Skip to content

Periodic config reload when remote source is included #149

Open

Description

@deloid

EDIT: I have completely misinterpreted config & include inheritance and also the purpose of the INCLUDES MSI property (I interpreted any configuration specified in includes that was already specified in the parent, would be overwritten (ie. NRPEServer = enabled, tls min version = tls1.3, etc). I've since properly tested and it worked. I've struck out my original requests and left them here though and edited the original issue name to reflect my actual request.

Further to using a remote config included during installation, is there a periodic background config reload if the config has changed (hash compare)? https://nsclient.org/docs/settings/#http-settings.
I'm coming up blank in trying to find the settings reference, but I believe the periodic reload is handled by this:

[/settings/core]
settings maintenance interval=5m

I could be way off with that though. This is all I can find referring to the refresh and that above setting mickem/nscp#378

Are there any plans to implement settings store configuration like NSClient's boot.ini to specify the config source during service start or the ability to change config sources via snclient.exe?

An installer option to specify a configuration source (ie. remote https) during installation would also be good. On Windows, it's the CONFIGURATION_TYPE property in the NSClient MSI - https://nsclient.org/docs/installing/#msi-options.

Activity

  1. changed the title [-]NSClient boot.ini functionality or specify remote config during install?[/-] [+]Periodic config reload when remote source is included[/+] on Aug 21, 2024
  2. sni commented on Aug 26, 2024

    @sni
    Contributor

    right now there is no automatic reload of (remote) config includes. But there is a rest api endpoint to trigger a config reload. Would that help?

  3. deloid commented on Aug 30, 2024

    @deloid
    Author

    Yes, that does look like it will help in the meantime paired with a scheduled task or something. Thank you for the reply :)

    Is a regular hash-check/similar and reload something that could be looked for a future release? It would very useful for on going configuration maintenance. In our case, we add external check script definitions to a remote config fairly regularly.

  4. sni commented on Aug 30, 2024

    @sni
    Contributor

    right now it's not on the roadmap. But if someone wants to look into this...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requesthelp wantedExtra attention is needed

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions