buildsystem/manifests/init.pp

class buildsystem {

    class base {
        $build_login = "iurt"
        $build_home_dir = "/home/$build_login"
        $sched_login = "schedbot"
        $sched_home_dir = "/home/$sched_login"

        include ssh::auth
        ssh::auth::key { $build_login: } # declare a key for build bot: RSA, 2048 bits
    }

    class mainnode inherits base {
        include iurtuser
        ssh::auth::server { $build_login: }

        package { "task-bs-cluster-main":
            ensure => "installed"
        }
    }

    class buildnode inherits base {
        include iurt
    }

    class scheduler {
        # ulri        
    }

    class dispatcher {
        # emi
    }
    
    class repsys {
        package { 'repsys':

        }


    }

    define sshuser($user, $homedir, $comment) {
        group {"$user": 
            ensure => present,
        }

        user {"$user":
            ensure => present,
            comment => $comment,
            managehome => true,
            gid => $user,
            shell => "/bin/bash",
            notify => Exec["unlock$user"],
        }

        # set password to * to unlock the account but forbid login through login
        exec { "unlock$user":
            command => "usermod -p '*' $user",
            refreshonly => true,
        }

        file { $homedir:
            ensure => "directory",
        }

        file { "$homedir/.ssh":
            ensure => "directory",
            mode   => 600,
            owner  => $user,
            group  => $user,
        }
    }

    class iurtuser {
        sshuser($build_login, $build_home_dir, "System user used to run build bots")
    }

    class iurt {
        include sudo
        include iurtuser
        ssh::auth::client { $build_login: }

        # build node common settings
        # we could have the following skip list to use less space:
        # '/(drakx-installer-binaries|drakx-installer-advertising|gfxboot|drakx-installer-stage2|mandriva-theme)/'
        $package_list = ['task-bs-cluster-chroot', 'iurt']
        package { $package_list:
            ensure => installed;
        }

        file { "$build_home_dir/.iurt.cauldron.conf":
            ensure => present,
            owner => $build_login,
            group => $build_login,
            mode => 644,
            content => template("buildsystem/iurt.cauldron.conf")
        }

        file { "/etc/sudoers.d/iurt":
            ensure => present,
            owner => root,
            group => root,
            mode => 440,
            content => template("buildsystem/sudoers.iurt")
        }
    }
}
1	class buildsystem {
2
3	class base {
4	$build_login = "iurt"
5	$build_home_dir = "/home/$build_login"
6	$sched_login = "schedbot"
7	$sched_home_dir = "/home/$sched_login"
8
9	include ssh::auth
10	ssh::auth::key { $build_login: } # declare a key for build bot: RSA, 2048 bits
11	}
12
13	class mainnode inherits base {
14	include iurtuser
15	ssh::auth::server { $build_login: }
16
17	package { "task-bs-cluster-main":
18	ensure => "installed"
19	}
20	}
21
22	class buildnode inherits base {
23	include iurt
24	}
25
26	class scheduler {
27	# ulri
28	}
29
30	class dispatcher {
31	# emi
32	}
33
34	class repsys {
35	package { 'repsys':
36
37	}
38
39
40	}
41
42	define sshuser($user, $homedir, $comment) {
43	group {"$user":
44	ensure => present,
45	}
46
47	user {"$user":
48	ensure => present,
49	comment => $comment,
50	managehome => true,
51	gid => $user,
52	shell => "/bin/bash",
53	notify => Exec["unlock$user"],
54	}
55
56	# set password to * to unlock the account but forbid login through login
57	exec { "unlock$user":
58	command => "usermod -p '*' $user",
59	refreshonly => true,
60	}
61
62	file { $homedir:
63	ensure => "directory",
64	}
65
66	file { "$homedir/.ssh":
67	ensure => "directory",
68	mode => 600,
69	owner => $user,
70	group => $user,
71	}
72	}
73
74	class iurtuser {
75	sshuser($build_login, $build_home_dir, "System user used to run build bots")
76	}
77
78	class iurt {
79	include sudo
80	include iurtuser
81	ssh::auth::client { $build_login: }
82
83	# build node common settings
84	# we could have the following skip list to use less space:
85	# '/(drakx-installer-binaries\|drakx-installer-advertising\|gfxboot\|drakx-installer-stage2\|mandriva-theme)/'
86	$package_list = ['task-bs-cluster-chroot', 'iurt']
87	package { $package_list:
88	ensure => installed;
89	}
90
91	file { "$build_home_dir/.iurt.cauldron.conf":
92	ensure => present,
93	owner => $build_login,
94	group => $build_login,
95	mode => 644,
96	content => template("buildsystem/iurt.cauldron.conf")
97	}
98
99	file { "/etc/sudoers.d/iurt":
100	ensure => present,
101	owner => root,
102	group => root,
103	mode => 440,
104	content => template("buildsystem/sudoers.iurt")
105	}
106	}
107	}