CONFSYNC(8) BSD System Manager's Manual CONFSYNC(8)NAMEconfsync — configuration syncer
SYNOPSISconfsync [-f] [-s] [-d] [-q]
confsync-h
DESCRIPTION
The confsync utility is designed to be run from cron(8) to allow managed
hosts to sync the latest configurations from the repository. confsync is
effectively a confman commit operation without the overhead of a working
copy.
If the system is already up to date, confsync will exit without making
any changes. This behavior can be overridden with the -f option, which
will force confsync to run even if the system revision equals the tar
revision. This is useful when files are known to have been modified on
the live filesystem. Note that the -f option cannot be used to sync a
tar revision less than the system revision.
The -s option will cause confsync to run in sleep mode. In this mode,
confsync will sleep for CONF_SYNC_SLEEP seconds before executing. This
can be used to stagger the execution of confsync across multiple managed
hosts.
The -d option can be used to print additional debugging information. The
-q can be used to quiet the log messages by suppressing the "System is up
to date" messages.
When launched with -h, confsync will display the usage statement and
exit.
The use of confsync requires the use of confexport(8) and that
CONF_EXPORT_URI be defined in confman.conf(5).
SECURITY CONSIDERATIONS
Currently, confsync does no verification on the export file. For this
reason, it is highly recommended that you configure confsync to fetch the
export using a protocol that is secure against man-in-the-middle and
other nasty attacks, such as scp(1), or https.
SEE ALSOconfman(8), confexport(8), confman.conf(5), cron(8)AUTHORS
Chris Cowart ⟨ccowart@timesinks.net⟩
BSD May 06, 2009 BSD
