Does copy operation checks for the timestamp ?

[Harish Chauhan]

Hi,

Just wanted to check if  "COPY:"
 operation checks for the time stamp of the files before actually
copying / updating the files ?

Thanks in advance.

Regards, Harish Chauhan

help-cfengine-request@gnu.org Sent by: help-cfengine-bounces+harish=us.ibm.com@gnu.org 11/26/2003 07:46 PM Please respond to help-cfengine

To:        help-cfengine@gnu.org         cc:                 Subject:        Help-cfengine Digest, Vol 12, Issue 20

Send Help-cfengine mailing list submissions to
                
help-cfengine@gnu.org

To subscribe or unsubscribe via the World Wide Web, visit
                
http://mail.gnu.org/mailman/listinfo/help-cfengine
or, via email, send a message with subject or body 'help' to
                
help-cfengine-request@gnu.org

You can reach the person managing the list at
                
help-cfengine-owner@gnu.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Help-cfengine digest..."


Today's Topics:

   1. Re: bootstrapping cfengine. (Christian Pearce)
   2. Re: bootstrapping cfengine. (Chip Seraphine)
   3. collecting files from remote servers (Kurt Lieber)
   4. Re: [Cfengine] Resolve and purging (Bas van der Vlies)
   5. Updating files: db (Fletch Hogan)
   6. Re: Updating files: db (Mark.Burgess@iu.hio.no)
   7. Re: Updating files: db (Frank Smith)
   8. why didn't I receive the email with output? (Yue Han)
   9. Re: why didn't I receive the email with output? (Tod Oace)


----------------------------------------------------------------------

Message: 1
Date: Tue, 25 Nov 2003 19:11:03 GMT
From: "Christian Pearce" <pearcec@commnav.com>
Subject: Re: bootstrapping cfengine.
To: chip@trdlnk.com
Cc: help-cfengine@gnu.org, oearcec <pearcec@commnav.com>
Message-ID: <29268.209.92.42.67.1069787463.commnav@home.commnav.com>
Content-Type: text/plain

That is an interesting concept.  I have an automated process for building
packages.  I was actually able to get the makefile editing to work.
 It seems to me that automake and autoconf with a sprinkle of libtool
should be able to handle this better.  But what do I know.  I
certainly see value in being able to install the cfengine package and not
have any dependencies.  It is nice to just drop a package on the box
with no other worries.  Thanks for the input Chip.

--
Christian Pearce
http://www.commnav.com



On Nov 25, 2003, Chip Seraphine wrote:
> 
> 
> For what it's worth, I generally do things the lazy way-- tell configure
to 
> look in some sandbox library directory, and populate it only with
the .a 
> files.  No muss, no fuss, no makefile editing.
> 
> On Monday 24 November 2003 14:31, oearcec wrote:
> > "Luke A. Kanies" <luke@madstop.com> wrote in
message
> > news:<mailman.192.1068609271.2005.help-cfengine@gnu.org>...
> >
> > > Static linking is your friend, especially when it comes
to your core
> > > management tools.  Really.
> > >
> > > Now that each machine has the other's public key, just run
cfagent and
> > > the client (as long as you've got update.conf), and it should
all work
> > > fine from there.  If you haven't statically linked,
this is a much bigger
> > > pain, so I _really_ recommend static links.
> >
> > Luke,
> >
> > I have read a little bit on Google Groups about doing a static
> > compile.  But I didn't come up with anything that worked
completely.
> > So far I did the edit the configure script by hand, replacing
the
> > -l{db,crypto} with static libraries.  But this didn't work
on all the
> > binaries.  Only cfagent, and cfservd.  There must be
a better way.
> > What method did you use to get a static build?
> >
> > Christian
> > _______________________________________________
> > Help-cfengine mailing list
> > Help-cfengine@gnu.org
> > http://mail.gnu.org/mailman/listinfo/help-cfengine
> 
>



