help-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Does copy operation checks for the timestamp ?


From: Harish Chauhan
Subject: Does copy operation checks for the timestamp ?
Date: Wed, 7 Jan 2004 12:56:34 -0500


Hi,

Just wanted to check if  "COPY:"  operation checks for the time stamp of the files before actually copying / updating the files ?

Thanks in advance.

Regards, Harish Chauhan



address@hidden
Sent by: address@hidden

11/26/2003 07:46 PM
Please respond to help-cfengine

       
        To:        address@hidden
        cc:        
        Subject:        Help-cfengine Digest, Vol 12, Issue 20

       


Send Help-cfengine mailing list submissions to
                address@hidden

To subscribe or unsubscribe via the World Wide Web, visit
                http://mail.gnu.org/mailman/listinfo/help-cfengine
or, via email, send a message with subject or body 'help' to
                address@hidden

You can reach the person managing the list at
                address@hidden

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Help-cfengine digest..."


Today's Topics:

  1. Re: bootstrapping cfengine. (Christian Pearce)
  2. Re: bootstrapping cfengine. (Chip Seraphine)
  3. collecting files from remote servers (Kurt Lieber)
  4. Re: [Cfengine] Resolve and purging (Bas van der Vlies)
  5. Updating files: db (Fletch Hogan)
  6. Re: Updating files: db (address@hidden)
  7. Re: Updating files: db (Frank Smith)
  8. why didn't I receive the email with output? (Yue Han)
  9. Re: why didn't I receive the email with output? (Tod Oace)


----------------------------------------------------------------------

Message: 1
Date: Tue, 25 Nov 2003 19:11:03 GMT
From: "Christian Pearce" <address@hidden>
Subject: Re: bootstrapping cfengine.
To: address@hidden
Cc: address@hidden, oearcec <address@hidden>
Message-ID: <address@hidden>
Content-Type: text/plain

That is an interesting concept.  I have an automated process for building packages.  I was actually able to get the makefile editing to work.  It seems to me that automake and autoconf with a sprinkle of libtool should be able to handle this better.  But what do I know.  I certainly see value in being able to install the cfengine package and not have any dependencies.  It is nice to just drop a package on the box with no other worries.  Thanks for the input Chip.

--
Christian Pearce
http://www.commnav.com



On Nov 25, 2003, Chip Seraphine wrote:
>
>
> For what it's worth, I generally do things the lazy way-- tell configure to
> look in some sandbox library directory, and populate it only with the .a
> files.  No muss, no fuss, no makefile editing.
>
> On Monday 24 November 2003 14:31, oearcec wrote:
> > "Luke A. Kanies" <address@hidden> wrote in message
> > news:<address@hidden>...
> >
> > > Static linking is your friend, especially when it comes to your core
> > > management tools.  Really.
> > >
> > > Now that each machine has the other's public key, just run cfagent and
> > > the client (as long as you've got update.conf), and it should all work
> > > fine from there.  If you haven't statically linked, this is a much bigger
> > > pain, so I _really_ recommend static links.
> >
> > Luke,
> >
> > I have read a little bit on Google Groups about doing a static
> > compile.  But I didn't come up with anything that worked completely.
> > So far I did the edit the configure script by hand, replacing the
> > -l{db,crypto} with static libraries.  But this didn't work on all the
> > binaries.  Only cfagent, and cfservd.  There must be a better way.
> > What method did you use to get a static build?
> >
> > Christian
> > _______________________________________________
> > Help-cfengine mailing list
> > address@hidden
> > http://mail.gnu.org/mailman/listinfo/help-cfengine
>
>



------------------------------

Message: 2
Date: Tue, 25 Nov 2003 13:39:18 -0600
From: Chip Seraphine <address@hidden>
Subject: Re: bootstrapping cfengine.
To: "Christian Pearce" <address@hidden>
Cc: address@hidden, oearcec <address@hidden>
Message-ID: <address@hidden>
Content-Type: text/plain;  charset="iso-8859-1"

Not having dependencies in cfengine and core admin tools is good, as Luke
pointed out earlier.  If one of the purposes of a tool is to help the system
recover from some calamity (down network, misconfiguration, hosed
environment, whatever) then the fewer assumptions you make about the state of
the system, the better.

The downside is that your executables are bigger, but I've found that if I run
strip(1) on them the difference between a dynamically-linked and a
staticically-linked executable is often only a few hundred k.

