1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889 |
- #
- # firmware
- #
- firmware-pkgs:
- pkg.installed:
- - pkgs:
- - git
- - pandoc
- user.present:
- - name: firmware
- - shell: /bin/bash
- - home: /home/firmware
- - createhome: True
- - gid_from_name: True
- firmware-git:
- file.directory:
- - name: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}
- - user: firmware
- - group: firmware
- - mode: 755
- - require:
- - user: firmware
- git.latest:
- - name: gogs@git.ffho.net:FreifunkHochstift/ffho-firmware-website.git
- - target: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}
- - user: firmware
- - update_head: False
- - require:
- - pkg: firmware-pkgs
- - user: firmware
- - file: firmware-git
- - file: /home/firmware/.ssh/id_rsa
- firmware-changelog:
- cmd.run:
- - name: FORCE=1 /usr/local/sbin/update-firmware
- - creates: {{salt['pillar.get']('nodes:' ~ grains['id'] ~ ':path:firmware', [])}}/stable/Changelog.html
- - user: firmware
- - group: firmware
- - watch:
- - git: firmware-git
- - require:
- - user: firmware
- - file: /usr/local/sbin/update-firmware
- /home/firmware/.ssh:
- file.directory:
- - user: firmware
- - group: firmware
- - mode: 700
- - require:
- - user: firmware
- /home/firmware/.ssh/authorized_keys:
- file.managed:
- - contents_pillar: nodes:masterbuilder.in.ffho.net:ssh:build:pubkey
- - user: firmware
- - group: firmware
- - mode: 644
- - require:
- - file: /home/firmware/.ssh
- /home/firmware/.ssh/id_rsa:
- file.managed:
- - contents_pillar: nodes:{{ grains['id'] }}:ssh:firmware:privkey
- - user: firmware
- - group: firmware
- - mode: 400
- - require:
- - file: /home/firmware/.ssh
- firmware-cron:
- cron.present:
- - name: /usr/local/sbin/update-firmware
- - identifier: firmware-cron
- - user: firmware
- - minute: 42
- - require:
- - user: firmware
- - file: /usr/local/sbin/update-firmware
- /usr/local/sbin/update-firmware:
- file.managed:
- - source: salt://firmware/update-firmware
- - template: jinja
- - mode: 755
|