1cfengine(8) System Manager's Manual cfengine(8)
2
6 cfagent - system configuration agent
7
9 /usr/local/sbin/cfagent [options]
10
13 cfengine is a language based system specifically designed for testing
14 and configuring unix-like systems attached to a TCP/IP network. You can
15 think of cfengine as a very high level language -- much higher level
16 than Perl or shell. A single statement can result in many hundreds of
17 links being created, or the permissions of many hundreds of files being
18 set. The idea of cfengine is to create a single file or set of configu‐
19 ration files which will describe the setup of every host on your net‐
20 work.
21 cfagent runs on every host and parses one file (or file-set), the con‐
23 figuration of the host is checked against this file and, if desired,
24 any deviations are fixed. cfagent reads a configuration file called
25 cfengine.conf in a directory pointed to by the environment variable
26 CFINPUTS. cfagent performs host integrity and security checks as well
27 as installing and repairing system configuration.
28
30 -a (--sysadm) Print only the name of the system administra‐
31 tor then quit.
32 -b (--force-net-copy) Forces net copy even if remote server is
34 localhost
35 -c (--no-check-files) Do not check access rights on file systems
37 -C (--no-check-mounts) Check mount points for consistency. If this
39 option is set then directories which lie in
40 the ”mount point“ area are checked to see
41 whether there is anything mounted on them.
42 -d (--debug) Enable debugging output. (parsing -d1,run,
44 -d2, lite -d3)
45 -D (--define) Define a compound class symbol of the form
47 alpha.beta.gamma.
48 -e (--no-edits) Suppress file editing.
50 -E (--enforce-links) Globally force links to be created where plain
52 files or links already exist. You have to use
53 this in interactive mode and answer a yes/no
54 query before cfagent will run like this.
55 -f (--file) Parse filename after this switch. By default
57 cfagent looks for a file called cfengine.conf
58 in the current directory.
59 -h (--help ) Help information. Display version banner and
61 options summary.
62 -H (--no-hard-classes) Prevents cfagent from generating any internal
64 class name information. Can be used for emula‐
65 tion purposes.
66 -i (--no-ifconfig) Do not attempt to configure the local area
68 network interface.
69 -I (--inform) Switches on the inform output level, whereby
71 cfagent reports everything it changes..
72 -k (--no-copy) Do not copy/image any files.
74 -K (--no-lock) Ignore locks when running.
76 -l (--traverse-links) Normally cfagent does not follow symbolic
78 links when recursively parsing directories.
79 This option will force it to do so.
80 -L (--delete-stale-links)
82 Delete links which do not point to existing
83 files (except in user home directories, which
84 are not touched).
85 -m (--no-mount) Do not attempt to mount file systems or edit
87 the filesystem table.
88 -M (--no-modules) Ignore modules in actionsequence.
90 -n (--recon,--dry-run,--just-print)
92 No action. Only print what has to be done
93 without actually doing it.
94 -N (--negate,--undefine) Cancel a set of classes, or undefine (set
96 value to false) a compound class of the form
97 alpha.beta.gamma.
98 -p (--parse-only) Parse file and then stop. Used for checking
100 the syntax of a program.
101 -P (--no-processes) Do not test the existence of processes, signal
103 processes or optionally restart them.
104 -q (--no-splay) Switch off host splaying (sleeping).
106 -s (--no-commands) Do not execute scripts or shell commands.
108 -S (--silent) Silence run time warnings.
110 -t (--no-tidy) Do not tidy file systems.
112 -u (--use-env) Causes cfagent to generate an environment
114 variable CFALLCLASSES which can be read by
115 child processes (scripts). This variable con‐
116 tains a summary of all the currently defined
117 classes at any given time. This option causes
118 some system 5 systems to generate a Bus Error
119 or segmentation fault.
120 -U (--underscore-classes)
122 When this option is set, cfagent adds an
123 underscore to the beginning of all hard system
124 classes (like _sun4, _linux etc.) This can be
125 used to avoid naming conflicts if you are so
126 injudicious as to name a host by the name of a
127 hard class. Other classes are not affected.
128 -v (--verbose) Verbose mode. Prints detailed information
130 about actions and state.
131 -V (--version) Print only the version string and then quit.
133 -x (--no-preconf) Do not execute the cf.preconf net configura‐
135 tion file.
136 -X (--no-links) Do not execute the links section of a program.
138 -w (--no-warn,--quiet) Do not print warning messages.
140
142 Mark Burgess, Oslo University College
143
145 http://www.cfengine.org
146 Maintenance Commands cfengine(8)