Welcoming Dimitrios Apostolou as a CFEngine Champion

As we enter 2020 and reflect on the various contributions the project has received we want to take a moment to recognize one of the more prolific contributors as a CFEngine Champion. It’s my honor to announce and welcome Dimitrios Apostolou as …

CFEngine 3.12.3-2, 3.15.0-2 released

We recently released new builds for our Enterprise and Community packages. This release fixes an issue causing Enterprise Hub packages to fail upgrade in some cases. As part of this release, we also made changes to package names to ensure consistent naming …

Measuring values extracted from a running log

Recently I wanted to start measuring the length of time it took for PostgreSQL to acquire a lock so that I could keep an eye on how it changes over time. My PostgreSQL logs contain entries like the following that record the …

CFEngine 3.12.2-3, 3.14.0-2 released (mitigating CVE-2019-10164)

On [2019-07-29 Mon] we released new builds of our Enterprise Hub packages for 3.12.2 and 3.14.0. This release addresses CVE-2019-10164. PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow …

Writing custom service_methods

This post has been re-published with permission. CFEngine provides the services promise type to manage the state of a given service. services type promises are an abstraction of agent bundles, they can be used to declare the desired state for a collection …

How can I execute a command that uses command substitution in CFEngine?

This was originally published here, it has been re-published with permission. How can I execute a command that uses command substitution in CFEngine? On the console I might execute something like this: Listing 1: Example command substitution touch /tmp/file-$(date –iso-8601) ls /tmp/file-* …

CFEngine 3.7.6 released!

We’re happy to announce that CFEngine 3.7.6 is released! With 3.7 being a stable LTS branch, 3.7.6 brings bug fixes and stability enhancements to the CFEngine customers and community. Looking at the CFEngine release schedule, we can see: 3.7 LTS is maintained …

Discovering SSL Certificates and Expirations

With more and more services using SSL keeping track of the certificates in use across a global infrastructure can be challenging. The inventory reporting features in CFEngine Enterprise can be useful in identifying services using SSL as well as when their certificates …

3.11.0 Beta ready for testing!

We’re happy to announce that CFEngine 3.11.0 Beta (non-LTS) is now ready. Thanks to everyone for all of the contributions! Please test extensively and submit bug reports. 3.11.x introduces some new features and deprecates some underutilized functionality. Please note that 3.11.0 will …