| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697 |
- #
- # firmware
- #
- firmware-pkgs:
- pkg.installed:
- - pkgs:
- - git
- - pandoc
- user.present:
- - name: firmware
- - shell: /bin/bash
- - home: /home/firmware
- - createhome: True
- - gid_from_name: True
- firmware-git:
- file.directory:
- - name: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}
- - user: firmware
- - group: firmware
- - mode: 755
- - require:
- - user: firmware
- git.latest:
- - name: git@git.c3pb.de:freifunk-pb/firmware-website.git
- - target: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}
- - user: firmware
- - update_head: False
- - require:
- - pkg: firmware-pkgs
- - user: firmware
- - file: firmware-git
- - file: /home/firmware/.ssh/id_rsa
- - ssh_known_hosts: git.c3pb.de
- firmware-changelog:
- cmd.run:
- - name: FORCE=1 /usr/local/sbin/update-firmware
- - creates: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}/stable/Changelog.html
- - user: firmware
- - group: firmware
- - watch:
- - git: firmware-git
- - require:
- - user: firmware
- - file: /usr/local/sbin/update-firmware
- # SSH fingerprint of gitlab
- git.c3pb.de:
- ssh_known_hosts.present:
- - user: firmware
- - enc: ecdsa
- - fingerprint: 51:2a:f4:f4:71:c8:69:8c:96:db:54:b7:f0:36:e5:60
- /home/firmware/.ssh:
- file.directory:
- - user: firmware
- - group: firmware
- - mode: 700
- - require:
- - user: firmware
- /home/firmware/.ssh/authorized_keys:
- file.managed:
- - contents_pillar: nodes:masterbuilder.in.ffho.net:ssh:build:pubkey
- - user: firmware
- - group: firmware
- - mode: 644
- - require:
- - file: /home/firmware/.ssh
- /home/firmware/.ssh/id_rsa:
- file.managed:
- - contents_pillar: nodes:{{ grains['id'] }}:ssh:firmware:privkey
- - user: firmware
- - group: firmware
- - mode: 400
- - require:
- - file: /home/firmware/.ssh
- firmware-cron:
- cron.present:
- - name: /usr/local/sbin/update-firmware
- - identifier: firmware-cron
- - user: firmware
- - minute: 42
- - require:
- - user: firmware
- - file: /usr/local/sbin/update-firmware
- /usr/local/sbin/update-firmware:
- file.managed:
- - source: salt://firmware/update-firmware
- - template: jinja
- - mode: 755
|