On Tuesday 25 November 2003 13:11, Christian Pearce wrote:
> That is an interesting concept.  I have an automated process for building
> packages.  I was actually able to get the makefile editing to work.  It
> seems to me that automake and autoconf with a sprinkle of libtool should be
> able to handle this better.  But what do I know.  I certainly see value in
> being able to install the cfengine package and not have any dependencies.
> It is nice to just drop a package on the box with no other worries.  Thanks
> for the input Chip.
>
> --
> Christian Pearce
> http://www.commnav.com
>
> On Nov 25, 2003, Chip Seraphine wrote:
> > For what it's worth, I generally do things the lazy way-- tell configure
> > to look in some sandbox library directory, and populate it only with the
> > .a files.  No muss, no fuss, no makefile editing.
> >
> > On Monday 24 November 2003 14:31, oearcec wrote:
> > > "Luke A. Kanies" <address@hidden> wrote in message
> > > news:<address@hidden>...
> > >
> > > > Static linking is your friend, especially when it comes to your core
> > > > management tools.  Really.
> > > >
> > > > Now that each machine has the other's public key, just run cfagent
> > > > and the client (as long as you've got update.conf), and it should all
> > > > work fine from there.  If you haven't statically linked, this is a
> > > > much bigger pain, so I _really_ recommend static links.
> > >
> > > Luke,
> > >
> > > I have read a little bit on Google Groups about doing a static
> > > compile.  But I didn't come up with anything that worked completely.
> > > So far I did the edit the configure script by hand, replacing the
> > > -l{db,crypto} with static libraries.  But this didn't work on all the
> > > binaries.  Only cfagent, and cfservd.  There must be a better way.
> > > What method did you use to get a static build?
> > >
> > > Christian
> > > _______________________________________________
> > > Help-cfengine mailing list
> > > address@hidden
> > > http://mail.gnu.org/mailman/listinfo/help-cfengine




------------------------------

Message: 3
Date: Tue, 25 Nov 2003 18:41:58 -0500
From: Kurt Lieber <address@hidden>
Subject: collecting files from remote servers
To: address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset="iso-8859-1"

I'm using cfengine to deploy an IDS/file integrity checker (samhain) to our
servers.  This roll out requires a series of steps:

1) copy files from the master server to the clients
2) run some configuration stuff on the client
3) copy one file from the client back to the master server.

The third step is where I'm having problems.  As far as I can see, there is
no way to push a local file to a remote server short of resorting to a
shell command like scp or rsync.

The closest I've come to a solution so far is to call cfrun on the local
client and use -D<some special class> to execute cfagent on the master
server.  

I was hoping someone on the list had come up with a better way to do this.

--kurt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.gnu.org/pipermail/help-cfengine/attachments/20031125/e90f1756/attachment.bin

------------------------------

Message: 4
Date: Wed, 26 Nov 2003 08:19:45 +0100
From: Bas van der Vlies <address@hidden>
Subject: Re: [Cfengine] Resolve and purging
To: address@hidden
Cc: Alex Stade <address@hidden>, address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=us-ascii; format=flowed

Chip Seraphine wrote:

> The docs list this as a feature, so I'm sending this grumble to help- instead
> of bugs-.
>
> The resolve: section really needs some sort of purge attribute.  The syntax of
> it make it very nice for maintaining the resolver, but it's inability to
> remove lines make it impractical; you end up having to use editfiles: or
> copy: instead.  Editfiles is clumsy for maintaining entire files and copy:
> isn't a good choice when your basic assumption is that your network
> configuration is hosed.
>
> Before I go about writing/submitting a patch with a 'PurgeResolver' variable,
> is there a known reason why it (currently) won't delete lines?  I agree that
> it is reasonable default behavior, but making it mandatory severely limits
> the usefulness of resolve: to environments where old DNS servers never get
> decommissioned, nobody every makes typos, DNSs are never re-IP'd, etc.  This
> makes me think that the thinking behind this limitation is grounded in
> reasons other than technical, so I'd like to get some clarification lest I
> submit a patch that will just be shot down....
>
>
You have my vote. I was also ending up with old lines in my resolv.conf
and switched to copy/editfiles sequence. I can not think of a reason for it.

--
--
********************************************************************
*                                                                  *
*  Bas van der Vlies                     e-mail: address@hidden      *
*  SARA - Academic Computing Services    phone:  +31 20 592 8012   *
*  Kruislaan 415                         fax:    +31 20 6683167    *
*  1098 SJ Amsterdam                                               *
*                                                                  *
********************************************************************




------------------------------

Message: 5
Date: Thu, 27 Nov 2003 10:46:52 +1300
From: Fletch Hogan <address@hidden>
Subject: Updating files: db
To: address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=us-ascii; format=flowed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greets

Am just starting out with cfengine so this is proberbly a real simple
question, but I've been unable to figure it out.

I'm using the files: to creat md5 checksums and report errors.  I all
works well.  Except there was a recent update to a number of packages on
the system and so is now reporting the changes.  How do I update the md5
checksums?

