2014-01-05 14:03:04 +01:00
|
|
|
def validate_manifest(data, validator, error):
|
2016-09-12 18:47:20 +02:00
|
|
|
from bootstrapvz.common.tools import rel_path
|
|
|
|
validator(data, rel_path(__file__, 'manifest-schema.yml'))
|
2013-12-01 23:56:17 +01:00
|
|
|
|
|
|
|
|
2014-01-05 15:13:09 +01:00
|
|
|
def resolve_tasks(taskset, manifest):
|
2016-06-04 11:35:59 +02:00
|
|
|
import logging
|
|
|
|
import tasks
|
|
|
|
from bootstrapvz.common.tasks import ssh
|
|
|
|
|
|
|
|
from bootstrapvz.common.releases import jessie
|
|
|
|
if manifest.release < jessie:
|
|
|
|
taskset.update([ssh.DisableRootLogin])
|
|
|
|
|
|
|
|
if 'password' in manifest.plugins['admin_user']:
|
|
|
|
taskset.discard(ssh.DisableSSHPasswordAuthentication)
|
|
|
|
taskset.add(tasks.AdminUserPassword)
|
|
|
|
|
|
|
|
if 'pubkey' in manifest.plugins['admin_user']:
|
2016-08-14 01:24:40 +02:00
|
|
|
taskset.add(tasks.CheckPublicKeyFile)
|
2016-06-04 11:35:59 +02:00
|
|
|
taskset.add(tasks.AdminUserPublicKey)
|
|
|
|
elif manifest.provider['name'] == 'ec2':
|
|
|
|
logging.getLogger(__name__).info("The SSH key will be obtained from EC2")
|
|
|
|
taskset.add(tasks.AdminUserPublicKeyEC2)
|
|
|
|
elif 'password' not in manifest.plugins['admin_user']:
|
|
|
|
logging.getLogger(__name__).warn("No SSH key and no password set")
|
|
|
|
|
|
|
|
taskset.update([tasks.AddSudoPackage,
|
|
|
|
tasks.CreateAdminUser,
|
|
|
|
tasks.PasswordlessSudo,
|
|
|
|
])
|