buildsystem/manifests/init.pp

class buildsystem {

    class base {
        $build_login = "iurt"
        $build_home_dir = "/home/$build_login"
        $sched_login = "schedbot"
        $sched_home_dir = "/home/$sched_login"

        include ssh::auth
        ssh::auth::key { $build_login: } # declare a key for build bot: RSA, 2048 bits
        ssh::auth::key { $sched_login: } # declare a key for sched bot: RSA, 2048 bits
    }

    class mainnode inherits base {
        include iurtuser

        sshuser { $sched_login:
          homedir => $sched_home_dir,
          comment => "System user used to schedule builds",
        }

        ssh::auth::client { $sched_login: }
        ssh::auth::server { $build_login: }

        $package_list = ['task-bs-cluster-main', 'iurt']
        package { $package_list:
            ensure => "installed"
        }

        apache::vhost_other_app { "repository.$domain":
            vhost_file => "buildsystem/vhost_repository.conf",
        }

    }

    class buildnode inherits base {
        include iurt
    }

    class scheduler {
        # ulri        
    }

    class dispatcher {
        # emi
    }
    
    class repsys {
        package { 'repsys':

        }


    }

    define sshuser($homedir, $comment) {
        group {"$title": 
            ensure => present,
        }

        user {"$title":
            ensure => present,
            comment => $comment,
            managehome => true,
            gid => $title,
            shell => "/bin/bash",
            notify => Exec["unlock$title"],
        }

        # set password to * to unlock the account but forbid login through login
        exec { "unlock$title":
            command => "usermod -p '*' $title",
            refreshonly => true,
        }

        file { $homedir:
            ensure => "directory",
            require => User[$title],
        }

        file { "$homedir/.ssh":
            ensure => "directory",
            mode   => 600,
            owner  => $title,
            group  => $title,
            require => File[$homedir],
        }
    }

    class iurtuser {
        sshuser { $build_login:
          homedir => $build_home_dir,
          comment => "System user used to run build bots",
        }
    }

    class iurt {
        include sudo
        include iurtuser
        ssh::auth::client { $build_login: }
        ssh::auth::server { $sched_login: user => $build_login }

        # build node common settings
        # we could have the following skip list to use less space:
        # '/(drakx-installer-binaries|drakx-installer-advertising|gfxboot|drakx-installer-stage2|mandriva-theme)/'
        $package_list = ['task-bs-cluster-chroot', 'iurt']
        package { $package_list:
            ensure => installed;
        }

        file { "$build_home_dir/.iurt.cauldron.conf":
            ensure => present,
            owner => $build_login,
            group => $build_login,
            mode => 644,
            content => template("buildsystem/iurt.cauldron.conf")
        }

        file { "/etc/sudoers.d/iurt":
            ensure => present,
            owner => root,
            group => root,
            mode => 440,
            content => template("buildsystem/sudoers.iurt")
        }
    }
}
1	class buildsystem {
2
3	class base {
4	$build_login = "iurt"
5	$build_home_dir = "/home/$build_login"
6	$sched_login = "schedbot"
7	$sched_home_dir = "/home/$sched_login"
8
9	include ssh::auth
10	ssh::auth::key { $build_login: } # declare a key for build bot: RSA, 2048 bits
11	ssh::auth::key { $sched_login: } # declare a key for sched bot: RSA, 2048 bits
12	}
13
14	class mainnode inherits base {
15	include iurtuser
16
17	sshuser { $sched_login:
18	homedir => $sched_home_dir,
19	comment => "System user used to schedule builds",
20	}
21
22	ssh::auth::client { $sched_login: }
23	ssh::auth::server { $build_login: }
24
25	$package_list = ['task-bs-cluster-main', 'iurt']
26	package { $package_list:
27	ensure => "installed"
28	}
29
30	apache::vhost_other_app { "repository.$domain":
31	vhost_file => "buildsystem/vhost_repository.conf",
32	}
33
34	}
35
36	class buildnode inherits base {
37	include iurt
38	}
39
40	class scheduler {
41	# ulri
42	}
43
44	class dispatcher {
45	# emi
46	}
47
48	class repsys {
49	package { 'repsys':
50
51	}
52
53
54	}
55
56	define sshuser($homedir, $comment) {
57	group {"$title":
58	ensure => present,
59	}
60
61	user {"$title":
62	ensure => present,
63	comment => $comment,
64	managehome => true,
65	gid => $title,
66	shell => "/bin/bash",
67	notify => Exec["unlock$title"],
68	}
69
70	# set password to * to unlock the account but forbid login through login
71	exec { "unlock$title":
72	command => "usermod -p '*' $title",
73	refreshonly => true,
74	}
75
76	file { $homedir:
77	ensure => "directory",
78	require => User[$title],
79	}
80
81	file { "$homedir/.ssh":
82	ensure => "directory",
83	mode => 600,
84	owner => $title,
85	group => $title,
86	require => File[$homedir],
87	}
88	}
89
90	class iurtuser {
91	sshuser { $build_login:
92	homedir => $build_home_dir,
93	comment => "System user used to run build bots",
94	}
95	}
96
97	class iurt {
98	include sudo
99	include iurtuser
100	ssh::auth::client { $build_login: }
101	ssh::auth::server { $sched_login: user => $build_login }
102
103	# build node common settings
104	# we could have the following skip list to use less space:
105	# '/(drakx-installer-binaries\|drakx-installer-advertising\|gfxboot\|drakx-installer-stage2\|mandriva-theme)/'
106	$package_list = ['task-bs-cluster-chroot', 'iurt']
107	package { $package_list:
108	ensure => installed;
109	}
110
111	file { "$build_home_dir/.iurt.cauldron.conf":
112	ensure => present,
113	owner => $build_login,
114	group => $build_login,
115	mode => 644,
116	content => template("buildsystem/iurt.cauldron.conf")
117	}
118
119	file { "/etc/sudoers.d/iurt":
120	ensure => present,
121	owner => root,
122	group => root,
123	mode => 440,
124	content => template("buildsystem/sudoers.iurt")
125	}
126	}
127	}