Nodes with CFEngine Deployed

This is a list of nodes that have CFEngine deployed. 

[This list has not been well maintained over the years, though some updates have been done sporadically.  It should not be considered reliable.]

IP Address: Hostname: Operation System: Online: Offline: CFEngine:
130.199.60.153 onlam3.starp Scientific Linux 6   Online Policy Hub
130.199.60.57 onlldap.starp Scientific Linux 6  
130.199.60.12 onl01.starp Scientific Linux 7  
130.199.60.13 onl02.starp Scientific Linux 7  
130.199.60.18 onl03.starp Scientific Linux 7  
130.199.60.37 onl04.starp Scientific Linux 7  
130.199.60.38 onl05.starp Scientific Linux 7  
130.199.60.42 onl06.starp Scientific Linux 7  
130.199.60.49 onl07.starp Scientific Linux 7  
130.199.60.56 onl08.starp Scientific Linux 7  
130.199.60.100 onl09.starp Scientific Linux 7  
130.199.60.101 onl10.starp Scientific Linux 7  
130.199.60.102 onl11.starp Scientific Linux 7  
130.199.60.103 onl12.starp Scientific Linux 7  
130.199.60.104 onl13.starp Scientific Linux 7  
130.199.60.105 onl14.starp Scientific Linux 7  
130.199.60.187 onl15.starp Scientific Linux 7  
130.199.60.194 onl16.starp Scientific Linux 7  
130.199.60.195 onl17.starp Scientific Linux 7  
130.199.60.196 onl18.starp Scientific Linux 7  
130.199.60.197 onl19.starp Scientific Linux 7  
130.199.60.198 onl20.starp Scientific Linux 7  
130.199.60.200 onl21.starp Scientific Linux 7  
130.199.60.201 onl22.starp Scientific Linux 7  
130.199.60.202 onl23.starp Scientific Linux 7  
130.199.60.204 onl24.starp Scientific Linux 7  
130.199.60.208 onl25.starp Scientific Linux 7  
130.199.60.209 onl26.starp Scientific Linux 7  
130.199.60.210 onl27.starp Scientific Linux 7  
130.199.60.211 onl28.starp Scientific Linux 7  
130.199.60.212 onl29.starp Scientific Linux 7  
130.199.60.213 onl30.starp Scientific Linux 7  
130.199.60.224 cephmon01.starp Scientific Linux 7  
130.199.60.242 cephmon02.starp Scientific Linux 7  
130.199.60.136 deneb.starp Scientific Linux 7  
130.199.60.233 mongodev01.starp Scientific Linux 6  
130.199.60.234 mongodev02.starp Scientific Linux 6  
130.199.60.235 mongodev03.starp Scientific Linux 6  
130.199.60.237 etof-cr.starp Scientific Linux 7  
130.199.60.231 mq01.starp Scientific Linux 7  
130.199.60.232 mq02.starp Scientific Linux 7  
130.199.60.160 mq03.starp Scientific Linux 6  
130.199.60.161 mq04.starp Scientific Linux 6  
130.199.60.133 blanchett.starp Scientific Linux 6  
130.199.60.204 burton.starp Scientific Linux 6  
130.199.60.86 daqman.starp Scientific Linux 6  
130.199.60.166 rts01.starp Scientific Linux 6  
130.199.60.88 dbbak.starp RHEL 6  
130.199.60.91 dashboard1.starp RHEL 6  
130.199.60.44 trgscratch.starp Scientific Linux 6  
130.199.60.36 sclrscratch.starp Scientific Linux 6  
130.199.60.179 gmt-ops.starp Scientific Linux 6  
130.199.60.126 l3display.starp Scientific Linux 7  
130.199.60.150 stardns1.starp Scientific Linux 6  
130.199.60.93 stargw3.starp Scientific Linux 6  
130.199.60.74 stargw4.starp Scientific Linux 6  
130.199.60.76 stargw5.starp Scientific Linux 6  
130.199.60.19 beatrice.starp Scientific Linux 6  
130.199.60.142 startrg.starp Scientific Linux 6  
130.199.60.60 eemc-spin.starp Scientific Linux 6  
130.19.60.246 l4evp.starp Scientific Linux 6  
130.199.60.248 xeon-phi-dev.starp Scientific Linux 6  
130.199.60.53 astaire-run09.starp Scientific Linux 6  
130.199.60.68 chaplin-run09.starp Scientific Linux 6  
130.199.60.25 eemc-sc.starp Scientific Linux 6  
130.199.61.176 emc02.starp Scientific Linux 6  
130.199.60.32 evp.starp Scientific Linux 6  
130.199.60.124 fms-hv2.starp Scientific Linux 6  
130.199.60.70 onldb.starp Scientific Linux 7  
130.199.60.89 onldb2.starp Scientific Linux 7  
130.199.60.165 onldb3.starp Scientific Linux 7  
130.199.60.203 onldb4.starp Scientific Linux 7  
130.199.60.29 onldb5.starp RHEL 6  
130.199.60.80 onldb6.starp RHEL 6  
130.199.61.167 rts02.starp Scientific Linux 6  
130.199.60.52 rts04.starp Scientific Linux 6  
130.199.60.69 sc.starp.bnl.gov Scientific Linux 7  
130.199.60.125 sc2.starp.bnl.gov Scientific Linux 6  
130.199.60.78 sc5.starp.bnl.gov Scientific Linux 6  
130.199.60.51 softioc4.starp Scientific Linux 6  
130.199.60.63 tofcontrol.starp Scientific Linux 6  
130.199.60.5 tofp.starp Scientific Linux 6  
130.199.60.21 eemc-testdaq.starp Scientific Linux 6  
130.199.60.55 bermuda.starp Scientific Linux 6  
130.199.60.46 barbados2.starp Scientific Linux 6  
130.199.60.41 alh2.starp Scientific Linux 6  
130.199.60.173 mtd-cr.starp Scientific Linux 6  
130.199.60.134 itpc01.starp Scientific Linux 6  
130.199.60.214 daqboot.starp Scientific Linux 6  
130.199.148.93 duvall.star RHEL 6   Offline Policy Hub
130.199.59.200 sun.star RHEL 6  
130.199.148.86 fc1.star Scientific Linux 6  
130.199.148.87 fc2.star Scientific Linux 6  
130.199.148.88 fc3.star Scientific Linux 6  
130.199.148.89 fc4.star Scientific Linux 6  
130.199.148.134 fc5.star Scientific Linux 7  
130.199.148.101 db01.star Scientific Linux 7  
130.199.148.102 db02.star RHEL 6  
130.199.148.104 db04.star RHEL 6  
130.199.148.105 db05.star Scientific Linux 7  
130.199.148.106 db06.star Scientific Linux 7  
130.199.148.107 db07.star Scientific Linux 7  
130.199.148.108 db08.star Scientific Linux 7  
130.199.148.110 db10.star Scientific Linux 7  
130.199.148.111 db11.star Scientific Linux 7  
130.199.148.112 db12.star Scientific Linux 7  
130.199.148.113 db13.star Scientific Linux 7  
130.199.148.114 db14.star Scientific Linux 7  
130.199.148.115 db15.star Scientific Linux 7  
130.199.148.116 db16.star Scientific Linux 7  
130.199.148.117 db17.star RHEL 6  
130.199.148.18 db18.star RHEL 6  
130.199.148.91 heston.star RHEL 6  
130.199.148.92 omega.star RHEL 6  
130.199.59.199 sunbelt.star RHEL 6  
130.199.148.90 robinson.star RHEL 6  
130.199.148.133 robinson2.star Scientific Linux 7  

 

As deployed, for online nodes I have CFEngine running on onlam3.starp. I have a script cf-install.sh which is just the following 4 lines
#!/bin/bash
wget -N -P /root/ http://onlam3.starp.bnl.gov/cfengine-community-3.10.4-1.el6.x86_64.rpm
/bin/rpm -i /root/cfengine-community-3.10.0-1.el6.x86_64.rpm
/var/cfengine/bin/cf-agent --bootstrap 130.199.60.153

NOTE: as of late 2020, onlam3 is
no longer in service.  For these purposes, it has been replaced by onlcs.starp.bnl.gov (130.199.60.57)

Offline nodes use duvall.star. The script above will work if you correct the wget, and IP to point to duvall

NOTE: STAR is now using CFEngine-3.10.0-1.el6.x86_64.rpm on Online & Offline nodes both SL6/RH6 & SL7/RH7. Do not attempt to install CFEngine-3.3.9-1.x86_64.rpm as the client will be unable to bootstrap to the policy hub.

This script will grab the CFEngine package, install it, and bootstrap it to the policy hub.
If you want to create a new policy you just create a .cf file in /var/cfengine/masterfiles on the policy hub, and then add it to the promises.cf file in the same directory. (Caution: A single typo, or incorrect syntax in ANY cf file will result in EVERY policy not applying. This is CFEngine's failsafe to prevent server crashes, or damage to production files) The logs for every system are kept in that system's /var/cfengine directory. The log filename is cf3.HOSTNAME.runlog Unfortunately the logs do not get centralized on the policy hub, although I suppose a policy can be created to copy them to a central location.

Policies currently run every 10 minutes. Some policies use wget to grab a file from the policy hub's web server, so they make an HTTP connection every five minutes. They don't appear to grab the file every time, unless the local file doesn't match the one on the server (last modified date). I'm going to work on a more elegant solution for this in the future, but for now it doesn't cause any harm, and the files are small, so it isn't using a lot of bandwidth.