On Sun, Sep 9, 2012 at 11:08 AM, Marco Marongiu <brontoli...@gmail.com> wrote: > On 07/09/12 13:11, no-re...@cfengine.com wrote: >> Look at expireafter in agent control. > > Hi Neil, all > > I see in the reference that expireafter has a default value of 1 minute > "for time before on-going promise repairs are interrupted". If it was > effective in Aleksey, he would never have the problem he describes, > or... what am I missing?
The command is uninterruptible. The operation that hangs is unloading of the iptables kernel module. Can't ctrl-C that if you're running "/etc/init.d/iptables stop" and it hangs. I guess that's why I need a different mechanism than expireafter. Either that, or expireafter needs a bigger gun. Aleksey _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
