Saltstack Official Linux Formula
Вы не можете выбрать более 25 тем Темы должны начинаться с буквы или цифры, могут содержать дефисы(-) и должны содержать не более 35 символов.

358 lines
11KB

  1. linux:
  2. system:
  3. enabled: true
  4. cluster: default
  5. name: linux
  6. domain: local
  7. environment: prd
  8. hostname: system.pillar.local
  9. purge_repos: true
  10. directory:
  11. /tmp/test:
  12. makedirs: true
  13. apparmor:
  14. enabled: false
  15. haveged:
  16. enabled: true
  17. prompt:
  18. default: "linux.ci.local$"
  19. kernel:
  20. isolcpu: 1,2,3,4
  21. elevator: deadline
  22. sysfs:
  23. scheduler:
  24. block/sda/queue/scheduler: deadline
  25. power:
  26. mode:
  27. power/state: 0660
  28. owner:
  29. power/state: "root:power"
  30. devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave
  31. motd:
  32. - warning: |
  33. #!/bin/sh
  34. printf "WARNING: This is tcpcloud network.\n"
  35. printf " Unauthorized access is strictly prohibited.\n"
  36. printf "\n"
  37. - info: |
  38. #!/bin/sh
  39. printf -- "--[tcp cloud]---------------------------\n"
  40. printf " Hostname | ${linux:system:name}\n"
  41. printf " Domain | ${linux:system:domain}\n"
  42. printf " System | %s\n" "$(lsb_release -s -d)"
  43. printf " Kernel | %s\n" "$(uname -r)"
  44. printf -- "----------------------------------------\n"
  45. printf "\n"
  46. user:
  47. root:
  48. enabled: true
  49. home: /root
  50. name: root
  51. testuser:
  52. enabled: true
  53. name: testuser
  54. sudo: true
  55. uid: 9999
  56. full_name: Test User
  57. home: /home/test
  58. groups:
  59. - db-ops
  60. - salt-ops
  61. salt_user1:
  62. enabled: true
  63. name: saltuser1
  64. sudo: false
  65. uid: 9991
  66. full_name: Salt User1
  67. home: /home/saltuser1
  68. salt_user2:
  69. enabled: true
  70. name: saltuser2
  71. sudo: false
  72. uid: 9992
  73. full_name: Salt Sudo User2
  74. home: /home/saltuser2
  75. groups:
  76. - sudogroup1
  77. group:
  78. testgroup:
  79. enabled: true
  80. name: testgroup
  81. gid: 9999
  82. system: true
  83. addusers:
  84. - salt_user1
  85. - salt_user2
  86. db-ops:
  87. enabled: true
  88. delusers:
  89. - salt_user1
  90. - dontexistatall
  91. salt-ops:
  92. enabled: true
  93. name: salt-ops
  94. sudogroup1:
  95. enabled: true
  96. name: sudogroup1
  97. sudogroup2:
  98. enabled: true
  99. name: sudogroup2
  100. sudogroup3:
  101. enabled: false
  102. name: sudogroup3
  103. job:
  104. test:
  105. enabled: true
  106. command: "/bin/sleep 3"
  107. user: testuser
  108. minute: 0
  109. hour: 13
  110. package:
  111. htop:
  112. version: latest
  113. repo:
  114. opencontrail:
  115. source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"
  116. keyid: E79EE90C
  117. keyserver: keyserver.ubuntu.com
  118. architectures: amd64
  119. proxy:
  120. enabled: true
  121. https: https://127.0.5.1:443
  122. #http: http://127.0.5.2:8080
  123. apt-mk-salt:
  124. source: "deb http://apt-mk.mirantis.com/xenial stable salt"
  125. #key_url: http://apt-mk.mirantis.com/public.gpg
  126. key: |
  127. -----BEGIN PGP PUBLIC KEY BLOCK-----
  128. Version: GnuPG v1
  129. mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY
  130. zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke
  131. xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A
  132. mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR
  133. i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ
  134. 6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh
  135. dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1
  136. cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy
  137. drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa
  138. fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6
  139. 96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB
  140. tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC
  141. OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ
  142. JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6
  143. BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW
  144. FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM
  145. PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci
  146. GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1
  147. WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3
  148. mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq
  149. AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t
  150. 6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO
  151. +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz
  152. rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E
  153. VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ
  154. Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD
  155. foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6
  156. JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A
  157. sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi
  158. T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS
  159. 2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ
  160. BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA
  161. jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm
  162. wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn
  163. hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E
  164. GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK
  165. KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC
  166. 9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y
  167. n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ
  168. QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al
  169. Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd
  170. SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI
  171. +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt
  172. 8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F
  173. ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt
  174. MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy
  175. jtcwJrHue5Xn8UPSLkE=
  176. =SWiA
  177. -----END PGP PUBLIC KEY BLOCK-----
  178. architectures: amd64
  179. proxy:
  180. enabled: true
  181. apt-mk-salt-nightly:
  182. source: "deb http://apt-mk.mirantis.com/xenial nightly salt"
  183. key_url: http://apt-mk.mirantis.com/public.gpg
  184. architectures: amd64
  185. proxy:
  186. enabled: false
  187. apt-mk-extra-nightly:
  188. source: "deb http://apt-mk.mirantis.com/xenial nightly extra"
  189. key_url: http://apt-mk.mirantis.com/public.gpg
  190. architectures: amd64
  191. locale:
  192. en_US.UTF-8:
  193. enabled: true
  194. default: true
  195. "cs_CZ.UTF-8 UTF-8":
  196. enabled: true
  197. autoupdates:
  198. enabled: true
  199. sudo:
  200. enabled: true
  201. alias:
  202. runas:
  203. DBA:
  204. - postgres
  205. - mysql
  206. SALT:
  207. - root
  208. host:
  209. LOCAL:
  210. - localhost
  211. PRODUCTION:
  212. - db1
  213. - db2
  214. command:
  215. SUDO_RESTRICTED_SU:
  216. - /bin/vi /etc/sudoers
  217. - /bin/su - root
  218. - /bin/su -
  219. - /bin/su
  220. - /usr/sbin/visudo
  221. SUDO_SHELLS:
  222. - /bin/sh
  223. - /bin/ksh
  224. - /bin/bash
  225. - /bin/rbash
  226. - /bin/dash
  227. - /bin/zsh
  228. - /bin/csh
  229. - /bin/fish
  230. - /bin/tcsh
  231. - /usr/bin/login
  232. - /usr/bin/su
  233. - /usr/su
  234. SUDO_SALT_SAFE:
  235. - /usr/bin/salt state*
  236. - /usr/bin/salt service*
  237. - /usr/bin/salt pillar*
  238. - /usr/bin/salt grains*
  239. - /usr/bin/salt saltutil*
  240. - /usr/bin/salt-call state*
  241. - /usr/bin/salt-call service*
  242. - /usr/bin/salt-call pillar*
  243. - /usr/bin/salt-call grains*
  244. - /usr/bin/salt-call saltutil*
  245. SUDO_SALT_TRUSTED:
  246. - /usr/bin/salt*
  247. users:
  248. saltuser1: {}
  249. saltuser2:
  250. hosts:
  251. - LOCAL
  252. # User Alias:
  253. DBA:
  254. hosts:
  255. - ALL
  256. commands:
  257. - SUDO_SALT_SAFE
  258. groups:
  259. db-ops:
  260. hosts:
  261. - ALL
  262. - '!PRODUCTION'
  263. runas:
  264. - DBA
  265. commands:
  266. - /bin/cat *
  267. - /bin/less *
  268. - /bin/ls *
  269. - SUDO_SALT_SAFE
  270. - '!SUDO_SHELLS'
  271. - '!SUDO_RESTRICTED_SU'
  272. salt-ops:
  273. hosts:
  274. - 'ALL'
  275. runas:
  276. - SALT
  277. commands:
  278. - SUDO_SALT_TRUSTED
  279. salt-ops2:
  280. name: salt-ops
  281. runas:
  282. - DBA
  283. commands:
  284. - SUDO_SHELLS
  285. sudogroup1:
  286. commands:
  287. - ALL
  288. sudogroup2:
  289. commands:
  290. - ALL
  291. hosts:
  292. - localhost
  293. users:
  294. - test
  295. nopasswd: false
  296. sudogroup3:
  297. commands:
  298. - ALL
  299. env:
  300. BOB_VARIABLE: Alice
  301. BOB_PATH:
  302. - /srv/alice/bin
  303. - /srv/bob/bin
  304. HTTPS_PROXY: https://127.0.4.1:443
  305. http_proxy: http://127.0.4.2:80
  306. ftp_proxy: ftp://127.0.4.3:2121
  307. no_proxy:
  308. - 192.168.0.1
  309. - 192.168.0.2
  310. - .saltstack.com
  311. - .ubuntu.com
  312. - .mirantis.com
  313. - .launchpad.net
  314. - .dummy.net
  315. - .local
  316. LANG: C
  317. LC_ALL: C
  318. profile:
  319. vi_flavors.sh: |
  320. export PAGER=view
  321. alias vi=vim
  322. locales: |
  323. export LANG=en_US
  324. export LC_ALL=en_US.UTF-8
  325. # pillar for proxy configuration
  326. proxy:
  327. # for package managers
  328. pkg:
  329. enabled: true
  330. https: https://127.0.2.1:4443
  331. #http: http://127.0.2.2
  332. ftp: none
  333. # fallback, system defaults
  334. https: https://127.0.1.1:443
  335. #http: http://127.0.1.2
  336. ftp: ftp://127.0.1.3
  337. noproxy:
  338. - host1
  339. - host2
  340. - .local
  341. # pillars for netconsole setup
  342. netconsole:
  343. enabled: true
  344. port: 514
  345. loglevel: debug
  346. target:
  347. 192.168.0.1:
  348. mac: "ff:ff:ff:ff:ff:ff"
  349. interface: bond0
  350. atop:
  351. enabled: true
  352. interval: 20
  353. logpath: "/var/mylog/atop"
  354. outfile: "/var/mylog/atop/daily.log"