Skip to content

Latest commit

 

History

History
143 lines (100 loc) · 7.6 KB

02-Sync-Repositories.md

File metadata and controls

143 lines (100 loc) · 7.6 KB
Raw

Sync Repositories

In case you require local copies of repositories to frequently access them or to make a public repository available for systems unable to access public spaces, you can use Sync-IcingaRepository.

Like with adding existing repositories, each synced repositories require a unique name you can set with -Name. The name will not interfere on how the sync works.

Available Arguments

Argument Type Description
Name String The unique name of the repository. This name can only exist once on your system
Path String The location on where the files from the remote repository will be synced to. This can either be a local path, a network share or a Linux path, including user and hostname like [email protected]:/vaw/www/icingarepo/
RemotePath String The path pointing to the location Icinga for Windows tries to lookup all your files. You can either replicate the Path variable for network shares for example, or use a web url which is made available based on Path to fetch and download files from. If left empty, it will default to the Path variable content
Source String The source from where the repository will be synced from. This can either be pointing directly to the ifw.repo.json or the root directory, as long as the file is fetch able from this point. A source can be a web, local or network share
UseSCP Switch If you set Path to a Linux path as mentioned in the first example, you will have to enable this switch to use SCP to copy files from the source to the Linux system. Requires scp and ssh being installed on the system
SkipSCPMkdir Switch Allows you to skip the mkdir operation while using -UseSCP and relies on the folder already existing
Force Switch This will force the creation of the repository, even if the name of the repository is already assigned. Should be used with caution
ForceTrust Switch By default repositories are validated with a hash, based on all files present inside the repository. If a repository is not providing a hash, it will be disabled after the sync for security reasons. In case the hash does not match with all files synced afterwards, the repository files will be deleted and the sync aborted. You can use this flag to ignore both states and always add the repository, regardless if the hash matches or the hash is not given

Sync Public Repository

You can use the sync command to clone an existing public repository for example and fetch all files to a local space.

Local Disk Example

Sync-IcingaRepository `
    -Name 'Icinga Stable Local' `
    -Path 'C:\icinga\icinga_stable' `
    -Source 'https://packages.icinga.com/IcingaForWindows/stable/ifw.repo.json';

This will sync all files from the public Icinga repository into C:\icinga\icinga_stable. As RemotePath is not set, it will default to C:\icinga\icinga_stable and all files will be fetched from this location.

Shared Folder Example

Sync-IcingaRepository `
    -Name 'Icinga Stable Local' `
    -Path 'C:\icinga\icinga_stable' `
    -RemotePath '\\myhost.example.com\icingastable' `
    -Source 'https://packages.icinga.com/IcingaForWindows/stable/ifw.repo.json';

We can for example use file sharing, to make certain folders available in our network. This example will download all files into C:\icinga\icinga_stable, but tell Icinga for Windows to use your shared network drive \\myhost.example.com\icingastable to fetch them from.

You can now add the repository on different machines with

Add-IcingaRepository `
    -Name 'Icinga Stable Local' `
    -RemotePath '\\myhost.example.com\icingastable';

Every file will then be fetched over this network share to the local machines.

Linux Webserver Example

Sync-IcingaRepository `
    -Name 'Icinga Stable Internal Web' `
    -Path '[email protected]:/var/www/icingastable/' `
    -RemotePath 'https://icingarepo.example.com/icingastable' `
    -Source 'https://packages.icinga.com/IcingaForWindows/stable/ifw.repo.json' `
    -UseSCP;

In this example we will sync all files to a Linux machine at /var/www/icingastable/. If we are running a local Apache or Nginx, we can create a web resource for this path and make it available in our network. We have to use -UseSCP, to tell Icinga for Windows to copy them to the Linux machine over scp. Please note that both, scp and ssh have to be installed on the system.

On different machines, you can then use

Add-IcingaRepository `
    -Name 'Icinga Stable Internal Web' `
    -RemotePath 'https://icingarepo.example.com/icingastable';

to make the repository available.

Sync from a Sync Example

Last but not least we have the method to sync repositories from a sync source, allowing us to distribute all Icinga for Windows files around or network on different zones as example.

Clone the repository to a local path:

Sync-IcingaRepository `
    -Name 'Icinga Stable Local' `
    -Path 'C:\icinga\icinga_stable' `
    -Source 'https://packages.icinga.com/IcingaForWindows/stable/ifw.repo.json';

Clone this repository to our internal web space:

Sync-IcingaRepository `
    -Name 'Icinga Stable Internal Web' `
    -Path '[email protected]:/var/www/icingastable/' `
    -RemotePath 'https://icingarepo.example.com/icingastable' `
    -Source 'C:\icinga\icinga_stable' `
    -UseSCP;

Update Sync Repositories

To update synced repositories, you can use Update-IcingaRepository. You can either update a specific repository by using the -Name argument or update all by leaving it empty.

Available Arguments

Argument Type Description
Name String The name of the repository to update. Leave empty to update all configured repositories
ForceTrust Switch By default repositories are validated with a hash, based on all files present inside the repository. If a repository is not providing a hash, it will be disabled after the sync for security reasons. In case the hash does not match with all files synced afterwards, the repository files will be deleted and the sync aborted. You can use this flag to ignore both states and always add the repository, regardless if the hash matches or the hash is not given

Update All Repositories

Updating all synced repositories is very easy, with a simple command call:

Update-IcingaRepository;

Once run, all files will be downloaded from the source and validated. In case validation fails or the source is not containing a repository hash, you can use -ForceTrust to ignore this and enable it regardless.

Update-IcingaRepository -ForceTrust;

Update Specific Repository

You can update a specific repository, by simply providing it's name:

Update-IcingaRepository -Name 'Icinga Stable Internal Web';

Like other methods, -ForceTrust will work here as well.

Updating Linux Repositories

There is no special mechanic required, as the entire configuration for the repository is stored inside the Icinga for Windows configuration.

For easier usage, it is however advised to use SSH keys, as otherwise each sync and update task will require you to enter your SSH password multiple times.