Rudder

pass3.debian::

ifvarclass => canonify("debian_installed_${apt_package[${index_aptpkg}]}");

ifvarclass => canonify("debian_install_failed_${apt_package[${index_aptpkg}]}");

ifvarclass => canonify("debian_install_kept_${apt_package[${index_aptpkg}]}");

}

methods:

# 3.2 does not support agents older than 2.11, hence CFEngine 3.6

pass2.cfengine_3_6::

# The pass2 is not strictly necessary but prevent future issues if the behavior of pre-evaluation changes (because the evaluation of vars + classes takes 2 passes)

pass2.!cfengine_3_6::

"report_${index_pkg}" usebundle => rudder_common_reports_generic_index("packageManagement", "${class_prefix_script[${index_pkg}]}", "${trackingkey[${index_pkg}]}", "Post-modification script", "${package[${index_pkg}]}", "Execution of the post-modification script", "${index_pkg}"),

ifvarclass => "${class_prefix_script[${index_pkg}]}_reached";

ifvarclass => "!${class_prefix_script[${index_pkg}]}_reached";

}

methods:

SuSE::

# Clear package caches

"force_package_list_update" usebundle => file_remove("/var/rudder/cfengine-community/state/software_update_timestamp_zypper"),

ifvarclass => "zypper_repo_${zypper_index}_repaired";

!SuSE::

# we must report on the deletion of other reports for all instances of the directives

SuSE.zypper_disable_other_repositories::

# For deletion of others repos, if there is effectively no others files in the folders, then

# CFEngine will not define any classes at all: since there is nothing to promise on, there

# Reporting for creation

## Reporting for directory creation

ifvarclass => "manageFolders_creation_${index}_kept.!manageFolders_creation_${index}_modified.manageFilesAndFolders_isdir_${index}.!manageFilesAndFolders_isfile_${index}.!manageFilesAndFolders_islink_${index}";

ifvarclass => "manageFolders_creation_${index}_modified";

ifvarclass => "manageFolders_creation_${index}_failed|manageFolders_creation_${index}_kept.(manageFilesAndFolders_isfile_${index}|manageFilesAndFolders_islink_${index})";

## Reporting for file creation

ifvarclass => "manageFiles_${index}_kept.!manageFiles_${index}_modified.manageFilesAndFolders_isfile_${index}.!manageFilesAndFolders_isdir_${index}.!manageFilesAndFolders_islink_${index}";

ifvarclass => "manageFiles_${index}_modified";

ifvarclass => "manageFiles_${index}_failed|manageFiles_${index}_kept.(manageFilesAndFolders_isdir_${index}|manageFilesAndFolders_islink_${index})";

## Reporting for local cp

ifvarclass => "manageCp_${index}_kept.!manageCp_${index}_modified.manageFilesAndFolders_isfile_${index}.!manageFilesAndFolders_isdir_${index}.!manageFilesAndFolders_islink_${index}";

ifvarclass => "manageCp_${index}_modified";

ifvarclass => "manageCp_${index}_failed|manageCp_${index}_kept.(manageFilesAndFolders_isdir_${index}|manageFilesAndFolders_islink_${index})";

## Reporting for symlink creation

ifvarclass => "manageSyms_${index}_kept.!manageSyms_${index}_modified";

ifvarclass => "manageSyms_${index}_modified";

ifvarclass => "manageSyms_${index}_failed";

## Reporting for no change

ifvarclass => "manageFilesAndFolders_nocreate_${index}";

# Reporting for the permissions

## Success if not set

ifvarclass => "!manageFilesAndFolders_check_permissions_${index}";

ifvarclass => "manageFilesAndFolders_perms_${index}_kept.!manageFilesAndFolders_perms_${index}_modified";

ifvarclass => "manageFilesAndFolders_perms_${index}_modified.!manageFilesAndFolders_perms_${index}_failed";

ifvarclass => "manageFilesAndFolders_perms_${index}_failed";

ifvarclass => "manageFilesAndFolders_check_permissions_${index}.manageFilesAndFolders_createdir_${index}.manageFilesAndFolders_recursive_${index}";

ifvarclass => "manageFilesAndFolders_check_permissions_${index}.!manageFilesAndFolders_createdir_${index}.manageFilesAndFolders_recursive_${index}";

# Reporting for the deletion

## Report in the general component of the file

ifvarclass => "manageFilesAndFolders_clean_${index}";

