Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

377 satır
11KB

  1. linux:
  2. system:
  3. enabled: true
  4. cluster: default
  5. name: linux
  6. domain: local
  7. environment: prd
  8. hostname: system.pillar.local
  9. purge_repos: true
  10. directory:
  11. /tmp/test:
  12. makedirs: true
  13. apparmor:
  14. enabled: false
  15. haveged:
  16. enabled: true
  17. prompt:
  18. default: "linux.ci.local$"
  19. kernel:
  20. isolcpu: 1,2,3,4
  21. elevator: deadline
  22. boot_options:
  23. - pti=off
  24. - spectre_v2=auto
  25. cgroup:
  26. group:
  27. group_1:
  28. controller:
  29. cpu:
  30. shares:
  31. value: 250
  32. mapping:
  33. subjects:
  34. - '@group1'
  35. sysfs:
  36. scheduler:
  37. block/sda/queue/scheduler: deadline
  38. power:
  39. mode:
  40. power/state: 0660
  41. owner:
  42. power/state: "root:power"
  43. devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave
  44. motd:
  45. - warning: |
  46. #!/bin/sh
  47. printf "WARNING: This is tcpcloud network.\n"
  48. printf " Unauthorized access is strictly prohibited.\n"
  49. printf "\n"
  50. - info: |
  51. #!/bin/sh
  52. printf -- "--[tcp cloud]---------------------------\n"
  53. printf " Hostname | ${linux:system:name}\n"
  54. printf " Domain | ${linux:system:domain}\n"
  55. printf " System | %s\n" "$(lsb_release -s -d)"
  56. printf " Kernel | %s\n" "$(uname -r)"
  57. printf -- "----------------------------------------\n"
  58. printf "\n"
  59. user:
  60. root:
  61. enabled: true
  62. home: /root
  63. name: root
  64. testuser:
  65. enabled: true
  66. name: testuser
  67. password: passw0rd
  68. sudo: true
  69. uid: 9999
  70. full_name: Test User
  71. home: /home/test
  72. groups:
  73. - db-ops
  74. - salt-ops
  75. salt_user1:
  76. enabled: true
  77. name: saltuser1
  78. sudo: false
  79. uid: 9991
  80. full_name: Salt User1
  81. home: /home/saltuser1
  82. salt_user2:
  83. enabled: true
  84. name: saltuser2
  85. sudo: false
  86. uid: 9992
  87. full_name: Salt Sudo User2
  88. home: /home/saltuser2
  89. groups:
  90. - sudogroup1
  91. group:
  92. testgroup:
  93. enabled: true
  94. name: testgroup
  95. gid: 9999
  96. system: true
  97. addusers:
  98. - salt_user1
  99. - salt_user2
  100. db-ops:
  101. enabled: true
  102. delusers:
  103. - salt_user1
  104. - dontexistatall
  105. salt-ops:
  106. enabled: true
  107. name: salt-ops
  108. sudogroup1:
  109. enabled: true
  110. name: sudogroup1
  111. sudogroup2:
  112. enabled: true
  113. name: sudogroup2
  114. sudogroup3:
  115. enabled: false
  116. name: sudogroup3
  117. job:
  118. test:
  119. enabled: true
  120. command: "/bin/sleep 3"
  121. user: testuser
  122. minute: 0
  123. hour: 13
  124. package:
  125. htop:
  126. version: latest
  127. repo:
  128. opencontrail:
  129. source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"
  130. keyid: E79EE90C
  131. keyserver: keyserver.ubuntu.com
  132. architectures: amd64
  133. proxy:
  134. enabled: true
  135. https: https://127.0.5.1:443
  136. #http: http://127.0.5.2:8080
  137. apt-mk-salt:
  138. source: "deb http://apt-mk.mirantis.com/xenial stable salt"
  139. #key_url: http://apt-mk.mirantis.com/public.gpg
  140. key: |
  141. -----BEGIN PGP PUBLIC KEY BLOCK-----
  142. Version: GnuPG v1
  143. mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY
  144. zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke
  145. xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A
  146. mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR
  147. i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ
  148. 6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh
  149. dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1
  150. cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy
  151. drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa
  152. fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6
  153. 96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB
  154. tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC
  155. OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ
  156. JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6
  157. BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW
  158. FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM
  159. PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci
  160. GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1
  161. WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3
  162. mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq
  163. AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t
  164. 6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO
  165. +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz
  166. rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E
  167. VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ
  168. Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD
  169. foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6
  170. JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A
  171. sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi
  172. T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS
  173. 2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ
  174. BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA
  175. jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm
  176. wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn
  177. hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E
  178. GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK
  179. KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC
  180. 9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y
  181. n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ
  182. QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al
  183. Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd
  184. SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI
  185. +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt
  186. 8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F
  187. ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt
  188. MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy
  189. jtcwJrHue5Xn8UPSLkE=
  190. =SWiA
  191. -----END PGP PUBLIC KEY BLOCK-----
  192. architectures: amd64
  193. proxy:
  194. enabled: true
  195. apt-mk-salt-nightly:
  196. source: "deb http://apt-mk.mirantis.com/xenial nightly salt"
  197. key_url: http://apt-mk.mirantis.com/public.gpg
  198. architectures: amd64
  199. proxy:
  200. enabled: false
  201. apt-mk-extra-nightly:
  202. source: "deb http://apt-mk.mirantis.com/xenial nightly extra"
  203. key_url: http://apt-mk.mirantis.com/public.gpg
  204. architectures: amd64
  205. locale:
  206. en_US:
  207. enabled: true
  208. default: true
  209. cs_CZ:
  210. enabled: true
  211. autoupdates:
  212. enabled: true
  213. sudo:
  214. enabled: true
  215. alias:
  216. runas:
  217. DBA:
  218. - postgres
  219. - mysql
  220. SALT:
  221. - root
  222. host:
  223. LOCAL:
  224. - localhost
  225. PRODUCTION:
  226. - db1
  227. - db2
  228. command:
  229. SUDO_RESTRICTED_SU:
  230. - /bin/vi /etc/sudoers
  231. - /bin/su - root
  232. - /bin/su -
  233. - /bin/su
  234. - /usr/sbin/visudo
  235. SUDO_SHELLS:
  236. - /bin/sh
  237. - /bin/ksh
  238. - /bin/bash
  239. - /bin/rbash
  240. - /bin/dash
  241. - /bin/zsh
  242. - /bin/csh
  243. - /bin/fish
  244. - /bin/tcsh
  245. - /usr/bin/login
  246. - /usr/bin/su
  247. - /usr/su
  248. SUDO_SALT_SAFE:
  249. - /usr/bin/salt state*
  250. - /usr/bin/salt service*
  251. - /usr/bin/salt pillar*
  252. - /usr/bin/salt grains*
  253. - /usr/bin/salt saltutil*
  254. - /usr/bin/salt-call state*
  255. - /usr/bin/salt-call service*
  256. - /usr/bin/salt-call pillar*
  257. - /usr/bin/salt-call grains*
  258. - /usr/bin/salt-call saltutil*
  259. SUDO_SALT_TRUSTED:
  260. - /usr/bin/salt*
  261. users:
  262. saltuser1: {}
  263. saltuser2:
  264. hosts:
  265. - LOCAL
  266. # User Alias:
  267. DBA:
  268. hosts:
  269. - ALL
  270. commands:
  271. - SUDO_SALT_SAFE
  272. groups:
  273. db-ops:
  274. hosts:
  275. - ALL
  276. - '!PRODUCTION'
  277. runas:
  278. - DBA
  279. commands:
  280. - /bin/cat *
  281. - /bin/less *
  282. - /bin/ls *
  283. - SUDO_SALT_SAFE
  284. - '!SUDO_SHELLS'
  285. - '!SUDO_RESTRICTED_SU'
  286. salt-ops:
  287. hosts:
  288. - 'ALL'
  289. runas:
  290. - SALT
  291. commands:
  292. - SUDO_SALT_TRUSTED
  293. salt-ops2:
  294. name: salt-ops
  295. runas:
  296. - DBA
  297. commands:
  298. - SUDO_SHELLS
  299. sudogroup1:
  300. commands:
  301. - ALL
  302. sudogroup2:
  303. commands:
  304. - ALL
  305. hosts:
  306. - localhost
  307. users:
  308. - test
  309. nopasswd: false
  310. sudogroup3:
  311. commands:
  312. - ALL
  313. env:
  314. BOB_VARIABLE: Alice
  315. BOB_PATH:
  316. - /srv/alice/bin
  317. - /srv/bob/bin
  318. HTTPS_PROXY: https://127.0.4.1:443
  319. http_proxy: http://127.0.4.2:80
  320. ftp_proxy: ftp://127.0.4.3:2121
  321. no_proxy:
  322. - 192.168.0.1
  323. - 192.168.0.2
  324. - .saltstack.com
  325. - .ubuntu.com
  326. - .mirantis.com
  327. - .launchpad.net
  328. - .dummy.net
  329. - .local
  330. LANG: C
  331. LC_ALL: C
  332. profile:
  333. vi_flavors.sh: |
  334. export PAGER=view
  335. alias vi=vim
  336. locales: |
  337. export LANG=en_US
  338. export LC_ALL=en_US.UTF-8
  339. # pillar for proxy configuration
  340. proxy:
  341. # for package managers
  342. pkg:
  343. enabled: true
  344. https: https://127.0.2.1:4443
  345. #http: http://127.0.2.2
  346. ftp: none
  347. # fallback, system defaults
  348. https: https://127.0.1.1:443
  349. #http: http://127.0.1.2
  350. ftp: ftp://127.0.1.3
  351. noproxy:
  352. - host1
  353. - host2
  354. - .local
  355. # pillars for netconsole setup
  356. netconsole:
  357. enabled: true
  358. port: 514
  359. loglevel: debug
  360. target:
  361. 192.168.0.1:
  362. mac: "ff:ff:ff:ff:ff:ff"
  363. interface: bond0
  364. atop:
  365. enabled: true
  366. interval: 20
  367. logpath: "/var/mylog/atop"
  368. outfile: "/var/mylog/atop/daily.log"
  369. mcelog:
  370. enabled: true
  371. logging:
  372. syslog: true
  373. syslog_error: true