normation/rudder

Continuous Auditing & Configuration - please speak english and be nice ;)

Vincent Membré

@VinceMacBuche

we released a 6.2.11 last week and thus, the metadata has chanegd (latest repository is updated with the latest available version )

lpwevers

@lpwevers

Hi, @VinceMacBuche. Thanks for your prompt reply. This was a new and fresh installation. For some reason it's working now. I have a feeling the proxy server on our side used a cached value for the old repository. The repository is working for 6.2.11 now as it should.

Vincent Membré

@VinceMacBuche

Great! you're welcome! Yes probably a cached value somewhere ...

Benjamin Dupalut

@binibitobi_gitlab

Hi everyone,

I am coming to ask you for help. I don't know how to verify that a file has a specific string. I can check if an entire line exists but not just a string.

Elenui

@Elenui

Hello, not an expert, but maybe u can use a command execution

with a little script

If string exit 0 ; else exit 2

Maybe with this instruction ?

Elenui

@Elenui

but maybe there is another way to do it cleaner ^^"

Nicolas Charles

@ncharles

Hi @binibitobi_gitlab . Is it a specific string as in a key=value to check a value, or something else ?

if the format is normalized, you may want to have a look at augeas method

if it's in a key=value type of context, you can check all the file key value methods (there are multiple variations)

Benjamin Dupalut

@binibitobi_gitlab

Hello @ncharles ,

Thanks for your feedback.

Currently, I am trying to verify that our rsyslog server is configured correctly in our clients' /etc/rsyslog.conf file. So I need to make sure that the @ syslog.xxxxxx.xxx: 514 string is present in the file.

I tried using the augeas method but whether the string is present or not, it shows me "Compliant".

Elenui

@Elenui

why are you not using the template for your rsyslog ?

that way you will be sure that your file is setup the right way.

Elenui

@Elenui

And it'll enforce your string no matter what it happen

Benjamin Dupalut

@binibitobi_gitlab

Hello @Elenui ,

I'm not sure I understand. If you propose to use a single template for the rsyslog.conf file on all my servers, this is not possible because the configuration should not be the same depending on the services running on the server.

Elenui

@Elenui

Yes

You can set up some properties like : servertype : Front

and inside your jinja template create a condition that will generate the perfect configuration file for you server

I use the copy from remote template to do this for all my snmpd.conf

For doing this I use the local properties. I created a small script that scan the server and create a properties files

when snmpd conf jobs runs it'll use the local properties and generate the snmpd.conf that fit the server


{%- if vars.node.properties.role.useSSL %}
extend check_ssl /usr/bin/sudo /opt/snmp/check_ssl_validity.sh
{%- endif %}

for exemple

And with this way you have one template to manage with your git repo and if you make change it'll be deploy on all server

Benjamin Dupalut

@binibitobi_gitlab

Thank you for the explanations. I can use it for other files but the rsyslog.conf is different from one server to another because the services running and logging are not the same.

Elenui

@Elenui

The all file is different ? `

all server are different *

Benjamin Dupalut

@binibitobi_gitlab

Each server does not have a different rsyslog.conf file configuration. Two DNS servers will have the same configuration, for example. But a DHCP server and a DNS server will not have the same configuration for example.

Elenui

@Elenui

understand ^^

Benjamin Dupalut

@binibitobi_gitlab

So, does anyone have any idea how I can verify that the string "@ syslog.xxxxxx.xxx: 514" is present in the /etc/rsyslog.conf files of my servers?

Or can anyone tell me why the augeas method I created is "Compliant" whether the string is present or not?

Benjamin Dupalut

@binibitobi_gitlab

Hello everyone,

Does anyone have an idea please?

Fdall

@Fdall

@binibitobi_gitlab The augeas method does not work that way. Augeas uses lenses to observe the target file, following some pre-defined path. Check the augeas documentation if you want to know more about it.
In your case, the easiest way it most likely to use the file key value present, since your line seems to match the pattern <key><separator><value> with:

@ syslog.xxxxxx as key
: as separator
the port as value

Benjamin Dupalut

@binibitobi_gitlab

Hi @Fdall. Thank you for your reply. I will try this.

Benjamin Dupalut

@binibitobi_gitlab

Hi,

I configured a technique with the file key-value present method but it still indicates non-compliant while the value and the key are present in the file:

Fdall

@Fdall

Erf, I am indeed able to reproduce, this is a bug. I believe it comes from an incorrect escaping somewhere in the method which uses regex. I will try to investigate it this week and let you now, no easy workaround atm

Benjamin Dupalut

@binibitobi_gitlab

Thank you for your reply and your action.

Rana Masud

@mrana_dev_gitlab

Is there any documentation to configure schedule in rudder?

Elenui

@Elenui

hello you mean the agent run schedule ?

14 replies

lpwevers

@lpwevers

Hi Everyone,

Just thought I let you know. If there are people who use CheckMK as their monitoring system, there's now a plugin available for monitoring the status of the Rudder agent. You can download it from the CheckMK Exchange:
https://exchange.checkmk.com/p/rudder

xlbt

@xlbt

Sorry if this question has already been asked, but is there a place to find a copy of a deleted file with the "File absent" method ?
Thanks.

Fdall

@Fdall

Hi @xlbt you can check on your agent under the folder /var/rudder/modified-files, but I am not sure that the agent keep a backup before removing file

xlbt

@xlbt

This is the first place I looked, but unfortunately there is no backup of the deleted file.

Elenui

@Elenui

Hello Team

I'm having trouble with my jetty, i can't find the log. anyone have in thought where it's located ?

Where communities thrive

People

Repo info

Activity