Bug 1130 - difficult to synchronize configuration across a cluster
Summary: difficult to synchronize configuration across a cluster
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: VSM Server (show other bugs)
Version: trunk
Hardware: PC Linux
: P2 Enhancement
Target Milestone: MediumPrio
Assignee: Peter Åstrand
URL:
Keywords:
Depends on:
Blocks: 2078
  Show dependency treegraph
 
Reported: 2005-02-18 14:11 CET by Erik Forsberg
Modified: 2023-09-12 13:33 CEST (History)
1 user (show)

See Also:
Acceptance Criteria:


Attachments

Description Erik Forsberg cendio 2005-02-18 14:11:31 CET
Some of the configuration files created and modified on the master needs to be
synchronized to all agent hosts. Examples of this are
tl-desktop-customizer.hconf, all files under /opt/thinlinc/desktops, files
created by the KDE Kiosk Tool, VSM Server configuration in a HA setup etc. 

We do provide one way to do this - tl-rsync-all, but in order to use it, either
passwordless ssh + cron must be used which is bad security practice (a malicious
attacker gaining access to the VSM server host will have access to all hosts),
or one must login to the master and run a command, which is not very
Windows-point-and-click-admin-friendly.
Comment 1 Peter Åstrand cendio 2009-12-21 11:57:24 CET
This bug is now a blocker for the GUI bug 2078. This bug should only cover the actual mechanism and command line tool. 

IMHO, I don't think that the SSH publickey requirement is a big problem. I doubt that we can create another mechanism that is more secure. 


I think that it would be very useful with some kind of sync script. In Alingsås, I created such a script on top of tl-rsync-all, with the obvious name "alingsynk". It synced a selected set of files and directories, such as /opt/thinlinc/desktop and xstartup.d. For the latter dir, it's important to correctly handle the symbolic links. 
Comment 2 Peter Åstrand cendio 2009-12-21 11:59:18 CET
It might be useful to solve bug 2561 also, which would allow one to typically use the same vsmagent.hconf on all machines. 
Comment 4 Pierre Ossman cendio 2021-05-31 10:05:27 CEST
Instead of synchronising files we can also consider using some form of distributed database to store the configuration. A text based interface might still be possible (e.g. like ldapvi) even if the data is no longer stored as modifiable text files.

One example would be etcd that is popular in the container world:

https://etcd.io/

Note You need to log in before you can comment on or make changes to this bug.