Make it work with jessie, II

[dsa-puppet.git] / modules / debian-org / manifests / init.pp

diff --git a/modules/debian-org/manifests/init.pp b/modules/debian-org/manifests/init.pp
index bcfff1c6f87a90f90ca54ebd982c080f02e2d1b1..f441ac51f6f00faf2e234bba5872afa107288252 100644 (file)
--- a/modules/debian-org/manifests/init.pp
+++ b/modules/debian-org/manifests/init.pp
@@ -1,10 +1,14 @@
+# == Class: debian-org
+#
+# Stuff common to all debian.org servers
+#
 class debian-org {
        if getfromhash($site::nodeinfo, 'hoster', 'mirror-debian') {
                $mirror = getfromhash($site::nodeinfo, 'hoster', 'mirror-debian')
        } else {
                $mirror = 'http://http.debian.net/debian/'
        }
-       if $::lsbmajdistrelease < 7 {
+       if $::lsbmajdistrelease != "testing" and $::lsbmajdistrelease < 7 {
                $mirror_backports = 'http://backports.debian.org/debian-backports/'
        } else {
                $mirror_backports = $mirror
@@ -23,6 +27,8 @@ class debian-org {
                        'klogd',
                        'sysklogd',
                        'rsyslog',
+                       'os-prober',
+                       'apt-listchanges',
                ]:
                ensure => purged,
        }
@@ -33,6 +39,12 @@ class debian-org {
                ensure => installed,
                tag    => extra_repo,
        }
+       file { '/etc/ssh/ssh_known_hosts':
+               ensure  => present,
+               replace => false,
+               mode    => '0644',
+               source  => 'puppet:///modules/debian-org/basic-ssh_known_hosts'
+       }
 
        package { [
                        'apt-utils',
@@ -48,7 +60,7 @@ class debian-org {
                ensure => installed,
        }
 
-       if $::lsbmajdistrelease >= 7 {
+       if $::lsbmajdistrelease == "testing" or $::lsbmajdistrelease >= 7 {
                package { 'libfilesystem-ruby1.9.1':
                        ensure => installed,
                }
@@ -95,22 +107,38 @@ class debian-org {
                require => Package['molly-guard'],
        }
 
+       file { '/etc/apt/trusted-keys.d':
+               ensure => absent,
+               force  => true,
+       }
+
+       file { '/etc/apt/trusted.gpg':
+               mode    => '0600',
+               content => "",
+       }
+
        site::aptrepo { 'security':
                url        => 'http://security.debian.org/',
                suite      => "${::lsbdistcodename}/updates",
                components => ['main','contrib','non-free']
        }
+       if $::lsbmajdistrelease != "testing" and $::lsbmajdistrelease < 7 {
+               site::aptrepo { 'debian-lts':
+                       url        => $mirror,
+                       suite      => "${::lsbdistcodename}-lts",
+                       components => ['main','contrib','non-free']
+               }
+       } else {
+               site::aptrepo { 'debian-lts':
+                       ensure => absent,
+               }
+       }
 
        site::aptrepo { 'backports.debian.org':
                url        => $mirror_backports,
                suite      => "${::lsbdistcodename}-backports",
                components => ['main','contrib','non-free']
        }
-       site::aptrepo { 'backports.org':
-               ensure => absent,
-               keyid => '16BA136C',
-               key => 'puppet:///modules/debian-org/backports.org.asc',
-       }
 
        site::aptrepo { 'volatile':
                url        => $mirror,
@@ -118,15 +146,43 @@ class debian-org {
                components => ['main','contrib','non-free']
        }
 
