ExternalMirrors
/
linux-formula
mirror of https://github.com/salt-formulas/salt-formula-linux
Watch 1
Star 0
Fork 1
Code Issues 0 Releases 8 Wiki Activity
Saltstack Official Linux Formula
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
659 Commits
26 Branches
Tree: ee7b811a62
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'ee7b811a62'
${ noResults }
linux-formula/tests/pillar/system.sls

457 lines
13KB
Raw Blame History 

  1. linux:

  2.   network:

  3.     enabled: true

  4.     hostname: linux

  5.     fqdn: linux.ci.local

  6.   system:

  7.     enabled: true

  8.     at:

  9.       enabled: true

  10.       user:

  11.         root:

  12.           enabled: true

  13.         testuser:

  14.           enabled: true

  15.     cron:

  16.       enabled: true

  17.       user:

  18.         root:

  19.           enabled: true

  20.         testuser:

  21.           enabled: true

  22.     cluster: default

  23.     name: linux

  24.     domain: ci.local

  25.     environment: prd

  26.     purge_repos: true

  27.     directory:

  28.       /tmp/test:

  29.         makedirs: true

  30.     apparmor:

  31.       enabled: false

  32.     haveged:

  33.       enabled: true

  34.     prompt:

  35.       default: "linux.ci.local$"

  36.     kernel:

  37.       isolcpu: 1,2,3,4

  38.       elevator: deadline

  39.       boot_options:

  40.         - pti=off

  41.         - spectre_v2=auto

  42.       module:

  43.         module_1:

  44.           install:

  45.             command: /bin/true

  46.           remove:

  47.             enabled: false

  48.             command: /bin/false

  49.         module_2:

  50.           install:

  51.             enabled: false

  52.             command: /bin/false

  53.           remove:

  54.             command: /bin/true

  55.         module_3:

  56.           blacklist: true

  57.         module_4:

  58.           blacklist: false

  59.           alias:

  60.             "module*":

  61.               enabled: true

  62.             "module_*":

  63.               enabled: false

  64.         module_5:

  65.           softdep:

  66.             pre:

  67.               1:

  68.                 value: module_1

  69.               2:

  70.                 value: module_2

  71.                 enabled: false

  72.             post:

  73.               1:

  74.                 value: module_3

  75.               2:

  76.                 value: module_4

  77.                 enabled: false

  78.         module_6:

  79.           option:

  80.             opt_1: 111

  81.             opt_2: 222

  82.         module_7:

  83.           option:

  84.             opt_3:

  85.               value: 333

  86.             opt_4:

  87.               enabled: true

  88.               value: 444

  89.             opt_5:

  90.               enabled: false

  91.     cgroup:

  92.       group:

  93.         group_1:

  94.           controller:

  95.             cpu:

  96.               shares:

  97.                 value: 250

  98.           mapping:

  99.             subjects:

  100.             - '@group1'

  101.     sysfs:

  102.       scheduler:

  103.         block/sda/queue/scheduler: deadline

  104.       power:

  105.         mode:

  106.           power/state: 0660

  107.         owner:

  108.           power/state: "root:power"

  109.         devices/system/cpu/cpu0/cpufreq/scaling_governor: powersave

  110.     motd:

  111.       - warning: |

  112.           #!/bin/sh

  113.           printf "WARNING: This is tcpcloud network.\n"

  114.           printf "  Unauthorized access is strictly prohibited.\n"

  115.           printf "\n"

  116.       - info: |

  117.           #!/bin/sh

  118.           printf -- "--[tcp cloud]---------------------------\n"

  119.           printf " Hostname  |  ${linux:system:name}\n"

  120.           printf " Domain    |  ${linux:system:domain}\n"

  121.           printf " System    |  %s\n" "$(lsb_release -s -d)"

  122.           printf " Kernel    |  %s\n" "$(uname -r)"

  123.           printf -- "----------------------------------------\n"

  124.           printf "\n"

  125.     user:

  126.       root:

  127.         enabled: true

  128.         home: /root

  129.         name: root

  130.       testuser:

