Page MenuHomeDevCentral
Files F3913963

D923.id2343.diff
No OneTemporary
Actions

D923.id2343.diff
View Options

diff --git a/GIDs b/GIDs
--- a/GIDs
+++ b/GIDs
@@ -1 +1,2 @@
+828 deployment
829 nasqueron-irc
diff --git a/UIDs b/UIDs
--- a/UIDs
+++ b/UIDs
@@ -1 +1,2 @@
830 odderon
+831 builder
diff --git a/pillar/users/shellgroups.sls b/pillar/users/shellgroups.sls
--- a/pillar/users/shellgroups.sls
+++ b/pillar/users/shellgroups.sls
@@ -11,6 +11,11 @@
# -------------------------------------------------------------
shellgroups:
+ deployment:
+ gid: 828
+ description: Build softwares to be installed on the servers
+ members:
+ - dereckson
nasqueron-irc:
gid: 829
description: Manages IRC bots used for Nasqueron projects
diff --git a/roles/shellserver/userland-software/account.sls b/roles/shellserver/userland-software/account.sls
new file mode 100644
--- /dev/null
+++ b/roles/shellserver/userland-software/account.sls
@@ -0,0 +1,36 @@
+# -------------------------------------------------------------
+# Salt — Provision software
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Eglide
+# Created: 2017-02-23
+# Description: Account to build applications from source code
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+# -------------------------------------------------------------
+# Service account
+# -------------------------------------------------------------
+
+builder_account:
+ user.present:
+ - name: builder
+ - fullname: Software builder account for configure and make
+ - createhome: False
+ - uid: 831
+ - gid: deployment
+
+# -------------------------------------------------------------
+# Sudo capabilities
+#
+# Members of deployment should be able to sudo -u builder …
+# -------------------------------------------------------------
+
+builder_sudo_capabilities_file:
+ file.managed:
+ {% if grains['os'] == 'FreeBSD' %}
+ - name: /usr/local/etc/sudoers.d/builder
+ {% else %}
+ - name: /etc/sudoers.d/builder
+ {% endif %}
+ - source: salt://roles/shellserver/userland-software/files/builder.sudoers
+ - template: jinja
diff --git a/roles/shellserver/userland-software/files/builder.sudoers b/roles/shellserver/userland-software/files/builder.sudoers
new file mode 100644
--- /dev/null
+++ b/roles/shellserver/userland-software/files/builder.sudoers
@@ -0,0 +1,17 @@
+# -------------------------------------------------------------
+# Odderon
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Eglide
+# Created: 2017-02-23
+# License: Trivial work, not eligible to copyright
+# Source file: roles/shellserver/userland-software/files/builder.sudoers
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+%deployment ALL=(builder) NOPASSWD: ALL
diff --git a/roles/shellserver/userland-software/init.sls b/roles/shellserver/userland-software/init.sls
--- a/roles/shellserver/userland-software/init.sls
+++ b/roles/shellserver/userland-software/init.sls
@@ -7,6 +7,7 @@
# -------------------------------------------------------------
include:
+ - .account
- .base
- .irc
- .web

File Metadata

Mime Type
text/plain
Expires
Fri, Dec 20, 12:39 (20 h, 33 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2308060
Default Alt Text
D923.id2343.diff (3 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator