Saltstack Official Linux Formula
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.

369 lines
11KB

  1. linux:
  2. system:
  3. enabled: true
  4. cluster: default
  5. name: linux
  6. domain: local
  7. environment: prd
  8. hostname: system.pillar.local
  9. purge_repos: true
  10. directory:
  11. /tmp/test:
  12. makedirs: true
  13. apparmor:
  14. enabled: false
  15. haveged:
  16. enabled: true
  17. prompt:
  18. default: "linux.ci.local$"
  19. kernel:
  20. isolcpu: 1,2,3,4
  21. elevator: deadline
  22. cgroup:
  23. group:
  24. group_1:
  25. controller:
  26. cpu:
  27. shares:
  28. value: 250
  29. mapping:
  30. subjects:
  31. - '@group1'
  32. sysfs:
  33. scheduler:
  34. block/sda/queue/scheduler: deadline
  35. power:
  36. mode:
  37. power/state: 0660
  38. owner:
  39. power/state: "root:power"
  40. devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave
  41. motd:
  42. - warning: |
  43. #!/bin/sh
  44. printf "WARNING: This is tcpcloud network.\n"
  45. printf " Unauthorized access is strictly prohibited.\n"
  46. printf "\n"
  47. - info: |
  48. #!/bin/sh
  49. printf -- "--[tcp cloud]---------------------------\n"
  50. printf " Hostname | ${linux:system:name}\n"
  51. printf " Domain | ${linux:system:domain}\n"
  52. printf " System | %s\n" "$(lsb_release -s -d)"
  53. printf " Kernel | %s\n" "$(uname -r)"
  54. printf -- "----------------------------------------\n"
  55. printf "\n"
  56. user:
  57. root:
  58. enabled: true
  59. home: /root
  60. name: root
  61. testuser:
  62. enabled: true
  63. name: testuser
  64. password: passw0rd
  65. sudo: true
  66. uid: 9999
  67. full_name: Test User
  68. home: /home/test
  69. groups:
  70. - db-ops
  71. - salt-ops
  72. salt_user1:
  73. enabled: true
  74. name: saltuser1
  75. sudo: false
  76. uid: 9991
  77. full_name: Salt User1
  78. home: /home/saltuser1
  79. salt_user2:
  80. enabled: true
  81. name: saltuser2
  82. sudo: false
  83. uid: 9992
  84. full_name: Salt Sudo User2
  85. home: /home/saltuser2
  86. groups:
  87. - sudogroup1
  88. group:
  89. testgroup:
  90. enabled: true
  91. name: testgroup
  92. gid: 9999
  93. system: true
  94. addusers:
  95. - salt_user1
  96. - salt_user2
  97. db-ops:
  98. enabled: true
  99. delusers:
  100. - salt_user1
  101. - dontexistatall
  102. salt-ops:
  103. enabled: true
  104. name: salt-ops
  105. sudogroup1:
  106. enabled: true
  107. name: sudogroup1
  108. sudogroup2:
  109. enabled: true
  110. name: sudogroup2
  111. sudogroup3:
  112. enabled: false
  113. name: sudogroup3
  114. job:
  115. test:
  116. enabled: true
  117. command: "/bin/sleep 3"
  118. user: testuser
  119. minute: 0
  120. hour: 13
  121. package:
  122. htop:
  123. version: latest
  124. repo:
  125. opencontrail:
  126. source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"
  127. keyid: E79EE90C
  128. keyserver: keyserver.ubuntu.com
  129. architectures: amd64
  130. proxy:
  131. enabled: true
  132. https: https://127.0.5.1:443
  133. #http: http://127.0.5.2:8080
  134. apt-mk-salt:
  135. source: "deb http://apt-mk.mirantis.com/xenial stable salt"
  136. #key_url: http://apt-mk.mirantis.com/public.gpg
  137. key: |
  138. -----BEGIN PGP PUBLIC KEY BLOCK-----
  139. Version: GnuPG v1
  140. mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY
  141. zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke
  142. xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A
  143. mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR
  144. i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ
  145. 6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh
  146. dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1
  147. cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy
  148. drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa
  149. fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6
  150. 96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB
  151. tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC
  152. OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ
  153. JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6
  154. BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW
  155. FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM
  156. PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci
  157. GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1
  158. WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3
  159. mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq
  160. AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t
  161. 6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO
  162. +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz
  163. rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E
  164. VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ
  165. Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD
  166. foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6
  167. JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A
  168. sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi
  169. T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS
  170. 2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ
  171. BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA
  172. jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm
  173. wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn
  174. hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E
  175. GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK
  176. KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC
  177. 9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y
  178. n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ
  179. QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al
  180. Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd
  181. SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI
  182. +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt
  183. 8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F
  184. ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt
  185. MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy
  186. jtcwJrHue5Xn8UPSLkE=
  187. =SWiA
  188. -----END PGP PUBLIC KEY BLOCK-----
  189. architectures: amd64
  190. proxy:
  191. enabled: true
  192. apt-mk-salt-nightly:
  193. source: "deb http://apt-mk.mirantis.com/xenial nightly salt"
  194. key_url: http://apt-mk.mirantis.com/public.gpg
  195. architectures: amd64
  196. proxy:
  197. enabled: false
  198. apt-mk-extra-nightly:
  199. source: "deb http://apt-mk.mirantis.com/xenial nightly extra"
  200. key_url: http://apt-mk.mirantis.com/public.gpg
  201. architectures: amd64
  202. locale:
  203. en_US.UTF-8:
  204. enabled: true
  205. default: true
  206. "cs_CZ.UTF-8 UTF-8":
  207. enabled: true
  208. autoupdates:
  209. enabled: true
  210. sudo:
  211. enabled: true
  212. alias:
  213. runas:
  214. DBA:
  215. - postgres
  216. - mysql
  217. SALT:
  218. - root
  219. host:
  220. LOCAL:
  221. - localhost
  222. PRODUCTION:
  223. - db1
  224. - db2
  225. command:
  226. SUDO_RESTRICTED_SU:
  227. - /bin/vi /etc/sudoers
  228. - /bin/su - root
  229. - /bin/su -
  230. - /bin/su
  231. - /usr/sbin/visudo
  232. SUDO_SHELLS:
  233. - /bin/sh
  234. - /bin/ksh
  235. - /bin/bash
  236. - /bin/rbash
  237. - /bin/dash
  238. - /bin/zsh
  239. - /bin/csh
  240. - /bin/fish
  241. - /bin/tcsh
  242. - /usr/bin/login
  243. - /usr/bin/su
  244. - /usr/su
  245. SUDO_SALT_SAFE:
  246. - /usr/bin/salt state*
  247. - /usr/bin/salt service*
  248. - /usr/bin/salt pillar*
  249. - /usr/bin/salt grains*
  250. - /usr/bin/salt saltutil*
  251. - /usr/bin/salt-call state*
  252. - /usr/bin/salt-call service*
  253. - /usr/bin/salt-call pillar*
  254. - /usr/bin/salt-call grains*
  255. - /usr/bin/salt-call saltutil*
  256. SUDO_SALT_TRUSTED:
  257. - /usr/bin/salt*
  258. users:
  259. saltuser1: {}
  260. saltuser2:
  261. hosts:
  262. - LOCAL
  263. # User Alias:
  264. DBA:
  265. hosts:
  266. - ALL
  267. commands:
  268. - SUDO_SALT_SAFE
  269. groups:
  270. db-ops:
  271. hosts:
  272. - ALL
  273. - '!PRODUCTION'
  274. runas:
  275. - DBA
  276. commands:
  277. - /bin/cat *
  278. - /bin/less *
  279. - /bin/ls *
  280. - SUDO_SALT_SAFE
  281. - '!SUDO_SHELLS'
  282. - '!SUDO_RESTRICTED_SU'
  283. salt-ops:
  284. hosts:
  285. - 'ALL'
  286. runas:
  287. - SALT
  288. commands:
  289. - SUDO_SALT_TRUSTED
  290. salt-ops2:
  291. name: salt-ops
  292. runas:
  293. - DBA
  294. commands:
  295. - SUDO_SHELLS
  296. sudogroup1:
  297. commands:
  298. - ALL
  299. sudogroup2:
  300. commands:
  301. - ALL
  302. hosts:
  303. - localhost
  304. users:
  305. - test
  306. nopasswd: false
  307. sudogroup3:
  308. commands:
  309. - ALL
  310. env:
  311. BOB_VARIABLE: Alice
  312. BOB_PATH:
  313. - /srv/alice/bin
  314. - /srv/bob/bin
  315. HTTPS_PROXY: https://127.0.4.1:443
  316. http_proxy: http://127.0.4.2:80
  317. ftp_proxy: ftp://127.0.4.3:2121
  318. no_proxy:
  319. - 192.168.0.1
  320. - 192.168.0.2
  321. - .saltstack.com
  322. - .ubuntu.com
  323. - .mirantis.com
  324. - .launchpad.net
  325. - .dummy.net
  326. - .local
  327. LANG: C
  328. LC_ALL: C
  329. profile:
  330. vi_flavors.sh: |
  331. export PAGER=view
  332. alias vi=vim
  333. locales: |
  334. export LANG=en_US
  335. export LC_ALL=en_US.UTF-8
  336. # pillar for proxy configuration
  337. proxy:
  338. # for package managers
  339. pkg:
  340. enabled: true
  341. https: https://127.0.2.1:4443
  342. #http: http://127.0.2.2
  343. ftp: none
  344. # fallback, system defaults
  345. https: https://127.0.1.1:443
  346. #http: http://127.0.1.2
  347. ftp: ftp://127.0.1.3
  348. noproxy:
  349. - host1
  350. - host2
  351. - .local
  352. # pillars for netconsole setup
  353. netconsole:
  354. enabled: true
  355. port: 514
  356. loglevel: debug
  357. target:
  358. 192.168.0.1:
  359. mac: "ff:ff:ff:ff:ff:ff"
  360. interface: bond0
  361. atop:
  362. enabled: true
  363. interval: 20
  364. logpath: "/var/mylog/atop"
  365. outfile: "/var/mylog/atop/daily.log"