I'm doing a
files:
                /usr                 mode=o-w                 checksum=md5                 r=inf                 action="">
Fletch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
xE08/+OKrs7QripLKt4W9Ck=
=hP3b
-----END PGP SIGNATURE-----




------------------------------

Message: 6
Date: Wed, 26 Nov 2003 22:52:38 +0100 (MET)
From: address@hidden
Subject: Re: Updating files: db
To: address@hidden
Cc: address@hidden
Message-ID: <address@hidden>
Content-Type: TEXT/plain; charset=us-ascii


ChecksumUpdates = ( true )

M

On 27 Nov, Fletch Hogan wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greets
>
> Am just starting out with cfengine so this is proberbly a real simple
> question, but I've been unable to figure it out.
>
> I'm using the files: to creat md5 checksums and report errors.  I all
> works well.  Except there was a recent update to a number of packages on
> the system and so is now reporting the changes.  How do I update the md5
> checksums?
>
> I'm doing a
> files:
>                  /usr                 mode=o-w                 checksum=md5                 r=inf                 action=""> >
> Fletch
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
> xE08/+OKrs7QripLKt4W9Ck=
> =hP3b
> -----END PGP SIGNATURE-----
>
>
>
> _______________________________________________
> Help-cfengine mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  address@hidden
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




------------------------------

Message: 7
Date: Wed, 26 Nov 2003 16:50:01 -0600
From: Frank Smith <address@hidden>
Subject: Re: Updating files: db
To: Fletch Hogan <address@hidden>, address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=us-ascii

I just add a shellcommand that rm's /var/cfengine/checksum.db that
only runs once.  I wish there was a way to just clear a particular
checksum, removing them all makes me nervous since there could be
a change sneak through before it gets rebuilt.

   debian.Yr2003.November.Day24.Hr19::
       "/bin/rm /var/cfengine/checksum.db"

Frank

--On Thursday, November 27, 2003 10:46:52 +1300 Fletch Hogan <address@hidden> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Greets
>
> Am just starting out with cfengine so this is proberbly a real simple
> question, but I've been unable to figure it out.
>
> I'm using the files: to creat md5 checksums and report errors.  I all
> works well.  Except there was a recent update to a number of packages on
> the system and so is now reporting the changes.  How do I update the md5
> checksums?
>
> I'm doing a
> files:
>                  /usr                 mode=o-w                 checksum=md5                 r=inf                 action=""> >
> Fletch
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
> xE08/+OKrs7QripLKt4W9Ck=
> =hP3b
> -----END PGP SIGNATURE-----
>
>
>
> _______________________________________________
> Help-cfengine mailing list
> address@hidden
> http://mail.gnu.org/mailman/listinfo/help-cfengine



--
Frank Smith                                      address@hidden
Systems Administrator                           Voice: 512-374-4673
Hoover's Online                                   Fax: 512-374-4501




------------------------------

Message: 8
Date: Thu, 27 Nov 2003 12:31:39 +1300
From: "Yue Han" <address@hidden>
Subject: why didn't I receive the email with output?
To: <address@hidden>
Message-ID:
                <address@hidden>
Content-Type: text/plain; charset="windows-1252"

Hi,

I just learned cfengine from scratch so I find myself a bit lost at the very beginning. What I have done is to install the version 2.0.1p1 and that seems work fine. I was creating a file cfagent.conf in which I set up the smtpserver as well as the sysadm. But it didn't send anything after I run cfagent.

Thanks in advance for help.

Cheers,
Vivi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 2560 bytes
Desc: not available
Url : http://mail.gnu.org/pipermail/help-cfengine/attachments/20031127/a994069c/attachment.bin

------------------------------

Message: 9
Date: Wed, 26 Nov 2003 15:38:20 -0800
From: Tod Oace <address@hidden>
Subject: Re: why didn't I receive the email with output?
To: "Yue Han" <address@hidden>
Cc: address@hidden
Message-ID: <address@hidden>
Content-Type: text/plain; charset=US-ASCII; format=flowed

On Nov 26, 2003, at 15:31, Yue Han wrote:

> I just learned cfengine from scratch so I find myself a bit lost at
> the very beginning. What I have done is to install the version 2.0.1p1
> and that seems work fine. I was creating a file cfagent.conf in which
> I set up the smtpserver as well as the sysadm. But it didn't send
> anything after I run cfagent.

cfexecd uses that variable to send email when it runs cfagent --
cfagent doesn't send the email itself.

--
Tod Oace, Intel Corporation <address@hidden>




------------------------------

_______________________________________________
Help-cfengine mailing list
address@hidden
http://mail.gnu.org/mailman/listinfo/help-cfengine


End of Help-cfengine Digest, Vol 12, Issue 20
*********************************************


reply via email to

[Prev in Thread] Current Thread [Next in Thread]