1cfengine(8) System Manager's Manual cfengine(8)
2
6 cfengine - network configuration engine
7
9 /usr/local/sbin/cfagent [options]
10 /usr/local/sbin/cfrun [options]
12 /usr/local/sbin/cfservd
14 /usr/local/sbin/cfexecd
16 /usr/local/sbin/cfenvd
18 /usr/local/sbin/cfkey
20 /usr/local/sbin/cfenvgraph
22
25 cfengine is a language based system specifically designed for testing
26 and configuring unix-like systems attached to a TCP/IP network. You can
27 think of cfengine as a very high level language -- much higher level
28 than Perl or shell. A single statement can result in many hundreds of
29 links being created, or the permissions of many hundreds of files being
30 set. The idea of cfenginge is to create a single file or set of config‐
31 uration files which will describe the setup of every host on your net‐
32 work.
33 cfagent runs on every host and parses one file (or file-set), the con‐
35 figuration of the host is checked against this file and, if desired,
36 any deviations are fixed. cfagent reads a configuration file called
37 cfengine.conf in a directory pointed to by the environment variable
38 CFINPUTS. cfagent performs host integrity and security checks as well
39 as installing and repairing system configuration.
40
42 -a (--sysadm) Print only the name of the system administra‐
43 tor then quit.
44 -b (--force-net-copy) Forces net copy even if remote server is
46 localhost
47 -c (--no-check-files) Do not check access rights on file systems
49 -C (--no-check-mounts) Check mount points for consistency. If this
51 option is set then directories which lie in
52 the ”mount point“ area are checked to see
53 whether there is anything mounted on them.
54 -d (--debug) Enable debugging output. (parsing -d1,run,
56 -d2, lite -d3)
57 -D (--define) Define a compound class symbol of the form
59 alpha.beta.gamma.
60 -e (--no-edits) Suppress file editing.
62 -E (--enforce-links) Globally force links to be created where plain
64 files or links already exist. You have to use
65 this in interactive mode and answer a yes/no
66 query before cfagent will run like this.
67 -f (--file) Parse filename after this switch. By default
69 cfagent looks for a file called cfengine.conf
70 in the current directory.
71 -h (--help ) Help information. Display version banner and
73 options summary.
74 -H (--no-hard-classes) Prevents cfagent from generating any internal
76 class name information. Can be used for emula‐
77 tion purposes.
78 -i (--no-ifconfig) Do not attempt to configure the local area
80 network interface.
81 -I (--inform) Switches on the inform output level, whereby
83 cfagent reports everything it changes..
84 -k (--no-copy) Do not copy/image any files.
86 -K (--no-lock) Ignore locks when running.
88 -l (--traverse-links) Normally cfagent does not follow symbolic
90 links when recursively parsing directories.
91 This option will force it to do so.
92 -L (--delete-stale-links)
94 Delete links which do not point to existing
95 files (except in user home directories, which
96 are not touched).
97 -m (--no-mount) Do not attempt to mount file systems or edit
99 the filesystem table.
100 -M (--no-modules) Ignore modules in actionsequence.
102 -n (--recon,--dry-run,--just-print)
104 No action. Only print what has to be done
105 without actually doing it.
106 -N (--negate,--undefine) Cancel a set of classes, or undefine (set
108 value to false) a compound class of the form
109 alpha.beta.gamma.
110 -p (--parse-only) Parse file and then stop. Used for checking
112 the syntax of a program.
113 -q (--no-splay) Switch off host splaying (sleeping).
115 -s (--no-commands) Do not execute scripts or shell commands.
117 -S (--silent) Silence run time warnings.
119 -t (--no-tidy) Do not tidy file systems.
121 -u (--use-env) Causes cfagent to generate an environment
123 variable CFALLCLASSES which can be read by
124 child processes (scripts). This variable con‐
125 tains a summary of all the currently defined
126 classes at any given time. This option causes
127 some system 5 systems to generate a Bus Error
128 or segmentation fault.
129 -U (--underscore-classes)
131 When this option is set, cfagent adds an
132 underscore to the beginning of all hard system
133 classes (like _sun4, _linux etc.) This can be
134 used to avoid naming conflicts if you are so
135 injudicious as to name a host by the name of a
136 hard class. Other classes are not affected.
137 -v (--verbose) Verbose mode. Prints detailed information
139 about actions and state.
140 -V (--version) Print only the version string and then quit.
142 -x (--no-preconf) Do not execute the cf.preconf net configura‐
144 tion file.
145 -X (--no-links) Do not execute the links section of a program.
147 -w (--no-warn,--quiet) Do not print warning messages.
149
151 Mark Burgess, Oslo University College
152
154 http://www.cfengine.org
155HiOslo Maintenance Commands cfengine(8)