ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
718 Commits
26 Branches
Tree: d2bdab9dc0
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'd2bdab9dc0'
${ noResults }
linux-formula/tests/pillar/system.sls

479 lines
13KB
Raw Blame History 

  1. linux:

  2.   network:

  3.     enabled: true

  4.     hostname: linux

  5.     fqdn: linux.ci.local

  6.   system:

  7.     enabled: true

  8.     at:

  9.       enabled: true

  10.       user:

  11.         root:

  12.           enabled: true

  13.         testuser:

  14.           enabled: true

  15.     cron:

  16.       enabled: true

  17.       user:

  18.         root:

  19.           enabled: true

  20.         testuser:

  21.           enabled: true

  22.     cluster: default

  23.     name: linux

  24.     domain: ci.local

  25.     environment: prd

  26.     purge_repos: true

  27.     directory:

  28.       /tmp/test:

  29.         makedirs: true

  30.     apparmor:

  31.       enabled: false

  32.     haveged:

  33.       enabled: true

  34.     prompt:

  35.       default: "linux.ci.local$"

  36.     kernel:

  37.       isolcpu: 1,2,3,4

  38.       elevator: deadline

  39.       boot_options:

  40.         - pti=off

  41.         - spectre_v2=auto

  42.       module:

  43.         module_1:

  44.           install:

  45.             command: /bin/true

  46.           remove:

  47.             enabled: false

  48.             command: /bin/false

  49.         module_2:

  50.           install:

  51.             enabled: false

  52.             command: /bin/false

  53.           remove:

  54.             command: /bin/true

  55.         module_3:

  56.           blacklist: true

  57.         module_4:

  58.           blacklist: false

  59.           alias:

  60.             "module*":

  61.               enabled: true

  62.             "module_*":

  63.               enabled: false

  64.         module_5:

  65.           softdep:

  66.             pre:

  67.               1:

  68.                 value: module_1

  69.               2:

  70.                 value: module_2

  71.                 enabled: false

  72.             post:

  73.               1:

  74.                 value: module_3

  75.               2:

  76.                 value: module_4

  77.                 enabled: false

  78.         module_6:

  79.           option:

  80.             opt_1: 111

  81.             opt_2: 222

  82.         module_7:

  83.           option:

  84.             opt_3:

  85.               value: 333

  86.             opt_4:

  87.               enabled: true

  88.               value: 444

  89.             opt_5:

  90.               enabled: false

  91.     cgroup:

  92.       group:

  93.         group_1:

  94.           controller:

  95.             cpu:

  96.               shares:

  97.                 value: 250

  98.           mapping:

  99.             subjects:

  100.             - '@group1'

  101.     sysfs:

  102.       enable_apply: true

  103.       scheduler:

  104.         block/sda/queue/scheduler: deadline

  105.       power:

  106.         mode:

  107.           power/state: 0660

  108.         owner:

  109.           power/state: "root:power"

  110.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  111.     motd:

  112.       - warning: |

  113.           #!/bin/sh

  114.           printf "WARNING: This is tcpcloud network.\n"

  115.           printf "  Unauthorized access is strictly prohibited.\n"

  116.           printf "\n"

  117.       - info: |

  118.           #!/bin/sh

  119.           printf -- "--[tcp cloud]---------------------------\n"

  120.           printf " Hostname  |  ${linux:system:name}\n"

  121.           printf " Domain    |  ${linux:system:domain}\n"

  122.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  123.           printf " Kernel    |  %s\n" "$(uname -r)"

  124.           printf -- "----------------------------------------\n"

  125.           printf "\n"

  126.     user:

  127.       root:

  128.         enabled: true

  129.         home: /root

  130.         name: root

  131.         maxdays: 365

  132.       testuser:

  133.         enabled: true

  134.         name: testuser

  135.         password: passw0rd

  136.         sudo: true

  137.         uid: 9999

  138.         full_name: Test User

  139.         home: /home/test

  140.         unique: false

  141.         groups:

  142.           - db-ops

  143.           - salt-ops

  144.       salt_user1:

  145.         enabled: true

  146.         name: saltuser1

  147.         sudo: false

  148.         uid: 9991

  149.         full_name: Salt User1

  150.         home: /home/saltuser1

  151.         home_dir_mode: 755

  152.       salt_user2:

  153.         enabled: true

  154.         name: saltuser2

  155.         sudo: false

  156.         uid: 9992

  157.         full_name: Salt Sudo User2

  158.         home: /home/saltuser2

  159.         groups:

  160.           - sudogroup1

  161.     group:

