tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Changed backuppc to use server's host key for authenticating to clients.

Browse source
This commit is contained in:
Timo Mkinen 2011-03-15 13:07:30 +02:00
parent ffe51ea0b1
commit 6d44f55755
2 changed files with 29 additions and 38 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
backuppc/lib/facter/backuppc_sshkey.rb
View file

@ -1,13 +0,0 @@
Facter.add('backuppc_sshkey') do
setcode do
begin
match = File.read('/var/lib/BackupPC/.ssh/id_rsa.pub')[/^ssh-rsa ([^ ]+)/, 1]
if match
data = match
end
rescue
data = ''
end
data
end
end

44
backuppc/manifests/init.pp
View file

@ -63,8 +63,8 @@ class backuppc::server {
file { "${backuppc_datadir}": file { "${backuppc_datadir}":
ensure => directory, ensure => directory,
mode => 0750, mode => 0750,
owner => backuppc, owner => "backuppc",
group => root, group => "root",
require => Package["BackupPC"], require => Package["BackupPC"],
} }
@ -73,8 +73,7 @@ class backuppc::server {
force => true, force => true,
backup => ".orig", backup => ".orig",
require => File["${backuppc_datadir}"], require => File["${backuppc_datadir}"],
before => [ Exec["generate-backuppc-sshkey"], before => Service["backuppc"],
Service["backuppc"], ],
} }
} }
@ -83,14 +82,14 @@ class backuppc::server {
content => template("backuppc/BackupPC.conf.erb"), content => template("backuppc/BackupPC.conf.erb"),
require => Package["BackupPC"], require => Package["BackupPC"],
} }
file { "/usr/share/BackupPC/sbin/BackupPC_Admin": file { "/usr/share/BackupPC/sbin/BackupPC_Admin":
ensure => present, ensure => present,
mode => 4750, mode => 4750,
owner => "backuppc", owner => "backuppc",
group => "httpsd", group => $apache::sslserver::group,
require => Package["BackupPC"], require => Package["BackupPC"],
} }
file { "/etc/BackupPC/config.pl": file { "/etc/BackupPC/config.pl":
ensure => present, ensure => present,
source => "puppet:///files/backuppc/config.pl", source => "puppet:///files/backuppc/config.pl",
@ -107,8 +106,8 @@ class backuppc::server {
source => [ "puppet:///files/backuppc/hosts.in", source => [ "puppet:///files/backuppc/hosts.in",
"puppet:///modules/backuppc/hosts.in", ], "puppet:///modules/backuppc/hosts.in", ],
mode => 0644, mode => 0644,
owner => root, owner => "root",
group => backuppc, group => "backuppc",
seltype => "httpd_sys_script_rw_t", seltype => "httpd_sys_script_rw_t",
require => Package["BackupPC"], require => Package["BackupPC"],
notify => Exec["generate-backuppc-hosts"], notify => Exec["generate-backuppc-hosts"],
@ -120,8 +119,8 @@ class backuppc::server {
force => true, force => true,
recurse => true, recurse => true,
mode => 0640, mode => 0640,
owner => root, owner => "root",
group => backuppc, group => "backuppc",
seltype => "httpd_sys_script_rw_t", seltype => "httpd_sys_script_rw_t",
source => "puppet:///modules/custom/empty", source => "puppet:///modules/custom/empty",
require => Package["BackupPC"], require => Package["BackupPC"],
@ -144,19 +143,24 @@ class backuppc::server {
require => Package["BackupPC"], require => Package["BackupPC"],
} }
exec { "generate-backuppc-sshkey": file { "/var/lib/BackupPC/.ssh":
command => "ssh-keygen -q -t rsa -f /var/lib/BackupPC/.ssh/id_rsa", ensure => directory,
path => "/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin", mode => 0750,
user => "backuppc", owner => "root",
require => [ User["backuppc"], group => "backuppc",
Package["BackupPC"], ], }
creates => [ "/var/lib/BackupPC/.ssh/id_rsa", file { "/var/lib/BackupPC/.ssh/id_rsa":
"/var/lib/BackupPC/.ssh/id_rsa.pub", ], ensure => present,
source => "/etc/ssh/ssh_host_rsa_key",
mode => 0640,
owner => "root",
group => "backuppc",
require => File["/var/lib/BackupPC/.ssh"],
before => Service["backuppc"],
} }
@@ssh_authorized_key { "backuppc": @@ssh_authorized_key { "backuppc":
ensure => present, ensure => present,
key => $backuppc_sshkey, key => $sshrsakey,
type => "ssh-rsa", type => "ssh-rsa",
user => "root", user => "root",
target => "/root/.ssh/authorized_keys", target => "/root/.ssh/authorized_keys",