Re: Cfengine over ssh tunnel

[Matthew Palmer]

On Fri, Oct 14, 2005 at 02:37:33PM -0500, Pletan, Ray wrote:
> Has anyone gotten cfengine working using ssh tunneling, i.e.
>   ssh root@client <BLOCKED::mailto:root@client>  -R 5308:localhost:5308
> /var/cfengine/bin/cfagent -v

Yes, and it roxors very hard.

> update.conf refuses to overwrite itself with messages such as:
>   cf:cfengine::/var/cfengine/inputs/update.conf:54: Image loop: file/dir
> copies to itself or missing destination file 

What we do to stop this (and because we're in a heterogeneous environment
with regard to SSH/non-SSH hosts) is to have everyone contact the host
'cfserver', but on the machines that we SSH to, there is an entry in
/etc/hosts which forces the 'cfserver' hostname to be 127.0.0.1.  This has
completely solved the above error message for us.

- Matt