- set yum::versionlock to be only for redhat family - set puppet-agent require statement to use apt or yum - remove requirement of downloading puppet7-release-$dist.deb - create all paths in $base_path for vault certificate - set correct $PATH for update-ca-certificates - dynamically set debian release name - split packages to install from common.yaml to os-specific - create groups profile to manage local groups - change sysadmin to be a member of admins group - setup admins sudo rules
17 lines
443 B
Puppet
17 lines
443 B
Puppet
# create the sysadmin user
|
|
class profiles::accounts::sysadmin(
|
|
String $password,
|
|
Array[String] $sshkeys = [],
|
|
){
|
|
profiles::base::account {'sysadmin':
|
|
username => 'sysadmin',
|
|
uid => 1000,
|
|
gid => 1000,
|
|
groups => ['adm', 'admins', 'systemd-journal'],
|
|
sshkeys => $sshkeys,
|
|
sudo_rules => ['sysadmin ALL=(ALL) NOPASSWD:ALL'],
|
|
password => $password,
|
|
require => Group['admins'],
|
|
}
|
|
}
|