  131.         enabled: true

  132.         name: testuser

  133.         password: passw0rd

  134.         sudo: true

  135.         uid: 9999

  136.         full_name: Test User

  137.         home: /home/test

  138.         groups:

  139.           - db-ops

  140.           - salt-ops

  141.       salt_user1:

  142.         enabled: true

  143.         name: saltuser1

  144.         sudo: false

  145.         uid: 9991

  146.         full_name: Salt User1

  147.         home: /home/saltuser1

  148.         home_dir_mode: 755

  149.       salt_user2:

  150.         enabled: true

  151.         name: saltuser2

  152.         sudo: false

  153.         uid: 9992

  154.         full_name: Salt Sudo User2

  155.         home: /home/saltuser2

  156.         groups:

  157.           - sudogroup1

  158.     group:

  159.       testgroup:

  160.         enabled: true

  161.         name: testgroup

  162.         gid: 9999

  163.         system: true

  164.         addusers:

  165.           - salt_user1

  166.           - salt_user2

  167.       db-ops:

  168.         enabled: true

  169.         delusers:

  170.           - salt_user1

  171.           - dontexistatall

  172.       salt-ops:

  173.         enabled: true

  174.         name: salt-ops

  175.       sudogroup1:

  176.         enabled: true

  177.         name: sudogroup1

  178.       sudogroup2:

  179.         enabled: true

  180.         name: sudogroup2

  181.       sudogroup3:

  182.         enabled: false

  183.         name: sudogroup3

  184.     job:

  185.       test:

  186.         enabled: true

  187.         command: "/bin/sleep 3"

  188.         user: testuser

  189.         minute: 0

  190.         hour: 13

  191.     package:

  192.       htop:

  193.         version: latest

  194.     repo:

  195.       disabled_repo:

  196.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  197.         enabled: false

  198.       disabled_repo_left_proxy:

  199.         source: "deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable"

  200.         enabled: false

  201.         proxy:

  202.           enabled: true

  203.           https: https://127.0.5.1:443

  204.       opencontrail:

  205.         source: "deb http://ppa.launchpad.net/tcpcloud/contrail-3.0/ubuntu xenial main"

  206.         keyid: E79EE90C

  207.         keyserver: keyserver.ubuntu.com

  208.         architectures: amd64

  209.         proxy:

  210.           enabled: true

  211.           https: https://127.0.5.1:443

  212.           #http: http://127.0.5.2:8080

  213.       apt-salt:

  214.         source: "deb http://apt.mirantis.com/xenial stable salt"

  215.         #key_url: http://apt.mirantis.com/public.gpg

  216.         # pub   4096R/A76882D3 2015-06-17

  217.         key: |

  218.           -----BEGIN PGP PUBLIC KEY BLOCK-----

  219.           Version: GnuPG v1

  220. 

  221.           mQINBFWBfCIBEADf6lnsY9v4rf/x0ribkFlnHnsv1/yD+M+YgZoQxYdf6b7M4/PY

  222.           zZ/c3uJt4l1vR3Yoocfc1VgtBNfA1ussBqXdmyRBMO1LKdQWnurNxWLW7CwcyNke

  223.           xeBfhjOqA6tIIXMfor7uUrwlIxJIxK+jc3C3nhM46QZpWX5d4mlkgxKh1G4ZRj4A

  224.           mEo2NduLUgfmF+gM1MmAbU8ekzciKet4TsM64WAtHyYllGKvuFSdBjsewO3McuhR

  225.           i1Desb5QdfIU4p3gkIa0EqlkkqX4rowo5qUnl670TNTTZHaz0MxCBoYaGbGhS7gZ

  226.           6/PLm8fJHmU/phst/QmOY76a5efZWbhhnlyYLIB8UjywN+VDqwkNk9jLUSXHTakh

  227.           dnL4OuGoNpIzms8juVFlnuOmx+FcfbHMbhAc7aPqFK+6J3YS4kJSfeHWJ6cTGoU1

  228.           cLWEhsbU3Gp8am5fnh72RJ7v2sTe/rvCuVtlNufi5SyBPcEUZoxFVWAC/hMeiWzy

  229.           drBIVC73raf+A+OjH8op9XfkVj6czxQ/451soe3jvCDGgTXPLlts+P5WhgWNpDPa

  230.           fOfTHn/2o7NwoM7Vp+BQYKAQ78phsolvNNhf+g51ntoLUbxAGKZYzQ5RPsKo+Hq6

  231.           96UCFkqhSABk0DvM0LtquzZ+sNoipd02w8EaxQzelDJxvPFGigo1uqGoiQARAQAB

  232.           tCx0Y3BjbG91ZCBzaWduaW5nIGtleSA8YXV0b2J1aWxkQHRjcGNsb3VkLmV1PokC

  233.           OwQTAQIAJQIbAwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AFAlWj4K8CGQEACgkQ

  234.           JACFCadogtPm9xAAl1D1RUY1mttjKk+8KI3tUmgtqLaIGUcB4TPbIhQpFy23TJd6

  235.           BnnEaGZ+HSCj3lp/dBoq1xxCqHCziKA04IpPaLpGJf8cqaKOpQpW1ErlSxT6nCQW

  236.           FrHFxZreBTljKqW3fvRBXNAquj0krJEwv19/3SsQ+CJI2Zkq/HPDw9eJOCu0WcJM

  237.           PVtAq2SmaDigh1jtFcFoWZ7uFFMQPIWit/RCPkDfkFaf6lbYZ/nnvWON9OAgzWci

  238.           GJjCp5a7vMyCpTRy6bgNPqM61omCe0iQ4yIcqANXhRYS/DBnjKr9YaDKnlKNUgd1

  239.           WRE8QzErQznH/plgISQ+df+8Iunp3SBr/jj1604yyM1Wxppn1+dAoTBU1OPFGVd3

  240.           mCEYHUe+v0iTZ69C2c1ISmp2MjciGyE/UPbW9ejUIXtFJAJovZjn6P3glyIQB3wq

  241.           AW6JE+xEBWH7Ix+Uv6YNAFfj3UO6vNjtuGbTCWYDCEJRkdmeE7QdTYDo7PxgPl1t

  242.           6xMGPLOBdYNJTEojvRYBTt+6iw0eZ+MCUdUFNeaseQh0p1RgqM9/7t75QCNLl1oO

  243.           +Cfu4vNef/Tpd3LHcUoQhQ2OViOVFbq1/Yu/natWDPDcXb3peTcNHOjmXAoboWbz

  244.           rDkxj5z7vcJ9LMEXviP6Fb/iXDmJh74/o6Agc8efb0WTmFjPFFtMCHrinb+5Ag0E

  245.           VYF8IgEQALUVS2GESQ+F1S4b0JIO1M2tVBXiH4N56eUzcDXxXbSZgCgx4aWhk5vJ

  246.           Qu7M11gtqIoiRbmuFpUmDOG/kB7DxBZPn8WqcBKpky6GUP/A/emaAZTwNQdcDAhD

  247.           foBkJdhVz0D2jnkBffYL055p/r1Ers+iTTNOas/0uc50C32xR823rQ2Nl6/ffIM6

  248.           JqfQenhRvqUWPj9oqESHMsqEdceSwS/VC7RN4xQXJXfEWu2q4Ahs62RmvCXnTw1A

  249.           sPcpysoBoo8IW+V1MVQEZuAJRn2AGO/Q7uY9TR4guHb3wXRfZ3k0KVUsyqqdusJi

  250.           T3DxxBw6GcKdOH6t41Ys3eYgOrc+RcSdcHYSpxaLvEIhwzarZ+mqcp3gz/JkPlXS

  251.           2tx2l6NZHcgReOM7IhqMuxzBbpcrsbBmLBemC+u7hoPTjUdTHKEwvWaeXL4vgsqQ

  252.           BbEeKmXep5sZg3kHtpXzY9ZfPQrtGB8vHGrfaZIcCKuXwZWGL5GGWKw3TSP4fAIA

  253.           jLxLf5MyyXcsugbai2OY/H4sAuvJHsmGtergGknuR+iFdt5el1wgRKP1r1KdmvMm

  254.           wsSayc6eSEKd689x3zsmAtnhYM31oMkPdeYRbnN15gLG7vcsVe4jug0YTqQt2WGn

  255.           hwjBA0i2qfTorXemWChsxKllvY9aB3ST8I6RMat0kS08FMD+Ced/ABEBAAGJAh8E

  256.           GAECAAkFAlWBfCICGwwACgkQJACFCadogtNicA/9HOM402VGHlmuYPcrvEThHqMK

  257.           KOTtNFsrrPp67dGYaT8TGTgy1OG4Oys2y+hrwqnUK6dXJxX2/RBfRuO/gw65RCfC

  258.           9nWeMkqJTjHJCKNTYfXN4O4ag444UZPcOMq+IyiWF3/sh674zCkCm5DQ/FH8IJ8Y

