diff options
| -rw-r--r-- | cfengine/core_policies.cf | 7 | ||||
| -rw-r--r-- | cfengine/watchdog.cf | 20 | ||||
| -rw-r--r-- | promises.cf | 4 | ||||
| -rw-r--r-- | templates/cfengine/cfengine_watchdog | 6 |
4 files changed, 37 insertions, 0 deletions
diff --git a/cfengine/core_policies.cf b/cfengine/core_policies.cf new file mode 100644 index 0000000..b919b59 --- /dev/null +++ b/cfengine/core_policies.cf @@ -0,0 +1,7 @@ +bundle common core_policies +{ + vars: + any:: + "bundles" slist => { "cfengine_watchdog" }; + "inputs" slist => { "cfengine/watchdog.cf" }; +} diff --git a/cfengine/watchdog.cf b/cfengine/watchdog.cf new file mode 100644 index 0000000..22d045d --- /dev/null +++ b/cfengine/watchdog.cf @@ -0,0 +1,20 @@ +bundle agent cfengine_watchdog +{ + vars: + systemd:: + "data" string => '{"systemd": true}'; + !systemd:: + "data" string => '{"systemd": false}'; + files: + any:: + "/etc/cron.d/cfengine_watchdog" + create => "true", + perms => system_owned("444"), + edit_template => "$(sys.inputdir)/templates/cfengine/cfengine_watchdog", + template_method => "mustache", + template_data => parsejson("$(data)"), + classes => if_repaired("cfengine_watchdog_repaired"); + reports: + any:: + "$(this.bundle): /etc/cron.d/cfengine_watchdog repaired" ifvarclass => "cfengine_watchdog_repaired"; +} diff --git a/promises.cf b/promises.cf index 4295ec9..b082c27 100644 --- a/promises.cf +++ b/promises.cf @@ -4,12 +4,16 @@ body common control bundlesequence => { cfengine_controls, cfengine_stdlib, + core_policies, + @(core_policies.bundles), classify, @(classify.bundles), }; inputs => { @(cfengine_controls.inputs), @(cfengine_stdlib.inputs), + "cfengine/core_policies.cf", + @(core_policies.inputs), "services/main.cf", @(classify.inputs), }; diff --git a/templates/cfengine/cfengine_watchdog b/templates/cfengine/cfengine_watchdog new file mode 100644 index 0000000..a998511 --- /dev/null +++ b/templates/cfengine/cfengine_watchdog @@ -0,0 +1,6 @@ +############################################################################### +# \_o< WARNING : This file is being managed by cfengine! >o_/ # +# ~~~~ ~~~~ # +############################################################################### +{{#systemd}}* * * * * root [ -x "/var/cfengine/bin/cf-execd" ] && if ! /bin/systemctl status cfengine3 > /dev/null; then /bin/systemctl start cfengine3; fi{{/systemd}} +{{^systemd}}* * * * * root [ -x "/var/cfengine/bin/cf-execd" ] && if ! /usr/bin/pgrep cf-execd > /dev/null; then "/var/cfengine/bin/cf-execd"; fi{{/systemd}} |