OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 __init__.py	0 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📁 __pycache__	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 cc_apk_configure.py	5.56 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_apt_configure.py	31.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_apt_pipelining.py	2.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_bootcmd.py	2.69 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_byobu.py	3.49 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ca_certs.py	7.34 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_chef.py	13.62 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_debug.py	3.37 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_disable_ec2_metadata.py	1.85 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_disk_setup.py	32 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_fan.py	2.93 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_final_message.py	2.97 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_growpart.py	18.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_grub_dpkg.py	5.62 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_install_hotplug.py	3.64 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_keyboard.py	1.87 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_keys_to_console.py	3.45 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_landscape.py	4.67 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_locale.py	1.7 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_lxd.py	11.12 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_mcollective.py	6.01 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_migrator.py	3.34 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_mounts.py	19.33 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ntp.py	16.53 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_package_update_upgrade_install.py	4.13 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_phone_home.py	5.3 KB	06/15/2022 04:38:21 PM	rw-r--r--
📄 cc_power_state_change.py	7.47 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_puppet.py	12.86 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_refresh_rmc_and_interface.py	5.31 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_reset_rmc.py	4.36 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_resizefs.py	9.9 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_resolv_conf.py	4.5 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rh_subscription.py	16.86 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rightscale_userdata.py	4.05 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_rsyslog.py	9.58 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_runcmd.py	2.66 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_salt_minion.py	5.36 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_boot.py	1.5 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_instance.py	1.66 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_per_once.py	1.61 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_user.py	1.69 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_scripts_vendor.py	2.14 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_seed_random.py	4.64 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_set_hostname.py	4.45 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_set_passwords.py	10.17 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_snap.py	6.16 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_spacewalk.py	3.33 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh.py	13.88 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh_authkey_fingerprints.py	4.06 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ssh_import_id.py	5.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_timezone.py	1.25 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ubuntu_advantage.py	5.67 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_ubuntu_drivers.py	4.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_update_etc_hosts.py	4.93 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_update_hostname.py	3.22 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_users_groups.py	7.43 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_write_files.py	6.46 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_write_files_deferred.py	1.46 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_yum_add_repo.py	6.92 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 cc_zypper_add_repo.py	6.31 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 modules.py	10.57 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 schema.py	27.82 KB	06/15/2022 04:38:21 PM	rw-r--r--
📁 schemas	-	07/01/2022 06:30:50 AM	rwxr-xr-x

Editing: cc_salt_minion.py

# Author: Jeff Bauer <jbauer@rubic.com>
#
# This file is part of cloud-init. See LICENSE file for license information.

"""Salt Minion: Setup and run salt minion"""

import os
from textwrap import dedent

from cloudinit import safeyaml, subp, util
from cloudinit.config.schema import MetaSchema, get_meta_doc
from cloudinit.distros import ALL_DISTROS, bsd_utils
from cloudinit.settings import PER_INSTANCE

MODULE_DESCRIPTION = """\
This module installs, configures and starts salt minion. If the ``salt_minion``
key is present in the config parts, then salt minion will be installed and
started. Configuration for salt minion can be specified in the ``conf`` key
under ``salt_minion``. Any conf values present there will be assigned in
``/etc/salt/minion``. The public and private keys to use for salt minion can be
specified with ``public_key`` and ``private_key`` respectively. Optionally if
you have a custom package name, service name or config directory you can
specify them with ``pkg_name``, ``service_name`` and ``config_dir``.

