normation/rudder

Continuous Auditing & Configuration - please speak english and be nice ;)

Elenui

@Elenui

Noice :p

In the version 7, will be a way to upload a file from the agent to the rudder ? I know there is a method with uid. But I think it wont work for my purpose. The idea is to get all ssl certificate create by letsencrypt and upload it to the agent to be deploy on each haproxy node ^^"

Fdall

@Fdall

No idea there, maybe @amousset:matrix.org might be more familiar with this subject

Elenui

@Elenui

ah :o

lpwevers

@lpwevers

Hi,

I'm not sure if this is the right place to ask, but as of today I found that there seems to be an issue with the SLES15 repository for installing the rudder agent. When trying to install I get this error message:

Retrieving repository 'Rudder' metadata ...................................................................[error]
Repository 'Rudder' is invalid.
[Rudder|http://repository.rudder.io/rpm/latest/SLES_15/] Valid metadata not found at specified URL
History:

File './repodata/14905c9aca00db9cada7f0ba89e8d9f3dd3a670f1e1e02e67bc0fbab0ab49583-primary.xml.gz' not found on medium 'http://repository.rudder.io/rpm/latest/SLES_15/'
Can't provide ./repodata/14905c9aca00db9cada7f0ba89e8d9f3dd3a670f1e1e02e67bc0fbab0ab49583-primary.xml.gz

It looks like the primary.xml.gz was replaced with c558b0dc22b12134408b6e1baf7e2c369b45c3dd23e1247fe4c533a11467e4e0-primary.xml.gz.

Can this please be fixed?

Vincent Membré

@VinceMacBuche

Hello @lpwevers You're definitely in the right place (or at least, one of them) !

Can you run zypper refresh before installing ? does the repository was installed more than a week ago ?

14905c9aca00db9cada7f0ba89e8d9f3dd3a670f1e1e02e67bc0fbab0ab49583-primary.xml.gz was made for 6.2.10 release of Rudder

we released a 6.2.11 last week and thus, the metadata has chanegd (latest repository is updated with the latest available version )

lpwevers

@lpwevers

Hi, @VinceMacBuche. Thanks for your prompt reply. This was a new and fresh installation. For some reason it's working now. I have a feeling the proxy server on our side used a cached value for the old repository. The repository is working for 6.2.11 now as it should.

Vincent Membré

@VinceMacBuche

Great! you're welcome! Yes probably a cached value somewhere ...

Benjamin Dupalut

@binibitobi_gitlab

Hi everyone,

I am coming to ask you for help. I don't know how to verify that a file has a specific string. I can check if an entire line exists but not just a string.

Elenui

@Elenui

Hello, not an expert, but maybe u can use a command execution

with a little script

If string exit 0 ; else exit 2

Maybe with this instruction ?

Elenui

@Elenui

but maybe there is another way to do it cleaner ^^"

Nicolas Charles

@ncharles

Hi @binibitobi_gitlab . Is it a specific string as in a key=value to check a value, or something else ?

if the format is normalized, you may want to have a look at augeas method

if it's in a key=value type of context, you can check all the file key value methods (there are multiple variations)

Benjamin Dupalut

@binibitobi_gitlab

Hello @ncharles ,

Thanks for your feedback.

Currently, I am trying to verify that our rsyslog server is configured correctly in our clients' /etc/rsyslog.conf file. So I need to make sure that the @ syslog.xxxxxx.xxx: 514 string is present in the file.

I tried using the augeas method but whether the string is present or not, it shows me "Compliant".

Elenui

@Elenui

why are you not using the template for your rsyslog ?

that way you will be sure that your file is setup the right way.

Elenui

@Elenui

And it'll enforce your string no matter what it happen

Benjamin Dupalut

@binibitobi_gitlab

Hello @Elenui ,

I'm not sure I understand. If you propose to use a single template for the rsyslog.conf file on all my servers, this is not possible because the configuration should not be the same depending on the services running on the server.

Elenui

@Elenui

Yes

You can set up some properties like : servertype : Front

and inside your jinja template create a condition that will generate the perfect configuration file for you server

I use the copy from remote template to do this for all my snmpd.conf

For doing this I use the local properties. I created a small script that scan the server and create a properties files

when snmpd conf jobs runs it'll use the local properties and generate the snmpd.conf that fit the server


{%- if vars.node.properties.role.useSSL %}
extend check_ssl /usr/bin/sudo /opt/snmp/check_ssl_validity.sh
{%- endif %}

for exemple

And with this way you have one template to manage with your git repo and if you make change it'll be deploy on all server

Benjamin Dupalut

@binibitobi_gitlab

Thank you for the explanations. I can use it for other files but the rsyslog.conf is different from one server to another because the services running and logging are not the same.

Elenui

@Elenui

The all file is different ? `

all server are different *

Benjamin Dupalut

@binibitobi_gitlab

Each server does not have a different rsyslog.conf file configuration. Two DNS servers will have the same configuration, for example. But a DHCP server and a DNS server will not have the same configuration for example.

Elenui

@Elenui

understand ^^

Benjamin Dupalut

@binibitobi_gitlab

So, does anyone have any idea how I can verify that the string "@ syslog.xxxxxx.xxx: 514" is present in the /etc/rsyslog.conf files of my servers?

Or can anyone tell me why the augeas method I created is "Compliant" whether the string is present or not?

Benjamin Dupalut

@binibitobi_gitlab

Hello everyone,

Does anyone have an idea please?

Fdall

@Fdall

@binibitobi_gitlab The augeas method does not work that way. Augeas uses lenses to observe the target file, following some pre-defined path. Check the augeas documentation if you want to know more about it.
In your case, the easiest way it most likely to use the file key value present, since your line seems to match the pattern <key><separator><value> with:

@ syslog.xxxxxx as key
: as separator
the port as value

Benjamin Dupalut

@binibitobi_gitlab

Hi @Fdall. Thank you for your reply. I will try this.

Benjamin Dupalut

@binibitobi_gitlab

Hi,

I configured a technique with the file key-value present method but it still indicates non-compliant while the value and the key are present in the file:

Fdall

@Fdall

Erf, I am indeed able to reproduce, this is a bug. I believe it comes from an incorrect escaping somewhere in the method which uses regex. I will try to investigate it this week and let you now, no easy workaround atm

Benjamin Dupalut

@binibitobi_gitlab

Thank you for your reply and your action.

Where communities thrive

People

Repo info

Activity