Configuration de bcfg2.

darcs-hash:20071210213713-af139-dee8b30fbdff75a92ba939d7cd74d77dac78d7cc.gz

Bundler/bcfg2.xml

@@ -0,0 +1,13 @@
+<Bundle name="bcfg2" version="2.0">
+  <ConfigFile name="/etc/bcfg2.conf"/>
+  <ConfigFile name="/etc/default/bcfg2"/>
+  <Package name="bcfg2"/>
+  <Service name="bcfg2"/>
+  <Group name="bcfg2-server">
+    <Package name="bcfg2-server"/>
+    <Service name="bcfg2-server"/>
+  </Group>
+  <Group name="bcfg2-server" negate="true">
+    <ConfigFile name="/etc/bcfg2.key"/>
+  </Group>
+</Bundle>

Cfg/etc/bcfg2.key/bcfg2.key

@@ -0,0 +1,32 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----
+MIICsDCCAhmgAwIBAgIJAPT5kMusCmhLMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
+BAYTAkFVMRMwEQYDVQQIEwpTb21lLVN0YXRlMSEwHwYDVQQKExhJbnRlcm5ldCBX
+aWRnaXRzIFB0eSBMdGQwHhcNMDcxMjEwMjEyOTI3WhcNMTAwOTA1MjEyOTI3WjBF
+MQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50
+ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
+gQDwuERU4MpEO/sy1wbJo4o34tYf5/O1fNv7oH8hlNPIKnzr9TOKeCyUBXpe6gZc
+LxusJbtzzQCaUQUQRfEtNwi8ifNUtIpK5ZpOovpM+bFy65hCrkAXqlbgcW7Gmrpm
+T7mB9s9huvdWMie0QPpTz1hRkE2Qvo6RmA4lR5DCbZXcvwIDAQABo4GnMIGkMB0G
+A1UdDgQWBBTnYp3KD6jkiVf0rtm0XS5KFcgkEDB1BgNVHSMEbjBsgBTnYp3KD6jk
+iVf0rtm0XS5KFcgkEKFJpEcwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgTClNvbWUt
+U3RhdGUxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZIIJAPT5kMus
+CmhLMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAqlLgfokfdVH6UnqK
+qBGF56yuy69UnGiJwryZAhKl3dCDyn5Qy6hj+yCGSLYQY7sJtdAd3S0casLLXEnz
+76C0KBWjMcejciiN8JWPctGS+bmWDXjxeXqaRZbfqAvwkQJmehaONxdcNzyK/bmh
+AUDBaGKbwz9MlfP43W8Do3LE354=
+-----END CERTIFICATE-----

Cfg/etc/default/bcfg2/bcfg2

@@ -0,0 +1,38 @@
+# -*- coding: utf-8; mode: conf-unix -*-
+#
+# Fichier gere par BCfg2
+#
+# Fichier de configuration des options de demarrage de bcfg2
+
+# BCFG2_OPTIONS:
+# Set the default options for Bcfg2 on startup
+#   Default: "-q"
+#BCFG2_OPTIONS="-q"
+
+# BCFG2_ENABLED:
+# Should Bcfg2 be run automatically by system scripts
+#
+# Uncomment the following line to enable any of the below selections
+#   Default: 0 (disable)
+BCFG2_ENABLED=1
+
+# BCFG2_INIT:
+# Enable bcfg2 during system bootup
+#
+# Set value to 1 to enable
+#   Default: 0 (disable)
+#BCFG2_INIT=1
+
+# BCFG2_AGENT:
+# Run Bcfg2 in Agent mode at system bootup
+#
+# Set value to 1 to enable
+#   Default: 0 (disable)
+BCFG2_AGENT=1
+
+# BCFG2_CRON:
+# Set the frequency of cron runs.
+#
+# Can be set to off, hourly, daily or both
+#    Default: off
+#BCFG2_CRON=off

Metadata/groups.xml

@@ -35,6 +35,7 @@
 	 profile="true">
     <Group name="crans"/>
     <Group name="db-main"/>
+    <Group name="bcfg2-server"/>
   </Group>
 
   <Group name="pegase"
@@ -318,6 +319,14 @@
 	 -->
   </Group>
 
+  <Group name="bcfg2">
+    <Bundle name="bcfg2"/>
+  </Group>
+
+  <Group name="bcfg2-server">
+    <Bundle name="bcfg2"/>
+  </Group>
+
   <!-- +======================+ -->
   <!-- | Connexion de secours | -->
   <!-- +======================+ -->

Rules/rules.xml

@@ -36,4 +36,11 @@
   <Action name="apt-key-add"
 	  timing="post" when="modified" status="check"
 	  command="cat /etc/crans/apt-keys/*.asc | apt-key add -"/>
+
+  <Directory name="/etc/crans/secrets" owner="root" group="root" owner="0700"/>
+
+  <Package name="bcfg2" version="0.9.5.2-0.2"/>
+  <Service name="bcfg2" status="on"/>
+  <Package name="bcfg2-server" version="0.9.5.2-0.2"/>
+  <Service name="bcfg2-server" status="on"/>
 </Rules>

TGenshi/etc/bcfg2.conf/info.xml

@@ -0,0 +1,3 @@
+<FileInfo>
+  <Info owner="root" group="root" perms="0600"/>
+</FileInfo>

TGenshi/etc/bcfg2.conf/template.txt

@@ -0,0 +1,25 @@
+# -*- coding: utf-8; mode: conf-unix -*-
+#
+# Fichier gere par BCfg2
+#
+# Fichier de configuration de bcfg2.
+{% include /var/lib/bcfg2/etc/genshi/secrets.xml %}
+
+[server]
+repository = /var/lib/bcfg2
+structures = Bundler,Base
+generators = SSHbase,Cfg,TGenshi,Rules
+svn=no
+
+[statistics]
+sendmailpath = /usr/sbin/sendmail
+
+[communication]
+protocol = xmlrpc/ssl
+password = $bcfg2_password
+key = /etc/bcfg2.key
+fingerprint = 2f110783f4cbd14e45a35de518ddbaea999a03ad
+agent-port = 6790
+
+[components]
+bcfg2 = https://vert.adm.crans.org:6789