## Success if not set

ifvarclass => "!manageFilesAndFolders_clean_${index}";

ifvarclass => "manageFilesAndFolders_clean_${index}.!manageFilesAndFolders_delete_${index}_modified.!manageFilesAndFolders_delete_${index}_failed";

ifvarclass => "manageFilesAndFolders_delete_${index}_modified";

ifvarclass => "manageFilesAndFolders_delete_${index}_failed";

# Reporting for post-command execution

ifvarclass => "!manageFilesAndFolders_post_hook_run_${index}";

ifvarclass => "manageFilesAndFolders_post_hook_run_${index}.!posthook_triggered_${index}";

ifvarclass => "manageFilesAndFolders_${index}_command_run_ok";

ifvarclass => "manageFilesAndFolders_${index}_command_run_failed";

commands:

"any" usebundle => check_permissions("${file[${filePerms}][0]}",

"${file[${filePerms}][1]}",

}

{

methods:

pass3.is_symlink::

pass3.!file_exists.ignore_absent::

pass3.!file_exists.!ignore_absent::

pass3.user_absent.edit_owner::

pass3.group_absent.edit_group::

pass3.edit_recurse::

pass3.(file_exists.can_edit_suid_sgid)::

# User

ifvarclass => "${identifier}_owner_ok.!${identifier}_owner_repaired";

ifvarclass => "${identifier}_owner_repaired";

ifvarclass => "${identifier}_owner_not_repaired";

# Group

ifvarclass => "${identifier}_group_ok.!${identifier}_group_repaired";

ifvarclass => "${identifier}_group_repaired";

ifvarclass => "${identifier}_group_not_repaired";

# Mode

ifvarclass => "${identifier}_mode_ok.!${identifier}_mode_repaired";

ifvarclass => "${identifier}_mode_repaired";

ifvarclass => "${identifier}_mode_not_repaired";

# Final report

# Success if nothing in error AND nothing repaired

ifvarclass => "(!${identifier}_owner_not_repaired.!${identifier}_group_not_repaired.!${identifier}_mode_not_repaired).(!${identifier}_owner_repaired.!${identifier}_group_repaired.!${identifier}_mode_repaired)";

# Repaired if nothing in error AND something repaired

ifvarclass => "!${identifier}_owner_not_repaired.!${identifier}_group_not_repaired.!${identifier}_mode_not_repaired.(${identifier}_owner_repaired|${identifier}_group_repaired|${identifier}_mode_repaired)";

# Error if something in error

ifvarclass => "${identifier}_owner_not_repaired|${identifier}_group_not_repaired|${identifier}_mode_not_repaired";

"any" usebundle => file_check_symlink(dirname("${copyfile[${index}][destination]}"));

pass3.(!is_valid)::

pass3.is_valid::

ifvarclass => "copy_file_${index}_kept.!copy_file_${index}_repaired.!copy_file_${index}_error";

ifvarclass => "copy_file_${index}_repaired.!copy_file_${index}_error";

# Error conditions

## The destination is not an existing directory or symbolic link

ifvarclass => "copy_file_${index}_dest_notdir.file_check_symlink_${canon_dirname_${index}}_failed";

## File access denied

ifvarclass => "copy_file_${index}_denied";

## User does not exist

ifvarclass => "copy_file_${index}_user_absent";

## Group does not exist

ifvarclass => "copy_file_${index}_group_absent";

## Generic failure

ifvarclass => "copy_file_${index}_error.!copy_file_${index}_dest_notdir.!copy_file_${index}_denied.!copy_file_${index}_user_absent.!copy_file_${index}_group_absent";

#posthook reports

ifvarclass => "!execute_command_${index}";

ifvarclass => "execute_command_${index}.!copy_file_${index}_failed.!copy_file_${index}_repaired.copy_file_${index}_kept";

ifvarclass => "execute_command_${index}.copyfile_posthook_${index}_command_run_ok";

ifvarclass => "execute_command_${index}.copyfile_posthook_${index}_command_run_failed";

# A copy_from + perms could result in any combinaision of success/repaired/failed, so we have to cover the failed.modified which results in no copy

ifvarclass => "execute_command_${index}.copy_file_${index}_error";

commands:

# Note: if the command has not been executed (ever or since > frequency), no report will be sent until the splayclass is defined

# This will cause Rudder to report an "Unknown" status, and is by design

ifvarclass => "${job_scheduler_canon_name[${iterator}]}_ok";

ifvarclass => "${job_scheduler_canon_name[${iterator}]}_repaired";

ifvarclass => "${job_scheduler_canon_name[${iterator}]}_failed";

ifvarclass => "job_scheduler_${all_hours}_${iterator}.Hr${all_hours}.job_scheduler_random_time.!job_scheduler_lock_${iterator}",