  162.       testgroup:

  163.         enabled: true

  164.         name: testgroup

  165.         gid: 9999

  166.         system: true

  167.         addusers:

  168.           - salt_user1

  169.           - salt_user2

  170.       db-ops:

  171.         enabled: true

  172.         delusers:

  173.           - salt_user1

  174.           - dontexistatall

  175.       salt-ops:

  176.         enabled: true

  177.         name: salt-ops

  178.       sudogroup1:

  179.         enabled: true

  180.         name: sudogroup1

  181.       sudogroup2:

  182.         enabled: true

  183.         name: sudogroup2

  184.       sudogroup3:

  185.         enabled: false

  186.         name: sudogroup3

  187.     job:

  188.       test:

  189.         enabled: true

  190.         command: "/bin/sleep 3"

  191.         user: testuser

  192.         minute: 0

  193.         hour: 13

  194.     package:

  195.       htop:

  196.         version: latest

  197.     repo:

  198.       disabled_repo:

  199.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  200.         enabled: false

  201.       disabled_repo_left_proxy:

  202.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  203.         enabled: false

  204.         proxy:

  205.           enabled: true

  206.           https: https://127.0.5.1:443

  207.       saltstack:

  208.         source: "deb [arch=amd64] http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/ xenial main"

  209.         key_url: "http://repo.saltstack.com/apt/ubuntu/16.04/amd64/2017.7/SALTSTACK-GPG-KEY.pub"

  210.         architectures: amd64

  211.         clean_file: true

  212.         pinning:

  213.           10:

  214.             enabled: true

  215.             pin: 'release o=SaltStack'

  216.             priority: 50

  217.             package: 'libsodium18'

  218.           20:

  219.             enabled: true

  220.             pin: 'release o=SaltStack'

  221.             priority: 1100

  222.             package: '*'

  223.       opencontrail:

  224.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  225.         keyid: E79EE90C

  226.         keyserver: keyserver.ubuntu.com

  227.         architectures: amd64

  228.         proxy:

  229.           enabled: true

  230.           https: https://127.0.5.1:443

  231.           #http: http://127.0.5.2:8080

  232.       apt-salt:

  233.         source: "deb http://apt.mirantis.com/xenial stable salt"

  234.         #key_url: http://apt.mirantis.com/public.gpg

  235.         # pub   4096R/A76882D3 2015-06-17

  236.         key: |

  237.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  238.           Version: GnuPG v1

  239. 

  240.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  241.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  242.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  243.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  244.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  245.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  246.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  247.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  248.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  249.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  250.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  251.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  252.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  253.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  254.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  255.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  256.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  257.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  258.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  259.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  260.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  261.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  262.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  263.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  264.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  265.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  266.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  267.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  268.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  269.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  270.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  271.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  272.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  273.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  274.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  275.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  276.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  277.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  278.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  279.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  280.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  281.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  282.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  283.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  284.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  285.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  286.           jtcwJrHue5Xn8UPSLkE=

  287.           =SWiA

  288.           -----END PGP PUBLIC KEY BLOCK-----

  289.         architectures: amd64

  290.         proxy:

  291.           enabled: true

  292.       apt-salt-nightly:

  293.         source: "deb http://apt.mirantis.com/xenial nightly salt"

  294.         key_url: http://apt.mirantis.com/public.gpg

  295.         architectures: amd64

  296.         proxy:

  297.           enabled: false

  298.       apt-extra-nightly:

  299.         source: "deb http://apt.mirantis.com/xenial nightly extra"

  300.         key_url: http://apt.mirantis.com/public.gpg

  301.         architectures: amd64

  302.     locale:

  303.       en_US:

  304.         enabled: true

  305.         default: true

  306.       cs_CZ:

  307.         enabled: true

  308.     autoupdates:

  309.       enabled: true

  310.     sudo:

  311.       enabled: true

  312.       alias:

  313.         runas:

  314.           DBA:

  315.           - postgres

  316.           - mysql

  317.           SALT:

  318.           - root

  319.         host:

  320.           LOCAL:

  321.           - localhost

  322.           PRODUCTION:

  323.           - db1

  324.           - db2

  325.         command:

