Foreman VMware Cloud-Init

Posted 9. Oktober 2019 by Sturbi

/etc/cloud/cloud.cfg

cloud_init_modules:
 - bootcmd

cloud_config_modules:
 - runcmd

cloud_final_modules:
 - scripts-per-once
 - scripts-per-boot
 - scripts-per-instance
 - scripts-user
 - resolv-conf
 - ca-certs
 - yum-add-repo
 - write-files
 - users-groups
 - package-update-upgrade-install
 - runcmd
 - puppet
 - phone-home

system_info:
  distro: rhel
  paths:
    cloud_dir: /var/lib/cloud
    templates_dir: /etc/cloud/templates
  ssh_svcname: sshd

# vim:syntax=yaml

cloud_init_modules:

- bootcmd

cloud_config_modules:

- runcmd

cloud_final_modules:

- scripts-per-once

- scripts-per-boot

- scripts-per-instance

- scripts-user

- resolv-conf

- ca-certs

- yum-add-repo

- write-files

- users-groups

- package-update-upgrade-install

- runcmd

- puppet

- phone-home

system_info:

distro: rhel

paths:

cloud_dir: /var/lib/cloud

templates_dir: /etc/cloud/templates

ssh_svcname: sshd

# vim:syntax=yaml

#cloud-config
hostname: <%= @host.name %>
fqdn: <%= @host %>
manage_etc_hosts: true
users:
  - name: root
    ssh-authorized-keys:
      - ssh-ed25519 AAAA.....Vw4L0 sturbi@sturbi.de
      - ssh-rsa AAAAB3N....ji1pU4v foreman-proxy@foreman.sturbi.de

yum_repos:
    puppet6:
        baseurl: http://yum.puppetlabs.com/puppet/el/7/x86_64/
        enabled: true
        gpgcheck: false
        name: Puppet 6

package_update: true
package_upgrade: true

packages:
    - vim
    - tmux
    - mailx

package_reboot_if_required: true

<% if @host.puppetmaster -%>

packages:
    - puppet-agent

puppet:
    conf_file: '/etc/puppetlabs/puppet/puppet.conf'
    ssl_dir: '/opt/puppetlabs/puppet/ssl/'
    conf:
        agent:
            server: "<%= @host.puppetmaster %>"
            certname: "<%= @host.name %>"
        ca_cert: |
            -------BEGIN CERTIFICATE-------
            MIICIjAN.......ZwjH8CAwEAAQ==
            -------END CERTIFICATE-------

<% end %>

phone_home:
  url: <%= foreman_url('built') %>
  post: []
  tries: 10

#cloud-config

hostname: <%= @host.name %>

fqdn: <%= @host %>

manage_etc_hosts: true

users:

- name: root

ssh-authorized-keys:

- ssh-ed25519 AAAA.....Vw4L0 sturbi@sturbi.de

- ssh-rsa AAAAB3N....ji1pU4v foreman-proxy@foreman.sturbi.de

yum_repos:

puppet6:

baseurl: http://yum.puppetlabs.com/puppet/el/7/x86_64/

enabled: true

gpgcheck: false

name: Puppet 6

package_update: true

package_upgrade: true

packages:

- vim

- tmux

- mailx

package_reboot_if_required: true

<% if @host.puppetmaster -%>

packages:

- puppet-agent

puppet:

conf_file: '/etc/puppetlabs/puppet/puppet.conf'

ssl_dir: '/opt/puppetlabs/puppet/ssl/'

conf:

agent:

server: "<%= @host.puppetmaster %>"

certname: "<%= @host.name %>"

ca_cert: |

-------BEGIN CERTIFICATE-------

MIICIjAN.......ZwjH8CAwEAAQ==

-------END CERTIFICATE-------

<% end %>

phone_home:

url: <%= foreman_url('built') %>

post: []

tries: 10

# Template for VMWare customization via open-vm-tools
identity:
  LinuxPrep:
    domain: <%= @host.domain %>
    hostName: <%= @host.shortname %>
    hwClockUTC: true
    timeZone: 'Europe/Berlin'

globalIPSettings:
  dnsSuffixList: [<%= @host.domain %>]
  <%- @host.interfaces.each do |interface| -%>
  <%- next unless interface.subnet -%>
  dnsServerList: [<%= interface.subnet.dns_primary %>, <%= interface.subnet.dns_secondary %>]
  <%- end -%>

nicSettingMap:
<%- @host.interfaces.each do |interface| -%>
<%- next unless interface.subnet -%>
  - adapter:
      dnsDomain: <%= interface.domain %>
      dnsServerList: [<%= interface.subnet.dns_primary %>, <%= interface.subnet.dns_secondary %>]
      gateway: [<%= interface.subnet.gateway %>]
      ip: <%= interface.ip %>
      subnetMask: <%= interface.subnet.mask %>
<%- end -%>

# Template for VMWare customization via open-vm-tools

identity:

LinuxPrep:

domain: <%= @host.domain %>

hostName: <%= @host.shortname %>

hwClockUTC: true

timeZone: 'Europe/Berlin'

globalIPSettings:

dnsSuffixList: [<%= @host.domain %>]

<%- @host.interfaces.each do |interface| -%>

<%- next unless interface.subnet -%>

dnsServerList: [<%= interface.subnet.dns_primary %>, <%= interface.subnet.dns_secondary %>]

<%- end -%>

nicSettingMap:

