unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use fact to determine if selinux in use

Browse Source
This commit is contained in:
Ben Vincent 2024-02-11 21:05:48 +11:00
parent f8b30f335b
commit 09291da89f
3 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
site/profiles/manifests/puppet/puppetboard.pp
View File

@ -20,7 +20,6 @@ class profiles::puppet::puppetboard (
Integer $gunicorn_threads = 4,
String $nginx_vhost = 'puppetboard.main.unkin.net',
Integer $nginx_port = 80,
Boolean $selinux = true,
#String[1] $secret_key = "${fqdn_rand_string(32)}",
) {
@ -124,7 +123,7 @@ class profiles::puppet::puppetboard (
# if selinux is defined, manage it
if $selinux {
if $::facts['os']['selinux']['config_mode'] == 'enforcing' {
# call the nginx selinux class
class { 'profiles::selinux::nginx':

3
site/profiles/manifests/reposync/webserver.pp
View File

@ -4,7 +4,6 @@ class profiles::reposync::webserver (
String $nginx_vhost = 'repos.main.unkin.net',
Integer $nginx_port = 80,
Boolean $favicon = true,
Boolean $selinux = true,
) {
class { 'nginx': }
@ -39,7 +38,7 @@ class profiles::reposync::webserver (
order => 10,
}
if $selinux {
if $::facts['os']['selinux']['config_mode'] == 'enforcing' {
# include packages that are required
include profiles::packages::selinux

3
site/profiles/manifests/sql/galera_member.pp
View File

@ -30,7 +30,6 @@ class profiles::sql::galera_member (
Boolean $package_manage = true,
String $package_name = 'mariadb-server',
Boolean $epel_needed = false,
Boolean $selinux = true,
Boolean $manage_repo = true,
) {
@ -59,7 +58,7 @@ class profiles::sql::galera_member (
if length($servers_array) >= 3 {
# if selinux is defined, manage it
if $selinux {
if $::facts['os']['selinux']['config_mode'] == 'enforcing' {
# set permissive on first run, as we need mariadb installed/started at a custom path before adding fcontext
if $::facts['mariadb_acti'] { $selinux_mode = 'enforcing' }else{ $selinux_mode = 'permissive' }