ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
633 Commits
26 Branches
Tree: c6f75efb50
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c6f75efb50'
${ noResults }
linux-formula/tests/pillar/system.sls

378 lines
11KB
Raw Blame History 

  1. linux:

  2.   system:

  3.     enabled: true

  4.     cluster: default

  5.     name: linux

  6.     domain: local

  7.     environment: prd

  8.     hostname: system.pillar.local

  9.     purge_repos: true

  10.     directory:

  11.       /tmp/test:

  12.         makedirs: true

  13.     apparmor:

  14.       enabled: false

  15.     haveged:

  16.       enabled: true

  17.     prompt:

  18.       default: "linux.ci.local$"

  19.     kernel:

  20.       isolcpu: 1,2,3,4

  21.       elevator: deadline

  22.       boot_options:

  23.         - pti=off

  24.         - spectre_v2=auto

  25.     cgroup:

  26.       group:

  27.         group_1:

  28.           controller:

  29.             cpu:

  30.               shares:

  31.                 value: 250

  32.           mapping:

  33.             subjects:

  34.             - '@group1'

  35.     sysfs:

  36.       scheduler:

  37.         block/sda/queue/scheduler: deadline

  38.       power:

  39.         mode:

  40.           power/state: 0660

  41.         owner:

  42.           power/state: "root:power"

  43.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  44.     motd:

  45.       - warning: |

  46.           #!/bin/sh

  47.           printf "WARNING: This is tcpcloud network.\n"

  48.           printf "  Unauthorized access is strictly prohibited.\n"

  49.           printf "\n"

  50.       - info: |

  51.           #!/bin/sh

  52.           printf -- "--[tcp cloud]---------------------------\n"

  53.           printf " Hostname  |  ${linux:system:name}\n"

  54.           printf " Domain    |  ${linux:system:domain}\n"

  55.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  56.           printf " Kernel    |  %s\n" "$(uname -r)"

  57.           printf -- "----------------------------------------\n"

  58.           printf "\n"

  59.     user:

  60.       root:

  61.         enabled: true

  62.         home: /root

  63.         name: root

  64.       testuser:

  65.         enabled: true

  66.         name: testuser

  67.         password: passw0rd

  68.         sudo: true

  69.         uid: 9999

  70.         full_name: Test User

  71.         home: /home/test

  72.         groups:

  73.           - db-ops

  74.           - salt-ops

  75.       salt_user1:

  76.         enabled: true

  77.         name: saltuser1

  78.         sudo: false

  79.         uid: 9991

  80.         full_name: Salt User1

  81.         home: /home/saltuser1

  82.         home_dir_mode: 755

  83.       salt_user2:

  84.         enabled: true

  85.         name: saltuser2

  86.         sudo: false

  87.         uid: 9992

  88.         full_name: Salt Sudo User2

  89.         home: /home/saltuser2

  90.         groups:

  91.           - sudogroup1

  92.     group:

  93.       testgroup:

  94.         enabled: true

  95.         name: testgroup

  96.         gid: 9999

  97.         system: true

  98.         addusers:

  99.           - salt_user1

  100.           - salt_user2

  101.       db-ops:

  102.         enabled: true

  103.         delusers:

  104.           - salt_user1

  105.           - dontexistatall

  106.       salt-ops:

  107.         enabled: true

  108.         name: salt-ops

  109.       sudogroup1:

  110.         enabled: true

  111.         name: sudogroup1

  112.       sudogroup2:

  113.         enabled: true

  114.         name: sudogroup2

  115.       sudogroup3:

  116.         enabled: false

  117.         name: sudogroup3

  118.     job:

  119.       test:

  120.         enabled: true

  121.         command: "/bin/sleep 3"

  122.         user: testuser

  123.         minute: 0

  124.         hour: 13

  125.     package:

  126.       htop:

  127.         version: latest

  128.     repo:

  129.       opencontrail:

  130.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  131.         keyid: E79EE90C

  132.         keyserver: keyserver.ubuntu.com

  133.         architectures: amd64

  134.         proxy:

  135.           enabled: true

  136.           https: https://127.0.5.1:443

  137.           #http: http://127.0.5.2:8080

  138.       apt-mk-salt:

  139.         source: "deb http://apt-mk.mirantis.com/xenial stable salt"

  140.         #key_url: http://apt-mk.mirantis.com/public.gpg

  141.         key: |

  142.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  143.           Version: GnuPG v1

  144. 

  145.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  146.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  147.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  148.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  149.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  150.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  151.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  152.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  153.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  154.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  155.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  156.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  157.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  158.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  159.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  160.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  161.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  162.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  163.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  164.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  165.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  166.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  167.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  168.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  169.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  170.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  171.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  172.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  173.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  174.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  175.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  176.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  177.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  178.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  179.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  180.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  181.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  182.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  183.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  184.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  185.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  186.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  187.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  188.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  189.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  190.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  191.           jtcwJrHue5Xn8UPSLkE=

  192.           =SWiA

  193.           -----END PGP PUBLIC KEY BLOCK-----

  194.         architectures: amd64

  195.         proxy:

  196.           enabled: true

  197.       apt-mk-salt-nightly:

  198.         source: "deb http://apt-mk.mirantis.com/xenial nightly salt"

  199.         key_url: http://apt-mk.mirantis.com/public.gpg

  200.         architectures: amd64

  201.         proxy:

  202.           enabled: false

  203.       apt-mk-extra-nightly:

  204.         source: "deb http://apt-mk.mirantis.com/xenial nightly extra"

  205.         key_url: http://apt-mk.mirantis.com/public.gpg

  206.         architectures: amd64

  207.     locale:

  208.       en_US:

  209.         enabled: true

  210.         default: true

  211.       cs_CZ:

  212.         enabled: true

  213.     autoupdates:

  214.       enabled: true

  215.     sudo:

  216.       enabled: true

  217.       alias:

  218.         runas:

  219.           DBA:

  220.           - postgres

  221.           - mysql

  222.           SALT:

  223.           - root

  224.         host:

  225.           LOCAL:

  226.           - localhost

  227.           PRODUCTION:

  228.           - db1

  229.           - db2

  230.         command:

  231.           SUDO_RESTRICTED_SU:

  232.           - /bin/vi /etc/sudoers

  233.           - /bin/su - root

  234.           - /bin/su -

  235.           - /bin/su

  236.           - /usr/sbin/visudo

  237.           SUDO_SHELLS:

  238.           - /bin/sh

  239.           - /bin/ksh

  240.           - /bin/bash

  241.           - /bin/rbash

  242.           - /bin/dash

  243.           - /bin/zsh

  244.           - /bin/csh

  245.           - /bin/fish

  246.           - /bin/tcsh

  247.           - /usr/bin/login

  248.           - /usr/bin/su

  249.           - /usr/su

  250.           SUDO_SALT_SAFE:

  251.           - /usr/bin/salt state*

  252.           - /usr/bin/salt service*

  253.           - /usr/bin/salt pillar*

  254.           - /usr/bin/salt grains*

  255.           - /usr/bin/salt saltutil*

  256.           - /usr/bin/salt-call state*

  257.           - /usr/bin/salt-call service*

  258.           - /usr/bin/salt-call pillar*

  259.           - /usr/bin/salt-call grains*

  260.           - /usr/bin/salt-call saltutil*

  261.           SUDO_SALT_TRUSTED:

  262.           - /usr/bin/salt*

  263.       users:

  264.         saltuser1: {}

  265.         saltuser2:

  266.           hosts:

  267.           - LOCAL

  268.         # User Alias:

  269.         DBA:

  270.           hosts:

  271.           - ALL

  272.           commands:

  273.           - SUDO_SALT_SAFE

  274.       groups:

  275.         db-ops:

  276.           hosts:

  277.           - ALL

  278.           - '!PRODUCTION'

  279.           runas:

  280.           - DBA

  281.           commands:

  282.           - /bin/cat *

  283.           - /bin/less *

  284.           - /bin/ls *

  285.           - SUDO_SALT_SAFE

  286.           - '!SUDO_SHELLS'

  287.           - '!SUDO_RESTRICTED_SU'

  288.         salt-ops:

  289.           hosts:

  290.           - 'ALL'

  291.           runas:

  292.           - SALT

  293.           commands:

  294.           - SUDO_SALT_TRUSTED

  295.         salt-ops2:

  296.           name: salt-ops

  297.           runas:

  298.           - DBA

  299.           commands:

  300.           - SUDO_SHELLS

  301.         sudogroup1:

  302.           commands:

  303.             - ALL

  304.         sudogroup2:

  305.           commands:

  306.             - ALL

  307.           hosts:

  308.             - localhost

  309.           users:

  310.             - test

  311.           nopasswd: false

  312.         sudogroup3:

  313.           commands:

  314.             - ALL

  315.     env:

  316.       BOB_VARIABLE: Alice

  317.       BOB_PATH:

  318.         - /srv/alice/bin

  319.         - /srv/bob/bin

  320.       HTTPS_PROXY: https://127.0.4.1:443

  321.       http_proxy: http://127.0.4.2:80

  322.       ftp_proxy: ftp://127.0.4.3:2121

  323.       no_proxy:

  324.         - 192.168.0.1

  325.         - 192.168.0.2

  326.         - .saltstack.com

  327.         - .ubuntu.com

  328.         - .mirantis.com

  329.         - .launchpad.net

  330.         - .dummy.net

  331.         - .local

  332.       LANG: C

  333.       LC_ALL: C

  334.     profile:

  335.       vi_flavors.sh: |

  336.         export PAGER=view

  337.         alias vi=vim

  338.       locales: |

  339.         export LANG=en_US

  340.         export LC_ALL=en_US.UTF-8

  341. 

  342.     # pillar for proxy configuration

  343.     proxy:

  344.       # for package managers

  345.       pkg:

  346.         enabled: true

  347.         https: https://127.0.2.1:4443

  348.         #http: http://127.0.2.2

  349.         ftp: none

  350.       # fallback, system defaults

  351.       https: https://127.0.1.1:443

  352.       #http: http://127.0.1.2

  353.       ftp: ftp://127.0.1.3

  354.       noproxy:

  355.         - host1

  356.         - host2

  357.         - .local

  358. 

  359.     # pillars for netconsole setup

  360.     netconsole:

  361.       enabled: true

  362.       port: 514

  363.       loglevel: debug

  364.       target:

  365.         192.168.0.1:

  366.           mac: "ff:ff:ff:ff:ff:ff"

  367.           interface: bond0

  368.     atop:

  369.       enabled: true

  370.       interval: 20

  371.       logpath: "/var/mylog/atop"

  372.       outfile: "/var/mylog/atop/daily.log"

  373.     mcelog:

  374.       enabled: true

  375.       logging:

  376.         syslog: true

  377.         syslog_error: true