crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Bcfg2] Nouveau paquet, nouvelle config

Browse source 
Ignore-this: 67cdee8f32d7581493d12617ddc97bc2
Bcfg2 a subi deux releases, qui ont pas mal changé les "normes".

Les balises suivntes sont remplacées :

<ConfigFile> ---------------------------> <Path type="file">
<Directory>  ---------------------------> <Path type="directory">
<SymLink>    ---------------------------> <Path type="symlink">
etc

Pour les fichiers python, désormais, on utilise plus
<ConfigFile>, mais <Python>

darcs-hash:20121211100127-b6762-f146f4460e9713cb59a25c33a08b551c5280f3b2.gz
This commit is contained in:
Pierre-Elliott Bécue 2012-12-11 11:01:27 +01:00
parent 1158615de0
commit d10a8a0672
60 changed files with 252 additions and 266 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Base/cron.xml
View file

@ -1,13 +1,13 @@
<Base> <Base>
<Group name="vpn"> <Group name="vpn">
<Group name="external"> <Group name="external">
<ConfigFile name="/etc/cron.d/vpn"/> <Path name="/etc/cron.d/vpn"/>
</Group> </Group>
</Group> </Group>
<Group name="file-server"> <Group name="file-server">
<ConfigFile name="/etc/cron.d/debris"/> <Path name="/etc/cron.d/debris"/>
</Group> </Group>
<Group name="users"> <Group name="users">
<ConfigFile name="/etc/cron.d/ethercode"/> <Path name="/etc/cron.d/ethercode"/>
</Group> </Group>
</Base> </Base>

56
Base/dom0.xml
View file

@ -1,32 +1,32 @@
<Base> <Base>
<Group name="dom0"> <Group name="dom0">
<ConfigFile name="/etc/xen/common.py"/> <Path name="/etc/xen/common.py"/>
<ConfigFile name="/etc/xen/common_squeeze.py"/> <Path name="/etc/xen/common_squeeze.py"/>
<ConfigFile name="/etc/xen/bcfg2"/> <Path name="/etc/xen/bcfg2"/>
<ConfigFile name="/etc/xen/irc"/> <Path name="/etc/xen/irc"/>
<ConfigFile name="/etc/xen/munin"/> <Path name="/etc/xen/munin"/>
<ConfigFile name="/etc/xen/news"/> <Path name="/etc/xen/news"/>
<ConfigFile name="/etc/xen/niomniom"/> <Path name="/etc/xen/niomniom"/>
<ConfigFile name="/etc/xen/o2"/> <Path name="/etc/xen/o2"/>
<ConfigFile name="/etc/xen/titanic"/> <Path name="/etc/xen/titanic"/>
<ConfigFile name="/etc/xen/xmpp"/> <Path name="/etc/xen/xmpp"/>
<ConfigFile name="/etc/xen/ytrap-llatsni"/> <Path name="/etc/xen/ytrap-llatsni"/>
<ConfigFile name="/etc/xen/owl"/> <Path name="/etc/xen/owl"/>
<ConfigFile name="/etc/xen/asterisk"/> <Path name="/etc/xen/asterisk"/>
<ConfigFile name="/etc/xen/radius"/> <Path name="/etc/xen/radius"/>
<ConfigFile name="/etc/xen/ldap"/> <Path name="/etc/xen/ldap"/>
<ConfigFile name="/etc/xen/pgsql"/> <Path name="/etc/xen/pgsql"/>
<ConfigFile name="/etc/xen/redisdead"/> <Path name="/etc/xen/redisdead"/>
<ConfigFile name="/etc/xen/obm"/> <Path name="/etc/xen/obm"/>
<ConfigFile name="/etc/xen/cerbere"/> <Path name="/etc/xen/cerbere"/>
<ConfigFile name="/etc/xen/tracker"/> <Path name="/etc/xen/tracker"/>
<ConfigFile name="/etc/xen/whatsupdoc"/> <Path name="/etc/xen/whatsupdoc"/>
<ConfigFile name="/etc/xen/kenobi"/> <Path name="/etc/xen/kenobi"/>
<ConfigFile name="/etc/xen/sogo"/> <Path name="/etc/xen/sogo"/>
<ConfigFile name="/etc/xen/dhcp"/> <Path name="/etc/xen/dhcp"/>
<ConfigFile name="/etc/xen/log"/> <Path name="/etc/xen/log"/>
<ConfigFile name="/etc/xen/routeur"/> <Path name="/etc/xen/routeur"/>
<ConfigFile name="/etc/xen/puppet"/> <Path name="/etc/xen/puppet"/>
<ConfigFile name="/etc/xen/bob"/> <Path name="/etc/xen/bob"/>
</Group> </Group>
</Base> </Base>

38
Base/needed.xml
View file

@ -1,60 +1,60 @@
<Base> <Base>
<Group name="crans"> <Group name="crans">
<ConfigFile name="/etc/hosts"/> <Python name="/etc/hosts"/>
<ConfigFile name="/etc/timezone"/> <Path name="/etc/timezone"/>
<Package name="python"/> <Package name="python"/>
<Package name="python-netaddr"/> <Package name="python-netaddr"/>
<Package name="udev"/> <Package name="udev"/>
<SymLink name="/etc/logcheck/cracking.ignore.d/local-crans"/> <Path name="/etc/logcheck/cracking.ignore.d/local-crans" type="symlink"/>
<SymLink name="/etc/logcheck/cracking.ignore.d/local-ignore"/> <Path name="/etc/logcheck/cracking.ignore.d/local-ignore" type="symlink"/>
<SymLink name="/etc/logcheck/violations.ignore.d/local-crans"/> <Path name="/etc/logcheck/violations.ignore.d/local-crans" type="symlink"/>
<SymLink name="/etc/logcheck/violations.ignore.d/local-ignore"/> <Path name="/etc/logcheck/violations.ignore.d/local-ignore" type="symlink"/>
<!-- fichier de preferences pour darcs --> <!-- fichier de preferences pour darcs -->
<ConfigFile name="/etc/crans/darcs_defaults"/> <Path name="/etc/crans/darcs_defaults"/>
<!-- mail de notification de fichiers non synchronises --> <!-- mail de notification de fichiers non synchronises -->
<ConfigFile name="/etc/cron.daily/mailWarn_dirtyDarcsRepo"/> <Path name="/etc/cron.daily/mailWarn_dirtyDarcsRepo"/>
<!-- Gestion des secrets --> <!-- Gestion des secrets -->
<Group name="secrets"> <Group name="secrets">
<Group name="bcfg2-server" negate="true"> <Group name="bcfg2-server" negate="true">
<!-- Sur le serveur les fichiers suivant sont utilises comme <!-- Sur le serveur les fichiers suivant sont utilises comme
sources pour les clients --> sources pour les clients -->
<Directory name="/etc/crans/secrets"/> <Path name="/etc/crans/secrets" type="directory"/>
<ConfigFile name="/etc/crans/secrets/secrets.py"/> <Python name="/etc/crans/secrets/secrets.py"/>
<Group name="rsync"> <Group name="rsync">
<ConfigFile name="/etc/crans/secrets/rsyncd.secrets"/> <Python name="/etc/crans/secrets/rsyncd.secrets"/>
</Group> </Group>
<ConfigFile name="/etc/crans/secrets/slon.py"/> <Python name="/etc/crans/secrets/slon.py"/>
<ConfigFile name="/etc/crans/secrets/nols.py"/> <Python name="/etc/crans/secrets/nols.py"/>
<ConfigFile name="/etc/crans/secrets/README"/> <Python name="/etc/crans/secrets/README"/>
</Group> </Group>
</Group> </Group>
<Package name="resolvconf"/> <Package name="resolvconf"/>
<Directory name="/usr/scripts"/> <Path name="/usr/scripts" type="directory"/>
</Group> </Group>
<Group name="fstab.local"> <Group name="fstab.local">
<!-- Autogénération du fstab --> <!-- Autogénération du fstab -->
<ConfigFile name="/etc/fstab"/> <Python name="/etc/fstab"/>
</Group> </Group>
<Group name="interfaces.local"> <Group name="interfaces.local">
<ConfigFile name="/etc/network/interfaces"/> <Python name="/etc/network/interfaces"/>
</Group> </Group>
<Group name="sysctl.local"> <Group name="sysctl.local">
<ConfigFile name="/etc/sysctl.conf"/> <Python name="/etc/sysctl.conf"/>
</Group> </Group>
<Group name="iscsi"> <Group name="iscsi">
<Package name="open-iscsi"/> <Package name="open-iscsi"/>
<ConfigFile name="/etc/udev/rules.d/10_crans_iscsi.rules"/> <Path name="/etc/udev/rules.d/10_crans_iscsi.rules"/>
</Group> </Group>
<Group name="firmware-bnx2"> <Group name="firmware-bnx2">