# we define here the persistent class, as the command exection is done on the last iteration

comment => "Define a persistent class to prevent multiple job executions",

classes => rudder_always_classes_persist("job_scheduler_lock_${iterator}", "5");

ifvarclass => "job_scheduler_${all_hours}_${iterator}";

commands:

pass3.cfengine_3::

}

pass3.((linux|!linux))::

}

# Partition status reporting

# Success

ifvarclass => "!monitorPartitionSize_partition_${index}_full";

# Error

ifvarclass => "monitorPartitionSize_partition_${index}_full";

# Repaired command execution reporting

# Success not set

ifvarclass => "!monitorPartitionSize_repaired_cmd_run_${index}";

# Success not needed

ifvarclass => "monitorPartitionSize_repaired_cmd_run_${index}.!monitorPartitionSize_partition_${index}_full";

# Repaired

ifvarclass => "monitorPartitionSize_repaired_cmd_run_${index}.monitorPartitionSize_repaired_cmd_${index}_repaired";

# Error

ifvarclass => "monitorPartitionSize_repaired_cmd_run_${index}.monitorPartitionSize_repaired_cmd_${index}_error";

commands:

#Reporting

#File copy

#Remote

ifvarclass => "not_empty_input_${files_index}.remote_source_${files_index}";

#Local

ifvarclass => "not_empty_input_${files_index}.local_source_${files_index}";

#Variable definition

ifvarclass => "not_empty_input_${files_index}";

#Not applicable

pass3::

ifvarclass => "!not_empty_input_${files_index}";

ifvarclass => "!not_empty_input_${files_index}";

ifvarclass => "!not_empty_input_${files_index}";

}

pass3.checkroute_present::

ifvarclass => canonify("route_${routing_index}_found");

# This should be a log_warn, when it's supported

ifvarclass => canonify("route_${routing_index}_found_warn");

ifvarclass => canonify("route_${routing_index}_notfound");

# This should be a log_warn, when it's supported

ifvarclass => canonify("route_${routing_index}_notfound_warn");

ifvarclass => canonify("route_${routing_index}_add");

ifvarclass => canonify("route_${routing_index}_added");

ifvarclass => canonify("route_${routing_index}_add_failed");

ifvarclass => canonify("route_${routing_index}_deleted");

ifvarclass => canonify("route_${routing_index}_delete_failed");

pass3.(!checkroute_present)::

commands:

pass3::

ifvarclass => "!start_process_${index}.!stop_process_${index}";

# On windows, we don't use processes promises type to check if process are running, as we rely directly on services

!windows.pass3::

# Error when a state (start, stop, etc.) is selected but no process name is given

ifvarclass => "!defined_process_name_${index}.(start_process_${index}|stop_process_${index})";

# Process start/restart

ifvarclass => "service_${index}_running.!service_${index}_anomaly.!process_${index}_restart.start_process_${index}";

ifvarclass => "process_${index}_restart.start_process_${index}.service_start_${service[${index}][canon_name]}_repaired";

ifvarclass => "service_start_${service[${index}][canon_name]}_not_ok";

# Process stop

# For graceful stop we use the ncf service_stop, for less graceful stopping we use unix signals and cf-engine processes promises

ifvarclass => "stop_process_${index}.process_${index}_restart.graceful_stop_process_${index}";

ifvarclass => "stop_process_${index}.!process_${index}_restart.service_stop_${service[${index}][canon_name]}_repaired.graceful_stop_process_${index}";

ifvarclass => "stop_process_${index}.!process_${index}_restart.service_stop_${service[${index}][canon_name]}_not_ok";

ifvarclass => "stop_process_${index}.service_${index}_already_stopped.!service_${index}_stopped.!graceful_stop_process_${index}";

ifvarclass => "stop_process_${index}.service_${index}_stopped.!graceful_stop_process_${index}";

ifvarclass => "stop_process_${index}.service_${index}_error.!graceful_stop_process_${index}";

# on windows, the generic methods are directly defining the correct classes, without relying on the process check before hand

ifvarclass => "stop_process_${index}";

pass3::

ifvarclass => "!check_process_range_${index}";

# The number of process range is not checked on windows

!windows.pass3::

ifvarclass => "check_process_range_${index}.!defined_process_name_${index}";

ifvarclass => "check_process_range_${index}.defined_process_name_${index}.!${service[${index}][canon_name]}_out_of_range";

ifvarclass => "check_process_range_${index}.defined_process_name_${index}.${service[${index}][canon_name]}_out_of_range.service_restart_${service[${index}][canon_name]}_repaired";

ifvarclass => "check_process_range_${index}.defined_process_name_${index}.${service[${index}][canon_name]}_out_of_range.service_restart_${service[${index}][canon_name]}_not_ok";

windows.pass3::

ifvarclass => "check_process_range_${index}";

