Puppet module: openssh

This is a Puppet module for openssh. It manages its installation, configuration and service.

The module is based on stdmod naming standars. Refer to http://github.com/stdmod/

Released under the terms of Apache 2 License.

USAGE - Basic management

• Install openssh with default settings (package installed, service started, default configuration files)

    class { 'openssh': }
  

• Remove openssh package and purge all the managed files

    class { 'openssh':
      ensure => absent,
    }
  

• Install a specific version of openssh package

    class { 'openssh':
      version => '1.0.1',
    }
  

• Install the latest version of openssh package

    class { 'openssh':
      version => 'latest',
    }
  

• Enable openssh service. This is default.

    class { 'openssh':
      service_ensure => 'running',
    }
  

• Enable openssh service at boot. This is default.

    class { 'openssh':
      service_status => 'enabled',
    }
  

• Do not automatically restart services when configuration files change (Default: Class['openssh::config']).

    class { 'openssh':
      service_subscribe => false,
    }
  

• Enable auditing (on all the arguments) without making changes on existing openssh configuration files

    class { 'openssh':
      audit => 'all',
    }
  

• Module dry-run: Do not make any change on all the resources provided by the module

    class { 'openssh':
      noop => true,
    }
  

USAGE - Overrides and Customizations

• Use custom source for main configuration file

    class { 'openssh':
      file_source => [ "puppet:///modules/example42/openssh/openssh.conf-${hostname}" ,
                       "puppet:///modules/example42/openssh/openssh.conf" ], 
    }
  

• Use custom source directory for the whole configuration dir.

    class { 'openssh':
      dir_source  => 'puppet:///modules/example42/openssh/conf/',
    }
  

• Use custom source directory for the whole configuration dir purging all the local files that are not on the dir. Note: This option can be used to be sure that the content of a directory is exactly the same you expect, but it is desctructive and may remove files.

    class { 'openssh':
      dir_source => 'puppet:///modules/example42/openssh/conf/',
      dir_purge  => true, # Default: false.
    }
  

• Use custom source directory for the whole configuration dir and define recursing policy.

    class { 'openssh':
      dir_source    => 'puppet:///modules/example42/openssh/conf/',
      dir_recursion => false, # Default: true.
    }
  

• Use custom template for main config file. Note that template and source arguments are alternative.

    class { 'openssh':
      file_template => 'example42/openssh/openssh.conf.erb',
    }
  

• Use a custom template and provide an hash of custom configurations that you can use inside the template

    class { 'openssh':
      filetemplate       => 'example42/openssh/openssh.conf.erb',
      file_options_hash  => {
        opt  => 'value',
        opt2 => 'value2',
      },
    }
  

• Specify the name of a custom class to include that provides the dependencies required by the module

    class { 'openssh':
      dependency_class => 'site::openssh_dependency',
    }
  

• Automatically include a custom class with extra resources related to openssh. Here is loaded $modulepath/example42/manifests/my_openssh.pp. Note: Use a subclass name different than openssh to avoid order loading issues.

    class { 'openssh':
     my_class => 'site::openssh_my',
    }
  

TESTING