Project

General

Profile

« Previous | Next » 

Revision b4552814

Added by Alexis Mousset about 7 years ago

Fixes #10081: Use rudder agent run as cfruncommand

View differences:

techniques/system/common/1.0/cf-served.st
admit => { host2ip("${server_info.cfserved}"), string_downcase(escape("${server_info.cfserved}")) };
!windows::
"${def.cf_runagent_shell}"
"${g.rudder_command}" comment => "Grant access to rudder agent command for cfruncommand",
admit => { host2ip("${server_info.cfserved}"), string_downcase(escape("${server_info.cfserved}")) };
......
!windows::
# last single quote in cfruncommand is left open, so that
# arguments (like -K and --remote-bundles) are properly appended.
cfruncommand => "${def.cf_runagent_shell} -c \'
${sys.cf_agent} -I -D cfruncommand -f failsafe.cf \&\&
${sys.cf_agent} -I -D cfruncommand";
cfruncommand => "${g.rudder_command} agent run -uR";
allowusers => {
"&POLICYSERVER_ADMIN&",
techniques/system/common/1.0/promises.st
exec_command => "${sys.cf_agent} -f \"${sys.workdir}\inputs\failsafe.cf\" \& ${sys.cf_agent}";
!windows::
exec_command => "${sys.cf_agent} -f failsafe.cf \&\& ${sys.cf_agent}";
exec_command => "${sys.cf_agent} -f failsafe.cf ; ${sys.cf_agent}";
}
techniques/system/common/1.0/site.st
!windows::
"rudder_bin" string => "${rudder_base}/bin";
"rudder_command" string => "${rudder_bin}/rudder";
"rudder_sbin" string => "${rudder_base}/sbin";
"rudder_var_tmp" string => "${rudder_var}/tmp"; # tmp generated data
"rudder_base_sbin" string => "${rudder_base}/sbin"; #folder where tools are installed

Also available in: Unified diff