13
Bundler/apt-keys.xml
View file

@ -1,10 +1,11 @@
<Bundle name="apt" version="2.0"> <Bundle name="apt" version="2.0">
<Action name="apt-key-add"/> <Action name="apt-key-add"/>
<!-- Cles utilisees pour les paquets fait a la main --> <!-- Cles utilisees pour les paquets fait a la main -->
<ConfigFile name="/etc/crans/apt-keys/dimino.asc"/> <Path name="/etc/crans/apt-keys/dimino.asc"/>
<ConfigFile name="/etc/crans/apt-keys/blockelet.asc"/> <Path name="/etc/crans/apt-keys/blockelet.asc"/>
<ConfigFile name="/etc/crans/apt-keys/glondu.asc"/> <Path name="/etc/crans/apt-keys/glondu.asc"/>
<ConfigFile name="/etc/crans/apt-keys/dandrimont.asc"/> <Path name="/etc/crans/apt-keys/dandrimont.asc"/>
<ConfigFile name="/etc/crans/apt-keys/durand-gasselin.asc"/> <Path name="/etc/crans/apt-keys/durand-gasselin.asc"/>
<ConfigFile name="/etc/crans/apt-keys/iffrig.asc"/> <Path name="/etc/crans/apt-keys/iffrig.asc"/>
<Path name="/etc/crans/apt-keys/becue.asc"/>
</Bundle> </Bundle>

5
Bundler/apt-listchanges.xml
View file

@ -1,5 +1,4 @@
<Bundle name="apt-listchanges" version="2.0" revision="$Rev$" <Bundle name="apt-listchanges" version="2.0" revision="$Rev$" origin="$URL$">
origin="$URL$"> <Path name="/etc/apt/listchanges.conf"/>
<ConfigFile name="/etc/apt/listchanges.conf"/>
<Package name="apt-listchanges"/> <Package name="apt-listchanges"/>
</Bundle> </Bundle>

12
Bundler/apt-mirror.xml
View file

@ -1,9 +1,9 @@
<Bundle name="apt-mirror" version="2.0"> <Bundle name="apt-mirror" version="2.0">
<Package name="apt-mirror"/> <Package name="apt-mirror"/>
<ConfigFile name="/etc/apt/mirror.list"/> <Python name="/etc/apt/mirror.list"/>
<ConfigFile name="/etc/cron.d/apt-mirror"/> <Path name="/etc/cron.d/apt-mirror"/>
<Directory name="/mirror/apt-mirror"/> <Path name="/mirror/apt-mirror"/>
<Directory name="/mirror/apt-mirror/var"/> <Path name="/mirror/apt-mirror/var"/>
<Directory name="/mirror/apt-mirror/skel"/> <Path name="/mirror/apt-mirror/skel"/>
<Directory name="/mirror/apt-mirror/mirror"/> <Path name="/mirror/apt-mirror/mirror"/>
</Bundle> </Bundle>

6
Bundler/apt.xml
View file

@ -1,6 +1,6 @@
<Bundle name="apt" version="2.0"> <Bundle name="apt" version="2.0">
<ConfigFile name="/etc/apt/apt.conf.d/01aptitude"/> <Path name="/etc/apt/apt.conf.d/01aptitude"/>
<ConfigFile name="/etc/apt/apt.conf.d/70debconf"/> <Path name="/etc/apt/apt.conf.d/70debconf"/>
<ConfigFile name="/etc/apt/sources.list"/> <Python name="/etc/apt/sources.list"/>
<Package name="apt"/> <Package name="apt"/>
</Bundle> </Bundle>

4
Bundler/arpwatch.xml
View file

@ -1,6 +1,6 @@
<Bundle name="arpwatch" version="2.0"> <Bundle name="arpwatch" version="2.0">
<Package name="arpwatch"/> <Package name="arpwatch"/>
<Service name="arpwatch"/> <Service name="arpwatch"/>
<ConfigFile name="/etc/default/arpwatch"/> <Path name="/etc/default/arpwatch"/>
<ConfigFile name="/etc/arpwatch.conf"/> <Python name="/etc/arpwatch.conf"/>
</Bundle> </Bundle>

2
Bundler/attendre-vert.xml
View file

@ -1,6 +1,6 @@
<Bundle name="attendre-vert"> <Bundle name="attendre-vert">
<Group name="external" negate="true"> <Group name="external" negate="true">
<ConfigFile name="/etc/init.d/attendre-vert" /> <Path name="/etc/init.d/attendre-vert"/>
<Action name="ln-attendre-vert"/> <Action name="ln-attendre-vert"/>
</Group> </Group>
</Bundle> </Bundle>

4
Bundler/autostatus.xml
View file

@ -1,5 +1,5 @@
<Bundle name="autostatus" version="2.0"> <Bundle name="autostatus" version="2.0">
<ConfigFile name="/etc/cron.d/autostatus"/> <Path name="/etc/cron.d/autostatus"/>
<ConfigFile name="/etc/autostatus.conf"/> <Path name="/etc/autostatus.conf"/>
<Package name="autostatus"/> <Package name="autostatus"/>
</Bundle> </Bundle>

4
Bundler/backuppc.xml
View file

@ -1,5 +1,5 @@
<Bundle name="backuppc"> <Bundle name="backuppc">
<ConfigFile name="/etc/backuppc/config.pl"/> <Python name="/etc/backuppc/config.pl"/>
<ConfigFile name="/etc/backuppc/hosts"/> <Python name="/etc/backuppc/hosts"/>
<Package name="backuppc"/> <Package name="backuppc"/>
</Bundle> </Bundle>

9
Bundler/bcfg2.xml
View file

@ -1,12 +1,13 @@
<Bundle name="bcfg2" version="2.0"> <Bundle name="bcfg2" version="2.0">
<ConfigFile name="/etc/bcfg2.conf"/> <Python name="/etc/bcfg2.conf"/>
<ConfigFile name="/etc/default/bcfg2"/> <Path name="/etc/default/bcfg2"/>
<Package name="bcfg2"/> <Package name="bcfg2"/>
<Group name="bcfg2-server"> <Group name="bcfg2-server">
<ConfigFile name="/etc/bcfg2-web.conf"/> <Path name="/etc/bcfg2-web.conf"/>
<Package name="bcfg2-server"/> <Package name="bcfg2-server"/>
<Service name="bcfg2-server"/> <Service name="bcfg2-server"/>
<!-- Mise a jour des statistiques bcfg2 et envoi du mail --> <!-- Mise a jour des statistiques bcfg2 et envoi du mail -->
<ConfigFile name="/etc/cron.d/bcfg2-crans"/> <Path name="/etc/cron.d/bcfg2-crans"/>
<Path name="/etc/cron.daily/bcfg2-update-packages-list"/>
</Group> </Group>
</Bundle> </Bundle>

