unkinben
dc8842a4e4
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
Fedora hosts can now run the base role by reusing the existing RedHat osfamily code paths (dnf/yum, crypto-policies, firewalld, openvox) with Fedora-specific data and repositories, all keyed off facts.os.release.major so a later Fedora release only needs its artifactapi local repos created. - add hieradata/os/Fedora/all_releases.yaml: dnf repos (fedora + updates proxied via artifactapi, plus artifactapi rpm-internal-f<major> and rpm-vendor-f<major> locals), crypto-policies DEFAULT, openvox agent, and Fedora package fixups (7zip for p7zip, iotop-c for iotop, drop dstat) - add profiles::fedora::base wired via hiera_include, ensuring NetworkManager is enabled; a minimal extension point for later workstation/laptop use - make profiles::puppet::agent select the OpenVox distribution path (fedora/<major> on Fedora, el/<major> elsewhere) Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
70 lines
2.7 KiB
YAML
70 lines
2.7 KiB
YAML
# hieradata/os/Fedora/all_releases.yaml
|
|
---
|
|
# Fedora reuses the RedHat osfamily code paths (dnf/yum, crypto-policies,
|
|
# firewalld, openvox). Everything here keys off facts.os.release.major so a
|
|
# future Fedora release only needs its artifactapi local repos created, not new
|
|
# hieradata.
|
|
|
|
# crypto-policies: use the distro default. Kept here (not per-release) so newer
|
|
# Fedora releases inherit it for free.
|
|
crypto_policies::policy: 'DEFAULT'
|
|
|
|
# Puppet agent via OpenVox. RedHat-family builds for Fedora live under
|
|
# openvox7/fedora/<major> (see profiles::puppet::agent).
|
|
profiles::puppet::agent::openvox_enable: true
|
|
|
|
lm-sensors::package: lm_sensors
|
|
|
|
# Fedora-specific base setup (NetworkManager, future workstation/laptop hooks).
|
|
hiera_include:
|
|
- profiles::fedora::base
|
|
|
|
# Base package set adjustments for Fedora:
|
|
# - p7zip was dropped from Fedora; the real 7-Zip ships as "7zip"
|
|
# - dstat was removed from Fedora with no drop-in successor in the base set
|
|
# - iotop is provided by the C rewrite package "iotop-c"
|
|
profiles::packages::exclude:
|
|
- p7zip
|
|
- dstat
|
|
- iotop
|
|
profiles::packages::include:
|
|
7zip: {}
|
|
iotop-c: {}
|
|
crypto-policies-scripts: {}
|
|
lzo: {}
|
|
policycoreutils: {}
|
|
unar: {}
|
|
xz: {}
|
|
|
|
profiles::yum::global::repos:
|
|
fedora:
|
|
name: fedora
|
|
descr: Fedora %{facts.os.release.major} - %{facts.os.architecture}
|
|
target: /etc/yum.repos.d/fedora.repo
|
|
baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/fedora/releases/%{facts.os.release.major}/Everything/%{facts.os.architecture}/os/
|
|
gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-%{facts.os.release.major}-%{facts.os.architecture}
|
|
metalink: absent
|
|
mirrorlist: absent
|
|
updates:
|
|
name: updates
|
|
descr: Fedora %{facts.os.release.major} - %{facts.os.architecture} - Updates
|
|
target: /etc/yum.repos.d/fedora-updates.repo
|
|
baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/fedora/updates/%{facts.os.release.major}/Everything/%{facts.os.architecture}/
|
|
gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-%{facts.os.release.major}-%{facts.os.architecture}
|
|
metalink: absent
|
|
mirrorlist: absent
|
|
rpm-internal:
|
|
name: rpm-internal-f%{facts.os.release.major}
|
|
descr: rpm-internal-f%{facts.os.release.major} repository
|
|
target: /etc/yum.repos.d/rpm-internal.repo
|
|
baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/local/rpm-internal-f%{facts.os.release.major}/
|
|
gpgcheck: false
|
|
mirrorlist: absent
|
|
rpm-vendor:
|
|
name: rpm-vendor-f%{facts.os.release.major}
|
|
descr: rpm-vendor-f%{facts.os.release.major} repository
|
|
target: /etc/yum.repos.d/rpm-vendor.repo
|
|
baseurl: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/local/rpm-vendor-f%{facts.os.release.major}/
|
|
gpgcheck: false
|
|
mirrorlist: absent
|