X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Froles%2Fmanifests%2Fsigning.pp;fp=modules%2Froles%2Fmanifests%2Fsigning.pp;h=a959ae3bb57ce8c4eeec830d6e48c87600dd3d57;hb=0b574f07d6e5276dc368feeca12cabe0fbc64020;hp=0000000000000000000000000000000000000000;hpb=888face5cb986811ac1b74e1ce81555670bc32a3;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/signing.pp b/modules/roles/manifests/signing.pp
new file mode 100644
index 000000000..a959ae3bb
--- /dev/null
+++ b/modules/roles/manifests/signing.pp
@@ -0,0 +1,20 @@
+class roles::signing {
+	package { 'expect': ensure => installed, }
+	package { 'pesign': ensure => installed, }
+	package { 'linux-kbuild-4.9': ensure => installed, }
+	package { 'libengine-pkcs11-openssl': ensure => installed, }
+
+	file { '/usr/local/bin/pesign-wrap':
+		owner => 'root',
+		group => 'root',
+		mode => '0555',
+		source => 'puppet:///modules/roles/signing/pesign-wrap',
+	}
+
+	file { '/usr/local/bin/secure-boot-code-sign':
+		owner => 'root',
+		group => 'root',
+		mode => '0555',
+		source => 'puppet:///modules/roles/signing/secure-boot-code-sign.py',
+	}
+}