Package Module Materialization

Bryan Burke <[email protected]>
Newsgroups gmane.comp.sysutils.cfengine.general
Message-ID <[email protected]>
Greetings,
I'm updating a small installation I use from 3.12 => 3.18 (also CentOS 7 => 
8-stream), and I had some trouble with the package modules.

They used to be packaged in masterfiles directly, but it looks like a few 
months ago, if my searching taught me anything, they were converted to 
mustache templates. Try as I might, however, I was unable to find where in 
the policies/updates the package modules got materialized. I'm assuming 
this is done for you somehow during bootstrap or update, but I couldn't 
figure it out.

Mitigation: since it doesn't look like they actually have any 
interpolations in them, for now, I just copied the one I needed (yum) into 
place and distribute that, but I assume this will break at some point.

Question: I want to make sure I'm materializing these correctly, so can 
someone advise me on how to do that?

Context: why am I trying to materialize them directly? Well, I've got a 
pretty custom setup in Google Cloud. Cloud Storage is my distribution 
method, with service account credentials for authentication (more below, if 
you're interested). So, I've got a completely custom update.cf/bootstrap.cf 
that can authenticate and speak to Google Cloud Storage, do some basic 
setup, and install the latest version of my policy files.

The policy files themselves are also from scratch (honestly I forgot why I 
did that at this point, but there was a reason, probably related to not 
having a policy server). That is, I define my own body common 
control/bundlesequence/inputs.

Secondary question: it looks like the update mechanism is a lot more 
flexible these days, and I'm wondering if I really need to do what I'm 
doing anymore. Is that possible, and are there any pointers to doing so?

Additional context: I didn't want to run a policy server (costs $$$, and 
trying to make that accessible to different networks I manage, either with 
VPC peering or making the policy server public, were not desireable), so I 
made a custom distribution system.

Thanks for any help you can provide! :)

Bryan

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/1952fc38-63cb-42c4-8279-1a1ac940616en%40googlegroups.com.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.