]> git.netwichtig.de Git - user/henk/code/puppet/modules/s6.git/blob - manifests/install.pp
change permissions to be more secure
[user/henk/code/puppet/modules/s6.git] / manifests / install.pp
1 class s6::install {
2   package {
3     's6':
4       ensure => installed,
5     ;
6   }
7   file {
8     '/etc/s6-services/':
9       ensure => directory,
10     ;
11     '/etc/s6-scandir/':
12       ensure => directory,
13     ;
14     '/var/log/s6/':
15       ensure => directory,
16       mode   => '0700',
17     ;
18   }
19
20   if $facts['service_provider'] == 'systemd' {
21     file {
22       '/etc/systemd/system/s6.service':
23         ensure  => present,
24         source  => 'puppet:///modules/s6/etc/systemd/system/s6.service',
25         require => Package['s6'],
26         notify  => Class['s6::service'],
27       ;
28     }
29   } else {
30     file {
31       '/usr/local/bin/s6-svscanboot':
32         ensure  => present,
33         source  => [
34           "puppet:///modules/s6/usr/local/bin/s6-svscanboot.${facts['os']['distro']['codename']}",
35           'puppet:///modules/s6/usr/local/bin/s6-svscanboot',
36         ],
37         mode    => '0755',
38         require => Package['s6'],
39         notify  => Class['s6::service'],
40       ;
41       '/etc/init.d/s6':
42         ensure  => present,
43         source  => 'puppet:///modules/s6/etc/init.d/s6',
44         mode    => '0755',
45         require => Package['s6'],
46         notify  => Class['s6::service'],
47       ;
48     }
49   }
50   user {
51     's6-logs':
52       ensure => present,
53       home   => '/nonexistant',
54       shell  => '/usr/sbin/nologin',
55       system => true,
56     ;
57   }
58 }