ExternalMirrors
/
linux-formula
spogulis no https://github.com/salt-formulas/salt-formula-linux
Vērot 1
Pievienot zvaigznīti 0
Atdalīts 1
Kods Problēmas 0 Laidieni 8 Vikivietne Aktivitāte
Saltstack Official Linux Formula
Nevar pievienot vairāk kā 25 tēmas Tēmai ir jāsākas ar burtu vai ciparu, tā var saturēt domu zīmes ('-') un var būt līdz 35 simboliem gara.
769 Revīzijas
26 Atzari
Koks: 16a8cb567b
Atzari Tagi
${ item.name }
Izveidot atzaru ${ searchTerm }
no '16a8cb567b'
${ noResults }
linux-formula/linux/map.jinja

497 rindas
12KB
Neapstrādāts Vainot Vēsture 

  1. {% set system = salt['grains.filter_by']({

  2.     'Arch': {

  3.         'pkgs': ['sudo', 'vim', 'wget'],

  4.         'utc': true,

  5.         'user': {},

  6.         'group': {},

  7.         'job': {},

  8.         'limit': {},

  9.         'locale': {},

  10.         'motd': {},

  11.         'env': {},

  12.         'profile': {},

  13.         'proxy': {},

  14.         'repo': {},

  15.         'package': {},

  16.         'autoupdates': {

  17.           'pkgs': []

  18.          },

  19.         'selinux': 'permissive',

  20.         'ca_certs_dir': '/usr/local/share/ca-certificates',

  21.         'ca_certs_bin': 'update-ca-certificates',

  22.         'atop': {

  23.              'enabled': false,

  24.              'interval': '20',

  25.              'autostart': true,

  26.              'logpath': '/var/log/atop',

  27.              'outfile': '/var/log/atop/daily.log'

  28.          },

  29.         'at': {

  30.              'pkgs': [],

  31.              'services': []

  32.         },

  33.         'cron': {

  34.              'pkgs': [],

  35.              'services': []

  36.         },

  37.     },

  38.     'Debian': {

  39.         'pkgs': ['python-apt', 'apt-transport-https', 'libmnl0'],

  40.         'utc': true,

  41.         'user': {},

  42.         'group': {},

  43.         'job': {},

  44.         'limit': {},

  45.         'locale': {},

  46.         'motd': {},

  47.         'env': {},

  48.         'profile': {},

  49.         'proxy': {},

  50.         'repo': {},

  51.         'package': {},

  52.         'autoupdates': {

  53.              'pkgs': ['unattended-upgrades']

  54.          },

  55.         'selinux': 'permissive',

  56.         'ca_certs_dir': '/usr/local/share/ca-certificates',

  57.         'ca_certs_bin': 'update-ca-certificates',

  58.         'atop': {

  59.              'enabled': false,

  60.              'interval': '20',

  61.              'autostart': true,

  62.              'logpath': '/var/log/atop',

  63.              'outfile': '/var/log/atop/daily.log'

  64.          },

  65.         'at': {

  66.              'pkgs': ['at'],

  67.              'services': ['atd'],

  68.              'user': {}

  69.          },

  70.         'cron': {

  71.              'pkgs': ['cron'],

  72.              'services': ['cron'],

  73.              'user': {}

  74.          },

  75.     },

  76.     'RedHat': {

  77.         'pkgs': ['policycoreutils', 'policycoreutils-python', 'telnet', 'wget'],

  78.         'utc': true,

  79.         'user': {},

  80.         'group': {},

  81.         'job': {},

  82.         'limit': {},

  83.         'locale': {},

  84.         'motd': {},

  85.         'env': {},

  86.         'profile': {},

  87.         'proxy': {},

  88.         'repo': {},

  89.         'package': {},

  90.         'autoupdates': {

  91.              'pkgs': []

  92.          },

  93.         'selinux': 'permissive',

  94.         'ca_certs_dir': '/etc/pki/ca-trust/source/anchors',

  95.         'ca_certs_bin': 'update-ca-trust extract',

  96.         'atop': {

  97.              'enabled': false,

  98.              'interval': '20',

  99.              'autostart': true,

  100.              'logpath': '/var/log/atop',

  101.              'outfile': '/var/log/atop/daily.log'

  102.          },

  103.         'at': {

  104.              'pkgs': [],

  105.              'services': []

  106.         },

  107.         'cron': {

  108.              'pkgs': [],

  109.              'services': []

  110.         },

  111.     },

  112. }, merge=salt['grains.filter_by']({

  113.     'bullseye': {

  114.         'pkgs': ['python3-apt', 'apt-transport-https', 'libmnl0'],

  115.     },

  116.     'bookworm': {

  117.         'pkgs': ['python3-apt', 'apt-transport-https', 'libmnl0'],

  118.     },

  119.     'sid': {

  120.         'pkgs': ['python3-apt', 'apt-transport-https', 'libmnl0'],

  121.     },

  122. }, grain='oscodename', merge=salt['pillar.get']('linux:system'))) %}

  123. 

  124. {% set banner = salt['grains.filter_by']({

  125.     'BaseDefaults': {

  126.         'enabled': false,

  127.     },

  128. }, grain='os_family', merge=salt['pillar.get']('linux:system:banner'), base='BaseDefaults') %}

  129. 

  130. {% set auth = salt['grains.filter_by']({

  131.     'Arch': {

  132.         'enabled': false,

  133.         'duo': {

  134.             'enabled': false,

  135.             'duo_host': 'localhost',

  136.             'duo_ikey': '',

  137.             'duo_skey': ''

  138.         }

  139.     },

  140.     'RedHat': {

  141.         'enabled': false,

  142.         'duo': {

  143.             'enabled': false,

  144.             'duo_host': 'localhost',

  145.             'duo_ikey': '',

  146.             'duo_skey': ''

  147.         }

  148.     },

  149.     'Debian': {

  150.         'enabled': false,

  151.         'duo': {

  152.             'enabled': false,

  153.             'duo_host': 'localhost',

  154.             'duo_ikey': '',

  155.             'duo_skey': ''

  156.         }

  157.     },

  158. }, grain='os_family', merge=salt['pillar.get']('linux:system:auth')) %}

  159. 

  160. {% set ldap = salt['grains.filter_by']({

  161.     'RedHat': {

  162.         'enabled': false,

  163.         'pkgs': ['openldap-clients', 'nss-pam-ldapd', 'authconfig', 'nscd'],

  164.         'version': '3',

  165.         'scope': 'sub',

  166.         'uid': 'nslcd',

  167.         'gid': 'nslcd',

  168.     },

  169.     'Debian': {

  170.         'enabled': false,

  171.         'pkgs': ['libnss-ldapd', 'libpam-ldapd', 'nscd'],

  172.         'version': '3',

  173.         'scope': 'sub',

  174.         'uid': 'nslcd',

  175.         'gid': 'nslcd',

  176.     },

  177. }, grain='os_family', merge=salt['pillar.get']('linux:system:auth:ldap')) %}

  178. 

  179. {%- load_yaml as login_defs_defaults %}

  180. Debian:

  181.     CHFN_RESTRICT:

  182.         value: 'rwh'

  183.     DEFAULT_HOME:

  184.         value: 'yes'

  185.     ENCRYPT_METHOD:

  186.         value: 'SHA512'

  187.     ENV_PATH:

  188.         value: 'PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games'

  189.     ENV_SUPATH:

  190.         value: 'PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'

  191.     ERASECHAR:

  192.         value: '0177'

  193.     FAILLOG_ENAB:

  194.         value: 'yes'

  195.     FTMP_FILE:

  196.         value: '/var/log/btmp'

  197.     GID_MAX:

  198.         value: '60000'

  199.     GID_MIN:

  200.         value: '1000'

  201.     HUSHLOGIN_FILE:

  202.         value: '.hushlogin'

  203.     KILLCHAR:

  204.         value: '025'

  205.     LOGIN_RETRIES:

  206.         value: '5'

  207.     LOGIN_TIMEOUT:

  208.         value: '60'

  209.     LOG_OK_LOGINS:

  210.         value: 'no'

  211.     LOG_UNKFAIL_ENAB:

  212.         value: 'no'

  213.     MAIL_DIR:

  214.         value: '/var/mail'

  215.     PASS_MAX_DAYS:

  216.         value: '99999'

  217.     PASS_MIN_DAYS:

  218.         value: '0'

  219.     PASS_WARN_AGE:

  220.         value: '7'

  221.     SU_NAME:

  222.         value: 'su'

  223.     SYSLOG_SG_ENAB:

  224.         value: 'yes'

  225.     SYSLOG_SU_ENAB:

  226.         value: 'yes'

  227.     TTYGROUP:

  228.         value: 'tty'

  229.     TTYPERM:

  230.         value: '0600'

  231.     UID_MAX:

  232.         value: '60000'

  233.     UID_MIN:

  234.         value: '1000'

  235.     UMASK:

  236.         value: '022'

  237.     USERGROUPS_ENAB:

  238.         value: 'yes'

  239. {%- endload %}

  240. {%- set login_defs = salt['grains.filter_by'](login_defs_defaults,

  241.     grain='os_family', merge=salt['pillar.get']('linux:system:login_defs')) %}

  242. 

  243. {#    'network_name', #}

  244. 

  245. {% set interface_params = [

  246.     'gateway',

  247.     'mtu',

  248.     'network',

  249.     'broadcast',

  250.     'master',

  251.     'miimon',

  252.     'ovs_ports',

  253.     'ovs_bridge',

  254.     'mode',

  255.     'port_type',

  256.     'peer',

  257.     'lacp-rate',

  258.     'dns-search',

  259.     'up_cmds',

  260.     'pre_up_cmds',

  261.     'post_up_cmds',

  262.     'down_cmds',

  263.     'pre_down_cmds',

  264.     'post_down_cmds',

  265.     'maxwait',

  266.     'stp',

  267.     'gro',

  268.     'rx',

  269.     'tx',

  270.     'sg',

  271.     'tso',

  272.     'ufo',

  273.     'gso',

  274.     'lro',

  275.     'lacp_rate',

  276.     'ad_select',

  277.     'downdelay',

  278.     'updelay',

  279.     'hashing-algorithm',

  280.     'hardware-dma-ring-rx',

  281.     'hwaddr',

  282.     'noifupdown',

  283.     'arp_ip_target',

  284.     'primary',

  285. ] %}

  286. {% set debian_headers = "linux-headers-" + grains.get('kernelrelease')|string %}

  287. {% set network = salt['grains.filter_by']({

  288.     'Arch': {

  289.         'pkgs': ['wpa_supplicant', 'dhclient', 'wireless_tools', 'ifenslave'],

  290.         'bridge_pkgs': ['bridge-utils', 'vlan'],

  291.         'ovs_pkgs': ['openvswitch-switch', 'vlan'],

  292.         'hostname_file': '/etc/hostname',

  293.         'network_manager': False,

  294.         'systemd': {},

  295.         'interface': {},

  296.         'interface_params': interface_params,

  297.         'bridge': 'none',

  298.         'proxy': {

  299.            'host': 'none',

  300.         },

  301.         'host': {},

  302.         'mine_dns_records': False,

  303.         'dhclient_config': '/etc/dhcp/dhclient.conf',

  304.         'ovs_nowait': False,

  305.     },

  306.     'Debian': {

  307.         'pkgs': ['ifenslave'],

  308.         'hostname_file': '/etc/hostname',

  309.         'bridge_pkgs': ['bridge-utils', 'vlan'],

  310.         'ovs_pkgs': ['openvswitch-switch', 'bridge-utils', 'vlan'],

  311.         'dpdk_pkgs': ['dpdk', 'dpdk-dev', 'dpdk-igb-uio-dkms', 'dpdk-rte-kni-dkms', debian_headers.encode('utf8') ],

  312.         'network_manager': False,

  313.         'systemd': {},

  314.         'interface': {},

  315.         'interface_params': interface_params,

  316.         'bridge': 'none',

  317.         'proxy': {

  318.            'host': 'none'

  319.         },

  320.         'host': {},

  321.         'mine_dns_records': False,

  322.         'dhclient_config': '/etc/dhcp/dhclient.conf',

  323.         'ovs_nowait': False,

  324.     },

  325.     'RedHat': {

  326.         'pkgs': ['iputils'],

  327.         'bridge_pkgs': ['bridge-utils', 'vlan'],

  328.         'ovs_pkgs': ['openvswitch-switch', 'bridge-utils', 'vlan'],

  329.         'hostname_file': '/etc/sysconfig/network',

  330.         'network_manager': False,

  331.         'systemd': {},

  332.         'interface': {},

  333.         'interface_params': interface_params,

  334.         'bridge': 'none',

  335.         'proxy': {

  336.            'host': 'none'

  337.         },

  338.         'host': {},

  339.         'mine_dns_records': False,

  340.         'dhclient_config': '/etc/dhcp/dhclient.conf',

  341.         'ovs_nowait': False,

  342.     },

  343. }, grain='os_family', merge=salt['pillar.get']('linux:network')) %}

  344. 