------------------------------

Message: 2
Date: Tue, 25 Nov 2003 13:39:18 -0600
From: Chip Seraphine <chip@trdlnk.com>
Subject: Re: bootstrapping cfengine.
To: "Christian Pearce" <pearcec@commnav.com>
Cc: help-cfengine@gnu.org, oearcec <pearcec@commnav.com>
Message-ID: <200311251339.18541.chip@trdlnk.com>
Content-Type: text/plain;  charset="iso-8859-1"

Not having dependencies in cfengine and core admin tools is good, as Luke
pointed out earlier.  If one of the purposes of a tool is to help
the system 
recover from some calamity (down network, misconfiguration, hosed 
environment, whatever) then the fewer assumptions you make about the state
of 
the system, the better. 

The downside is that your executables are bigger, but I've found that if
I run 
strip(1) on them the difference between a dynamically-linked and a 
staticically-linked executable is often only a few hundred k.

On Tuesday 25 November 2003 13:11, Christian Pearce wrote:
> That is an interesting concept.  I have an automated process
for building
> packages.  I was actually able to get the makefile editing to
work.  It
> seems to me that automake and autoconf with a sprinkle of libtool
should be
> able to handle this better.  But what do I know.  I certainly
see value in
> being able to install the cfengine package and not have any dependencies.
> It is nice to just drop a package on the box with no other worries.
 Thanks
> for the input Chip.
>
> --
> Christian Pearce
> http://www.commnav.com
>
> On Nov 25, 2003, Chip Seraphine wrote:
> > For what it's worth, I generally do things the lazy way-- tell
configure
> > to look in some sandbox library directory, and populate it only
with the
> > .a files.  No muss, no fuss, no makefile editing.
> >
> > On Monday 24 November 2003 14:31, oearcec wrote:
> > > "Luke A. Kanies" <luke@madstop.com> wrote
in message
> > > news:<mailman.192.1068609271.2005.help-cfengine@gnu.org>...
> > >
> > > > Static linking is your friend, especially when it comes
to your core
> > > > management tools.  Really.
> > > >
> > > > Now that each machine has the other's public key, just
run cfagent
> > > > and the client (as long as you've got update.conf),
and it should all
> > > > work fine from there.  If you haven't statically
linked, this is a
> > > > much bigger pain, so I _really_ recommend static links.
> > >
> > > Luke,
> > >
> > > I have read a little bit on Google Groups about doing a
static
> > > compile.  But I didn't come up with anything that worked
completely.
> > > So far I did the edit the configure script by hand, replacing
the
> > > -l{db,crypto} with static libraries.  But this didn't
work on all the
> > > binaries.  Only cfagent, and cfservd.  There must
be a better way.
> > > What method did you use to get a static build?
> > >
> > > Christian
> > > _______________________________________________
> > > Help-cfengine mailing list
> > > Help-cfengine@gnu.org
> > > http://mail.gnu.org/mailman/listinfo/help-cfengine




------------------------------

Message: 3
Date: Tue, 25 Nov 2003 18:41:58 -0500
From: Kurt Lieber <klieber@gentoo.org>
Subject: collecting files from remote servers
To: help-cfengine@gnu.org
Message-ID: <20031125234158.GH21905@mail.lieber.org>
Content-Type: text/plain; charset="iso-8859-1"

I'm using cfengine to deploy an IDS/file integrity checker (samhain) to
our
servers.  This roll out requires a series of steps:

1) copy files from the master server to the clients
2) run some configuration stuff on the client
3) copy one file from the client back to the master server.

The third step is where I'm having problems.  As far as I can see,
there is
no way to push a local file to a remote server short of resorting to a
shell command like scp or rsync. 

The closest I've come to a solution so far is to call cfrun on the local
client and use -D<some special class> to execute cfagent on the master
server.  

I was hoping someone on the list had come up with a better way to do this.

