X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/fd5ee39de6eac3658fee08d5864ac6446dc9bd53..37c0446fb32977edfa5647799a62bde3256a6d32:/cookbooks/openssh/recipes/default.rb diff --git a/cookbooks/openssh/recipes/default.rb b/cookbooks/openssh/recipes/default.rb index 0bae591ce..2ab68392d 100644 --- a/cookbooks/openssh/recipes/default.rb +++ b/cookbooks/openssh/recipes/default.rb @@ -24,36 +24,36 @@ package "openssh-client" package "openssh-server" service "ssh" do - if node[:lsb][:release].to_f >= 14.04 + if node[:lsb][:release].to_f >= 15.10 + provider Chef::Provider::Service::Systemd + elsif node[:lsb][:release].to_f >= 14.04 provider Chef::Provider::Service::Upstart end - action [ :enable, :start ] + action [:enable, :start] supports :status => true, :restart => true, :reload => true end -hosts = search(:node, "networking:interfaces").sort_by do |node| - node[:hostname] -end.collect do |node| - names = [ node[:hostname] ] +hosts = search(:node, "networking:interfaces").sort_by { |n| n[:hostname] }.collect do |node| + names = [node[:hostname]] node.interfaces(:role => :external).each do |interface| - names |= [ "#{node[:hostname]}.openstreetmap.org" ] - names |= [ "#{node[:hostname]}.#{interface[:zone]}.openstreetmap.org" ] + names |= ["#{node[:hostname]}.openstreetmap.org"] + names |= ["#{node[:hostname]}.#{interface[:zone]}.openstreetmap.org"] end unless node.interfaces(:role => :internal).empty? - names |= [ "#{node[:hostname]}.#{node[:networking][:roles][:external][:zone]}.openstreetmap.org" ] + names |= ["#{node[:hostname]}.#{node[:networking][:roles][:external][:zone]}.openstreetmap.org"] end keys = { - "rsa" => node[:keys][:ssh][:host_rsa_public], - "dsa" => node[:keys][:ssh][:host_dsa_public] + "rsa" => node[:keys][:ssh][:host_rsa_public], # ~FC039 + "dsa" => node[:keys][:ssh][:host_dsa_public] # ~FC039 } - if node[:keys][:ssh][:host_ecdsa_public] - ecdsa_type = node[:keys][:ssh][:host_ecdsa_type] + if node[:keys][:ssh][:host_ecdsa_public] # ~FC039 + ecdsa_type = node[:keys][:ssh][:host_ecdsa_type] # ~FC039 - keys[ecdsa_type] = node[:keys][:ssh][:host_ecdsa_public] + keys[ecdsa_type] = node[:keys][:ssh][:host_ecdsa_public] # ~FC039 end Hash[ @@ -65,14 +65,14 @@ end template "/etc/ssh/ssh_config" do source "ssh_config.erb" - mode 0644 + mode 0o644 owner "root" group "root" end template "/etc/ssh/ssh_known_hosts" do source "ssh_known_hosts.erb" - mode 0444 + mode 0o444 owner "root" group "root" backup false