Michael DeHaan wrote:
Michael Lang wrote:
Hi,
i started with func yesterday and find it very useful and since it's
written in python i also wanted to contribute/test if func could
be an replacement for other system management solutions like
cfengine. (so far i think that's possible)
FYI -- You should be aware that Func is /not/ intended to be a
configuration management engine. It's a secure network
command/control library/tool. It lacks many of the things that
cfengine or puppet can do, while being better at those tools for doing
things they were not intended to do, such as writing arbitrary
supports/scripts, generating reports, or telling machines to do things
"right now". It doesn't have anything to ensure a machine stays in a
given state, or give a machine orders the next time it sees it online
(yet?). It is a good framework for writing /new/ applications that
need to talk to a lot of machines, which is the general idea.
Basically it's a good replacement for anything you could do over SSH
but not really trying be anything like cfengine/puppet.
(This is not to say a CMS couldn't be built on top of Func, but no one
is working on this to my knowledge)
Func is a good tool for a lot of things, just warning you a bit, in
case you weren't aware, about what it is not.
Hello Michael,
thanks for your answer, i've read and seen the video which was in the
last redhat email :), from my point of view nearly everything
is already in func except running "standalone" on none certmaster
machines, but anyway, i was looking for an alternative since for new
functions in cfengine, one needs to code additional scripts in different
languages. With func it's possible to stay in one language and so the
need to distribute a script that anyway will call another
binary/script(and dependencies) is obsolete.
And when seen in this way, certmaster has cron running calling
customized func which processes groups of machines, to do for example:
[groupall]
find all suid/sgid set binaries which shouldn't be on a system and
remove suid/sgid big,
parse all grub entries, password protect it and lock all entries except
the default one
check all local users on the system to have a password and max/min/warn
values in shadow set
....
have ssh running
[groupweb]
have http running
....
func does system management, since pythonizing a grouped based structure
as listed above is not that complicated ...
but still it would be nice to get some information about including
func.minion.modules.* in my one module
thanks
regards
Michael Lang
--Michael
_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list
