ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
678 Commits
26 Branches
Tree: 83d7f9708b
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '83d7f9708b'
${ noResults }
linux-formula/tests/pillar/system.sls

477 lines
13KB
Raw Blame History 

  1. linux:

  2.   network:

  3.     enabled: true

  4.     hostname: linux

  5.     fqdn: linux.ci.local

  6.   system:

  7.     enabled: true

  8.     at:

  9.       enabled: true

  10.       user:

  11.         root:

  12.           enabled: true

  13.         testuser:

  14.           enabled: true

  15.     cron:

  16.       enabled: true

  17.       user:

  18.         root:

  19.           enabled: true

  20.         testuser:

  21.           enabled: true

  22.     cluster: default

  23.     name: linux

  24.     domain: ci.local

  25.     environment: prd

  26.     purge_repos: true

  27.     directory:

  28.       /tmp/test:

  29.         makedirs: true

  30.     apparmor:

  31.       enabled: false

  32.     haveged:

  33.       enabled: true

  34.     prompt:

  35.       default: "linux.ci.local$"

  36.     kernel:

  37.       isolcpu: 1,2,3,4

  38.       elevator: deadline

  39.       boot_options:

  40.         - pti=off

  41.         - spectre_v2=auto

  42.       module:

  43.         module_1:

  44.           install:

  45.             command: /bin/true

  46.           remove:

  47.             enabled: false

  48.             command: /bin/false

  49.         module_2:

  50.           install:

  51.             enabled: false

  52.             command: /bin/false

  53.           remove:

  54.             command: /bin/true

  55.         module_3:

  56.           blacklist: true

  57.         module_4:

  58.           blacklist: false

  59.           alias:

  60.             "module*":

  61.               enabled: true

  62.             "module_*":

  63.               enabled: false

  64.         module_5:

  65.           softdep:

  66.             pre:

  67.               1:

  68.                 value: module_1

  69.               2:

  70.                 value: module_2

  71.                 enabled: false

  72.             post:

  73.               1:

  74.                 value: module_3

  75.               2:

  76.                 value: module_4

  77.                 enabled: false

  78.         module_6:

  79.           option:

  80.             opt_1: 111

  81.             opt_2: 222

  82.         module_7:

  83.           option:

  84.             opt_3:

  85.               value: 333

  86.             opt_4:

  87.               enabled: true

  88.               value: 444

  89.             opt_5:

  90.               enabled: false

  91.     cgroup:

  92.       group:

  93.         group_1:

  94.           controller:

  95.             cpu:

  96.               shares:

  97.                 value: 250

  98.           mapping:

  99.             subjects:

  100.             - '@group1'

  101.     sysfs:

  102.       enable_apply: true

  103.       scheduler:

  104.         block/sda/queue/scheduler: deadline

  105.       power:

  106.         mode:

  107.           power/state: 0660

  108.         owner:

  109.           power/state: "root:power"

  110.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  111.     motd:

  112.       - warning: |

  113.           #!/bin/sh

  114.           printf "WARNING: This is tcpcloud network.\n"

  115.           printf "  Unauthorized access is strictly prohibited.\n"

  116.           printf "\n"

  117.       - info: |

  118.           #!/bin/sh

  119.           printf -- "--[tcp cloud]---------------------------\n"

  120.           printf " Hostname  |  ${linux:system:name}\n"

  121.           printf " Domain    |  ${linux:system:domain}\n"

  122.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  123.           printf " Kernel    |  %s\n" "$(uname -r)"

  124.           printf -- "----------------------------------------\n"

  125.           printf "\n"

  126.     user:

  127.       root:

  128.         enabled: true

  129.         home: /root

  130.         name: root

  131.       testuser:

  132.         enabled: true

  133.         name: testuser

  134.         password: passw0rd

  135.         sudo: true

  136.         uid: 9999

  137.         full_name: Test User

  138.         home: /home/test

  139.         groups:

  140.           - db-ops

  141.           - salt-ops

  142.       salt_user1:

  143.         enabled: true

  144.         name: saltuser1

  145.         sudo: false

  146.         uid: 9991

  147.         full_name: Salt User1

  148.         home: /home/saltuser1

  149.         home_dir_mode: 755

  150.       salt_user2:

  151.         enabled: true

  152.         name: saltuser2

  153.         sudo: false

  154.         uid: 9992

  155.         full_name: Salt Sudo User2

  156.         home: /home/saltuser2

  157.         groups:

  158.           - sudogroup1

  159.     group:

  160.       testgroup:

  161.         enabled: true

  162.         name: testgroup

  163.         gid: 9999

  164.         system: true

  165.         addusers:

  166.           - salt_user1

  167.           - salt_user2

  168.       db-ops:

  169.         enabled: true

  170.         delusers:

  171.           - salt_user1

  172.           - dontexistatall

  173.       salt-ops:

  174.         enabled: true

  175.         name: salt-ops

  176.       sudogroup1:

  177.         enabled: true

  178.         name: sudogroup1

  179.       sudogroup2:

  180.         enabled: true

  181.         name: sudogroup2

  182.       sudogroup3:

  183.         enabled: false

  184.         name: sudogroup3

  185.     job:

  186.       test:

  187.         enabled: true

  188.         command: "/bin/sleep 3"

  189.         user: testuser

  190.         minute: 0

  191.         hour: 13

  192.     package:

  193.       htop:

  194.         version: latest

  195.     repo:

  196.       disabled_repo:

  197.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  198.         enabled: false

  199.       disabled_repo_left_proxy:

  200.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  201.         enabled: false

  202.         proxy:

  203.           enabled: true

  204.           https: https://127.0.5.1:443

  205.       saltstack:

  206.         source: "deb [arch=amd64] http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/ xenial main"

  207.         key_url: "http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/SALTSTACK-GPG-KEY.pub"

  208.         architectures: amd64

  209.         clean_file: true

  210.         pinning:

  211.           10:

  212.             enabled: true

  213.             pin: 'release o=SaltStack'

  214.             priority: 50

  215.             package: 'libsodium18'

  216.           20:

  217.             enabled: true

  218.             pin: 'release o=SaltStack'

  219.             priority: 1100

  220.             package: '*'

  221.       opencontrail:

  222.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  223.         keyid: E79EE90C

  224.         keyserver: keyserver.ubuntu.com

  225.         architectures: amd64

  226.         proxy:

  227.           enabled: true

  228.           https: https://127.0.5.1:443

  229.           #http: http://127.0.5.2:8080

  230.       apt-salt:

  231.         source: "deb http://apt.mirantis.com/xenial stable salt"

  232.         #key_url: http://apt.mirantis.com/public.gpg

  233.         # pub   4096R/A76882D3 2015-06-17

  234.         key: |

  235.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  236.           Version: GnuPG v1

  237. 

  238.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  239.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  240.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  241.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  242.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  243.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  244.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  245.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  246.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  247.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  248.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  249.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  250.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  251.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  252.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  253.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  254.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  255.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  256.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  257.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  258.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  259.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  260.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  261.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  262.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  263.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  264.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  265.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  266.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  267.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  268.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  269.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  270.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  271.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  272.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  273.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  274.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  275.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  276.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  277.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  278.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  279.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  280.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  281.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  282.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  283.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  284.           jtcwJrHue5Xn8UPSLkE=

  285.           =SWiA

  286.           -----END PGP PUBLIC KEY BLOCK-----

  287.         architectures: amd64

  288.         proxy:

  289.           enabled: true

  290.       apt-salt-nightly:

  291.         source: "deb http://apt.mirantis.com/xenial nightly salt"

  292.         key_url: http://apt.mirantis.com/public.gpg

  293.         architectures: amd64

  294.         proxy:

  295.           enabled: false

  296.       apt-extra-nightly:

  297.         source: "deb http://apt.mirantis.com/xenial nightly extra"

  298.         key_url: http://apt.mirantis.com/public.gpg

  299.         architectures: amd64

  300.     locale:

  301.       en_US:

  302.         enabled: true

  303.         default: true

  304.       cs_CZ:

  305.         enabled: true

  306.     autoupdates:

  307.       enabled: true

  308.     sudo:

  309.       enabled: true

  310.       alias:

  311.         runas:

  312.           DBA:

  313.           - postgres

  314.           - mysql

  315.           SALT:

  316.           - root

  317.         host:

  318.           LOCAL:

  319.           - localhost

  320.           PRODUCTION:

  321.           - db1

  322.           - db2

  323.         command:

  324.           SUDO_RESTRICTED_SU:

  325.           - /bin/vi /etc/sudoers

  326.           - /bin/su - root

  327.           - /bin/su -

  328.           - /bin/su

  329.           - /usr/sbin/visudo

  330.           SUDO_SHELLS:

  331.           - /bin/sh

  332.           - /bin/ksh

  333.           - /bin/bash

  334.           - /bin/rbash

  335.           - /bin/dash

  336.           - /bin/zsh

  337.           - /bin/csh

  338.           - /bin/fish

  339.           - /bin/tcsh

  340.           - /usr/bin/login

  341.           - /usr/bin/su

  342.           - /usr/su

  343.           SUDO_SALT_SAFE:

  344.           - /usr/bin/salt state*

  345.           - /usr/bin/salt service*

  346.           - /usr/bin/salt pillar*

  347.           - /usr/bin/salt grains*

  348.           - /usr/bin/salt saltutil*

  349.           - /usr/bin/salt-call state*

  350.           - /usr/bin/salt-call service*

  351.           - /usr/bin/salt-call pillar*

  352.           - /usr/bin/salt-call grains*

  353.           - /usr/bin/salt-call saltutil*

  354.           SUDO_SALT_TRUSTED:

  355.           - /usr/bin/salt*

  356.       users:

  357.         saltuser1: {}

  358.         saltuser2:

  359.           hosts:

  360.           - LOCAL

  361.         # User Alias:

  362.         DBA:

  363.           hosts:

  364.           - ALL

  365.           commands:

  366.           - SUDO_SALT_SAFE

  367.       groups:

  368.         db-ops:

  369.           hosts:

  370.           - ALL

  371.           - '!PRODUCTION'

  372.           runas:

  373.           - DBA

  374.           commands:

  375.           - /bin/cat *

  376.           - /bin/less *

  377.           - /bin/ls *

  378.           - SUDO_SALT_SAFE

  379.           - '!SUDO_SHELLS'

  380.           - '!SUDO_RESTRICTED_SU'

  381.         salt-ops:

  382.           hosts:

  383.           - 'ALL'

  384.           runas:

  385.           - SALT

  386.           commands:

  387.           - SUDO_SALT_TRUSTED

  388.         salt-ops2:

  389.           name: salt-ops

  390.           runas:

  391.           - DBA

  392.           commands:

  393.           - SUDO_SHELLS

  394.         sudogroup1:

  395.           commands:

  396.             - ALL

  397.         sudogroup2:

  398.           commands:

  399.             - ALL

  400.           hosts:

  401.             - localhost

  402.           users:

  403.             - test

  404.           nopasswd: false

  405.         sudogroup3:

  406.           commands:

  407.             - ALL

  408.     env:

  409.       BOB_VARIABLE: Alice

  410.       BOB_PATH:

  411.         - /srv/alice/bin

  412.         - /srv/bob/bin

  413.       HTTPS_PROXY: https://127.0.4.1:443

  414.       http_proxy: http://127.0.4.2:80

  415.       ftp_proxy: ftp://127.0.4.3:2121

  416.       no_proxy:

  417.         - 192.168.0.1

  418.         - 192.168.0.2

  419.         - .saltstack.com

  420.         - .ubuntu.com

  421.         - .mirantis.com

  422.         - .launchpad.net

  423.         - .dummy.net

  424.         - .local

  425.       LANG: C

  426.       LC_ALL: C

  427.     login_defs:

  428.       PASS_MAX_DAYS:

  429.         value: 99

  430.     shell:

  431.       umask: '027'

  432.       timeout: 900

  433.     profile:

  434.       vi_flavors.sh: |

  435.         export PAGER=view

  436.         alias vi=vim

  437.       locales: |

  438.         export LANG=en_US

  439.         export LC_ALL=en_US.UTF-8

  440. 

  441.     # pillar for proxy configuration

  442.     proxy:

  443.       # for package managers

  444.       pkg:

  445.         enabled: true

  446.         https: https://127.0.2.1:4443

  447.         #http: http://127.0.2.2

  448.         ftp: none

  449.       # fallback, system defaults

  450.       https: https://127.0.1.1:443

  451.       #http: http://127.0.1.2

  452.       ftp: ftp://127.0.1.3

  453.       noproxy:

  454.         - host1

  455.         - host2

  456.         - .local

  457. 

  458.     # pillars for netconsole setup

  459.     netconsole:

  460.       enabled: true

  461.       port: 514

  462.       loglevel: debug

  463.       target:

  464.         192.168.0.1:

  465.           mac: "ff:ff:ff:ff:ff:ff"

  466.           interface: bond0

  467.     atop:

  468.       enabled: true

  469.       interval: 20

  470.       logpath: "/var/mylog/atop"

  471.       outfile: "/var/mylog/atop/daily.log"

  472.     mcelog:

  473.       enabled: true

  474.       logging:

  475.         syslog: true

  476.         syslog_error: true