From 7d8d3599bf22316c0ceab2957700d307a1a914bf Mon Sep 17 00:00:00 2001
From: Fredrik Thulin <fredrik@thulin.net>
Date: Mon, 26 May 2014 14:06:24 +0200
Subject: sync from eduid-ops

---
 .../etc/puppet/modules/sunet/manifests/server.pp   | 46 ++++++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/global/overlay/etc/puppet/modules/sunet/manifests/server.pp b/global/overlay/etc/puppet/modules/sunet/manifests/server.pp
index 875dc69..4852e17 100644
--- a/global/overlay/etc/puppet/modules/sunet/manifests/server.pp
+++ b/global/overlay/etc/puppet/modules/sunet/manifests/server.pp
@@ -37,4 +37,50 @@ define sunet::server() {
     notify => Service['ssh'],
   }
 
+  service { 'ntp':
+    ensure    => 'running',
+  }
+
+  # Don't use pool.ntp.org servers, but rather DHCP provided NTP servers
+  line { 'no_pool_ntp_org_servers':
+      file        => '/etc/ntp.conf',
+      line        => '^server .*\.pool\.ntp\.org',
+      ensure      => 'comment',
+      notify      => Service['ntp'],
+  }
+
+  file { '/var/cache/scriptherder':
+    ensure  => 'directory',
+    path    => '/var/cache/scriptherder',
+    mode    => '1777',    # like /tmp, so user-cronjobs can also use scriptherder
+  }
+
+
+}
+
+# from http://projects.puppetlabs.com/projects/puppet/wiki/Simple_Text_Patterns/5
+define line($file, $line, $ensure = 'present') {
+  case $ensure {
+    default : { err ( "unknown ensure value ${ensure}" ) }
+    present: {
+      exec { "/bin/echo '${line}' >> '${file}'":
+        unless => "/bin/grep -qFx '${line}' '${file}'"
+      }
+    }
+    absent: {
+      exec { "/usr/bin/perl -ni -e 'print unless /^\\Q${line}\\E\$/' '${file}'":
+        onlyif => "/bin/grep -qFx '${line}' '${file}'"
+      }
+    }
+    uncomment: {
+      exec { "/bin/sed -i -e'/${line}/s/^#\\+//' '${file}'":
+        onlyif => "/bin/grep '${line}' '${file}' | /bin/grep '^#' | /usr/bin/wc -l"
+      }
+    }
+    comment: {
+      exec { "/bin/sed -i -e'/${line}/s/^\\(.\\+\\)$/#\\1/' '${file}'":
+        onlyif => "/usr/bin/test `/bin/grep '${line}' '${file}' | /bin/grep -v '^#' | /usr/bin/wc -l` -ne 0"
+      }
+    }
+  }
 }
-- 
cgit v1.1