| Age | Commit message (Collapse) | Author |
|---|
|
This gets us a simple apt repository privilege separation:
(a) our key can't be used to forge other repos
(b) other keys can't be used to forge our repo.
From sources.list(5):
· Signed-By (signed-by) is either an absolute path to a keyring
file (has to be accessible and readable for the _apt user, so ensure
everyone has read-permissions on the file) or one or more
fingerprints of keys either in the trusted.gpg keyring or in the
keyrings in the trusted.gpg.d/ directory (see apt-key
fingerprint). If the option is set, only the key(s) in this keyring
or only the keys with these fingerprints are used for the
apt-secure(8) verification of this repository. Defaults to the value
of the option with the same name if set in the previously acquired
Release file. Otherwise all keys in the trusted keyrings are
considered valid signers for this repository.
|
|
|
|
|
|
|
|
New soledad packages now depend on Twisted 16.2.0 (see
https://leap.se/code/issues/8412), so we need to pin twisted to get
installed from jessie-backports.
- Resolves: #8418
|
|
Change-Id: If39222dc9ec68d1786c70c4b82b740e0a06773c4
|
|
|
|
Change-Id: I5f04e31e49642597c69895b5aca3ff5326dfd6ec
|
|
|
|
`site_apt` aready ensures for installing packages after Exec[update_apt]
is run, so we don't need to duplicate this in `site_config::default.pp`.
|
|
Because this is the recommended way of depnending in the apt README.
|
|
`site_config::default.pp` takes care the all packages are
installed before `Exec['refresh_apt']`, so we don't need to
add it here for a single package.
|
|
The apt module now takes care of all the dependencies removed
from `site_apt`.
Also, the dependency to install the `lsb` package after
`refresh_apt` is unnesseccary because lsb facts won't work
anyway on the first run if `lsb` is not installed before, so
we can safely remove it.
|
|
- Resolves: #7842
|
|
|
|
|
|
Providing a custom sources.platform.apt.basic value worked
with the last commit, but without that the platform would fail.
So we provide a default value now in provider_base/common.json,
which can get overridden.
|
|
So we can use the experimental-0.8 repo instead of 0.8 i.e.
Use this to customize the main LEAP deb url:
"sources": {
"apt": {
"leap": {
"basic": "http://deb.leap.se/experimental-0.9"
}
}
}
|
|
This reverts commit 02b1b484ad9a5d065ceac72b8263b7bcc112c923.
Now that we have a proper couchdb jessie package we don't need to
install it from Debian unstable.
|
|
Configure the apt class together with "use_next_release => true", so
pnp4nagios* packages can get installed from strech.
No other package will be upgraded as the apt module pins stretch very
low, so that only packages are installed if there are no other sources
available.
- Resolves: #7604
|
|
- Related: #6920
|
|
- Related: #6920
|
|
|
|
Change-Id: Iac4dc8428ff5e663870ed4dd6a2b840e0904e5be
|
|
Change-Id: Ia7a35c8613350ad75ff1ebbdda0a09efa0960ba6
|
|
file #6964"
This reverts commit 984684f56f15d9d89ea78ffe6ed67dabf3d63208.
Needed because:
Augeas fails after upgrading augeas packages during same puppetrun, but
only on first deploy - https://leap.se/code/issues/6997
|
|
Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421
|
|
Change-Id: I69e6a0f8e676be72bce492af32fef76c9167f5ee
|
|
|
|
Change-Id: I5542b320bb1edb52c63350b5e4fd2af681991fb5
|
|
Change-Id: Ib18c9031df13dab3187e0bb0f2202ffddd0d228d
|
|
unattended-upgrades is not able to upgrade itself in certain situations,
such as when the conffile prompt is generated due to the config being
changed. We want to set this package as latest in the platform so that
it is upgraded on every deploy (we deploy the config anyway).
Change-Id: I8c99bfb1b001079f0e1a4ffbf048e0e867633335
|
|
based on the hiera value 'major_version' (#6251)
Change-Id: I10532ef83e3aa2d35d9c0be241952a35e366bba4
|
|
This was a leftover from earlier versions, where we installed rsyslog
from the leap debian package repo.
Change-Id: I88a852f08b5aff3bd7b591b6220ac354463a9786
|
|
|
|
|
|
|
|
Change-Id: I3f6a4db26e064a520a08822cf23fc3288b31af62
|
|
Change-Id: Ie28de8d3f7a8c8cf52ce30365379a476d48dc88b
|
|
group it with the other preferences snippets
Change-Id: I83928c6b82cd6218a80c95475729cb57f146ff85
|
|
which will provide us with proper ipv6 support
Change-Id: I0188732aae6cbc64ab57e95bf805d6158fa17e07
|
|
|
|
(Feature #3962)
this will fix the alteration of the preferences file. we now use the
apt module default preferences, and pin the depending packages from
squeeze that are dependencies for the bigcouch package in the
couchdb module, class couchdb::bigcouch::package::cloudant.
|
|
|
|
. create a soledad::common class
. leap-mx now only needs to include soledad-common
. move the site_apt::preferences::twisted to a preferences block inside the soledad server class
. make sure that the packages are doing 'ensure => latest' instead of installed
Change-Id: Ifa978e831cdc8835666b27322a6e068d67251f5d
|
|
backport twisted 13. In order to install the backported dependencies we need an apt preferences_snippet installed for the backported twisted packages
Change-Id: I886bb735eeb3abe7955c7cf054b749554ab84746
|
|
(#2984) and the custom_key_dir as a class parameter
remove the global variable from setup.pp and site.pp and instead pass it into the apt class declaration as a parameter
Change-Id: I24806f2fd22b5a066b951c5f76f3dd748481b5b6
|
|
|
|
piston cloud
This moves the apt configuration into the setup.pp run, so we can get the
backport source added early which will enable us to install the latest facter
from the backports repository.
Change-Id: I8ccf1a0445dea72f1b94be08484f33e648439ec1
|
|
and apt has been refreshed
Change-Id: I485420c4ea50f8c3f6699b9b8073dc6c67b7a353
|
