【正文】 35m\h\e[m \e[4m`pwd`\e[m\e[1。/usr/bin/test f /etc/39。 刪除垃圾文件 可以保證所有被管理服務器使用統(tǒng)一標準化的系統(tǒng)配置 可以根據(jù)執(zhí)行命令程序的返回結(jié)果來定義class,如果命令返回結(jié)果為0,此系統(tǒng)屬于此定義的class.re going to manage (remote client must run cfservd) domain = access = root admin hostnamekeys = off outputdir= /var/cfengine/output host list test_name1 test_name2 test_name3 test_name4 test_name5 test_name6 test_name7 test_name8 test_name9 test_name10注意:此配置文件中的主機名要能解析(通過/etc/hosts 或者dns),否則運行會找不到客戶端ip,服務端需要配置hosts .7. 服務端使用cfkey生成密鑰,并且運行cfservd守護進程 /var/cfengine/bin/cfkey /var/cfengine/bin/cfservd說明: 服務端生成的密鑰保存在/var/cfengine/ 服務端已經(jīng)基本配置完成了,下面我們就要在客戶端初始化運行cfengine. 客戶端運行cfenginet let cfengine run longer then 60 minutes. HostnameKeys = ( off ) Store keys based on hostname, not IP Inform = ( on ) Show diagnostic output ShowActions = ( off ) Do not show verbose diagnostic output domain = ( ) Obtain our domain name automatically 可以自定義一些變量，方便后面引用,引用方式 $(cfserver) cfserver = ( ) clientconf = ( /var/cfengine/clientconf ) workdir = ( /var/cfengine ) etcdir = ( /etc ) optdir = ( /opt ) bin_mode = ( 755 ) mode for binaries fowner = ( root ) file owner fgroup = ( root ) file group actionsequence = ( copy editfiles shellmands processes ) copy 區(qū)塊: 從服務器拷貝配置文件,也可以遞歸拷貝目錄 copy: any:: $(clientconf)/ dest=$(workdir)/inputs/ owner=$(fowner) group=$(fgroup) mode=700 server=$(cfserver) trustkey=true $(clientconf)/ dest=$(workdir)/inputs/ owner=$(fowner) group=$(fgroup) mode=700 server=$(cfserver) trustkey=true 引用前面自定義個group(classes),屬于Redhat_AS4這個組的拷貝以下配置文件 Redhat_AS4:: $(clientconf)/ dest=/etc/ owner=$(fowner) group=$(fgroup) mode=777 server=$(cfserver) trustkey=true $(clientconf)/ dest=/etc/security/ owner=$(fowner) group=$(fgroup) mode=777 server=$(cfserver) trustkey=true editfiles 區(qū)塊: 此塊操作是自動編輯系統(tǒng)配置文件 editfiles: a