Re: Could not load requested further augments from file

Weird thing is this occurs ONLY on RHEL8, not on RHEL7 and  this same 
augments configuration has been in use for years.

I thought maybe I could use host_specific.json to get around this issue but 
I can't tell that host_specific.json is being seen at all (as you say the 
doc is "imprecise").

On Friday, August 16, 2024 at 4:00:51 PM UTC-5 Beto wrote:

> There are no selinux AVCs logged.
>
> On Friday, August 16, 2024 at 3:42:41 PM UTC-5 [email protected] 
> wrote:
>
>> Def.jq might itself be special what about def.foo? 
>>
>> On Fri, Aug 16, 2024, 3:10 PM '[email protected]' via 
>> help-cfengine <[email protected]> wrote:
>>
>>> The docs might be a bit imprecise. 
>>> https://docs.cfengine.com/docs/3.24/reference-language-concepts-augments.html 
>>> says in two separate notes:
>>>
>>>
>>>    - CFEngine variables are *not* expanded unless otherwise noted.
>>>
>>>
>>>    - sys 
>>>    <https://docs.cfengine.com/docs/3.24/reference-special-variables-sys.html> variables 
>>>    are expanded in def.json and all subsequently loaded augments as 
>>>    specified by the augments 
>>>    <https://docs.cfengine.com/docs/3.24/reference-language-concepts-augments.html#augments>
>>>     key.
>>>
>>> ---
>>>
>>> I did a little test and it does seem your def.network and sys variables 
>>> should both be expanded so I wonder if it is an access or selinux issue?
>>>
>>> Maybe check /var/log/audit/audit.log for cf-serverd related entries?
>>>
>>> ---
>>>
>>> My test:
>>>
>>> $ cat def.json 
>>>
>>> {
>>>
>>>   "vars": {
>>>
>>>     "foo": "${def.jq}",
>>>
>>>     "bar": "baz"
>>>
>>>   }
>>>
>>> }
>>>
>>>
>>> $ cat t.cf 
>>>
>>> bundle agent main
>>>
>>> {
>>>
>>>   reports:
>>>
>>>  "foo is ${default:def.foo}";
>>>
>>>  "bar is ${default:def.bar}";
>>>
>>>  "def.jq is ${def.jq}";
>>>
>>> }
>>>
>>>
>>> result:
>>>
>>> R: foo is jq --compact-output --monochrome-output --ascii-output 
>>> --unbuffered --sort-keys
>>>
>>> R: bar is baz
>>>
>>> R: def.jq is jq --compact-output --monochrome-output --ascii-output 
>>> --unbuffered --sort-keys
>>> On Friday, August 16, 2024 at 2:57:53 PM UTC-5 Nick Anderson wrote:
>>>
>>>> I dont think you can use non sys variables in augments like that 
>>>> becuase augmwnts is loaded before policy is read at all. Check the augments 
>>>> docs (i can't atm, on the move). 
>>>>
>>>> On Fri, Aug 16, 2024, 1:43 PM Beto <[email protected]> wrote:
>>>>
>>>>> As we upgrade from RHEL7 to RHEL8 I'm seeing this in /var/log/messages:
>>>>>
>>>>> Aug 16 12:54:06 zombie cf-serverd[1921]: CFEngine(server)  Rereading 
>>>>> policy file '/var/cfengine/inputs/promises.cf'
>>>>> Aug 16 12:54:06 zombie cf-serverd[1921]:   error: Could not load 
>>>>> requested further augments from file '/srv/sysadmin/etc/
>>>>> cfengine/augments.json'
>>>>> Aug 16 12:54:06 zombie cf-serverd[1921]:   error: Could not load 
>>>>> requested further augments from file '$(sys.inputdir)/au
>>>>> gments/augments_$(def.network).json'
>>>>> Aug 16 12:54:06 zombie cf-serverd[1921]: CFEngine(server)  Could not 
>>>>> load requested further augments from file '/srv/sysa
>>>>> dmin/etc/cfengine/augments.json'
>>>>> Aug 16 12:54:06 zombie cf-serverd[1921]: CFEngine(server)  Could not 
>>>>> load requested further augments from file '$(sys.inp
>>>>> utdir)/augments/augments_$(def.network).json'
>>>>>
>>>>> Not seeing this on RHEL7.
>>>>>
>>>>> CFEngine Core 3.24.0
>>>>> CFEngine Enterprise 3.24.0
>>>>>
>>>>> Any ideas?
>>>>>
>>>>> -- 
>>>>> You received this message because you are subscribed to the Google 
>>>>> Groups "help-cfengine" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send 
>>>>> an email to [email protected].
>>>>> To view this discussion on the web visit 
>>>>> https://groups.google.com/d/msgid/help-cfengine/857f33e7-4ac3-45f1-8b90-234de4c98bc8n%40googlegroups.com 
>>>>> <https://groups.google.com/d/msgid/help-cfengine/857f33e7-4ac3-45f1-8b90-234de4c98bc8n%40googlegroups.com?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>> -- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "help-cfengine" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to [email protected].
>>>
>> To view this discussion on the web visit 
>>> https://groups.google.com/d/msgid/help-cfengine/3e1de5ef-ee2a-4db3-a8e7-5c76fa68ae02n%40googlegroups.com 
>>> <https://groups.google.com/d/msgid/help-cfengine/3e1de5ef-ee2a-4db3-a8e7-5c76fa68ae02n%40googlegroups.com?utm_medium=email&utm_source=footer>
>>> .
>>>
>>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/58d8e853-b4e2-43e4-82dd-4d175fce7b1dn%40googlegroups.com.