterfiles/cf_promises_validated updated?

n:/var/cfengine/masterfiles# ls -ltr cf_pro* ls: cannot access cf_pro*: No such file or directory -- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinf