Re: Proxmox, clones and cf-key

Hi Nick,

It is great to hear from you.

True.
CFEngine is installed on the template VM, but it did not bootstrap.

So, I have to add the cf-key stuff in the init-clone script.

Have a great weekend.

My thoughts are with the people in Ukraine.

Best regards,
Martin.

On Friday, 4 March 2022 at 17:23:07 UTC+1 Nick Anderson wrote:

> Martin Simons <[email protected]> writes: 
>
> Now the issue: I looked at the cf-key output and I noticed that only a 
>> couple of machines were reported. The different machines seem to share the 
>> same MD5 key. 
>>
>> How does CFEngine generate those keys? 
>>
> If the keys are identical then I would expect that those hosts were cloned 
> from a machine that had cfengine installed. 
>
> Typically, when you install a cfengine package cf-key is executed to 
> generate a key pair. In environments with more stringent requirements keys 
> are generated ahead of time and placed during provisioning. 
>
> If you install cfengine into a template then you should clear out the 
> ppkeys and state dir so that those are fresh for a vm provisioned from that 
> template. 
>
> Personally, I prefer to have cfengine installed on first boot so that I 
> don't have to update the template later but there are numerous ways to skin 
> that cat. 
>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/c43ee915-086b-4176-9b91-a61796aaaea2n%40googlegroups.com.