ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
683 Commits
26 Branches
Tree: 23b0e658e5
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '23b0e658e5'
${ noResults }
linux-formula/tests/pillar/system.sls

478 lines
13KB
Raw Blame History 

  1. linux:

  2.   network:

  3.     enabled: true

  4.     hostname: linux

  5.     fqdn: linux.ci.local

  6.   system:

  7.     enabled: true

  8.     at:

  9.       enabled: true

  10.       user:

  11.         root:

  12.           enabled: true

  13.         testuser:

  14.           enabled: true

  15.     cron:

  16.       enabled: true

  17.       user:

  18.         root:

  19.           enabled: true

  20.         testuser:

  21.           enabled: true

  22.     cluster: default

  23.     name: linux

  24.     domain: ci.local

  25.     environment: prd

  26.     purge_repos: true

  27.     directory:

  28.       /tmp/test:

  29.         makedirs: true

  30.     apparmor:

  31.       enabled: false

  32.     haveged:

  33.       enabled: true

  34.     prompt:

  35.       default: "linux.ci.local$"

  36.     kernel:

  37.       isolcpu: 1,2,3,4

  38.       elevator: deadline

  39.       boot_options:

  40.         - pti=off

  41.         - spectre_v2=auto

  42.       module:

  43.         module_1:

  44.           install:

  45.             command: /bin/true

  46.           remove:

  47.             enabled: false

  48.             command: /bin/false

  49.         module_2:

  50.           install:

  51.             enabled: false

  52.             command: /bin/false

  53.           remove:

  54.             command: /bin/true

  55.         module_3:

  56.           blacklist: true

  57.         module_4:

  58.           blacklist: false

  59.           alias:

  60.             "module*":

  61.               enabled: true

  62.             "module_*":

  63.               enabled: false

  64.         module_5:

  65.           softdep:

  66.             pre:

  67.               1:

  68.                 value: module_1

  69.               2:

  70.                 value: module_2

  71.                 enabled: false

  72.             post:

  73.               1:

  74.                 value: module_3

  75.               2:

  76.                 value: module_4

  77.                 enabled: false

  78.         module_6:

  79.           option:

  80.             opt_1: 111

  81.             opt_2: 222

  82.         module_7:

  83.           option:

  84.             opt_3:

  85.               value: 333

  86.             opt_4:

  87.               enabled: true

  88.               value: 444

  89.             opt_5:

  90.               enabled: false

  91.     cgroup:

  92.       group:

  93.         group_1:

  94.           controller:

  95.             cpu:

  96.               shares:

  97.                 value: 250

  98.           mapping:

  99.             subjects:

  100.             - '@group1'

  101.     sysfs:

  102.       enable_apply: true

  103.       scheduler:

  104.         block/sda/queue/scheduler: deadline

  105.       power:

  106.         mode:

  107.           power/state: 0660

  108.         owner:

  109.           power/state: "root:power"

  110.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  111.     motd:

  112.       - warning: |

  113.           #!/bin/sh

  114.           printf "WARNING: This is tcpcloud network.\n"

  115.           printf "  Unauthorized access is strictly prohibited.\n"

  116.           printf "\n"

  117.       - info: |

  118.           #!/bin/sh

  119.           printf -- "--[tcp cloud]---------------------------\n"

  120.           printf " Hostname  |  ${linux:system:name}\n"

  121.           printf " Domain    |  ${linux:system:domain}\n"

  122.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  123.           printf " Kernel    |  %s\n" "$(uname -r)"

  124.           printf -- "----------------------------------------\n"

  125.           printf "\n"

  126.     user:

  127.       root:

  128.         enabled: true

  129.         home: /root

  130.         name: root

  131.         maxdays: 365

  132.       testuser:

  133.         enabled: true

  134.         name: testuser

  135.         password: passw0rd

  136.         sudo: true

  137.         uid: 9999

  138.         full_name: Test User

  139.         home: /home/test

  140.         groups:

  141.           - db-ops

  142.           - salt-ops

  143.       salt_user1:

  144.         enabled: true

  145.         name: saltuser1

  146.         sudo: false

  147.         uid: 9991

  148.         full_name: Salt User1

  149.         home: /home/saltuser1

  150.         home_dir_mode: 755

  151.       salt_user2:

  152.         enabled: true

  153.         name: saltuser2

  154.         sudo: false

  155.         uid: 9992

  156.         full_name: Salt Sudo User2

  157.         home: /home/saltuser2

  158.         groups:

  159.           - sudogroup1

  160.     group:

  161.       testgroup:

  162.         enabled: true

  163.         name: testgroup

  164.         gid: 9999

  165.         system: true

  166.         addusers:

  167.           - salt_user1

  168.           - salt_user2

  169.       db-ops:

  170.         enabled: true

  171.         delusers:

  172.           - salt_user1

  173.           - dontexistatall

  174.       salt-ops:

  175.         enabled: true

  176.         name: salt-ops

  177.       sudogroup1:

  178.         enabled: true

  179.         name: sudogroup1

  180.       sudogroup2:

  181.         enabled: true

  182.         name: sudogroup2

  183.       sudogroup3:

  184.         enabled: false

  185.         name: sudogroup3

  186.     job:

  187.       test:

  188.         enabled: true

  189.         command: "/bin/sleep 3"

  190.         user: testuser

  191.         minute: 0

  192.         hour: 13

  193.     package:

  194.       htop:

  195.         version: latest

  196.     repo:

  197.       disabled_repo:

  198.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  199.         enabled: false

  200.       disabled_repo_left_proxy:

  201.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  202.         enabled: false

  203.         proxy:

  204.           enabled: true

  205.           https: https://127.0.5.1:443

  206.       saltstack:

  207.         source: "deb [arch=amd64] http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/ xenial main"

  208.         key_url: "http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/SALTSTACK-GPG-KEY.pub"

  209.         architectures: amd64

  210.         clean_file: true

  211.         pinning:

  212.           10:

  213.             enabled: true

  214.             pin: 'release o=SaltStack'

  215.             priority: 50

  216.             package: 'libsodium18'

  217.           20:

  218.             enabled: true

  219.             pin: 'release o=SaltStack'

  220.             priority: 1100

  221.             package: '*'

  222.       opencontrail:

  223.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  224.         keyid: E79EE90C

  225.         keyserver: keyserver.ubuntu.com

  226.         architectures: amd64

  227.         proxy:

  228.           enabled: true

  229.           https: https://127.0.5.1:443

  230.           #http: http://127.0.5.2:8080

  231.       apt-salt:

  232.         source: "deb http://apt.mirantis.com/xenial stable salt"

  233.         #key_url: http://apt.mirantis.com/public.gpg

  234.         # pub   4096R/A76882D3 2015-06-17

  235.         key: |

  236.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  237.           Version: GnuPG v1

  238. 

  239.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  240.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  241.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  242.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  243.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  244.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  245.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  246.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  247.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  248.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  249.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  250.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  251.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  252.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  253.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  254.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  255.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  256.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  257.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  258.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  259.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  260.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  261.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  262.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  263.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  264.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  265.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  266.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  267.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  268.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  269.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  270.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  271.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  272.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  273.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  274.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  275.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  276.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  277.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  278.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  279.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  280.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  281.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  282.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  283.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  284.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  285.           jtcwJrHue5Xn8UPSLkE=

  286.           =SWiA

  287.           -----END PGP PUBLIC KEY BLOCK-----

  288.         architectures: amd64

  289.         proxy:

  290.           enabled: true

  291.       apt-salt-nightly:

  292.         source: "deb http://apt.mirantis.com/xenial nightly salt"

  293.         key_url: http://apt.mirantis.com/public.gpg

  294.         architectures: amd64

  295.         proxy:

  296.           enabled: false

  297.       apt-extra-nightly:

  298.         source: "deb http://apt.mirantis.com/xenial nightly extra"

  299.         key_url: http://apt.mirantis.com/public.gpg

  300.         architectures: amd64

  301.     locale:

  302.       en_US:

  303.         enabled: true

  304.         default: true

  305.       cs_CZ:

  306.         enabled: true

  307.     autoupdates:

  308.       enabled: true

  309.     sudo:

  310.       enabled: true

  311.       alias:

  312.         runas:

  313.           DBA:

  314.           - postgres

  315.           - mysql

  316.           SALT:

  317.           - root

  318.         host:

  319.           LOCAL:

  320.           - localhost

  321.           PRODUCTION:

  322.           - db1

  323.           - db2

  324.         command:

