inputs/update.cf

   1 #################################################
   2 #                                               #
   3 # upate.cf - Promises for updating policy files #
   4 #                                               #
   5 #################################################
   6
   7 bundle agent update {
   8
   9 vars:
  10
  11     "u_workdir"     string => "/var/lib/cfengine3";
  12     "u_policyhost"  string => "cfengine.lan0";
  13
  14 classes:
  15
  16     "u_policy_servers" or => { classify("$(u_policyhost)") };
  17
  18 files:
  19
  20     "$(u_workdir)/."
  21
  22         comment         => "Set proper permissions of the work directory",
  23         create          => "true",
  24         perms           => u_workdir_perms("0600");
  25
  26     u_policy_servers::
  27
  28         "$(u_workdir)/masterfiles/."
  29
  30             comment         => "Set proper permissions of the $(u_workdir)/masterfiles directory",
  31             create          => "true",
  32             perms           => u_workdir_perms("0600"),
  33             depth_search    =>  u_recurse("inf");
  34
  35         "$(u_workdir)/inputs/."
  36
  37             comment         => "Set permissions of input files on policy servers",
  38             create          => "true",
  39             perms           => u_workdir_perms("0600"),
  40             depth_search    => u_recurse("inf");
  41
  42     !u_policy_servers::
  43
  44         "$(u_workdir)/inputs/."
  45
  46             comment         => "Update input files from policy server",
  47             create          => "true",
  48             perms           => u_workdir_perms("0600"),
  49             depth_search    => u_recurse("inf"),
  50             copy_from       => u_policy_copy("$(u_policyhost)");
  51 }
  52
  53 #
  54 # u_workdir_perms
  55 #
  56
  57 body perms u_workdir_perms(mode) {
  58     mode    => "$(mode)";
  59     owners  => { "root" };
  60     groups  => { "root" };
  61 }
  62
  63 #
  64 # u_policy_copy
  65 #
  66
  67 body copy_from u_policy_copy(server) {
  68     source      => "$(u_workdir)/inputs";
  69     servers     => { "$(u_policyhost)" };
  70     compare     => "digest";
  71     purge       => "true";
  72     copy_backup => "false";
  73 }
  74
  75 #
  76 # u_recurse
  77 #
  78
  79 body depth_search u_recurse(d) {
  80     depth   => "$(d)";
  81     xdev    =>  "true";
  82 }