Suricata Module - Make thread count automagic

salt/suricata/files/suricata.yaml

@@ -1344,15 +1344,15 @@ threading:
   {%- if salt['pillar.get']('sensor:suripins') %}
   cpu-affinity:
     - management-cpu-set:
-        cpu: [ {{ salt['pillar.get']('sensor:suripins') }} ]  # include only these cpus in affinity settings
+        cpu: [ {{ salt['pillar.get']('sensor:suripins')|join(",") }} ]  # include only these cpus in affinity settings
     - receive-cpu-set:
-        cpu: [ {{ salt['pillar.get']('sensor:suripins') }} ]  # include only these cpus in affinity settings
+        cpu: [ {{ salt['pillar.get']('sensor:suripins')|join(",") }} ]  # include only these cpus in affinity settings
     - worker-cpu-set:
-        cpu: [ {{ salt['pillar.get']('sensor:suripins') }} ]
+        cpu: [ {{ salt['pillar.get']('sensor:suripins')|join(",") }} ]
         mode: "exclusive"
         # Use explicitely 3 threads and don't compute number by using
         # detect-thread-ratio variable:
-        threads: {{ salt['pillar.get']('sensor:surithreads') }}
+        threads: {{ salt['pillar.get']('sensor:suripins')|length }}
         prio:
           default: "high"
   {% endif %}

so-setup-network.sh

@@ -580,12 +580,16 @@ sensor_pillar() {
       PIN=$(echo $PIN |  cut -d\" -f2)
     echo "    - $PIN" >> $TMP/$HOSTNAME.sls
     done
-    SP=("${SURIPINS[@]//\"/}")
+    for SPIN in $SURIPINS; do
-    SPINS=${SP// /,}
+      SPIN=$(echo $SPIN |  cut -d\" -f2)
-    SCOUNT=${#SURIPINS[@]}
+    echo "    - $SPIN" >> $TMP/$HOSTNAME.sls
+    done
+    #SP=("${SURIPINS[@]//\"/}")
+    #SPINS=${SP// /,}
+    #SCOUNT=${#SURIPINS[@]}
 
-    echo "  suripins: $SPINS" >> $TMP/$HOSTNAME.sls
+    #echo "  suripins: $SPINS" >> $TMP/$HOSTNAME.sls
-    echo "  surithreads: $SCOUNT"
+    #echo "  surithreads: $SCOUNT"
   else
     echo "  bro_lbprocs: $BASICBRO" >> $TMP/$HOSTNAME.sls
     echo "  suriprocs: $BASICSURI" >> $TMP/$HOSTNAME.sls