Saltstack Official Linux Formula
Du kannst nicht mehr als 25 Themen auswählen Themen müssen entweder mit einem Buchstaben oder einer Ziffer beginnen. Sie können Bindestriche („-“) enthalten und bis zu 35 Zeichen lang sein.

223 Zeilen
4.9KB

  1. linux:
  2. system:
  3. enabled: true
  4. cluster: default
  5. name: linux
  6. timezone: Europe/Prague
  7. domain: local
  8. environment: prd
  9. hostname: system.pillar.local
  10. apparmor:
  11. enabled: false
  12. haveged:
  13. enabled: true
  14. console:
  15. tty0:
  16. autologin: root
  17. ttyS0:
  18. autologin: root
  19. rate: 115200
  20. term: xterm
  21. prompt:
  22. default: "linux.ci.local$"
  23. kernel:
  24. sriov: True
  25. isolcpu: 1,2,3,4
  26. hugepages:
  27. large:
  28. default: true
  29. size: 1G
  30. count: 210
  31. mount_point: /mnt/hugepages_1GB
  32. motd:
  33. - warning: |
  34. #!/bin/sh
  35. printf "WARNING: This is tcpcloud network.\n"
  36. printf " Unauthorized access is strictly prohibited.\n"
  37. printf "\n"
  38. - info: |
  39. #!/bin/sh
  40. printf -- "--[tcp cloud]---------------------------\n"
  41. printf " Hostname | ${linux:system:name}\n"
  42. printf " Domain | ${linux:system:domain}\n"
  43. printf " System | %s\n" "$(lsb_release -s -d)"
  44. printf " Kernel | %s\n" "$(uname -r)"
  45. printf -- "----------------------------------------\n"
  46. printf "\n"
  47. user:
  48. root:
  49. enabled: true
  50. home: /root
  51. name: root
  52. test:
  53. enabled: true
  54. name: test
  55. sudo: true
  56. uid: 9999
  57. full_name: Test User
  58. home: /home/test
  59. groups:
  60. - root
  61. salt_user1:
  62. enabled: true
  63. name: saltuser1
  64. sudo: false
  65. uid: 9991
  66. full_name: Salt User1
  67. home: /home/saltuser1
  68. salt_user2:
  69. enabled: true
  70. name: saltuser2
  71. sudo: false
  72. uid: 9992
  73. full_name: Salt Sudo User2
  74. home: /home/saltuser2
  75. group:
  76. test:
  77. enabled: true
  78. name: test
  79. gid: 9999
  80. system: true
  81. db-ops:
  82. enabled: true
  83. name: testgroup
  84. salt-ops:
  85. enabled: true
  86. name: sudogroup0
  87. sudogroup1:
  88. enabled: true
  89. name: sudogroup1
  90. sudogroup2:
  91. enabled: true
  92. name: sudogroup2
  93. sudogroup3:
  94. enabled: false
  95. name: sudogroup3
  96. job:
  97. test:
  98. enabled: true
  99. command: "/bin/sleep 3"
  100. user: test
  101. minute: 0
  102. hour: 13
  103. package:
  104. htop:
  105. version: latest
  106. repo:
  107. opencontrail:
  108. source: "deb http://ppa.launchpad.net/tcpcloud/contrail-2.20/ubuntu trusty main"
  109. architectures: amd64
  110. policyrcd:
  111. - package: cassandra
  112. action: exit 101
  113. - package: '*'
  114. action: switch
  115. locale:
  116. en_US.UTF-8:
  117. enabled: true
  118. default: true
  119. "cs_CZ.UTF-8 UTF-8":
  120. enabled: true
  121. autoupdates:
  122. enabled: true
  123. sudo:
  124. enabled: true
  125. alias:
  126. runas:
  127. DBA:
  128. - postgres
  129. - mysql
  130. SALT:
  131. - root
  132. host:
  133. LOCAL:
  134. - localhost
  135. PRODUCTION:
  136. - db1
  137. - db2
  138. command:
  139. SUDO_RESTRICTED_SU:
  140. - /bin/vi /etc/sudoers
  141. - /bin/su - root
  142. - /bin/su -
  143. - /bin/su
  144. - /usr/sbin/visudo
  145. SUDO_SHELLS:
  146. - /bin/sh
  147. - /bin/ksh
  148. - /bin/bash
  149. - /bin/rbash
  150. - /bin/dash
  151. - /bin/zsh
  152. - /bin/csh
  153. - /bin/fish
  154. - /bin/tcsh
  155. - /usr/bin/login
  156. - /usr/bin/su
  157. - /usr/su
  158. SUDO_SALT_SAFE:
  159. - /usr/bin/salt state*
  160. - /usr/bin/salt service*
  161. - /usr/bin/salt pillar*
  162. - /usr/bin/salt grains*
  163. - /usr/bin/salt saltutil*
  164. - /usr/bin/salt-call state*
  165. - /usr/bin/salt-call service*
  166. - /usr/bin/salt-call pillar*
  167. - /usr/bin/salt-call grains*
  168. - /usr/bin/salt-call saltutil*
  169. SUDO_SALT_TRUSTED:
  170. - /usr/bin/salt*
  171. users:
  172. saltuser1: {}
  173. saltuser2:
  174. hosts:
  175. - LOCAL
  176. # User Alias:
  177. DBA:
  178. hosts:
  179. - ALL
  180. commands:
  181. - SUDO_SALT_SAFE
  182. groups:
  183. db-ops:
  184. hosts:
  185. - ALL
  186. - '!PRODUCTION'
  187. runas:
  188. - DBA
  189. commands:
  190. - /bin/cat *
  191. - /bin/less *
  192. - /bin/ls *
  193. - SUDO_SALT_SAFE
  194. - '!SUDO_SHELLS'
  195. - '!SUDO_RESTRICTED_SU'
  196. salt-ops:
  197. hosts:
  198. - 'ALL'
  199. runas:
  200. - SALT
  201. commands:
  202. - SUDO_SALT_TRUSTED
  203. salt-ops2:
  204. name: salt-ops
  205. runas:
  206. - DBA
  207. commands:
  208. - SUDO_SHELLS
  209. sudogroup1:
  210. commands:
  211. - ALL
  212. sudogroup2:
  213. commands:
  214. - ALL
  215. hosts:
  216. - localhost
  217. users:
  218. - test
  219. nopasswd: false
  220. sudogroup3:
  221. commands:
  222. - ALL