16
Bundler/bind.xml
View file

@ -1,19 +1,19 @@
<Bundle name="bind"> <Bundle name="bind">
<ConfigFile name="/etc/bind/rndc.key"/> <Python name="/etc/bind/rndc.key"/>
<ConfigFile name="/etc/bind/named.conf"/> <Python name="/etc/bind/named.conf"/>
<ConfigFile name="/etc/bind/named.conf.local"/> <Path name="/etc/bind/named.conf.local"/>
<ConfigFile name="/etc/bind/named.conf.options"/> <Python name="/etc/bind/named.conf.options"/>
<Group name="dns-primary"> <Group name="dns-primary">
<ConfigFile name="/etc/bind/named.conf.notify"/> <Path name="/etc/bind/named.conf.notify"/>
</Group> </Group>
<Group name="dns-secondary"> <Group name="dns-secondary">
<ConfigFile name="/etc/bind/generated/zones_crans"/> <Path name="/etc/bind/generated/zones_crans"/>
</Group> </Group>
<Group name="dns-secondary-no-forward"> <Group name="dns-secondary-no-forward">
<ConfigFile name="/etc/bind/generated/zones_crans"/> <Path name="/etc/bind/generated/zones_crans"/>
</Group> </Group>
<Group name="vlan-radin"> <Group name="vlan-radin">
<ConfigFile name="/etc/bind/db.fake"/> <Path name="/etc/bind/db.fake"/>
</Group> </Group>
<Package name="bind9"/> <Package name="bind9"/>
<Service name="bind9"/> <Service name="bind9"/>

6
Bundler/corbeau.xml
View file

@ -1,8 +1,8 @@
<Bundle name="corbeau"> <Bundle name="corbeau">
<!-- C'est un paquet de dépendances. Il n'installe pas le script du corbeau <!-- C'est un paquet de d&#233;pendances. Il n'installe pas le script du corbeau
qui se trouve -actuellement- dans /usr/scripts. --> qui se trouve -actuellement- dans /usr/scripts. -->
<ConfigFile name="/etc/spamassassin/corbeau.conf"/> <Path name="/etc/spamassassin/corbeau.conf"/>
<!-- Installé en principe avec inn2 --> <!-- Install&#233; en principe avec inn2 -->
<!-- <Package name="inn2-inews"/> --> <!-- <Package name="inn2-inews"/> -->
<Package name="procmail"/> <!-- formail --> <Package name="procmail"/> <!-- formail -->
<Package name="spamassassin"/> <Package name="spamassassin"/>

5
Bundler/debconf.xml
View file

@ -1,5 +1,4 @@
<Bundle name="debconf" version="2.0" revision="$Rev$" <Bundle name="debconf" version="2.0" revision="$Rev$" origin="$URL$">
origin="$URL$"> <Path name="/etc/apt/apt.conf.d/70debconf"/>
<ConfigFile name="/etc/apt/apt.conf.d/70debconf"/>
<Package name="debconf"/> <Package name="debconf"/>
</Bundle> </Bundle>

6
Bundler/ejabberd-extra.xml
View file

@ -1,7 +1,7 @@
<Bundle name="ejabberd-extra"> <Bundle name="ejabberd-extra">
<ConfigFile name="/etc/pymsnt.conf.xml"/> <Python name="/etc/pymsnt.conf.xml"/>
<ConfigFile name="/etc/pyaimt.conf.xml"/> <Python name="/etc/pyaimt.conf.xml"/>
<ConfigFile name="/etc/pyicqt.conf.xml"/> <Path name="/etc/pyicqt.conf.xml"/>
<Package name="pymsnt"/> <Package name="pymsnt"/>
<Package name="pyaimt"/> <Package name="pyaimt"/>
<Package name="pyicqt"/> <Package name="pyicqt"/>

6
Bundler/ejabberd-services.xml
View file

@ -1,7 +1,7 @@
<Bundle name="ejabberd-services"> <Bundle name="ejabberd-services">
<ConfigFile name="/etc/default/ejabberd"/> <Python name="/etc/default/ejabberd"/>
<ConfigFile name="/etc/ejabberd/ejabberd.cfg"/> <Python name="/etc/ejabberd/ejabberd.cfg"/>
<ConfigFile name="/etc/ejabberd/ssl/jabber.pem"/> <Path name="/etc/ejabberd/ssl/jabber.pem"/>
<Package name="ejabberd"/> <Package name="ejabberd"/>
<Service name="ejabberd"/> <Service name="ejabberd"/>
</Bundle> </Bundle>

6
Bundler/home.xml
View file

@ -1,9 +1,9 @@
<Bundle name="home"> <Bundle name="home">
<Group name="home-permanent" negate="true"> <Group name="home-permanent" negate="true">
<Group name="external" negate="true"> <Group name="external" negate="true">
<ConfigFile name="/etc/auto.master"/> <Python name="/etc/auto.master"/>
<ConfigFile name="/etc/auto.home"/> <Path name="/etc/auto.home"/>
<ConfigFile name="/etc/default/autofs"/> <Path name="/etc/default/autofs"/>
<Group name="squeeze" negate="true"> <Group name="squeeze" negate="true">
<Package name="autofs"/> <Package name="autofs"/>
</Group> </Group>

24
Bundler/jabberd.xml
View file

@ -1,16 +1,16 @@
<Bundle name="jabberd"> <Bundle name="jabberd">
<ConfigFile name="/etc/default/jabber-aim"/> <Path name="/etc/default/jabber-aim"/>
<ConfigFile name="/etc/default/jabber-jud"/> <Path name="/etc/default/jabber-jud"/>
<ConfigFile name="/etc/default/jabber-msn"/> <Path name="/etc/default/jabber-msn"/>
<ConfigFile name="/etc/default/jabber-muc"/> <Path name="/etc/default/jabber-muc"/>
<ConfigFile name="/etc/default/jabber-yahoo"/> <Path name="/etc/default/jabber-yahoo"/>
<ConfigFile name="/etc/jabber/jabber.xml"/> <Path name="/etc/jabber/jabber.xml"/>
<ConfigFile name="/etc/jabber/jabber-aim.xml"/> <Path name="/etc/jabber/jabber-aim.xml"/>
<ConfigFile name="/etc/jabber/jabber-jud.xml"/> <Path name="/etc/jabber/jabber-jud.xml"/>
<ConfigFile name="/etc/jabber/jabber-msn.xml"/> <Path name="/etc/jabber/jabber-msn.xml"/>
<ConfigFile name="/etc/jabber/jabber-muc.xml"/> <Path name="/etc/jabber/jabber-muc.xml"/>
<ConfigFile name="/etc/jabber/jabber-yahoo.xml"/> <Path name="/etc/jabber/jabber-yahoo.xml"/>
<ConfigFile name="/etc/jabber/key.pem"/> <Python name="/etc/jabber/key.pem"/>
<Package name="jabber"/> <Package name="jabber"/>
<Package name="jabber-aim"/> <Package name="jabber-aim"/>
<Package name="jabber-jud"/> <Package name="jabber-jud"/>

4
Bundler/ldap.xml
View file

@ -1,6 +1,6 @@
<Bundle name="ldap" version="2.0"> <Bundle name="ldap" version="2.0">
<ConfigFile name="/etc/ldap/ldap.conf"/> <Python name="/etc/ldap/ldap.conf"/>
<ConfigFile name="/etc/ldap.secret"/> <Python name="/etc/ldap.secret"/>
<Service name="ssh"/> <Service name="ssh"/>
<Group name="db-server"> <Group name="db-server">
<Package name="wfrench"/> <Package name="wfrench"/>

