mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-13 04:32:48 +01:00
101 lines
2.5 KiB
Plaintext
101 lines
2.5 KiB
Plaintext
{% from 'salt/map.jinja' import UPGRADECOMMAND with context %}
|
|
{% from 'salt/map.jinja' import SALTVERSION %}
|
|
{% from 'salt/map.jinja' import INSTALLEDSALTVERSION %}
|
|
{% from 'salt/map.jinja' import SALTNOTHELD %}
|
|
{% from 'salt/map.jinja' import SALTPACKAGES %}
|
|
{% import_yaml 'salt/minion.defaults.yaml' as SALTMINION %}
|
|
{% set service_start_delay = SALTMINION.salt.minion.service_start_delay %}
|
|
|
|
include:
|
|
- salt
|
|
- salt.helper-packages
|
|
- systemd.reload
|
|
|
|
{% if INSTALLEDSALTVERSION|string != SALTVERSION|string %}
|
|
|
|
{% if SALTNOTHELD | int == 0 %}
|
|
unhold_salt_packages:
|
|
module.run:
|
|
- pkg.unhold:
|
|
- pkgs:
|
|
{% for package in SALTPACKAGES %}
|
|
- {{ package }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
install_salt_minion:
|
|
cmd.run:
|
|
- name: |
|
|
exec 0>&- # close stdin
|
|
exec 1>&- # close stdout
|
|
exec 2>&- # close stderr
|
|
nohup /bin/sh -c '{{ UPGRADECOMMAND }}' &
|
|
{% endif %}
|
|
|
|
{% if INSTALLEDSALTVERSION|string == SALTVERSION|string %}
|
|
|
|
{% if SALTNOTHELD | int == 1 %}
|
|
hold_salt_packages:
|
|
module.run:
|
|
- pkg.hold:
|
|
- pkgs:
|
|
{% for package in SALTPACKAGES %}
|
|
- {{ package }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
remove_info_log_level_logfile:
|
|
file.line:
|
|
- name: /etc/salt/minion
|
|
- match: "log_level_logfile: info"
|
|
- mode: delete
|
|
|
|
remove_info_log_level:
|
|
file.line:
|
|
- name: /etc/salt/minion
|
|
- match: "log_level: info"
|
|
- mode: delete
|
|
|
|
set_log_levels:
|
|
file.append:
|
|
- name: /etc/salt/minion
|
|
- text:
|
|
- "log_level: error"
|
|
- "log_level_logfile: error"
|
|
|
|
salt_minion_service_unit_file:
|
|
file.managed:
|
|
- name: /etc/systemd/system/multi-user.target.wants/salt-minion.service
|
|
- source: salt://salt/service/salt-minion.service.jinja
|
|
- template: jinja
|
|
- defaults:
|
|
service_start_delay: {{ service_start_delay }}
|
|
- onchanges_in:
|
|
- module: systemd_reload
|
|
|
|
{% endif %}
|
|
|
|
mine_functions:
|
|
file.managed:
|
|
- name: /etc/salt/minion.d/mine_functions.conf
|
|
- source: salt://salt/etc/minion.d/mine_functions.conf
|
|
- template: jinja
|
|
|
|
# this has to be outside the if statement above since there are <requisite>_in calls to this state
|
|
salt_minion_service:
|
|
service.running:
|
|
- name: salt-minion
|
|
- enable: True
|
|
- onlyif: test "{{INSTALLEDSALTVERSION}}" == "{{SALTVERSION}}"
|
|
- listen:
|
|
- file: mine_functions
|
|
{% if INSTALLEDSALTVERSION|string == SALTVERSION|string %}
|
|
- file: set_log_levels
|
|
- file: salt_minion_service_unit_file
|
|
{% endif %}
|
|
|
|
|
|
patch_pkg:
|
|
pkg.installed:
|
|
- name: patch
|