Petit Démarrage de Cfengine par une configuration simple
Toujours en fonction des variables et des actions !!!!<\/p>\n
——————————————–
root@solaris10:# more cf.actions
groups:
any::
tp_always = ( any )<\/p>\n
alerts:
zone1::
"ZONE ONE"<\/p>\n
alerts:
zone2::
"ZONE TWOOOOOOOOOOO"<\/p>\n
alerts:
sol_10::
"les 2 solaris"<\/p>\n
solaris::
" solaris defauult"
> \/var\/cfengine\/master
———————————————
root@solaris10:# more cf.sunactions
##############################################################
groups:
sol_10::
sys_ntpdate = ( tp_always )<\/p>\n
##############################################################<\/p>\n
———————————————
root@solaris10:# more cf.variables
groups:
sol_10::
sys_ntpdate = ( tp_always )
———————————————
root@solaris10:# more cfservd.conf
#########################################################
#
# This is a cfd config file
#
control:<\/p>\n
domain = ( lookit.org )
AllowConnectionsFrom = ( 192.168.0.0\/24 )
AllowUsers = ( root )
TrustKeysFrom = ( 192.168.0.0\/24 )
any::<\/p>\n
ChecksumDatabase = ( \/tmp\/testDATABASEcache )
IfElapsed = ( 1 )
MaxConnections = ( 100 )<\/p>\n
#########################################################<\/p>\n
admit: # or grant:<\/p>\n
# Autorisation de transferts de fichiers du serveur vers les clients sur les reseaux ip suivants:
\/var\/cfengine\/master 192.168.0.*
————————————————-
root@solaris10:# more cf.groups
groups:<\/p>\n
zone_one = ( zone1 )<\/p>\n
zone_two = ( zone2 )<\/p>\n
sol_10 = ( solaris10 zone1 zone2 )
———————————————
root@solaris10:# more cfagent.conf
################################################################
#
# cfagent.conf basique, tout juste fonctionnel.
# Le même qui nous a servi à étudier la syntaxe de cfengine.
#
################################################################<\/p>\n
control:<\/p>\n
domain = ( lookit.org )
timezone = ( CET )
actionsequence = ( checktimezone shellcommands )
sysadm = ( nsl@free.fr )<\/p>\n
any::
Access = ( root )
schedule = ( Min00_05 )
IfElapsed = ( 5 )
ExpireAfter = ( 60 )
EditfileSize = ( 80000 )<\/p>\n
shellcommands:<\/p>\n
"\/bin\/cp \/var\/cfengine\/inputs\/conf\/resolv.conf_other \/etc\/resolv.conf"
"\/bin\/cp \/var\/cfengine\/inputs\/conf\/profile \/.profile"
"\/bin\/cp \/var\/cfengine\/inputs\/conf\/profile \/.bashrc"
"\/bin\/cp \/var\/cfengine\/inputs\/conf\/profile \/etc\/profile"<\/p>\n
import:
any::
cf.variables
cf.sunsystem
cf.groups
cf.actions
cf.sunactions
———————————————
root@solaris10:# more update.conf
control:<\/p>\n
domain = ( lookit.org )
actionsequence = ( copy )
policyhost = ( solaris10 )
masterdir = ( \/var\/cfengine\/master )
localdir = ( \/var\/cfengine )
AllowRedefinitionOf = ( SplayTime )
SplayTime = ( 55 )
TrustKeysFrom = ( solaris10 )
sysadm = ( root@localhost )
smtpserver = ( localhost )
workdir = ( \/var\/cfengine )
install_dir = ( \/usr\/local\/sbin )
timezone = ( CET )
copy:
any::
$(masterdir) dest=$(localdir)\/inputs
server=$(policyhost)
r=inf
# Option obligatoire car copie de répertoire.'r' pour récursif
# (peut également s'écrire 'recurse'). 'inf' pour niveau maximum de récursivité,
# ici pas vraiment nécessaire, mais bon.<\/p>\n
purge=true
# Sans cette option, 'copy' générerait des fichiers *.cfsaved
# dans le répertoire de destination.
# Ici, nous obtiendrons une réplication exacte et fidèle du répertoire source, sans plus.<\/p>\n
type=binary
mode=644
# Là, 'copy' se "contente" de vérifier les permissions d'accès des fichiers
# présents dans $(localdir)\/inputs, et de corriger le tir en cas de besoin.<\/p>\n
trustkey=true
———————————————<\/p>\n","protected":false},"excerpt":{"rendered":"
Petit Démarrage de Cfengine par une configuration simple<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[8],"tags":[],"class_list":["post-108","post","type-post","status-publish","format-standard","hentry","category-informatique"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/sWrTo-cfengine","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/108","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=108"}],"version-history":[{"count":0,"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/108\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=108"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=108"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.lookit.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=108"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}