5
Bundler/locale-generation.xml
View file

@ -1,5 +1,4 @@
<Bundle name="locale-generation" version="2.0" revision="$Rev$" <Bundle name="locale-generation" version="2.0" revision="$Rev$" origin="$URL$">
origin="$URL$"> <Path name="/etc/locale.gen"/>
<ConfigFile name="/etc/locale.gen"/>
<Action name="generate-locales"/> <Action name="generate-locales"/>
</Bundle> </Bundle>

7
Bundler/locale.xml
View file

@ -1,6 +1,5 @@
<Bundle name="locale" version="2.0" revision="$Rev$" <Bundle name="locale" version="2.0" revision="$Rev$" origin="$URL$">
origin="$URL$"> <Path name="/etc/locale.gen"/>
<ConfigFile name="/etc/locale.gen"/> <Path name="/etc/environment"/>
<ConfigFile name="/etc/environment"/>
<Package name="locales"/> <Package name="locales"/>
</Bundle> </Bundle>

10
Bundler/logcheck.xml
View file

@ -1,9 +1,9 @@
<Bundle name="logcheck"> <Bundle name="logcheck">
<ConfigFile name="/etc/cron.d/logcheck"/> <Path name="/etc/cron.d/logcheck"/>
<ConfigFile name="/etc/logcheck/ignore.d.server/local-crans"/> <Path name="/etc/logcheck/ignore.d.server/local-crans"/>
<ConfigFile name="/etc/logcheck/ignore.d.server/local-ignore"/> <Path name="/etc/logcheck/ignore.d.server/local-ignore"/>
<ConfigFile name="/etc/logcheck/logcheck.conf"/> <Path name="/etc/logcheck/logcheck.conf"/>
<ConfigFile name="/etc/logcheck/logcheck.logfiles"/> <Python name="/etc/logcheck/logcheck.logfiles"/>
<Package name="logcheck"/> <Package name="logcheck"/>
<Package name="logcheck-database"/> <Package name="logcheck-database"/>
<Package name="syslog-summary"/> <Package name="syslog-summary"/>

2
Bundler/molly-guard.xml
View file

@ -1,4 +1,4 @@
<Bundle name="molly-guard"> <Bundle name="molly-guard">
<Package name="molly-guard"/> <Package name="molly-guard"/>
<ConfigFile name="/etc/molly-guard/rc"/> <Path name="/etc/molly-guard/rc"/>
</Bundle> </Bundle>

10
Bundler/monit.xml
View file

@ -1,9 +1,9 @@
<Bundle name="monit"> <Bundle name="monit">
<ConfigFile name="/etc/default/monit"/> <Path name="/etc/default/monit"/>
<ConfigFile name="/etc/monit/monitrc"/> <Path name="/etc/monit/monitrc"/>
<ConfigFile name="/etc/monit/services"/> <Python name="/etc/monit/services"/>
<ConfigFile name="/etc/monit/conf.d/placeholder"/> <Path name="/etc/monit/conf.d/placeholder"/>
<ConfigFile name="/etc/cron.d/monit"/> <Path name="/etc/cron.d/monit"/>
<Package name="monit"/> <Package name="monit"/>
<Service name="monit"/> <Service name="monit"/>
</Bundle> </Bundle>

4
Bundler/mumudvb.xml
View file

@ -1,6 +1,6 @@
<Bundle name="mumudvb"> <Bundle name="mumudvb">
<!-- <Package name="mumudvb"/> --> <!-- <Package name="mumudvb"/> -->
<Service name="mumudvb"/> <Service name="mumudvb"/>
<ConfigFile name="/etc/default/mumudvb"/> <Python name="/etc/default/mumudvb"/>
<ConfigFile name="/etc/modprobe.d/dvb.conf"/> <Path name="/etc/modprobe.d/dvb.conf"/>
</Bundle> </Bundle>

9
Bundler/munin-node.xml
View file

@ -4,9 +4,8 @@
<Package name="munin-plugins-extra"/> <Package name="munin-plugins-extra"/>
<Service name="munin-node"/> <Service name="munin-node"/>
<Action name="link-munin-plugins"/> <Action name="link-munin-plugins"/>
<ConfigFile name="/etc/munin/munin-node.conf"/> <Python name="/etc/munin/munin-node.conf"/>
<ConfigFile name="/etc/munin/plugin-conf.d/00-sanitize-env"/> <Path name="/etc/munin/plugin-conf.d/00-sanitize-env"/>
<ConfigFile name="/etc/munin/plugin-conf.d/crans"/> <Path name="/etc/munin/plugin-conf.d/crans"/>
<ConfigFile name="/etc/cron.d/munin-crans"/> <Python name="/etc/cron.d/munin-crans"/>
<ConfigFile name="/etc/cron.d/munin-node"/>
</Bundle> </Bundle>

2
Bundler/nagios.xml
View file

@ -2,5 +2,5 @@
<Service name="nagios-nrpe-server"/> <Service name="nagios-nrpe-server"/>
<Package name="nagios-nrpe-server"/> <Package name="nagios-nrpe-server"/>
<Package name="nagios-plugins"/> <Package name="nagios-plugins"/>
<ConfigFile name="/etc/nagios/nrpe.cfg"/> <Python name="/etc/nagios/nrpe.cfg"/>
</Bundle> </Bundle>

6
Bundler/news-search.xml
View file

@ -1,6 +0,0 @@
<Bundle name="news-search-php5">
<Package name="libapache2-mod-php5"/>
<Package name="php5-imap"/>
<Service name="news-search"/>
</Bundle>

4
Bundler/nfs-server.xml
View file

@ -1,8 +1,8 @@
<Bundle name="nfs-server"> <Bundle name="nfs-server">
<Group name="crans-nfs-squeeze"> <Group name="crans-nfs-squeeze">
<Service name="nfs-kernel-server"/> <Service name="nfs-kernel-server"/>
<ConfigFile name="/etc/default/nfs-kernel-server"/> <Path name="/etc/default/nfs-kernel-server"/>
<ConfigFile name="/etc/exports"/> <Path name="/etc/exports"/>
<Package name="nfs-kernel-server"/> <Package name="nfs-kernel-server"/>
</Group> </Group>
</Bundle> </Bundle>

4
Bundler/ntp.xml
View file

@ -1,6 +1,6 @@
<Bundle name="ntp"> <Bundle name="ntp">
<ConfigFile name="/etc/default/ntp"/> <Path name="/etc/default/ntp"/>
<ConfigFile name="/etc/ntp.conf"/> <Python name="/etc/ntp.conf"/>
<Package name="ntp"/> <Package name="ntp"/>
<Service name="ntp"/> <Service name="ntp"/>
</Bundle> </Bundle>

12
Bundler/nut.xml
View file

@ -1,12 +1,12 @@
<Bundle name="nut" version="1.0"> <Bundle name="nut" version="1.0">
<Package name="nut"/> <Package name="nut"/>
<Service name="nut"/> <Service name="nut"/>
<ConfigFile name="/etc/default/nut"/> <Path name="/etc/default/nut"/>
<ConfigFile name="/etc/nut/upsmon.conf"/> <Path name="/etc/nut/upsmon.conf"/>
<Group name="ups-server"> <Group name="ups-server">
<ConfigFile name="/etc/nut/upsd.users"/> <Path name="/etc/nut/upsd.users"/>
<ConfigFile name="/etc/nut/mail.sh"/> <Path name="/etc/nut/mail.sh"/>
<ConfigFile name="/etc/nut/upsd.conf"/> <Path name="/etc/nut/upsd.conf"/>
<ConfigFile name="/etc/nut/ups.conf"/> <Path name="/etc/nut/ups.conf"/>
</Group> </Group>
</Bundle> </Bundle>

4
Bundler/openntpd.xml
View file

@ -1,6 +1,6 @@
<Bundle name="openntpd"> <Bundle name="openntpd">
<ConfigFile name="/etc/init.d/openntpd"/> <Path name="/etc/init.d/openntpd"/>
<ConfigFile name="/etc/openntpd/ntpd.conf"/> <Python name="/etc/openntpd/ntpd.conf"/>
<Package name="openntpd"/> <Package name="openntpd"/>
<Service name="openntpd"/> <Service name="openntpd"/>
</Bundle> </Bundle>

