未定义的变量： control:
actionsequence = ( shellcommands )
myvar = ( “test string” )
shellcommands:
“/bin/echo $(myvar) $(myvar2)”
输出结果：cfengine:host: Executing script /bin/echo test string $(myvar2)
编写模块：
control:
moduledirectory = （ /usr/local/cfengine/modules ） 存放模块的路径
actionsequence =(
files
module:myplugin.specialclass
“module:argplugin.specialclass arg1 arg2”
copy
)
模块可以使用各种语言编写，perl ，shell都可以
通用class ： any：： any代表所有的class
actions
访问控制： control:
access = ( mark root )
目录或文件的编辑于遍历：files:
/usr/local/bin m=0755 exclude=*.ps action=fixall
/usr/local/bin m=0755 include=*.os ation=fixall
挂载文件目录： control:
site = ( mysite )
domain = ( mysite.country )
sysadm = ( mark )
netmask = ( 255.255.255.0 )
actionsequence =
(
mountall 挂载每个host上已经定义的文件系统
mountinfo 显示每个host上已经成功挂载的文件系统
addmounts 检查host文件系统是否都已经挂载
mountall
links
)
groups:
MyGroup =
(
host1
host2
binserver1
binserver2
)
homeservers:
MyGroup:: host1
binservers:
MyGroup.sun4:: server1
MyGroup.ultrix:: server2
mailserver:
host1:/usr/spool/mail
mountables: 告诉cfengine哪些目录是可以挂载的
host1:/mysite/host1/u1
host1:/mysite/host1/u2
server1:/mysite/server1/local
server2:/mysite/server2/local
links:
/usr/local -> /${site}/${binserver}/local
循环列表：control：
split = ( “ “ ) 使用空格做分隔符
mylist = ( “mark ricky bad-dude” ) 定义了列表，将列表赋值给mylist
tidy:
/mnt/home1/$(mylist) pattern=*.cfsaved age=1 将遍历mylist中的所有目录，匹配.cfsaved且一天没有访问的文件
运行用户脚本：control:
cfbin = ( /local/gnu/lib/cfengine/bin ) 定义了两个变量
backupdir = (/iu/dax/backup )
shellcommands: 运行shell命令
“$(cfbin)/cfbackup –p –f $(backupdir) –s /iu/nexus/u1”
管理acl： files:
$(HOME)/myfile acl=acl_alias1 action=fixall
acl:
{ acl_alias1
method:append
fstype:solaris
user:len:rwx
}
{ acl_alias2
method:append
fstype:dfs
user:/…//cell_admin:wx 给cell_admin用户wx的权限
group:/…//acct-=admin:rx 给用户组acct-admin rx的权限
user:/…//root:rx
user:*:-x
}
