modules/roles/manifests/signing.pp

   1 class roles::signing {
   2         package { 'expect': ensure => installed, }
   3         package { 'pesign': ensure => installed, }
   4         package { 'linux-kbuild-4.9': ensure => installed, }
   5         package { 'libengine-pkcs11-openssl': ensure => installed, }
   6
   7         file { '/usr/local/bin/pesign-wrap':
   8                 owner => 'root',
   9                 group => 'root',
  10                 mode => '0555',
  11                 source => 'puppet:///modules/roles/signing/pesign-wrap',
  12         }
  13
  14         file { '/usr/local/bin/secure-boot-code-sign':
  15                 owner => 'root',
  16                 group => 'root',
  17                 mode => '0555',
  18                 source => 'puppet:///modules/roles/signing/secure-boot-code-sign.py',
  19         }
  20 }