  259.           n4jMoxe7G48PCGtgcJKXo8NBzxwXJH4DCdk7rNdrbrnCwObG8h6530WrmzKuyFCJ

  260.           QP5JA0MSx23J2OrK2YmVMhTeO0czJ8fRip9We9/qAfZGUEW+sey+nLmT5OJq04al

  261.           Va9g2a4nXxzDy84+hRXQNUeCRYn/ys8d8q9HZNv3K36HlILcuWazNTTh0cuWupBd

  262.           SlIEuWbIdbknYpGsmS1cPeGi0bdoLZv90BIVmdOS/vXP02fGUblyANciKcBPRhOI

  263.           +z6hzwdZ+QvjPbxZUig5XuvqBhIHoRtMBJdf24ysFuf/d4uZzTC8T4rUQO+L29bt

  264.           8riT0dg6cHVwC0VH89FaO1FduvsCtAwdAgxSzOMBECNOmVBThIiWdLnns107Rp4F

  265.           ECk+l2UCjl7zwGqJqcd1BQK+UgZwVG2UV11CrhopKU5oGL84n5DaO2n6Rv8wVdrt

  266.           MKvqi7EkgvZpY0IHJ7rp0Gzrv0qmwJaUFCWFogITNyijb1JVsUgDTMhAkEgEsIYy

  267.           jtcwJrHue5Xn8UPSLkE=

  268.           =SWiA

  269.           -----END PGP PUBLIC KEY BLOCK-----

  270.         architectures: amd64

  271.         proxy:

  272.           enabled: true

  273.       apt-salt-nightly:

  274.         source: "deb http://apt.mirantis.com/xenial nightly salt"

  275.         key_url: http://apt.mirantis.com/public.gpg

  276.         architectures: amd64

  277.         proxy:

  278.           enabled: false

  279.       apt-extra-nightly:

  280.         source: "deb http://apt.mirantis.com/xenial nightly extra"

  281.         key_url: http://apt.mirantis.com/public.gpg

  282.         architectures: amd64

  283.     locale:

  284.       en_US:

  285.         enabled: true

  286.         default: true

  287.       cs_CZ:

  288.         enabled: true

  289.     autoupdates:

  290.       enabled: true

  291.     sudo:

  292.       enabled: true

  293.       alias:

  294.         runas:

  295.           DBA:

  296.           - postgres

  297.           - mysql

  298.           SALT:

  299.           - root

  300.         host:

  301.           LOCAL:

  302.           - localhost

  303.           PRODUCTION:

  304.           - db1

  305.           - db2

  306.         command:

  307.           SUDO_RESTRICTED_SU:

  308.           - /bin/vi /etc/sudoers

  309.           - /bin/su - root

  310.           - /bin/su -

  311.           - /bin/su

  312.           - /usr/sbin/visudo

  313.           SUDO_SHELLS:

  314.           - /bin/sh

  315.           - /bin/ksh

  316.           - /bin/bash

  317.           - /bin/rbash

  318.           - /bin/dash

  319.           - /bin/zsh

  320.           - /bin/csh

  321.           - /bin/fish

  322.           - /bin/tcsh

  323.           - /usr/bin/login

  324.           - /usr/bin/su

  325.           - /usr/su

  326.           SUDO_SALT_SAFE:

  327.           - /usr/bin/salt state*

  328.           - /usr/bin/salt service*

  329.           - /usr/bin/salt pillar*

  330.           - /usr/bin/salt grains*

  331.           - /usr/bin/salt saltutil*

  332.           - /usr/bin/salt-call state*

  333.           - /usr/bin/salt-call service*

  334.           - /usr/bin/salt-call pillar*

  335.           - /usr/bin/salt-call grains*

  336.           - /usr/bin/salt-call saltutil*

  337.           SUDO_SALT_TRUSTED:

  338.           - /usr/bin/salt*

  339.       users:

  340.         saltuser1: {}

  341.         saltuser2:

  342.           hosts:

  343.           - LOCAL

  344.         # User Alias:

  345.         DBA:

  346.           hosts:

  347.           - ALL

  348.           commands:

  349.           - SUDO_SALT_SAFE

  350.       groups:

  351.         db-ops:

  352.           hosts:

  353.           - ALL

  354.           - '!PRODUCTION'

  355.           runas:

  356.           - DBA

  357.           commands:

  358.           - /bin/cat *

  359.           - /bin/less *

  360.           - /bin/ls *

  361.           - SUDO_SALT_SAFE

  362.           - '!SUDO_SHELLS'

  363.           - '!SUDO_RESTRICTED_SU'

  364.         salt-ops:

  365.           hosts:

  366.           - 'ALL'

  367.           runas:

  368.           - SALT

  369.           commands:

  370.           - SUDO_SALT_TRUSTED

  371.         salt-ops2:

  372.           name: salt-ops

  373.           runas:

  374.           - DBA

  375.           commands:

  376.           - SUDO_SHELLS

  377.         sudogroup1:

  378.           commands:

  379.             - ALL

  380.         sudogroup2:

  381.           commands:

  382.             - ALL

  383.           hosts:

  384.             - localhost

  385.           users:

  386.             - test

  387.           nopasswd: false

  388.         sudogroup3:

  389.           commands:

  390.             - ALL

  391.     env:

  392.       BOB_VARIABLE: Alice

  393.       BOB_PATH:

  394.         - /srv/alice/bin

  395.         - /srv/bob/bin

  396.       HTTPS_PROXY: https://127.0.4.1:443

  397.       http_proxy: http://127.0.4.2:80

  398.       ftp_proxy: ftp://127.0.4.3:2121

  399.       no_proxy:

  400.         - 192.168.0.1

  401.         - 192.168.0.2

  402.         - .saltstack.com

  403.         - .ubuntu.com

  404.         - .mirantis.com

  405.         - .launchpad.net

  406.         - .dummy.net

  407.         - .local

  408.       LANG: C

  409.       LC_ALL: C

  410.     login_defs:

  411.       PASS_MAX_DAYS:

  412.         value: 99

  413.     profile:

  414.       vi_flavors.sh: |

  415.         export PAGER=view

  416.         alias vi=vim

  417.       locales: |

  418.         export LANG=en_US

  419.         export LC_ALL=en_US.UTF-8

  420. 

  421.     # pillar for proxy configuration

  422.     proxy:

  423.       # for package managers

  424.       pkg:

  425.         enabled: true

  426.         https: https://127.0.2.1:4443

  427.         #http: http://127.0.2.2

  428.         ftp: none

  429.       # fallback, system defaults

  430.       https: https://127.0.1.1:443

  431.       #http: http://127.0.1.2

  432.       ftp: ftp://127.0.1.3

  433.       noproxy:

  434.         - host1

  435.         - host2

  436.         - .local

  437. 

  438.     # pillars for netconsole setup

  439.     netconsole:

  440.       enabled: true

  441.       port: 514

  442.       loglevel: debug

  443.       target:

  444.         192.168.0.1:

  445.           mac: "ff:ff:ff:ff:ff:ff"

  446.           interface: bond0

  447.     atop:

  448.       enabled: true

  449.       interval: 20

  450.       logpath: "/var/mylog/atop"

  451.       outfile: "/var/mylog/atop/daily.log"

  452.     mcelog:

  453.       enabled: true

  454.       logging:

  455.         syslog: true

  456.         syslog_error: true