Merge pull request #187 from baby-gnu/ci/validate_map.jinja

Ci/validate map.jinja

docs/README.rst

@@ -230,6 +230,13 @@ To completely disable adding IP addresses::
 
 Manages the system wide ``/etc/ssh/moduli`` file.
 
+``openssh._mapdata``
+^^^^^^^^^^^^^^^^^^
+
+Testing state which dumps the ``map.jinja`` values in ``/tmp/salt_mapdata_dump.yaml``.
+This state is not called by any include but is mostly used by kitchen and Inspec infrastructure to validate ``map.jinja``.
+
+
 Testing
 -------
 

kitchen.yml

@@ -153,6 +153,7 @@ suites:
       state_top:
         base:
           '*':
+            - openssh._mapdata
             - openssh.config
             - openssh.known_hosts
       pillars:

openssh/_mapdata/_mapdata.jinja

@@ -0,0 +1,13 @@
+# yamllint disable rule:indentation rule:line-length
+# {{ grains.get('osfinger', grains.os) }}
+---
+{#- use salt.slsutil.serialize to avoid encoding errors on some platforms #}
+{{ salt['slsutil.serialize'](
+     'yaml',
+     map,
+     default_flow_style=False,
+     allow_unicode=True,
+   )
+   | regex_replace("^\s+'$", "'", multiline=True)
+   | trim
+}}

openssh/_mapdata/init.sls

@@ -0,0 +1,25 @@
+# -*- coding: utf-8 -*-
+# vim: ft=sls
+---
+{#- Get the `tplroot` from `tpldir` #}
+{%- set tplroot = tpldir.split('/')[0] %}
+{%- from tplroot ~ "/map.jinja" import openssh with context %}
+{%- from tplroot ~ "/map.jinja" import ssh_config with context %}
+{%- from tplroot ~ "/map.jinja" import sshd_config with context %}
+
+{%- set output_file = '/tmp/salt_mapdata_dump.yaml' %}
+{%- set map = {
+      'openssh': openssh,
+      'ssh_config': ssh_config,
+      'sshd_config': sshd_config,
+    } %}
+
+{%- do salt['log.debug']( map | yaml(False) ) %}
+
+{{ tplroot }}-mapdata-dump:
+  file.managed:
+    - name: {{ output_file }}
+    - source: salt://{{ tplroot }}/_mapdata/_mapdata.jinja
+    - template: jinja
+    - context:
+        map: {{ map | yaml }}

test/integration/default/controls/_mapdata_spec.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# Replace per minion strings
+replacement = {
+  hostname: system.hostname
+}
+
+mapdata_file = "mapdata/#{system.platform[:finger].split('.').first}.yaml"
+mapdata_dump = inspec.profile.file(mapdata_file) % replacement
+
+control '`map.jinja` YAML dump' do
+  title 'should contain the lines'
+
+  describe file('/tmp/salt_mapdata_dump.yaml') do
+    it { should exist }
+    its('content') { should include mapdata_dump }
+  end
+end

test/integration/default/files/mapdata/amazonlinux-1.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Amazon Linux AMI-2018
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/amazonlinux-2.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Amazon Linux-2
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/arch-base-latest.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Arch
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh
+  client_version: latest
+  dig_pkg: bind
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
+    20120821045830 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C6042936814C2FFB
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/centos-6.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# CentOS-6
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/centos-7.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# CentOS Linux-7
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/centos-8.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# CentOS Linux-8
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
+    20120821045830 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C6042936814C2FFB
+
+    20120821050046 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C60429368214FC53
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/debian-10.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Debian-10
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-client
+  client_version: latest
+  dig_pkg: dnsutils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
+    20120821050046 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C60429368214FC53
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: ssh
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/debian-9.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Debian-9
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-client
+  client_version: latest
+  dig_pkg: dnsutils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: ssh
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/fedora-31.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Fedora-31
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
+    20120821045639 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C604293680B09D63
+
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
+
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
+
+    20120821050054 2 6 100 2047 5 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C60429368218E83F
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/fedora-32.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Fedora-32
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-clients
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/opensuse-15.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Leap-15
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh
+  client_version: latest
+  dig_pkg: bind-utils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
+    20120821045830 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C6042936814C2FFB
+
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
+
+    20120821050054 2 6 100 2047 5 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C60429368218E83F
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh
+  server_version: latest
+  service: sshd
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/ubuntu-16.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Ubuntu-16.04
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-client
+  client_version: latest
+  dig_pkg: dnsutils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
+    20120821045639 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C604293680B09D63
+
+    20120821045830 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C6042936814C2FFB
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: ssh
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/ubuntu-18.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Ubuntu-18.04
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-client
+  client_version: latest
+  dig_pkg: dnsutils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
+    20120821045639 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C604293680B09D63
+
+    20120821045830 2 6 100 2047 2 DD2047CBDBB6F8E919BC63DE885B34D0FD6E3DB2887D8B46FE249886ACED6B46DFCD5553168185FD376122171CD8927E60120FA8D01F01D03E58281FEA9A1ABE97631C828E41815F34FDCDF787419FE13A3137649AA93D2584230DF5F24B5C00C88B7D7DE4367693428C730376F218A53E853B0851BAB7C53C15DA7839CBE1285DB63F6FA45C1BB59FE1C5BB918F0F8459D7EF60ACFF5C0FA0F3FCAD1C5F4CE4416D4F4B36B05CDCEBE4FB879E95847EFBC6449CD190248843BC7EDB145FBFC4EDBB1A3C959298F08F3BA2CFBE231BBE204BE6F906209D28BD4820AB3E7BE96C26AE8A809ADD8D1A5A0B008E9570FA4C4697E116B8119892C6042936814C2FFB
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: ssh
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/files/mapdata/ubuntu-20.yaml

@@ -0,0 +1,161 @@
+# yamllint disable rule:indentation rule:line-length
+# Ubuntu-20.04
+---
+openssh:
+  absent_dsa_keys: false
+  absent_ecdsa_keys: false
+  absent_ed25519_keys: false
+  absent_rsa_keys: false
+  auth:
+    joe-non-valid-ssh-key:
+    - comment: obsolete key - removed
+      enc: ssh-rsa
+      present: false
+      source: salt://ssh_keys/joe.no-valid.pub
+      user: joe
+    joe-valid-ssh-key-desktop:
+    - comment: main key - desktop
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.desktop.pub
+      user: joe
+    joe-valid-ssh-key-notebook:
+    - comment: main key - notebook
+      enc: ssh-rsa
+      present: true
+      source: salt://ssh_keys/joe.netbook.pub
+      user: joe
+  auth_map:
+    personal_keys:
+      source: salt://ssh_keys
+      users:
+        joe:
+          joe.desktop: {}
+          joe.netbook:
+            options: []
+          joe.no-valid:
+            present: false
+  banner: /etc/ssh/banner
+  banner_src: banner
+  banner_string: 'Welcome to %{hostname}!
+'
+  client: openssh-client
+  client_version: latest
+  dig_pkg: dnsutils
+  dsa:
+    private_key: '-----BEGIN DSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END DSA PRIVATE KEY-----
+'
+    public_key: 'ssh-dss NOT_DEFINED
+'
+  ecdsa:
+    private_key: '-----BEGIN EC PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END EC PRIVATE KEY-----
+'
+    public_key: 'ecdsa-sha2-nistp256 NOT_DEFINED
+'
+  ed25519:
+    private_key: '-----BEGIN OPENSSH PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END OPENSSH PRIVATE KEY-----
+'
+    public_key: 'ssh-ed25519 NOT_DEFINED
+'
+  enforce_rsa_size: false
+  generate_dsa_keys: false
+  generate_ecdsa_keys: false
+  generate_ed25519_keys: false
+  generate_rsa_keys: false
+  generate_rsa_size: 4096
+  host_key_algos: ecdsa,ed25519,rsa
+  known_hosts:
+    aliases:
+    - cname-to-minion.example.org
+    - alias.example.org
+    hostnames: false
+    include_localhost: false
+    mine_hostname_function: public_ssh_hostname
+    mine_keys_function: public_ssh_host_keys
+    omit_ip_address:
+    - github.com
+    salt_ssh:
+      public_ssh_host_keys:
+        minion.id: 'ssh-rsa [...]
+
+          ssh-ed25519 [...]
+'
+      public_ssh_host_names:
+        minion.id:
+        - minion.id
+        - alias.of.minion.id
+      user: salt-master
+    static:
+      github.com: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]
+      gitlab.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bN[...]
+    target: '*'
+    tgt_type: glob
+  moduli: '# Time Type Tests Tries Size Generator Modulus
+
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
+
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
+
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
+
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
+'
+  provide_dsa_keys: false
+  provide_ecdsa_keys: false
+  provide_ed25519_keys: false
+  provide_rsa_keys: false
+  root_group: root
+  rsa:
+    private_key: '-----BEGIN RSA PRIVATE KEY-----
+
+      NOT_DEFINED
+
+      -----END RSA PRIVATE KEY-----
+'
+    public_key: 'ssh-rsa NOT_DEFINED
+'
+  server: openssh-server
+  server_version: latest
+  service: ssh
+  ssh_config: /etc/ssh/ssh_config
+  ssh_config_backup: true
+  ssh_config_group: root
+  ssh_config_mode: '644'
+  ssh_config_src: ssh_config
+  ssh_config_user: root
+  ssh_known_hosts: /etc/ssh/ssh_known_hosts
+  ssh_known_hosts_src: ssh_known_hosts
+  ssh_moduli: /etc/ssh/moduli
+  sshd_binary: /usr/sbin/sshd
+  sshd_config: /etc/ssh/sshd_config
+  sshd_config_backup: true
+  sshd_config_group: root
+  sshd_config_mode: '644'
+  sshd_config_src: sshd_config
+  sshd_config_user: root
+  sshd_enable: true
+ssh_config:
+  Hosts:
+    '*':
+      GSSAPIAuthentication: 'yes'
+      HashKnownHosts: 'yes'
+      SendEnv: LANG LC_*
+sshd_config:
+  AcceptEnv: LANG LC_*
+  ChallengeResponseAuthentication: 'no'
+  PrintMotd: 'no'
+  Subsystem: sftp /usr/lib/openssh/sftp-server
+  UsePAM: 'yes'
+  X11Forwarding: 'yes'

test/integration/default/inspec.yml

@@ -6,6 +6,9 @@ title: openssh formula
 maintainer: SaltStack Formulas
 license: Apache-2.0
 summary: Verify that the openssh formula is setup and configured correctly
+depends:
+  - name: share
+    path: test/integration/share
 supports:
   - platform-name: debian
   - platform-name: ubuntu

test/integration/share/README.md

@@ -0,0 +1,20 @@
+# InSpec Profile: `share`
+
+This shows the implementation of the `share` InSpec [profile](https://github.com/inspec/inspec/blob/master/docs/profiles.md).
+
+It's goal is to share the libraries between all profiles.
+
+## Libraries
+
+### `system`
+
+The `system` library provides easy access to system dependents informations:
+
+- `system.hostname`: return the result of `hostname -s` or `hostnamectl --static` based on the availability of each commans
+- `system.platform`: take `inspec.platform` and mangle things a bit to be useful
+  - `system.platform[:family]` provides a family name for Arch
+  - `system.platform[:name]` modify `amazon` to `amazonlinux`
+  - `system.platform[:release]` tweak for Arch and Amazon Linux:
+    - `Arch` is always `base-later`
+    - `Amazon Linux` release `2018` became `1`
+  - `system.platform[:finger]` is just the concatenation of the name and the first release number (except for Ubuntu which gives `20.04` for example)

test/integration/share/inspec.yml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+---
+name: shared
+title: InSpec shared resources
+maintainer: SaltStack Formulas
+license: Apache-2.0
+summary: shared resources
+supports:
+  - platform-name: debian
+  - platform-name: ubuntu
+  - platform-name: centos
+  - platform-name: fedora
+  - platform-name: opensuse
+  - platform-name: suse
+  - platform-name: freebsd
+  - platform-name: amazon
+  - platform-name: arch

test/integration/share/libraries/system.rb

@@ -0,0 +1,99 @@
+# frozen_string_literal: true
+
+# system.rb -- InSpec resources for system values
+# Author: Daniel Dehennin <daniel.dehennin@ac-dijon.fr>
+# Copyright (C) 2020 Daniel Dehennin <daniel.dehennin@ac-dijon.fr>
+
+HOSTNAME_CMDS = %w[hostname hostnamectl].freeze
+HOSTNAME_CMDS_OPT = {
+  'hostname' => '-s',
+  'hostnamectl' => '--static'
+}.freeze
+
+class SystemResource < Inspec.resource(1)
+  name 'system'
+
+  attr_reader :platform
+  attr_reader :hostname
+
+  def initialize
+    @platform = build_platform
+    @hostname = found_hostname
+  end
+
+  private
+
+  def found_hostname
+    cmd = guess_hostname_cmd
+
+    unless cmd.exit_status.zero?
+      raise Inspec::Exceptions::ResourceSkipped,
+            "Error running '#{cmd}': #{cmd.stderr}"
+    end
+
+    cmd.stdout.chomp
+  end
+
+  def guess_hostname_cmd
+    HOSTNAME_CMDS.each do |cmd|
+      if inspec.command(cmd).exist?
+        return inspec.command("#{cmd} #{HOSTNAME_CMDS_OPT[cmd]}")
+      end
+    end
+
+    raise Inspec::Exceptions::ResourceSkipped,
+          "Error: #{@platform[:finger]}} has none of #{HOSTNAME_CMDS.join(', ')}"
+  end
+
+  def build_platform
+    {
+      family: build_platform_family,
+      name: build_platform_name,
+      release: build_platform_release,
+      finger: build_platform_finger
+    }
+  end
+
+  def build_platform_family
+    case inspec.platform[:name]
+    when 'arch'
+      'arch'
+    else
+      inspec.platform[:family]
+    end
+  end
+
+  def build_platform_name
+    case inspec.platform[:name]
+    when 'amazon'
+      'amazonlinux'
+    else
+      inspec.platform[:name]
+    end
+  end
+
+  def build_platform_release
+    case inspec.platform[:name]
+    when 'amazon'
+      # `2018` relase is named `1` in kitchen.yaml
+      inspec.platform[:release].gsub(/2018.*/, '1')
+    when 'arch'
+      'base-latest'
+    else
+      inspec.platform[:release]
+    end
+  end
+
+  def build_platform_finger
+    "#{build_platform_name}-#{build_finger_release}"
+  end
+
+  def build_finger_release
+    case inspec.platform[:name]
+    when 'ubuntu'
+      build_platform_release.split('.').slice(0, 2).join('.')
+    else
+      build_platform_release.split('.')[0]
+    end
+  end
+end