2013-05-16 08:00:28 +02:00
|
|
|
|
|
|
|
|
2014-01-05 14:03:04 +01:00
|
|
|
def validate_manifest(data, validator, error):
|
2016-06-04 11:35:59 +02:00
|
|
|
import os.path
|
|
|
|
schema_path = os.path.normpath(os.path.join(os.path.dirname(__file__), 'manifest-schema.yml'))
|
|
|
|
validator(data, schema_path)
|
|
|
|
pubkey = data['plugins']['admin_user'].get('pubkey', None)
|
|
|
|
if pubkey is not None and not os.path.exists(pubkey):
|
|
|
|
msg = 'Could not find public key at %s' % pubkey
|
|
|
|
error(msg, ['plugins', 'admin_user', 'pubkey'])
|
2013-12-01 23:56:17 +01:00
|
|
|
|
|
|
|
|
2014-01-05 15:13:09 +01:00
|
|
|
def resolve_tasks(taskset, manifest):
|
2016-06-04 11:35:59 +02:00
|
|
|
import logging
|
|
|
|
import tasks
|
|
|
|
from bootstrapvz.common.tasks import ssh
|
|
|
|
|
|
|
|
from bootstrapvz.common.releases import jessie
|
|
|
|
if manifest.release < jessie:
|
|
|
|
taskset.update([ssh.DisableRootLogin])
|
|
|
|
|
|
|
|
if 'password' in manifest.plugins['admin_user']:
|
|
|
|
taskset.discard(ssh.DisableSSHPasswordAuthentication)
|
|
|
|
taskset.add(tasks.AdminUserPassword)
|
|
|
|
|
|
|
|
if 'pubkey' in manifest.plugins['admin_user']:
|
|
|
|
taskset.add(tasks.AdminUserPublicKey)
|
|
|
|
elif manifest.provider['name'] == 'ec2':
|
|
|
|
logging.getLogger(__name__).info("The SSH key will be obtained from EC2")
|
|
|
|
taskset.add(tasks.AdminUserPublicKeyEC2)
|
|
|
|
elif 'password' not in manifest.plugins['admin_user']:
|
|
|
|
logging.getLogger(__name__).warn("No SSH key and no password set")
|
|
|
|
|
|
|
|
taskset.update([tasks.AddSudoPackage,
|
|
|
|
tasks.CreateAdminUser,
|
|
|
|
tasks.PasswordlessSudo,
|
|
|
|
])
|