Use default sandboxing for the supybot service

[chef.git] / cookbooks / tools / recipes / default.rb

diff --git a/cookbooks/tools/recipes/default.rb b/cookbooks/tools/recipes/default.rb
index be49b745c562d3b97e41c6121b635fefc33fc5ba..05420a1d2b2a058a4791ab32901c6778a634bf8f 100644 (file)
--- a/cookbooks/tools/recipes/default.rb
+++ b/cookbooks/tools/recipes/default.rb
@@ -1,8 +1,8 @@
 #
-# Cookbook Name:: tools
+# Cookbook:: tools
 # Recipe:: default
 #
-# Copyright 2011, OpenStreetMap Foundation
+# Copyright:: 2011, OpenStreetMap Foundation
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -35,6 +35,9 @@ package %w[
   iotop
   lvm2
   rsyslog
+  cron
+  locales-all
+  systemd-coredump
 ]
 
 service "rsyslog" do
@@ -42,17 +45,41 @@ service "rsyslog" do
   supports :status => true, :restart => true, :reload => true
 end
 
-# Remove unused base package
-package "mlocate" do
+# Remove some unused and unwanted packages
+package %w[mlocate whoopsie] do
   action :purge
 end
 
-# Remove ubuntu "desktop" vestigal package
-package "whoopsie" do
-  action :purge
+# Configure cron to run in the local timezone of the machine
+systemd_service "cron-timezone" do
+  service "cron"
+  dropin "timezone"
+  environment "TZ" => node[:timezone]
+  notifies :restart, "service[cron]"
+  only_if { node[:timezone] }
+end
+
+# Configure cron with lower cpu and IO priority
+if node[:tools][:cron][:load]
+  systemd_service "cron-load" do
+    service "cron"
+    dropin "load"
+    nice node[:tools][:cron][:load][:nice]
+    io_scheduling_class node[:tools][:cron][:load][:io_scheduling_class]
+    io_scheduling_priority node[:tools][:cron][:load][:io_scheduling_priority]
+    notifies :restart, "service[cron]"
+  end
+end
+
+# Make sure cron is running
+service "cron" do
+  action [:enable, :start]
 end
 
-# Remove screen-cleanup left behind by old release.
-file "/etc/init.d/screen-cleanup" do
-  action :delete
+# Ubuntu MOTD adverts be-gone
+template "/etc/default/motd-news" do
+  source "motd-news.erb"
+  owner "root"
+  group "root"
+  mode "644"
 end