Evilham
ecd10de2d3
While adding FreeBSD support to the type I noticed various issues: - We were making sure that the KeyTable and SigningTable were created in __opendkim_genkey, but that was being done with the default cdist permissions (0400) which could result in issues when reloading the service after privilege drop. This is addressed by checking that it exists/creating it in __opendkim (just once, not once per __opendkim_genkey call) with laxer permissions (0444). - In __opendkim, the service was being started after the config file was installed. This is insufficient as OpenDKIM will refuse to start with the generated config if either SigningTable or KeyTable do not exist yet. - __opendkim_genkey had the implicit assumption that the --directory parameter always ended in a slash. This was not documented and error-prone; we are now a bit laxer and add the trailing slash if it is missing. - __opendkim_genkey was not changing permissions for the resulting .txt file. This was not critical for it to function, but it was inconsistent. - As documented in #17, __opendkim allows for a --userid parameter that might cause issues with keys generated by __opendkim_genkey. This issue has not been addressed yet, but I recommend deprecating the --userid parameter. |
||
|---|---|---|
| docs/src | ||
| scripts | ||
| type | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
cdist-contrib
This project extends the cdist configuration management tool with community-maitained types which are either too specific to fit/be maintained in cdist itself or were not accepted in code cdist but could still be useful.
This project does not have releases and is continously updated: see git history for change log. You will find HTML documentation at contrib.cdi.st.
Using cdist-contrib
We would recommend that you clone this repository next to your regular cdist
config directory, then setup conf_dir with relative paths in
cdist configuration.
An example of this would be:
# contents of cdist.cfg next to cdist-contrib
[GLOBAL]
# Notice that types defined in last dir win and can override native types.
# Consider using a prefix for your own types to avoid collisions.
conf_dir = cdist-contrib:cdist-private
And you would run cdist from the same directory as follows:
cdist config -g cdist.cfg
# Or setup your CDIST_CONFIG_FILE environment variable and run as usual
Participating in the cdist community
Join us on #cdist:ungleich.ch on matrix!
Contributing
The preferred way to submit patches is by opening Merge Requests against the cdist-contrib project on code.ungleich.ch (you can make an account on account.ungleich.ch.
Every type in cdist-contrib must:
- Have a
man.rstdocumentation page. - Pass shellcheck without errors.
Other resources
Some people/organizations are known to keep some cdist types that might be of interest to others:
- cdist-evilham: Evilham's cdist-types
- cdist-recycledcloud: e-Durable SA / Recycled Cloud public types
- cdist-ungleich: ungleich public types