Puppet Class: profile::package_builder

Defined in:
modules/profile/manifests/package_builder.pp

Overview

Class: profile::package::builder

Profile for package_builder

Parameters:

  • prometheus_nodes (Array[Stdlib::Fqdn]) (defaults to: lookup('prometheus_nodes'))


5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# File 'modules/profile/manifests/package_builder.pp', line 5

class profile::package_builder (
    Array[Stdlib::Fqdn] $prometheus_nodes = lookup('prometheus_nodes')
){
    class { '::package_builder': }

    # this uses modules/rsync to
    # set up an rsync daemon service
    class { '::rsync::server': }

    # Set up an rsync module to allow easy copying of pbuilder
    # results to carbon or elsewhere.  You can rsync from this like:
    #   rsync <host>::pbuilder-result/buster-amd64/mypackage* ./mypackage/
    rsync::server::module { 'pbuilder-result':
        path        => '/var/cache/pbuilder/result',
    }

    ferm::service { 'package_builder_rsync':
        proto  => 'tcp',
        port   => 873,
        srange => '$DOMAIN_NETWORKS',
    }
    $prometheus_hosts = join($prometheus_nodes, ' ')
    # So prometheus blackbox exporter can monitor ssh
    ferm::service { 'ssh-prometheus':
        proto  => 'tcp',
        port   => '22',
        srange => "@resolve((${prometheus_hosts}))",
    }

    monitoring::service { 'package_builder_rsync':
        description   => 'package builder rsync',
        check_command => 'check_tcp!873',
        notes_url     => 'https://wikitech.wikimedia.org/wiki/Debian_Packaging#Upload_to_Wikimedia_Repo',
    }
}