ExternalMirrors
/
linux-formula
zrcadlo https://github.com/salt-formulas/salt-formula-linux
Sledovat 1
Oblíbit 0
Rozštěpit 1
Zdrojový kód Úkoly 0 Vydání 8 Wiki Aktivita
Saltstack Official Linux Formula
Nelze vybrat více než 25 témat Téma musí začínat písmenem nebo číslem, může obsahovat pomlčky („-“) a může být dlouhé až 35 znaků.
643 Revize
26 Větve
Strom: 42b64a1f29
Větve Značky
${ item.name }
Vytvořit větev ${ searchTerm }
z „42b64a1f29“
${ noResults }
linux-formula/tests/pillar/system.sls

390 lines
11KB
Surový Blame Historie 

  1. linux:

  2.   network:

  3.     enabled: true

  4.     hostname: linux

  5.     fqdn: linux.ci.local

  6.   system:

  7.     enabled: true

  8.     cluster: default

  9.     name: linux

  10.     domain: ci.local

  11.     environment: prd

  12.     purge_repos: true

  13.     directory:

  14.       /tmp/test:

  15.         makedirs: true

  16.     apparmor:

  17.       enabled: false

  18.     haveged:

  19.       enabled: true

  20.     prompt:

  21.       default: "linux.ci.local$"

  22.     kernel:

  23.       isolcpu: 1,2,3,4

  24.       elevator: deadline

  25.       boot_options:

  26.         - pti=off

  27.         - spectre_v2=auto

  28.     cgroup:

  29.       group:

  30.         group_1:

  31.           controller:

  32.             cpu:

  33.               shares:

  34.                 value: 250

  35.           mapping:

  36.             subjects:

  37.             - '@group1'

  38.     sysfs:

  39.       scheduler:

  40.         block/sda/queue/scheduler: deadline

  41.       power:

  42.         mode:

  43.           power/state: 0660

  44.         owner:

  45.           power/state: "root:power"

  46.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  47.     motd:

  48.       - warning: |

  49.           #!/bin/sh

  50.           printf "WARNING: This is tcpcloud network.\n"

  51.           printf "  Unauthorized access is strictly prohibited.\n"

  52.           printf "\n"

  53.       - info: |

  54.           #!/bin/sh

  55.           printf -- "--[tcp cloud]---------------------------\n"

  56.           printf " Hostname  |  ${linux:system:name}\n"

  57.           printf " Domain    |  ${linux:system:domain}\n"

  58.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  59.           printf " Kernel    |  %s\n" "$(uname -r)"

  60.           printf -- "----------------------------------------\n"

  61.           printf "\n"

  62.     user:

  63.       root:

  64.         enabled: true

  65.         home: /root

  66.         name: root

  67.       testuser:

  68.         enabled: true

  69.         name: testuser

  70.         password: passw0rd

  71.         sudo: true

  72.         uid: 9999

  73.         full_name: Test User

  74.         home: /home/test

  75.         groups:

  76.           - db-ops

  77.           - salt-ops

  78.       salt_user1:

  79.         enabled: true

  80.         name: saltuser1

  81.         sudo: false

  82.         uid: 9991

  83.         full_name: Salt User1

  84.         home: /home/saltuser1

  85.         home_dir_mode: 755

  86.       salt_user2:

  87.         enabled: true

  88.         name: saltuser2

  89.         sudo: false

  90.         uid: 9992

  91.         full_name: Salt Sudo User2

  92.         home: /home/saltuser2

  93.         groups:

  94.           - sudogroup1

  95.     group:

  96.       testgroup:

  97.         enabled: true

  98.         name: testgroup

  99.         gid: 9999

  100.         system: true

  101.         addusers:

  102.           - salt_user1

  103.           - salt_user2

  104.       db-ops:

  105.         enabled: true

  106.         delusers:

  107.           - salt_user1

  108.           - dontexistatall

  109.       salt-ops:

  110.         enabled: true

  111.         name: salt-ops

  112.       sudogroup1:

  113.         enabled: true

  114.         name: sudogroup1

  115.       sudogroup2:

  116.         enabled: true

  117.         name: sudogroup2

  118.       sudogroup3:

  119.         enabled: false

  120.         name: sudogroup3

  121.     job:

  122.       test:

  123.         enabled: true

  124.         command: "/bin/sleep 3"

  125.         user: testuser

  126.         minute: 0

  127.         hour: 13

  128.     package:

  129.       htop:

  130.         version: latest

  131.     repo:

  132.       disabled_repo:

  133.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  134.         enabled: false

  135.       disabled_repo_left_proxy:

  136.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  137.         enabled: false

  138.         proxy:

  139.           enabled: true

  140.           https: https://127.0.5.1:443

  141.       opencontrail:

  142.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  143.         keyid: E79EE90C

  144.         keyserver: keyserver.ubuntu.com

  145.         architectures: amd64

  146.         proxy:

  147.           enabled: true

  148.           https: https://127.0.5.1:443

  149.           #http: http://127.0.5.2:8080

  150.       apt-mk-salt:

  151.         source: "deb http://apt-mk.mirantis.com/xenial stable salt"

  152.         #key_url: http://apt-mk.mirantis.com/public.gpg

  153.         key: |

  154.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  155.           Version: GnuPG v1

  156. 

  157.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  158.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  159.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  160.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  161.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  162.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  163.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  164.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  165.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  166.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  167.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  168.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  169.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  170.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  171.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  172.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  173.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  174.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  175.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  176.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  177.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  178.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  179.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  180.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  181.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  182.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  183.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  184.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  185.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  186.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  187.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  188.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  189.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  190.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  191.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  192.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  193.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  194.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  195.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  196.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  197.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  198.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  199.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  200.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  201.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  202.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  203.           jtcwJrHue5Xn8UPSLkE=

  204.           =SWiA

  205.           -----END PGP PUBLIC KEY BLOCK-----

  206.         architectures: amd64

  207.         proxy:

  208.           enabled: true

  209.       apt-mk-salt-nightly:

  210.         source: "deb http://apt-mk.mirantis.com/xenial nightly salt"

  211.         key_url: http://apt-mk.mirantis.com/public.gpg

  212.         architectures: amd64

  213.         proxy:

  214.           enabled: false

  215.       apt-mk-extra-nightly:

  216.         source: "deb http://apt-mk.mirantis.com/xenial nightly extra"

  217.         key_url: http://apt-mk.mirantis.com/public.gpg

  218.         architectures: amd64

  219.     locale:

  220.       en_US:

  221.         enabled: true

  222.         default: true

  223.       cs_CZ:

  224.         enabled: true

  225.     autoupdates:

  226.       enabled: true

  227.     sudo:

  228.       enabled: true

  229.       alias:

  230.         runas:

  231.           DBA:

  232.           - postgres

  233.           - mysql

  234.           SALT:

  235.           - root

  236.         host:

  237.           LOCAL:

  238.           - localhost

  239.           PRODUCTION:

  240.           - db1

  241.           - db2

  242.         command:

  243.           SUDO_RESTRICTED_SU:

  244.           - /bin/vi /etc/sudoers

  245.           - /bin/su - root

  246.           - /bin/su -

  247.           - /bin/su

  248.           - /usr/sbin/visudo

  249.           SUDO_SHELLS:

  250.           - /bin/sh

  251.           - /bin/ksh

  252.           - /bin/bash

  253.           - /bin/rbash

  254.           - /bin/dash

  255.           - /bin/zsh

  256.           - /bin/csh

  257.           - /bin/fish

  258.           - /bin/tcsh

  259.           - /usr/bin/login

  260.           - /usr/bin/su

  261.           - /usr/su

  262.           SUDO_SALT_SAFE:

  263.           - /usr/bin/salt state*

  264.           - /usr/bin/salt service*

  265.           - /usr/bin/salt pillar*

  266.           - /usr/bin/salt grains*

  267.           - /usr/bin/salt saltutil*

  268.           - /usr/bin/salt-call state*

  269.           - /usr/bin/salt-call service*

  270.           - /usr/bin/salt-call pillar*

  271.           - /usr/bin/salt-call grains*

  272.           - /usr/bin/salt-call saltutil*

  273.           SUDO_SALT_TRUSTED:

  274.           - /usr/bin/salt*

  275.       users:

  276.         saltuser1: {}

  277.         saltuser2:

  278.           hosts:

  279.           - LOCAL

  280.         # User Alias:

  281.         DBA:

  282.           hosts:

  283.           - ALL

  284.           commands:

  285.           - SUDO_SALT_SAFE

  286.       groups:

  287.         db-ops:

  288.           hosts:

  289.           - ALL

  290.           - '!PRODUCTION'

  291.           runas:

  292.           - DBA

  293.           commands:

  294.           - /bin/cat *

  295.           - /bin/less *

  296.           - /bin/ls *

  297.           - SUDO_SALT_SAFE

  298.           - '!SUDO_SHELLS'

  299.           - '!SUDO_RESTRICTED_SU'

  300.         salt-ops:

  301.           hosts:

  302.           - 'ALL'

  303.           runas:

  304.           - SALT

  305.           commands:

  306.           - SUDO_SALT_TRUSTED

  307.         salt-ops2:

  308.           name: salt-ops

  309.           runas:

  310.           - DBA

  311.           commands:

  312.           - SUDO_SHELLS

  313.         sudogroup1:

  314.           commands:

  315.             - ALL

  316.         sudogroup2:

  317.           commands:

  318.             - ALL

  319.           hosts:

  320.             - localhost

  321.           users:

  322.             - test

  323.           nopasswd: false

  324.         sudogroup3:

  325.           commands:

  326.             - ALL

  327.     env:

  328.       BOB_VARIABLE: Alice

  329.       BOB_PATH:

  330.         - /srv/alice/bin

  331.         - /srv/bob/bin

  332.       HTTPS_PROXY: https://127.0.4.1:443

  333.       http_proxy: http://127.0.4.2:80

  334.       ftp_proxy: ftp://127.0.4.3:2121

  335.       no_proxy:

  336.         - 192.168.0.1

  337.         - 192.168.0.2

  338.         - .saltstack.com

  339.         - .ubuntu.com

  340.         - .mirantis.com

  341.         - .launchpad.net

  342.         - .dummy.net

  343.         - .local

  344.       LANG: C

  345.       LC_ALL: C

  346.     profile:

  347.       vi_flavors.sh: |

  348.         export PAGER=view

  349.         alias vi=vim

  350.       locales: |

  351.         export LANG=en_US

  352.         export LC_ALL=en_US.UTF-8

  353. 

  354.     # pillar for proxy configuration

  355.     proxy:

  356.       # for package managers

  357.       pkg:

  358.         enabled: true

  359.         https: https://127.0.2.1:4443

  360.         #http: http://127.0.2.2

  361.         ftp: none

  362.       # fallback, system defaults

  363.       https: https://127.0.1.1:443

  364.       #http: http://127.0.1.2

  365.       ftp: ftp://127.0.1.3

  366.       noproxy:

  367.         - host1

  368.         - host2

  369.         - .local

  370. 

  371.     # pillars for netconsole setup

  372.     netconsole:

  373.       enabled: true

  374.       port: 514

  375.       loglevel: debug

  376.       target:

  377.         192.168.0.1:

  378.           mac: "ff:ff:ff:ff:ff:ff"

  379.           interface: bond0

  380.     atop:

  381.       enabled: true

  382.       interval: 20

  383.       logpath: "/var/mylog/atop"

  384.       outfile: "/var/mylog/atop/daily.log"

  385.     mcelog:

  386.       enabled: true

  387.       logging:

  388.         syslog: true

  389.         syslog_error: true