cluster:Cfengine/229

From Dgiref

Please open a NGI-DE ticket if you experience any Installation or Configuration problem.

cfengine v.2.2.9 server

Prepare

Strictly speaking, the cfengine software do not use a client-server model. It can be named as an agent-server model, where server is an agent, installed into the master host. The reference installation configuration are stored into the subversion (svn) repository of Karlsruhe Institute of Technology. Thus, some preparation steps include:

download the dgiref.repo from http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/repl/root/etc/yum.repos/dgiref.repo into /etc/yum.repos.d/
install subversion to communicate with svn server
to install the current CAs certificates manually, please use this link

Firewall configuration

Port 5308 should be open (how to open port in firewall).

administrator's script: prepare.sh

```
 
```
```
#!/bin/bash
```
```
# prepare cfengine masterhost
```
```
#-> start routine
```

REPO_URL="http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/cf3/repl/repos/external/"

wget -O /etc/yum.repos.d/sl-dgiref.repo ${REPO_URL}/sl-dgiref.repo

```
yum -y install subversion
```
```
#<- end routine
```

Install

The following step is needed to install a cfengine server (execute as root user):

use yum or rpm to install cfengine masterhost from http://mirror.scc.kit.edu/downloads/

administrator's script: install.sh

```
 
```
```
#!/bin/bash
```
```
# install cfengine masterhost
```
```
# load parameters from prepare section
```
```
cd `dirname $0`
```
```
source prepare.sh
```
```
 
```
```
#-> start routine
```
```
# Choose the OS architecture: 
```
```
OS_arch="x86_64"    # x86_64 for 64 bit
```
```
# OS_arch="i386"    # i386 for 32 bit
```
```
OS="el4"          # el5 for SL5
```
```
 
```

yum -y install cfengine-2.2.9-1.$OS.rf.${OS_arch}

```
#<- end routine
```

Configure

Step-by-step instruction to configure the cfengine agent onto the master host:

download the cf.preconf from http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD into cfengine directory /var/cfengine/
download the update-cfg configuration file from http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD into cfengine directory /var/cfengine/
change mode for cf.preconf and update-cfg to executable
run cfagent -qv --update-only to constrain cfengine master host configuration
update your site configuration with update-cfg script, by changing the cfengine classes values to the current site configuration.

administrator's script: configure.sh

```
 
```
```
#!/bin/bash
```
```
# configure
```

# To adapt the reference configurations to the needs of others sites

# there is the script update-cfg to change the value in the configuration

# recursively. To check the current site configuration see

# masterfiles/PROD/inputs/classes/classes_site.cf

```
#
```

# to setup configuration for other then dgiref certification site, execute:

# sh update-cfg /var/cfengine/ 10.0.171.205 <your cfengine masterhost ip>

# sh update-cfg /var/cfengine/ fzk.de <your site domain>

# so on for every necessary class declaration in the

# masterfiles/PROD/inputs/classes/classes_site.cf

```
#
```

# Declare the variables section ------------

# Please insert your actual configuration

```
# DOMAIN=domain name
```

# MASTERHOST=cfengine masterhost address

# from here ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

```
DOMAIN=fzk.de
```
```
MASTERHOST=10.0.171.205
```

# till here ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

```
 
```
```
 
```
```
#-> start routine
```

wget -O /var/cfengine/cf.preconf http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/cf.preconf

wget -O /var/cfengine/update-cfg http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/update-cfg

```
 
```
```
chmod +x /var/cfengine/cf.preconf 
```
```
chmod +x /var/cfengine/update-cfg
```
```
 
```

echo `sh /var/cfengine/update-cfg /var/cfengine/cf.preconf 10.0.171.205 $MASTERHOST`

echo `sh /var/cfengine/update-cfg /var/cfengine/cf.preconf fzk.de $DOMAIN`

```
 
```
```
cfagent -qv --update-only
```
```
 
```

# sh update-cfg /var/cfengine/ dgiref-isn01 <your cfengine masterhost>

```
 
```
```
#<- end routine
```

Proceed

To run cfengine agent, type

cfagent or
cfagent -qv for verbose mode or
cfagent -qvK immediately execute without scheduling.

administrator's script: proceed.sh

```
 
```
```
#!/bin/bash
```
```
# proceed cfengine masterhost
```
```
#-> start routine
```
```
cfagent -qv
```
```
#<- end routine
```

Initial test

Try examining the output:

administrator's script: test.sh

```
 
```
```
#!/bin/bash
```
```
# test
```
```
cfagent -qvK
```

Update

To update/remove cfengine packages, use:

administrator's script: update.sh

```
 
```
```
#!/bin/bash
```
```
# update
```

Please open a NGI-DE ticket if you experience any Installation or Configuration problem.

cfengine v.2.2.9 client

Prepare

Download the dgiref.repo from http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/repl/root/etc/yum.repos/sl-dgiref.repo into /etc/yum.repos.d/ to prepare cfengine client installation.

