changes to support restrictive permissions for /etc/leap. this is required to work with the latest leap_cli.

1 files changed, 31 insertions, 7 deletions

diff --git a/puppet/modules/try/manifests/file.pp b/puppet/modules/try/manifests/file.pp
index 47a8c269..7063ded9 100644
--- a/puppet/modules/try/manifests/file.pp
+++ b/puppet/modules/try/manifests/file.pp
@@ -1,23 +1,47 @@
 #
-# like built-in type "file", but gets gracefully ignored if the target does not exist or is undefined.
+# Works like the built-in type "file", but gets gracefully ignored if the target/source does not exist or is undefined.
+#
+# Also, if the source or target doesn't exist, and the destination is a git repo, then the file is restored from git.
 #
 # /bin/true and /usr/bin/test are hardcoded to their paths in debian.
 #
-
+# known limitations:
+# * restore does not work for directories
+#
 define try::file (
   $ensure = undef,
   $target = undef,
+  $source = undef,
+  $owner = undef,
+  $group = undef,
+  $recurse = undef,
+  $purge = undef,
+  $force = undef,
+  $mode = undef,
   $restore = true) {
 
-  if $target != undef {
+  if $target {
+    $target_or_source = $target
+  } else {
+    $target_or_source = $source
+  }
+
+  if $target_or_source != undef {
     exec { "check_${name}":
       command => "/bin/true",
-      onlyif => "/usr/bin/test -e '${target}'",
+      onlyif => "/usr/bin/test -e '${target_or_source}'",
       loglevel => info;
     }
     file { "$name":
       ensure => $ensure,
       target => $target,
+      source => $source,
+      owner => $owner,
+      group => $group,
+      recurse => $recurse,
+      purge => $purge,
+      force => $force,
+      mode => $mode,
       require => $require ? {
         undef   => Exec["check_${name}"],
         default => [ $require, Exec["check_${name}"] ]
@@ -27,10 +51,10 @@ define try::file (
   }
 
   #
-  # if the target does not exist (or is undef), and the file happens to be in a git repo,
+  # if the target/source does not exist (or is undef), and the file happens to be in a git repo,
   # then restore the file to its original state.
   #
-  if $target == undef or $restore {
+  if ($target_or_source == undef) or $restore {
     $file_basename = basename($name)
     $file_dirname  = dirname($name)
     $command = "git rev-parse && unlink '${name}'; git checkout -- '${file_basename}' && chown --reference='${file_dirname}' '${name}'; true"
@@ -48,7 +72,7 @@ define try::file (
       }
     } else {
       exec { "restore_${name}":
-        unless => "/usr/bin/test -e '${target}'",
+        unless => "/usr/bin/test -e '${target_or_source}'",
         command => $command,
         cwd => $file_dirname,
         require => $require ? {