# Service boot starting parameters

pass3::

ifvarclass => "!bootstart_process_${index}.!bootstart_prevent_process_${index}";

ifvarclass => "bootstart_process_${index}";

ifvarclass => "bootstart_prevent_process_${index}";

pass3.cfengine::

ifvarclass => "${index}_kept.!${index}_changed.!${index}_error";

ifvarclass => "${index}_changed.!${index}_error";

ifvarclass => "${index}_error";

ifvarclass => "(!isdir_${index}.!isfile_${index}).nofile_reports_error_${index}";

ifvarclass => "(!isdir_${index}.!isfile_${index}).!nofile_reports_error_${index}";

# Reports about the creation of the cron entries

ifvarclass => "cron_file_${cron_index}_kept.!cron_file_${cron_index}_edited";

ifvarclass => "cron_file_${cron_index}_edited";

ifvarclass => "cron_file_${cron_index}_failed";

# Reports about the cron process presence

pass3.!cron_restart::

pass3.cron_restart.(service_restart_cron_ok|service_restart_crond_ok)::

pass3.cron_restart.(service_restart_cron_not_ok|service_restart_crond_not_ok)::

pass3.(!windows.cron_absent)::

pass3.windows::

processes:

"cron"

# Add user

## Does exist (Success), and gid not requested to be changed

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.!usermanagement_login_add_${usergroup_user_index}_repaired.(usermanagement_user_nameempty_${usergroup_user_index}|usermanagement_fullname_edit_${usergroup_user_index}_kept).!usermanagement_force_user_group_${usergroup_user_index}";

## Does exist (Success), and gid already correct

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.!usermanagement_login_add_${usergroup_user_index}_repaired.(usermanagement_user_nameempty_${usergroup_user_index}|usermanagement_fullname_edit_${usergroup_user_index}_kept).(usermanagement_force_user_group_defined_${usergroup_user_index}.!usermanagement_user_current_group_is_invalid_${usergroup_user_index})";

## Does exist (Success), with a wrong gid

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.!usermanagement_login_add_${usergroup_user_index}_repaired.(usermanagement_user_nameempty_${usergroup_user_index}|usermanagement_fullname_edit_${usergroup_user_index}_kept).(usermanagement_force_user_group_defined_${usergroup_user_index}.usermanagement_user_gid_change_${usergroup_user_index}_repaired)";

## Seems to exist with a wrong Full Name (Repaired)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.!usermanagement_user_nameempty_${usergroup_user_index}.(usermanagement_fullname_edit_${usergroup_user_index}_repaired|usermanagement_fullname_edit_${usergroup_user_index}_error)";

## Added (Repaired)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.usermanagement_login_add_${usergroup_user_index}_repaired";

## Error

ifvarclass => "!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.usermanagement_login_add_${usergroup_user_index}_error";

## Could not be added, for the default path was not selected, but the custom one was not defined

ifvarclass => "!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.usermanagement_user_pershome_${usergroup_user_index}.!usermanagement_user_custom_home_defined_${usergroup_user_index}";

## Could not be added, as a custom group was asked for and did not exist on the system

ifvarclass => "usermanagement_user_update_${usergroup_user_index}.!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_group_definition_error_${usergroup_user_index}";

## Could not be added, as a custom uid was asked for and did exist on the system

ifvarclass => "usermanagement_user_update_${usergroup_user_index}.!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_uid_definition_error_${usergroup_user_index}";

## Could not set the gid, as it was requested, but with no gid provided

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.usermanagement_force_user_group_${usergroup_user_index}.usermanagement_user_groupempty_${usergroup_user_index}";

## Does exist with a wrong gid that could not be repaired

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index}.!usermanagement_login_add_${usergroup_user_index}_repaired.(usermanagement_user_nameempty_${usergroup_user_index}|usermanagement_fullname_edit_${usergroup_user_index}_kept).(usermanagement_force_user_group_defined_${usergroup_user_index}.usermanagement_user_gid_change_${usergroup_user_index}_error)";

# Remove user

## Does not exist (Success)

ifvarclass => "!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_remove_${usergroup_user_index}";

## Removed (Repaired)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_remove_${usergroup_user_index}.usermanagement_login_remove_${usergroup_user_index}_repaired";

