<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Converging on Verification with RHEL 5 — Bcfg2 1.3.0 documentation</title> <link rel="stylesheet" href="../../_static/default.css" type="text/css" /> <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" /> <script type="text/javascript"> var DOCUMENTATION_OPTIONS = { URL_ROOT: '../../', VERSION: '1.3.0', COLLAPSE_INDEX: false, FILE_SUFFIX: '.html', HAS_SOURCE: true }; </script> <script type="text/javascript" src="../../_static/jquery.js"></script> <script type="text/javascript" src="../../_static/underscore.js"></script> <script type="text/javascript" src="../../_static/doctools.js"></script> <script type="text/javascript" src="../../_static/sidebar.js"></script> <link rel="shortcut icon" href="../../_static/favicon.ico"/> <link rel="top" title="Bcfg2 1.3.0 documentation" href="../../index.html" /> <link rel="up" title="Guides" href="../guides.html" /> <link rel="next" title="Fedora" href="fedora.html" /> <link rel="prev" title="Quickstart for CentOS" href="centos.html" /> <link rel="stylesheet" href="../../_static/bcfg2.css" type=""/> </head> <body> <div style="text-align: left; padding: 10px 10px 15px 15px"> <a href="../../index.html"><img src="../../_static/bcfg2_logo.png" border="0" alt="sampledoc"/></a> </div> <div class="related"> <h3>Navigation</h3> <ul> <li class="right" style="margin-right: 10px"> <a href="../../genindex.html" title="General Index" accesskey="I">index</a></li> <li class="right" > <a href="../../py-modindex.html" title="Python Module Index" >modules</a> |</li> <li class="right" > <a href="fedora.html" title="Fedora" accesskey="N">next</a> |</li> <li class="right" > <a href="centos.html" title="Quickstart for CentOS" accesskey="P">previous</a> |</li> <li><a href="../../index.html">home</a> | </li> <!--<li><a href="../../search.html">search</a> | </li>--> <li><a href="../../help/index.html">help</a> | </li> <li><a href="../../contents.html">documentation </a> »</li> <li><a href="../../contents.html" >Bcfg2 documentation 1.3.0</a> »</li> <li><a href="../index.html" >Appendix</a> »</li> <li><a href="../guides.html" accesskey="U">Guides</a> »</li> </ul> </div> <div class="document"> <div class="documentwrapper"> <div class="bodywrapper"> <div class="body"> <div class="section" id="converging-on-verification-with-rhel-5"> <span id="appendix-guides-converging-rhel5"></span><h1>Converging on Verification with RHEL 5<a class="headerlink" href="#converging-on-verification-with-rhel-5" title="Permalink to this headline">¶</a></h1> <div class="section" id="running-verification"> <h2>Running verification<a class="headerlink" href="#running-verification" title="Permalink to this headline">¶</a></h2> <p>To get complete verification status, run:</p> <div class="highlight-python"><div class="highlight"><pre><span class="n">bcfg2</span> <span class="o">-</span><span class="n">vqned</span> </pre></div> </div> </div> <div class="section" id="unmanaged-entries"> <h2>Unmanaged entries<a class="headerlink" href="#unmanaged-entries" title="Permalink to this headline">¶</a></h2> <ul class="simple"> <li>Package (top-level)</li> </ul> <blockquote> <div><ol class="arabic"> <li><p class="first">Enable the “Packages” plugin in <tt class="docutils literal"><span class="pre">/etc/bcfg2.conf</span></tt>, and configure the Yum repositories in <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Packages/sources.xml</span></tt>.</p> </li> <li><p class="first">If a package is unwanted, remove it:</p> <div class="highlight-python"><pre>sudo yum remove PACKAGE</pre> </div> </li> <li><p class="first">Otherwise, add <tt class="docutils literal"><span class="pre"><Package</span> <span class="pre">name="PACKAGE"</span> <span class="pre">/></span></tt> to the Base or Bundler configuration.</p> </li> </ol> </div></blockquote> <ul class="simple"> <li>Package (dependency)</li> </ul> <blockquote> <div><ol class="arabic"> <li><p class="first">Ensure the Yum repository sources configured in <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Packages/sources.xml</span></tt> are correct.</p> </li> <li><p class="first">Ensure the Yum repositories themselves are up-to-date with the main package and dependencies.</p> </li> <li><p class="first">Rebuild the Packages plugin cache:</p> <div class="highlight-python"><pre>bcfg2-admin xcmd Packages.Refresh</pre> </div> </li> </ol> </div></blockquote> <ul class="simple"> <li>Service</li> </ul> <blockquote> <div><ol class="arabic simple"> <li>Add <tt class="docutils literal"><span class="pre"><Service</span> <span class="pre">name="SERVICE"</span> <span class="pre">/></span></tt> to the Base or Bundler configuration.</li> <li>Add <tt class="docutils literal"><span class="pre"><Service</span> <span class="pre">name="SERVICE"</span> <span class="pre">status="on"</span> <span class="pre">type="chkconfig"</span> <span class="pre">/></span></tt> to <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Rules/services.xml</span></tt>.</li> </ol> </div></blockquote> </div> <div class="section" id="incorrect-entries"> <h2>Incorrect entries<a class="headerlink" href="#incorrect-entries" title="Permalink to this headline">¶</a></h2> <div class="section" id="for-a-package"> <h3>For a “Package”<a class="headerlink" href="#for-a-package" title="Permalink to this headline">¶</a></h3> <ul class="simple"> <li>Failed RPM verification</li> </ul> <blockquote> <div><ol class="arabic simple"> <li>Run <tt class="docutils literal"><span class="pre">rpm</span> <span class="pre">-V</span> <span class="pre">PACKAGE</span></tt></li> <li>Add configuration files (the ones with “c” next to them in the verification output) to <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Cfg/</span></tt>.</li> </ol> <blockquote> <div><ul class="simple"> <li>For example, <tt class="docutils literal"><span class="pre">/etc/motd</span></tt> to <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Cfg/etc/motd/motd</span></tt>. Yes, there is an extra directory level named after the file.</li> </ul> </div></blockquote> <ol class="arabic"> <li><p class="first">Specify configuration files as <tt class="docutils literal"><span class="pre"><Path</span> <span class="pre">name='PATH'</span> <span class="pre">/></span></tt> in the Base or Bundler configuration.</p> </li> <li><p class="first">Add directories to <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Rules/directories.xml</span></tt>. For example:</p> <div class="highlight-xml"><div class="highlight"><pre><span class="nt"><Rules</span> <span class="na">priority=</span><span class="s">"0"</span><span class="nt">></span> <span class="nt"><Directory</span> <span class="na">name=</span><span class="s">"/etc/cron.hourly"</span> <span class="na">group=</span><span class="s">"root"</span> <span class="na">owner=</span><span class="s">"root"</span> <span class="na">mode=</span><span class="s">"0700"</span> <span class="nt">/></span> <span class="nt"><Directory</span> <span class="na">name=</span><span class="s">"/etc/cron.daily"</span> <span class="na">group=</span><span class="s">"root"</span> <span class="na">owner=</span><span class="s">"root"</span> <span class="na">mode=</span><span class="s">"0700"</span> <span class="nt">/></span> <span class="nt"></Rules></span> </pre></div> </div> </li> </ol> </div></blockquote> <ul class="simple"> <li>Multiple instances</li> </ul> <blockquote> <div><ul class="simple"> <li>Option A: Explicitly list the instances</li> </ul> <blockquote> <div><ol class="arabic"> <li><p class="first">Drop the <tt class="docutils literal"><span class="pre"><Package</span> <span class="pre">/></span></tt> from the Base or Bundler configuration.</p> </li> <li><p class="first">Add an explicit <tt class="docutils literal"><span class="pre"><BoundPackage></span></tt> and <tt class="docutils literal"><span class="pre"><Instance</span> <span class="pre">/></span></tt> configuration to a new Bundle, like the following:</p> <div class="highlight-xml"><div class="highlight"><pre><span class="nt"><Bundle</span> <span class="na">name=</span><span class="s">'keys'</span><span class="nt">></span> <span class="c"><!-- GPG keys --></span> <span class="nt"><BoundPackage</span> <span class="na">name=</span><span class="s">"gpg-pubkey"</span> <span class="na">type=</span><span class="s">"rpm"</span> <span class="na">version=</span><span class="s">"foo"</span><span class="nt">></span> <span class="nt"><Instance</span> <span class="na">simplefile=</span><span class="s">"/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL"</span> <span class="na">version=</span><span class="s">"217521f6"</span> <span class="na">release=</span><span class="s">"45e8a532"</span><span class="nt">/></span> <span class="nt"><Instance</span> <span class="na">simplefile=</span><span class="s">"/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release"</span> <span class="na">version=</span><span class="s">"37017186"</span> <span class="na">release=</span><span class="s">"45761324"</span><span class="nt">/></span> <span class="nt"></BoundPackage></span> <span class="nt"></Bundle></span> </pre></div> </div> </li> <li><p class="first">Add the bundle to the applicable groups in <tt class="docutils literal"><span class="pre">/var/lib/bcfg2/Metadata/groups.xml</span></tt>.</p> </li> </ol> </div></blockquote> <ul class="simple"> <li>Option B: Disable verification of the package</li> </ul> <blockquote> <div><ol class="arabic simple"> <li>Add <tt class="docutils literal"><span class="pre">pkg_checks="false"</span></tt> to the <tt class="docutils literal"><span class="pre"><Package</span> <span class="pre">/></span></tt> tag.</li> </ol> </div></blockquote> </div></blockquote> </div> <div class="section" id="for-a-path"> <h3>For a “Path”<a class="headerlink" href="#for-a-path" title="Permalink to this headline">¶</a></h3> <blockquote> <div><ul class="simple"> <li>Unclear verification problem (no details from Bcfg2)</li> </ul> <blockquote> <div><ol class="arabic simple"> <li>Run <tt class="docutils literal"><span class="pre">bcfg2</span> <span class="pre">-vqI</span></tt> to see detailed verification issues (but deny any suggested actions).