--- Class[Adduser].orig
+++ Class[Adduser]
@@
- before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[apache2]', 'Package[clamav-daemon]', 'Package[clamav-freshclam]', 'Package[exim4-config]', 'Package[exim4-daemon-heavy]', 'Package[spamd]', 'Package[libmail-spf-perl]', 'Package[libmail-dkim-perl]', 'Package[libapache2-mod-perl2]', 'Package[libapache-dbi-perl]', 'Package[libdbd-mysql-perl]', 'Package[libgd-graph-perl]', 'Package[libgd-text-perl]', 'Package[libio-socket-ssl-perl]', 'Package[libjson-xs-perl]', 'Package[libnet-ldap-perl]', 'Package[libpdf-api2-perl]', 'Package[libsoap-lite-perl]', 'Package[libtext-csv-xs-perl]', 'Package[libtimedate-perl]', 'Package[libyaml-libyaml-perl]', 'Package[libarchive-zip-perl]', 'Package[libmoo-perl]', 'Package[libnamespace-clean-perl]', 'Package[perl-doc]', 'Package[libdatetime-perl]', 'Package[libxml-libxml-perl]', 'Package[libxml-libxslt-perl]', 'Package[libencode-hanextra-perl]', 'Package[libauthen-sasl-perl]', 'Package[libmail-imapclient-perl]', 'Package[libical-parser-perl]', 'Package[libdata-uuid-perl]', 'Package[default-mysql-client]', 'Package[libdatetime-timezone-perl]', 'Package[prometheus-sql-exporter]', 'Package[links]', 'Package[envoyproxy]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[prometheus-apache-exporter]', 'Package[rsync]', 'Package[stunnel4]']
+ before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[apache2]', 'Package[clamav-daemon]', 'Package[clamav-freshclam]', 'Package[exim4-config]', 'Package[exim4-daemon-heavy]', 'Package[spamd]', 'Package[libmail-spf-perl]', 'Package[libmail-dkim-perl]', 'Package[libapache2-mod-perl2]', 'Package[libapache-dbi-perl]', 'Package[libdbd-mysql-perl]', 'Package[libgd-graph-perl]', 'Package[libgd-text-perl]', 'Package[libio-socket-ssl-perl]', 'Package[libjson-xs-perl]', 'Package[libnet-ldap-perl]', 'Package[libpdf-api2-perl]', 'Package[libsoap-lite-perl]', 'Package[libtext-csv-xs-perl]', 'Package[libtimedate-perl]', 'Package[libyaml-libyaml-perl]', 'Package[libarchive-zip-perl]', 'Package[libmoo-perl]', 'Package[libnamespace-clean-perl]', 'Package[perl-doc]', 'Package[libdatetime-perl]', 'Package[libxml-libxml-perl]', 'Package[libxml-libxslt-perl]', 'Package[libencode-hanextra-perl]', 'Package[libauthen-sasl-perl]', 'Package[libmail-imapclient-perl]', 'Package[libical-parser-perl]', 'Package[libdata-uuid-perl]', 'Package[default-mysql-client]', 'Package[libdatetime-timezone-perl]', 'Package[rspamd]', 'Package[prometheus-sql-exporter]', 'Package[links]', 'Package[envoyproxy]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[prometheus-apache-exporter]', 'Package[rsync]', 'Package[stunnel4]']
File[/lib/systemd/system/vrts_train_spamassassin.timer]
- Parameters differences:
--- File[/lib/systemd/system/vrts_train_spamassassin.timer].orig
+++ File[/lib/systemd/system/vrts_train_spamassassin.timer]
@@
- ensure => present
+ ensure => absent
- File[/etc/rspamd/local.d/worker-controller.inc]
- Parameters differences:
--- File[/etc/rspamd/local.d/worker-controller.inc].orig
+++ File[/etc/rspamd/local.d/worker-controller.inc]
+ owner => root
+ mode => 0440
+ group => _rspamd
+ require => Package[rspamd]
+ ensure => file
+ notify => Service[rspamd]
- Content differences:
--- /etc/rspamd/local.d/worker-controller.inc.orig
+++ /etc/rspamd/local.d/worker-controller.inc
@@ -0,0 +1,2 @@
+password = "${rspamd_controller_password}";
+enable_password = "${rspamd_controller_password}";
- File[/lib/systemd/system/vrts_train_mail_filters.timer]
- Parameters differences:
--- File[/lib/systemd/system/vrts_train_mail_filters.timer].orig
+++ File[/lib/systemd/system/vrts_train_mail_filters.timer]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => absent
+ notify => Exec[systemd daemon-reload for vrts_train_mail_filters.timer (vrts_train_mail_filters.timer)]
- Content differences:
--- /lib/systemd/system/vrts_train_mail_filters.timer.orig
+++ /lib/systemd/system/vrts_train_mail_filters.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of vrts_train_mail_filters.service
+
+[Timer]
+Unit=vrts_train_mail_filters.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=*-*-* *:05:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target
- Systemd::Unit[vrts_train_spamassassin.timer]
- Parameters differences:
--- Systemd::Unit[vrts_train_spamassassin.timer].orig
+++ Systemd::Unit[vrts_train_spamassassin.timer]
@@
- ensure => present
+ ensure => absent
- File[/usr/local/bin/train_mail_filters.py]
- Parameters differences:
--- File[/usr/local/bin/train_mail_filters.py].orig
+++ File[/usr/local/bin/train_mail_filters.py]
+ owner => root
+ mode => 0500
+ ensure => file
+ group => root
+ source => puppet:///modules/profile/mail/vrts/train_mail_filters.py
- Logrotate::Conf[wmf_auto_restart_rspamd]
- Parameters differences:
--- Logrotate::Conf[wmf_auto_restart_rspamd].orig
+++ Logrotate::Conf[wmf_auto_restart_rspamd]
+ ensure => present
- Class[Profile::Mail::Vrts::Training]
- Parameters differences:
--- Class[Profile::Mail::Vrts::Training].orig
+++ Class[Profile::Mail::Vrts::Training]
+ train_rspamd => True
+ active_host => vrts1003.eqiad.wmnet
+ passive_host => vrts2002.codfw.wmnet
+ train_spamassassin => True
- Class[Profile::Apt]
- Parameters differences:
--- Class[Profile::Apt].orig
+++ Class[Profile::Apt]
@@
- before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[apache2]', 'Package[clamav-daemon]', 'Package[clamav-freshclam]', 'Package[exim4-config]', 'Package[exim4-daemon-heavy]', 'Package[spamd]', 'Package[libmail-spf-perl]', 'Package[libmail-dkim-perl]', 'Package[libapache2-mod-perl2]', 'Package[libapache-dbi-perl]', 'Package[libdbd-mysql-perl]', 'Package[libgd-graph-perl]', 'Package[libgd-text-perl]', 'Package[libio-socket-ssl-perl]', 'Package[libjson-xs-perl]', 'Package[libnet-ldap-perl]', 'Package[libpdf-api2-perl]', 'Package[libsoap-lite-perl]', 'Package[libtext-csv-xs-perl]', 'Package[libtimedate-perl]', 'Package[libyaml-libyaml-perl]', 'Package[libarchive-zip-perl]', 'Package[libmoo-perl]', 'Package[libnamespace-clean-perl]', 'Package[perl-doc]', 'Package[libdatetime-perl]', 'Package[libxml-libxml-perl]', 'Package[libxml-libxslt-perl]', 'Package[libencode-hanextra-perl]', 'Package[libauthen-sasl-perl]', 'Package[libmail-imapclient-perl]', 'Package[libical-parser-perl]', 'Package[libdata-uuid-perl]', 'Package[default-mysql-client]', 'Package[libdatetime-timezone-perl]', 'Package[prometheus-sql-exporter]', 'Package[links]', 'Package[envoyproxy]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[prometheus-apache-exporter]', 'Package[rsync]', 'Package[stunnel4]']
+ before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[prometheus-ethtool-exporter]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[dstat]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[atop]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[libicu67]', 'Package[libwsutil12]', 'Package[libwireshark14]', 'Package[libopencsd0]', 'Package[libwiretap11]', 'Package[ruby2.7]', 'Package[python3.9-minimal]', 'Package[python3.9]', 'Package[perl-modules-5.32]', 'Package[libpython3.9]', 'Package[libperl5.32]', 'Package[libpython3.9-minimal]', 'Package[libpython3.9-stdlib]', 'Package[libidn11]', 'Package[libldap-2.4-2]', 'Package[liburing1]', 'Package[libwebp6]', 'Package[libcbor0]', 'Package[libusb-0.1-4]', 'Package[telnet]', 'Package[libruby2.7]', 'Package[libdns-export1110]', 'Package[libisc-export1105]', 'Package[libbpf0]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[perccli]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[libnet-dns-perl]', 'Package[iptables]', 'Package[ferm]', 'Package[nftables]', 'Package[conntrack]', 'Package[apache2]', 'Package[clamav-daemon]', 'Package[clamav-freshclam]', 'Package[exim4-config]', 'Package[exim4-daemon-heavy]', 'Package[spamd]', 'Package[libmail-spf-perl]', 'Package[libmail-dkim-perl]', 'Package[libapache2-mod-perl2]', 'Package[libapache-dbi-perl]', 'Package[libdbd-mysql-perl]', 'Package[libgd-graph-perl]', 'Package[libgd-text-perl]', 'Package[libio-socket-ssl-perl]', 'Package[libjson-xs-perl]', 'Package[libnet-ldap-perl]', 'Package[libpdf-api2-perl]', 'Package[libsoap-lite-perl]', 'Package[libtext-csv-xs-perl]', 'Package[libtimedate-perl]', 'Package[libyaml-libyaml-perl]', 'Package[libarchive-zip-perl]', 'Package[libmoo-perl]', 'Package[libnamespace-clean-perl]', 'Package[perl-doc]', 'Package[libdatetime-perl]', 'Package[libxml-libxml-perl]', 'Package[libxml-libxslt-perl]', 'Package[libencode-hanextra-perl]', 'Package[libauthen-sasl-perl]', 'Package[libmail-imapclient-perl]', 'Package[libical-parser-perl]', 'Package[libdata-uuid-perl]', 'Package[default-mysql-client]', 'Package[libdatetime-timezone-perl]', 'Package[rspamd]', 'Package[prometheus-sql-exporter]', 'Package[links]', 'Package[envoyproxy]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[confd]', 'Package[python3-toml]', 'Package[prometheus-apache-exporter]', 'Package[rsync]', 'Package[stunnel4]']
- Class[Rspamd::Repo]
- Parameters differences:
--- Class[Rspamd::Repo].orig
+++ Class[Rspamd::Repo]
+ before => ['Class[Rspamd::Install]']
- Systemd::Unit[wmf_auto_restart_rspamd.service]
- Parameters differences:
--- Systemd::Unit[wmf_auto_restart_rspamd.service].orig
+++ Systemd::Unit[wmf_auto_restart_rspamd.service]
+ unit => wmf_auto_restart_rspamd.service
+ override => False
+ override_filename => puppet-override.conf
+ restart => False
+ require => ['Class[Systemd]']
+ ensure => present
- Logrotate::Conf[vrts_train_mail_filters]
- Parameters differences:
--- Logrotate::Conf[vrts_train_mail_filters].orig
+++ Logrotate::Conf[vrts_train_mail_filters]
+ ensure => absent
- Systemd::Unit[vrts_train_spamassassin.service]
- Parameters differences:
--- Systemd::Unit[vrts_train_spamassassin.service].orig
+++ Systemd::Unit[vrts_train_spamassassin.service]
@@
- ensure => present
+ ensure => absent
- Systemd::Service[vrts_train_mail_filters]
- Parameters differences:
--- Systemd::Service[vrts_train_mail_filters].orig
+++ Systemd::Service[vrts_train_mail_filters]
+ migration_task => T407130
+ require => Systemd::Unit[vrts_train_mail_filters.service]
+ monitoring_contact_group => admins
+ unit_type => timer
+ monitoring_enabled => False
+ monitoring_critical => False
+ service_params => {}
+ override => False
+ restart => False
+ ensure => absent
- File[purge unmanaged rspamd override.d files]
- Parameters differences:
--- File[purge unmanaged rspamd override.d files].orig
+++ File[purge unmanaged rspamd override.d files]
+ owner => root
+ ensure => directory
+ group => root
+ path => /etc/rspamd/override.d
+ purge => True
+ recurse => True
- Exec[systemd daemon-reload for wmf_auto_restart_rspamd.service (wmf_auto_restart_rspamd.service)]
- Parameters differences:
--- Exec[systemd daemon-reload for wmf_auto_restart_rspamd.service (wmf_auto_restart_rspamd.service)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_rspamd.service (wmf_auto_restart_rspamd.service)]
+ refreshonly => True
+ command => /bin/systemctl daemon-reload
- Systemd::Unit[rsync-vrts-rspamd-data.timer]
- Parameters differences:
--- Systemd::Unit[rsync-vrts-rspamd-data.timer].orig
+++ Systemd::Unit[rsync-vrts-rspamd-data.timer]
+ unit => rsync-vrts-rspamd-data.timer
+ override => False
+ override_filename => puppet-override.conf
+ restart => False
+ require => ['Class[Systemd]']
+ ensure => present
- File[/lib/systemd/system/vrts_train_mail_filters.service]
- Parameters differences:
--- File[/lib/systemd/system/vrts_train_mail_filters.service].orig
+++ File[/lib/systemd/system/vrts_train_mail_filters.service]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => absent
+ notify => Exec[systemd daemon-reload for vrts_train_mail_filters.service (vrts_train_mail_filters.service)]
- Content differences:
--- /lib/systemd/system/vrts_train_mail_filters.service.orig
+++ /lib/systemd/system/vrts_train_mail_filters.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=VRTS - train SpamAssassin and Rspamd filters
+Documentation=https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+
+[Service]
+Type=oneshot
+User=root
+ExecStart=/usr/local/bin/train_mail_filters.py --train-spamassassin --train-rspamd --rspamd-controller localhost:11334 --rspamd-password-file /etc/vrts/rspamd-controller.password
- Exec[systemd daemon-reload for rsync-vrts-rspamd-data.service (rsync-vrts-rspamd-data.service)]
- Parameters differences:
--- Exec[systemd daemon-reload for rsync-vrts-rspamd-data.service (rsync-vrts-rspamd-data.service)].orig
+++ Exec[systemd daemon-reload for rsync-vrts-rspamd-data.service (rsync-vrts-rspamd-data.service)]
+ refreshonly => True
+ command => /bin/systemctl daemon-reload
- File[/etc/rsyslog.d/40-vrts-train-mail-filters.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-vrts-train-mail-filters.conf].orig
+++ File[/etc/rsyslog.d/40-vrts-train-mail-filters.conf]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => absent
+ notify => Service[rsyslog]
- Content differences:
--- /etc/rsyslog.d/40-vrts-train-mail-filters.conf.orig
+++ /etc/rsyslog.d/40-vrts-train-mail-filters.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "vrts_train_mail_filters" then {
+ action(
+ type="omfile" file="/var/log/vrts_train_mail_filters/syslog.log"
+ fileOwner="root" fileGroup="root"
+ fileCreateMode="0644"
+ )
+ & stop
+}
- File[purge unmanaged rspamd local.d files]
- Parameters differences:
--- File[purge unmanaged rspamd local.d files].orig
+++ File[purge unmanaged rspamd local.d files]
+ owner => root
+ ensure => directory
+ group => root
+ path => /etc/rspamd/local.d
+ purge => True
+ recurse => True
- Systemd::Timer::Job[vrts_train_spamassassin]
- Parameters differences:
--- Systemd::Timer::Job[vrts_train_spamassassin].orig
+++ Systemd::Timer::Job[vrts_train_spamassassin]
@@
- ensure => present
+ ensure => absent
- Profile::Auto_restarts::Service[rspamd]
- Parameters differences:
--- Profile::Auto_restarts::Service[rspamd].orig
+++ Profile::Auto_restarts::Service[rspamd]
+ ensure => present
- File[/etc/rsyslog.d/40-wmf-auto-restart-rspamd.conf]
- Parameters differences:
--- File[/etc/rsyslog.d/40-wmf-auto-restart-rspamd.conf].orig
+++ File[/etc/rsyslog.d/40-wmf-auto-restart-rspamd.conf]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => present
+ notify => Service[rsyslog]
- Content differences:
--- /etc/rsyslog.d/40-wmf-auto-restart-rspamd.conf.orig
+++ /etc/rsyslog.d/40-wmf-auto-restart-rspamd.conf
@@ -0,0 +1,10 @@
+# rsyslog.conf(5) configuration file for services.
