X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fgrub%2Fmanifests%2Finit.pp;h=88079f4dcf0dec725e7c954c3889e1a70c1e7afd;hb=7d26559131d4900e63edae21954e5604ae1ff8d4;hp=1ef9ec783cfc68e2d9ba47d2a3c96a3528034512;hpb=079c4266fd3f6cbfbf5e97a249859d8da9e11d8d;p=mirror%2Fdsa-puppet.git

diff --git a/modules/grub/manifests/init.pp b/modules/grub/manifests/init.pp
index 1ef9ec783..88079f4dc 100644
--- a/modules/grub/manifests/init.pp
+++ b/modules/grub/manifests/init.pp
@@ -1,25 +1,94 @@
 class grub {
+	$grub_do_ifnames = ($::kernel == 'Linux' and $::is_virtual and $::virtual == 'kvm')
+
 	if ($::kernel == 'Linux' and $::is_virtual and $::virtual == 'kvm') {
+		$grub_manage = true
+		if ($::debarchitecture != 'ppc64el') {
+			$grub_do_kernel_serial = true
+			$grub_do_grub_serial = true
+		}
+	} elsif $::hostname in [ubc-enc2bl01,ubc-enc2bl02,ubc-enc2bl09,ubc-enc2bl10,casulana,mirror-anu,sallinen,storace,mirror-accumu,bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14,grnet-node01,grnet-node02,csail-node01,csail-node02,byrd,mirror-isc,mirror-umn,lobos,villa,klecker,clementi,czerny,lw01,lw02,lw03,lw04,lw07,lw08,lw09,lw10] {
+		$grub_manage = true
+		$grub_do_kernel_serial = true
+		$grub_do_grub_serial = true
+	} elsif $::hostname in [mirror-skroutz,conova-node01,conova-node02,arm-arm-01,fasolo,manda-node03,manda-node04,schmelzer,smit,new-klecker] {
+		$grub_manage = true
+		$grub_do_kernel_serial = true
+		$grub_do_grub_serial = true
+	} elsif $::hostname in [arm-arm-03] {
+		$grub_manage = true
+		$grub_do_kernel_serial = true
+		$grub_do_grub_serial = false
+	#} elsif $::hostname in [villa] {
+	#	$grub_manage = true
+	#	$grub_do_kernel_serial = false
+	#	$grub_do_grub_serial = false
+	} else {
+		$grub_manage = false
+	}
+
+	if ($::update_grub and $grub_manage) {
+		# hp-health requires nopat on linux 4.9
+		$grub_do_nopat = ($::systemproductname and $::systemproductname =~ /^ProLiant/ and versioncmp($::kernelversion, '4.9') >= 0)
+
+		$grub_do_pti_on = ($::debarchitecture == 'amd64' and versioncmp($::lsbmajdistrelease, '9') >= 0)
+
+		$grub_do_extra = $::hostname in [fasolo,grnet-node01,grnet-node02]
+
 		file { '/etc/default/grub':
 			# restore to default
 			source => 'puppet:///modules/grub/etc-default-grub',
 			notify  => Exec['update-grub']
 		}
+
 		file { '/etc/default/grub.d':
-			ensure => directory
+			ensure => directory,
+			mode   => '0555',
+			purge   => true,
+			force   => true,
+			recurse => true,
+			source  => 'puppet:///files/empty/',
 		}
+
 		file { '/etc/default/grub.d/puppet-grub-serial.cfg':
+			ensure => $grub_do_kernel_serial ? { true  => 'present', default => 'absent' },
 			content  => template('grub/puppet-grub-serial.cfg.erb'),
 			notify  => Exec['update-grub']
 		}
+
+		file { '/etc/default/grub.d/puppet-kernel-serial.cfg':
+			ensure => $grub_do_grub_serial ? { true  => 'present', default => 'absent' },
+			content  => template('grub/puppet-kernel-serial.cfg.erb'),
+			notify  => Exec['update-grub']
+		}
+
 		file { '/etc/default/grub.d/puppet-net-ifnames.cfg':
+			ensure => $grub_do_ifnames ? { true  => 'present', default => 'absent' },
 			content  => template('grub/puppet-net-ifnames.cfg.erb'),
 			notify  => Exec['update-grub']
 		}
 
-		exec { 'update-grub':
-			refreshonly => true,
-			path        => '/usr/bin:/usr/sbin:/bin:/sbin',
+		file { '/etc/default/grub.d/puppet-kernel-nopat.cfg':
+			ensure => $grub_do_nopat ? { true  => 'present', default => 'absent' },
+			content  => template('grub/puppet-kernel-nopat.cfg.erb'),
+			notify  => Exec['update-grub']
+		}
+
+		file { '/etc/default/grub.d/puppet-kernel-extra.cfg':
+			ensure => $grub_do_extra ? { true  => 'present', default => 'absent' },
+			content  => template('grub/puppet-kernel-extra.cfg.erb'),
+			notify  => Exec['update-grub']
 		}
+
+		file { '/etc/default/grub.d/puppet-kernel-pti-on.cfg':
+			ensure => $grub_do_pti_on ? { true  => 'present', default => 'absent' },
+			content  => template('grub/puppet-kernel-pti-on.cfg.erb'),
+			notify  => Exec['update-grub']
+		}
+	}
+
+	exec { 'update-grub':
+		refreshonly => true,
+		path        => '/usr/bin:/usr/sbin:/bin:/sbin',
 	}
 }