  325.           SUDO_RESTRICTED_SU:

  326.           - /bin/vi /etc/sudoers

  327.           - /bin/su - root

  328.           - /bin/su -

  329.           - /bin/su

  330.           - /usr/sbin/visudo

  331.           SUDO_SHELLS:

  332.           - /bin/sh

  333.           - /bin/ksh

  334.           - /bin/bash

  335.           - /bin/rbash

  336.           - /bin/dash

  337.           - /bin/zsh

  338.           - /bin/csh

  339.           - /bin/fish

  340.           - /bin/tcsh

  341.           - /usr/bin/login

  342.           - /usr/bin/su

  343.           - /usr/su

  344.           SUDO_SALT_SAFE:

  345.           - /usr/bin/salt state*

  346.           - /usr/bin/salt service*

  347.           - /usr/bin/salt pillar*

  348.           - /usr/bin/salt grains*

  349.           - /usr/bin/salt saltutil*

  350.           - /usr/bin/salt-call state*

  351.           - /usr/bin/salt-call service*

  352.           - /usr/bin/salt-call pillar*

  353.           - /usr/bin/salt-call grains*

  354.           - /usr/bin/salt-call saltutil*

  355.           SUDO_SALT_TRUSTED:

  356.           - /usr/bin/salt*

  357.       users:

  358.         saltuser1: {}

  359.         saltuser2:

  360.           hosts:

  361.           - LOCAL

  362.         # User Alias:

  363.         DBA:

  364.           hosts:

  365.           - ALL

  366.           commands:

  367.           - SUDO_SALT_SAFE

  368.       groups:

  369.         db-ops:

  370.           hosts:

  371.           - ALL

  372.           - '!PRODUCTION'

  373.           runas:

  374.           - DBA

  375.           commands:

  376.           - /bin/cat *

  377.           - /bin/less *

  378.           - /bin/ls *

  379.           - SUDO_SALT_SAFE

  380.           - '!SUDO_SHELLS'

  381.           - '!SUDO_RESTRICTED_SU'

  382.         salt-ops:

  383.           hosts:

  384.           - 'ALL'

  385.           runas:

  386.           - SALT

  387.           commands:

  388.           - SUDO_SALT_TRUSTED

  389.         salt-ops2:

  390.           name: salt-ops

  391.           runas:

  392.           - DBA

  393.           commands:

  394.           - SUDO_SHELLS

  395.         sudogroup1:

  396.           commands:

  397.             - ALL

  398.         sudogroup2:

  399.           commands:

  400.             - ALL

  401.           hosts:

  402.             - localhost

  403.           users:

  404.             - test

  405.           nopasswd: false

  406.         sudogroup3:

  407.           commands:

  408.             - ALL

  409.     env:

  410.       BOB_VARIABLE: Alice

  411.       BOB_PATH:

  412.         - /srv/alice/bin

  413.         - /srv/bob/bin

  414.       HTTPS_PROXY: https://127.0.4.1:443

  415.       http_proxy: http://127.0.4.2:80

  416.       ftp_proxy: ftp://127.0.4.3:2121

  417.       no_proxy:

  418.         - 192.168.0.1

  419.         - 192.168.0.2

  420.         - .saltstack.com

  421.         - .ubuntu.com

  422.         - .mirantis.com

  423.         - .launchpad.net

  424.         - .dummy.net

  425.         - .local

  426.       LANG: C

  427.       LC_ALL: C

  428.     login_defs:

  429.       PASS_MAX_DAYS:

  430.         value: 99

  431.     shell:

  432.       umask: '027'

  433.       timeout: 900

  434.     profile:

  435.       vi_flavors.sh: |

  436.         export PAGER=view

  437.         alias vi=vim

  438.       locales: |

  439.         export LANG=en_US

  440.         export LC_ALL=en_US.UTF-8

  441. 

  442.     # pillar for proxy configuration

  443.     proxy:

  444.       # for package managers

  445.       pkg:

  446.         enabled: true

  447.         https: https://127.0.2.1:4443

  448.         #http: http://127.0.2.2

  449.         ftp: none

  450.       # fallback, system defaults

  451.       https: https://127.0.1.1:443

  452.       #http: http://127.0.1.2

  453.       ftp: ftp://127.0.1.3

  454.       noproxy:

  455.         - host1

  456.         - host2

  457.         - .local

  458. 

  459.     # pillars for netconsole setup

  460.     netconsole:

  461.       enabled: true

  462.       port: 514

  463.       loglevel: debug

  464.       target:

  465.         192.168.0.1:

  466.           mac: "ff:ff:ff:ff:ff:ff"

  467.           interface: bond0

  468.     atop:

  469.       enabled: true

  470.       interval: 20

  471.       logpath: "/var/mylog/atop"

  472.       outfile: "/var/mylog/atop/daily.log"

  473.     mcelog:

  474.       enabled: true

  475.       logging:

  476.         syslog: true

  477.         syslog_error: true