--kurt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.gnu.org/pipermail/help-cfengine/attachments/20031125/e90f1756/attachment.bin

------------------------------

Message: 4
Date: Wed, 26 Nov 2003 08:19:45 +0100
From: Bas van der Vlies <basv@sara.nl>
Subject: Re: [Cfengine] Resolve and purging
To: chip@trdlnk.com
Cc: Alex Stade <alex@trdlnk.com>, help-cfengine@gnu.org
Message-ID: <3FC45411.7010202@sara.nl>
Content-Type: text/plain; charset=us-ascii; format=flowed

Chip Seraphine wrote:

> The docs list this as a feature, so I'm sending this grumble to help-
instead 
> of bugs-.
> 
> The resolve: section really needs some sort of purge attribute.  The
syntax of 
> it make it very nice for maintaining the resolver, but it's inability
to 
> remove lines make it impractical; you end up having to use editfiles:
or 
> copy: instead.  Editfiles is clumsy for maintaining entire files
and copy: 
> isn't a good choice when your basic assumption is that your network
> configuration is hosed.
> 
> Before I go about writing/submitting a patch with a 'PurgeResolver'
variable, 
> is there a known reason why it (currently) won't delete lines?  I
agree that 
> it is reasonable default behavior, but making it mandatory severely
limits 
> the usefulness of resolve: to environments where old DNS servers never
get 
> decommissioned, nobody every makes typos, DNSs are never re-IP'd,
etc.  This 
> makes me think that the thinking behind this limitation is grounded
in 
> reasons other than technical, so I'd like to get some clarification
lest I 
> submit a patch that will just be shot down....
> 
> 
You have my vote. I was also ending up with old lines in my resolv.conf
and switched to copy/editfiles sequence. I can not think of a reason for
it.

-- 
--
********************************************************************
*                    
                     
                     
 *
*  Bas van der Vlies              
      e-mail: basv@sara.nl      *
*  SARA - Academic Computing Services    phone:  +31
20 592 8012   *
*  Kruislaan 415              
          fax:    +31 20 6683167  
 *
*  1098 SJ Amsterdam              
                     
          *
*                    
                     
                     
 *
********************************************************************




------------------------------

Message: 5
Date: Thu, 27 Nov 2003 10:46:52 +1300
From: Fletch Hogan <fletch@prophecy.net.nz>
Subject: Updating files: db
To: help-cfengine@gnu.org
Message-ID: <3FC51F4C.7000509@prophecy.net.nz>
Content-Type: text/plain; charset=us-ascii; format=flowed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greets

Am just starting out with cfengine so this is proberbly a real simple
question, but I've been unable to figure it out.

I'm using the files: to creat md5 checksums and report errors.  I
all
works well.  Except there was a recent update to a number of packages
on
the system and so is now reporting the changes.  How do I update the
md5
checksums?

I'm doing a
files:
                
/usr                
mode=o-w                
checksum=md5                
r=inf                
action="">
Fletch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
xE08/+OKrs7QripLKt4W9Ck=
=hP3b
-----END PGP SIGNATURE-----




------------------------------

Message: 6
Date: Wed, 26 Nov 2003 22:52:38 +0100 (MET)
From: Mark.Burgess@iu.hio.no
Subject: Re: Updating files: db
To: fletch@prophecy.net.nz
Cc: help-cfengine@gnu.org
Message-ID: <200311262152.hAQLqcMq009022@nexus.iu.hio.no>
Content-Type: TEXT/plain; charset=us-ascii


ChecksumUpdates = ( true )

M

On 27 Nov, Fletch Hogan wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Greets
> 
> Am just starting out with cfengine so this is proberbly a real simple
> question, but I've been unable to figure it out.
> 
> I'm using the files: to creat md5 checksums and report errors.  I
all
> works well.  Except there was a recent update to a number of
packages on
> the system and so is now reporting the changes.  How do I update
the md5
> checksums?
> 
> I'm doing a
> files:
>                  /usr
               
mode=o-w                
checksum=md5                
r=inf                
action="">
> 
> Fletch
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
> xE08/+OKrs7QripLKt4W9Ck=
> =hP3b
> -----END PGP SIGNATURE-----
> 
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :
 http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