Salt keys can be manually generated by: ``salt-key --gen-keys=GEN_KEYS``,
where ``GEN_KEYS`` is the name of the keypair, e.g. 'minion'.  The keypair
will be copied to ``/etc/salt/pki`` on the minion instance.
"""

meta: MetaSchema = {
    "id": "cc_salt_minion",
    "name": "Salt Minion",
    "title": "Setup and run salt minion",
    "description": MODULE_DESCRIPTION,
    "distros": [ALL_DISTROS],
    "frequency": PER_INSTANCE,
    "examples": [
        dedent(
            """\
            salt_minion:
                pkg_name: salt-minion
                service_name: salt-minion
                config_dir: /etc/salt
                conf:
                    master: salt.example.com
                grains:
                    role:
                        - web
                public_key: |
                    ------BEGIN PUBLIC KEY-------
                    <key data>
                    ------END PUBLIC KEY-------
                private_key: |
                    ------BEGIN PRIVATE KEY------
                    <key data>
                    ------END PRIVATE KEY-------
                pki_dir: /etc/salt/pki/minion
            """
        )
    ],
}

__doc__ = get_meta_doc(meta)

# Note: see https://docs.saltstack.com/en/latest/topics/installation/
# Note: see https://docs.saltstack.com/en/latest/ref/configuration/

class SaltConstants(object):
    """
    defines default distribution specific salt variables
    """

def __init__(self, cfg):

# constants tailored for FreeBSD
        if util.is_FreeBSD():
            self.pkg_name = "py-salt"
            self.srv_name = "salt_minion"
            self.conf_dir = "/usr/local/etc/salt"
        # constants for any other OS
        else:
            self.pkg_name = "salt-minion"
            self.srv_name = "salt-minion"
            self.conf_dir = "/etc/salt"

# if there are constants given in cloud config use those
        self.pkg_name = util.get_cfg_option_str(cfg, "pkg_name", self.pkg_name)
        self.conf_dir = util.get_cfg_option_str(
            cfg, "config_dir", self.conf_dir
        )
        self.srv_name = util.get_cfg_option_str(
            cfg, "service_name", self.srv_name
        )

def handle(name, cfg, cloud, log, _args):
    # If there isn't a salt key in the configuration don't do anything
    if "salt_minion" not in cfg:
        log.debug(
            "Skipping module named %s, no 'salt_minion' key in configuration",
            name,
        )
        return

s_cfg = cfg["salt_minion"]
    const = SaltConstants(cfg=s_cfg)

# Start by installing the salt package ...
    cloud.distro.install_packages(const.pkg_name)

# Ensure we can configure files at the right dir
    util.ensure_dir(const.conf_dir)

# ... and then update the salt configuration
    if "conf" in s_cfg:
        # Add all sections from the conf object to minion config file
        minion_config = os.path.join(const.conf_dir, "minion")
        minion_data = safeyaml.dumps(s_cfg.get("conf"))
        util.write_file(minion_config, minion_data)

if "grains" in s_cfg:
        # add grains to /etc/salt/grains
        grains_config = os.path.join(const.conf_dir, "grains")
        grains_data = safeyaml.dumps(s_cfg.get("grains"))
        util.write_file(grains_config, grains_data)

# ... copy the key pair if specified
    if "public_key" in s_cfg and "private_key" in s_cfg:
        pki_dir_default = os.path.join(const.conf_dir, "pki/minion")
        if not os.path.isdir(pki_dir_default):
            pki_dir_default = os.path.join(const.conf_dir, "pki")

pki_dir = s_cfg.get("pki_dir", pki_dir_default)
        with util.umask(0o77):
            util.ensure_dir(pki_dir)
            pub_name = os.path.join(pki_dir, "minion.pub")
            pem_name = os.path.join(pki_dir, "minion.pem")
            util.write_file(pub_name, s_cfg["public_key"])
            util.write_file(pem_name, s_cfg["private_key"])

# we need to have the salt minion service enabled in rc in order to be
    # able to start the service. this does only apply on FreeBSD servers.
    if cloud.distro.osfamily == "freebsd":
        bsd_utils.set_rc_config_value("salt_minion_enable", "YES")

# restart salt-minion. 'service' will start even if not started. if it
    # was started, it needs to be restarted for config change.
    subp.subp(["service", const.srv_name, "restart"], capture=False)

# vi: ts=4 expandtab