12
Bundler/openvpn.xml
View file

@ -1,14 +1,14 @@
<Bundle name="openvpn"> <Bundle name="openvpn">
<Package name="openvpn"/> <Package name="openvpn"/>
<Service name="openvpn"/> <Service name="openvpn"/>
<ConfigFile name="/etc/default/openvpn"/> <Python name="/etc/default/openvpn"/>
<Group name="external"> <Group name="external">
<ConfigFile name="/etc/openvpn/komaz.conf"/> <Path name="/etc/openvpn/komaz.conf"/>
<ConfigFile name="/etc/openvpn/freebox.conf"/> <Path name="/etc/openvpn/freebox.conf"/>
</Group> </Group>
<Group name="external" negate="true"> <Group name="external" negate="true">
<ConfigFile name="/etc/openvpn/ovh.conf"/> <Path name="/etc/openvpn/ovh.conf"/>
<ConfigFile name="/etc/openvpn/ovh.connect"/> <Path name="/etc/openvpn/ovh.connect"/>
<ConfigFile name="/etc/openvpn/ovh.disconnect"/> <Path name="/etc/openvpn/ovh.disconnect"/>
</Group> </Group>
</Bundle> </Bundle>

8
Bundler/pam.xml
View file

@ -1,8 +1,8 @@
<Bundle name="pam" version="2.0"> <Bundle name="pam" version="2.0">
<ConfigFile name="/etc/pam.d/common-account"/> <Python name="/etc/pam.d/common-account"/>
<ConfigFile name="/etc/pam.d/common-auth"/> <Python name="/etc/pam.d/common-auth"/>
<ConfigFile name="/etc/pam.d/common-password"/> <Python name="/etc/pam.d/common-password"/>
<ConfigFile name="/etc/pam.d/common-session"/> <Python name="/etc/pam.d/common-session"/>
<Group name="ssh"> <Group name="ssh">
<Service name="ssh"/> <Service name="ssh"/>
</Group> </Group>

18
Bundler/postfix.xml
View file

@ -1,32 +1,32 @@
<Bundle name="postfix" version="2.0"> <Bundle name="postfix" version="2.0">
<Package name="postfix"/> <Package name="postfix"/>
<Service name="postfix"/> <Service name="postfix"/>
<ConfigFile name="/etc/postfix/main.cf"/> <Python name="/etc/postfix/main.cf"/>
<Group name="tracker"> <Group name="tracker">
<ConfigFile name="/etc/postfix/master.cf"/> <Python name="/etc/postfix/master.cf"/>
</Group> </Group>
<Group name="mail-mx"> <Group name="mail-mx">
<ConfigFile name="/etc/postfix/master.cf"/> <Python name="/etc/postfix/master.cf"/>
<Group name="ldap"> <Group name="ldap">
<Package name="postfix-ldap"/> <Package name="postfix-ldap"/>
<ConfigFile name="/etc/postfix/ldap-aliases.cf"/> <Python name="/etc/postfix/ldap-aliases.cf"/>
<ConfigFile name="/etc/postfix/ldap-canonical.cf"/> <Python name="/etc/postfix/ldap-canonical.cf"/>
</Group> </Group>
<!-- Greylisting pour les MX publics --> <!-- Greylisting pour les MX publics -->
<Group name="mail-mx-public"> <Group name="mail-mx-public">
<ConfigFile name="/etc/postfix/ldap-sqlgrey.cf"/> <Python name="/etc/postfix/ldap-sqlgrey.cf"/>
</Group> </Group>
</Group> </Group>
<Group name="mail-mx-main"> <Group name="mail-mx-main">
<Package name="sasl2-bin"/> <Package name="sasl2-bin"/>
<Package name="libsasl2-modules-ldap"/> <Package name="libsasl2-modules-ldap"/>
<ConfigFile name="/etc/postfix/sasl/smtpd.conf"/> <Path name="/etc/postfix/sasl/smtpd.conf"/>
<ConfigFile name="/etc/saslauthd.conf"/> <Path name="/etc/saslauthd.conf"/>
<ConfigFile name="/etc/default/saslauthd"/> <Path name="/etc/default/saslauthd"/>
</Group> </Group>
</Bundle> </Bundle>

2
Bundler/postfix_aliases.xml
View file

@ -1,4 +1,4 @@
<Bundle name="postfix_aliases" version="2.0"> <Bundle name="postfix_aliases" version="2.0">
<ConfigFile name="/etc/postfix/aliases"/> <Python name="/etc/postfix/aliases"/>
<Action name="update-postfix-aliases"/> <Action name="update-postfix-aliases"/>
</Bundle> </Bundle>

2
Bundler/postfix_canonical.xml
View file

@ -1,6 +1,6 @@
<Bundle name="postfix_canonical" version="2.0"> <Bundle name="postfix_canonical" version="2.0">
<Group name="mail-mx" negate="true"> <Group name="mail-mx" negate="true">
<ConfigFile name="/etc/postfix/canonical"/> <Python name="/etc/postfix/canonical"/>
<Action name="update-postfix-canonical"/> <Action name="update-postfix-canonical"/>
</Group> </Group>
</Bundle> </Bundle>

2
Bundler/postfix_mime_header_checks.xml
View file

@ -1,6 +1,6 @@
<Bundle name="postfix_mime_header_checks" version="2.0"> <Bundle name="postfix_mime_header_checks" version="2.0">
<Group name="mail-mx"> <Group name="mail-mx">
<ConfigFile name="/etc/postfix/mime_header_checks"/> <Path name="/etc/postfix/mime_header_checks"/>
<Action name="update-postfix-mime_header_checks"/> <Action name="update-postfix-mime_header_checks"/>
</Group> </Group>
</Bundle> </Bundle>

2
Bundler/postfix_transport.xml
View file

@ -1,6 +1,6 @@
<Bundle name="postfix_transport" version="2.0"> <Bundle name="postfix_transport" version="2.0">
<Group name="postfix.transport"> <Group name="postfix.transport">
<ConfigFile name="/etc/postfix/transport"/> <Python name="/etc/postfix/transport"/>
<Action name="update-postfix-transport"/> <Action name="update-postfix-transport"/>
</Group> </Group>
</Bundle> </Bundle>

2
Bundler/postfix_virtual.xml
View file

@ -1,6 +1,6 @@
<Bundle name="postfix_virtual" version="2.0"> <Bundle name="postfix_virtual" version="2.0">
<Group name="mail-mx"> <Group name="mail-mx">
<ConfigFile name="/etc/postfix/virtual"/> <Path name="/etc/postfix/virtual"/>
<Action name="update-postfix-virtual"/> <Action name="update-postfix-virtual"/>
</Group> </Group>
</Bundle> </Bundle>

2
Bundler/proftpd.xml
View file

@ -1,5 +1,5 @@
<Bundle name="proftpd"> <Bundle name="proftpd">
<ConfigFile name="/etc/proftpd/proftpd.conf"/> <Python name="/etc/proftpd/proftpd.conf"/>
<Package name="proftpd-basic"/> <Package name="proftpd-basic"/>
<Service name="proftpd"/> <Service name="proftpd"/>
</Bundle> </Bundle>

2
Bundler/quota.xml
View file

@ -1,6 +1,6 @@
<Bundle name="quota"> <Bundle name="quota">
<Service name="quota"/> <Service name="quota"/>
<Service name="quotarpc"/> <Service name="quotarpc"/>
<ConfigFile name="/etc/default/quota"/> <Path name="/etc/default/quota"/>
<Package name="quota"/> <Package name="quota"/>
</Bundle> </Bundle>

4
Bundler/rsync-client.xml
View file

@ -1,6 +1,6 @@
<Bundle name="rsync-client"> <Bundle name="rsync-client">
<ConfigFile name="/etc/rsyncd.conf"/> <Python name="/etc/rsyncd.conf"/>
<ConfigFile name="/etc/default/rsync"/> <Path name="/etc/default/rsync"/>
<Package name="rsync"/> <Package name="rsync"/>
<Service name="rsync"/> <Service name="rsync"/>
</Bundle> </Bundle>

12
Bundler/rsyslog.xml
View file

@ -1,17 +1,17 @@
<Bundle name="rsyslog" version="2.0"> <Bundle name="rsyslog" version="2.0">
<Service name="rsyslog"/> <Service name="rsyslog"/>
<Group name="rsyslog-server"> <Group name="rsyslog-server">
<ConfigFile name="/etc/rsyslog.d/52-listen_relp.conf"/> <Path name="/etc/rsyslog.d/52-listen_relp.conf"/>
<ConfigFile name="/etc/rsyslog.d/53-listen_switches.conf"/> <Path name="/etc/rsyslog.d/53-listen_switches.conf"/>
<ConfigFile name="/etc/rsyslog.d/51-pgsql.conf"/> <Path name="/etc/rsyslog.d/51-pgsql.conf"/>
<Package name="rsyslog-pgsql"/> <Package name="rsyslog-pgsql"/>
<Directory name="/var/spool/rsyslog"/> <Path name="/var/spool/rsyslog"/>
</Group> </Group>
<Group name="rsyslog-client"> <Group name="rsyslog-client">
<Group name="rsyslog-server" negate="true"> <Group name="rsyslog-server" negate="true">
<ConfigFile name="/etc/rsyslog.d/50-send_relp.conf"/> <Path name="/etc/rsyslog.d/50-send_relp.conf"/>
<Directory name="/var/log/spool"/> <Path name="/var/log/spool"/>
</Group> </Group>
</Group> </Group>

10
Bundler/slapd.xml
View file

@ -1,9 +1,9 @@
<Bundle name="slapd" version="2.0"> <Bundle name="slapd" version="2.0">
<ConfigFile name="/etc/ldap/slapd.conf"/> <Python name="/etc/ldap/slapd.conf"/>
<ConfigFile name="/etc/default/slapd"/> <Python name="/etc/default/slapd"/>
<ConfigFile name="/etc/ldap/schema/crans.schema"/> <Path name="/etc/ldap/schema/crans.schema"/>
<ConfigFile name="/etc/ldap/schema/amavis.schema"/> <Path name="/etc/ldap/schema/amavis.schema"/>
<ConfigFile name="/var/lib/ldap/DB_CONFIG"/> <Path name="/var/lib/ldap/DB_CONFIG"/>
<Service name="slapd"/> <Service name="slapd"/>
<Group name="db-server"> <Group name="db-server">
<Package name="slapd"/> <Package name="slapd"/>

6
Bundler/sqlgrey.xml
View file

@ -1,7 +1,7 @@
<Bundle name="sqlgrey"> <Bundle name="sqlgrey">
<ConfigFile name="/etc/sqlgrey/sqlgrey.conf"/> <Python name="/etc/sqlgrey/sqlgrey.conf"/>
<ConfigFile name="/etc/sqlgrey/clients_fqdn_whitelist.local"/> <Path name="/etc/sqlgrey/clients_fqdn_whitelist.local"/>
<ConfigFile name="/etc/sqlgrey/clients_ip_whitelist.local"/> <Path name="/etc/sqlgrey/clients_ip_whitelist.local"/>
<!-- Il n'y a pas de paquet Debian (enfin, pas encore ...) <!-- Il n'y a pas de paquet Debian (enfin, pas encore ...)
<Package name="sqlgrey"/>--> <Package name="sqlgrey"/>-->
<Service name="sqlgrey"/> <Service name="sqlgrey"/>

6
Bundler/ssh.xml
View file

@ -1,7 +1,7 @@
<Bundle name="ssh"> <Bundle name="ssh">
<!-- Fichiers gere par le plugin SSHbase --> <!-- Fichiers gere par le plugin SSHbase -->
<!-- Il faut voir comment on le fait cohabiter avec <!-- Il faut voir comment on le fait cohabiter avec
les clés des switchs sur rouge les cl&#233;s des switchs sur rouge
<ConfigFile name="/etc/ssh/ssh_host_dsa_key"/> <ConfigFile name="/etc/ssh/ssh_host_dsa_key"/>
<ConfigFile name="/etc/ssh/ssh_host_rsa_key"/> <ConfigFile name="/etc/ssh/ssh_host_rsa_key"/>
<ConfigFile name="/etc/ssh/ssh_host_dsa_key.pub"/> <ConfigFile name="/etc/ssh/ssh_host_dsa_key.pub"/>
@ -11,8 +11,8 @@
<ConfigFile name="/etc/ssh/ssh_known_hosts"/> <ConfigFile name="/etc/ssh/ssh_known_hosts"/>
--> -->
<!-- --> <!-- -->
<ConfigFile name="/etc/ssh/sshd_config"/> <Python name="/etc/ssh/sshd_config"/>
<ConfigFile name="/etc/ssh/ssh_config"/> <Path name="/etc/ssh/ssh_config"/>
<Package name="openssh-client"/> <Package name="openssh-client"/>
<Package name="openssh-server"/> <Package name="openssh-server"/>
<Service name="ssh"/> <Service name="ssh"/>

2
Bundler/sudo.xml
View file

@ -1,4 +1,4 @@
<Bundle name="sudo" version="2.0"> <Bundle name="sudo" version="2.0">
<ConfigFile name="/etc/sudoers"/> <Python name="/etc/sudoers"/>
<Package name="sudo"/> <Package name="sudo"/>
</Bundle> </Bundle>

10
Bundler/xen-utils.xml
View file

@ -1,10 +0,0 @@
<Bundle name="xen" version="2.0">
<Group name="squeeze" negate="true">
<Package name="xen-utils-3.2-1"/>
</Group>
<Group name="squeeze">
<Package name="xen-utils-4.0"/>
</Group>
<Package name="xen-utils-common"/>
<ConfigFile name="/etc/xen/xend-config.sxp"/>
</Bundle>

1
Metadata/clients.xml
View file

@ -17,7 +17,6 @@
<Client name="morgan.adm.crans.org" profile="morgan" pingable="N" pingtime="1252769390.14"/> <Client name="morgan.adm.crans.org" profile="morgan" pingable="N" pingtime="1252769390.14"/>
<Client name="malloc.adm.crans.org" profile="malloc" pingable="Y" pingtime="1342471851.07"/> <Client name="malloc.adm.crans.org" profile="malloc" pingable="Y" pingtime="1342471851.07"/>
<Client name="dyson.adm.crans.org" profile="dyson" pingable="Y" pingtime="1342471851.07"/> <Client name="dyson.adm.crans.org" profile="dyson" pingable="Y" pingtime="1342471851.07"/>
<Client name="ragnarok.adm.crans.org" profile="ragnarok" pingable="Y" pingtime="1342471851.06"/>
<!-- dom0 --> <!-- dom0 -->
<Client name="fx.adm.crans.org" profile="fx" pingable="Y" pingtime="1342471851.06"/> <Client name="fx.adm.crans.org" profile="fx" pingable="Y" pingtime="1342471851.06"/>

4
Metadata/groups.xml
View file

@ -428,6 +428,7 @@
<!-- | Version de Debian | --> <!-- | Version de Debian | -->
<!-- +===================+ --> <!-- +===================+ -->
<Group name="debian" category="linux-distribution"/>
<Group name="lenny" category="debian-version"/> <Group name="lenny" category="debian-version"/>
<Group name="sid" category="debian-version"/> <Group name="sid" category="debian-version"/>
<Group name="etch" category="debian-version"/> <Group name="etch" category="debian-version"/>
@ -444,8 +445,7 @@
a un serveur du Cr@ns. --> a un serveur du Cr@ns. -->
<Group name="crans-common" <Group name="crans-common"
comment="groupe minimal pour un serveur du Crans" comment="groupe minimal pour un serveur du Crans">
toolset="debian">
<Group name="crans"/> <Group name="crans"/>
<!-- TODO: passer les serveurs en utf-8 sans tout casser... <!-- TODO: passer les serveurs en utf-8 sans tout casser...