  345. {% set storage = salt['grains.filter_by']({

  346.     'Arch': {

  347.         'mount': {},

  348.         'swap': {},

  349.         'disk': {},

  350.         'lvm': {},

  351.         'lvm_services': ['lvm2-lvmetad', 'lvm2-lvmpolld', 'lvm2-monitor'],

  352.         'loopback': {},

  353.         'nfs': {

  354.              'pkgs': ['nfs-utils']

  355.          },

  356.         'multipath': {

  357.              'enabled': False,

  358.              'pkgs': ['multipath-tools', 'multipath-tools-boot'],

  359.              'service': ''

  360.          },

  361.     },

  362.     'Debian': {

  363.         'mount': {},

  364.         'swap': {},

  365.         'lvm': {},

  366.         'disk': {},

  367.         'lvm_services': ['lvm2-lvmetad', 'lvm2-lvmpolld', 'lvm2-monitor'],

  368.         'loopback': {},

  369.         'nfs': {

  370.              'pkgs': ['nfs-common']

  371.          },

  372.         'multipath': {

  373.              'enabled': False,

  374.              'pkgs': ['multipath-tools', 'multipath-tools-boot'],

  375.              'service': 'multipath-tools'

  376.          },

  377.         'lvm_pkgs': ['lvm2'],

  378.     },

  379.     'RedHat': {

  380.         'mount': {},

  381.         'swap': {},

  382.         'lvm': {},

  383.         'disk': {},

  384.         'lvm_services': ['lvm2-lvmetad', 'lvm2-lvmpolld', 'lvm2-monitor'],

  385.         'loopback': {},

  386.         'nfs': {

  387.              'pkgs': ['nfs-utils']

  388.          },

  389.         'multipath': {

  390.              'enabled': False,

  391.              'pkgs': [],

  392.              'service': 'multipath'

  393.          },

  394.     },

  395. }, merge=salt['grains.filter_by']({

  396.     'CentOS Stream 8': {

  397.       'lvm_services': ['lvm2-lvmpolld', 'lvm2-monitor'],

  398.     },

  399.     'focal': {

  400.       'lvm_services': ['lvm2-monitor'],

  401.     },

  402.     'buster': {

  403.         'lvm_services': ['lvm2-monitor'],

  404.     },

  405.     'bullseye': {

  406.         'lvm_services': ['lvm2-monitor'],

  407.     },

  408.     'bookworm': {

  409.         'lvm_services': ['lvm2-monitor'],

  410.     },

  411.     'sid': {

  412.         'lvm_services': ['lvm2-monitor'],

  413.     },

  414.     'trusty': {

  415.         'lvm_services': ['udev'],

  416.     },

  417. }, grain='oscodename', merge=salt['pillar.get']('linux:storage'))) %}

  418. 

  419. {% set monitoring = salt['grains.filter_by']({

  420.     'default': {

  421.         'bond_status': {

  422.             'interfaces': False

  423.         },

  424.         'zombie': {

  425.             'warn': 3,

  426.             'crit': 7,

  427.         },

  428.         'procs': {

  429.             'warn': 5000,

  430.             'crit': 10000,

  431.         },

  432.         'load': {

  433.             'warn': '6,4,2',

  434.             'crit': '12,8,4',

  435.         },

  436.         'swap': {

  437.             'warn': '50%',

  438.             'crit': '20%',

  439.         },

  440.         'disk': {

  441.             'warn': '15%',

  442.             'crit': '5%',

  443.         },

  444.         'netlink': {

  445.             'interfaces': [],

  446.             'interface_regex': '^[a-z0-9]+$',

  447.             'ignore_selected': False,

  448.         },

  449.         'cpu_usage_percentage': {

  450.               'warn': 90.0,

  451.         },

  452.         'memory_usage_percentage': {

  453.             'warn': 90.0,

  454.             'major': 95.0,

  455.         },

  456.         'disk_usage_percentage': {

  457.             'warn': 85.0,

  458.             'major': 95.0,

  459.         },

  460.         'swap_usage_percentage': {

  461.             'warn': 50.0,

  462.             'minor': 90.0,

  463.         },

  464.         'inodes_usage_percentage': {

  465.             'warn': 85.0,

  466.             'major': 95.0,

  467.         },

  468.         'system_load_threshold': {

  469.             'warn': 1,

  470.             'crit': 2,

  471.         },

  472.         'rx_packets_dropped_threshold': {

  473.             'warn': 100,

  474.         },

  475.         'tx_packets_dropped_threshold': {

  476.             'warn': 100,

  477.         },

  478.         'swap_in_rate': {

  479.             'warn': 1024 * 1024,

  480.         },

  481.         'swap_out_rate': {

  482.             'warn': 1024 * 1024,

  483.         },

  484.         'failed_auths_threshold': {

  485.             'warn': 5,

  486.         },

  487.         'net_rx_action_per_cpu_threshold': {

  488.             'warning': '500',

  489.             'minor': '5000'

  490.         },

  491.         'packets_dropped_per_cpu_threshold': {

  492.             'minor': '0',

  493.             'major': '100'

  494.         }

  495.     },

  496. }, grain='os_family', merge=salt['pillar.get']('linux:monitoring')) %}