--- /dev/null
+# <target name> <source device> <key file> <options>
+root /dev/mapper/vg-root none luks,cipher=aes-cbc-essiv:sha256
+home /dev/mapper/vg-home none luks,cipher=aes-cbc-essiv:sha256
+var /dev/mapper/vg-var none luks,cipher=aes-cbc-essiv:sha256
+cswap /dev/sda1 none swap,cipher=aes-cbc-essiv:sha256
# crypttab
if $crypttab != false {
file { "/etc/crypttab":
- source => "puppet://$server/modules/nodo/etc/crypttab/laptop",
+ source => $hibernate ? {
+ false => "puppet://$server/modules/nodo/etc/crypttab/laptop",
+ default => "puppet://$server/modules/nodo/etc/crypttab/laptop.hibernate",
+ },
owner => "root",
group => "root",
mode => 0644,
}
}
- # Currently no hibernation
- package { 'uswsusp':
- ensure => absent,
+ # Hibernation on lenny
+ if $lsbdistcodename == 'lenny' {
+ package { 'uswsusp':
+ ensure => $hibernate ? {
+ false => absent,
+ default => present,
+ },
+ }
}
}