CFEngine 3.29.0 changes how storage promises treat a filesystem that is already mounted. A promise for an unmounted filesystem now mounts only that filesystem instead of all unmounted filesystems, edit_fstab actively maintains the file system table entry to keep it aligned with the promise even when …
Recently, I’ve been playing around with the ansible promise type by Fabio Tranchitella. It’s amazing how easy it is to leverage the benefits of agents with all the existing automation from the ansible community. Hence, I wanted to share it in a blog post, with an emphasis on easy. …
For episode 0b111111 Nick and Craig demo CFEngine 3.28 live: container data in Mission Portal, and classes promises gain more flexibility. In this episode, after learning that 63 is the ASCII code for ?, the atomic number for Europium, and the country code for the Philippines Craig followed up on …
Today, we are pleased to announce the release of CFEngine 3.28.0! The code word for this release is introspection. This is a non-LTS, not supported, feature release, with features which will become part of the next LTS scheduled for summer 2027. What’s new Container introspection In the …
Can an AI agent investigate a compromised host well enough to spot a fake user named Palpatine? Watch me find out the hard way. In this episode, Nick demonstrates a Mission Portal MCP server he’s been building with AI — a real-time demo of using an AI-powered agent to investigate a compromised …
CFEngine is changing how the persistence timer of a class defined by a classes promise is handled when that class is rediscovered on a later run. We consider this a bug fix: classes promises should always have been able to reset the timer, just like classes bodies can. A new timer_policy attribute …
We are writing to inform you of a recently discovered issue in CFEngine Enterprise. This issue was responsibly disclosed through our HackerOne Bug Bounty program, discovered during the re-testing / follow-ups from some of the issues we announced earlier this year; …
We thought we would mix things up a bit here and highlight our open source C library: libntech. I wanted to use libntech’s JSON code to write a minimal tool to parse, check and query JSON data. Using the various library functions related to files, json, strings, sequences and regexes helps …
We are pleased to announce two new patch releases for CFEngine, version 3.24.4 and 3.27.1! These patch releases contain bug fixes and dependency updates. Changes As these are patch releases for long term supported (LTS) branches of CFEngine, there are no new major features included. Complete …
Drive failures are a matter of when, not if. The good news is that most modern drives warn you before they fail, using S.M.A.R.T. (Self-Monitoring, Analysis and Reporting Technology). The challenge is collecting that data across a fleet and making it actionable. The new inventory-smartctl module …
Sign up for CFEngine Enterprise and connect up to 25 hosts for free. No credit card required. Get started in minutes.
Try enterprise for free