<%- @host.interfaces.each do |interface| -%>

<%- next unless interface.subnet -%>

- adapter:

dnsDomain: <%= interface.domain %>

dnsServerList: [<%= interface.subnet.dns_primary %>, <%= interface.subnet.dns_secondary %>]

gateway: [<%= interface.subnet.gateway %>]

ip: <%= interface.ip %>

subnetMask: <%= interface.subnet.mask %>

<%- end -%>

puppet factes

Posted 6. September 2019 by Sturbi

if Facter.value(:kernel) == 'Linux'
  Facter.add('ansible_python_interpreter') do
    setcode do
      ansible_python_interpreter = Facter::Core::Execution.exec('which python3')
      if ansible_python_interpreter.empty?
        ansible_python_interpreter = Facter::Core::Execution.exec('which python')
      end
      ansible_python_interpreter
    end
  end
end

if Facter.value(:kernel) == 'Linux'

Facter.add('ansible_python_interpreter') do

setcode do

ansible_python_interpreter = Facter::Core::Execution.exec('which python3')

if ansible_python_interpreter.empty?

ansible_python_interpreter = Facter::Core::Execution.exec('which python')

end

ansible_python_interpreter

end

if Facter.value(:kernel) == 'Linux'Facter.add(:tomcat) do
  confine operatingsystem: ['RedHat CentOS']
  setcode do
    process = Facter::Core::Execution.exec('ps -ef | grep [^]]java | grep catalina')
    tomcatinfo = Array.new({})
    regex = %r{/.*catalina.base\=(.*?) .*/}
    home = process[regex, 1]
    if home
      tomcatinfo.push('tomcat.base' => home)
      info = Facter::Core::Execution.exec(home + '/bin/version.sh')
      info = info.split(%r{/\n/})
      info.each do |x|
        tmp = x.split(%r{/:/})
        if tmp[0] =~ %r{/.*erver.*umber/}
          tomcatinfo.push('tomcat.version' => tmp[1].chomp.strip)
        end
        if tmp[0] =~ %r{/JVM Version/}
          tomcatinfo.push('tomcat.jvm' => tmp[1].chomp.strip)
        end
      end
      tomcatinfo
    end
  end
end

if Facter.value(:kernel) == 'Linux'Facter.add(:tomcat) do

confine operatingsystem: ['RedHat CentOS']

setcode do

process = Facter::Core::Execution.exec('ps -ef | grep [^]]java | grep catalina')

tomcatinfo = Array.new({})

regex = %r{/.*catalina.base\=(.*?) .*/}

home = process[regex, 1]

if home

tomcatinfo.push('tomcat.base' => home)

info = Facter::Core::Execution.exec(home + '/bin/version.sh')

info = info.split(%r{/\n/})

info.each do |x|

tmp = x.split(%r{/:/})

if tmp[0] =~ %r{/.*erver.*umber/}

tomcatinfo.push('tomcat.version' => tmp[1].chomp.strip)

end

if tmp[0] =~ %r{/JVM Version/}

tomcatinfo.push('tomcat.jvm' => tmp[1].chomp.strip)

end

tomcatinfo

end

require 'json'
Facter.add(:yum_repos) do
  confine operatingsystem: ['RedHat CentOS']
  setcode do
    repos = Array.new({})

    # list enabled yum repos
    enabled_repos = Facter::Core::Execution.execute("/usr/bin/yum repolist enabled | awk '!/repo id/ && !/repolist/ && !/Load/' | awk '{print $1}'")
    splitstring = enabled_repos.split("\n")
    splitstring.each { |reponame| repos.push(reponame => true) }

    # list disabled yum repos
    enabled_repos = Facter::Core::Execution.execute("/usr/bin/yum repolist disabled | awk '!/repo id/ && !/repolist/ && !/Load/' | awk '{print $1}'")
    splitstring = enabled_repos.split("\n")
    splitstring.each { |reponame| repos.push(reponame => false) }

    repos
  end
end

require 'json'

Facter.add(:yum_repos) do

confine operatingsystem: ['RedHat CentOS']

setcode do

repos = Array.new({})

# list enabled yum repos

enabled_repos = Facter::Core::Execution.execute("/usr/bin/yum repolist enabled | awk '!/repo id/ && !/repolist/ && !/Load/' | awk '{print $1}'")

splitstring = enabled_repos.split("\n")

splitstring.each { |reponame| repos.push(reponame => true) }

# list disabled yum repos

enabled_repos = Facter::Core::Execution.execute("/usr/bin/yum repolist disabled | awk '!/repo id/ && !/repolist/ && !/Load/' | awk '{print $1}'")

splitstring = enabled_repos.split("\n")

splitstring.each { |reponame| repos.push(reponame => false) }

repos

end

Erstes SumSum 2019

Posted 17. Februar 2019 by Sturbi

Das Hirn-Raum-Kontinuum

Posted 1. Januar 2019 by Sturbi

These: In einem Büro befindet sich eine feste Menge Hirn zum dort bearbeiteten Thema. Diese Menge verteilt sich immer auf die in dem Büro befindlichen Menschen. Also je mehr Menschen, um so weniger sinnvolle Äußerungen zum Thema kommen aus diesen Menschen raus. Kommt zusätzlich noch ein fremder Mensch hinzu, wird das vorhandene Hirn bevorzugt diesem Menschen zur Verfügung gestellt und die bisherigen Menschen werden noch dümmlicher.

Beweis: ist nur eine einzelne Person anwesend, arbeitet diese konzentriert und zielorientiert Probleme ab. Kommt man zu dieser Person in den Raum kann man erfolgreich Probleme besprechen und lösen. Sind dagegen mehrere Personen da, sinkt die Aussicht auf Lösung oder erfolgreiche Kommunikation.

Zusatzkenntnisse: Ist in dem Büro keine Person anwesend und eine Person im Nachbarbüro soll deren Probleme bearbeiten, ist Hirn nicht in der Lage durch die Rigips Wand zu dringen und die andere Person ist vollkommen hilflos!