Add support for distributing gdnsd configuration via rsync

diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb
index a78d1d5fc952e583d924c30377fbec368f7a1e86..ddc0eb0284a21d37dab0136797a0e9bb8414d6c2 100644 (file)
--- a/cookbooks/dns/recipes/default.rb
+++ b/cookbooks/dns/recipes/default.rb
@@ -20,10 +20,14 @@
 include_recipe "git"
 include_recipe "apache"
 
+geoservers = search(:node, "roles:geodns").collect(&:name).sort
+
 passwords = data_bag_item("dns", "passwords")
 
 package %w[
   make
+  parallel
+  rsync
   perl
   libxml-treebuilder-perl
   libxml-writer-perl
@@ -88,7 +92,7 @@ template "/usr/local/bin/dns-update" do
   owner "root"
   group "git"
   mode 0o750
-  variables :passwords => passwords
+  variables :passwords => passwords, :geoservers => geoservers
 end
 
 execute "dns-update" do
@@ -117,7 +121,7 @@ template "/usr/local/bin/dns-check" do
   owner "root"
   group "git"
   mode 0o750
-  variables :passwords => passwords
+  variables :passwords => passwords, :geoservers => geoservers
 end
 
 template "/etc/cron.d/dns" do

diff --git a/cookbooks/dns/templates/default/dns-check.erb b/cookbooks/dns/templates/default/dns-check.erb
index eabf1229bd9e40e3c086c586f87d468e39fbeffa..ca38dddc83f98bf565333ba182b6cc38a34cbab6 100755 (executable)
--- a/cookbooks/dns/templates/default/dns-check.erb
+++ b/cookbooks/dns/templates/default/dns-check.erb
@@ -1,9 +1,10 @@
 #!/bin/sh
 
-export RSYNC_PASSWORD=<%= @passwords["rsync"] %>
-export PINGDOM_USERNAME=pingdom@openstreetmap.org
-export PINGDOM_PASSWORD=<%= @passwords["pingdom"] %>
-export STATUSCAKE_USERNAME=OpenStreetMap
-export STATUSCAKE_APIKEY=<%= @passwords["statuscake"] %>
+export RSYNC_PASSWORD="<%= @passwords["rsync"] %>"
+export GEODNS_SERVERS="<%= @geoservers.join(" ") %>"
+export PINGDOM_USERNAME="pingdom@openstreetmap.org"
+export PINGDOM_PASSWORD="<%= @passwords["pingdom"] %>"
+export STATUSCAKE_USERNAME="OpenStreetMap"
+export STATUSCAKE_APIKEY="<%= @passwords["statuscake"] %>"
 
-make --quiet --directory=/var/lib/dns --assume-new=lib/countries.xml update > /dev/null
+make --quiet --jobs --directory=/var/lib/dns --assume-new=lib/countries.xml update > /dev/null

diff --git a/cookbooks/dns/templates/default/dns-update.erb b/cookbooks/dns/templates/default/dns-update.erb
index 93d2e1ee3ed3db3fea101a650451b575c4b4f664..401c5c74f05bbac9e1020f334d8db6f91e4e8fa3 100755 (executable)
--- a/cookbooks/dns/templates/default/dns-update.erb
+++ b/cookbooks/dns/templates/default/dns-update.erb
@@ -4,11 +4,12 @@
 
 umask 0002
 
-export RSYNC_PASSWORD=<%= @passwords["rsync"] %>
-export PINGDOM_USERNAME=pingdom@openstreetmap.org
-export PINGDOM_PASSWORD=<%= @passwords["pingdom"] %>
-export STATUSCAKE_USERNAME=OpenStreetMap
-export STATUSCAKE_APIKEY=<%= @passwords["statuscake"] %>
+export RSYNC_PASSWORD="<%= @passwords["rsync"] %>"
+export GEODNS_SERVERS="<%= @geoservers.join(" ") %>"
+export PINGDOM_USERNAME="pingdom@openstreetmap.org"
+export PINGDOM_PASSWORD="<%= @passwords["pingdom"] %>"
+export STATUSCAKE_USERNAME="OpenStreetMap"
+export STATUSCAKE_APIKEY="<%= @passwords["statuscake"] %>"
 
 cd /var/lib/dns
 
@@ -19,4 +20,4 @@ fi
 
 git pull -q
 
-make update
+make --jobs update

diff --git a/cookbooks/geodns/recipes/default.rb b/cookbooks/geodns/recipes/default.rb
index 0e20e2a26c140c4e1804a2567de46ea2975dbf83..9f7c100c5b6b0f8eff17db8f455b6564b7442383 100644 (file)
--- a/cookbooks/geodns/recipes/default.rb
+++ b/cookbooks/geodns/recipes/default.rb
@@ -29,6 +29,12 @@ execute "geoipdate" do
   not_if { ::File.exist?("/var/lib/GeoIP/GeoLite2-Country.mmdb") }
 end
 
+directory "/etc/gdnsd/config.d" do
+  owner "nobody"
+  group "nogroup"
+  mode 0o755
+end
+
 template "/etc/gdnsd/config" do
   source "config.erb"
   owner "root"

diff --git a/roles/geodns.rb b/roles/geodns.rb
index 0d151071032ede0780c2ac69ba285d8a9ce9b0c9..a31437a697444fec0dcf63c21bf3ff2ea2a3eed1 100644 (file)
--- a/roles/geodns.rb
+++ b/roles/geodns.rb
@@ -1,6 +1,25 @@
 name "geodns"
 description "Role applied to all geographic DNS servers"
 
+default_attributes(
+  :rsyncd => {
+    :modules => {
+      :geodns => {
+        :comment => "GeoDNS",
+        :path => "/etc/gdnsd/config.d",
+        :read_only => false,
+        :write_only => true,
+        :list => false,
+        :transfer_logging => false,
+        :hosts_allow => [
+          "193.60.236.20" # sarel
+        ]
+      }
+    }
+  }
+)
+
 run_list(
+  "recipe[rsyncd]",
   "recipe[geodns]"
 )