From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id BAB9913877A for ; Tue, 1 Jul 2014 01:58:49 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CE49BE0AD8; Tue, 1 Jul 2014 01:58:43 +0000 (UTC) Received: from mail-wi0-f180.google.com (mail-wi0-f180.google.com [209.85.212.180]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id CA6AFE094F for ; Tue, 1 Jul 2014 01:58:42 +0000 (UTC) Received: by mail-wi0-f180.google.com with SMTP id hi2so6947782wib.13 for ; Mon, 30 Jun 2014 18:58:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Qqp6e99zbikSZWQAXym4BLYvEx4gQw3IX3+mex0M+pA=; b=kI8Uf43iTMv7CdziqWxMcwy3QRAVLTNHw3XbBmDbPfzDnZPJjs+rflESphsHQoZoWG C7ExouQp4g9sYbF0pwa8kow6fFr/hECWymjirMj9Llbn4lL+p4XmSQl4n7YPm5M564ne z/9TXRqLrcx2AjfhWWJh+FfYbEjuL4bvRYFhJsdUoz0Sf6UrP8cGWDjyYLTBWcuQ2DwA 4DD13HqY/CwcXqsl+V43DQaNT3GPY0JdadQM5HMFVHUGd/8qZnMBy33QejjBbBzgH6Qm ohg8N0arbbOF/NZ4hDPzpp0JpiK3r9A3Y1kdPgxfF2jEm0rxKNbxdiUCz3AHwBWQ7ehw U9ng== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.180.188.144 with SMTP id ga16mr33745836wic.72.1404179921462; Mon, 30 Jun 2014 18:58:41 -0700 (PDT) Received: by 10.194.238.166 with HTTP; Mon, 30 Jun 2014 18:58:41 -0700 (PDT) In-Reply-To: <1404157598.6809.9.camel@foxtrot.esd.colliertech.org> References: <1404157598.6809.9.camel@foxtrot.esd.colliertech.org> Date: Mon, 30 Jun 2014 21:58:41 -0400 Message-ID: Subject: Re: [gentoo-dev] parser/generator for /etc/conf.d/net* From: Tim Boudreau To: Gentoo Developers Content-Type: multipart/alternative; boundary=001a11c380e66b6c1e04fd181dc1 X-Archives-Salt: d8e97d97-39be-4072-8750-efcbb314c383 X-Archives-Hash: 2fa5ac4c68125c6efcb7ccd0300dfbf0 --001a11c380e66b6c1e04fd181dc1 Content-Type: text/plain; charset=UTF-8 On Mon, Jun 30, 2014 at 3:46 PM, C.J. Adams-Collier KF7BMP < cjac@colliertech.org> wrote: > I've got a project on my plate to automate and reduce the human error in > adding new VLANs, subnets, addresses, etc. to our production firewall > fleet. Today, we manually make modifications to the following on both > members of the VRRP pair: > It sounds like the default init script isn't great for you. Rather than write a generator for a static configuration file that is consumed by a script, would it make more sense to modify the /etc/init.d script to compute whatever you need on the fly? I would think that would make deployment more flexible and (depending on what you're trying to do) perhaps eliminate the need for a manual configuration step. I did that once for a Gentoo VM that needed to figure out a working network configuration under a variety of hypervisors (the thing being distributed to customers was the VM, and final setup was web-based, so it had to work no matter what). -Tim --001a11c380e66b6c1e04fd181dc1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On M= on, Jun 30, 2014 at 3:46 PM, C.J. Adams-Collier KF7BMP &l= t;cjac@colliertec= h.org> wrote:
I've got a project on my plate to automa= te and reduce the human error in
adding new VLANs, subnets, addresses, etc. to our production firewall
fleet. =C2=A0Today, we manually make modifications to the following on both=
members of the VRRP pair:

It sounds lik= e the default init script isn't great for you.

Rather than write a generator for a static configuration file that is cons= umed by a script, would it make more sense to modify the /etc/init.d script= to compute whatever you need on the fly? =C2=A0I would think that would ma= ke deployment more flexible and (depending on what you're trying to do)= perhaps eliminate the need for a manual configuration step.

I did that once for a Gentoo VM that needed to figure o= ut a working network configuration under a variety of hypervisors (the thin= g being distributed to customers was the VM, and final setup was web-based,= so it had to work no matter what).

-Tim

--001a11c380e66b6c1e04fd181dc1--