2
Python/etc/bcfg2.conf
View file

@ -7,7 +7,7 @@ header("Fichier de configuration de bcfg2")
if has("bcfg2-server"): if has("bcfg2-server"):
@[server] @[server]
%repository = "/var/lib/bcfg2" %repository = "/var/lib/bcfg2"
%plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,DebAutoPkg,Probes,DBStats" %plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,Packages,Probes,DBStats"
%svn = "no" %svn = "no"
@ @

8
Python/etc/fstab
View file

@ -1,6 +1,6 @@
# -*- coding: utf-8; mode: python -*- # -*- coding: utf-8; mode: python -*-
header("Les modifications locales sont à placer dans le fichier /etc/fstab.local") header("Les modifications locales sont a placer dans le fichier /etc/fstab.local")
def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0): def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
print ("%s %s %s %s %d %d" % print ("%s %s %s %s %d %d" %
@ -8,16 +8,16 @@ def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
(options and ",".join(options)) or "defaults", (options and ",".join(options)) or "defaults",
dump, pass_)) dump, pass_))
@# Les définitions classiques @# Les definitions classiques
mnt("proc", "/proc", "proc") mnt("proc", "/proc", "proc")
mnt("shm", "/dev/shm", "tmpfs") mnt("shm", "/dev/shm", "tmpfs")
@# Les définitions locales @# Les definitions locales
print metadata.Probes["fstab_local"] print metadata.Probes["fstab_local"]
if has("nfs"): if has("nfs"):
@# Le nfs @# Le nfs
mnt("daath.adm.crans.org:/usr/scripts", "/usr/scripts", "nfs", ["rw"]) mnt("daath.adm.crans.org:/usr/scripts", "/usr/scripts", "nfs", ["rw"])
if has("home-permanent"): if has("home-permanent"):
# Pour ceux qui accèdent beaucoup aux homes on monte tout le /home # Pour ceux qui accedent beaucoup aux homes on monte tout le /home
mnt("fx.adm.crans.org:/home-adh", "/home", "nfs", ["rw"]); mnt("fx.adm.crans.org:/home-adh", "/home", "nfs", ["rw"]);

2
Python/etc/ldap/ldap.conf
View file

@ -9,5 +9,5 @@ header("Acces a la base ldap")
@# This file should be world readable but not world writable. @# This file should be world readable but not world writable.
@BASE dc=crans, dc=org @BASE dc=crans, dc=org
%URI "%s" % ldap_socket print "URI %s" % ldap_socket
@#TLS_CACERT /etc/ssl/certs/CAcrans.pem @#TLS_CACERT /etc/ssl/certs/CAcrans.pem

2
Python/etc/network/interfaces
View file

@ -181,4 +181,4 @@ def adm6(interface):
Probe_Mac = metadata.Probes["mac"].split('\n') Probe_Mac = metadata.Probes["mac"].split('\n')
If_Mac = dict(zip(Probe_Mac[:-1:2], Probe_Mac[1::2])) If_Mac = dict(zip(Probe_Mac[:-1:2], Probe_Mac[1::2]))
exec metadata.Probes["interfaces_local"] exec(str(metadata.Probes["interfaces_local"]))

37
Python/etc/sudoers
View file

@ -7,6 +7,11 @@ header("Configuration du sudo")
if has("users"): if has("users"):
@Defaults:ALL tty_tickets @Defaults:ALL tty_tickets
if has("wheezy"):
addit = ":ALL"
else:
addit = ""
@Defaults env_keep += "DARCS_EMAIL" @Defaults env_keep += "DARCS_EMAIL"
@# Host alias specification @# Host alias specification
@ -26,43 +31,43 @@ elif has("2B"):
@# Cmnd alias specification @# Cmnd alias specification
@# User privilege specification @# User privilege specification
@root ALL=(ALL) ALL print "root ALL=(ALL%s) ALL" % (addit)
@NOUNOUS ALL=(ALL) ALL print "NOUNOUS ALL=(ALL%s) ALL" % (addit)
if has("2B"): if has("2B"):
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/tools/who2b.py print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/tools/who2b.py" % (addit)
if has("users"): if has("users"):
@# Les modérateurs ont le whos @# Les modérateurs ont le whos
@MODEROS ALL=(respbats) /usr/scripts/gestion/whos.py print "MODEROS ALL=(respbats%s) /usr/scripts/gestion/whos.py" % (addit)
@# Câbleurs @# Câbleurs
@RESPBATS ALL=(respbats) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py" % (addit)
@RESPBATS ALL=(respbats) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py print "RESPBATS ALL=(respbats%s) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py" % (addit)
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py" % (addit)
@RESPBATS ALL=(respbats) /usr/scripts/gestion/ressuscite.py print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/ressuscite.py" % (addit)
@# Bureau @# Bureau
@BUREAU ALL=(respbats) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py print "BUREAU ALL=(respbats%s) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py" % (addit)
@# intranet @# intranet
@respbats ALL=(USERS) NOPASSWD: /usr/scripts/gestion/config_mail.py print "respbats ALL=(USERS%s) NOPASSWD: /usr/scripts/gestion/config_mail.py" % (addit)
@respbats ALL=(root) NOPASSWD: /usr/local/bin/quota print "respbats ALL=(root%s) NOPASSWD: /usr/local/bin/quota" % (addit)
@# Génération de codes impression pour les imprimeurs @# Génération de codes impression pour les imprimeurs
@IMPRIMEURS ALL=(root) /usr/scripts/impression/gen_code.py print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/gen_code.py" % (addit)
@# Redémarrage de l'intranet pour les imprimeurs @# Redémarrage de l'intranet pour les imprimeurs
@IMPRIMEURS ALL=(root) /usr/scripts/impression/redemarre_intranet.sh print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/redemarre_intranet.sh" % (addit)
@# Un chsh pour tout le monde @# Un chsh pour tout le monde
@ALL ALL=(respbats) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami print "ALL ALL=(respbats%s) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami" % (addit)
@# Quotas @# Quotas
@ALL ALL=NOPASSWD:/usr/local/bin/quota.sh print "ALL ALL=(respbats%s) NOPASSWD:/usr/local/bin/quota.sh" % (addit)
if has('arpwatch'): if has('arpwatch'):
@# arpwatch @# arpwatch
@arpwatch ALL=(arpwatch) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py print "arpwatch ALL=(arpwatch%s) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py" % (addit)
# Inclusion de fichier locaux # Inclusion de fichier locaux
@#includedir /etc/sudoers.d @#includedir /etc/sudoers.d

33
Rules/rules.xml
View file

@ -1,4 +1,4 @@
<Rules priority="0"> <Rules priority="1">
<Action name="generate-locales" timing="post" when="modified" status="check" <Action name="generate-locales" timing="post" when="modified" status="check"
command="/usr/sbin/update-locale"/> command="/usr/sbin/update-locale"/>
@ -27,16 +27,16 @@
command="cat /etc/crans/apt-keys/*.asc | apt-key add -"/> command="cat /etc/crans/apt-keys/*.asc | apt-key add -"/>
<Group name="users"> <Group name="users">
<Directory name="/etc/crans/secrets" owner="respbats" group="adm" perms="0550"/> <Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" perms="0550"/>
</Group> </Group>
<Group name="vo"> <Group name="vo">
<Directory name="/etc/crans/secrets" owner="respbats" group="adm" perms="0550"/> <Path name="/etc/crans/secrets" type="directory" owner="respbats" group="adm" perms="0550"/>
</Group> </Group>
<!-- XXX: kludge pour facture.py --> <!-- XXX: kludge pour facture.py -->
<Group name="rouge"> <Group name="rouge">
<Directory name="/etc/crans/secrets" owner="intranet" group="adm" perms="0550"/> <Path name="/etc/crans/secrets" type="directory" owner="intranet" group="adm" perms="0550"/>
</Group> </Group>
<Group name="mail-mx-main"> <Group name="mail-mx-main">
@ -47,18 +47,18 @@
<Group name="users" negate="true"> <Group name="users" negate="true">
<Group name="rouge" negate="true"> <Group name="rouge" negate="true">
<Group name="vo" negate="true"> <Group name="vo" negate="true">
<Directory name="/etc/crans/secrets" owner="root" group="adm" perms="0550"/> <Path name="/etc/crans/secrets" type="directory" owner="root" group="adm" perms="0550"/>
</Group> </Group>
</Group> </Group>
</Group> </Group>
<Group name="rsyslog-server"> <Group name="rsyslog-server">
<Directory name="/var/spool/rsyslog" owner="root" group="adm" perms="0750"/> <Path name="/var/spool/rsyslog" type="directory" owner="root" group="adm" perms="0750"/>
</Group> </Group>
<Group name="rsyslog-client"> <Group name="rsyslog-client">
<Group name="rsyslog-server" negate="true"> <Group name="rsyslog-server" negate="true">
<Directory name="/var/log/spool" owner="root" group="adm" perms="750"/> <Path name="/var/log/spool" type="directory" owner="root" group="adm" perms="750"/>
</Group> </Group>
</Group> </Group>
@ -66,12 +66,13 @@
<Service type="deb" name="bind9" status="on"/> <Service type="deb" name="bind9" status="on"/>
<Directory name="/mirror/apt-mirror" owner="apt-mirror" group="apt-mirror" perms="0755"/> <Path name="/mirror/apt-mirror" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Directory name="/mirror/apt-mirror/var" owner="apt-mirror" group="apt-mirror" perms="0755"/> <Path name="/mirror/apt-mirror/var" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Directory name="/mirror/apt-mirror/skel" owner="apt-mirror" group="apt-mirror" perms="0755"/> <Path name="/mirror/apt-mirror/skel" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Directory name="/mirror/apt-mirror/mirror" owner="apt-mirror" group="apt-mirror" perms="0755"/> <Path name="/mirror/apt-mirror/mirror" type="directory" owner="apt-mirror" group="apt-mirror" perms="0755"/>
<Directory name="/usr/scripts" owner="root" group="adm" perms="775"/>
<Path name="/usr/scripts" type="directory" owner="root" group="adm" perms="775"/>
<Service type="deb" name="proftpd" status="on"/> <Service type="deb" name="proftpd" status="on"/>
@ -136,10 +137,10 @@
<Action name="link-munin-plugins" timing="post" when="modified" status="check" <Action name="link-munin-plugins" timing="post" when="modified" status="check"
command="python /usr/scripts/munin/scripts/link_plugins.py -f" /> command="python /usr/scripts/munin/scripts/link_plugins.py -f" />
<SymLink name="/etc/logcheck/cracking.ignore.d/local-crans" to="/etc/logcheck/ignore.d.server/local-crans"/> <Path name="/etc/logcheck/cracking.ignore.d/local-crans" type="symlink" to="/etc/logcheck/ignore.d.server/local-crans"/>
<SymLink name="/etc/logcheck/cracking.ignore.d/local-ignore" to="/etc/logcheck/ignore.d.server/local-ignore"/> <Path name="/etc/logcheck/cracking.ignore.d/local-ignore" type="symlink" to="/etc/logcheck/ignore.d.server/local-ignore"/>
<SymLink name="/etc/logcheck/violations.ignore.d/local-crans" to="/etc/logcheck/ignore.d.server/local-crans"/> <Path name="/etc/logcheck/violations.ignore.d/local-crans" type="symlink" to="/etc/logcheck/ignore.d.server/local-crans"/>
<SymLink name="/etc/logcheck/violations.ignore.d/local-ignore" to="/etc/logcheck/ignore.d.server/local-ignore"/> <Path name="/etc/logcheck/violations.ignore.d/local-ignore" type="symlink" to="/etc/logcheck/ignore.d.server/local-ignore"/>
<Action name="link-firewall" timing="post" when="modified" status="check" <Action name="link-firewall" timing="post" when="modified" status="check"
command="update-rc.d firewall defaults 45"/> command="update-rc.d firewall defaults 45"/>

6
etc/python/common.py
View file

@ -25,13 +25,13 @@ import sys
sys.path.append('/usr/scripts/gestion') sys.path.append('/usr/scripts/gestion')
def comment(line): def comment(line):
'''Écrit un commentaire''' '''Ecrit un commentaire'''
out(comment_start + " " + line + "\n") out(comment_start + " " + line + "\n")
emacs_mode = "conf-unix" emacs_mode = "conf-unix"
def header(desc=None, mode=None): def header(desc=None, mode=None):
'''Écrit une en-tête de fichier avec un commentaire''' '''Ecrit une en-tete de fichier avec un commentaire'''
comment("-*- mode: %s; coding: utf-8 -*-" % (mode or emacs_mode)) comment("-*- mode: %s; coding: utf-8 -*-" % (mode or emacs_mode))
comment("") comment("")
comment("Fichier gere par BCfg2 (avec le plugin Python)") comment("Fichier gere par BCfg2 (avec le plugin Python)")
@ -45,7 +45,7 @@ def header(desc=None, mode=None):
out("\n") out("\n")
def var(name, value, doc=None): def var(name, value, doc=None):
'''Écrit la définition d'une variable''' '''Ecrit la definition d'une variable'''
if doc: comment(doc) if doc: comment(doc)
out("%s = %s\n" % (name, value)) out("%s = %s\n" % (name, value))

8
etc/python/ip.py
View file

@ -52,22 +52,22 @@ def radinip():
if has("vlan-radin"): if has("vlan-radin"):
return ip_vlan[hostname]["vlan-radin"] return ip_vlan[hostname]["vlan-radin"]
else: else:
raise NotImplementedError, "Ce serveur n'a rien à faire sur le VLAN radin" raise NotImplementedError, "Ce serveur n'a rien a faire sur le VLAN radin"
def accueilip(): def accueilip():
if has("vlan-accueil"): if has("vlan-accueil"):
return ip_vlan[hostname]["vlan-accueil"] return ip_vlan[hostname]["vlan-accueil"]
else: else:
raise NotImplementedError, "Ce serveur n'a rien à faire sur le VLAN d'accueil" raise NotImplementedError, "Ce serveur n'a rien a faire sur le VLAN d'accueil"
def appt_ens_ip(): def appt_ens_ip():
if has("vlan-ens"): if has("vlan-ens"):
return ip_vlan[hostname]["vlan-ens"] return ip_vlan[hostname]["vlan-ens"]
else: else:
raise NotImplementedError, "Ce serveur n'a rien à faire sur le VLAN des appartements de l'ENS" raise NotImplementedError, "Ce serveur n'a rien a faire sur le VLAN des appartements de l'ENS"
def isolementip(): def isolementip():
if has("vlan-isolement"): if has("vlan-isolement"):
return ip_vlan[hostname]["vlan-isolement"] return ip_vlan[hostname]["vlan-isolement"]
else: else:
raise NotImplementedError, "Ce serveur n'a rien à faire sur le VLAN isolement" raise NotImplementedError, "Ce serveur n'a rien a faire sur le VLAN isolement"