This is also covers the following CIS items
* CIS 1.7.1.5 Ensure permissions on /etc/issue are configured (Scored)

Change-Id: If8c237ff4db7e9ab7ee244278d28f632e73ecb56
Related-Prod: PROD-19166

Change-Id: I55ebc405f4534c02c3637bf45100031ea51c81de

saltstack 2017.7 is failing to create user when default group for user is not present, commit which changes this behavior from 2016.3 is a18dbe0c11

Change-Id: I478d632e8aa7303ab2ee32b033478148c18c473d

This patch unifies /etc/motd managing approach for both RedHat and
Ubuntu systems. Providing a string value via linux:system:motd
pillar will configure static /etc/motd and remove dynamic scripts
from /etc/update-motd.d (if present).

update-motd can safely be removed because Ubuntu supports dynamic
motd by pam_motd means since 2009.

Related-Prod: PROD-17287

Change-Id: Ic9b7e18abb12cfe8704717b14dc1237e40715319

Prod-Related: PROD-19097

Change-Id: I165b0617259523b3b1309d42107b43663b7730a4

Allow hugepages to be used right away. This is a best effort attempt,
as memory might be too fragmented to free enough contiguous regions
for all hugepages, so early allocation during boot remains the norm.

This allows using ovs-switchd-dpdk without rebooting the node first.

Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>

iteritems() was dropped in recent Python3 releases and items() is compatible
with Python 2.7.

Change-Id: Ia286ac4377c6b03ce16c9dc1a5c7d3441efe7e12

file.managed use "mode" option and not "file_mode" to configure the
perms of the managed file.
See: https://docs.saltstack.com/en/latest/ref/states/all/salt.states.file.html#salt.states.file.managed

Needed for https://jira.opnfv.org/browse/ARMBAND-341

Change-Id: Ibd0a024bcd69089d9835a18f2bb803c952e13967

During remove previous kernel apt installs latest available kernel

Change-Id: Ife9c1a57257bd790e01a597d1a853cadd38bb03b

The 'system.kernel.elevator' and 'system.kernel.isolcpu' options
have been kept for backward compatibility and should be used in new
fashion way with system.kernel.boot_options parameter.

Change-Id: I51f7167b8b8946500df2065ee6b02bcf21809bc9

This patch implements pam ldap integration for linux host.

Related Prod: PROD-16022
Customer-Found
Change-Id: I2a05cfb4821d176724f03c61253700ef1f4d0bd8

The patches fixes the situation when repo is not defined but
formula tries to get access to source parameter of the repo.

Change-Id: Ifa7b8475bfc2cece6803ab7da7b2d0d5cc12b652
Related-PROD: PROD-17001

PROD-16845

Change-Id: Iabc6f4584e34c988e67ff42ee8ceb20c469823d6

Change-Id: I811cbb17d98df357c4b44bd53ddcc5d01a06537f

* This merge request gives the ability to add shared libaries without set LD_LIBRARY_PATH variable.

 1. Generate file in /etc/ld.so.conf.d/
 2. update /etc/ld.so.cache with ldconfig command

example pillars:

linux:
  system:
    enabled: True
    ld:
      libraries:
        java:
          - /usr/lib/jvm/jre-openjdk/lib/amd64/server
          - /opt/java/jre/lib/amd64/server

* fix format in README.rst for Shared Libraries

* Fix for #137 - change pillar libraries key to library

Change-Id: I813a2fb6e3d155e3b93d25bee60b7a91e5fe2bbd

Change-Id: Idb8321ef0fa1811a1169c92b603b43f80413c9f2

Change-Id: I1e190f1f5b34a049335efbecffad3dddf7c41644

Change-Id: Id9d9178ca7417df1b8a83110e92cf4a62907982d

Change-Id: Ib7f34360b7580cbc4260b826d1eb21d443801fa5

Change-Id: Ida91f545cc705457d1bc567fbee483e14a202a3a

Change-Id: I3a2a0ac5518701b4c9de28437e9aefd1307ca01b

Change-Id: I7919ef2273185081d56a40af1e8fb4e602da41a2

Change-Id: I41f63e70ad4bd30dc478eeafeaf2823fa7508373

* make all change in selinux mode persistent

* rework code to correspond with comments obtain from review about duplicity and useless code

* repair bad indent, remove bracket

Change-Id: I59297736406469e5314236cb40851d9a6f94386e

Change-Id: I29cfe2cd9dd39b74a1d39313f78dfddc87cb79b8

- skip_verify: {{ true if package.verify else false }}
will be true when package:verify is set to true
And that confuses.

"skip verify" means "skip any verify process" and package should
not be verified during installation

Currently, for disabling verification we use:
linux:
  system:
    package:
      netapp-offload-tool:
        verify: true

And anyone who is reading reclass model can be easily perplexed.
Patchset fixes that issue.

Change-Id: I38d60ff3dbe651e14898c4937fc7dddad36204be

Change-Id: I71c2dd4b1970b39427beda6465b7a4726b12897b

Change-Id: Id571945585863a08bd2317b57ecc6123a16e1857

Change-Id: I74f63a705de8abef146cd1a77f8563e5de5d7f8d

Change-Id: I22e512e3dcebea3bd5bc1ada08bf2e3c0e6f9250

Change-Id: I3fbc02a9073b88b71de2645057cc9bd2b2ff9d21

- Add posibility do delete user password
 - Delete any password, if no other option has been passed
 - Allow to pass hash\plain password
 - Allow to unchange password

Change-Id: Id2b7234ca5d4417475b2114e74840292fc57d0de

Change-Id: I2163dbdee38e1b9c5c4dec6611550f16fdf1373b