Diferencia entre revisiones de «Puppet/clases»
De FESOL. Proyectos de Software Libre ULS
| Línea 33: | Línea 33: | ||
restrict 127.0.0.1 | restrict 127.0.0.1 | ||
restrict ::1 | restrict ::1 | ||
| + | |||
| + | |||
| + | Paquetes Básicos | ||
| + | class paquetes_basicos { | ||
| + | $seguridad = ["fail2ban", "linux-image-amd64", "logwatch", ] | ||
| + | $herramientassis = [ "vim" , "tree", "less","rsync", "strace", "rdiff", ] | ||
| + | $herramientasadmin = [ "openssh-server","sudo", "screen", ] | ||
| + | $herramientasred= [ "mtr-tiny", "lynx", "links2", ] | ||
| + | |||
| + | package { $seguridad: | ||
| + | ensure => latest } | ||
| + | package { $herramientassis: | ||
| + | ensure => present } | ||
| + | package { $herramientasadmin: | ||
| + | ensure => present } | ||
| + | package { $herramientasred: | ||
| + | ensure => present } | ||
| + | |||
| + | |||
| + | exec { "vimrc syntax": | ||
| + | command => "sed -i 's/\"syntax on/syntax on/g' /etc/vim/vimrc", | ||
| + | onlyif => "bash -c \"if [ $(cat /etc/vim/vimrc|grep 'syntax on'|wc -l) -eq 1 ]; then echo 'true' ; else echo 'false'; fi \"", | ||
| + | path => "/bin:/usr/sbin:/usr/bin", | ||
| + | require => Package["vim"], | ||
| + | } | ||
| + | |||
| + | } | ||
Revisión del 17:06 30 oct 2013
Sincronización de hora
class ntp {
package { ntp:
ensure => present,
}
file { "/etc/ntp.conf":
owner => root,
group => root,
mode => 444,
backup => false,
source => "puppet:///uesconfigs/etc/ntp.conf",
require => Package["ntp"],
}
service { "ntp":
enable => true ,
ensure => running,
subscribe => [Package[ntp], File["/etc/ntp.conf"],],
}
}
Archivo ntp.conf, asumiendo que los servidores de hora son 192.168.0.132 y 192.168.0.133
driftfile /var/lib/ntp/ntp.drift statsdir /var/log/ntpstats/ statistics loopstats peerstats clockstats filegen loopstats file loopstats type day enable filegen peerstats file peerstats type day enable filegen clockstats file clockstats type day enable server 192.168.0.132 server 192.168.0.133 restrict -4 default kod notrap nomodify nopeer noquery restrict -6 default kod notrap nomodify nopeer noquery restrict 127.0.0.1 restrict ::1
Paquetes Básicos
class paquetes_basicos {
$seguridad = ["fail2ban", "linux-image-amd64", "logwatch", ]
$herramientassis = [ "vim" , "tree", "less","rsync", "strace", "rdiff", ]
$herramientasadmin = [ "openssh-server","sudo", "screen", ]
$herramientasred= [ "mtr-tiny", "lynx", "links2", ]
package { $seguridad:
ensure => latest }
package { $herramientassis:
ensure => present }
package { $herramientasadmin:
ensure => present }
package { $herramientasred:
ensure => present }
exec { "vimrc syntax":
command => "sed -i 's/\"syntax on/syntax on/g' /etc/vim/vimrc",
onlyif => "bash -c \"if [ $(cat /etc/vim/vimrc|grep 'syntax on'|wc -l) -eq 1 ]; then echo 'true' ; else echo 'false'; fi \"",
path => "/bin:/usr/sbin:/usr/bin",
require => Package["vim"],
}
}