</li> </ol> </div></blockquote> <ul class="simple"> <li>Permissions mismatch</li> </ul> <blockquote> <div><ol class="arabic"> <li><p class="first">Create an <tt class="docutils literal"><span class="pre">info.xml</span></tt> file in the same directory as the configuration file. Example:</p> <div class="highlight-xml"><div class="highlight"><pre><span class="nt"><FileInfo></span> <span class="nt"><Group</span> <span class="na">name=</span><span class="s">'webserver'</span><span class="nt">></span> <span class="nt"><Info</span> <span class="na">owner=</span><span class="s">'root'</span> <span class="na">group=</span><span class="s">'root'</span> <span class="na">mode=</span><span class="s">'0652'</span><span class="nt">/></span> <span class="nt"></Group></span> <span class="nt"><Info</span> <span class="na">owner=</span><span class="s">'root'</span> <span class="na">group=</span><span class="s">'sys'</span> <span class="na">mode=</span><span class="s">'0651'</span><span class="nt">/></span> <span class="nt"></FileInfo></span> </pre></div> </div> </li> </ol> </div></blockquote> </div></blockquote> </div> </div> <div class="section" id="other-troubleshooting-tools"> <h2>Other troubleshooting tools<a class="headerlink" href="#other-troubleshooting-tools" title="Permalink to this headline">¶</a></h2> <blockquote> <div><ul> <li><p class="first">Generate the physical configuration from the server side:</p> <div class="highlight-python"><pre>bcfg2-info buildfile /test test.example.com</pre> </div> </li> <li><p class="first">Generate the physical configuration from the client side:</p> <div class="highlight-python"><div class="highlight"><pre><span class="n">bcfg2</span> <span class="o">-</span><span class="n">vqn</span> <span class="o">-</span><span class="n">c</span><span class="o">/</span><span class="n">root</span><span class="o">/</span><span class="n">bcfg2</span><span class="o">-</span><span class="n">physical</span><span class="o">.</span><span class="n">xml</span> </pre></div> </div> </li> </ul> </div></blockquote> </div> </div> </div> </div> </div> <div class="sphinxsidebar"> <div class="sphinxsidebarwrapper"> <h3><a href="../../index.html">Table Of Contents</a></h3> <ul> <li><a class="reference internal" href="#">Converging on Verification with RHEL 5</a><ul> <li><a class="reference internal" href="#running-verification">Running verification</a></li> <li><a class="reference internal" href="#unmanaged-entries">Unmanaged entries</a></li> <li><a class="reference internal" href="#incorrect-entries">Incorrect entries</a><ul> <li><a class="reference internal" href="#for-a-package">For a “Package”</a></li> <li><a class="reference internal" href="#for-a-path">For a “Path”</a></li> </ul> </li> <li><a class="reference internal" href="#other-troubleshooting-tools">Other troubleshooting tools</a></li> </ul> </li> </ul> <h4>Previous topic</h4> <p class="topless"><a href="centos.html" title="previous chapter">Quickstart for CentOS</a></p> <h4>Next topic</h4> <p class="topless"><a href="fedora.html" title="next chapter">Fedora</a></p> <h3>This Page</h3> <ul class="this-page-menu"> <li><a href="../../_sources/appendix/guides/converging_rhel5.txt" rel="nofollow">Show Source</a></li> </ul> <div id="searchbox" style="display: none"> <h3>Quick search</h3> <form class="search" action="../../search.html" method="get"> <input type="text" name="q" /> <input type="submit" value="Go" /> <input type="hidden" name="check_keywords" value="yes" /> <input type="hidden" name="area" value="default" /> </form> <p class="searchtip" style="font-size: 90%"> Enter search terms or a module, class or function name. </p> </div> <script type="text/javascript">$('#searchbox').show(0);</script> </div> </div> <div class="clearer"></div> </div> <div class="related"> <h3>Navigation</h3> <ul> <li class="right" style="margin-right: 10px"> <a href="../../genindex.html" title="General Index" >index</a></li> <li class="right" > <a href="../../py-modindex.html" title="Python Module Index" >modules</a> |</li> <li class="right" > <a href="fedora.html" title="Fedora" >next</a> |</li> <li class="right" > <a href="centos.html" title="Quickstart for CentOS" >previous</a> |</li> <li><a href="../../index.html">home</a> | </li> <!--<li><a href="../../search.html">search</a> | </li>--> <li><a href="../../help/index.html">help</a> | </li> <li><a href="../../contents.html">documentation </a> »</li> <li><a href="../../contents.html" >Bcfg2 documentation 1.3.0</a> »</li> <li><a href="../index.html" >Appendix</a> »</li> <li><a href="../guides.html" >Guides</a> »</li> </ul> </div> <div class="footer"> © Copyright 2009-2013, Narayan Desai. Last updated on Mar 20, 2013. Created using <a href="http://sphinx.pocoo.org/">Sphinx</a> 1.1.3. </div> </body> </html>