[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: standalone cfagent script execution

From: Peter Daum
Subject: Re: standalone cfagent script execution
Date: Wed, 25 Jan 2006 21:57:36 +0100
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050314 Mnenhy/0.7.1

As far as I can see so far, it looks like I'd have to skip the calls
to PersistentClassesToHeap, CheckWorkDirectories and  LoadSecretKeys
from cfagent.c to get what I need. I didn't yet investigate whether
this would cause any non-obvious side effects...

I guess some command line switch to do this would be good
(if there is still an unused character left ;-)

                      Peter Daum

Brendan Strejcek wrote:

cfagent always requires host keys, even if there are no network copies.
It seems like it might be good to relax this requirement, but I don't
understand all the issues involved. If you run cfagent as an unprivileged
user, keys should be in ~/.cfagent/ppkeys/.

$ cfkey Making a key pair for cfengine, please wait, this could take a minute...
    Writing private key to /home/asdf/.cfagent/ppkeys/localhost.priv
    Writing public key to /home/asdf/.cfagent/ppkeys/
Other than that though, cfagent does not require any infrastructure
(like /var/cfengine) to exist to be able to be used as an interpreter in
#! scripts.

So, if creating *any* files or directories is not acceptable to you,
then you will not be able to use cfengine as it currently exists. If
you are willing to create keys (that will never be used in your setup),
then it should work fine. If you run cfagent as root, keys may need to
be in the workdir (/var/cfengine/ppkeys). This could be identical on all
machines though.


Senior System Administrator
The University of Chicago
Department of Computer Science

reply via email to

[Prev in Thread] Current Thread [Next in Thread]