aderixon

class pam::passwd_history(
  $num = 4
) {
  case $::osfamily {
    /(?i-mx:redhat)/: {
      # enable password history
      # if not present:
      augeas { 'passwd-hist':
        context => '/files/etc/pam.d/system-auth',
        changes => ["set *[module =~ regexp('.*pam_unix.so')][type = 'password']/argument[last()+1] remember=${num}"],

aderixon

class pam::tally {
  $tally_deny = extlookup('tally_deny', 5)

  case $::operatingsystem {
    # EL
    /(?i-mx:redhat|centos|oraclelinux|oel)/: {
      $pammod = $::osmajor ? {
        '6'     => 'pam_tally2.so',
        default => 'pam_tally.so',
      }

aderixon

        augeas {
                "Disable Graphical Boot in /etc/grub.conf":
                        context => "/files/etc/grub.conf",
                        lens    => "grub.lns",
                        incl    => "/etc/grub.conf",
                        changes => "rm title/kernel/rhgb";
                "Disable Quiet Boot in /etc/grub.conf":
                        context => "/files/etc/grub.conf",
                        lens    => "grub.lns",
                        incl    => "/etc/grub.conf",

aderixon

  $initconf = '/etc/inittab'
    case $::osfamily {
      /(?i-mx:redhat)/: {
        case $::osmajor {
          '6': {
            # EL6+ has a dedicated config file
            file { '/etc/init/control-alt-delete.conf':
              ensure => 'present',
              source => "puppet:///modules/${module_name}/control-alt-delete.conf",
              owner  => 'root',

aderixon

Time Machine configuration for filesystem

Create a case sensitive sparse bundle on the destination folder with:

hdiutil create -size 500g -type SPARSEBUNDLE -fs "HFS+J" -fsargs -s -volname 'TimeMachine' TimeMachine.sparsebundle

Tell TM to inherit it (sets the correct label):

sudo tmutil inheritbackup /path/to/TimeMachine.sparsebundle

aderixon

---
# complete example
driver:
    name: vagrant
    vagrantfiles:
      - test/vagrant-vbguest.rb
    provision: true

provisioner:
  name: ansible_playbook

aderixon

# before starting mysqld:

- name: check for MySQL pre systemd script
  stat:
    path: /usr/bin/mysqld_pre_systemd
  register: pre_systemd

# Monkey-patch MySQL pre-start systemd script to prevent it setting
# a random root password
# Don't hate me, blame Oracle

aderixon

# Ansible tasks to obtain an existing API token from Graylog or
# create a new token if there isn't one.
# (Token can be used to create utility scripts from templates.)
# Token will be named 'ansible'.
# Illustrates use of uri module to interact with REST API,
# and JSON parsing in Ansible.
# Requires Graylog admin user & password.

- set_fact:
    graylog_token: ''

aderixon

Consider this script on Solaris 11.3:

#!/bin/ksh93
echo "a\nb\nc" | while read val; do
  echo "$val :"
  ssh -q remotehost "zonecfg -z azone \"select capped-memory; end;\""
done

When run, it will only execute the first iteration of the loop:

aderixon

#!/bin/bash
# Write configs for UEFI boot from Cobbler, see:
# http://sapitnotes.com/cobbler-загрузка-по-pxe-в-режиме-uefi-centos-7/
# Translation:
# https://translate.google.com/translate?hl=en&sl=ru&u=http://sapitnotes.com/cobbler-%25D0%25B7%25D0%25B0%25D0%25B3%25D1%2580%25D1%2583%25D0%25B7%25D0%25BA%25D0%25B0-%25D0%25BF%25D0%25BE-pxe-%25D0%25B2-%25D1%2580%25D0%25B5%25D0%25B6%25D0%25B8%25D0%25BC%25D0%25B5-uefi-centos-7/&prev=search
# Adaptations by ajr, 2019-06
# Make executable and place in /var/lib/cobbler/triggers/sync/post/uefi.sh
# or equivalent for your Cobbler installation

for o_name in $(ls -A1 /var/lib/tftpboot/grub/ | grep -E '(.{2}-){6}.{2}');