------------------------------

Message: 7
Date: Wed, 26 Nov 2003 16:50:01 -0600
From: Frank Smith <fsmith@hoovers.com>
Subject: Re: Updating files: db
To: Fletch Hogan <fletch@prophecy.net.nz>, help-cfengine@gnu.org
Message-ID: <9900000.1069887001@hoovers-59.hoovers.com>
Content-Type: text/plain; charset=us-ascii

I just add a shellcommand that rm's /var/cfengine/checksum.db that
only runs once.  I wish there was a way to just clear a particular
checksum, removing them all makes me nervous since there could be
a change sneak through before it gets rebuilt.

    debian.Yr2003.November.Day24.Hr19::
        "/bin/rm /var/cfengine/checksum.db"

Frank

--On Thursday, November 27, 2003 10:46:52 +1300 Fletch Hogan <fletch@prophecy.net.nz>
wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Greets
> 
> Am just starting out with cfengine so this is proberbly a real simple
> question, but I've been unable to figure it out.
> 
> I'm using the files: to creat md5 checksums and report errors.  I
all
> works well.  Except there was a recent update to a number of
packages on
> the system and so is now reporting the changes.  How do I update
the md5
> checksums?
> 
> I'm doing a
> files:
>                  /usr
               
mode=o-w                
checksum=md5                
r=inf                
action="">
> 
> Fletch
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQE/xR9Mp/DMjn0yTygRAnv6AKCUC0VXJRjUHEUS2h9N/cH+Oeq2/QCgop+9
> xE08/+OKrs7QripLKt4W9Ck=
> =hP3b
> -----END PGP SIGNATURE-----
> 
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



-- 
Frank Smith                  
                   fsmith@hoovers.com
Systems Administrator              
            Voice: 512-374-4673
Hoover's Online                
                  Fax: 512-374-4501




------------------------------

Message: 8
Date: Thu, 27 Nov 2003 12:31:39 +1300
From: "Yue Han" <yh44@waikato.ac.nz>
Subject: why didn't I receive the email with output?
To: <help-cfengine@gnu.org>
Message-ID:
                
<B862DE3167B6FF458BA552FD6C64F18F01449105@its-e2k4.waikato.ac.nz>
Content-Type: text/plain; charset="windows-1252"

Hi,

I just learned cfengine from scratch so I find myself a bit lost at the
very beginning. What I have done is to install the version 2.0.1p1 and
that seems work fine. I was creating a file cfagent.conf in which I set
up the smtpserver as well as the sysadm. But it didn't send anything after
I run cfagent.

Thanks in advance for help.

Cheers,
Vivi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 2560 bytes
Desc: not available
Url : http://mail.gnu.org/pipermail/help-cfengine/attachments/20031127/a994069c/attachment.bin

------------------------------

Message: 9
Date: Wed, 26 Nov 2003 15:38:20 -0800
From: Tod Oace <tod.r.oace@intel.com>
Subject: Re: why didn't I receive the email with output?
To: "Yue Han" <yh44@waikato.ac.nz>
Cc: help-cfengine@gnu.org
Message-ID: <9DFB743C-2069-11D8-9FA8-000A95C47858@intel.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed

On Nov 26, 2003, at 15:31, Yue Han wrote:

> I just learned cfengine from scratch so I find myself a bit lost at
> the very beginning. What I have done is to install the version 2.0.1p1
> and that seems work fine. I was creating a file cfagent.conf in which
> I set up the smtpserver as well as the sysadm. But it didn't send
> anything after I run cfagent.

cfexecd uses that variable to send email when it runs cfagent -- 
cfagent doesn't send the email itself.

-- 
Tod Oace, Intel Corporation <tod@intel.com>




------------------------------

_______________________________________________
Help-cfengine mailing list
Help-cfengine@gnu.org
http://mail.gnu.org/mailman/listinfo/help-cfengine


End of Help-cfengine Digest, Vol 12, Issue 20
*********************************************