+       #if ($::hostname in [ball, corelli, eysler, lucatelli, mayer, mayr, pettersson]) or
+       #   ($::hoster and ($::hoster in [bytemark, man-da, brown])) {
+       #       site::aptrepo { 'proposed-updates':
+       #               url        => $mirror,
+       #               suite      => "${::lsbdistcodename}-proposed-updates",
+       #               components => ['main','contrib','non-free']
+       #       }
+       #} else {
+               site::aptrepo { 'proposed-updates':
+                       ensure => absent,
+               }
+       #}
+
        site::aptrepo { 'debian.org':
                ensure => absent,
        }
 
        site::aptrepo { 'db.debian.org':
                url        => 'http://db.debian.org/debian-admin',
-               suite      => 'lenny',
+               suite      => 'debian-all',
+               components => 'main',
+               key        => 'puppet:///modules/debian-org/db.debian.org.gpg',
+       }
+       site::aptrepo { 'db.debian.org-suite':
+               url        => 'http://db.debian.org/debian-admin',
+               suite      => $::lsbdistcodename,
                components => 'main',
-               key        => 'puppet:///modules/debian-org/db.debian.org.asc',
+       }
+
+       augeas { 'inittab_replicate':
+               context => '/files/etc/inittab',
+               changes => [
+                       'set ud/runlevels 2345',
+                       'set ud/action respawn',
+                       'set ud/process "/usr/bin/ud-replicated -d"',
+               ],
+               notify  => Exec['init q'],
        }
 
        if getfromhash($site::nodeinfo, 'hoster', 'mirror-debian') {
@@ -153,10 +209,6 @@ class debian-org {
        file { '/etc/apt/preferences':
                source => 'puppet:///modules/debian-org/apt.preferences',
        }
-       file { '/etc/apt/trusted-keys.d/':
-               ensure => directory,
-               purge  => true,
-       }
        file { '/etc/apt/apt.conf.d/local-compression':
                source => 'puppet:///modules/debian-org/apt.conf.d/local-compression',
        }
@@ -181,12 +233,12 @@ class debian-org {
                source => 'puppet:///modules/debian-org/puppet.default',
        }
        file { '/etc/cron.d/dsa-puppet-stuff':
-               source => 'puppet:///modules/debian-org/dsa-puppet-stuff.cron',
+               source  => 'puppet:///modules/debian-org/dsa-puppet-stuff.cron',
                require => Package['debian.org'],
        }
        file { '/etc/ldap/ldap.conf':
                require => Package['debian.org'],
-               source => 'puppet:///modules/debian-org/ldap.conf',
+               source  => 'puppet:///modules/debian-org/ldap.conf',
        }
        file { '/etc/pam.d/common-session':
                require => Package['debian.org'],
@@ -230,14 +282,22 @@ class debian-org {
                linkto => '/usr/bin/vim.basic',
        }
        mailalias { 'samhain-reports':
-               ensure => present,
+               ensure    => present,
                recipient => $debianadmin,
-               require => Package['debian.org']
+               require   => Package['debian.org']
+       }
+
+       file { '/usr/local/bin/check_for_updates':
+               source => 'puppet:///modules/debian-org/check_for_updates',
+               mode   => '0755',
+               owner  => root,
+               group  => root,
        }
 
        exec { 'apt-get update':
-               path        => '/usr/bin:/usr/sbin:/bin:/sbin',
-               refreshonly => true,
+               path    => '/usr/bin:/usr/sbin:/bin:/sbin',
+               onlyif  => '/usr/local/bin/check_for_updates',
+               require => File['/usr/local/bin/check_for_updates']
        }
        Exec['apt-get update']->Package<| tag == extra_repo |>
 
@@ -256,4 +316,25 @@ class debian-org {
        exec { 'init q':
                refreshonly => true
        }
+
+       tidy { '/var/lib/puppet/clientbucket/':
+               age      => '2w',
+               recurse  => 9,
+               type     => ctime,
+               matches  => [ 'paths', 'contents' ],
+               schedule => weekly
+       }
+
+       file { '/root/.bashrc':
+               source => 'puppet:///modules/debian-org/root-dotfiles/bashrc',
+       }
+       file { '/root/.profile':
+               source => 'puppet:///modules/debian-org/root-dotfiles/profile',
+       }
+       file { '/root/.screenrc':
+               source => 'puppet:///modules/debian-org/root-dotfiles/screenrc',
+       }
+       file { '/root/.vimrc':
+               source => 'puppet:///modules/debian-org/root-dotfiles/vimrc',
+       }
 }