Am 10.08.23 um 11:12 schrieb Mike Gabriel:
> Indeed, cfengine3 for Debian Edu is only designed to be used for post-install
> adjustments, not for regular / continuous config management.
>
> So, disabling the cfagent (cf-execd) service should be the way to go (we
> won't loose functionality
Hi Guido,
On Mi 09 Aug 2023 13:17:03 CEST, Guido Berhoerster wrote:
On Thu, 20 Jul 2023 11:25:09 +0200 Guido Berhoerster
wrote:
Jul 20 10:35:34 tjener.intern cf-agent[4722]: CFEngine(agent)
TRUST FAILED, server presented untrusted key:
MD5=42d62c2c4be843a78dafffb40dd40277
Jul
On Thu, 20 Jul 2023 11:25:09 +0200 Guido Berhoerster
wrote:
> Jul 20 10:35:34 tjener.intern cf-agent[4722]: CFEngine(agent) TRUST
> FAILED, server presented untrusted key: MD5=42d62c2c4be843a78dafffb40dd40277
> Jul 20 10:35:34 tjener.intern cf-agent[4722]: CFEngine(agent) No
>
On a related note, these error only shows up when cf-agent is run by cf-execd.
Invoking it manually works fine.
--
Guido Berhoerster
This is fixed by allowing "127.0.0.1" and "::1" to connect to cf-serverd in
cf3/promises.cf. There also seems to be a typo regarding the local network:
…
body server control
# Debian Edu specific
{
allowconnects => { "10.0.0.0.0/8" };
allowallconnects
Package: debian-edu-config
Version: 2.12.32
There are regular failed connection attempts as follows logged:
Jul 17 12:55:43 tjener.intern cf-serverd[1031]:error: Remote host '::1' not
in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server)
6 matches
Mail list logo
