puppet的sudo模块

需求：每台服务器上都创建dev组，专门给开发人员，给特定的开发人员建账号，并加入dev组；

运维人员也将创建各自的用户，并加入wheel组，通过sudo来对组里成员做权限设置。

架构如下：

manfests里面的文件内容如下：

1,init.pp
class sudo {
  case $::osfamily {
    'RedHat': {
      include "sudo::conf"
      import 'sudoers.pp'
    }
    default: {
      fail("$::osfamily not yet supported by the 'sudo' module!")
    }
  }
}    

2,conf.pp
class sudo::conf {
  package { "sudo":
    ensure => present,
  }    

  # Source the sudoers file from the Puppet Master
  file { "/etc/sudoers":
    ensure  => present,
    owner   => 'root',
    group   => 'root',
    mode    => 0440,
    source  => "puppet:///modules/sudo/sudoers",
    require => Package["sudo"],
  }    

  # Source a new 'su' file for PAM (caution: this may be platform-specific)
  file { "/etc/pam.d/su":
    ensure => present,
    owner  => 'root',
    group  => 'root',
    mode   => 0644,
    source => "puppet:///modules/sudo/pam_su_el6"
  }    

  # Clear any config in sudoers.d
  file { "/etc/sudoers.d":
    ensure  => directory,
    owner   => 'root',
    group   => 'root',
    mode    => '0750',
    recurse => true,
    purge   => true,
    require => Package["sudo"],
  }
}    

3,sudoers.pp
define sudo::sudoers (
  $sudo_sudoers ,
  $sudo_sysadmins ,
 # $admins   = split($sudo_sysadmins, ','),
 # $sudoers  = split($sudo_sudoers, ','),
)
{
  user { [ $sudo_sysadmins ]:
    ensure  => present,
    groups  => ['wheel'],
    require => Group['wheel'],
  }    

  user { [ $sudo_sudoers ]:
    ensure  => present,
    groups  => ['dev'],
    require => Group['dev'],
  }    

  group { "wheel":
    ensure => present,
  }    

  group { "dev":
    ensure => present,
  }
}

以上是小编为您精心准备的的内容，在的博客、问答、公众号、人物、课程等栏目也有的相关内容，欢迎继续使用右上角搜索按钮进行搜索file
， root
， require
， present
， su sudo root
， sudo
， group
异常处理:ensure
puppet模块、sudohide模块使用方法、puppet的含义、a puppet show的中文、puppet的读音，以便于您获取更多的相关知识。