Firewall configuration

Port 5308 should be open (how to open port in firewall).

administrator's script: prepare.sh

```
 
```
```
#!/bin/bash
```
```
# prepare cfengine clienthost
```
```
#-> start routine
```

REPO_URL="http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/cf3/repl/repos/external/"

wget -O /etc/yum.repos.d/sl-dgiref.repo ${REPO_URL}/sl-dgiref.repo

```
#<- end routine
```

Install

The following step is needed to install a cfengine client (execute as root user):

use yum or rpm to install cfengine masterhost from http://mirror.scc.kit.edu/downloads/

administrator's script: install.sh

```
 
```
```
#!/bin/bash
```
```
# install cfengine clienthost
```
```
# load parameters from prepare section
```
```
cd `dirname $0`
```
```
source prepare.sh
```
```
#-> start routine
```
```
# Choose the OS architecture: 
```
```
OS_arch="x86_64"    # x86_64 for 64 bit
```
```
# OS_arch="i386"    # i386 for 32 bit
```
```
OS="el4"          # el5 for SL5
```
```
 
```

yum -y install cfengine-2.2.9-1.$OS.rf.${OS_arch}

```
#<- end routine
```

Configure

Step-by-step instruction to configure the cfengine agent onto the host:

download the cf.preconf configuration file from http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/inputs/cf.preconf or your cfengine server (master host) /etc/cfengine/inputs directory into cfengine directory /etc/cfengine/
change mode for cf.preconf to executable
run cfagent -qv --update-only to create cfengine clienthost configuration
run cfagent -qv to execute cfengine clienthost configuration

WARNING: 
if you have problems with keys, make the key exchange
 copy server public key to client:
scp root@$MASTERHOST:/var/cfengine/ppkeys/localhost.pub root@$CLIENT:/var/cfengine/ppkeys/root-$MASTERHOST.pub
 copy client public key to server:
scp root@$CLIENT:/var/cfengine/ppkeys/localhost.pub root@$MASTERHOST:/var/cfengine/ppkeys/root-$CLIENT.pub

administrator's script: configure.sh

```
 
```
```
#!/bin/bash
```
```
# configure cfengine clienthost
```
```
 
```

# Declare the variables section ------------

# Please insert your actual configuration

```
# DOMAIN=domain name
```

# MASTERHOST=cfengine masterhost address

# from here ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

```
DOMAIN=fzk.de
```
```
MASTERHOST=10.0.171.205
```
```
CLIENT=$(hostname -a)
```

# till here ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

```
 
```
```
#-> start routine
```

# copy the preconfiguration file from repo to client with update-cfg script:

wget -O /var/cfengine/cf.preconf http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/inputs/cf.preconf

wget -O /var/cfengine/update-cfg http://svn.rz.uni-karlsruhe.de/svn/dgiref/PROD/update-cfg

```
 
```
```
chmod +x /var/cfengine/cf.preconf 
```
```
chmod +x /var/cfengine/update-cfg
```

echo `sh /var/cfengine/update-cfg /var/cfengine/cf.preconf dgiref-isn01 $MASTERHOST`

echo `sh /var/cfengine/update-cfg /var/cfengine/cf.preconf fzk.de $DOMAIN`

```
 
```
```
cfagent -qv --update-only
```
```
#<- end routine
```

Proceed

To run cfengine agent, type

cfagent or
cfagent -qv for verbose mode or
cfagent -qvK immediately execute without scheduling.

administrator's script: proceed.sh

```
 
```
```
#!/bin/bash
```
```
# proceed cfengine clienthost
```
```
#-> start routine
```
```
cfagent -qv
```
```
#<- end routine
```

Initial test

Try examining the output:

administrator's script: test.sh

```
 
```
```
#!/bin/bash
```
```
# test
```
```
cfagent -qvK
```

Update

To update/remove cfengine packages, use:

administrator's script: update.sh

```
 
```
```
#!/bin/bash
```
```
# update
```

cluster:Cfengine/229

Contents

cfengine v.2.2.9 server

Prepare

Install

Configure

Proceed

Initial test

Update

cfengine v.2.2.9 client

Prepare

Install

Configure

Proceed

Initial test

Update

Views

Personal tools

general

guidelines

reference installation

Search

internal

Toolbox