+# This file is managed by Puppet.
+if $programname startswith "wmf_auto_restart_rspamd" then {
+ action(
+ type="omfile" file="/var/log/wmf_auto_restart_rspamd/syslog.log"
+ fileOwner="root" fileGroup="root"
+ fileCreateMode="0644"
+ )
+ & stop
+}
- Systemd::Service[wmf_auto_restart_rspamd]
- Parameters differences:
--- Systemd::Service[wmf_auto_restart_rspamd].orig
+++ Systemd::Service[wmf_auto_restart_rspamd]
+ migration_task => T407130
+ require => Systemd::Unit[wmf_auto_restart_rspamd.service]
+ monitoring_contact_group => admins
+ unit_type => timer
+ monitoring_enabled => False
+ monitoring_critical => False
+ service_params => {}
+ override => False
+ restart => False
+ ensure => present
- Systemd::Timer::Job[vrts_train_mail_filters]
- Parameters differences:
--- Systemd::Timer::Job[vrts_train_mail_filters].orig
+++ Systemd::Timer::Job[vrts_train_mail_filters]
+ ignore_errors => False
+ fixed_random_delay => False
+ success_exit_status => []
+ private_tmp => False
+ logfile_group => root
+ monitoring_enabled => False
+ monitoring_contact_groups => admins
+ logfile_name => syslog.log
+ monitoring_notes_url => https://wikitech.wikimedia.org/wiki/Monitoring/systemd_unit_state
+ syslog_match_startswith => True
+ send_mail_to => root@vrts2002.codfw.wmnet
+ syslog_force_stop => True
+ interval => {'start': 'OnCalendar', 'interval': '*-*-* *:05:00'}
+ require => ['File[/usr/local/bin/train_mail_filters.py]', 'Class[Spamassassin]', 'Class[Rspamd]', 'File[/etc/vrts/rspamd-controller.password]']
+ user => root
+ command => /usr/local/bin/train_mail_filters.py --train-spamassassin --train-rspamd --rspamd-controller localhost:11334 --rspamd-password-file /etc/vrts/rspamd-controller.password
+ logging_enabled => True
+ send_mail_only_on_error => True
+ logfile_basedir => /var/log
+ logfile_perms => all
+ send_mail => False
+ ensure => absent
+ description => VRTS - train SpamAssassin and Rspamd filters
+ environment => {}
- Exec[systemd daemon-reload for wmf_auto_restart_rspamd.timer (wmf_auto_restart_rspamd.timer)]
- Parameters differences:
--- Exec[systemd daemon-reload for wmf_auto_restart_rspamd.timer (wmf_auto_restart_rspamd.timer)].orig
+++ Exec[systemd daemon-reload for wmf_auto_restart_rspamd.timer (wmf_auto_restart_rspamd.timer)]
+ refreshonly => True
+ before => ['Service[wmf_auto_restart_rspamd.timer]']
+ command => /bin/systemctl daemon-reload
- File[/var/log/vrts_train_mail_filters]
- Parameters differences:
--- File[/var/log/vrts_train_mail_filters].orig
+++ File[/var/log/vrts_train_mail_filters]
+ force => True
+ owner => root
+ mode => 0755
+ backup => False
+ group => root
+ ensure => absent
- File[/lib/systemd/system/rsync-vrts-rspamd-data.timer]
- Parameters differences:
--- File[/lib/systemd/system/rsync-vrts-rspamd-data.timer].orig
+++ File[/lib/systemd/system/rsync-vrts-rspamd-data.timer]
+ owner => root
+ mode => 0444
+ group => root
+ ensure => present
+ notify => Exec[systemd daemon-reload for rsync-vrts-rspamd-data.timer (rsync-vrts-rspamd-data.timer)]
- Content differences:
--- /lib/systemd/system/rsync-vrts-rspamd-data.timer.orig
+++ /lib/systemd/system/rsync-vrts-rspamd-data.timer
@@ -0,0 +1,12 @@
+[Unit]
+Description=Periodic execution of rsync-vrts-rspamd-data.service
+
+[Timer]
+Unit=rsync-vrts-rspamd-data.service
+# Accuracy sets the maximum time interval around the execution time we want to allow
+AccuracySec=15sec
+OnCalendar=*-*-* *:15:00
+RandomizedDelaySec=0
+
+[Install]
+WantedBy=multi-user.target
- Exec[systemd daemon-reload for vrts_train_spamassassin.timer (vrts_train_spamassassin.timer)]
- Parameters differences:
--- Exec[systemd daemon-reload for vrts_train_spamassassin.timer (vrts_train_spamassassin.timer)].orig
+++ Exec[systemd daemon-reload for vrts_train_spamassassin.timer (vrts_train_spamassassin.timer)]
- before => ['Service[vrts_train_spamassassin.timer]']
- Systemd::Timer[rsync-vrts-rspamd-data]
- Parameters differences:
--- Systemd::Timer[rsync-vrts-rspamd-data].orig
+++ Systemd::Timer[rsync-vrts-rspamd-data]
+ fixed_random_delay => False
+ timer_intervals => [{'start': 'OnCalendar', 'interval': '*-*-* *:15:00'}]
+ unit_name => rsync-vrts-rspamd-data.service
+ ensure => present
+ accuracy => 15sec
+ splay => 0
- Rsyslog::Conf[vrts_train_spamassassin]
- Parameters differences:
--- Rsyslog::Conf[vrts_train_spamassassin].orig
+++ Rsyslog::Conf[vrts_train_spamassassin]
@@
- ensure => present
+ ensure => absent
- Service[wmf_auto_restart_rspamd.timer]
- Parameters differences:
--- Service[wmf_auto_restart_rspamd.timer].orig
+++ Service[wmf_auto_restart_rspamd.timer]
+ provider => systemd
+ ensure => running
+ enable => True
- Package[rspamd]
- Parameters differences:
--- Package[rspamd].orig
+++ Package[rspamd]
+ provider => apt
+ ensure => present
- Systemd::Timer[wmf_auto_restart_rspamd]
- Parameters differences:
--- Systemd::Timer[wmf_auto_restart_rspamd].orig
+++ Systemd::Timer[wmf_auto_restart_rspamd]
+ fixed_random_delay => False
+ timer_intervals => [{'start': 'OnCalendar', 'interval': 'Mon,Tue,Wed,Thu,Fri *-*-* 15:17:00'}]
+ unit_name => wmf_auto_restart_rspamd.service
+ ensure => present
+ accuracy => 15sec
+ splay => 0
- Class[Rspamd::Install]
- Parameters differences:
--- Class[Rspamd::Install].orig
+++ Class[Rspamd::Install]
+ before => ['Class[Rspamd::Configuration]']
- File[/lib/systemd/system/wmf_auto_restart_rspamd.timer]
- Parameters differences: