nmcspadden

log_location STDOUT
chef_server_url "https://chef.sacredsf.org:443/organizations/ssh"
validation_client_name "ssh-validator"
ssl_verify_mode :verify_peer

nmcspadden

FROM nmcspadden/munki

RUN apt-get -yqq update
RUN apt-get -yqq install curl lsb-release
RUN curl -L https://getchef.com/chef/install.sh | bash -s -- -v 11.16.2 -P container

ADD client.rb /etc/chef/client.rb
ADD validation.pem /etc/chef/validation.pem

nmcspadden

FROM nginx
RUN mkdir -p /munki_repo
Run mkdir -p /etc/nginx/sites-enabled/
ADD nginx.conf /etc/nginx/nginx.conf
ADD munki-repo.conf /etc/nginx/sites-enabled/
VOLUME /munki_repo
EXPOSE 80

nmcspadden

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Source</key>
	<string>/Applications/Install OS X Yosemite.app</string>
	<key>Output</key>
	<string>InstallYosemitePuppetMunki.pkg</string>
	<key>Packages</key>
	<array>

nmcspadden

user { 'puppet':
  ensure => 'absent',
}
group { 'puppet':
  ensure => 'absent',
}

if $::operatingsystem == 'Darwin' {
		include munki_ssl
	}

nmcspadden

class munki_ssl {
	if $::operatingsystem != 'Darwin' {
			fail('The munki_ssl module is only supported on Darwin/OS X')
	}
	
	file { ['/Library/Managed Installs', '/Library/Managed Installs/certs/' ]:
		ensure	=>	directory,
		owner	=>	'root',
		group	=>	'wheel',
	}

nmcspadden

<key>mcx_preference_settings</key>
<dict>
	<key>InstallAppleSoftwareUpdates</key>
	<true/>
	<key>SoftwareRepoURL</key>
	<string>https://munki2.domain.com/repo</string>
	<key>SoftwareUpdateServerURL</key>
	<string>http://repo.domain.com/content/catalogs/others/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1_release.sucatalog</string>
	<key>SoftwareRepoCACertificate</key>
	<string>/Library/Managed Installs/certs/ca.pem</string>

nmcspadden

#!/bin/bash

# Stolen from PSU:
# https://wikispaces.psu.edu/display/clcmaclinuxwikipublic/First+Boot+Script

echo "Waiting for network access"
/usr/sbin/scutil -w State:/Network/Global/DNS -t 180
sleep 5

# Get the serial number

nmcspadden

osascript <<EndOfMyScript 
	set logInUser to "username"
	set logInPassword to "password"
	tell application "System Events"
	tell application process "loginwindow"
	key code 53
	delay 1
	key code 125
	delay 1
	key code 36 using option down

nmcspadden

sed '/host    all             all             127.0.0.1\/32            trust/a host    all             all             172.17.0.1\/16            trust' pg_hba.conf