X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fdebian-org%2Fmanifests%2Finit.pp;h=90291be79479406dda54d660c6e2c53c1eb9bc7b;hb=c0d531d094014f4542cc4d0215bd74f98db16a37;hp=dc70d53cf67aa0b09e2a4cff8bb44c9bc2746a8f;hpb=b06fbfe0571111a746a9421174887cf97e6ee1b8;p=mirror%2Fdsa-puppet.git diff --git a/modules/debian-org/manifests/init.pp b/modules/debian-org/manifests/init.pp index dc70d53cf..90291be79 100644 --- a/modules/debian-org/manifests/init.pp +++ b/modules/debian-org/manifests/init.pp @@ -6,12 +6,12 @@ class debian-org { if getfromhash($site::nodeinfo, 'hoster', 'mirror-debian') { $mirror = getfromhash($site::nodeinfo, 'hoster', 'mirror-debian') } else { - $mirror = 'http://ftp.debian.org/debian/' - } - if $::lsbmajdistrelease < 7 { - $mirror_backports = 'http://backports.debian.org/debian-backports/' - } else { - $mirror_backports = $mirror + #$mirror = 'http://ftp.debian.org/debian/' + if $::lsbmajdistrelease <= 8 { + $mirror = 'http://cdn-fastly.deb.debian.org/debian/' + } else { + $mirror = 'http://deb.debian.org/debian/' + } } if $::lsbmajdistrelease <= 7 { @@ -34,8 +34,7 @@ class debian-org { 'debian-admin@ftbfs.de', 'weasel@debian.org', 'steve@lobefin.net', - 'paravoid@debian.org', - 'zumbi@kos.to' + 'zumbi@oron.es' ] package { [ @@ -63,10 +62,8 @@ class debian-org { if ($::lsbmajdistrelease >= 8) { $rubyfs_package = 'ruby-filesystem' - } elsif $::lsbmajdistrelease == 7 { - $rubyfs_package = 'libfilesystem-ruby1.9' } else { - $rubyfs_package = 'libfilesystem-ruby1.8' + $rubyfs_package = 'libfilesystem-ruby1.9' } package { [ 'apt-utils', @@ -133,25 +130,23 @@ class debian-org { content => "", } - site::aptrepo { 'security': - url => 'http://security.debian.org/', - suite => "${mungedcodename}/updates", - components => ['main','contrib','non-free'] - } - if $::lsbmajdistrelease < 7 { - site::aptrepo { 'debian-lts': - url => $mirror, - suite => "${::lsbdistcodename}-lts", + if ($::lsbmajdistrelease >= 8) { + site::aptrepo { 'security': + url => 'http://security-cdn.debian.org/', + suite => "${mungedcodename}/updates", components => ['main','contrib','non-free'] } } else { - site::aptrepo { 'debian-lts': + site::aptrepo { 'security': ensure => absent, } } + site::aptrepo { 'debian-lts': + ensure => absent, + } site::aptrepo { 'backports.debian.org': - url => $mirror_backports, + url => $mirror, suite => "${::lsbdistcodename}-backports", components => ['main','contrib','non-free'] } @@ -162,10 +157,10 @@ class debian-org { components => ['main','contrib','non-free'] } - if ($::hostname in [mips-aql-05, mipsel-aql-01, mipsel-aql-02, mipsel-manda-02, eberlin, etler]) { + if ($::hostname in [] or $::debarchitecture in ['kfreebsd-amd64', 'kfreebsd-i386']) { site::aptrepo { 'proposed-updates': url => $mirror, - suite => "${::lsbdistcodename}-proposed-updates", + suite => "${mungedcodename}-proposed-updates", components => ['main','contrib','non-free'] } } else { @@ -207,6 +202,15 @@ class debian-org { components => ['main','contrib','non-free'] } } + site::aptrepo { 'debian-cdn': + ensure => absent, + } + + site::aptrepo { 'debian2': + url => "http://cdn-fastly.deb.debian.org/debian", + suite => $mungedcodename, + components => ['main','contrib','non-free'] + } file { '/etc/facter': ensure => directory, @@ -307,6 +311,18 @@ class debian-org { source => 'puppet:///modules/debian-org/nsswitch.conf', } + file { '/etc/profile.d/timeout.sh': + mode => '0555', + source => 'puppet:///modules/debian-org/etc.profile.d/timeout.sh', + } + file { '/etc/zsh': + ensure => directory, + } + file { '/etc/zsh/zprofile': + mode => '0444', + source => 'puppet:///modules/debian-org/etc.zsh/zprofile', + } + # set mmap_min_addr to 4096 to mitigate # Linux NULL-pointer dereference exploits site::sysctl { 'mmap_min_addr':