CFEngine version 3.24.6 and 3.27.3 have been released! These patch releases contain dependency updates to address the recently announced PHP vulnerabilities. For more information about the vulnerabilities, see this blog post: …
The PHP project recently announced two critical security vulnerabilities. You can read more about these on their website: https://www.php.net/archive/2026.php#2026-10-21-5 Impact CFEngine Enterprise Hub uses PHP and is assumed to be affected by these vulnerabilities. With the limited information …
In large organizations and infrastructures, it’s fairly common to use multiple configuration management tools. There are many reasons for this. Different teams may have different preferences, some tools suit certain use cases better than others, and existing systems can come with their own …
Is the antivirus on your servers working correctly right now? Installing ClamAV takes a single command. The hard part is keeping it running on all servers, since freshclam fails without indicating a problem, cron jobs disappear, and no one notices until an audit. The new ClamAV module deals with …
We are pleased to announce two new patch releases for CFEngine, version 3.24.5 and 3.27.2! These patch releases contain bug fixes and dependency updates. Changes As these are patch releases for long term supported (LTS) branches of CFEngine, there are no new major features included. Complete …
We enjoyed Lars so much last time that we asked him to come back and show off some Ansible work he and Craig have been doing. Lars demoed a hybrid CFEngine + Ansible workflow. Starting with two fresh hosts, he used an CFEngine Ansible Galaxy collection to install and bootstrap CFEngine with a …
You started with Ansible, and for a long time it was the only thing you needed. With a handful of playbooks and an inventory file, you got the job done. However, as the fleet grew, runs went from taking minutes to hours, and parts of the inventory were unreachable at any given moment. This is not an …
For episode 64 Lars demoed leech2 live: the library used to ship container data from CFEngine agents to Mission Portal. The slides he presented from are available as a PDF. Lars showed how you can interact with leech2 through the CLI tool lch(1). The CLI tool is bundled in CFEngine >= 3.28 …
CFEngine 3.29.0 changes how storage promises treat a filesystem that is already mounted. A promise for an unmounted filesystem now mounts only that filesystem instead of all unmounted filesystems, edit_fstab actively maintains the file system table entry to keep it aligned with the promise even when …
Recently, I’ve been playing around with the ansible promise type by Fabio Tranchitella. It’s amazing how easy it is to leverage the benefits of agents with all the existing automation from the ansible community. Hence, I wanted to share it in a blog post, with an emphasis on easy. …
Sign up for CFEngine Enterprise and connect up to 25 hosts for free. No credit card required. Get started in minutes.
Try enterprise for free
