personal_infra/puppet/modules/proxmox/manifests/freeipa.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

class proxmox::freeipa {
  class {'proxmox':}

  file {['/etc/subuid', '/etc/subgid']:
    content => epp('proxmox/freeipa_subxid', {'freeipa' => lookup('freeipa')}),
  }

  # TODO
  service {['sssd-ssh.socket', 'sssd-pam-priv.socket', 'sssd-nss.socket', 'sssd-sudo.socket', 'sssd-pam.socket']:
    ensure => stopped,
    enable => mask,
  }
  ~>
  exec {'/usr/bin/systemctl reset-failed':
    refreshonly => true,
  }
}