Tags: missing

07/04/13

  05:59:00 pm, by The Dreamer   , 476 words  
Categories: Software, CFEngine

Upgrading from CFEngine 2 to CFEngine 3

I just learned of a key missing detail that would probably have helped lots of other CFEngine 2 sites make the transition to becoming CFEngine 3 sites.

All the sites, include CFEngine's have docs about Upgrading from CFEngine 2 to 3....

Where, the touch, or go in-depth, on conversion of policies from 2 to 3, extol how 3 is better than 2, and then offer vague options on how to upgrade (either in-place or replace)....

The most detailed explanation was a slide deck...which wasn't detailed enough.... that says "CF2 and CF3 designed to be interoperable", "Replace CF2 policies at your pace". How?

In-Place Upgrade

"Replace cfexecd with CFEngine 3's cf-execd" - Access controls remains untouched, runs cf-agent.

"Sample input files contain integration promises" - Launched automatically, Changes crontab

And, then get's in the steps:

  • Install CFEngine 3
  • Copy new inputs files to CF2 master repository
  • Remove any rules to reinstall CF2 or add cfexecd or cfagent to crontabs
  • Remove cfexecd from start up
  • Edit update.cf
  • set email options for executor in promises.cf
  • cf-agent --bootstrap

If all went well, you are now running CFEngine 3.

Bootstrap policy server using:

cf-agent --bootstrap --policy-server

  • Remove all rules and policies that are capable of activating CFEngine 2 components
  • Convert cfservd.conf into a server bundle
  • Place a reference to this in promises.cf
  • Add converted CFEngine 2 policies or create new CFEngine 3 policies
  • Done???? :??:

    Somethings missing....where's this interoperability taking place? Does CF3 know how to run CF2 policies? no... where's this replace CF2 with CF3 at my pace? Reads like its a full in-pace replacement of CF2 to CF3....

    So I finally made a reference about this on a list...

    Answer?!

    It's why the CF3 binaries have dashes in the name. So you can drop them into the CF2 working directory.... The trick is editing the exec_command in the executor configuration, that's the command for running the agent; modify it to run both agents (v2 and v3).

    Wow...that's kind of an important detail that's been missing!

    Full story »

    07/11/11

      09:52:41 pm, by The Dreamer   , 860 words  
    Categories: Software, Computer, Networking

    I jumped into a new Thunderbird profile....for nothing?

    For a long time, I've been having problems with images not loading in emails in Thunderbird. I thought my old computer, TARDIS, didn't have the processing power to do the networking. Partly, because pointing it through my squid proxy seemed to help a bit. For a while anyways.

    Well, when it came time to move to Zen....I just copied the profile into the new profile on Zen, and it worked...and images seemed to work. More or less. I figured it was profile rot, and that someday I should probably use some kind of import/export.

    But, I continued to suffer...while occasionally searching on the issue. I remembered about deleting .msf files....kind of annoying because then have to go through all the folders and remark read messages read and having old spam come back to haunt me. But, I did it anyways...and just ignored some of those old folders. It didn't help.

    As time went, things got worse and worse. So, I envisioned that I would do a backup, either using TEBE or MozBackup...and then a selective restore. Hadn't decided if I would keep all extensions and how much of prefs to keep, etc. Though weekends have a way of getting away from me...and I never seemed to find the moment to do it after have done a backup. Tried to make the move during the long weekend, but ran out of time. But, tried to give it a go this weekend.....but time just kept sliding by. Restoring everything from a MozBackup except Mail. Then, copied just Mail except for MSF files. No ImapMail.

    Slowly went through all my folders getting MSFs back, and resync'ng my ImapMail....and then things stopped working again. I then wondered if there was some kind of hidden parameter relating to max connections. I knew about max connections per imap server....while looking through the settings I saw there was a higher level max.imap.max_cache_connections was set to the default 10. Wonder what that means, with each Imap Account being able to have a max of 5.

    Well, I never used imap much until I moved here to Kansas...then I was using it more and more. Wonder how many imap accounts I have. Seems that until things start getting really bad....I was just under 10... now I have like 13. Let's jack that parameter up and see if it helps.

    Alas, it only helped a little bit. Seems there's other things at play. I did stumble into Windows limits during the google search, but from the tools....I was typically hovering around 80-160 established connections. And, I didn't seem to be hitting the half-open limit, though I may want to look at that issue later.

    But, I got all my IMAP folders accessed, headers were down, body downloading was going to have to just happen over time. I also looked up shortcuts, and found SHIFT-C to be the mark all read shortcut now. In the early days...back when thunderbird was also my Newsreader and I read netnews (AKA USENET), I was quite adept with shortcuts. But, a version change and the shortcuts I had grown accustom to changed. Probably just one or two, but enough to make me stop.

    Anyways....now I was catching up old emails (I have a couple of big message trees of old emails that I had imported from a couple of PST files and Eudora....there just there for historical purposes, I don't want them showing up as unread again.) And, then I left thunderbird running over night to sync things up.

    Pages: 1· 2

    Now instead of subjecting some poor random forum to a long rambling thought, I will try to consolidate those things into this blog where they can be more easily ignored profess to be collected thoughts from my mind.

    Latest Poopli Updaters -- http://lkc.me/poop

    bloglovin

    There are 20 years 1 month 29 days 1 hour 23 minutes and 21 seconds until the end of time.
    And, it has been 4 years 10 months 29 days 12 hours 39 minutes and 35 seconds since The Doctor saved us all from the end of the World!

    Search

    November 2017
    Mon Tue Wed Thu Fri Sat Sun
     << <   > >>
        1 2 3 4 5
    6 7 8 9 10 11 12
    13 14 15 16 17 18 19
    20 21 22 23 24 25 26
    27 28 29 30      
    Google

    Linkblog

      XML Feeds

    Who's Online?

    • Guest Users: 0
    This seal is issued to lawrencechen.net by StopTheHacker Inc.
    powered by b2evolution

    hosted by
    Green Web Hosting! This site hosted by DreamHost.

    monitored by
    Monitored by eXternalTest
    SiteUptime Web Site Monitoring Service
    website uptime