From 57a1a16f6d6df7dfebf0d40c38af7fbc3af21a34 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@leap.se>
Date: Wed, 16 Oct 2013 11:15:44 -0400
Subject: add rsyslog puppet submodule

Change-Id: Ic9f521010af7b362490ee5b0048e41cf11bfc593
---
 puppet/modules/rsyslog | 1 +
 1 file changed, 1 insertion(+)
 create mode 160000 puppet/modules/rsyslog

(limited to 'puppet/modules')

diff --git a/puppet/modules/rsyslog b/puppet/modules/rsyslog
new file mode 160000
index 00000000..20fbda6b
--- /dev/null
+++ b/puppet/modules/rsyslog
@@ -0,0 +1 @@
+Subproject commit 20fbda6b91472e656331a9c64630fb207e9f5789
-- 
cgit v1.2.3


From de8fe441e1c07b63f1c02aa231a8a56c9a9448ec Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@leap.se>
Date: Wed, 16 Oct 2013 11:16:18 -0400
Subject: rsyslog: setup default local config that gets us the same config as
 default from debian

Change-Id: If07ee200e2ae0d9cfaf8e405d6354c80d77330ca
---
 puppet/modules/site_config/manifests/default.pp | 3 +++
 puppet/modules/site_config/manifests/syslog.pp  | 6 ++++++
 2 files changed, 9 insertions(+)
 create mode 100644 puppet/modules/site_config/manifests/syslog.pp

(limited to 'puppet/modules')

diff --git a/puppet/modules/site_config/manifests/default.pp b/puppet/modules/site_config/manifests/default.pp
index c7243d5f..2380066a 100644
--- a/puppet/modules/site_config/manifests/default.pp
+++ b/puppet/modules/site_config/manifests/default.pp
@@ -48,6 +48,9 @@ class site_config::default {
     stage => setup,
   }
 
+  # install/configure syslog
+  include site_config::syslog
+
   # install/remove base packages
   include site_config::packages::base
 
diff --git a/puppet/modules/site_config/manifests/syslog.pp b/puppet/modules/site_config/manifests/syslog.pp
new file mode 100644
index 00000000..c7c55c34
--- /dev/null
+++ b/puppet/modules/site_config/manifests/syslog.pp
@@ -0,0 +1,6 @@
+class site_config::syslog {
+
+  class { 'rsyslog::client': log_remote => false, log_local => true }
+
+}
+
-- 
cgit v1.2.3


From aa86d15696245c6ded59ca51ceff8f6eaf3119c5 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@leap.se>
Date: Wed, 16 Oct 2013 12:18:15 -0400
Subject: syslog: add rsyslog::snippet to anonymize logs it is necessary to
 install the fixed package from the leap.se repository until it is available
 in wheezy-backports, so install the apt preferences to pull it from there,
 and add its necessary library dependency from wheezy-backports

Change-Id: I379ff2ceaac1a978143715d3a7ced0011ca0d747
---
 puppet/modules/site_config/manifests/syslog.pp | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

(limited to 'puppet/modules')

diff --git a/puppet/modules/site_config/manifests/syslog.pp b/puppet/modules/site_config/manifests/syslog.pp
index c7c55c34..6a9da460 100644
--- a/puppet/modules/site_config/manifests/syslog.pp
+++ b/puppet/modules/site_config/manifests/syslog.pp
@@ -1,6 +1,28 @@
 class site_config::syslog {
 
-  class { 'rsyslog::client': log_remote => false, log_local => true }
+  # we need to pull in rsyslog from the leap repository until it is availbale in
+  # wheezy-backports
+  apt::preferences_snippet { 'fixed_rsyslog_anon_package':
+    package  => 'rsyslog',
+    priority => '999',
+    pin      => 'release o=leap.se',
+    before   => Class['rsyslog::install']
+  }
 
-}
+  apt::preferences_snippet { 'rsyslog_anon_libestr0':
+    package  => 'libestr0',
+    priority => '999',
+    pin      => 'release a=wheezy-backports',
+    before   => Class['rsyslog::install']
+  }
+
+  class { 'rsyslog::client':
+    log_remote => false,
+    log_local  => true
+  }
 
+  rsyslog::snippet { '00-anonymize_logs':
+    content => '$ModLoad mmanon
+action(type="mmanon" ipv4.bits="32" mode="rewrite")'
+  }
+}
-- 
cgit v1.2.3