--- /dev/null
+# <target name> <source device> <key file> <options>
+root /dev/mapper/vg-root none luks,cipher=aes-cbc-essiv:sha256
+home /dev/mapper/vg-home none luks,cipher=aes-cbc-essiv:sha256
+var /dev/mapper/vg-var none luks,cipher=aes-cbc-essiv:sha256
+vservers /dev/mapper/vg-vservers none luks,cipher=aes-cbc-essiv:sha256
+cswap /dev/sda1 /dev/random swap,cipher=aes-cbc-essiv:sha256
--- /dev/null
+/dev/mapper/cswap none swap sw 0 0
+/dev/mapper/root / ext3 defaults,errors=remount-ro 0 1
+/dev/mapper/home /home ext3 defaults,errors=remount-ro 0 0
+/dev/mapper/var /var ext3 defaults,errors=remount-ro 0 0
+/dev/mapper/vservers /var/vservers ext3 defaults,errors=remount-ro 0 0
}
}
-class nodo::server inherits nodo {
+class nodo::physical inherits nodo {
include syslog-ng
include firewall
include vserver::host
ensure => present,
}
+ # Munin configuration
+ munin_node { "$hostname":
+ port => '4900',
+ }
+}
+
+class nodo::server inherits nodo::physical {
# fstab
file { "/etc/fstab":
- source => "puppet://$server/modules/nodo/etc/fstab",
+ source => "puppet://$server/modules/nodo/etc/fstab/server",
owner => "root",
group => "root",
mode => 0644,
# crypttab
file { "/etc/crypttab":
- source => "puppet://$server/modules/nodo/etc/crypttab",
+ source => "puppet://$server/modules/nodo/etc/crypttab/server",
owner => "root",
group => "root",
mode => 0644,
ensure => present,
}
+}
- # Munin configuration
- munin_node { "$hostname":
- port => '4900',
+class nodo::desktop inherits nodo::physical {
+ # fstab
+ file { "/etc/fstab":
+ source => "puppet://$desktop/modules/nodo/etc/fstab/desktop",
+ owner => "root",
+ group => "root",
+ mode => 0644,
+ ensure => present,
+ }
+
+ # crypttab
+ file { "/etc/crypttab":
+ source => "puppet://$desktop/modules/nodo/etc/crypttab/desktop",
+ owner => "root",
+ group => "root",
+ mode => 0644,
+ ensure => present,
}
}
# Some nodes need a lot of space at /tmp otherwise some admin
# tasks like backups might not run.
file { "/etc/vservers/${name}/fstab":
- source => "puppet://$server/modules/nodo/etc/fstab-vserver",
+ source => "puppet://$server/modules/nodo/etc/fstab/vserver",
owner => "root",
group => "root",
mode => 0644,