unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: fix selinux permissions each sync

Browse Source 
- restorecon on each sync, to update selinux for new files/directories
This commit is contained in:
Ben Vincent 2023-11-27 23:19:01 +11:00
parent e18103bda9
commit 705c02c3a1
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
site/profiles/manifests/reposync/autosyncer.pp
View File

@ -1,5 +1,7 @@
# setup the autosyncer # setup the autosyncer
class profiles::reposync::autosyncer { class profiles::reposync::autosyncer (
Stdlib::Absolutepath $basepath = '/data/repos',
) {
# Ensure the autosyncer script is present and executable # Ensure the autosyncer script is present and executable
file { '/usr/local/bin/autosyncer': file { '/usr/local/bin/autosyncer':

3
site/profiles/templates/reposync/autosyncer.erb
View File

@ -88,4 +88,7 @@ for conf in /etc/reposync/conf.d/*.conf; do
# After syncing each repo, fix the repository metadata # After syncing each repo, fix the repository metadata
create_repo_metadata "${snap_path}" create_repo_metadata "${snap_path}"
# Update selinux
restorecon <%= @basepath %>
done done