Description

The CFEngine engineering team has recently discovered a severe security issue in the CFEngine Enterprise product. CFEngine is using some internal secrets for authentication to the Mission Portal API and the PostgreSQL database when running background maintenance tasks. These internal...

Read more

We are happy to release the 2nd update to the CFEngine 3.12 LTS series. This update comes with many important stability and performance improvements and is thus well worth the upgrade from an older version of 3.12 LTS. CFEngine 3.12 LTS brings a lot of innovation, new features and improved performan...

Read more

This was originally published here, it has been re-published with permission.

How can I execute a command that uses command substitution in CFEngine?

On the console I might execute something like this:

touch /tmp/file-$(date --iso-86...

Read more

We are now happy to release the 6th update to the CFEngine 3.10 LTS series. This update comes with many important stability and performance improvements and is thus well worth the upgrade from an older version of 3.10 LTS.

Looking at the CFEngine release schedule, we can see that CFEngine 3.10 ...

Read more

About a year ago, I wrote a small python script to automate installing and bootstrapping CFEngine on virtual machines in AWS. It had some hard coded IP addresses that I needed to update when I spawned new hosts, but other than that, it worked well. During manual testing, it saved me a lot of time in...

Read more

cf-runagent is a component for triggering remote agent runs using the CFEngine network protocol. It does not allow for arbitrary commands to be executed, but rather asks the remote host to run the policy it already has. To trigger cf-runagent from other systems or web interfaces, you want to be a...

Read more

CFEngine is very simple to set up and use, especially if all of the clients and the hub are going to be using the same promises. But what if there are certain things you want to enforce on a hub and not a client? What if there are certain things you want to enforce on a client but not on a hub?

Read more

The CFEngine policy analyzer is an awesome new service introduced in CFEngine 3.13. The policy analyzer allows you to quickly debug policies and inspect what is going on under hood of CFEngine.

A known challenge with CFEngine, and most DSL based automation tools, relates to understanding what is a...

Read more

This post was syndicated with permission from the original source.

CFEngine 3.12.0 introduced the augments key to the Augments file format. If you are not already familiar with Augments, check it out. It's a very easy way to define classes and variables very early during agent execut...

Read more

CFEngine 3.12.1 LTS has now been released. This release brings many stability and performance improvements to the 3.12 LTS series. It is a stable and well-tested version of CFEngine.

We wish to extend a big thanks to the ecosystem that helps make CFEngine great by reporting bugs, contributing fixe...

Read more

Today we are very happy to announce the release of CFEngine 3.13.0. This is a non-LTS release, introducing new features and functionality. There is a lot happening with CFEngine these days! This release is closely following last weeks release of CFEngine 3.10.5 LTS, and soon we will also release t...

Read more

This post was syndicated with permission from the original source.

How do you deal with config files that need different settings based on various services that are running on a host and cooperate with other teams? It's a common question, and it came up on in #cfengine on irc.freenode.net recent...

Read more

Today we are very happy to announce the maintenance release of CFEngine 3.10.5. This is an update to the LTS 3.10 series, adding improved stability, several bug fixes and increased performance.

3.10 LTS is the successor of 3.7 LTS that, since August 2018, is no longer supported. We recommend every...

Read more

At SURFsara we use CFEngine on our National Compute Cluster (LISA) and other systems as our configuration management tool. With the release of CFEngine 3.12 I want to highlight 2 new features, namely:

We use these 2 new features heavily in our framework i...

Read more

In some performance critical situations, it makes sense to limit management software to a single CPU (core). We can do this using systemd and cgroups. CFEngine already provides systemd units on relevant platforms, we just need to tweak them.

I'm using CFEngine Enterprise 3.12 on CentOS 7, but the...

Read more

We’re happy to announce the maintenance releases 3.7.8 LTS and 3.10.4 LTS today!

3.7.8 LTS and 3.10.4 LTS, being maintenance (aka patch) releases, the goal is to increase stability and reliability for CFEngine users and enable a safe upgrade-path. As such, these releases primarily includes bugfixe...

Read more

We’re happy to announce the maintenance releases 3.7.7 LTS and 3.10.3 LTS today!

3.7.7 LTS and 3.10.3 LTS, being maintenance (aka patch) releases, the goal is to increase stability and reliability for CFEngine users and enable a safe upgrade-path. As such, these releases primarily includes bugfixe...

Read more

Today’s approach to securing IT infrastructure is passé. In a dynamic world of unpredictable and often frequent infrastructure changes, the traditional approach to security falls short. It is no longer sufficient to just scan frequently for vulnerabilities and then try to interpret this data in real...

Read more

We’re happy to announce the maintenance release 3.10.2 LTS and the new 3.11.0 non-LTS release today!

3.10.2 LTS, being a maintenance (aka patch) release, the goal is to increase stability and reliability for CFEngine users and enable a safe upgrade-path. As such, the release primarily includes bug...

Read more

Today we are proud to reveal our new name and brand; Northern.tech.

Northern.tech aims to become an international engineering powerhouse where bright and team oriented people work together to create the easiest to use solutions to support our mission of “Securing the World’s Connected Devices”....

Read more

ECH2020
Northern.tech is supported by the European Commission under Horizon 2020 research and innovation programme. Read more