  326.           SUDO_RESTRICTED_SU:

  327.           - /bin/vi /etc/sudoers

  328.           - /bin/su - root

  329.           - /bin/su -

  330.           - /bin/su

  331.           - /usr/sbin/visudo

  332.           SUDO_SHELLS:

  333.           - /bin/sh

  334.           - /bin/ksh

  335.           - /bin/bash

  336.           - /bin/rbash

  337.           - /bin/dash

  338.           - /bin/zsh

  339.           - /bin/csh

  340.           - /bin/fish

  341.           - /bin/tcsh

  342.           - /usr/bin/login

  343.           - /usr/bin/su

  344.           - /usr/su

  345.           SUDO_SALT_SAFE:

  346.           - /usr/bin/salt state*

  347.           - /usr/bin/salt service*

  348.           - /usr/bin/salt pillar*

  349.           - /usr/bin/salt grains*

  350.           - /usr/bin/salt saltutil*

  351.           - /usr/bin/salt-call state*

  352.           - /usr/bin/salt-call service*

  353.           - /usr/bin/salt-call pillar*

  354.           - /usr/bin/salt-call grains*

  355.           - /usr/bin/salt-call saltutil*

  356.           SUDO_SALT_TRUSTED:

  357.           - /usr/bin/salt*

  358.       users:

  359.         saltuser1: {}

  360.         saltuser2:

  361.           hosts:

  362.           - LOCAL

  363.         # User Alias:

  364.         DBA:

  365.           hosts:

  366.           - ALL

  367.           commands:

  368.           - SUDO_SALT_SAFE

  369.       groups:

  370.         db-ops:

  371.           hosts:

  372.           - ALL

  373.           - '!PRODUCTION'

  374.           runas:

  375.           - DBA

  376.           commands:

  377.           - /bin/cat *

  378.           - /bin/less *

  379.           - /bin/ls *

  380.           - SUDO_SALT_SAFE

  381.           - '!SUDO_SHELLS'

  382.           - '!SUDO_RESTRICTED_SU'

  383.         salt-ops:

  384.           hosts:

  385.           - 'ALL'

  386.           runas:

  387.           - SALT

  388.           commands:

  389.           - SUDO_SALT_TRUSTED

  390.         salt-ops2:

  391.           name: salt-ops

  392.           runas:

  393.           - DBA

  394.           commands:

  395.           - SUDO_SHELLS

  396.         sudogroup1:

  397.           commands:

  398.             - ALL

  399.         sudogroup2:

  400.           commands:

  401.             - ALL

  402.           hosts:

  403.             - localhost

  404.           users:

  405.             - test

  406.           nopasswd: false

  407.         sudogroup3:

  408.           commands:

  409.             - ALL

  410.     env:

  411.       BOB_VARIABLE: Alice

  412.       BOB_PATH:

  413.         - /srv/alice/bin

  414.         - /srv/bob/bin

  415.       HTTPS_PROXY: https://127.0.4.1:443

  416.       http_proxy: http://127.0.4.2:80

  417.       ftp_proxy: ftp://127.0.4.3:2121

  418.       no_proxy:

  419.         - 192.168.0.1

  420.         - 192.168.0.2

  421.         - .saltstack.com

  422.         - .ubuntu.com

  423.         - .mirantis.com

  424.         - .launchpad.net

  425.         - .dummy.net

  426.         - .local

  427.       LANG: C

  428.       LC_ALL: C

  429.     login_defs:

  430.       PASS_MAX_DAYS:

  431.         value: 99

  432.     shell:

  433.       umask: '027'

  434.       timeout: 900

  435.     profile:

  436.       vi_flavors.sh: |

  437.         export PAGER=view

  438.         alias vi=vim

  439.       locales: |

  440.         export LANG=en_US

  441.         export LC_ALL=en_US.UTF-8

  442. 

  443.     # pillar for proxy configuration

  444.     proxy:

  445.       # for package managers

  446.       pkg:

  447.         enabled: true

  448.         https: https://127.0.2.1:4443

  449.         #http: http://127.0.2.2

  450.         ftp: none

  451.       # fallback, system defaults

  452.       https: https://127.0.1.1:443

  453.       #http: http://127.0.1.2

  454.       ftp: ftp://127.0.1.3

  455.       noproxy:

  456.         - host1

  457.         - host2

  458.         - .local

  459. 

  460.     # pillars for netconsole setup

  461.     netconsole:

  462.       enabled: true

  463.       port: 514

  464.       loglevel: debug

  465.       target:

  466.         192.168.0.1:

  467.           mac: "ff:ff:ff:ff:ff:ff"

  468.           interface: bond0

  469.     atop:

  470.       enabled: true

  471.       interval: 20

  472.       logpath: "/var/mylog/atop"

  473.       outfile: "/var/mylog/atop/daily.log"

  474.     mcelog:

  475.       enabled: true

  476.       logging:

  477.         syslog: true

  478.         syslog_error: true