## Error

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_remove_${usergroup_user_index}.usermanagement_login_remove_${usergroup_user_index}_error";

# Check user not exists

## Does not exist (Success)

ifvarclass => "!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_checkabs_${usergroup_user_index}";

## Does exist (Error)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_checkabs_${usergroup_user_index}";

# Check user exists

## Does exist (Success)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_checkpres_${usergroup_user_index}.(usermanagement_user_nameempty_${usergroup_user_index}|usermanagement_fullname_edit_${usergroup_user_index}_kept)";

## Seems to exist with a wrong Full Name (Error)

ifvarclass => "usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_checkpres_${usergroup_user_index}.!usermanagement_user_nameempty_${usergroup_user_index}.(usermanagement_fullname_edit_${usergroup_user_index}_repaired|usermanagement_fullname_edit_${usergroup_user_index}_error)";

## Does not exist (Error)

ifvarclass => "!usermanagement_user_exists_${usergroup_user_index}.usermanagement_user_checkpres_${usergroup_user_index}";

# Password handling

ifvarclass => "!usermanagement_user_checkpres_${usergroup_user_index}";

# Password handling in check only

ifvarclass => "usermanagement_user_checkpres_${usergroup_user_index}";

## Change not needed (Success)

ifvarclass => "((!usermanagement_user_password_${usergroup_user_index}_kept.!usermanagement_user_password_${usergroup_user_index}_repaired.!usermanagement_user_password_${usergroup_user_index}_error).((usermanagement_user_pwoneshot_${usergroup_user_index}.usermanagement_user_exists_${usergroup_user_index})|usermanagement_user_pwempty_${usergroup_user_index}|(usermanagement_user_update_${usergroup_user_index}.!usermanagement_user_exists_${usergroup_user_index}.(usermanagement_user_group_definition_error_${usergroup_user_index}|usermanagement_user_uid_definition_error_${usergroup_user_index}))))|usermanagement_user_remove_${usergroup_user_index}";

## Change not needed (N/A)

ifvarclass => "(!usermanagement_user_password_${usergroup_user_index}_kept.!usermanagement_user_password_${usergroup_user_index}_repaired.!usermanagement_user_password_${usergroup_user_index}_error).((usermanagement_user_checkpres_${usergroup_user_index}.usermanagement_user_pwoneshot_${usergroup_user_index})|(usermanagement_user_checkpres_${usergroup_user_index}.!usermanagement_user_exists_${usergroup_user_index}))|usermanagement_user_checkabs_${usergroup_user_index}";

# Homedir management

## On Windows, we don't do the home part

ifvarclass => "windows";

## In case of user to remove or to check absent, this is a result_na

ifvarclass => "!windows.(usermanagement_user_remove_${usergroup_user_index}|usermanagement_user_checkabs_${usergroup_user_index})";

## In case of check user present or update, but with default home, this is result_na

ifvarclass => "!windows.(!usermanagement_user_pershome_${usergroup_user_index}.(usermanagement_user_update_${usergroup_user_index}|usermanagement_user_checkpres_${usergroup_user_index}))";

## In case of check user present or update, but the home is already correct, this is success

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.!usermanagement_user_current_home_is_invalid_${usergroup_user_index}.(usermanagement_user_update_${usergroup_user_index}|usermanagement_user_checkpres_${usergroup_user_index}))";

## In case of update, but the home was not correct, and could be changed, this is repaired

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.(usermanagement_login_home_change_${usergroup_user_index}_repaired.!usermanagement_login_home_change_${usergroup_user_index}_error).usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index})";

## In case of update, but the home was not correct, and could not be changed, this is error

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.usermanagement_login_home_change_${usergroup_user_index}_error.usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index})";

## In case of update, but the home was not correct, and could be moved, this is repaired

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.(usermanagement_login_home_move_${usergroup_user_index}_repaired.!usermanagement_login_home_move_${usergroup_user_index}_error).usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index})";

## In case of update, but the home was not correct, and could not be moved, this is error

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.usermanagement_home_move_${usergroup_user_index}_error.usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index})";

## In case of update, but the home was not correct, and could not be changed, this is error

ifvarclass => "!windows.(usermanagement_user_pershome_${usergroup_user_index}.usermanagement_home_change_${usergroup_user_index}_error.usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_update_${usergroup_user_index})";

## In case of check only, and the home was not correct, this is error

ifvarclass => "!windows.usermanagement_user_pershome_${usergroup_user_index}.usermanagement_user_current_home_is_invalid_${usergroup_user_index}.usermanagement_user_checkpres_${usergroup_user_index}";

commands: